Open
Cached
·
just now
14
directives
Content-Security-Policy
Content-Security-Policy: report-uri https://services.madcapsoftware.com/api/CSPReport/Post; default-src 'self' https://scripts.sirv.com https://*.sirv.com; manifest-src 'self' https://login.microsoftonline.com *.madcapsoftware.com; connect-src 'self' blob: https://perf-na1.hsforms.com *.6sc.co *.6sense.com https://in.visitors.live/server-time https://bat.bing.com https://bat.bing.net https://cta-service-cms2.hubspot.com https://cdn.requestmetrics.com https://az416426.vo.msecnd.net https://static.hsappstatic.net https://cdn.sitesearch360.com https://*.qualified.com wss://*.qualified.com ws://localhost:5173 *.trustarc.com *.truste.com https://*.google.com https://insights.sitesearch360.com https://global.sitesearch360.com https://forms-na1.hubspot.com https://forms.hubspot.com https://app.wistia.com https://app.wistia.com/live_event_registration https://distillery.wistia.net/ wss://soketi.hyvor.com https://talk.hyvor.com *.litix.io/ https://embed-cloudfront.wistia.com/ https://distillery.wistia.com/ https://fast.wistia.com https://fast.wistia.net https://pipedream.wistia.com/ https://fast.wistia.net/embed/channel/ https://tracking.g2crowd.com/ https://google.com *.convertexperiments.com https://ws.zoominfo.com *.google-analytics.com *.analytics.google.com https://js.zi-scripts.com https://aorta.clickagy.com https://hemsync.clickagy.com https://settings.luckyorange.net https://in.visitors.live/ajax https://*.luckyorange.com https://madcap.sirv.com https://stats.sirv.com https://video.sirv.com https://forms.hsforms.com/ https://hubspot-forms-static-embed.s3.amazonaws.com/ https://data.stbuttons.click/data https://api.hubapi.com https://forms.hscollectedforms.net https://cdn.linkedin.oribi.io https://analytics.google.com https://api-preview.luckyorange.com/public-auth https://www.g2.com https://www.googletagmanager.com https://fonts.gstatic.com https://public-auth-dot-lucky-orange.appspot-preview.com wss://realtime.luckyorange.com https://settings.luckyorange.com wss://*.visitors.live https://pubsub.googleapis.com https://api.luckyorange.com https://maps.googleapis.com https://www.google-analytics.com https://adservice.google.com/pagead/ https://dc.services.visualstudio.com https://f1.madcapsoftware.com https://scripts.sirv.com https://in.requestmetrics.com https://l.sharethis.com https://stats.g.doubleclick.net https://www.cognitoforms.com https://www.google.com/pagead/ https://*.googleusercontent.com *.doubleclick.net *.googlesyndication.com www.googleadservices.com https://www.google.ca https://www.google.ie https://www.google.co.uk https://px.ads.linkedin.com https://px.ads.linkedin.com/wa/; font-src 'self' data: https://fast.wistia.com/fonts/walsheim/ *.trustarc.com *.truste.com https://fast.wistia.net https://storage.googleapis.com/lucky-orange-public/fonts/ https://static.cognitoforms.com https://fast.wistia.com/assets/external/fonts/ https://use.fontawesome.com https://s3.amazonaws.com/luckyorange-clickstream/fonts/ https://f1.madcapsoftware.com/websiteFonts/ https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://fonts.gstatic.com https://www.cognitoforms.com; form-action 'self' https://forms.hsforms.com/ *.google.com; frame-ancestors 'self' https://cdn.talentlms.com/madcappm/ https://madcappm.talentlms.com/ https://cdn.talentlms.com/engine/V2/ https://qasecurityheadersclickjacking1.mcoutputqa.com https://dssecurityheadersclickjacking.mcoutputdev.com https://dev.madcaprnd.com/client https://qa.madcaprnd.com https://app.storyblok.com; frame-src 'self' *.6sc.co *.6sense.com https://*.qualified.com *.trustarc.com *.truste.com https://www.googletagmanager.com https://td.doubleclick.net https://fast.wistia.com/ https://hemsync.clickagy.com https://f1.madcapsoftware.com https://madcap.sirv.com https://forms.hsforms.com https://www.youtube-nocookie.com https://www.g2.com https://optimize.google.com https://talk.hyvor.com *.google.com *.doubleclick.net *.googlesyndication.com https://c.sharethis.mgr.consensu.org https://js.driftt.com https://www.youtube.com https://calendly.com https://t.sharethis.com; img-src 'self' data: *.6sc.co *.6sense.com https://bat.bing.com https://bat.bing.net https://perf-na1.hsforms.com https://*.qualified.com *.trustarc.com *.truste.com https://fast.wistia.net https://images.sitesearch360.com https://documentation.madcapsoftware.com https://www.gravatar.com https://hyvor.com https://insights.sitesearch360.com/insights/ https://www.madcapsoftware.com/images/ https://cdn.sitesearch360.com/pdf.svg https://cdn.hyvor.com https://talk.hyvor.com https://tools.luckyorange.com/messenger/img/ https://embed-ssl.wistia.com/ https://fast.wistia.com/ https://exceptions.hs-embed-reporting.com https://google.com/pagead/ https://stats.g.doubleclick.net https://pd.sharethis.com https://track.hubspot.com *.google-analytics.com *.analytics.google.com https://forms-na1.hsforms.com