Every internal link that was opened answered, and AI answer and search crawlers may read the start page. But HSTS is not sent.The lesson for every team: Send Strict-Transport-Security with a max-age of at least a year, so browsers never try plain http again.One automated analysis of public pages on 5 Nov 2026, requested through QA-lab URL Review. A starting point, not a verdict. The full report: carlosandmunoz.com/qa-review.htmlReview your own site: carlosandmunoz.com/qa-review.html#WebSecurity #Vulnerability #SoftwareTesting #QA #HSTS #QAlab
usal.es: 51. The gap: HSTS.
Every internal link that was opened answered, and AI answer and search crawlers may read the start page. But HSTS is not sent.
The lesson for every team: Send Strict-Transport-Security with a max-age of at least a year, so browsers never try plain http again.
One automated analysis of public pages on 5 Nov 2026, requested through QA-lab URL Review. A starting point, not a verdict.
The full report: https://carlosandmunoz.com/qa-review.html?live=u-usal-es&utm_source=linkedin&utm_medium=social&utm_campaign=requested-reviews&utm_content=u-usal-es
Review your own site: https://carlosandmunoz.com/qa-review.html
#WebSecurity #Vulnerability #SoftwareTesting #QA #HSTS #QAlab
X
usal.es: 51. The gap: HSTS.
Send Strict-Transport-Security with a max-age of at least a year, so browsers never try plain http again.
carlosandmunoz.com/qa-review?live=u-usal-es&utm_source=x&utm_medium=social&utm_campaign=requested-reviews&utm_content=u-usal-es
#QAlab
Instagram
usal.es: 51. The gap: HSTS.
Every internal link that was opened answered, and AI answer and search crawlers may read the start page. But HSTS is not sent.
Lesson: Send Strict-Transport-Security with a max-age of at least a year, so browsers never try plain http again.
One automated analysis of public pages on 5 Nov 2026, requested through QA-lab URL Review. A starting point, not a verdict.
Full report: link in bio.
Review your own site: https://carlosandmunoz.com/qa-review.html
#WebSecurity #Vulnerability #QA #HSTS #QAlab
Facebook
usal.es: 51. The gap: HSTS.
Every internal link that was opened answered, and AI answer and search crawlers may read the start page. But HSTS is not sent.
Lesson: Send Strict-Transport-Security with a max-age of at least a year, so browsers never try plain http again.
One automated analysis of public pages on 5 Nov 2026, requested through QA-lab URL Review. A starting point, not a verdict.
https://carlosandmunoz.com/qa-review.html?live=u-usal-es&utm_source=facebook&utm_medium=social&utm_campaign=requested-reviews&utm_content=u-usal-es
Review your own site: https://carlosandmunoz.com/qa-review.html
#WebSecurity #Vulnerability #QA #QAlab
TikTok
usi.es: 51. Il divario: HSTS. Invia Strict-Transport-Security con una durata massima di almeno un anno, in modo che i browser non tentino mai più il semplice http. Analizza il tuo sito: https://carlosandmunoz.com/qa-review-it.html #WebSecurity #Vulnerability #SoftwareTesting #QA #HSTS #HTTPS #SicurezzaInformatica #QAlab
YouTube
Ogni collegamento interno aperto ha risposto e la risposta dell'IA e i crawler di ricerca possono leggere la pagina iniziale. Ma l'HSTS non viene inviato.
Lezione: Invia Strict-Transport-Security con una durata massima di almeno un anno, in modo che i browser non tentino mai più il semplice http.
Un'analisi automatizzata delle pagine pubbliche il 5 novembre 2026, richiesta tramite QA-lab URL Review. Un punto di partenza, non un verdetto.
Rapporto completo: https://carlosandmunoz.com/qa-review.html?live=u-usal-es&utm_source=youtube&utm_medium=social&utm_campaign=requested-reviews&utm_content=u-usal-es
Controlla il tuo sito: https://carlosandmunoz.com/qa-review.html
Revisioni richieste · QA-lab URL Review
#WebSecurity #CyberSecurity #Vulnerability #QA #HSTS #HTTPS #SicurezzaInformatica #SviluppoWeb #Programming #LearnOnYouTube #OWASP #QAlab
