search

FIT3170-FY-Project-7 / RABIT-COMMON

Common repository of the RABIT project, for documentation storage and cross-component interaction.
https://rabit2022.cloud.edu.au/plots
ISC License
3 stars 1 forks source link

Add security headers in frontend nginx #16

Closed megascrapper closed 1 year ago

megascrapper commented 1 year ago

📋 | Pre-PR

Before submitting a pull request make sure you have:

📄 | Licensing

In order to be accepted and merged into RABIT, each piece of code must be released under ISC license or a compatible license.

Check one of the following options:

  • [x] I am the original author of this code and I am willing to release it under the ISC license.
  • [ ] I am not the original author of this code but it is released under the ISC license or a compatible license (please provide evidence).

ℹ️ | Description / Further Information

Explanation of the purpose and effect of your pull request goes here.

Provide context and examples as necessary.

Added HTTP headers for the frontend nginx configuration.

The choice of headers is mainly based on OWASP Secure Header and ZAP test results. I didn't implement all recommendations as it either causes the site to break or is only applicable for HTTPS.

More information: