Cached · just now
4 directives

Content-Security-Policy

script-src Keyword 'self'
script-src Keyword 'unsafe-inline'
script-src Keyword 'unsafe-eval'
script-src Host *.amsoil.com
script-src Host *.amsoil.ca
script-src Host *.amsoilindustrial.com
script-src Host https://amsoilcontent.com
script-src Host https://cdn.evgnet.com
script-src Host https://analytics.amsoil.com
script-src Host https://analytics.amsoil.ca
script-src Host https://assets.sitescdn.net
script-src Host *.microsoft.com
script-src Host Criteo *.criteo.com
script-src Host Criteo *.criteo.net
script-src Host *.bc0a.com
script-src Host *.brightedge.com
script-src Host cdn.b0e8.com
script-src Host device.clearsale.com.br
script-src Host cdn.attn.tv
script-src Host *.attentivemobile.com
script-src Host *.powerobjects.net
script-src Host *.convertlanguage.com
script-src Host *.niceincontact.com
script-src Host MNTN *.mountain.com
script-src Scheme blob:
frame-src Keyword 'self'
frame-src Host *.amsoil.com
frame-src Host *.amsoil.ca
frame-src Host https://amsoilcontent.com
frame-src Host *.powerobjects.net
frame-src Host creatives.attn.tv
frame-src Host *.niceincontact.com
frame-ancestors Keyword 'self'
frame-ancestors Host https://sapcc.amsoil.com
report-uri Host /csp-report

Content-Security-Policy-Report-Only

No report-only CSP headers found.