HTTP Headers Analysis for https://docs.stripe.com

Detected Technologies from Headers

See all in URL Inspect 7

AWS CloudFront

Algolia

Amazon S3

GitHub

Nginx

Stripe

YouTube

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Good

base-uri; child-src; connect-src; +12 more Analyze

Content-Security-Policy-Report-Only

Strong

base-uri; child-src; connect-src; +11 more Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Strengthen CSP by removing 'unsafe-eval'
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept

connection: close
vary: Accept

Caching Headers

No caching headers found

Content Headers

Content-Length

Content

1123638

Content-Type

Content

text/html; charset=utf-8

content-length: 1123638
content-type: text/html; charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: __Host-sandbox_assignment=ARV-wf1iPZhQiF_sFtrt_ia_gcyxYrscvFA6Q0oBEo41IIr-_Ovso70cMxaUBRdUIFbUoZmDto5R7N7w1j-44_xIDOlBtb2PpOtDtsG3hjqM; path=/; expires=Sun, 01 Mar 2026 14:27:37 GMT; secure; HttpOnly; SameSite=Lax
cid=b1223395-4d7a-4427-a47a-f8a0f3504716; domain=stripe.com; path=/; expires=Sat, 23 May 2026 14:27:37 GMT; secure; SameSite=Lax

Other Headers

Cross-Origin-Opener-Policy-Report-Only

Other

same-origin-allow-popups; report-to="wsp_coop"

Date

Other

Sun, 22 Feb 2026 14:27:38 GMT

Report-To

Other

{"group":"wsp_coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report?s=NgvUI0txXCo2hdJ0Pkuin9E5OXTnkXR3KW0kRuOs80COmWsncAFQywoVVKIu2VmJ4IVJUPRX"}],"include_subdomains":true},{"group":"wsp_coep","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coep-report?s=NgvUI0txXCo2hdJ0Pkuin9E5OXTnkXR3KW0kRuOs80COmWsncAFQywoVVKIu2VmJ4IVJUPRX"}],"include_subdomains":true}

Reporting-Endpoints

Other

wsp_coop="https://q.stripe.com/coop-report?s=NgvUI0txXCo2hdJ0Pkuin9E5OXTnkXR3KW0kRuOs80COmWsncAFQywoVVKIu2VmJ4IVJUPRX",wsp_coep="https://q.stripe.com/coep-report?s=NgvUI0txXCo2hdJ0Pkuin9E5OXTnkXR3KW0kRuOs80COmWsncAFQywoVVKIu2VmJ4IVJUPRX"

X-Content-Age

Other

0

X-Content-Timestamp

Other

2026-02-22T14:27:37Z

X-Location

Other

https://docs.stripe.com/

X-Stripe-App-Name

Other

docs-app

X-Stripe-Proxy-Response

Other

upstream

X-Stripe-Server-Rpc-Duration-Micros

Other

321444

X-Wc

Other

ABCEFGHIJ

cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="wsp_coop"
date: Sun, 22 Feb 2026 14:27:38 GMT
report-to: {"group":"wsp_coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report?s=NgvUI0txXCo2hdJ0Pkuin9E5OXTnkXR3KW0kRuOs80COmWsncAFQywoVVKIu2VmJ4IVJUPRX"}],"include_subdomains":true},{"group":"wsp_coep","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coep-report?s=NgvUI0txXCo2hdJ0Pkuin9E5OXTnkXR3KW0kRuOs80COmWsncAFQywoVVKIu2VmJ4IVJUPRX"}],"include_subdomains":true}
reporting-endpoints: wsp_coop="https://q.stripe.com/coop-report?s=NgvUI0txXCo2hdJ0Pkuin9E5OXTnkXR3KW0kRuOs80COmWsncAFQywoVVKIu2VmJ4IVJUPRX",wsp_coep="https://q.stripe.com/coep-report?s=NgvUI0txXCo2hdJ0Pkuin9E5OXTnkXR3KW0kRuOs80COmWsncAFQywoVVKIu2VmJ4IVJUPRX"
x-content-age: 0
x-content-timestamp: 2026-02-22T14:27:37Z
x-location: https://docs.stripe.com/
x-stripe-app-name: docs-app
x-stripe-proxy-response: upstream
x-stripe-server-rpc-duration-micros: 321444
x-wc: ABCEFGHIJ

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching