Questions tagged [content-security-policy]
Use to tag questions about Content Security Policy, either using the header or meta tag variants
9
questions
0
votes
1answer
23 views
Wordpress: console errors from web sites I have linked to
On this one page of my site, https://litchfieldmagazine.com/litchfield-county-design-resource-guide/
I have hundreds of console errors that are coming from sites I have linked to in the posts ...
1
vote
0answers
28 views
Chrome gives a content-security-policy warning when viewing an image in its own tab on my site
I'm setting Content-Security-Policy in htaccess.
I use a pretty basic and strict policy:
Header always set Content-Security-Policy
"default-src 'self';
script-src 'self' http: https: *.googleapis....
1
vote
0answers
52 views
Generating the base64 of sha256 of a file for Content Security Policy of a web page
The issue
I have a small private Apache2 web server running on Debian 10 Buster with security on my top list. Right now, I'm struggling with:
How to generate in the Linux terminal the base64-encoded ...
2
votes
0answers
95 views
Do Content-Security-Policy errors affect SEO rankings?
There is a website that allows users to post content and embed images from external links. This website has a Content-Security-Policy that allows only a small list of other websites in img-src.
If a ...
1
vote
1answer
48 views
Missing “policy” stated by Yahoo since DMARC implementation?
Since the implementation of DMARC on our server we get feedback reports from Yahoo, stating we do not publish a "policy" which therefore cannot be evaluated (to my understanding).
However the same ...
1
vote
2answers
70 views
Should I be concerned that Google Ads sometimes shows Passive mixed content (insecure images) in some Ads?
In some pages that have Google Ads, Chrome Dev Tools console shows the warning for a Passive Mixed Content:
Mixed Content: The page at '...' was loaded over HTTPS, but requested
an insecure image
...
2
votes
0answers
644 views
Does Content Security Policy (CSP) affect Google ranking? Pagespeed scores are worse without unsafe-inline
I introduced Content Security Policy (CSP) in a website, nonetheless some of its commands and implications seem to negatively affect Google Page Speed Insights ranking.
That happens in certain CSP ...
2
votes
2answers
1k views
Prevent sending referrers when clicking links from my site with an exception for one domain
Let's admit that, for security / privacy reasons, I want to globally set my referrer policy to be "no-referrer".
For instance, using Apache's .htaccess's
Header always set Referrer-Policy no-...
1
vote
1answer
2k views
defer img loading / CSP: allow embeded img
My website is defering some img loading by setting the img src value by JavaScript (from the img data-src value). In order to have still valid HTML as long as the URL is not set to img src, I am ...
