Nginx: X-Frame-Options

This commit is contained in:
pavelbannov 2020-09-29 10:31:27 +03:00
parent 9e83a391e4
commit de03714d3d

View File

@ -17,12 +17,18 @@ map $uri $basename {
~/(?<captured_basename>[^/]*)$ $captured_basename;
}
map $request_uri $header_x_frame_options {
~*^/(favicon\.ico|products\/files\/share|products\/files\/saveas|products\/files\/filechoice|products\/files\/doceditor|thirdparty\/plugin) "";
default "SAMEORIGIN";
}
include /etc/nginx/includes/onlyoffice-*.conf;
server {
listen 8092;
add_header Access-Control-Allow-Origin *;
add_header X-Frame-Options $header_x_frame_options;
large_client_header_buffers 4 16k;