Pedidos ou recursos que ofendem as políticas de segurança
Violação
Tipo
Informação
Recurso
https://moc.gov.iq/verify/index.php?url=/
Descrição
The source list for the Content Security Policy directive 'script-src' contains an invalid source: ''sha256-Base64EncodedHash''. It will be ignored.
certificate
Recurso
https://moc.gov.iq/verify/index.php?url=/
Descrição
Refused to apply inline style because it violates the following Content Security Policy directive: "default-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-AbpHGcgLb+kRsJGnwFEktk7uzpZOCcBY74+YBdrKVGs='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.
Refused to apply inline style because it violates the following Content Security Policy directive: "default-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-67/6EwHQWvoaJH6kKI/CQrK3IobHXIP9iutlKyzdnrE='), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.
Refused to apply inline style because it violates the following Content Security Policy directive: "default-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-MkblkUWWvcZHtISW05MNJa21Ei5CjQZFJ1F1O9p3A5M='), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.
Refused to apply inline style because it violates the following Content Security Policy directive: "default-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-MkblkUWWvcZHtISW05MNJa21Ei5CjQZFJ1F1O9p3A5M='), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.
Refused to load the stylesheet 'http://fonts.googleapis.com/css?family=Roboto:400,300' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'style-src-elem' was not explicitly set, so 'default-src' is used as a fallback.