Skip to content

Adding headers to included files / sub-scopes drops those set earlier #212

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
colans opened this issue Apr 20, 2015 · 0 comments
Open

Comments

@colans
Copy link
Contributor

colans commented Apr 20, 2015

From the documentation:

There could be several add_header directives. These directives are inherited from the previous level if and only if there are no add_header directives defined on the current level.

So we should keep these in nginx.conf. Currently, the ones causing me problems are the following:

  • add_header Strict-Transport-Security "max-age=7200";

...and several in apps/drupal/microcache_fcgi.conf

colans added a commit to colans/drupal-with-nginx that referenced this issue Apr 20, 2015
perusio added a commit that referenced this issue Jun 28, 2015
Issue #212: Move header-adding to nginx.conf to avoid losing headers
jakobg added a commit to codewhisper/drupal-with-nginx that referenced this issue May 22, 2017
…o D7

* 'D7' of https://github.com/perusio/drupal-with-nginx:
  * Added woff2 support from PR perusio#255 by @iryston.
  Added an appropriate mime type for .woff2
  * Fix perusio#251 with PR from @kkomelin.
  * Include PR#11 from @kkomelin about CGI var vuln.
  Allowed "Well-Known URIs".
  Cache valid responses for 15s.
  disable access_log in php_fpm_status_vhost
  * Disabled SSL v3.
  * Enable OCSP stapling verification.
  Update fastcgi_cache_key
  Issue perusio#212 by colans: Move header-adding to nginx.conf to avoid losing headers.
  Disabled SSLv3 to fix POODLE vulnerability.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant