Pretty happy with the results. I have to have access to referrer headers for it to work.
Beyond that, there are some things I can tighten up in regards to some other xss headers so I’ll take care of those.
Also, I don’t keep traffic logs. Sometimes (maybe a couple times a year) I will do a small log capture for a few minutes if I need data to test an upgrade or feature experiment but that’s it.
https://webbkoll.dataskydd.net/en/results?url=http%3A%2F%2Fj...
Pretty happy with the results. I have to have access to referrer headers for it to work.
Beyond that, there are some things I can tighten up in regards to some other xss headers so I’ll take care of those.
Also, I don’t keep traffic logs. Sometimes (maybe a couple times a year) I will do a small log capture for a few minutes if I need data to test an upgrade or feature experiment but that’s it.