Closed skx closed 7 years ago
We should add suitable security-headers to our output, to prevent frame-embedding, click-jacking, and XSS.
Upon reflection these should be added in the reverse-proxy which is deployed ahead of this.
We should add suitable security-headers to our output, to prevent frame-embedding, click-jacking, and XSS.