Open
Cached
·
just now
13
directives
Content-Security-Policy
No enforced CSP headers found.
Content-Security-Policy-Report-Only
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'report-sample' 'self' https://maps.google.com/maps/api/js https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js; style-src 'report-sample' 'self' https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://maps.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.google.com; img-src 'self' data: https://placehold.it https://maps.gstatic.com; manifest-src 'self'; media-src 'self'; report-uri https://67f699f0aeb9dc9b957876ee.endpoint.csper.io?builder=true&v=2; worker-src 'none';
default-src
Keyword
—
'self'
script-src
Keyword
—
'report-sample'
script-src
Keyword
—
'self'
style-src
Keyword
—
'report-sample'
style-src
Keyword
—
'self'
object-src
Keyword
—
'none'
base-uri
Keyword
—
'self'
connect-src
Keyword
—
'self'
font-src
Keyword
—
'self'
frame-src
Keyword
—
'self'
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
manifest-src
Keyword
—
'self'
media-src
Keyword
—
'self'
worker-src
Keyword
—
'none'