freaktechnik/twitchbots/master/api/.htaccess
Options -Indexes
Header set X-Content-Type-Options "nosniff"
Header set X-XSS-Protection "1; mode=block"
Header set X-Frame-Options "DENY"
Header set Content-Security-Policy "default-src 'none'; frame-ancestors 'none'"
SetEnvIf Host ^api.twitchbots.info$ MODE=production
Header set Strict-Transport-Security "max-age=10886400; includeSubDomains; preload" "expr=%{MODE} == 'production'"
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://api.twitchbots.info/$1 [QSA,R=301,L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^ index.php [QSA,L]
On Github License
Files