Web Security·Web Security essentials

Headers

Security headers reduce whole classes of attack.

Intermediate 10 min read Lesson 5 of 150 Challenge included
What you will be able to do
  • Set CSP.
  • Block framing.
  • Disable MIME sniffing.

In plain English

Security headers reduce whole classes of attack.

  • Set CSP.
  • Block framing.
  • Disable MIME sniffing.
headers.httpHTTP
Content-Security-Policy: default-src 'self'
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Your turn

Explain it back

Easy

Answer from memory: Which header restricts script sources?

TEXT · starter
Your answer…
Check your understanding before moving on.
Knowledge checkQuestion 1

Which header restricts script sources?

Select an answer to continue
Study tools

Make it yours.

Keep a private note for this lesson, then turn the key ideas into flashcards you can revisit.

Sign in to save notes and flashcards.Both are private to your account and stay with your progress.
Sign in
Finished reading?

Lock in what you just learned.

Mark this lesson complete to save your place and move one step closer to the certificate.

Lesson 5 of 150 · 0% of course