Difference between revisions for Users / Eo Ny / dev




← Previous edit
Next edit →

Additions:

http_security_headers(): void

Sets security-related HTTP headers.
*| Header | Purpose | Config Key |*
|| Content-Security-Policy | XSS/injection protection | ##csp## ||
|| Permissions-Policy | Control browser features | ##permissions_policy## ||
|| Referrer-Policy | Control referrer information | ##referrer_policy## ||
|| Strict-Transport-Security | Force HTTPS | Auto (TLS only) ||
|| X-Frame-Options | Clickjacking protection | Hardcoded: ##SAMEORIGIN## ||
|| X-Content-Type-Options | MIME sniffing prevention | Hardcoded: ##nosniff## ||
CSP Configuration Options:
  • 0 - Disabled
  • 1 - Default policy (from csp.conf)
  • 2 - Custom policy (from csp_custom.conf)

Deletions:

http_security_headers(): void