Vulneraciones de seguridad: se ha(n) encontrado 24
Solicitudes o recursos que infringen las políticas de seguridad
Vulneración
Tipo
Información
Recurso
https://foxbrasil.com/
Descripción
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-moz7h2qG0avT5ZXEM1aShVsl55HUbNpQ3n6fuVqN0WI='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to load the script 'https://www.googletagmanager.com/gtag/js?id=UA-127281085-1' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-2kNEq7+oG/mSKcIrRaRItepSNLowD8xP2wOV1EMLtEA='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-CibJrVxcDC01+R4NaGAvhEeIRDa7HZLyN5VJSv/dFZI='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-AeNNfnEcFYViUM/jEa5NtVyyi70iTlg768Eg/Ro4x6E='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-SLewIJSRM7YJriU1HqcLxRWmBgnezhfjPSDVkQ5sdgE='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to load the script 'https://connect.facebook.net/en_US/sdk.js' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-YDVfFw8n7aiDGjJJpRoHm7kbz8wJROctzSz/GzG7t6s='), or a nonce ('nonce-...') is required to enable inline execution.
Mixed Content: The page at 'https://foxbrasil.com/' was loaded over a secure connection, but contains a form that targets an insecure endpoint 'http://tracking.foxbrasil.com/login_proc.php'. This endpoint should be made available over a secure connection.
[Report Only] Refused to load the script 'https://d335luupugsy2.cloudfront.net/js/loader-scripts/6088e205-9b81-418b-aa71-5e70b820f8b1-loader.js' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to load the script 'https://d335luupugsy2.cloudfront.net/js/loader-scripts/9b883b7c-d730-47cf-87a3-bd9bb7ce28e0-loader.js' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-qcaKx8rPRCmD6RoOjGcj8M2O3/dQwpHkco3atEQ38SQ='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-DihPcvL4g3oBVcZk3fhzHXF/ldW6/w5Uf++KLTVBM0Q='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to load the script 'https://connect.facebook.net/en_US/sdk.js?hash=1dad5bcb1d6df9591422f4ab1d9e3cb9' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to load the script 'https://www.googletagmanager.com/gtag/js?id=G-0N5Y1ZEVPR&l=dataLayer&cx=c' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to load the script 'https://www.google-analytics.com/analytics.js' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-LOLCE5ebdifXSu2F+FvYd7RE8MasqlGbim1HG6zqHKY='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-I7FKlv+iQaB83DmvFukx4WYFM5QhJjkaIwMkbctRXc4='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-Zr4OyG9zYsm+gHUY6NR7LUIv1DI5OB/FI41t7TisXHU='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-28UWYeUU2sNKe7KUMdb+9XC+nDzf8pTlwMQezxMGWAY='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to load the script 'https://d335luupugsy2.cloudfront.net/js/lead-tracking/stable/lead-tracking.min.js' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to load the script 'https://d335luupugsy2.cloudfront.net/js/traffic-source-cookie/stable/traffic-source-cookie.min.js' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to load the script 'https://d335luupugsy2.cloudfront.net/js/rdstation-popups/bricks/rdstation-popup.min.js?v=1' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to load the script 'https://d335luupugsy2.cloudfront.net/js/integration/2.0.0/rd-js-integration.min.js?v=1' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
Los certificados SSL/TLS permiten a los sitios web cifrar las transacciones entre el cliente y el servidor y proporcionan verificación de la identidad del servidor