Headers as Browser Security Controls

Security in HTTP

When developing web applications, your applications depend on communication protocols that already have a set of defined and implemented standards for how to transfer data and securely manage it.

Browsers utilize headers sent over HTTP (generally secure HTTP connections) to enforce and confirm such communication standards and policies. Using these HTTP headers to increase security for client-side code is a quick and efficient method to mitigate security vulnerabilities and implement a defense in depth strategy.