freedomofpress/securedrop — pull request #199 by dolanjs (2013-12-04 19:59:36+00:00)
Title: Apache config headers and error page fixes

Fixes issue #107
Adds custom error pages all pointing to the /notfound page so the defined headers are sent for error pages

Adds Pragma, Expires, X-Content-Type, X-download, X-Content-Security policy, Content-Security-Policy headers to the source and document interface apache configs

Removes X-XSS-Protection header from apache configs