| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Server | gunicorn |
| Date | Sat, 19 Apr 2025 19:57:02 GMT |
| X-Frame-Options | DENY |
| Cross-Origin-Opener-Policy | same-origin |
| Report-To | {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1745092622&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=2pYivziXjspfwBD8q%2BxeVT3OLVHtHOE9oLNDXd%2Fr1kQ%3D"}]} |
| Vary | Cookie |
| Strict-Transport-Security | max-age=60; preload |
| Nel | {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} |
| Connection | keep-alive |
| Content-Type | text/html; charset=utf-8 |
| Content-Security-Policy | font-src fonts.gstatic.com fonts.googleapis.com https://pro.fontawesome.com/ https://fonts.gstatic.com/ data:; frame-src platform.twitter.com syndication.twitter.com forms.office.com/ https://whispering-hollows-29953-2db5b20e4cb6.herokuapp.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com eguide.s3.amazonaws.com/ stackpath.bootstrapcdn.com unpkg.com cdn.datatables.net cdn.jsdelivr.net www.google.com pro.fontawesome.com www.googletagmanager.com/ https://tagmanager.google.com/; script-src 'self' eguide.s3.amazonaws.com/ stackpath.bootstrapcdn.com cdn.jsdelivr.net unpkg.com code.jquery.com cdn.amcharts.com 'unsafe-inline' www.google.com platform.twitter.com google-analytics.com abs.twimg.com cse.google.com www.google-analytics.com www.googletagmanager.com/ syndication.twitter.com https://cdn.datatables.net unsafe-evalunsafe-inline https://tagmanager.google.com/; form-action 'self'; connect-src 'self' www.google-analytics.com; img-src 'self' http://www.w3.org eguide.s3.amazonaws.com/ pbs.twimg.com syndicaton.twitter.com abs-0.twimg.com clients1.google.com www.google.com www.google-analytics.com https://www.google-analytics.com https://ssl.gstatic.com/data:; default-src 'self' https://www.google-analytics.com; 'nonce-I3tV4qT71kLoISAWNoEfLg==' |
| Content-Length | 109577 |
| X-Content-Type-Options | nosniff |
| Reporting-Endpoints | heroku-nel=https://nel.heroku.com/reports?ts=1745092622&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=2pYivziXjspfwBD8q%2BxeVT3OLVHtHOE9oLNDXd%2Fr1kQ%3D |
| Referrer-Policy | same-origin |
| Via | 1.1 vegur |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar