Identify the recommended HTTP headers for web security on Mozilla's infosec site. List the headers, their recommended values, and briefly explain the purpose of each. Specifically, focus on headers related to content security, cross-site scripting, and referrer policy.
Navigate to the home page of infosec.mozilla.org. Click on the 'Web Security' link. Locate the section detailing recommended HTTP security headers. Identify and list the headers related to content security, cross-site scripting, and referrer policy. Extract the recommended values for each identified header. Briefly explain the purpose of each header as described on the page.
Successfully navigate to the 'Web Security' page. Identify and list the `Content-Security-Policy` header, its recommended values (if applicable, e.g., 'default-src 'self''), and its purpose (e.g., mitigating XSS and data injection attacks). Identify and list the `X-XSS-Protection` header, its recommended value (`0`), and its purpose (e.g., disabling browser's built-in XSS auditor due to potential vulnerabilities). Identify and list the `Referrer-Policy` header, its recommended value (e.g., 'no-referrer' or 'same-origin'), and its purpose (e.g., controlling how much referrer information is sent with requests). Ensure the explanations for each header's purpose are accurate and derived from the webpage content.