headers
What is a .headers file?
text/plain
A .headers text fixture is a plain-text dump of HTTP response headers (CORS, CSP, HSTS, etc.) used for policy and scanner tests.
How to use a .headers file
Use SAMPLE .headers files to test security-header parsers and linters against documented good and misconfigured policies.
Download example .headers files
- CORS Response Headers — SAMPLESAMPLE CORS response header block as plain text for header parsers and policy tests.
- Content-Security-Policy Header — SAMPLESAMPLE CSP header line for CSP parsers and security-header scanners.
- HSTS Header — SAMPLESAMPLE Strict-Transport-Security header for TLS policy scanners.
- Browser Security Headers Pack — SAMPLESAMPLE Permissions-Policy / Referrer-Policy / XCTO / XFO header pack.
- CORS Misconfigured Headers — SAMPLEIntentionally misconfigured CORS SAMPLE (* + credentials) for policy linters.
- X-XSS-Protection Header — SAMPLESAMPLE X-XSS-Protection: 0 header for legacy header scanners.
- Security Header — Strict Transport SecuritySAMPLE HTTP security header fixture (strict-transport-security) for scanner regression.
- Security Header — Content Security Policy ReportSAMPLE HTTP security header fixture (content-security-policy-report) for scanner regression.
and 8 more in the library.