Produced by Araxis Merge on 5/10/2018 8:27:21 AM Central Daylight Time. See www.araxis.com for information about Merge. This report uses XHTML and CSS2, and is best viewed with a modern standards-compliant browser. For optimum results when printing this report, use landscape orientation and enable printing of background images and colours in your browser.
# | Location | File | Last Modified |
---|---|---|---|
1 | OSCIF MHED P3 Annie.zip\cms-vet-app-release-v4.0.1@103ac3fb628.zip\PatientApp\app | .htaccess | Wed Mar 21 18:37:29 2018 UTC |
2 | OSCIF MHED P3 Annie.zip\cms-vet-app-release-v4.0.1@103ac3fb628.zip\PatientApp\app | .htaccess | Wed May 9 13:09:04 2018 UTC |
Description | Between Files 1 and 2 |
|
---|---|---|
Text Blocks | Lines | |
Unchanged | 9 | 1068 |
Changed | 8 | 18 |
Inserted | 0 | 0 |
Removed | 0 | 0 |
Whitespace | |
---|---|
Character case | Differences in character case are significant |
Line endings | Differences in line endings (CR and LF characters) are ignored |
CR/LF characters | Not shown in the comparison detail |
No regular expressions were active.
1 | # Apache C onfigurati on File | |
2 | ||
3 | # (!) Usin g `.htacce ss` files slows down Apache, t herefore, if you hav e access | |
4 | # to the m ain server config fi le (usuall y called ` httpd.conf `), you sh ould add | |
5 | # this log ic there: http://htt pd.apache. org/docs/c urrent/how to/htacces s.html. | |
6 | ||
7 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
8 | # # CROSS- ORIGIN RES OURCE SHAR ING (CORS) # | |
9 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
10 | ||
11 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
12 | # | Cross- domain AJA X requests | | |
13 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
14 | ||
15 | # Enable c ross-origi n AJAX req uests. | |
16 | # http://c ode.google .com/p/htm l5security /wiki/Cros sOriginReq uestSecuri ty | |
17 | # http://e nable-cors .org/ | |
18 | ||
19 | # <IfModul e mod_head ers.c> | |
20 | # Heade r set Acce ss-Control -Allow-Ori gin "*" | |
21 | # </IfModu le> | |
22 | ||
23 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
24 | # | CORS-e nabled ima ges | | |
25 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
26 | ||
27 | # Send the CORS head er for ima ges when b rowsers re quest it. | |
28 | # https:// developer. mozilla.or g/en/CORS_ Enabled_Im age | |
29 | # http://b log.chromi um.org/201 1/07/using -cross-dom ain-images -in-webgl- and.html | |
30 | # http://h acks.mozil la.org/201 1/11/using -cors-to-l oad-webgl- textures-f rom-cross- domain-ima ges/ | |
31 | ||
32 | #<IfModule mod_seten vif.c> | |
33 | # <IfMo dule mod_h eaders.c> | |
34 | # < FilesMatch "\.(gif|i co|jpe?g|p ng|svg|svg z|webp)$"> | |
35 | # SetEnvI f Origin " :" IS_CORS | |
36 | # Header set Access -Control-A llow-Origi n "*" env= IS_CORS | |
37 | # < /FilesMatc h> | |
38 | # </IfM odule> | |
39 | #</IfModul e> | |
40 | ||
41 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
42 | # | Web fo nts access | | |
43 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
44 | ||
45 | # Allow ac cess from all domain s for web fonts | |
46 | ||
47 | #<IfModule mod_heade rs.c> | |
48 | # <File sMatch "\. (eot|font. css|otf|tt c|ttf|woff )$"> | |
49 | # H eader set Access-Con trol-Allow -Origin "* " | |
50 | # </Fil esMatch> | |
51 | #</IfModul e> | |
52 | ||
53 | ||
54 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
55 | # # ERRORS # | |
56 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
57 | ||
58 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
59 | # | 404 er ror preven tion for n on-existin g redirect ed folders | | |
