Security Headers

A Security Header is

• Type of security banner placed on a website

• A security tool that you deploy via Backstage

• A HTTP header(s) that provide additional security for your website

• A tool provided by the UK Government for ecommerce websites

Security Headers can protect your website from attacks like

• Click jacking

• Malware

• HTML Injection

• Ransomware

Which of these is a security header?

• Secure HTTP Bypass

• Protocol X-Secure

• CSP

• Permissions Policy

​ Which of these browsers support CSP

• Internet Explorer 6-9

• Safari 23-118

• Chrome 14-24

• Firefox 23 -118

CSP means...

• Critical Security Protection

• Content Secure Prevention

• Content Secure Policy

• Critical Security Policy

Security Headers are

• A layer of defense

• A single point of failure

• A total defense mechanism

You can find security headers on a site, using

• The Developer Tools Tab

• Asking a friend

• Using the explore tab

• Using the bookmark tab

Security Headers can form part of

• Web request header

• Web response header

• Troubleshooting header

• Console header

What type of security header is used in the request header?

How can a developer add security headers?

• Via server configuration

• Via Code libraries

• Via Service Desk request

• Via AWS Services