c49207819e
The server should send an X-Content-Type-Options: nosniff to make sure the browser does not try to detect a different Content-Type than what is actually sent (can lead to XSS). Additionally the server should send an X-Frame-Options: deny to protect against drag'n drop clickjacking attacks in older browsers. Change-Id: I779c519cf75bbee23d3a8348291c0fd053e61e4e |
||
---|---|---|
.. | ||
templates | ||
Chart.yaml | ||
requirements.yaml | ||
values.yaml |