Open
Cached
·
just now
8
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' http: https: https://*.addigy.com https://*.pantheonsite.io;frame-ancestors 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com http: https: ;img-src 'self' data: https://app-app.addigy.com https://www.addigy.com https://static.addigy.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://tracking.g2crowd.com https://bat.bing.com https://t.co https://ssl.gstatic.com https://www.gstatic.com https://*.gravatar.com http://*.gravatar.com https://fast.wistia.com https://embedwistia-a.akamaihd.net https://embed-fastly.wistia.com https://embed-ssl.wistia.com https://aorta.clickagy.com https://alb.reddit.com https://forms.hsforms.com https://track.hubspot.com https://*.linkedin.com https://ps.eyeota.net https://match.adsrvr.org https://dpm.demdex.net https://idsync.rlcdn.com https://sync.crwdcntrl.net https://ml314.com https://obseu.bzcclandlord.com https://cm.g.doubleclick.net https://perf-na1.hsforms.com/ https://forms-na1.hsforms.com/ https://assets.calendly.com/ https://c.clarity.ms/ https://c.bing.com/ https://app.usercentrics.eu https://uct.service.usercentrics.eu;style-src 'self' 'unsafe-inline' http: https: fonts.googleapis.com;font-src 'self' data: http: https: fonts.googleapis.com http https: fonts.gstatic.com https://*.wistia.com;media-src 'self' data: blob: http: https:;worker-src 'self' blob:;
default-src
Keyword
—
'self'
default-src
Scheme
—
http:
default-src
Scheme
—
https:
frame-ancestors
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Scheme
—
http:
script-src
Scheme
—
https:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Scheme
—
http:
style-src
Scheme
—
https:
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
font-src
Scheme
—
http:
font-src
Scheme
—
https:
font-src
Host
—
font-src
Scheme
—
https:
media-src
Keyword
—
'self'
media-src
Scheme
—
data:
media-src
Scheme
—
blob:
media-src
Scheme
—
http:
media-src
Scheme
—
https:
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.