15 lines
393 B
ApacheConf
15 lines
393 B
ApacheConf
# Security headers
|
|
<IfModule mod_headers.c>
|
|
Header set X-Content-Type-Options "nosniff"
|
|
Header set X-Frame-Options "SAMEORIGIN"
|
|
Header set X-XSS-Protection "1; mode=block"
|
|
</IfModule>
|
|
|
|
# Block access to sensitive directories
|
|
<IfModule mod_rewrite.c>
|
|
RewriteEngine On
|
|
RewriteRule ^includes/ - [F,L]
|
|
RewriteRule ^sql/ - [F,L]
|
|
RewriteRule ^vendor/ - [F,L]
|
|
</IfModule>
|