dbarobin/dbarobin.github.io/master/.htaccess
# Specify a 'Vary: Accept-Encoding' header
<FilesMatch ".(js|css|xml|gz)$">
Header append Vary: Accept-Encoding
</FilesMatch>
# Set a far future cache policy in 2 requests
# Expire Header
<FilesMatch ".(ico|jpg|jpeg|png|gif|js|css|swf)$">
ExpiresDefault "access plus 2 hours"
</FilesMatch>
# The X-Frame-Options response header
X-Frame-Options: SAMEORIGIN
# Content-Type
Content-Type: text/html;charset=utf-8
# Strict-Transport-Security
Strict-Transport-Security: max-age=31536000; includeSubDomains
# X-Content-Type-Options
X-Content-Type-Options: nosniff
# X-XSS-Protection
X-XSS-Protection: 1; mode=block
# Cache-Control
Cache-Control: no-cache, no-store, must-revalidate
# Pragma
Pragma: no-cache
# Expires
Expires: -1
# X-Permitted-Cross-Domain-Policies
X-Permitted-Cross-Domain-Policies: master-only
On Github License
Files
Download PDF of Htaccess file