Open
Cached
·
just now
12
directives
Content-Security-Policy
Content-Security-Policy: upgrade-insecure-requests; default-src 'self' ziftsolutions.ccindex.cn *.eu.ziftsolutions.com *.eu.ziftone.com *.eu.zift123.com *.eu.ziftmarcom.com *.ziftsolutions.com *.staging.ziftone.com *.ziftone.com *.google-analytics.com *.wistia.com *.wistia.net blob: ; img-src 'self' http: https://*.trychameleon.com https://*.chmln-cdn.com https: ziftsolutions.ccindex.cn *.eu.ziftsolutions.com *.eu.ziftone.com *.eu.zift123.com *.eu.ziftmarcom.com *.ziftsolutions.com s3.amazonaws.com *.google-analytics.com *.wistia.com *.wistia.net data: blob: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://*.trychameleon.com checkout.stripe.com *.eu.ziftsolutions.com *.eu.ziftone.com *.eu.zift123.com *.eu.ziftmarcom.com *.ziftsolutions.com *.ziftone.com *.getbee.io *.googleapis.com *.google-analytics.com *.zdassets.com *.googletagmanager.com *.google.com *.pendo.io browser-update.org static.zdassets.com s3.amazonaws.com *.zopim.com *.churnzero.net *.marketo.com *.wistia.com *.wistia.net data: ; connect-src 'self' https: wss://grid.meya.ai wss://partnerapps.eu.qlikcloud.com https://*.trychameleon.com ziftsolutions.ccindex.cn *.eu.ziftsolutions.com *.eu.ziftone.com *.eu.zift123.com *.eu.ziftmarcom.com *.ziftsolutions.com *.ziftone.com *.zift123.com *.zendesk.com *.zdassets.com *.zopim.com wss://widget-mediator.zopim.com *.churnzero.net *.getbee.io *.google-analytics.com *.wistia.com *.wistia.net *.litix.io data: ; style-src 'self' 'unsafe-inline' blob: https: fast.wistia.com https://*.trychameleon.com; font-src 'self' https: https://*.chmln-cdn.com fast.wistia.com fast.wistia.net https://*.chmln-cdn.com data:; media-src 'self' https: ziftsolutions.ccindex.cn *.eu.ziftsolutions.com *.eu.ziftone.com *.eu.zift123.com *.eu.ziftmarcom.com *.ziftsolutions.com *.zift123.com *.ziftone.com *.looker.com *.ziftmarcom.com *.lenovo.com *.wistia.com *.wistia.net blob: data: ; object-src 'self' https: *.eu.ziftsolutions.com *.eu.ziftone.com *.eu.zift123.com *.eu.ziftmarcom.com *.ziftsolutions.com *.zift123.com *.ziftone.com *.looker.com *.ziftmarcom.com; frame-src 'self' https: https://*.trychameleon.com https://*.trychameleon.com https://*.chmln-cdn.com *.onserro.com *.onserrodemo.com ziftsolutions.ccindex.cn *.eu.ziftsolutions.com *.eu.ziftone.com *.eu.zift123.com *.eu.ziftmarcom.com *.ziftsolutions.com *.zift123.com *.staging.ziftone.com *.ziftone.com *.looker.com *.ziftmarcom.com *.getbee.io *.getbee.com; frame-ancestors 'self' https: *.onserro.com *.onserrodemo.com ziftsolutions.ccindex.cn *.eu.ziftsolutions.com *.eu.ziftone.com *.eu.zift123.com *.eu.ziftmarcom.com *.ziftsolutions.com *.zift123.com *.ziftone.com *.looker.com *.ziftmarcom.com www.sandlerportalmarketing.com http://transform.cisco.com https://transform.cisco.com https://*.lookbookhq.com https://*.pathfactory.com http://*.lookbookhq.com http://*.pathfactory.com; worker-src 'self' blob: ;
upgrade-insecure-requests
Source
—
(no sources)
default-src
Keyword
—
'self'
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Scheme
—
blob:
img-src
Keyword
—
'self'
img-src
Scheme
—
http:
img-src
Host
—
img-src
Scheme
—
https:
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Scheme
—
https:
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Scheme
—
data:
connect-src
Keyword
—
'self'
connect-src
Scheme
—
https:
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Scheme
—
data:
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Scheme
—
blob:
style-src
Scheme
—
https:
font-src
Keyword
—
'self'
font-src
Scheme
—
https:
font-src
Host
—
font-src
Host
—
font-src
Scheme
—
data:
media-src
Keyword
—
'self'
media-src
Scheme
—
https:
media-src
Host
—
media-src
Host
—
media-src
Host
—
media-src
Host
—
media-src
Scheme
—
blob:
media-src
Scheme
—
data:
object-src
Keyword
—
'self'
object-src
Scheme
—
https:
object-src
Host
—
object-src
Host
—
object-src
Host
—
object-src
Host
—
frame-src
Keyword
—
'self'
frame-src
Scheme
—
https:
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-ancestors
Keyword
—
'self'
frame-ancestors
Scheme
—
https:
frame-ancestors
Host
—
frame-ancestors
Host
—
frame-ancestors
Host
—
frame-ancestors
Host
—
frame-ancestors
Host
—
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.