Skip to content

Instantly share code, notes, and snippets.

@renalpha
Created June 25, 2019 06:58
Show Gist options
  • Save renalpha/0612cee4b3698285f6dc7cdcc8d7c429 to your computer and use it in GitHub Desktop.
Save renalpha/0612cee4b3698285f6dc7cdcc8d7c429 to your computer and use it in GitHub Desktop.
htaccess security headers for Apache
# Set browser headers
<IfModule mod_headers.c>
Header set Strict-Transport-Security "max-age=31536000" env=HTTPS
Header always set X-Frame-Options "SAMEORIGIN"
Header always set X-Xss-Protection "1; mode=block"
Header always set X-Content-Type-Options "nosniff"
Header set Referrer-Policy "no-referrer-when-downgrade"
</IfModule>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment