{"id":6838,"date":"2023-04-03T06:53:17","date_gmt":"2023-04-03T06:53:17","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=6838"},"modified":"2025-03-06T10:32:57","modified_gmt":"2025-03-06T10:32:57","slug":"internet-information-services-iis-securing-best-prac","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/internet-information-services-iis-securing-best-prac","title":{"rendered":"Internet Information Services\u00a0(IIS)\u00a0Securing Best Prac \\ Website Headers"},"content":{"rendered":"\n

<\/p>\n\n\n\n

ASPNET \\ Web Server \\ Misconfiguration: Missing Error Handling<\/td>Disable Detailed errors in IIS<\/td><\/td><\/tr>
Permissions-Policy<\/strong><\/td>fullscreen=()<\/td><\/td><\/tr>
 Cache-Control<\/strong><\/td>private, no-store<\/td><\/td><\/tr>
Referrer-Policy<\/strong><\/td>strict-origin-when-cross-origin<\/td>we can conclude that the default  setting deals with most of the security<\/td><\/tr>
X-XSS-Protection<\/strong><\/td>1; mode=block<\/td><\/td><\/tr>
 X-Content-Type-Options<\/strong><\/td>nosniff<\/td><\/td><\/tr>
Strict-Transport-Security<\/strong><\/td>max-age=31536000; includeSubDomains; preload<\/td>HSTS Enable<\/a><\/td><\/tr>
X-Frame-Options<\/strong> <\/td>SAMEORIGIN <\/td><\/td><\/tr>
Content-Security-Policy<\/strong><\/td>default-src ‘self’; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; script-src * ‘unsafe-inline’ ‘unsafe-eval’; style-src * ‘unsafe-inline’;<\/td>https:\/\/content-security-policy.com\/<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\"\"<\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"

ASPNET \\ Web Server \\ Misconfiguration: Missing Error HandlingDisable Detailed errors in IISPermissions-Policyfullscreen=() Cache-Controlprivate, no-storeReferrer-Policystrict-origin-when-cross-originwe can conclude that the default  setting deals with most of the security X-XSS-Protection1; mode=block X-Content-Type-OptionsnosniffStrict-Transport-Securitymax-age=31536000; […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-6838","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t