Commit Graph

5 Commits

Author SHA1 Message Date
r3g_5z f26108dba1
Set base-uri to none
ci/woodpecker/pr/woodpecker Pipeline was successful Details
pleroma-fe doesn't use this and it seems too niche to have any use-case

Signed-off-by: r3g_5z <june@terezi.dev>
2022-11-20 00:34:53 -05:00
r3g_5z 828e0f56c5
Drop Expect-CT
The header has been redundant since 2018 as all CAs and browsers enforce
certificate transparency already and is now a requirement. It's also
not even implemented in others browsers except for Chrome, and
Chrome 107 deprecates this header.

Signed-off-by: r3g_5z <june@terezi.dev>
2022-11-19 23:46:02 -05:00
r3g_5z 413b40b510
Drop X-Download-Options
It's an IE8-era header where Adobe products used to use the IE engine
when making outbound web requests to embed webpages such as
Adobe Acrobat. This is something that a secure and modern CSP would
protect against.

Signed-off-by: r3g_5z <june@terezi.dev>
2022-11-19 23:12:02 -05:00
r3g_5z f90552f62e
Drop XSS auditor
ci/woodpecker/pr/woodpecker Pipeline was successful Details
It's deprecated, removed in some, by all modern browsers and is known
to create XSS vulnerabilities in itself.

Signed-off-by: r3g_5z <june@terezi.dev>
2022-11-19 20:40:20 -05:00
floatingghost d2a185c013 Documentation updates for stable release (#73)
ci/woodpecker/push/docs Pipeline is pending Details
ci/woodpecker/push/release Pipeline is pending Details
ci/woodpecker/push/test Pipeline is pending Details
Reviewed-on: #73
2022-07-15 12:27:16 +00:00
Renamed from docs/configuration/hardening.md (Browse further)