HTTP Headers: morrisons.com

Security score: 40/100

🛡️ Security Headers
HeaderStatus
Strict-Transport-Security❌ Missing
Content-Security-Policy❌ Missing
X-Content-Type-Options✅ Present
X-Frame-Options✅ Present
X-XSS-Protection❌ Missing
📋 All Response Headers
Accept-Ranges
Connection
Content-Encoding
Content-Type
Date
Keep-Alive
Strict-Transport-Security
Transfer-Encoding
Vary
Via
X-Clacks-Overhead
X-DNS-Prefetch-Control
X-Download-Options
X-Varnish
cache-control
content-language
requestid
set-cookie
x-content-type-options
x-frame-options
x-ua-compatible
x-xss-protection