Open
Cached
·
just now
9
directives
Content-Security-Policy
Content-Security-Policy: script-src-elem 'self' paytrace.com *.paytrace.com *.gstatic.com *.google.com fpjscdn.net code.jquery.com fpnpmcdn.net stackpath.bootstrapcdn.com cdnjs.cloudflare.com *.fontawesome.com secure.comodo.net 'unsafe-inline'; style-src-elem 'self' stackpath.bootstrapcdn.com use.fontawesome.com fonts.googleapis.com 'unsafe-inline'; img-src 'self' data: blob: ssl.google-analytics.com paytrace.com *.paytrace.com; font-src 'self' data: *.fontawesome.com fonts.gstatic.com; connect-src 'self' paytrace.com *.paytrace.com ssl.google-analytics.com api.fpjs.io *.google.com *.gstatic.com google.com *.fontawesome.com ka-f.fontawesome.com; frame-src 'self' *.google.com *; worker-src 'self' blob:; form-action 'self' paytrace.com *.paytrace.com; report-uri https://ptpayments.report-uri.com/r/t/csp/enforce
script-src-elem
Keyword
—
'self'
script-src-elem
Host
—
script-src-elem
Keyword
—
'unsafe-inline'
style-src-elem
Keyword
—
'self'
style-src-elem
Keyword
—
'unsafe-inline'
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
connect-src
Keyword
—
'self'
frame-src
Keyword
—
'self'
frame-src
Host
—
*
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
form-action
Keyword
—
'self'
Content-Security-Policy-Report-Only
No report-only CSP headers found.