Security with HTTP Headers: Overview of Attacks and Defenses
summary
Overview of HTTP security headers (CSP, HSTS, X-Frame-Options, CORS and related headers) and how they help mitigate web attacks such as XSS, CSRF, SSRF. Explains each header alongside the specific risks it reduces, then surveys tools and resources to implement these headers in web applications.
AI-written summary · about
chapters (10)
- 0:00HTTP security overview
- 1:49CFP use case
- 7:14Clickjacking defense
- 10:18CSRF attacks
- 14:52CORS limits
- 18:44XSS via inputs
- 25:10CSP hardening
- 28:17Cookie flags
- 28:37HTTPS redirection
- 29:40Security tools
related talks
21mSecurity with HTTP headers: overview of attacks and defenses
26mHTTP Headers - The Simplest Security
31mHTTP Security Headers: A Technology History Through Scar Tissue
50mEnhancing Application Security: Understanding and Utilizing Browser Security Features
59mHTTP Security Headers You Need To Have On Your Web Apps
38mWhy Do We Need Security Headers?
24mTurn Your Browser into a Hacker Trap with HTTP Security Headers
52mSeatbelts for Web App (Security Headers)