Showing posts with label application. Show all posts
Showing posts with label application. Show all posts

Tuesday, August 9, 2016

Web Application Firewall (WAF)

By definition, WAF is going to filter out web request containing SQL injection, cross-site scripting, etc.

Ref: https://www.owasp.org/index.php/Web_Application_Firewall

CSP on Apache

To add CSP to root if sort of funny. The following will NOT work for most cases !!     <LocationMatch "^/$">        Header s...