HTTP security headers

Headers controlling selected browser protections, such as CSP and HSTS. They need application-specific configuration; their presence does not prove absence of vulnerabilities.

Sources and review

Reviewed: 2026-10-14

• OWASP Secure Headers Project | OWASP Foundation

←Back to glossary