[doc/self-hosted] make XFO same origin in docs (#970)

As reported in GH-962, this breaks VSCode's extension details view. Might need further triage if its also a v2 internal issue.
This commit is contained in:
Ayane Satomi 2019-09-12 23:27:22 +08:00 committed by Asher
parent 51a82655a9
commit 64cc2895f3

View File

@ -148,7 +148,7 @@ server {
# real_ip_header CF-Connecting-IP; # real_ip_header CF-Connecting-IP;
# Other security options. # Other security options.
add_header X-Frame-Options DENY; add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block"; add_header X-XSS-Protection "1; mode=block";