Open
Cached
·
just now
7
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://*.hotjar.com https://fonts.googleapis.com/ http://cdnjs.cloudflare.com/ https://cdnjs.cloudflare.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/ https://assets.cookieconfirm.com/ https://storage.cookieconfirm.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://stats.slik.nl https://slik.containers.piwik.pro/ https://cdn.heapanalytics.com/ https://cdn.matomo.cloud/ https://*.hotjar.com http://cdnjs.cloudflare.com/ https://cdnjs.cloudflare.com/ https://maps.googleapis.com/ https://www.googletagmanager.com/ https://tagmanager.google.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://cdn.leadinfo.net/ https://collector.leadinfo.net/ https://script.adcalls.nl/ https://www.google.com/ https://www.gstatic.com/ https://assets.cookieconfirm.com/ https://storage.cookieconfirm.com/ https://googleads.g.doubleclick.net/; font-src 'self' https://*.hotjar.com https://fonts.gstatic.com/ data: https://assets.cookieconfirm.com/ https://storage.cookieconfirm.com/; img-src 'self' data: https://heapanalytics.com/ https://*.hotjar.com https://ssl.gstatic.com/ https://maps.gstatic.com/ https://*.googleapis.com/ https://*.ggpht.com/ https://www.google-analytics.com/ https://www.google.nl/ https://www.google.com/ https://*.doubleclick.net/ https://collector.leadinfo.net/ https://www.googletagmanager.com/ https://fonts.gstatic.com/ https://assets.cookieconfirm.com/ https://storage.cookieconfirm.com/; connect-src https://*.googlesyndication.com/ https://stats.slik.nl/ https://slik.containers.piwik.pro/ https://slik.piwik.pro/ https://*.auryc.com/ https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://stats.g.doubleclick.net/ https://api.slik.eu/ https://api.adcalls.nl/ https://collector.leadinfo.net/ https://api.leadinfo.com/ https://*.google-analytics.com/ https://www.google.com/ccm/collect https://fonts.gstatic.com/ https://www.googletagmanager.com/ https://assets.cookieconfirm.com/ https://platform.cookieconfirm.com/ https://storage.cookieconfirm.com/; frame-src 'self' https://*.hotjar.com https://www.youtube-nocookie.com https://www.google.com/ https://www.googletagmanager.com/ https://assets.cookieconfirm.com/ https://storage.cookieconfirm.com/;
default-src
Keyword
—
'self'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Scheme
—
blob:
script-src
Host
—
script-src
Host
—
script-src
Host
—
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Host
—
img-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
frame-src
Keyword
—
'self'
Content-Security-Policy-Report-Only
No report-only CSP headers found.