security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

server push is dead

Browse Source
This commit is contained in:
Daniel Micay 2024-04-01 15:19:25 -04:00
parent 91d765692b
commit 43a33855b0
1 changed files with 7 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
static/build.html
View File

@ -1399,15 +1399,13 @@ rm android-cts-media-1.5.zip</pre>
} }
}</pre> }</pre>
<p>Cookies are only used for login sessions. The only other use case considered valid <p>Cookies are only used for login sessions. Every cookie must have the
would be optimizing HTTP/2 Server Push but the intention is only to use that for <code>__Host</code> prefix to guarantee that it has the <code>Secure</code>
render blocking CSS and it's not really worth optimizing for caching when the CSS is attribute and <code>Path=/</code>. The <code>HttpOnly</code> and
tiny in practice. Every cookie must have the <code>__Host</code> prefix to guarantee <code>SameSite=Strict</code> flags should also always be included. These kinds
that it has the <code>Secure</code> attribute and <code>Path=/</code>. The of cookies can provide secure login sessions in browsers with fully working
<code>HttpOnly</code> and <code>SameSite=Strict</code> flags should also always be <code>SameSite=Strict</code> support. However, CSRF tokens should still be used
included. These kinds of cookies can provide secure login sessions in browsers with for the near future in case there are browser issues.</p>
fully working <code>SameSite=Strict</code> support. However, CSRF tokens should still
be used for the near future in case there are browser issues.</p>
<p>For web content, use dashes as user-facing word separators rather than underscores. <p>For web content, use dashes as user-facing word separators rather than underscores.
Page titles should follow the scheme "Page | Directory | Higher-level directory | Page titles should follow the scheme "Page | Directory | Higher-level directory |