Developer Web Security Headers Analyzer (CSP, HSTS, XFO) | Developer Web Security Headers Analyzer (CSP, HSTS, XFO)

sechd is a reference for HTTP security response headers, explaining the purpose, configuration considerations, and limitations of eight documented headers. It covers content loading restrictions, HTTPS enforcement, framing controls, MIME-type handling, referrer disclosure, browser feature permission