Open
Cached
·
just now
15
directives
Content-Security-Policy
Content-Security-Policy: base-uri 'self'; default-src 'self'; script-src 'self' 'unsafe-inline' *.stg.atlassian.com js-agent.newrelic.com bam.nr-data.net js.stripe.com www.paypalobjects.com *.paypal.com https://cdnjs.cloudflare.com/ajax/libs/bodymovin/5.7.6/lottie.min.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://www.gstatic.cn/recaptcha/ https://remote-app-switcher.stg-east.frontend.public.atl-paas.net https://post-office.stg-east.frontend.public.atl-paas.net https://siteintercept.qualtrics.com *.siteintercept.qualtrics.com https://post-office-rml-frontend.stg-east.frontend.public.atl-paas.net https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://automation-frontend.stg-east.frontend.public.atl-paas.net https://localhost:8082/automationManagerBootstrap.pack.js; style-src 'self' 'unsafe-inline' *.public.atl-paas.net; img-src 'self' blob: https: data: *.public.atl-paas.net *.prod.atl-paas.net *.stg.atlassian.com *.atlassian.com q.stripe.com *.nr-data.net *.paypal.com *.intercom.io *.intercomcdn.com *.intercomassets.com *.intercomcdn.eu *.intercomusercontent.com *.intercom-attachments.com *.intercom-attachments-1.com *.intercom-attachments-2.com *.intercom-attachments-3.com *.intercom-attachments-4.com *.intercom-attachments-5.com *.intercom-attachments-6.com *.intercom-attachments-7.com *.intercom-attachments-8.com *.intercom-attachments-9.com *.intercom-attachments.eu *.intercomassets.eu; font-src 'self' blob: https: data: *.public.atl-paas.net *.intercomcdn.com; frame-ancestors 'self'; form-action 'self' https://surveys.atlassian.com/ https://intercom.help *.intercom.io; report-uri https://web-security-reports.services.atlassian.com/csp-report/adminhub-frontend; report-to csp-default-endpoint; connect-src 'self' blob: data: https: *.atlassian.com *.stg.atlassian.com *.stg.internal.atlassian.com *.stg.services.atlassian.com *.atl-paas.net *.statuspage.io *.launchdarkly.com bam.nr-data.net *.stripe.com *.paypal.com *.ingest.sentry.io api.sandbox.braintreegateway.com *.sandbox.braintree-api.com *.nr-data.net *.intercom.io *.intercomcdn.com *.intercomcdn.eu *.intercomusercontent.com wss: *.intercom.io; worker-src blob: https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; object-src 'self'; frame-src 'self' *.atl-paas.net *.stg.internal.atlassian.com js.stripe.com m.stripe.network *.paypal.com *.youtube-nocookie.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://surveys.atlassian.com/ https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; media-src 'self' cdn.loom.com *.intercomcdn.com
base-uri
Keyword
—
'self'
default-src
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Host
—
script-src
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Host
—
img-src
Keyword
—
'self'
img-src
Scheme
—
blob:
img-src
Scheme
—
https:
img-src
Scheme
—
data:
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
font-src
Keyword
—
'self'
font-src
Scheme
—
blob:
font-src
Scheme
—
https:
font-src
Scheme
—
data:
font-src
Host
—
frame-ancestors
Keyword
—
'self'
form-action
Keyword
—
'self'
report-to
Host
—
connect-src
Keyword
—
'self'
connect-src
Scheme
—
blob:
connect-src
Scheme
—
data:
connect-src
Scheme
—
https:
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Scheme
—
wss:
worker-src
Scheme
—
blob:
object-src
Keyword
—
'self'
frame-src
Keyword
—
'self'
frame-src
Host
—
media-src
Keyword
—
'self'
Content-Security-Policy-Report-Only
No report-only CSP headers found.