The Local CSP Moodle plugin allows administrators to create and manage the Content-Security-Policy (CSP) HTTP header without manually editing the .htaccess file. CSP works as an allowlist to specify what types of content, and from what origin (internal and external), supporting web browsers can load within your website. Think of it as a “code firewall.” Read More >
Search Results for: Content Security Policy
Add Content-Security-Policy (CSP) in Drupal 8
The Content-Security-Policy Drupal module helps you configure a Header set Content-Security-Policy header to specify what sources your website should load scripts from – (e.g. your own website, embedded YouTube video, and analytics trackers). This forces supporting web browsers to ignore other external requests to mitigate cross-site scripting (XSS) and other code injection attacks. There are Read More >
10 Tips to Improve Magento Security
It is important to stay on top of Magento security practices to protect your website and customer data against cyber intrusions. Below we’ll cover some tips for hardening your Magento website and web server. Initial Setup Create an Unique Admin Panel URL Install an SSL Certificate Hardening Magento Security Magento Security Extensions and Backups Magento Read More >
Drupal Security.txt File
Have you ever considered creating a Drupal security.txt file? The security.txt file is a standardized format meant to create a uniform approach for security vulnerability disclosure. The formatted text will generally include: One or more contact methods to reach your security analysts directly Date which the security.txt file should be considered expired Public encryption key Read More >
Joomla 4 Security HTTP Headers
Learning how to secure Joomla 4 is easier than ever before. With the pre-installed HTTP Headers Joomla plugin, you can add up to ten security HTTP headers to protect your data against next-generation cyber attacks. How to Secure Joomla 4 with HTTP Headers Log into your Joomla 4 administrator dashboard (e.g. https://example.com/administrator). Select System from Read More >
Improve ownCloud Server Security
How secure is ownCloud? As with most stable software, the answer depends on how well you protect your instance against ownCloud security issues. There are many ownCloud vulnerabilities listed in the National Vulnerability Database (NVD). Fortunately, there are many countermeasures you can implement to protect your ownCloud server from these and server level cyber intrusions. Read More >
How to Add a Password Policy in ownCloud
A strong password policy in ownCloud ensures all users do their part in thwarting password-based cyber attacks. These features aren’t included by default. However, there is a free add-on app for enforcing a strong password policy in ownCloud. It won’t resolve all ownCloud security issues, but it is a good start. Install the ownCloud Password Read More >
HTTP Headers WordPress Plugin for Better Security
The HTTP Headers WordPress plugin allows WordPress administrators to create and manage HTTP headers to improve security, privacy, and performance for visitors without needing to manually edit the .htaccess file. This is useful for: Mitigating the possibility of making syntax mistakes within the .htaccess file which render the website inaccessible with an 500 error Environments Read More >
How to Add Referrer-Policy and X-Frame-Options in Zenphoto
After installing the Zenphoto image gallery content management system (CMS), available in Softaculous, there are multiple ways to easily improve website security: Force HTTPS (SSL certificate) Enforce minimum password strength Data privacy settings for GDPR and CCPA compliance But as stated in our Web Hosting New Year’s Resolutions for 2020 blog earlier this year, there Read More >
Add Feature-Policy in Drupal 8 with the Security Kit Module
The Feature-Policy HTTP header specifies what browser features can be used on a website and its <iframe> elements. The most common browser features among a long list are autoplay (for videos), camera, fullscreen, and microphone. Below we’ll cover how to install the Security Kit module in Drupal 8 and enable Feature Policy. Get high performance Read More >