Twitter: @webpwnized
Thank you for watching. Please upvote and subscribe. Using Apache mod_headers, the web server can append HTTP headers to the response. It is often advantageous to have the web-tier append headers rather than the application-tier since the application only responds to some HTTP requests. The web server is in a position to add headers to all HTTP responses regardless of whether the application was involved. Apache allows headers to be added conditionally or statically making Apache ideal for adding headers like HSTS, X-Frame-Options, X-Content-Type-Options, X-XSS-Protection, Cache-Control, and other headers.