Directory traversal
Directory traversal If we don’t set Directory traversal of then we can see any folder on website. Say for example – http://localhost/demo/mydir/ And it looks like – So all the 3 folder are visible to […]
Missing X-frame options header
Missing X-frame options header We have to change X-frame options header. First check how it looks. Open any page of your website. I am using Firefox with firebug addon. You can use Google chrome as […]
Web browser XSS protection missing
Web browser XSS protection missing We have to set on Web browser XSS protection to XSS attack. First check how it looks. Open any page of your website. I am using Firefox with firebug addon. […]
X Content-Type Header Missing
X Content-Type Header Missing TO prevent MIME-type sniffing we have to be very cautious. First check how it looks. Open any page of your website. I am using Firefox with firebug addon. You can use […]
Remove server banner details from response header
Remove server banner details from response header If you don’t want to expose your Server Details on HTTP Response Header , you need to take care about it. First check how it looks. Open any […]