Open
Cached
·
just now
10
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' js-eu1.hubspot.com js-eu1.hsadspixel.net googletagmanager.com *.opmnstr.com *.mstrlytcs.com cdn.bizneo.com *.plausible.io cdn-widget.callpage.io hassets.adoberesources.net assets.adoberesources.net documentcloud.adobe.com *.sharethis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' tr.capterra.com consent.cookiefirst.com js-eu1.hubspotfeedback.com js-eu1.hubspot.com js-eu1.hsadspixel.net js.hsforms.net cdn.bizneo.com go.bizneo.com *.clarity.ms cdn.jsdelivr.net assets.adoberesources.net *.hotjar.com *.ads-twitter.com *.twitter.com *.facebook.net appvizer.one *.optmnstr.com *.omappapi.com *.licdn.com *.opmnstr.com *.google-analytics.com *.googleapis.com *.googletagmanager.com sjs.bizographics.com *.googleadservices.com bat.bing.com *.marketo.net *.marketo.com *.linkedin.com *.doubleclick.net onesignal.com *.onesignal.com *.google.com cdn.ampproject.org *.googleanalytics.com *.googleoptimize.com optimize.google.com *.optimize.google.com *.omwpapi.com *.addthis.com *.moatads.com *.addthisedge.com ipinfo.io plausible.io cdnjs.cloudflare.com cdn-widget.callpage.io *.sharethis.com *.consensu.org cdn.convertbox.com mythemeshop.com polyfill-fastly.io *.hscollectedforms.net *.hs-scripts.com *.hs-banner.com js-eu1.hs-analytics.net static.cloudflareinsights.com analytics.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com data:; img-src 'self' https: data: tr.capterra.com cdn.bizneo.com *.googletagmanager.com *.google-analytics.com optimize.google.com assets.adoberesources.net lh3.googleusercontent.com analytics.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiefirst.com *.googletagmanager.com cdn.jsdelivr.net cdn.bizneo.com go.bizneo.com *.fontawesome.com *.googleapis.com *.marketo.com *.omappapi.com cdnjs.cloudflare.com optimize.google.com fonts.googleapis.com onesignal.com cdn-widget.callpage.io *.typekit.net cdn.convertbox.com fonts.bunny.net *.sharethis.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: cdn.bizneo.com fonts.gstatic.com *.typekit.net; frame-src app-eu1.hubspot.com forms-eu1.hsforms.com *.googletagmanager.com https://www.facebook.com https://optimize.google.com https://www.youtube.com go.bizneo.com *.addthis.com *.consensu.org www.icegram.com td.doubleclick.net documentcloud.adobe.com *.sharethis.com; object-src 'none'; worker-src 'self' blob:; child-src 'self' *.hotjar.com *.marketo.com go.bizneo.com *.addthis.com www.bizneo.com; connect-src 'self' tr.capterra.com *.cookiefirst.com bat.bing.net static.hsappstatic.net www.googletagmanager.com cta-eu1.hubspot.com api-eu1.hubapi.com plausible.io static.cloudflareinsights.com googletagmanager.com forms-eu1.hsforms.com hubspot-forms-static-embed-eu1.s3.amazonaws.com *.hscollectedforms.net px.ads.linkedin.com *.google-analytics.com *.google.es *.google.com *.bing.com *.facebook.com *.omappapi.com *.clarity.ms *.googlesyndication.com appvizer.one *.mktoresp.com *.mktoutil.com *.hotjar.com go.bizneo.com *.g.doubleclick.net onesignal.com *.omwpapi.com wss://*.hotjar.com *.addthis.com *.addthiscdn.com plausible.io ipinfo.io cdnjs.cloudflare.com ariadne.appvizer.one cdn.linkedin.oribi.io api.callpage.io geoipapi.callpage.io api-cdn6.callpage.io *.sharethis.com *.consensu.org app.convertbox.com *.adobe.io analytics.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com wss://*.adobe.io
default-src
Keyword
—
'self'
default-src
Host
—
default-src
Host
—
default-src
Host
—
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Scheme
—
data:
img-src
Keyword
—
'self'
img-src
Scheme
—
https:
img-src
Scheme
—
data:
img-src
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Keyword
—
'unsafe-eval'
style-src
Host
—
font-src
Keyword
—
'self'
font-src
Keyword
—
'unsafe-inline'
font-src
Keyword
—
'unsafe-eval'
font-src
Scheme
—
https:
font-src
Scheme
—
data:
font-src
Host
—
frame-src
Host
—
object-src
Keyword
—
'none'
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
child-src
Keyword
—
'self'
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.