Fullstack Developer

Dominique Degottex

Fullstack Developer with eight years of shipping products end to end, now moving into security. I write here about hardening the sites I build, and what I learn testing them.

LinkedIn
Github
More about me

Security headers for a static site: the short list

A static site has no server code to exploit, but its HTTP headers still decide how a browser treats it. The six I set on every deploy, what each one stops, and how to check them.

Let's build software that holds up.

Get in touch