Open
Cached
·
just now
14
directives
Content-Security-Policy
No enforced CSP headers found.
Content-Security-Policy-Report-Only
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' https://cdn.wetransfer.com 'nonce-4128aa5a-cc8c-47af-a8e4-dfa73acd522d' 'sha256-4hRuHNFOqK6I2GgL9T5HwGETI5qu8rNsCs1G/d5PPBk=' 'sha256-ZES/2z0cbUZYbmG6sgCzU453zUUUmmotyFwnZ7G8WaY=' 'sha256-NvzBT9rJnGEWMlHqwvXg6OHIegGdn5PsAP3YZ7RzmgE=' 'sha256-f/k++c7mXW35G13Y7R6PzP/vWuqKqAVF3ph0iisXZX0=' 'sha256-ws2EcVAq3u/bDFH4r+3pcRahQuX/HRlekAqTc6GnDWI=' 'sha256-Bd1r8fyU+a98FYknUDsYXLvQwPaw2Trg0SDQ0pT+cWY=' 'sha256-scue6/wrhAUP1T4+YMVMvhoJLHziYmv37BcJuN11XwM=' 'sha256-tUHp97FxQMwOfUs1KAvNxJvnntHhr1ukXQBr1sZ/vKA=' 'sha256-L8m6ygYvYlmr5M0s5E/t19ls7FHY3o5G8LFtd8UqytA=' 'sha256-cWB6LeQeTPFHH9QCg8VrP0sPJfqqdgDupHwitbxysNo=' 'sha256-1+tdasFuSYydtmIV8i2k8bpXyDasrvpd0i6vXt5p8xo=' 'sha256-pe6hK6/pXs86IrWP5sSJTjHKKgBqZoSjkbrMZLM0MQg=' 'wasm-unsafe-eval' blob: https://nolan.wetransfer.net https://nolan.wetransferbeta.net https://nolan.wetransferalpha.net https://accounts.google.com https://tagging.wetransfer.com https://www.googletagmanager.com https://bat.bing.com https://cdn.cookielaw.org https://js.stripe.com https://script.hotjar.com https://static.hotjar.com https://*.clarity.ms https://*.rokt.com https://*.hcaptcha.com https://*.typeform.com https://connect.facebook.net https://s.pinimg.com https://ct.pinterest.com https://*.brandmetrics.com https://*.amazon-adsystem.com https://*.crwdcntrl.net https://js.adsrvr.org https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://*.zendesk.com https://static.zdassets.com https://ekr.zdassets.com https://privacy.wetransfer.com https://*.doubleverify.com https://aam.a47b.com https://cdn.xpln.tech; style-src 'self' https://cdn.wetransfer.com 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com https://*.typeform.com; style-src-elem 'self' https://cdn.wetransfer.com 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com https://*.typeform.com https://www.gstatic.com https://translate.googleapis.com; font-src 'self' https://cdn.wetransfer.com data: https://fonts.gstatic.com; img-src 'self' data: blob: https://*.zendesk.com https://*.zdassets.com https://*.wetransfer.com https://*.wetransfer.net https://*.wetransferbeta.net https://*.wetransferbeta.com https://*.hotjar.com https://bat.bing.com https://bat.bing.net https://cdn.cookielaw.org https://*.googleusercontent.com https://accounts.google.com https://www.googletagmanager.com https://*.amazonaws.com https://www.facebook.com https://connect.facebook.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://adservice.google.com https://www.google.com https://google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.doubleverify.com https://di.rlcdn.com https://*.brandmetrics.com https://*.clarity.ms https://data.ad-score.com https://*.adform.net https://fonts.gstatic.com https://ep1.adtrafficquality.google https://*.flashtalking.com https://*.adsafeprotected.com https://tracker.samplicio.us https://track.activemetering.com https://tag.researchnow.com https://gdesk.hit.gemius.pl https://secure.insightexpressai.com https://*.innovid.com https://secure-gl.imrworldwide.com https://translate.google.com; connect-src 'self' blob: https://wetransferbeta.com https://*.wetransferbeta.net https://*.wetransferbeta.com https://wetransfer.com https://*.wetransfer.net https://*.wetransfer.com https://*.datadoghq.eu https://browser-intake-datadoghq.eu https://*.browser-intake-datadoghq.eu https://*.hcaptcha.com https://*.stripe.com https://*.zendesk.com wss://*.zendesk.com https://*.zdassets.com https://app.launchdarkly.com wss://*.hotjar.com https://*.hotjar.io https://bat.bing.com https://bat.bing.net https://*.clarity.ms https://cdn.cookielaw.org https://*.onetrust.com https://fonts.googleapis.com https://accounts.google.com https://www.google.com https://www.googletagmanager.com https://*.rokt.com https://*.adzerk.net https://*.googlesyndication.com https://*.googleusercontent.com https://*.typeform.com https://*.amazonaws.com https://ct.pinterest.com https://*.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://insight.adsrvr.org https://*.crwdcntrl.net https://*.ltmsphrcl.net https://x.bndspn.com https://apps.apple.com https://www.facebook.com https://www.google-analytics.com https://securepubads.g.doubleclick.net https://collector.brandmetrics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://google.com https://ep1.adtrafficquality.google https://csi.gstatic.com https://translate-pa.googleapis.com https://translate.googleapis.com; frame-src 'self' https://accounts.google.com https://tagging.wetransfer.com https://*.stripe.com https://*.hcaptcha.com https://collectapp.page.link https://debugcollectapp.page.link https://*.wetransfer.net https://*.wetransfer.com https://*.wetransferbeta.net https://*.wetransferbeta.com https://*.rokt.com https://match.adsrvr.org https://insight.adsrvr.org https://ct.pinterest.com https://*.crwdcntrl.net https://www.googletagmanager.com https://www.google.com https://cm.g.doubleclick.net https://ep2.adtrafficquality.google https://securepubads.g.doubleclick.net https://*.googlesyndication.com https://*.amazon-adsystem.com https://gum.criteo.com https://google-bidout-d.openx.net https://www.facebook.com https://*.trustpilot.com https://console.googletagservices.com; worker-src 'self' blob:; media-src 'self' blob: https://*.wetransfer.net https://*.wetransfer.com https://*.wetransferbeta.net https://*.wetransferbeta.com https://wetransferplusimages.s3.eu-west-1.amazonaws.com https://static.zdassets.com; object-src 'none'; base-uri 'self'; form-action 'self' https://webto.salesforce.com https://test.salesforce.com https://wetransfer.zendesk.com https://www.facebook.com; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pubabbc81b16855ec184b0753bf36600da1&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Afrontend-transfer%2Cenv%3Aproduction%2Cversion%3Aacc46db5e1cde547ef24c01533c7aeb6a95a0217
default-src
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Nonce
—
'nonce-4128aa5a-cc8c-47af-a8e4-dfa73acd522d'
script-src
Hash
—
'sha256-4hRuHNFOqK6I2GgL9T5HwGETI5qu8rNsCs1G/d5PPBk='
script-src
Hash
—
'sha256-ZES/2z0cbUZYbmG6sgCzU453zUUUmmotyFwnZ7G8WaY='
script-src
Hash
—
'sha256-NvzBT9rJnGEWMlHqwvXg6OHIegGdn5PsAP3YZ7RzmgE='
script-src
Hash
—
'sha256-f/k++c7mXW35G13Y7R6PzP/vWuqKqAVF3ph0iisXZX0='
script-src
Hash
—
'sha256-ws2EcVAq3u/bDFH4r+3pcRahQuX/HRlekAqTc6GnDWI='
script-src
Hash
—
'sha256-Bd1r8fyU+a98FYknUDsYXLvQwPaw2Trg0SDQ0pT+cWY='
script-src
Hash
—
'sha256-scue6/wrhAUP1T4+YMVMvhoJLHziYmv37BcJuN11XwM='
script-src
Hash
—
'sha256-tUHp97FxQMwOfUs1KAvNxJvnntHhr1ukXQBr1sZ/vKA='
script-src
Hash
—
'sha256-L8m6ygYvYlmr5M0s5E/t19ls7FHY3o5G8LFtd8UqytA='
script-src
Hash
—
'sha256-cWB6LeQeTPFHH9QCg8VrP0sPJfqqdgDupHwitbxysNo='
script-src
Hash
—
'sha256-1+tdasFuSYydtmIV8i2k8bpXyDasrvpd0i6vXt5p8xo='
script-src
Hash
—
'sha256-pe6hK6/pXs86IrWP5sSJTjHKKgBqZoSjkbrMZLM0MQg='
script-src
Keyword
—
'wasm-unsafe-eval'
script-src
Scheme
—
blob:
script-src
Host
—
script-src
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src-elem
Keyword
—
'self'
style-src-elem
Keyword
—
'unsafe-inline'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Host
—
img-src
Host
—
connect-src
Keyword
—
'self'
connect-src
Scheme
—
blob:
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
frame-src
Keyword
—
'self'
frame-src
Host
—
frame-src
Host
—
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
media-src
Keyword
—
'self'
media-src
Scheme
—
blob:
media-src
Host
—
object-src
Keyword
—
'none'
base-uri
Keyword
—
'self'
form-action
Keyword
—
'self'