This is pretty nice! Added CSP headers and fixed the cookie attributes on my personal site thanks to it, had forgotten about those. The CSP analysis section (a

This is pretty nice! Added CSP headers and fixed the cookie attributes on my personal site thanks to it, had forgotten about those. The CSP analysis section (and maybe some others) could use a bit of improvement. For example, currently you get the following output: Clickjacking protection, using frame-ancestors With the following popover text: The use of CSP's <code>frame-ancestors</code> directive offers fine-grained control over who can frame your site. And yet, nowhere does it recommend you actionable steps. The page that you're probably looking for in that situation might as well be a clickable link: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co... Thankfully, the recommendation section does have some useful links apart from that! Not step by step guides, but still would lead you in the general direction of what you need.