Skip to content
application-security

Security Header

HTTP Security Headers

Definition

HTTP security headers are response headers that instruct browsers to enable security mechanisms and restrict dangerous behaviors. Key security headers include Content-Security-Policy (XSS protection), Strict-Transport-Security (enforce HTTPS), X-Content-Type-Options (prevent MIME sniffing), X-Frame-Options (clickjacking protection), and Permissions-Policy (restrict browser features).

Automated tools like securityheaders.com and observatory.mozilla.org grade header configuration.

Related Terms

CSP
Content Security Policy
HSTS
HTTP Strict Transport Security
Clickjacking
Clickjacking
← Back to Glossary

Ship secure code faster

Crash Override integrates security into the developer workflow. No context switching, no waiting on reviews.

Talk to a Human See the Product