Two posts covering the basics of some security headers
We’ve been trying to improve the security of some of our Rails apps recently by improving which security headers we’re passing about.
Here is a basic guide to setting your permissions policy in Rails and one for your content security policy
We’ve seen a surprising number of projects without these set, and they can be a security quick win!
Post a comment