Open
Cached
·
just now
13
directives
Content-Security-Policy
Content-Security-Policy: default-src 'none'; base-uri 'self'; connect-src 'self' data: https://cdn.plyr.io/ wss://*.us2.ninjarmm.com wss://*.rmmservices.net https://*.us2.ninjarmm.com https://*.rmmservices.net https://*.ninjarmm.com https://*.ingest.sentry.io https://vimeo.com https://maps.googleapis.com https://data.eu.pendo.io https://content-5057394946277376.static.eu.pendo.io https://www.recaptcha.net https://addons.mozilla.org; font-src 'self' https://fonts.gstatic.com https://f.vimeocdn.com https://*.ninjarmm.com; form-action 'self' https://*.zendesk.com https://*.ninjaone.com https://*.accelo.com https://*.officeapps.live.com https://*.office.microsoft.com; frame-ancestors 'self'; frame-src 'self' https://player.vimeo.com https://vimeo.com/ https://secureforms.ninjarmm.com https://secureforms.us2.ninjarmm.com https://secureforms.rmmservices.net https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ ninjarmm: https://play.google.com https://*.officeapps.live.com https://*.office.microsoft.com https://us2-ninja-attachments.s3.us-east-2.amazonaws.com https://*.ninjarmm.com https://account.google.com https://enterprise.google.com; img-src 'self' data: blob: https://us2-ninja-attachments.s3.us-east-2.amazonaws.com https://i.vimeocdn.com https://chart.googleapis.com https://resources.ninjarmm.com https://ninjauploads.ninjarmm.com/ https://ninjauploads.s3.amazonaws.com https://*.cdn.office.net https://*.mzstatic.com https://*.googleusercontent.com https://*.ggpht.com https://*.googleapis.com https://maps.gstatic.com https://data.eu.pendo.io https://content-5057394946277376.static.eu.pendo.io; media-src 'self' https://*.ninjarmm.com https://cdn.plyr.io/ https://*.ci.vimeows.com https://*.vimeocdn.com https://live-api.cloud.vimeo.com/; object-src 'self' https://*.vimeocdn.com; script-src 'self' https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://apis.google.com https://*.vimeocdn.com https://fresnel.vimeocdn.com https://maps.googleapis.com https://cdn.eu.pendo.io https://data.eu.pendo.io https://content-5057394946277376.static.eu.pendo.io; style-src 'self' 'unsafe-inline' https://apis.google.com https://fonts.googleapis.com https://fresnel.vimeocdn.com https://content-5057394946277376.static.eu.pendo.io; worker-src 'self' blob:;
default-src
Keyword
—
'none'
base-uri
Keyword
—
'self'
connect-src
Keyword
—
'self'
connect-src
Scheme
—
data:
connect-src
Host
—
connect-src
Host
—
font-src
Keyword
—
'self'
form-action
Keyword
—
'self'
frame-ancestors
Keyword
—
'self'
frame-src
Keyword
—
'self'
frame-src
Host
—
frame-src
Scheme
—
ninjarmm:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Host
—
media-src
Keyword
—
'self'
media-src
Host
—
object-src
Keyword
—
'self'
script-src
Keyword
—
'self'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.