Software / code / prosody
Comparison
plugins/mod_http_file_share.lua @ 13855:488483e1d915
Merge 13.0->trunk
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Fri, 18 Apr 2025 12:25:38 +0100 |
| parent | 13854:0b01f40df0f9 |
comparison
equal
deleted
inserted
replaced
| 13853:5611ce3bc54c | 13855:488483e1d915 |
|---|---|
| 467 response.headers.content_range = response_range; | 467 response.headers.content_range = response_range; |
| 468 end | 468 end |
| 469 response.headers.accept_ranges = "bytes"; | 469 response.headers.accept_ranges = "bytes"; |
| 470 | 470 |
| 471 response.headers.cache_control = "max-age=31556952, immutable"; | 471 response.headers.cache_control = "max-age=31556952, immutable"; |
| 472 response.headers.content_security_policy = "default-src 'none'; frame-ancestors 'none';" | 472 response.headers.content_security_policy = "default-src 'none'; media-src 'self'; frame-ancestors 'none';" |
| 473 response.headers.strict_transport_security = "max-age=31556952"; | 473 response.headers.strict_transport_security = "max-age=31556952"; |
| 474 response.headers.x_content_type_options = "nosniff"; | 474 response.headers.x_content_type_options = "nosniff"; |
| 475 response.headers.x_frame_options = "DENY"; -- COMPAT IE missing support for CSP frame-ancestors | 475 response.headers.x_frame_options = "DENY"; -- COMPAT IE missing support for CSP frame-ancestors |
| 476 response.headers.x_xss_protection = "1; mode=block"; | 476 response.headers.x_xss_protection = "1; mode=block"; |
| 477 | 477 |