https://antomor.com/categories/security/ Recent content in Security on Antomor Hugo -- gohugo.io en Sat, 11 Apr 2020 10:51:20 +0200 https://antomor.com/blog/csp-and-cors/ Sat, 11 Apr 2020 10:51:20 +0200 https://antomor.com/blog/csp-and-cors/ What is CSP CSP stands for Content Security Policy and it is a security mechanism that helps to protect or mitigate some common attacks such as XSS (Cross-site scripting). It can be set by means of Content-Security-Policy HTTP header or using HTML meta tag. HTTP header: Content-Security-Policy: policy HTML Meta tag: <meta http-equiv="Content-Security-Policy" content="policy"> A policy describes a set of directives composed by the area in which the rule is applied and the rule itself. https://antomor.com/blog/security-headers-on-static-websites/ Thu, 26 Dec 2019 10:56:23 +0100 https://antomor.com/blog/security-headers-on-static-websites/ When I started this blog, I evaluated many options: blogging platform vs static-generated website self-hosted vs hosted solutions costs and many more. I ended up trying to build something very simple, consisting in a static website hosted on GitHub Pages. With this solution, I have been able to cut the cost on any host solution, since that, being a dev, I am quite comfortable in writing in a text editor.