Skip to content

Commit d460ae8

Browse files
fabriciojsfabriciojs
authored
Merge pull request #25 from kool-dev/nginx_remove_frame
Remove Frame Block from NGINX Config
2 parents bc3eef2 + 8db7916 commit d460ae8

11 files changed

Lines changed: 33 additions & 11 deletions

File tree

‎7.1-nginx-prod/default.tmpl‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,13 @@ server {
3131
deny all;
3232
}
3333

34+
# good practices
35+
add_header X-Frame-Options "SAMEORIGIN";
36+
3437
# basic H5BP suggestions
3538
include h5bp/internet_explorer/x-ua-compatible.conf;
3639
include h5bp/security/referrer-policy.conf;
3740
include h5bp/security/x-content-type-options.conf;
38-
include h5bp/security/x-frame-options.conf;
3941
include h5bp/security/x-xss-protection.conf;
4042

4143
# performance enhancements (mostly for caching static data)

‎7.1-nginx/default.tmpl‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,13 @@ server {
3131
deny all;
3232
}
3333

34+
# good practices
35+
add_header X-Frame-Options "SAMEORIGIN";
36+
3437
# basic H5BP suggestions
3538
include h5bp/internet_explorer/x-ua-compatible.conf;
3639
include h5bp/security/referrer-policy.conf;
3740
include h5bp/security/x-content-type-options.conf;
38-
include h5bp/security/x-frame-options.conf;
3941
include h5bp/security/x-xss-protection.conf;
4042

4143
# performance enhancements (mostly for caching static data)

‎7.2-nginx-prod/default.tmpl‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,13 @@ server {
3131
deny all;
3232
}
3333

34+
# good practices
35+
add_header X-Frame-Options "SAMEORIGIN";
36+
3437
# basic H5BP suggestions
3538
include h5bp/internet_explorer/x-ua-compatible.conf;
3639
include h5bp/security/referrer-policy.conf;
3740
include h5bp/security/x-content-type-options.conf;
38-
include h5bp/security/x-frame-options.conf;
3941
include h5bp/security/x-xss-protection.conf;
4042

4143
# performance enhancements (mostly for caching static data)

‎7.2-nginx/default.tmpl‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,13 @@ server {
3131
deny all;
3232
}
3333

34+
# good practices
35+
add_header X-Frame-Options "SAMEORIGIN";
36+
3437
# basic H5BP suggestions
3538
include h5bp/internet_explorer/x-ua-compatible.conf;
3639
include h5bp/security/referrer-policy.conf;
3740
include h5bp/security/x-content-type-options.conf;
38-
include h5bp/security/x-frame-options.conf;
3941
include h5bp/security/x-xss-protection.conf;
4042

4143
# performance enhancements (mostly for caching static data)

‎7.3-nginx-prod/default.tmpl‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,13 @@ server {
3131
deny all;
3232
}
3333

34+
# good practices
35+
add_header X-Frame-Options "SAMEORIGIN";
36+
3437
# basic H5BP suggestions
3538
include h5bp/internet_explorer/x-ua-compatible.conf;
3639
include h5bp/security/referrer-policy.conf;
3740
include h5bp/security/x-content-type-options.conf;
38-
include h5bp/security/x-frame-options.conf;
3941
include h5bp/security/x-xss-protection.conf;
4042

4143
# performance enhancements (mostly for caching static data)

‎7.3-nginx/default.tmpl‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,13 @@ server {
3131
deny all;
3232
}
3333

34+
# good practices
35+
add_header X-Frame-Options "SAMEORIGIN";
36+
3437
# basic H5BP suggestions
3538
include h5bp/internet_explorer/x-ua-compatible.conf;
3639
include h5bp/security/referrer-policy.conf;
3740
include h5bp/security/x-content-type-options.conf;
38-
include h5bp/security/x-frame-options.conf;
3941
include h5bp/security/x-xss-protection.conf;
4042

4143
# performance enhancements (mostly for caching static data)

‎7.4-nginx-prod/default.tmpl‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,13 @@ server {
3131
deny all;
3232
}
3333

34+
# good practices
35+
add_header X-Frame-Options "SAMEORIGIN";
36+
3437
# basic H5BP suggestions
3538
include h5bp/internet_explorer/x-ua-compatible.conf;
3639
include h5bp/security/referrer-policy.conf;
3740
include h5bp/security/x-content-type-options.conf;
38-
include h5bp/security/x-frame-options.conf;
3941
include h5bp/security/x-xss-protection.conf;
4042

4143
# performance enhancements (mostly for caching static data)

‎7.4-nginx/default.tmpl‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,13 @@ server {
3131
deny all;
3232
}
3333

34+
# good practices
35+
add_header X-Frame-Options "SAMEORIGIN";
36+
3437
# basic H5BP suggestions
3538
include h5bp/internet_explorer/x-ua-compatible.conf;
3639
include h5bp/security/referrer-policy.conf;
3740
include h5bp/security/x-content-type-options.conf;
38-
include h5bp/security/x-frame-options.conf;
3941
include h5bp/security/x-xss-protection.conf;
4042

4143
# performance enhancements (mostly for caching static data)

‎8.0-nginx-prod/default.tmpl‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,13 @@ server {
3131
deny all;
3232
}
3333

34+
# good practices
35+
add_header X-Frame-Options "SAMEORIGIN";
36+
3437
# basic H5BP suggestions
3538
include h5bp/internet_explorer/x-ua-compatible.conf;
3639
include h5bp/security/referrer-policy.conf;
3740
include h5bp/security/x-content-type-options.conf;
38-
include h5bp/security/x-frame-options.conf;
3941
include h5bp/security/x-xss-protection.conf;
4042

4143
# performance enhancements (mostly for caching static data)

‎8.0-nginx/default.tmpl‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,13 @@ server {
3131
deny all;
3232
}
3333

34+
# good practices
35+
add_header X-Frame-Options "SAMEORIGIN";
36+
3437
# basic H5BP suggestions
3538
include h5bp/internet_explorer/x-ua-compatible.conf;
3639
include h5bp/security/referrer-policy.conf;
3740
include h5bp/security/x-content-type-options.conf;
38-
include h5bp/security/x-frame-options.conf;
3941
include h5bp/security/x-xss-protection.conf;
4042

4143
# performance enhancements (mostly for caching static data)

0 commit comments

Comments
 (0)