Chong Hwi comments

Results 5 comments of


                                            Chong Hwi

Fix or remove support for automatically-computed CSP hashes

Hi Oreoshake Thanks for your reply, we have followed the instructions but unfortunately it’s not working. Can you advise or perhaps show me the steps? Thanks

Fix or remove support for automatically-computed CSP hashes

Hi Oreshake, yes, the file config/secure_headers_generated_hashes.yml is generated with the content: (three dashes) scripts: {} styles: {} and these hashes not included in the header. Please help

Fix or remove support for automatically-computed CSP hashes

Hi Oreoshake, sorry for late reply, you may see my source code here: https://github.com/chongfai13/secure_headers I have successfully made the hashes, question: How do I set it at the headers? I...

Handle setting multiple headers of the same name (by using a comma-separate list)

I need help to randomise the part 'sha256-abc'

Handle setting multiple headers of the same name (by using a comma-separate list)

> > randomise > > SHAs are not to be random, they're supposed to be static. Dynamic hashes are not supported by design, at least not by this library. Meaning...