Security headers - what they are and how to use them 🔒

1

Security Headers

I was recently tasked with improving the security rating on one of our websites. This involved a couple of things but the thing I want to focus on in this post is security headers. We scanned the site here and were initially given a rating of 'E'. Not good. So one of the recommendations was to add security headers which are headers contained in the HTTP response and can provide various different security benefits, such as only allowing iFrame's from specified sites to be embedded on your site or ensuring your browser is only accessed via HTTPS. By adding some of these headers, we were able to raise the security rating to an 'A'.

#Web Application Security #Security #Web And Mobile Application Security 57 social mentions

Origin -> Only the origin is shown in the Referrer header (e.g. If the referrer is https://example.com/test-page then only https://example.com is shown in the Referrer header).

#Software Development #Software Development Tools #Web Development Tools 2405 social mentions