Whonix website security rating - "B" (Mozilla Observatory) - Content Security Policy (CSP)

[mig5]

CSPs now deployed:

Content-Security-Policy now deployed on Whonix websites

Good news! We’ve implemented Content-Security-Policy headers on various areas of the Whonix infrastructure. This includes the main site, the wiki, this forum, and a few other places. We also implemented Referrer-Policy and some other headers in recent weeks. We now get an A+ rating on the main page at https://securityheaders.com \o/ [whonix-securityheaders-rating-july2018] Some things to note: We deliberately are not allowing loading images from third party sites on the forum and also …