Open
Cached
·
just now
14
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self'; child-src *.hsforms.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' admincontrol.statuspage.io www.google.com/recaptcha/ *.doubleclick.net www.googletagmanager.com 7052064.fs1.hubspotusercontent-na1.net 25334189-admincontrol-staging-2024.hs-sites-eu1.com js-eu1.hubspot.com play.hubspotvideo.com forms-eu1.hsforms.com; img-src 'self' data: admincontrol.com c.bing.com c.clarity.ms bat.bing.com px.ads.linkedin.com 7052064.fs1.hubspotusercontent-na1.net 25334189-admincontrol-staging-2024.hs-sites-eu1.com static.hsappstatic.net track-eu1.hubspot.com forms-eu1.hsforms.com perf-eu1.hsforms.com 7052064.fs1.hubspotusercontent-na1.net 25334189.fs1.hubspotusercontent-eu1.net cdn.cookielaw.org; media-src 'self' admincontrol.com 7052064.fs1.hubspotusercontent-na1.net 25334189-admincontrol-staging-2024.hs-sites-eu1.com 25334189.fs1.hubspotusercontent-eu1.net; object-src 'none'; script-src 'self' 'unsafe-eval' www.googletagmanager.com 'strict-dynamic' 'nonce-L97R3b5JifdS3x9GnMcqmA=='; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.cookielaw.org js-eu1.hubspot.com; base-uri 'self'; connect-src 'self' j.clarity.ms n.clarity.ms px.ads.linkedin.com api.puzzel.com js-eu1.hubspot.com app-eu1.hubspot.com cta-eu1.hubspot.com track-eu1.hubspot.com js-eu1.hs-banner.com js-eu1.hscollectedforms.net forms-eu1.hscollectedforms.net perf-eu1.hsforms.com forms-eu1.hsforms.com *.google-analytics.com adservice.google.com www.google.com/pagead/ cdn.cookielaw.org snowplow-test.visma.com privacyportal-eu.onetrust.com; script-src-elem 'self' 'unsafe-inline' track.adform.net s2.adform.net js-eu1.hs-banner.com js-eu1.hs-analytics.net js-eu1.hscollectedforms.net js-eu1.hubspot.com www.clarity.ms snap.licdn.com bat.bing.com euwa.puzzel.com *.googletagmanager.com *.doubleclick.net storage.googleapis.com/snowplow-cto-office-tracker-bucket/ cdn.cookielaw.org www.google.com/recaptcha/ www.gstatic.com admincontrol.statuspage.io; style-src-elem 'self' 'unsafe-inline' cdn.cookielaw.org; upgrade-insecure-requests
default-src
Keyword
—
'self'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
frame-src
Keyword
—
'self'
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
media-src
Keyword
—
'self'
object-src
Keyword
—
'none'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Keyword
—
'strict-dynamic'
script-src
Nonce
—
'nonce-L97R3b5JifdS3x9GnMcqmA=='
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
base-uri
Keyword
—
'self'
connect-src
Keyword
—
'self'
script-src-elem
Keyword
—
'self'
script-src-elem
Keyword
—
'unsafe-inline'
script-src-elem
Host
—
style-src-elem
Keyword
—
'self'
style-src-elem
Keyword
—
'unsafe-inline'
upgrade-insecure-requests
Source
—
(no sources)
Content-Security-Policy-Report-Only
No report-only CSP headers found.