Open
Cached
·
just now
10
directives
Content-Security-Policy
Content-Security-Policy: default-src https: https://*.wistia.com https://*.wistia.net wss://ufa.uberflip.com https://*.marketo.com https://*.marketo.net; img-src * data:; font-src * data:; media-src 'self' blob: data: *.wistia.com *.wistia.net embedwistia-a.akamaihd.net *.pcdn.co; worker-src 'self' blob:; child-src 'self' blob: cdn.lottielab.com cdnapisec.kaltura.com *.adoberesources.net *.metadata.io *.wistia.com *.wistia.net *.marketo.com *.marketo.net youtube.com www.youtube.com s7.addthis.com *.transistor.fm *.google.com *.pros.com www.iorad.com connect.facebook.net 4x8oo3.axshare.com s.company-target.com *.googletagmanager.com info.conga.com; script-src 'self' 'unsafe-eval' connect.facebook.net *.googletagmanager.com *.adoberesources.net *.metadata.io *.demandbase.com *.google-analytics.com *.cookielaw.org *.licdn.com *.crazyegg.com *.cloudfront.net *.onetrust.com *.marketo.com g2.com *.g2.com *.marketo.net *.leadspace.com *.wistia.com *.wistia.net cdnjs.cloudflare.com cdn.jsdelivr.net scout-cdn.salesloft.com content.cdntwrk.com *.addthis.com *.uberflip.com *.addthisedge.com z.moatads.com ml314.com *.ml314.com *.googleoptimize.com *.google.com ajax.googleapis.com *.pros.com uberflip.cdntwrk.com *.pcdn.co code.createjs.com *.sprinklr.com analytics.funnelfuel.io yoast.com abm-tracking.demandscience.com tracking.contanuity.com www.youtube.com tracking.g2crowd.com www.redditstatic.com googleads.g.doubleclick.net api.teknkl.com info.conga.com www.gstatic.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net fonts.googleapis.com content.cdntwrk.com cihost.uberflip.com maxcdn.bootstrapcdn.com use.fontawesome.com pros.com hello.myfonts.net *.uberflip.com *.google.com app-abj.marketo.com *.marketo.com *.marketo.net *.pros.com *.pcdn.co *.sprinklr.com rlcdn.com *.crazyegg.com cdnjs.cloudflare.com use.typekit.net *.typekit.net info.conga.com; sandbox allow-scripts allow-same-origin allow-forms allow-popups allow-downloads allow-modals allow-popups-to-escape-sandbox; connect-src 'self' https: wss://ufa.uberflip.com wss://project-hummingbird-hummingbird-websocket-nodejs-de-112831.cloud.adobe.io;
default-src
Scheme
—
https:
img-src
Host
—
*
img-src
Scheme
—
data:
font-src
Host
—
*
font-src
Scheme
—
data:
media-src
Keyword
—
'self'
media-src
Scheme
—
blob:
media-src
Scheme
—
data:
media-src
Host
—
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
child-src
Keyword
—
'self'
child-src
Scheme
—
blob:
child-src
Host
—
child-src
Host
—
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Keyword
—
'unsafe-inline'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Host
—
sandbox
Keyword
—
allow-scripts
sandbox
Keyword
—
allow-same-origin
sandbox
Keyword
—
allow-forms
sandbox
Keyword
—
allow-popups
sandbox
Keyword
—
allow-downloads
sandbox
Keyword
—
allow-modals
sandbox
Keyword
—
allow-popups-to-escape-sandbox
connect-src
Keyword
—
'self'
connect-src
Scheme
—
https:
Content-Security-Policy-Report-Only
No report-only CSP headers found.