HTTPS surface reachable (robots ✓, sitemap ✓, title ✓)
Why it matters: Public files — robots.txt, sitemap.xml, head meta — are what attackers see first during reconnaissance. Misadvertised paths, stale sitemaps, and verbose generators leak more than intended (ISO 27001 A.8.9).
robots.txt
present
<!DOCTYPE html>
<html >
<head><meta charset="utf-8"><meta http-equiv="Content-Security-Policy" content="base-uri 'none'; font-src 'self' https: data:; form-action 'self'; img-src 'self' data: https: https://*.gitea.com https://js.hs-scripts.com https://www.google-analytics.com https://avatars.githubusercontent.com https://forms.hscollectedforms.net https://www.googletagmanager.com https://plausible.io https://www.google.com https://googleads.g.doubleclick.net https://*.hotjar.com https://*.hubspot.com; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://*.gitea.com https://js.hs-scripts.com https://www.google-analytics.com https://avatars.githubusercontent.com https://forms.hscollectedforms.net https://www.googletagmanager.com https://plausible.io https://www.google.com https://googleads.g.doubleclick.net https://*.hotjar.com https://*.hubspot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.gitea.com https://js.hs-scripts.com https://www.google-analytics.com https://avatars.githubusercontent.com https://forms.hscollectedforms.net https://www.googletagmanager.com https://plausible.io https://www.google.com https://googleads.g.doubleclick.net https://*.hotjar.com https://*.hubspot.com 'sha256-C+IcDEGFRB73Ik0oQ/SKSUXuOaQfu89OeSzaEUoElDk=' 'sha384-bzJrtLtUEuqha2MoGDv839hSMW4GI2gReKzn6yHQZID49vm2ktnUXYjz7sGYteOP' 'sha384-4Lz4GZrkdyuXiYSGwHL2KYsj3oyVZcr953HGCT/IcLQJymT52WbQV/6UFD/TGHYn' 'sha384-CsAixFoIurmT5PvrPAjwHnaAj/BDqrdp+zS+AOE2qaiskmeqbhTFXMqCLFh85R8b' 'sha384-/qxfBKjHDv05oLxMry/GRGxiida+EOxQ4BjVEhrAFXCYpKwUVrXbQ/MviABI7h5s' 'sha384-wV/FyIfkoKuneA9gx32UbcC1rWydYJhlr+cMCHu0oN57ZtVcBz8nUCI/A5rPOyHo' 'sha384-XJKPf9jfTX75QKYkAPDxPMmaJmGOocYVBM0hx60h7jh77/cPDZshyi3uFmEQfxdU' 'sha384-xXiD5o6yI+90OuGaBLXhZiGBAPi2OXUd1RWMEcUAjWw3axNXqKsuSMvjAVAMjv6c' 'sha384-Y1L87SYiod6bNGZLmIEJWSPimyTX3VpwSaBxrX7CfT+uRwMe7634zHpWQoNd1p65' 'sha384-eIhjBK4qVQKlWg8QH9LUVxX1WwqnKyoG5ZvJoAhfls0wn5fWYxWyTp7rhPNbDmyJ' 'sha384-rj0GBIbehODwWK8xM9hoYmMQRgBD19MNMauj19DqMx1QQYtVz5oQEAmdvNgyRvYa' 'sha384-ghTsIyUdQPA3ryql/6dPoCaCXTL9aYyjyPeAIQyEUN2uPVzxwqIXyuPBEJtdSYDN'; upgrade-insecure-requests; default-src 'self' https://*.gitea.com https://js.hs-scripts.com https://www.google-analytics.com https://avatars.githubusercontent.com https://forms.hscollectedforms.net https://www.googletagmanager.com https://plausible.io https://www.google.com https://googleads.g.doubleclick.net https://*.hotjar.com https://*.hubspot.com; connect-src 'self' https: wss: ws: https://*.gitea.com https://js.hs-scripts.com https://www.google-analytics.com https://avatars.githubusercontent.com https://forms.hscollectedforms.net https://www.googletagmanager.com https://plausible.io https://www.google.com https://googleads.g.doubleclick.net https://*.hotjar.com https://*.hubspot.com;">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Gitea Official Website</title>
<link rel="icon" type="image/x-icon" href="/favicon.ico">
<link rel="icon" type="image/svg+xml" href="/gitea.svg">
<link rel="mask-icon" type="image/svg+xml" href="/gitea.svg" color="#000000">
<link rel="apple-touch-icon" type="image/x-icon" href="/gitea.png">
<script src="//js.hs-scripts.com/44783791.js" async defer id="hs-script-loader"></script>
<meta property="og:title" content="Gitea Official Website">
<meta name="description" content="Gitea - Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD">
<meta property="og:description" content="Gitea - Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD">
<meta property="og:logo" content="https://about.gitea.com/gitea.png">
<meta property="og:image" content="https://about.gitea.com/gitea.png">
<meta name="twitter:card" content="summary_large_image">
<link rel="preload" as="fetch" crossorigin="anonymous" href="/_payload.json">
<style>/*! tailwindcss v3.3.5 | MIT License | https:
sitemap.xml
present — 0 url(s)
head
- title
- Gitea Official Website
- description
- Gitea - Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
social
- og:title
- Gitea Official Website
- og:description
- Gitea - Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
- og:logo
- https://about.gitea.com/gitea.png
- og:image
- https://about.gitea.com/gitea.png
- twitter:card
- summary_large_image