Open
Cached
·
just now
2
directives
Content-Security-Policy
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://media.twiliocdn.com https://d1gg1zl1g72y96.cloudfront.net https://cdnjs.cloudflare.com https://du7aon534iz4j.cloudfront.net https://s3.amazonaws.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io https://*.adroll.com https://snap.licdn.com https://px.ads.linkedin.com https://bam.nr-data.net https://*.spectrumemp.com https://code.highcharts.com https://*.trychameleon.com/ https://*.heapanalytics.com https://*.getbee.io https://auth.getbee.io https://*.newrelic.com; object-src 'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Host
—
script-src
Host
—
object-src
Keyword
—
'self'
Content-Security-Policy-Report-Only
No report-only CSP headers found.