sakkiii 0ccf0fbf1c HSTS preload + X-XSS enables ...

**HSTS Preloading:**
In its strongest and recommended form, the [HSTS policy](https://www.chromium.org/hsts) includes all subdomains, and indicates a willingness to be “preloaded” into browsers:
`Strict-Transport-Security: max-age=31536000; includeSubDomains; preload`

**X-Xss-Protection:**
`1; mode=block` which tells the browser to block the response if it detects an attack rather than sanitising the script.

2021-04-24 12:12:34 +05:30

..

conf.d

HSTS preload + X-XSS enables

2021-04-24 12:12:34 +05:30

matrix-synapse-metrics-htpasswd.j2

Fix indentation in templates

2019-05-07 21:23:35 +02:00

nginx.conf.j2

rename variables

2021-03-30 16:41:32 +02:00