Open
Cached
·
just now
12
directives
Content-Security-Policy
Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https: ziftsolutions.ccindex.cn *.eu.ziftsolutions.com *.ziftsolutions.com *.eu.ziftone.com *.google-analytics.com *.wistia.com *.wistia.net *.eu.unifyr.com blob:; img-src 'self' https: ziftsolutions.ccindex.cn *.eu.ziftsolutions.com s3.amazonaws.com *.google-analytics.com *.wistia.com *.wistia.net static.zdassets.com *.zendesk.com *.eu.unifyr.com data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: connect-js.stripe.com js.stripe.com *.eu.ziftsolutions.com *.eu.ziftone.com *.getbee.io *.googleapis.com *.google-analytics.com *.zdassets.com *.zendesk.com *.googletagmanager.com *.google.com *.pendo.io browser-update.org static.zdassets.com s3.amazonaws.com *.zopim.com *.churnzero.net *.marketo.com *.wistia.com *.wistia.net *.eu.unifyr.com data:; connect-src 'self' https: wss: checkout.stripe.com nexus-websocket-a.intercom.io grid.meya.ai ziftsolutions.ccindex.cn *.eu.ziftsolutions.com *.eu.ziftone.com *.eu.zift123.com *.zendesk.com widget-mediator.zopim.com *.getbee.io *.google-analytics.com *.wistia.com *.wistia.net *.litix.io *.eu.unifyr.com data:; style-src 'self' 'unsafe-inline' blob: https: *.wistia.com *.wistia.net sha256-0hAheEzaMe6uXIKV4EehS9pu1am1lj/KnnzrOYqckXk= static.zdassets.com *.zendesk.com; font-src 'self' https: data: *.wistia.com *.wistia.net static.zdassets.com *.zendesk.com; media-src 'self' https: ziftsolutions.ccindex.cn *.eu.ziftsolutions.com *.eu.zift123.com *.eu.ziftone.com *.looker.com *.eu.ziftmarcom.com *.wistia.com *.wistia.net *.eu.unifyr.com blob: data:; object-src 'self' https: *.eu.ziftsolutions.com *.eu.zift123.com *.eu.ziftone.com *.looker.com *.eu.ziftmarcom.com *.eu.unifyr.com; frame-src 'self' https: connect-js.stripe.com js.stripe.com checkout.stripe.com ziftsolutions.ccindex.cn *.ziftsolutions.com *.eu.ziftsolutions.com *.eu.zift123.com *.eu.ziftone.com *.looker.com *.eu.ziftmarcom.com *.getbee.io *.getbee.com *.eu.unifyr.com; frame-ancestors 'self' https: ziftsolutions.ccindex.cn *.ziftsolutions.com *.eu.ziftsolutions.com *.eu.zift123.com *.eu.ziftone.com *.looker.com *.eu.ziftmarcom.com transform.cisco.com *.lookbookhq.com *.pathfactory.com *.eu.unifyr.com; worker-src 'self' blob:;
upgrade-insecure-requests
Source
—
(no sources)
default-src
Keyword
—
'self'
default-src
Scheme
—
https:
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Scheme
—
blob:
img-src
Keyword
—
'self'
img-src
Scheme
—
https:
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Scheme
—
https:
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Scheme
—
data:
connect-src
Keyword
—
'self'
connect-src
Scheme
—
https:
connect-src
Scheme
—
wss:
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Scheme
—
data:
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Scheme
—
blob:
style-src
Scheme
—
https:
style-src
Host
—
font-src
Keyword
—
'self'
font-src
Scheme
—
https:
font-src
Scheme
—
data:
media-src
Keyword
—
'self'
media-src
Scheme
—
https:
media-src
Host
—
media-src
Host
—
media-src
Host
—
media-src
Host
—
media-src
Host
—
media-src
Scheme
—
blob:
media-src
Scheme
—
data:
object-src
Keyword
—
'self'
object-src
Scheme
—
https:
object-src
Host
—
object-src
Host
—
object-src
Host
—
object-src
Host
—
frame-src
Keyword
—
'self'
frame-src
Scheme
—
https:
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-src
Host
—
frame-ancestors
Keyword
—
'self'
frame-ancestors
Scheme
—
https:
frame-ancestors
Host
—
frame-ancestors
Host
—
frame-ancestors
Host
—
frame-ancestors
Host
—
frame-ancestors
Host
—
frame-ancestors
Host
—
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.