Articles

Web Security

X-Permitted-Cross-Domain-Policies

Using Adobe products like PDF, Flash, etc.? You can implement this header to instruct the...

X-Frame-Options

Use the X-Frame-Options header to prevent Clickjacking vulnerability on your website. By implementing this header, you instruct...

X-Content-Type-Options

Prevent MIME types of security risk by adding this header to your web page’s HTTP response. Having...

Referrer-Policy

Looking to control the referrer-policy of your site? There are certain privacy and security benefits...

Permissions-Policy

Earlier known as Feature-Policy, it is renamed as Permissions-Policy with enhanced features. You can check...

HTTP Strict Transport Security

HSTS (HTTP Strict Transport Security) header to ensure all communication from a browser is sent...

Expect-CT

A new header still in experimental status is to instruct the browser to validate the...

Content Security Policy

Prevent XSS, clickjacking, code injection attacks by implementing the Content Security Policy (CSP) header in your web...

Clickjacking

Everything to keep in mind when designing and building a mega-dropdown, common pitfalls, hover entry/exit...

Clear Site Data

As you may guess by the name, implementing a Clear-Site-Data header is a great way...
Shopping Cart