Open
Cached
·
just now
8
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' *.microsoft.com *.windows.net; script-src 'self' *.microsoft.com js.monitor.azure.com assets.adobedtm.com wcpstatic.microsoft.com mem.gfx.ms 'unsafe-inline' 'unsafe-eval' snap.licdn.com *.clarity.ms *.google.com *.gstatic.com 204-kzg-685.mktoweb.com bat.bing.com acdn.adnxs.com *.hsforms.net *.hsforms.com *.amazonaws.com *.azurefd.net admin.microsoft.com adsuxsiwest.blob.core.windows.net *.api.sandbox.ads.microsoft.com *.api.ads.microsoft.com directline.botframework.com petrol-int.office.microsoft.com petrol.office.microsoft.com *.omnichannelengagementhub.com browser.pipe.aria.microsoft.com us-prod.asyncgw.teams.microsoft.com edge.skype.com customervoice.microsoft.com adrecommendation.api.sandbox.ads.microsoft.com adrecommendation.api.ads.microsoft.com res.cdn.office.net *.windows.net *.hsappstatic.net *.hubspotusercontent-na1.net *.hubspotusercontent-eu1.net acrobatservices.adobe.com; style-src 'self' *.microsoft.com 'unsafe-inline' 204-kzg-685.mktoweb.com *.azurefd.net; font-src 'self' c.s-microsoft.com *.microsoft.com res-1.cdn.office.net *.azurefd.net *.gstatic.com *.hubspot.net data:; img-src 'self' data: img-prod-cms-rt-microsoft-com.akamaized.net googleads.g.doubleclick.net www.facebook.com px.ads.linkedin.com *.google.com *.google.co * dev-about.ads.microsoft.com qa-about.ads.microsoft.com about.ads.microsoft.com blob:; connect-src 'self' wss: 'unsafe-inline' *.google.com js.monitor.azure.com assets.adobedtm.com wcpstatic.microsoft.com mem.gfx.ms px.ads.linkedin.com *.hsforms.net *.hsforms.com *.amazonaws.com mscom.demdex.net browser.events.data.microsoft.com d.clarity.ms target.microsoft.com dpm.demdex.net *.clarity.ms/collect bat.bing.com dev-about.ads.microsoft.com qa-about.ads.microsoft.com about-uat.ads.microsoft.com beta-about.ads.microsoft.com about.ads.microsoft.com *.azurefd.net msftenterprise.sc.omtrdc.net westus2-2.in.applicationinsights.azure.com bat.bing.net *.microsoft.com adsuxsiwest.blob.core.windows.net *.api.sandbox.ads.microsoft.com *.api.ads.microsoft.com directline.botframework.com petrol-int.office.microsoft.com petrol.office.microsoft.com *.omnichannelengagementhub.com browser.pipe.aria.microsoft.com us-prod.asyncgw.teams.microsoft.com edge.skype.com comms.omnichannelengagementhub.com *.trouter.skype.com *.communication.azure.com adrecommendation.api.sandbox.ads.microsoft.com adrecommendation.api.ads.microsoft.com res.cdn.office.net *.azurewebsites.net viewlicense.adobe.io; frame-src 'self' *.google.com * 204-kzg-685.mktoweb.com *.microsoft.com; media-src 'self' blob: *.eventbuilder.com dev-about.ads.microsoft.com qa-about.ads.microsoft.com about-uat.ads.microsoft.com beta-about.ads.microsoft.com about.ads.microsoft.com *.windows.net
default-src
Keyword
—
'self'
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Host
—
*
img-src
Scheme
—
blob:
connect-src
Keyword
—
'self'
connect-src
Scheme
—
wss:
connect-src
Keyword
—
'unsafe-inline'
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
frame-src
Keyword
—
'self'
frame-src
Host
—
*
media-src
Keyword
—
'self'
media-src
Scheme
—
blob:
Content-Security-Policy-Report-Only
No report-only CSP headers found.