diff --git a/varnish/default.vcl b/varnish/default.vcl index b2a7f6f..c4ec1de 100644 --- a/varnish/default.vcl +++ b/varnish/default.vcl @@ -175,6 +175,8 @@ sub vcl_deliver { unset resp.http.Via; unset resp.http.X-Varnish; unset resp.http.Server; + unset resp.http.Content-disposition; + set resp.http.X-Frame-Options = "SAMEORIGIN"; if (resp.status == 403 || resp.status == 404 || resp.status == 500 || resp.status == 503) {