Geliştirici

HTTP Header Analyzer

Header blogunu veya curl -I ciktisini yapistirin; DevTools acmadan response politikasini okuyun.

Guvenlik skoru

50%

Temel security header kapsami.

Header

Parse edilen header satiri.

Set-Cookie

Response icindeki cookie sayisi.

Status line

HTTP/2 200

Varsa ilk HTTP satiri.

Header girdi paneli

Raw response header blogunu veya curl -I ciktisini yapistir.

Security headers

Temel browser savunmalarinin hangileri geldigini hizla gor.

content-security-policy

Yok

Deger yok

strict-transport-security

Var

max-age=31536000; includeSubDomains

x-content-type-options

Var

nosniff

x-frame-options

Yok

Deger yok

referrer-policy

Var

strict-origin-when-cross-origin

permissions-policy

Yok

Deger yok

Cache ve CORS yorumu

Header setinin davranisina dair hizli okuma.

Cache: Cacheable for 300s with ETag validation.

CORS: Origin locked to https://app.example.com.

Normalize JSON

Header blogunu temiz key/value JSON'una cevirir.

{
  "content-type": "text/html; charset=utf-8",
  "cache-control": "public, max-age=300",
  "etag": "\"abc123\"",
  "strict-transport-security": "max-age=31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "referrer-policy": "strict-origin-when-cross-origin",
  "access-control-allow-origin": "https://app.example.com"
}