Merge pull request #7558 from bbodenmiller/patch-4

change X-Frame-Options to SAMEORIGIN for nginx SSL config

Merge pull request #7558 from bbodenmiller/patch-4
change X-Frame-Options to SAMEORIGIN for nginx SSL config
eddfdc9e · Dmitriy Zaporozhets · 3cbacad8 · a3953a46 · eddfdc9e
隐藏空白更改
内联并排

Showing with 1 addition and 1 deletion

lib/support/nginx/gitlab-ssl lib/support/nginx/gitlab-ssl +1 -1

未找到文件。
--- a/lib/support/nginx/gitlab-ssl
+++ b/lib/support/nginx/gitlab-ssl
@@ -84,7 +84,7 @@ server {
  ssl_prefer_server_ciphers   on;

  add_header Strict-Transport-Security max-age=63072000;
-  add_header X-Frame-Options DENY;
+  add_header X-Frame-Options SAMEORIGIN;
  add_header X-Content-Type-Options nosniff;

  ## Individual nginx logs for this GitLab vhost