···

       
244
       
244
       
 
       
                    if ($request_method = OPTIONS) {

     

       
245
       
245
       
 
       
                        return 204;

     

       
246
       
246
       
 
       
                    }

     

       
247
       
247
       
-
       
                    add_header X-XSS-Protection "1; mode=block";

     

       
248
       
247
       
 
       
                    add_header X-Permitted-Cross-Domain-Policies none;

     

       
249
       
248
       
 
       
                    add_header X-Frame-Options DENY;

     

       
250
       
249
       
 
       
                    add_header X-Content-Type-Options nosniff;