Security headers for web apps

I would like to suggest to enable the following headers by default for web apps (roundcube etc);

Code:

X-XSS-Protection "1; mode=block"
X-Frame-Options SAMEORIGIN
X-Content-Type-Options: "nosniff"
Referrer-Policy to none

For example in nginx webapps_settings.conf.

The referrer policy.. For obvious reasons

DirectAdmin Forums...

ما را در سایت DirectAdmin Forums دنبال می‌کنید

برچسب: نویسنده: ایمان اصلاحی بازدید: 304 تاريخ: پنجشنبه 11 مرداد 1397 ساعت: 8:06