You’re offline. This is a read only version of the page.
We built a standard portal on the Accounts entity and ran this site on https://securityheaders.com/
It came back with a rating of C because there were missing headers as below:
| Content Security Policy is an effective measure to protect your site from XSS attacks. By whitelisting sources of approved content, you can prevent the browser from loading malicious assets. |
| Referrer Policy is a new header that allows a site to control how much information the browser includes with navigations away from a document and should be set by all sites. |
| Feature Policy is a new header that allows a site to control which features and APIs can be used in the browser. |
Has anyone been able to fix these header issues?
The challenge that we have is that the Information Security department within the client would not pass this portal to be deployed without us being able to fix them. Any ideas?
Rony
Share
Report
All responses (
Answers (
55
