Set security headers for public site

jhaals · Aug 18, 2020 · 1a70661 · 1a70661
1 parent 84b37ea
commit 1a70661
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/netlify.toml b/netlify.toml
@@ -1,2 +1,9 @@
 [build]
   base    = "website"
+[[headers]]
+  for = "/*"
+  [headers.values]
+    X-Frame-Options = "DENY"
+    X-XSS-Protection = "1; mode=block"
+    X-Content-Type-Options = "nosniff"
+    Referrer-Policy = "no-referrer"