A couple of security settings in web.config's customHeaders section

Date: 2016-05-03 03:31:26 | By: ninetiger | Tags: Asp.net, Security

<configuration>
   <system.webServer>
      <httpProtocol>
        <remove name="X-Powered-By" />
         <customHeaders>
            <add name="X-Frame-Options" value="DENY" />
            <add name="X-XSS-Protection" value="1;mode=block" />
            <add name="X-Content-Type-Options" value="nosniff" />
         </customHeaders>
      </httpProtocol>
   </system.webServer>
</configuration>

X-Frame-Options: Disable other website to show my webpages in their web pages using iframes.

Tags: Asp.net, Security

Comments:

Ninetiger blog

A couple of security settings in web.config's customHeaders section

Latest updates

Archives

Tags