XSS Protection headers

Mr.Novo

• March 29, 2019 04:27

Hi, I want to add headers; Header always append X-Frame-Options SAMEORIGIN Header always append X-XSS-Protection 1 Header always append Content-Security-Policy "frame-ancestors 'self' to every account created / will created on my server I've edit virtual host files conf file but header not working. mod_headers is installed What am i missing here ?

• 

  cPanelLauren

  • April 01, 2019 19:11

  Hi @Mr.Novo Can you provide exact replication steps for how you added these? Thanks!

  0
• 

  Mr.Novo

  • April 04, 2019 08:52

  Hi there i think that was my mistake i've tried to add header with which did not work Header set X-XSS-Protection: "1; mode=block" Header set X-Frame-Options SAMEORIGIN Header set Content-Security-Policy "frame-ancestors 'self' Header set X-Content-Type-Options "nosniff" works fine for me.

  0

Please sign in to leave a comment.