Content-Security-Policy Analysis for https://api.cebroker.com

Open Cached · just now

5 directives

Content-Security-Policy

Content-Security-Policy: default-src 'self' wss: data: blob: *; img-src 'self' 'unsafe-inline' 'unsafe-eval' * data:; style-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cebroker.com *;  font-src 'self' *;

default-src Keyword —

'self'

default-src Scheme —

wss:

default-src Scheme —

data:

default-src Scheme —

blob:

default-src Host —

img-src Keyword —

'self'

img-src Keyword —

'unsafe-inline'

img-src Keyword —

'unsafe-eval'

img-src Host —

img-src Scheme —

data:

style-src Keyword —

'self'

style-src Keyword —

'unsafe-eval'

style-src Keyword —

'unsafe-inline'

style-src Scheme —

blob:

style-src Scheme —

data:

style-src Host —

script-src Keyword —

'self'

script-src Keyword —

'unsafe-inline'

script-src Keyword —

'unsafe-eval'

script-src Host —

*.cebroker.com

ASN | Amazon

script-src Host —

font-src Keyword —

'self'

font-src Host —

Content-Security-Policy-Report-Only

No report-only CSP headers found.