... | ... | @@ -100,6 +100,13 @@ If someone clicks on an external link inside a survey, the website that link poi |
|
|
Header set Referrer-Policy "strict-origin"
|
|
|
</IfModule>
|
|
|
```
|
|
|
#### Various headers
|
|
|
|
|
|
In the same way that we added the `Content-Security-Policy` and `Referrer-Policy`, we can have :
|
|
|
* `X-Content-Type-Options: nosniff` to avoid XSS attacks through incorrect MIME types
|
|
|
* `X-XSS-Protection: 1; mode=block` to avoid XSS attacks for older browsers
|
|
|
|
|
|
You can also find other security tips here : <https://infosec.mozilla.org/guidelines/web_security>
|
|
|
|
|
|
## Nginx
|
|
|
|
... | ... | |