HTTP Headers Analysis for https://learn.selectel.org

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=63072000; includeSubDomains

Content-Security-Policy

Weak

frame-src; frame-ancestors; object-src Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-store, must-revalidate, max-age=0

cache-control: no-store, must-revalidate, max-age=0

Content Headers

Content-Language

Content

ru

Content-Length

Content

9276

Content-Type

Content

text/html;charset=utf-8

content-language: ru
content-length: 9276
content-type: text/html;charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: AUTH_SESSION_ID=MTMzOWM5ODktYTkyYy00OTNkLThkMjUtYzE0NTczMjQ1NzYwLm81eXkzY1pSLWxFWFFJcTRsZ25ySERZT1pEUjVudkRJVi1ZMjVBaG1ZNXE5QXo3dk9rUnhfUVJNTTNkQVJvc2RfbVRQYTFsZnVqUTVIU19XZlRUUF9R.node_374912;Version=1;Path=/auth/realms/selectel/;Secure;HttpOnly;SameSite=None
KC_AUTH_SESSION_HASH=hOxnMMtfh4kFqidJT6EoTd436YfiRW1PltZu3j5VI80;Version=1;Path=/auth/realms/selectel/;Max-Age=60;Secure;SameSite=None
KC_RESTART=eyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..jZvBKjKtl4euC2rbl554Zg.JTIF-tYEncrssqpWprsA1IRcBz8Gih2BvMyhoaYrlEMGR2hm44MiE8BEdiCOqu92zCxxYzDvmU6DU1FnS6LPBM9yMW_8iDdTZ71XpWKAA6zOdvALQ2vINDueRVQ66WBBhqJ8tQlPuDr6X_GHNgOnETLNHJa4WoZgDsYdv8uXOFVPq7LBqq3vUIh5cBHe8KhWuOYA_hsBD1uke00pHgZeRTZTWudt8ons9c9DpWODCDCcKkTZ0oYO2zROXZ7oFzoGHJhB7v3Xumac7i0is_hpZr0L_h4uIJYcFeba9Bty9ObpXILkL2nFp3AGvqj4pqmBSq1zsHC9h2qCe4V4htt6b9ldOxlMyCeg9CMmS2iFRg5TfZXRvk_uq8k0qPcOwTmSYUVLMqdNCVlsPfbd31RhslC0osjiaxPDWW1ppBEMCFp-PBg3VR3fA-WWT17GP1ofyyQZX6aK5WUhC9owKY13wOz3Qu6dvlDvbcB1GVVkXCMLxFIQ50CPG3U-738wXDjma3ARL2OEGyHuNEwHvVip82gERJ3dj38YrQgTKGSitkRw4tIgWl8GGyBCgh0FfbWIyURqd0PGMypiV2jrAZorDrOaqYJOdiBR-BJuBHApY35ZhjSfZy5HNHk53aUz4TN_A5Z96sSUTw_nlLGoaGvtPiMHfaJI-PBEFTqufEHwBgMxVibIGNKdTzox9d1uD72diZEadwqxgw6Nd4WE7l6oe6PEx1QwpaY-D8a0aDMZxDfq13Gei5Hq6mDeFTgOa1b3aiejzqz6jf4UWiAwUUNXsE3by5CaO0c11CfK7lfTm2E.qGUMLRvGCcu-xdHTrzKIfQ;Version=1;Path=/auth/realms/selectel/;Secure;HttpOnly;SameSite=None

Other Headers

X-Robots-Tag

Other

none

x-robots-tag: none

Recommendations

Enable compression (gzip/brotli) to improve performance