Remove X-Frame options in nginx config (#322)
authorValvin <valvin1@users.noreply.github.com>
Mon, 5 Mar 2018 08:40:36 +0000 (09:40 +0100)
committerChocobozzz <me@florianbigard.com>
Mon, 5 Mar 2018 08:40:36 +0000 (09:40 +0100)
`X-Frame-Options DENY;` doesn't permit sharing using iframe

support/nginx/peertube

index f2632084c3c417f8eae67a5233fb0d96053fd06a..e94eac5e84e220c01897e0219dcfbfe342e52bb6 100644 (file)
@@ -38,7 +38,6 @@ server {
   # resolver_timeout 5s;
 
   add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
-  add_header X-Frame-Options DENY;
   add_header X-Content-Type-Options nosniff;
   add_header X-XSS-Protection "1; mode=block";
   add_header X-Robots-Tag none;