Merge pull request #577 from appuio/set-Content-Security-Policy-headers

Deny frame ancestors
appuio · Feb 3, 2025 · f59b656 · f59b656
2 parents af83177 + 61758ec
commit f59b656
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/docker/nginx.conf b/docker/nginx.conf
@@ -6,6 +6,9 @@ server {
          index  index.html;
 
          try_files $uri $uri/ /index.html?$args;
+
+         add_header X-Frame-Options "DENY";
+         add_header Content-Security-Policy "frame-ancestors 'none';";
     }
     location /appuio-api/ {
          proxy_pass ${APPUIO_API};