Skip to content

FetchMetadata 1.0.0
Compare
Choose a tag to compare
@zero-24 zero-24 released this 29 Aug 10:29
· 9 commits to master since this release
1.0.0
This tag was signed with the committer’s verified signature.
zero-24 Tobias Zulauf
GPG key ID: A041B880A124AF84
Learn about vigilant mode.
247d86d
This commit was signed with the committer’s verified signature.
zero-24 Tobias Zulauf
GPG key ID: A041B880A124AF84
Learn about vigilant mode.

This is the initial release of the FetchMetadata Plugin

Features

This Joomla Plugin helps to protect your sites by using Fetch Metadata Request Headers

The implemened rules are:

  • Step 1: Allow requests from browsers which don't send Fetch Metadata
  • Step 2: Allow same-site and browser-initiated requests
  • Step 3: Allow simple top-level navigation and iframing
  • Step 4: Opt out endpoints that are meant to serve cross-site traffic (Optional)
  • Step 5: Reject all other requests that are cross-site and not navigational
Assets 3
Loading