Control from where resources are allowed to load on your ASP.NET Core site

How can you protect your app from possible Certificate Authority compromise?

Shows how you can make sure your site is (almost) always accessed over a secure connection

How to make sure all requests hitting an ASP.NET Core app are done over a secure channel.