Pranjal Jumde
f83d9393b3
HSTS supercookies are a known fingerprinting vector. This change disallow's third parties from setting security headers: 1. "Strict-Transport-Security" 2. "Expect-CT" 3. "Public-Key-Pins" 4. "Public-Key-Pins-Report-Only" that can be used for fingerprinting. auditors: @diracdeltas, @bbondy, @iefremov
5 lines
141 B
Plaintext
5 lines
141 B
Plaintext
HTTP/1.1 200 OK
|
|
Cache-Control: private
|
|
Content-Type: text/html; charset=ISO-8859-1
|
|
Strict-Transport-Security: max-age=123; includeSubdomains
|