aspnetcore-security-headers
Middleware for adding Content Security Policy, HSTS, and HPKP security headers to ASP.NET Core applications.
What is aspnetcore-security-headers?
Joonasw.AspNetCore.SecurityHeaders is a middleware library for ASP.NET Core that adds security headers like Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), and HTTP Public Key Pinning (HPKP) to web applications. It helps developers mitigate common web vulnerabilities such as XSS, protocol downgrades, and MITM attacks by providing a fluent configuration API.
ASP.NET Core developers building web applications who need to implement security headers compliant with modern web security standards.
It offers a simple, integrated middleware approach with features like nonce generation and conditional header application, reducing the complexity of manually managing security headers in ASP.NET Core.
Overview
Middleware for adding security headers to an ASP.NET Core application.
Use Cases
Best For
- Adding CSP headers to ASP.NET Core apps with inline script/style support
- Enforcing HSTS policies for HTTPS-only applications
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
