diff --git a/public/.htaccess b/public/.htaccess index b8dd61352..2a2f5fab5 100644 --- a/public/.htaccess +++ b/public/.htaccess @@ -1,5 +1,6 @@ # Disable directory browsing -Options All -Indexes +# For security reasons, Option all cannot be overridden. +Options +ExecCGI +Includes +IncludesNOEXEC +SymLinksIfOwnerMatch -Indexes # ---------------------------------------------------------------------- # Rewrite engine @@ -8,7 +9,6 @@ Options All -Indexes # Turning on the rewrite engine is necessary for the following rules and features. # FollowSymLinks must be enabled for this to work. - Options +SymLinksIfOwnerMatch RewriteEngine On # If you installed CodeIgniter in a subfolder, you will need to @@ -66,10 +66,6 @@ Options All -Indexes -# disable directory browsing -# For security reasons, Option all cannot be overridden. -Options +ExecCGI +Includes +IncludesNOEXEC +SymLinksIfOwnerMatch -Indexes - Header always set X-Frame-Options "SAMEORIGIN" Header add Content-Security-Policy "default-src 'self' www.google.com; connect-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com; img-src 'self' data:; object-src 'none'; form-action 'self'"