Harden Response Headers
Review and improve headers in a local sample server you control.
Review and improve headers in a local sample server you control.
Prepare 20m · Build 110m · Verify 30m · Document 20m
Work only inside the folder created by Smartphone-Academy.py prepare security-headers. Use the supplied samples or systems you personally administer.
Prepare the Termux workspace
Open Termux in the Academy root and prepare this lab with the local companion. It creates safe samples, notes and evidence files under your Termux account.
python Smartphone-Academy.py prepare security-headersNo root. Use the supplied files and keep the workspace under $HOME.Practical mission
- Capture the original local response headers
- Add a minimal set suited to the sample application
- Test that legitimate pages and assets still load
- Explain why headers reduce risk but do not replace secure code
A before-and-after header table with rationale and compatibility notes.
Quality gate
Analyst reflection
Which result from “Explain why headers reduce risk but do not replace secure code” would need more evidence before it could support an operational decision?
After checking the evidence, run python Smartphone-Academy.py complete security-headers. Progress is stored locally in the Termux home directory.