Security Headers Test

STRICT-TRANSPORT-SECURITY

Ensures HTTPS-only access.

PERMISSIONS-POLICY

Restricts feature access.

X-FRAME-OPTIONS

Prevents clickjacking.

CONTENT-SECURITY-POLICY

Protects from XSS.

X-CONTENT-TYPE-OPTIONS

Prevents MIME-type sniffing.

X-XSS-PROTECTION

Blocks XSS attacks.

X-PERMITTED-CROSS-DOMAIN-POLICIES

Manages cross-domain requests.

REFERRER-POLICY

Controls Referer header.

Date

Tue, 18 Mar 2025 03:49:57 GMT

Content-Type

text/html

Connection

keep-alive

x-powered-by

Express

referrer-policy

origin

cache-control

no-store

x-bubble-perf

{"total":101.7,"percents":{"top":{"bubble_cpu":44,"block":55.8,"capacity_rl":0,"other_pause":0,"pre_fiber":0.5},"sub":{"pp_userdb":0,"pp_wait_userdb":0,"http_request":0,"serverjson":55.7,"appserver_cache_misses_time":0,"redis":130.7,"fiber_queue":6.2,"capacity_wait":1.7}},"counts":{"pp_userdb":0,"http_request":0,"derived_build":0,"derived_cache_attempts":9,"derived_cache_memory_misses":9,"serverjson":62,"appserver_cache_attempts":1,"appserver_mem_cache_hits":0,"appserver_cache_hits":1,"appserver_cache_misses":0,"redis":112,"fiber_queue":116,"blocks":115},"misc":{"userdb_results":0,"userdb_data":0,"spent_time":6717184}}

x-bubble-capacity-used

0.103 unit-seconds used

x-bubble-capacity-limit

0 ms slower

vary

Accept-Encoding

cf-cache-status

DYNAMIC

Server

cloudflare

CF-RAY

9221c357e9a30028-BOM

Content-Encoding

gzip

alt-svc

h3=":443"; ma=86400