Opțiuni de securitate

Antete de securitate HTTP

X-Frame-Options

• "7.6 The X-Frame-Options header" in HTML Living Standard
• RFC 7034: HTTP Header Field X-Frame-Options
• X-Frame-Options, MDN Web Docs

X-Content-Type-Options

• X-Content-Type-Options, MDN Web Docs
• Blog 'IE8 Security Part VI: Beta 2 Update'

X-XSS-Protection (învechit)

Acest antet a fost eliminat din test, deoarece este învechit și nu mai este recomandat de furnizorii de browsere.

Content-Security-Policy (CSP)

• Content Security Policy Level 3, W3C Working Draft (În conformitate cu CSP3, considerăm frame-src nu ca fiind învechit.)
• Content Security Policy Level 2, W3C Recommendation
• Content-Security-Policy, MDN Web Docs
• Mozilla's Laboratory (Content Security Policy / CSP Toolkit)

Referrer-Policy

• Referrer Policy, W3C Candidate Recommendation, 26 January 2017
• Referrer Policy, Editor’s Draft
• Referrer-Policy, MDN Web Docs

Alte opțiuni de securitate

security.txt

• RFC 9116: A File Format to Aid in Security Vulnerability Disclosure
• Common Security Advisory Framework Version 2.0, "7.1.8 Requirement 8: security.txt"
• IANA registry for security.txt fields
• Securitytxt.org
• "Wat is security.txt?" (în olandeză) de Digital Trust Center
• "Handreiking security.txt" (în olandeză) de NCSC-NL