keeleklikk.ee

geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=(), geolocation=(),midi=(),sync-xhr=(),microphone=(self),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()

Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.

same-origin, strict-origin

Controls how much referrer information is sent with requests, preventing data leaks to third parties.

'max-age=16070400;includeSubDomains'

Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.

nosniff

Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.

sameorigin

Prevents the page from being embedded in iframes, protecting against clickjacking attacks.

1; mode=block

Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.