Skip to content
Snippets Groups Projects
Commit 0be436166354 authored by Balasankar "Balu" C's avatar Balasankar "Balu" C
Browse files

Merge branch 'dcouture-master-patch-54390' into 'master'

Add X-Content-Type-Options: nosniff header

Closes #5963

See merge request gitlab-org/omnibus-gitlab!4968
1 merge request!26GitLab 13.9
---
title: Add HTTP header to prevent content sniffing in /assets/* directory
merge_request:
author:
type: security
......@@ -193,6 +193,7 @@
}
location <%= File.join(@path, 'assets') %> {
add_header X-Content-Type-Options nosniff;
proxy_cache <%= @proxy_cache %>;
proxy_pass http://gitlab-workhorse;
}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment