> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Missing secure browser headers

<AccordionGroup>
  <Accordion title="missing-secure-browser-headers">
    The app is missing secure HTTP headers that attempt to mitigate XSS, click-jacking, and content-sniffing attacks. Missing Secure HTTP Headers is flagged by this rule when a pipeline accepts "html" requests, but does not implement the `:put_secure_browser_headers` plug.<br />**Likelihood**: MEDIUM<br />**Confidence**: HIGH<br />**CWE**: <br />- CWE-693: Protection Mechanism Failure
    <br />**OWASP**: <br />- A05:2021 - Security Misconfiguration
  </Accordion>
</AccordionGroup>