httpd: disable sending ETag header completely

These cause caching trouble and pose a potential security risk due to
exposing inode numbers of files within the Apache site directories on an
IPFire machine.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Peter Müller
2021-04-12 23:00:46 +02:00
committed by Michael Tremer
parent a8996f857c
commit 59fa881ea7

View File

@@ -8,6 +8,7 @@ Include /etc/httpd/conf/hostname.conf
HostnameLookups off
AddHandler cgi-script .cgi
EnableSendfile Off
FileETag None
# Always unset HTTP_PROXY variable, https://httpoxy.org
RequestHeader unset Proxy early