- Update the web app manifest file related configs [e603554].
- Remove the mapping of
.manifestfiles to thetext/cache-manifestmedia type [c805353]. - Remove the mapping of
.phpfiles to thetext/htmlmedia type [daab35b].
- Add
ServerSignature Off[#58]. - Change media types for
.atomand.rssfiles [#50]. - Send the HSTS header even for non-2xx responses [#57].
- Add configs that remove the
X-Powered-ByHTTP response header [#54]. - Add expires rules for WebP [#61].
- Add configs for common media types used for
.wofffiles [e602ae9]. - Add configs for files marked as
text/x-cross-domain-policy[a0c4e17]. - Add configs for files marked as
image/vnd.microsoft.icon[0ba37cb]. - Add configs for files marked as
font/eot[6dae5d4].
- Add
bower.jsonand publish onBower[3425f72]. - Improve inline comments.
- Add configs for files marked as
application/x-javascript[23793d8]. - Add configs for bitmap image files (
.bmp) [77ccf9e]. - Compress vCard files (
.vcard/.vcf). [a076635]. - Serve vCard files (
.vcard/.vcf) with thetext/vcardmedia type [104f232]. - Add configs for BlackBerry Maps location documents (
.xloc) [20000d1]. - Add configs for BlackBerry App World files (
.bbaw) [352fb62].
- Update example regarding forcing
https://[060b70c].
- Improve configs for
.rdffiles [742d148]. - Add example on how to allow cross-origin access to the resource's timing information [3df6768].
- Add configs for files marked as
text/javascript[db69327]. - Add configs for JSON Schema files (
.json) [#39].
- Update
package.jsonand publish onnpm[#33].
- Add configs for TopoJSON files (
.topojson) [#34].
- Add configs for WOFF 2.0 font files (
.woff2) [#32]. - Add configs for GeoJSON files (
.geojson) [16d3965].
- Compress cache manifest files (
.appcache/.manifest) [d819fec]. - Move all compression related configs under the
Compressionsection [73a107e].
- Improve and update inline comments.
- Add configs for web application manifest files [#29].
- Allow access to the content from within the
/.well-known/directory [#31]. - Forbid access to
.conffiles. - Add the
no-transformvalue to theCache-ControlHTTP response header without overwriting existing values. - Add
cur,ico,svg,svgzandwebpto the filename-based cache busting list. - Add configs for text files (
.txt) [b5bda65]. - Compress WebVTT files (
.vtt) [0bb12c8]. - Reintroduce the
filename extensiontocontent typemappings foricoandsvg[#28].
- Send
X-Content-Type-Optionsheader by default [edd912d].
- Remove example regarding
persistent connections[#20]. - Improve the
<FilesMatch>regular expressions. - Add configs for JSON-LD (JSON for Linking Data) files [#17].
- Serve source map files with the
application/jsoncontent-type [7d114e8]. - Make
RewriteConds forexample.com → www.example.commore permissive [#11]. - Add configs for Ogg Opus audio files [#13].
- Add example on how to mitigate reflected (a.k.a non-persistent) XSS attacks [#8].
- Add example on how to provide clickjacking protection [#8].
- Add example on how to reduce MIME type security risks [#8].
- Add configs for cursor images (
.cur) [a795fff]. - Fix backup and source file blocking for Apache v2.3+ [#5].
- Remove filename extension to content type mappings that are already provided by Apache v2.2.0+ [#4].
- Improve inline comments.
- Remove
screen flickerfix required by IE 6 [#3].
- Remove Chrome Frame HTTP header hint.