CSP Data for: ingdirect.fr

# Time Frame Framing Control TLS Enforce Content Control Third JS Parties 'unsafe-inline' http / https / * data: Diffs Normalized Policy
0
2015-02-17 - 2015-02-17
False
False
True
4
False
False
False
0
connect-src 'self'; default-src 'none'; font-src 'self'; frame-src https://www.google.com http://www.google.com http://r.turn.com https://*.youtube.com https://*.doubleclick.net https://r.turn.com http://*.youtube.com; img-src 'self' ssl.google-analytics.com www.google-analytics.com www.ingdirect.fr; media-src 'self'; object-src 'self'; script-src connect.facebook.net www.ingdirect.fr 'self' www.google.com www.google-analytics.com apis.google.com platform.twitter.com ssl.google-analytics.com; style-src 'self' 'unsafe-inline'; 
1
2015-02-18 - 2015-04-01
False
False
True
4
False
False
False
6
connect-src 'self'; default-src 'none'; font-src 'self'; frame-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com; img-src www.ingdirect.fr 'self' https://syndication.twitter.com www.google-analytics.com ssl.google-analytics.com; media-src 'self'; object-src 'self'; script-src connect.facebook.net www.ingdirect.fr 'self' www.google.com www.google-analytics.com apis.google.com platform.twitter.com ssl.google-analytics.com; style-src 'self' 'unsafe-inline'; 
2
2015-04-02 - 2015-05-29
False
False
True
6
True
False
False
8
connect-src 'self'; default-src 'none'; font-src 'self' client.linkeo.com; frame-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com; img-src www.ingdirect.fr 'self' https://syndication.twitter.com www.google-analytics.com wcb.linkeo.com ssl.google-analytics.com; media-src 'self'; object-src 'self'; script-src connect.facebook.net wcb.linkeo.com code.jquery.com www.ingdirect.fr 'self' client.linkeo.com www.google.com www.google-analytics.com 'unsafe-inline' apis.google.com platform.twitter.com ssl.google-analytics.com; style-src 'self' client.linkeo.com 'unsafe-inline' wcb.linkeo.com; 
3
2015-06-27 - 2015-10-01
False
False
True
6
True
False
False
0
connect-src 'self'; default-src 'none'; font-src 'self' client.linkeo.com; frame-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com; img-src www.ingdirect.fr 'self' https://syndication.twitter.com www.google-analytics.com wcb.linkeo.com ssl.google-analytics.com; media-src 'self'; object-src 'self'; script-src connect.facebook.net wcb.linkeo.com code.jquery.com www.ingdirect.fr 'self' client.linkeo.com www.google.com www.google-analytics.com 'unsafe-inline' apis.google.com platform.twitter.com ssl.google-analytics.com; style-src 'self' client.linkeo.com 'unsafe-inline' wcb.linkeo.com; 
4
2015-10-02 - 2015-12-25
False
False
True
6
True
False
False
2
connect-src 'self'; default-src 'none'; font-src 'self' client.linkeo.com; frame-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com; img-src www.ingdirect.fr 'self' https://syndication.twitter.com www.google-analytics.com wcb.linkeo.com ssl.google-analytics.com; media-src 'self'; object-src 'self'; script-src connect.facebook.net wcb.linkeo.com code.jquery.com www.ingdirect.fr 'self' client.linkeo.com www.google.com www.google-analytics.com 'unsafe-inline' apis.google.com platform.twitter.com http://cse.google.com/cse ssl.google-analytics.com; style-src 'self' client.linkeo.com 'unsafe-inline' wcb.linkeo.com; 
5
2015-12-26 - 2016-03-02
False
False
True
6
True
False
False
31
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src 'self'; default-src 'none'; font-src 'self' client.linkeo.com; img-src ssl.google-analytics.com www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ wcb.linkeo.com www.google-analytics.com; media-src 'self'; object-src 'self'; script-src connect.facebook.net wcb.linkeo.com code.jquery.com cse.google.com/cse/brand www.ingdirect.fr 'self' client.linkeo.com www.google.com www.google-analytics.com 'unsafe-inline' apis.google.com platform.twitter.com ssl.google-analytics.com; style-src 'self' client.linkeo.com 'unsafe-inline' wcb.linkeo.com; 
6
2016-03-03 - 2016-03-16
False
False
True
8
True
False
False
15
