Besides the Internet Engineering Task Force and W3 standards, VMware Horizon employs other measures to protect communication that uses the HTTP protocol.
What to read next
Reducing MIME Type Security Risks VMware Horizon sends the header x-content-type-options: nosniff in its HTTP responses to help prevent attacks based on MIME-type confusion. Mitigating Cross-Site Scripting Attacks VMware Horizon employs the XSS (cross-site scripting) Filter feature to mitigate cross-site scripting attacks by sending the header x-xss-protection=1; mode=block in its HTTP responses. Content Type Checking VMware Horizon accepts requests with the following declared content types only: Client Behavior Monitoring User Agent Whitelisting VMware Horizon . By default, all user agents are accepted. Host Checking
