Header Security

Shopify Referrer-Policy Header Check

The Referrer-Policy header controls referrer information sent by your Shopify store. Check its configuration to protect customer data.

What this test checks

This test checks whether the Referrer-Policy header is present and correctly configured on your Shopify store. This header controls referrer information sent during requests. An overly permissive policy can expose sensitive data, while a restrictive policy protects customer privacy.

Our recommendation

Set a strict Referrer-Policy, such as 'strict-origin-when-cross-origin' or 'same-origin'. Use Shopify's built‑in security settings to configure this header. Test your configuration with browser developer tools.

Security tests

View all tests

Data Exposure

Shopify Referrer-Policy Header Check

What this test checks

Our recommendation

Read more

Email Address Exposure Check

CAPTCHA Presence on Password Reset Form Check

PHP Error Display on PrestaShop Check

Joomla Temporary Folder (/tmp/) Access Check

PHP Error Display on WordPress Check

Content-Security-Policy Header Check

Shopify Contact Form CAPTCHA Protection Check

Magento Session Cookie Security Check

Malicious File Presence Check in Upload Folders

WordPress Version Check

WordPress Heartbeat API Check

PrestaShop Backup File Exposure Check

Database Administration Tools Access Check

WordPress REST API Access Check

Magento Version Check

HSTS Header Check (HTTP Strict Transport Security)

CAPTCHA Presence on Contact Form Check

Joomla configuration.php Exposure Check

Shopify API Key Exposure Check

CAPTCHA Presence on Client Login Page Check

Referrer-Policy Header Check

Cross-Origin-Opener-Policy Header Check

Joomla Administrator Interface Access Check

Drupal Backup File Exposure Check

PHP Error Display on Magento Check

Drupal Admin Access Check

Joomla Upload Folder Indexing Check (images/)

Shopify phpinfo Exposure Check

Joomla Admin Login Page Protection Check

Shopify Content-Security-Policy Header Check

Drupal settings.php File Access Check

Shopify X-Content-Type-Options Header Check

PHP Error Display on Joomla Check

Shopify Admin Access Restriction Check

PrestaShop Admin Access Restriction Check

WordPress Theme Editor Access Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Magento Cache Folder Access Check

PHP Error Display in Production Check

Shopify Admin CAPTCHA Protection Check

Magento Admin Access Restriction Check

Shopify Terms and Conditions (T&C) Presence Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

HttpOnly Flag on Joomla Session Cookies Check

X-Content-Type-Options: nosniff Header Check

Shopify Permissions-Policy Header Check

Shopify Registration CAPTCHA Protection Check

Shopify REST API Exposure Check

Magento Git File Exposure Check

Shopify Client Login CAPTCHA Protection Check

Drupal Version Check

Joomla Version Check

Shopify Password Protection Check

Drupal Admin Login Page Protection Check

xmlrpc.php Access Check

Cross-Origin-Resource-Policy Header Check

Magento Backup File Exposure Check

Information Leak via HTTP Headers Check

Joomla Log File Exposure Check

Shopify CSRF Protection Check

Known CVE Vulnerability Check on Used Technologies

Shopify Storefront API Exposure Check

Installation Log File Exposure Check

WordPress Login Page Access Check (wp-login.php)

Shopify Sensitive File Exposure Check

Shopify File Upload Security Check

Cross-Origin-Embedder-Policy Header Check

Shopify SQL Injection Protection Check

Shopify HTTPS Redirect Check

Directory Indexing Check

Clear-Site-Data Header Check

WordPress Debug Log Exposure Check

Two-Factor Authentication (2FA) Check

Magento env.php File Access Check

Joomla REST API Access Check

PrestaShop Admin Login Page Protection Check