Title: How to Secure HTTP Headers  
Author: Jacques Le Roux Dec 12, 2015
Last Changed by: Jacques Le Roux Oct 20, 2017
Tiny Link: (useful for email) https://cwiki.apache.org/confluence/x/4tqnAw
Export As: Word · PDF  
Incoming Links
OFBiz Project Open Wiki (1)
    Page: Keeping OFBiz secure
Hierarchy
Parent Page
    Page: Keeping OFBiz secure
Labels
There are no labels assigned to this page.
Recent Changes
Time Editor  
Oct 20, 2017 08:06 Jacques Le Roux View Changes
Adds a summary
Oct 20, 2017 08:04 Jacques Le Roux View Changes
Adds a Content Security Policy
Oct 19, 2017 09:26 Jacques Le Roux View Changes
Adds Referrer-Policy
Oct 19, 2017 08:51 Jacques Le Roux View Changes
Adds Public-Key-Pins-Report-Only (though stuff)
Oct 18, 2017 13:41 Jacques Le Roux  
WIP...
Outgoing Links
External Links (29)
    https://en.wikipedia.org/wiki/Internet_Explorer
    https://www.owasp.org/index.php/HTTP_Strict_Transport_Secur…
    https://tomcat.apache.org/tomcat-7.0-doc/security-howto.htm…
    https://securityheaders.io/
    https://www.owasp.org/index.php/Testing_for_cookies_attribu…
    www.troyhunt.com/2015/06/understanding-http-strict-transpor…
    https://wiki.mozilla.org/Security/Guidelines/Web_Security#C…
    https://scotthelme.co.uk/content-security-policy-an-introdu…
    https://www.owasp.org/index.php/HttpOnly
    https://www.owasp.org/index.php/Clickjacking
    https://en.wikipedia.org/wiki/Google_Chrome
    https://issues.apache.org/jira/browse/OFBIZ-6766?focusedCom…
    https://www.owasp.org/index.php/Clickjacking_Defense_Cheat_…
    https://bugzilla.mozilla.org/show_bug.cgi?id=471020
    https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Securit…
    https://wiki.mozilla.org/Security/Features/XSS_Filter
    https://s.apache.org/Pggc
    www.browserscope.org/?category=security
    https://bugzilla.mozilla.org/show_bug.cgi?id=528661
    blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-c…
    https://hstspreload.appspot.com/
    https://csp.withgoogle.com/docs/adopting-csp.html
    https://en.wikipedia.org/wiki/List_of_HTTP_header_fields
    https://raymii.org/s/tutorials/HTTP_Strict_Transport_Securi…
    https://content-security-policy.com/
    https://blog.appcanary.com/2017/http-security-headers.html
    https://tomcat.apache.org/migration-7.html#Session_cookie_c…
    https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-O…
    https://mail-archives.apache.org/mod_mbox/tomcat-users/2015…
OFBiz Project Open Wiki (1)     Page: How to Secure HTTP Headers