zulip/tools/ci/success-http-headers.templa...

  Self-signed certificate encountered.
    WARNING: certificate common name ‘127.0.0.1’ doesn't match requested host name ‘localhost’.
  HTTP/1.1 302 Found
  Server: {nginx_version_string}
  Content-Type: text/html; charset=utf-8
  Content-Length: 0
  Connection: keep-alive
  Location: /login/
  Strict-Transport-Security: max-age=15768000
  X-Frame-Options: DENY
  X-Content-Type-Options: nosniff
  X-XSS-Protection: 1; mode=block
Location: /login/ [following]
Reusing existing connection to localhost:443.
  HTTP/1.1 200 OK
  Server: {nginx_version_string}
  Content-Type: text/html; charset=utf-8
  Content-Length: 6361
  Connection: keep-alive
  Strict-Transport-Security: max-age=15768000
  X-Frame-Options: DENY
  X-Content-Type-Options: nosniff
  X-XSS-Protection: 1; mode=block
Length: 6361 (6.2K) [text/html]
Saving to: ‘/tmp/index.html’
-												travis/production: Update expected HTTP output.

This changed with the recent consolidation of how we get a
self-signed cert in test installs.

											
										
										
											2018-01-24 19:58:37 +01:00
+								  Self-signed certificate encountered.
-												generate-self-signed-cert: Correct subjectAltName for an IP address.

Signed-off-by: Anders Kaseorg <anders@zulip.com>

											
										
										
											2020-06-27 02:27:32 +02:00
+								    WARNING: certificate common name ‘127.0.0.1’ doesn't match requested host name ‘localhost’.
-												Upgrade to the latest Django release, 1.10.4.

Most of the changes to support this were merged some time ago; what
remains are these changes:

* Update requirements.txt
* Django 1.10: Upgrade success-http-headers.txt file.

- We no longer get the absolute urls, see
  https://docs.djangoproject.com/en/1.10/releases/1.9/#http-redirects-no-longer-forced-to-absolute-uris
- The headers are capitalized, previously, they were in upper case.

* Bump PROVISON_VERSION to 3.0 since this is a disruptive change.

Fixes #3.

											
										
										
											2016-10-10 14:51:42 +02:00
+								  HTTP/1.1 302 Found
-												http_headers: Substitute Nginx version based on OS.

success-http-headers-bionic.txt and success-http-headers-focal.txt
differ only in the nginx version so this substitution will allow
us to have single file for both of them. Also this change helps
to avoid CI failure if Nginx version is updated in the OS.

											
										
										
											2020-07-04 13:17:27 +02:00
+								  Server: {nginx_version_string}
-												travis: Verify the server doesn't 500 in production test.

											
										
										
											2016-05-08 03:19:48 +02:00
+								  Content-Type: text/html; charset=utf-8
-												Django 1.11: Bump Django version to 1.11.

This commit also makes the following changes:

* Bumps the version of Django to 1.11.2.

* Fixes the HTTP response headers. Now CommonMiddleware sets Content-Length
  header for non-streaming response, see
  https://docs.djangoproject.com/en/1.11/ref/middleware/#module-django.middleware.common.
  Due to this, 'Transfer-Encoding: chunked' header is removed, which signifies
  a streaming response.

											
										
										
											2017-05-18 11:58:19 +02:00
+								  Content-Length: 0
-												travis: Verify the server doesn't 500 in production test.

											
										
										
											2016-05-08 03:19:48 +02:00
+								  Connection: keep-alive
-												Upgrade to the latest Django release, 1.10.4.

Most of the changes to support this were merged some time ago; what
remains are these changes:

* Update requirements.txt
* Django 1.10: Upgrade success-http-headers.txt file.

- We no longer get the absolute urls, see
  https://docs.djangoproject.com/en/1.10/releases/1.9/#http-redirects-no-longer-forced-to-absolute-uris
- The headers are capitalized, previously, they were in upper case.

* Bump PROVISON_VERSION to 3.0 since this is a disruptive change.

Fixes #3.

											
										
										
											2016-10-10 14:51:42 +02:00
+								  Location: /login/
-												travis: Verify the server doesn't 500 in production test.

											
										
										
											2016-05-08 03:19:48 +02:00
+								  Strict-Transport-Security: max-age=15768000
-												success-http-headers: Add X-Frame-Options.

											
										
										
											2018-05-30 18:41:50 +02:00
+								  X-Frame-Options: DENY
-												nginx: Set X-Content-Type-Options: nosniff globally.

Signed-off-by: Anders Kaseorg <anders@zulipchat.com>

											
										
										
											2020-04-04 01:56:25 +02:00
+								  X-Content-Type-Options: nosniff
-												nginx: Set X-XSS-Protection: 1; mode=block.

Signed-off-by: Anders Kaseorg <anders@zulipchat.com>

											
										
										
											2020-04-04 03:55:41 +02:00
+								  X-XSS-Protection: 1; mode=block
-												Upgrade to the latest Django release, 1.10.4.

Most of the changes to support this were merged some time ago; what
remains are these changes:

* Update requirements.txt
* Django 1.10: Upgrade success-http-headers.txt file.

- We no longer get the absolute urls, see
  https://docs.djangoproject.com/en/1.10/releases/1.9/#http-redirects-no-longer-forced-to-absolute-uris
- The headers are capitalized, previously, they were in upper case.

* Bump PROVISON_VERSION to 3.0 since this is a disruptive change.

Fixes #3.

											
										
										
											2016-10-10 14:51:42 +02:00
+								Location: /login/ [following]
-												travis: Verify the server doesn't 500 in production test.

											
										
										
											2016-05-08 03:19:48 +02:00
+								Reusing existing connection to localhost:443.
 								  HTTP/1.1 200 OK
-												http_headers: Substitute Nginx version based on OS.

success-http-headers-bionic.txt and success-http-headers-focal.txt
differ only in the nginx version so this substitution will allow
us to have single file for both of them. Also this change helps
to avoid CI failure if Nginx version is updated in the OS.

											
										
										
											2020-07-04 13:17:27 +02:00
+								  Server: {nginx_version_string}
-												travis: Verify the server doesn't 500 in production test.

											
										
										
											2016-05-08 03:19:48 +02:00
+								  Content-Type: text/html; charset=utf-8
-												Replace old portico footer with new sectioned one.

This replaces the old footer that has one section with a small list of
items. This expands the footer to have multiple sections.

Actual content tweaked and tagged for i18n by tabbott.

											
										
										
											2017-08-03 22:00:06 +02:00
+								  Content-Length: 6361
-												travis: Verify the server doesn't 500 in production test.

											
										
										
											2016-05-08 03:19:48 +02:00
+								  Connection: keep-alive
 								  Strict-Transport-Security: max-age=15768000
-												success-http-headers: Add X-Frame-Options.

											
										
										
											2018-05-30 18:41:50 +02:00
+								  X-Frame-Options: DENY
-												nginx: Set X-Content-Type-Options: nosniff globally.

Signed-off-by: Anders Kaseorg <anders@zulipchat.com>

											
										
										
											2020-04-04 01:56:25 +02:00
+								  X-Content-Type-Options: nosniff
-												nginx: Set X-XSS-Protection: 1; mode=block.

Signed-off-by: Anders Kaseorg <anders@zulipchat.com>

											
										
										
											2020-04-04 03:55:41 +02:00
+								  X-XSS-Protection: 1; mode=block
-												Replace old portico footer with new sectioned one.

This replaces the old footer that has one section with a small list of
items. This expands the footer to have multiple sections.

Actual content tweaked and tagged for i18n by tabbott.

											
										
										
											2017-08-03 22:00:06 +02:00
+								Length: 6361 (6.2K) [text/html]
-												travis: Verify the server doesn't 500 in production test.

											
										
										
											2016-05-08 03:19:48 +02:00
+								Saving to: ‘/tmp/index.html’