Add some security (meta) headers

[304NotModified]

Although it seems to not be possible in Github pages it would be nice if we could add some (meta) headers.

See report of nlog-project.org

vs Github.com

[304NotModified]

Maybe use a cloudflare proxy: https://seankilleen.com/2016/12/now-running-on-cloudflare/

[304NotModified]

Not sure if headers are possible then: https://blog.cloudflare.com/secure-and-fast-github-pages-with-cloudflare/

There are some things we can’t do; GitHub Pages doesn’t let us set custom headers, which unfortunately means we can’t do HTTP/2 Server Push right now.

(Ok old post, but dunno why a proxy can't add additional headers)

[MichelZ]

It actually can. I just tested it with GH pages and added the headers X-Frame-Options / X-Content-Type-Options...

[304NotModified]

It actually can. I just tested it with GH pages and added the headers X-Frame-Options / X-Content-Type-Options..

Where do you add those headers? In Github itself?

[MichelZ]

Where do you add those headers? In Github itself?

Sorry, I should have been more clear. I meant cloudflare is able to set headers when proxying GH pages (e.g. your article from above is wrong - you CAN set headers in cloudflare)

[304NotModified]

Ah thx. Im not sure if those headers have that much value to move to cloudflare.