Many http headers via 🔎Julia Evans🔍 on Twitter: “some security headers… “
Posted by jpluimers on 2021/07/20
An image on CORS will follow; likely more on related topics too. [WayBack] 🔎Julia Evans🔍 on Twitter: “some security headers… “ about:
- Content-Security-Policy (CSP)
- Referrer-Policy
- Strict-Transport-Security (HSTS)
- Expect-CT
- X-XSS-Protection
Interesting comments in the thread.
More to follow: [Archive.is] 🔎Julia Evans🔍 on Twitter: “going to talk about CORS headers on a different page because that’s a Whole Thing but i’d love to know what else I left out / got wrong here :)” including these:
- [WayBack] https://twitter.com/b0rk/status/1161680137865367553
- [WayBack] 🔎Julia Evans🔍 on Twitter: “HTTP request methods (part 2)… “
- PUT is more like a Create or Edit *this* thing and here are all the data. And POST is more like Create or Edit a thing based on these data. You can see PUT as like you overwrite a file by another, and POST like the data is being processed https://tools.ietf.org/html/rfc2616#page-55 … (3rd <p> of PUT)
-
This describes what some REST APIs actually (and often incorrectly) do. Per the HTTP standard though, PUT is supposed to be idempotent, and that’s what actually differentiates it from POST (which doesn’t have to be).
- [WayBack] 🔎Julia Evans🔍 on Twitter: “important HTTP response headers… “
–jeroen
The Wiert Corner - irregular stream of stuff 
Leave a Reply