smartdraw.com | Analytics by SecurityHeaders

HTTP Headers report for smartdraw.com

Header Name Header Data
HTTP status code 200
Access-Control-Expose-Headers Request-Context
Access-Control-Allow-Origin *
Referrer-Policy strict-origin-when-cross-origin
Strict-Transport-Security max-age=31536000; includeSubDomains
Cache-Control no-cache
Pragma no-cache
Content-Type text/html; charset=utf-8
Vary Accept-Encoding
X-Aspnet-Version 4.0.30319
Set-Cookie .ASPXAUTH=149D6A526840F69BE330D1FA52BA0920261787621C1B0E27E32876807DF1631921CE225E5CB992F4EA0FF17A58DA69C17011881E67891122A3A1D35A8381C0882E8D66CF1EF7751D3EBDFFAAB7243018E2C9DFA3; domain=.smartdraw.com; expires=Mon, 06-Apr-2026 09:43:29 GMT; path=/; SameSite=None; HttpOnly
Expires -1
Machine WEB05
P3p policyref="/w3c/p3p.xml", CP="CAO DSP COR CURa ADMa CONa OUR PHY ONL UNI PUR COM NAV INT CNT STA"
Date Sun, 06 Apr 2025 09:43:29 GMT
Request-Context appId=cid-v1:62700f8b-7085-4a05-9fc3-57dfccc0ca54
Access-Control-Allow-Headers DocChanged,PreviewChanged,Content-Type, Authorization, Content-Length, X-Requested-With, userId, userToken, version, userLogin, CMSAuth, sdversion, sdbackplane
Access-Control-Allow-Methods HEAD, GET, PUT, POST, DELETE, OPTIONS
X-Content-Type-Options nosniff
Content-Security-Policy default-src 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: about: ws: *; frame-src 'unsafe-inline' 'unsafe-eval' data: blob: *; base-uri 'unsafe-inline' about: data: *; form-action 'unsafe-inline' data: *; worker-src 'unsafe-inline' data: blob: *;
X-Xss-Protection 1; mode=block

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar