Content-Security-Policy Analysis for https://mehfeel.app

Open Cached · just now

9 directives

Content-Security-Policy

Content-Security-Policy: default-src 'none'; script-src 'self' 'sha256-ONmjVxMKcj7vwYq+tOmbIifFp15wZYob9pKyQekmMKY=' 'sha256-csCvp9nVludNxvJTfqYgPNn0DR4Er7pYz0UlnateDac=' 'sha256-bFTo5L0rPsnj3aQ7VAfkBni+5zzUKCuEUpT0t6OEakI='; style-src 'self'; font-src 'self'; img-src 'self' data:; connect-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'

default-src Keyword —

'none'

script-src Keyword —

'self'

script-src Hash —

'sha256-ONmjVxMKcj7vwYq+tOmbIifFp15wZYob9pKyQekmMKY='

script-src Hash —

'sha256-csCvp9nVludNxvJTfqYgPNn0DR4Er7pYz0UlnateDac='

script-src Hash —

'sha256-bFTo5L0rPsnj3aQ7VAfkBni+5zzUKCuEUpT0t6OEakI='

style-src Keyword —

'self'

font-src Keyword —

'self'

img-src Keyword —

'self'

img-src Scheme —

data:

connect-src Keyword —

'self'

base-uri Keyword —

'none'

form-action Keyword —

'none'

frame-ancestors Keyword —

'none'

Content-Security-Policy-Report-Only

No report-only CSP headers found.