Open
Cached
·
just now
13
directives
Content-Security-Policy
Content-Security-Policy: connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io browser.sentry-cdn.com sentry.io *.sentry.io s1.sentry-cdn.com o1.ingest.sentry.io api2.amplitude.com app.pendo.io data.pendo.io reload.getsentry.net t687h3m0nh65.statuspage.io sentry.zendesk.com ekr.zdassets.com maps.googleapis.com plausible.io api.github.com *.intercom.io wss://*.intercom.io *.intercom-messenger.com wss://*.intercom-messenger.com uploads.intercomcdn.com uploads.intercomusercontent.com; font-src * data:; frame-src app.pendo.io demo.arcade.software js.stripe.com sentry.io 'self' intercom-sheets.com www.intercom-reporting.com; media-src *; frame-ancestors 'self' *.sentry.io; script-src 'self' 'unsafe-inline' 'report-sample' s1.sentry-cdn.com js.sentry-cdn.com browser.sentry-cdn.com statuspage-production.s3.amazonaws.com static.zdassets.com aui-cdn.atlassian.com connect-cdn.atl-paas.net js.stripe.com 'strict-dynamic' cdn.pendo.io data.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5634074999128064.storage.googleapis.com plausible.io app.intercom.io widget.intercom.io js.intercomcdn.com 'nonce-0z2E7418SEMYxjNygCfFrA=='; default-src 'none'; worker-src blob:; style-src * 'unsafe-inline'; object-src 'none'; base-uri 'none'; img-src * blob: data:; report-uri https://o1.ingest.sentry.io/api/54785/security/?sentry_key=f724a8a027db45f5b21507e7142ff78e&sentry_release=273f2f34b571cb83327243bcdf245904c6516b99
connect-src
Keyword
—
'self'
font-src
Host
—
*
font-src
Scheme
—
data:
frame-src
Keyword
—
'self'
media-src
Host
—
*
frame-ancestors
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'report-sample'
script-src
Keyword
—
'strict-dynamic'
script-src
Nonce
—
'nonce-0z2E7418SEMYxjNygCfFrA=='
default-src
Keyword
—
'none'
worker-src
Scheme
—
blob:
style-src
Host
—
*
style-src
Keyword
—
'unsafe-inline'
object-src
Keyword
—
'none'
base-uri
Keyword
—
'none'
img-src
Host
—
*
img-src
Scheme
—
blob:
img-src
Scheme
—
data:
Content-Security-Policy-Report-Only
No report-only CSP headers found.