Welcome Guest, Not a member yet? Register   Sign In
Preventing X-XSS-Protection header missing, X-Content-Type-Options etc
#1

How can issues such as X-XSS-Protection header missing, X-Content-Type-Options missing etc be prevented in Codeigniter ?

I have used the following code in header.php :

Code:
<?php
header('X-XSS-Protection: 1; mode=block');
header('X-Frame-Options: deny');
header('X-Content-Type-Options: nosniff');
header("Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline';");
?>
Reply


Messages In This Thread
Preventing X-XSS-Protection header missing, X-Content-Type-Options etc - by june123 - 07-14-2017, 02:16 AM



Theme © iAndrew 2016 - Forum software by © MyBB