Update backend/nginx.conf
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
@@ -43,6 +43,8 @@ http {
|
|||||||
|
|
||||||
# Separate location for PDFs under /protectedMedia/
|
# Separate location for PDFs under /protectedMedia/
|
||||||
location ~* ^/protectedMedia/.*\.pdf$ {
|
location ~* ^/protectedMedia/.*\.pdf$ {
|
||||||
|
internal;
|
||||||
|
alias /code/media/;
|
||||||
add_header Content-Security-Policy "default-src 'self'; script-src 'none'; object-src 'none'; base-uri 'none'" always;
|
add_header Content-Security-Policy "default-src 'self'; script-src 'none'; object-src 'none'; base-uri 'none'" always;
|
||||||
add_header X-Content-Type-Options nosniff always;
|
add_header X-Content-Type-Options nosniff always;
|
||||||
add_header X-Frame-Options SAMEORIGIN always;
|
add_header X-Frame-Options SAMEORIGIN always;
|
||||||
|
|||||||
Reference in New Issue
Block a user