[doc/self-hosted] make XFO same origin in docs (#970)
As reported in GH-962, this breaks VSCode's extension details view. Might need further triage if its also a v2 internal issue.
This commit is contained in:
parent
51a82655a9
commit
64cc2895f3
@ -148,7 +148,7 @@ server {
|
|||||||
# real_ip_header CF-Connecting-IP;
|
# real_ip_header CF-Connecting-IP;
|
||||||
|
|
||||||
# Other security options.
|
# Other security options.
|
||||||
add_header X-Frame-Options DENY;
|
add_header X-Frame-Options SAMEORIGIN;
|
||||||
add_header X-Content-Type-Options nosniff;
|
add_header X-Content-Type-Options nosniff;
|
||||||
add_header X-XSS-Protection "1; mode=block";
|
add_header X-XSS-Protection "1; mode=block";
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user