HTTP headers
Response
200 https://tools.nexayori.com/ 16 ms
| access-control-allow-origin | * |
|---|---|
| cache-control | no-store, no-cache, must-revalidate, max-age=0 |
| content-security-policy | default-src 'none'; style-src 'unsafe-inline'; script-src 'unsafe-inline'; img-src 'self' data:; base-uri 'none'; form-action 'self' |
| content-type | text/html; charset=utf-8 |
| referrer-policy | no-referrer |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
Security headers
| Missing | Strict-Transport-Security Forces HTTPS on future visits. |
| ✓ Set | Content-Security-Policy Limits where scripts and other content can load from. |
| ✓ Set | X-Content-Type-Options Stops browsers guessing file types (should be “nosniff”). |
| ✓ Set | X-Frame-Options Stops other sites framing this page (or use CSP frame-ancestors). |
| ✓ Set | Referrer-Policy Controls how much of the URL is shared with other sites. |
| Missing | Permissions-Policy Restricts access to camera, microphone, location and similar. |