Modification to HTTP headers and contents of payment pages
-
Hello, I am looking into the requirements coming up for PCI v4.0 compliance for my ecommerce site and one of the items necessary is the following:
____
11.6.1 A change and tamper-detection mechanism is deployed as follows:
To alert personnel to unauthorized modification (including indicators of compromise, changes, additions, and deletions) to the HTTP headers and the contents of payment pages as received by the consumer browser.
- The mechanism is configured to evaluate the received HTTP header and payment page.
- The mechanism is configured to evaluate the received HTTP header and payment page.
The mechanism functions are performed as follows:
- At least once every seven days
____
In addition to this, I also need to implement a Content Security Policy or Sub-Resource Integrity.
Are either of these a feature that the BulletProof Security Plugin can help with?
Thank you!
- The topic ‘Modification to HTTP headers and contents of payment pages’ is closed to new replies.