Open
Cached
·
just now
3
directives
Content-Security-Policy
Content-Security-Policy: frame-ancestors 'self' https://uat-market-privatebanking-expat.uk.hsbc; worker-src 'self' blob:; script-src 'self' https://vjs.zencdn.net https://players.brightcove.net http://cdn.appdynamics.com https://cdn.appdynamics.com http://fra-col.eum-appdynamics.com https://fra-col.eum-appdynamics.com https://tags.tiqcdn.com https://collect-eu-central-1.tealiumiq.com 'unsafe-inline'
frame-ancestors
Keyword
—
'self'
frame-ancestors
Host
—
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
script-src
Keyword
—
'self'
script-src
Host
—
script-src
Host
—
script-src
Keyword
—
'unsafe-inline'
Content-Security-Policy-Report-Only
No report-only CSP headers found.