AddDefaultCharset
AddDefaultCharset On|Off|charset AddDefaultCharset is only available in Apache 1.3.12 and later.
This directive specifies the name of the character set that will be
added to any response that does not have any parameter on the content
type in the HTTP headers. This will override any character set
specified in the body of the document via a META tag. A setting of
AddDefaultCharset Off
disables this functionality.
AddDefaultCharset On
enables
Apache’s internal default charset of iso-8859-1 as
required by the directive. You can also specify an alternate charset
to be used; e.g. AddDefaultCharset utf-8
.
The use of AddDefaultCharset
is an important part
of the prevention of Cross-Site Scripting (XSS) attacks. For more on
XSS, refer to http://www.idefense.com/XSS.html.