49a973381e
So far, only calls that go to the Java backend, had the `X-Content-Type-Options` header in the responses. This PR adds them to all responses by 1. adding it to NGINX configuration. 2. removing it from Spring security's configuration, so we don't end up with _two_ `X-Content-Type-Options` headers in the response. --------- Co-authored-by: Nidhi <nidhi@appsmith.com> |
||
|---|---|---|
| .. | ||
| nginx-app-http.conf.template.sh | ||
| nginx-app-https.conf.template.sh | ||