FALKEN'S MAZE / CHECKS / CONTENT-SECURITY-POLICY
Content-Security-Policy
What Joshua checks
Checks for a Content-Security-Policy header.
Why it matters
CSP limits the damage of cross-site scripting.
How to fix it
Start with a report-only CSP, review the reports, then enforce it.
In the Maze Score
- Worth
- 10 points (half for a warning)
- Severity
- Medium
- Runs on
- Every scan, including the free report card
Related checks
- Clickjacking protectionFree
- Referrer-PolicyFree
- Permissions-PolicyFree
- X-Content-Type-OptionsFree
- Cookie flagsFree
How does your domain do? Scan it free and get a Maze Score in about a minute.