• Resolved quasibrodo

    (@quasibrodo)


    According to the text of the article the following headers are recommended

    • HSTS
    • X-XSS-Protection
    • X-Content-Type-Options
    • Refererrer Policy
    • X-Frame-Options
    • Permissions-Policy

    Conversely the image at the bottom of the article shows the following recommended headers

    • HSTS
    • X-XSS-Protection
    • X-Content-Type-Options
    • Expect-CT
    • Referrer-Policy

    Additionally not all values are congruent. X-XSS-Protections is set to “0” in the text, but “1; mode=block”

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Contributor Rogier Lankhorst

    (@rogierlankhorst)

    @quasibrodo you’re right, the images are outdated.

    Expect-ct is deprecated, and xss should be set to 0.

    We’ll look at the pictures, thanks for reporting ??

Viewing 1 replies (of 1 total)
  • The topic ‘Incongruencies in documentation’ is closed to new replies.