PMM-1571 add CWE-693, CWE-16, CWE-524,CWE-525 headers

adivinho · Oct 13, 2017 · 9786c21 · 9786c21
1 parent eef6ce1
commit 9786c21
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/nginx-ssl.conf b/nginx-ssl.conf
@@ -8,6 +8,15 @@ ssl_stapling			on;
 ssl_stapling_verify		on;
 resolver			8.8.8.8 8.8.4.4 valid=300s;
 resolver_timeout		3s;
+
+# HSTS
 add_header			Strict-Transport-Security "max-age=63072000; includeSubDomains";
+
+# CWE-693, CWE-16
 add_header			X-Frame-Options DENY;
 add_header			X-Content-Type-Options nosniff;
+add_header			X-XSS-Protection "1; mode=block";
+
+# CWE-524, CWE-525
+add_header			Cache-control "no-store";
+add_header			Pragma "no-cache";