Open
Cached
·
just now
10
directives
Content-Security-Policy
No enforced CSP headers found.
Content-Security-Policy-Report-Only
Content-Security-Policy-Report-Only: connect-src https://api.segment.io 'self' https://*.intuit.com https://*.intuit.com:* https://*.intuitcdn.net:* https://hosted-shell-assets-us-west-2.s3.us-west-2.amazonaws.com wss://plugin-localhost.intuitcdn.net:* wss://plugin.intuitcdn.net:* https://*.intuit.net consent.intuit.apps.com consent.intuit.quickbooksconnect.com; default-src 'self' https://*.intuit.com https://*.intuitcdn.net:*; font-src data: 'self' https://*.intuit.com https://*.intuitcdn.net:*; frame-src https://*.intuitcdn.net https://*.intuit.com; img-src data: 'self' https://*.intuit.com https://*.intuitcdn.net:*; object-src 'self' https://*.intuitcdn.net https://*.intuit.com; report-uri https://csp.intuit.com/v1/8073845824298273361; script-src https://cdn.segment.io https://cdn.segment.com 'self' https://*.intuit.com https://*.intuitcdn.net:*; style-src 'self' https://*.intuitcdn.net:* https://*.intuit.com; worker-src 'self' blob:;
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
default-src
Keyword
—
'self'
default-src
Host
—
default-src
Host
—
font-src
Scheme
—
data:
font-src
Keyword
—
'self'
font-src
Host
—
font-src
Host
—
frame-src
Host
—
frame-src
Host
—
img-src
Scheme
—
data:
img-src
Keyword
—
'self'
img-src
Host
—
img-src
Host
—
object-src
Keyword
—
'self'
object-src
Host
—
object-src
Host
—
script-src
Keyword
—
'self'
script-src
Host
—
script-src
Host
—
style-src
Keyword
—
'self'
style-src
Host
—
style-src
Host
—
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob: