Cached · just now
11 directives

Content-Security-Policy

No enforced CSP headers found.

Content-Security-Policy-Report-Only

default-src Keyword 'self'
script-src Keyword 'self'
script-src Keyword 'unsafe-inline'
script-src Keyword 'unsafe-eval'
script-src Host https://cse.google.com/
script-src-elem Host *
style-src Keyword 'self'
style-src Keyword 'unsafe-inline'
img-src Keyword 'self'
img-src Scheme data:
img-src Host https://api.iqrf.org
font-src Keyword 'self'
font-src Scheme data:
connect-src Keyword 'self'
connect-src Host https://api.iqrf.org
connect-src Host https://sentry.iqrf.org
media-src Keyword 'self'
object-src Keyword 'self'
object-src Host https://*.googlevideo.com