Additional headers for internet.nl

DIVD-NL · Apr 2, 2024 · a60857a · a60857a
1 parent 0fab76a
commit a60857a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/deploy/.htaccess b/deploy/.htaccess
@@ -1,5 +1,9 @@
 RewriteEngine On
 Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains;"
+Header always append X-Frame-Options DENY
+Header set X-Content-Type-Options nosniff
+Header set X-XSS-Protection "1; mode=block"
+Header set Referrer-Policy same-origin
 
 # Redirect http -> https
 RewriteCond %{HTTP:X-HTTPS-SESSION} !^yes$