2 I should clarify system security updates... the ones that wont break your code easily.
source | link

To expand on Anna Volk's list, this list goes above and beyond what's typical

  • Content Security Policy ( When properly implemented, makes XSS impossible )
  • HSTS (HTTP Strict Transport Security)
  • SELinux with properly set contexts.
  • yum-cron / unattended-updates installed for automatic system security updates

To expand on Anna Volk's list, this list goes above and beyond what's typical

  • Content Security Policy ( When properly implemented, makes XSS impossible )
  • HSTS (HTTP Strict Transport Security)
  • SELinux with properly set contexts.
  • yum-cron / unattended-updates installed for automatic system updates

To expand on Anna Volk's list, this list goes above and beyond what's typical

  • Content Security Policy ( When properly implemented, makes XSS impossible )
  • HSTS (HTTP Strict Transport Security)
  • SELinux with properly set contexts.
  • yum-cron / unattended-updates installed for automatic system security updates
1
source | link

To expand on Anna Volk's list, this list goes above and beyond what's typical

  • Content Security Policy ( When properly implemented, makes XSS impossible )
  • HSTS (HTTP Strict Transport Security)
  • SELinux with properly set contexts.
  • yum-cron / unattended-updates installed for automatic system updates