security message after upgrade to 9.5.17

Question

after upgrading to 9.5.17 i get in the reports the following security messages:

Server Response on static files:

www.mydomain.de/typo3temp/assets/43cd7         


        

Answer 1

Here is some Domainfactory speciality.

Mind the ForceType directive (set your specific PHP version there). If not used, its webserver would still use mimetype-sniffing.

To be used on the bottom of the newest .htaccess template (10.4, 9.5) which includes the strict handling for .svg[z]/.htm[l] already

# DomainFactory-special:
# 1) remove mimetype-sniffing anything for PHP
# 2) force PHP 7.3 mimetype on .php files

    RemoveType .php
    
        ForceType application/x-httpd-php73