summaryrefslogtreecommitdiff
path: root/etc/nginx/conf.d/talerssl
diff options
context:
space:
mode:
authorChristian Grothoff <christian@grothoff.org>2017-09-09 22:46:09 +0200
committerChristian Grothoff <christian@grothoff.org>2017-09-09 22:46:09 +0200
commitf6d484b7d12076911ff6bfce6ba5f846a403309f (patch)
treec0c3667c864204b3d86870be0dbe0239fa78ae68 /etc/nginx/conf.d/talerssl
parenta177c1f6f4dd757acc19a259874b4410dbcbbd57 (diff)
downloaddeployment-f6d484b7d12076911ff6bfce6ba5f846a403309f.tar.gz
deployment-f6d484b7d12076911ff6bfce6ba5f846a403309f.tar.bz2
deployment-f6d484b7d12076911ff6bfce6ba5f846a403309f.zip
django needs same-origin
Diffstat (limited to 'etc/nginx/conf.d/talerssl')
-rw-r--r--etc/nginx/conf.d/talerssl2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/nginx/conf.d/talerssl b/etc/nginx/conf.d/talerssl
index f4d39d9..e5d5411 100644
--- a/etc/nginx/conf.d/talerssl
+++ b/etc/nginx/conf.d/talerssl
@@ -11,4 +11,4 @@ add_header X-XSS-Protection "1; mode=block";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options "nosniff";
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' wss://buildbot.taler.net";
-add_header Referrer-Policy "no-referrer";
+add_header Referrer-Policy "same-origin";