ISTI-ansible-roles
/
ansible-role-nginx
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix the xss syntax.

This commit is contained in:
Andrea Dell'Amico 2021-07-28 15:11:26 +02:00
parent 4ec5bddf14
commit b110431218
Signed by: adellam
GPG Key ID: 147ABE6CEB9E20FF
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
templates/nginx-virthost.j2
View File

@ -45,13 +45,13 @@ server {
{% endif %} {% endif %}
{% if nginx_set_xss_protection %} {% if nginx_set_xss_protection %}
add_header X-XSS-Protection "1; mode=block"; add_header X-XSS-Protection "1; mode=block;";
{% endif %} {% endif %}
{% if nginx_set_frame_origin %} {% if nginx_set_frame_origin %}
add_header X-Frame-Options "{{ nginx_x_frame_options }}"; add_header X-Frame-Options "{{ nginx_x_frame_options }}";
{% endif %} {% endif %}
{% if nginx_set_content_security_options %} {% if nginx_set_content_security_options %}
add_header Content-Security-Policy "frame-ancestors {% for l in nginx_content_security_acl %} {{ l }}{% endfor %};"; add_header Content-Security-Policy "frame-ancestors{% for l in nginx_content_security_acl %} {{ l }}{% endfor %};";
{% endif %} {% endif %}
server_tokens {{ item.server_tokens | default('off') }}; server_tokens {{ item.server_tokens | default('off') }};
@ -259,13 +259,13 @@ server {
include /etc/nginx/snippets/nginx-server-ssl.conf; include /etc/nginx/snippets/nginx-server-ssl.conf;
{% if nginx_set_xss_protection %} {% if nginx_set_xss_protection %}
add_header X-XSS-Protection "1; mode=block"; add_header X-XSS-Protection "1; mode=block;";
{% endif %} {% endif %}
{% if nginx_set_frame_origin %} {% if nginx_set_frame_origin %}
add_header X-Frame-Options "{{ nginx_x_frame_options }}"; add_header X-Frame-Options "{{ nginx_x_frame_options }}";
{% endif %} {% endif %}
{% if nginx_set_content_security_options %} {% if nginx_set_content_security_options %}
add_header Content-Security-Policy "frame-ancestors {% for l in nginx_content_security_acl %} {{ l }}{% endfor %};"; add_header Content-Security-Policy "frame-ancestors{% for l in nginx_content_security_acl %} {{ l }}{% endfor %};";
{% endif %} {% endif %}
server_tokens {{ item.server_tokens | default('off') }}; server_tokens {{ item.server_tokens | default('off') }};