stable
Clone or download
Read-only
request #19302: Force Chromium-based browsers to segment the cache to defend against cache probing
This contribution set a new headers on all responses to tell browsers supporting the Fetch Metadata Request Headers to segment their cache according to the origin of the requests. This help to defend against cache-probing based cross-site leaks. No functional change is expected, after having redeployed your nginx configuration a new header should be present on every responses. Change-Id: I26bbe482c6d6dea40480ddad97e35435e146bf6f
Modified Files
| Name | ||||
|---|---|---|---|---|
| A | src/etc/nginx/tuleap.d/11-vary-fetch-site-metadata.conf | +7 | −0 | Go to diff View file |