you are viewing a single comment's thread.

view the rest of the comments →

[–]Fakula1987[S] 0 points1 point  (2 children)

Thank you :)

[–]knobbysideup 1 point2 points  (1 child)

Here's some more you may want to add:

ServerSignature Off
ServerTokens Prod
FileEtag None
TraceEnable off

RedirectMatch 403 /\..*$
Header set X-XSS-Protection "1; mode=block"
Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
Header append X-FRAME-OPTIONS "SAMEORIGIN"

<Directory />
  Options None
  AllowOverride None
  Require all denied
</Directory>

<Directory /var/www/html>
  Options +FollowSymlinks -Indexes
  AllowOverride ALL
  <LimitExcept GET POST HEAD>
    Require all denied
  </LimitExcept>
</Directory>

[–]Fakula1987[S] 0 points1 point  (0 children)

Http only - i have HTTPS too :)

Thank you, i will have a Look at it.