diff --git a/core/nginx/conf/nginx.conf b/core/nginx/conf/nginx.conf index fcd4bfd7..dca4fc00 100644 --- a/core/nginx/conf/nginx.conf +++ b/core/nginx/conf/nginx.conf @@ -70,6 +70,10 @@ http { {% endif %} {% endif %} + # Remove headers to prevent duplication and information disclosure + proxy_hide_header X-XSS-Protection; + proxy_hide_header X-Powered-By; + add_header X-Frame-Options 'SAMEORIGIN'; add_header X-Content-Type-Options 'nosniff'; add_header X-Permitted-Cross-Domain-Policies 'none';