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src 'self' http://www.ingdirect.fr/ https://cr-input.mxpnl.net/; default-src 'none'; font-src 'self' client.linkeo.com; frame-src https://www.youtube.com/embed/ http://www.youtube.com/embed/ http://www.google.com/cse https://cse.google.com/cse; img-src ssl.google-analytics.com www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ wcb.linkeo.com www.google-analytics.com; media-src 'self'; object-src 'self'; script-src http://www.ingdirect.fr connect.facebook.net ssl.google-analytics.com https://www.google.com/jsapi wcb.linkeo.com https://cse.google.com/cse/brand 'self' http://b.mxpnl.net/cs/ http://trendtext.eu/ www.google.com client.linkeo.com 'unsafe-inline' 'unsafe-eval' http://trendtext.eu/metric/ platform.twitter.com apis.google.com www.google-analytics.com code.jquery.com; style-src 'self' client.linkeo.com 'unsafe-inline' wcb.linkeo.com; 
7
2016-03-17 - 2016-11-17
False
False
True
8
True
False
False
2
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src 'self' http://www.ingdirect.fr/ https://cr-input.mxpnl.net/; default-src 'none'; font-src 'self' client.linkeo.com; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://cse.google.com/cse; img-src ssl.google-analytics.com www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ wcb.linkeo.com www.google-analytics.com; media-src 'self'; object-src 'self'; script-src http://www.ingdirect.fr connect.facebook.net ssl.google-analytics.com https://www.google.com/jsapi wcb.linkeo.com https://cse.google.com/cse/brand 'self' http://b.mxpnl.net/cs/ http://trendtext.eu/ www.google.com client.linkeo.com 'unsafe-inline' 'unsafe-eval' http://trendtext.eu/metric/ platform.twitter.com apis.google.com www.google-analytics.com code.jquery.com; style-src 'self' client.linkeo.com 'unsafe-inline' wcb.linkeo.com; 
8
2016-11-18 - 2016-12-12
False
False
True
8
True
False
False
1
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src 'self' http://www.ingdirect.fr/ https://cr-input.mxpnl.net/; default-src 'none'; font-src 'self' client.linkeo.com; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://cse.google.com/cse; img-src ssl.google-analytics.com https://news.ing.be/newsingbeimages/assets/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ wcb.linkeo.com www.google-analytics.com; media-src 'self'; object-src 'self'; script-src http://www.ingdirect.fr connect.facebook.net ssl.google-analytics.com https://www.google.com/jsapi wcb.linkeo.com https://cse.google.com/cse/brand 'self' http://b.mxpnl.net/cs/ http://trendtext.eu/ www.google.com client.linkeo.com 'unsafe-inline' 'unsafe-eval' http://trendtext.eu/metric/ platform.twitter.com apis.google.com www.google-analytics.com code.jquery.com; style-src 'self' client.linkeo.com 'unsafe-inline' wcb.linkeo.com; 
9
2016-12-13 - 2017-03-30
False
False
True
9
True
False
False
14
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src 'self' http://www.ingdirect.fr/ https://cr-input.mxpnl.net/; default-src 'none'; font-src 'self' https://fonts.gstatic.com/; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://cse.google.com/cse; img-src ssl.google-analytics.com data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com; media-src 'self'; object-src 'self'; script-src http://www.ingdirect.fr connect.facebook.net ssl.google-analytics.com https://www.google.com/jsapi https://cse.google.com/cse/brand http://*.visualwebsiteoptimizer.com/ 'self' http://b.mxpnl.net/cs/ http://trendtext.eu/ www.google.com www.google-analytics.com 'unsafe-inline' 'unsafe-eval' http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com http://trendtext.eu/metric/ apis.google.com code.jquery.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' http://app.vwo.com/; 
10
2017-03-31 - 2017-04-06
False
False
True
10
True
False
False
3
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src 'self' https://www.ingdirect.fr/ https://cr-input.mxpnl.net/; default-src 'none'; font-src 'self' https://fonts.gstatic.com/; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://cse.google.com/cse; img-src ssl.google-analytics.com data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com; media-src 'self'; object-src 'self'; script-src connect.facebook.net 'self' 'unsafe-eval' apis.google.com https://app.vwo.com/visitor-behavior-analysis/ http://www.ingdirect.fr http://*.visualwebsiteoptimizer.com/ http://trendtext.eu/ www.google.com 'unsafe-inline' https://www.google.com/jsapi code.jquery.com www.google-analytics.com https://cse.google.com/cse/brand http://b.mxpnl.net/cs/ http://trendtext.eu/metric/ http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com ssl.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' http://app.vwo.com/; 
11
2017-04-07 - 2017-10-01
False
False
True
10
True
False
False
2
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src 'self' https://www.ingdirect.fr/ https://cr-input.mxpnl.net/; default-src 'none'; font-src 'self' https://app.vwo.com/assets/fonts/ https://fonts.gstatic.com/; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://app.vwo.com/visitor-behavior-analysis/ https://cse.google.com/cse; img-src ssl.google-analytics.com data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com; media-src 'self'; object-src 'self'; script-src connect.facebook.net 'self' 'unsafe-eval' apis.google.com https://app.vwo.com/visitor-behavior-analysis/ http://www.ingdirect.fr http://*.visualwebsiteoptimizer.com/ http://trendtext.eu/ www.google.com 'unsafe-inline' https://www.google.com/jsapi code.jquery.com www.google-analytics.com https://cse.google.com/cse/brand http://b.mxpnl.net/cs/ http://trendtext.eu/metric/ http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com ssl.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' http://app.vwo.com/; 
12
2017-10-02 - 2017-10-09
False
False
True
10
True
False
False
1
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src 'self' https://services.opcvm360.com/api-v1/ https://www.ingdirect.fr/ https://cr-input.mxpnl.net/; default-src 'none'; font-src 'self' https://app.vwo.com/assets/fonts/ https://fonts.gstatic.com/; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://app.vwo.com/visitor-behavior-analysis/ https://cse.google.com/cse; img-src ssl.google-analytics.com data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com; media-src 'self'; object-src 'self'; script-src connect.facebook.net 'self' 'unsafe-eval' apis.google.com https://app.vwo.com/visitor-behavior-analysis/ http://www.ingdirect.fr http://*.visualwebsiteoptimizer.com/ http://trendtext.eu/ www.google.com 'unsafe-inline' https://www.google.com/jsapi code.jquery.com www.google-analytics.com https://cse.google.com/cse/brand http://b.mxpnl.net/cs/ http://trendtext.eu/metric/ http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com ssl.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' http://app.vwo.com/; 
13
2017-10-10 - 2018-01-24
False
False
True
10
True
False
False
1
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src 'self' https://services.opcvm360.com/api-v1/ https://www.ingdirect.fr/ https://cr-input.mxpnl.net/; default-src 'none'; font-src 'self' https://app.vwo.com/assets/fonts/ https://fonts.gstatic.com/; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://app.vwo.com/visitor-behavior-analysis/ https://cse.google.com/cse; img-src ssl.google-analytics.com data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr https://www.google.com/ads/ga-audiences 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com; media-src 'self'; object-src 'self'; script-src connect.facebook.net 'self' 'unsafe-eval' apis.google.com https://app.vwo.com/visitor-behavior-analysis/ http://www.ingdirect.fr http://*.visualwebsiteoptimizer.com/ http://trendtext.eu/ www.google.com 'unsafe-inline' https://www.google.com/jsapi code.jquery.com www.google-analytics.com https://cse.google.com/cse/brand http://b.mxpnl.net/cs/ http://trendtext.eu/metric/ http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com ssl.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' http://app.vwo.com/; 
14
2018-01-25 - 2018-01-31
False
False
True
12
True
False
False
5
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src 'self' https://services.opcvm360.com/api-v1/ https://www.ingdirect.fr/ https://cr-input.mxpnl.net/; default-src 'none'; font-src 'self' https://app.vwo.com/assets/fonts/ https://fonts.gstatic.com/; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://app.vwo.com/visitor-behavior-analysis/ https://cse.google.com/cse; img-src ssl.google-analytics.com data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com https://www.google.com/ads/; media-src 'self'; object-src 'self'; script-src connect.facebook.net 'self' apis.google.com 'unsafe-eval' https://app.vwo.com/visitor-behavior-analysis/ http://www.ingdirect.fr http://*.visualwebsiteoptimizer.com/ http://trendtext.eu/ www.google.com https://www.youtube.com/iframe_api 'unsafe-inline' https://www.google.com/jsapi http://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/www-widgetapi-vflkvq6kw/www-widgetapi.js code.jquery.com www.google-analytics.com https://cse.google.com/cse/brand http://b.mxpnl.net/cs/ http://trendtext.eu/metric/ http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com ssl.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' http://app.vwo.com/; 
