5 directives

Content-Security-Policy

default-src Keyword
'self'
default-src Hash
'sha256-+kB4mZgzbqQYLYzPOapbfVPbRg5c9tU9XSIPuKVaCvM='
script-src Keyword
'strict-dynamic'
script-src Scheme
http:
script-src Scheme
https:
object-src Keyword
'none'
require-trusted-types-for Keyword
'script'
frame-ancestors Keyword
'self'

Content-Security-Policy-Report-Only

No report-only CSP headers found.