]> git.proxmox.com Git - pve-http-server.git/commit - src/PVE/APIServer/AnyEvent.pm
Add configurable 'compression'
authorStoiko Ivanov <s.ivanov@proxmox.com>
Fri, 15 Feb 2019 11:36:00 +0000 (12:36 +0100)
committerThomas Lamprecht <t.lamprecht@proxmox.com>
Tue, 19 Feb 2019 16:14:14 +0000 (17:14 +0100)
commit23dfd1b7c9c33ef78e551ac87edca7160711c03d
treec2f5bada27a7f51a264da2f4fd2786233afd610c
parent54c0ead9164365ee49b0931d5b6226b4b1a3e24c
Add configurable 'compression'

Rationale for disabling compression is the potential for being affected by
the BREACH (CVE-2013-3587) attack and it's considered good practice for https
configuration (see e.g. [0]).

The default remains: to have compression enabled for compressible file-types.

[0] https://cipherli.st/

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
PVE/APIServer/AnyEvent.pm