Commit 06c99c29 authored by Robert Schütz's avatar Robert Schütz Committed by Pascal Bach
Browse files

nixos/nextcloud: remove X-XSS-Protection 

see https://github.com/nextcloud/server/pull/53476
parent a5b08dfb

nixos/modules/services/web-apps/nextcloud.nix

+0 −1
Original line number Diff line number Diff line
@@ -1531,7 +1531,6 @@ in 
            index index.php index.html /index.php$request_uri;

            ${lib.optionalString (cfg.nginx.recommendedHttpHeaders) ''

              add_header X-Content-Type-Options nosniff;

              add_header X-XSS-Protection "1; mode=block";

              add_header X-Robots-Tag "noindex, nofollow";

              add_header X-Permitted-Cross-Domain-Policies none;

              add_header X-Frame-Options sameorigin;