60 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
61 | ||
62 | # Prevent Apache fro m returnin g a 404 er ror for a rewrite if a directo ry | |
63 | # with the same name does not exist. | |
64 | # http://h ttpd.apach e.org/docs /current/c ontent-neg otiation.h tml#multiv iews | |
65 | # http://w ww.webmast erworld.co m/apache/3 808792.htm | |
66 | ||
67 | Options -M ultiViews | |
68 | ||
69 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
70 | # | Custom error mes sages / pa ges | | |
71 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
72 | ||
73 | # You can customize what Apach e returns to the cli ent in cas e of an er ror (see | |
74 | # http://h ttpd.apach e.org/docs /current/m od/core.ht ml#errordo cument), e .g.: | |
75 | ||
76 | ErrorDocum ent 404 /4 04.html | |
77 | ||
78 | ||
79 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
80 | # # INTERN ET EXPLORE R # | |
81 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
82 | ||
83 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
84 | # | Better website e xperience | | |
85 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
86 | ||
87 | # Force IE to render pages in the highes t availabl e mode in the variou s | |
88 | # cases wh en it may not: http: //hsivonen .iki.fi/do ctype/ie-m ode.pdf. | |
89 | ||
90 | <IfModule mod_header s.c> | |
91 | Header set X-UA- Compatible "IE=edge" | |
92 | # `mod _headers` can't matc h based on the conte nt-type, h owever, we only | |
93 | # want to send t his header for HTML pages and not for th e other re sources | |
94 | <Files Match "\.( appcache|c rx|css|eot |gif|htc|i co|jpe?g|j s|m4a|m4v| manifest|m p4|oex|oga |ogg|ogv|o tf|pdf|png |safariext z|svg|svgz |ttf|vcf|w ebapp|webm |webp|woff |xml|xpi)$ "> | |
95 | He ader unset X-UA-Comp atible | |
96 | </File sMatch> | |
97 | </IfModule > | |
98 | ||
99 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
100 | # | Cookie setting f rom iframe s | | |
101 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
102 | ||
103 | # Allow co okies to b e set from iframes i n IE. | |
104 | ||
105 | # <IfModul e mod_head ers.c> | |
106 | # Header set P3P " policyref= \"/w3c/p3p .xml\", CP =\"IDC DSP COR ADM D EVi TAIi P SA PSD IVA i IVDi CON i HIS OUR IND CNT\"" | |
107 | # </IfModu le> | |
108 | ||
109 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
110 | # | Screen flicker | | |
111 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
112 | ||
113 | # Stop scr een flicke r in IE on CSS rollo vers (this only work s in | |
114 | # combinat ion with t he `Expire sByType` d irectives for images from belo w). | |
115 | ||
116 | # BrowserM atch "MSIE " brokenva ry=1 | |
117 | # BrowserM atch "Mozi lla/4.[0-9 ]{2}" brok envary=1 | |
118 | # BrowserM atch "Oper a" !broken vary | |
119 | # SetEnvIf brokenvar y 1 force- no-vary | |
120 | ||
121 | ||
122 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
123 | # # MIME T YPES AND E NCODING # | |
124 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
125 | ||
126 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
127 | # | Proper MIME type s for all files | | |
128 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
129 | ||
130 | <IfModule mod_mime.c > | |
131 | ||
132 | # Audio | |
133 | AddTyp e audio/mp 4 m4a f4a f4b | |
134 | AddTyp e audio/og g oga ogg | |
135 | ||
136 | # Ja DN S ipt | |
137 | # Norm alize to s tandard ty pe (it's s niffed in IE anyways ): | |
138 | # http ://tools.i etf.org/ht ml/rfc4329 #section-7 .2 | |
139 | AddType ap plication/ ja DNS ipt js jsonp | |
140 | AddTyp e applicat ion/json json | |
