Open
Cached
·
just now
8
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self'; font-src 'self' https://*.googleapis.com https://*.gstatic.com https://*.chatbase.co; img-src 'self' data: https://translate.googleapis.com https://fonts.gstatic.com https://www.gstatic.com https://js.intercomcdn.com https://static.intercomassets.com http://img.youtube.com https://*.googleusercontent.com https://www.googletagmanager.com https://www.google-analytics.com https://*.flexispy.com https://chart.googleapis.com https://*.myhuaweicloud.com https://logo.clearbit.com https://*.chatbase.co *.youtube.com https://*.ytimg.com *.google.com https://*.openstreetmap.org; script-src https://translate.googleapis.com 'self' 'unsafe-eval' https://translate-pa.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://js.intercomcdn.com *.google.com https://www.gstatic.com https://ajax.googleapis.com https://*.chatbase.co http://*.google.com https://*.openstreetmap.org https://*.flexispy.com https://*.mobilefonex.com https://*.doubleclick.net https://*.mailchimp.com *.intercom.io https://mandrillapp.com 'unsafe-inline'; style-src 'self' *.googleapis.com https://*.gstatic.com https://*.chatbase.co https://*.youtube.com 'unsafe-inline';frame-src 'self' https://fast.wistia.net https://survey.zohopublic.com https://www.google.com https://www.chatbase.co https://www.youtube.com https://api-iam.intercom.io; connect-src wss://*.intercom-messenger.com https://*.intercom-messenger.com https://translate-pa.googleapis.com https://translate.googleapis.com https://locationiq.org wss://nexus-websocket-a.intercom.io https://www.chatbase.co https://api-iam.intercom.io https://*.flexispy.com https://*.mobilefonex.com https://maps.googleapis.com https://www.google-analytics.com https://osm1.unwiredlabs.com; media-src https://js.intercomcdn.com
default-src
Keyword
—
'self'
font-src
Keyword
—
'self'
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Host
—
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Keyword
—
'unsafe-inline'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
frame-src
Keyword
—
'self'
connect-src
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.