1
0
mirror of https://github.com/Mailu/Mailu.git synced 2024-12-14 10:53:30 +02:00
Mailu/core/nginx
bors[bot] e92c67b118
Merge #2338
2338: Update X-XSS-Protection to current recommendation r=mergify[bot] a=AvverbioPronome

See:

- https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection and
- https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-xss-protection

## What type of PR?

Slight enhancement

## What does this PR do?

This PR turns off the XSS auditor in the few browsers that still have one.

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ?] In case of feature or enhancement: documentation updated accordingly
- [x ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Giuseppe C <1191978+AvverbioPronome@users.noreply.github.com>
Co-authored-by: Your Name <you@example.com>
2022-05-18 19:28:33 +00:00
..
conf Merge #2338 2022-05-18 19:28:33 +00:00
static set expire headers only for mailu content 2021-09-06 13:45:48 +02:00
certwatcher.py Use environment variables for cert paths/names in nginx certwatcher 2020-03-07 17:17:17 +00:00
config.py ghostwheel42's suggestions 2022-02-24 12:45:30 +01:00
Dockerfile Update alpine-linux to 3.14.5 - Zlib security FIX 2022-03-30 09:08:28 +00:00
letsencrypt.py ghostwheel42's suggestion 2022-03-17 11:35:31 +01:00
start.py Add certificate watcher for external certs to reload nginx 2018-12-07 16:20:42 +00:00