Security 2024 Chapter (#3816)

* Initial commit * Enable chapter * Update contributors * Generate markup * Add images * Markup fixes * Markup fixes * More markuo * More markup fixes * More markup fixes * Markup * More markup * More code formatting * More code formatting * Update Permissions Policy section and add ads.txt section * Update Permissions Policy section * Apply suggestions from code review Co-authored-by: Barry Pollard <[email protected]> * Apply outdated suggestions from code review * Resolve some TODOs * Resolve some TODOs 2 * Resolve some gid and SQL TODOs * Resolve some issues and missing info * Add linting overrides for figures * Update contributors * Resolve remaining description TODOs * Edits * Add personal links * Add bio * Update links --------- Co-authored-by: Barry Pollard <[email protected]> Co-authored-by: Vik Vanderlinden <[email protected]>
HTTPArchive · Nov 11, 2024 · bd306c3 · bd306c3
1 parent 67bb5f5
commit bd306c3
Show file tree

Hide file tree

Showing 36 changed files with 1,791 additions and 21 deletions.
diff --git a/src/config/2024.json b/src/config/2024.json
@@ -104,8 +104,7 @@
           "part": "II",
           "chapter_number": "13",
           "title": "Security",
-          "slug": "security",
-          "todo": true
+          "slug": "security"
         }
       ]
     },

diff --git a/src/config/contributors.json b/src/config/contributors.json
@@ -209,6 +209,19 @@
     "twitter": "dawntraoz",
     "website": "https://www.dawntraoz.com/"
   },
+  "AlbertoFDR": {
+    "avatar_url": "21290259",
+    "github": "AlbertoFDR",
+    "linkedin": "albertofdr",
+    "name": "Alberto Fernandez-de-Retana",
+    "teams": {
+      "2024": [
+        "reviewers"
+      ]
+    },
+    "twitter": "alberto_fdr",
+    "website": "https://albertofdr.github.io/"
+  },
   "amedina": {
     "avatar_url": "506089",
     "github": "amedina",
@@ -766,6 +779,9 @@
     "teams": {
       "2022": [
         "authors"
+      ],
+      "2024": [
+        "reviewers"
       ]
     },
     "twitter": "_clarkio",
@@ -1607,12 +1623,18 @@
   "GJFR": {
     "avatar_url": "5749508",
     "github": "GJFR",
+    "linkedin": "gertjan-franken",
     "name": "Gertjan Franken",
     "teams": {
       "2022": [
         "analysts"
+      ],
+      "2024": [
+        "authors"
       ]
-    }
+    },
+    "twitter": "GJFR_",
+    "website": "https://gjfr.dev"
   },
   "gjfr": {
     "avatar_url": "5749508",
@@ -2028,6 +2050,18 @@
       ]
     }
   },
+  "JannisBush": {
+    "avatar_url": "33023300",
+    "github": "JannisBush",
+    "name": "Jannis Rautenstrauch",
+    "teams": {
+      "2024": [
+        "analysts"
+      ]
+    },
+    "twitter": "jannis_r",
+    "website": "https://cispa.de/en/people/c01jara"
+  },
   "jaredcwhite": {
     "avatar_url": "658496",
     "github": "jaredcwhite",
@@ -2855,15 +2889,20 @@
       ]
     }
   },
-  "awareseven": {
-    "avatar_url": "53170037",
-    "github": "awareseven",
+  "lord-r3": {
+    "avatar_url": "83113194",
+    "github": "lord-r3",
     "name": "Matteo Große-Kampmann",
     "teams": {
       "2021": [
         "reviewers"
+      ],
+      "2024": [
+        "reviewers"
       ]
-    }
+    },
+    "twitter": "pizzahax",
+    "website": "https://lord-r3.github.io/"
   },
   "matthewp": {
     "avatar_url": "361671",
@@ -4506,8 +4545,14 @@
     "teams": {
       "2022": [
         "analysts"
+      ],
+      "2024": [
+        "authors"
       ]
-    }
+    },
+    "website": "https://vikvanderlinden.be/",
+    "twitter": "vikvanderlinden",
+    "linkedin": "vikvanderlinden"
   },
   "voltek62": {
     "avatar_url": "2698956",

diff --git a/src/content/en/2021/security.md b/src/content/en/2021/security.md
@@ -3,7 +3,7 @@
 title: Security
 description: Security chapter of the 2021 Web Almanac covering Transport Layer Security, content inclusion (CSP, Feature Policy, SRI), web defense mechanisms (tackling XSS, XS-Leaks), and drivers of security mechanism adoptions.
 authors: [saptaks, tomvangoethem, nrllh]
-reviewers: [cqueern, edmondwwchan, awareseven]
+reviewers: [cqueern, edmondwwchan, lord-r3]
 analysts: [gjfr]
 editors: [tunetheweb]
 translators: []

