plugins icon indicating copy to clipboard operation
plugins copied to clipboard

www/nginx - Security Headers - add support for Reporting API

Open Starkstromkonsument opened this issue 2 years ago • 0 comments

Important notices Before you add a new report, we ask you kindly to acknowledge the following:

  • [X] I have read the contributing guide lines at https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md
  • [X] I have searched the existing issues, open and closed, and I'm convinced that mine is new.
  • [X] When the request is meant for an existing plugin, I've added its name to the title.

Is your feature request related to a problem? Please describe. I'm playing around with reports from website monitoring and came across URIports guide. I'm trying to add the headers with the nginx-plugin but hey don't seem to be supported yet.

Describe the solution you'd like

Extend the Security Headers by these HTTP response headers:

  1. Report-To
  2. Reporting-Endpoints
  3. NEL (Experimental)

Add directives to CSP:

  1. report-to
  2. report-uri (deprecated, but still recommended for backwards compatibility)

Additional context https://www.w3.org/TR/reporting-1/

Starkstromkonsument avatar Nov 25 '23 23:11 Starkstromkonsument