httpjamesm/AnonymousOverflow
1
0
Fork 0
mirror of https://github.com/httpjamesm/AnonymousOverflow.git synced 2024-12-06 19:16:43 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Initial Home page

httpjamesm
2022-12-29 12:08:36 -05:00
commit 01cecbe799
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Security.md
+6
@@ -0,0 +1,6 @@
AnonymousOverflow takes security seriously and uses multiple redundant measures to prevent XSS attacks on the client.
* Templating engine is used for many variables that automatically sanitizes them and prevents any rogue code from being executed
* Many variables are internally sanitized with Go's `html.EscapeString()` API when being directly served to the client
* Strict XSS prevention headers are sent to the client on every non-static file request
* CSPs are added on every page that denies all scripts from running, either first-party or otherwise, and default to `none`, preventing third-party connections, iframe attacks, inline attacks, etc.