From: Andreas Gerstenberg <gerstenberg@pixelpark.com>
Date: Wed, 16 Aug 2017 10:32:00 +0000 (+0200)
Subject: update headers
X-Git-Tag: v0.1.0~2615
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=a10753271d9c5c0f6e3717f537a46b7fbb26af41;p=pixelpark%2Fhiera.git

update headers
---

diff --git a/customer/spk-spar-checker/test.yaml b/customer/spk-spar-checker/test.yaml
index d01db90a..6c0a42c1 100644
--- a/customer/spk-spar-checker/test.yaml
+++ b/customer/spk-spar-checker/test.yaml
@@ -54,6 +54,11 @@ infra::profile::apache::pp_vhosts:
         auth_digest_algorithm: MD5
         auth_user_file: '/etc/httpd/htdigest'
         auth_require: 'valid-user'
+    headers:
+      - 'always set X-XSS-Protection "1; mode=block"'
+      - 'always set X-Frame-Options "SAMEORIGIN"'
+      - 'always set X-Content-Type-Options "nosniff"'
+      - "set Content-Security-Policy: \"default-src 'self' 'unsafe-eval' 'unsafe-inline' ; style-src 'self' https://webfonts.sparkasse.de 'unsafe-inline' ; font-src 'self' data: https://webfonts.sparkasse.de ; img-src 'self' data: ;"
     setenvif:
       - 'HTTPS on X-Forwarded-Proto=https'
       - 'HTTPS on HTTPS=on'