ofbiz-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jacques Le Roux (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (OFBIZ-6766) Secure HTTP headers
Date Thu, 19 Oct 2017 10:05:00 GMT

    [ https://issues.apache.org/jira/browse/OFBIZ-6766?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16210822#comment-16210822
] 

Jacques Le Roux commented on OFBIZ-6766:
----------------------------------------

At r1812609 I added
*   the no-referrer-when-downgrade Referrer-Policy
*   a comment about Public-Key-Pins-Report-Only
*   a link to the related wiki page

This is my prior to last commit, before implementing a CSP policy which is quite the stuff!
Check by yourself at https://csp.withgoogle.com/docs/adopting-csp.html

> Secure HTTP headers
> -------------------
>
>                 Key: OFBIZ-6766
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-6766
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: framework
>    Affects Versions: Trunk
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>             Fix For: Upcoming Release
>
>
> I have created a wiki page for this https://cwiki.apache.org/confluence/display/OFBIZ/How+to+Secure+HTTP+Headers



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message