openstack-helm-infra/nagios
RAHUL KHIYANI ac65a37b0b Nagios – API Handling – HTTP Security Headers Not Present
Added new X-Content-Type-Options: nosniff header to make sure the browser
does not try to detect a different Content-Type than what is actually
sent (can lead to XSS)

Added new X-Frame-Options: sameorigin header to protect against
drag and drop clickjacking attacks in older browsers

Added new Content-Security-Policy: script-src self for implementation

Added new HTTP Security header X-XSS-Protection:1 mode=block to
sanitize the page, when a XSS attack is detected, the browser will
prevent rendering of the page

Change-Id: Ic79bbb96484a7f1a497c001883783338fd26a47a
2019-08-07 19:08:48 +00:00
..
templates Nagios: Add init container for generating hosts 2019-07-02 15:48:12 +00:00
Chart.yaml Replace git.openstack.org URLs with opendev.org URLs 2019-05-31 01:52:10 +00:00
requirements.yaml Nagios Chart 2018-03-23 13:45:40 +00:00
values.yaml Nagios – API Handling – HTTP Security Headers Not Present 2019-08-07 19:08:48 +00:00