consulting

Security (21 articles)

Mixed content - http resources on https

Mixed Content (HTTP Resources on HTTPS): How to Fix It

Mixed content happens when an HTTPS page loads sub-resources over plain HTTP, so fix it by…
Learn More
X-content-type-options header missing: how to fix it

X-Content-Type-Options Header Missing: How to Fix It

Add a single response header, X-Content-Type-Options: nosniff, so browsers trust your declared MIME types instead of…
Learn More
Referrer-policy header missing: how to set it correctly

Referrer-Policy Header Missing: How to Set It Correctly

Add a Referrer-Policy: strict-origin-when-cross-origin response header so your site controls how much URL data browsers leak…
Learn More
Stylesheets via cdn without subresource integrity

Stylesheets via CDN without Subresource Integrity: How to Fix It

You are loading CSS from a CDN or another server without an integrity attribute on the…
Learn More
External opener links vulnerable to tabnapping

External Links Vulnerable to Tabnabbing: How to Fix It

Links with target="_blank" used to hand the new tab a reference back to your page through…
Learn More
Https links http

HTTPS Links HTTP

Best practices guide for HTTPS Links HTTP (SE-012). Priority: Medium. Batch check required.
Learn More

Get new blog posts by email: