Security (21 articles)

HTTP Does Not Redirect to HTTPS: How to Force HTTPS

Your http pages load without forcing https. Add one 301 redirect that sends every http request…

Your pages load JavaScript from a CDN, but those script tags have no integrity attribute. That…

A form on an HTTPS page that posts to an HTTP endpoint sends user data over…

Best practices guide for Internal HTTP URLs (SE-013). Priority: High. Batch check required.

Your server is announcing what software it runs and which version, through headers like Server, X-Powered-By,…

The X-XSS-Protection header is deprecated and ignored by every modern browser, so the real fix is…