Scoring
SSL Labs
Mozilla Observatory
Additional Score Commentary:
Mozilla Observatory
Current CSP requires the use of unsafe-eval due to WASM.
The relevant issue can be found at: https://github.com/vector-im/element-web/issues/12262, and has a relevant issue in the dotnet development found at: https://github.com/dotnet/aspnetcore/issues/37787
This scores a -10 in Mozilla Observatory.