Delete security headers from django to handle them only on the nginx level

Code-Poets / sheetstorm

Web working hours sheet for Code-Poets employees

https://www.sheetstorm.codepoets.it

2 stars 0 forks source link

Delete security headers from django to handle them only on the nginx level #540

Closed bartoszbetka closed 5 years ago

bartoszbetka commented 5 years ago

We should handle security headers only on the one level to avoid duplicates and easier maintenance. We want to manage headers on the nginx level to handle additional endpoints that are not supported by django. Please delete django headers:

X-Content-Type-Options
X-Frame-Options
X-XSS-Protection

kbeker commented 5 years ago

Already merged