Your IP : 216.73.216.79

Current Path : /etc/apache2.bak/conf-available/
Upload File :
Current File : //etc/apache2.bak/conf-available/security.conf.nonce

ServerTokens Minimal
ServerSignature Off
TraceEnable Off
Header always set Access-Control-Allow-Methods "GET, POST, OPTIONS, HEAD"
Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
Header always set Content-Security-Policy "expr=default-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' 'unsafe-inline' 'unsafe-eval' data:  *; img-src 'self' 'unsafe-inline' 'unsafe-eval'  * blob: data:; script-src blob: data: 'self' nonce-%{base64:%{reqenv:UNIQUE_ID}}; style-src 'self' 'unsafe-inline' 'unsafe-eval'  *; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *; worker-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' *"
Header set X-XSS-Protection "1; mode=block"
Header always set X-Frame-Options "SAMEORIGIN"
Header always set X-Content-Type-Options "nosniff"
Header always set Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()"
#Header set Access-Control-Allow-Origin "*"
Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
Header always set X-Robots-Tag "noindex"



#Header always edit Set-Cookie (.*) "$1; HTTPOnly"
#Header onsuccess edit Set-Cookie (.*) "$1; HTTPOnly"