Http headers to .htaccess

1

Hi,
i am trying to add:

<IfModule mod_headers.c>
	Header set X-XSS-Protection "1; mode=block"
	Header set X-Frame-Options "SAMEORIGIN"
	Header set X-Content-Type-Options "nosniff"
	Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
	# Header set Content-Security-Policy ...
	Header set Referrer-Policy "same-origin"
	Header set Feature-Policy "geolocation 'self'; vibrate 'none'"
</IfModule>

to .../public_html/.htaccess file but doesnt work. What am i missing?

thanks
2

You need to modify Nginx as by default the headers will by overwriten nginx.

https://docs.hestiacp.com/admin_docs/web.html

4

Thanks for the link. That helped me, too!

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.