18 directives

Content-Security-Policy

default-src Keyword —
'self'
font-src Keyword —
'self'
frame-src Host —
*
frame-src Scheme —
data:
style-src Keyword —
'unsafe-inline'
style-src Keyword —
'self'
script-src Keyword —
'unsafe-eval'
script-src Keyword —
'unsafe-inline'
script-src Keyword —
'self'
script-src Host —
script-src Host —
connect-src Keyword —
'self'
connect-src Host —
img-src Host —
*
img-src Scheme —
data:

Content-Security-Policy-Report-Only

default-src Keyword —
'self'
font-src Keyword —
'self'
font-src Scheme —
data:
frame-src Keyword —
'self'
frame-src Scheme —
data:
style-src Keyword —
'self'
style-src Keyword —
'unsafe-inline'
script-src Keyword —
'self'
script-src Keyword —
'unsafe-eval'
script-src Keyword —
'unsafe-inline'
script-src Host —
script-src Host —
connect-src Keyword —
'self'
connect-src Host —
img-src Host —
*
img-src Scheme —
data:
img-src Scheme —
blob:
img-src Scheme —
cid:
worker-src Keyword —
'self'
worker-src Scheme —
blob:
frame-ancestors Keyword —
'self'
form-action Keyword —
'self'
base-uri Keyword —
'self'