You could add structured data and schema markup to the site.
Read more about it here.
This helps better describe your site.
You can also add Content Security Policy (CSP) headers.
These are important because they clearly define what can happen with your website and what cannot.
I tried doing this through a meta tag but google still has a problem with it as it is a security issue. I ended up using a serverless function to achieve proper content security policy (CSP) grades. This can be done on most hosting providers ie aws, cloudflare, firebase …etc
This website below can help you generate a badass Content Security Policy (CSP)
My CSP looks like
addEventListener(‘fetch’, event => {
event.respondWith(handleRequest(event.request))
})
async function handleRequest(request) {
let originalResponse = await fetch(request)
// pass in the original response so we can modify some of it.
let response = new Response(originalResponse.body,originalResponse);
response.headers.set(‘X-Frame-Options’, ‘SAMEORIGIN’);
response.headers.set(‘Strict-Transport-Security’, ‘max-age=31536000; includeSubdomains; preload’);
response.headers.set(‘Referrer-Policy’,‘same-origin’);
response.headers.set(‘Content-Security-Policy’, ‘default-src 'self'’);
response.headers.set(‘Feature-Policy’,‘camera 'none'; geolocation 'none'’);
response.headers.set(‘X-Content-Type-Options’,‘nosniff’);
response.headers.set(‘X-XSS-Protection’,‘1; mode=block’);
response.headers.set(‘Permissions-Policy’, ‘camera=(), geolocation=(), microphone=()’);
return response
}
I did this using a Cloudflare worker that is served on the edge.
You can test your site at
