Security Hardening Report

Live security status check for myeasyrentacar.com

Generated: Mon, 05 Oct 2026 19:36:48 GMT

Passed

Failed

Total Checks

Transport Security

HTTPS Active

PASS

Protocol: https: | Host: myeasyrentacar.com

Secure Context (window.isSecureContext)

PASS

window.isSecureContext = true

Security Headers

Content-Security-Policy (meta tag)

PASS

default-src 'self'; script-src 'self' https://js.stripe.com https://maps.googleapis.com…

X-Frame-Options (meta tag)

PASS

DENY

X-Content-Type-Options (meta tag)

PASS

nosniff

Referrer-Policy (meta tag)

PASS

strict-origin-when-cross-origin

Mixed Content

No HTTP scripts loaded

PASS

All scripts use HTTPS

No HTTP images loaded

PASS

All images use HTTPS or are local

Stripe Security

Stripe JS loaded over HTTPS

PASS

https://js.stripe.com/v3

No Stripe secret key exposed on window

PASS

Checking window object for exposed Stripe secret key

Token Storage

No plaintext secrets in localStorage

PASS

localStorage keys: 4 items stored

Infrastructure-Level (Platform Managed)

HSTS Header (Strict-Transport-Security)

Requires server/CDN configuration. Base44 platform handles transport-layer security. Verify in platform dashboard.

HTTP→HTTPS 301 Redirect

Requires server/CDN config. JS-level redirect added as defense-in-depth in index.html.

Cookie Secure/HttpOnly flags

Managed by Base44 SDK auth layer. Platform sets HttpOnly cookies for session tokens.

Rate limiting / DDoS protection

Handled by Base44 infrastructure and Cloudflare.

TLS certificate management

Managed by Base44 platform for all subdomains.

Stripe Security Checklist

Webhook signature validated via constructEventAsync

Webhook rejected (400) if signature missing or invalid

STRIPE_WEBHOOK_SECRET stored in server-side environment only

STRIPE_SECRET_KEY never logged or returned to frontend

Publishable key only used in frontend (safe)

Stripe webhook always returns 200 (idempotent ack)

Replay protection: Stripe default 5-minute tolerance

No client_secret logged in backend functions

Easy Rent A Car / Taka Rentals LLC · Security Hardening Report · 10/5/2026