Open
Cached
·
just now
6
directives
Content-Security-Policy
No enforced CSP headers found.
Content-Security-Policy-Report-Only
Content-Security-Policy-Report-Only: connect-src *;frame-src *;img-src https: data: blob: about: safari-extension: safari-resource: chrome-extension: http://*.rackcdn.com http://*.tumblr.com http://huaban.com;worker-src https: blob:;script-src https: 'unsafe-eval' 'unsafe-inline'; report-uri /log/csp
connect-src
Host
—
*
frame-src
Host
—
*
img-src
Scheme
—
https:
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Scheme
—
about:
img-src
Scheme
—
safari-extension:
img-src
Scheme
—
safari-resource:
img-src
Scheme
—
chrome-extension:
img-src
Host
—
worker-src
Scheme
—
https:
worker-src
Scheme
—
blob:
script-src
Scheme
—
https:
script-src
Keyword
—
'unsafe-eval'
script-src
Keyword
—
'unsafe-inline'
report-uri
Host
—