You’ve heard about attacks like Cross Site Scripting (CSS) and click-jacking. This course, Configuring Security Headers in ASP.NET and ASP.NET Core Applications, will give you the skills needed to mitigate these kinds of attacks by turning on browser features in your ASP.NET(Core) application like Content Security Policy (CSP), Referrer Policy and Feature Policy. By the end of this course you’ll not only know how to make these configurations, you’ll understand how these attacks work.
Author Name: Roland Guijt
Author Description:
Roland is a Microsoft MVP enjoying a constant curiosity around new techniques in software development. His focus is on all things .Net and browser technologies. As a long-time trainer, he led many courses on these topics and spoke about them at international conferences. He also travels around the globe to offer his self-developed workshops. The word that comes to mind when he thinks about software development is passion! Roland lives in The Netherlands with his wife and two boys.

Table of Contents

• Course Overview
  1min
• How Security Headers Help Protect Your Application
  12mins
• Controlling the Browser to Protect Against Cross Site Scripting (XSS) and Click-Jacking Attacks
  20mins
• Reducing the Attack Surface with X-Content-Type-Options, Subsource Integrity, and by Withholding Version Information
  16mins