Security Header Code For Htaccess (use gpt to modify).docx

https://noisereducerai.com

1. <IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
Header always set Content-Security-Policy "upgrade-insecure-requests"
Header always set X-XSS-Protection "1; mode=block"
Header always set X-Content-Type-Options "nosniff"
Header always set X-Frame-Options "sameorigin"
Header always set Permissions-Policy "geolocation=(), midi=(),sync-xhr=(),accelerometer=(),
gyroscope=(), magnetometer=(), camera=(), microphone=(), payment=(), usb=(),
fullscreen=(self)"
</IfModule>
<IfModule headers_module>
RequestHeader set X-HTTPS 1
Header set Referrer-Policy "no-referrer-when-downgrade"
</IfModule>