Skip to content

Instantly share code, notes, and snippets.

@Avaq

Avaq/security-techniques.md

Last active November 14, 2017 11:09
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Avaq/7c605f4318bfdcf76efa26d3308b14e8 to your computer and use it in GitHub Desktop.
Save Avaq/7c605f4318bfdcf76efa26d3308b14e8 to your computer and use it in GitHub Desktop.
Download ZIP
A compilation of techniques for creating secure web applications
Raw
security-techniques.md

Restrictors

Technique Type Combats
Strict Transport Security header protocol downgrade, session hijacking
Public Key Pinning header impersonation
CSP Content Security Policy header cross site scripting
Same-Origin Policy browser cross site request forgery

Relaxatives

Technique Type Relaxes
CORS Cross-Domain Resource Sharing header Same-Origin Policy

Other

Technique Description
SNI Server Name Indication An extension to TLS which allows multiple HTTPS virtual top-level hosts
SSL Test A tool for testing your HTTPS connection
Security Headers test A tool for testing your security related headers (see techniques of type header)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment