Related it issue #107
Adds custom error pages all pointing to the /notfound page so the defined headers are sent for error pages
Adds Pragma, Expires, X-Content-Type, X-download, X-Content-Security policy, Content-Security-Policy to apache configs
Removes X-XSS-Protection header from apache configs
changed `no-sniff` to `nosniff` thanks @Taipo issue #107
re-added x-xss-protection header
grouped the headers together
fixed caps

fixed caps
copied same comments from source.site to document.site
removed duplicate header
added pacing and comment
replace flawed commonprefix check with relpath

Adds a test (same PoC described in the audit)
tighten scope in store.verify
Merge pull request #237 from garrettr/feature/194/fix-imprecise-store-verify

Fixes #194
Merge pull request #199 from dolanjs/apache-headers-fix

Apache config headers and error page fixes. Closes #107, fixes #192
moved file/message saving logic to store.py for easier testing
closes #197 - sanitize filename using werkzeug.secure_filename in source.py
fixes from code review for #220
broke base.rules_v4 into separate files for each server
set uid and gid for users
added outbound iptables rules for the source/document groups
added missing tee -a build.log commands
updated file permissions/ownership to reflect uid/gid
took out the mysql database and replaced with sqlite
updated apparmor profiles for sqlite
Merge pull request #238 from dolanjs/iptables-outbound

Outbound Iptable rules and apparmor update. Fixes #193, fixes #203, fixes #224.