Skip to content

Commit 6b11236

Browse files
committed
Remove mod_log_forensic from apache::default_mods (#2573)
mod_log_forensic should not be included by default, as the module has security implications and might leak sensitive information from headers incl. passwords. Upstream documentation also warns about this: https://httpd.apache.org/docs/2.4/mod/mod_log_forensic.html#security
1 parent 1b27ead commit 6b11236

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

manifests/default_mods.pp

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,6 @@
120120
include apache::mod::negotiation
121121
include apache::mod::setenvif
122122
include apache::mod::auth_basic
123-
include apache::mod::log_forensic
124123

125124
# filter is needed by mod_deflate
126125
include apache::mod::filter

0 commit comments

Comments
 (0)