Open
Cached
·
just now
13
directives
Content-Security-Policy
Content-Security-Policy: worker-src 'self' blob:; base-uri 'none'; style-src * 'unsafe-inline'; font-src * data:; frame-src app.pendo.io demo.arcade.software js.stripe.com sentry.io 'self' intercom-sheets.com www.intercom-reporting.com; media-src *; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io browser.sentry-cdn.com sentry.io *.sentry.io s1.sentry-cdn.com o1.ingest.sentry.io api2.amplitude.com app.pendo.io data.pendo.io reload.getsentry.net t687h3m0nh65.statuspage.io maps.googleapis.com *.intercom.io wss://*.intercom.io *.intercom-messenger.com wss://*.intercom-messenger.com uploads.intercomcdn.com uploads.intercomusercontent.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample' s1.sentry-cdn.com js.sentry-cdn.com browser.sentry-cdn.com statuspage-production.s3.amazonaws.com aui-cdn.atlassian.com connect-cdn.atl-paas.net js.stripe.com 'strict-dynamic' cdn.pendo.io data.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5634074999128064.storage.googleapis.com app.intercom.io widget.intercom.io js.intercomcdn.com; frame-ancestors 'self' *.sentry.io; default-src 'none'; img-src * blob: data:; report-uri https://o1.ingest.sentry.io/api/54785/security/?sentry_key=f724a8a027db45f5b21507e7142ff78e&sentry_release=5cd3604322c76cd08d3700cea1885451b5965bcd
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
base-uri
Keyword
—
'none'
style-src
Host
—
*
style-src
Keyword
—
'unsafe-inline'
font-src
Host
—
*
font-src
Scheme
—
data:
frame-src
Keyword
—
'self'
media-src
Host
—
*
connect-src
Keyword
—
'self'
object-src
Keyword
—
'none'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'report-sample'
script-src
Keyword
—
'strict-dynamic'
frame-ancestors
Keyword
—
'self'
default-src
Keyword
—
'none'
img-src
Host
—
*
img-src
Scheme
—
blob:
img-src
Scheme
—
data:
Content-Security-Policy-Report-Only
No report-only CSP headers found.