Set default security headers - Githubissues

cloudflare / worker-sites-template

Apache License 2.0

81 stars 39 forks source link

Set default security headers #47

Closed adamschwartz closed 4 years ago

adamschwartz commented 4 years ago

After releasing https://isbgpsafeyet.com some folks pointed out that it was scoring an F on https://securityheaders.com.

I’m no expert on this stuff but by request I’m back porting the additions @zackbloom made to @cloudflare/isbgpsafeyet.com (https://github.com/cloudflare/isbgpsafeyet.com/commit/261877b1385ead2ca73f98ec1816e3b189bfe0d7 and https://github.com/cloudflare/isbgpsafeyet.com/commit/ce806f6622fe5df7ad7eaf3277773b028431d53b) to improve the default security for future projects based on this template.

EverlastingBugstopper commented 4 years ago

Added @dhaynespls to review list because I have no clue