141 | ||
142 | # Video | |
143 | AddTyp e video/mp 4 mp4 m4v f4v f4 p | |
144 | AddTyp e video/og g ogv | |
145 | AddTyp e video/we bm webm | |
146 | AddTyp e video/x- flv flv | |
147 | ||
148 | # Web fo nts | |
149 | AddTyp e applicat ion/font-w off woff | |
150 | AddTyp e applicat ion/vnd.ms -fontobjec t eot | |
151 | ||
152 | # Brow sers usual ly ignore the font M IME types and sniff the conten t, | |
153 | # howe ver, Chrom e shows a warning if other MIM E types ar e used for the | |
154 | # foll owing font s. | |
155 | AddTyp e applicat ion/x-font -ttf ttc ttf | |
156 | AddTyp e font/ope ntype otf | |
157 | ||
158 | # Make SVGZ font s work on iPad: | |
159 | # http s://twitte r.com/Font Squirrel/s tatus/1485 5840545 | |
160 | AddTyp e imag e/svg+xml svg svgz | |
161 | AddEnc oding gzip svgz | |
162 | ||
163 | # Other | |
164 | AddTyp e applicat ion/octet- stream safa riextz | |
165 | AddTyp e applicat ion/x-chro me-extensi on crx | |
166 | AddTyp e applicat ion/x-oper a-extensio n oex | |
167 | AddTyp e applicat ion/x-shoc kwave-flas h swf | |
168 | AddTyp e applicat ion/x-web- app-manife st+json weba pp | |
169 | AddTyp e applicat ion/x-xpin stall xpi | |
170 | AddTyp e applicat ion/xml atom rdf rss x ml | |
171 | AddTyp e image/we bp webp | |
172 | AddTyp e image/x- icon ico | |
173 | AddTyp e text/cac he-manifes t appc ache manif est | |
174 | AddTyp e text/vtt vtt | |
175 | AddTyp e text/x-c omponent htc | |
176 | AddTyp e text/x-v card vcf | |
177 | ||
178 | </IfModule > | |
179 | ||
180 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
181 | # | UTF-8 encoding | | |
182 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
183 | ||
184 | # Use UTF- 8 encoding for anyth ing served as `text/ html` or ` text/plain `. | |
185 | AddDefault Charset ut f-8 | |
186 | ||
187 | # Force UT F-8 for ce rtain file formats. | |
188 | <IfModule mod_mime.c > | |
189 | AddCha rset utf-8 .atom .cs s .js .jso n .rss .vt t .webapp .xml | |
190 | </IfModule > | |
191 | ||
192 | ||
193 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
194 | # # URL RE WRITES # | |
195 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
196 | ||
197 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
198 | # | Rewrit e engine | | |
199 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
200 | ||
201 | # Turning on the rew rite engin e and enab ling the ` FollowSymL inks` opti on is | |
202 | # necessar y for the following directives to work. | |
203 | ||
204 | # If your web host d oesn't all ow the `Fo llowSymlin ks` option , you may need to | |
205 | # comment it out and use `Opti ons +SymLi nksIfOwner Match` but , be aware of the | |
206 | # perf DNS e impact: http://htt pd.apache. org/docs/c urrent/mis c/perf-tun ing.html#s ymlinks | |
207 | ||
208 | # Also, so me cloud h osting ser vices requ ire `Rewri teBase` to be set: | |
209 | # http://w ww.rackspa ce.com/kno wledge_cen ter/freque ntly-asked -question/ why-is-mod -rewrite-n ot-working -on-my-sit e | |
210 | ||
211 | <IfModule mod_rewrit e.c> | |
212 | Option s +FollowS ymlinks | |
213 | # Option s +SymLink sIfOwnerMa tch | |
214 | Rewrit eEngine On | |
215 | # Rewrit eBase / | |
216 | </IfModule > | |
217 | ||
218 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
219 | # | Suppre ssing / Fo rcing the "www." at the beginn ing of URL s | | |
220 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
221 | ||
222 | # The same content s hould neve r be avail able under two diffe rent URLs especially | |
223 | # not with and witho ut "www." at the beg inning. Th is can cau se SEO pro blems | |
