diff options
| author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2023-12-02 21:16:45 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-12-02 21:16:45 +0200 |
| commit | 085010a43e8993bee68eb11e832b4c59e1f742fe (patch) | |
| tree | c0e03562375387c5e8d28aceb8550447c53cae6e /data/templates/ocserv/ocserv_config.j2 | |
| parent | e0a6f8fa7ef186c77bd87c1a068bc365996e1195 (diff) | |
| parent | 8fbe7b60592e7a35be9016d54038a5ca89c2e92b (diff) | |
| download | vyos-1x-085010a43e8993bee68eb11e832b4c59e1f742fe.tar.gz vyos-1x-085010a43e8993bee68eb11e832b4c59e1f742fe.zip | |
Merge pull request #2565 from vyos/mergify/bp/sagitta/pr-2564
T5796:add/fixed OCSERV HTTP security headers (backport #2564)
Diffstat (limited to 'data/templates/ocserv/ocserv_config.j2')
| -rw-r--r-- | data/templates/ocserv/ocserv_config.j2 | 18 |
1 files changed, 17 insertions, 1 deletions
diff --git a/data/templates/ocserv/ocserv_config.j2 b/data/templates/ocserv/ocserv_config.j2 index 1401b8b26..80ba357bc 100644 --- a/data/templates/ocserv/ocserv_config.j2 +++ b/data/templates/ocserv/ocserv_config.j2 @@ -119,4 +119,20 @@ split-dns = {{ tmp }} {% for grp in authentication.group %} select-group = {{ grp }} {% endfor %} -{% endif %}
\ No newline at end of file +{% endif %} + + +# HTTP security headers +included-http-headers = Strict-Transport-Security: max-age=31536000 ; includeSubDomains +included-http-headers = X-Frame-Options: deny +included-http-headers = X-Content-Type-Options: nosniff +included-http-headers = Content-Security-Policy: default-src ´none´ +included-http-headers = X-Permitted-Cross-Domain-Policies: none +included-http-headers = Referrer-Policy: no-referrer +included-http-headers = Clear-Site-Data: "cache","cookies","storage" +included-http-headers = Cross-Origin-Embedder-Policy: require-corp +included-http-headers = Cross-Origin-Opener-Policy: same-origin +included-http-headers = Cross-Origin-Resource-Policy: same-origin +included-http-headers = X-XSS-Protection: 0 +included-http-headers = Pragma: no-cache +included-http-headers = Cache-control: no-store, no-cache |