umputun / secrets / 20543165840

84%

push

github

feat(server): add security headers middleware

add middleware for HTTP security headers (X-Frame-Options, CSP, HSTS,
X-Content-Type-Options, Referrer-Policy) to address pentest findings.

headers enabled by default. use --proxy-security-headers flag to disable
when running behind a proxy that handles these headers.

Related to security assessment findings from ZAP scan.

24 of 40 new or added lines in 3 files covered. (60.0%)

1650 of 1984 relevant lines covered (83.17%)

74.42 hits per line