LayLow
(HF)
December 13, 2018, 6:41am
1
I just updated NS7, which included NC14.0.4. Now NC reports:
The admin manual says ‘no-referer’ is hardcoded and in effect by default
Any suggestions on what I can do, or is this an oversight in the RPM, or something else?
TIA
ps. found a hint, but I wonder what is the root cause…
apachectl -M shows the required modules are loaded:
and the NC .htaccess file has:
dnutan
(Marc)
December 14, 2018, 10:20am
2
It seems caused by having the Referrer-Policy header send twice (duplicated): one in the default vhost and another one in .htaccess
Cannot check it right now, but commenting one of them should suffice. For instance, commenting the line from vhost:
Related:
/cc. @alep
4 Likes
LayLow
(HF)
December 14, 2018, 11:21am
3
Spot on. I commented it out in the .htaccess file and the warning is no longer there:
Thanks!
dnutan
(Marc)
December 14, 2018, 12:06pm
4
IIRC the .htaccess comes from nextcloud package, therefore next update could bring back the issue, so maybe a fix is needed on our (nethserver) part. Let’s give some time to the developers to take a look at it.
3 Likes
LayLow
(HF)
December 14, 2018, 12:07pm
5
Understand (quick test) and agree.
alep
(Alessandro Polidori)
December 14, 2018, 4:01pm
6
It is correct, I have the same results.
The Referrer-Policy
header was introduced with upgrade to 14.0.0 version.
The warning has appeared on 14.0.0 version and the set of Apache HTTP header added by nethserver-nextcloud
fixed the warning until the new version 14.0.4.
Because now the header is present into the .htaccess
(by nextcloud rpm) I think it should be removed from nethserver-nextcloud httpd template (as @dnutan said).
alep
(Alessandro Polidori)
December 18, 2018, 9:53am
7
As explained here Nextcloud 15 available new Nextcloud 15 is in testing and also this warning should be resolved.
1 Like
alep
(Alessandro Polidori)
December 18, 2018, 11:16am
8
@LayLow could you confirm this ?
LayLow
(HF)
December 18, 2018, 11:38am
9
@alep , I can test in 6 hours or so.
HTH
1 Like
LayLow
(HF)
December 20, 2018, 6:40am
10
Sorry for the delay, yes I can confirm that the ‘referrer’ issue is no longer present.
Many thanks!
2 Likes
alep
(Alessandro Polidori)
December 20, 2018, 11:05am
11
After some successful test we have released the final version https://github.com/NethServer/dev/issues/5674
Happy nextcloud !
3 Likes
LayLow
(HF)
December 21, 2018, 7:22am
12
Upgrade from 14.0.4 to 15.0 went just fine. Many thanks!
1 Like