only allow x-frame to /video/embed path for security

2018-07-15 16:57:54 +05:30 · 2018-07-15 16:57:54 +05:30 · e200a3bbb5
parent 174c8658d0
commit e200a3bbb5
1 changed files with 2 additions and 1 deletions
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@ -1,4 +1,5 @@
-	proxy_hide_header X-Frame-Options;
+	add_header X-Frame-Options https://__DOMAIN__/videos/embed;
+	
 	location ~ ^/client/(.*\.(js|css|woff2|otf|ttf|woff|eot))$ {
    add_header Cache-Control "public, max-age=31536000, immutable";