Back
Syntax
Study
Editor
Mode:
HTML
CSS
JavaScript
PHP
Reset
Run »
HTML / CSS / JS
header("Strict-Transport-Security: max-age=31536000; includeSubDomains"); header("X-Content-Type-Options: nosniff"); header("X-Frame-Options: DENY"); header("Referrer-Policy: strict-origin-when-cross-origin"); header("Permissions-Policy: camera=(), microphone=(), geolocation=()"); header("Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-" . $nonce . "'"); // Test: securityheaders.com
Result
Open