Robert Muir 55b77358cf SOLR-13982: set security-related http response headers by default ...

Unfortunately, as a first start this is very weak protection against
e.g. XSS.  This is because some 'unsafe-xxx' rules must be present due
to the insecurity of angular JS: Until SOLR-13987 is fixed, XSS & co are
still easy.

2019-12-03 06:18:11 -05:00

..

jetty-http.xml

Merge jira/http2 branch to master

2018-12-16 16:58:20 +00:00

jetty-https8.xml

Merge jira/http2 branch to master

2018-12-16 16:58:20 +00:00

jetty-https.xml

Merge jira/http2 branch to master

2018-12-16 16:58:20 +00:00

jetty-ssl.xml

SOLR-13798: SSL: Adding Enabling/Disabling client's hostname verification config

2019-09-30 16:31:11 +01:00

jetty.xml

SOLR-13982: set security-related http response headers by default

2019-12-03 06:18:11 -05:00

webdefault.xml

SOLR-13409: Disable HTML directory listings in admin interface to prevent possible security issues

2019-04-17 11:05:24 +02:00