Terms starting with "H"
HTTP Response Splitting
PHP 5.0+
Injecting CRLF sequences into HTTP headers causes the server to emit two separate responses, enabling cache poisoning and XSS.
CWE-113 OWASP A3:2021
6mo ago
Security advanced
6.1
HTTP Security Headers
PHP 5.0+
1
A set of HTTP response headers that instruct browsers to enforce security policies, reducing XSS, clickjacking, and data leakage risks.
CWE-16 OWASP A5:2021
6mo ago
Security beginner
HTTP Security Headers Checklist
A set of response headers that instruct browsers to enforce security policies — CSP, HSTS, X-Frame-Options, X-Content-Type-Options, and Permissions-Policy.
6mo ago
Security intermediate
HTTP Status Codes
5
Three-digit codes in HTTP responses that indicate whether a request succeeded, failed, or requires further action.
6mo ago
Networking beginner
HTTP Strict Transport Security (HSTS)
PHP 5.0+
A response header that instructs browsers to always connect via HTTPS for a specified duration, preventing protocol downgrade attacks.
CWE-319 OWASP A5:2021
6mo ago
Security beginner
HTTP/2 & HTTP/3
1
Modern HTTP protocol versions that deliver significant performance gains via multiplexing, header compression, and (HTTP/3) UDP transport.
6mo ago
Performance intermediate
Hyrum's Law
3
"With enough API users, all observable behaviours will be depended upon, regardless of documented contract" — implicit behaviours become de facto API.
6mo ago
General intermediate