HTTP headers
Response
429 https://github.com/ 55 ms
| cache-control | no-cache |
|---|---|
| cf-cache-status | DYNAMIC |
| cf-ray | a562b7563a53cf3e-CMH |
| connection | close |
| content-security-policy | default-src 'none'; style-src 'unsafe-inline' |
| content-type | text/html; charset=utf-8 |
| date | Fri, 06 Nov 2026 08:26:56 GMT |
| retry-after | 300 |
| server | cloudflare |
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| transfer-encoding | chunked |
| x-content-type-options | nosniff |
| x-frame-options | deny |
| x-xss-protection | 0 |
Security headers
| ✓ Set | Strict-Transport-Security Forces HTTPS on future visits. |
| ✓ Set | Content-Security-Policy Limits where scripts and other content can load from. |
| ✓ Set | X-Content-Type-Options Stops browsers guessing file types (should be “nosniff”). |
| ✓ Set | X-Frame-Options Stops other sites framing this page (or use CSP frame-ancestors). |
| Missing | Referrer-Policy Controls how much of the URL is shared with other sites. |
| Missing | Permissions-Policy Restricts access to camera, microphone, location and similar. |