Open
Cached
·
9h ago
7
directives
Content-Security-Policy
Content-Security-Policy: connect-src 'self' https://hub.jetbrains.com https://youtrack.jetbrains.com/ localhost:* http://localhost:* *.jetbrains.com *.marketplace.intellij.net *.google-analytics.com *.hotjar.com wss://*.hotjar.com app-lon02.marketo.com bam.nr-data.net bam-cell.nr-data.net *.algolia.net *.algolianet.com *.amazonaws.com *.analytics.google.com *.clarity.ms https://jetbrains.team/releases ds.cookiehub.net consent.cookiehub.net region-eu.cookiehub.net consent-eu.cookiehub.net cookiehub.net cdn.cookiehub.eu *.doubleclick.net *.quora.com nrich.ai *.nrich.ai n.rich.ai *.n.rich.ai px.ads.linkedin.com 426-qvd-114.mktoresp.com https://www.google.com/ccm/collect *.optimizely.com www.googleadservices.com https://www.google.com/pagead pagead2.googlesyndication.com; default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' tagmanager.google.com www.googletagmanager.com www.google-analytics.com static.hotjar.com script.hotjar.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net resources.jetbrains.com www.youtube.com static.ads-twitter.com snap.licdn.com connect.facebook.net *.marketo.net *.clarity.ms cookiehub.net cdn.cookiehub.eu *.optimizely.com *.doubleclick.net bat.bing.com www.redditstatic.com analytics.tiktok.com in.cdn-quora.com *.quora.com www.redditmedia.com *.amazon-adsystem.com nrich.ai *.nrich.ai n.rich.ai *.n.rich.ai; font-src data: 'self' *.jetbrains.com themes.googleusercontent.com fonts.gstatic.com static.hotjar.com; img-src 'unsafe-inline' data: *; style-src 'unsafe-inline' 'self' *.jetbrains.com cloud.typography.com tagmanager.google.com fonts.googleapis.com cookiehub.net cdn.cookiehub.eu; frame-src 'self' https://hub.jetbrains.com https://youtrack.jetbrains.com/ www.googletagmanager.com vars.hotjar.com www.youtube.com *.optimizely.com *.jetbrains.com *.doubleclick.net;
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
default-src
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Keyword
—
'unsafe-inline'
script-src
Host
—
script-src
Host
—
script-src
Host
—
font-src
Scheme
—
data:
font-src
Keyword
—
'self'
img-src
Keyword
—
'unsafe-inline'
img-src
Scheme
—
data:
img-src
Host
—
*
style-src
Keyword
—
'unsafe-inline'
style-src
Keyword
—
'self'
frame-src
Keyword
—
'self'
Content-Security-Policy-Report-Only
No report-only CSP headers found.