FoxLearn.AspNet.SecurityHeaders 1.0.1

🔷 FoxLearn.AspNet.SecurityHeaders

FoxLearn.AspNet.SecurityHeaders is a lightweight library for adding common security headers to ASP.NET applications. It simplifies the process of applying essential HTTP security headers like Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, and others helping protect your applications from common web vulnerabilities.

✅ Features

• 🔒 Easy integration with ASP.NET MVC and WebForms
• ⚙️ Predefined defaults for recommended security headers
• 🛠️ Fully customizable header values
• 💡 Supports .NET Framework 4.5 and later

📥 Installation

Install via the .NET CLI:

dotnet add package FoxLearn.AspNet.SecurityHeaders

Or via the NuGet UI in Visual Studio by searching for FoxLearn.AspNet.SecurityHeaders, then click Install.

🧪 Usage

To enable and configure security headers in your MVC application: Update FilterConfig.cs:

using System.Web.Mvc;
using FoxLearn.AspNet.SecurityHeaders;

public class FilterConfig
{
    public static void RegisterGlobalFilters(GlobalFilterCollection filters)
    {
        filters.Add(new HandleErrorAttribute());

        // Apply default headers
        SecurityHeadersConfig.RegisterGlobalSecurityHeaders(filters);
    }
}

To fully control the headers returned, create a HeaderPolicyCollection and define your own set of headers including any custom headers you may need:

using System.Web.Mvc;
using FoxLearn.AspNet.SecurityHeaders;

public class FilterConfig
{
    public static void RegisterGlobalFilters(GlobalFilterCollection filters)
    {
        filters.Add(new HandleErrorAttribute());

        var policy = new HeaderPolicyCollection()
            .AddFrameOptionsDeny()
            .AddContentTypeOptionsNoSniff()
            .AddCustomHeader("X-Default-Header", "DefaultValue")
            .AddPolicy("CustomPolicy", p =>
            {
                p.AddCustomHeader("X-Custom", "MyValue"); // Apply custom headers
            });

        SecurityHeadersConfig.RegisterGlobalSecurityHeaders(filters, policy);
    }
}

📘 Apply a Policy to a Controller Action

public class HomeController : Controller
{
    private readonly ILogger<HomeController> _logger;

    public HomeController(ILogger<HomeController> logger)
    {
        _logger = logger;
    }

    [SecurityHeadersPolicy("CustomPolicy")]
    public IActionResult Index()
    {
        return View();
    }
}

To enable headers in a WebForms project, update your Global.asax.cs:

using System.Web;
using FoxLearn.AspNet.SecurityHeaders;

public class Global : HttpApplication
{
    public override void Init()
    {
        SecurityHeadersConfig.Register(this);
        base.Init();
    }
}

You can also create a HeaderPolicyCollection and define your own set of headers.

using System.Web;
using FoxLearn.AspNet.SecurityHeaders;

public class Global : HttpApplication
{
    public override void Init()
    {
        var policy = new HeaderPolicyCollection()
            .AddFrameOptionsDeny()
            .AddContentTypeOptionsNoSniff()

        SecurityHeadersConfig.Register(this, policy);

        base.Init();
    }
}

🔒 License

This project is licensed under the MIT License. Free for personal and commercial use.