Improved security headers?

« previous next »

Print

Pages: [1]

Author Topic: Improved security headers? (Read 3624 times)

shade73

Newbie
Posts: 49
Karma: 3

Improved security headers?

« on: May 15, 2018, 11:51:22 pm »

Is it possible to add the following security headers to web GUI?

X-Content-Type-Options
X-XSS-Protection
X-Frame-Options
Content-Security-Policy

or as wishlist for future updates

« Last Edit: May 17, 2018, 12:57:19 pm by shade73 »

Logged

franco

Administrator
Hero Member
Posts: 17665
Karma: 1611

Re: Improced security headers?

« Reply #1 on: May 17, 2018, 08:23:22 am »

Fabian submitted a recently merged PR via: https://github.com/opnsense/core/pull/2212

There's a bit of discussion. It'll be in 18.7 for sure. Right now we are trying to give it a bit of exposure in the beta in order to see if it has issues.

If anything is missing please discuss via GitHub.

Thanks,
Franco

Logged

shade73

Newbie
Posts: 49
Karma: 3

Re: Improved security headers?

« Reply #2 on: May 17, 2018, 12:57:49 pm »

Great, thanks

Logged

Print

Pages: [1]

« previous next »