Open
Cached
·
just now
9
directives
Content-Security-Policy
No enforced CSP headers found.
Content-Security-Policy-Report-Only
Content-Security-Policy-Report-Only: default-src 'self' https://s0.wp.com https://fonts.googleapis.com https://fonts.gstatic.com data:; frame-src 'self' data: blob: https://www.youtube.com https://player.vimeo.com https://wp-themes.com; img-src * data:; media-src * data:; style-src 'self' https://fonts.googleapis.com data: 'unsafe-inline'; script-src https://wp-themes.com 'self' data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self'; frame-ancestors 'self' https://hub.libraesva.com; report-uri https://sentry.libraesva.com/api/16/security/?sentry_key=ec35ea3e850202bb70633fcd5d55c698
default-src
Keyword
—
'self'
default-src
Scheme
—
data:
frame-src
Keyword
—
'self'
frame-src
Scheme
—
data:
frame-src
Scheme
—
blob:
img-src
Host
—
*
img-src
Scheme
—
data:
media-src
Host
—
*
media-src
Scheme
—
data:
style-src
Keyword
—
'self'
style-src
Scheme
—
data:
style-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'self'
script-src
Scheme
—
data:
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
worker-src
Keyword
—
'self'
frame-ancestors
Keyword
—
'self'