Search Results

Follow the steps below to remediate this finding on Plesk. Log in to the Plesk control panel.Navigate to Domains > your domain > Apache & nginx Settings.Under "Additional nginx directives", add:add_header X-Content-Type-Options "nosniff" always;Alternatively, ...

Follow the steps below to remediate this finding on WordPress. Add the following to your theme's functions.php file or a custom plugin:add_action('send_headers', function() { header('X-Content-Type-Options: nosniff'); });Alternatively, if using Apache, add to ...

Follow the steps below to remediate this finding on Joomla. Edit the .htaccess file in the Joomla root directory and add:<IfModule mod_headers.c> Header always set X-Content-Type-Options "nosniff" </IfModule>Alternatively, install the SecurityHeaders extension...

Follow the steps below to remediate this finding on Drupal. Install and enable the Security Kit (SecKit) module:composer require drupal/seckit drush en seckitNavigate to Admin > Configuration > System > Security Kit.Under the "Content Type Sniffing" section, e...

Follow the steps below to remediate this finding on WordPress. Ensure all forms use WordPress nonces for CSRF protection.In form output:wp_nonce_field('my_action', 'my_nonce_field');In form processing:if (!isset($_POST['my_nonce_field']) || !wp_verify_nonce($_...

Follow the steps below to remediate this finding on Joomla. Joomla's Form API includes CSRF tokens automatically via JSession::checkToken().In your form template, add:<?php echo JHtml::_('form.token'); ?>In your controller, validate:JSession::checkToken() or j...