4 commits

Author	SHA1	Message	Date
Tom Hughes	e35748567c	Update HSTS to publish a max-age=0 to disable it	2017-03-03 11:34:39 +00:00
Tom Hughes	ee12eba234	Don't try and modify policy if we don't have one	2017-03-02 10:39:18 +00:00
Tom Hughes	c5ef6404f5	Improve the content security policy	2017-03-01 22:38:24 +00:00
Tom Hughes	40a8e5caf5	Add support for Content-Security-Policy ... Currently this is report only, and disabled unless a report URL has been set in the application configuration.	2017-02-26 19:48:13 +00:00