CSP Evaluator
CSP is often present but weak. This scanner parses directives and reports risky allowances like unsafe-inline, unsafe-eval, wildcard script sources, and missing baseline constraints.
No scan has run yet.