GitHub - mikewest/baseline-header: What if developers could opt-into better default behaviors en masse, forcing them to pick and choose the legacy risks they want to enable.

There are many, many configuration options that we would like web developers to consider when setting up the frontend of their web applications. Cross-origin isolation, framing, injection mitigation, permission policy, the list is long. Today, developers need to look at each option individually, because the defaults are generally terrible. If developers don't know about an option or simply forget

[efcl]

Baseline: Security=2022 セキュリティヘッダのベースラインをまとめるヘッダ