[PR #410] [MERGED] Add some security HTTP Headers #497

New issue

Closed

opened 2026-02-26 10:31:45 +03:00 by kerem · 0 comments

kerem commented

2026-02-26 10:31:45 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/nsupdate-info/nsupdate.info/pull/410
Author: @elnappo
Created: 4/8/2019
Status: ✅ Merged
Merged: 12/27/2019
Merged by: @ThomasWaldmann

Base: master ← Head: secure-http

📝 Commits (3)

5b930d0 Add X-XSS-Protection and X-Content-Type-Option HTTP Header
1732ace Add Referrer-Policy HTTP Header, #281
60a3fe5 Set HTTPONLY to CSRF cookies

📊 Changes

3 files changed (+8 additions, -1 deletions)

View changed files

📝 requirements.d/all.txt (+1 -0)
📝 setup.py (+1 -0)
📝 src/nsupdate/settings/base.py (+6 -1)

📄 Description

Adds the following HTTP header (set by Django):

X-XSS-Protection
X-Content-Type-Option
Referrer-Policy

See #281

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/nsupdate-info/nsupdate.info/pull/410 **Author:** [@elnappo](https://github.com/elnappo) **Created:** 4/8/2019 **Status:** ✅ Merged **Merged:** 12/27/2019 **Merged by:** [@ThomasWaldmann](https://github.com/ThomasWaldmann) **Base:** `master` ← **Head:** `secure-http` --- ### 📝 Commits (3) - [`5b930d0`](https://github.com/nsupdate-info/nsupdate.info/commit/5b930d07fc5856e37e299b581bc015aeb49b8602) Add X-XSS-Protection and X-Content-Type-Option HTTP Header - [`1732ace`](https://github.com/nsupdate-info/nsupdate.info/commit/1732ace5a055fd77b01226165b79783026edc142) Add Referrer-Policy HTTP Header, #281 - [`60a3fe5`](https://github.com/nsupdate-info/nsupdate.info/commit/60a3fe559c453bc36b0ec3e5dd39c1303640a59a) Set HTTPONLY to CSRF cookies ### 📊 Changes **3 files changed** (+8 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `requirements.d/all.txt` (+1 -0) 📝 `setup.py` (+1 -0) 📝 `src/nsupdate/settings/base.py` (+6 -1) </details> ### 📄 Description Adds the following HTTP header (set by Django): * X-XSS-Protection * X-Content-Type-Option * Referrer-Policy See #281 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>