Invalid Content Security Policy (CSP) Directive Identified in meta Elements

Severity: Information

The following CSP directives cannot be used in meta elements and can only be set via headers:

  • frame-ancestors
  • sandbox
  • report-uri

Move these CSP directives to headers.

Build your resistance to threats. And save hundreds of hours each month.

Get a demo See how it works