Open
Cached
·
just now
9
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self'; connect-src 'self' https://next-marketing-pages-mtwpand26a-ew.a.run.app *.veed.dev *.veed.io *.veed.com https://storage.googleapis.com *.amplitude.com ws://localhost:* wss://*.veed.dev wss://*.staging.veed.dev wss://*.veed.io localhost:* https://*.sentry.io/ https://cms.veed.io https://cms.veed.dev https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://rest.ably.io https://*.ably-realtime.com wss://*.ably-realtime.com wss://realtime.ably.io https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal-eu.onetrust.com https://cdn.linkedin.oribi.io https://api.getrewardful.com https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com https://*.intercomcdn.eu https://uploads.intercomusercontent.com https://hooks.zapier.com https://*.algolianet.com https://*.algolia.net https://pagead2.googlesyndication.com https://forms-eu1.hscollectedforms.net https://px.ads.linkedin.com https://dc.ads.linkedin.com https://eu.posthog.com https://api-eu1.hubapi.com https://metrics.hotjar.io https://tracking.g2crowd.com https://click.prod.mplat-ppcprotect.com https://*.cello.so https://eu.i.posthog.com https://js.zi-scripts.com https://tracking-api.production.g2.com https://analytics.tiktok.com https://ws.zoominfo.com https://dx.mountain.com https://px.mountain.com https://gs.mountain.com/gs https://*.redditstatic.com https://forms-eu1.hsforms.com https://google.com/recaptcha https://pixel-config.reddit.com https://conversions-config.reddit.com; font-src 'self' data: https://fonts.gstatic.com https://cdn-public.veed.io https://static-assets.veed.io https://*.intercomcdn.com; img-src 'self' data: blob: * https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.gstatic.com https://optimize.google.com https://veed-assets https://static-assets.veed.io https://cdn-site-assets.veed.io https://assets-global.website-files.com https://storage.googleapis.com/veed-prod-strapi-bucket* https://*.intercomcdn.com https://*.intercom.io https://uploads.intercomusercontent.com https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://*.intercomassets.eu https://*.intercomassets.com https://px.ads.linkedin.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://www.gstatic.com/ https://apis.google.com https://cdn.amplitude.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://www.googleanalytics.com https://www.googleoptimize.com https://optimize.google.com https://www.googleadservices.com https://*.google.com https://r.wdfl.co/rw.js https://snap.licdn.com http://www.youtube.com https://cdn.cookielaw.org https://js.stripe.com https://*.intercom.io https://js.intercomcdn.com http://connect.facebook.net https://static.hsappstatic.net https://static.ads-twitter.com http://js-eu1.hs-scripts.com https://js-eu1.hs-banner.com/ https://js-eu1.hs-analytics.net https://js-eu1.hscollectedforms.net https://eu.posthog.com https://challenges.cloudflare.com https://static.hotjar.com https://js-eu1.hsadspixel.net https://script.hotjar.com https://tracking.g2crowd.com https://bat.bing.com https://client.prod.mplat-ppcprotect.com https://appleid.cdn-apple.com https://*.cello.so https://snap.licdn.com https://eu-assets.i.posthog.com https://analytics.tiktok.com https://js.zi-scripts.com https://ws.zoominfo.com https://dx.mountain.com https://px.mountain.com https://gs.mountain.com/gs https://*.redditstatic.com https://js-eu1.hsforms.net https://*.fs1.hubspotusercontent-eu1.net https://google.com https://recaptcha.net https://cdn-site-assets.veed.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.google.com https://www.googletagmanager.com; frame-src 'self' https://optimize.google.com * blob:; media-src 'self' blob: https://assets-global.website-files.com https://ssl.gstatic.com https://cdn.veed.dev https://cdn.staging.veed.dev https://cdn.veed.io https://cdn-user.veed.dev https://cdn-user.staging.veed.dev https://cdn-user.veed.io https://veed.dev https://staging.veed.dev https://veed.io https://cdn.veed.com https://storage.googleapis.com/veed-prod-strapi-bucket* https://cdn-site-assets.veed.io https://cdn-site-assets.veed.dev localhost:* https://js.intercomcdn.com https://static-assets.veed.io; object-src data:;
default-src
Keyword
—
'self'
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Host
—
*
img-src
Host
—
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Keyword
—
'unsafe-inline'
script-src
Scheme
—
blob:
script-src
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
frame-src
Keyword
—
'self'
frame-src
Host
—
*
frame-src
Scheme
—
blob:
media-src
Keyword
—
'self'
media-src
Scheme
—
blob:
media-src
Host
—
media-src
Host
—
object-src
Scheme
—
data:
Content-Security-Policy-Report-Only
No report-only CSP headers found.