CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵Missing X-Frame-Options
The site can be embedded in iframes by third parties (clickjacking risk).
HTTP Status Code200 HTTP VersionHTTP/1.1 HTTPS✔ Available IP Address18.164.52.75 CDNCDN (Hit from cloudfront) Compressiongzip ℹ 🔵Missing Content Security PolicyCSP is not configured. It helps prevent XSS attacks and content injection. ℹ 🔵Missing X-Frame-OptionsThe site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
#
URL
HTTP Status Code
Status
1
https://oneworld.com:443
301
HTTP/2 301
2
https://www.oneworld.com/
200
HTTP/2 200
#1 URLhttps://oneworld.com:443 HTTP Status Code301 StatusHTTP/2 301 #2 URLhttps://www.oneworld.com/ HTTP Status Code200 StatusHTTP/2 200
Performance
DNS Lookup
22.8 ms
TCP Connect
23.5 ms
TLS Handshake
6.2 ms
Time To First Byte (TTFB)
34.3 ms
Content Download
0.4 ms
Total Response Time
34.7 ms
DNS Lookup22.8 ms TCP Connect23.5 ms TLS Handshake6.2 ms Time To First Byte (TTFB)34.3 ms Content Download0.4 ms Total Response Time34.7 ms
Security
HTTPS
✔ Enabled
HSTS
✔ max-age=2592000
CSP
⚠ Not configured
X-Frame-Options
⚠ Not configured
X-Content-Type-Options
✔ nosniff
HTTP/2
⚠ HTTP/1.1
HTTPS✔ Enabled HSTS✔ max-age=2592000 CSP⚠ Not configured X-Frame-Options⚠ Not configured X-Content-Type-Options✔ nosniff HTTP/2⚠ HTTP/1.1
TitleMulti-City Flights, Frequent Flyer Perks & Airport Lounges | oneworld Meta DescriptionThe oneworld Alliance brings together world-class airlines to deliver a superior, seamless travel experience & special privileges for frequent flyers. Canonicalhttps://www.oneworld.com/ Open Graph TitleMulti-City Flights, Frequent Flyer Perks & Airport Lounges Open Graph DescriptionThe oneworld Alliance brings together world-class airlines to deliver a superior, seamless travel experience & special privileges for frequent flyers. Open Graph Imagehttps://images.ctfassets.net/m9ph4qvas97u/oHjwBflmld0QTbp... Twitter Cardsummary_large_image