Open
Cached
·
just now
10
directives
Content-Security-Policy
Content-Security-Policy: base-uri 'self'; default-src d138j1c6jn4qpg.cloudfront.net sierracdn.com 'self'; script-src 'nonce-6f654886-7c64-4e17-8e21-d4590e4694b5' 'strict-dynamic' https: 'unsafe-inline'; img-src d138j1c6jn4qpg.cloudfront.net sierracdn.com 'self' https://sierra.chat https://sierra.chat blob: https://*.google-analytics.com https://*.googletagmanager.com data:; frame-src https://player.vimeo.com https://www.youtube.com https://*.sierra.ai https://sierra.chat https://*.clearme.com https://*.bark.co https://drinkag1.com https://lyrahealth.oktapreview.com https://rocketpro.tfaforms.net https://*.zendesk.com https://*.withpersona.com; style-src d138j1c6jn4qpg.cloudfront.net sierracdn.com 'self' 'unsafe-inline' https://sierra.chat https://fonts.googleapis.com; connect-src 'self' d138j1c6jn4qpg.cloudfront.net sierracdn.com https://sierra.chat https://sierra.chat https://api.sierra.chat https://api-staging.sierra.chat https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://rocketpro.tfaforms.net wss://api.internal.sierra.ai https://*.gstatic.com data: https://api.sierra.chat https://sierra-prod-knowledge-ephemeral.s3.amazonaws.com https://sierra-prod-knowledge-ephemeral.s3.us-west-2.amazonaws.com https://sierra-prod-knowledge-ephemeral-us-east-2.s3.us-east-2.amazonaws.com https://sierra-prod-knowledge-ephemeral-us-east-2.s3.amazonaws.com https://sierra-prod-knowledge-ephemeral-eu-central-1.s3.eu-central-1.amazonaws.com https://sierra-prod-knowledge-ephemeral-eu-central-1.s3.amazonaws.com https://sierra-prod-knowledge-ephemeral-eu-west-1.s3.eu-west-1.amazonaws.com https://sierra-prod-knowledge-ephemeral-eu-west-1.s3.amazonaws.com https://sierra-prod-knowledge-ephemeral-ap-southeast-1.s3.ap-southeast-1.amazonaws.com https://sierra-prod-knowledge-ephemeral-ap-southeast-1.s3.amazonaws.com https://sierra-prod-knowledge-ephemeral-ap-southeast-2.s3.ap-southeast-2.amazonaws.com https://sierra-prod-knowledge-ephemeral-ap-southeast-2.s3.amazonaws.com; font-src d138j1c6jn4qpg.cloudfront.net sierracdn.com 'self' https://sierra.chat https://fonts.gstatic.com data:; frame-ancestors https://*.sierra.ai https://sierra.chat https://*.clearme.com https://*.lyrahealth.com; media-src 'self' blob: d138j1c6jn4qpg.cloudfront.net sierracdn.com
base-uri
Keyword
—
'self'
default-src
Keyword
—
'self'
script-src
Nonce
—
'nonce-6f654886-7c64-4e17-8e21-d4590e4694b5'
script-src
Keyword
—
'strict-dynamic'
script-src
Scheme
—
https:
script-src
Keyword
—
'unsafe-inline'
img-src
Keyword
—
'self'
img-src
Scheme
—
blob:
img-src
Scheme
—
data:
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
connect-src
Keyword
—
'self'
connect-src
Scheme
—
data:
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
media-src
Keyword
—
'self'
media-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.