Open
Cached
·
just now
4
directives
Content-Security-Policy
Content-Security-Policy: frame-ancestors 'self' http://localhost:* https://localhost:* file://* *.salesforce.com *.force.com *.lightning.force.com; script-src 'self' 'nonce-hockeystack' *.auth0.com *.calendly.com *.clearbitscripts.com *.crazyegg.com *.fontawesome.com *.hockeystack.com *.hockeystack.dev *.jsdelivr.net *.sentry-cdn.com *.userledclient.io; object-src 'none'; base-uri 'self'
frame-ancestors
Keyword
—
'self'
frame-ancestors
Host
—
frame-ancestors
Host
—
frame-ancestors
Host
—
file://*
script-src
Keyword
—
'self'
script-src
Nonce
—
'nonce-hockeystack'
object-src
Keyword
—
'none'
base-uri
Keyword
—
'self'
Content-Security-Policy-Report-Only
No report-only CSP headers found.