WD 120

HTTP Strict Transport Security (HSTS)

The HTTP header is set to Strict-Transport-Security.

Explore Resources
Instagram of AlphabagFacebook of AlphabagFacebook of AlphabagFacebook of Alphabag

Knowledge Brief

No items found.

Related Knowledge

SSL Security
Cross Site Request Forgery (CSRF)
Cross Site Scripting (XSS)
Content Type Options
X-Frame-Options (XFO)
Modernizr

Related Knowledge

WD 043

SSL Security

Visitors have to feel safe when they leave their information in your website. Especially when they have to register their contacts detail or credit card number.

WD 121

Cross Site Request Forgery (CSRF)

Ensure that requests made to the server-side are legitimate and originate from your website / app to prevent CSRF attacks.

WD 122

Cross Site Scripting (XSS)

Make sure the page or website is free from XSS possible issues.

WD 123

Content Type Options

Prevents Chrome and IE from trying to mime-sniff the content-type of a response away from the one being declared by the server.

WD 124

X-Frame-Options (XFO)

Protects your visitors against clickjacking attacks.

WD 110

Modernizr

It finds out what features and capabilities the browser has.