14 directives

Content-Security-Policy

default-src Keyword 'none'
worker-src Scheme blob:
script-src Keyword 'nonce-6e4538e57a38ac5cfcf5819579aef8c9'
script-src Keyword 'unsafe-inline'
script-src Keyword 'unsafe-eval'
script-src Keyword 'self'
script-src Host https://resources.ebsco.zone
style-src Keyword 'self'
style-src Keyword 'unsafe-inline'
img-src Keyword 'self'
img-src Scheme data:
img-src Host https
img-src Scheme blob:
img-src Host resources.ebsco.zone
img-src Host connect.ebsco.com
img-src Host resources.ebsco.zone
connect-src Keyword 'self'
connect-src Host https://*.dynamed.com
connect-src Host https://telemetry.ebsco.com
connect-src Host https://resources.ebsco.zone
connect-src Host telemetry.ebsco.com
connect-src Host login.ebsco.zone
connect-src Host myaccount.ebsco.healthcare
font-src Keyword 'self'
object-src Keyword 'self'
media-src Keyword 'self'
manifest-src Keyword 'self'
frame-src Host *
base-uri Keyword 'self'
frame-ancestors Keyword 'self'
frame-ancestors Host https://*.cerner.com
frame-ancestors Host https://*.epic.com
frame-ancestors Host https://*.healthdecision.com
form-action Keyword 'self'

Content-Security-Policy-Report-Only

No report-only CSP headers found.