Merge pull request #8798 from EnMod/nq.add-x-frame-options-header

[Website] Set security-focused page headers
6 years ago · 60d952033e
parent 7d065d9030 806e799945
commit 60d952033e
2 changed files with 4 additions and 0 deletions
--- a/website/config.rb
+++ b/website/config.rb
@ -112,3 +112,4 @@ end

 # Netlify redirects/headers
 proxy '_redirects', 'netlify-redirects', ignore: true
+proxy '_headers', 'netlify-headers', ignore: true
--- a/website/source/netlify-headers
+++ b/website/source/netlify-headers
@ -0,0 +1,3 @@
+/*
+  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
+  X-Frame-Options: SAMEORIGIN