jake/jarv.is
1
Fork 0
mirror of https://github.com/jakejarvis/jarv.is.git synced 2025-07-20 20:41:16 -04:00
Code Issues Activity

new <Figure> component for image captions

Browse Source
This commit is contained in:
Jake Jarvis
2022-01-13 13:39:22 -05:00
parent 1a0541776e
commit 64a91d67bf
21 changed files with 226 additions and 409 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
notes/security-headers-cloudflare-workers.mdx
View File

@@ -12,20 +12,16 @@ image: "/static/images/notes/security-headers-cloudflare-workers/security-header
---
import Image from "./components/media/Image";
import Figure from "./components/media/Figure";
{/* prettier-ignore */}
<figure>
<Image
src="/static/images/notes/security-headers-cloudflare-workers/security-headers.png"
width="700"
height="275"
alt="An A+ security grade for this website!"
priority
/>
<figcaption>
An <a href="https://securityheaders.com/?q=jarv.is&amp;followRedirects=on" target="_blank" rel="noopener noreferrer">A+ security grade</a> for this website!
</figcaption>
</figure>
<Figure
src="/static/images/notes/security-headers-cloudflare-workers/security-headers.png"
width="700"
height="275"
priority
>
An [A+ security grade](https://securityheaders.com/?q=jarv.is&amp;followRedirects=on) for this website!
</Figure>
In 2019, it's becoming more and more important to harden websites via HTTP response headers, which all modern browsers parse and enforce. Multiple standards have been introduced over the past few years to protect users from various attack vectors, including `Content-Security-Policy` for injection protection, `Strict-Transport-Security` for HTTPS enforcement, `X-XSS-Protection` for cross-site scripting prevention, `X-Content-Type-Options` to enforce correct MIME types, `Referrer-Policy` to limit information sent with external links, [and many, many more](https://www.netsparker.com/whitepaper-http-security-headers/).