🎯 The OWASP Secure Headers Project (also named OSHP) describes HTTP response headers that your application can use to increase the security of your application. Once set, these HTTP response headers can restrict modern browsers from running into easily preventable vulnerabilities. The OWASP Secure Headers Project intends to raise awareness and use of these headers.
📚 HTTP headers are well known and also despised. Seeking a balance between usability and security, developers implement functionality through the headers that can make applications more versatile or secure. But in practice how are the headers being implemented? What sites follow the best implementation practices? Big companies, small, all or none?
📚 We aim to publish reports on header usage stats, developments and changes, code libraries that make these headers easily accessible to developers on a range of platforms, and data sets concerning the general usage of these headers.
🌐 The OWASP Secure Headers Project was migrated to a new OWASP website.
📁 You can still access the old website here.
🎨 The project official logo is stored into the folder logo as well as into the OWASP Swag GitHub repository.
💬 Both are handled with this dedicated project:
👩💻 Content editing is done with Visual Studio Code.
A workspace file is provided with recommended extensions.
🏭 The folder ci (CI for Continuous Integration) contains materials to generate the following content.
📝 Generate the both JSON files containing the header recommended to add and remove:
- Generation is performed by this GitHub action workflow every time the file tab_bestpractices.md is modified.
📝 Generate the markdown file with the update health state of all GitHub repositories mentioned in the tab named Technical:
- Generation is performed by this GitHub action workflow every time the file tab_technical.md is modified.
📩 This template is used to announce news on social media about OSHP update:
📡 OWASP Secure Headers Project: [MESSAGE].
#appsec #appsecurity #http
[PRINT_SCREEN_IN_PNG_FORMAT_WHEN_APPLICABLE]
📖 [LINK_TO_OSHP_SECTION]
💡 Source used:
[LINK_TO_SOURCE_USED]
💌 Contributors to OSHP, before the migration of the project to GitHub:
💌 Visit this page for updated information about the contributors since the migration of the project to GitHub.
📑 This project content is free to use. It is licensed under the Apache 2.0 License.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent