Missing security headers

smswithoutborders / SMSwithoutborders-BE

Here is the cloud API and User management services. It is directly configurable with MySQL databases for managing users. Also provides out of the box integrations of Google OAuth end-points and Account authentication

GNU General Public License v3.0

12 stars 3 forks source link

Missing security headers #68

Closed PromiseFru closed 1 year ago

PromiseFru commented 1 year ago

Target:

src/api_v2.py

Missing headers:

Strict-Transport-Security (HSTS)
X-Content-Type-Options
Content-Security-Policy (CSP)
Referrer-Policy
Cache-control
Permissions-Policy