Open
Cached
·
just now
3
directives
Content-Security-Policy
Content-Security-Policy: frame-ancestors 'self' https://*.builtbygirls.com https://*.rivals.com https://*.engadget.com https://*.intheknow.com https://*.autoblog.com https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.pnr.ouryahoo.com https://pnr.ouryahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.onesearch.com https://*.verizonmedia.com https://*.publishing.oath.com https://cdn.taboola.com https://ads.taboola.com chrome-extension://jdanfkhnfpagoijgfmklhgakdicpnfil; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-top-navigation-by-user-activation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=news®ion=US&lang=en-US&device=desktop&yrid=6o9nr8tivmg0j&partner=;
frame-ancestors
Keyword
—
'self'
frame-ancestors
Host
—
frame-ancestors
Host
—
frame-ancestors
Host
—
sandbox
Keyword
—
allow-forms
sandbox
Keyword
—
allow-same-origin
sandbox
Keyword
—
allow-scripts
sandbox
Keyword
—
allow-popups
sandbox
Keyword
—
allow-popups-to-escape-sandbox
sandbox
Keyword
—
allow-presentation
sandbox
Keyword
—
allow-top-navigation-by-user-activation
Content-Security-Policy-Report-Only
No report-only CSP headers found.