Index: trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost.conf
===================================================================
--- trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost.conf	(revision 2649)
+++ trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost.conf	(revision 2650)
@@ -29,2 +29,9 @@
     RewriteRule .*(robots\.txt) $1 [L,NS]
 </Location>
+
+# As long as we support scripts/~ URLs, we need to disable Service
+# Workers on them for security.
+# https://infrequently.org/2014/12/psa-service-workers-are-coming/
+<If "-n req('Service-Worker')">
+    Require all denied
+</If>