Content-Security-Policy Analysis for https://mevariable.com

Open Cached · just now

19 directives

Content-Security-Policy

Content-Security-Policy: default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'none'; form-action 'none'; frame-ancestors 'none'; frame-src 'none'; img-src 'self' data:; manifest-src 'none'; media-src 'self'; object-src 'none'; script-src 'sha256-GAvbFQj3x3PR6ZOoU5MI6Xf5rIaOqYoISrRpW7Ki3D0=' 'sha256-oBtcIF7eXuFlnb06on1ptlX3/4l9/PaNU5LTPG05mFI='; style-src 'sha256-Uz+uHRy10Q2bSeHT6gEC2VRbrSCF0jZuoorB7jsMB3c='; style-src-elem 'sha256-Uz+uHRy10Q2bSeHT6gEC2VRbrSCF0jZuoorB7jsMB3c='; style-src-attr 'unsafe-inline'; worker-src 'none'; require-trusted-types-for 'script'; trusted-types 'none'; upgrade-insecure-requests

default-src Keyword —

'none'

base-uri Keyword —

'none'

connect-src Keyword —

'self'

font-src Keyword —

'none'

form-action Keyword —

'none'

frame-ancestors Keyword —

'none'

frame-src Keyword —

'none'

img-src Keyword —

'self'

img-src Scheme —

data:

manifest-src Keyword —

'none'

media-src Keyword —

'self'

object-src Keyword —

'none'

script-src Hash —

'sha256-GAvbFQj3x3PR6ZOoU5MI6Xf5rIaOqYoISrRpW7Ki3D0='

script-src Hash —

'sha256-oBtcIF7eXuFlnb06on1ptlX3/4l9/PaNU5LTPG05mFI='

style-src Hash —

'sha256-Uz+uHRy10Q2bSeHT6gEC2VRbrSCF0jZuoorB7jsMB3c='

style-src-elem Hash —

'sha256-Uz+uHRy10Q2bSeHT6gEC2VRbrSCF0jZuoorB7jsMB3c='

style-src-attr Keyword —

'unsafe-inline'

worker-src Keyword —

'none'

require-trusted-types-for Keyword —

'script'

trusted-types Keyword —

'none'

upgrade-insecure-requests Source —

(no sources)

Content-Security-Policy-Report-Only

No report-only CSP headers found.