|
|
|
|
|
|
by JshWright
4642 days ago
|
|
|
> * gzip off; - Explicitly disable gzip compression to avoid BREACH[3] You don't have to disable gzip entirely. Just on any URLs where an attacker could influence the contents of the response. If you serve all your static assets out of their own location block, feel free to enable gzip there. |
|
|