mirror of
https://github.com/juanfont/headscale.git
synced 2026-04-24 01:28:49 +02:00
X-Frame-Options: DENY and frame-ancestors 'none' stop clickjacking of OIDC, register-confirm, and debug HTML pages. nosniff and no-referrer are cheap defence-in-depth for the same surfaces. Updates #3157
33 KiB
33 KiB