text:
# CSP, WTF?

Sometimes, CSP notifications are __really difficult to understand or very strange__. Here is a collection of some CSP WTF.
If you have an idea (even if the idea is WTF) for some of these, do not hesitate to participate :)

Put new ones on the top please :)

# moz-extension

```
{
    "blocked-uri": "data",
    "column-number": 13,
    "document-uri": "https://xxx/search.php?search_id=dummy",
    "line-number": 263,
    "original-policy": "default-src https: wss: data: 'unsafe-eval' 'unsafe-inline'; img-src *; report-uri https://xxx/csp-report.php",
    "referrer": "https://xxx/page.php?start=1005",
    "source-file": "moz-extension",
    "violated-directive": "img-src"
}
```

__WTF:__ Many such requests coming from an AWS datacenter. Some spider using a moz-entension to inject images? Should we care?

---------------------------------------
# Nonexistent *first*-party fonts

``` json
{
	"csp-report": {
		"blocked-uri": "https://seirdy.one/2021/03/fonts/RedHatDisplay-BlackItalic.otf",
		"disposition": "enforce",
		"document-uri": "https://seirdy.one/2021/03/10/search-engines-with-own-indexes.html",
		"effective_directive": "font-src",
		"original-policy": "default-src 'none'; img-src 'self' data:; style-src 'sha256-Amup01ZIYjs1kyVZqHYW1tGhvlStSHIoFDKATF7L7VI='; style-src-attr 'none'; script-src 'none' 'report-sample'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; manifest-src 'self'; upgrade-insecure-requests; sandbox allow-same-origin; report-uri https://collector.seirdy.one",
		"status-code": 200,
		"violated_directive": "font-src"
	}
}
```

or

``` json
{
	"csp-report": {
		"blocked-uri": "https://seirdy.one/2021/03/10/res/Soleil.woff2",
		"disposition": "enforce",
		"document-uri": "https://seirdy.one/2021/03/10/search-engines-with-own-indexes.html",
		"effective_directive": "font-src",
		"original-policy": "default-src 'none'; img-src 'self' data:; style-src 'sha256-Amup01ZIYjs1kyVZqHYW1tGhvlStSHIoFDKATF7L7VI='; style-src-attr 'none'; script-src 'none' 'report-sample'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; manifest-src 'self'; upgrade-insecure-requests; sandbox allow-same-origin; report-uri https://collector.seirdy.one",
		"status-code": 200,
		"violated_directive": "font-src"
	}
}
```

__WTF:__ Site does not reference any fonts; /var/www/(sitename) doesn't have any directory called "fonts" or .otf files either.

__Answer:__ Soleil.woff2 is requested by this extension: https://chrome.google.com/webstore/detail/evernote-web-clipper/pioclpoplcdbaefihamjohnefbikjilc

---------------------------------------
# avast webfont

```
{
  "csp-report": {
    "violated-directive": "font-src",
    "effective-directive": "font-src",
    "blocked-uri": "https://static3.avast.com/1000947/web/o/f/700/proximanova-bold-webfont.woff",
    "status-code": "0",
    "script-sample": ""
  }
}
```

__WTF:__ `blocked-uri": "https://static3.avast.com/1000947/web/o/f/700/proximanova-bold-webfont.woff`

__Answer:__ Probably an Avast extension triggered on websites, to confirm????

---------------------------------------
# `subwayblaze.com/api/pcgc`

```
{
  "csp-report": {
    "violated-directive": "connect-src",
    "effective-directive": "connect-src",
    "blocked-uri": "https://subwayblaze.com/api/pcgc?iid=47893ace-9ee9-490f-8cb3-90d7582cf902&iidList=47893ace-9ee9-490f-8cb3-90d7582cf902&ipt=false&itt=false",
    "status-code": "0",
    "script-sample": ""
  }
}
```

__WTF:__ `"blocked-uri": "https://subwayblaze.com/api/pcgc?iid=47893ace-9ee9-490f-8cb3-90d7582cf902&iidList=47893ace-9ee9-490f-8cb3-90d7582cf902&ipt=false&itt=false",`

__Answer:__ ????

---------------------------------------
# assets.grammarly.com

```
{
  "csp-report": {
    "violated-directive": "img-src 'self' data:",
    "effective-directive": "img-src",
    "blocked-uri": "https://assets.grammarly.com",
    "status-code": "0",
    "source-file": "safari-extension://9fb77544-7bd2-487c-a671-fd49c6d7b552",
  }
}
```

__WTF:__ `"source-file": "safari-extension://9fb77544-7bd2-487c-a671-fd49c6d7b552",`

__Answer:__ Probably Grammarly Safari extension????

---------------------------------------
# com.lge.browser ?

```
{
    "csp-report": {
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "referrer": "https://www.google.fr/",
        "violated-directive": "script-src 'self' ",
        "original-policy": "default-src 'none';  script-src 'self' ; style-src 'self' 'nonce-59fcbe93241bcdab2b73ca30e2920bddac1c46ee36ec1991fbb2f73eed1d5180f75acf51c59ade92e1a1cb89e2e6966255123608e07ef5dfcc177e327388b7b4' ; img-src 'self'  data: ;  font-src 'self'; child-src 'self' www.youtube.com ; frame-src 'self' www.youtube.com ;  frame-ancestors 'self' ; manifest-src 'self' ; worker-src 'self' ; base-uri 'none';  report-uri /csp-parser.php ;",
        "blocked-uri": "https://com.lge.browser",
        "status-code": 0
    }
}
```

__WTF:__ `"blocked-uri": "https://com.lge.browser",`

__Answer:__ Any idea?

---------------------------------------
# xen-media

```
{
    "csp-report": {
        "blocked-uri": "https://xen-media.com/downloads",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "original-policy": "default-src 'none'; script-src 'self'; style-src 'self' 'nonce-8d23d9c25a22f76a976a1dbfe50514b39d5a3571a5ec393e2940d283d7cfbacb576037926f475b1f1b4967516891ce217854127b4bf88b8110b0f43939e889e2'; img-src 'self' data:; font-src 'self'; child-src 'self' https://www.youtube.com; frame-src 'self' https://www.youtube.com; frame-ancestors 'self'; manifest-src 'self'; worker-src 'self'; base-uri 'none'; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "https://t.co/8xebmwWi53",
        "violated-directive": "frame-src"
    }
}
```

__WTF:__ `"blocked-uri": "https://xen-media.com/downloads",`

__Answer:__ Any idea?

---------------------------------------
# thrillingos.herokuapp.com/mozilla/best-ytb-down/content/analytics

```
{
    "csp-report": {
        "blocked-uri": "https://thrillingos.herokuapp.com/mozilla/best-ytb-down/content/analytics",
        "document-uri": "https://van11y.net/fr/infobulles-tooltips-accessibles/",
        "original-policy": "upgrade-insecure-requests; block-all-mixed-content; default-src 'none'; script-src 'self'; style-src 'self' 'nonce-9c9e7dd03d03c1dcb89bcefeba7e90f2fe079997c8279f3fa6b3c088f7210b7f565891f2b023d2bddae50afda37baf25587c02d5d6d2a38b3cb9f62e155d9d52'; img-src 'self'; font-src 'self'; connect-src 'self'; child-src 'self'; frame-ancestors 'self'; manifest-src 'self'; worker-src 'self'; base-uri 'none'; form-action 'none'; report-uri https://van11y.net/csp-parser.php",
        "referrer": "",
        "violated-directive": "script-src"
    }
}
```

__WTF:__ `"blocked-uri": "https://thrillingos.herokuapp.com/mozilla/best-ytb-down/content/analytics",`

__Answer:__ Any idea?

---------------------------------------
# promlinkdev.com

```
{
    "csp-report": {
        "document-uri": "https://van11y.net/fr/carrousel-accessible/",
        "referrer": "https://www.google.com/",
        "violated-directive": "img-src",
        "effective-directive": "img-src",
        "original-policy": "upgrade-insecure-requests;  block-all-mixed-content; default-src 'none' ;  script-src 'self'; style-src 'self' 'nonce-521bad469d4e2cf9d6bc53a042c41812693d322f02c71d4a49dd15638d9b2ea89ffc28b0aa48fe251977ca6a651b05211069937661a04a25e3c42a669b3d0f39' ; img-src 'self'; font-src 'self';  connect-src 'self' ; child-src 'self' ; frame-ancestors 'self'  ; manifest-src 'self' ; worker-src 'self' ; base-uri 'none' ; form-action 'none' ;   report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://promlinkdev.com/metric/?mid=&wid=52190&sid=&tid=7537&rid=FINISHED&custom1=van11y.net&t=1545148039090",
        "status-code": 0,
        "script-sample": ""
    }
}
```

__WTF:__ `"blocked-uri": "https://promlinkdev.com/metric/?mid=&wid=52190&sid=&tid=7537&rid=FINISHED&custom1=van11y.net&t=1545148039090",`

__Answer:__ might be related to a Chrome plugin/malware that collects infos? https://twitter.com/ppcelery/status/1034684436405776385 (to confirm)

---------------------------------------
# "blocked-uri": "inline"

```
{
    "csp-report": {
        "blocked-uri": "inline",
        "column-number": 1,
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src 'self'; style-src 'self' 'nonce-9c4e6327b3e08a59727c9510d1428a2373f7a3e21e77dcf3a0a5664a6671ddf44348f8f4436fdd5234fea8d89bf51e49597fc4f62906b476939fed70b618c838'; img-src 'self' data:; font-src 'self'; child-src 'self' https://www.youtube.com; frame-src 'self' https://www.youtube.com; frame-ancestors 'self'; manifest-src 'self'; worker-src 'self'; base-uri 'none'; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",

        "referrer": "",
        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src"
    }
}
```

__WTF:__ `"blocked-uri": "inline",`

__Answer:__ any idea? (had it a lot on several websites)

---------------------------------------
# secure.myshopcouponmac.com

```
{
    "csp-report": {
        "document-uri": "http://www.visionclinique.ch/fr/",
        "referrer": "https://www.bing.com/",
        "violated-directive": "script-src 'self' http://www.google-analytics.com https://www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net 'unsafe-eval' ",
        "effective-directive": "script-src",
        "original-policy": "default-src 'self';  script-src 'self' http://www.google-analytics.com https://www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net 'unsafe-eval' ; style-src 'self'  data: 'unsafe-inline' ; img-src 'self' http://www.google-analytics.com https://www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net data: ; child-src 'self' ; connect-src 'self' https://www.google-analytics.com http://www.google-analytics.com  stats.g.doubleclick.net https://stats.g.doubleclick.net ; report-uri /csp-parser.php ;",
        "blocked-uri": "http://secure.myshopcouponmac.com",
        "status-code": 200
    }
}
```

__WTF:__ `"blocked-uri": "http://secure.myshopcouponmac.com",`

__Answer:__ any idea?

---------------------------------------
# nowexttype.com/metric

```
{
    "csp-report": {
        "document-uri": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "referrer": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "violated-directive": "img-src",
        "effective-directive": "img-src",
        "original-policy": "default-src 'none';  script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src 'self' data:  ; img-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net ssl.google-analytics.com data: ;  connect-src 'self';  font-src 'self'; media-src 'self'; object-src 'self' www.youtube.com ;  child-src 'self' ;  frame-ancestors 'self' ; manifest-src 'self' ; form-action 'self' ; base-uri 'none'; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://nowexttype.com/metric/?mid=&wid=52096&sid=&tid=5793&rid=FINISHED&custom1=www.nicolas-hoffmann.net&t=1534858854002",
        "status-code": 0,
        "script-sample": ""
    }
}

```

__WTF:__ `blocked-uri": "https://nowexttype.com/metric/?mid=&wid=52096&sid=&tid=5793&rid=FINISHED&custom1=www.nicolas-hoffmann.net&t=1534858854002",`

__Answer:__ any idea?

---------------------------------------
# function (DOCUMENT, dispatchEvent, CUST

```
{
    "csp-report": {
        "blocked-uri": "",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-f9e3796b32e5c5c1a8ce11ff44ef39752ad6312c871db84a2d4531fe15e5fb465f8a0e526054ff4cd9782405748dc6df1d4f1d402d5689f3a9968f5c17118295'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors https://www.estcequonmetenprodaujourdhui.info; manifest-src https://www.estcequonmetenprodaujourdhui.info; base-uri 'none'; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "",
        "script-sample": "(function (DOCUMENT, dispatchEvent, CUST...",
        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src"
    }
}
```

__WTF:__ `"script-sample": "(function (DOCUMENT, dispatchEvent, CUST...",`

__Answer:__ any idea?

---------------------------------------
# Date.prefs

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-c1cc86428d1a19af063cc7eda865da40104545133f7b57a968cc505462946cea4335851e40522b0fa9487223ea42ebd8ca8837f38902465c80be41ac8874736a'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors https://www.estcequonmetenprodaujourdhui.info; manifest-src https://www.estcequonmetenprodaujourdhui.info; base-uri 'none'; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "",
        "script-sample": "{\n  Date.prefs = Date.prefs || ['Etc/GMT...",
        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src https://www.estcequonmetenprodaujourdhui.info"
    }
}
```

__WTF:__ `"script-sample": "{\n  Date.prefs = Date.prefs || ['Etc/GMT...",` (not present on the website of course)

__Answer:__ any idea?

---------------------------------------
# onclick attribute on MENUITEM element

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://van11y.net/accessible-hide-show/",
        "original-policy": "default-src 'none'; script-src https://van11y.net; style-src https://van11y.net 'nonce-cce7e9e02a82c11be9d30cb58f6286e74056d34af3504502c9bb098cfffa35ec9fb7b42bb545ebd33198f4c387de1adc2c7824dd232fd3e6225a15bdd3b0c6e2'; img-src https://van11y.net; font-src https://van11y.net; connect-src https://van11y.net; child-src https://van11y.net; frame-ancestors https://van11y.net; manifest-src https://van11y.net; worker-src https://van11y.net; base-uri 'none'; form-action 'none'; report-uri https://van11y.net/csp-parser.php",
        "referrer": "https://www.google.com/",
        "script-sample": "onclick attribute on MENUITEM element",
        "source-file": "https://van11y.net/accessible-hide-show/",
        "violated-directive": "script-src"
    }
}
```

__WTF:__ `"script-sample": "onclick attribute on MENUITEM element",` (not present on the website of course)

__Answer:__ any idea?

---------------------------------------
# window.script1528893700887, etc.

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-a75fb51f810ed69e1120e3fff6451795d41615fbf740ab2cceaafc7427f2b0b5dcdb8ba7a3a646c9eaae5360639edf55a0bbf134032d792730be81dec91f5280'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors https://www.estcequonmetenprodaujourdhui.info; manifest-src https://www.estcequonmetenprodaujourdhui.info; base-uri 'none'; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "",
        "script-sample": "window.script1528893700887=1;",
        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src"
    }
}
```
or
```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-20cfb2d2995666ce7a62fa2fb5a0be54d29c8efa59639388de15b1d365155e4c9d5b87eacc779cb1f5a8baadf9ae10bb12da22200e6849e7e6f71814fb619527'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors https://www.estcequonmetenprodaujourdhui.info; manifest-src https://www.estcequonmetenprodaujourdhui.info; base-uri 'none'; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "https://www.google.fr/",
        "script-sample": "window.script1529679894872=1;",
        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src"
    }
}
```

__WTF:__ `"script-sample": "window.script1528893700887=1;",` (not present on the website of course)

__Answer:__ any idea? (I've seen it a lot on my websites)

---------------------------------------
# admixer, twkv.ru

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-dfbe534ef67b334699fb118d182c4903a2d759290e3ab4cb82a54c41bd9a03dcdf7b76eccb0363b3e22be32ab8ab352d0addf446a993bf5167df15c4a77e242a'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors https://www.estcequonmetenprodaujourdhui.info; manifest-src https://www.estcequonmetenprodaujourdhui.info; base-uri 'none'; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "",
        "script-sample": "div[id^=\"admixer_\"], a[href*=\".twkv.ru\"]...",
        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-dfbe534ef67b334699fb118d182c4903a2d759290e3ab4cb82a54c41bd9a03dcdf7b76eccb0363b3e22be32ab8ab352d0addf446a993bf5167df15c4a77e242a'"
    }
}
```

__WTF:__ `"script-sample": "div[id^=\"admixer_\"], a[href*=\".twkv.ru\"]...",` (not present on the website of course)

__Answer:__ any idea?

---------------------------------------
# .ggbox, .a_p, .a_fr, .a_cn

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-dfbe534ef67b334699fb118d182c4903a2d759290e3ab4cb82a54c41bd9a03dcdf7b76eccb0363b3e22be32ab8ab352d0addf446a993bf5167df15c4a77e242a'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors https://www.estcequonmetenprodaujourdhui.info; manifest-src https://www.estcequonmetenprodaujourdhui.info; base-uri 'none'; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "",
        "script-sample": ".ggbox, .a_p, .a_fr, .a_cn, a[href^=\"htt...",

        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-dfbe534ef67b334699fb118d182c4903a2d759290e3ab4cb82a54c41bd9a03dcdf7b76eccb0363b3e22be32ab8ab352d0addf446a993bf5167df15c4a77e242a'"
    }
}
```

__WTF:__ `"script-sample": ".ggbox, .a_p, .a_fr, .a_cn, a[href^=\"htt...",` (not present on the website of course)

__Answer:__ any idea?

---------------------------------------
# ;undefined

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-7e4af45f25cc287c8a81085d3e7bdb71953f93d6851842bee46edbafac94d661d5820b104241f0ee9b32a83adaed85e5a381c7628de1fec58f96a088057ae5b9'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors https://www.estcequonmetenprodaujourdhui.info; manifest-src https://www.estcequonmetenprodaujourdhui.info; base-uri 'none'; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "",
        "script-sample": ";undefined",
        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src https://www.estcequonmetenprodaujourdhui.info"
    }
}
```

__WTF:__ `"script-sample": ";undefined",` (not present on the website of course)

__Answer:__ any idea? (I've seen it a lot on my websites)

---------------------------------------
# s3gt_translate_tooltip_mini

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.nicolas-hoffmann.net/source/1447-Background-image-couleurs-CSS-accessibilite.html",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors https://www.nicolas-hoffmann.net; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; base-uri 'none'; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.google.com/",
        "script-sample": "#s3gt_translate_tooltip_mini { display: ...",
        "source-file": "https://www.nicolas-hoffmann.net/source/1447-Background-image-couleurs-CSS-accessibilite.html",
        "violated-directive": "style-src"
    }
}
```

__WTF:__ `"script-sample": "#s3gt_translate_tooltip_mini { display: ...",` (not present on the website of course)

__Answer:__ any idea?

---------------------------------------
# inter.gamefunnetwork.com

```
{
    "csp-report": {
        "document-uri": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "referrer": "https://www.google.fr/",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none';  script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src 'self' data:  ; img-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net ssl.google-analytics.com data: ;  connect-src 'self';  font-src 'self'; media-src 'self'; object-src 'self' www.youtube.com ;  child-src 'self' ;  frame-ancestors 'self' ; manifest-src 'self' ; form-action 'self' ; base-uri 'none'; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://inter.gamefunnetwork.com/InterYield/bindevent.do?e=click&affiliate=caiydgames&subid=organic_slither&iytonly=false&disableBackButton=true&snoozeMinutes=5&adCountIntervalHours=24&maxAdCountsPerInterval=5&pop=over&doublepop=false&engover=ADV-KeywordMarketplace&attributionDisabled=false&endpoint=https%3A%2F%2Finter.gamefunnetwork.com&attributionLink=https%3A%2F%2Fgamefunnetwork.com%2Fgames%2Funinstall.php&attributionTitle=gamefunnetwork&disob=true&tabOver=true",
        "line-number": 8,
        "column-number": 15,
        "status-code": 0,
        "script-sample": ""
    }
}
```

__WTF:__ `"blocked-uri": "https://inter.gamefunnetwork.com/InterYield/bindevent.do?e=click&affiliate=caiydgames&subid=organic_slither&iytonly=false&disableBackButton=true&snoozeMinutes=5&adCountIntervalHours=24&maxAdCountsPerInterval=5&pop=over&doublepop=false&engover=ADV-KeywordMarketplace&attributionDisabled=false&endpoint=https%3A%2F%2Finter.gamefunnetwork.com&attributionLink=https%3A%2F%2Fgamefunnetwork.com%2Fgames%2Funinstall.php&attributionTitle=gamefunnetwork&disob=true&tabOver=true",`

__Answer:__ any idea???? (of course, this is not present on the website)

---------------------------------------
# fdz.octapi.net

```
{
    "csp-report": {
        "blocked-uri": "https://fdz.octapi.net",
        "document-uri": "https://www.nicolas-hoffmann.net/source/",
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors https://www.nicolas-hoffmann.net; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; base-uri 'none'; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.google.fr/",
        "violated-directive": "script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ `"blocked-uri": "https://fdz.octapi.net",`

__Answer:__ considered as "potentially bad" on https://github.com/rtanglao/rt-csp, to confirm.

---------------------------------------
# Interaktiva rum

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://van11y.net/2018/01/29/New-feature-for-accessible-hide-show-script-pseudo-element",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://van11y.net; style-src https://van11y.net; img-src https://van11y.net; font-src https://van11y.net; connect-src https://van11y.net; child-src https://van11y.net; frame-ancestors https://van11y.net; manifest-src https://van11y.net; worker-src https://van11y.net; base-uri 'none'; report-uri https://van11y.net/csp-parser.php",
        "referrer": "https://t.co/Y6BUBcPZvQ",
        "script-sample": "",
        "source-file": "https://www.nicolas-hoffmann.net/source/1632-Le-meilleur-spam-du-monde.html",
        "violated-directive": "style-src https://www.nicolas-hoffmann.net data:"
    }
}
```

__WTF:__ well, happy to know that is not a zero-length file. And ?

__Answer:__ any idea?

---------------------------------------
# dl.metabar.ru

```
{
    "csp-report": {
        "document-uri": "https://van11y.net/accessible-tab-panel/",
        "referrer": "https://van11y.net/?utm_source=forwebdev_tlgrm&utm_medium=announcement&utm_campaign=van11y--kollektsiya-gotovyh-k-ispolzovani",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none' ;  script-src 'self'; style-src 'self' ; img-src 'self'; font-src 'self';  connect-src 'self'; child-src 'self' ; frame-ancestors 'none' ; manifest-src 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://dl.metabar.ru/static/js/sovetnik.min.js?mbr=true&settings=%7B%22affId%22%3A1020%2C%22clid%22%3A2210496%2C%22applicationName%22%3A%22SaveFrom%22%2C%22aviaEnabled%22%3Atrue%2C%22offerEnabled%22%3Atrue%7D",
        "line-number": 24688,

        "column-number": 27,
        "status-code": 0,
        "script-sample": ""
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea?

---------------------------------------
# ISAnalysterLoader/ISCommonAnalyster

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors https://www.nicolas-hoffmann.net; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.google.fr/",
        "script-sample": "var ISAnalysterLoader = {\n\t//\tload Analy...",

        "source-file": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "violated-directive": "script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```
or
```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors https://www.nicolas-hoffmann.net; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.google.fr/",
        "script-sample": "// funnyordie.com\nvar ISCommonAnalyster ...",

        "source-file": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "violated-directive": "script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea?

---------------------------------------
# AttachStyleEnum

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors https://www.nicolas-hoffmann.net; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.google.fr/",
        "script-sample": "var AttachStyleEnum = {\n\tAttachOuterTopL...",
        "source-file": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "violated-directive": "script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea?

---------------------------------------
# cdn.viglink.com

```
{
    "csp-report": {
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "referrer": "",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none';  script-src 'self' ; style-src 'self' 'nonce-3e97624acd1b9dd5a8fd3ed039567079c5519e504cf1f505b62926fa5c30cc56d769a41675f51a23ee1d9b3fe5fbf963fa7ba4a595020d2d0411e070ca84097f' ; img-src 'self'  data: ;  font-src 'self'; child-src 'self' ;  frame-ancestors 'none' ; manifest-src 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",

        "blocked-uri": "https://cdn.viglink.com/api/vglnk.js",
        "line-number": 1,
        "column-number": 61245,
        "status-code": 0
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea?

---------------------------------------
# cloudfront.net

```
{
    "csp-report": {
        "blocked-uri": "https://d3ijcis4e2ziok.cloudfront.net",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-079629c8fd8e205b456b5d3d4102e097e62c897b430b06f8ece5b186229113d8b472b07ae7ee113417d36f512379a1c55cc4b19238c010ce96c0941e5393f7f2'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors 'none'; manifest-src https://www.estcequonmetenprodaujourdhui.info; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "",
        "violated-directive": "child-src https://www.estcequonmetenprodaujourdhui.info"

    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea?

---------------------------------------
# var delay = null; currDisplay = null;

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors https://www.nicolas-hoffmann.net; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.google.fr/",
        "script-sample": "var delay = null; currDisplay = null;fun...",
        "source-file": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "violated-directive": "script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea?

---------------------------------------
# bindo.js

```
{
    "csp-report": {
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "referrer": "",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none';  script-src 'self' ; style-src 'self' 'nonce-8c58b64eb15e9f517f26e499365d17ba0b6efac064e05e5a067c3d0774edc530742ae4f7929618ca1b7647dece6f8580ddecf44763af9a1eb070f32df4c98da6' ; img-src 'self'  data: ;  font-src 'self'; child-src 'self' ;  frame-ancestors 'none' ; manifest-src 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://asrvvv-a.akamaihd.net/get?addonname=[Enter%20Product%20Name]&clientuid=[Enter%20Client%20UID]&subID=&affid=9658&subaffid=1007&href=https%3A%2F%2Fwww.estcequonmetenprodaujourdhui.info%2F",
        "line-number": 1,
        "column-number": 108967,
        "source-file": "https://cdn.ext335.com/vdsuper/bindo.js?f=22",
        "status-code": 0

    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea?

---------------------------------------
# webPageNotificationsController

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-5a14701a62e1d1e782fea29568e4c1b34d9e13b579503eb9ab22849c754dc665eb10016ea1e7a767fd9463e0812f66c00f24b34c0878de0eef58f318b9b5a2df'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors 'none'; manifest-src https://www.estcequonmetenprodaujourdhui.info; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "",
        "script-sample": "top: {{ webPageNotificationsController.o...",

        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-5a14701a62e1d1e782fea29568e4c1b34d9e13b579503eb9ab22849c754dc665eb10016ea1e7a767fd9463e0812f66c00f24b34c0878de0eef58f318b9b5a2df'"

    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ related to web push notifications, but no idea how it happened.

---------------------------------------
# stackoverflow favicon

```
{
    "csp-report": {
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "referrer": "",
        "violated-directive": "img-src",
        "effective-directive": "img-src",
        "original-policy": "default-src 'none';  script-src 'self' ; style-src 'self' 'nonce-e6dc47cac8fc1827bf73eb502fd62153ced82007fb06112468b7e44b726857a17e4daca1a5e1fe14535f75dcef5957fc1541f4d80f2d45c5f55498b6caa4dfaf' ; img-src 'self'  data: ;  font-src 'self'; child-src 'self' ;  frame-ancestors 'none' ; manifest-src 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "http://www.stackoverflow.com/favicon.ico",
        "status-code": 0

    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ I don't know how it happened, but it happened! #achievementUnlocked

---------------------------------------
# secure.optibuymac.com

```
{
    "csp-report": {
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "referrer": "",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none';  script-src 'self' ; style-src 'self' 'nonce-fc85f9cce142a7f611d456f9ab4feab4bda03d6ee41a3b8191663dcc323c4fe78836d7aa09e7f78bcbcd875af0bec995739e3c8e799569933d4cf92d54742475' ; img-src 'self'  data: ;  font-src 'self'; child-src 'self' ;  frame-ancestors 'none' ; manifest-src 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://secure.optibuymac.com/servicejs/components/?source=upd-1720&version=2.0&isn=800",
        "line-number": 1,
        "column-number": 794,

        "status-code": 0
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ Any idea???

---------------------------------------
# mxaddon-pkg

```
{
    "csp-report": {
        "document-uri": "https://www.nicolas-hoffmann.net/source/1610-Un-site-et-CSS-en-right-to-left.html",
        "referrer": "https://www.google.fr/",
        "violated-directive": "script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net",
        "original-policy": "default-src 'none';  script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src 'self' data:  ; img-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net ssl.google-analytics.com data: ;  connect-src 'self';  font-src 'self'; media-src 'self'; object-src 'self' www.youtube.com ;  child-src 'self' ;  frame-ancestors 'self' ; manifest-src 'self' ; form-action 'self' ; report-uri /csp-parser.php ;",
        "blocked-uri": "",
        "source-file": "mxaddon-pkg",
        "line-number": 40,
        "column-number": 100
    }
}
```

__WTF:__ ???

__Answer:__ What is that???

---------------------------------------
# Null

```
{
    "csp-report": {
        "document-uri": "[anonymised]",
        "referrer": "",
        "violated-directive": "script-src 'self' https://www.google-analytics.com http://www.google-analytics.com  stats.g.doubleclick.net https://stats.g.doubleclick.net ",
        "original-policy": "default-src 'self';  script-src 'self' https://www.google-analytics.com http://www.google-analytics.com  stats.g.doubleclick.net https://stats.g.doubleclick.net ; style-src 'self' data: ; img-src 'self' https://www.google-analytics.com http://www.google-analytics.com *.[anonymised] stats.g.doubleclick.net https://stats.g.doubleclick.net data: ;  child-src 'self' ; report-uri /csp-parser.php ;",
        "blocked-uri": "null"
    }
}
```

__WTF:__ ???

__Answer:__ ??? Well, null.

---------------------------------------
# function inception

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.nicolas-hoffmann.net/source/contact.php",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors https://www.nicolas-hoffmann.net; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "script-sample": "(function n(){!function(){function e(e,t...",
        "source-file": "https://www.nicolas-hoffmann.net/source/contact.php",
        "violated-directive": "script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea?

---------------------------------------
# adsstrike.pro

```
{
    "csp-report": {
        "document-uri": "https://van11y.net/accessible-tab-panel/",
        "referrer": "https://habrahabr.ru/company/zfort/blog/328636/",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none' ;  script-src 'self'; style-src 'self' ; img-src 'self'; font-src 'self';  connect-src 'self'; child-src 'self' ; frame-ancestors 'none' ; manifest-src 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://adsstrike.pro/code/pid/965578_BNX.js?rev=3657",

        "line-number": 1,
        "column-number": 897,
        "source-file": "https://adsstrike.pro/code/?pid=965578&r=0.9275899753455017",
        "status-code": 0
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ Probably malware, any idea?

---------------------------------------
# cr-input.mxpnl.net

```
{
    "csp-report": {
        "document-uri": "https://van11y.net/?utm_source=forwebdev_tlgrm&utm_medium=announcement&utm_campaign=van11y--kollektsiya-gotovyh-k-ispolzovani",
        "referrer": "",
        "violated-directive": "connect-src",
        "effective-directive": "connect-src",
        "original-policy": "default-src 'none';script-src 'unsafe-eval' 'self';style-src 'self';img-src 'self';font-src 'self';connect-src 'self';child-src 'self';frame-ancestors 'none';manifest-src 'self';report-uri /csp-parser.php;",
        "disposition": "enforce",
        "blocked-uri": "https://cr-input.mxpnl.net/data?_channel_id=&_partner_id=39571&_sub_id=0000&_app_version=1.0.23&_app=cs-dca",
        "line-number": 34166,
        "column-number": 15,
        "status-code": 0
    }
}
```

__WTF:__ nothing like this on the website (not in sources, neither in scripts).

__Answer:__ I don't know where it comes from, but I see it REALLY often in CSP reports.

---------------------------------------
# 7a2rnuey1tw9ar.ru

```
{
    "csp-report": {
        "document-uri": "http://www.visionclinique.ch/en/",
        "referrer": "http://www.alexstangos.com/",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'self';  script-src 'self' http://www.google-analytics.com https://www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net 'unsafe-eval' ; style-src 'self'  data: 'unsafe-inline' ; img-src 'self' http://www.google-analytics.com https://www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net data: ;  child-src 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "http://7a2rnuey1tw9ar.ru/ajs/28722/c/766973696f6e636c696e697175652e6368_0.js",
        "line-number": 1,
        "column-number": 1216,
        "source-file": "http://ze406soi.ru/pjs/28722.js",
        "status-code": 200
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea? Malware, other?

---------------------------------------
# rw_sendSocketMessage

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://van11y.net/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://van11y.net; style-src https://van11y.net; img-src https://van11y.net; font-src https://van11y.net; connect-src https://van11y.net; child-src https://van11y.net; frame-ancestors 'none'; manifest-src https://van11y.net; report-uri https://van11y.net/csp-parser.php",
        "referrer": "https://van11y.net/accessible-accordion/",
        "script-sample": "function rw_sendSocketMessage(aData){$th...",

        "source-file": "https://van11y.net/",
        "violated-directive": "script-src https://van11y.net"
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea?

---------------------------------------
# akamaihd.net

```
{
    "csp-report": {
        "document-uri": "[anonymised]/fr/infos-pratiques/normes",
        "referrer": "https://www.google.com/",
        "violated-directive": "script-src 'self' https://www.google-analytics.com http://www.google-analytics.com  stats.g.doubleclick.net https://stats.g.doubleclick.net ",
        "effective-directive": "script-src",
        "original-policy": "default-src 'self';  script-src 'self' https://www.google-analytics.com http://www.google-analytics.com  stats.g.doubleclick.net https://stats.g.doubleclick.net ; style-src 'self' data: ; img-src 'self' https://www.google-analytics.com http://www.google-analytics.com *.[anonymised] stats.g.doubleclick.net https://stats.g.doubleclick.net data: ;  child-src 'self' ; report-uri /csp-parser.php ;",
        "blocked-uri": "eval",
        "line-number": 18,
        "column-number": 274,
        "source-file": "https://dragonbranch-a.akamaihd.net",
        "status-code": 200
    }
}
```
or
```
{
    "csp-report": {
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "referrer": "",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none';  script-src 'self' ; style-src 'self' 'nonce-8c58b64eb15e9f517f26e499365d17ba0b6efac064e05e5a067c3d0774edc530742ae4f7929618ca1b7647dece6f8580ddecf44763af9a1eb070f32df4c98da6' ; img-src 'self'  data: ;  font-src 'self'; child-src 'self' ;  frame-ancestors 'none' ; manifest-src 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://asrvvv-a.akamaihd.net/get?addonname=[Enter%20Product%20Name]&clientuid=[Enter%20Client%20UID]&subID=&affid=9658&subaffid=1007&href=https%3A%2F%2Fwww.estcequonmetenprodaujourdhui.info%2F",
        "line-number": 1,
        "column-number": 108967,
        "source-file": "https://cdn.ext335.com/vdsuper/bindo.js?f=22",
        "status-code": 0

    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea?

---------------------------------------
# gridify

```
{
    "csp-report": {
        "document-uri": "https://www.nicolas-hoffmann.net/source/1471-astuce-CSS-input-type-submit-reset-button.html",
        "referrer": "https://www.google.fr/",
        "violated-directive": "img-src",
        "effective-directive": "img-src",
        "original-policy": "default-src 'none';  script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src 'self' data:  ; img-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net ssl.google-analytics.com data: ;  connect-src 'self';  font-src 'self'; media-src 'self'; object-src 'self' www.youtube.com ;  child-src 'self' ;  frame-ancestors 'self' ; manifest-src 'self' ; form-action 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "http://ashishmishra.in/gridify/images/color-picker.png",
        "status-code": 0
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea? (gridify?)

---------------------------------------
# .topbanneradvertise

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors https://www.nicolas-hoffmann.net; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.google.fr/",
        "script-sample": ".topbanneradvertise, .top-publicite, .pu...",

        "source-file": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "violated-directive": "style-src https://www.nicolas-hoffmann.net data:"
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea? (malware, anti-malware ?)

---------------------------------------
# allowAdblock

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-0c129e0260e278785f2166e318ddb0779f7b3c55deb9a7a0535e2aea464c8c5f70cc5e90ba9c34d1de9bdd90c31d01dda7f680164620e39eaa8741c85490ee39'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors 'none'; manifest-src https://www.estcequonmetenprodaujourdhui.info; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "https://www.facebook.com/",
        "script-sample": "(function allowAdblock() {\nnoAds = true;...",
        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src https://www.estcequonmetenprodaujourdhui.info"

    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea?

---------------------------------------
# *.davebestdeals.com

```

{
    "csp-report": {
        "document-uri": "https://www.nicolas-hoffmann.net/source/1209-Clim-City-enfin-reussi.html",
        "referrer": "https://www.google.fr/",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none';  script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src 'self' data:  ; img-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net ssl.google-analytics.com data: ;  connect-src 'self';  font-src 'self'; media-src 'self'; object-src 'self' www.youtube.com ;  child-src 'self' ;  frame-ancestors 'self' ; manifest-src 'self' ; form-action 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://pstatic.davebestdeals.com/nwp/v0_0_1148/release/Shared/App/SharedApp.js?t=1",
        "line-number": 2,
        "column-number": 1381,
        "source-file": "https://istatic.davebestdeals.com/fo/ec/ade.js?subid=common1",
        "status-code": 0
    }
}
```
or
```
{
    "csp-report": {
        "document-uri": "https://www.nicolas-hoffmann.net/source/1209-Clim-City-enfin-reussi.html",
        "referrer": "https://www.google.fr/",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none';  script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src 'self' data:  ; img-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net ssl.google-analytics.com data: ;  connect-src 'self';  font-src 'self'; media-src 'self'; object-src 'self' www.youtube.com ;  child-src 'self' ;  frame-ancestors 'self' ; manifest-src 'self' ; form-action 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://static.donation-tools.org/widgets/gtn/widget.js?_irh_subid=common1&_irh_exid=ade",
        "line-number": 2,
        "column-number": 13158,

        "source-file": "https://istatic.davebestdeals.com/fo/ec/ade.js?subid=common1",
        "status-code": 0
    }
}
```
or

```
{
    "csp-report": {
        "document-uri": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "referrer": "https://www.google.dz/",
        "violated-directive": "script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none';  script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src 'self' data:  ; img-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net ssl.google-analytics.com data: ;  connect-src 'self';  font-src 'self'; media-src 'self'; object-src 'self' www.youtube.com ;  child-src 'self' ;  frame-ancestors 'self' ; manifest-src 'self' ; form-action 'self' ; report-uri /csp-parser.php ;",
        "blocked-uri": "https://pstatic.davebestdeals.com",
        "source-file": "https://istatic.davebestdeals.com",
        "line-number": 2,
        "column-number": 1381,
        "status-code": 0
    }
}
```

__WTF:__ nothing like this on the website (not in sources, neither in scripts).

__Answer:__ I don't know where it comes from (malware?), but I see it REALLY often in CSP reports.

---------------------------------------
# data1.itineraire.info and its friends data1.*

```
{
    "csp-report": {
        "document-uri": "[anonymised]",
        "referrer": "https://www.google.fr/",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'self' *.vimeo.com *.akamaihd.net ;  script-src  'self' www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net *.vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net ; style-src 'self' data: *.vimeocdn.com ; img-src 'self' www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net data: ;  child-src 'self' *.vimeo.com *.vimeocdn.com *.akamaihd.net ; frame-ancestors 'none' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://data1.itineraire.info/assets/get-octapid.php?callback=fdz_octapid_cb&plugin_key=s2nwnMfCRqD15%3A6LL%241adQ&app_code=itineraire&browser=ch",
        "line-number": 15,
        "column-number": 101260,

        "source-file": "https://data1.itineraire.info/assets/js/jquery.js?app=itineraire&plugin_key=s2nwnMfCRqD15:6LL$1adQ&host=[anonymised]&201737",
        "status-code": 0
    }
}
```
or
```
{
    "csp-report": {
        "blocked-uri": "https://data1.iti-maps.fr",
        "document-uri": "https://www.nicolas-hoffmann.net/source/1410-Hommage-a-une-femme-extraordinaire.html",
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors 'none'; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.google.fr/",

        "violated-directive": "script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```
or
```
{
    "csp-report": {
        "document-uri": "[anonymised]",
        "referrer": "https://www.google.fr/",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'self';  script-src 'self' https://www.google-analytics.com http://www.google-analytics.com  stats.g.doubleclick.net https://stats.g.doubleclick.net ; style-src 'self' data: ; img-src 'self' https://www.google-analytics.com http://www.google-analytics.com *.[anonymised] stats.g.doubleclick.net https://stats.g.doubleclick.net data: ;  child-src 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://data1.recettes.net/assets/get-octapid.php?callback=fdz_octapid_cb&plugin_key=MblYKwZwCG1nfLq%24Q9k4Pw&app_code=recettes&browser=ch",
        "line-number": 15,
        "column-number": 101260,
        "source-file": "https://data1.recettes.net/assets/js/jquery.js?app=recettes&plugin_key=MblYKwZwCG1nfLq$Q9k4Pw&host=[anonymised]&2017423",
        "status-code": 200
    }
}
```
or
```
{
    "csp-report": {
        "blocked-uri": "https://data1.allo-pages.fr",
        "document-uri": "https://www.nicolas-hoffmann.net/source/la_saline_royale_arc_et_senans.php",
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors https://www.nicolas-hoffmann.net; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.google.fr/",

        "violated-directive": "script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ nothing like this on the website.

__Answer:__ any idea? (it seems to be confirmed by other RUM sources)

---------------------------------------
# _PostRPC

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://rocssti.net/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://rocssti.net https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://rocssti.net; img-src https://rocssti.net https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net data:; font-src https://rocssti.net; connect-src https://rocssti.net; child-src https://rocssti.net; frame-ancestors 'none'; manifest-src https://rocssti.net; form-action https://rocssti.net; report-uri https://rocssti.net/csp-parser.php",
        "referrer": "",
        "script-sample": "(function(){function _PostRPC() {\t\t// in...",
        "source-file": "https://rocssti.net/",

        "violated-directive": "script-src https://rocssti.net https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ nothing like this on the website ```_PostRPC```.

__Answer:__ any idea?

---------------------------------------
# fireads.men

```
{
    "csp-report": {
        "document-uri": "https://www.nicolas-hoffmann.net/source/1302-Balise-video-de-HTML5-comment-l-inserer.html",
        "referrer": "https://www.google.tn/",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none';  script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src 'self' data:  ; img-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net ssl.google-analytics.com data: ;  connect-src 'self';  font-src 'self'; media-src 'self'; object-src 'self' www.youtube.com ;  child-src 'self' ;  frame-ancestors 'self' ; manifest-src 'self' ; form-action 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://fireads.men/code/pid/592076_ALL.js?rev=779",
        "line-number": 1,
        "column-number": 857,
        "source-file": "https://fireads.men/code/?pid=592076&r=4567196",
        "status-code": 0
    }
}
```

__WTF:__ nothing like this on the website ```fireads.men…```.

__Answer:__ malware, ad ?

---------------------------------------
# e={Vue:null

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "http://www.visionclinique.ch/en/contact-us",
        "line-number": 1,
        "original-policy": "default-src http://www.visionclinique.ch; script-src http://www.visionclinique.ch http://www.google-analytics.com https://www.google-analytics.com http://stats.g.doubleclick.net https://stats.g.doubleclick.net 'unsafe-eval'; style-src http://www.visionclinique.ch data: 'unsafe-inline'; img-src http://www.visionclinique.ch http://www.google-analytics.com https://www.google-analytics.com http://stats.g.doubleclick.net https://stats.g.doubleclick.net data:; child-src http://www.visionclinique.ch; report-uri http://www.visionclinique.ch/csp-parser.php",
        "referrer": "",
        "script-sample": ";(function r(n){var t={},e={Vue:null,on:...",
        "source-file": "http://www.visionclinique.ch/en/contact-us",
        "violated-directive": "script-src http://www.visionclinique.ch http://www.google-analytics.com https://www.google-analytics.com http://stats.g.doubleclick.net https://stats.g.doubleclick.net 'unsafe-eval'"

    }
}
```

__WTF:__ nothing like this on the website ```e={Vue:null```.

__Answer:__ Any idea?

---------------------------------------
# dataloading.net

```
{
    "csp-report": {
        "document-uri": "https://www.nicolas-hoffmann.net/source/1447-Background-image-couleurs-CSS-accessibilite.html",
        "referrer": "https://www.google.sn/",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none';  script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src 'self' data:  ; img-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net ssl.google-analytics.com data: ;  connect-src 'self';  font-src 'self'; media-src 'self'; object-src 'self' www.youtube.com ;  child-src 'self' ;  frame-ancestors 'self' ; manifest-src 'self' ; form-action 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://dataloading.net/j/ijs?id=3FDC5C45-BCC8-53E4-AE57-010C7DAACD7B&d=23536a95-1dc4-496f-9964-b85788f42bd1&cl=upd",

        "line-number": 1,
        "column-number": 263,
        "status-code": 0
    }
}
```

__WTF:__ nothing like this on the website ```dataloading.net```.

__Answer:__ Any idea?

---------------------------------------
# app.abtasty.com

```
{
    "csp-report": {
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "referrer": "",
        "violated-directive": "default-src 'none'",
        "effective-directive": "connect-src",
        "original-policy": "default-src 'none';  script-src 'self' www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' ; img-src 'self' www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net data: ;  font-src 'self'; child-src 'self' ;  frame-ancestors 'none' ; manifest-src 'self' ; report-uri /csp-parser.php ;",
        "blocked-uri": "https://app.abtasty.com",
        "status-code": 0
    }
}
```

__WTF:__ nothing like this on the website ```https://app.abtasty.com```.

__Answer:__ Any idea?

---------------------------------------
# twitbridge.com

```
{
    "csp-report": {
        "document-uri": "https://www.nicolas-hoffmann.net/source/",
        "referrer": "https://www.google.fr/",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'none';  script-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src 'self' data:  ; img-src 'self' google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net ssl.google-analytics.com data: ;  connect-src 'self';  font-src 'self'; media-src 'self'; object-src 'self' www.youtube.com ;  child-src 'self' ;  frame-ancestors 'self' ; manifest-src 'self' ; form-action 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://www.google-analytics.com/analytics.js",
        "line-number": 20,
        "column-number": 84,
        "source-file": "https://twitbridge.com/ads/include.js?app=proxynetflix",
        "status-code": 0

    }
}
```

__WTF:__ nothing like this on the website ```https://twitbridge.com/ads/include.js?app=proxynetflix```.

__Answer:__ Any idea?

---------------------------------------
# Webpack_require

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'nonce-0bd14b711ba3af83406636089338bc1af90ee9f34cd4e9cb452888b389cefe5fbf4606f68e215060320feb12db10f29c641cdd5304045dca045d81c088b1cdb7'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors 'none'; manifest-src https://www.estcequonmetenprodaujourdhui.info; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "https://www.google.com/url?q=https%3A%2F%2Fwww.estcequonmetenprodaujourdhui.info%2F&sa=D&sntz=1&usg=AFQjCNHvJDS4K8FPbvGaIiPVKOhXufgrLw",
        "script-sample": "!function(t){function __webpack_require_...",
        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src https://www.estcequonmetenprodaujourdhui.info"

    }
}
```

__WTF:__ no function like this on the website ```__webpack_require_```.

__Answer:__ Any idea?

---------------------------------------
# if (window.google && (window.google.sn

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info; style-src https://www.estcequonmetenprodaujourdhui.info 'unsafe-inline'; img-src https://www.estcequonmetenprodaujourdhui.info data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors 'none'; manifest-src https://www.estcequonmetenprodaujourdhui.info; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "http://www.inoreader.com/article/3a9c6e7f353461af-est-ce-quon-met-en-production-aujourdhui",

        "script-sample": "if (window.google && (window.google.sn |...",
        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src https://www.estcequonmetenprodaujourdhui.info"
    }
}
```

__WTF:__ ```if (window.google && (window.google.sn``` nothing like this on this website. Saw it in several CSP reports, with different resources.

__Answer:__ anybody, an idea?

---------------------------------------
# chrome://kango

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "line-number": 2,
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors 'none'; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.qwant.com/",
        "script-sample": "call to eval() or related function blocked by CSP",
        "source-file": "chrome://kango-edb6a15c-5f8c-4531-92fa-98e988cf233c/content/lib/jquery-1.8.1.min.js",
        "violated-directive": "script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ chrome://kango-edb6a15c-5f8c-4531-92fa-98e988cf233c/content/lib/jquery-1.8.1.min.js (nothing like this on this website)

__Answer:__ Based on https://github.com/nico3333fr/CSP-useful/issues/32 a firefox extension using a framework called Kango.

---------------------------------------
# Website frames itself ??

```
{
    "csp-report": {
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "referrer": "",
        "violated-directive": "frame-ancestors",
        "effective-directive": "frame-ancestors",
        "original-policy": "default-src 'none';  script-src 'self' ; style-src 'self' 'unsafe-inline' ; img-src 'self'  data: ;  font-src 'self'; child-src 'self' ;  frame-ancestors 'none' ; manifest-src 'self' ; report-uri /csp-parser.php ;",
        "disposition": "enforce",
        "blocked-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "status-code": 0
    }
}
```

__WTF:__ ???

__Answer:__ attempt of framing this website without sending a referrer? (any better idea?)

---------------------------------------
# "try {\r\nwindow.AG_onLoad = function ????

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.estcequonmetenprodaujourdhui.info 'unsafe-inline'; img-src https://www.estcequonmetenprodaujourdhui.info https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors 'none'; manifest-src https://www.estcequonmetenprodaujourdhui.info; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "",
        "script-sample": "try {\r\nwindow.AG_onLoad = function(func)...",
        OR
        "script-sample": "try {\r\nvar AG_onLoad=function(func){if(d...",
        OR

        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src https://www.estcequonmetenprodaujourdhui.info https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ WTF is this? (no code like this on this website)

__Answer:__ Any idea?

---------------------------------------
# embed[height=\"175\"][width=\"175\"] ????

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://van11y.net/accessible-tab-panel/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://van11y.net; style-src https://van11y.net; img-src https://van11y.net; font-src https://van11y.net; connect-src https://van11y.net; child-src https://van11y.net; frame-ancestors 'none'; manifest-src https://van11y.net; report-uri https://van11y.net/csp-parser.php",
        "referrer": "https://www.google.de/",
        "script-sample": "embed[height=\"175\"][width=\"175\"], embed[...",
        "source-file": "https://van11y.net/accessible-tab-panel/",
        "violated-directive": "style-src https://van11y.net"
    }
}
```

__WTF:__ WTF is this? (no embed on this website)

__Answer:__ Any idea?

---------------------------------------
# function (a,x,m,I){var c={safeWindow: ?????

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.estcequonmetenprodaujourdhui.info 'unsafe-inline'; img-src https://www.estcequonmetenprodaujourdhui.info https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors 'none'; manifest-src https://www.estcequonmetenprodaujourdhui.info; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "",
        "script-sample": "(function (a,x,m,I){var c={safeWindow:{}...",
        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src https://www.estcequonmetenprodaujourdhui.info https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```
or
```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.nicolas-hoffmann.net/source/1040-Filtre-anti-spam-pour-les-commentaires.html",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net data:; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors https://www.nicolas-hoffmann.net; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://www.google.fr/",
        "script-sample": "(function (a,m,h,H){var c={safeWindow:{}...",
        "source-file": "https://www.nicolas-hoffmann.net/source/1040-Filtre-anti-spam-pour-les-commentaires.html",

        "violated-directive": "script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ WTF is this? (no source like this in this website)

__Answer:__ Any idea?

---------------------------------------
# var FuckAdBlock/BlockAdBlock = function ?????

```
{
    "csp-report": {
        "blocked-uri": "self",
        "document-uri": "https://www.estcequonmetenprodaujourdhui.info/",
        "line-number": 1,
        "original-policy": "default-src 'none'; script-src https://www.estcequonmetenprodaujourdhui.info https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.estcequonmetenprodaujourdhui.info 'unsafe-inline'; img-src https://www.estcequonmetenprodaujourdhui.info https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net data:; font-src https://www.estcequonmetenprodaujourdhui.info; child-src https://www.estcequonmetenprodaujourdhui.info; frame-ancestors 'none'; manifest-src https://www.estcequonmetenprodaujourdhui.info; report-uri https://www.estcequonmetenprodaujourdhui.info/csp-parser.php",
        "referrer": "",
        "script-sample": "var FuckAdBlock = function () {\n        ...",
        OR
        "script-sample": "var BlockAdBlock = function ()

        "source-file": "https://www.estcequonmetenprodaujourdhui.info/",
        "violated-directive": "script-src https://www.estcequonmetenprodaujourdhui.info https://www.google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ WTF is this? (no anti-ad-blocker on this website)

__Answer:__ Any idea?

---------------------------------------
# Encrypted Google???

```
{
    "csp-report": {
        "blocked-uri": "data",
        "document-uri": "https://www.nicolas-hoffmann.net/source/cv-developpeur-web-integrateur-xhtml-css.php",
        "original-policy": "default-src 'none'; script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net; style-src https://www.nicolas-hoffmann.net; img-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.google-analytics.com data:; connect-src https://www.nicolas-hoffmann.net; font-src https://www.nicolas-hoffmann.net; media-src https://www.nicolas-hoffmann.net; object-src https://www.nicolas-hoffmann.net https://www.youtube.com; child-src https://www.nicolas-hoffmann.net; frame-ancestors 'none'; manifest-src https://www.nicolas-hoffmann.net; form-action https://www.nicolas-hoffmann.net; report-uri https://www.nicolas-hoffmann.net/csp-parser.php",
        "referrer": "https://encrypted.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&ved=0ahUKEwj7rZm71LXRAhUJd1AKHU_WDKsQFghTMA4&url=https%3A%2F%2Fwww.nicolas-hoffmann.net%2Fsource%2Fcv-developpeur-web-integrateur-xhtml-css.php&usg=AFQjCNFrcAgKXpkNZwoeMmWoHRh1nXGDng&sig2=6hsRHorN3KYBDYg_qI3RRg",
        "violated-directive": "script-src https://www.nicolas-hoffmann.net https://google-analytics.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net"
    }
}
```

__WTF:__ WTF is this?

__Answer:__ No idea how this could happen. Any idea?

---------------------------------------
# static.cmptch.com

```
{
    "csp-report": {
        "document-uri": "[anonymised]",
        "effective-directive": "img-src",
        "original-policy": "[anonymised]",
        "blocked-uri": "https://static.cmptch.com/v/img/bannerOptOutButton.png"
    }
}
```

__WTF:__ WTF is this?

__Answer:__ No idea how this could happen. Any idea?

---------------------------------------
# enet.enec.gov.ae

```
{
    "csp-report": {
        "document-uri": "[anonymised]",
        "effective-directive": "script-src",
        "original-policy": "[anonymised]",
        "blocked-uri": "https://enet.enec.gov.ae"
    }
}
```

__WTF:__ WTF is this?

__Answer:__ Domain enet.enec.gov.ae doesn't exist. But domain enec.gov.ae is resolved to this: The Emirates Nuclear Energy Corporation (ENEC) is leading the development of the United Arab Emirates (UAE) Peaceful Nuclear Energy Program and building the country's first nuclear energy plant. Maybe some internal government network?

---------------------------------------
# pe78ohwhk.ru

```
{
    "csp-report": {
        "document-uri": "[anonymised]",
        "effective-directive": "script-src",
        "original-policy": "[anonymised]",
        "blocked-uri": "https://pe78ohwhk.ru/d6safundjenk6af/29136.js",
        "line-number": 1,
        "column-number": 1144
    }
}
```

__WTF:__ WTF is this?

__Answer:__ Probably some malware. Any idea?

---------------------------------------
# searches3250409-a.akamaihd.net

```
{
    "csp-report": {
        "document-uri": "[anonymised]",
        "effective-directive": "script-src",
        "original-policy": "[anonymised]",
        "blocked-uri": "https://searches3250409-a.akamaihd.net"
    }
}
```

__WTF:__ WTF is this?

__Answer:__  Any idea?

---------------------------------------
# mp3 file?

```
{
    "csp-report": {
        "blocked-uri": "chrome",
        "document-uri": "https://micr0lab.org/mu0l_0030/mp3/01_-_DAUA_-_Qui_heritera.mp3",
        "original-policy": "default-src https://micr0lab.org data: blob: https://*.vimeo.com https://*.vimeocdn.com https://*.yumpu.com https://*.youtube.com https://*.jquery.com https://*.openstreetmap.org https://fonts.gstatic.com https://duckduckgo.com; script-src https://micr0lab.org 'unsafe-inline' 'unsafe-eval' blob: https://*.micr0lab.org https://vimeo.com https://player.vimeo.com https://*.vimeocdn.com https://*.yumpu.com https://*.youtube.com https://*.jquery.com; style-src https://micr0lab.org 'unsafe-inline' https://*.vimeocdn.com https://*.googleapis.com; object-src https://micr0lab.org https://*.openstreetmap.org https://*.micr0lab.org https://*.amazonaws.com https://*.quantserve.com; connect-src https://micr0lab.org https://vimeo.com; img-src https://micr0lab.org data:; report-uri https://micr0lab.org/tech/php/csp_rep.php; base-uri https://micr0lab.org",
        "referrer": "",
        "violated-directive": "script-src"
    }
}
```

__WTF:__ How a mp3 could violate the `script-src` policy? Is it because, on some browser, a script is launched to play music files?

