Bad SRI/CSP Configuration
Status: Security checks should FAIL
Security Issues
- Missing SRI on analytics.js
- Invalid SRI hash on utils.js
- Missing SRI on tracker.js
- No CSP header (completely missing)
- No nonce on basic inline script
- No nonce on inline script with id
- Invalid nonce on nonce inline script
- Data URI script (insecure)
Loaded Scripts
/js/analytics.js - No integrity attribute
/js/utils.js - Wrong integrity hash
/js/tracker.js - No integrity attribute
<script> - Basic inline (no nonce)
<script id> - Inline with id (no nonce)
<script nonce> - Inline with invalid nonce
<script src="data:..."> - Data URI script
Back to home