Open
Cached
·
just now
5
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: media.graphassets.com cdnjs.cloudflare.com reddit.com hubspot.com snap.licdn.com *.visualstudio.com *.zendesk.com *.affirm.com *.googlesyndication.com connect.vagaro.com giphy.com translate.google.com cmp.osano.com munchkin.marketo.net code.jquery.com tiktok.com pay.google.com bing.com js.chilipiper.com *.livechatinc.com vagaro.com *.azurefd.net www.google.com.ua *.vimeo.com i.vimeocdn.com/ alb.reddit.com p.typekit.net static.zdassets.com unpkg.com edge.skype.com azureedge.net google.com *.amplitude.com us-west-2.graphassets.com kit.fontawesome.com www.redditstatic.com/ *.googleadservices.com tracking.g2crowd.com skype.com www.google-analytics.com *.sentry.io *.pinimg.com *.clarity.ms js.hs-banner.com amplitude.com www.google.com.cy office.net wss://printer-relay.zsterm.io microsoft.com *.azure.com osano.com www.google.com.ph region1.google-analytics.com ekr.zdassets.com region1.analytics.google.com use.fontawesome.com pinterest.com vagaro.zendesk.com api.vagaro.com wss://relay.zsterm.io www.google.com.pr youtube.com *.hubspot.com *.licdn.com fp.vagaro.com consent.api.osano.com facebook.net rc.vagaro.com clarity.ms ecs.communication.microsoft.com bat.bing.net *.office.net use.typekit.net www.google.com.sg google.co.in stripe-terminal-local-reader.net svc.webspellchecker.net *.gstatic.com www.google.com.br *.instagram.com api.ipify.org *.rackcdn.com ka-p.fontawesome.com ic3.events.data.microsoft.com *.googletagmanager.com zenswipe.com www.google.com.mx *.jsdelivr.net hcaptcha.com googlesyndication.com js.stripe.com tattle.api.osano.com api.giphy.com *.tiktok.com pixel-config.reddit.com api.flightproxy.skype.com linkedin.com js.hs-analytics.net www.google.com vagaro.azureedge.net fjfpnmdkhkfn.statuspage.io perf-na1.hsforms.com h.online-metrix.net www.google.co.uk google-analytics.com cdn-assets.affirm.com facebook.com www.vagaro.com cdn.amplitude.com www.google.com.gt *.online-metrix.net js.hs-scripts.com www.google.co.in stackpath.bootstrapcdn.com doubleclick.net www.facebook.com www.google.fr d3e54v103j8qbb.cloudfront.net *.googleapis.com *.doubleclick.net challenges.cloudflare.com apis.google.com js.hsforms.net googletagmanager.com *.pinterest.com calendly.com assets.website-files.com www.google.com.au image.mux.com assets.pinterest.com *.linkedin.com azurefd.net maps.gstatic.com analytics-ipv6.tiktokw.us wss://sr-prod-eus2-signalr.service.signalr.net go.trouter.communication.microsoft.com zendesk.com hsforms.com wss://sr-prod-eus2-connect.service.signalr.net *.azureedge.net appleid.cdn-apple.com *.stripe.com connect.facebook.net analytics.google.com forms.vagaro.com bat.bing.com www.google.ca px.ads.linkedin.com *.signalr.net *.salesforce.com cdn.scaleflex.it applepay.cdn-apple.com maps.googleapis.com *.windows.net map.kap.fontawesome.com ct.pinterest.com wss://sr-prod-eus2-pos.service.signalr.net merchantapi.vagaro.com portal.zenswipe.com *.facebook.net fpnpmcdn.net www.google.de www.youtube.com jsdelivr.net googleapis.com vibe.vagaro.com us02.vagaro.com auth.relay.communication.microsoft.com googleadservices.com ajax.aspnetcdn.com gstatic.com stream.mux.com www.affirm.com cdn1.affirm.com affirm.com www.google.com.co assets.calendly.com www.google.nl; img-src 'self' data: blob: https: vagaro.azureedge.net *.zendesk.com reddit.com alb.reddit.com *.pinterest.com *.facebook.com maps.gstatic.com maps.googleapis.com cdn.scaleflex.it *.giphy.com ui.penpot.app maps.google.com ekr.zdassets.com static.zdassets.com www.redditstatic.com *.vimeocdn.com assets.website-files.com;connect-src 'self' *.signalr.net api.vagaro.com merchantapi.vagaro.com fp.vagaro.com rc.vagaro.com vibe.vagaro.com www.facebook.com stats.g.doubleclick.net graph.facebook.com firebaseinstallations.googleapis.com *.osano.com google.com *.google.com unpkg.com h.online-metrix.net *.pinimg.com www.google-analytics.com bat.bing.com ka-p.fontawesome.com kit.fontawesome.com maps.googleapis.com firebase.googleapis.com www.google-analytics.com bat.bing.com *.pinimg.com snap.licdn.com *.googlesyndication.com *.hubspot.com perf-na1.hsforms.com *.sentry.io amplitude.com *.amplitude.com clarity.ms *.zendesk.com hsforms.com wss://printer-relay.zsterm.io:8001 wss://printer-relay.zsterm.io:8002 wss://printer-relay.zsterm.io:8003 wss://printer-relay.zsterm.io:8004 wss://printer-relay.zsterm.io:8005 wss://printer-relay.zsterm.io:8006 wss://printer-relay.zsterm.io:8007 wss://printer-relay.zsterm.io:8008 wss://printer-relay.zsterm.io:8009 wss://relay.zsterm.io:9001 wss://relay.zsterm.io:9002 wss://relay.zsterm.io:9003 wss://relay.zsterm.io:9004 wss://relay.zsterm.io:9005 wss://relay.zsterm.io:9006 wss://relay.zsterm.io:9007 wss://relay.zsterm.io:9008 wss://relay.zsterm.io:9009 api.flightproxy.skype.com edge.skype.com skype.com *.azure.com microsoft.com apis.google.com *.google.com analytics.google.com region1.analytics.google.com *.googletagmanager.com *.googleadservices.com *.google.com ct.pinterest.com px.ads.linkedin.com connect.facebook.net fpnpmcdn.net *.affirm.com;frame-src 'self' js-call: data: blob: https://*.vagaro.com https://forms.vagaro.com https://connect.vagaro.com https://vibe.vagaro.com https://*.zenswipe.com https://zenswipe.com https://portal.zenswipe.com https://js.stripe.com https://*.stripe.com https://ct.pinterest.com https://*.pinterest.com https://*.facebook.com https://www.facebook.com https://connect.facebook.net https://www.youtube.com https://youtube.com https://*.youtube.com https://*.zendesk.com https://zendesk.com https://vagaro.zendesk.com https://hsforms.com https://perf-na1.hsforms.com https://www.affirm.com https://affirm.com https://applepay.cdn-apple.com https://player.vimeo.com https://*.vimeo.com https://h.online-metrix.net https://*.microsoft.com https://*.google.com https://www.google.com https://*.statuspage.io https://fjfpnmdkhkfn.statuspage.io https://checkoutshopper-live.adyen.com https://secure.livechatinc.com https://vagaroapps-b9d4erega9h5atfp.a02.azurefd.net https://view.officeapps.live.com https://www.affirm.com https://flows.gusto.com https://challenges.cloudflare.com;frame-ancestors *
default-src
Keyword
—
'self'
default-src
Keyword
—
'unsafe-eval'
default-src
Keyword
—
'unsafe-hashes'
default-src
Keyword
—
'unsafe-inline'
default-src
Scheme
—
data:
default-src
Scheme
—
blob:
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Scheme
—
https:
img-src
Host
—
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
frame-src
Keyword
—
'self'
frame-src
Scheme
—
js-call:
frame-src
Scheme
—
data:
frame-src
Scheme
—
blob:
frame-src
Host
—
frame-src
Host
—
frame-ancestors
Host
—
*
Content-Security-Policy-Report-Only
No report-only CSP headers found.