Suggestions for HTTP-Header UI
-
The possibility of adjusting HTTP-Headers within Redirection is a very valuable feature, especially without sufficient direct server access to adjust required system files!
But I have some suggestions for the User-Interface to make it more helpful:
1.) The Header “Content-Security-Policy”
a) is lacking the really needed (?) Help Icon with Info like: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
b) needs a lot more space (=> page width!) for it’s Value field, since entries there can be very long. At the moment it is very small, which makes it a real pain to work with it or even read and overlook its content.
c) would be a lot more user friendly, having selectable options (combination of fields) to combine its Value step by step.2.) The Header “Feature-Policy” was replaced with “Permissions-Policy” which should be added to selection list and get also options to select from (hard to write the code free)
https://developer.chrome.com/docs/privacy-sandbox/permissions-policy/3.) The Header “Cache-Control” is really often needed and should be added to selection list and get options for time and file types, including fonts (woff, woff2, …)
4.) The Header “X-Powered-By” with value “(always) unset” is often recommended for improved security and should be added to (default) security headers
5.) The Header “Strict-Transport-Security” needs:
a) the combination “max-age; includeSubDomains; preload” as required in https://hstspreload.org/
b) predefined options for expire-time => 1 year is required for “preload” and 2 years recommended in https://hstspreload.org/6.) The Header “X-Frame-Options” is also lacking the (?) Help Icon with Info like:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options7.) An overall help link for HTTP-Headers in general would be useful too
Thank You for Your good work with this plugin!
The topic ‘Suggestions for HTTP-Header UI’ is closed to new replies.