Multiple Content Security Policy (CSP) Implementation Detected

Netsparker detected that multiple CSP declaration types were implemented in the page for backward compatibility.

Using multiple CSP implementations together might cause CSP directives to not work as intended.

Remove these deprecated implementations:

• X-Content-Security-Policy
• X-Webkit-CSP

• Content Security Policy (CSP) Explained

• Using Content Security Policy (CSP) to Secure Web Applications
• Remote Hardware Takeover via Vulnerable Admin Software
• Negative Impact of Incorrect CSP Implementations
• Leverage Browser Security Features to Secure Your Website