Classic ASP & Security Headers

What are Security Headers

What is Classic ASP

Classic ASP’s Response Object and Security Headers

Code Examples:

Code example is available as ASP server-side include file on my Github.

'Note all the important security headers here:
Response.AddHeader "Access-Control-Origin","[URL]"
Response.AddHeader "Feature-Policy","microphone 'none';"
Response.AddHeader "Referrer-Policy","no-referrer"
Response.AddHeader "Strict-Transport-Security", "max-age=15552001; includeSubDomains; preload"
Response.AddHeader "X-Content-Type-Options","nosniff"
Response.AddHeader "X-Frame-Options","SAMEORIGIN"
Response.AddHeader "X-XSS-Protection","1; mode-block;"

How to Set Security Headers on Your Website Using Microsoft IIS

Security Headers Video

Cross Origin Resource Sharing (Explained by Example)

Author: Rick Cable / AKA Cyber Abyss

A 16 year US Navy Veteran with 25+ years experience in various IT Roles in the US Navy, Startups and Healthcare. Founder of FinditClassifieds.com in 1997 to present and co-founder of Sports Card Collector Software startup, LK2 Software 1999-2002. For last 7 years working as a full-stack developer supporting multiple agile teams and products in a large healthcare organization. Part-time Cyber Researcher, Aspiring Hacker, Lock Picker and OSINT enthusiast.