gwicke / restbase / 699

92%

master: 92%

push

travis-ci

Update security headers

- Allow access to response headers of HEAD requests.
- Allow access to `content-length` response header. This is useful for
clients wishing to avoid downloading large pages or resources, by first
checking for the response size with a HEAD request.
- Restrict cross-origin referrer header forwarding to relay the origin
(domain) only. This avoids revealing the precise page / API result a
client navigated from.

Bug: T173509

827 of 999 branches covered (82.78%)

1549 of 1691 relevant lines covered (91.6%)

195.43 hits per line