diff --git a/docs/security.rst b/docs/security.rst index f2a1ee4e..b6c234b6 100644 --- a/docs/security.rst +++ b/docs/security.rst @@ -122,7 +122,7 @@ Security Headers This section contains a list of headers supported by Flask and some packages that implements them. -`Content Security Policy `_ (CSP) +Content Security Policy (CSP) ----------------------------------------------------------------------------- Enhance security and prevents common web vulnerabilities such as cross-site scripting and MITM related attacks. @@ -140,7 +140,7 @@ See also `Content Security Policy `_ * `flask-csp `_ * `flask-secure-headers `_ -`HTTP Strict Transport Security `_ (HSTS) +HTTP Strict Transport Security (HSTS) ------------------------------------------------------------------------------------------------------------------------------ Redirects http requests to https on all urls, preventing MITM attacks. @@ -159,7 +159,7 @@ See also `Strict Transport Security `_ * `flask-secure-headers `_ -`X-FRAME-OPTIONS `_ (Clickjacking protection) +X-FRAME-OPTIONS (Clickjacking protection) ------------------------------------------------------------------------------------------------------------------------- Prevents the client from clicking page elements outside of the website, avoiding hijacking or UI redress attacks. @@ -175,7 +175,7 @@ See also `X-Frame-Options `_ * `flask-secure-headers `_ -`X-Content-Type-Options `_ +X-Content-Type-Options ------------------------------------------------------------------------------------------------------------- Prevents XSS by blocking requests on clients and forcing them to read the content type instead of first opening it. @@ -189,7 +189,7 @@ See also `X-Content-Type-Options `_ * `flask-secure-headers `_ -`Cookie options `_ +Cookie options ---------------------------------------------------------------------------------------------------------- For setting cookies on client-side storage. @@ -205,7 +205,7 @@ See also `HTTP cookies `_ * `flask-secure-headers `_ -`HTTP Public Key Pinning `_ (HPKP) +HTTP Public Key Pinning (HPKP) ------------------------------------------------------------------------------------------------------- For associating clients with web servers through a certificate key and prevent MITM attacks.