[doc/self-hosted] make XFO same origin in docs (#970)

As reported in GH-962, this breaks VSCode's extension details view. Might need further triage if its also a v2 internal issue.
This commit is contained in:
Ayane Satomi 2019-09-12 23:27:22 +08:00 committed by Asher
parent 51a82655a9
commit 64cc2895f3

View file

@ -148,7 +148,7 @@ server {
# real_ip_header CF-Connecting-IP;
# Other security options.
add_header X-Frame-Options DENY;
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";