HTTP headers
Response
200 https://developer.mozilla.org/en-US/ 12 ms
| age | 1967 |
|---|---|
| cache-control | public, max-age=3600 |
| cf-cache-status | DYNAMIC |
| cf-ray | a562b76e6ab7cf3e-CMH |
| connection | close |
| content-security-policy | default-src 'self'; script-src 'report-sample' 'self' 'wasm-unsafe-eval' assets.codepen.io production-assets.codepen.io https://js.stripe.com transcend-cdn.com 'sha256-XNBp89FG76amD8BqrJzyflxOF9PaWPqPqvJfKZPCv7M=' 'sha256-YCNoU9DNiinACbd8n6UPyB/8vj0kXvhkOni9/06SuYw=' 'sha256-PZjP7OR6mBEtnvXIZfCZ5PuOlxoDF1LDZL8aj8c42rw='; script-src-elem 'report-sample' 'self' 'wasm-unsafe-eval' assets.codepen.io production-assets.codepen.io https://js.stripe.com transcend-cdn.com 'sha256-XNBp89FG76amD8BqrJzyflxOF9PaWPqPqvJfKZPCv7M=' 'sha256-YCNoU9DNiinACbd8n6UPyB/8vj0kXvhkOni9/06SuYw=' 'sha256-PZjP7OR6mBEtnvXIZfCZ5PuOlxoDF1LDZL8aj8c42rw='; style-src 'report-sample' 'self' 'unsafe-inline' transcend-cdn.com; object-src 'none'; base-uri 'self'; connect-src 'self' developer.allizom.org bcd.developer.allizom.org bcd.developer.mozilla.org updates.developer.allizom.org updates.developer.mozilla.org https://incoming.telemetry.mozilla.org https://observatory-api.mdn.allizom.net https://observatory-api.mdn.mozilla.net telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com https://api.github.com/search/issues https://api.stripe.com; font-src 'self'; frame-src 'self' mdn.github.io *.mdnplay.dev *.mdnyalp.dev *.play.test.mdn.allizom.net https://v2.scrimba.com https://scrimba.com jsfiddle.net www.youtube-nocookie.com codepen.io survey.alchemer.com https://js.stripe.com; img-src 'self' data: *.githubusercontent.com *.gravatar.com mozillausercontent.com firefoxusercontent.com profile.stage.mozaws.net profile.accounts.firefox.com developer.mozilla.org mdn.dev wikipedia.org upload.wikimedia.org https://mdn.github.io/shared-assets/ https://mdn.dev/; manifest-src 'self'; media-src 'self' archive.org videos.cdn.mozilla.net https://mdn.github.io/shared-assets/; child-src 'self'; worker-src 'self'; |
| content-type | text/html |
| date | Fri, 06 Nov 2026 08:27:00 GMT |
| etag | W/"89bbf6e3b00487a04d08d82486f025ed" |
| expires | Fri, 06 Nov 2026 02:04:39 GMT |
| last-modified | Fri, 06 Nov 2026 00:59:21 GMT |
| referrer-policy | strict-origin-when-cross-origin |
| server | cloudflare |
| strict-transport-security | max-age=63072000 |
| transfer-encoding | chunked |
| vary | Accept-Encoding |
| via | 1.1 google, 1.1 varnish, 1.1 varnish, 1.1 varnish |
| x-cache | MISS, HIT, HIT |
| x-cache-hits | 0, 37, 0 |
| x-cloud-trace-context | 28a3162eec73cd20d75c275a1b32ee48 |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| x-goog-generation | 1793926761384767 |
| x-goog-hash | crc32c=oWdZPg==, md5=ibv247AEh6BNCNgkhvAl7Q== |
| x-goog-meta-goog-reserved-file-mtime | 1793925649 |
| x-goog-metageneration | 1 |
| x-goog-storage-class | STANDARD |
| x-goog-stored-content-encoding | identity |
| x-goog-stored-content-length | 119750 |
| x-guploader-uploadid | AFy3sg2yFYNDbz6P91EqtQrG5x_FuZQzowrKojEJ5EN7BAKPKVRXdSeCvP0akdBV-ZvdJIuQSaWlAQ |
| x-served-by | cache-bfi-krnt7300047-BFI, cache-bfi-krnt7300047-BFI, cache-bfi-krnt7300047-BFI, cache-cmh1290123-CMH |
| x-timer | S1793953620.239790,VS0,VE1 |
Security headers
| ✓ Set | Strict-Transport-Security Forces HTTPS on future visits. |
| ✓ Set | Content-Security-Policy Limits where scripts and other content can load from. |
| ✓ Set | X-Content-Type-Options Stops browsers guessing file types (should be “nosniff”). |
| ✓ Set | X-Frame-Options Stops other sites framing this page (or use CSP frame-ancestors). |
| ✓ Set | Referrer-Policy Controls how much of the URL is shared with other sites. |
| Missing | Permissions-Policy Restricts access to camera, microphone, location and similar. |