C# 7 and .NET Core 2.0 High Performance

Reinforcing security headers

Many modern browsers provide additional security features. These security features are automatically enabled by the browser running your site if the response contains those headers. In this section, we will discuss how we can add those headers in our ASP.NET Core application and enable additional security in the browser.

To investigate which headers are missing in our application, we can use the www.SecurityHeaders.io site. However, to use this, we need our site to be publicly accessible on the internet.

Alternatively, we can use ngrok to make a HTTP tunnel to our local application, which makes our site accessible from the internet. The ngrok tool can be downloaded from the following link: https://ngrok.com/download ...