ComputerBas

Bas

Administrator

Geregistreerd: 2019-11-10

Posts: 96

Security Header Must Haves

The headers below are very important for website security so please implement these headers:

Header always set Strict-Transport-Security 'max-age=31536000; includeSubDomains; preload'
Header always set X-Frame-Options SAMEORIGIN
Header always set X-Content-Type-Options nosniff
Header always set X-Xss-Protection '1; mode=block'
Header always set Referrer-Policy 'no-referrer'
Header always set X-Permitted-Cross-Domain-Policies 'master-only'
Header always set X-Download-Options 'noopen'
Header always set Expect-CT max-age=0
Header always set Expect-Staple 'max-age=31536000; includeSubDomains; preload'
Header always set X-Powered-By ComputerBas