lamp: add referrer policy for enhanced privacy

nextcloud · Sep 16, 2018 · 5be7866 · 5be7866
1 parent fcbd661
commit 5be7866
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 1 deletion.
diff --git a/changelog.md b/changelog.md
@@ -1,5 +1,7 @@
 
-[v0.59.10](https://github.com/nextcloud/nextcloudpi/commit/e17f56b) (2018-09-04) ncp-web: add hover text for ncp admin header icons
+[v0.59.11](https://github.com/nextcloud/nextcloudpi/commit/701dcd6) (2018-09-16) lamp: add referrer policy for enhanced privacy
+
+[v0.59.10](https://github.com/nextcloud/nextcloudpi/commit/fcbd661) (2018-09-04) ncp-web: add hover text for ncp admin header icons
 
 [v0.59.9 ](https://github.com/nextcloud/nextcloudpi/commit/6a755c3) (2018-09-16) nc-prettyURL: fixes
 

diff --git a/lamp.sh b/lamp.sh
@@ -78,6 +78,7 @@ EOF
     cat >> /etc/apache2/apache2.conf <<EOF
 <IfModule mod_headers.c>
   Header always set Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
+  Header always set Referrer-Policy "no-referrer"
 </IfModule>
 EOF
 

diff --git a/update.sh b/update.sh
@@ -135,6 +135,15 @@ chmod 770                  /var/www/ncp-web
     apt-get install -y --no-install-recommends php-imagick imagemagick-6-common
   }
 
+  # no-origin policy for enhanced privacy
+  grep -q "Referrer-Policy" /etc/apache2/apache2.conf || {
+    cat >> /etc/apache2/apache2.conf <<EOF
+<IfModule mod_headers.c>
+  Header always set Referrer-Policy "no-referrer"
+</IfModule>
+EOF
+  }
+
 } # end - only live updates
 
 exit 0