7 hours ago
Code:
add_header X-Frame-Options "SAMEORIGIN" always;
This one is known to be problematic for WebOS.
Code:
add_header X-XSS-Protection "1; mode=block" always;
I believe this one is OBE and should be removed.
Remove both, reload nginx, then try again.