Richieste o risorse che violano le politiche di sicurezza
Violazione
Tipo
Info
Risorsa
https://secure.ssa.gov/emailus/EmailUs.action
Descrizione
[Report Only] Refused to load the script 'https://www.socialsecurity.gov/flexweb/rel_5_0c/libs/jquery/jquery.min.js' because it violates the following Content Security Policy directive: "script-src 'nonce-QhJOzfeaF5hmxXIFmWoIgS-_' 'strict-dynamic' http: https:". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to load the script 'https://www.ssa.gov/flexweb/rel_5_0c/libs/jquery/jquery.min.js' because it violates the following Content Security Policy directive: "script-src 'nonce-QhJOzfeaF5hmxXIFmWoIgS-_' 'strict-dynamic' http: https:". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to load the script 'https://www.socialsecurity.gov/flexweb/rel_5_0c/js/ssa.namespace.js' because it violates the following Content Security Policy directive: "script-src 'nonce-QhJOzfeaF5hmxXIFmWoIgS-_' 'strict-dynamic' http: https:". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'nonce-QhJOzfeaF5hmxXIFmWoIgS-_' 'strict-dynamic' http: https:". Either the 'unsafe-inline' keyword, a hash ('sha256-InXBBAuWUWc47re9Foa+0zNRKG86hEu5FiHCy/ps30U='), or a nonce ('nonce-...') is required to enable inline execution.
[Report Only] Refused to load the script 'https://www.socialsecurity.gov/flexweb/rel_5_0c/js/ssa.fn.setup.js' because it violates the following Content Security Policy directive: "script-src 'nonce-QhJOzfeaF5hmxXIFmWoIgS-_' 'strict-dynamic' http: https:". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to load the script 'https://www.socialsecurity.gov/flexweb/rel_5_0c/libs/headjs/head.min.js' because it violates the following Content Security Policy directive: "script-src 'nonce-QhJOzfeaF5hmxXIFmWoIgS-_' 'strict-dynamic' http: https:". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to load the script 'https://secure.ssa.gov/emailus/js/app-script-1.js' because it violates the following Content Security Policy directive: "script-src 'nonce-QhJOzfeaF5hmxXIFmWoIgS-_' 'strict-dynamic' http: https:". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
[Report Only] Refused to load the script 'https://secure.ssa.gov/emailus/js/ssa.textarea.508fix.js' because it violates the following Content Security Policy directive: "script-src 'nonce-QhJOzfeaF5hmxXIFmWoIgS-_' 'strict-dynamic' http: https:". Note that 'strict-dynamic' is present, so host-based allowlisting is disabled. Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.