nixos/nextcloud: remove X-XSS-Protection

see https://github.com/nextcloud/server/pull/53476
This commit is contained in:
Robert Schütz
2025-08-30 21:31:40 -07:00
committed by Pascal Bach
parent a5b08dfb19
commit 06c99c29c9

View File

@@ -1531,7 +1531,6 @@ in
index index.php index.html /index.php$request_uri; index index.php index.html /index.php$request_uri;
${lib.optionalString (cfg.nginx.recommendedHttpHeaders) '' ${lib.optionalString (cfg.nginx.recommendedHttpHeaders) ''
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag "noindex, nofollow"; add_header X-Robots-Tag "noindex, nofollow";
add_header X-Permitted-Cross-Domain-Policies none; add_header X-Permitted-Cross-Domain-Policies none;
add_header X-Frame-Options sameorigin; add_header X-Frame-Options sameorigin;