Argus Safety Recommended IIS Security Parameters for HTTP Response Headers 'Strict-Transport-Security' and 'X-XSS-Protection' (Doc ID 2852973.1)

Last updated on JULY 13, 2023

Applies to:

Goal

Documentation of good configuration practices for Strict-Transport-Security and X-XSS-Protection that are recommended to be applied for preventive purposes.  These are non-critical parameters and their implementation is optional.

For further information, please refer to:

Strict-Transport-Security Strict-Transport-Security - HTTP | MDN (mozilla.org)

X-XSS-Protection X-XSS-Protection - HTTP | MDN (mozilla.org)

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.