Open
Cached
·
just now
9
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://d1dxeoyimx6ufk.cloudfront.net/ https://d1fuocm8xlx12g.cloudfront.net https://cdn.mxpnl.com https://d1f8f9xcsvx3ha.cloudfront.net https://kit.fontawesome.com http://fast.appcues.com https://fast.appcues.com http://cdn.heapanalytics.com https://cdn.heapanalytics.com https://sdk.us.heap-api.com http://js.hsforms.net https://ajax.googleapis.com https://*.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.weglot.com http://translate.google.com https://translate.google.com; style-src 'self' 'unsafe-inline' https://d1dxeoyimx6ufk.cloudfront.net/ https://fonts.googleapis.com https://ka-p.fontawesome.com https://fast.appcues.com https://www.gstatic.com https://cdn.weglot.com https://translate.googleapis.com; connect-src 'self' https://d1dxeoyimx6ufk.cloudfront.net/ https://awszerio.brightidea.com wss://awszerio.brightidea.com https://bi-prod-uploads-confidential.s3-accelerate.amazonaws.com https://bi-prod-uploads-confidential.s3.amazonaws.com https://www.googleapis.com https://brightidea.test.onfastspring.com https://brightidea.onfastspring.com https://api.appcues.net wss://api.appcues.net https://app.getsentry.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://ka-p.fontawesome.com https://translate.google.com https://translate.googleapis.com http://fonts.gstatic.com *.videodelivery.net *.cloudflarestream.com https://cdn.weglot.com https://cdn-api-weglot.com https://fonts.gstatic.com data: blob:; img-src 'self' https://d1dxeoyimx6ufk.cloudfront.net/ https://bi-prod-uploads-confidential.s3-accelerate.amazonaws.com https://bi-prod-uploads-confidential.s3.amazonaws.com https://s3-us-west-1.amazonaws.com https://brightidea.test.onfastspring.com https://brightidea.onfastspring.com https://d1f8f9xcsvx3ha.cloudfront.net https://elements.brightidea.com https://s3.us-east-1.amazonaws.com https://d1dxeoyimx6ufk.cloudfront.net https://d36lh1fyk10g9f.cloudfront.net https://d1lcqv50m5hllr.cloudfront.net https://images.unsplash.com https://www.gstatic.com https://www.google.com https://fonts.gstatic.com http://translate.google.com https://translate.google.com https://translate.googleapis.com https://brightidea.jira.com https://forms.hsforms.com https://forms-na1.hsforms.com https://heapanalytics.com data: blob:; frame-src 'self' https://d1dxeoyimx6ufk.cloudfront.net/ https://www.google.com https://brightidea.test.onfastspring.com https://brightidea.onfastspring.com https://*.box.com https://*.app.box.com https://forms.hsforms.com http://player.vimeo.com https://player.vimeo.com https://web.microsoftstream.com/ http://www.youtube.com https://www.youtube.com https://*.sharepoint.com videodelivery.net *.cloudflarestream.com; font-src 'self' https://d1dxeoyimx6ufk.cloudfront.net/ https://fonts.gstatic.com https://ka-p.fontawesome.com data:; worker-src 'self' https://d1dxeoyimx6ufk.cloudfront.net/ blob:; media-src 'self' https://d1dxeoyimx6ufk.cloudfront.net/ https://bi-prod-uploads-confidential.s3-accelerate.amazonaws.com https://bi-prod-uploads-confidential.s3.amazonaws.com blob:;
default-src
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
connect-src
Keyword
—
'self'
connect-src
Scheme
—
data:
connect-src
Scheme
—
blob:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
frame-src
Keyword
—
'self'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
media-src
Keyword
—
'self'
media-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.