Content-Security-Policy Analysis for https://git.pkp.dev

Open Cached · just now

3 directives

Content-Security-Policy: frame-ancestors 'none'; connect-src 'self' http://127.0.0.1:*; default-src https: 'unsafe-inline'

frame-ancestors Keyword —

'none'

connect-src Keyword —

'self'

connect-src Host —

http://127.0.0.1:*

default-src Scheme —

https:

default-src Keyword —

'unsafe-inline'

No report-only CSP headers found.