From c79cafcecd12c28ff5dde5aca89a3fef8bdb349f Mon Sep 17 00:00:00 2001 From: Xaver Holzapfel Date: Wed, 23 Sep 2026 14:30:19 +0200 Subject: [PATCH 1/2] update default webserver response headers --- .../resources/de/bluecolored/bluemap/config/webserver.conf | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf b/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf index 67252e6ef..2a458ecb0 100644 --- a/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf +++ b/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf @@ -22,11 +22,10 @@ port: 8100 sse-enabled: true # Additional headers the webserver should include in the responses it sends. -# Default is none additional-headers: { - "Cache-Control": "public, max-age=86400" - "Cloudflare-CDN-Cache-Control": "max-age=60, stale-if-error=604800" - # "Content-Security-Policy": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; object-src 'none';" + "Cache-Control": "public, max-age=86400, stale-if-error=604800" + "CDN-Cache-Control": "max-age=60" + # "Content-Security-Policy": "default-src 'self'; connect-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; object-src 'none';" # "X-Frame-Options": "SAMEORIGIN" # "X-Content-Type-Options": "nosniff" # "Referrer-Policy": "strict-origin-when-cross-origin" From fc0f5304fb053fe951982d0e5d18aee9d766cfe8 Mon Sep 17 00:00:00 2001 From: Xaver Holzapfel Date: Wed, 23 Sep 2026 17:39:31 +0200 Subject: [PATCH 2/2] add default value comment again --- .../main/resources/de/bluecolored/bluemap/config/webserver.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf b/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf index 2a458ecb0..84b99b730 100644 --- a/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf +++ b/common/src/main/resources/de/bluecolored/bluemap/config/webserver.conf @@ -22,6 +22,7 @@ port: 8100 sse-enabled: true # Additional headers the webserver should include in the responses it sends. +# Default is none additional-headers: { "Cache-Control": "public, max-age=86400, stale-if-error=604800" "CDN-Cache-Control": "max-age=60"