Add security headers

[bbm]

Hi

Is there a way to add additional security headers in the response?

I had a security check. A few things were criticized. Examples for this are:
- Strict Transport Security
- Content Security Policy
- X-Frame Options
- .....

 

Best regards

[irigsoft]

40 minutes ago, bbm said:

Hi

Is there a way to add additional security headers in the response?

I had a security check. A few things were criticized. Examples for this are:
- Strict Transport Security
- Content Security Policy
- X-Frame Options
- .....

 

Best regards

hello, I made topic for securing: 

there are many useful things, like:

procedure TUniServerModule.UniGUIServerModuleHTTPCommand(
  ARequestInfo: TIdHTTPRequestInfo; AResponseInfo: TIdHTTPResponseInfo;
  var Handled: Boolean);
begin
  AResponseInfo.CustomHeaders.AddValue('X-Frame-Options', 'DENY');
end;
 

 

[irigsoft]

42 minutes ago, bbm said:

- .....

Can you tell me what else they want from the security check ?

To enhance our protection capabilities. I applied (tried) some recommendations from the security experts, but not all of them have a verified result.

Naturally, I expanded on the topic with some additional attempts at defense and principles.

I will be grateful if you upload the result of successfully used protection methods in the topic so that other colleagues can also use them.

[bbm]

Hi,

I have a few comments that I am happy to share with you. It's just quite a lot. Can we first exchange information via e-mail and then publish the result?

Best regards

[irigsoft]

You have personal message