Header Security

Cross-Origin-Resource-Policy Header Check

The Cross-Origin-Resource-Policy header controls which origins can access your resources. Learn how to configure it to enhance your site security.

What this test checks

This test checks the presence and configuration of the Cross-Origin-Resource-Policy header. This header allows you to control which origins can access your resources (images, scripts, styles). A misconfiguration can expose your resources to malicious sites.

Our recommendation

Add the Cross-Origin-Resource-Policy header with the value 'same-origin' to limit resource access to your own domain. Use 'same-site' to allow subdomains. Test your configuration to avoid blocking legitimate features.

Security tests

View all tests

CMS Security

Cross-Origin-Resource-Policy Header Check

What this test checks

Our recommendation

Read more

Joomla Administrator Interface Access Check

PrestaShop Admin Access Check

Shopify SQL Injection Protection Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Magento Admin Access Restriction Check

WordPress Backup File Exposure Check

PHP Error Display on Magento Check

Drupal Upload Folder Indexing Check (sites/default/files/)

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Magento Log File Exposure Check

CNIL Mention in Privacy Policy Check

Joomla Cron Access Check

PHP Error Display in Production Check

admin-ajax.php Accessibility Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Shopify API Key Exposure Check

Shopify Sensitive File Exposure Check

Joomla Log File Exposure Check

PHP Error Display on PrestaShop Check

Shopify Storefront API Exposure Check

Shopify Permissions-Policy Header Check

PrestaShop Log File Exposure Check

Drupal Version Check

CAPTCHA Presence on Public Forms Check

Shopify Backup File Exposure Check

Joomla Admin Access Check

Shopify X-Frame-Options Header Check

Known CVE Vulnerability Check on Used Technologies

Shopify Version Check

Shopify phpinfo Exposure Check

Shopify X-Content-Type-Options Header Check

Shopify Terms and Conditions (T&C) Presence Check

Drupal Admin Login Page Protection Check

Cookie Consent Banner Presence Check

Referrer-Policy Header Check

Drupal settings.php File Access Check

Access to wp-cron.php Check

Shopify Password Reset CAPTCHA Protection Check

Clear-Site-Data Header Check

Joomla configuration.php File Access Check

Magento Git File Exposure Check

Permissions-Policy Header Check

Installation Log File Exposure Check

Server Status Pages Access Check

Joomla Admin Login Page Protection Check

Drupal Admin Access Restriction Check

Cookie Security Check

Joomla Backup File Exposure Check

WordPress Debug Log Exposure Check

Shopify Environment Information Exposure Check

PrestaShop Backup File Exposure Check

Magento Cache Folder Access Check

Login Attempt Limiting Check

PrestaShop Session Cookie Security Check

PHP Error Display on Joomla Check

Upload Folder Indexing Check

Database Administration Tools Access Check

PrestaShop Upload Folder Indexing Check

Magento Session Cookie Security Check

Shopify Cookie Consent Banner Presence Check

Configuration File Exposure Check

Server Configuration Information Check

Shopify Cart Endpoint Exposure Check

Plaintext Password Exposure Check

PrestaShop Version Check

Drupal Log File Exposure Check

Email Address Exposure Check

Shopify Error Display Check

WordPress Heartbeat API Check

Shopify Contact Form CAPTCHA Protection Check

Content-Security-Policy Header Check

Shopify HSTS Header Check

Shopify HTTP Security Headers Check

Joomla Temporary Folder (/tmp/) Access Check

Drupal Temporary Folder (tmp/) Access Check

Shopify REST API Exposure Check