[doc/self-hosted] make XFO same origin in docs (#970)
As reported in GH-962, this breaks VSCode's extension details view. Might need further triage if its also a v2 internal issue.
This commit is contained in:
parent
51a82655a9
commit
64cc2895f3
1 changed files with 1 additions and 1 deletions
|
@ -148,7 +148,7 @@ server {
|
|||
# real_ip_header CF-Connecting-IP;
|
||||
|
||||
# Other security options.
|
||||
add_header X-Frame-Options DENY;
|
||||
add_header X-Frame-Options SAMEORIGIN;
|
||||
add_header X-Content-Type-Options nosniff;
|
||||
add_header X-XSS-Protection "1; mode=block";
|
||||
|
||||
|
|
Loading…
Reference in a new issue