Skip to content

Response Headers : Make it easier to get started with adding OWASP headers #376

Description

@GeekInTheNorth

With the Response Headers feature, when you edit a default header to add it, you choose "Add" and then you have to select a value even which adds multiple clicks.

Update the options for the default headers so that as soon as the Behaviour is set to "Add", the recommended value is set by default. These include:

Header Default
Cross-Origin-Embedder-Policy require-corp
Cross-Origin-Opener-Policy same-origin-allow-popups
Cross-Origin-Resource-Policy same-origin
Referrer-Policy strict-origin-when-cross-origin
Strict-Transport-Security max-age=63072000; includeSubDomains; preload
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Xss-Protection 0

Metadata

Metadata

Labels

CompleteDescribes an issue where development is complete and this item will be included in a release.enhancementNew feature or request

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions