Content-Security-Policy

kernel.org sends an enforcing CSP. It is allowlist-based.

default-src 'self' *.kernel.org; img-src https: data:

Directive	Sources
default-src	'self' *.kernel.org
img-src	https: data:

Headers sent

Header	Value
strict-transport-security	max-age=15768001
x-frame-options	DENY
x-content-type-options	nosniff
referrer-policy	same-origin
server	nginx

Re-scan live

This is a snapshot from 2026-08-04. Check it now:

Scan