github/secure_headers

Manages application of security headers with many safe defaults

Open All

9 open issues indexed

Confirm feature parity with secure_headers <=> rails vanilla Open

github/secure_headers#394 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Validation on plugin-types does not allow for the empty directive Open

github/secure_headers#448 · 1 comment · 1 reaction · 2 assignees · Indexed Sep 16, 2026
Guide for transitioning from secure_headers to vanilla rails csp Open

github/secure_headers#466 · 3 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
nonced tag helpers including nonce directive in csp has potential to break applications Open

github/secure_headers#470 · 17 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Support CSP "double policies" Open

github/secure_headers#476 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Set `default-src` CSP Attribute to `none` by default Open

github/secure_headers#482 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
`content_security_policy_nonce` calls Rails method so CSP does not contain nonce Open

github/secure_headers#511 · 2 comments · 1 reaction · 2 assignees · Indexed Sep 16, 2026
Set default `frame-ancestors` on default Content-Security-Policy Open

github/secure_headers#532 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
"Configuration already exists" error Open

github/secure_headers#545 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026

Get new issues in your inbox