Cached · just now
10 directives

Content-Security-Policy

default-src Keyword 'self'
script-src Keyword 'self'
script-src Keyword 'unsafe-inline'
script-src Keyword 'unsafe-eval'
script-src Scheme https:
script-src Scheme http:
script-src-elem Keyword 'self'
script-src-elem Keyword 'unsafe-inline'
script-src-elem Scheme https:
script-src-elem Scheme http:
style-src Keyword 'self'
style-src Keyword 'unsafe-inline'
style-src Scheme https:
style-src Scheme http:
img-src Keyword 'self'
img-src Scheme data:
img-src Scheme https:
img-src Scheme http:
font-src Keyword 'self'
font-src Scheme data:
font-src Scheme https:
font-src Scheme http:
connect-src Keyword 'self'
connect-src Scheme https:
connect-src Scheme http:
connect-src Scheme wss:
connect-src Scheme ws:
frame-src Keyword 'self'
frame-src Scheme https:
frame-src Scheme http:
object-src Keyword 'none'
base-uri Keyword 'self'

Content-Security-Policy-Report-Only

No report-only CSP headers found.