CowDev
10/13/2016 - 10:32 AM

Apache server security

Apache server security

### Custom security measures ######
### Add to bottom of httpd.conf ###
# Disable server banners #
ServerSignature Off
ServerTokens Prod

# Headers to prevent iFraming, XXS and File type sniffing #
<IfModule mod_headers.c>
  Header set X-XSS-Protection "1; mode=block"
  Header always append X-Frame-Options SAMEORIGIN
  Header set X-Content-Type-Options nosniff
</IfModule>