Open
Cached
·
2m ago
30
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31557600
Content-Security-Policy
Weak
frame-ancestors
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Significantly strengthen CSP directives
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Consider adding Permissions-Policy to control browser features
Performance Headers
3 headers
Accept-Ranges
Performance
bytes
Connection
Performance
keep-alive
Vary
Performance
Accept-Encoding, X-Loggedin
Caching Headers
3 headers
Age
Caching
433
Cache-Control
Caching
public, no-cache
Etag
Caching
W/"32d1f0b81c93ac72d4e446c0c97d3460"
Content Headers
2 headers
Content-Length
Content
286181
Content-Type
Content
text/html; charset=utf-8
Server Headers
2 headers
Server
Server
Heroku
X-Runtime
Server
0.071048
CORS Headers
1 headers
Access-Control-Allow-Origin
Cors
*
Cookies Headers
0 headers
No cookies headers found
Other Headers
14 headers
Date
Other
Thu, 06 Nov 2025 02:24:56 GMT
Link
Other
<https://assets.dev.to/assets/minimal-e1a30672d7a3bfc982a830c79fd6e3109d6806536278275c64a2c85af0d792ed.css>; rel=preload; as=style; nopush,<https://assets.dev.to/assets/views-29adb6cdbcf8563b76959a95af5a97e5961f8b06cdd89f4df7beb758bcc97c44.css>; rel=preload; as=style; nopush,<https://assets.dev.to/assets/crayons-198414fda43925fd7ad1bfa9dce7b8bc80cf6fae322aca26fc86c1a4a4902569.css>; rel=preload; as=style; nopush
Nel
Other
{"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To
Other
{"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=TB5o1nX7Dl%2F0%2FEooKRCLMRP2Q8oBHwQ5l1TSsDYyjn4%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1762395463"}],"max_age":3600}
Reporting-Endpoints
Other
heroku-nel="https://nel.heroku.com/reports?s=TB5o1nX7Dl%2F0%2FEooKRCLMRP2Q8oBHwQ5l1TSsDYyjn4%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1762395463"
Via
Other
1.1 heroku-router, 1.1 varnish, 1.1 varnish
X-Accel-Expires
Other
600
X-Cache
Other
HIT, MISS
X-Cache-Hits
Other
10, 0
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none
X-Request-Id
Other
1bd679df-1602-b9d2-f338-881e34ccb289
X-Served-By
Other
cache-den-kden1300099-DEN, cache-nyc-kteb1890084-NYC
X-Timer
Other
S1762395897.919602,VS0,VE43
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 1ms