bepsvpt/secure-headers

Issues

• Some value does not appear on the HTTP request

  #86 opened 2 months ago by incoming-th
  7

• Support for Reporting API and NEL header

  #49 opened 2 months ago by arxeiss
  3

• How can I apply the following in the "Content-Security-Policy" ?

  #84 opened 2 years ago by Nemachtilli
  6

• Laravel Horizon not loading UI

  #82 opened 2 years ago by incoming-th
  2

• Support SharedArrayBuffer updates in Chrome around May 2021

  #60 opened 2 years ago by yosifeldman
  1

• X-Powered-By keep showing when I leave it empty in config file

  #58 opened 2 years ago by hyquoccuong
  4

• Add CSP Report To

  #65 opened 2 years ago by NKazantsev
  2

• Add route whitelist

  #67 opened 2 years ago by beard7
  1

• redirected to file's directory while validation Laravel

  #72 opened 2 years ago by biikashsubedi
  1

• jquery.min.js

  #75 opened 2 years ago by jd5am
  1

• securityheaders.com still show Big red F

  #76 opened 2 years ago by arshadanjum167
  6

• Eliminate Laravel dependency for non-Laravel users

  #77 opened 2 years ago by compwright
  2

• After setup for laravel, Content-Security-Policy header is not generated

  #57 opened 4 years ago by hyquoccuong
  6

• Unable to set multiple values to the frame-ancestors directive of the content-security-policy header

  #73 opened 3 years ago by karamvirs
  2

• Laravel 9 Support

  #68 opened 3 years ago by HDVinnie
  4

• Unrecognized feature: 'display-capture'

  #37 opened 5 years ago by katranci
  4

• undefined index: x-content-type-options

  #61 opened 4 years ago by ChaerilM
  2

• Error 500 in Laravel

  #56 opened 4 years ago by robertnicjoo
  3

• Please provide better examples for csp

  #21 opened 6 years ago by dsingleton47
  5

• Incorrect option header name

  #54 opened 4 years ago
  1

• Rename Feature-Policy header to Permissions-Policy

  #51 opened 4 years ago by yosifeldman
  8

• X-Powered-By header name

  #50 opened 4 years ago by x0y-gt
  0

• nonces not cleared when unit testing

  #46 opened 5 years ago by wvdongen
  1

• Add Nonce on Javascript Navigation

  #45 opened 5 years ago by PanjiNamjaElf
  5

• Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”).

  #43 opened 5 years ago by urfusion
  9

• Image data: Question

  #41 opened 5 years ago by HDVinnie
  5

• X-Powered-By Attack

  #39 opened 5 years ago by HDVinnie
  2

• Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified

  #38 opened 5 years ago by wilbertku90
  2

• Get Error parsing header in Chrome Console

  #36 opened 5 years ago by Kokil
  7

• Working with default settings.

  #34 opened 5 years ago by voske
  2

• Problem with middleware SecureHeadersMiddleware.php

  #32 opened 5 years ago by oleg-tolkach
  4

• Laravel Issue

  #14 opened 7 years ago by chriskivaze
  3

• The right way to config

  #33 opened 6 years ago by Masoud180
  8

• Error EvalError: for scipt

  #31 opened 6 years ago by hasiashiana
  2

• I need use url logo in footers website

  #29 opened 6 years ago by msadeqi
  10

• How to generate "nonce" and add generated code to script and style tags?

  #25 opened 6 years ago by JohanMa4
  5

• question about sha integrity approach

  #30 opened 6 years ago by ChaerilM
  0

• CSP missing after latest release

  #28 opened 6 years ago by austintoddj
  2

• Add New Header: Feature Policy

  #27 opened 6 years ago by austintoddj
  4

• Feedback for last commits :)

  #26 opened 6 years ago by JohanMa4
  1

• How to setup 'script-src' on https protocol?

  #24 opened 6 years ago by JohanMa4
  1

• Data protocol not being added to content-security-policy header

  #23 opened 7 years ago by johnboc
  3

• Error when loading data:image - violates csp

  #20 opened 7 years ago by redroses
  2

• CSP Level 3 changes - "Child-src" Deprecated, Replaced by "frame-src" that is undeprecated, and "worker-src" is added

  #17 opened 7 years ago by PrinsFrank
  2

• Tags after merge

  #19 opened 7 years ago by ruudy-es
  1

• not able to allow socket.io

  #12 opened 7 years ago by nomadtechiemike
  2

• Laravel duplicates X-Content-Type-Options header

  #11 opened 7 years ago by johnboc
  6

• Support for blob:

  #10 opened 8 years ago by grafikkaos
  5

• syntax error, unexpected '?' in SecureHeaders.php

  #9 opened 8 years ago by jeanjoe
  2

• When handling a StreamedResponse, it fails on the missing method header()

  #7 opened 8 years ago by WesleyE
  0