Content-Security-Policy Analysis for https://mail.cleanmail.eu

Open Cached · just now

6 directives

Content-Security-Policy

Content-Security-Policy: connect-src *;default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval';img-src * data:;style-src 'self' 'unsafe-inline' 'inline';upgrade-insecure-requests

connect-src Host —

default-src Keyword —

'self'

script-src Keyword —

'self'

script-src Keyword —

'unsafe-inline'

script-src Keyword —

'unsafe-eval'

img-src Host —

img-src Scheme —

data:

style-src Keyword —

'self'

style-src Keyword —

'unsafe-inline'

style-src Keyword —

'inline'

upgrade-insecure-requests Source —

(no sources)

Content-Security-Policy-Report-Only

No report-only CSP headers found.