Site Security
The Tailored Travel website sends a set of security headers with every page response. These are automatic. There is nothing for editors to configure or maintain.
What They Do
Section titled “What They Do”Security headers are instructions the web server sends to the visitor’s browser. They tell the browser how to behave when displaying the site.
The headers in place protect against common web attacks:
- Clickjacking. Another website cannot embed Tailored Travel pages inside an invisible frame to trick visitors into clicking things.
- Content sniffing. The browser uses the file type the server declares, rather than guessing from the file contents.
- Referrer leakage. When a visitor follows a link from the site to another site, the full page URL is only shared if the destination also uses HTTPS.
- Unnecessary browser features. Camera, microphone, geolocation, and payment APIs are switched off. The site does not use them, so there is no reason for the browser to have them available.
What This Means for Editors
Section titled “What This Means for Editors”Nothing changes about how you create or publish content. Security headers are applied at the server level and have no effect on the backoffice or the editing experience.