Skip to content
Snippets Groups Projects
Commit 4225729f authored by Marek Jaroš's avatar Marek Jaroš :metal:
Browse files

Merge branch '11-use-httponly-and-secure-flag-for-cookies-with-onsuccess' into 'master' 

Resolve "Use HttpOnly AND Secure flag for cookies with onsuccess"

Closes #11

See merge request !13
parents 2c438e4d e30ed6d3
No related branches found
No related tags found
3 merge requests!24IcingaWeb v2.11.1,!22IcingaWeb v2.10.1,!13Resolve "Use HttpOnly AND Secure flag for cookies with onsuccess"
Pipeline #163871 passed
Stage: build
Hide whitespace changes
Inline Side-by-side
content/etc/apache2/sites-available/icingaweb2-ssl.conf
+ 2
− 1
View file @ 4225729f
...@@ -8,7 +8,8 @@ Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains ...@@ -8,7 +8,8 @@ Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains
Header unset Server Header unset Server
Header always set X-Content-Type-Options "nosniff" Header always set X-Content-Type-Options "nosniff"
Header edit Set-Cookie ^(.*)$ $1;SameSite=lax Header edit Set-Cookie ^(.*)$ $1;SameSite=lax
Header edit Set-Cookie (?i)^(.*)(;\s*secure)??((\s*;)?(.*)) "$1; Secure$3$4" Header always edit Set-Cookie ^(.*)$ "$1;HttpOnly;Secure"
Header onsuccess edit Set-Cookie ^(.*)$ "$1;HttpOnly;Secure"
SSLProtocol -all +TLSv1.2 +TLSv1.3 SSLProtocol -all +TLSv1.2 +TLSv1.3
SSLCipherSuite TLSv1.3 TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 SSLCipherSuite TLSv1.3 TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment