I have updated the module to automatically output the OWASP recommended security headers. These headers are automatically added to the response but can be configured as required, or even disabled. Code Configuration Configuration via appSettings...

Enhance website security in Optimizely with Jhoose—automatically adds OWASP-recommended HTTP headers, supports flexible config, and server header control.

It has always been difficult to manage the CSP on a website, this new module for Optimizley aims to make the process easier giving control back to advanced editors. Continue reading →

It has always been difficult to manage the CSP on a website, this new module for Optimizley aims to make the process easier giving control back to advanced editors.

The Content Security Policy response header is used to enhance a website's security. It allows control of how resources are loaded, whitelisting trusted domains. Continue reading →