Talking Drupal: Talking Drupal #401 - HTTP Headers

Today we are talking about HTTP Headers with our hosts.

For show notes visit: www.talkingDrupal.com/401

• What are HTTP Headers
• Why are they important
• Exploring headers
• Types of headers
• What can you discover from headers
• Modifying headers
• Tools to validate

• Content Security Policy (CSP)
• Dries’ Header Evaluation Tool
• Mozilla Header Documentation
• Good overview of CSP
• Nic’s Header Blog Post

Nic Laflin - www.nLighteneddevelopment.com @nicxvan John Picozzi - www.epam.com @johnpicozzi Stephen Cross - stephencross.com @stephencross Martin Anderson-Clutz - @mandclu

Martin Anderson-Clutz - @mandclu Content-Security-Policy Adds a Content-Security-Policy header which allows your Drupal site to inform browsers of trusted sources for JavaScript, CSS, and other external resources.