Security Headers2 Research Advisories
Security Headers Advisories
A close look at HTTP security headers: what each one does, how to configure it correctly, and how to verify it is actually enforced.
Other Research Categories
July 21, 2026• 14 min read
HTTP Security Headers: What Each One Does and How to Verify It
A reference guide covering HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, and CORP. What each header does, the correct configuration, what WebDefect checks for, and how to confirm the header is being served and enforced.
#hsts#x-frame-options#security-headers#http-headers
July 14, 2026• 12 min read
Content Security Policy Explained: Configuration, Bypass Patterns, and Verification
A practical guide to Content Security Policy for web developers. Covers directive syntax, the most common misconfigurations that render a policy ineffective, how to test a policy properly, and how to verify enforcement after deployment.
#csp#content-security-policy#xss#security-headers