Open
Cached
·
just now
10
directives
Content-Security-Policy
No enforced CSP headers found.
Content-Security-Policy-Report-Only
Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-inline' *.easecentral.com https://*.vidyard.com https://d1au6yj0ycd5kx.cloudfront.net https://d6eityk6fvarl.cloudfront.net https://d6eityk6fvarl.cloudfront.net/* https://web-sdk.aptrinsic.com https://web-sdk.aptrinsic.com/* https://edge.fullstory.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://*.marketo.net https://*.stripe.com https://*.plaid.com https://www.google.com ease-files.s3.amazonaws.com ease-prod.s3.amazonaws.com ease-pdf-forms.s3.amazonaws.com ease-secure.s3.amazonaws.com ease-public.s3.amazonaws.com ease-static.s3.amazonaws.com https://*.connections.unum.com https://*.empoweredbenefits.com https://*.everwellbenefits.com https://*.coloniallife.com https://*.lfgpartner.com https://*.steps2enroll.com https://*.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.ytimg.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.bootstrapcdn.com https://*.bootstrapcdn.com/* https://*.googleusercontent.com https://*.brightcove.net https://*.media.brightcove.net https://*.brightcove.com https://*.media.brightcove.com https://*.zencdn.net https://*.gstatic.com https://d2yyd1h5u9mauk.cloudfront.net https://*.zdassets.com https://*.zdassets.com/* https://trsmrk-tmkapi-prod1.pegacloud.net https://widget-mediator.zopim.com https://widget-mediator.zopim.com/* https://www.chatbase.co/chatbot-iframe/R0p3qtgUgXwrO-4aZ5sIw https://surfly.com https://*.surfly.com; script-src-elem 'self' 'unsafe-inline' *.easecentral.com https://*.vidyard.com https://d1au6yj0ycd5kx.cloudfront.net https://d6eityk6fvarl.cloudfront.net https://d6eityk6fvarl.cloudfront.net/* https://web-sdk.aptrinsic.com https://web-sdk.aptrinsic.com/* https://edge.fullstory.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://*.marketo.net https://*.stripe.com https://*.plaid.com https://www.google.com ease-files.s3.amazonaws.com ease-prod.s3.amazonaws.com ease-pdf-forms.s3.amazonaws.com ease-secure.s3.amazonaws.com ease-public.s3.amazonaws.com ease-static.s3.amazonaws.com https://*.connections.unum.com https://*.empoweredbenefits.com https://*.everwellbenefits.com https://*.coloniallife.com https://*.lfgpartner.com https://*.steps2enroll.com https://*.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.ytimg.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.bootstrapcdn.com https://*.bootstrapcdn.com/* https://*.googleusercontent.com https://*.brightcove.net https://*.media.brightcove.net https://*.brightcove.com https://*.media.brightcove.com https://*.zencdn.net https://*.gstatic.com https://d2yyd1h5u9mauk.cloudfront.net https://*.zdassets.com https://*.zdassets.com/* https://trsmrk-tmkapi-prod1.pegacloud.net https://widget-mediator.zopim.com https://widget-mediator.zopim.com/* https://www.chatbase.co/chatbot-iframe/R0p3qtgUgXwrO-4aZ5sIw https://surfly.com https://*.surfly.com; style-src 'self' 'unsafe-inline' *.easecentral.com https://*.vidyard.com https://d1au6yj0ycd5kx.cloudfront.net https://d6eityk6fvarl.cloudfront.net https://d6eityk6fvarl.cloudfront.net/* https://web-sdk.aptrinsic.com https://web-sdk.aptrinsic.com/* https://edge.fullstory.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://*.marketo.net https://*.stripe.com https://*.plaid.com https://www.google.com ease-files.s3.amazonaws.com ease-prod.s3.amazonaws.com ease-pdf-forms.s3.amazonaws.com ease-secure.s3.amazonaws.com ease-public.s3.amazonaws.com ease-static.s3.amazonaws.com https://*.connections.unum.com https://*.empoweredbenefits.com https://*.everwellbenefits.com https://*.coloniallife.com https://*.lfgpartner.com https://*.steps2enroll.com https://*.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.ytimg.