diff --git a/charts/enterprise/traefik/templates/middlewares/tc-headers.yaml b/charts/enterprise/traefik/templates/middlewares/tc-headers.yaml index b0500afc708..e8678d52c41 100644 --- a/charts/enterprise/traefik/templates/middlewares/tc-headers.yaml +++ b/charts/enterprise/traefik/templates/middlewares/tc-headers.yaml @@ -19,6 +19,7 @@ spec: accessControlMaxAge: 100 browserXssFilter: true contentTypeNosniff: true + frameDeny: true customRequestHeaders: X-Forwarded-Proto: https customResponseHeaders: @@ -51,6 +52,7 @@ spec: browserXssFilter: true sslForceHost: true referrerPolicy: same-origin + Content-Security-Policy: frame-ancestors 'self'; form-action 'self' customRequestHeaders: X-Forwarded-Proto: "https" customResponseHeaders: