From 82cb3080b34f8c32b5b30ca0bf612dd41bb29b87 Mon Sep 17 00:00:00 2001 From: objecttothis Date: Sun, 11 Dec 2022 01:15:20 +0400 Subject: [PATCH] Moved Options higher in the htaccess --- public/.htaccess | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/public/.htaccess b/public/.htaccess index 8d5a59ff3..b8dd61352 100644 --- a/public/.htaccess +++ b/public/.htaccess @@ -66,6 +66,10 @@ Options All -Indexes +# disable directory browsing +# For security reasons, Option all cannot be overridden. +Options +ExecCGI +Includes +IncludesNOEXEC +SymLinksIfOwnerMatch -Indexes + Header always set X-Frame-Options "SAMEORIGIN" Header add Content-Security-Policy "default-src 'self' www.google.com; connect-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com; img-src 'self' data:; object-src 'none'; form-action 'self'" @@ -86,8 +90,4 @@ IndexIgnore * Require all denied - - -# disable directory browsing -# For security reasons, Option all cannot be overridden. -Options +ExecCGI +Includes +IncludesNOEXEC +SymLinksIfOwnerMatch -Indexes \ No newline at end of file + \ No newline at end of file