taler-deployment

commit f6d484b7d12076911ff6bfce6ba5f846a403309f
parent a177c1f6f4dd757acc19a259874b4410dbcbbd57
Author: Christian Grothoff <christian@grothoff.org>
Date:   Sat,  9 Sep 2017 22:46:09 +0200

django needs same-origin

Diffstat:
M
etc/nginx/conf.d/talerssl
 | 
2
+-

1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/etc/nginx/conf.d/talerssl b/etc/nginx/conf.d/talerssl
@@ -11,4 +11,4 @@ add_header X-XSS-Protection "1; mode=block";
 add_header X-Frame-Options "SAMEORIGIN";
 add_header X-Content-Type-Options "nosniff";
 add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' wss://buildbot.taler.net";
-add_header Referrer-Policy "no-referrer";
+add_header Referrer-Policy "same-origin";