Open
Cached
·
just now
16
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' https https://*.wistia.com https://*.wistia.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.doubleclick.com https://*.conversionruler.com https://*.productboard.com https://*.ruler.to https://*.sentry-cdn.com/ https://*.wistia.com https://*.wistia.net https://bat.bing.com https://static.claydar.com https://cdn.claydar.com https://jobs.gem.com/ https://api.gem.com/ https://cdn.builder.io https://sdk.privacy-center.org https://cdn.segment.com/ https://cookie-cdn.cookiepro.com/ https://events.rm-api.com https://googleads.g.doubleclick.net/ https://grow.clearbitjs.com https://info.productboard.com https://ipv6.6sc.co/ https://j.6sc.co https://js.qualified.com https://marketo.clearbit.com https://munchkin.marketo.net https://organizer.bizzabo.com/ https://productboard.com https://snap.licdn.com/ https://tag.clearbitscripts.com/ https://tracking.g2crowd.com https://vercel.live https://www.google-analytics.com https://www.googleadservices.com/ https://www.googletagmanager.com/ https://www.youtube.com/ https://x.clearbitjs.com/ https://va.vercel-scripts.com/ ; style-src 'self' 'unsafe-inline' blob: https://*.productboard.com https://productboard.com https://*.qualified.com https://builder.io https://cdn.builder.io https://fast.wistia.com https://fonts.googleapis.com https://www.googletagmanager.com ; img-src 'self' data: https://*.conversionruler.com https://*.productboard.com https://productboard.com https://*.qualified.com https://*.ruler.to https://*.wistia.com https://*.wistia.net https://b.6sc.co/ https://bat.bing.com/ https://builder.io https://cdn.builder.io https://sdk.privacy-center.org https://px.ads.linkedin.com/ https://www.googletagmanager.com https://fonts.gstatic.com https://pagead2.googlesyndication.com ; connect-src 'self' https://*.productboard.com https://128-jhr-871.mktoresp.com/webevents/ https://productboard.com https://*.qualified.com https://*.wistia.com https://*.wistia.net https://analytics.google.com https://*.analytics.google.com https://api.amplitude.com/ https://api2.amplitude.com/ https://api.segment.io https://api.claydar.com https://bat.bing.com/ https://bat.bing.net https://builder.io https://c.6sc.co/ https://cdn.builder.io https://api.privacy-center.org https://cdn.segment.com https://events.bizzabo.com/event/ https://app.clearbit.com/v1/ https://cookie-cdn.cookiepro.com https://events.rm-api.com/ https://geolocation.onetrust.com https://google.com/ https://ipv6.6sc.co/ https://privacyportal.onetrust.com https://px.ads.linkedin.com/ https://stats.g.doubleclick.net/ https://tracking-api.g2.com/ https://*.google-analytics.com https://www.google.com/ https://www.googletagmanager.com wss://*.qualified.com https://pagead2.googlesyndication.com https://fg8vvsvnieiv3ej16jby.litix.io/ ; media-src 'self' blob: data: mediastream: https://*.builder.io https://*.qualified.com https://*.wistia.com https://*.wistia.net ; child-src 'self' blob: https://*.qualified.com; worker-src 'self' blob:; frame-src 'self' https://*.productboard.com https://productboard.com https://*.qualified.com https://*.wistia.com https://app.storylane.io/ https://builder.io https://events.bizzabo.com/ https://cdn.builder.io https://fast.wistia.com https://fast.wistia.net https://jobs.gem.com/ https://td.doubleclick.net/ https://vercel.live https://www.googletagmanager.com/ https://www.youtube.com https://www.google.com https://capture.navattic.com/ ; font-src 'self' data: https://*.wistia.com https://fonts.gstatic.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://builder.io https://cdn.builder.io; report-uri https://browser-intake-us3-datadoghq.com/api/v2/logs?dd-api-key=undefined&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to csp-endpoint;
default-src
Keyword
—
'self'
default-src
Host
—
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Scheme
—
blob:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Host
—
connect-src
Keyword
—
'self'
media-src
Keyword
—
'self'
media-src
Scheme
—
blob:
media-src
Scheme
—
data:
media-src
Scheme
—
mediastream:
child-src
Keyword
—
'self'
child-src
Scheme
—
blob:
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
frame-src
Keyword
—
'self'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
object-src
Keyword
—
'none'
base-uri
Keyword
—
'self'
form-action
Keyword
—
'self'
frame-ancestors
Keyword
—
'self'
report-to
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.