You are here

Home » API reference » Varbase Core 8.5

seckit.settings.yml in Varbase Core 8.5

Same filename and directory in other branches
  1. 8.4 modules/varbase_security/config/install/seckit.settings.yml
modules/varbase_security/config/install/seckit.settings.yml

File

modules/varbase_security/config/install/seckit.settings.yml
View source 
  1. seckit_xss:

  2.   csp:

  3.     checkbox: false

  4.     report-only: false

  5.     default-src: ''

  6.     script-src: ''

  7.     object-src: ''

  8.     img-src: ''

  9.     media-src: ''

  10.     frame-src: ''

  11.     child-src: ''

  12.     font-src: ''

  13.     connect-src: ''

  14.     report-uri: report-csp-violation

  15.     policy-uri: ''

  16.     style-src: ''

  17.   x_xss:

  18.     seckit_x_xss_option_disable: Disabled

  19.     seckit_x_xss_option_0: '0'

  20.     seckit_x_xss_option_1: 1;

  21.     seckit_x_xss_option_1_block: '1; mode=block'

  22.     select: 0

  23.   x_content_type:

  24.     checkbox: true

  25. seckit_csrf:

  26.   origin: false

  27.   origin_whitelist: ''

  28. seckit_clickjacking:

  29.   js_css_noscript: false

  30.   noscript_message: 'Sorry, you need to enable JavaScript to visit this website.'

  31.   x_frame: '1'

  32.   x_frame_allow_from: ''

  33. seckit_ssl:

  34.   hsts: false

  35.   hsts_subdomains: false

  36.   hsts_max_age: 1000

  37.   hsts_preload: false

  38. seckit_various:

  39.   from_origin: false

  40.   from_origin_destination: same

  41.   disable_autocomplete: true