Updates for Nginx role changes

.gitignore

@@ -80,3 +80,4 @@ tmtags
 *.log
 /roles/*
 /config.yml
+__pycache__

Rakefile

@@ -122,7 +122,7 @@ end
 namespace :init do
   desc "Symbolic link files and templates into the spec/playbooks directory"
   task :links do
-    ["files", "library", "templates"].each do |f|
+    ["files", "library", "templates", "filter_plugins"].each do |f|
       path = "spec/playbooks/#{f}"
       next if File.symlink? path or !File.exist? f
       raise "File #{path} exists and is not a symlink! Don't know what to do" if File.exist? path

spec/playbooks/.gitignore

@@ -1,3 +1,4 @@
 files
+filter_plugins
 library
 templates

spec/shared/nginx.rb

@@ -49,7 +49,7 @@
   end
 
   it "disallows other sites from embedding in a frame" do
-    expect(subject.stdout.gsub(/\r/, '')).to match /^X-Frame-Options: DENY$/i
+    expect(subject.stdout.gsub(/\r/, '')).to match /^X-Frame-Options: SAMEORIGIN$/i
   end
 
   it "disallows content type sniffing" do
@@ -60,8 +60,8 @@
     expect(subject.stdout.gsub(/\r/, '')).to match /^X-XSS-Protection: 1; mode=block$/i
   end
 
-  it "disables cache transforms" do
-    expect(subject.stdout.gsub(/\r/, '')).to match /^Cache-Control: no-transform$/i
+  it "uses a secure referrer policy" do
+    expect(subject.stdout.gsub(/\r/, '')).to match /^Referrer-Policy: strict-origin-when-cross-origin$/i
   end
 end