Open
Cached
·
2h ago
12
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' *.lytx.com data:; script-src 'self' 'unsafe-eval' *.lytx.com ct.capterra.com rs.fullstory.com edge.fullstory.com cdn.bizible.com ug-webapp-public-production.s3.amazonaws.com fonts.googleapis.com www.googletagmanager.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.doubleclick.net *.googlesyndication.com dev.visualwebsiteoptimizer.com *.visualwebsiteoptimizer.com cdn.cookielaw.org *.onetrust.com *.wistia.com *.wistia.net *.marketo.com *.marketo.net *.sentry-cdn.com *.cloudfront.net bat.bing.com snap.licdn.com *.6sc.co *.zi-scripts.com 'unsafe-inline'; style-src 'self' *.lytx.com fonts.googleapis.com *.gstatic.com *.onetrust.com cdn.cookielaw.org cdn.jsdelivr.net *.marketo.com *.marketo.net 'unsafe-inline'; img-src 'self' *.lytx.com www.google-analytics.com *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.doubleclick.net *.linkedin.com *.facebook.com *.youtube.com *.vimeo.com dev.visualwebsiteoptimizer.com *.visualwebsiteoptimizer.com *.onetrust.com *.wistia.com *.wistia.net *.marketo.com *.marketo.net *.publuu.com publuu.com data: https:; connect-src 'self' www.googleadservices.com googleads.g.doubleclick.net lytx.my.salesforce.com rs.fullstory.com edge.fullstory.com secure.adnxs.com a.usbrowserspeed.com api.usergems.com www.google-analytics.com www.google.com *.googleapis.com *.googlesyndication.com stats.g.doubleclick.net analytics.google.com *.linkedin.com *.facebook.com dev.visualwebsiteoptimizer.com *.visualwebsiteoptimizer.com cdn.cookielaw.org cdn.jsdelivr.net *.onetrust.com *.wistia.com *.wistia.net *.marketo.com *.marketo.net *.mktoresp.com *.publuu.com publuu.com *.sentry.io *.sentry-cdn.com *.6sc.co *.6sense.com; frame-src 'self' *.lytx.com *.google.com www.googletagmanager.com *.youtube.com *.vimeo.com *.linkedin.com *.facebook.com *.wistia.com *.wistia.net *.publuu.com publuu.com *.tiled.co *.outgrow.us *.marketo.com *.marketo.net; media-src 'self' *.lytx.com *.wistia.com *.wistia.net data: blob:; font-src 'self' fonts.gstatic.com *.onetrust.com *.wistia.com *.wistia.net data:; worker-src 'self' blob:; frame-ancestors 'self' *.lytx.com lytx-cms-stage-2025.azurewebsites.net lytx-cms-prod-2025.azurewebsites.net; object-src 'none'; base-uri 'self';
default-src
Keyword
—
'self'
default-src
Scheme
—
data:
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Keyword
—
'unsafe-inline'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
https:
connect-src
Keyword
—
'self'
frame-src
Keyword
—
'self'
media-src
Keyword
—
'self'
media-src
Scheme
—
data:
media-src
Scheme
—
blob:
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
frame-ancestors
Keyword
—
'self'
object-src
Keyword
—
'none'
base-uri
Keyword
—
'self'
Content-Security-Policy-Report-Only
No report-only CSP headers found.