Open
Cached
·
just now
3
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' blob: data: wss://*.chilipiper.com wss://*.chilipiper.io wss://*.chilipiper.cool wss://*.chilipiper.team https://*.chilipiper.com https://*.chilipiper.io https://*.chilipiper.cool https://*.chilipiper.team https://rollout.ada.support https://static.ada.support https://chilipipergen.ada.support https://www.google-analytics.com https://www.googletagmanager.com https://static2.sharepointonline.com https://ajax.aspnetcdn.com https://telemetryservice.firstpartyapps.oaspapps.com https://appsforoffice.microsoft.com https://*.rollout.io https://*.cloudbees.io/ https://*.facebook.com https://*.marketo.com https://*.mixpanel.com https://*.hubspot.com https://*.pardot.com https://*.getdrip.com https://*.google.com https://*.googleapis.com https://*.hsforms.net https://*.clearbit.com https://www.youtube.com https://s3.amazonaws.com https://sentry.io https://cdn.ravenjs.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://twemoji.maxcdn.com https://*.cloudfront.net https://intercom-sheets.com https://static.intercomassets.com https://js.intercomcdn.com https://cdn.segment.com https://api.segment.io https://maxcdn.bootstrapcdn.com https://*.intercom.io https://*.mutinycdn.com https://*.mutinyhq.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://*.bugsnag.com https://zoom.us https://*.gotomeeting.com https://*.rollout.io https://*.codox.io https://cdn.tiny.cloud https://js.stripe.com https://*.zdassets.com https://*.zendesk.com https://*.zopim.com wss://chilipiper.zendesk.com wss://*.zopim.com https://*.googleusercontent.com https://*.facebook.net https://*.doubleclick.net https://*.licdn.com https://*.googleadservices.com https://*.digitaloceanspaces.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://canny.io https://*.canny.io https://edge.fullstory.com https://rs.fullstory.com https://*.lr-in-prod.com https://*.lrkt-in.com https://*.lgrckt-in.com https://*.planhat.com https://*.sprig.com https://com-chilipiper-prod1.mini.snplow.net https://com-chilipiper-prod1.collector.snplow.net https://fast.chameleon.io https://js.chargify.com https://selfservice.maxio.com https://*.gong.io https://hooks.slack.com https://api-inference.huggingface.co https://*.logr-ingest.com https://*.posthog.com https://*.candu.ai https://media.candulabs.com https://www.gstatic.com https://www.g2.com 'unsafe-inline' 'wasm-unsafe-eval'; font-src 'self' data: https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://fonts.googleapis.com https://js.intercomcdn.com; img-src * data: blob: 'unsafe-inline';
default-src
Keyword
—
'self'
default-src
Scheme
—
blob:
default-src
Scheme
—
data:
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Keyword
—
'unsafe-inline'
default-src
Keyword
—
'wasm-unsafe-eval'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
img-src
Host
—
*
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Keyword
—
'unsafe-inline'
Content-Security-Policy-Report-Only
No report-only CSP headers found.