diff options
| author | Илья Евсеенко <44779327+LencoDigitexer@users.noreply.github.com> | 2022-08-20 00:20:23 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-08-20 00:20:23 +0300 |
| commit | 16237799d281fb00e67219f9146bae460dac6109 (patch) | |
| tree | 518fdc518172aaccfa652b8a8d1dd61c73e9e901 /content/searxng.md | |
| parent | 9f422700af2e8d0c445fd0821977ca7a728e1a6a (diff) | |
make A+ in observatory.mozilla.org
Diffstat (limited to 'content/searxng.md')
| -rw-r--r-- | content/searxng.md | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/content/searxng.md b/content/searxng.md index e238f0f..ad23ac7 100644 --- a/content/searxng.md +++ b/content/searxng.md @@ -75,6 +75,15 @@ server { access_log /dev/null; error_log /dev/null; + # X-Frame-Options (XFO) header set to DENY + add_header X-Frame-Options "DENY"; + + # HTTP Strict Transport Security (HSTS) header + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains"; + + # Content Security Policy (CSP) + add_header Content-Security-Policy "default-src 'self';"; + location / { uwsgi_pass unix:///usr/local/searxng/run/socket; |