Results forsepadeutschland.de

10 Successes

• content-security-policy: connect-src 'self' data: https://usage-stats.bundesbank.de https://api.statistiken.bundesbank.de https://code.highcharts.com https://bundesbank-http.mescdn.com https://*.slidesync.com https://api.friendlycaptcha.com https://eu-api.friendlycaptcha.eu https://api.stage.bio/ https://statistiken.bundesbank.de/; style-src 'self' blob: 'unsafe-inline' https://usage-stats.bundesbank.de/ https://assets.slidesync.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://usage-stats.bundesbank.de https://assets.slidesync.com https://d3js.org https://dashboard.stage.bio; frame-src 'self' https://slidesync.com https://www.youtube-nocookie.com https://www.podcaster.de https://usage-stats.bundesbank.de/ https://login.bundesbank.de/ https://allplayces.de/ https://chatthing.ai https://app.chatthing.ai https://eu.frcapi.com/; media-src 'self' https://*.slidesync.com https://bundesbank-http.mescdn.com https://cdn.stage.bio blob: data:; frame-ancestors 'self' https://usage-stats.bundesbank.de/ https://intranet.inet.bundesbank.de/ https://intranet-a.inet.bundesbank.de/ https://intranet-dev.inet.bundesbank.de/ https://debutest.sharepoint.com/ https://debuabnahme.sharepoint.com/ https://debulab.sharepoint.com/ https://bundesbank.sharepoint.com/; img-src 'self' blob: data: https://*.bundesbank.de https://www.hochschule-bundesbank.de https://www.stiftung-geld-und-waehrung.de https://www.supervisory-disclosure.de https://www.ese-initiative.org https://www.euro20plus.de https://cdn.stage.bio https://about.stage.bio https://publikationen.bundesbank.de https://statistiken.bundesbank.de; default-src 'self' blob:; font-src 'self' data:
• x-content-type-options: nosniff
• x-frame-options: SAMEORIGIN
• strict-transport-security: max-age=31536000
• referrer-policy: strict-origin-when-cross-origin
• permissions-policy: document-domain=(), usb=(), oversized-images=(), execution-while-out-of-viewport=(), battery=(), xr-spatial-tracking=(), midi=(), display-capture=(), wake-lock=(), accelerometer=(), legacy-image-formats=(), payment=(), camera=(), microphone=(), publickey-credentials-get=(), navigation-override=(), magnetometer=(), sync-xhr=*, layout-animations=(), execution-while-not-rendered=(), autoplay=*, gyroscope=(), screen-wake-lock=(), ambient-light-sensor=(), fullscreen=*, picture-in-picture=(), encrypted-media=(), vr=(), web-share=(), geolocation=()
• cache-control: max-age=60
• x-powered-by: Not exposed (good — reduces fingerprinting)
• HSTS configured with max-age: 31536000 seconds
• HTTPS is enabled