Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[scanner integration] Add support for Referrer-Policy header #515

Closed
eloquence opened this issue May 31, 2018 · 1 comment
Closed

[scanner integration] Add support for Referrer-Policy header #515

eloquence opened this issue May 31, 2018 · 1 comment

Comments

@eloquence
Copy link
Member

We're treating this as a launch requirement for #488, since it's fairly straightforward to detect and has significant security implications: The Referrer-Policy for the landing page should be set to "no-referrer". While we will not use the grades publicly, internally we can record this as a "D" grade issue.

@eloquence
Copy link
Member Author

Bumping priority on this since currently have no baseline data for referrer-policy violations, which would be useful to prioritize outreach efforts.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant