Content-Security-Policy Analysis for https://addy.io

Open Cached · just now

13 directives

Content-Security-Policy

Content-Security-Policy: default-src 'none'; base-uri 'none'; form-action 'self' https://news.addy.io; connect-src 'self' https://app.addy.io/default-currency; manifest-src 'self'; frame-ancestors 'none'; script-src 'self' 'sha256-6qQWTVhBNcsGRyT26G26ZSIfLs+60+VhhX0ppPSgd50=' 'sha256-ZswfTY7H35rbv8WC7NXBoiC7WNu86vSzCDChNWwZZDM='; img-src 'self' data:; style-src 'self' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-/8CvIhEkJqzXuPzY8k7p4wTZ1zjLlE7mi3UcNExd8ao='; font-src 'self'; frame-src 'none'; object-src 'none'; upgrade-insecure-requests;

default-src Keyword —

'none'

base-uri Keyword —

'none'

form-action Keyword —

'self'

form-action Host —

https://news.addy.io

ASN | Hetzner

connect-src Keyword —

'self'

connect-src Host —

https://app.addy.io/default-currency

ASN | UpCloud Ltd

manifest-src Keyword —

'self'

frame-ancestors Keyword —

'none'

script-src Keyword —

'self'

script-src Hash —

'sha256-6qQWTVhBNcsGRyT26G26ZSIfLs+60+VhhX0ppPSgd50='

script-src Hash —

'sha256-ZswfTY7H35rbv8WC7NXBoiC7WNu86vSzCDChNWwZZDM='

img-src Keyword —

'self'

img-src Scheme —

data:

style-src Keyword —

'self'

style-src Hash —

'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='

style-src Hash —

'sha256-/8CvIhEkJqzXuPzY8k7p4wTZ1zjLlE7mi3UcNExd8ao='

font-src Keyword —

'self'

frame-src Keyword —

'none'

object-src Keyword —

'none'

upgrade-insecure-requests Source —

(no sources)

Content-Security-Policy-Report-Only

No report-only CSP headers found.