search

NLog / NLog.github.io

The official website: nlog-project.org
https://nlog-project.org
6 stars 24 forks source link

Add some security (meta) headers #162

Open 304NotModified opened 3 years ago

304NotModified commented 3 years ago

Although it seems to not be possible in Github pages it would be nice if we could add some (meta) headers.

See report of nlog-project.org

image

vs Github.com

image

304NotModified commented 3 years ago

Maybe use a cloudflare proxy: https://seankilleen.com/2016/12/now-running-on-cloudflare/

304NotModified commented 3 years ago

Not sure if headers are possible then: https://blog.cloudflare.com/secure-and-fast-github-pages-with-cloudflare/

There are some things we can’t do; GitHub Pages doesn’t let us set custom headers, which unfortunately means we can’t do HTTP/2 Server Push right now.

(Ok old post, but dunno why a proxy can't add additional headers)

MichelZ commented 2 years ago

It actually can. I just tested it with GH pages and added the headers X-Frame-Options / X-Content-Type-Options...

image image

304NotModified commented 2 years ago

It actually can. I just tested it with GH pages and added the headers X-Frame-Options / X-Content-Type-Options..

Where do you add those headers? In Github itself?

MichelZ commented 2 years ago

Where do you add those headers? In Github itself?

Sorry, I should have been more clear. I meant cloudflare is able to set headers when proxying GH pages (e.g. your article from above is wrong - you CAN set headers in cloudflare)

304NotModified commented 2 years ago

Ah thx. Im not sure if those headers have that much value to move to cloudflare.