remove deprecated security header

Signed-off-by: Jason Cameron <git@jasoncameron.dev>
mcpt · Oct 26, 2024 · ffc758d · ffc758d
1 parent 708dcb4
commit ffc758d
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -95,7 +95,6 @@ server {
 
     add_header X-UA-Compatible "IE=Edge,chrome=1";
     add_header X-Content-Type-Options nosniff;
-    add_header X-XSS-Protection "1; mode=block";
 
     location / {
         proxy_http_version 1.1;

diff --git a/dmoj/nginx/nginx.conf b/dmoj/nginx/nginx.conf
@@ -62,7 +62,6 @@ http {
 
 		add_header X-UA-Compatible "IE=Edge,chrome=1";
 		add_header X-Content-Type-Options nosniff;
-		add_header X-XSS-Protection "1; mode=block";
 		add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;