Articles
HSTS, CSP, X-Frame-Options and the rest — the HTTP headers that harden your site against common attacks, what each one does, and how to add them.
We use cookies to improve your experience. By continuing to use the website, you accept our use of cookies.
These cookies are required for the website to function and cannot be disabled.
Help us understand how visitors use the website by collecting anonymous statistics.
Used to display relevant ads and measure advertising effectiveness.
session
Keeps your session active while navigating the website. Deleted when you close the browser.
XSRF-TOKEN
Protects against cross-site request forgery attacks. Deleted when you close the browser.
cookie_consent
Saves your cookie preferences so we don't need to ask again. Stored for 1 year.
Google Analytics
_ga
Used to distinguish users. Stored for 2 years.
_ga_*
Used to maintain session state. Stored for 2 years.
_gid
Used to distinguish users. Stored for 24 hours.
Facebook Pixel
_fbp
Used to deliver ads and measure their effectiveness. Stored for 3 months.
fr
Used to deliver and measure the relevance of ads. Stored for 3 months.