Content-Security-Policy Analysis for https://pop.telekabel.at

Open Cached · just now

10 directives

Content-Security-Policy

Content-Security-Policy: default-src 'self'; object-src 'none'; font-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; form-action 'self' https: *.magentabusiness.at; connect-src 'self' https: *.magentabusiness.at; frame-ancestors 'self'; report-to /csp-reports

default-src Keyword —

'self'

object-src Keyword —

'none'

font-src Keyword —

'self'

img-src Keyword —

'self'

img-src Scheme —

data:

script-src Keyword —

'self'

script-src Keyword —

'unsafe-inline'

style-src Keyword —

'self'

style-src Keyword —

'unsafe-inline'

form-action Keyword —

'self'

form-action Scheme —

https:

form-action Host —

*.magentabusiness.at

ASN | T-SYSTEMS-AT Deutsche Telekom Global Business Solutions GmbH

connect-src Keyword —

'self'

connect-src Scheme —

https:

connect-src Host —

*.magentabusiness.at

ASN | T-SYSTEMS-AT Deutsche Telekom Global Business Solutions GmbH

frame-ancestors Keyword —

'self'

report-to Host —

/csp-reports

Content-Security-Policy-Report-Only

No report-only CSP headers found.