From 62cfb46e41b81c404b5a2e9f4cb7692184586b73 Mon Sep 17 00:00:00 2001 From: Thomas Heller Date: Tue, 11 Oct 2016 11:43:35 +0200 Subject: [PATCH] bkk-vbu - new header config --- .../bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml b/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml index 474defaf..d447932a 100644 --- a/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml +++ b/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml @@ -47,7 +47,7 @@ site::profile::apache::pp_vhosts: - 'always unset "X-Powered-By"' - 'set X-Content-Type-Options: nosniff' - 'set X-XSS-Protection: "1; mode=block"' - - 'set X-Frame-Options: ALLOW-FROM https://dev-cms01-meine-krankenkasse-de.pixelpark.net' + - 'set X-Frame-Options: "ALLOW-FROM https://dev-cms01-meine-krankenkasse-de.pixelpark.net"' - "set Content-Security-Policy: \"default-src 'self'; img-src 'self' webstats.pixelpark.com data:; font-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' webstats.pixelpark.com; child-src 'self'; frame-ancestors 'self'\"" - "set X-Content-Security-Policy: \"default-src 'self'; img-src 'self' webstats.pixelpark.com data:; font-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' webstats.pixelpark.com; child-src 'self'; frame-ancestors 'self'\"" headers_ssl: -- 2.39.5