Open
Cached
·
just now
12
directives
Content-Security-Policy
Content-Security-Policy: default-src 'none' https://*.wistia.com https://*.wistia.net https://www.contemporaryresearch.com; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src 'self' https://*.google.com https://*.youtube.com https://*.vimeo.com https://fast.wistia.com https://fast.wistia.net https://*.zohopublic.com https://*.zohoshowtime.com https://*.zoho.com https://*.zohocdn.com https://*.zohostatic.com https://*.pagesense-proxy.com https://*.backtracks.fm https://*.pagesense.io https://*.adroll.com https://*.doubleclick.net; connect-src 'self' https://code.jquery.com https://*.typekit.net https://fonts.googleapis.com https://fonts.gstatic.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.youtube.com https://*.vimeo.com https://*.litix.io https://*.wistia.com embedwistia-a.akamaihd.net wss://*.zohopublic.com https://*.zohopublic.com https://*.zohoshowtime.com https://*.zoho.com https://*.zohocdn.com https://*.zohostatic.com https://*.pagesense-proxy.com https://*.backtracks.fm https://*.pagesense.io https://*.adroll.com https://www.google-analytics.com https://*.doubleclick.net https://www.googletagmanager.com https://bucketeer-3c238a6b-adc2-4051-aeb1-2d2ab9e1e1b4.s3.amazonaws.com; script-src 'self' https://code.jquery.com https://*.googleapis.com https://*.gstatic.com 'unsafe-eval' https://*.wistia.com https://*.wistia.net https://src.litix.io https://static.cloudflareinsights.com https://www.contemporaryresearch.com https://*.zohopublic.com https://*.zohoshowtime.com https://*.zoho.com https://*.zohocdn.com https://*.zohostatic.com https://*.pagesense-proxy.com https://*.pagesense.io https://*.adroll.com https://www.google-analytics.com https://ssl.google-analytics.com 'unsafe-inline' https://www.googletagmanager.com https://tagmanager.google.com https://www.youtube.com http://www.youtube.com https://*.ytimg.com https://www.googleadservices.com https://www.google.com https://*.doubleclick.net 'unsafe-eval' https://tagmanager.google.com; style-src 'self' https://*.typekit.net https://fonts.googleapis.com 'unsafe-inline' blob: https://fast.wistia.com https://fast.wistia.net https://*.zohopublic.com https://*.zohoshowtime.com https://*.zoho.com https://*.zohocdn.com https://*.zohostatic.com https://*.pagesense-proxy.com https://tagmanager.google.com https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://*.typekit.net https://fonts.gstatic.com data: https://*.wistia.com https://*.zohopublic.com https://*.zohoshowtime.com https://*.zoho.com https://*.zohocdn.com https://*.zohostatic.com https://*.pagesense-proxy.com https://fonts.gstatic.com data: 'nonce-f916f028870d4518b9d1d66fc1b1df43'; img-src 'self' https://*.googleapis.com https://*.gstatic.com data: data: https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://*.zohopublic.com https://*.zohoshowtime.com https://*.zoho.com https://*.zohocdn.com https://*.zohostatic.com https://*.pagesense-proxy.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://ssl.gstatic.com https://*.doubleclick.net https://www.google.com https://ssl.gstatic.com https://bucketeer-3c238a6b-adc2-4051-aeb1-2d2ab9e1e1b4.s3.amazonaws.com; media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net; worker-src 'self' blob:;
default-src
Keyword
—
'none'
base-uri
Keyword
—
'self'
form-action
Keyword
—
'self'
frame-ancestors
Keyword
—
'none'
frame-src
Keyword
—
'self'
frame-src
Host
—
connect-src
Keyword
—
'self'
connect-src
Host
—
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Host
—
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Scheme
—
blob:
style-src
Keyword
—
'unsafe-inline'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
font-src
Scheme
—
data:
font-src
Nonce
—
'nonce-f916f028870d4518b9d1d66fc1b1df43'
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
data:
media-src
Keyword
—
'self'
media-src
Scheme
—
blob:
media-src
Scheme
—
data:
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.