Objectives for 2024.

[righettod]

🔵TODO

None

🟡Pending by the OSHP team

None

🟠Pending by a third party

None

🟢Done

• Find a solution for the question ✔ CSP Limits Recommendation oshp/oshp-tracking#29
• Submit an application to upgrade to production status.
• Review the configuration proposed for the header Permissions-Policy to keep it up to date.
• Add clarification to indicate to set the header Clear-Site-Data on logout endpoint.
• Submit an application for a podcast in french at https://www.nolimitsecu.fr
• Handle Add information about headers in web API context. oshp/oshp-tracking#19
• Handle Deprecated Security Header - Pragma oshp/oshp-tracking#28
• Add a section, into the best practices area, about how to prevent sensitive information exposure due to caching (use same approach than for CORS but with cache headers).
  • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
  • https://developer.mozilla.org/en-US/docs/Web/HTTP/Caching

🔴Cancelled

• Handle Review the feature permission policy header value oshp/oshp-tracking#11

[righettod]

📝 Migrated from oshp/oshp-tracking#24