Few good links for securing your asp.net mvc site After applying SecurityHeaders validate Content-security-policy-for-asp-net-mvc Improving security in ASP.NET MVC using custom headers Content-Security-Policy in ASP.NET MVC Adding HTTP Headers to Improve Security