Open
Cached
·
just now
13
directives
Content-Security-Policy
Content-Security-Policy: connect-src * 'self' *.garmin.com *.sentry.io https://static.garmincdn.com https://*.cloudinary.com https://www.gstatic.com https://*.doubleclick.net https://*.criteo.com https://*.linksynergy.com https://*.bing.com https://*.pinterest.com https://*.snapchat.com https://px.ads.linkedin.com https://c.seznam.cz https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.googlesyndication.com https://*.googlesyndication.com https://*.google.com https://*.naver.com https://akamai.tiqcdn.com https://*.akamaihd.net *.trustarc.com;script-src 'unsafe-inline' 'unsafe-eval' https://*.garmin.cn https://cdn.jsdelivr.net https://app.textrecruit.com 'self' *.garmin.com *.trustarc.com *.truste.com https://ajax.googleapis.com https://static.garmincdn.com https://www.google.com https://cdn.appdynamics.com https://www.gstatic.com https://prefmgr-cookie.truste-svc.net https://connect.facebook.net https://www.googleadservices.com https://*.doubleclick.net https://static.criteo.net https://*.criteo.com https://bat.bing.com https://*.adform.net https://intljs.rmtag.com https://www.googletagmanager.com https://*.realytics.io https://klear.com https://px.adentifi.com https://cdn-eu.realytics.net https://secure.adnxs.com https://p.teads.tv https://js.adsrvr.org https://tag.rmp.rakuten.com https://s.pinimg.com https://sc-static.net https://*.snapchat.com https://ct.pinterest.com https://snap.licdn.com https://px.ads.linkedin.com https://c.seznam.cz https://*.google-analytics.com https://static.cloudflareinsights.com https://static.hotjar.com https://script.hotjar.com https://optimize.google.com https://members.cj.com static-pages.fe.garmin.com https://*.naver.net http://tags.tiqcdn.com https://*.tealiumiq.com https://deploytealium.com;img-src https://secure.adnxs.com https://www.facebook.com https://*.garmin.cn 'self' data: *.garmin.com *.trustarc.com *.truste.com https://static.garmincdn.com https://www.google.com https://www.google.co.uk https://prefmgr-cookie.truste-svc.net https://res.cloudinary.com https://res.garmin.com https://*.criteo.com https://*.doubleclick.net https://www.googleadservices.com https://px.adentifi.com https://rtb.adentifi.com https://*.teads.tv https://www.googletagmanager.com https://bat.bing.com https://*.yahoo.com https://sync.outbrain.com https://c.seznam.cz https://*.google-analytics.com https://stats.g.doubleclick.net https://static.hotjar.com https://script.hotjar.com *.akamaihd.net https://*.tealiumiq.com https://deploytealium.com https://pixel.mediaiqdigital.com;frame-src https://my.tealiumiq.com https://www.youtube-nocookie.com https://player.youku.com https://player.bilibili.com https://gum.criteo.com https://static.criteo.net https://assets.textrecruit.com *.garmin.com *.trustarc.com *.truste.com https://static.garmincdn.com https://www.google.com https://prefmgr-cookie.truste-svc.net https://*.googletagmanager.com https://*.doubleclick.net https://*.criteo.com https://insight.adsrvr.org https://*.snapchat.com https://ct.pinterest.com;frame-ancestors https://pilotweb.garmin.com;default-src 'self' *.garmin.com https://static.garmincdn.com;style-src 'self' 'unsafe-inline' *.garmin.com https://static.garmincdn.com https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com;font-src 'self' data: *.garmin.com *.trustarc.com *.truste.com https://static.garmincdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://script.hotjar.com;object-src 'none';upgrade-insecure-requests;base-uri 'self';form-action 'self';script-src-attr 'none'
connect-src
Host
—
*
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Host
—
script-src
Host
—
script-src
Keyword
—
'self'
script-src
Host
—
img-src
Host
—
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Host
—
img-src
Host
—
default-src
Keyword
—
'self'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
object-src
Keyword
—
'none'
upgrade-insecure-requests
Source
—
(no sources)
base-uri
Keyword
—
'self'
form-action
Keyword
—
'self'
script-src-attr
Keyword
—
'none'
Content-Security-Policy-Report-Only
No report-only CSP headers found.