diff --git a/nginx.conf b/nginx.conf index 23e6d5d..5fea88f 100644 --- a/nginx.conf +++ b/nginx.conf @@ -13,7 +13,7 @@ http { index index.html; # Security headers - add_header Content-Security-Policy "connect-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'" always; + add_header Content-Security-Policy "object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always; add_header X-Content-Type-Options "nosniff" always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;