rspec/rules/S5732/recommended.adoc
2020-12-21 15:38:52 +01:00

4 lines
338 B
Plaintext

== Recommended Secure Coding Practices
Implement content security policy _frame-ancestors_ directive which is supported by all modern browsers and will specify the origins of frame allowed to be loaded by the browser (this directive deprecates https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options[X-Frame-Options]).