Open
Cached
·
just now
11
directives
Content-Security-Policy
Content-Security-Policy: report-uri https://csp.microsoft.com/report/PPUX-Hosting; Content-Security-Policy-Report-Only: script-src 'self' blob: https://content.powerapps.com https://static.powerapps.com https://*.content.powerapps.com https://*.static.powerapps.com https://*.cdn.office.net https://*.msocdn.com https://*.res.office365.com https://*.msftauth.net https://*.monitor.azure.com https://wcpstatic.microsoft.com https://*.flow.microsoft.com https://vsa.services.microsoft.com https://mfpembedcdnmsit.azureedge.net https://appsforoffice.microsoft.com https://cdn.jsdelivr.net/npm/[email protected] 'sha256-vnlCDuJqSDJCEfDiOOb4ac1bTSShiHuc/59ZnkQqeBw=' 'sha256-3PL8bwxsLjrm7O+3mN6vo0a0aAxI6o9NCpnX7b5+Wug=' 'sha256-qbcc3t/M9PIC6sE9mwvXi7CQc9sqRMl7yIUzOo+PMn4=' 'sha256-XXanx9glUZ1fG4L6G0U6SGdIvLmBylvLvKFapPoc+kU=' 'sha256-FsjM6dKgbX5yMdU4iLKMLLcld3AEkeDGPMIcvPOltKU='; frame-src 'self' blob: https://make.powerautomate.com/ https://webshell.suite.office.com https://login.microsoftonline.com https://make.powerapps.com; base-uri 'self'; media-src 'none'; object-src 'self' blob:; manifest-src 'self'; worker-src 'self' blob:; font-src 'self' data: https://content.powerapps.com https://*.content.powerapps.com https://*.static.powerapps.com https://static2.sharepointonline.com https://*.cdn.office.net https://appsforoffice.microsoft.com https://spoprod-a.akamaihd.net; style-src 'self' 'unsafe-inline' https://*.content.powerapps.com https://*.static.powerapps.com https://*.cdn.office.net https://vsa.services.microsoft.com https://mfpembedcdnmsit.azureedge.net; report-uri https://csp.microsoft.com/report/PPUX-Hosting;
Content-Security-Policy-Report-Only
script-src
Keyword
—
'self'
script-src
Scheme
—
blob:
script-src
Host
—
script-src
Host
—
script-src
Hash
—
'sha256-vnlCDuJqSDJCEfDiOOb4ac1bTSShiHuc/59ZnkQqeBw='
script-src
Hash
—
'sha256-3PL8bwxsLjrm7O+3mN6vo0a0aAxI6o9NCpnX7b5+Wug='
script-src
Hash
—
'sha256-qbcc3t/M9PIC6sE9mwvXi7CQc9sqRMl7yIUzOo+PMn4='
script-src
Hash
—
'sha256-XXanx9glUZ1fG4L6G0U6SGdIvLmBylvLvKFapPoc+kU='
script-src
Hash
—
'sha256-FsjM6dKgbX5yMdU4iLKMLLcld3AEkeDGPMIcvPOltKU='
frame-src
Keyword
—
'self'
frame-src
Scheme
—
blob:
base-uri
Keyword
—
'self'
media-src
Keyword
—
'none'
object-src
Keyword
—
'self'
object-src
Scheme
—
blob:
manifest-src
Keyword
—
'self'
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'