Peter.Juhasz 

Contains a rich set of security-related middlewares for ASP.NET Core with strongly-typed configuration.

Adds the Content-Security-Policy header to responses with content type text/html.

Adds the Public-Key-Pinning header to all responses.

Prevents redirects to unsafe locations. Allows only the ones listed explicitly.

Adds the Referrer-Policy header to all responses.

Adds the X-Robots-Tag header to all responses.

Adds the Frame-Options and X-Frame-Options headers to responses with content type text/html.

Adds the X-XSS-Protection header to each response with text/html media type.

Adds X-Permitted-Cross-Domain-Policies header to all responses.

Adds the X-Content-Type-Options header to all responses.

Adds the X-UA-Compatible header to each response with text/html media type.

Adds the X-Download-Options header with 'noopen' value to all file downloads.

Adds the Expect-CT header which allows sites to opt in to reporting and/or enforcement of Certificate Transparency requirements.

LinqEx contains a set of extension methods to runtime objects, mainly to enumerables. These extensions can help you increase your productivity.

Adds the Strict-Transport-Security header to all secure responses.

Computes the integrity attribute for remotely linked styles and scripts.

Middleware that requires an authenticated identity in the request pipeline.

Adds the Feature-Policy header to responses with content type text/html.

Adds the missing noopener relationship to vulnerable links.

Upgrades links, styles, scripts, images and other resources that are linked in HTML via non-secure HTTP to HTTPS.