Merge pull request #2876 from CredoReference/nginx-header-for-ie-high-privacy-mode

Prevent invalid display courseware in IE 10+ with high privacy settings

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/cms.j2

@@ -42,6 +42,9 @@ error_page {{ k }} {{ v }};
   add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
   {% endif %}
 
+  # Prevent invalid display courseware in IE 10+ with high privacy settings
+  add_header P3P 'CP="Open EdX does not have a P3P policy."';
+
   # Nginx does not support nested condition or or conditions so
   # there is an unfortunate mix of conditonals here.
   {% if NGINX_REDIRECT_TO_HTTPS %}

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/lms.j2

@@ -62,6 +62,10 @@ error_page {{ k }} {{ v }};
   add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
   {% endif %}
 
+  # Prevent invalid display courseware in IE 10+ with high privacy settings
+  add_header P3P 'CP="Open EdX does not have a P3P policy."';
+
+
   # Nginx does not support nested condition or or conditions so
   # there is an unfortunate mix of conditonals here.
   {% if NGINX_REDIRECT_TO_HTTPS %}