5 ms·
Well something as basic as CSP is also crippled without access to the server to set headers. And a lot of other stuff. The more relevant question here is why s
by Santosh83 5y ago
Well something as basic as CSP is also crippled without access to the server to set headers. And a lot of other stuff.
The more relevant question here is why so few (if at all) web hosting solutions allow the user to configure custom server rules?
- flohofwoe 5y agoTBH I wonder why response header requirements can't be set right in the meta tags in index.html. Would this be any different than having a provider-specific config file next to index.html from a security pov?
- Santosh83 5y agoSome of them can be, but not all. Some headers are needed before the content is loaded. With ubiquitous virtualisation these days, I don't see why hosting providers can't allow users more control over their server without compromising security.
- littlestymaar 5y agoYou don't even need virtualization at all. Apache have allowed this for twenty years!
- jhgb 5y ago> something as basic as CSP is also crippled without access to the server to set headers Why would communicating sequential processes be crippled by this?
- deleted 5y ago[deleted]
- littlestymaar 5y agoAll PHP (Apache) hosting provider I know allow user-defined configuration on a per-directory level.