I don’t understand why FCC does not validate my anonymous message board.
My project passes all 10 functional tests, but not the following security tests:
- Only allow your site to be loaded in an iFrame on your own pages.
- Do not allow DNS prefetching.
- Only allow your site to send the referrer for your own pages.
When I look at the HTTP headers through my browser’s developer tools, I can see that I still meet its security requirements: - referrer-policy: same-origin
- x-dns-prefetch-control: off
- x-frame-options: SAMEORIGIN
Here is the link to the Github repository for my project:
https://github.com/ekoulemaneng/anonymous-message-board
Here is the the home page of my project:
https://anonymous-message-board.ekoulemaneng.repl.co
Thank you in advance for your invaluable help.