Path matcher on header is unnecessary, omitting results in the same effect

Francis Lavoie
2020-05-27 00:41:18 -04:00
parent c45ba14b78
commit 258543be81

@@ -56,7 +56,7 @@ Caddy 2 can also automatically enable HTTPS in some circumstances, check the [do
# if you encounter issues.
encode gzip
header /* {
header {
# Enable cross-site filter (XSS) and tell browser to block detected attacks
X-XSS-Protection "1; mode=block"
# Disallow the site to be rendered within a frame (clickjacking protection)