Findings from (Nikto+Nmap)

[adi0112358]

Missing X-Frame-Options Header

Based on the nikto scan, the anti-clickjacking X-Frame-Options header is not present.
Fix: X-Frame-Options: DENY

Missing X-Content-Type-Options Header

Reported: The X-Content-Type-Options header is not set.
Fix: X-Content-Type-Options: nosniff

Open CORS Policy

Nikto shows: Access-Control-Allow-Origin: *
Fix: Access-Control-Allow-Origin: https://www.jeevveda.com