Content-Security-Policy

mit.edu sends an enforcing CSP. It is allowlist-based.

frame-ancestors 'self' https://web.mit.edu https://www.mit.edu http://web.mit.edu http://www.mit.edu

Directive	Sources
frame-ancestors	'self' https://web.mit.edu https://www.mit.edu http://web.mit.edu http://www.mit.edu

Headers sent

Header	Value
strict-transport-security	max-age=600
x-frame-options	SAMEORIGIN
server	Apache

Critical findings

Re-scan live

This is a snapshot from 2026-08-04. Check it now:

Scan