I used a well known tool called ZAP (Zed Attack Proxy) to do a security review of your site. Addressing these issues will allow usage of your site from certain mainstream platforms that require this type of review. For example, you are not setting a Content-Security-Policy Response Header which is considered a security best practice.
As of now I am unsure if addressing these are a requirement for my project in particular.
Thanks, I love the platform!
2023-09-20-ZAP-Report-exchangerate_host.pdf
