No Content-Security-Policy
WarningLow priority
Pages of this site whose response does not send a Content-Security-Policy.
Why it matters
A policy tells the browser which sources a page may load scripts and styles from, which limits the harm an injected script can do.
How to fix it
Send a Content-Security-Policy. Start in report-only mode to find what the site needs before enforcing it.
Skitter runs this check on every crawl, and lists each page it finds with the evidence: the header, the tag or the link that gave it away.