trix-editor.org

Trix: A rich text editor for everyday writing

Compose beautifully formatted text in your web application. Trix is an editor for writing messages, comments, articles, and lists—the simple documents most web apps are made of. It features a sophisticated document model, support for embedded attachments, and outputs terse and consistent HTML.

Last scanned 46 min agoCompare with another site →

Built with

No platform, CMS or framework detected. Detection is passive: it only sees what a site exposes in its HTML, headers and cookies, so custom or well-hidden stacks show up as nothing rather than as a guess.

Also detected

Infrastructure: GitHub Pages · Varnish

Overview

Status: alive
Registered: 2015-10-03 (11 years ago)
First seen here: 2026-09-22
Security grade: F (40/100, from headers & TLS)
Privacy score: 92/100 (1 third-party script hosts, 0 tracking/marketing services)
Hosting: Fastly, Inc. · AS54113 · United States
Server header: GitHub.com
Response time: 365 ms to first byte, measured from our crawler
TLS certificate: Let's Encrypt · TLSv1.3 · expires 2026-10-31
Mobile-ready: yes (viewport meta tag)
Linked to from: 2 other sites seen so far

Loads scripts from

Third-party domains this page pulls JavaScript or iframes from. Each one can see who visits.

unpkg.com

What to fix

Add Strict-Transport-Security
Header: Strict-Transport-Security: max-age=31536000; includeSubDomains
Add a Content-Security-Policy
Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test.
Add X-Content-Type-Options
Header: X-Content-Type-Options: nosniff
Prevent clickjacking
Header: X-Frame-Options: DENY (or a CSP frame-ancestors directive).
Add a Referrer-Policy
Header: Referrer-Policy: strict-origin-when-cross-origin
Publish an SPF record
A DNS TXT record listing who may send email for this domain, which prevents spoofing.
Publish a DMARC record
A TXT record at _dmarc.<domain>; start with v=DMARC1; p=none; to monitor.

Security & email signals

✓ HTTPS
✗ HSTS
✗ Content-Security-Policy
✗ X-Content-Type-Options
✗ X-Frame-Options
✗ Referrer-Policy
✗ Permissions-Policy
✗ SPF record
✗ DMARC record
✗ DKIM record
✓ Cookies set securely
✓ Has real content (not an empty shell)
✓ Valid TLS certificate

Badge

Show this site's security grade in a README or footer:

<a href="https://webtelemetry.dev/site/trix-editor.org"><img src="https://webtelemetry.dev/badge/trix-editor.org.svg" alt="Security grade"></a>

Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.