GitHub - github/secure_headers: Manages application of security headers with many safe defaults

SecureHeaders::Configuration.default do |config| config.cookies = { secure: true, # mark all cookies as "Secure" httponly: true, # mark all cookies as "HttpOnly" samesite: { lax: true # mark all cookies as SameSite=lax } } # Add "; preload" and submit the site to hstspreload.org for best protection. config.hsts = "max-age=#{1.week.to_i}" config.x_frame_options = "DENY" config.x_content_type_option

[Attsun_1031]

セキュリティ関連ヘッダー

[flatbird]

CSPなどセキュリティ系のヘッダを出力するgem

[teppeis]

CSPなど各種セキュリティ系ヘッダを各ブラウザ向けの形式で出力できるTwitter製のgem

[iR3]

ふむ

[udzura]

なんだろうこれ、気になるな