224 | # (duplica te content ), therefo re, you sh ould choos e one of t he alterna tives and | |
225 | # redirect the other one. | |
226 | ||
227 | # By defau lt option 1 (no "www .") is act ivated: | |
228 | # http://n o-www.org/ faq.php?q= class_b | |
229 | ||
230 | # If you'd prefer to use optio n 2, just comment ou t all the lines from option 1 | |
231 | # and unco mment the ones from option 2. | |
232 | ||
233 | # IMPORTAN T: NEVER U SE BOTH RU LES AT THE SAME TIME ! | |
234 | ||
235 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | |
236 | ||
237 | # Option 1 : rewrite www.exampl e.com → example.co m | |
238 | ||
239 | <IfModule mod_rewrit e.c> | |
240 | Rewrit eCond %{HT TPS} !=on | |
241 | Rewrit eCond %{HT TP_HOST} ^ www\.(.+)$ [NC] | |
242 | Rewrit eRule ^ ht tp://%1%{R EQUEST_URI } [R=301,L ] | |
243 | </IfModule > | |
244 | ||
245 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | |
246 | ||
247 | # Option 2 : rewrite example.co m → www. example.co m | |
248 | ||
249 | # Be aware that the following might not be a good idea if yo u use "rea l" | |
250 | # subdomai ns for cer tain parts of your w ebsite. | |
251 | ||
252 | # <IfModul e mod_rewr ite.c> | |
253 | # Rewri teCond %{H TTPS} !=on | |
254 | # Rewri teCond %{H TTP_HOST} !^www\..+$ [NC] | |
255 | # Rewri teRule ^ h ttp://www. %{HTTP_HOS T}%{REQUES T_URI} [R= 301,L] | |
256 | # </IfModu le> | |
257 | ||
258 | ||
259 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
260 | # # SECURI TY # | |
261 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
262 | ||
263 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
264 | # | Conten t Security Policy (C SP) | | |
265 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
266 | ||
267 | # You can mitigate t he risk of cross-sit e scriptin g and othe r content- injection | |
268 | # attacks by setting a Content Security Policy whi ch whiteli sts truste d sources | |
269 | # of conte nt for you r site. | |
270 | ||
271 | # The exam ple header below all ows ONLY s cripts tha t are load ed from th e current | |
272 | # site's o rigin (no inline scr ipts, no C DN, etc). This almos t certainl y won't | |
273 | # work as- is for you r site! | |
274 | ||
275 | # To get a ll the det ails you'l l need to craft a re asonable p olicy for your site, | |
276 | # read: ht tp://html5 rocks.com/ en/tutoria ls/securit y/content- security-p olicy (or | |
277 | # see the specificat ion: http: //w3.org/T R/CSP). | |
278 | ||
279 | # <IfModul e mod_head ers.c> | |
280 | # Heade r set Cont ent-Securi ty-Policy "script-sr c 'self'; object-src 'self'" | |
281 | # <File sMatch "\. (appcache| crx|css|eo t|gif|htc| ico|jpe?g| js|m4a|m4v |manifest| mp4|oex|og a|ogg|ogv| otf|pdf|pn g|safariex tz|svg|svg z|ttf|vcf| webapp|web m|webp|wof f|xml|xpi) $"> | |
282 | # H eader unse t Content- Security-P olicy | |
283 | # </Fil esMatch> | |
284 | # </IfModu le> | |
285 | ||
286 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
287 | # | File a ccess | | |
288 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
289 | ||
290 | # Block ac cess to di rectories without a default do cument. | |
291 | # Usually you should leave thi s uncommen ted becaus e you shou ldn't allo w anyone | |
292 | # to surf through ev ery direct ory on you r server ( which may includes r ather | |
293 | # private places lik e the CMS' s director ies). | |
294 | ||
295 | <IfModule mod_autoin dex.c> | |
296 | Option s -Indexes | |
297 | </IfModule > | |
298 | ||
299 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | |
300 | ||
301 | # Block ac cess to hi dden files and direc tories. | |
