Merge pull request #1109 from lakridserne/feature/protect_against_x_f…

…rame_attacks Forhindre at formularer indlejres i andre sider
CodingPirates · Sep 16, 2024 · d80ced7 · d80ced7
2 parents b9b3cf4 + 5f3427c
commit d80ced7
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/forenings_medlemmer/settings.py b/forenings_medlemmer/settings.py
@@ -229,6 +229,8 @@
 
 SECURE_SSL_REDIRECT = env.bool("FORCE_HTTPS")
 SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
+SECURE_BROWSER_XSS_FILTER = True
+SECURE_CONTENT_TYPE_NOSNIFF = True
 
 
 LOGIN_URL = "/account/login/"