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.bootstrapcdn.com https://*.bootstrapcdn.com/* https://*.googleusercontent.com https://*.brightcove.net https://*.media.brightcove.net https://*.brightcove.com https://*.media.brightcove.com https://*.zencdn.net https://*.gstatic.com https://d2yyd1h5u9mauk.cloudfront.net https://*.zdassets.com https://*.zdassets.com/* https://trsmrk-tmkapi-prod1.pegacloud.net https://widget-mediator.zopim.com https://widget-mediator.zopim.com/* https://www.chatbase.co/chatbot-iframe/R0p3qtgUgXwrO-4aZ5sIw https://surfly.com https://*.surfly.com; img-src 'self' data: blob: *.easecentral.com https://play.vidyard.com https://d1au6yj0ycd5kx.cloudfront.net https://maxcdn.bootstrapcdn.com https://*.googleapis.com https://fonts.gstatic.com https://*.stripe.com https://*.plaid.com https://cdn.plaid.com https://www.google.com data: ease-files.s3.amazonaws.com ease-prod.s3.amazonaws.com ease-pdf-forms.s3.amazonaws.com ease-secure.s3.amazonaws.com ease-public.s3.amazonaws.com ease-static.s3.amazonaws.com https://*.empoweredbenefits.com https://*.everwellbenefits.com https://*.coloniallife.com https://*.lfgpartner.com https://*.steps2enroll.com https://*.connections.unum.com https://*.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.ytimg.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.bootstrapcdn.com https://*.googleusercontent.com https://*.brightcove.net https://*.media.brightcove.net https://*.brightcove.com https://*.media.brightcove.com https://*.zencdn.net https://*.zendesk.com https://*.zendesk.com/* https://*.gstatic.com https://*.ease.com https://*.ease.com/* ease-public.s3.amazonaws.com ease-public.s3.amazonaws.com/* https://d6eityk6fvarl.cloudfront.net https://d6eityk6fvarl.cloudfront.net/* https://surfly.com; connect-src 'self' *.easecentral.com https://*.vidyard.com https://*.mktoresp.com https://*.stripe.com https://*.plaid.com https://www.google.com https://esp.aptrinsic.com https://esp.aptrinsic.co https://esp.aptrinsic.com/* https://esp.aptrinsic.co/* https://web-sdk.aptrinsic.com https://rs.fullstory.com https://edge.fullstory.com https://fonts.googleapis.com https://*.connections.unum.com https://*.empoweredbenefits.com https://*.everwellbenefits.com https://*.coloniallife.com https://*.lfgpartner.com https://*.steps2enroll.com https://*.connections.unum.com https://*.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.ytimg.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.bootstrapcdn.com https://*.googleusercontent.com https://*.brightcove.net https://*.media.brightcove.net https://*.brightcove.com https://*.media.brightcove.com https://*.zencdn.net https://*.gstatic.com https://*.zendesk.com https://*.zopim.com wss://*.zopim.com https://www.chatbase.co/chatbot-iframe/R0p3qtgUgXwrO-4aZ5sIw https://*.zdassets.com https://zendesk-eu.my.sentry.io https://o23982.ingest.sentry.io https://d6eityk6fvarl.cloudfront.net https://d6eityk6fvarl.cloudfront.net/* https://*.marketo.net https://*.marketo.net/* https://*.ease.com https://*.ease.com/* https://surfly.com; frame-ancestors 'self' *.easecentral.com *.ease.com https://*.employeenavigator.com; media-src https://*.zdassets.com https://*.zdassets.com https://surfly.com; child-src https://surfly.com; frame-src 'self' *.easecentral.com https://*.ease.com https://*.nayya.com https://*.vidyard.com https://*.empoweredbenefits.com https://*.everwellbenefits.com https://*.coloniallife.com https://*.lfgpartner.com https://*.steps2enroll.com https://www.wnonesource.com https://*.stripe.com https://*.plaid.com https://www.google.com https://*.connections.unum.com https://*.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.ytimg.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.bootstrapcdn.com https://*.googleusercontent.com https://*.brightcove.net https://*.media.brightcove.net https://*.brightcove.com https://*.media.brightcove.com https://*.zencdn.net https://*.gstatic.com https://surfly.com https://*.chatbase.co; report-uri /csp-report
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src-elem
Keyword
—
'self'
script-src-elem
Keyword
—
'unsafe-inline'
script-src-elem
Host
—
script-src-elem
Host
—
script-src-elem
Host
—
script-src-elem
Host
—
script-src-elem
Host
—
script-src-elem
Host
—
script-src-elem
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Scheme
—
data:
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
frame-ancestors
Keyword
—
'self'
media-src
Host
—
media-src
Host
—
frame-src
Keyword
—
'self'
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
report-uri
Host
—