Open
Cached
·
just now
11
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net *.zohopublic.com *.zoho.com https://js.zohocdn.com https://static.zohocdn.com https://cdn.iubenda.com https://cs.iubenda.com https://cdnjs.cloudflare.com https://static.cloudflareinsights.com https://*.googleusercontent.com https://s.ytimg.com https://www.youtube.com https://snap.licdn.com https://widget.trustpilot.com https://analytics.ahrefs.com https://connect.facebook.net https://static.hotjar.com blob:; style-src 'self' 'unsafe-inline' https: blob:; connect-src 'self' https: wss: https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.facebook.com https://connect.facebook.net; img-src 'self' data: https: blob:; frame-src 'self' https://*.iubenda.com https://www.googletagmanager.com https://*.doubleclick.net https://tpc.googlesyndication.com https://www.googleadservices.com *.zoho.com *.zohopublic.com https://widget.trustpilot.com https://*.google.com https://www.youtube.com; font-src 'self' data: https://www.langpros.net https://langpros.net https://fonts.gstatic.com https://css.zohocdn.com https://static.zohocdn.com; media-src 'self' https://langpros.net https://www.langpros.net; object-src 'none'; base-uri 'self'; worker-src 'self' blob:
default-src
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Scheme
—
blob:
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Scheme
—
https:
style-src
Scheme
—
blob:
connect-src
Keyword
—
'self'
connect-src
Scheme
—
https:
connect-src
Scheme
—
wss:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
https:
img-src
Scheme
—
blob:
frame-src
Keyword
—
'self'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
media-src
Keyword
—
'self'
object-src
Keyword
—
'none'
base-uri
Keyword
—
'self'
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.