## always sourced by include snip.d/http-base-security-headers

proxy_hide_header    X-XSS-Protection;
fastcgi_hide_header  X-XSS-Protection;
grpc_hide_header     X-XSS-Protection;
scgi_hide_header     X-XSS-Protection;
uwsgi_hide_header    X-XSS-Protection;

proxy_hide_header    X-Content-Type-Options;
fastcgi_hide_header  X-Content-Type-Options;
grpc_hide_header     X-Content-Type-Options;
scgi_hide_header     X-Content-Type-Options;
uwsgi_hide_header    X-Content-Type-Options;

proxy_hide_header    Referrer-Policy;
fastcgi_hide_header  Referrer-Policy;
grpc_hide_header     Referrer-Policy;
scgi_hide_header     Referrer-Policy;
uwsgi_hide_header    Referrer-Policy;

proxy_hide_header    Strict-Transport-Security;
fastcgi_hide_header  Strict-Transport-Security;
grpc_hide_header     Strict-Transport-Security;
scgi_hide_header     Strict-Transport-Security;
uwsgi_hide_header    Strict-Transport-Security;

proxy_hide_header    Permissions-Policy;
fastcgi_hide_header  Permissions-Policy;
grpc_hide_header     Permissions-Policy;
scgi_hide_header     Permissions-Policy;
uwsgi_hide_header    Permissions-Policy;

proxy_hide_header    Content-Security-Policy;
fastcgi_hide_header  Content-Security-Policy;
grpc_hide_header     Content-Security-Policy;
scgi_hide_header     Content-Security-Policy;
uwsgi_hide_header    Content-Security-Policy;

## obsolete
proxy_hide_header    X-Frame-Options;
fastcgi_hide_header  X-Frame-Options;
grpc_hide_header     X-Frame-Options;
scgi_hide_header     X-Frame-Options;
uwsgi_hide_header    X-Frame-Options;