Releases: h5bp/server-configs-apache
Releases · h5bp/server-configs-apache
v2.5.0
v2.4.1
v2.4.0
- Add configs for web application manifest files
[#29]. - Allow access to the content from within the
/.well-known/
directory
[#31]. - Forbid access to
.conf
files. - Add the
no-transform
value to theCache-Control
HTTP response
header without overwriting existing values. - Add
cur
,ico
,svg
,svgz
andwebp
to the filename-based
cache busting list. - Add configs for text files (
.txt
)
[b5bda65]. - Compress WebVTT files (
.vtt
)
[0bb12c8]. - Reintroduce the
filename extension
tocontent type
mappings forico
andsvg
[#28].
v2.3.0
v2.2.0
v2.1.0
v2.0.0
- Add example on how to mitigate reflected (a.k.a non-persistent) XSS attacks
[#8]. - Add example on how to provide clickjacking protection
[#8]. - Add example on how to reduce MIME type security risks
[#8]. - Add configs for cursor images (
.cur
)
[a795fff]. - Fix backup and source file blocking for Apache v2.3+
[#5]. - Remove filename extension to content type mappings that are already provided
by Apache v2.2.0+
[#4]. - Improve inline comments.
- Remove
screen flicker
fix required by IE 6
[#3].