From b7338ccd189a2d05e7d870dae449323423667b9d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= Date: Sat, 30 Aug 2025 21:31:40 -0700 Subject: [PATCH] nixos/nextcloud: remove X-XSS-Protection see https://github.com/nextcloud/server/pull/53476 (cherry picked from commit 06c99c29c95b33260b3513adfaa7c0c144d00a56) --- nixos/modules/services/web-apps/nextcloud.nix | 1 - 1 file changed, 1 deletion(-) diff --git a/nixos/modules/services/web-apps/nextcloud.nix b/nixos/modules/services/web-apps/nextcloud.nix index 8c3212b7b2f1..48cb600b94d2 100644 --- a/nixos/modules/services/web-apps/nextcloud.nix +++ b/nixos/modules/services/web-apps/nextcloud.nix @@ -1531,7 +1531,6 @@ in index index.php index.html /index.php$request_uri; ${optionalString (cfg.nginx.recommendedHttpHeaders) '' add_header X-Content-Type-Options nosniff; - add_header X-XSS-Protection "1; mode=block"; add_header X-Robots-Tag "noindex, nofollow"; add_header X-Permitted-Cross-Domain-Policies none; add_header X-Frame-Options sameorigin;