Open
Cached
·
just now
12
directives
Content-Security-Policy
No enforced CSP headers found.
Content-Security-Policy-Report-Only
Content-Security-Policy-Report-Only: default-src 'self'; report-uri https://csp.loopia.se; connect-src 'self' https://*.analytics.google.com https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://accesswidget-log-receiver.acsbapp.com https://adservice.google.com https://analytics.google.com https://api-eu1.hubapi.com https://api.exponea.com https://api.infinario.com https://bat.bing.com https://cdn.iubenda.com https://consentcdn.cookiebot.com https://content.hotjar.io https://cta-eu1.hubspot.com https://eu-cdn.acsbapp.com https://eu.acsbapp.com https://idb.iubenda.com https://in.hotjar.com https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://srv.motu-teamblue.services https://stats.g.doubleclick.net https://vc.hotjar.io https://www.facebook.com https://www.google.com https://www.googleadservices.com https://www.google.se; font-src 'self' https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://fonts.gstatic.com; form-action 'self' https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://bib.eway2pay.com https://payment.architrade.com https://ticket.siriusit.net https://www.facebook.com; frame-src 'self' https://*.facebook.com https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://5.ec1.vbus.apps.ladesk.com https://active24.ladesk.com https://cdn.hub-prod.team.blue https://consentcdn.cookiebot.com https://vars.hotjar.com https://www.google.com https://www.googletagmanager.com https://*.freshchat.com https://*.freshdesk.com; img-src 'self' data: https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://bat.bing.com https://googleads.g.doubleclick.net https://imgsct.cookiebot.com https://perf-eu1.hsforms.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://region1.analytics.google.com https://region1.google-analytics.com https://srv.motu-teamblue.services https://stats.g.doubleclick.net https://tbs.tradedoubler.com https://track-eu1.hubspot.com https://www.facebook.com https://www.google.com https://www.google.se https://www.googletagmanager.com https://www.gstatic.com; media-src 'self' https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se; object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://api.exponea.com https://api.infinario.com https://g.microsoft.com https://script.hotjar.com https://snap.licdn.com https://static.hotjar.com https://www.google.com https://www.google.se https://www.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' https://*.freshchat.com https://*.freshdesk.com https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://active24.ladesk.com https://api.exponea.com https://bat.bing.com https://cdn.hub-prod.team.blue https://cdn.iubenda.com https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://cs.iubenda.com https://eu.acsbapp.com https://eu.fw-cdn.com https://googleads.g.doubleclick.net https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://js-eu1.hs-scripts.com https://js-eu1.hsadspixel.net https://js-eu1.hubspot.com https://pagead2.googlesyndication.com https://script.hotjar.com https://snap.licdn.com https://srv.isy-teamblue.services https://srv.motu-teamblue.services https://static.hotjar.com https://widget.trustpilot.com https://www.google.com https://www.google.se https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://cdn.iubenda.com https://fonts.googleapis.com https://*.freshchat.com https://*.freshdesk.com
default-src
Keyword
—
'self'
connect-src
Keyword
—
'self'
font-src
Keyword
—
'self'
form-action
Keyword
—
'self'
form-action
Host
—
ASN
|
MERCURY Nexi Croatia d.o.o. za karticno poslovanje
form-action
Host
—
frame-src
Keyword
—
'self'
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
media-src
Keyword
—
'self'
object-src
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Keyword
—
'unsafe-inline'
script-src-elem
Keyword
—
'self'
script-src-elem
Keyword
—
'unsafe-inline'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'