• Resolved burnuser

    (@burnuser)


    The possibility of adjusting HTTP-Headers within Redirection is a very valuable feature, especially without sufficient direct server access to adjust required system files!

    But I have some suggestions for the User-Interface to make it more helpful:

    1.) The Header “Content-Security-Policy”
    a) is lacking the really needed (?) Help Icon with Info like: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
    b) needs a lot more space (=> page width!) for it’s Value field, since entries there can be very long. At the moment it is very small, which makes it a real pain to work with it or even read and overlook its content.
    c) would be a lot more user friendly, having selectable options (combination of fields) to combine its Value step by step.

    2.) The Header “Feature-Policy” was replaced with “Permissions-Policy” which should be added to selection list and get also options to select from (hard to write the code free)
    https://developer.chrome.com/docs/privacy-sandbox/permissions-policy/

    3.) The Header “Cache-Control” is really often needed and should be added to selection list and get options for time and file types, including fonts (woff, woff2, …)

    4.) The Header “X-Powered-By” with value “(always) unset” is often recommended for improved security and should be added to (default) security headers

    5.) The Header “Strict-Transport-Security” needs:
    a) the combination “max-age; includeSubDomains; preload” as required in https://hstspreload.org/
    b) predefined options for expire-time => 1 year is required for “preload” and 2 years recommended in https://hstspreload.org/

    6.) The Header “X-Frame-Options” is also lacking the (?) Help Icon with Info like:
    https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options

    7.) An overall help link for HTTP-Headers in general would be useful too

    Thank You for Your good work with this plugin!

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)

The topic ‘Suggestions for HTTP-Header UI’ is closed to new replies.