Kishore kishorys

kishorys / nginx.conf

Last active December 1, 2020 13:09 — forked from plentz/nginx.conf

Best nginx configuration for improved security(and performance). Complete blog post here http://tautt.com/best-nginx-configuration-for-security/

	# don't send the nginx version number in error pages and Server header
	server_tokens off;

	# config to don't allow the browser to render the page inside an frame or iframe
	# and avoid clickjacking http://en.wikipedia.org/wiki/Clickjacking
	# if you need to allow [i]frames, you can use SAMEORIGIN or even set an uri with ALLOW-FROM uri
	# https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options
	add_header X-Frame-Options SAMEORIGIN;

	# when serving user-supplied content, include a X-Content-Type-Options: nosniff header along with the Content-Type: header,

kishorys / useful browser console commands

Last active August 3, 2020 14:53 — forked from carcinocron/debugger pause beforeunload

Chrome: pause before redirect

	// Run this in the F12 javascript console in chrome
	// if a redirect happens, the page will pause
	// this helps because chrome's network tab's
	// "preserve log" seems to technically preserve the log
	// but you can't actually LOOK at it...
	// also the "replay xhr" feature does not work after reload
	// even if you "preserve log".

	window.addEventListener("beforeunload", function() { debugger; }, false)