| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Etag | W/"6d4d61725dddccc2ad7ba6330634c5d0" |
| Strict-Transport-Security | max-age=31536000; includeSubdomains; preload |
| Referrer-Policy | origin-when-cross-origin, strict-origin-when-cross-origin |
| Content-Security-Policy | default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com github.githubassets.com edge.fullstory.com rs.fullstory.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com www.youtube-nocookie.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/ |
| Accept-Ranges | bytes |
| Set-Cookie | _gh_sess=VPoPm8xK8KsWi2na9MpP39NwUAsPNq0tNlJ6OC00wwTJmty0ncryplGvIfseWacvISC4%2BIubnrH341au46YW3AHierB6JbgeIBBqMEnJjWduUnczdLRJOi1KPdHoBTJULBEKEILQ2joxY%2B%2F0CyNZgXQd5TSC5%2FmgL5Yb1XUAoKwLGKuINUkFxBshTrGNsLq6jsBBZ6CdZwdCbmEtcTlT8yI8Hn1iE%2BC6HrwsdVqifGrLPE00JDbabLfgtZbBNvdV79Q2%2Fh9pmChVoibfH14UFg%3D%3D--VefT1cvv%2FskMW2hl--UwjdYcO8%2FGFUrHLuhPwZ7Q%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax |
| Vary | X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Language,Accept-Encoding, Accept, X-Requested-With |
| X-Xss-Protection | 0 |
| Server | github.com |
| X-Content-Type-Options | nosniff |
| X-Frame-Options | deny |
| X-Github-Request-Id | EA0E:28E787:4B069A:4E4F9B:67F07DB5 |
| Cache-Control | max-age=0, private, must-revalidate |
| Content-Type | text/html; charset=utf-8 |
| Content-Language | en-US |
| Date | Sat, 05 Apr 2025 00:47:48 GMT |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar