From b110431218b5dde936c81df1e05f18ce6d96ca5e Mon Sep 17 00:00:00 2001 From: Andrea Dell'Amico Date: Wed, 28 Jul 2021 15:11:26 +0200 Subject: [PATCH] Fix the xss syntax. --- templates/nginx-virthost.j2 | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/templates/nginx-virthost.j2 b/templates/nginx-virthost.j2 index 053d52e..6d80626 100644 --- a/templates/nginx-virthost.j2 +++ b/templates/nginx-virthost.j2 @@ -45,13 +45,13 @@ server { {% endif %} {% if nginx_set_xss_protection %} - add_header X-XSS-Protection "1; mode=block"; + add_header X-XSS-Protection "1; mode=block;"; {% endif %} {% if nginx_set_frame_origin %} add_header X-Frame-Options "{{ nginx_x_frame_options }}"; {% endif %} {% if nginx_set_content_security_options %} - add_header Content-Security-Policy "frame-ancestors {% for l in nginx_content_security_acl %} {{ l }}{% endfor %};"; + add_header Content-Security-Policy "frame-ancestors{% for l in nginx_content_security_acl %} {{ l }}{% endfor %};"; {% endif %} server_tokens {{ item.server_tokens | default('off') }}; @@ -259,13 +259,13 @@ server { include /etc/nginx/snippets/nginx-server-ssl.conf; {% if nginx_set_xss_protection %} - add_header X-XSS-Protection "1; mode=block"; + add_header X-XSS-Protection "1; mode=block;"; {% endif %} {% if nginx_set_frame_origin %} add_header X-Frame-Options "{{ nginx_x_frame_options }}"; {% endif %} {% if nginx_set_content_security_options %} - add_header Content-Security-Policy "frame-ancestors {% for l in nginx_content_security_acl %} {{ l }}{% endfor %};"; + add_header Content-Security-Policy "frame-ancestors{% for l in nginx_content_security_acl %} {{ l }}{% endfor %};"; {% endif %} server_tokens {{ item.server_tokens | default('off') }};