HTTP Headers Analysis for https://assets.mozilla.net

Detected Technologies from Headers

See all in URL Inspect 1

Google Cloud Storage

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15552000; includeSubDomains; preload

Content-Security-Policy

Good

default-src; img-src; script-src; +1 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Strengthen CSP by removing 'unsafe-eval'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

accept-ranges: bytes
connection: close

Caching Headers

Age

Caching

34339

Cache-Control

Caching

public,max-age=86400

Etag

Caching

"d41d8cd98f00b204e9800998ecf8427e"

Last-Modified

Caching

Fri, 17 Jul 2026 17:02:51 GMT

age: 34339
cache-control: public,max-age=86400
etag: "d41d8cd98f00b204e9800998ecf8427e"
last-modified: Fri, 17 Jul 2026 17:02:51 GMT

Content Headers

Content-Length

Content

0

Content-Type

Content

text/html

content-length: 0
content-type: text/html

Server Headers

Server

UploadServer

server: UploadServer

CORS Headers

Access-Control-Allow-Origin

Cors

*

access-control-allow-origin: *

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

clear

Date

Other

Sun, 09 Aug 2026 17:15:57 GMT

X-Goog-Generation

Other

1784307771745565

X-Goog-Hash

Other

crc32c=AAAAAA==, md5=1B2M2Y8AsgTpgAmY7PhCfg==

X-Goog-Meta-Goog-Reserved-File-Mtime

Other

1784307730

X-Goog-Metageneration

Other

1

X-Goog-Storage-Class

Other

STANDARD

X-Goog-Stored-Content-Encoding

Other

identity

X-Goog-Stored-Content-Length

Other

0

X-Guploader-Uploadid

Other

AKhXX7Kvdx1hhvqnD1KITCzvslf515dyO5Ma3B35e9FJNfJqT2AcAvPZyXedjI35jEYYlQZw405HzlQ

alt-svc: clear
date: Sun, 09 Aug 2026 17:15:57 GMT
x-goog-generation: 1784307771745565
x-goog-hash: crc32c=AAAAAA==, md5=1B2M2Y8AsgTpgAmY7PhCfg==
x-goog-meta-goog-reserved-file-mtime: 1784307730
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 0
x-guploader-uploadid: AKhXX7Kvdx1hhvqnD1KITCzvslf515dyO5Ma3B35e9FJNfJqT2AcAvPZyXedjI35jEYYlQZw405HzlQ

Recommendations

Enable compression (gzip/brotli) to improve performance