Advanced Search
Search Results
395 total results found
Strict-Transport-Security Header Not Set
Web application vulnerabilities
Missing Anti-clickjacking Header
Microsoft IIS webserver
Remediation Steps
Follow the steps below to remediate this finding on Microsoft IIS webserver. Start the application named: IIS Manager.Select your websiteOn the right part of the screen, access the option named: HTTP Response Headers.On the top right part of the screen, click ...
X-Content-Type-Options Header Missing
Nginx webserver
Remediation Steps
Follow the steps below to remediate this finding on Nginx webserver. In your nginx.conf file add:add-header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
Absence of Anti-CSRF Tokens
Apache webserver
Remediation Steps
Follow the steps below to remediate this finding on Apache webserver. Make sure that the headers module is loaded:sudo a2enmod headersAdd the following code to the apache2.conf file:<IfModule mod_headers.c> Header always set Strict-Transport-Security "m...
Apache 2.4.x < 2.4.58 Multiple Vulnerabilities
Microsoft IIS webserver
Remediation Steps
Follow the steps below to remediate this finding on Microsoft IIS webserver. Start the application named: IIS Manager.Select your websiteOn the right part of the screen, access the option named: HTTP Response Headers.On the top right part of the screen, click ...
Application Error Disclosure
Nginx webserver
Remediation Steps
Follow the steps below to remediate this finding on Nginx webserver. In your nginx.conf file add:add-header X-Frame-Options "SAMEORIGIN";