Open
Cached
·
just now
4
directives
Content-Security-Policy
Content-Security-Policy: connect-src 'self' data: wss://* sendpulse.com *.sendpulse.com sendpulse.ua *.sendpulse.ua sendpulse.fr *.sendpulse.fr sendpulse.kz *.sendpulse.kz *.google.com *.doubleclick.net *.facebook.com *.facebook.net *.fbcdn.net *.fbsbx.com *.twitter.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googlesyndication.com *.gstatic.com *.bootstrapcdn.com *.supportsrc.com *.instagram.com *.cdninstagram.com *.cookiebot.com *.clarity.ms *.spcdn.org *.partnersrc.com cdn.jsdelivr.net unpkg.com *.disqus.com *.disquscdn.com *.bing.com *.bing.net *.newrelic.com *.nr-data.net afarkas.github.io *.rawgit.com tiktok.com *.tiktok.com *.capterra.com *.crisp.chat; script-src 'self' 'unsafe-inline' 'unsafe-eval' sendpulse.com *.sendpulse.com sendpulse.ua *.sendpulse.ua sendpulse.fr *.sendpulse.fr sendpulse.kz *.sendpulse.kz *.google.com *.doubleclick.net *.facebook.com *.facebook.net *.fbcdn.net *.fbsbx.com *.cloudflare.com *.twitter.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.googlesyndication.com *.gstatic.com *.bootstrapcdn.com *.supportsrc.com *.instagram.com *.cdninstagram.com *.cookiebot.com *.clarity.ms *.spcdn.org *.partnersrc.com cdn.jsdelivr.net unpkg.com *.disqus.com *.disquscdn.com *.jquery.com getk2.org *.tinymce.com *.bing.com *.bing.net *.newrelic.com *.nr-data.net afarkas.github.io *.rawgit.com tiktok.com *.tiktok.com *.capterra.com *.crisp.chat; frame-ancestors 'self' sendpulse.com *.sendpulse.com sendpulse.ua *.sendpulse.ua sendpulse.fr *.sendpulse.fr sendpulse.kz *.sendpulse.kz sendpulse.ua *.sendpulse.ua *.crisp.chat; worker-src 'self' blob:;
connect-src
Keyword
—
'self'
connect-src
Scheme
—
data:
connect-src
Host
—
wss://*
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
frame-ancestors
Keyword
—
'self'
frame-ancestors
Host
—
frame-ancestors
Host
—
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.