aidantwoods / aidantwoods/SecureHeaders
Option to manually disable warnings
- Langage dominant
- PHP
- Étoiles
- 433
- Forks
- 21
- Métriques de merge des PR
- Aucune PR mergée en 30 j
Description
I with you that having Warnings and Notices is a wonderful thing while developing, but it seems that it's not possible to manually disable them in any way.
Use cases:
- we want to support Edge pre-15, so we must put the "unsafe-inline". Our CSP is build in order to leverage CSP3 and 2 where possible and fallback to CSP1 only where really needed, but actually we find ourselves filled with warnings about a decision we know we did for a reason;
- we are enhancing security step-by-step and for this reason we preferred to disable HSTS for now. We know we did, we are going to enable it later, still we apparently have no way to disable those errors.
If there were some way to selectively disable some warnings (of course they must be enabled by default), it would be great
Guide de contribution
Ouvrir le guide de contribution
Évaluation
Cette issue n'a pas encore été évaluée.