mirror of
https://github.com/nextcloud/documentation.git
synced 2026-01-04 18:56:02 +07:00
7f87872060
Co-authored-by: Joas Schilling <213943+nickvergessen@users.noreply.github.com> Signed-off-by: MichaIng <micha@dietpi.com>
17 lines
895 B
ReStructuredText
17 lines
895 B
ReStructuredText
=======================
|
|
Upgrade to Nextcloud 32
|
|
=======================
|
|
|
|
System requirements
|
|
-------------------
|
|
|
|
* PHP 8.1 is now deprecated but still supported.
|
|
* PHP 8.4 is now supported, but 8.3 is recommended.
|
|
|
|
Web server configuration
|
|
------------------------
|
|
|
|
* Setup checks do not check for the ``X-XSS-Protection`` response header anymore. It has been removed from Nextcloud's ``.htaccess`` and you may want to adjust your webserver config to not serve it anymore.
|
|
XSS filtering was supported only until Chromium 78 and similarly old browsers, but had been found to cause more issues, including attack vectors, than it solved.
|
|
Nowadays, aside of not serving the header at all, the only generally recommended value is ``0``. More context can be found in the `OWASP Cheat Sheet Series <https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-xss-protection>`_.
|