Wiki· Updated 17 Oct 2026
HTTP headers
Security headers a server should send and how to enable them safely.
Response headers tell the browser how to protect the user: always use HTTPS, don't frame the site into other pages, don't guess file types.
See what your server sends with HTTP Inspector. Fixes for each finding are below.