3 of my sites answer plain curl with a 2-byte "ok" and no headers. A browser UA gets the real page. Check content type. https://dev.to/posting-dude/i-checked-the-security-headers-on-11-of-my-own-sites-0-send-hsts-and-5-can-be-framed-by-any-page-4ej4
I Checked the Security Headers on 11 of My Own Sites. 0 Send HSTS, and 5 Can Be Framed by Any Page Pos
I Checked the Security Headers on 11 of My Own Sites. 0 Send HSTS, and 5 Can Be Framed by Any Page
Posting Dude
Nov 10
Posting Dude
Posting Dude
Posting Dude
Follow
I Checked the Security Headers on 11 of My Own Sites. 0 Send HSTS, and 5 Can Be Framed by Any Page
#security
#webdev
#nextjs
#indiehackers
7 min read
π° Read the original article on Dev.to Security
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes β full credit and traffic to the original publisher.