HTTP Headers Analysis for https://docs.workspot.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(), ambient-light-sensor=(), autoplay=(*), camera=(*), clipboard-write=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(*), midi=(), payment=(), usb=(), fullscreen=(*)

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Content-Type-Options: nosniff

Performance Headers

3 headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

Caching Headers

2 headers

Cache-Control

Caching

public, max-age=0, stale-while-revalidate=300, stale-if-error=60

Etag

Caching

W/"57c41-qHfbzx4kv2S6SrH8QI9ujtVDr+o"

Content Headers

1 headers

Content-Type

Content

text/html; charset=utf-8

Server Headers

1 headers

Server

cloudflare

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

__cf_bm=qkdqPzhwVF763l22f1G6JxAehot42BZBYRv9gz1ziYo-1767154301.2274847-1.0.1.1-StJjdIIj3HUwnvqC.VwF4UtUEDSrXhoyp.L.elv82EFLdt5R0nsnEPmp5JxnRXcXfnUcUCtDGpkU3JTaQDB3aq3D5_5dZVdnJDwSmiiTkImFQPlGlfM8HkAJ0tZ3_M9N; HttpOnly; Secure; Path=/; Domain=us.document360.io; Expires=Wed, 31 Dec 2025 04:41:41 GMT