HTTP Headers: forms.cloud.microsoft

Cache-Control
Pragma
Content-Length
Content-Type
Content-Encoding
Expires
Vary
Strict-Transport-Security
X-RoutingOfficeCluster
X-RoutingOfficeFE
X-RoutingOfficeVersion
X-RoutingSessionId
X-RoutingCorrelationId
x-correlationid
x-officecluster
x-officefe
x-officeversion
x-usersessionid
report-to
Content-Security-Policy
Link
X-Cache
X-MSEdge-Ref
Date

Strict-Transport-Security (HSTS) forces browsers to use HTTPS. Content-Security-Policy (CSP) prevents XSS attacks by controlling which resources can load. X-Content-Type-Options stops MIME-type sniffing. X-Frame-Options blocks clickjacking by preventing iframe embedding.

forms.cloud.microsoft's security score of 60/100 reflects how many of these protective headers are configured. Higher scores indicate better defense against common web attacks.