kevinobee / sveltekit-security-headers

Adds missing HTTP response headers to SvelteKit apps
https://sveltekit-security-headers.vercel.app
MIT License
4 stars 0 forks source link

Support Content-Security-Policy response headers: #33

Open kevinobee opened 6 months ago

kevinobee commented 6 months ago

Content-Security-Policy response header not required to achieve A grade assessment on securityheaders.com.

https://securityheaders.com/?q=https%3A%2F%2Fsveltekit-security-headers.vercel.app&hide=on&followRedirects=on

Originally posted by @kevinobee in https://github.com/kevinobee/sveltekit-security-headers/issues/28#issuecomment-1937091357

kevinobee commented 6 months ago

See svelte-kit-csp-handler Configurable CSP headers for SvelteKit