"https://github.com/Xpra-org/xpra/issues/4477">Windows
Defender: Trojan</a></p>
<h3><a href="https://github.com/Xpra-org/xpra-html5">HTML5</a></h3>
<p>The builtin web server ships with fairly restrictive <a
href="https://github.com/Xpra-org/xpra/issues/1741">http headers and
content security policy</a>, even <a
href="https://github.com/Xpra-org/xpra/issues/3442">blocking some valid
use cases by default</a> - though we could <a
href="https://github.com/Xpra-org/xpra/issues/3100">go even further</a>.
For secu