Disable MultiViews in apache vhost
MultiView is used to switch the content according to the type map. However this feature is not really used by the wsgi application of OpenStack services. This removes the option because this is sometimes regarded as a security concern. Change-Id: I41a8b242e6dfa4061fa0dc6912bda72e892e3da1
This commit is contained in:
@@ -391,7 +391,7 @@ define openstacklib::wsgi::apache (
|
||||
error_log_pipe => $error_log_pipe,
|
||||
error_log_syslog => $error_log_syslog,
|
||||
log_level => $log_level,
|
||||
options => ['-Indexes', '+FollowSymLinks','+MultiViews'],
|
||||
options => ['-Indexes', '+FollowSymLinks'],
|
||||
}
|
||||
|
||||
Package<| title == 'httpd' |>
|
||||
|
@@ -79,7 +79,7 @@ describe 'openstacklib::wsgi::apache' do
|
||||
:wsgi_script_aliases => { '/' => "/var/www/cgi-bin/keystone/main" },
|
||||
:wsgi_application_group => '%{GLOBAL}',
|
||||
:setenvif => ['X-Forwarded-Proto https HTTPS=1'],
|
||||
:options => ['-Indexes', '+FollowSymLinks','+MultiViews'],
|
||||
:options => ['-Indexes', '+FollowSymLinks'],
|
||||
)}
|
||||
|
||||
it { should contain_concat("#{platform_params[:httpd_ports_file]}") }
|
||||
|
Reference in New Issue
Block a user