mirror of
https://github.com/Mailu/Mailu.git
synced 2024-12-14 10:53:30 +02:00
b13d143b34
This change should remove the duplicate `x-xss-protection` header and also the `x-powered-by` header. Hopefully a pull request to main is appropriate, but may be worth back porting to 1.7. Tested config by modifying live 1.7 nginx config and reloading. Has had the desired outcome of removing the headers. ```/etc/nginx # nginx -t -c /etc/nginx/nginx.conf nginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful /etc/nginx # nginx -s reload ``` These steps were based on: - https://serverfault.com/questions/928912/how-do-i-remove-a-server-added-header-from-proxied-location - https://serverfault.com/questions/929571/overwrite-http-headers-comming-back-from-a-web-application-server-proxied-in-ngi - http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_hide_header |
||
|---|---|---|
| .. | ||
| dhparam.pem | ||
| nginx.conf | ||
| proxy.conf | ||
| tls.conf | ||