sakkiii 0ccf0fbf1c HSTS preload + X-XSS enables ... **HSTS Preloading:** In its strongest and recommended form, the [HSTS policy](https://www.chromium.org/hsts) includes all subdomains, and indicates a willingness to be “preloaded” into browsers: `Strict-Transport-Security: max-age=31536000; includeSubDomains; preload` **X-Xss-Protection:** `1; mode=block` which tells the browser to block the response if it detects an attack rather than sanitising the script.		2021-04-24 12:12:34 +05:30
..
nginx	HSTS preload + X-XSS enables	2021-04-24 12:12:34 +05:30
systemd	0.2.1 revision	2021-02-28 22:21:40 +08:00
usr-local-bin	When validating LE certs, do not wait for a random time	2021-01-19 18:41:45 +01:00