HTTP Security Headers

dmed.technology

Final status: 200 · Server: nginx
http://dmed.technology (301)https://dmed.technology/ (301)https://dee.technology/ (302)https://dee-intranet-identity-prod.auth.us-east-1.amazoncognito.com/oauth2/authorize?client_id=453fevgr39cujeso3t2fv2enmd&redirect_uri=https%3A%2F%2Fdee.technology%2Foauth2%2Fidpresponse&response_type=code&scope=openid&state=SJEJTsKZrm0bjm1LX6a18wTrR38kpjipSmwJK6NkaF1DJo1MJ0uOf5P0jHU%2Fefoulby2ynALbmuZfVK5R11aXSLet2HE6RhXiTg6VMC1ENobaq4tQE%2BUToolEZHPGc%2Fsl0TceiCV3savwPzl98G0L98qNB%2FZ6RGrQ63ZlRV598mKEbfK694a3TIdq3KBHUDdn3C5txwtdDAvHH6NRT6zyQTTuOJBhRxh%2FiDgHO6it3Qx%2FTCBlqQrXw%3D%3D (302)https://sso.myid.disney.com/app/disney_deetechnologyintranetsiteproduction_1/exk1brr8ey0yglO0o0x8/sso/saml?SAMLRequest=fZLBbtswDIZfxdBdsmynhiPEKYIVBQJ0GNC0O%2BwSyBabCLMpT6SLeE8%2FxEmK7tIjKf7UT35c3Z%2F6LnmHSD5gLTKlRQLYBufxUIvXl0dZifv1imzf5YPZjHzEZ%2FgzAnFy6jskc3mpxRjRBEueDNoeyHBrdpvvTyZX2gwxcGhDJ5INEUT2Ab8FpLGHuIP47lt4fX6qxZF5IJOmDkB65GgRWHoHyJ4nOcTglB35qEaSYIllpmxv%2FwZswwE9B9WGPp3tpN4NEWgISCCSByD2aHke8PYHUVD95J1ynhCmWWuHIb2EewfA0B4xdOEw3byQZzi7GNtzr32Wwul31sRYwaSnQ%2FdDB32qzp1nFyLZPtRin7tCu8wWUjfVnVy4RSMb2xSyLXVT3JVvkJeZSLZEI2yR2CLXItd5KfVSZsuXPDfF0uhKlUX1SyQ%2Fb6BypcUVi5nF8TOPr3HYGwSRPIbYW%2F66%2FJzxTr7NpeZCQ6zPisv6zXX%2FhgbzgWa%2FXFQ7F3ZZt0o%2Fu1xfw%2F9vaf0P&RelayState=H4sIAAAAAAAA_z3SS4-qSBiA4f_ybYcSigIEkrPAW9PeRbQZDyedAgpEgeJSiDqZ_z7pzeze5N0-_wAFG_oOMdoJhL8tzTwm_IgLkCACGzavzxlypps5SBCDDZpOUvbIWmLF_Y11nAg1faisKhOQIAEbrkLUnS3LCWMjweJrxQuevWROe3FV5TypW9bVvOoYSMDAhpgnP5mCDUdnswYJMrB_A69ZlSfwR4Lrz1nOl363urSlEt1KvA4Mis3Bbz1i3utbXh_LYbkytne6wLMlx5ul0u9Sfa_c3FMYyizlfRG91FflrKOyv6Tnle5hTIPjmgnVnRveNcj9zDhvpni-5RFtNHGY_3XyOS_mF3f_EYeh3BWKH7N8eiYdfQz7d2GZH8raMpvtJAzli-F9tAeDXArvrFtmuZpH6cqwNEr8z6Qhq4l7miUVmeriOYhk5jxc19h6vvF-HXy_3y0nV-95DUM5n2XuzsgFOTzDUPank6I5tMHw6xdIcAcb1PVdJdsi2niGyf2nFeAgNsxsshxoOejNefFpec34Rtdr3FposWruj7OCaH1i34vkNHxdRP72lXL39Td-zxaaMzVfu0sfOMydHrutr_XnaEouzf4qXm99thkc9nwuV9uoQf6Ho7-_Ds4mi-gWWd7RXXxtxve3lrlF1FSdWqizfRCoi7Ij8eGWOSBBATYkjKG8Ei2tmEB5wiqRixeqW56MfkiM_qc3oiV98yrmWZULPop5CRKUYOOxaZn6WNdMCWqwU1p0TIIWbBhHhkKZoiITawRpY3OMTI1iNMYEMzVhMdZ1kECADd9qQpQEU4KUyNSRlmgRimhEUGwoEdGNlKkGBgkeYP_-8-9_0yZRehUDAAA.H4sIAAAAAAAA_wEgAN__tvMjlN_UX23vBW3dYV2AbxTFA__I8SkjoH1NFFq6r9j-i1yNIAAAAA.4 (200)

Security Headers

Strict-Transport-Security (HSTS)
Forces browsers to use HTTPS, preventing protocol-downgrade attacks.
Content-Security-Policy (CSP)
Limits where scripts/resources can load from — the strongest defense against XSS.
X-Frame-Options SAMEORIGIN
Blocks the site from being embedded in iframes (clickjacking protection).
X-Content-Type-Options
Stops browsers from MIME-sniffing responses away from the declared type.
Referrer-Policy strict-origin-when-cross-origin
Controls how much referrer information is sent to other sites.
Permissions-Policy — missing
Restricts access to browser features like camera, microphone, geolocation.