Content-Security-Policy Analysis for https://cloud.pspr.uk

Open Cached · just now

14 directives

Content-Security-Policy

Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-m437TjNzJq7Sy4GoVcgUN/LgZALx5kSiZQPfCt/5i0M=' blob: 'self' cloud.pspr.uk 'unsafe-eval' 'wasm-unsafe-eval' 'wasm-unsafe-eval';script-src-elem 'strict-dynamic' 'nonce-m437TjNzJq7Sy4GoVcgUN/LgZALx5kSiZQPfCt/5i0M=' blob: 'self' cloud.pspr.uk 'unsafe-eval' 'wasm-unsafe-eval' 'wasm-unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: * https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self' 'self' blob: data: wss://nx60507.your-storageshare.de;media-src 'self';frame-src 'self';frame-ancestors 'self';worker-src blob:;form-action 'self'

default-src Keyword —

'none'

base-uri Keyword —

'none'

manifest-src Keyword —

'self'

script-src Nonce —

'nonce-m437TjNzJq7Sy4GoVcgUN/LgZALx5kSiZQPfCt/5i0M='

script-src Scheme —

blob:

script-src Keyword —

'self'

script-src Host —

cloud.pspr.uk

ASN | Cloudflare

script-src Keyword —

'unsafe-eval'

script-src Keyword —

'wasm-unsafe-eval'

script-src Keyword —

'wasm-unsafe-eval'

script-src-elem Keyword —

'strict-dynamic'

script-src-elem Nonce —

'nonce-m437TjNzJq7Sy4GoVcgUN/LgZALx5kSiZQPfCt/5i0M='

script-src-elem Scheme —

blob:

script-src-elem Keyword —

'self'

script-src-elem Host —

cloud.pspr.uk

ASN | Cloudflare

script-src-elem Keyword —

'unsafe-eval'

script-src-elem Keyword —

'wasm-unsafe-eval'

script-src-elem Keyword —

'wasm-unsafe-eval'

style-src Keyword —

'self'

style-src Keyword —

'unsafe-inline'

img-src Keyword —

'self'

img-src Scheme —

data:

img-src Scheme —

blob:

img-src Host —

img-src Host

OpenStreetMap

https://*.tile.openstreetmap.org

ASN | Fastly

font-src Keyword —

'self'

font-src Scheme —

data:

connect-src Keyword —

'self'

connect-src Keyword —

'self'

connect-src Scheme —

blob:

connect-src Scheme —

data:

connect-src Host —

wss://nx60507.your-storageshare.de

ASN | Hetzner

media-src Keyword —

'self'

frame-src Keyword —

'self'

frame-ancestors Keyword —

'self'

worker-src Scheme —

blob:

form-action Keyword —

'self'

Content-Security-Policy-Report-Only

No report-only CSP headers found.