Security
Chapter 70: Permissions Policy & Modern Security Headers
Browser Capability Governance, HTTP Transport Hardening, Fetch Metadata Isolation, and Defense-in-Depth Web Headers
-
01
What is the Permissions Policy?
-
02
Master Production Security Headers Template & Comprehensive Audit
-
03
Permissions Policy HTTP Header Syntax
-
04
The allow Attribute on iframe
-
05
Core Permissions Policy Features
-
06
HTTP Strict Transport Security (HSTS) & Preload
-
07
Preventing MIME Sniffing: X-Content-Type-Options: nosniff
-
08
Sec-Fetch Metadata Request Headers (CSRF Defense)
-
09
Secure Cookie Attributes & Cookie Prefixes
-
10
The security.txt Standard (RFC 9116)