Update web conf (#1138)

_example/etc/manager-apache2.4.conf

@@ -9,6 +9,9 @@
 <VirtualHost __VHOSTLISTEN__>
     ServerName manager.__DNSDOMAIN__
     LogLevel notice
+    <IfModule mod_headers.c>
+        header set Content-Security-Policy "default-src 'self';"
+    </IfModule>
     #ErrorLog ${APACHE_LOG_DIR}/lm_err.log
     #CustomLog ${APACHE_LOG_DIR}/lm.log combined
 

_example/etc/manager-apache2.X.conf

@@ -9,6 +9,9 @@
 <VirtualHost __VHOSTLISTEN__>
     ServerName manager.__DNSDOMAIN__
     LogLevel notice
+    <IfModule mod_headers.c>
+        header set Content-Security-Policy "default-src 'self';"
+    </IfModule>
     #ErrorLog ${APACHE_LOG_DIR}/lm_err.log
     #CustomLog ${APACHE_LOG_DIR}/lm.log combined
 

_example/etc/manager-apache2.conf

@@ -9,6 +9,9 @@
 <VirtualHost __VHOSTLISTEN__>
     ServerName manager.__DNSDOMAIN__
     LogLevel notice
+    <IfModule mod_headers.c>
+        header set Content-Security-Policy "default-src 'self';"
+    </IfModule>
     #ErrorLog ${APACHE_LOG_DIR}/lm_err.log
     #CustomLog ${APACHE_LOG_DIR}/lm.log combined
 

_example/etc/manager-nginx.conf

@@ -11,13 +11,14 @@ server {
     include /etc/nginx/fastcgi_params;
     fastcgi_pass unix:__FASTCGISOCKDIR__/llng-fastcgi.sock;
     fastcgi_param LLTYPE manager;
-    fastcgi_split_path_info ^(.*\.psgi)(/.+)$;
+    fastcgi_split_path_info ^(.*\.psgi)(/.*)$;
     fastcgi_param PATH_INFO  $fastcgi_path_info;
   }
 
   location / {
     index manager.psgi;
     try_files $uri $uri/ =404;
+    add_header Content-Security-Policy "default-src 'self';";
 
     # Uncomment this if you use https only
     #add_header Strict-Transport-Security "15768000";

_example/etc/portal-nginx.conf

@@ -12,7 +12,7 @@ server {
     fastcgi_pass unix:__FASTCGISOCKDIR__/llng-fastcgi.sock;
     fastcgi_param LLTYPE psgi;
     fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-    fastcgi_split_path_info ^(.*\.psgi)(/.+)$;
+    fastcgi_split_path_info ^(.*\.psgi)(/.*)$;
     fastcgi_param PATH_INFO  $fastcgi_path_info;
     # Uncomment this if you use Auth SSL:
     #map $ssl_client_s_dn  $ssl_client_s_dn_cn {

e2e-tests/nginx.conf

@@ -17,7 +17,7 @@ http {
 	types_hash_max_size 2048;
 	include /etc/nginx/mime.types;
 	default_type application/octet-stream;
-	error_log  conf/nginx.log debug;
+	error_log  conf/nginx.log info;
 	gzip off;
 	include conf/*nginx.conf;
 	access_log conf/nginx.log lm_combined;