HTTP Security Header Review
Review supplied response headers for common security policy settings.
Processing stays in your browser. Reviews pasted headers only. It does not fetch a URL, validate a complete CSP, or prove a site is secure. HTTPS and application context affect header behavior.
How to use the http security header review
Review supplied response headers for common security policy settings. Complete the response headers fields above, or upload a UTF-8 text file for response headers. Choose Run tool, review the output, then copy or download the result.
Example
X-Content-Type-Options: nosniff passes the MIME-sniffing check.
Good to know
Reviews pasted headers only. It does not fetch a URL, validate a complete CSP, or prove a site is secure. HTTPS and application context affect header behavior.