Open
Cached
·
just now
4
directives
Content-Security-Policy
Content-Security-Policy: style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com/bootstrap/ https://fonts.googleapis.com/ https://cdn.tiny.cloud/ https://assets.knak.io/ https://client-data.knak.io/ https://testing.client-data.knak.io/ https://client-data.testing.knak.io/ https://client-data.preprod.knak.io/ https://cloud.typography.com/ https://fonts.google.com/ https://p.typekit.net/ https://s3.amazonaws.com/assets.knak.io/ https://s3.amazonaws.com/client-data.knak.io/ https://storage.googleapis.com/ https://use.typekit.net/ https://*.marketo.com/ https://cdn.jsdelivr.net/npm/[email protected]/swiper-bundle.min.css https://d8ejoa1fys2rk.cloudfront.net/ https://cdn.knak.io/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com/ajax/libs/jquery/ https://cdnjs.cloudflare.com/ajax/libs/x-editable/ https://cdnjs.cloudflare.com/ajax/libs/jqueryui/ https://cdnjs.cloudflare.com/ajax/libs/rollbar.js/ https://assets.knak.io/ https://kit.fontawesome.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://static.hotjar.com/ https://script.hotjar.com/ https://widget.intercom.io/ https://js.intercomcdn.com/ https://canny.io/sdk.js https://cdn.jsdelivr.net/algoliasearch/ https://www.datadoghq-browser-agent.com https://js.sentry-cdn.com/ https://browser.sentry-cdn.com/ https://use.typekit.net/ https://cdn.jsdelivr.net/npm/[email protected]/bundles/redoc.standalone.js https://stats.pusher.com/ https://cdn.tiny.cloud/ https://maxcdn.bootstrapcdn.com/bootstrap/ https://*.marketo.com/ https://*.adobe.com/ https://cdn.jsdelivr.net/npm/[email protected]/swiper-bundle.min.js https://ucv.bynder.com/5.0.5/modules/compactview/bynder-compactview-3-latest.js https://ucv.bynder.com/5.0.5/modules/compactview/bynder-compactview-5-latest.js https://cdn.knak.io/; worker-src 'self' blob:; frame-ancestors 'self' https://enterprise.knak.io;
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Keyword
—
'unsafe-inline'
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
frame-ancestors
Keyword
—
'self'
Content-Security-Policy-Report-Only
No report-only CSP headers found.