302 | # This inc ludes dire ctories us ed by vers ion contro l systems such as Gi t and SVN. | |
303 | ||
304 | <IfModule mod_rewrit e.c> | |
305 | Rewrit eCond %{SC RIPT_FILEN AME} -d [O R] | |
306 | Rewrit eCond %{SC RIPT_FILEN AME} -f | |
307 | Rewrit eRule "(^| /)\." - [F ] | |
308 | </IfModule > | |
309 | ||
310 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | |
311 | ||
312 | # Block ac cess to ba ckup and s ource file s. | |
313 | # These fi les may be left by s ome text e ditors and can pose a great se curity | |
314 | # danger w hen anyone has acces s to them. | |
315 | ||
316 | <FilesMatc h "(^#.*#| \.(bak|con fig|dist|f la|inc|ini |log|psd|s h|sql|sw[o p])|~)$"> | |
317 | Order allow,deny | |
318 | Deny f rom all | |
319 | Satisf y All | |
320 | </FilesMat ch> | |
321 | ||
322 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
323 | # | Secure Sockets L ayer (SSL) | | |
324 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
325 | ||
326 | # Rewrite secure req uests prop erly to pr event SSL certificat e warnings , e.g.: | |
327 | # prevent `https://w ww.example .com` when your cert ificate on ly allows | |
328 | # `https:/ /secure.ex ample.com` . | |
329 | ||
330 | # <IfModul e mod_rewr ite.c> | |
331 | # Rewri teCond %{S ERVER_PORT } !^443 | |
332 | # Rewri teRule ^ h ttps://exa mple-domai n-please-c hange-me.c om%{REQUES T_URI} [R= 301,L] | |
333 | # </IfModu le> | |
334 | ||
335 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | |
336 | ||
337 | # Force cl ient-side SSL redire ction. | |
338 | ||
339 | # If a use r types "e xample.com " in his b rowser, th e above ru le will re direct him | |
340 | # to the s ecure vers ion of the site. Tha t still le aves a win dow of opp ortunity | |
341 | # (the ini tial HTTP connection ) for an a ttacker to downgrade or redire ct the | |
342 | # request. The follo wing heade r ensures that brows er will ON LY connect to your | |
343 | # server v ia HTTPS, regardless of what t he users t ype in the address b ar. | |
344 | # http://w ww.html5ro cks.com/en /tutorials /security/ transport- layer-secu rity/ | |
345 | ||
346 | # <IfModul e mod_head ers.c> | |
347 | # Heade r set Stri ct-Transpo rt-Securit y max-age= 16070400; | |
348 | # </IfModu le> | |
349 | ||
350 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
351 | # | Server software informatio n | | |
352 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
353 | ||
354 | # Avoid di splaying t he exact A pache vers ion number , the desc ription of the | |
355 | # generic OS-type an d the info rmation ab out Apache 's compile d-in modul es. | |
356 | ||
357 | # ADD THIS DIRECTIVE IN THE `h ttpd.conf` AS IT WIL L NOT WORK IN THE `. htaccess`! | |
358 | ||
359 | # ServerTo kens Prod | |
360 | ||
361 | ||
362 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
363 | # # WEB PE RF D N S E # | |
364 | # ######## ########## ########## ########## ########## ########## ########## ########## | |
365 | ||
366 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
367 | # | Compre ssion | | |
368 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
369 | ||
370 | <IfModule mod_deflat e.c> | |
371 | ||
372 | # Forc e compress ion for ma ngled head ers. | |
373 | # http ://develop er.yahoo.c om/blogs/y dn/posts/2 010/12/pus hing-beyon d-gzipping | |
374 | <IfMod ule mod_se tenvif.c> | |
375 | <I fModule mo d_headers. c> | |
376 | SetEnvIf NoCase ^(A ccept-Enco dXng|X-cep t-Encoding |X{15}|~{1 5}|-{15})$ ^((gzip|d eflate)\s* ,?\s*)+|[X ~-]{4,13}$ HAVE_Acce pt-Encodin g | |
377 | RequestH eader appe nd Accept- Encoding " gzip,defla te" env=HA VE_Accept- Encoding | |
378 | </ IfModule> | |
