{"version":"1.0","type":"rich","title":"Nginx CSP example","description":"This example demonstrates a hardened Nginx configuration that adds security headers to HTTP responses, including `X-Frame-Options`, `X-Content-Type-Options`, `X-XSS-Protection`, and a `Content-Security-Policy` directive. It shows how the server restricts resource loading to trusted domains like YouTube, Google APIs, and Facebook, while permitting inline scripts and styles. The configuration uses Nginx’s `add_header` directive to apply these policies globally, illustrating a practical approach to mitigating clickjacking, content sniffing, and cross-site scripting attacks. The file is a plain-text server config, not a visualization, and relies solely on Nginx’s built-in header functionality.","provider_name":"VizHub AI Studio","provider_url":"https://next.vizhub.com","html":"<iframe src=\"https://next.vizhub.com/viz/gist-688441ac2b0c5dd0caeed1ecf0de281a?mode=embed\" width=\"960\" height=\"500\" scrolling=\"no\" frameborder=\"1\"></iframe>","width":960,"height":500,"cache_age":3600}