| OLD | NEW | 
|    1 # XSS and clickjacking prevention headers |    1 # XSS and clickjacking prevention headers | 
|    2  |    2  | 
|    3 set $csp_frame ""; |    3 set $csp_frame ""; | 
|    4 if ($uri ~ ^/(:?\w\w(_\w\w)?/)?(?:index|firefox|chrome|opera|android|internet-ex
     plorer|safari|yandex-browser|maxthon)?$|^/blog/) |    4 if ($uri ~ ^/(:?\w\w(_\w\w)?/)?(?:index|firefox|chrome|opera|android|internet-ex
     plorer|safari|yandex-browser|maxthon)?$|^/blog/) | 
|    5 { |    5 { | 
|    6   set $csp_frame "; frame-src www.youtube-nocookie.com;"; |    6   set $csp_frame "; frame-src www.youtube-nocookie.com;"; | 
|    7 } |    7 } | 
|    8 add_header Content-Security-Policy "default-src 'self'; img-src * data:; style-s
     rc 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' $csp_
     frame"; |    8 add_header Content-Security-Policy "default-src 'self'; img-src * data:; style-s
     rc 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' $csp_
     frame"; | 
|    9 add_header X-Frame-Options "sameorigin"; |    9 add_header X-Frame-Options "sameorigin"; | 
|   10  |   10  | 
| (...skipping 324 matching lines...) Expand 10 before | Expand all | Expand 10 after  Loading... | 
|  335   } |  335   } | 
|  336   if ($arg_link = "acceptable_ads") |  336   if ($arg_link = "acceptable_ads") | 
|  337   { |  337   { | 
|  338     set $link "acceptable-ads"; |  338     set $link "acceptable-ads"; | 
|  339   } |  339   } | 
|  340   if ($arg_link = "acceptable_ads_criteria") |  340   if ($arg_link = "acceptable_ads_criteria") | 
|  341   { |  341   { | 
|  342     set $link "acceptable-ads"; |  342     set $link "acceptable-ads"; | 
|  343     set $anchor "#criteria"; |  343     set $anchor "#criteria"; | 
|  344   } |  344   } | 
 |  345   if ($arg_link = "privacy_friendly_ads") | 
 |  346   { | 
 |  347     set $link "acceptable-ads"; | 
 |  348     set $anchor "#privacy-friendly-acceptable-ads"; | 
 |  349   } | 
|  345   if ($arg_link = "contributors") |  350   if ($arg_link = "contributors") | 
|  346   { |  351   { | 
|  347     set $link "contributors"; |  352     set $link "contributors"; | 
|  348   } |  353   } | 
|  349   if ($arg_link = "whitelist") |  354   if ($arg_link = "whitelist") | 
|  350   { |  355   { | 
|  351     set $link "faq_basics"; |  356     set $link "faq_basics"; | 
|  352     set $anchor "#disable"; |  357     set $anchor "#disable"; | 
|  353   } |  358   } | 
|  354  |  359  | 
| (...skipping 74 matching lines...) Expand 10 before | Expand all | Expand 10 after  Loading... | 
|  429 location /403.html |  434 location /403.html | 
|  430 { |  435 { | 
|  431   try_files $uri @proxied; |  436   try_files $uri @proxied; | 
|  432 } |  437 } | 
|  433 location @proxied |  438 location @proxied | 
|  434 { |  439 { | 
|  435   proxy_pass https://server16.adblockplus.org; |  440   proxy_pass https://server16.adblockplus.org; | 
|  436   proxy_set_header Host adblockplus.org; |  441   proxy_set_header Host adblockplus.org; | 
|  437   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; |  442   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; | 
|  438 } |  443 } | 
| OLD | NEW |