Madhura Jayaratne

Implement CSP & HPKP violation reporting

3

As report by Emanuel Bronshtein, I suggest to implement the following for *.phpmyadmin.net websites: \* 'Public-Key-Pins-Report-Only' header, more information: https://developers.google.com/web/updates/2015/09/HPKP-reporting-with-chrome-46?hl=en https://developer.mozilla.org/en/docs/Web/Security/Public_Key_Pinning \* report-uri directive in CSP headers, more information: https://developer.mozilla.org/en-US/docs/Web/Security/CSP/Using_CSP_violation_reports...