Moved Options higher in the htaccess

This commit is contained in:
objecttothis
2022-12-11 01:15:20 +04:00
committed by Steve Ireland
parent 6401dda6dc
commit 82cb3080b3

View File

@@ -66,6 +66,10 @@ Options All -Indexes
</FilesMatch>
</IfModule>
# disable directory browsing
# For security reasons, Option all cannot be overridden.
Options +ExecCGI +Includes +IncludesNOEXEC +SymLinksIfOwnerMatch -Indexes
<IfModule mod_headers.c>
Header always set X-Frame-Options "SAMEORIGIN"
Header add Content-Security-Policy "default-src 'self' www.google.com; connect-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com; img-src 'self' data:; object-src 'none'; form-action 'self'"
@@ -86,8 +90,4 @@ IndexIgnore *
<Files error_log>
Require all denied
</Files>
</IfModule>
# disable directory browsing
# For security reasons, Option all cannot be overridden.
Options +ExecCGI +Includes +IncludesNOEXEC +SymLinksIfOwnerMatch -Indexes
</IfModule>