HTTP Hung Headers
Daq ngeHbogh Hung headers yInuD.
HTTP Hung headers ngo'wI' ja' chay' lo'wI'lIj Hung, clickjacking, XSS ghap content sniffing rurbogh HIvmey Daq. jan vam Daq ghel, Hung headers tu'lu'bogh nuD, qaghDaj je qeS 'angmoH.
Hung headers ghel motlh
HSTS (Strict-Transport-Security) ngo'wI' ra' reH HTTPSDaq DaqlIj SuchmeH, rar HTTPDaq pemmoHbogh HIvmey pup. Hung headers potlh law' wa' 'oH.
CSP Daq lo'meH naghmey (scriptmey, stylemey, mIllogh...) qo'mey 'angmoH. lugh DaqeSchugh, XSS HIvmey Daq Hung HoSghaj law' wa' 'oH, chaw'be'bogh code Qaplu'be'moHmo'.
Daq latlhDaq iframe qoDDaq lanlu'meH pup, clickjacking Daq Hung (leghlaHbe'bogh nuq qIpmeH lo'wI' toj). DaH CSP frame-ancestors chut je lo'laH.
ghobe': Hung 'ay' potlh bIH, 'ach Hung teH code, 'olmeH, dependencymey je jan qeS je belong. jan vam jang headers neH HarghHa'.
DNS DanIvmoH DaneH'a'?
DNS ngo'wI' pagh poQ nIvqu' yIwIv, tup puS neH DaqeS.