Security Header — Referrer Policy Strict
SAMPLE HTTP security header fixture (referrer-policy-strict) for scanner regression.
Referrer-Policy: strict-origin-when-cross-origin
Specifications
- Header
- referrer-policy-strict
- Wave
- I
What is a .headers file?
A .headers text fixture is a plain-text dump of HTTP response headers (CORS, CSP, HSTS, etc.) used for policy and scanner tests.
How to use this file
Use SAMPLE .headers files to test security-header parsers and linters against documented good and misconfigured policies.
How to use this file for testing
“Security Header — Referrer Policy Strict” is a deterministic Novus Examples fixture for Certificate & key testing, Web assets. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.
Documented properties for this file: HEADERS · 50 bytes. Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.
Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.
This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.
This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.
Related files
- jsonCRL Metadata JSON — SAMPLESAMPLE CRL metadata JSON (no binary CRL) for revocation-list UI and loader tests.

- keyEd25519 Private Key (PEM) — SAMPLEDeterministic SAMPLE Ed25519 private key for SSH/TLS tooling tests.

- keyEncrypted PKCS#8 RSA Key — SAMPLEPassword-encrypted SAMPLE PKCS#8 private key (password printed in specs) for decrypt-import tests.

- htpasswdhtpasswd (APR1 MD5) — SAMPLESAMPLE htpasswd using Apache APR1 MD5-style hash for legacy Basic-auth tests.

- htpasswdhtpasswd (bcrypt) — SAMPLESAMPLE htpasswd with a bcrypt hash line for Basic-auth file parsers.

- htpasswdhtpasswd (Mixed Algorithms) — SAMPLEMulti-user SAMPLE htpasswd mixing bcrypt, APR1, and {SHA} lines for algorithm-detection tests.

Generated by generation/pad_wave_i.py. Free for any use, no attribution required — license.