__Answer:__ ????

---------------------------------------
# `;!function(){var t,e,n,o=0,u=function(t,…`

```
{
  "csp-report": {
    "line_number": 1,
    "blocked_uri": "inline",
    "script_sample": ";!function(){var t,e,n,o=0,u=function(t,…",
    "referrer": "...",
    "violated_directive": "script-src",
    "document_uri": "...",
    "original_policy": "...",
    "source_file": "...",
    "column_number": 1,
    "effective_directive": "script-src"
  }
}
```

__WTF:__ `"script_sample": ";!function(){var t,e,n,o=0,u=function(t,…"`?

__Answer:__ ????

---------------------------------------

If you have some examples to share (even if you don't know what the fuck it is coming from), feel free to share them. Anonymize the URL/policy if needed.

redpajama_set_name: RedPajamaGithub


text:
Best vps for developers
Best VPS Hosting 2022
ByFunky San September 3, 2022 September 3, 2022
In the past few years, VPS hosting has become a popular choice for podcasters. With low monthly costs and no monthly commitment, it's easy to set up and use your VPS hosting service. However, choosing the right provider can be difficult. To help you make the best choices, we've compiled a list of the Best…
Read More Best VPS Hosting 2022Continue
Best VPS Server for Small Business
Is it time for your small business to upgrade to a virtual private server? Best VPS Server for Small Business that could maximize your website performance. With VPS hosting you won't be sharing hosting resources with anyone and you can set up the server the way you want. After researching dozens of providers, we have…
Read More Best VPS Server for Small BusinessContinue
The Complete Guide to VPS Hosting: From Beginner to Advanced
ByJeniffer O September 2, 2022 September 2, 2022
VPS hosting can be a great solution for newbies just starting out. It's simple to use and comes with a wide range of features, which is why it's such an important choice for anyone looking to build their business. Plus, VPS hosting is often cheaper than traditional options, so it's the perfect way to get…
Read More The Complete Guide to VPS Hosting: From Beginner to AdvancedContinue

redpajama_set_name: RedPajamaCommonCrawl


Being quite new to the art scene, Elaine Foss is what might be considered a building wave. Although not legally blind, Elaine is a visually impaired artist and quite coincidentally, began her art journey shortly after being diagnosed with numerous sight related conditions. Elaine discovered her enjoyment of painting after attending a local "paint and sip" event. Painting has helped Elaine relax, while also becoming an important therapy as she deals with her ever changing eyesight. Elaine has become a bit of a success. She has sold her work locally, nationally and internationally. Elaine is thoroughly enjoying her self-taught journey and looks forward to being able to express herself for as long as she is able.
Discovering art/painting is one of the most satisfying things that I have ever encountered. I began painting replicas my own photographs as best I could, but, I soon found that the eye strain was too much for the detail required. I do enjoy abstract work, yet, finger painting has become my passion. It allows for more freedom and expression. I almost always work in acrylics, but I've also explored wax and clay. I don't really know where this adventure will take me, nor how long it will last. I'm riding the wave for as long as I can.


This online course provides a systematic approach to solving business and academic problems and making better decisions with limited information. It is self-directed and geared to the learning pace of participants.
This interactive course will equip participants with the skills to competently think clearly and comprehensively for developing a thought leadership strategy.
What is the IBAR Critical Thinking Method (TM)?
IBAR is an acronym for Issue, Benchmarking, Analysis/Application, and Recommendations. IBAR is a critical thinking method inspired by similar methods used in many American law schools, but geared to educators in academia. IBAR takes any problem and through a basic research formula that average participants can exercise, create solutions to the problem. Once a participant understands the critical thinking process using the Internet for research, you are then on the road to becoming a bonafide thought leader who knows how to answer and solve problems independently, as well as instruct students on this model.
Correctly identify and describe the four (4) components of the IBAR Critical Thinking Method.
Precisely recognize the impact of effective problem solving and critical thinking on academia.
Analyze the correlation between critical thinking, communication and thought leadership development.
Become aware of the rudiments for developing and designing intellectual property.
Identify the different platforms in social media to share and distribute intellectual property for maximum influence.
Accurately complete a finished project with all the components of IBAR fully addressed for developing a thought leadership strategy.
Listen to the PowerPoint audio video on The IBAR Critical Thinking Method.
Assignment: Based on the exercises at the end of each section of the IBAR Tutorial, complete the IBAR Critical Thinking Outline Sheet to be turned in with your IBAR Narrative Project Sheet.
Assignment: Complete Self-Reflection Exercise on Education Thought Leadership (3 essay questions). You will find the questions within your IBAR Document Forms packet.
Listen to Intellectual Property Architecture slide.
Assignment: Using the Intellectual Property Architecture format, outline the specifications for an article on your expertise.
Assignment: Create a daily social media schedule using the information provided.
Assignment: Using the information and exercises within the previous modules, complete the Student Narrative exercise for IBAR certification consideration, as well as complete the course evaluation form. Send completed assignment(s) to: info@core-edge.com.
Good Standing in a corporate or educational institution.
Book: The IBAR Way of Critical Thinking & Thought Leadership, supplemental articles, and videos.
Participants will be provided all of the educational material for this course for presenting required analysis and participating in all course activities.
Course evaluation is one tool utilized by American Academy of Advanced Thinking (AAAT) to assess the effectiveness of learning and instruction in this course. It is encouraged that all participants participate in the written Course Evaluation that is included within the course material. Evaluation responses may be anonymous and confidential.
Each participant is responsible for being prepared to take part in the course for certification consideration. This self-directed course allows participants to proceed at an individual, steady pace. You are encouraged to complete this certification within 3 months, but it's understandable that life's circumstances can get in the way. It is asked that participants file requests to AAAT for any deadline extensions.
The enrollment date is the day participants register for the course. The faster participants commit and complete the course, the more marketable and attractive participants become within the field of education. The choice for or against becoming successful rests with you.
AAAT reserves the option to modify the course syllabus throughout the course offering. This may require modifications of audio-visual media, instructional technology, or supplemental materials and/or to modify assignments or make substitutions so long as course objectives are met and the overall certification criteria are maintained.
Your grade will be designated as "pass" or "fail." The writing assignments you submit at the end of your course will be evaluated for certification. Generally, participants will be evaluated on the quality of writing and analysis of the course work. In the event that participants do not meet our standards for a passing grade, they are encouraged to contact AAAT to determine the necessary modifications to ensure a passing grade.
The following methods will be used to facilitate learning in this course: (Reading, independent work, audio/visual aids, and instructor/participants class discussion).


Discuss (3) last: "These are all ..."
Discuss (2) last: "I was thinking..."
PASAT: time limit? No time limit? Slow time limit?
Discuss (2) last: "Now that the P..."
Discuss (1) last: "Now, for an ev..."
Discuss (1) last: "The comparison..."
Discuss (3) last: "I am not famil..."
Regarding digit span: what does "seven" and Spanish have in common?
Discuss (3) last: "I actually jus..."
Discuss (1) last: "Some users hav..."
Discuss (7) last: "Is it really d..."
Discuss (9) last: "Whether it be ..."
Discuss (1) last: "The auditory f..."
Discuss (1) last: "As the front p..."
Discuss (1) last: "Confounds are ..."
Discuss (2) last: "I've spent 578..."


As an international and independent operator, our expertise covers a range of markets with vastly different requirements and sensibilities. These worldwide experiences keep us on the forefront of global innovations and best practices in the "E-TAIL" category. The one thing we know is… Digital Works!
Simon co-founded Fontera in 2003 with Grant Fleming. Since then they have gone on to set up offices for Fontera in London and Atlanta as well as founding the tech incubator Textstream in SA. Simon started in digital media in 1994 with SEGA Interactive before moving to WorldOnline and then iTouch. He left iTouch in 2003 and, together with Grant, set up Fontera. Simon is one of the founders of BEE Mobile, South Africa's premier empowered mobile company and he holds a Bachelor of Commerce degree and a PHD in Rock Concert attendance.
Steven has a diploma in Journalism and worked in the Film and Advertising industry before becoming a freelance Web Designer in 1994. He obtained his MCP and MCSE qualifications, and is also a Certified Microsoft Trainer (MCT). He worked for Cape based Village & Life as their web/marketing manager. He also spent several years working for CITI (Cape IT Initiative). He joined Fontera in 2007, helping launch numerous mobisites, and J2ME apps for Mobimii and Mmad, as well as various social apps for Facebook.
Fontera Digital Works Chief Technical Officer, Wilhelm started working in the IT sector in 2007 when he joined Mobimii for the launch of their mobile social networking platform of the same name. From there he moved to Textstream with his core focus being on the development of social applications run through Facebook, Myspace and Orkut. Wilhelm then joined Fontera where he currently heads up the development team. He holds a Bachelor of Science in Information Technology: Business Computing from the UCT and is still trying to master sand dune moto-X.
Our team has grown in leaps and bounds since we started and there are now over 40 of us. The rest of our team includes our certified Magento developers, iOS developers, project managers, marketing team, accounts and office management. If you want to get in touch find us on Facebook, Twitter, Google + or Linked In.