Web Security. Learning HTTP Security Headers

Table of Contents About The Author Liran Tal About The Book Requirements Source Code Introduction Requirements Headers as browser security controls Helmet - a Node.js package to set HTTP security headers HTTP Security Headers HTTP Strict Transport Security X Frame Options Content Security Policy Referer and Referrer Policy Deprecated security headers Testing for Security Headers The State of HTTP Security WebPageTest Lighthouse Check My Headers command line application Summary What's next? Establish a CSP and Security Headers standard Monitor your web application Other browser security headers and controls Referrer-Policy Educational resources Security headers tooling