homelab/speedtest-tracker
1
0
Fork 0
mirror of https://github.com/alexjustesen/speedtest-tracker.git synced 2026-06-23 07:40:08 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

[Bug] Removed embeddable public dashboard (#1025)

Browse Source
This commit is contained in:
Alex Justesen
2023-12-28 10:28:02 -05:00
committed by GitHub
parent bfe86ebf4d
commit 08fda86c99
6 changed files with 0 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/deploy/etc/nginx/server-opts.d/security.conf
-25
View File
@@ -1,25 +0,0 @@
#
# Security Headers
#
# Prevent IFRAME spoofing attacks
# Disabled for Speedtest Tracked to be embedded.
# add_header X-Frame-Options "SAMEORIGIN" always;
# Prevent MIME attacks
add_header X-Content-Type-Options "nosniff" always;
# Prevent Referrer URL from being leaked
add_header Referrer-Policy "no-referrer-when-downgrade" always;
# Configure Content Security Policy
# UPDATE - September 2020: Commenting this out until we grasp better security requirements
#add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;
# Enable HSTS
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
# Prevent access to . files (excent the well-known directory)
location ~ /\.(?!well-known) {
deny all;
}