Skip to content

Instantly share code, notes, and snippets.

@omarkurt

omarkurt/Apache header to Security

Created August 11, 2015 08:25
Show Gist options
  • Save omarkurt/72e406ee34bb634463c9 to your computer and use it in GitHub Desktop.
Save omarkurt/72e406ee34bb634463c9 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Apache header to Security
#Security
Header set X-Frame-Options: sameorigin
Header set X-XSS-Protection: "1; mode=block"
Header set X-WebKit-CSP: "default-src 'self'"
Header set X-Content-Type-Options: nosniff
Header set X-Permitted-Cross-Domain-Policies: "master-only"
Header set Strict-Transport-Security "max-age=31536000; includeSubDomains"
Header unset ETag
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment