Open
Cached
·
just now
12
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self';img-src 'self' https: data: blob:;font-src 'self' https://fonts.gstatic.com data:;connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com;frame-src https://www.youtube.com https://player.vimeo.com;frame-ancestors 'none';base-uri 'self';form-action 'self';object-src 'none';upgrade-insecure-requests; script-src 'self' https://www.googletagmanager.com 'sha256-rYkrm4RXo3sKqs70jQVTV2s/NxJ5ipMs0ATi+ZRJpEM=' 'sha256-H0IMleVl+CWQSaIBrc8xIE04aE6wvyljH3c4sAo87aA=' 'sha256-BF0290pkb3jxQsE7z00xR8Imp8X34FLC88L0lkMnrGw=' 'sha256-QzWFZi+FLIx23tnm9SBU4aEgx4x8DsuASP07mfqol/c=' 'sha256-0chmwFk0zaA528yFfGV7J9ppIpdfTPPULncDF3WG7Zs=' 'sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc=' 'sha256-Q2BPg90ZMplYY+FSdApNErhpWafg2hcRRbndmvxuL/Q=' 'sha256-SaCkFfPruIdTXT8/97JArQmGxiJAL2o4bBDvSgJ5y3Q=' 'sha256-QPkXvDKqq1ylJV2yCZkuBiSK2bEMKkpV0oN18JSfREA=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';
default-src
Keyword
—
'self'
img-src
Keyword
—
'self'
img-src
Scheme
—
https:
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
connect-src
Keyword
—
'self'
frame-ancestors
Keyword
—
'none'
base-uri
Keyword
—
'self'
form-action
Keyword
—
'self'
object-src
Keyword
—
'none'
upgrade-insecure-requests
Source
—
(no sources)
script-src
Keyword
—
'self'
script-src
Hash
—
'sha256-rYkrm4RXo3sKqs70jQVTV2s/NxJ5ipMs0ATi+ZRJpEM='
script-src
Hash
—
'sha256-H0IMleVl+CWQSaIBrc8xIE04aE6wvyljH3c4sAo87aA='
script-src
Hash
—
'sha256-BF0290pkb3jxQsE7z00xR8Imp8X34FLC88L0lkMnrGw='
script-src
Hash
—
'sha256-QzWFZi+FLIx23tnm9SBU4aEgx4x8DsuASP07mfqol/c='
script-src
Hash
—
'sha256-0chmwFk0zaA528yFfGV7J9ppIpdfTPPULncDF3WG7Zs='
script-src
Hash
—
'sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc='
script-src
Hash
—
'sha256-Q2BPg90ZMplYY+FSdApNErhpWafg2hcRRbndmvxuL/Q='
script-src
Hash
—
'sha256-SaCkFfPruIdTXT8/97JArQmGxiJAL2o4bBDvSgJ5y3Q='
script-src
Hash
—
'sha256-QPkXvDKqq1ylJV2yCZkuBiSK2bEMKkpV0oN18JSfREA='
script-src
Hash
—
'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
Content-Security-Policy-Report-Only
No report-only CSP headers found.