Search results

"Configuration already exists" error

Status: Open.

#545In github/secure_headers;

· owen2345 opened on Feb 5, 2025

Lowercase header issue: SecureHeaders::OPT_OUT Fails to Remove Non-Lowercase Headers in Rails Default Config

Status: Open.

#541In github/secure_headers;

· GabDesilets opened on Jan 8, 2025

Set default <code>frame-ancestors</code> on default Content-Security-Policy

Status: Open.

#532In github/secure_headers;

· rzhade3 opened on Oct 21, 2024

SecureHeaders middleware erases all cookies in Rack 3 due to \n joining

Status: Open.

#514In github/secure_headers;

· collinsauve opened on Apr 22, 2024

CSP Report-uri deprecated, replaced by report-to

Status: Open.

#512In github/secure_headers;

· martindaehn23 opened on Oct 5, 2023

<code>content_security_policy_nonce</code> calls Rails method so CSP does not contain nonce

Status: Open.

#511In github/secure_headers;

· jdudley1123 opened on Sep 20, 2023

Set <code>default-src</code> CSP Attribute to <code>none</code> by default

Status: Open.

#482In github/secure_headers;

· rzhade3 opened on Apr 5, 2022

·

v7

Support CSP "double policies"

Status: Open.

#476In github/secure_headers;

· rohansharma opened on Feb 16, 2022

nonced tag helpers including nonce directive in csp has potential to break applications

Status: Open.

#470In github/secure_headers;

· pcasaretto opened on Mar 23, 2021

Guide for transitioning from secure_headers to vanilla rails csp

Status: Open.

#466In github/secure_headers;

· oreoshake opened on Feb 12, 2021

Add simple static configuration option for bypassing application of all security headers

Status: Open.

#450In github/secure_headers;

· h0jeZvgoxFepBQ2C opened on Dec 15, 2020

Validation on plugin-types does not allow for the empty directive

Status: Open.

#448In github/secure_headers;

· oreoshake opened on Oct 23, 2020