Content-Secure-Policy

HTTP response header

Header usage statistics

Content-Secure-Policy response header information and usage statistics.

Websites using header Content-Secure-Policy 488
Percentage of websites that use Content-Secure-Policy header <0.1%
Total discovered header values 69
Header uses directives No
Header values are unique or random No
Most popular in the country United States of America

Distribution by websites popularity

Content-Secure-Policy detection in the top websites by popularity

Top 10k sites 0 websites
Top 100k sites 3 websites
Top 1m sites 82 websites

Websites utilizing Content-Secure-Policy

List of websites that use Content-Secure-Policy header

Domain Country Rank Contacts
bechshistory.com United States of America 30,565
yousuckatcooking.com United States of America 69,372
www.tim.it Italy 97,358
sbi.co.in India 108,282
team17.com United States of America 112,077
www.team17.com United States of America 112,077
See full domain list

Geographical Distribution

Header usage distribution by websites across the globe.






Common header values

List of top common Content-Secure-Policy header values

Header value Value prevalence
default-src 'self'; 44.67%
frame-ancestors 'none'; 27.05%
frame-ancestors 'self'; 3.07%
frame-ancestors 'self' 1.84%
default-src 'self'; script-src *; img-src *; style-src *; 1.64%
default-src 'none'; script-src 'self' www.google-analytics.com ajax.googleapis.com; img-src *; style-src 'self'; 1.23%
default-src 'none'; script-src 'self' cdn.iubenda.com cdnjs.cloudflare.com js.hs-analytics.net js.hs-scripts.com js.hscollectedforms.net player.vimeo.com www.google-analytics.com; img-src *; style-src 'self' cdnjs.cloudflare.com fonts.googleapis.com; fon 1.02%
default-src 'none'; script-src 'self'; img-src *; style-src 'self'; 1.02%
frame-ancestors 'self' *.googletagmanager.com 0.82%
default-src 'none'; script-src 'self' www.google-analytics.com *.googleapis.com www.googletagmanager.com s.ytimg.com www.youtube.com *.googleusercontent.com; img-src *; style-src 'self'; 0.82%
default-src 'none'; script-src *; img-src *; style-src 'self'; 0.82%
default-src 'none'; script-src 'self' purl.org xmlns.com ogp.me w3.org rdfs.org www.google-analytics.com ajax.googleapis.com; img-src *; style-src 'self'; 0.61%
default-src 'self'; upgrade-insecure-requests; 0.61%
frame-ancestors 'self' www.tru.ca ; 0.61%
default-src 'self' 0.41%
default-src 'none'; script-src 'self' oppwa.com test.oppwa.com; img-src *; style-src 'self'; 0.41%
default-src 'none'; script-src 'self' www.google-analytics.com ajax.googleapis.com fonts.googleapis.com www.google.com www.google.es; img-src *; style-src 'self'; 0.41%
default-src 'self' 'universo.pt';” 0.41%
default-src 'none'; script-src 'self' www.google-analytics.com ajax.googleapis.com; img-src *; style-src 'self' *.guidepoint.com guidepoint.com; 0.41%
default-src 'none'; script-src 'self' www.google-analytics.com ajax.googleapis.com; img-src self; style-src 'self'; 0.41%