[Backport release-25.05] nixos/nextcloud: remove X-XSS-Protection (#442693)

This commit is contained in:
dotlambda
2025-09-13 11:30:20 -07:00
committed by GitHub

View File

@@ -1531,7 +1531,6 @@ in
index index.php index.html /index.php$request_uri;
${optionalString (cfg.nginx.recommendedHttpHeaders) ''
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag "noindex, nofollow";
add_header X-Permitted-Cross-Domain-Policies none;
add_header X-Frame-Options sameorigin;