Security hardening + new tools deployment

- Hide Apache version (ServerTokens Prod)
- Add Permissions-Policy header
- Remove deprecated X-XSS-Protection
- Consolidate security headers to .htaccess only (remove duplicates from PHP)
- Deploy free tools: robots-analyzer, data-converter
- Deploy tools announcement blog post
- Update sitemap with new tools and blog post
This commit is contained in:
root
2026-02-05 04:11:15 +00:00
parent 3a0d8034c7
commit b6e39fe0c2
89 changed files with 4866 additions and 1932 deletions

View File

@@ -1,10 +1,6 @@
<?php
// Enhanced security headers
header('X-Content-Type-Options: nosniff');
header('X-Frame-Options: DENY');
header('X-XSS-Protection: 1; mode=block');
header('Strict-Transport-Security: max-age=31536000; includeSubDomains');
header('Referrer-Policy: strict-origin-when-cross-origin');
// Article-specific SEO variables
$article_title = "UK Cookie Law Compliance: Essential Guide for 2025";
@@ -31,6 +27,7 @@ $read_time = 8;
<!-- Article metadata and other head elements (same as previous template) -->
<link rel="stylesheet" href="../../assets/css/main.css">
<link rel="stylesheet" href="../../assets/css/cro-enhancements.css">
</head>
<body>
<!-- Navigation (same as previous template) -->
@@ -38,7 +35,7 @@ $read_time = 8;
<div class="nav-container">
<div class="nav-logo">
<a href="/">
<img src="../../assets/images/ukds-main-logo.png" alt="UK Data Services" class="logo" loading="eager">
<img loading="lazy" src="../../assets/images/ukds-main-logo.png" alt="UK Data Services" class="logo" loading="eager">
</a>
</div>
<div class="nav-menu" id="nav-menu">
@@ -211,5 +208,6 @@ $read_time = 8;
</footer>
<script src="../../assets/js/main.js"></script>
<script src="../../assets/js/cro-enhancements.js"></script>
</body>
</html>