work in progress...
{|
|
'''Example of an .htaccess''' file, adapted for the '''HTTP Security Header Scanner''' (Notice: This is an example that must be changed to adapt it to your own pages).
<pre>
#Content Security Policy
Header set Content-Security-Policy "default-src 'none'; frame-src 'self'; font-src 'self'; img-src 'self' siwecos.de; script-src 'self'; style-src 'self';"
#HTTP Content-Types
AddCharset UTF-8 .html
#Public Key Pins
Header set Public-Key-Pins "pin-sha256=\"base64+primary==\"; pin-sha256=\"base64+backup==\"; max-age=5184000; includeSubDomains"
#Strict-Transport-Security
Header set Strict-Transport-Security "max-age=31536000; includeSubDomains"
#X-Content-Type-Options
Header always set X-Content-Type-Options "nosniff"
#X-Frame-Options
Header always set X-Frame-Options "SAMEORIGIN"
#X-Xss-Protection
Header always set X-Xss-Protection "1; mode=block"
#Referrer-Policy
Header set Referrer-Policy "strict-origin"
</pre> #Content Security Policy Header set Content-Security-Policy "default-src 'none'; frame-src 'self'; font-src 'self'; img-src 'self' siwecos.de; script-src 'self'; style-src 'self';" #HTTP Content-Types AddCharset UTF-8 .html #Public Key Pins Header set Public-Key-Pins "pin-sha256=\"base64+primary==\"; pin-sha256=\"base64+backup==\"; max-age=5184000; includeSubDomains" #Strict-Transport-Security Header set Strict-Transport-Security "max-age=31536000; includeSubDomains" #X-Content-Type-Options Header always set X-Content-Type-Options "nosniff" #X-Frame-Options Header always set X-Frame-Options "SAMEORIGIN" X-Xss-Protection Header always set X-Xss-Protection "1; mode=block" #Referrer-Policy Header set Referrer-Policy "no-referrer"
== Further links ==
* SelfHTML Wiki: https://wiki.selfhtml.org/wiki/Webserver/htaccess <br />* Wikipedia: https://en.wikipedia.org/wiki/.htaccess <br />* SEO application examples: https://www.seo-trainee.de/htaccess-datei-basics-und-anwendungsbeispiele/
|}
[[Category:Sicherheitstipps]]
[[Category:Was_ist_Was]]
[[Category:Glossar]]
[[Category:FAQ]]
