Security Headers Test

Security Headers Test Suite
==================================================

1. Testing Default Configuration:
  Environment: production
  Frame Options: SAMEORIGIN
  Referrer Policy: strict-origin-when-cross-origin
  HSTS Max Age: 31536000
  Configuration Valid: YES
  CSP Directives: 10
  Permission Policies: 13

2. Testing Strict Configuration:
  Environment: strict
  Frame Options: DENY
  Referrer Policy: no-referrer
  HSTS Max Age: 63072000
  Configuration Valid: YES
  CSP Directives: 10
  Permission Policies: 22

3. Testing API Configuration:
  Environment: api
  Frame Options: DENY
  Referrer Policy: no-referrer
  HSTS Max Age: 31536000
  Configuration Valid: YES
  CSP Directives: 10
  Permission Policies: 22

4. Testing Development Configuration:
  Environment: development
  Frame Options: SAMEORIGIN
  Referrer Policy: strict-origin-when-cross-origin
  HSTS Max Age: 0
  Configuration Valid: YES
  CSP Directives: 10
  Permission Policies: 7

5. Testing Custom Configuration:
  Custom frame_options: Array
  Custom headers count: 1
  Merged config valid: NO

6. Testing Configuration Validation:
  Valid config test: PASS
  Invalid config test: PASS
  Validation errors found: 5

7. Testing CSP Building:
  CSP directives configured: 10
  Has required directives: YES
  Script sources configured: 5

All tests completed!

Testing Headers in HTTP Context:
----------------------------------------

Context: web_page
  Headers applied: YES

Context: api_request
  Headers applied: YES

Context: ajax_request
  Headers applied: YES

Performance Test:
----------------------------------------
  Iterations: 1000
  Total time: 101.72 ms
  Average time per application: 0.1017 ms
  Performance: EXCELLENT (< 1ms)