Weko
/
histoiredunpied
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
33 Commits 1 Branch 0 Tags 7.2 MiB
HTML 73.4%
Sass 20.1%
SCSS 6.5%
Go to file
Simon 78266d5b7b feat: Disable the auto detection of resource type 
Protect yourself from malicious exploitation via MIME sniffing.
MIME-Type sniffing explained

Internet Explorer and Chrome browsers have a feature called "MIME-Type sniffing" that automatically detects a web resource's type. This means, for example, that a resource identified as an image can be read as a script if its content is a script.

This property allows a malicious person to send a file to your website to inject malicious code. We advise you to disable the MIME-Type sniffing to limit such activity.

Chrome has been working on a feature called Site Isolation which provides extensive mitigation against exploitation of these types of vulnerabilities. Site Isolation is more effective when MIME types are correct.
How to prevent MIME-Type sniffing

Configure a "X-Content-Type-Options" HTTP header. Add the "X-Content-Type-Options" HTTP header in the responses of each resource, associated to the "nosniff" value. It allows you to guard against such misinterpretations of your resources.

https://www.justegeek.fr/proteger-un-peu-plus-son-site-avec-la-balise-x-content-type-options/
 		2020-03-11 16:59:13 +01:00
assets/css feat: Mise à jour du site pour une meilleure acceccibilité 2020-03-09 16:11:37 +01:00
config chore: Add staging configuration 2020-03-09 16:17:31 +01:00
content fix: Width and Height is not a good solution for responsive design 2020-03-11 14:40:35 +01:00
data first version 2020-02-11 09:02:51 +01:00
layouts fix: 4 empty elements can disturb screen readers 2020-03-11 16:47:32 +01:00
static fix: Optimisation des fichiers SVG 2020-03-09 11:47:59 +01:00
themes fix: Avoid http-equiv <meta> tags 2020-03-11 16:53:51 +01:00
.env Update prod URL 2020-02-16 16:44:05 +01:00
.gitignore Upgrade design 2020-02-20 18:29:02 +01:00
.gitmodules export to theme 2020-02-27 11:20:14 +01:00
.htaccess Add ftp deploy 2020-02-16 16:44:29 +01:00
Dockerfile feat: Configuration d'Nginx 2020-03-09 16:18:26 +01:00
README.md first version 2020-02-11 09:02:51 +01:00
auto-publish.sh Upgrade design 2020-02-20 18:29:02 +01:00
docker-compose.yml feat: Remove www 2020-03-11 16:28:19 +01:00
nginx-compression.conf feat: Configuration d'Nginx 2020-03-09 16:18:26 +01:00
nginx-default.conf feat: Disable the auto detection of resource type 2020-03-11 16:59:13 +01:00
nginx-hide.conf feat: Configuration d'Nginx 2020-03-09 16:18:26 +01:00
package-lock.json export to theme 2020-02-27 11:20:14 +01:00
package.json feat: Add purgecss 2020-03-11 14:04:00 +01:00

README.md

Source du site web Histoire d'un Pied

Vous trouverez ici les sources du site web https://histoiredunpied.com

Pour information, il utilise plusieurs technologies :

  • Hugo pour la génération du site static
  • docker-compose pour publier le site

Hugo

Pour construire le site :

hugo -D

Exemple de site

Voici quelques sites pour s'inspirer :

Voici quelques template wordpress :