Open
Cached
·
just now
15
directives
Content-Security-Policy
Content-Security-Policy: frame-ancestors 'self' https://business.paytm.com https://dashboard.paytm.com https://developer.paytm.com https://accounts.paytm.com https://securegw.paytm.in/ https://staticpg.paytm.in/; default-src 'self'; connect-src 'self' https://*.paytm.com https://paytm.com middleware.paytmmall.com middleware-staging.paytmmall.com middleware-beta.paytmmall.com www.googletagmanager.com https://*.googleapis.com/ https://maps.googleapis.com/ https://catalog-apiplus-staging.paytmmall.com/ https://deals-beta-api.paytmstores.com/ https://deals.paytm.com/ https://deals-beta-api.paytm.com/ https://deals-staging-api.paytmstores.com/ https://securegw.paytm.in/ https://pgp-qa5.paytm.in/ https://staticpg.paytm.in/; font-src 'self' data: assetscdn1.paytm.com https://assetscdn.paytm.com/ https://assetscdn1.paytm.com/ https://*.googleapis.com/ https://maps.googleapis.com/ https://maps.gstatic.com/ https://*.gstatic.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://staticpg.paytm.in/ https://accounts.paytm.com; frame-src 'self' accounts.paytm.com accounts.paytm.in https://accounts-staging.paytm.in https://accounts.paytm.in www.googletagmanager.com https://business.paytm.com https://www.youtube.com/ https://securegw.paytm.in/ https://staticpg.paytm.in/; img-src 'self' https://assetscdn.paytm.com/ https://assetscdn1.paytm.com/ www.googletagmanager.com https://*.paytm.com data: blob: https://*.cloudfront.net https://maps.googleapis.com/ https://*.googleapis.com/ https://maps.gstatic.com/ https://*.gstatic.com/ https://paytmtravel-images-akamai.paytm.com/ https://s3.ap-south-1.amazonaws.com s3://assetscdnmb.paytm.com https://staticpg.paytm.in/ https://accounts.paytm.com 'self' www.googletagmanager.com https://*.paytm.com data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtm.js https://cdn.tiny.cloud https://webappsstatic.paytm.com/ https://assetscdn.paytm.com/ https://assetscdn1.paytm.com/ https://maps.googleapis.com/ https://*.googleapis.com/ https://www.googletagmanager.com/ https://securegw.paytm.in/ https://pgp-qa5.paytm.in/ https://staticpg.paytm.in/ https://accounts.paytm.com https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/ https://cdn.tiny.cloud https://maps.googleapis.com/; style-src 'self' 'unsafe-inline' 'report-sample' https://*.paytm.com https://googletagmanager.com https://tagmanager.google.com https://www.googletagmanager.com https://webappsstatic.paytm.com https://assetscdn.paytm.com/ https://assetscdn1.paytm.com/ https://*.googleapis.com/ https://fonts.googleapis.com/ https://paytm.com https://staticpg.paytm.in/ https://accounts.paytm.com 'self' 'unsafe-inline' 'report-sample' https://*.paytm.com https://googletagmanager.com https://tagmanager.google.com https://www.googletagmanager.com https://webappsstatic.paytm.com; report-uri https://csp-report.mypaytm.com/reportcspviolations.php; manifest-src 'self'; base-uri 'self'; form-action 'self' https://pgp-staging.paytm.in/ https://pgp.paytm.in/ https://securegw.paytm.in/ https://staticpg.paytm.in/ https://cart.paytm.com/ https://cart.paytm.com/payment/status https://secure.paytmpayments.com; media-src 'self'; worker-src 'self'; object-src blob: https://staticpg.paytm.in/ https://securegw.paytm.in/;
frame-ancestors
Keyword
—
'self'
default-src
Keyword
—
'self'
connect-src
Keyword
—
'self'
connect-src
Host
—
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
frame-src
Keyword
—
'self'
frame-src
Host
—
frame-src
Host
—
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Host
—
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Keyword
—
'unsafe-inline'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Keyword
—
'report-sample'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Keyword
—
'report-sample'
report-uri
Host
—
manifest-src
Keyword
—
'self'
base-uri
Keyword
—
'self'
form-action
Keyword
—
'self'
form-action
Host
—
media-src
Keyword
—
'self'
worker-src
Keyword
—
'self'
object-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.