Security headers for web apps

I would like to suggest to enable the following headers by default for web apps (roundcube etc);

X-XSS-Protection "1; mode=block"
X-Frame-Options SAMEORIGIN
X-Content-Type-Options: "nosniff"
Referrer-Policy to none

For example in nginx webapps_settings.conf.

The referrer policy.. For obvious reasons

DirectAdmin Forums...

ما را در سایت DirectAdmin Forums دنبال می کنید

برچسب : نویسنده : ایمان اصلاحی directadmin بازدید : 271 تاريخ : پنجشنبه 11 مرداد 1397 ساعت: 8:06