phabricator.wikimedia.org | Analytics by SecurityHeaders

HTTP Headers report for phabricator.wikimedia.org

Header Name Header Data
HTTP status code 200
Report-To { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] }
X-Client-Ip 89.46.131.159
Server Apache
Cache-Control private, max-age=0, s-maxage=0
Expires Sat, 01 Jan 2000 00:00:00 GMT
Set-Cookie phsid=A%2Fkore7xd45fq34vbf4i54vjyy6fg5ci2pja4t3trw; expires=Sat, 06-Apr-2030 17:52:50 GMT; Max-Age=157680000; path=/; domain=phabricator.wikimedia.org; secure; HttpOnly
Content-Type text/html; charset=UTF-8
Strict-Transport-Security max-age=106384710; includeSubDomains; preload
Referrer-Policy no-referrer
Age 1
X-Cache cp3073 miss, cp3073 pass
Nel { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0}
Date Mon, 07 Apr 2025 17:52:50 GMT
Content-Security-Policy default-src https://phab.wmfusercontent.org; img-src https://phab.wmfusercontent.org data:; style-src https://phab.wmfusercontent.org 'unsafe-inline'; script-src https://phab.wmfusercontent.org; connect-src 'self'; frame-src 'self' https://commons.wikimedia.org; frame-ancestors 'none'; object-src 'none'; form-action 'self'; base-uri 'none'
X-Content-Type-Options nosniff
Vary Accept-Encoding
X-Cache-Status pass
X-Frame-Options Deny
Server-Timing cache;desc="pass", host;desc="cp3073"

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar