The web server employed an insecure Content Security Policy (CSP). CSPs place limitations on what type of code can be executed,
remote content incorporated and framing allowed. The application’s CSP has overly broad host definitions, narrow resource protections
or other flaws that could facilitate an attacker’s ability to inject malicious code, incorporate malicious content or frame user sessions for
phishing attacks.
Observed URL(s) but not limited to:
/view_all_bug_page.php
/query_store_page.php