Skip to content
CMS User Guide

Security Kit

Open Security Kit page

The Security Kit (SecKit) configuration page allows administrators to enhance the security of their Drupal site by providing various security-related settings. Key features include:

  • Content Security Policy (CSP): Define policies to control resources the user agent is allowed to load, protecting against cross-site scripting (XSS) and data injection attacks.
  • X-Frame-Options: Prevent clickjacking by controlling whether a page can be displayed in an iframe.
  • X-XSS-Protection: Enable browser-based cross-site scripting filters.
  • X-Content-Type-Options: Prevent MIME type sniffing by enforcing the correct MIME type for content.
  • HTTP Strict-Transport-Security (HSTS): Enforce secure connections to the server, mitigating man-in-the-middle attacks.
  • Other Security Headers: Implement additional headers like From-Origin to enhance security.

Configuring SecKit helps protect your site from common web vulnerabilities by setting appropriate HTTP headers and security policies. For more detailed information, refer to the SecKit project page.