Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Apache configuration related security fixes. Details in commit. #48

Open
wants to merge 4 commits into
base: release-0.93
Choose a base branch
from
Open

Apache configuration related security fixes. Details in commit. #48

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
edc4fe3
Apache sets up README by putting auto indexing. This is mis-construed…
petmongrels May 20, 2021
41333ae
disable CSRF on all bahmni applications by making the SameSite strict
petmongrels Jun 2, 2021
1242fb6
Replace Location header field in response with https corresponding va…
petmongrels Jun 11, 2021
23e1e06
The recommended Security headers
petmongrels Jun 22, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions bahmni-web/resources/ssl.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -109,6 +109,12 @@ SSLCryptoDevice builtin

</IfModule>

Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure;SameSite=Strict
Header edit Location ^http://(.*)$ https://$1
RequestHeader unset Referer
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
Header always set X-Frame-Options "deny"

##
## SSL Virtual Host Context
##
Expand Down
5 changes: 5 additions & 0 deletions bahmni-web/scripts/postinstall.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -89,11 +89,16 @@ setupOfflineMetadata(){
ln -s /opt/bahmni-web/etc/offlineMetadata.json /var/www/html/offlineMetadata.json
}

removeAutoIndexConf(){
mv /etc/httpd/conf.d/autoindex.conf /tmp/
}

setupConfFiles
setupCacheDir
setupClientSideLogging
setupApps
setupOfflineMetadata
removeAutoIndexConf

if [[ "${IMPLEMENTATION_NAME:-default}" = "default" ]]; then
setupConfigs
Expand Down