Reply To: Mime Sniffing, Data Sniffing, Content Sniffing, Drive-by Download Attack Protection

Ok I now have this custom code and the visual editor works: Am I good to go, no security concerns with this since the visual editor forms can only be accessed from the backend?

# Creates a conditional check for is not post.php
<FilesMatch "!^(post\.php)">
<IfModule mod_headers.c>
# Protects against Drive-by Download attacks
# Protects against MIME/Content/Data sniffing
Header set X-Content-Type-Options nosniff
Header always append X-Frame-Options SAMEORIGIN
</IfModule>
</FilesMatch>

• This reply was modified 12 hours, 2 minutes ago by  AITpro Admin.