Content Security Policy Header is Missing

REQUEST

GET / HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.3; rv:36.0) Gecko/20100101 Firefox/36.0

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.5

Content-Length: 0

RESPONSE

HTTP/1.1 200 OK

Content-Type: text/html

Content-Length: 997

Connection: keep-alive

Date: Thu, 04 Jan 2024 04:40:45 GMT

Last-Modified: Wed, 27 Dec 2023 15:41:10 GMT

Expires: Thu, 04 Jan 2024 04:40:44 GMT

Cache-Control: no-cache

Accept-Ranges: bytes

Strict-Transport-Security: max-age=15724800; includeSubDomains

ETag: "658c4596-3e5"

X-Cache: Miss from cloudfront

Via: 1.1 740fccc7c62d49696904618862f889f8.cloudfront.net (CloudFront)

X-Amz-Cf-Pop: SIN52-P1

X-Amz-Cf-Id: gY4uKT0jbRzju-KaB43EReLI2afrGSo98zMjIXy4T8IRPPr0JSLJ1g==

<!doctype html>

<head>

<link re

...[truncated]...

RECOMMENDATION

Configure your server to send this header for all pages.

Common