https://forms.hsforms.com https://fonts.gstatic.com https://analytics.google.com https://www.g2.com https://optimize.google.com https://d10lpsik1i8c69.cloudfront.net https://*.privacysandbox.googleadservices.com https://assets.madcapsoftware.com https://*.linkedin.com https://linkedin.com https://www.linkedin.com https://ads.linkedin.com https://px.ads.linkedin.com https://px.ads.linkedin.com/wa/ https://px.ads.linkedin.com/collect https://prd.jwpltx.com/v1/jwplayer6/ping.gif https://www.google.com.mx/ https://www.google.com.ec https://www.google.com.ua https://www.google.co.uk https://www.google.ie https://www.google.ca https://f1.madcapsoftware.com https://googleads.g.doubleclick.net https://madcap.sirv.com https://maps.googleapis.com https://maps.gstatic.com https://platform-cdn.sharethis.com https://secure.gravatar.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://p.adsymptotic.com https://*.googleusercontent.com https://assets.madcapsoftware.com/branding/ https://l.sharethis.com https://www.googleadservices.com https://assets.madcapsoftware.com/websiteImages/ https://i.ytimg.com https://assets.calendly.com; media-src 'self' blob: data: mediastream: https://*.qualified.com https://embed-ssl.wistia.com https://fast.wistia.com https://webinararchive.madcapsoftware.com https://f1.madcapsoftware.com https://madcap.sirv.com https://video.sirv.com https://scripts.sirv.com https://js.driftt.com dai.google.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.6sc.co *.6sense.com https://bat.bing.com https://bat.bing.net https://js.hubspot.com https://js.qualified.com http://localhost:5173 https://*.trustarc.com https://*.sentry-cdn.com/ https://cdn.sitesearch360.com/ https://storage.googleapis.com/lucky-orange-public/ https://js.sitesearch360.com/ https://js.sentry-cdn.com https://fast.wistia.com https://fast.wistia.net https://fast.wistia.com/assets/external/ https://cdn-4.convertexperiments.com https://no-cdn.convertexperiments.com https://js.zi-scripts.com https://ws.zoominfo.com https://tags.clickagy.com https://djtflbt20bdde.cloudfront.net/ https://use.fontawesome.com/ https://js.hsforms.net https://js.hs-scripts.com https://js.hscollectedforms.net https://js.hs-analytics.net https://js-na1.hs-scripts.com/ https://js.hs-banner.com https://js.hsadspixel.net https://tracking.g2crowd.com/ https://static.cognitoforms.com/ https://d10lpsik1i8c69.cloudfront.net https://tools.luckyorange.com https://ssl.google-analytics.com https://optimize.google.com https://talk.hyvor.com https://connect.facebook.net/en_US/sdk.js https://platform-api.sharethis.com/js/sharethis.js https://t.sharethis.com https://www3.madcapsoftware.com/ https://tpc.googlesyndication.com/ https://www.google.com/pagead/ https://assets.madcapsoftware.com https://az416426.vo.msecnd.net https://buttons-config.sharethis.com https://cdn.requestmetrics.com https://googleads.g.doubleclick.net https://www.google.com https://js.driftt.com https://platform-api.sharethis.com https://scripts.sirv.com https://video.sirv.com https://madcap.sirv.com https://stats.sirv.com https://snap.licdn.com https://www.googleanalytics.com https://www.google-analytics.com https://google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://www.youtube.com https://app.storyblok.com/f/storyblok-latest.js https://app.storyblok.com/f/storyblok-v2-latest.js https://www.googleadservices.com https://count-server.sharethis.com https://services.cognitoforms.com https://www.cognitoforms.com https://www.gstatic.com https://maps.googleapis.com https://www.madcapsoftware.com https://f1.madcapsoftware.com https://assets.calendly.com https://ssl.p.jwpcdn.com/; style-src 'self' 'unsafe-inline' https://*.qualified.com https://tools.luckyorange.com/messenger/css/ https://fast.wistia.com https://use.fontawesome.com/ https://scripts.sirv.com https://www.googletagmanager.com/ https://optimize.google.com https://www3.madcapsoftware.com/ https://scripts.sirv.com/sirvjs/ https://fonts.googleapis.com https://www.cognitoforms.com https://www.madcapsoftware.com https://app.storyblok.com https://assets.calendly.com; worker-src blob:; child-src blob: https://*.qualified.com;
default-src
Keyword
—
'self'
manifest-src
Keyword
—
'self'
connect-src
Keyword
—
'self'
connect-src
Scheme
—
blob:
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
font-src
Host
—
form-action
Keyword
—
'self'
frame-ancestors
Keyword
—
'self'
frame-src
Keyword
—
'self'
frame-src
Host
—
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Host
—
media-src
Keyword
—
'self'
media-src
Scheme
—
blob:
media-src
Scheme
—
data:
media-src
Scheme
—
mediastream:
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-eval'
script-src
Keyword
—
'unsafe-inline'
script-src
Scheme
—
blob:
script-src
Host
—
script-src
Host
—
script-src
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Host
—
worker-src
Scheme
—
blob:
child-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.