Open
Cached
·
just now
12
directives
Content-Security-Policy
Content-Security-Policy: base-uri 'self';object-src 'self';default-src 'self';frame-src 'self' https://www.youtube.com https://player.vimeo.com https://td.doubleclick.net https://docs.google.com https://form.asana.com;media-src 'self' https://storage.googleapis.com;block-all-mixed-content;style-src 'self' 'unsafe-inline' blob: https://*.sc-cdn.net https://storage.googleapis.com https://fonts.googleapis.com https://web-platform.snap.com https://ka-p.fontawesome.com https://form.asana.com;img-src 'self' https://www.google-analytics.com https://storage.googleapis.com https://www.snapchat.com data: https://storage.cloud.google.com https://images.ctfassets.net https://cf-st.sc-cdn.net https://lens-preview-storage.storage.googleapis.com https://img.youtube.com https://i.vimeocdn.com;script-src 'self' 'unsafe-inline' https://esm.sh https://snap.licdn.com https://tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.youtube.com https://static.ads-twitter.com https://www.googleadservices.com https://kit.fontawesome.com;connect-src 'self' data: https://gcp.api.snapchat.com https://staging-gcp.api.snapchat https://sentry.sc-prod.net https://www.snap.com https://www.snapchat.com https://www.google-analytics.com https://analytics.google.com https://*.supabase.co https://*.snapcloud.dev wss://*.supabase.co wss://*.snapcloud.dev https://devsnapchat.appspot.com https://kzxzz1h3kt-dsn.algolia.net https://graphql.contentful.com https://cdn.contentful.com https://api.airtable.com https://camera-kit-api.snapar.com https://ka-p.fontawesome.com https://stats.g.doubleclick.net https://app.posthog.com;font-src 'self' https://*.sc-cdn.net https://storage.googleapis.com/snap-design-system/ https://fonts.gstatic.com https://web-platform.snap.com https://kit.fontawesome.com https://ka-p.fontawesome.com;report-uri https://csp-central.appspot.com/report_csp
base-uri
Keyword
—
'self'
object-src
Keyword
—
'self'
default-src
Keyword
—
'self'
frame-src
Keyword
—
'self'
media-src
Keyword
—
'self'
block-all-mixed-content
Source
—
(no sources)
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Scheme
—
blob:
style-src
Host
—
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
connect-src
Keyword
—
'self'
connect-src
Scheme
—
data:
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
font-src
Keyword
—
'self'
font-src
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.