Disable MultiViews in apache vhost

MultiView is used to switch the content according to the type map.
However this feature is not really used by the wsgi application of
OpenStack services.

This removes the option because this is sometimes regarded as
a security concern.

Change-Id: I41a8b242e6dfa4061fa0dc6912bda72e892e3da1
This commit is contained in:
Takashi Kajinami 2023-08-03 16:57:11 +09:00
parent a22990d4d5
commit 2741e73785
2 changed files with 2 additions and 2 deletions

View File

@ -391,7 +391,7 @@ define openstacklib::wsgi::apache (
error_log_pipe => $error_log_pipe,
error_log_syslog => $error_log_syslog,
log_level => $log_level,
options => ['-Indexes', '+FollowSymLinks','+MultiViews'],
options => ['-Indexes', '+FollowSymLinks'],
}
Package<| title == 'httpd' |>

View File

@ -79,7 +79,7 @@ describe 'openstacklib::wsgi::apache' do
:wsgi_script_aliases => { '/' => "/var/www/cgi-bin/keystone/main" },
:wsgi_application_group => '%{GLOBAL}',
:setenvif => ['X-Forwarded-Proto https HTTPS=1'],
:options => ['-Indexes', '+FollowSymLinks','+MultiViews'],
:options => ['-Indexes', '+FollowSymLinks'],
)}
it { should contain_concat("#{platform_params[:httpd_ports_file]}") }