Restrict or allow resource sharing between sites using CORS header. CORS (Cross-Origin Resource Sharing) header is supported on all modern browsers. Can I Use cors? Data on support for the cors feature across the major browsers from caniuse.com. By default, the browser restricts cross-origin HTTP requests through scripts. And, CORS can be handy to reuse…
Take advantage of the CAA DNS record to authorize CA to issue the TLS certificates. What is DNS CAA? CAA is one of the DNS record types which instruct CA if they should issue a certificate or not. In another word, you are letting the world know who should issue your domain SSL/TLS certificate. CAA…
Protect your website from click-jacking attack by implementing CSP (Content Security Policy) header CSP is one of the OWASP top 10 secure headers and often recommended by security experts or tools to implement it. There are many options to build the policy to enforce how you want to expose your web resources. One of the…
Find vulnerabilities in vBulletin community software. vBulletin is one of the popular community, forum software powering more than 100,000 sites on the Internet. Like every software, vBulletin may be vulnerable if not hardened and secured correctly. As a best practice, you should frequently scan your Internet-facing community to find weaknesses so you can mitigate before…
Block all those unnecessary requests you see in the logs I assume you have looked into your website visitor logs and fed up with those unwanted requests. They may not be necessarily bad or spam, but it is they may not add value to the business. Imagine if the majority of the hits are coming…
Happy to introduce gf.dev to you… Geekflare tools have evolved in the last two years. Thanks for your support and love! Initially, Geekflare tools were focused on mostly performing a site speed test, but today it got more than 30 tools. Earlier, tools were hosted on a subdomain (tools.geekflare.com) and very excited to let you…
Get notified when Google Cloud external static IP is not in used so you can release them to save money. I was going through my Google Cloud Platform (GCP) bill and noticed this: It’s not Google fault but me. I reserved a static IP but forgot to release after deleting the VM. It happens, and…
Fixing Canonical tag appearing twice on an AMP page RankMath is gaining popularity for WordPress SEO plugins. Looks like direct competition to Yoast. I thought to give a try, and all went well except the issue which I noticed when Google indexed my new post. Do you see the message – Your page has AMP…
How about having your local development environment accessible over HTTPS without SSL warning? As a developer, you may have to work on multiple projects, clients and web applications. One of the prerequisites for web application development is to test the websites locally on the browser during the development phase. Very high chance that the application…
Take advantage of modern browser features such as preloading, prefetching, preconnect to make the WordPress website faster. As a site owner, who doesn’t like to make every possible thing to load the webpage faster? Ensuring site loads faster consistently worldwide is challenging. There are several things you can do to load the site resources quickly,…
