C
trello.com
Score 60/100 · scanned 2026-08-04Content-Security-Policy
No enforcing Content-Security-Policy on the homepage response. What that means →
Headers sent
| Header | Value |
|---|---|
content-security-policy-report-only | base-uri 'self'; default-src 'self' *.atlassian.com *.intercomcdn.com *.orangelogic.com *.6sc.co *.6sense.com; script-src 'self' *.gstatic.com *.cookielaw.org *.public.atl-paas.net *.prod.atl-paas.net… |
strict-transport-security | max-age=63072000; preload |
x-content-type-options | nosniff |
x-xss-protection | 1; mode=block |
server | AtlassianEdge |
Re-scan live
This is a snapshot from 2026-08-04. Check it now: