Content-Security-Policy Analysis for https://intergenia.de

Open Cached · just now

8 directives

Content-Security-Policy

Content-Security-Policy: default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; connect-src 'self' *; img-src 'self' data: *; style-src 'self' 'unsafe-inline' *;base-uri 'self' *;form-action 'self' *; font-src * data:;

default-src Host —

script-src Keyword —

'self'

script-src Keyword —

'unsafe-inline'

script-src Keyword —

'unsafe-eval'

script-src Host —

connect-src Keyword —

'self'

connect-src Host —

img-src Keyword —

'self'

img-src Scheme —

data:

img-src Host —

style-src Keyword —

'self'

style-src Keyword —

'unsafe-inline'

style-src Host —

base-uri Keyword —

'self'

base-uri Host —

form-action Keyword —

'self'

form-action Host —

font-src Host —

font-src Scheme —

data:

Content-Security-Policy-Report-Only

No report-only CSP headers found.