snac2

commit 5c787c1af055f52d5dea725a50f13722bd7a630c
parent d9ed2196d7df90c4ac1bf8168137ff77519f3e49
Author: default <nobody@localhost>
Date:   Sun, 21 Jan 2024 19:13:40 +0100

Updated documentation.

Diffstat:
M
doc/snac.8
 | 
6
++++--

1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/doc/snac.8 b/doc/snac.8
@@ -179,9 +179,11 @@ By setting this to true, no email notification will be sent for any user.
 .It Ic disable_inbox_collection
 By setting this to true, no inbox collection is done. Inbox collection helps
 being discovered from remote instances, but also increases network traffic.
-.It http_headers
+.It Ic http_headers
 If you need to add more HTTP response headers for whatever reason, you can
-fill this object with the required header/value pairs.
+fill this object with the required header/value pairs. For example, for enhanced
+XSS security, you can set the "Content-Security-Policy" header to "script-src ;"
+to be totally sure that no JavaScript is executed.
 .It Ic show_instance_timeline
 If this is set to true, the instance base URL will show a timeline with the latest
 user posts instead of the default greeting static page. If other information