GitHub - github/secure_headers: Manages application of security headers with many safe defaults

GitHub - github/secure_headers: Manages application of security headers with many safe defaults

SecureHeaders::Configuration.default do |config| config.cookies = { secure: true, # mark all cook...概要を表示 SecureHeaders::Configuration.default do |config| config.cookies = { secure: true, # mark all cookies as "Secure" httponly: true, # mark all cookies as "HttpOnly" samesite: { lax: true # mark all cookies as SameSite=lax } } # Add "; preload" and submit the site to hstspreload.org for best protection. config.hsts = "max-age=#{1.week.to_i}" config.x_frame_options = "DENY" config.x_content_type_option

• csp
• security
• ruby
• HTTP
• セキュリティ
• rails
• twitter
• github