Open
Cached
·
just now
8
directives
Content-Security-Policy
Content-Security-Policy: default-src https://insights.block64.com; connect-src 'self' https://*.block64.com https://*.google-analytics.com https://www.google.com/ccm/ https://www.google.com/rmkt/ https://*.usetiful.com https://*.clarity.ms https://*.google.com/pagead/; img-src 'self' https://*.block64.com https://*.google-analytics.com https://www.google.com/ccm/ https://www.google.com/rmkt/ https://*.google.com/pagead/ https://*.google.ca/pagead/ https://*.usetiful.com https://*.clarity.ms data: blob: https://*.blob.core.windows.net; worker-src 'self' blob:; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://insights.block64.com https://insights-usa-east.block64.com https://*.google-analytics.com https://*.gstatic.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://*.clarity.ms https://status.block64.com https://*.usetiful.com https://challenges.cloudflare.com; style-src 'unsafe-inline' 'self' https://insights.block64.com https://insights-usa-east.block64.com https://fonts.googleapis.com https://*.usetiful.com; font-src 'self' https://*.block64.com https://fonts.gstatic.com data:; frame-src https://*.statuspage.io https://challenges.cloudflare.com https://*.googletagmanager.com;
connect-src
Keyword
—
'self'
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Keyword
—
'self'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
Content-Security-Policy-Report-Only
No report-only CSP headers found.