Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add header X-Content-Type-Options: nosniff #10734

Closed
nico3333fr opened this issue Oct 13, 2016 · 2 comments
Closed

Add header X-Content-Type-Options: nosniff #10734

nico3333fr opened this issue Oct 13, 2016 · 2 comments
Labels
answered For when a question was asked and we referred to forum or answered it.

Comments

@nico3333fr
Copy link
Contributor

Hi there,

first of all, thanks for your work, it is the first time I self-host a Piwik for a website, it works very well. 馃憤

I've tested this website with Dareboost service and I got this message: https://www.dareboost.com/en/report/57ff4d3e0cf296dad130c6db

On this page, you should configure the following resource, that risks being misinterpreted:
van11y.net/piwik/piwik.php?action_name=Van11y%3A[...]1&res=1920x3000>_ms=90

I was able to fix it easily by adding a :

header('X-Content-Type-Options: nosniff');

at the top of piwik.php. Might not be perfect, but does the job.

Each time Piwik updates itself, this modification is removed. Could it be possible to fix it definitively by this method or another?

Kind regards,
Nicolas

@p-blomberg
Copy link

You can add the header in your web server configuration instead of doing it in piwik.
If you are using apache, check out the Header directive.

@nico3333fr
Copy link
Contributor Author

Sorry, I though it was parametrable in Piwik.

@mattab mattab added the answered For when a question was asked and we referred to forum or answered it. label Oct 26, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
answered For when a question was asked and we referred to forum or answered it.
Projects
None yet
Development

No branches or pull requests

3 participants