Open
Cached
·
just now
10
directives
Content-Security-Policy
Content-Security-Policy: default-src 'none' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdn.pagesense.io https://ma.zoho.com https://mh.zoho.com https://salesiq.zoho.com https://www.googletagmanager.com https://snap.licdn.com https://static.ads-twitter.com https://connect.facebook.net https://googleads.g.doubleclick.net https://maillist-manage.com https://js.zohocdn.com https://www.google-analytics.com https://static.zohocdn.com https://nxra.maillist-manage.com https://www.google.com https://crm.zohopublic.com https://www.gstatic.com https://crm.zoho.com https://www.redditstatic.com https://www.googleadservices.com ; style-src 'self' 'unsafe-inline' https://css.zohocdn.com https://use.typekit.net https://fonts.googleapis.com https://p.typekit.net https://static.zohocdn.com/ ; img-src * data: ; connect-src 'self' https://pagesense-collect.zoho.com https://salesiq.zohopublic.com https://px.ads.linkedin.com https://analytics.google.com https://analytics.twitter.com https://www.google-analytics.com https://nxra.maillist-manage.com https://stats.g.doubleclick.net https://google.com wss://vts.zohopublic.com https://crm.zohopublic.com https://www.google.com https://www.redditstatic.com https://conversions-config.reddit.com https://pixel-config.reddit.com https://ads.reddit.com ; font-src 'self' data: https://use.typekit.net https://css.zohocdn.com https://fonts.gstatic.com ; frame-src 'self' blob: https://cdn.pagesense.io https://td.doubleclick.net https://www.google.com https://www.facebook.com https://coverage.customer.thinxtra.com https://player.vimeo.com https://www.googletagmanager.com ; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://www.facebook.com https://crm.zoho.com ;
default-src
Keyword
—
'none'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Scheme
—
data:
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
img-src
Host
—
*
img-src
Scheme
—
data:
connect-src
Keyword
—
'self'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
frame-src
Keyword
—
'self'
frame-src
Scheme
—
blob:
frame-src
Host
—
base-uri
Keyword
—
'self'
frame-ancestors
Keyword
—
'self'
form-action
Keyword
—
'self'
Content-Security-Policy-Report-Only
No report-only CSP headers found.