Static Test Site
Use this site to test
This site is intentionally basic and avoids advanced JavaScript. No user data is stored.
Try the Login Page
Cache Behaviors
- Images:
/assets/img/*.png
- CSS:
/assets/css/styles.css
- JS:
/assets/js/hello.js
- JSON:
/static/api/ping.json
Security Headers
Serve with a strict CSP, HSTS, and other headers (see README).
All resources are same-origin and can be safely restricted with CSP default-src 'none'
.
Test Exercises
- POST form to
/login
with typical fields (no backend provided). - Access sensitive-like path
/admin
(static 403 page). - Fetch
/static/api/ping.json
to test API caching.