Open
Cached
·
just now
10
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self'; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: blob: https://*.cloudinary.com https://www.google-analytics.com https://www.googletagmanager.com https://*.service-now.com https://*.moveworks.io https://*.moveworks.com https://*.walkme.com https://s3.walkmeusercontent.com https://*.pendo.io https://pendo-io-static.storage.googleapis.com https://pendo-static-5947957712322560.storage.googleapis.com https://*.bizible.com https://cdn.bizibly.com https://*.slack-edge.com https://*.amazonaws.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zdassets.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://*.moveworks.com https://*.moveworks.ai https://*.moveworks.io https://*.walkme.com https://*.pendo.io https://pendo-io-static.storage.googleapis.com https://pendo-static-5947957712322560.storage.googleapis.com https://*.fullstory.com https://*.bizible.com https://*.marketo.net https://browser-intake-datadoghq.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://www.gstatic.com https://*.walkme.com https://*.pendo.io https://pendo-io-static.storage.googleapis.com https://pendo-static-5947957712322560.storage.googleapis.com https://*.moveworks.com; connect-src 'self' wss: https://*.moveworks.com https://*.moveworks.io https://*.moveworks.ai https://*.okta.com https://*.zdassets.com https://*.zendesk.com https://www.google-analytics.com https://www.googletagmanager.com https://*.walkme.com https://s3.walkmeusercontent.com https://*.pendo.io https://pendo-io-static.storage.googleapis.com https://pendo-static-5947957712322560.storage.googleapis.com https://*.fullstory.com https://*.bizible.com https://*.marketo.net https://*.mktoresp.com https://browser-intake-datadoghq.com ws:; frame-src https://*.okta.com https://*.moveworks.com https://*.moveworks.ai https://*.moveworks.io https://*.walkme.com https://*.pendo.io https://drive.google.com https://s3.walkmeusercontent.com https://www.loom.com https://*.zscaler.net https://*.zscalerone.net https://*.zscalertwo.net https://*.zscalerthree.net https://*.zscloud.net; frame-ancestors 'self' https://*.microsoft.com https://*.microsoft.us https://teams.microsoft.com.rproxy.goskope.com https://*.cloud.microsoft chrome-extension://*; worker-src 'self' blob: https://browser-intake-datadoghq.com
default-src
Keyword
—
'self'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Host
—
object-src
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Host
—
script-src
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
connect-src
Keyword
—
'self'
connect-src
Scheme
—
wss:
connect-src
Host
—
connect-src
Host
—
connect-src
Scheme
—
ws:
frame-src
Host
—
frame-ancestors
Keyword
—
'self'
frame-ancestors
Host
—
frame-ancestors
Host
—
chrome-extension://*
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.