14 directives

Content-Security-Policy

upgrade-insecure-requests Source
(no sources)
default-src Keyword
'self'
object-src Keyword
'self'
sandbox Keyword
allow-presentation
sandbox Keyword
allow-scripts
sandbox Keyword
allow-same-origin
sandbox Keyword
allow-popups
sandbox Keyword
allow-forms
sandbox Keyword
allow-popups-to-escape-sandbox
sandbox Keyword
allow-downloads
frame-ancestors Keyword
'none'
base-uri Keyword
'self'
img-src Keyword
'self'
img-src Scheme
https:
script-src Keyword
'self'
script-src Nonce
'nonce-a42111f50d1c4d5da131201c0a42d8c3'
script-src Keyword
'unsafe-eval'
script-src Scheme
blob:
frame-src Keyword
'self'
connect-src Keyword
'self'
style-src Keyword
'self'
style-src Keyword
'unsafe-inline'
media-src Keyword
'self'
font-src Keyword
'self'
font-src Scheme
data:

Content-Security-Policy-Report-Only

No report-only CSP headers found.