Security - Auth - Showcases

Заголовки безопасности

X-Frame-Options DENY

X-Content-Type-Options nosniff

Referrer-Policy strict-origin-when-cross-origin

Permissions-Policy camera=(), microphone=(), geolocation=()

Status Enabled

Mechanism SvelteKit built-in CSRF protection via Origin header checking

Origin https://www.v10r.dev

Only requests from these origins are accepted. No wildcards — explicit origins only (past CVE CVSS 9.3).

Built-in Disabled (broken in Better Auth — Issue #2153)

External Upstash Redis rate limiter on /api/auth/sign-in/*

Better Auth Version 1.4.6

Measured At 2026-06-13T11:17:15.110Z