Open
Cached
·
just now
14
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' *.adac.de; child-src 'self' blob: *.adac.de; connect-src 'self' *.adac.de https://*.consentmanager.net https://adac.containers.piwik.pro https://adac.piwik.pro https://api-eu.cleverpush.com https://geoip-api.cleverpush.com https://static-eu.cleverpush.com https://adacde.mycleverpush.com https://widget.moin.ai https://api.moin.ai wss://bot.moin.ai/primus https://uku18p2r38.kameleoon.eu https://uku18p2r38.kameleoon.io https://static.kameleoon.com https://eu-data.kameleoon.io https://eu-data.kameleoon.eu https://na-data.kameleoon.io https://na-data.kameleoon.eu https://editor.kameleoon.com https://graphical-editor.kameleoon.com https://simulation.kameleoon.com https://api.kameleoon.com https://customers.kameleoon.com https://logger.kameleoon.io https://client-config.kameleoon.com https://sdk-config.kameleoon.eu https://api.products.kameleoon.com https://static.experimentation.dev https://sdk-config.experimentation.dev https://eu-data.experimentation.dev https://*.google-analytics.com https://*.googletagmanager.com https://ad.doubleclick.net https://*.g.doubleclick.net https://*.google.com https://*.google.de https://pagead2.googlesyndication.com https://translate.googleapis.com https://collect.tealiumiq.com; font-src 'self' data: *.adac.de https://*.consentmanager.net https://widget.moin.ai https://fonts.gstatic.com; frame-ancestors 'self'; frame-src 'self' data: login.adac.de *.adac.de https://*.consentmanager.net https://adac.piwik.pro https://adacde.mycleverpush.com https://graphical-editor.kameleoon.com https://static.experimentation.dev https://eu-data.experimentation.dev https://imagesrv.adition.com https://*.adfarm1.adition.com https://secure.pay1.de https://t.tellja.eu https://ad.doubleclick.net https://td.doubleclick.net https://www.googletagmanager.com https://*.frcapi.com; img-src 'self' data: blob: *.adac.de https://*.consentmanager.net https://adac.containers.piwik.pro https://adac.piwik.pro https://static-eu.cleverpush.com https://media.moin.ai https://tracking.xadspoteffects.com https://*.spoteffects.net https://uku18p2r38.kameleoon.eu https://uku18p2r38.kameleoon.io https://storage.kameleoon.eu https://storage.kameleoon.io https://graphical-editor.kameleoon.com https://simulation.kameleoon.com https://static.kameleoon.com https://images.products.kameleoon.com https://static.experimentation.dev https://scripts.psyma.com https://t.tellja.eu https://*.google-analytics.com https://*.googletagmanager.com https://ad.doubleclick.net https://*.g.doubleclick.net https://*.google.com https://*.google.de https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://translate.google.com https://www.google.com https://translate.googleapis.com https://datacloud.tealiumiq.com; media-src 'self' *.adac.de; object-src 'self'; script-src 'self' 'unsafe-eval' *.adac.de 'nonce-GjqLPRiUamuQedWbSiFB9CrTqzpM7RUadlwTvGha2nY=' https://*.consentmanager.net https://adac.piwik.pro https://adac.containers.piwik.pro https://static-eu.cleverpush.com https://widget.moin.ai https://tracking.xadspoteffects.com https://uku18p2r38.kameleoon.eu https://uku18p2r38.kameleoon.io https://static.kameleoon.com https://graphical-editor.kameleoon.com https://simulation.kameleoon.com https://client-config.kameleoon.com https://sdk-config.kameleoon.eu https://static.experimentation.dev https://sdk-config.experimentation.dev https://secure.pay1.de https://scripts.psyma.com https://*.googletagmanager.com https://ad.doubleclick.net https://googletagmanager.com https://tagmanager.google.com https://translate.google.com; style-src 'self' 'unsafe-inline' *.adac.de https://*.consentmanager.net https://adac.containers.piwik.pro https://widget.moin.ai https://static.kameleoon.com https://static.products.kameleoon.com https://graphical-editor.kameleoon.com https://simulation.kameleoon.com https://static.experimentation.dev https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://translate.googleapis.com; worker-src 'self' blob: *.adac.de; report-to main-endpoint; report-uri https://adaconlineapim.adac.de/browser-reporting/csp?source=www
default-src
Keyword
—
'self'
child-src
Keyword
—
'self'
child-src
Scheme
—
blob:
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
frame-ancestors
Keyword
—
'self'
frame-src
Keyword
—
'self'
frame-src
Scheme
—
data:
frame-src
Host
—
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Host
—
img-src
Host
—
media-src
Keyword
—
'self'
object-src
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Nonce
—
'nonce-GjqLPRiUamuQedWbSiFB9CrTqzpM7RUadlwTvGha2nY='
script-src
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
report-to
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.