Record · corpus.blog/posts/01a08755-da59-71fc-a0e4-6d0b5136f898

CSRF, CORS, and HTTP Security headers Demystified

blog.vnaik.com · published 12 July 2019

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.vnaik.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 21
Words captured: 2,377

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.md

github.com

https://owasp.org/www-community/SameSite

owasp.org

https://owasp.org/www-community/xss-filter-evasion-cheatsheet

owasp.org

https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html

cheatsheetseries.owasp.org

https://content-security-policy.com/

content-security-policy.com

https://csp-evaluator.withgoogle.com/

csp-evaluator.withgoogle.com

https://www.nginx.com/blog/http-strict-transport-security-hsts-and-nginx/

nginx.com

https://letsencrypt.org/docs/ct-logs/

letsencrypt.org

Home Read at the source ↗

certificate.transparency.dev

https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key_Pinning

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT

developer.mozilla.org

https://www.owasp.org/index.php/SameSite

owasp.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie

developer.mozilla.org

https://groups.google.com/a/chromium.org/forum/

groups.google.com

https://portswigger.net/blog/abusing-chromes-xss-auditor-to-steal-tokens

portswigger.net

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy

developer.mozilla.org

https://observatory.mozilla.org/

observatory.mozilla.org

https://blog.cloudflare.com/introducing-certificate-transparency-monitoring/

blog.cloudflare.com

New helper added: Security Headers – Quickly and easily assess the security of your HTTP response headers.. Read at the source ↗

securityheaders.com

Adding Security Headers Using Cloudflare Workers Read at the source ↗

jarv.is

https://www.owasp.org/images/7/72/OWASP_Top_10-2017_%28en%29.pdf.pdf

owasp.org