10 directives

Content-Security-Policy

default-src Keyword
'none'
script-src Keyword
'self'
script-src Keyword
'unsafe-eval'
script-src Hash
'sha256-kXiJMH32JpMorZQ7b/t7/BPSuuiRF/BrutsT1+zLo7U='
script-src Hash
'sha256-ymIXnQyeU8xdiZFnnSd+t3bEjX6GKxXgfO/vh4crGak='
script-src Hash
'sha256-2ZL1vmRzBj9jhyfl6zbnEFyV0ANolWuXe6bSXX5N1YU='
script-src Hash
'sha256-MF2TGFLuspdN4I4NCeSdyKPk3QwXVgZsA+MdHXZ3t7c='
script-src Hash
'sha256-XgLQVcqg6gctDMz8mvcwWKVXJq+5MeTzudzFLn5lObg='
script-src Hash
'sha256-/CKPdwW7xD0/neRPopC1LIMsE/kxQvSpvHkG/V2cUC0='
script-src Hash
'sha256-SXFrdRd+tlujp94QpOo734KIRuoEZRmWeSPVUkYVpFA='
script-src Hash
'sha256-Myk62gLTFajAJ3Zw9rq2RDk44YlMnl2289QGOq2TIUE='
style-src Keyword
'self'
style-src Keyword
'unsafe-inline'
font-src Keyword
'self'
frame-src Keyword
'self'
base-uri Keyword
'self'
img-src Keyword
'self'
img-src Scheme
data:
manifest-src Keyword
'self'
connect-src Keyword
'self'

Content-Security-Policy-Report-Only

No report-only CSP headers found.