plugins
plugins copied to clipboard
www/nginx - Security Headers - add support for Reporting API
Important notices Before you add a new report, we ask you kindly to acknowledge the following:
- [X] I have read the contributing guide lines at https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md
- [X] I have searched the existing issues, open and closed, and I'm convinced that mine is new.
- [X] When the request is meant for an existing plugin, I've added its name to the title.
Is your feature request related to a problem? Please describe. I'm playing around with reports from website monitoring and came across URIports guide. I'm trying to add the headers with the nginx-plugin but hey don't seem to be supported yet.
Describe the solution you'd like
Extend the Security Headers by these HTTP response headers:
- Report-To
- Reporting-Endpoints
- NEL (Experimental)
Add directives to CSP:
- report-to
- report-uri (deprecated, but still recommended for backwards compatibility)
Additional context https://www.w3.org/TR/reporting-1/