Add some security (meta) headers #162

Activity

1. 304NotModified commented on Mar 31, 2021

   

   304NotModified

   on Mar 31, 2021

   MemberAuthor

   More actions

   Maybe use a cloudflare proxy: https://seankilleen.com/2016/12/now-running-on-cloudflare/
2. 304NotModified commented on Mar 31, 2021

   

   304NotModified

   on Mar 31, 2021

   MemberAuthor

   More actions

   Not sure if headers are possible then: https://blog.cloudflare.com/secure-and-fast-github-pages-with-cloudflare/

   There are some things we can’t do; GitHub Pages doesn’t let us set custom headers, which unfortunately means we can’t do HTTP/2 Server Push right now.

   (Ok old post, but dunno why a proxy can't add additional headers)
3. MichelZ commented on May 20, 2022

   

   MichelZ

   on May 20, 2022

   Last edited by MichelZ

   Contributor

   More actions

   It actually can. I just tested it with GH pages and added the headers X-Frame-Options / X-Content-Type-Options...

   
   
4. 304NotModified commented on May 20, 2022

   

   304NotModified

   on May 20, 2022

   MemberAuthor

   More actions

   It actually can. I just tested it with GH pages and added the headers X-Frame-Options / X-Content-Type-Options..

   Where do you add those headers? In Github itself?
5. MichelZ commented on May 20, 2022

   

   MichelZ

   on May 20, 2022

   Last edited by MichelZ

   Contributor

   More actions

   Where do you add those headers? In Github itself?

   Sorry, I should have been more clear. I meant cloudflare is able to set headers when proxying GH pages (e.g. your article from above is wrong - you CAN set headers in cloudflare)
6. 304NotModified commented on May 20, 2022

   

   304NotModified

   on May 20, 2022

   MemberAuthor

   More actions

   Ah thx. Im not sure if those headers have that much value to move to cloudflare.