Cached · just now
8 directives

Content-Security-Policy

default-src Keyword
'self'
default-src Host
font-src Keyword
'self'
font-src Scheme
data:
style-src Keyword
'self'
style-src Keyword
'unsafe-inline'
img-src Host
*
img-src Scheme
data:
img-src Scheme
cid:
img-src Scheme
urn:
img-src Scheme
blob:
script-src Keyword
'self'
script-src Scheme
blob:
script-src Hash
'sha256-iuvXKJJeJnio6fSzayKorIbh/3zigd8fq14oT821f/U='
script-src Hash
'sha256-hyjsy5KPO8ohFtNDlOK5LQJXjXquz/7wZmOjZwQVhec='
script-src Hash
'sha256-FzAh3M9C/8KMRmJc/j5Dqn7kMdZXqmsW3u5248nHRwY='
script-src Hash
'sha256-fxjOcoNR7xb63OlfQ9/5EJMedjiI2/XVXZVoxc6NcYQ='
script-src Hash
'sha256-9MDnmkDlmXeK8XS6beFBi8UEXaANwh6GNB3T3SGiSjM='
script-src Hash
'sha256-FW/rloxQxs80AhWMAd8b8C/dAOx/jPIdf4KWH+iInMs='
script-src Hash
'sha256-kGUQiECb7HTB3+cdt9SV9OGtiju37vTHScB5TlU3tzo='
script-src Hash
'sha256-BhtCy16+sEl5NBMvu7WDjXYJVko+1U9cqn36kyW2ED4='
connect-src Keyword
'self'
connect-src Scheme
data:
connect-src Host
ASN | Amazon
connect-src Host
connect-src Host
frame-src Host
*
frame-src Keyword
'self'
frame-ancestors Keyword
'self'
frame-ancestors Host
ASN | Cloudflare
frame-ancestors Host
ASN | Fastly
frame-ancestors Host
ASN | Fastly

Content-Security-Policy-Report-Only

No report-only CSP headers found.