Security Headers

Definitions

1. HTTP response headers that instruct browsers to enable security features. Key headers: Content-Security-Policy (XSS prevention), Strict-Transport-Security (force HTTPS), X-Frame-Options (clickjacking), X-Content-Type-Options (MIME sniffing), and Referrer-Policy (data leakage). Check your score at securityheaders.com.

   In plain English: Special HTTP headers that tell browsers to enable security protections like blocking XSS attacks and forcing HTTPS.

   Example: "Run your site through securityheaders.com — you're missing CSP, HSTS, and X-Frame-Options. That's an F grade."

Related Terms

• WAF
• CORS
• CORS Preflight
• Content Security Policy
• HSTS
• Fetch API
• Clickjacking
• CORS Origin
• Code Obfuscation
• Defense in Depth
• Human Firewall
• Isolation
• Mobile Security
• RASP
• Ready State
• Application Hardening
• Computer Network Defense
• HTTP Method Tampering