B
python.org
Score 80/100 · scanned 2026-08-04Content-Security-Policy
No enforcing Content-Security-Policy on the homepage response. What that means →
Headers sent
| Header | Value |
|---|---|
content-security-policy-report-only | object-src 'none'; img-src 'self' data:; default-src 'self'; frame-ancestors 'self'; font-src 'self'; base-uri 'self'; connect-src 'self'; script-src 'self'; form-action 'self'; style-src 'self' |
strict-transport-security | max-age=63072000; includeSubDomains; preload |
x-frame-options | SAMEORIGIN |
server | nginx |
Re-scan live
This is a snapshot from 2026-08-04. Check it now: