Skip to main content
Tweeted twitter.com/StackWebmasters/status/846261765528834048
spelling and grammar
Source Link
Stephen Ostermiller
  • 99.4k
  • 18
  • 141
  • 364

when When should iI not to use Pagepage meta security headers

whenWhen should iI not to use Pagepage meta security headers? For

For example, i configureI configured the web server server-side with a powerful content security policy and other hardened security headers, but when review my Security research, assessment, analytics of my Page meta security headers they fail? what i

What I think is the diffdifference between page meta and server-side headers is page meta is page per page meaning and server-side is global. soSo should iI define the unsecure page meta header results as a false positive or bug?

when should i not to use Page meta security headers

when should i not to use Page meta security headers? For example, i configure the web server server-side with a powerful content security policy and other hardened security headers, but when review my Security research, assessment, analytics of my Page meta security headers they fail? what i think is the diff between page meta and server-side headers is page meta is page per page meaning and server-side is global. so should i define the unsecure page meta header results as a false positive or bug?

When should I not to use page meta security headers

When should I not to use page meta security headers?

For example, I configured the web server server-side with a powerful content security policy and other hardened security headers, but when review my Security research, assessment, analytics of my Page meta security headers they fail?

What I think is the difference between page meta and server-side headers is page meta is page per page meaning and server-side is global. So should I define the unsecure page meta header results as a false positive or bug?

Source Link

when should i not to use Page meta security headers

when should i not to use Page meta security headers? For example, i configure the web server server-side with a powerful content security policy and other hardened security headers, but when review my Security research, assessment, analytics of my Page meta security headers they fail? what i think is the diff between page meta and server-side headers is page meta is page per page meaning and server-side is global. so should i define the unsecure page meta header results as a false positive or bug?