OWASP / www-project-secure-headers

The OWASP Secure Headers Project

https://owasp.org/www-project-secure-headers/

OWASP/www-project-secure-headers Issues

cannot link directly to a specific header information
Closed 3 months ago4
About "Technical References Dashboard" updates (again) :)
Closed a year ago4
New CORS header "Access-Control-Request-Private-Network"
Closed 2 years ago22
About "Technical References Dashboard"
Closed 2 years ago3
Integration with others OWASP projects
Closed 2 years ago1
Finalize the REST API
Closed 2 years ago1
Create the OWASP Project Spotlight series video
Closed 2 years ago1
Auto feeding from scans.io
Closed 2 years ago3
Address points raised from project comittee regarding the graduation
Closed 2 years ago1
Statistic data about header usages.
Closed 2 years ago9
References aren't clickable and other cleanup
Closed 2 years ago8
X-XSS-Protection Header Deprecation Security Issue
Closed 2 years ago1
Make Content-Security-Policy header more secure
Closed 3 years ago4
Expect-CT deprecated
Closed 3 years ago3
Add the "Permissions Policy" http response header
Closed 3 years ago3
X-Frame-Options Obsolete
Closed 3 years ago1
Idea proposal
Closed 3 years ago5
Have an idea to include how to do API-Security using this project
Closed 3 years ago4
COEP / COOP / CORP
Closed 3 years ago6
Notes on Feature-Policy
Closed 4 years ago2
Potentially remove `Expect-CT`
Closed 4 years ago1
Remove `Public-Key-Pins` (HPKP)
Closed 4 years ago1
Deprecate X-XSS-Protection
Closed 4 years ago1
Mention 'frame-ancestors' CSP rule with X-Frame-Options header
Closed 4 years ago1
Potentially remove `X-XSS-Protection`
Closed 4 years ago4
https://owasp.org/www-project-secure-headers/ does not render correctly
Closed 4 years ago1