Security Headers Test
Security Headers Test Suite
==================================================
1. Testing Default Configuration:
Environment: production
Frame Options: SAMEORIGIN
Referrer Policy: strict-origin-when-cross-origin
HSTS Max Age: 31536000
Configuration Valid: YES
CSP Directives: 10
Permission Policies: 13
2. Testing Strict Configuration:
Environment: strict
Frame Options: DENY
Referrer Policy: no-referrer
HSTS Max Age: 63072000
Configuration Valid: YES
CSP Directives: 10
Permission Policies: 22
3. Testing API Configuration:
Environment: api
Frame Options: DENY
Referrer Policy: no-referrer
HSTS Max Age: 31536000
Configuration Valid: YES
CSP Directives: 10
Permission Policies: 22
4. Testing Development Configuration:
Environment: development
Frame Options: SAMEORIGIN
Referrer Policy: strict-origin-when-cross-origin
HSTS Max Age: 0
Configuration Valid: YES
CSP Directives: 10
Permission Policies: 7
5. Testing Custom Configuration:
Custom frame_options: Array
Custom headers count: 1
Merged config valid: NO
6. Testing Configuration Validation:
Valid config test: PASS
Invalid config test: PASS
Validation errors found: 5
7. Testing CSP Building:
CSP directives configured: 10
Has required directives: YES
Script sources configured: 5
All tests completed!
Testing Headers in HTTP Context:
----------------------------------------
Context: web_page
Headers applied: YES
Context: api_request
Headers applied: YES
Context: ajax_request
Headers applied: YES
Performance Test:
----------------------------------------
Iterations: 1000
Total time: 98.18 ms
Average time per application: 0.0982 ms
Performance: EXCELLENT (< 1ms)