HTTP Headers: aftenposten.no

Accept-Ranges
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Age
Alt-Svc
Connection
Content-Encoding
Content-Security-Policy
Content-Type
Date
Set-Cookie
Strict-Transport-Security
X-Amz-Cf-Id
X-Amz-Cf-Pop
X-Backend
X-Cache
X-Content-Type-Options
X-Forwarded-Proto
X-Frame-Options
X-Server
X-VG-TLSProxy
X-XSS-Protection
accept-ch
cache-control
content-security-policy-report-only
link
permissions-policy
vary

Strict-Transport-Security (HSTS) forces browsers to use HTTPS. Content-Security-Policy (CSP) prevents XSS attacks by controlling which resources can load. X-Content-Type-Options stops MIME-type sniffing. X-Frame-Options blocks clickjacking by preventing iframe embedding.

aftenposten.no's security score of 60/100 reflects how many of these protective headers are configured. Higher scores indicate better defense against common web attacks.