Security headers .htaccess

# BEGIN extra
	
	# Cache control headers
	<ifModule mod_headers.c>
		<filesMatch "\.(ico|jpeg|jpg|png|gif|swf|pdf|svg|js|flv)$">
			Header set Cache-Control "max-age=84600, public"
		</filesMatch>
	</ifModule>
		
	# HTTP Strict Transport Security (HSTS)
	Header set Strict-Transport-Security "max-age=31536000" env=HTTPS
	
	# X Frame options
	Header always set X-Frame-Options "SAMEORIGIN"
	
	# X-Content-Type-Options
	<IfModule mod_headers.c>
		Header set X-Content-Type-Options nosniff
	</IfModule>
	
	# Content-Security-Policy existence (CSP)
	<IfModule mod_headers.c>
		Header set Content-Security-Policy "default-src 'self';"
	</IfModule>
	# END extra

#beveiliging #headers #htaccess #security