{CodeRoyale}
All challenges
Multiple ChoiceIntermediate 30s

API security headers

Choose the best answer for: security in APIs
Options
  1. 1Only CORS, since cross-origin rules alone cover the threats
  2. 2Only HTTPS, because transport encryption is the key control
  3. 3CSP, HSTS, X-Content-Type-Options, X-Frame-Options
  4. 4No headers, since security is enforced in the application
fullstackintermediate

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle