Bad SRI/CSP Configuration

Status: Security checks should FAIL

Security Issues

Missing SRI on analytics.js
Invalid SRI hash on utils.js
Missing SRI on tracker.js
No CSP header (completely missing)
No nonce on basic inline script
No nonce on inline script with id
Invalid nonce on nonce inline script
Data URI script (insecure)

Loaded Scripts

/js/analytics.js - No integrity attribute
/js/utils.js - Wrong integrity hash
/js/tracker.js - No integrity attribute
<script> - Basic inline (no nonce)
<script id> - Inline with id (no nonce)
<script nonce> - Inline with invalid nonce
<script src="data:..."> - Data URI script