Content-Security-Policy Analysis for https://www.elastx.cloud

Open Cached · 2m ago

8 directives

Content-Security-Policy

Content-Security-Policy: default-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; child-src 'self' 'unsafe-inline'; frame-src 'self' https:; connect-src 'self' blob: https: http://platforms-info.jelastic.com/api/GetCurrency; img-src 'self' blob: https: data:

default-src Host —

default-src Keyword —

'self'

default-src Scheme —

data:

default-src Scheme —

https:

script-src Keyword —

'self'

script-src Keyword —

'unsafe-inline'

script-src Keyword —

'unsafe-eval'

script-src-elem Keyword —

'self'

script-src-elem Keyword —

'unsafe-inline'

script-src-elem Scheme —

https:

style-src Keyword —

'self'

style-src Keyword —

'unsafe-inline'

style-src Scheme —

https:

child-src Keyword —

'self'

child-src Keyword —

'unsafe-inline'

frame-src Keyword —

'self'

frame-src Scheme —

https:

connect-src Keyword —

'self'

connect-src Scheme —

blob:

connect-src Scheme —

https:

connect-src Host —

http://platforms-info.jelastic.com/api/GetCurrency

ASN | OVH

img-src Keyword —

'self'

img-src Scheme —

blob:

img-src Scheme —

https:

img-src Scheme —

data:

Content-Security-Policy-Report-Only

No report-only CSP headers found.