From 64cc2895f3e2c978ffa0b9b157174e7811fb9d45 Mon Sep 17 00:00:00 2001 From: Ayane Satomi Date: Thu, 12 Sep 2019 23:27:22 +0800 Subject: [PATCH] [doc/self-hosted] make XFO same origin in docs (#970) As reported in GH-962, this breaks VSCode's extension details view. Might need further triage if its also a v2 internal issue. --- doc/self-hosted/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/self-hosted/index.md b/doc/self-hosted/index.md index 7e5bd458..de88e257 100644 --- a/doc/self-hosted/index.md +++ b/doc/self-hosted/index.md @@ -148,7 +148,7 @@ server { # real_ip_header CF-Connecting-IP; # Other security options. - add_header X-Frame-Options DENY; + add_header X-Frame-Options SAMEORIGIN; add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection "1; mode=block";