39f543d4_Home___Browserscope__Block_reflected_XSS
Android 2.3→ [score] 10/17 [postMessage] yes [JSON.parse] yes [toStaticHTML] no [httpOnly cookies] no [X-Frame-Options] yes [X-Content-Type-Options] no [Block location spoofing] yes [Block JSON hijacking] yes [Block XSS in CSS] yes [Sandbox attribute] yes [Origin header] yes [Strict Transport Security] no yes [Cross Origin Resource Sharing] yes [Block visited link sniffing] no [Content Security Policy] no [# Tests] 488 [Block reflected XSS] 
no
y e s
n o
Home - Browserscope
Block reflected XSS