Headers Missing

How it was found

Hellow Twiiter,

i found that some of the headers are missing on the domain ads.twitter,com!

            Name                               Actual Value                                   My Recommendation

strict-transport-security max-age=631138519 Use 'max-age=31536000; includeSubDomains' set-cookie guest_id=v1%3A141600...ov-2016 23:50:40 UTC Add 'secure; httponly;' cache-control must-revalidate, private, max-age=0 Add 'no-cache, no-store' Pragma Use 'no-cache' Expires Use '-1' X-Permitted-Cross-Domain-Policies Use 'master-only' Content-Security-Policy Try Content-Security-Policy-Report-Only to start. Include default- src 'self', avoid 'unsafe-inline' and 'unsafe-eval'

content-security-policy-report-only default-src 'self'; ...Y3PMNVQ%3D%3D%3D%3D; Avoid 'unsafe-inline'. Avoid 'unsafe-eval'. Include default-src 'self', avoid 'unsafe-inline' and 'unsafe-eval'

Thanks