# Security Headers: Help Please

**URL:** <https://forums.realmacsoftware.com/t/security-headers-help-please/42868>\
**Category:** RapidWeaver Classic\
**Created:** [March 19, 2024, 9:34pm UTC](https://forums.realmacsoftware.com/t/security-headers-help-please/42868 "2024-03-19T21:34:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![MLDMLD](https://avatars.discourse-cdn.com/v4/letter/m/41988e/32.png) [@MLDMLD](https://forums.realmacsoftware.com/u/MLDMLD)\
**Post date:** [March 19, 2024, 9:34pm UTC](https://forums.realmacsoftware.com/t/security-headers-help-please/42868/1 "2024-03-19T21:34:50Z")

</div>

Hello,

My client has hired a 3rd party to do a security audit on their site, and came back with the following issue:

“Web Application Headers: HTML Security Issues. No Security Headers are set”

I have never run into this before, can anyone please advise what I can do to remedy this?

---

<div class="post-metadata">

**Author:** ![Kunstmaler](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/kunstmaler/32/934_2.png) [@Kunstmaler](https://forums.realmacsoftware.com/u/Kunstmaler)\
**Post date:** [March 19, 2024, 10:03pm UTC](https://forums.realmacsoftware.com/t/security-headers-help-please/42868/2 "2024-03-19T22:03:56Z")

</div>

This is not an easy thing to do … I have put it together reasonably well with the help of this website: [https://securityheaders.com](https://securityheaders.com)

---

<div class="post-metadata">

**Author:** ![Bruno](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/bruno/32/25457_2.png) [@Bruno](https://forums.realmacsoftware.com/u/Bruno)\
**Post date:** [March 20, 2024, 6:19am UTC](https://forums.realmacsoftware.com/t/security-headers-help-please/42868/3 "2024-03-20T06:19:42Z")

</div>

Hi, you could visit [owasp.org](Https://owasp.org) for informations (lot of docs). Securityheader is a matter for the webserver, for example http connection without « s » isn’t allowed 😁. Of course it’s possible to add html code in our site html header but we have to know the configuration of the webserver. I think it’s OUR problem when WE manage our own server. Maybe I’m wrong… I’m agree with @Kunstmaler it’s not an easy task.