www.dss-connect.de
Scanned 8 days ago · Oct 22, 2026, 8:58 AM
C
Security Headers
The HTTP response headers browsers use to restrict what a page - or an attacker inside it - can do.
Score60%
- no X-Content-Type-Options: nosniff
- no Permissions-Policy header
- no Cross-Origin-Opener-Policy header
- no Cross-Origin-Resource-Policy header
- the Server header discloses "Apache/2.4.68 (Unix)"
- the X-Powered-By header discloses "PHP/8.4.27"
Content-Security-Policyblock-all-mixed-content
Strict-Transport-Securitymax-age=31536000; includeSubDomains
X-Content-Type-Optionsnosniff, nosniff
X-Frame-OptionsSAMEORIGIN
Referrer-Policysame-origin
Permissions-Policynot set
Cross-Origin-Opener-Policynot set
Cross-Origin-Resource-Policynot set