Schema.org attribution [warning]! Schema.org attribution is incomplete or relies only on publisher/fallback evidence.INFOSchema.org attributionINFOChecking structured data for author, creator, and publisher contributorsWARNCheck named Schema.org author count actual=0 expected="> 0" authorCount=0 publisherCount=0 namedContributors=0 authors=[] publishers=[] formats=[]WARNSchema.org attribution is incomplete or fallback-only authorCount=0 publisherCount=0 authors=[] publishers=[]Author identity quality [fail]! No named author or publisher identity could be extracted.INFOAuthor identity qualityINFOChecking contributors for stable identity signalsFAILCheck identified contributor count actual=0 expected="> 0" namedContributors=0 identifiedContributors=[] unidentifiedContributors=[]FAILNo named contributor identity could be extracted

Validate CSP frame-ancestors [warning]! No enforcing CSP frame-ancestors directive is present.INFOValidate CSP frame-ancestorsINFORead CSP frame-ancestors signals enforcingHeaderPresent=true reportOnlyHeaderPresent=true metaFrameAncestors=false policyCount=1 duplicateDirectives=[]WARNCompare effective frame-ancestors directive actual="missing" expected="valid restrictive enforcing frame-ancestors" issue="No enforcing CSP frame-ancestors directive is present."WARNNo enforcing CSP frame-ancestors directive is present.Validate X-Frame-Options [fail]! No valid X-Frame-Options fallback is present.INFOValidate X-Frame-OptionsINFORead X-Frame-Options fallback value="missing" parsedValues=[] normalizedValues=[]FAILCompare X-Frame-Options value actual="missing" expected="DENY or SAMEORIGIN" valid=false obsoleteAllowFrom=false duplicateOrConflicting=false issue="No valid X-Frame-Options fallback is present."FAILNo valid X-Frame-Options fallback is present.Review observed browser responses [warning]! One or more same-origin HTML documents observed by Chrome did not emit valid frame protection.INFOReview observed browser responsesINFOSample Chrome-observed same-origin responses observedResponseCount=50 sameOriginCount=36 htmlDocumentCount=1WARNCompare observed HTML frame protection actual={"missingOrInvalidFrameProtectionCount":1,"broadFrameAncestorsCount":0,"affected":[{"url":"https://canadiantrainvacations.com/","status":200,"resourceType":"document","contentType":"text/html; charset=utf-8","contentSecurityPolicy":"default-src 'self' *.pinterest.com airbrake.io appboycdn.com *.bing.com bat.bing.com browser.events.data.microsoft.com *.canadiantrainvacations.com canadiantrainvacations.vercel.app *.calendly.com *.calltracks.com *.cloudflare.com cdn.bfldr.com calendly.com cloudfront.net content-security-policy.com","contentSecurityPolicyReportOnly":"report-uri https://fresh-tracks-canada.uriports.com/reports/report; report-to default"}]} expected="0 missing/invalid or broad same-origin HTML responses" issue="One or more same-origin HTML documents observed by Chrome did not emit valid frame protection."WARNOne or more same-origin HTML documents observed by Chrome did not emit valid frame protection.

Evaluate script execution [fail]! script-src allows dangerous script schemes: data:.INFOEvaluate script executionINFOInspect effective script directive effectiveDirective="script-src" sources=["'self'","data:","'unsafe-eval'","'unsafe-inline'","ct.pinterest.com","https://*.debugbear.com/","https://*.pinimg.com","https://*.clarity.ms","https://*.amplitude.com","https://*.hotjar.com","vercel.live","vercel.com","*.clarity.ms","*.mktoresp.com","appboycdn.com","*.bing.com","bat.bing.com","canadiantrainvacations.vercel.app","*.canadiantrainvacations.com","connect.facebook.net","*.calltracks.com","googletagmanager.com","*.googletagmanager.com","marketo.net","mktoresp.com","munchkin.marketo.net","*.googleapis.com","*.gstatic.com","stripe.com","stripe.network","usabilla.com","google-analytics.com","*.google-analytics.com","google.com","*.google.com","google.ca","*.google.ca","googletagmanager.com","*.googletagmanager.com","doubleclick.net","*.doubleclick.net","www.youtube.com","*.clerk.accounts.dev","*.clerk.com","https://challenges.cloudflare.com","*.clickrank.ai"]FAILCompare script execution posture actual={"hasNonce":false,"hasHash":false,"hasStrictDynamic":false,"hasUnsafeInline":true,"hasUnsafeEval":true,"hasWildcardHost":true,"hasBroadScheme":false,"dangerousSchemes":["data:"]} expected="constrained script sources without unsafe execution allowances" issue="script-src allows dangerous script schemes: data:."FAILscript-src allows dangerous script schemes: data:.Review CSP reporting [warning]! CSP does not define a reporting endpoint.INFOReview CSP reportingINFOInspect CSP reporting directives reportOnlyHeaderPresent=true reportOnlyDirectives=["report-uri","report-to"]WARNCompare violation reporting configuration actual="no reporting endpoint" expected="report-to or report-uri present" issue="CSP does not define a reporting endpoint."WARNCSP does not define a reporting endpoint.