Open
Cached
·
just now
3
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' data: ws: wss: blob: 'unsafe-inline' 'unsafe-eval' *.cvs.com *.caremark.com *.cvshealth.com *.cvsspecialty.com *.cvscaremark.com *.foresee.com *.flippenterprise.net *.youtube.com *.monetate.net *.go-mpulse.net *.bing.com *.virtualearth.net *.demdex.net healthlibrary.epnet.com druginfo.goldstandard.com *.akstat.io *.akamaihd.net *.everesttech.net *.bootstrapcdn.com *.distilnetworks.com cdnjs.com *.cloudflare.com *.vantivprelive.com *.jquery.com *.4seeresults.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.cvs.com *.caremark.com *.cvshealth.com *.cvsspecialty.com *.cvscaremark.com *.tiqcdn.com *.foresee.com *.monetate.net *.groupbycloud.com *.go-mpulse.net *.bazaarvoice.com *.bing.com *.lightboxcdn.com *.jsdelivr.com *.jquery.com *.virtualearth.net healthlibrary.epnet.com druginfo.goldstandard.com cdnjs.com *.cloudflare.com *.bootstrapcdn.com *.vantivprelive.com *.demdex.net; frame-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.cvs.com *.caremark.com *.cvshealth.com *.cvsspecialty.com *.cvscaremark.com *.tiqcdn.com *.foresee.com *.monetate.net *.groupbycloud.com *.go-mpulse.net *.bazaarvoice.com *.bing.com *.lightboxcdn.com *.jsdelivr.com *.jquery.com *.virtualearth.net healthlibrary.epnet.com druginfo.goldstandard.com cdnjs.com *.cloudflare.com *.bootstrapcdn.com *.vantivprelive.com *.demdex.net *.youtube.com
default-src
Keyword
—
'self'
default-src
Scheme
—
data:
default-src
Scheme
—
ws:
default-src
Scheme
—
wss:
default-src
Scheme
—
blob:
default-src
Keyword
—
'unsafe-inline'
default-src
Keyword
—
'unsafe-eval'
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
script-src
Keyword
—
'self'
script-src
Scheme
—
data:
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
frame-src
Keyword
—
'self'
frame-src
Scheme
—
data:
frame-src
Keyword
—
'unsafe-inline'
frame-src
Keyword
—
'unsafe-eval'
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.