HTTP Headers report for expasy.org

Header Name	Header Data
HTTP status code	200
Strict-Transport-Security	max-age=31536000; includeSubDomains
Expires	-1
X-Frame-Options	SAMEORIGIN
Date	Sat, 19 Apr 2025 04:01:09 GMT
Cache-Control	private, must-revalidate
X-Xss-Protection	1; mode=block
Referrer-Policy	strict-origin
Content-Type	text/html; charset=UTF-8
Vary	Accept-Encoding
X-Powered-By	PHP/8.3.20
Pragma	no-cache
X-Content-Type-Options	nosniff
Server	nginx
Source	expasy-prod8
Content-Security-Policy	default-src 'self'; font-src 'self' fonts.bunny.net data:; img-src 'self' matomo.sib.swiss fonts.googleapis.com fonts.gstatic.com data: blob: ui-avatars.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' matomo.sib.swiss https://unpkg.com; style-src 'self' fonts.bunny.net 'unsafe-inline' https://unpkg.com; connect-src 'self' matomo.sib.swiss https://chat.expasy.org;
Permissions-Policy	accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
Set-Cookie	XSRF-TOKEN=eyJpdiI6IjR2d1dTaklUQmxnOVZLQnJKUTg2MGc9PSIsInZhbHVlIjoiUzlpbHZKL2dtYVJPTmkrTjlPdm1iSFVnVWNYczg4d3EwUDFlV0FyampmUVVkbi9yMEVvOTZ3cUErYUVVTXZvL1NRNk51emVFNzFXSCthWUNjN0ZvNkN6TDBHbkdzNytLRmh0NUhDWit0OUk3QUxlU2liNDRtbEtiVzhTVE1JTTIiLCJtYWMiOiI5NGFmZGQwZjBkNTVlMzZjN2NkNDY4YzU5N2Y2MzU2MDk5MjkyMDgzZDI1MTA4NDllM2Q3NmY2MzZlYWFkMTVhIiwidGFnIjoiIn0%3D; expires=Sat, 19 Apr 2025 06:01:09 GMT; Max-Age=7200; path=/; samesite=lax

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar