Content-Security-Policy Analysis for https://timeraa.dev

Open Cached · 1h ago

10 directives

Content-Security-Policy

Content-Security-Policy: base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'strict-dynamic' 'unsafe-eval' 'sha256-SNYKE1DHuYAZrG5AUuSRqo++pcv10hvhpWw0qVOskE8=' 'sha256-dTy5erIHW3nobUV14Jw/vxPrWU8Zbw3ej3qoOwP5EMk=' 'sha256-1+AxCkc2SyZv2DGyk9YS8K8U9dKXXHBNCsak+vhlH7I=' 'sha384-3Xt64loUYTF1qbxDpszDOmMhm98a+AvN1TtYXEYHkzbDLH/Lj9QaO9KeEKN/FdHa' 'sha384-/bwIWWQanPugI7szmYwH3qXxiZjQnRKxEQEflGTMRg1tlnP5rh6Jz77lG/mhnxPd' 'sha384-oo3H9E4OnnmQOgonVAccr4kfGnTGE9SiugAaAJ6UpZ397m+sfF/ch4+F3CnP8rq0' 'sha384-vBM7uQiQqmMELHPVUqRQcEK9Q/H6nNgK3lvMCkz8ZVvaPNb3r1I/Evkr48Auqo84' 'sha384-CcsjAq17IovOr5+2kXD/x5gIxXefwdHG17Kp+EWFxW1OEIL5bkMgFUKw96dnCG/+' 'sha384-wV/FyIfkoKuneA9gx32UbcC1rWydYJhlr+cMCHu0oN57ZtVcBz8nUCI/A5rPOyHo' 'sha256-YEGs3yOCIk78TsgEqThF4vLiJv9ooyIQssPU0hkCGbE='; upgrade-insecure-requests;

base-uri Keyword —

'none'

font-src Keyword —

'self'

font-src Scheme —

https:

font-src Scheme —

data:

form-action Keyword —

'self'

frame-ancestors Keyword —

'self'

img-src Keyword —

'self'

img-src Scheme —

data:

object-src Keyword —

'none'

script-src-attr Keyword —

'none'

style-src Keyword —

'self'

style-src Scheme —

https:

style-src Keyword —

'unsafe-inline'

script-src Keyword —

'self'

script-src Scheme —

https:

script-src Keyword —

'unsafe-inline'

script-src Keyword —

'strict-dynamic'

script-src Keyword —

'unsafe-eval'

script-src Hash —

'sha256-SNYKE1DHuYAZrG5AUuSRqo++pcv10hvhpWw0qVOskE8='

script-src Hash —

'sha256-dTy5erIHW3nobUV14Jw/vxPrWU8Zbw3ej3qoOwP5EMk='

script-src Hash —

'sha256-1+AxCkc2SyZv2DGyk9YS8K8U9dKXXHBNCsak+vhlH7I='

script-src Hash —

'sha384-3Xt64loUYTF1qbxDpszDOmMhm98a+AvN1TtYXEYHkzbDLH/Lj9QaO9KeEKN/FdHa'

script-src Hash —

'sha384-/bwIWWQanPugI7szmYwH3qXxiZjQnRKxEQEflGTMRg1tlnP5rh6Jz77lG/mhnxPd'

script-src Hash —

'sha384-oo3H9E4OnnmQOgonVAccr4kfGnTGE9SiugAaAJ6UpZ397m+sfF/ch4+F3CnP8rq0'

script-src Hash —

'sha384-vBM7uQiQqmMELHPVUqRQcEK9Q/H6nNgK3lvMCkz8ZVvaPNb3r1I/Evkr48Auqo84'

script-src Hash —

'sha384-CcsjAq17IovOr5+2kXD/x5gIxXefwdHG17Kp+EWFxW1OEIL5bkMgFUKw96dnCG/+'

script-src Hash —

'sha384-wV/FyIfkoKuneA9gx32UbcC1rWydYJhlr+cMCHu0oN57ZtVcBz8nUCI/A5rPOyHo'

script-src Hash —

'sha256-YEGs3yOCIk78TsgEqThF4vLiJv9ooyIQssPU0hkCGbE='

upgrade-insecure-requests Source —

(no sources)

Content-Security-Policy-Report-Only

No report-only CSP headers found.