A general term for the various HTTP response headers a web server can add to protect the browser from a range of attacks.
Representative examples include X-Frame-Options (to prevent clickjacking), X-Content-Type-Options (to prevent MIME type sniffing), and Referrer-Policy (to control what referrer information is sent). Content Security Policy (CSP) and HSTS are also types of security headers.
© 2026 ITBGM