Peter.Juhasz 

Contains a rich set of security-related middlewares for ASP.NET Core with strongly-typed configuration.

Adds the Content-Security-Policy header to responses with content type text/html.

Adds the X-Content-Type-Options header to all responses.

Adds the Referrer-Policy header to all responses.

Prevents redirects to unsafe locations. Allows only the ones listed explicitly.

Adds the X-Robots-Tag header to all responses.

Adds the X-XSS-Protection header to each response with text/html media type.

Adds the Public-Key-Pinning header to all responses.

Adds X-Permitted-Cross-Domain-Policies header to all responses.

Adds the X-UA-Compatible header to each response with text/html media type.

Adds the X-Download-Options header with 'noopen' value to all file downloads.

Adds the Frame-Options and X-Frame-Options headers to responses with content type text/html.

Adds the Expect-CT header which allows sites to opt in to reporting and/or enforcement of Certificate Transparency requirements.

Adds the Strict-Transport-Security header to all secure responses.

LinqEx contains a set of extension methods to runtime objects, mainly to enumerables. These extensions can help you increase your productivity.

Computes the integrity attribute for remotely linked styles and scripts.

Middleware that requires an authenticated identity in the request pipeline.

Adds the Feature-Policy header to responses with content type text/html.

Adds the missing noopener relationship to vulnerable links.

Upgrades links, styles, scripts, images and other resources that are linked in HTML via non-secure HTTP to HTTPS.