Configuring Security Headers in ASP.NET and ASP.NET Core Applications

After watching this course you'll have the knowledge and skills to mitigate common browser attacks by setting HTTP headers. The code samples are in ASP.NET Core and ASP.NET for .NET Framework.

You’ve heard about attacks like Cross Site Scripting (CSS) and click-jacking. This course, Configuring Security Headers in ASP.NET and ASP.NET Core Applications, will give you the skills needed to mitigate these kinds of attacks by turning on browser features in your ASP.NET(Core) application like Content Security Policy (CSP), Referrer Policy and Feature Policy. By the end of this course you'll not only know how to make these configurations, you'll understand how these attacks work.

• Course Overview 1min
• How Security Headers Help Protect Your Application 12mins
• Controlling the Browser to Protect Against Cross Site Scripting (XSS) and Click-Jacking Attacks 20mins
• Reducing the Attack Surface with X-Content-Type-Options, Subsource Integrity, and by Withholding Version Information 16mins