Open
Cached
·
just now
14
directives
Content-Security-Policy
Content-Security-Policy: frame-ancestors 'none'; default-src 'self'; script-src 'nonce-0c64aa16a27008fcd3ed231329215c47' 'strict-dynamic'; style-src 'self' 'nonce-0c64aa16a27008fcd3ed231329215c47' https://app-static.turtl.co http://app-static.turtl.co; img-src 'self' https://app-static.turtl.co http://app-static.turtl.co; font-src 'self' https://app-static.turtl.co http://app-static.turtl.co; worker-src 'self' blob:; connect-src 'self' https://app-static.turtl.co http://app-static.turtl.co https://browser-intake-datadoghq.eu https://rum.browser-intake-datadoghq.eu https://session-replay.browser-intake-datadoghq.eu https://www.datadoghq-browser-agent.com https://browser-http-intake.logs.datadoghq.eu; object-src 'none'; form-action 'self'; base-uri 'self'; require-trusted-types-for 'script'; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?level=warn&dd-api-key=pubb20136d708614e613986f5776f610f04&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction%2Cservice%3Aturtl-frontend%2Cversion%3A30df5a4f; report-to csp-endpoint
frame-ancestors
Keyword
—
'none'
default-src
Keyword
—
'self'
script-src
Nonce
—
'nonce-0c64aa16a27008fcd3ed231329215c47'
script-src
Keyword
—
'strict-dynamic'
style-src
Keyword
—
'self'
style-src
Nonce
—
'nonce-0c64aa16a27008fcd3ed231329215c47'
img-src
Keyword
—
'self'
font-src
Keyword
—
'self'
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
connect-src
Keyword
—
'self'
object-src
Keyword
—
'none'
form-action
Keyword
—
'self'
base-uri
Keyword
—
'self'
require-trusted-types-for
Keyword
—
'script'
report-to
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.