Comments & Ref
This commit is contained in:
parent
df2d91970d
commit
7cc5328ede
|
@ -290,8 +290,13 @@ matrix_nginx_proxy_floc_optout_enabled: true
|
||||||
# - https://hstspreload.org/#opt-in
|
# - https://hstspreload.org/#opt-in
|
||||||
matrix_nginx_proxy_hsts_preload_enable: false
|
matrix_nginx_proxy_hsts_preload_enable: false
|
||||||
|
|
||||||
|
# X-XSS-Protection Enable
|
||||||
|
# Stops pages from loading when they detect reflected cross-site scripting (XSS) attacks.
|
||||||
|
# Note: Not applicable for grafana
|
||||||
#
|
#
|
||||||
#
|
# Learn more about it is here:
|
||||||
|
# - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
|
||||||
|
# - https://portswigger.net/web-security/cross-site-scripting/reflected
|
||||||
matrix_nginx_proxy_xss_protection: "1; mode=block"
|
matrix_nginx_proxy_xss_protection: "1; mode=block"
|
||||||
|
|
||||||
# Specifies the SSL configuration that should be used for the SSL protocols and ciphers
|
# Specifies the SSL configuration that should be used for the SSL protocols and ciphers
|
||||||
|
|
Loading…
Reference in a new issue