Cybersecurity
Checking HTTP Security Headers
Audit a target's HTTP security headers — CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and the Cross-Origin trio (COOP, COEP, CORP). Use when: SOC2 / PCI auditor flagged "missing security headers" or a Mozilla Observatory grade is below B, OR you need HSTS preload eligibility for chrome://net-internals. Threshold: any missing required header on production HTML response, HSTS max-age below 31536000s (preload requirement), CSP with 'unsafe-inline' or 'unsafe-eval', X-Frame-Options absent AND CSP frame-ancestors absent (clickjacking), Cache-Control allowing public cache on authenticated endpoint. Trigger with: "audit security headers", "check csp", "hsts check", "header posture".
- Publisher / source
- jeremylongshore/tons-of-skills-marketplace (found on GitHub top repositories)
- Upstream record
- jeremylongshore/tons-of-skills-marketplace
- Version
- Version 1
- Published
- Publication review
- Approved for publication
- Content fingerprint
ed3f8aa94e76dc5cd0f31e39e41a786f4adcb797179a354ed6c0c30c796bea35