15
2018-02-01 - 2018-02-17
False
False
True
12
True
False
False
2
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src 'self' https://services.opcvm360.com/api-v1/ https://www.ingdirect.fr/ https://cr-input.mxpnl.net/; default-src 'none'; font-src 'self' https://app.vwo.com/assets/fonts/ https://fonts.gstatic.com/; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://app.vwo.com/visitor-behavior-analysis/ https://cse.google.com/cse; img-src ssl.google-analytics.com data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com https://www.google.com/ads/; media-src 'self'; object-src 'self'; script-src connect.facebook.net https://s.ytimg.com/yts/jsbin/ 'self' 'unsafe-eval' apis.google.com https://app.vwo.com/visitor-behavior-analysis/ http://www.ingdirect.fr http://*.visualwebsiteoptimizer.com/ http://trendtext.eu/ www.google.com https://www.youtube.com/iframe_api 'unsafe-inline' https://www.google.com/jsapi http://www.youtube.com/iframe_api code.jquery.com www.google-analytics.com https://cse.google.com/cse/brand http://b.mxpnl.net/cs/ http://trendtext.eu/metric/ http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com ssl.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' http://app.vwo.com/; 
16
2018-02-18 - 2018-03-03
False
False
True
13
True
False
False
3
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src https://www.google-analytics.com/r/collect https://cr-input.mxpnl.net/ 'self' https://www.ingdirect.fr/ https://services.opcvm360.com/api-v1/; default-src 'none'; font-src 'self' https://app.vwo.com/assets/fonts/ https://fonts.gstatic.com/ https://www.ingdirect.fr/assets/fonts/; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://app.vwo.com/visitor-behavior-analysis/ https://cse.google.com/cse; img-src ssl.google-analytics.com data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com https://www.google.com/ads/; media-src 'self'; object-src 'self'; script-src connect.facebook.net https://s.ytimg.com/yts/jsbin/ 'self' 'unsafe-eval' apis.google.com https://app.vwo.com/visitor-behavior-analysis/ http://www.ingdirect.fr http://*.visualwebsiteoptimizer.com/ http://trendtext.eu/ www.google.com 'unsafe-inline' https://www.youtube.com/iframe_api https://www.google.com/jsapi http://www.youtube.com/iframe_api code.jquery.com www.google-analytics.com https://cse.google.com/cse/brand http://b.mxpnl.net/cs/ https://cdn.ampproject.org/ http://trendtext.eu/metric/ http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com ssl.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' http://app.vwo.com/; 
17
2018-03-04 - 2018-04-03
False
False
True
13
True
False
False
6
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src https://amp-error-reporting.appspot.com/ https://www.google-analytics.com/r/collect https://cr-input.mxpnl.net/ 'self' https://www.google.com/ads https://stats.g.doubleclick.net/r/ https://www.ingdirect.fr/ https://ampcid.google.com/v1/publisher:getclientid https://services.opcvm360.com/api-v1/ https://www.google.fr/ads https://ampcid.google.fr/; default-src 'none'; font-src 'self' https://app.vwo.com/assets/fonts/ https://fonts.gstatic.com/ https://www.ingdirect.fr/assets/fonts/; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://app.vwo.com/visitor-behavior-analysis/ https://cse.google.com/cse; img-src ssl.google-analytics.com data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com https://www.google.com/ads/; media-src 'self'; object-src 'self'; script-src connect.facebook.net https://s.ytimg.com/yts/jsbin/ 'self' 'unsafe-eval' apis.google.com https://app.vwo.com/visitor-behavior-analysis/ http://www.ingdirect.fr http://*.visualwebsiteoptimizer.com/ http://trendtext.eu/ www.google.com 'unsafe-inline' https://www.youtube.com/iframe_api https://www.google.com/jsapi http://www.youtube.com/iframe_api code.jquery.com www.google-analytics.com https://cse.google.com/cse/brand http://b.mxpnl.net/cs/ https://cdn.ampproject.org/ http://trendtext.eu/metric/ http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com ssl.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' http://app.vwo.com/; 
18
2018-04-04 - 2018-07-31
False
False
True
13
True
False
False
1
