Cached · just now
9 directives

Content-Security-Policy

default-src Keyword —
'self'
img-src Keyword —
'self'
img-src Scheme —
data:
script-src Keyword —
'self'
script-src Hash —
'sha256-2dv/fcY5magJdSMshCPv9Lp6INt/fDosU5qIJv8JLYc='
script-src Hash —
'sha256-+ivGDdNiY8xaoeGmRfsKWq0L20HANwOb0NKQ3tqweNw='
script-src Hash —
'sha256-p/tR64fR9gFLU0pZiw0BCc9yD6PDBr68DHTtEU+Lw3w='
script-src Hash —
'sha256-i+vfnUCgcsKNDamSUPLzxm5h2XsyNEfDqmTOSrXg5dA='
script-src Hash —
'sha256-UzcsWSVS/ug2VI3VjFSnAMJDwGFsKNE7aFApgm2ZTig='
script-src Hash —
'sha256-FbpUN5njaAyx3lFx4S9jxqf0k1catyDfNU16Ds7cJmI='
script-src Hash —
'sha256-AFXcPYZr6aZybfYRd2Viok/vOrYgbkuJtB8JrHVThBs='
script-src Hash —
'sha256-VjFJWnann25wLUl3fxUwBWqj6d7c3Ov1K1bkOtC3C84='
script-src Hash —
'sha256-Uz84UtJVWNrrh6bd9T0ljJGHf2RDH/I7TzyoLoqeQTw='
script-src Keyword —
'unsafe-hashes'
font-src Keyword —
'self'
font-src Scheme —
data:
object-src Keyword —
'none'
base-uri Keyword —
'self'
form-action Keyword —
'self'
frame-ancestors Keyword —
'none'
upgrade-insecure-requests Source —
(no sources)

Content-Security-Policy-Report-Only

No report-only CSP headers found.