Open
Cached
·
just now
4
directives
Content-Security-Policy
Content-Security-Policy: script-src 'nonce-6d9bc51dbcdc7225927e698cbec42b42' 'unsafe-inline' 'self' blob: 'strict-dynamic' assets.screensteps.com/* static.ada.support static.ada.support/* portal.pendo.io *.pendo.io cdn.pendo.io/* instructure.github.io api.gitbook.com embed.app.guidde.com *.guidde.com apps.instructure.com apps-qa.instructure.com drive.google.com *.instructuremedia.com cdn.cookielaw.org *.cookielaw.org *.googletagmanager.com *.google-analytics.com meet.google.com localhost:3000/* community-roz.vercel.app/* tools.academicbenchmarks.com *.canvaslms.com *.instructure.ai instructure.ai/* developers.panopto.com embed-cdn.gettyimages.com s.imgur.com platform.instagram.com platform.twitter.com cdn.syndication.twimg.com instagram.com/* *.instagram.com/* google.com 'wasm-unsafe-eval' https://developers.panopto.com https://embed-cdn.gettyimages.com https://s.imgur.com https://platform.instagram.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com/embed.js https://www.google.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' drive.google.com *.instructure.com *.canvaslms.com localhost:3000/* community-roz.vercel.app/* static.ada.support static.ada.support/* portal.pendo.io *.pendo.io cdn.pendo.io/* instructure.github.io api.gitbook.com embed.app.guidde.com *.guidde.com apps.instructure.com apps-qa.instructure.com *.instructuremedia.com cdn.cookielaw.org *.cookielaw.org instructure.vanillacommunities.com community.canvaslms.com tools.academicbenchmarks.com *.canvas.net *.instructure.ai instructure.ai/* developers.panopto.com embed-cdn.gettyimages.com s.imgur.com platform.instagram.com platform.twitter.com cdn.syndication.twimg.com instagram.com/* *.instagram.com/* google.com canvas.usuhs.edu
script-src
Nonce
—
'nonce-6d9bc51dbcdc7225927e698cbec42b42'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'self'
script-src
Scheme
—
blob:
script-src
Keyword
—
'strict-dynamic'
script-src
Host
—
script-src
Keyword
—
'wasm-unsafe-eval'
object-src
Keyword
—
'none'
base-uri
Keyword
—
'self'
frame-ancestors
Keyword
—
'self'
frame-ancestors
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.