Skip to content

Instantly share code, notes, and snippets.

@danielstrelec

danielstrelec/bezpecnostni-hlavicky

Created November 28, 2018 08:12
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save danielstrelec/429b64549776383d5ad3cc48ee5a30a5 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save danielstrelec/429b64549776383d5ad3cc48ee5a30a5 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
bezpecnostni-hlavicky
<IfModule mod_headers.c>
# X-XSS-Protection
Header set X-XSS-Protection "1; mode=block"
# X-Content-Type-Options
Header set X-Content-Type-Options nosniff
# X-Download-Options
Header set X-Download-Options: noopen
# X-Frame-Options settings
Header set X-Frame-Options DENY
# Referrer-Policy settings
Header set Referrer-Policy "strict-origin-when-cross-origin"
# HSTS 190 days
Header set Strict-Transport-Security "max-age=16416000; includeSubdomains"
</IfModule>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment