Domain History
bustur.lt
Grade F · 0/100 · 5/6 security headers present
Security Score
F
0/ 100
Security Headers
5/ 6
CSP Violations
76Violations
Issues Found
0Issues
Recommendations
0Available
CSP Analysis
Content Security PolicyHIGH
upgrade-insecure-requests
Directive Analysis
upgrade-insecure-requestsLOW
Content Security PolicyHIGH
default-src 'self'; script-src 'self' 'unsafe-inline'; script-src-elem 'self'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' unsafe-inline; report-uri https://www.bustur.lt/wp-json/rsssl/v1/csp?rsssl_apitoken=1578918823
Directive Analysis
default-srcLOW
'self'
•Missing recommended values for default-src: self
script-srcHIGH
'self' 'unsafe-inline'
•Unsafe inline execution allowed in script-src
•Missing recommended values for script-src: nonce-, sha256-, sha384-, self, sha512-
•No nonces or hashes used for script-src
script-src-elemLOW
'self'
•Unknown directive: script-src-elem
style-srcHIGH
'self' 'unsafe-inline'
•Unsafe inline execution allowed in style-src
•Missing recommended values for style-src: nonce-, sha256-, sha384-, self, sha512-
style-src-elemLOW
'self' unsafe-inline
•Unknown directive: style-src-elem
report-uriLOW
https://www.bustur.lt/wp-json/rsssl/v1/csp?rsssl_apitoken=1578918823
Violations
•https://www.bustur.lt/ 8 [Report Only] Refused to apply inline style because it violates the following Content Security Policy directive: "style-src-elem 'self' unsafe-inline". Either the 'unsafe-inline' keyword, a hash ('sha256-gOPc0L7LbbmXtkAIOJZ8stq2fEfyAka5nt5GXTkXSFk='), or a nonce ('nonce-...') is required to enable inline execution.
•https://www.bustur.lt/ 11 [Report Only] Refused to apply inline style because it violates the following Content Security Policy directive: "style-src-elem 'self' unsafe-inline". Either the 'unsafe-inline' keyword, a hash ('sha256-zMhKMtonIzUgnTnVBEIIa+vGX4bAyQO7uqm/DRQDLEw='), or a nonce ('nonce-...') is required to enable inline execution.
•https://www.bustur.lt/ 39 [Report Only] Refused to apply inline style because it violates the following Content Security Policy directive: "style-src-elem 'self' unsafe-inline". Either the 'unsafe-inline' keyword, a hash ('sha256-D0c0pB+1b6prnWPZrCnNulitCfxgoy2enFA0TMjrRYY='), or a nonce ('nonce-...') is required to enable inline execution.
•https://www.bustur.lt/ 45 [Report Only] Refused to load the stylesheet 'https://d1azc1qln24ryf.cloudfront.net/114779/Socicon/style-cf.css?9ukd8d' because it violates the following Content Security Policy directive: "style-src-elem 'self' unsafe-inline".
•https://www.bustur.lt/ 46 [Report Only] Refused to load the stylesheet 'https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.css' because it violates the following Content Security Policy directive: "style-src-elem 'self' unsafe-inline".
•https://www.bustur.lt/ 47 [Report Only] Refused to load the stylesheet 'https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.7/css/select2.min.css' because it violates the following Content Security Policy directive: "style-src-elem 'self' unsafe-inline".
•https://www.bustur.lt/ 48 [Report Only] Refused to apply inline style because it violates the following Content Security Policy directive: "style-src-elem 'self' unsafe-inline". Either the 'unsafe-inline' keyword, a hash ('sha256-MszP3VSX+A9WIuhPK4fTlCkuFBSeMKuliJhFhzDyRBM='), or a nonce ('nonce-...') is required to enable inline execution.
•https://www.bustur.lt/ 152 [Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src-elem 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-dzAS/7vFXR2uri1zweAFZ9BTuVDdHP/PyT0ktTcdqoo='), or a nonce ('nonce-...') is required to enable inline execution.
•https://www.bustur.lt/ 153 [Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src-elem 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-S/SPMyM8CbaZvZw4UuEmcRI251NyJaM4OBAZHGguZhY='), or a nonce ('nonce-...') is required to enable inline execution.
•https://www.bustur.lt/ 154 [Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src-elem 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-nfsidplD/QnpDdJjZgFyN+QVB4yylNDODJVj7jl+EnM='), or a nonce ('nonce-...') is required to enable inline execution.
•https://www.bustur.lt/ - [Report Only] Refused to load the script 'https://cdn.jsdelivr.net/npm/[email protected]/slick/slick.min.js' because it violates the following Content Security Policy directive: "script-src-elem 'self'".
•https://www.bustur.lt/ - [Report Only] Refused to load the script 'https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js' because it violates the following Content Security Policy directive: "script-src-elem 'self'".
•https://www.bustur.lt/ - [Report Only] Refused to load the script 'https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.7/js/select2.min.js' because it violates the following Content Security Policy directive: "script-src-elem 'self'".
•https://www.bustur.lt/ - [Report Only] Refused to load the script 'https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.7/js/i18n/lt.js' because it violates the following Content Security Policy directive: "script-src-elem 'self'".
•https://www.bustur.lt/ 168 [Report Only] Refused to execute inline script because it violates the following Content Security Policy directive: "script-src-elem 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-nHQ9ZaxVG4p0wbSn3kvMVQVhc308LTovoC+Dh+y1axg='), or a nonce ('nonce-...') is required to enable inline execution.
•https://www.bustur.lt/ 152 [Report Only] Refused to load the stylesheet 'https://fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700' because it violates the following Content Security Policy directive: "style-src-elem 'self' unsafe-inline".
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV0ewJER.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVQewJER.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVwewJER.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVMewJER.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVIewJER.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWSwewJER.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWT4ewJER.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV8ewJER.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV4ewJER.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
•https://www.bustur.lt/wp-content/cache/wpfc-minified/dg7w4pi2/3xaih.js 0 [Report Only] Refused to load the font 'https://fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
Security Headers
✗Permissions-PolicyMissing
Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.
How to add it:
nginx
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;apache
Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Permissions-Policy value✓Referrer-PolicyPresent
no-referrer-when-downgrade
Controls how much referrer information is sent with requests, preventing data leaks to third parties.
✓Strict-Transport-SecurityPresent
max-age=63072000; includeSubDomains; preload
Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.
✓X-Content-Type-OptionsPresent
nosniff
Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.
✓X-Frame-OptionsPresent
sameorigin
Prevents the page from being embedded in iframes, protecting against clickjacking attacks.
✓X-XSS-ProtectionPresent
1; mode=block
Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.
1 recommended security header is missing on bustur.lt.
Beyond headers: infrastructure exposure
via OSN, our sister projectSecurity headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.
See what the internet sees about bustur.ltWeak headers often come with other exposure — check the full picture.
See full exposure report on OSN →Free, no signup.
bustur.lt
2 scans since 7/15/2025
F
Latest: 0/100
Total Scans
2
Latest Score
0/100
First Scan
7/15/2025
Last Scan
7/15/2025
Scan History
| Date | Score | CSP | Headers | Issues | Action |
|---|---|---|---|---|---|
| Jul 15, 2025 | F (0) | No | 5/6 | 0 | View → |
Show off your security grade
Embed this badge on your site or README. It updates automatically after each scan and links back to this report.
HTML
<a href="https://headertest.com/results/bustur.lt" title="Security headers grade for bustur.lt — HeaderTest">
<img src="https://headertest.com/api/badge/bustur.lt" alt="HeaderTest security grade: F (0/100) for bustur.lt" />
</a>Markdown
[](https://headertest.com/results/bustur.lt)