AWS-Paris AWS-dublin S3NS
This update introduces the addition of HTTP Strict Transport Security (HSTS) and Content Security Policy (CSP) headers to the mobile application backend.
Security improvements
-
HSTS: This header enforces secure connections to our site, ensuring that browsers only communicate over HTTPS. This helps protect against man-in-the-middle attacks and other vulnerabilities related to insecure connections.
-
CSP: This header mitigates the risk of cross-site scripting (XSS) and other code injection attacks by specifying which sources of content are trusted. This reduces the potential for malicious content to be executed in users’ browsers.