Content-Security-Policy Analysis for https://newgrounds.melodymsg.com

Open Cached · just now

22 directives

Content-Security-Policy

Content-Security-Policy: base-uri 'self'; child-src 'self'; connect-src 'self'; default-src 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; frame-src 'self'; img-src 'self' data:; manifest-src 'self'; media-src 'self'; object-src 'none'; report-to endpoint-1; sandbox allow-same-origin allow-scripts; script-src 'self' 'wasm-unsafe-eval'; script-src-attr 'none'; script-src-elem 'self'; style-src 'self' https: 'unsafe-inline'; style-src-attr 'none'; style-src-elem 'self' https: 'unsafe-inline'; upgrade-insecure-requests; worker-src 'self'

base-uri Keyword —

'self'

child-src Keyword —

'self'

connect-src Keyword —

'self'

default-src Keyword —

'self'

font-src Keyword —

'self'

font-src Scheme —

https:

font-src Scheme —

data:

form-action Keyword —

'self'

frame-ancestors Keyword —

'self'

frame-src Keyword —

'self'

img-src Keyword —

'self'

img-src Scheme —

data:

manifest-src Keyword —

'self'

media-src Keyword —

'self'

object-src Keyword —

'none'

report-to Host —

endpoint-1

sandbox Keyword —

allow-same-origin

sandbox Keyword —

allow-scripts

script-src Keyword —

'self'

script-src Keyword —

'wasm-unsafe-eval'

script-src-attr Keyword —

'none'

script-src-elem Keyword —

'self'

style-src Keyword —

'self'

style-src Scheme —

https:

style-src Keyword —

'unsafe-inline'

style-src-attr Keyword —

'none'

style-src-elem Keyword —

'self'

style-src-elem Scheme —

https:

style-src-elem Keyword —

'unsafe-inline'

upgrade-insecure-requests Source —

(no sources)

worker-src Keyword —

'self'

Content-Security-Policy-Report-Only

No report-only CSP headers found.