The server does not use HSTS-Headers and is vulnerable to „clickjacking“

M

Michal S

New Member
May 11, 2016
1
0
1
40
1. PVEproxy server does not use HSTS-Headers.
2. PVEproxy server is vulnerable to „clickjacking“, because it does not make use of the X-Frame-Options HTTP header.

Is there an option to set this http header?
 
You must log in or register to reply here.

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Quick Navigation

Home Get Subscription Wiki Downloads Proxmox Customer Portal About

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!
Community platform by XenForo® © 2010-2024 XenForo Ltd.
Top Bottom
Back