Open
Cached
·
just now
14
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' https: data: blob: wss:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https: https://api.beehiiv.com https://app.posthog.com https://cdn.cookie-script.com https://cdn.vector.co https://cdnjs.cloudflare.com https://connect.facebook.net https://forms.hubspot.com https://hsforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hscollectedforms.net https://js.hscta.net https://js.hubspot.com https://js.navattic.com https://js.zi-scripts.com https://klue.com https://staging.klue.com https://klue.dev:444 https://snap.licdn.com https://static.ads-twitter.com https://subscribe-forms.beehiiv.com https://tag.clearbitscripts.com https://tracking.g2crowd.com https://ug-webapp-public-production.s3.amazonaws.com https://us-assets.i.posthog.com https://voice.klue.com https://ws.zoominfo.com https://www.clickcease.com https://www.googletagmanager.com https://x.clearbitjs.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https: https://fonts.gstatic.com; connect-src 'self' https: wss: https://klue.com https://staging.klue.com https://klue.dev:444 wss://nexus-websocket-a.intercom.io wss://*.intercom.io https://api-iam.intercom.io https://api.intercom.io https://api.vector.co; object-src 'none'; child-src 'self' https:; frame-src 'self' https:; worker-src 'self' blob:; frame-ancestors 'self' https://klue.com https://staging.klue.com https://klue.dev:444; form-action 'self' https:; base-uri 'self'; upgrade-insecure-requests;
default-src
Keyword
—
'self'
default-src
Scheme
—
https:
default-src
Scheme
—
data:
default-src
Scheme
—
blob:
default-src
Scheme
—
wss:
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Scheme
—
blob:
script-src
Scheme
—
https:
script-src
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Scheme
—
https:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Scheme
—
https:
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
font-src
Scheme
—
https:
connect-src
Keyword
—
'self'
connect-src
Scheme
—
https:
connect-src
Scheme
—
wss:
connect-src
Host
—
object-src
Keyword
—
'none'
child-src
Keyword
—
'self'
child-src
Scheme
—
https:
frame-src
Keyword
—
'self'
frame-src
Scheme
—
https:
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
frame-ancestors
Keyword
—
'self'
frame-ancestors
Host
—
form-action
Keyword
—
'self'
form-action
Scheme
—
https:
base-uri
Keyword
—
'self'
upgrade-insecure-requests
Source
—
(no sources)
Content-Security-Policy-Report-Only
No report-only CSP headers found.