Set HTTP Security Headers Apache WHM

HTTP Security Headers are a set of HTTP headers that provide additional security for web servers, browsers, and internet service providers. They are used to protect against a variety of attacks, such as cross-site scripting and clickjacking.
Copy:
Header set X-Frame-Options SAMEORIGIN
Header set X-XSS-Protection 1;mode=block
Header set X-Content-Type-Options nosniff
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
Header always set Referrer-Policy "same-origin"
Header always set Permissions-Policy: interest-cohort=()
Article: bit.ly/3zayoP8
☕ BuyMeACoffee: www.buymeacoffee.com/RaddyThe...
Discounts:
⚡ Hostinger: www.hostg.xyz/aff_c?offer_id=...
⚡ Elementor: trk.elementor.com/26518
Recording Equipment:
◾ Microphone: amzn.to/3uX0yvP
◾ Shotgun Mic: amzn.to/3aRsSJb
◾ Camera: amzn.to/3IMumkx
◾ Lens: amzn.to/3ARxvh8
◾ Lighting: amzn.to/3PBetj2
Computer Gear:
◾ Keyboard: amzn.to/3RCXRcC
◾ Headphones: amzn.to/3aIvskX
◾ Mouse: amzn.to/3AXykVu
Connect with me:
◾ Website: www.raddy.dev
◾ Newsletter: www.raddy.co.uk/newsletter

[@RicardoCorai]

Amazing! Thanks for this tutorial. I have an A on Security Headers website. There is a new rule that is missing here, Content-Security-Policy; do you have the properly instruction to add on WHM?

[@RaddyDev]

Glad it was helpful! You have to be careful with the Conent Security Policy as it can break your website. For example it could block JavaScript, which most websites use for their functionality. It should be something like this: Header set Content-Security-Policy "default-src 'self';" You have a lot of options with this one. Best to check the online Reference List before adding it.