I've found the problem. I have mod_headers and mod_pagespeed installed and active on my server. Even with core filters allowed, it messed up the .js files and so on because of minifying them. The solutions is to add the following code to /usr/local/softaculous/ispconfig/softaculous.conf:
Code
Header set Strict-Transport-Security "max-age=31536000"
Header set Referrer-Policy: "strict-origin"
Header set X-XSS-Protection: "1; mode=block"
Header set Strict-Transport-Security: "max-age=31536000; includeSubDomains; preload"
Header set X-Permitted-Cross-Domain-Policies: "none"
Header always set Feature-Policy: "fullscreen 'none'; microphone 'none'"
Header edit Set-Cookie: ^(.*)$ $1;HttpOnly;Secure
Header set Content-security-Policy: "default-src 'self'; img-src 'self' data: https://*.softaculous.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.softaculous.com; style-src 'self' 'unsafe-inline' data: ; font-src 'self' data: ;frame-src 'self' data: https://*.softaculous.com;"
ModPagespeedForbidFilters extend_cache
ModPagespeedForbidFilters remove_comments,collapse_whitespace
ModPagespeedForbidFilters convert_meta_tags
ModPagespeedForbidFilters prioritize_critical_css
ModPagespeedForbidFilters combine_css,combine_javascript,combine_heads
ModPagespeedForbidFilters inline_css,inline_javascript
ModPagespeedForbidFilters rewrite_javascript
ModPagespeedForbidFilters rewrite_style_attributes,rewrite_css
ModPagespeedForbidFilters move_css_to_head
ModPagespeedForbidFilters lazyload_images
Moreover, the included php_admin_values throw an error "invalid command" when restarting apache. Those directives should be wrapped with <ifmodule PHP> i.e. in the config file I have:
Code
AddType application/x-httpd-php .php .php3 .php4 .phtml
<IfModule mod_php7.c>
php_admin_value upload_tmp_dir /tmp
php_admin_value open_basedir /
php_admin_value include_path .:..
php_admin_value session.save_path /tmp
php_admin_value safe_mode off
</IfModule>
DirectoryIndex index.php
|
Powered By AEF 1.0.8 © 2007-2008 Electron Inc.
