1 directives

Content-Security-Policy

default-src Host *
default-src Scheme data:
default-src Scheme blob:
default-src Keyword 'unsafe-inline'
default-src Keyword 'unsafe-eval'

Content-Security-Policy-Report-Only

No report-only CSP headers found.