Open
Cached
·
just now
9
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self'; connect-src 'self' wss://*.taxbit.com https://browser-intake-datadoghq.com https://*.logs.datadoghq.com https://edge.fullstory.com https://rs.fullstory.com https://*.pendo.io https://pendo-static-5138864397484032.storage.googleapis.com https://*.launchdarkly.com https://*.taxbit.com https://m1-prod-dashboard-uploaded-files.s3.us-east-1.amazonaws.com https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://*.zendesk.com https://api.smooch.io https://media.smooch.io https://zendesk-eu.my.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com; script-src 'self' https://edge.fullstory.com https://rs.fullstory.com https://*.pendo.io https://pendo-io-static.storage.googleapis.com https://pendo-static-5138864397484032.storage.googleapis.com https://static.zdassets.com https://ekr.zdassets.com https://*.zendesk.com https://api.smooch.io https://media.smooch.io https://zendesk-eu.my.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com; font-src 'self' https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://app.pendo.io https://cdn.pendo.io https://pendo-static-5138864397484032.storage.googleapis.com; img-src 'self' https://rs.fullstory.com https://account-service-prod-m1-us-east-1-payer-logos.s3.us-east-1.amazonaws.com cdn.pendo.io app.pendo.io pendo-static-5138864397484032.storage.googleapis.com data.pendo.io https://static.zdassets.com https://accounts.zendesk.com https://*.zendesk.com https://media.smooch.io https://*.zdusercontent.com; frame-src https://*.taxbit.com https://app.pendo.io; frame-ancestors app.pendo.io; child-src blob:;
default-src
Keyword
—
'self'
connect-src
Keyword
—
'self'
script-src
Keyword
—
'self'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
img-src
Keyword
—
'self'
img-src
Host
—
child-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.