]> git.ipfire.org Git - ipfire-2.x.git/commit - config/httpd/vhosts.d/ipfire-interface-ssl.conf
prevent IE from interpreting HTML MIME type
authorPeter Müller <peter.mueller@link38.eu>
Sun, 3 Dec 2017 17:10:47 +0000 (18:10 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Sat, 16 Dec 2017 12:16:12 +0000 (12:16 +0000)
commit0cabaf35c2435a653928e46ddcfba5da3fc3e215
treece750b91ade3c71f36e5bc3aa5e1826cfa546ce1
parentf451d465fb3d0c53c6a8c66abb0b0fd835e2901d
prevent IE from interpreting HTML MIME type

Add X-Content-Type-Options header to prevent Internet Explorer
from interpreting the MIME type of a server answer on its own,
which could lead to security risks.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/httpd/vhosts.d/captive.conf
config/httpd/vhosts.d/ipfire-interface-ssl.conf
config/httpd/vhosts.d/ipfire-interface.conf