search

Comp-490-SeniorProject / site

MIT License
0 stars 1 forks source link

Configure security headers #8

Closed MarkKoz closed 2 years ago

MarkKoz commented 3 years ago

For good practice, we should strive to get a good score on https://securityheaders.com/. To attain that goal, one of the things we need to do is set up a CSP and some other security headers. The secure.py library makes this very convenient since it has integration with Django. I suppose we want the CSP as strict as possible while still ensuring the website functions. We may need to adjust it as we progress in development, but we need to start somewhere.

alinaah commented 2 years ago

Please see attached what has been presented on 10.21.2021.Research is still in progress.

Presentation_CSP_10.21.2021.docx