Cached · just now
11 directives

Content-Security-Policy

No enforced CSP headers found.

Content-Security-Policy-Report-Only

default-src Keyword 'none'
script-src Keyword 'self'
script-src Keyword 'unsafe-inline'
script-src Keyword 'report-sample'
script-src Nonce 'nonce-KavXSyUamHUJ0heYRt5ybg=='
img-src Scheme blob:
img-src Scheme data:
img-src Host *
style-src Keyword 'unsafe-inline'
style-src Host *
frame-ancestors Keyword 'none'
font-src Keyword 'self'
font-src Scheme data:
media-src Host *
worker-src Keyword 'none'
base-uri Keyword 'none'
connect-src Keyword 'self'
object-src Keyword 'none'