https://hackmd.io/@CTCQH_3DQASbWXcBSO6YCw/HkWwSpeeJe

ID da verificação
33082646-e8f5-4ced-ad26-d26a49e6989eConcluído
URL enviado:
https://hackmd.io/@CTCQH_3DQASbWXcBSO6YCw/HkWwSpeeJe
Relatório concluído:

Riscos · 0 encontrados

Práticas que podem representar riscos de segurança

  • Sem classificação

Cabeçalhos de segurança · 4 encontrados

Cabeçalhos de resposta HTTP que podem reforçar a segurança de uma aplicação web

NomeValorApoio ao clienteInformação
Strict-Transport-Securitymax-age=31536000; includeSubDomains; preloadBom
X-Frame-Options—Bom
X-Content-Type-Options—Bom
Content-Security-Policyscript-src 'self' vimeo.com https://gist.github.com www.slideshare.net 'unsafe-eval' https://assets.hackmd.io https://www.google.com https://apis.google.com https://docs.google.com https://accounts.google.com https://www.google.com https://apis.google.com https://docs.google.com https://accounts.google.com https://www.dropbox.com https://www.google-analytics.com https://stats.g.doubleclick.net https://secure.quantserve.com https://rules.quantcount.com https://pixel.quantserve.com https://static.hotjar.com https://script.hotjar.com https://www.googletagmanager.com https://cdn.ravenjs.com https://browser.sentry-cdn.com https://js.stripe.com 'nonce-f1b9a16c-ee4f-432a-b99c-ada30840f92f' 'sha256-EtvSSxRwce5cLeFBZbvZvDrTiRoyoXbWWwvEVciM5Ag=' 'sha256-NZb7w9GYJNUrMEidK01d3/DEtYztrtnXC/dQw7agdY4=' 'sha256-L0TsyAQLAc0koby5DCbFAwFfRs9ZxesA+4xg0QDSrdI=' 'sha256-8HvL1KRq6jEwDkuVgxMDK7Gag1vnT70L0Lfoa1E3YsY=' 'sha256-81acLZNZISnyGYZrSuoYhpzwDTTxi7vC1YM4uNxqWaM=' https://tally.so https://tracks.hackmd.io https://plausible.io; img-src * data: blob:; style-src 'self' 'unsafe-inline' https://assets-cdn.github.com https://github.githubassets.com https://assets.hackmd.io https://www.google.com https://fonts.gstatic.com https://www.google.com https://fonts.gstatic.com; font-src 'self' data: https://public.slidesharecdn.com https://assets.hackmd.io https://script.hotjar.com; object-src *; media-src *; frame-src *; child-src *; connect-src *; base-uri 'none'; form-action 'self' https://www.paypal.com; upgrade-insecure-requestsBom
Referrer-Policysame-originBom
Clear-Site-Data—Bom
X-Permitted-Cross-Domain-Policies—Bom
Permissions-Policy—Novo
Cross-Origin-Embedder-Policy—Novo
Cross-Origin-Opener-Policy—Novo
Cross-Origin-Resource-Policy—Novo
X-XSS-Protection1; mode=blockDescontinuado
Feature-Policy—Descontinuado
Expect-CT—Descontinuado
Public-Key-Pins—Descontinuado

Violações de segurança · 1 encontradas

Pedidos ou recursos que ofendem as políticas de segurança

ViolaçãoTipoInformação
Recurso
https://accounts.google.com/gsi/client
Descrição
Refused to load the stylesheet 'https://accounts.google.com/gsi/style' because it violates the following Content Security Policy directive: "style-src 'self' 'unsafe-inline' https://assets-cdn.github.com https://github.githubassets.com https://assets.hackmd.io https://www.google.com https://fonts.gstatic.com https://www.google.com https://fonts.gstatic.com". Note that 'style-src-elem' was not explicitly set, so 'style-src' is used as a fallback.
Política de segurança de conteúdo

Certificados · 11 encontrados

Os certificados SSL/TLS permitem que os sites encriptem transações entre o cliente e o servidor e forneçam a verificação de identidade do servidor

AssuntoData de emissãoData de validade
hackmd.io6/03/2024, 00:00:004/04/2025, 23:59:59
*.hackmd.io19/07/2024, 00:00:0016/08/2025, 23:59:59
tally.so17/10/2024, 23:07:4915/01/2025, 23:07:48
*.google-analytics.com30/09/2024, 14:36:1523/12/2024, 14:36:14
*.sentry-cdn.com4/06/2024, 18:46:046/07/2025, 18:46:03
plausible.io16/10/2024, 11:10:0214/01/2025, 11:10:01
accounts.google.com30/09/2024, 15:11:5123/12/2024, 15:11:50
*.g.doubleclick.net30/09/2024, 14:36:1223/12/2024, 14:36:11
*.google.es30/09/2024, 15:17:5723/12/2024, 15:17:56
*.googleusercontent.com30/09/2024, 15:07:0723/12/2024, 15:07:06