Adding the XSS protection headers for Element

roles/fsmi-matrix/templates/nginx/nginx.conf

@@ -41,6 +41,11 @@ http {
         location / {
             root   /usr/share/webapps/element;
             index  index.html;
+
+            add_header X-Frame-Options SAMEORIGIN;
+            add_header X-Content-Type-Options nosniff;
+            add_header X-XSS-Protection "1; mode=block";
+            add_header Content-Security-Policy "frame-ancestors 'none'";
         }
     }