Learn about Centmin Mod LEMP Stack today
Register Now

Beta Branch fix inc/wpsetup.inc for ssl vhost duplicate security headers

Discussion in 'Centmin Mod Github Commits' started by eva2000, Jul 17, 2018.

  1. eva2000

    eva2000 Administrator Staff Member

    59,721
    12,541
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,185
    Local Time:
    5:37 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    fix inc/wpsetup.inc for ssl vhost duplicate security headers

    for centmin.sh menu option 22 when used with nginx https vhost, the domain.com.ssl.conf vhost config has duplicate set of these 4 headers below. Removing the 2nd set of 4 lines

    #add_header X-Frame-Options SAMEORIGIN;
    add_header X-Xss-Protection "1; mode=block" always;
    add_header X-Content-Type-Options "nosniff" always;
    #add_header Referrer-Policy "strict-origin-when-cross-origin";

    Continue reading...

    123.09beta01 branch