Missing or Unsafe Content-Security-Policy (CSP)
Detected 23 Aug 2026 06:28:39
Description:
The website lacks a robust Content-Security-Policy header. This increases susceptibility to Cross-Site Scripting (XSS) and data injection attacks.