Extra headers for web ui

src/freedombone-utils-webadmin

@@ -1804,6 +1804,9 @@ function install_web_admin {
       echo '  access_log /dev/null;';
       echo '  error_log /dev/null;';
       echo '';
+      echo '  add_header X-Content-Type-Options nosniff;';
+      echo '  add_header X-XSS-Protection "1; mode=block";';
+      echo '';
       echo '  location ^~ /admin {';
       echo '    client_max_body_size 200m;';
       echo "    ${basic_auth_str} \"${WEBADMIN_LOGIN_TEXT}\";";
@@ -1860,6 +1863,8 @@ function install_web_admin {
     nginx_security_options "${local_hostname}"
 
     { echo '  add_header Strict-Transport-Security max-age=0;';
+      echo '  add_header X-Content-Type-Options nosniff;';
+      echo '  add_header X-XSS-Protection "1; mode=block";';
       echo '';
       echo '  location ^~ /admin {';
       echo '    client_max_body_size 200m;';
@@ -1912,6 +1917,9 @@ function install_web_admin {
       echo '  access_log /dev/null;';
       echo '  error_log /dev/null;';
       echo '';
+      echo '  add_header X-Content-Type-Options nosniff;';
+      echo '  add_header X-XSS-Protection "1; mode=block";';
+      echo '';
       echo '  location ^~ /mail {';
       echo '    client_max_body_size 200m;';
       echo "    root /var/www/${local_hostname}/htdocs;";