SEC-CSP-001
security WARNING Content-Security-Policy missing
Description
No enforced Content-Security-Policy was detected.
Recommendation
Add a restrictive Content-Security-Policy header.
- Introduced in ruleset : 2026.09.0
- Detector :
csp_missing
Risks detected according to the technical rules currently configured. Publication remains subject to Apple's and Google's review, and their rules evolve.