Content-Security-Policy Analysis for https://yapla.com

Open Cached · just now

4 directives

Content-Security-Policy

Content-Security-Policy: default-src 'self' http: https: ws: wss: 'unsafe-inline' 'unsafe-eval' data:; child-src 'self' blob: https:; img-src 'self' blob: data: https:; worker-src 'self' blob: https:

default-src Keyword —

'self'

default-src Scheme —

http:

default-src Scheme —

https:

default-src Scheme —

ws:

default-src Scheme —

wss:

default-src Keyword —

'unsafe-inline'

default-src Keyword —

'unsafe-eval'

default-src Scheme —

data:

child-src Keyword —

'self'

child-src Scheme —

blob:

child-src Scheme —

https:

img-src Keyword —

'self'

img-src Scheme —

blob:

img-src Scheme —

data:

img-src Scheme —

https:

worker-src Keyword —

'self'

worker-src Scheme —

blob:

worker-src Scheme —

https:

Content-Security-Policy-Report-Only

No report-only CSP headers found.