pyrox.dev / nixpkgs
lol
fork atom

nixos/nextcloud: remove X-XSS-Protection

see https://github.com/nextcloud/server/pull/53476

Robert Schütz 06c99c29 a5b08dfb

options
unified split
Changed files
-1
nixos
modules
services
web-apps
nextcloud.nix
-1
nixos/modules/services/web-apps/nextcloud.nix 
···

       
1531

       
1531

       
 

       
            index index.php index.html /index.php$request_uri;


     

       
1532

       
1532

       
 

       
            ${lib.optionalString (cfg.nginx.recommendedHttpHeaders) ''


     

       
1533

       
1533

       
 

       
              add_header X-Content-Type-Options nosniff;


     

       
1534

       

       
-

       
              add_header X-XSS-Protection "1; mode=block";


     

       
1535

       
1534

       
 

       
              add_header X-Robots-Tag "noindex, nofollow";


     

       
1536

       
1535

       
 

       
              add_header X-Permitted-Cross-Domain-Policies none;


     

       
1537

       
1536

       
 

       
              add_header X-Frame-Options sameorigin;