Browser security view

[mnot]

It would be nice if there were a separate section for browser security (on par with general / caching / validation).

See:
http://www.barracudalabs.com/wordpress/index.php/2011/07/21/google-gets-a-1-for-browser-security-3/

Candidates:
X-XSS-Protection
X-Frame-Options
X-Content-Type-Options
secure cookie flag
httponly cookie flag
ssl link assets (requires thor ssl support)

[mnot]

• Subresource Integrity redbot#222 Subresource Integrity
• Public Key Pinning (HPKP) #24 HPKP
• (X-)Content-Security-Policy #35 CSP
• Strict Transport Security #16 HSTS
• CORS #15 CORS
• Cookie flags #14 Cookie Flags

see also https://pokeinthe.io/2019/04/04/state-of-security-alexa-top-one-million-2019-04/