HTTP headers for web security

Slides and code for my talk on HTTP headers for web security.

I gave this talk at pisa.dev.

• 🌐 https://http-response-headers-for-web-security.vercel.app/
• 🗎 https://raw.githubusercontent.com/jackdbd/http-response-headers-for-web-security/main/assets/presentation.pdf

If you want to see my notes on a slide, click the Presenter Mode button or put presenter/ just before the slide number (e.g. <HOST>/presenter/5 instead of <HOST>/5).

Installation

This presentation is a Vue.js application built with Slidev. You can install its dependencies with the following command:

npm install

Development

Slidev can hot-code reload this presentation thanks to Vite.

Launch the Vite dev server with this command:

npm run dev

You can now view the presentation on localhost:

• Play mode: http://localhost:3030/1
• Presenter mode: http://localhost:3030/presenter/1

Deploy

The presentation will be automatically deployed to Vercel on each git push.

PDF export

Slidev allows exporting the slides to a PDF. This feature relies on Playwright and requires playwright-chromium to be available.

ℹ️ Since I don't want to install Playwright when building on Vercel (so deployments are faster), I declare playwright-chromium as a dev dependency and set npm install --omit=dev as the Vercel installCommand in vercel.json.

Run this command to export the slides to assets/presentation.pdf.

npm run build:pdf:slides