horok/apache2
1
0
Fork 0
Code Activity

Setting additional Set-Cookie options HttpOnly;SameSite=Strict;Secure.

Browse source 
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
This commit is contained in:
Daniel Baumann 2025-06-26 07:47:13 +02:00
parent a9a1d20819
commit 3fb45acbe0
Signed by: daniel.baumann
GPG key ID: BCC918A2ABD66424
2 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
debian/apache2.postinst vendored
View file

@ -56,7 +56,7 @@ enable_default_conf()
if is_fresh_install $@ ; then if is_fresh_install $@ ; then
for conf in charset localized-error-pages other-vhosts-access-log \ for conf in charset localized-error-pages other-vhosts-access-log \
security serve-cgi-bin \ security serve-cgi-bin \
csp hsts ; do csp hsts modern-cookies ; do
a2enconf -m -q $conf a2enconf -m -q $conf
done done
fi fi

7
debian/config-dir/conf-available/modern-cookies.conf vendored Normal file
View file

@ -0,0 +1,7 @@
# /etc/apache2/conf-available/modern-cookies.conf
<IfModule mod_headers.c>
<IfModule mod_ssl.c>
Header edit Set-Cookie ^(.*)$ $1;HttpOnly;SameSite=Strict;Secure
</IfModule>
</IfModule>