Open
Cached
·
just now
8
directives
Content-Security-Policy
Content-Security-Policy: default-src blob: 'self' https://api.twilio.com *.freshworks.com *.freshworksapi.com *.freshid.io *.freshcaller.com in-freshcaller-attachments.s3.ap-south-1.amazonaws.com; connect-src blob: 'self' *.freshdev.io *.freshworksapi.com *.freshworks.com *.freshpo.com *.freshid.io *.freshcaller.com *.freshreports.com wss://*.freshcaller.com wss://*.freshpo.com wss://*.freshworksapi.com wss://*.twilio.com wss://api.appcues.net wss://pubsub.rtschannel.com wss://realtime.getbeamer.com https://browser.sentry-cdn.com https://realtime.getbeamer.com https://static.getbeamer.com https://backend.getbeamer.com https://app.getbeamer.com https://media.twiliocdn.com/sdk/js/client/ https://eventgw.twilio.com https://ers.twilio.com https://api.appcues.net https://headway-widget.net https://cdn.headwayapp.com https://pubsub.rtschannel.com https://freshworkstest.asknice.ly https://freshworks.asknice.ly https://static.asknice.ly https://heapanalytics.com *.commandbar.com https://fast.appcues.com https://sdk.twilio.com https://*.twilio.com cloudflareinsights.com in-fone-frontend.s3.ap-south-1.amazonaws.com https://in-freshcallerwidget.s3.ap-south-1.amazonaws.com https://in-freshcaller-sdk.s3.ap-south-1.amazonaws.com https://in-freshcallerautofaq.s3.ap-south-1.amazonaws.com; font-src data: *.freshcaller.com in-fone-frontend.s3.ap-south-1.amazonaws.com https://in-freshcallerwidget.s3.ap-south-1.amazonaws.com; frame-src 'self' *.freshreports.com *.freshcaller.com *.freshchat.com *.myfreshworks.dev *.myfreshworks.com *.freshcloud.io *.freshworks.com *.freshworksapi.com *.freshid.io *.cloudfront.net https://realtime.getbeamer.com https://static.getbeamer.com https://backend.getbeamer.com https://app.getbeamer.com https://www.youtube.com https://www.google.com https://freshcaller.chargebee.com https://freshworkstest.asknice.ly https://fast.wistia.net; img-src data: blob: 'self' http: https:; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' https://polyfill.io/v3/polyfill.js https://browser.sentry-cdn.com https://fast.appcues.com https://js.chargebee.com/v1/chargebee.js https://cdn.heapanalytics.com/js/ https://inlinemanual.com/embed/ https://media.twiliocdn.com/sdk/js/client/ https://freshworkstest.asknice.ly https://freshworks.asknice.ly https://static.asknice.ly https://realtime.getbeamer.com https://static.getbeamer.com https://app.getbeamer.com https://*.freshworks.com https://*.freshdev.io https://*.freshchat.com *.freshworksapi.com *.cloudfront.net *.freshcloud.io *.freshcaller.com https://cdn.surveyserv.com/widget.min.js *.commandbar.com https://freshcaller-widget-loader.s3.us-east-1.amazonaws.com https://euc-freshcaller-widget-loader.s3.eu-central-1.amazonaws.com https://au-freshcaller-widget-loader.s3.ap-southeast-2.amazonaws.com https://in-freshcaller-widget-loader.s3.ap-south-1.amazonaws.com ajax.cloudflare.com static.cloudflareinsights.com in-freshcallerautofaq.s3.ap-south-1.amazonaws.com https://in-freshcaller-sdk.s3.ap-south-1.amazonaws.com https://in-fone-frontend.s3.ap-south-1.amazonaws.com https://in-freshcallerautofaq.s3.ap-south-1.amazonaws.com https://in-freshcallerwidget.s3.ap-south-1.amazonaws.com https://in-freshcaller-widget-loader.s3.ap-south-1.amazonaws.com; style-src 'unsafe-inline' https://fast.appcues.com https://app.getbeamer.com https://freshworkstest.asknice.ly https://freshworks.asknice.ly https://static.asknice.ly *.freshcaller.com *.freshworks.com *.freshchat.com *.myfreshworks.dev *.myfreshworks.com *.commandbar.com in-freshcallerwidget.s3.ap-south-1.amazonaws.com https://in-fone-frontend.s3.ap-south-1.amazonaws.com https://in-freshcaller-sdk.s3.ap-south-1.amazonaws.com https://in-freshcallerautofaq.s3.ap-south-1.amazonaws.com; worker-src blob: 'self' 'unsafe-inline'
default-src
Scheme
—
blob:
default-src
Keyword
—
'self'
default-src
Host
—
connect-src
Scheme
—
blob:
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
font-src
Scheme
—
data:
frame-src
Keyword
—
'self'
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Keyword
—
'self'
img-src
Scheme
—
http:
img-src
Scheme
—
https:
script-src
Scheme
—
blob:
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
style-src
Keyword
—
'unsafe-inline'
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
worker-src
Scheme
—
blob:
worker-src
Keyword
—
'self'
worker-src
Keyword
—
'unsafe-inline'
Content-Security-Policy-Report-Only
No report-only CSP headers found.