HTTP Headers (16 articles)

Referrer-policy header missing: how to set it correctly

Referrer-Policy Header Missing: How to Set It Correctly

Add a Referrer-Policy: strict-origin-when-cross-origin response header so your site controls how much URL data browsers leak…
Learn More
Stylesheets via cdn without subresource integrity

Stylesheets via CDN without Subresource Integrity: How to Fix It

You are loading CSS from a CDN or another server without an integrity attribute on the…
Learn More
External opener links vulnerable to tabnapping

External Links Vulnerable to Tabnabbing: How to Fix It

Links with target="_blank" used to hand the new tab a reference back to your page through…
Learn More
Https url links to http url

HTTPS URL Links to HTTP URL: How to Fix It

A secure HTTPS page that links to the HTTP version of your own pages forces an…
Learn More

Get new blog posts by email: