This study investigates the implementation of HTTP security headers in webapplications under the .uz domain. The security headers examined include Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, and X-XSS-Protection.The study employed automated scanning tools and manual validation methods. 15 webapplications across five sectors — e-commerce, fintech, government, education, and media —were analyzed. The results revealed that 40% of web applications have not enforced any securityheaders. CSP is present on 53% of sites; however, 63% of implementations are misconfigured. A"Security Theater" phenomenon was identified: one portal possesses all security headers andscored 100 points in automated scanning, yet received an F grade from securityheaders.com. Thestudy develops a misconfiguration taxonomy for addressing security header configuration errors.
| Mualliflar | Nasrullayev Nurbek Baxtiyarovich, Azimova, Toshpo‘latov Sherzod Ortuqboy o‘g‘li |
|---|---|
| Jurnal | Management and Economics Scientific Research Journal |
| Nashr sanasi | 2026-04-01 |
| Jild | 3 |
| Son | 3 |
| Betlar | 86-96 |
| Til | O‘zbek |
HTTP xavfsizlik sarlavhalari, noto‘g‘ri konfiguratsiya, Content-Security-Policy, soxta xavfsizlik, veb-ilovalar xavfsizligi
The article comprehensively reviews the export potential, trends, developmentstrategies, geographical directions and prospects of the regions of the Republic of Uzbekistan.Proposals are made based on world and…
This article analyzes the innovative activity of enterprises in theplastics industry, their attention to innovation, as well as their innovative activityand potential. The relevance of innovative activity today is…
The article presents the results of forecasting agricultural production volume inthe Qashqadaryo region using the ARIMA model. Based on data from 2010–2024, an ARIMA (1,1,0)model was developed. According to the…
This article examines four interconnected methodological failures that preventUzbekistan’s environmental auditing system from functioning at the quality level that effectiveenvironmental governance requires. The central…
This article highlights the specific aspects of auditing insuranceorganizations, existing issues, and prospects for implementing internationalauditing standards. Practical recommendations and suggestions are also…
The article examines the features of the strategy of differentiation of goods andservices in the conditions of the modern market economy. The essence of differentiation, itsadvantages and disadvantages, as well as its…
In the context of intensifying climate change, resource scarcity, and wideningdisparities in regional development, improving the mechanism for supporting the use of greentechnologies to ensure sustainable economic…
This article develops a comprehensive methodology for assessing the impactof the level of digital technology use on the investment attractiveness of enterprises. The relevanceof the study lies in the fact that, in…
This article reviews information on the processes of applying artificial intelligencetechnologies in the mechanical engineering industry and their impact on production efficiency. It alsostudies foreign experience in…
This article analyzes the theoretical and practical aspects ofstudying the mechanisms for forecasting the development of the food market. Thestudy studied the main components of the food market, the internal and…
Management and Economics Scientific Research Journal — barcha maqolalar