Security hardening + new tools deployment
- Hide Apache version (ServerTokens Prod) - Add Permissions-Policy header - Remove deprecated X-XSS-Protection - Consolidate security headers to .htaccess only (remove duplicates from PHP) - Deploy free tools: robots-analyzer, data-converter - Deploy tools announcement blog post - Update sitemap with new tools and blog post
This commit is contained in:
@@ -1,10 +1,6 @@
|
||||
<?php
|
||||
// Enhanced security headers
|
||||
header('X-Content-Type-Options: nosniff');
|
||||
header('X-Frame-Options: DENY');
|
||||
header('X-XSS-Protection: 1; mode=block');
|
||||
header('Strict-Transport-Security: max-age=31536000; includeSubDomains');
|
||||
header('Referrer-Policy: strict-origin-when-cross-origin');
|
||||
|
||||
// Article-specific SEO variables
|
||||
$article_title = "UK Cookie Law Compliance: Essential Guide for 2025";
|
||||
@@ -31,6 +27,7 @@ $read_time = 8;
|
||||
|
||||
<!-- Article metadata and other head elements (same as previous template) -->
|
||||
<link rel="stylesheet" href="../../assets/css/main.css">
|
||||
<link rel="stylesheet" href="../../assets/css/cro-enhancements.css">
|
||||
</head>
|
||||
<body>
|
||||
<!-- Navigation (same as previous template) -->
|
||||
@@ -38,7 +35,7 @@ $read_time = 8;
|
||||
<div class="nav-container">
|
||||
<div class="nav-logo">
|
||||
<a href="/">
|
||||
<img src="../../assets/images/ukds-main-logo.png" alt="UK Data Services" class="logo" loading="eager">
|
||||
<img loading="lazy" src="../../assets/images/ukds-main-logo.png" alt="UK Data Services" class="logo" loading="eager">
|
||||
</a>
|
||||
</div>
|
||||
<div class="nav-menu" id="nav-menu">
|
||||
@@ -211,5 +208,6 @@ $read_time = 8;
|
||||
</footer>
|
||||
|
||||
<script src="../../assets/js/main.js"></script>
|
||||
<script src="../../assets/js/cro-enhancements.js"></script>
|
||||
</body>
|
||||
</html>
|
||||
Reference in New Issue
Block a user