Merge remote-tracking branch 'jrtc27/buster-fixes'

[mirror/dsa-puppet.git] / modules / apache2 / files / headers

diff --git a/modules/apache2/files/headers b/modules/apache2/files/headers
index f5bb06f..15d3b08 100644 (file)
--- a/modules/apache2/files/headers
+++ b/modules/apache2/files/headers
@@ -1,3 +1,9 @@
 <IfModule mod_headers.c>
   Header set X-Clacks-Overhead "GNU Terry Pratchett"
+
+  Header always setifempty X-Content-Type-Options "nosniff"
+  Header always setifempty X-Frame-Options "sameorigin"
+  Header always setifempty Referrer-Policy "no-referrer"
+  # Header always setifempty X-Xss-Protection "1; mode=block"
+  Header always setifempty X-Xss-Protection "1"
 </IfModule>