I've just deployed a few changes to Security Headers to bring it up to date with recent changes in the industry. Here are the details and how they might affect you. Security Headers SponsorI announced sponsorship of the Security Headers project back in December 2016 and that continues through to…
Tag: Security Headers
Total 8 Posts
I was debating whether or not to call Clear Site Data a Security Header but in the end I decided I would. During the use of a web app we can leave various pieces of data in the browser that we'd like to clear out if the user logs out…
We have a new Security Header!! Feature Policy will allow a site to enable or disable certain browser features and APIs in the interest of better security and privacy. Let's take a look! Feature Policy Feature Policy is being created to allow site owners to enable and disable certain web…
It was a little over 3 years ago when I first launched securityheaders.io and it's come a long way since then. This update doesn't really change anything in the way the service works or what it does, but I thought it was time for a little refresh. securityheaders.io…
For a long time it's been difficult to set security headers when you use certain hosted solutions like Ghost Pro or GitHub Pages. All of that is about to change and you can now quickly and easily deploy any security header of your choosing and the best part, it might…
I had a bit of a strange issue on Security Headers this week and at first I thought it was someone trolling me. Turns out it wasn't someone playing a practical joke but instead it was search engine crawlers, that were hungry for porn... Security Headers This is my free…
It's that time of year again! I'm really excited to publish the 6th installment of my Alexa Top 1 Million analysis so we can take a look over our progress on securing the web over the last 6 months. Previous Crawls It's hard to believe there are now 5 previous…
I'm sat on a train right now and between bursts of WiFi connectivity I'm testing some code to parse a CSP header. Whilst looking for big headers to test it on I came across Twitter who are certainly at the top of the list, but does it need to be…
