From 16237799d281fb00e67219f9146bae460dac6109 Mon Sep 17 00:00:00 2001
From: Илья Евсеенко
 <44779327+LencoDigitexer@users.noreply.github.com>
Date: Sat, 20 Aug 2022 00:20:23 +0300
Subject: make A+ in observatory.mozilla.org

---
 content/searxng.md | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'content/searxng.md')

diff --git a/content/searxng.md b/content/searxng.md
index e238f0f..ad23ac7 100644
--- a/content/searxng.md
+++ b/content/searxng.md
@@ -75,6 +75,15 @@ server {
     access_log /dev/null;
     error_log  /dev/null;
 
+    # X-Frame-Options (XFO) header set to DENY
+    add_header X-Frame-Options "DENY";
+
+    # HTTP Strict Transport Security (HSTS) header
+    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
+
+    # Content Security Policy (CSP)
+    add_header Content-Security-Policy "default-src 'self';";
+
     location / {
         uwsgi_pass unix:///usr/local/searxng/run/socket;
 
-- 
cgit v1.2.3