amorfo77/sogo
1
0
Fork 0
mirror of https://github.com/inverse-inc/sogo.git synced 2026-04-27 15:59:29 +00:00
Code Issues Projects Releases Wiki Activity

chore(Apache): Don't send the Referer header for cross-origin requests

Browse Source 
Fixes #5252
This commit is contained in:
Francis Lachapelle
2021-03-12 17:21:13 -05:00
parent 4740042bf9
commit 22b6b4bb9f
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
Apache/SOGo.conf
View File

@@ -22,6 +22,9 @@ Alias /SOGo/WebServerResources/ \
</IfModule>
</Directory>
# Don't send the Referer header for cross-origin requests
Header always set Referrer-Policy "same-origin"
## Uncomment the following to enable proxy-side authentication, you will then
## need to set the "SOGoTrustProxyAuthentication" SOGo user default to YES and
## adjust the "x-webobjects-remote-user" proxy header in the "Proxy" section