Open
Description
Initially I was wondering if Expect-CT
should apply to all responses (if served over HTTPS) and not only text/html
responses, so I used the search bar and found nothing.
Then to try out the search capabilities I searched for x-frame-options
and that entire list shows links to documentation on x-content-type-options
, however as I used the webhint-scanner earlier I know that x-frame-options
is considered in the checks so it was just a matter of actually finding the documentation on it.
It'd be helpful if there could be improvements in this area, having the webhint.io scanner telling you that you did something wrong and how to fix it is great, amazing in fact! But being able to find documentation beforehand during development would be too.