Open
Cached
·
just now
17
directives
Content-Security-Policy
Content-Security-Policy: script-src https://cdn.segment.com https://www.redditstatic.com https://tagmanager.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.googletagmanager.com https://accounts.google.com https://js.hs-analytics.net https://js-na1.hs-scripts.com https://js.hs-banner.com https://js.hscollectedforms.net https://js.hsadspixel.net https://js.hsforms.net https://js.hs-scripts.com https://snap.licdn.com https://js.usemessages.com https://static.zdassets.com https://edge.fullstory.com https://*.intercom.io https://js.intercomcdn.com https://www.clarity.ms https://bat.bing.com https://scripts.clarity.ms https://us-assets.i.posthog.com https://*.adroll.com https://sibautomation.com https://cdn.cr-relay.com https://lex.33across.com https://connect.facebook.net https://js.zi-scripts.com https://cdn.jsdelivr.net/npm/@scalar/api-reference https://unpkg.com/react-scan/dist/auto.global.js https://unpkg.com/react-grab/dist/index.global.js 'self' 'wasm-unsafe-eval' 'sha256-olB8hIIPqOEOq5Cknx5UpclxlUWtJrnMXV83SgsvcNk=' 'sha256-EMyIQvm3yyfV+fmZ9DmnRvXy93qrtg8faiixomjAlkY=' 'sha256-nlaQ65lEkXoJElbYUq7GtDK0gUATAmNrRV9QkLQu9UQ=' 'sha256-BraSP++BD7aCtbSEKUlB7de4/yO9CY27B1EvWf+luSg=' 'sha256-Z2/iFzh9VMlVkEOar1f/oSHWwQk3ve1qk/C2WdsC4Xk=' 'sha256-CdYkIemFfUnlWzb3qFf+7+j1/6j9EGGh9yyHv9qvSTo=' 'sha256-BrzAiIVGC9UlkZTJYy0m5YZTlKkKOUIwECONrSeKRaA=' 'sha256-fUmvXbTaF7vat54Kh/vQffWoj3wbJVwK0rvQmizDwSs=' 'sha256-HtJnsjNEar/WyB8RXajFx35EQ28ymuPMPHL8mURo5gs=' 'sha256-SYTIzw3qM2KLyQHi6/GcTlW8sVribZzfVA/THCtf38Q=' 'sha256-CkTccN0EnT4/p2COAW1V3+0wiPm4tLQmgJ9lylWwmWI='; object-src 'none'; manifest-src 'self'; base-uri 'self'; default-src 'none'; img-src * data: blob: filesystem: mediastream:; media-src * data: blob: filesystem: mediastream:; connect-src *; worker-src 'self' blob: https://*.edgedelta.com; style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://accounts.google.com; frame-src 'self' https: data: blob:; font-src 'self' https://fonts.gstatic.com https://fonts.scalar.com data:; frame-ancestors 'self' https://edgedelta.com https://*.edgedelta.com https://*.vercel.edgedelta.com; form-action 'self' https://*.edgedelta.com https://*.staging.edgedelta.com; require-trusted-types-for 'script'; report-uri https://o440552.ingest.us.sentry.io/api/5409878/security/?sentry_key=5f77938f6b4247f1a294bbc7e605d75f; report-to csp-endpoint;
script-src
Keyword
—
'self'
script-src
Keyword
—
'wasm-unsafe-eval'
script-src
Hash
—
'sha256-olB8hIIPqOEOq5Cknx5UpclxlUWtJrnMXV83SgsvcNk='
script-src
Hash
—
'sha256-EMyIQvm3yyfV+fmZ9DmnRvXy93qrtg8faiixomjAlkY='
script-src
Hash
—
'sha256-nlaQ65lEkXoJElbYUq7GtDK0gUATAmNrRV9QkLQu9UQ='
script-src
Hash
—
'sha256-BraSP++BD7aCtbSEKUlB7de4/yO9CY27B1EvWf+luSg='
script-src
Hash
—
'sha256-Z2/iFzh9VMlVkEOar1f/oSHWwQk3ve1qk/C2WdsC4Xk='
script-src
Hash
—
'sha256-CdYkIemFfUnlWzb3qFf+7+j1/6j9EGGh9yyHv9qvSTo='
script-src
Hash
—
'sha256-BrzAiIVGC9UlkZTJYy0m5YZTlKkKOUIwECONrSeKRaA='
script-src
Hash
—
'sha256-fUmvXbTaF7vat54Kh/vQffWoj3wbJVwK0rvQmizDwSs='
script-src
Hash
—
'sha256-HtJnsjNEar/WyB8RXajFx35EQ28ymuPMPHL8mURo5gs='
script-src
Hash
—
'sha256-SYTIzw3qM2KLyQHi6/GcTlW8sVribZzfVA/THCtf38Q='
script-src
Hash
—
'sha256-CkTccN0EnT4/p2COAW1V3+0wiPm4tLQmgJ9lylWwmWI='
object-src
Keyword
—
'none'
manifest-src
Keyword
—
'self'
base-uri
Keyword
—
'self'
default-src
Keyword
—
'none'
img-src
Host
—
*
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Scheme
—
filesystem:
img-src
Scheme
—
mediastream:
media-src
Host
—
*
media-src
Scheme
—
data:
media-src
Scheme
—
blob:
media-src
Scheme
—
filesystem:
media-src
Scheme
—
mediastream:
connect-src
Host
—
*
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
frame-src
Keyword
—
'self'
frame-src
Scheme
—
https:
frame-src
Scheme
—
data:
frame-src
Scheme
—
blob:
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
frame-ancestors
Keyword
—
'self'
form-action
Keyword
—
'self'
form-action
Host
—
require-trusted-types-for
Keyword
—
'script'
report-to
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.