Security headers quick reference Learn more about headers that can keep your site safe and quickly look up the most important details.

Security headers quick reference

Learn more about headers that can keep your site safe and quickly look up the most important details.

This article lists the most important security headers you can use to protect your website. Use it to understand web-based security features, learn how to implement them on your website, and as a reference for when you need a reminder.

Security headers recommended for websites that handle sensitive user data:

Content Security Policy (CSP)

Trusted Types

Security headers recommended for all websites:

X-Content-Type-Options

X-Frame-Options

Cross-Origin Resource Policy (CORP)

Cross-Origin Opener Policy (COOP)

HTTP Strict Transport Security (HSTS)

Security headers for websites with advanced capabilities:

Cross-Origin Resource Sharing (CORS)

Cross-Origin Embedder Policy (COEP)

作者:Chuck Lu    GitHub