Re: Content Security Policy Headers are not appearing

I see - that;s a nice suggestion. Let me see how this goes. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,295928,295939#msg-295939 ___ nginx mailing list -- nginx@nginx.org To unsubscribe send an email to nginx-le...@nginx.org

Re: Content Security Policy Headers are not appearing

Hello! On Tue, Nov 29, 2022 at 10:35:22PM -0500, blason wrote: > Well this is particularly I noticed for https vhost config. The CSP headers > are properly being displayed for http but not https. > > Here is my config > > more /etc/nginx/conf.d/sec-headers.conf > > add_header Content-Security-

Re: Content Security Policy Headers are not appearing

Well this is particularly I noticed for https vhost config. The CSP headers are properly being displayed for http but not https. Here is my config more /etc/nginx/conf.d/sec-headers.conf add_header Content-Security-Policy "default-src 'self'; font-src *;img-src * data:; script-src *; style-src *

Content Security Policy Headers are not appearing

Hi All, I am trying to set a CSP headers in my nginx reverse proxy and those are not appearing even after multiple attempts. Any idea what is wrong or why the header is not getting added? TIA Blason R Posted at Nginx Forum: https://forum.nginx.org/read.php?2,295928,295928#msg-295928 __