Advanced Search
Search Results
13 total results found
Web application vulnerabilities
Strict-Transport-Security Header Not Set
Missing Anti-clickjacking Header
X-Content-Type-Options Header Missing
Microsoft IIS webserver
Start the application named: IIS Manager. Select your website On the right part of the screen, access the option named: HTTP Response Headers. On the top right part of the screen, click on the Add option. To enable the HSTS feature, enter the following...
Nginx webserver
In your nginx.conf file add: add-header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
Apache webserver
Make sure that the headers module is loaded: sudo a2enmod headers Add the following code to the apache2.conf file: <IfModule mod_headers.c> Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"</IfModule>
Microsoft IIS webserver
Start the application named: IIS Manager. Select your website On the right part of the screen, access the option named: HTTP Response Headers. On the top right part of the screen, click on the Add option. To enable the anti clickjacking feature, enter ...
Nginx webserver
In your nginx.conf file add: add-header X-Frame-Options "SAMEORIGIN";
Apache webserver
Make sure that the headers module is loaded: sudo a2enmod headers Add the following code to the apache2.conf file: <IfModule mod_headers.c> Header always set X-Frame-Options "SAMEORIGIN"</IfModule>
Microsoft IIS webserver
Start the application named: IIS Manager. Select your website On the right part of the screen, access the option named: HTTP Response Headers. On the top right part of the screen, click on the Add option. To enable the X-Content-Type-Options header, en...
Nginx webserver
In your nginx.conf file add: add-header X-Content-Type-Options "nosniff";
Apache webserver
Make sure that the headers module is loaded: sudo a2enmod headers Add the following code to the apache2.conf file: <IfModule mod_headers.c> Header always set X-Content-Type-Options "nosniff"</IfModule>