79463659

Date: 2025-02-24 13:22:39
Score: 1.5
Natty:
Report link

Don't use unsafe inline at all; rather put all js and css into separate files, then use script and style src as self.

If you need any external css or js, then add these links to your CSP. It's safer. Also avoid putting JavaScript like onClick and such in your HTML code. Just put an ID and do it in an external js.

Reasons:
  • Blacklisted phrase (1): these links
  • Has code block (-0.5):
  • Low reputation (1):
Posted by: Aleksander Karabtsuk