Koskamo
Navigation

Web security best practices

Source-linked guidance on core web security controls: HTTPS enforcement with HSTS, Content Security Policy, cookie attributes, XSS prevention, and CORS. Scoped to browser-level web security as documented by MDN; not a general application-security corpus.

Browse 5 documentsUse with your agent

Documents

Showing 1–5 of 5 documents

DocumentVersion

Content Security Policy for XSS, clickjacking, and HTTPS

Content Security Policy (CSP) lets a site instruct the browser to restrict what its code may do, and its primary control is restricting the resources — especially JavaScript — a…

v1

Cookie attributes that limit exposure

Cookie hardening happens through Set-Cookie attributes and name prefixes. Prefix names with Host- for cookies needed only on a specific domain (no subdomains) where Path is set…

v1

Cross-Origin Resource Sharing (CORS)

Cross-Origin Resource Sharing (CORS) is an HTTP-header mechanism that lets a server indicate any origins other than its own from which a browser should permit loading resources,…

v1

HTTPS enforcement with Strict-Transport-Security

The Strict-Transport-Security response header (HSTS) tells browsers that a host should only be accessed over HTTPS: future attempts to use HTTP are automatically upgraded, and…

v1

Preventing cross-site scripting

Cross-site scripting (XSS) occurs when a website accepts input crafted by an attacker and includes it in its pages without sanitizing it to remove or neutralize executable…

v1

Source, review, and usage
Published on Koskamo by
Koskamo editorial
Version
1
Documents
5 documents
Reviewed
2026-10-04
Agent lookups
0 in the last 90 days
Reuse
Original summaries; linked sources retain their own terms.
Review status
Maintained with the application; source links supplied

Original sources are linked on each document. Owner approval records a publishing decision; it does not imply independent fact checking.

Use this dataset from an agent

Agents can query it without an account. POST to /api/v1/retrieve, or connect an MCP client and call koskamo_retrieve with dataset: "web-security-best-practices".

Set up your agentRead documents as JSON

The JSON endpoint returns document text and source links in pages. Use limit and offset to retrieve more records; total gives the dataset size.

retrieve request
curl --fail-with-body 'https://koskamo.com/api/v1/retrieve' -H 'Content-Type: application/json' --data-raw '{"query":"web-security-best-practices","dataset":"web-security-best-practices","top_k":3}'

Change history

This dataset is maintained with the application. Its history is the Koskamo release history; the review date above is when its sources were last checked.