diff --git a/src/content/en/2024/security.md b/src/content/en/2024/security.md
diff --git a/src/content/ja/2021/security.md b/src/content/ja/2021/security.md
@@ -3,7 +3,7 @@
 title: セキュリティ
 description: 2021年版Web Almanacのセキュリティの章では、トランスポートレイヤーセキュリティ、コンテンツインクルージョン（CSP、フィーチャーポリシー、SRI）、Web防御機構（XSS、XS-Leaksへの取り組み）、セキュリティ機構採用の促進要因について解説しています。
 authors: [saptaks, tomvangoethem, nrllh]
-reviewers: [cqueern, edmondwwchan, awareseven]
+reviewers: [cqueern, edmondwwchan, lord-r3]
 analysts: [gjfr]
 editors: [tunetheweb]
 translators: [ksakae1216]

diff --git a/src/static/images/2024/security/avg-security-headers-per-site.png b/src/static/images/2024/security/avg-security-headers-per-site.png
diff --git a/src/static/images/2024/security/bot-protection.png b/src/static/images/2024/security/bot-protection.png
diff --git a/src/static/images/2024/security/change-password-usage.png b/src/static/images/2024/security/change-password-usage.png
diff --git a/src/static/images/2024/security/cipher-suites.png b/src/static/images/2024/security/cipher-suites.png
diff --git a/src/static/images/2024/security/cookie-age-desktop.png b/src/static/images/2024/security/cookie-age-desktop.png
diff --git a/src/static/images/2024/security/cookie-attributes-desktop.png b/src/static/images/2024/security/cookie-attributes-desktop.png
diff --git a/src/static/images/2024/security/cross-origin-headers-trend.png b/src/static/images/2024/security/cross-origin-headers-trend.png
diff --git a/src/static/images/2024/security/cryptominers-market-share.png b/src/static/images/2024/security/cryptominers-market-share.png
diff --git a/src/static/images/2024/security/cryptominers-trend.png b/src/static/images/2024/security/cryptominers-trend.png
diff --git a/src/static/images/2024/security/csp-directives.png b/src/static/images/2024/security/csp-directives.png
diff --git a/src/static/images/2024/security/csp-header-length.png b/src/static/images/2024/security/csp-header-length.png
diff --git a/src/static/images/2024/security/csp-script-src-keywords.png b/src/static/images/2024/security/csp-script-src-keywords.png
diff --git a/src/static/images/2024/security/csp-xfo-by-country.png b/src/static/images/2024/security/csp-xfo-by-country.png
diff --git a/src/static/images/2024/security/forward-secrecy.png b/src/static/images/2024/security/forward-secrecy.png
diff --git a/src/static/images/2024/security/hsts-directives.png b/src/static/images/2024/security/hsts-directives.png
diff --git a/src/static/images/2024/security/hsts-max-age.png b/src/static/images/2024/security/hsts-max-age.png
diff --git a/src/static/images/2024/security/https-by-country.png b/src/static/images/2024/security/https-by-country.png
diff --git a/src/static/images/2024/security/https-usage.png b/src/static/images/2024/security/https-usage.png
diff --git a/src/static/images/2024/security/iframe-sandbox-directives.png b/src/static/images/2024/security/iframe-sandbox-directives.png
diff --git a/src/static/images/2024/security/robots-text-endpoints.png b/src/static/images/2024/security/robots-text-endpoints.png
diff --git a/src/static/images/2024/security/same-site-cookie-attributes-desktop-2.png b/src/static/images/2024/security/same-site-cookie-attributes-desktop-2.png
diff --git a/src/static/images/2024/security/same-site-cookie-attributes-desktop.png b/src/static/images/2024/security/same-site-cookie-attributes-desktop.png
diff --git a/src/static/images/2024/security/security-headeers-by-rank-2.png b/src/static/images/2024/security/security-headeers-by-rank-2.png
diff --git a/src/static/images/2024/security/security-headeers-by-rank.png b/src/static/images/2024/security/security-headeers-by-rank.png
diff --git a/src/static/images/2024/security/security-headers-desktop.png b/src/static/images/2024/security/security-headers-desktop.png
diff --git a/src/static/images/2024/security/security-text-usage.png b/src/static/images/2024/security/security-text-usage.png
diff --git a/src/static/images/2024/security/server-headers.png b/src/static/images/2024/security/server-headers.png
diff --git a/src/static/images/2024/security/server-timing-headers.png b/src/static/images/2024/security/server-timing-headers.png
diff --git a/src/static/images/2024/security/sri-coverage.png b/src/static/images/2024/security/sri-coverage.png
diff --git a/src/static/images/2024/security/tls-versions.png b/src/static/images/2024/security/tls-versions.png
diff --git a/src/static/images/2024/security/well-known-responses.png b/src/static/images/2024/security/well-known-responses.png