horok/apache2
1
0
Fork 0
Code Activity

Setting X-Content-Type-Options to nosniff.

Browse source 
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
This commit is contained in:
Daniel Baumann 2025-06-26 07:47:15 +02:00
parent 3d0c336a88
commit 30d2310aaa
Signed by: daniel.baumann
GPG key ID: BCC918A2ABD66424
2 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
debian/apache2.postinst vendored
View file

@ -56,7 +56,7 @@ enable_default_conf()
if is_fresh_install $@ ; then if is_fresh_install $@ ; then
for conf in charset localized-error-pages other-vhosts-access-log \ for conf in charset localized-error-pages other-vhosts-access-log \
security serve-cgi-bin \ security serve-cgi-bin \
csp hsts modern-cookies modern-ssl no-cache no-frames no-git no-referrer ; do csp hsts modern-cookies modern-ssl no-cache no-frames no-git no-referrer no-sniff ; do
a2enconf -m -q $conf a2enconf -m -q $conf
done done
fi fi

5
debian/config-dir/conf-available/no-sniff.conf vendored Normal file
View file

@ -0,0 +1,5 @@
# /etc/apache2/conf-available/no-sniff.conf
<IfModule mod_headers.c>
Header always set X-Content-Type-Options "nosniff"
</IfModule>