Evaluate fetch baseline [fail]! default-src is present but not meaningfully restrictive.INFOEvaluate fetch baselineINFOEvaluate resource loading fallback defaultSrc=["https:","'unsafe-inline'","'unsafe-eval'"] explicitFetchDirectives=["connect-src","img-src","media-src","worker-src"]FAILCompare fetch baseline actual=["https:","'unsafe-inline'","'unsafe-eval'"] expected="restricted default-src or broad explicit fetch coverage" issue="default-src is present but not meaningfully restrictive."FAILdefault-src is present but not meaningfully restrictive.Evaluate script execution [fail]! default-src leaves script execution broadly unrestricted.INFOEvaluate script executionINFOInspect effective script directive effectiveDirective="default-src" sources=["https:","'unsafe-inline'","'unsafe-eval'"]FAILCompare script execution posture actual={"hasNonce":false,"hasHash":false,"hasStrictDynamic":false,"hasUnsafeInline":true,"hasUnsafeEval":true,"hasWildcardHost":false,"hasBroadScheme":true,"dangerousSchemes":[]} expected="constrained script sources without unsafe execution allowances" issue="default-src leaves script execution broadly unrestricted."FAILdefault-src leaves script execution broadly unrestricted.Review hardening directives [warning]! CSP is missing recommended hardening directives: object-src, base-uri, form-action.INFOReview hardening directivesINFOInspect CSP hardening directives objectSrcFallback=["https:","'unsafe-inline'","'unsafe-eval'"] formCount=2WARNCompare recommended hardening coverage actual=["object-src","base-uri","form-action"] expected="no missing object-src/base-uri/form-action requirements" issue="CSP is missing recommended hardening directives: object-src, base-uri, form-action."WARNCSP is missing recommended hardening directives: object-src, base-uri, form-action.Review CSP reporting [warning]! CSP does not define a reporting endpoint.INFOReview CSP reportingINFOInspect CSP reporting directives reportOnlyHeaderPresent=false reportOnlyDirectives=[]WARNCompare violation reporting configuration actual="no reporting endpoint" expected="report-to or report-uri present" issue="CSP does not define a reporting endpoint."WARNCSP does not define a reporting endpoint.

Schema.org attribution [warning]! Schema.org attribution is incomplete or relies only on publisher/fallback evidence.INFOSchema.org attributionINFOChecking structured data for author, creator, and publisher contributorsWARNCheck named Schema.org author count actual=0 expected="> 0" authorCount=0 publisherCount=4 namedContributors=0 authors=[] publishers=[{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false}] formats=["json-ld"]WARNSchema.org attribution is incomplete or fallback-only authorCount=0 publisherCount=4 authors=[] publishers=[{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false}]Author identity quality [fail]! No named author or publisher identity could be extracted.INFOAuthor identity qualityINFOChecking contributors for stable identity signalsFAILCheck identified contributor count actual=0 expected="> 0" namedContributors=0 identifiedContributors=[] unidentifiedContributors=[{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.nationalrail.co.uk/#organization","sameAs":[],"format":"json-ld","mergedName":false}]FAILNo named contributor identity could be extracted