Content-Security-Policy Analysis for https://connect.breadpayments.com

Open Cached · just now

7 directives

Content-Security-Policy

Content-Security-Policy: report-uri /csp-report;default-src * 'unsafe-eval' 'unsafe-inline' blob: data:;script-src * 'unsafe-eval' 'unsafe-inline' blob: data:;script-src-elem * 'unsafe-eval' 'unsafe-inline' blob: data:;style-src * 'unsafe-inline' blob: data:;style-src-attr * 'unsafe-inline' blob: data:;frame-ancestors *

report-uri Host —

/csp-report

default-src Host —

default-src Keyword —

'unsafe-eval'

default-src Keyword —

'unsafe-inline'

default-src Scheme —

blob:

default-src Scheme —

data:

script-src Host —

script-src Keyword —

'unsafe-eval'

script-src Keyword —

'unsafe-inline'

script-src Scheme —

blob:

script-src Scheme —

data:

script-src-elem Host —

script-src-elem Keyword —

'unsafe-eval'

script-src-elem Keyword —

'unsafe-inline'

script-src-elem Scheme —

blob:

script-src-elem Scheme —

data:

style-src Host —

style-src Keyword —

'unsafe-inline'

style-src Scheme —

blob:

style-src Scheme —

data:

style-src-attr Host —

style-src-attr Keyword —

'unsafe-inline'

style-src-attr Scheme —

blob:

style-src-attr Scheme —

data:

frame-ancestors Host —

Content-Security-Policy-Report-Only

No report-only CSP headers found.