From 4e95a5fed9b72be95f67484d5631fd9b0a62852d Mon Sep 17 00:00:00 2001 From: jon r Date: Mon, 6 May 2019 21:51:30 +0200 Subject: [PATCH] Add Referrer-Policy to nginx.conf This is needed for newer Nextcloud versions, supposedly from v15 on. Also see: - https://help.nextcloud.com/t/solved-referrer-policy-and-content-security-policy-broken-on-nginx-only-setup/49212/9 This is also reported on /settings/admin/overview if not present. --- nginx.conf | 2 ++ 1 file changed, 2 insertions(+) diff --git a/nginx.conf b/nginx.conf index 3ea6a31..c192d78 100644 --- a/nginx.conf +++ b/nginx.conf @@ -20,6 +20,7 @@ http { add_header X-Robots-Tag none; add_header X-Download-Options noopen; add_header X-Permitted-Cross-Domain-Policies none; + add_header Referrer-Policy no-referrer; root /var/www/html; @@ -92,6 +93,7 @@ http { add_header X-Robots-Tag none; add_header X-Download-Options noopen; add_header X-Permitted-Cross-Domain-Policies none; + add_header Referrer-Policy no-referrer; # Optional: Don't log access to assets access_log off; } -- GitLab