Security
Security headers
Why it matters
Headers such as Content-Security-Policy, X-Content-Type-Options and X-Frame-Options protect visitors against common attacks.
How to fix it
- Add the missing headers in your server or CDN configuration, starting with X-Content-Type-Options: nosniff.
Check it with
- Security Headers Checker – Grade a site’s HTTP security headers (CSP, HSTS, X-Frame-Options and more).
Scoring: a passed check earns its full weight, a warning half and an error none. How the SEO score works