Our features site is undergoing a refresh! Be sure to explore the revamped site and discover our latest product roadmap launching here on Monday, March 18th.
New Topic
cPanel & WHM Feature RequestsTopicSecurity
Properties
Category Security
Tags csp, xss, header, security

CSP/XSS Header for WHM & cPanel & Webmail

Motaz Hakim shared this idea 2 years ago
Needs Review

There's no way Now to add a Security headers CSP/XSS for WHM / cPanel / Webmail

I've attached a Screenshot from WHM/cPanel/Webmail Pages to see the security headers of each of them

So Please allow it to add more security to these links

Thanks

Files: WHM.jpg Webmail.jpg cPanel.jpg
3 I like this idea 0  

Replies (2)

photo
1
cPRex ● 2 years ago

Hey there! I did some more research on this and we have the following option in WHM >> Tweak Settings, which does default to "on"

"Use X-Frame-Options and X-Content-Type-Options headers with cpsrvd"

Can you check and ensure that is enabled on your system?

Reply
photo
1
Motaz Hakim ● 2 years ago

Hello

It's Enabled, that's why I've attached screenshots to give you a result on every link

Reply
photo
1
cPRex ● 2 years ago

Thanks for that - I'm having our team review this issue now.

photo
Leave a Comment
 
Attach a file

cPanel, WebHost Manager and WHM are registered trademarks of cPanel, L.L.C. for providing its computer software that facilitates the management and configuration of Internet web servers.