From 7be74d7cb366dc0aa51f80a4def2441a1364e661 Mon Sep 17 00:00:00 2001
From: Pietro Albini <pietro@pietroalbini.org>
Date: Thu, 1 Aug 2019 19:58:23 +0200
Subject: [PATCH] add extra http headers to rustup.rs

---
 www/website_config.json | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 www/website_config.json

diff --git a/www/website_config.json b/www/website_config.json
new file mode 100644
index 0000000000..936a1f6d85
--- /dev/null
+++ b/www/website_config.json
@@ -0,0 +1,9 @@
+{
+    "headers": {
+        "Strict-Transport-Security": "max-age=63072000; includeSubDomains",
+        "X-Content-Type-Options": "nosniff",
+        "X-Frame-Options": "DENY",
+        "X-XSS-Protection": "1; mode=block",
+        "Referrer-Policy": "no-referrer, strict-origin-when-cross-origin"
+    }
+}