Security Headers
Générer des en-têtes HTTP de sécurité (CSP, HSTS…).
Strict-Transport-Security (HSTS)
max-age
Content-Security-Policy
default-src
script-src
style-src
img-src
font-src
connect-src
frame-ancestors
Autres en-têtes
Sortie
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: geolocation=(), camera=(), microphone=()