From 005d6913f59bf9b30d12ea958638607626e8220e Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk Date: Fri, 4 May 2018 02:46:31 +0200 Subject: [PATCH] Secure dl.fp.o Signed-off-by: Patrick Uiterwijk --- .../files/httpd/dl.fedoraproject.org/securityheaders.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/roles/download/files/httpd/dl.fedoraproject.org/securityheaders.conf b/roles/download/files/httpd/dl.fedoraproject.org/securityheaders.conf index c7109a16a6..cb7969e2a7 100644 --- a/roles/download/files/httpd/dl.fedoraproject.org/securityheaders.conf +++ b/roles/download/files/httpd/dl.fedoraproject.org/securityheaders.conf @@ -3,3 +3,4 @@ Header always set X-Xss-Protection "1; mode=block" Header always set X-Content-Type-Options "nosniff" Header always set Referrer-Policy "same-origin" Header always set Content-Security-Policy "default-src 'none'" +Header always add Strict-Transport-Security "max-age=31536000; preload"