Open
Cached
·
just now
12
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' https://*.wistia.com https://*.wistia.net https://*.crazyegg.com https://*.qualified.com https://*.qualified-preview.com https://vercel.com https://vercel.live https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob: https:; connect-src 'self' https://*.litix.io https://*.wistia.com https://*.wistia.net https://*.algolia.net https://*.crazyegg.com https://ws.zoominfo.com https://*.hsforms.net https://js.hsforms.net http://js.hsforms.net https://*.qualified.com https://*.qualified-preview.com wss://*.qualified.com wss://*.qualified-preview.com https://vercel.live wss://ws-us3.pusher.com https://*.linkedin.com https://*.google.com https://*.doubleclick.net https://*.ads-twitter.com https://*.twitter.com https://t.co https://*.rlcdn.com https://*.company-target.com https: wss:; img-src 'self' data: blob: https:; font-src 'self' data: https://*.wistia.com https://vercel.live https://assets.vercel.com https:; frame-src 'self' https://fast.wistia.com https://fast.wistia.net https://*.hsforms.net https://js.hsforms.net http://js.hsforms.net https://*.qualified.com https://*.qualified-preview.com https://vercel.live https://vercel.com https:; child-src https://*.qualified.com https://*.qualified-preview.com; media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net mediastream: https://*.qualified.com https://*.qualified-preview.com; script-src 'self' https://*.wistia.com https://*.wistia.net https://src.litix.io https://*.crazyegg.com https://js.zi-scripts.com https://jws-assets.zoominfo.com https://*.qualified.com https://*.qualified-preview.com https://go.ripple.com https://vercel.live https://vercel.com https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' blob: https://fast.wistia.com https://*.qualified.com https://*.qualified-preview.com https://vercel.live https://vercel.com https:; object-src 'none'; frame-ancestors https://app.contentful.com https://*.qualified.com https://*.qualified-preview.com https://studio.ripple.com https://studio.ripple.com https://ripplecom-nextjs-git-edge-ripple-com.vercel.app https://*.vercel.app
default-src
Keyword
—
'self'
default-src
Host
—
default-src
Scheme
—
https:
default-src
Scheme
—
data:
default-src
Keyword
—
'unsafe-inline'
default-src
Keyword
—
'unsafe-eval'
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
worker-src
Scheme
—
https:
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Scheme
—
https:
connect-src
Scheme
—
wss:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Scheme
—
https:
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
font-src
Scheme
—
https:
frame-src
Keyword
—
'self'
frame-src
Host
—
frame-src
Scheme
—
https:
child-src
Host
—
media-src
Keyword
—
'self'
media-src
Scheme
—
blob:
media-src
Scheme
—
data:
media-src
Scheme
—
mediastream:
media-src
Host
—
script-src
Keyword
—
'self'
script-src
Host
—
script-src
Scheme
—
https:
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Scheme
—
blob:
style-src
Host
—
style-src
Scheme
—
https:
object-src
Keyword
—
'none'
frame-ancestors
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.