This commit is contained in:
Dallas Lu 2026-06-09 14:41:15 +08:00
parent c50569d73e
commit a624163120
No known key found for this signature in database
27 changed files with 215 additions and 6 deletions

View file

@ -1,2 +1,5 @@
# Keep legacy browser-era headers out of the default security baseline. They are
# still occasionally requested by enterprise scanners, but modern browsers
# rarely depend on them.
add_header X-Download-Options noopen always;
add_header X-Permitted-Cross-Domain-Policies none always;