🔗 Introducing headers.dev

My HTTP Header Analyzer has evolved significantly after six years. With over 5 million uses, it now resides at headers.dev. I audited it against OWASP's recommendations, fixing common issues like the dangers of using unsafe-inline and unsafe-eval in Content Security Policies. The analyzer now recognizes new headers like Speculation-Rules and Cache-Status, improving its ability to catch misconfigurations. It now explains more than 150 headers in detail. The Open Web is stronger when we all review our HTTP headers to ensure security and performance.