From 06c99c29c95b33260b3513adfaa7c0c144d00a56 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= Date: Sat, 30 Aug 2025 21:31:40 -0700 Subject: [PATCH] nixos/nextcloud: remove X-XSS-Protection see https://github.com/nextcloud/server/pull/53476 --- nixos/modules/services/web-apps/nextcloud.nix | 1 - 1 file changed, 1 deletion(-) diff --git a/nixos/modules/services/web-apps/nextcloud.nix b/nixos/modules/services/web-apps/nextcloud.nix index eac2d9622c4e..0572b9529c04 100644 --- a/nixos/modules/services/web-apps/nextcloud.nix +++ b/nixos/modules/services/web-apps/nextcloud.nix @@ -1531,7 +1531,6 @@ in index index.php index.html /index.php$request_uri; ${lib.optionalString (cfg.nginx.recommendedHttpHeaders) '' add_header X-Content-Type-Options nosniff; - add_header X-XSS-Protection "1; mode=block"; add_header X-Robots-Tag "noindex, nofollow"; add_header X-Permitted-Cross-Domain-Policies none; add_header X-Frame-Options sameorigin;