www.php.net
Scanned 8 days ago · Oct 22, 2026, 8:55 AM
D
Security Headers
The HTTP response headers browsers use to restrict what a page - or an attacker inside it - can do.
Score45%
- no Content-Security-Policy header
- no X-Content-Type-Options: nosniff
- no Referrer-Policy header
- no Cross-Origin-Opener-Policy header
- no Cross-Origin-Resource-Policy header
- the Server header discloses "BunnyCDN-DE1-1330"
Content-Security-Policynot set
Strict-Transport-Securitymax-age=15768000
X-Content-Type-Optionsnot set
X-Frame-OptionsSAMEORIGIN
Referrer-Policynot set
Permissions-Policyinterest-cohort=()
Cross-Origin-Opener-Policynot set
Cross-Origin-Resource-Policynot set