Content-Security-Policy Analysis for https://wiki.jasig.org

Open Cached · just now

17 directives

Content-Security-Policy

Content-Security-Policy: base-uri 'self'; object-src 'self' blob:; script-src 'report-sample' 'nonce-a5fd44ad8f42476ba433da4b8ff76e30' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https:; frame-ancestors 'self'; report-uri https://web-security-reports.services.atlassian.com/csp-report/confluence-frontend

base-uri Keyword —

'self'

object-src Keyword —

'self'

object-src Scheme —

blob:

script-src Keyword —

'report-sample'

script-src Nonce —

'nonce-a5fd44ad8f42476ba433da4b8ff76e30'

script-src Keyword —

'unsafe-eval'

script-src Keyword —

'unsafe-inline'

script-src Keyword —

'strict-dynamic'

script-src Scheme —

https:

frame-ancestors Keyword —

'self'

report-uri Host —

https://web-security-reports.services.atlassian.com/csp-report/confluence-frontend

ASN | Amazon

Content-Security-Policy-Report-Only

Content-Security-Policy-Report-Only: base-uri 'self'; default-src 'self'; script-src 'report-sample' 'nonce-a5fd44ad8f42476ba433da4b8ff76e30' 'unsafe-inline' 'strict-dynamic' https:; style-src 'self' 'unsafe-inline'; img-src 'self' *.public.atl-paas.net; font-src 'self' *.public.atl-paas.net; frame-ancestors 'none'; form-action 'self'; report-uri https://web-security-reports.services.atlassian.com/csp-report/confluence-frontend; report-to csp-default-endpoint; object-src 'self' blob:; frame-src 'self' https:

base-uri Keyword —

'self'

default-src Keyword —

'self'

script-src Keyword —

'report-sample'

script-src Nonce —

'nonce-a5fd44ad8f42476ba433da4b8ff76e30'

script-src Keyword —

'unsafe-inline'

script-src Keyword —

'strict-dynamic'

script-src Scheme —

https:

style-src Keyword —

'self'

style-src Keyword —

'unsafe-inline'

img-src Keyword —

'self'

img-src Host —

*.public.atl-paas.net

font-src Keyword —

'self'

font-src Host —

*.public.atl-paas.net

frame-ancestors Keyword —

'none'

form-action Keyword —

'self'

report-uri Host —

https://web-security-reports.services.atlassian.com/csp-report/confluence-frontend

ASN | Amazon

report-to Host —

csp-default-endpoint

object-src Keyword —

'self'

object-src Scheme —

blob:

frame-src Keyword —

'self'

frame-src Scheme —

https: