diff --git a/nginx/snippets/ssl_params.conf b/nginx/snippets/ssl_params.conf index abc476c..f62d5ba 100644 --- a/nginx/snippets/ssl_params.conf +++ b/nginx/snippets/ssl_params.conf @@ -38,4 +38,4 @@ add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; prelo add_header X-Content-Type-Options "nosniff" always; # Protege contra ataques de 'clickjacking', impedindo que o site seja incorporado em iframes de outros domínios. -add_header X-Frame-Options "SAMEORIGIN" always; +#add_header X-Frame-Options "SAMEORIGIN" always;