Update security.conf

4 years ago · 34dd37baa9
parent ac453e1432
commit 34dd37baa9
1 changed files with 1 additions and 1 deletions
--- a/nginx/snippets/security.conf
+++ b/nginx/snippets/security.conf
@ -2,6 +2,6 @@ add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; prelo
 add_header X-Frame-Options SAMEORIGIN;
 add_header X-Content-Type-Options nosniff;
 add_header X-XSS-Protection "1; mode=block";
-add_header Referrer-Policy "no-referrer, strict-origin-when-cross-origin" always;
+add_header Referrer-Policy "no-referrer, strict-origin-when-cross-origin";
 add_header Content-Security-Policy "upgrade-insecure-requests" always;
 add_header Feature-policy "accelerometer 'none';ambient-light-sensor 'none'; autoplay 'none';camera 'none';encrypted-media 'self';focus-without-user-activation 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none'; speaker 'none';sync-xhr 'none';usb '*';vr 'none'";