security_headers.rb revision 52f48599c05f6b3385a2ac8e04ec96cbe7bb4f39
8441cc0be003fcd6294a1b5b93e1143b5bb82ceaJulian Kornberger::SecureHeaders::Configuration.configure do |config|
8441cc0be003fcd6294a1b5b93e1143b5bb82ceaJulian Kornberger config.hsts = {:max_age => 99, :include_subdomains => true}
8441cc0be003fcd6294a1b5b93e1143b5bb82ceaJulian Kornberger config.x_xss_protection = {:value => 1, :mode => false}
52f48599c05f6b3385a2ac8e04ec96cbe7bb4f39henning mueller # By default, load resources only from own origin.
52f48599c05f6b3385a2ac8e04ec96cbe7bb4f39henning mueller # For CSS, allow styles from style elements and attributes for GWT.