From 078e0fc6ca29a5917b43c0834e4a4f97b58e25de Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Sat, 28 Oct 2023 13:04:02 +0000 Subject: Add more forbidden headers Signed-off-by: Laurent Bercot --- src/config/headers.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/config/headers.c b/src/config/headers.c index 9ea069f..31d3e69 100644 --- a/src/config/headers.c +++ b/src/config/headers.c @@ -22,10 +22,14 @@ struct builtinheaders_s static struct builtinheaders_s const builtinheaders[] = { { .key = "Accept-Ranges", .value = "none", .overridable = 0 }, + { .key = "Allow", .value = 0, .overridable = 0 }, { .key = "Cache-Control", .value = "private", .overridable = 1 }, { .key = "Connection", .value = 0, .overridable = 0 }, + { .key = "Content-Length", .value = 0, .overridable = 0 }, { .key = "Content-Security-Policy", .value = "default-src 'self'; style-src 'self' 'unsafe-inline';", .overridable = 1 }, + { .key = "Content-Type", .value = 0, .overridable = 0 }, { .key = "Date", .value = 0, .overridable = 0 }, + { .key = "Location", .value = 0, .overridable = 0 }, { .key = "Referrer-Policy", .value = "no-referrer-when-downgrade", .overridable = 1 }, { .key = "Server", .value = "tipidee/" TIPIDEE_VERSION, .overridable = 0 }, { .key = "Status", .value = 0, .overridable = 0 }, -- cgit v1.3.1