WebPerformance Report
HTTP Header Security Test for:
Website: https://webperformancereport.com/
Date: 2025-02-07T18:42:25.459Z
ID: 57229412
Scoring - CSP analysis - Cookies - Raw server headers - Scan history
🙌 Thanks to our Sponsors:
Catchpoint - MDN - DebugBear
Scan summary
Each site tested by Observatory is awarded a grade based on its final score.
|
Perf Links
Great posts about web tech.
⚡️ Launch of the 2024 Web Almanac [httparchive]
⚡️ Performance is Good for Brains [codepen]
⚡️ A five minute web performance boost [frontendmasters]
⚡️ Improving Shopify Apps Performance [shopify]
Scoring
All websites start with a baseline score of 100, which is then modified with penalties and/or bonuses resulting from the tests.
|
CSP
|
CORS
|
Redirections
|
Referrer Policy
|
| -20 | 0✓ | 0✓ | 0✓ |
|---|
|
HSTS
|
SRI
|
X-Content-Type
|
X-Frame-Options
|
| 0✓ | -5 | 0✓ | -20 |
|---|
CSP Analysis
The HTTP Content-Security-Policy response header allows website administrators to control resources the user agent is allowed to load for a given page.
|
Test
|
Result
|
Blocks execution of inline JavaScript by not allowing 'unsafe-inline' inside script-src: |
X |
|---|---|
Blocks execution of JavaScript's eval() function by not allowing 'unsafe-eval' inside script-src |
X |
Blocks execution of plug-ins, using object-src restrictions |
X |
Blocks inline styles by not allowing 'unsafe-inline' inside style-src |
X |
| Blocks loading of active content over HTTP or FTP | ✓ |
Raw server headers
Headers
|
Age
|
Date
|
Vary
|
| 66066 | Sat, 08 Feb 2025 12:48:08 GMT | Accept-Encoding |
|---|
Headers
|
Server
|
Connection
|
Content-Type
|
| cloudflare | close | text/html |
|---|
Headers
|
X-Powered-By
|
Cache-Control
|
Last-Modified
|
| PleskLin | max-age=16070400 | Sat, 18 Jan 2025 18:05:46 GMT |
|---|
