diff options
| author | Guillermo Iguaran <guilleiguaran@gmail.com> | 2017-12-09 15:41:55 -0500 |
|---|---|---|
| committer | Guillermo Iguaran <guilleiguaran@gmail.com> | 2017-12-09 15:41:55 -0500 |
| commit | 5d7b70f4336d42eabfc403e9f6efceb88b3eff44 (patch) | |
| tree | ba3ae0210fbd69372cd733d8f6f68de70ef4607e /actionpack/lib | |
| parent | 55d4cf2a9c1a6e77ed7aedb866e964039bb4a143 (diff) | |
| download | rails-5d7b70f4336d42eabfc403e9f6efceb88b3eff44.tar.gz rails-5d7b70f4336d42eabfc403e9f6efceb88b3eff44.tar.bz2 rails-5d7b70f4336d42eabfc403e9f6efceb88b3eff44.zip | |
Add secure `X-Download-Options` and `X-Permitted-Cross-Domain-Policies` to default headers set.
Diffstat (limited to 'actionpack/lib')
| -rw-r--r-- | actionpack/lib/action_dispatch/railtie.rb | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/actionpack/lib/action_dispatch/railtie.rb b/actionpack/lib/action_dispatch/railtie.rb index 855f2ffa47..95e99987a0 100644 --- a/actionpack/lib/action_dispatch/railtie.rb +++ b/actionpack/lib/action_dispatch/railtie.rb @@ -26,7 +26,9 @@ module ActionDispatch config.action_dispatch.default_headers = { "X-Frame-Options" => "SAMEORIGIN", "X-XSS-Protection" => "1; mode=block", - "X-Content-Type-Options" => "nosniff" + "X-Content-Type-Options" => "nosniff", + "X-Download-Options" => "noopen", + "X-Permitted-Cross-Domain-Policies" => "none" } config.action_dispatch.cookies_rotations = ActiveSupport::Messages::RotationConfiguration.new |