Open
Cached
·
just now
14
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' https:; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' highnote.com www.googletagmanager.com cdn.propensity.com tag.clearbitscripts.com snap.licdn.com vegetableplate.highnote.com googleads.g.doubleclick.net survey.survicate.com; script-src-elem blob: 'unsafe-inline' 'unsafe-eval' 'self' highnote.com www.googletagmanager.com cdn.propensity.com vercel.live tag.clearbitscripts.com snap.licdn.com vegetableplate.highnote.com googleads.g.doubleclick.net survey.survicate.com; style-src 'self' 'unsafe-inline' highnote.com; img-src 'self' data: highnote.com vegetableplate.highnote.com www.google.com www.googletagmanager.com googleads.g.doubleclick.net www.linkedin.com *.ads.linkedin.com www.google.com media.graphassets.com us-west-2.graphassets.com imageio.forbes.com www.googleadservices.com; font-src 'self' data: highnote.com; frame-src 'self' highnote.com www.googletagmanager.com vercel.live storage.googleapis.com; connect-src 'self' *.sentry.io analytics.propensity-abm.com docs.highnote.com api.us.test.highnote.com api.us.highnote.com www.googleadservices.com browser-intake-us5-datadoghq.com www.google.com boards-api.greenhouse.io dashboard.highnote.com highnote.com *.ads.linkedin.com googleads.g.doubleclick.net www.google-analytics.com region1.google-analytics.com www.googletagmanager.com vegetableplate.highnote.com www.linkedin.com a.usbrowserspeed.com api.hsforms.com; media-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; worker-src blob:; report-uri https://o492040.ingest.us.sentry.io/api/4510921137455104/security/?sentry_key=5afce4b9364792aaf1292c9ffa7de913
default-src
Keyword
—
'self'
default-src
Scheme
—
https:
script-src
Scheme
—
blob:
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src-elem
Scheme
—
blob:
script-src-elem
Keyword
—
'unsafe-inline'
script-src-elem
Keyword
—
'unsafe-eval'
script-src-elem
Keyword
—
'self'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
frame-src
Keyword
—
'self'
connect-src
Keyword
—
'self'
media-src
Keyword
—
'self'
object-src
Keyword
—
'none'
base-uri
Keyword
—
'self'
frame-ancestors
Keyword
—
'none'
worker-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.