Open
Cached
·
just now
6
directives
Content-Security-Policy
Content-Security-Policy: script-src 'self' http://localhost:5005/ 'unsafe-inline' 'unsafe-eval' blob: https://bam-cell.nr-data.net/ https://*.storylane.io https://*.blueconic.net/ https://*.clarity.ms/ https://*.fontawesome.com/ https://*.force.com/ https://*.hotjar.com/ https://*.pearson.com/ https://*.salesforce.com/ https://*.salesforceliveagent.com/ https://*.site.com/ https://*.visualwebsiteoptimizer.com/ https://analytics.tiktok.com/ https://analytics.twitter.com/ https://app.vwo.com/ https://applepay.cdn-apple.com/ https://b-code.liadm.com/ https://bam.nr-data.net/ https://bat.bing.com/ https://bid.g.doubleclick.net/ https://bwq276ac.micpn.com/ https://cdn.cookielaw.org/ https://cdn.jsdelivr.net/ https://cdn.pdst.fm/ https://cdn.sift.com/ https://cdn.siftscience.com/ https://releases.jquery.com/git/jquery-3.x-git.min.js https://code.jquery.com/ https://pearson.my.site.com/ https://pearson--projects.sandbox.my.site.com/ https://connect.facebook.net/ https://googleads.g.doubleclick.net/ https://js-agent.newrelic.com/ https://js.adsrvr.org/ https://js.zi-scripts.com/ https://optimize.google.com/ https://pearson.mcxplatform.de/surveys/ https://pi.pardot.com/ https://s.go-mpulse.net/boomerang/ https://s.swiftypecdn.com/ https://sandbox.zip.co/ https://sc-static.net/ https://script.hotjar.com/ https://secureacceptance.cybersource.com/ https://service.force.com/ https://snap.licdn.com/ https://static.ads-twitter.com/ https://static.hotjar.com/ https://static.lightning.force.com/ https://tags.clickagy.com/ https://testsecureacceptance.cybersource.com/ https://vars.hotjar.com/ https://ws.zoominfo.com/ https://www.clarity.ms/ https://www.google-analytics.com/ https://www.google.com/ https://www.googleadservices.com/ https://www.googleoptimize.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://www.paypal.com/ https://www.paypalobjects.com/ https://www.sandbox.paypal.com/ https://*.launchdarkly.com/ https://*.siteintercept.gualtrics.com https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.13/js/utils.min.js https://www.redditstatic.com/ads/pix https://a.quora.com/qevents.js https://utt.impactcdn.com/A4654163-9367-4793-b66b-e9ba407d7eca1.js https://tr.snapchat.com/ https://t.co/1/i/adsct https://tag.rmp.rakuten.com/ https://*.qualtrics.com p11.techlab-cdn.com;img-src 'self' http://localhost:5005/ data: https://app-pages.storylane.io https://pearson.esaas.inmoment.eu/ https://*.fontawesome.com/ https://*.pearson.com/ https://*.salesforce.com/ https://*.salesforceliveagent.com/ https://*.visualwebsiteoptimizer.com/ https://*.fls.doubleclick.net/ https://analytics.twitter.com/ https://app.vwo.com/ https://bat.bing.com/ https://bwq276ac.micpn.com/ https://c.bing.com/ https://pearson.my.site.com/ https://c.clarity.ms/ https://cc.swiftype.com/ https://cdn.cookielaw.org/logos/ https://chart.googleapis.com/ https://googleads.g.doubleclick.net/ https://hexagon-analytics.com/ https://i.liadm.com/ https://i6.liadm.com/ https://optimize.google.com https://p.adsymptotic.com/ https://pearson--testbau.sandbox.my.site.com/ https://pearson--testbau25.sandbox.my.site.com/ https://pearson.blueconic.net/ https://pearson.mcxplatform.de/ https://pearsonassessments.com/ https://pi.pardot.com/ https://ptgmedia.pearsoncmg.com/ https://px.ads.linkedin.com/ https://recommendationengine.googleapis.com/ https://t.co/i/ https://t.paypal.com/ https://testbau-pearsoncommunity.cs109.force.com/ https://tr.snapchat.com/ https://wingify-assets.s3.amazonaws.com/ https://www.facebook.com/ https://www.google-analytics.com https://www.google.co.uk/ https://www.google.com.ua/pagead/ https://www.google.com/ https://www.google.ie/ https://www.googletagmanager.com/ https://www.linkedin.com/ https://www.pearson.com/ https://www.pearsonassessments.com/ https://q.quora.com/ https://t.co/1/i/adsct https://img.youtube.com/ https://www.paypalobjects.com/ https://*.qualtrics.com https://static.studychannel-dev.pearsondev.tech https://static.studychannel.pearsonprd.tech https://cdn.clutchprep.com d13hgauxz9vfrb.cloudfront.net https://m.media-amazon.com/;style-src 'self' http://localhost:5005/ 'unsafe-inline' https://cdn.jsdelivr.net/ https://*.fontawesome.com/ https://*.my.salesforce.com/ https://*.pearson.com/ https://*.salesforceliveagent.com/ https://*.visualwebsiteoptimizer.com/ https://*.fls.doubleclick.net/ https://app.vwo.com/ https://b-code.liadm.com/ https://bid.g.doubleclick.net/ https://cdn.cookielaw.org/ https://fonts.googleapis.com/ https://js.adsrvr.org/ https://pearson.my.site.com/ https://pearson--projects.sandbox.my.site.com/ https://optimize.google.com https://pearson--testbau.sandbox.my.site.com/ https://pearson--testbau2.sandbox.my.site.com/ https://pearson--testbau25.sandbox.my.site.com/ https://pearson.blueconic.net/ https://pearson.mcxplatform.de/surveys/KXMPND/Scripts/ https://s.swiftypecdn.com/ https://s3.amazonaws.com/ https://sandbox.zip.co/ https://secureacceptance.cybersource.com/ https://service.force.com/ https://testbau-pearsoncommunity.cs109.force.com/ https://testsecureacceptance.cybersource.com/ https://tr.snapchat.com/ https://vars.hotjar.com/ https://www.google.com/ https://www.pearsonhighered.com/ https://www.sandbox.paypal.com/ https://www.youtube.com/ https://pearson--ukbot.sandbox.my.site.com/;font-src 'self' http://localhost:5005/ data: https://*.fontawesome.com/ https://*.pearson.com/ https://bc-sbx1.pearson.com/ https://fonts.gstatic.com https://k244.pearson.com/ https://pearson.blueconic.net/ https://pearson.my.site.com/ https://www.pearson.com/pcp-hed/assets/webfonts/;frame-src 'self' http://localhost:5005/ https://offers.sheerid.com/ https://pearson--projects.sandbox.my.site.com https://*.storylane.io https://*.fontawesome.com/ https://www.googletagmanager.com/ https://*.my.salesforce.com/ https://*.pearson.com/ https://*.salesforceliveagent.com/ https://*.visualwebsiteoptimizer.com/ https://*.fls.doubleclick.net/ https://app.vwo.com/ https://pearson.my.site.com/ https://b-code.liadm.com/ https://bid.g.doubleclick.net/ https://hemsync.clickagy.com/ https://i.liadm.com/ https://optimize.google.com https://pearson--testbau.sandbox.my.salesforce.com/ https://pearson--testbau.sandbox.my.site.com/ https://pearson--testbau2.sandbox.my.salesforce.com/ https://pearson--testbau25.sandbox.my.salesforce.com/ https://pearson--testbau25.sandbox.my.site.com/ https://pearson.blueconic.net/ https://pearson.mcxplatform.de/ https://sandbox.zip.co/ https://secureacceptance.cybersource.com/ https://service.force.com/ https://td.doubleclick.net/ https://testbau-pearsoncommunity.cs109.force.com/ https://testsecureacceptance.cybersource.com/ https://tr.snapchat.com/ https://vars.hotjar.com/ https://www.facebook.com/ https://www.google.com/ https://www.paypal.com/ https://www.paypalobjects.com/ https://www.sandbox.paypal.com/ https://www.youtube.com/ https://insight.adsrvr.org/ https://pearson.esaas.inmoment.eu/ https://pearson--ukbot.sandbox.my.site.com/ https://*.qualtrics.com;frame-ancestors 'self' http://localhost:5005/;
script-src
Keyword
—
'self'
script-src
Host
—
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Scheme
—
blob:
img-src
Keyword
—
'self'
img-src
Host
—
img-src
Scheme
—
data:
img-src
Host
—
style-src
Keyword
—
'self'
style-src
Host
—
style-src
Keyword
—
'unsafe-inline'
font-src
Keyword
—
'self'
font-src
Host
—
font-src
Scheme
—
data:
frame-src
Keyword
—
'self'
frame-src
Host
—
frame-ancestors
Keyword
—
'self'
frame-ancestors
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.