···

       
349
       
 
       


     

       
350
       
 
       
        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;

     

       
351
       
 
       
        add_header X-Frame-Options                      "SAMEORIGIN"    always;

     

       
352
       
-
       
        add_header X-XSS-Protection                     "1; mode=block" always;

     

       
353
       
 
       
        add_header X-Content-Type-Options               "nosniff"       always;

     

       
354
       
 
       
        add_header Referrer-Policy                      "same-origin"   always;

     

       
355
       
 
       
      '';

     

···

       
349
       
 
       


     

       
350
       
 
       
        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;

     

       
351
       
 
       
        add_header X-Frame-Options                      "SAMEORIGIN"    always;

     

       
0
       
 
       

     

       
352
       
 
       
        add_header X-Content-Type-Options               "nosniff"       always;

     

       
353
       
 
       
        add_header Referrer-Policy                      "same-origin"   always;

     

       
354
       
 
       
      '';