smeserver/smeserver-apache
6
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

* Fri Dec 27 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-10.sme

Browse Source 
- add X-Content-Type-Options nosniff [SME: 12835]
- add Strict Transport Security support HSTS [SME: 12815]
- add X-Frame-Options SAMEORIGIN Header to prevent clickjacking [SME: 12816]
- add referrer-Policy same-origin [SME: 12817]
- add OCSP Stapling support [SME: 12819]
- add CSP Content-Security-Policy support [SME: 9567]
- add .well-known and .well-known/security.txt [SME: 12818]
This commit is contained in:
Jean-Philippe Pialasse 2024-12-31 03:55:45 -05:00
parent ab245eca09
commit d7ed3bd49d
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
root/etc/e-smith/templates/var/www/html/.well-known/security.txt/10contact
View File

@ -5,5 +5,5 @@ Contact: {
# Contact: mailto:security%2Buri%2Bencoded@example.com # Contact: mailto:security%2Buri%2Bencoded@example.com
# Contact: tel:+1-201-555-0123 # Contact: tel:+1-201-555-0123
# Contact: https://example.com/security-contact.html # Contact: https://example.com/security-contact.html
${'httpd-e-smith'}{'SecurityContact'}||"mailto:admin@$DomainName"} ${'httpd-e-smith'}{'SecurityContact'}||"mailto:admin\@$DomainName"}

4
smeserver-apache.spec
View File

@ -4,7 +4,7 @@ Summary: smeserver server and gateway - apache module
%define name smeserver-apache %define name smeserver-apache
Name: %{name} Name: %{name}
%define version 11.0.0 %define version 11.0.0
%define release 9 %define release 10
Version: %{version} Version: %{version}
Release: %{release}%{?dist} Release: %{release}%{?dist}
License: GPL License: GPL
@ -74,7 +74,7 @@ if [ $1 -gt 1 ] ; then
fi fi
%changelog %changelog
* Fri Dec 27 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-9.sme * Fri Dec 27 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-10.sme
- add X-Content-Type-Options nosniff [SME: 12835] - add X-Content-Type-Options nosniff [SME: 12835]
- add Strict Transport Security support HSTS [SME: 12815] - add Strict Transport Security support HSTS [SME: 12815]
- add X-Frame-Options SAMEORIGIN Header to prevent clickjacking [SME: 12816] - add X-Frame-Options SAMEORIGIN Header to prevent clickjacking [SME: 12816]