Open
Cached
·
just now
7
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' https://fonts.gstatic.com google.com.br www.google.com.br;script-src 'unsafe-inline' 'unsafe-eval' d2c9xx7hhelyow.cloudfront.net webedit.syncedtool.com https://www.google-analytics.com https://wopi.syncedtool.com blob: https://*.cdn.office.net http://*.cdn.office.net analytics.google.com https://script.crazyegg.com https://www.googleadservices.com web-preview.syncedtool.ca https://browser.sentry-cdn.com 'wasm-unsafe-eval' https://analytics.google.com https://www.googletagmanager.com googletagmanager.com www.google-analytics.com 'self' *.google-analytics.com;style-src 'unsafe-inline' https://wopi.syncedtool.com https://*.cdn.office.net web-preview.syncedtool.ca 'self' http://*.cdn.office.net d2c9xx7hhelyow.cloudfront.net webedit.syncedtool.com https://fonts.googleapis.com;img-src https://*.g.doubleclick.net https://www.google-analytics.com googletagmanager.com https://wopi.syncedtool.com www.google-analytics.com blob: https://*.cdn.office.net web-preview.syncedtool.ca 'self' http://*.cdn.office.net data: https://*.public.onecdn.static.microsoft analytics.google.com d2c9xx7hhelyow.cloudfront.net https://www.googletagmanager.com webedit.syncedtool.com https://*.df.onecdn.static.microsoft google.com.br www.google.com.br;font-src https://wopi.syncedtool.com https://fonts.gstatic.com blob: https://*.cdn.office.net web-preview.syncedtool.ca 'self' http://*.cdn.office.net data: d2c9xx7hhelyow.cloudfront.net webedit.syncedtool.com;connect-src wss://web-preview.syncedtool.ca sentry.anchorworks.com https://www.google-analytics.com https://wopi.syncedtool.com analytics.google.com https://pws-collect.pdftron.com/ https://script.crazyegg.com https://*.g.doubleclick.net https://*.analytics.google.com https://www.pdftron.com/ https://analytics.google.com https://www.googletagmanager.com wss://webedit.syncedtool.com https://web-preview.syncedtool.ca googletagmanager.com https://proxy.pdftron.com/ www.google-analytics.com 'self' *.google-analytics.com;frame-src https://*.g.doubleclick.net https://*.officeapps.live.com https://wopi.syncedtool.com blob: web-preview.syncedtool.ca 'self' https://www.googletagmanager.com webedit.syncedtool.com https://td.doubleclick.net;
default-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Scheme
—
blob:
script-src
Keyword
—
'wasm-unsafe-eval'
script-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Keyword
—
'self'
img-src
Scheme
—
blob:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Host
—
img-src
Host
—
font-src
Scheme
—
blob:
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
connect-src
Keyword
—
'self'
frame-src
Scheme
—
blob:
frame-src
Keyword
—
'self'
Content-Security-Policy-Report-Only
No report-only CSP headers found.