Open
Cached
·
just now
8
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self'; script-src 'self' https://erp.citrus.com.do https://erp2.citrus.com.do https://crm.citrus.com.do http://localhost:9090 http://localhost:9091 http://localhost:9092 'unsafe-inline' 'unsafe-eval' https://login.microsoftonline.com https://secure.aadcdn.microsoftonline-p.com https://accounts.google.com https://apis.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://accounts.google.com https://login.microsoftonline.com https://tile.openstreetmap.org; connect-src 'self' https://erp.citrus.com.do https://erp2.citrus.com.do https://crm.citrus.com.do https://localhost:9090 https://localhost:9091 https://localhost:9092 https://login.microsoftonline.com https://graph.microsoft.com https://accounts.google.com https://www.googleapis.com https://nominatim.openstreetmap.org; font-src 'self' 'unsafe-inline' data:; frame-ancestors 'self' https://login.microsoftonline.com https://accounts.google.com; form-action 'self' https://pagos.azul.com.do https://contpagos.azul.com.do https://login.microsoftonline.com https://accounts.google.com;
default-src
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
font-src
Keyword
—
'self'
font-src
Keyword
—
'unsafe-inline'
font-src
Scheme
—
data:
frame-ancestors
Keyword
—
'self'
form-action
Keyword
—
'self'
form-action
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.