Name : ea-nginx-brotli
| |
Version : 1.0
| Vendor : cPanel, Inc_
|
Release : 2.3.18.cpanel
| Date : 2024-02-21 13:16:57
|
Group : System Environment/Libraries
| Source RPM : ea-nginx-brotli-1.0-2.3.18.cpanel.src.rpm
|
Size : 0.00 MB
| |
Packager : (none)
| |
Summary : Enable brotli config for ea-nginx
|
Description :
Makes ea-nginx configure brotli compression.
per NGINX (http://nginx.org/en/docs/http/ngx_http_gzip_module.html): - When using the SSL/TLS protocol, compressed responses may be subject to BREACH attacks. - https://en.wikipedia.org/wiki/BREACH The best mitigation (besides not using compression at all) is: 1. Not sending sensitive data as part of your HTTP response 2. Use strict samesite cookies - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite
If that is not an acceptable risk please uninstall `ea-nginx-brotli`
|
RPM found in directory: /packages/linux-pbone/ftp5.gwdg.de/pub/opensuse/repositories/isv:/cpanel:/EA4/CentOS_8/x86_64 |