Headit

This plugin addresses the need for a simple way to add HTTP headers to outbound HTTP responses in your site.

These headers can include custom ones specific to your application, or can be security related. Some you may wish to specify to protect your site may include:

• Public-Key-Pins
• Strict-Transport-Security
• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Content-Security-Policy
• Content-Security-Policy-Report-Only

Related Links

• Troy Hunt — Introducing you to browser security headers on Pluralsight
• PluralSight.com — Introduction to Browser Security Headers
• OWASP — List of useful HTTP headers
• Scott Helme — Hardening your HTTP response headers