Checks Missing Security Headers

secHeaders.sh

#!/bin/bash
headers=$(curl -s -I -L "https://"$1)

echo "$headers"

declare -a checks=(
    'Strict-Transport-Security'
    'X-Frame-Options'
    'X-XSS-Protection'
    'X-Content-Type-Options'
    'Access-Control-Allow-Origin'
    'Referrer-Policy'
    'HTTPOnly'
    'secure'
    'SameSite'
)

for i in "${checks[@]}"
do
    if ! echo $headers | grep -iqF $i; then
        echo $i
    fi
done