[v9.3.x] Docs: Update old default values for configuration options (#63677)
Docs: Update old default values for configuration options (#61826)
(cherry picked from commit 0481c12bd5)
Co-authored-by: zsrv <95176387+zsrv@users.noreply.github.com>
This commit is contained in:
co-authored by
zsrv
parent
93982e4e6a
commit
36fa2841d6
@@ -606,15 +606,15 @@ Set to `true` to enable HSTS `preloading` option. Only applied if strict_transpo
|
||||
|
||||
### strict_transport_security_subdomains
|
||||
|
||||
Set to `true` if to enable the HSTS includeSubDomains option. Only applied if strict_transport_security is enabled. The default value is `false`.
|
||||
Set to `true` to enable the HSTS includeSubDomains option. Only applied if strict_transport_security is enabled. The default value is `false`.
|
||||
|
||||
### x_content_type_options
|
||||
|
||||
Set to `true` to enable the X-Content-Type-Options response header. The X-Content-Type-Options response HTTP header is a marker used by the server to indicate that the MIME types advertised in the Content-Type headers should not be changed and be followed. The default value is `false`.
|
||||
Set to `false` to disable the X-Content-Type-Options response header. The X-Content-Type-Options response HTTP header is a marker used by the server to indicate that the MIME types advertised in the Content-Type headers should not be changed and be followed. The default value is `true`.
|
||||
|
||||
### x_xss_protection
|
||||
|
||||
Set to `false` to disable the X-XSS-Protection header, which tells browsers to stop pages from loading when they detect reflected cross-site scripting (XSS) attacks. The default value is `false` until the next minor release, `6.3`.
|
||||
Set to `false` to disable the X-XSS-Protection header, which tells browsers to stop pages from loading when they detect reflected cross-site scripting (XSS) attacks. The default value is `true`.
|
||||
|
||||
### content_security_policy
|
||||
|
||||
|
||||
Reference in New Issue
Block a user