The content security policy and the page disagree

Checks

• Page loads what the policy blocks page_loads_what_the_policy_blocks
• Policy allows hosts no page uses policy_allows_hosts_no_page_uses
• Header and page policies differ header_and_meta_policies_differ
• Test-only policy never enforced report_only_policy_never_enforced
• Unsafe inline cancels nonce protection unsafe_inline_cancels_the_nonce_protection

Findings

• The Content-Security-Policy and what the pages load do not match

What this relies on

The page works as intended; the policy was not updated, or was loosened until nothing broke.

How to verify by hand

The site's own violation reports, if a reporting endpoint is set.