Open
Cached
·
just now
12
directives
Content-Security-Policy
Content-Security-Policy: default-src 'none'; script-src 'self' 'sha256-xWNWy6g4QpHCwZRdmLfI81eyBjRIztPmws2tVdvXBmg=' blob: https://fast.appcues.com https://bettercloud-community.force.com/ https://static.zdassets.com https://service.force.com https://*.la2-c2-ia5.salesforceliveagent.com https://bettercloud.my.salesforce.com https://g.alicdn.com https://fullstory.com https://storage.googleapis.com https://*.atlassian.net https://*.elev.io https://cdnjs.cloudflare.com https://ajax.googleapis.com https://*.zopim.com https://*.fullstory.com https://accounts.google.com https://cdn.evergage.com https://bettercloud.evergage.com https://apis.google.com https://www.gstatic.com https://cdn.pendo.io https://app.pendo.io https://pendo-io-static.storage.googleapis.com https://pendo-static-4896387203858432.storage.googleapis.com https://static.olark.com https://api.olark.com https://nrpc.olark.com https://assets.olark.com/ https://app.hellomedian.com/ https://js.hellomedian.com/; style-src 'self' 'unsafe-inline' https://fast.appcues.com https://bettercloud-community.force.com/ https://cdn.pendo.io https://service.force.com https://cdn.elev.io https://*.zdassets.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://www.gstatic.com https://pendo-static-4896387203858432.storage.googleapis.com https://*.olark.com ; font-src 'self' data: https://fonts.gstatic.com https://css.zohostatic.com https://*.zopim.com https://themes.googleusercontent.com https://cdn.elev.io https://cdn.elev.io https://*.olark.com; report-uri /ducs/v1/public/cspReport; connect-src 'self' https://api.appcues.net https://fast.appcues.com wss://api.appcues.net https://*.zdassets.com https://cdn.contentful.com https://service.force.com https://notify.bugsnag.com https://sessions.bugsnag.com https://*.bettercloud.com https://script.google.com https://script.googleusercontent.com https://*.elev.io https://g.alicdn.com https://fullstory.com wss://*.zopim.com https://*.zopim.com https://ipv4.google.com https://*.fullstory.com wss://*.elev.io https://app.pendo.io https://bettercloud-community.force.com/ https://u287.la2-c2-ia5.salesforceliveagent.com https://d.la2-c2-ia5.salesforceliveagent.com https://api.amplitude.com https://nrpc.olark.com api.olark.com https://olark-file-uploads.s3-us-west-1.amazonaws.com/ https://hlg.tokbox.com/prod/logging/ClientEvent wss://socket.hellomedian.com/ https://app.hellomedian.com https://*.launchdarkly.com https://api.ipify.org ; frame-src 'self' https://support.bettercloud.com https://supportv2.bettercloud.com https://bettercloud.crowded.community https://service.force.com https://bettercloud.youcanbook.me https://betterit.cloud https://cdn.elev.io https://accounts.google.com https://app.elev.io https://www.g2.com https://*.olark.com ; base-uri 'self' https://cdn.elev.io; form-action 'self'; img-src data: blob: * https://cdn.pendo.io https://app.pendo.io https://cdn.pendo.io https://pendo-static-4896387203858432.storage.googleapis.com https://*.olark.com https://olark-file-uploads.s3-us-west-1.amazonaws.com; media-src https://*.zopim.com https://*.olark.com ;worker-src 'self' 'sha256-riqbIGGcPgJo6DAJ22BqwlF2mR7j/yXADYP++6nWuF8=' blob:;
default-src
Keyword
—
'none'
script-src
Keyword
—
'self'
script-src
Hash
—
'sha256-xWNWy6g4QpHCwZRdmLfI81eyBjRIztPmws2tVdvXBmg='
script-src
Scheme
—
blob:
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Host
—
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
report-uri
Host
—
connect-src
Keyword
—
'self'
connect-src
Host
—
frame-src
Keyword
—
'self'
frame-src
Host
—
frame-src
Host
—
base-uri
Keyword
—
'self'
form-action
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Host
—
*
worker-src
Keyword
—
'self'
worker-src
Hash
—
'sha256-riqbIGGcPgJo6DAJ22BqwlF2mR7j/yXADYP++6nWuF8='
worker-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.