Open
Cached
·
just now
5
directives
Content-Security-Policy
Content-Security-Policy: block-all-mixed-content; font-src img.ui-portal.de; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' img.ui-portal.de js.ui-portal.de s.uicdn.com uim.tifbs.net https://dl.web.de https://plus.web.de; style-src 'self' 'unsafe-inline' js.ui-portal.de s.uicdn.com
block-all-mixed-content
Source
—
(no sources)
frame-ancestors
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
Content-Security-Policy-Report-Only
No report-only CSP headers found.