Welcome to Centmin Mod Community
Become a Member

Beta Branch fix inc/wpsetup.inc for ssl vhost duplicate security headers

Discussion in 'Centmin Mod Github Commits' started by eva2000, Jul 17, 2018.

  1. eva2000

    eva2000 Administrator Staff Member

    59,284
    12,509
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,141
    Local Time:
    9:47 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    fix inc/wpsetup.inc for ssl vhost duplicate security headers

    for centmin.sh menu option 22 when used with nginx https vhost, the domain.com.ssl.conf vhost config has duplicate set of these 4 headers below. Removing the 2nd set of 4 lines

    #add_header X-Frame-Options SAMEORIGIN;
    add_header X-Xss-Protection "1; mode=block" always;
    add_header X-Content-Type-Options "nosniff" always;
    #add_header Referrer-Policy "strict-origin-when-cross-origin";

    Continue reading...

    123.09beta01 branch