From b12c78061a7ba782f77111129e6c6ea9191b7123 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Andreas=20Pinto-K=C3=B6hler?= Date: Thu, 19 Jan 2017 16:08:29 +0100 Subject: [PATCH] Removed header set in vhost --- customer/mbvd-ngcc/dev-web-ngcc-daimler.pixelpark.net.yaml | 3 --- 1 file changed, 3 deletions(-) diff --git a/customer/mbvd-ngcc/dev-web-ngcc-daimler.pixelpark.net.yaml b/customer/mbvd-ngcc/dev-web-ngcc-daimler.pixelpark.net.yaml index b3100f9e..390458ed 100644 --- a/customer/mbvd-ngcc/dev-web-ngcc-daimler.pixelpark.net.yaml +++ b/customer/mbvd-ngcc/dev-web-ngcc-daimler.pixelpark.net.yaml @@ -38,9 +38,6 @@ site::profile::apache::pp_vhosts: redirect_dest_non_ssl: 'https://dev-web01-ngcc-daimler.pixelpark.net/' headers: - 'always unset "X-Powered-By"' - - 'set X-Content-Type-Options: nosniff' - - 'set X-XSS-Protection: "1; mode=block"' - - 'set X-Frame-Options: "ALLOW-FROM https://dev-cms01-ngcc-daimler.pixelpark.net"' - "set Content-Security-Policy: \"default-src 'self'; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://*.youtube.com https://s.ytimg.com https://connect.facebook.net; frame-ancestors 'self'; media-src 'self' data:; img-src 'self' https://*.facebook.com https://*.cdninstagram.com https://*.ytimg.com https://*.twimg.com https://mb.anythingabout.net; child-src https://*.youtube.com https://*.facebook.com\"" - "set X-Content-Security-Policy: \"default-src 'self'; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://*.youtube.com https://s.ytimg.com https://connect.facebook.net; frame-ancestors 'self'; media-src 'self' data:; img-src 'self' https://*.facebook.com https://*.cdninstagram.com https://*.ytimg.com https://*.twimg.com https://mb.anythingabout.net; child-src https://*.youtube.com https://*.facebook.com\"" headers_ssl: -- 2.39.5