Content-Security-Policy

adyen.com sends an enforcing CSP. It is nonce-based and uses 'strict-dynamic'.

object-src 'none'; base-uri 'none'; script-src 'nonce-3C4BBHalipICPe3mNdvjqSSpZ1rvx7CO' 'strict-dynamic' 'self'; report-uri /.netlify/functions/__csp-violations

Directive	Sources
object-src	'none'
base-uri	'none'
script-src	'nonce-3C4BBHalipICPe3mNdvjqSSpZ1rvx7CO' 'strict-dynamic' 'self'
report-uri	/.netlify/functions/__csp-violations

Headers sent

Header	Value
strict-transport-security	max-age=31536000; includeSubDomains
x-frame-options	SAMEORIGIN
x-content-type-options	nosniff
referrer-policy	strict-origin
server	Netlify

Re-scan live

This is a snapshot from 2026-08-04. Check it now:

Scan