Content-Security-Policy Analysis for https://asual.com

Open Cached · just now

17 directives

Content-Security-Policy

Content-Security-Policy: base-uri 'none'; child-src 'self'; connect-src 'nonce-MjEyNjU1NDg1NjA3NjgzNjc=' 'self' *.google-analytics.com; default-src 'self'; font-src 'self'; form-action 'none'; frame-ancestors 'self'; frame-src 'self'; img-src 'self' *.google-analytics.com; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'nonce-MjEyNjU1NDg1NjA3NjgzNjc=' 'self' 'strict-dynamic' 'unsafe-inline'; script-src-elem 'nonce-MjEyNjU1NDg1NjA3NjgzNjc=' 'self' 'strict-dynamic' 'unsafe-inline'; style-src 'nonce-MjEyNjU1NDg1NjA3NjgzNjc='; upgrade-insecure-requests; worker-src 'self'

base-uri Keyword —

'none'

child-src Keyword —

'self'

connect-src Nonce —

'nonce-MjEyNjU1NDg1NjA3NjgzNjc='

connect-src Keyword —

'self'

connect-src Host

Google Analytics

*.google-analytics.com

ASN | Google

default-src Keyword —

'self'

font-src Keyword —

'self'

form-action Keyword —

'none'

frame-ancestors Keyword —

'self'

frame-src Keyword —

'self'

img-src Keyword —

'self'

img-src Host

Google Analytics

*.google-analytics.com

ASN | Google

manifest-src Keyword —

'self'

media-src Keyword —

'self'

object-src Keyword —

'none'

script-src Nonce —

'nonce-MjEyNjU1NDg1NjA3NjgzNjc='

script-src Keyword —

'self'

script-src Keyword —

'strict-dynamic'

script-src Keyword —

'unsafe-inline'

script-src-elem Nonce —

'nonce-MjEyNjU1NDg1NjA3NjgzNjc='

script-src-elem Keyword —

'self'

script-src-elem Keyword —

'strict-dynamic'

script-src-elem Keyword —

'unsafe-inline'

style-src Nonce —

'nonce-MjEyNjU1NDg1NjA3NjgzNjc='

upgrade-insecure-requests Source —

(no sources)

worker-src Keyword —

'self'

Content-Security-Policy-Report-Only

No report-only CSP headers found.