WD 123

Content Type Options

Prevents Chrome and IE from trying to mime-sniff the content-type of a response away from the one being declared by the server.

Explore Resources
Instagram of AlphabagFacebook of AlphabagFacebook of AlphabagFacebook of Alphabag

Knowledge Brief

No items found.

Related Knowledge

Browser Compatibility
Backend Integration
Cross Site Scripting (XSS)
Cross Site Request Forgery (CSRF)
HTTP Strict Transport Security (HSTS)
X-Frame-Options (XFO)

Related Knowledge

WD 065

Browser Compatibility

Make sure site is W3C compliant. View on multiple browsers.

AD 047

Backend Integration

The section of a program that facilitates data management and interaction. It's also called the server-side.

WD 122

Cross Site Scripting (XSS)

Make sure the page or website is free from XSS possible issues.

WD 121

Cross Site Request Forgery (CSRF)

Ensure that requests made to the server-side are legitimate and originate from your website / app to prevent CSRF attacks.

WD 120

HTTP Strict Transport Security (HSTS)

The HTTP header is set to Strict-Transport-Security.

WD 124

X-Frame-Options (XFO)

Protects your visitors against clickjacking attacks.