Besides the Internet Engineering Task Force and W3 standards, VMware Horizon 8 employs other measures to protect communication that uses the HTTP protocol.
What to read next
Reducing MIME Type Security Risks VMware Horizon 8 sends the header x-content-type-options: nosniff in its HTTP responses to help prevent attacks based on MIME-type confusion. Mitigating Cross-Site Scripting Attacks VMware Horizon 8 employs the XSS (cross-site scripting) Filter feature to mitigate cross-site scripting attacks by sending the header x-xss-protection=1; mode=block in its HTTP responses. Content Type Checking VMware Horizon 8 accepts requests with the following declared content types only: Client Behavior Monitoring User Agent Allowlisting VMware Horizon 8 . By default, all user agents are accepted. Host Checking
