HTTP Headers Analysis for https://flathub.org

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31557600

Content-Security-Policy

Weak

base-uri; form-action; style-src; +5 more

X-Frame-Options

Excellent

Deny

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(self), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives

Performance Headers

3 headers

Accept-Ranges

Performance

bytes

Connection

Performance

keep-alive

Vary

Performance

Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding

Caching Headers

2 headers

Cache-Control

Caching

s-maxage=3600, stale-while-revalidate=31532400

Etag

Caching

"abgc01fc5xji5e"

Content Headers

2 headers

Content-Length

Content

910205

Content-Type

Content

text/html; charset=utf-8

Server Headers

2 headers

Server

nginx/1.26.3

X-Powered-By

Server

Next.js

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

NEXT_LOCALE=en; Path=/; SameSite=lax

Other Headers

12 headers

Alt-Svc

Other

h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Date

Other

Mon, 03 Nov 2025 02:14:59 GMT

Link

Other

<https://flathub.org/en>; rel="alternate"; hreflang="en", <https://flathub.org/en-GB>; rel="alternate"; hreflang="en-GB", <https://flathub.org/de>; rel="alternate"; hreflang="de", <https://flathub.org/fr>; rel="alternate"; hreflang="fr", <https://flathub.org/nb-NO>; rel="alternate"; hreflang="nb-NO", <https://flathub.org/tr>; rel="alternate"; hreflang="tr", <https://flathub.org/fi>; rel="alternate"; hreflang="fi", <https://flathub.org/id>; rel="alternate"; hreflang="id", <https://flathub.org/pl>; rel="alternate"; hreflang="pl", <https://flathub.org/pt-BR>; rel="alternate"; hreflang="pt-BR", <https://flathub.org/it>; rel="alternate"; hreflang="it", <https://flathub.org/ru>; rel="alternate"; hreflang="ru", <https://flathub.org/si>; rel="alternate"; hreflang="si", <https://flathub.org/vi>; rel="alternate"; hreflang="vi", <https://flathub.org/ar>; rel="alternate"; hreflang="ar", <https://flathub.org/es>; rel="alternate"; hreflang="es", <https://flathub.org/ja>; rel="alternate"; hreflang="ja", <https://flathub.org/cs>; rel="alternate"; hreflang="cs", <https://flathub.org/zh-Hans>; rel="alternate"; hreflang="zh-Hans", <https://flathub.org/bg>; rel="alternate"; hreflang="bg", <https://flathub.org/uk>; rel="alternate"; hreflang="uk", <https://flathub.org/et>; rel="alternate"; hreflang="et", <https://flathub.org/ca>; rel="alternate"; hreflang="ca", <https://flathub.org/el>; rel="alternate"; hreflang="el", <https://flathub.org/ta>; rel="alternate"; hreflang="ta", <https://flathub.org/fa>; rel="alternate"; hreflang="fa", <https://flathub.org/hi>; rel="alternate"; hreflang="hi", <https://flathub.org/bn>; rel="alternate"; hreflang="bn", <https://flathub.org/eo>; rel="alternate"; hreflang="eo", <https://flathub.org/lt>; rel="alternate"; hreflang="lt", <https://flathub.org/hr>; rel="alternate"; hreflang="hr", <https://flathub.org/be>; rel="alternate"; hreflang="be", <https://flathub.org/hu>; rel="alternate"; hreflang="hu", <https://flathub.org/nl>; rel="alternate"; hreflang="nl", <https://flathub.org/pt>; rel="alternate"; hreflang="pt", <https://flathub.org/zh-Hant>; rel="alternate"; hreflang="zh-Hant", <https://flathub.org/oc>; rel="alternate"; hreflang="oc", <https://flathub.org/da>; rel="alternate"; hreflang="da", <https://flathub.org/az>; rel="alternate"; hreflang="az", <https://flathub.org/he>; rel="alternate"; hreflang="he", <https://flathub.org/ro>; rel="alternate"; hreflang="ro", <https://flathub.org/hy>; rel="alternate"; hreflang="hy", <https://flathub.org/ko>; rel="alternate"; hreflang="ko", <https://flathub.org/sv>; rel="alternate"; hreflang="sv", <https://flathub.org/pa>; rel="alternate"; hreflang="pa", <https://flathub.org/sq>; rel="alternate"; hreflang="sq", <https://flathub.org/ia>; rel="alternate"; hreflang="ia", <https://flathub.org/ckb>; rel="alternate"; hreflang="ckb", <https://flathub.org/ga>; rel="alternate"; hreflang="ga", <https://flathub.org/kab>; rel="alternate"; hreflang="kab", <https://flathub.org/fil>; rel="alternate"; hreflang="fil", <https://flathub.org/br>; rel="alternate"; hreflang="br", <https://flathub.org/gl>; rel="alternate"; hreflang="gl", <https://flathub.org/>; rel="alternate"; hreflang="x-default"

Via

Other

1.1 varnish, 1.1 varnish

X-Cache

Other

MISS, MISS

X-Cache-Hits

Other

0, 0

X-Middleware-Rewrite

Other

/en