sakkiii 0ccf0fbf1c HSTS preload + X-XSS enables ... **HSTS Preloading:** In its strongest and recommended form, the [HSTS policy](https://www.chromium.org/hsts) includes all subdomains, and indicates a willingness to be “preloaded” into browsers: `Strict-Transport-Security: max-age=31536000; includeSubDomains; preload` **X-Xss-Protection:** `1; mode=block` which tells the browser to block the response if it detects an attack rather than sanitising the script.		2021-04-24 12:12:34 +05:30
..
conf.d	HSTS preload + X-XSS enables	2021-04-24 12:12:34 +05:30
matrix-synapse-metrics-htpasswd.j2
nginx.conf.j2	rename variables	2021-03-30 16:41:32 +02:00