Open
Cached
·
just now
7
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' 'unsafe-inline' * data: blob:; script-src 'self' 'unsafe-inline' data: blob: https://*.doubleclick.net https://*.iesnare.com https://*.liveperson.net https://*.lpsnmedia.net https://*.paylode.com https://accounts.google.com https://apis.google.com https://bat.bing.com https://browser.sentry-cdn.com https://cdn.heapanalytics.com https://cdn.jsdelivr.net https://cdn.plaid.com https://cdnjs.cloudflare.com https://cmp.osano.com https://connect.facebook.net https://hire.withgoogle.com https://js.hsforms.net https://js.hs-scripts.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.stripe.com https://maps.googleapis.com https://s7.addthis.com https://sdk.us.heap-api.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://ws.zoominfo.com; script-src-elem 'self' 'unsafe-inline' data: blob: https://*.doubleclick.net https://*.iesnare.com https://*.liveperson.net https://*.lpsnmedia.net https://*.paylode.com https://accounts.google.com https://apis.google.com https://bat.bing.com https://browser.sentry-cdn.com https://cdn.heapanalytics.com https://cdn.jsdelivr.net https://cdn.plaid.com https://cdnjs.cloudflare.com https://cmp.osano.com https://connect.facebook.net https://hire.withgoogle.com https://js.hsforms.net https://js.hs-scripts.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.stripe.com https://maps.googleapis.com https://s7.addthis.com https://sdk.us.heap-api.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://ws.zoominfo.com; script-src-attr 'unsafe-inline'; worker-src blob:; report-to csp-sentry; report-uri https://o69629.ingest.us.sentry.io/api/1288599/security/?sentry_key=762075c8415146eba795078437617b5e&sentry_environment=production
default-src
Keyword
—
'self'
default-src
Keyword
—
'unsafe-inline'
default-src
Host
—
*
default-src
Scheme
—
data:
default-src
Scheme
—
blob:
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Scheme
—
data:
script-src
Scheme
—
blob:
script-src
Host
—
script-src-elem
Keyword
—
'self'
script-src-elem
Keyword
—
'unsafe-inline'
script-src-elem
Scheme
—
data:
script-src-elem
Scheme
—
blob:
script-src-elem
Host
—
script-src-attr
Keyword
—
'unsafe-inline'
worker-src
Scheme
—
blob:
report-to
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.