All changes and improvements to HeaderInspector, newest first. Each entry shows the version, the deployment date and time, and whether it is a new feature or a fix.
Every sub-page now shows the suite favicon, and cookie use follows a GDPR consent banner: non-essential cookies are only set after you choose “Accept”, while “Decline” keeps everything session-only. The strictly-necessary consent cookie remembers your choice.
The feedback button now opens a single shared form on the tools index. You can pick the app from a dropdown, so all suggestions and bug reports arrive in one place.
The privacy tiers were clarified: green now explicitly covers tools that make stateless server calls (nothing is stored), and blue is reserved for tools that persistently store user data on the server - currently none do.
Unified the suite look: the app now shares the common design system with every other tool — the same colours, fonts and footer, plus a new top bar to switch between tools.
The footer now shows a privacy indicator for this tool: a green dot means it runs entirely in your browser, a yellow dot means it keeps data on your device, and a blue dot means it stores results on the server.
New: every warning in the security audit (HSTS, CSP, X-Frame-Options, cookie flags, etc.) now has a recommendations link that opens an overlay with concrete, prioritized measures for hardening the response headers — in all five languages. The modal can be closed with the button, by clicking the backdrop or with the Escape key, and the page scroll is locked while it is open.
First release of HeaderInspector: server-side HTTP(S) inspection of any URL. Shows the status code and reason, the protocol (HTTP/1.1 or HTTP/2), redirects, the response time and all response headers, plus an overview of the security-relevant headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, CORP) and a security audit with warnings and recommendations on transport security, cookie flags and information disclosure.