dotnet / dotnet/AspNetCore.Docs
Consider a new middleware for the simple security headers.
Open
area-security
doc-enhancement
Pri1
re-Safia
- Dominant language
- C#
- Stars
- 13.1k
- Forks
- 24.6k
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 97
Description
Inspired by https://github.com/aspnet/templating/issues/497
- X-Content-Type
- X-Frame-Options
- X-XSS-Protection
But not Content-Security-Policy because that's very app dependent to be on by default, and never ever public-key-pins because that's going away because it sucked.
Contributor guide
Assessment
This issue has not been assessed yet.