Content-Security-Policy Analysis for https://ci.codemc.io

Open Cached · just now

9 directives

Content-Security-Policy

No enforced CSP headers found.

Content-Security-Policy-Report-Only

Content-Security-Policy-Report-Only: base-uri 'none'; default-src 'self'; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: https://secure.gravatar.com; script-src 'report-sample' 'self'; style-src 'report-sample' 'self' 'unsafe-inline'; report-to content-security-policy; report-uri https://ci.codemc.io/content-security-policy-reporting-endpoint/FxbDZk6rT7NaiRh8GuBPqpT9x0S_vUCXSfwkf40GGMA=:YW5vbnltb3Vz:aHVkc29uLm1vZGVsLkxpc3RWaWV3:

base-uri Keyword —

'none'

default-src Keyword —

'self'

form-action Keyword —

'self'

frame-ancestors Keyword —

'self'

img-src Keyword —

'self'

img-src Scheme —

data:

img-src Host

Gravatar

https://secure.gravatar.com

ASN | Automattic

script-src Keyword —

'report-sample'

script-src Keyword —

'self'

style-src Keyword —

'report-sample'

style-src Keyword —

'self'

style-src Keyword —

'unsafe-inline'

report-to Host —

content-security-policy

report-uri Scheme —

https://ci.codemc.io/content-security-policy-reporting-endpoint/FxbDZk6rT7NaiRh8GuBPqpT9x0S_vUCXSfwkf40GGMA=:YW5vbnltb3Vz:aHVkc29uLm1vZGVsLkxpc3RWaWV3: