Security Headers

HTTP security headers instruct browsers to enable built-in security mechanisms. Properly configured security headers provide a powerful defense-in-depth layer against many common web attacks. This chapter covers the most important security headers and how to configure them.