Content-Security-Policy in html meta not detected?

andersju / webbkoll

An online tool that checks how a website is doing with regards to privacy

MIT License

266 stars 27 forks source link

Content-Security-Policy in html meta not detected? #5

Closed peterk closed 7 years ago

peterk commented 7 years ago

It is possible to set CSP in a html meta element but webbkoll does not seem to detect it. See e.g. view-source:https://kortkataloger.kb.se/ but where the test result warns about missing CSP.

andersju commented 7 years ago

Yep, good catch. I think I'll refactor it a bit to show CSP separately from the headers. Should be fixed soon. Nice work with the site!

peterk commented 7 years ago

Great! Thx for feedback.

andersju commented 7 years ago

Fixed, and https://webbkoll.dataskydd.net/ is now running the new version. Thanks for reporting!