Skip to content

Instantly share code, notes, and snippets.

@igara
Last active February 11, 2016 10:42
Show Gist options
  • Select an option

  • Save igara/996f7bbc2defc3bd835c to your computer and use it in GitHub Desktop.

Select an option

Save igara/996f7bbc2defc3bd835c to your computer and use it in GitHub Desktop.
OWASP ZAPを使用してサイトの脆弱性と闘う話 ref: http://qiita.com/igara/items/637b710e79f9c425a770
Header set X-FRAME-OPTIONS "DENY"
header.set: "X-Frame-Options: DENY"
header.append: "Cache-Control: no-cache, no-store, must-revalidate"
header.set: "Pragma: no-cache"
header("Cache-Control: no-cache, no-store, must-revalidate");
header("Pragma: no-cache");
Header always set X-XSS-Protection "1; mode=block"
header.set: "X-XSS-Protection: 1; mode=block"
header("X-XSS-Protection: 1; mode=block");
header("X-Frame-Options: DENY");
session.cookie_httponly = On
header.append: "Set-Cookie: HttpOnly"
ini_set('session.cookie_httponly', 1);
session.cookie_secure = On
header.append: "Set-Cookie: secure"
ini_set('session.cookie_secure', 1);
Header set Pragma no-cache
Header set Cache-Control no-cache, no-store, must-revalidate
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment