StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PO
text
Body
copied!<p>For the HTTP Headers aspect of the question, take a look at the <a href="http://www.slideshare.net/akashm/secure-http-headers-c0c0n-2011-akash-mahajan" rel="nofollow">Secure HTTP Headers</a> slideshare presentation and the Mozilla Developer Network <a href="https://developer.mozilla.org/en-US/docs/Security/Securing_your_site" rel="nofollow">Securing your site</a> document.</p> <p>Here are some specific HTTP Response Headers</p> <ul> <li>Set-Cookie (<a href="http://en.wikipedia.org/wiki/HTTP_cookie#Secure_and_HttpOnly" rel="nofollow">Secure and HttpOnly attributes</a>)</li> <li><a href="https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options" rel="nofollow">X-Frame-Options</a></li> <li><a href="http://blogs.msdn.com/b/ieinternals/archive/2011/01/31/controlling-the-internet-explorer-xss-filter-with-the-x-xss-protection-http-header.aspx" rel="nofollow">X-XSS-Protection</a></li> <li><a href="http://blogs.msdn.com/b/ie/archive/2008/07/02/ie8-security-part-v-comprehensive-protection.aspx" rel="nofollow">X-Content-Type-Options</a></li> <li><a href="https://developer.mozilla.org/en-US/docs/Security/CSP/Introducing_Content_Security_Policy" rel="nofollow">X-Content-Security-Policy</a> or <a href="http://www.html5rocks.com/en/tutorials/security/content-security-policy/" rel="nofollow">Content-Security-Policy</a></li> <li><a href="https://developer.mozilla.org/en-US/docs/Security/HTTP_Strict_Transport_Security" rel="nofollow">Strict-Transport-Security</a></li> </ul> <p>Note, that different browsers and their versions have differing levels of support, so aside from secure and httponly cookies, your IE7 users may not see any benefit.</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload