medium.com source code

The homepage of medium.com is 5.5 KB of HTML built with Cloudflare. Its security headers get an A. We last checked it on 2026-10-27.

medium.com showed us a bot check instead of its homepage, so the details below are of that check.

See the full source

The first lines of its HTML

<!DOCTYPE html>
<html lang="en-US">
  <head>
    <title>
      Just a moment...
    </title>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=Edge">
    <meta name="robots" content="noindex,nofollow">
    <meta name="viewport" content="width=device-width,initial-scale=1">
    <meta http-equiv="content-security-policy" content="default-src &#39;none&#39;; script-src &#39;nonce-dgpkUtUhjfsQ6SsNBlINuc&#39; &#39;unsafe-eval&#39; http…
    <style>
      *{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacS…
    </style>
    <meta http-equiv="refresh" content="360">
  </head>
  <body>
    <div class="main-wrapper" role="main">
      <div class="main-content">
        <noscript>
          <div class="h2"><span id="challenge-error-text">Enable JavaScript and cookies to continue</span></div>
        </noscript>
      </div>
    </div>
    <script nonce="dgpkUtUhjfsQ6SsNBlINuc">
      (function(){window._cf_chl_opt = {cFPWv: 'g',cH: 'zQ2hWG..9fkj.A_5FnNcA_GdjP4gl.DmWXB9JO019SA-1793122683-1.2.1.1-mIM7cSGuE5FN1UIWXptmNX_nALP6WY2wh7Lz0p0Fq…
    </script>
  </body>
</html>

All the code · Meta tags and report · Response headers · What changed