The HTTP header ________ helps in specifying which domains are allowed to embed a page, thus mitigating some types of XSS attacks.
- Access-Control-Allow-Origin
- Content-Type
- Referrer-Policy
- X-Frame-Options
The 'Access-Control-Allow-Origin' header controls which domains can embed the page, reducing the risk of XSS attacks through malicious embedding.
Loading...
Related Quiz
- What are DKIM and SPF, and why are they important in email integration?
- In high-risk transactions, payment gateways might implement ________ as an additional verification step.
- For a project requiring a database to be populated with specific types of data for testing, the developer would use ________.
- A common method to sanitize user input and prevent XSS is using ________ encoding.
- A developer is debugging a transaction issue where even after an error, the changes are not rolled back. The first component to investigate is ________ in CodeIgniter.