Open
Cached
·
just now
10
directives
Content-Security-Policy
Content-Security-Policy: default-src 'none';script-src 'nonce-sBxAKnv4iGA+DfMDUIxOGA==' https://*.zohocdn.com https://desk.zoho.com https://admin.zoho.com https://js.zohostatic.com https://static.zohocdn.com.cn https://desk.zoho.in https://dre.zoho.com https://js.zohostatic.in 'wasm-unsafe-eval' https://js-stratus.zohostatic.com.cn;style-src 'unsafe-inline' https://*.zohocdn.com https://webfonts.zoho.com https://css.zohostatic.com https://static.zohocdn.com.cn https://css.zohostatic.in https://js-stratus.zohostatic.com.cn;img-src blob: data: https://*.zohocdn.com https://*.zoho.com https://*.zohopublic.com https://*.zohoexternal.com data: https://us-previewenginepublic.nimbuspop.com https://us-previewengine.nimbuspop.com https://zdblogs.zohocorp.com https://www.zohowebstatic.com https://*.zohostatic.com https://static.zohocdn.com.cn https://desk.zoho.in 'self';connect-src 'self' blob: https://*.zohocdn.com https://*.zoho.com https://*.zohopublic.com https://*.zohoexternal.com ws: data: https://us-previewenginepublic.nimbuspop.com https://us-previewengine.nimbuspop.com https://zdblogs.zohocorp.com https://www.zohowebstatic.com https://*.zohostatic.com https://*.zohocdn.com.cn https://desk.zoho.in;font-src data: https://*.zohocdn.com https://webfonts.zohowebstatic.com https://static.zohocdn.com.cn https://js-stratus.zohostatic.com.cn;frame-src 'self' blob: genie: Zoho.WdGenie: https://*.zoho.com https://*.zohopublic.com https://*.zohoexternal.com https://zohohelp.com https://desk.zoho.in https://workdrive.zohoexternal.com;media-src blob: https://*.zoho.com https://*.zohocdn.com https://*.zohopublic.com https://*.zohoexternal.com data: https://us-previewenginepublic.nimbuspop.com https://us-previewengine.nimbuspop.com https://zdblogs.zohocorp.com https://www.zohowebstatic.com;worker-src 'self' blob:;report-uri https://logsapi.zoho.com/csplog?service=TeamDrive
default-src
Keyword
—
'none'
script-src
Nonce
—
'nonce-sBxAKnv4iGA+DfMDUIxOGA=='
script-src
Host
—
script-src
Keyword
—
'wasm-unsafe-eval'
style-src
Keyword
—
'unsafe-inline'
style-src
Host
—
img-src
Scheme
—
blob:
img-src
Scheme
—
data:
img-src
Host
—
img-src
Scheme
—
data:
img-src
Host
—
img-src
Keyword
—
'self'
connect-src
Keyword
—
'self'
connect-src
Scheme
—
blob:
connect-src
Host
—
connect-src
Scheme
—
ws:
connect-src
Scheme
—
data:
connect-src
Host
—
font-src
Scheme
—
data:
font-src
Host
—
frame-src
Keyword
—
'self'
frame-src
Scheme
—
blob:
frame-src
Scheme
—
genie:
frame-src
Scheme
—
Zoho.WdGenie:
frame-src
Host
—
media-src
Scheme
—
blob:
media-src
Host
—
media-src
Scheme
—
data:
worker-src
Keyword
—
'self'
worker-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.