New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

security improvements [?h] #102

Open

4 tasks

noamoss opened this issue May 14, 2021 · 1 comment

Assignees

Labels

Contributor

noamoss commented May 14, 2021

based on https://sitecheck.sucuri.net/results/https/admin.equality.org.il:

Missing security header for ClickJacking Protection. Alternatively, you can use Content-Security-Policy: frame-ancestors 'none'.
Missing security header to prevent Content Type sniffing.
Missing Strict-Transport-Security security header.
Missing Content-Security-Policy directive. We recommend to add the following CSP directives (you can use default-src if all values are the same): script-src, object-src, base-uri, frame-src

noamoss added the security label

noamoss assigned akariv

Contributor Author

noamoss commented May 14, 2021

hey @akariv, please add time estimation when possible.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment