Open
Cached
·
2h ago
10
directives
Content-Security-Policy
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; connect-src https://www.userlike.com https://demo-web.matomo.org https://demo2.matomo.org https://api.userlike.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com wss://umd.userlike.com/umd/ https://api.usercentrics.eu https://web.cmp.usercentrics.eu https://consent-api.service.consent.usercentrics.eu https://v1.api.service.cmp.usercentrics.eu https://graphql.usercentrics.eu; font-src 'self' https://shop.matomo.org https://local.test.shop.matomo.org https://userlike-cdn-umm.b-cdn.net https://shop.matomo.org https://plugins.matomo.org https://d3dc1lgancj6l0.cloudfront.net; frame-src https://shop.matomo.org https://local.test.shop.matomo.org https://www.youtube-nocookie.com https://app.usercentrics.eu https://web.cmp.usercentrics.eu; img-src 'self' data: https://i.ytimg.com https://cloud.githubusercontent.com https://www.innocraft.com https://www.ab-tests.net https://img.shields.io https://www.paypalobjects.com https://api.flattr.com https://matomo.org https://img.youtube.com https://raw.githubusercontent.com https://github.com https://raw.github.com https://button.flattr.com https://avatars.githubusercontent.com https://userlike-cdn-operators.s3-eu-west-1.amazonaws.com https://demo-web.matomo.org https://plugins.matomo.org https://app.usercentrics.eu https://uct.service.usercentrics.eu https://app.usercentrics.eu https://privacy-proxy-server.usercentrics.eu; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://userlike-cdn-umm.b-cdn.net https://demo2.matomo.org https://demo-web.matomo.org https://api.userlike.com https://d3dc1lgancj6l0.cloudfront.net https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://app.usercentrics.eu https://api.usercentrics.eu https://web.cmp.usercentrics.eu https://privacy-proxy.usercentrics.eu; style-src 'self' 'unsafe-inline'
default-src
Keyword
—
'none'
frame-ancestors
Keyword
—
'none'
base-uri
Keyword
—
'self'
form-action
Keyword
—
'self'
font-src
Keyword
—
'self'
font-src
Host
—
frame-src
Host
—
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Host
—
img-src
Host
—
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
Content-Security-Policy-Report-Only
No report-only CSP headers found.