379 | </IfMo dule> | |
380 | ||
381 | # Comp ress all o utput labe led with o ne of the following MIME-types | |
382 | # (for Apache ve rsions bel ow 2.3.7, you don't need to en able `mod_ filter` | |
383 | # and can remov e the `<If Module mod _filter.c> ` and `</I fModule>` lines | |
384 | # as `AddOutput FilterByTy pe` is sti ll in the core direc tives). | |
385 | <IfMod ule mod_fi lter.c> | |
386 | Ad dOutputFil terByType DEFLATE ap plication/ atom+xml \ | |
387 | applicatio n/ja DNS ipt \ | |
388 | ap plication/ json \ | |
389 | ap plication/ rss+xml \ | |
390 | ap plication/ vnd.ms-fon tobject \ | |
391 | ap plication/ x-font-ttf \ | |
392 | ap plication/ x-web-app- manifest+j son \ | |
393 | ap plication/ xhtml+xml \ | |
394 | ap plication/ xml \ | |
395 | fo nt/opentyp e \ | |
396 | im age/svg+xm l \ | |
397 | im age/x-icon \ | |
398 | te xt/css \ | |
399 | te xt/html \ | |
400 | te xt/plain \ | |
401 | te xt/x-compo nent \ | |
402 | te xt/xml | |
403 | </IfMo dule> | |
404 | ||
405 | </IfModule > | |
406 | ||
407 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
408 | # | Conten t transfor mations | | |
409 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
410 | ||
411 | # Prevent some of th e mobile n etwork pro viders fro m modifyin g the cont ent of | |
412 | # your sit e: http:// www.w3.org /Protocols /rfc2616/r fc2616-sec 14.html#se c14.9.5. | |
413 | ||
414 | # <IfModul e mod_head ers.c> | |
415 | # Heade r set Cach e-Control "no-transf orm" | |
416 | # </IfModu le> | |
417 | ||
418 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
419 | # | ETag r emoval | | |
420 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
421 | ||
422 | # Since we 're sendin g far-futu re expires headers ( see below) , ETags ca n | |
423 | # be remov ed: http:/ /developer .yahoo.com /perf DNS e/rules.ht ml#etags. | |
424 | ||
425 | # `FileETa g None` is not enoug h for ever y server. | |
426 | <IfModule mod_header s.c> | |
427 | Header unset ETa g | |
428 | </IfModule > | |
429 | ||
430 | FileETag N one | |
431 | ||
432 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
433 | # | Expire s headers (for bette r cache co ntrol) | | |
434 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
435 | ||
436 | # The foll owing expi res header s are set pretty far in the fu ture. If y ou don't | |
437 | # control versioning with file name-based cache bus ting, cons ider lower ing the | |
438 | # cache ti me for res ources lik e CSS and JS to some thing like 1 week. | |
439 | ||
440 | <IfModule mod_expire s.c> | |
441 | ||
442 | Expire sActive on | |
443 | Expire sDefault "acc ess plus 1 month" | |
444 | ||
445 | # CSS | |
446 | Expire sByType te xt/css "acc ess plus 1 year" | |
447 | ||
448 | # Data i nterchange | |
449 | Expire sByType ap plication/ json "acc ess plus 0 seconds" | |
450 | Expire sByType ap plication/ xml "acc ess plus 0 seconds" | |
451 | Expire sByType te xt/xml "acc ess plus 0 seconds" | |
452 | ||
453 | # Favico n (cannot be renamed !) | |
454 | Expire sByType im age/x-icon "acc ess plus 1 week" | |
455 | ||
456 | # HTML c omponents (HTCs) | |
457 | Expire sByType te xt/x-compo nent "acc ess plus 1 month" | |
458 | ||
459 | # HTML | |
460 | Expire sByType te xt/html "acc ess plus 0 seconds" | |
461 | ||
462 | # Ja DN S ipt | |
463 | ExpiresByT ype applic ation/ja DNS ipt "access pl us 1 year" | |
464 | ||
465 | # Manife st files | |
466 | Expire sByType ap plication/ x-web-app- manifest+j son "acc ess plus 0 seconds" | |
467 | Expire sByType te xt/cache-m anifest "acc ess plus 0 seconds" | |
468 | ||
469 | # Media | |
