Webmail missing security headers

lautrivta

• March 29, 2017 03:57

Hi, cPanels default webmail installation is missing important security headers: [LIST]

Strict-Transport-Security

Content-Security-Policy

Public-Key-Pins

X-Frame-Options

X-XSS-Protection

X-Content-Type-Options

Referrer-Policy With no possibility to add or modify the headers.

• 

  cPanelMichael

  • March 29, 2017 15:36

  Hello, This is not yet supported, but I encourage you to vote and add feedback to the existing feature request at: Add X-Frame-Options Cpanel Ports We'll also provide updates on the status of this feature's implementation on the above URL as they become available. Thank you.

  0

Please sign in to leave a comment.