1
0
Fork 0
mirror of https://github.com/seanmorley15/AdventureLog.git synced 2025-07-19 04:49:37 +02:00

Update backend/nginx.conf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
Sean Morley 2025-05-31 21:08:20 -04:00 committed by GitHub
parent 8f1c60a440
commit 64bfda6bf0
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -43,6 +43,8 @@ http {
# Separate location for PDFs under /protectedMedia/
location ~* ^/protectedMedia/.*\.pdf$ {
internal;
alias /code/media/;
add_header Content-Security-Policy "default-src 'self'; script-src 'none'; object-src 'none'; base-uri 'none'" always;
add_header X-Content-Type-Options nosniff always;
add_header X-Frame-Options SAMEORIGIN always;