Web Application Security

Web Application Security Overview

There are 3 main areas:

1. Security Headers. Used to instruct browsers of desired behaviour for miscellaneous items
2. Content Security Policy. Used to instruct browsers as to what content to allow, and from where.
3. Cross-Origin Resource Sharing (CORS), used to instruct browsers how to allow this content.

Security Headers

Content Security Policy

Cross-Origin Resource Sharing (CORS)