अपनी CSP directives को चेक करिए और जोखिम पकड़िए। आपका डेटा इस ब्राउज़र से बाहर नहीं जाता।
जोखिम'unsafe-inline' in script-src
Inline code is allowed, which enables XSS. Prefer nonces or hashes.
चेतावनीWildcard source in img-src
* allows any origin. Restrict to specific trusted hosts.
चेतावनीMissing object-src
Set object-src 'none' to block plugins like Flash.
चेतावनीMissing base-uri
Set base-uri 'none' to prevent base-tag hijacking.
चेतावनीMissing frame-ancestors
Set frame-ancestors 'none' or 'self' to prevent clickjacking.
ठीकupgrade-insecure-requests enabled
HTTP subresources are upgraded to HTTPS.