Don't forget to add these to your Apache (or OHS) configuration in httpd.conf:
Header set X-XSS-Protection "l;mode=block"Header set Content-Security-Policy "default-src *;"Header set X-Content-Type-Options "nosniff"Header set Cache-Control "no-store"Header set X-Frame-Options SAMEORIGIN
Happy hardening!
Applicable Versions
- Apache
- Oracle HTTP Server (OHS) 11g/12c
No comments:
Post a Comment