HTTPS Enabled
content-security-policydefault-src 'none'; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com www.recaptcha.net/recaptcha/api2/clr www.google.com/recaptcha/; img-src data: blob: * 'self' *.licdn.com; font-src data: * 'self' *.licdn.com; style-src 'unsafe-inline' 'self' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; script-src 'report-sample' 'sha256-UC6zdmue7Ocse8F/cUL+JEOoLqqZOyyEzZ3HD3Y2I6w=' 'sha256-3woF8BZ54TeXM+czaH3aXoaJsVpiamuAKFsXDykAR/Q=' 'sha256-RFqsjmAF1N5LnfpaHFvPqFlVkeIS/DtTAFor+JjJJVc=' 'sha256-7ojONDInBXepmir5mohQl8otQD3XROkfnfXN9a9zOEk=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com www.gstatic.com/recaptcha/api2/ www.gstatic.com/recaptcha/releases/ www.gstatic.cn/recaptcha/api2/ www.gstatic.cn/recaptcha/releases/ www.recaptcha.net/recaptcha/api.js www.google.com/recaptcha/enterprise.js www.google.com/recaptcha/api.js; object-src 'none'; media-src blob: * 'self' *.licdn.com; worker-src blob: static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; frame-src blob: lnkd-communities: voyager: 'self' *.licdn.com *.licdn.cn *.linkedin.com www.youtube-nocookie.com www.recaptcha.net www.google.com/recaptcha/ recaptcha.google.com/recaptcha/; frame-ancestors 'self' *.linkedin.biz *.www.linkedin.com:* li.crm.dynamics.com help.linkedin.com; report-uri https://www.linkedin.com/security/csp?f=glhControls resources the browser can load. Prevents XSS.
x-content-type-optionsnosniffPrevents MIME type sniffing. Should be 'nosniff'.
x-frame-optionssameoriginControls framing. Use CSP frame-ancestors instead.
strict-transport-securitymax-age=31536000Forces HTTPS. Recommended: max-age=31536000; includeSubDomains
referrer-policyControls referrer info. Recommended: strict-origin-when-cross-origin
permissions-policyControls browser features. Recommended: camera=(), microphone=(), geolocation=()
cross-origin-opener-policyControls cross-origin window access. Recommended: same-origin
cross-origin-resource-policyControls cross-origin resource access. Recommended: same-origin
cross-origin-embedder-policyControls cross-origin embedding. Recommended: require-corp
cache-controlno-cache, no-store, no-transformCaching policy. Use no-store/private for sensitive pages.
x-powered-byShould be removed. Reveals server technology to attackers.
Missing: referrer-policy
Recommendation: Controls referrer info. Recommended: strict-origin-when-cross-origin
Missing: permissions-policy
Recommendation: Controls browser features. Recommended: camera=(), microphone=(), geolocation=()
Missing: cross-origin-opener-policy
Recommendation: Controls cross-origin window access. Recommended: same-origin
Missing: cross-origin-resource-policy
Recommendation: Controls cross-origin resource access. Recommended: same-origin
Missing: cross-origin-embedder-policy
Recommendation: Controls cross-origin embedding. Recommended: require-corp
Missing recommended header: referrer-policy
Recommendation: Review and fix this security issue