aletgdev/fastapi-security-headers - 3 Help Wanted Issues

Open Issues Need Help

`_is_secure_request` trusts X-Forwarded-Proto blindly and matches it exactly 21 days ago

bug help wanted good first issue

🛡️ The missing security headers middleware for FastAPI. Protect your API against XSS, clickjacking, MIME sniffing, and OWASP Top 10 web vulnerabilities with zero-config defaults

Python

#asgi#content-security-policy#cybersecurity#fastapi#hsts#middleware#owasp#python#security#security-headers

strip_server_headers does not remove the uvicorn `Server` header 22 days ago

bug help wanted good first issue

aletgdev/fastapi-security-headers

🛡️ The missing security headers middleware for FastAPI. Protect your API against XSS, clickjacking, MIME sniffing, and OWASP Top 10 web vulnerabilities with zero-config defaults

Python

#asgi#content-security-policy#cybersecurity#fastapi#hsts#middleware#owasp#python#security#security-headers

HSTS defaults to `includeSubDomains` + 1 year (production footgun) 22 days ago

enhancement help wanted good first issue

aletgdev/fastapi-security-headers

🛡️ The missing security headers middleware for FastAPI. Protect your API against XSS, clickjacking, MIME sniffing, and OWASP Top 10 web vulnerabilities with zero-config defaults

Python

#asgi#content-security-policy#cybersecurity#fastapi#hsts#middleware#owasp#python#security#security-headers