From 0868b4cec92dba5474e9faa12944a66c7f50fd15 Mon Sep 17 00:00:00 2001 From: yui-knk Date: Fri, 24 Jul 2015 22:15:08 +0900 Subject: [ci skip] Minor fix * add a space * add a `.` --- guides/source/security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'guides/source') diff --git a/guides/source/security.md b/guides/source/security.md index 485b108d12..58f79901f1 100644 --- a/guides/source/security.md +++ b/guides/source/security.md @@ -1011,7 +1011,7 @@ Here is a list of common headers: * X-Frame-Options _'SAMEORIGIN' in Rails by default_ - allow framing on same domain. Set it to 'DENY' to deny framing at all or 'ALLOWALL' if you want to allow framing for all website. * X-XSS-Protection -_'1; mode=block' in Rails by default_ - use XSS Auditor and block page if XSS attack is detected. Set it to '0;' if you want to switch XSS Auditor off(useful if response contents scripts from request parameters) +_'1; mode=block' in Rails by default_ - use XSS Auditor and block page if XSS attack is detected. Set it to '0;' if you want to switch XSS Auditor off (useful if response contents scripts from request parameters). * X-Content-Type-Options _'nosniff' in Rails by default_ - stops the browser from guessing the MIME type of a file. * X-Content-Security-Policy -- cgit v1.2.3