Content-Security-Policy Analysis for https://newsroom.mastercard.com

Open Cached · just now

9 directives

Content-Security-Policy

No enforced CSP headers found.

Content-Security-Policy-Report-Only

Content-Security-Policy-Report-Only: default-src 'self';script-src 'self' * 'unsafe-inline' 'unsafe-eval';style-src 'self' * 'unsafe-inline';connect-src 'self' *;font-src 'self' *;img-src 'self' * data:;media-src 'self' *;object-src 'self' *;frame-src 'self' *

default-src Keyword —

'self'

script-src Keyword —

'self'

script-src Host —

script-src Keyword —

'unsafe-inline'

script-src Keyword —

'unsafe-eval'

style-src Keyword —

'self'

style-src Host —

style-src Keyword —

'unsafe-inline'

connect-src Keyword —

'self'

connect-src Host —

font-src Keyword —

'self'

font-src Host —

img-src Keyword —

'self'

img-src Host —

img-src Scheme —

data:

media-src Keyword —

'self'

media-src Host —

object-src Keyword —

'self'

object-src Host —

frame-src Keyword —

'self'

frame-src Host —