Missing or Unsafe Content-Security-Policy (CSP)
Detected 23 Aug 2026 01:46:20
Description:
The website lacks a robust Content-Security-Policy header. This increases susceptibility to Cross-Site Scripting (XSS) and data injection attacks.