CSP Header Checker

A missing or report-only Content Security Policy leaves your site vulnerable to XSS attacks. ShipReady checks for CSP presence, mode (enforce vs report-only), and basic directive coverage.