    Gain insights into HTTP security headers, learn their risks, explore solutions, and discover how to implement them using Helmet for enhanced web application security.

HSTS_brew_final.tar.gz

Chrome

run_mal

Chrome_hsts

Chrome_hsts-mkcert

debug

Chrome_hsts-mal

Chrome_hsts-inn

This course teaches you hands-on practical use of HTTP security headers as browser security controls to help secure web applications.

For each HTTP security header that can enhance your web application security, you'll learn what is the overall risk of not implementing it, and what does a proposed solution help with. Finally, you'll learn how to implement and configure the security header with Helmet, a popular and well maintained Node.js package on npm.

Web Application Security: Understanding HTTP Security Headers

[check-my-headers](https://github.com/UlisesGascon/check-my-headers) is a fast and simple command-line application in Node.js to ping web servers and inspect the HTTP security headers to provide a status log.

Unlike online and built-in tools, `check-my-headers` need to be installed in your development environment, or better yet, in your #concept=continuous_integration#continuous_integration#concept#
 pipeline.

It is open source and based on Node.js, so if you have a JavaScript tooling environment setup then it can be easily installed.

In a modern Node.js environment, we can make use of the `npx` tool to execute a one-off executable npm package.

To start a scan, we can run the following command:

```
npx check-my-headers https://example.com 
```
You can run this command in the terminal widget below.


In this lesson, we'll learn how to use a command-line application to retrieve HTTP headers set for a web page.

Introduction

HTTP Security Headers

Testing for Security Headers

What's Next?

Check My Headers command-line application