Http headers to .htaccess

i am trying to add:

<IfModule mod_headers.c>
	Header set X-XSS-Protection "1; mode=block"
	Header set X-Frame-Options "SAMEORIGIN"
	Header set X-Content-Type-Options "nosniff"
	Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
	# Header set Content-Security-Policy ...
	Header set Referrer-Policy "same-origin"
	Header set Feature-Policy "geolocation 'self'; vibrate 'none'"

to .../public_html/.htaccess file but doesnt work. What am i missing?


You need to modify Nginx as by default the headers will by overwriten nginx.

Thanks for the link. That helped me, too!

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.