Skip to content
mistakes.show
793Kissues on 68,769 sites
mistakes.show
Get in touch
  1. Home
  2. Mistakes
  3. No Content-Security-Policy
SecurityMinor

No Content-Security-Policy

A CSP limits where scripts can come from and reduces the impact of XSS.

70%of Global websites

By market

  1. Global70%
  2. United Kingdom67%
  3. Netherlands70%
  4. Italy78%
  5. Spain72%
  6. Japan87%
  7. Latin America71%

How to fix

  1. 1Start with Content-Security-Policy-Report-Only to collect violations.
  2. 2Allow only the sources you use, then switch to enforcing mode.

Related mistakes

Our crawler: 68,769 sites · Global · updated Oct 23, 2026 · Methodology

Found mistakes on your site?

We can fix them in one sprint. Reply within one business day.

Get in touchServices