470 | Expire sByType au dio/ogg "acc ess plus 1 month" | |
471 | Expire sByType im age/gif "acc ess plus 1 month" | |
472 | Expire sByType im age/jpeg "acc ess plus 1 month" | |
473 | Expire sByType im age/png "acc ess plus 1 month" | |
474 | Expire sByType vi deo/mp4 "acc ess plus 1 month" | |
475 | Expire sByType vi deo/ogg "acc ess plus 1 month" | |
476 | Expire sByType vi deo/webm "acc ess plus 1 month" | |
477 | ||
478 | # Web fe eds | |
479 | Expire sByType ap plication/ atom+xml "acc ess plus 1 hour" | |
480 | Expire sByType ap plication/ rss+xml "acc ess plus 1 hour" | |
481 | ||
482 | # Web fo nts | |
483 | Expire sByType ap plication/ font-woff "acc ess plus 1 month" | |
484 | Expire sByType ap plication/ vnd.ms-fon tobject "acc ess plus 1 month" | |
485 | Expire sByType ap plication/ x-font-ttf "acc ess plus 1 month" | |
486 | Expire sByType fo nt/opentyp e "acc ess plus 1 month" | |
487 | Expire sByType im age/svg+xm l "acc ess plus 1 month" | |
488 | ||
489 | </IfModule > | |
490 | ||
491 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
492 | # | Filena me-based c ache busti ng | | |
493 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
494 | ||
495 | # If you'r e not usin g a build process to manage yo ur filenam e version revving, | |
496 | # you migh t want to consider e nabling th e followin g directiv es to rout e all | |
497 | # requests such as ` /css/style .12345.css ` to `/css /style.css `. | |
498 | ||
499 | # To under stand why this is im portant an d a better idea than `*.css?v2 31`, read: | |
500 | # http://s tevesouder s.com/blog /2008/08/2 3/revving- filenames- dont-use-q uerystring | |
501 | ||
502 | # <IfModul e mod_rewr ite.c> | |
503 | # Rewri teCond %{R EQUEST_FIL ENAME} !-f | |
504 | # Rewri teCond %{R EQUEST_FIL ENAME} !-d | |
505 | # Rewri teRule ^(. +)\.(\d+)\ .(js|css|p ng|jpg|gif )$ $1.$3 [ L] | |
506 | # </IfModu le> | |
507 | ||
508 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
509 | # | File c oncatenati on | | |
510 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
511 | ||
512 | # Allow co ncatenatio n from wit hin specif ic CSS and JS files, e.g.: | |
513 | # Inside o f `script. combined.j s` you cou ld have | |
514 | # <!--#i nclude fil e="libs/jq uery.js" - -> | |
515 | # <!--#i nclude fil e="plugins /jquery.id letimer.js " --> | |
516 | # and they would be included i nto this s ingle file . | |
517 | ||
518 | # <IfModul e mod_incl ude.c> | |
519 | # <File sMatch "\. combined\. js$"> | |
520 | # O ptions +In cludes | |
521 | # AddOutputF ilterByTyp e INCLUDES applicati on/ja DNS ipt applic ation/json | |
522 | # S etOutputFi lter INCLU DES | |
523 | # </Fil esMatch> | |
524 | # <File sMatch "\. combined\. css$"> | |
525 | # O ptions +In cludes | |
526 | # A ddOutputFi lterByType INCLUDES text/css | |
527 | # S etOutputFi lter INCLU DES | |
528 | # </Fil esMatch> | |
529 | # </IfModu le> | |
530 | ||
531 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
532 | # | Persis tent conne ctions | | |
533 | # -------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- | |
534 | ||
535 | # Allow mu ltiple req uests to b e sent ove r the same TCP conne ction: | |
536 | # http://h ttpd.apach e.org/docs /current/e n/mod/core .html#keep alive. | |
537 | ||
538 | # Enable i f you serv e a lot of static co ntent but, be aware of the | |
539 | # possible disadvant ages! | |
540 | ||
541 | # <IfModul e mod_head ers.c> | |
542 | # Heade r set Conn ection Kee p-Alive | |
543 | # </IfModu le> |
Araxis Merge (but not the data content of this report) is Copyright © 1993-2016 Araxis Ltd (www.araxis.com). All rights reserved.