From: Martin Zobel-Helas <zobel@debian.org>
Date: Fri, 9 Feb 2018 17:18:36 +0000 (+0100)
Subject: RT#7092: Apache on godard adds an additional X-Xss-Protection
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=cf3412823aff674c856a7c281264cc53c1f089fb;p=mirror%2Fdsa-puppet.git

RT#7092: Apache on godard adds an additional X-Xss-Protection

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
---

diff --git a/modules/apache2/files/headers b/modules/apache2/files/headers
index 3e7167ac0..15d3b0864 100644
--- a/modules/apache2/files/headers
+++ b/modules/apache2/files/headers
@@ -1,9 +1,9 @@
 <IfModule mod_headers.c>
   Header set X-Clacks-Overhead "GNU Terry Pratchett"
 
-  Header always set X-Content-Type-Options "nosniff"
-  Header always set X-Frame-Options "sameorigin"
-  Header always set Referrer-Policy "no-referrer"
-  # Header always set X-Xss-Protection "1; mode=block"
-  Header always set X-Xss-Protection "1"
+  Header always setifempty X-Content-Type-Options "nosniff"
+  Header always setifempty X-Frame-Options "sameorigin"
+  Header always setifempty Referrer-Policy "no-referrer"
+  # Header always setifempty X-Xss-Protection "1; mode=block"
+  Header always setifempty X-Xss-Protection "1"
 </IfModule>