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src https://amp-error-reporting.appspot.com/ https://www.google-analytics.com/r/collect https://cr-input.mxpnl.net/ 'self' https://www.google.com/ads https://stats.g.doubleclick.net/r/ https://www.ingdirect.fr/ https://ampcid.google.com/v1/publisher:getclientid https://services.opcvm360.com/api-v1/ https://www.google.fr/ads https://ampcid.google.fr/; default-src 'none'; font-src 'self' https://app.vwo.com/assets/fonts/ https://fonts.gstatic.com/ https://www.ingdirect.fr/assets/fonts/; frame-src http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://app.vwo.com/visitor-behavior-analysis/ https://cse.google.com/cse; img-src ssl.google-analytics.com https://www.google.fr/ads/ data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com https://www.google.com/ads/; media-src 'self'; object-src 'self'; script-src connect.facebook.net https://s.ytimg.com/yts/jsbin/ 'self' 'unsafe-eval' apis.google.com https://app.vwo.com/visitor-behavior-analysis/ http://www.ingdirect.fr http://*.visualwebsiteoptimizer.com/ http://trendtext.eu/ www.google.com 'unsafe-inline' https://www.youtube.com/iframe_api https://www.google.com/jsapi http://www.youtube.com/iframe_api code.jquery.com www.google-analytics.com https://cse.google.com/cse/brand http://b.mxpnl.net/cs/ https://cdn.ampproject.org/ http://trendtext.eu/metric/ http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com ssl.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' http://app.vwo.com/; 
19
2018-08-01 - 2018-11-15
False
False
True
13
True
False
False
2
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src https://amp-error-reporting.appspot.com/ https://www.google-analytics.com/r/collect https://dev.visualwebsiteoptimizer.com/analysis/ https://www.google.com/ads 'self' https://cr-input.mxpnl.net/ https://stats.g.doubleclick.net/r/ https://www.ingdirect.fr/ https://ampcid.google.com/v1/publisher:getclientid https://services.opcvm360.com/api-v1/ https://www.google.fr/ads https://ampcid.google.fr/; default-src 'none'; font-src 'self' https://app.vwo.com/assets/fonts/ https://fonts.gstatic.com/ https://www.ingdirect.fr/assets/fonts/; frame-src https://*.visualwebsiteoptimizer.com/ http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://app.vwo.com/visitor-behavior-analysis/ https://cse.google.com/cse; img-src ssl.google-analytics.com https://www.google.fr/ads/ data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com https://www.google.com/ads/; media-src 'self'; object-src 'self'; script-src connect.facebook.net https://s.ytimg.com/yts/jsbin/ 'self' 'unsafe-eval' apis.google.com https://app.vwo.com/visitor-behavior-analysis/ http://www.ingdirect.fr http://*.visualwebsiteoptimizer.com/ http://trendtext.eu/ www.google.com 'unsafe-inline' https://www.youtube.com/iframe_api https://www.google.com/jsapi http://www.youtube.com/iframe_api code.jquery.com www.google-analytics.com https://cse.google.com/cse/brand http://b.mxpnl.net/cs/ https://cdn.ampproject.org/ http://trendtext.eu/metric/ http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com ssl.google-analytics.com; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline' http://app.vwo.com/; 
20
2018-11-16 - END
False
False
True
13
True
False
False
2
child-src https://accounts.google.com https://www.google.com http://www.facebook.com/plugins http://www.google.com http://r.turn.com http://cse.google.com 'self' https://*.youtube.com https://apis.google.com/ http://platform.twitter.com/widgets https://*.doubleclick.net https://r.turn.com https://s-static.ak.facebook.com http://*.youtube.com https://cse.google.com/cse; connect-src https://amp-error-reporting.appspot.com/ https://www.google-analytics.com/r/collect https://dev.visualwebsiteoptimizer.com/analysis/ https://www.google.com/ads 'self' https://cr-input.mxpnl.net/ https://stats.g.doubleclick.net/r/ https://www.ingdirect.fr/ https://ampcid.google.com/v1/publisher:getclientid https://services.opcvm360.com/api-v1/ https://www.google.fr/ads https://ampcid.google.fr/; default-src 'none'; font-src 'self' https://app.vwo.com/assets/fonts/ https://fonts.gstatic.com/ https://www.ingdirect.fr/assets/fonts/; frame-src https://*.visualwebsiteoptimizer.com/ http://www.google.com/cse http://www.youtube.com/embed/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ https://www.youtube.com/embed/ https://app.vwo.com/visitor-behavior-analysis/ https://cse.google.com/cse; img-src ssl.google-analytics.com https://www.google.fr/ads/ data: https://news.ing.be/newsingbeimages/assets/ http://*.visualwebsiteoptimizer.com/ http://chart.googleapis.com/ www.ingdirect.fr 'self' https://syndication.twitter.com https://stats.g.doubleclick.net/r/collect/ www.google-analytics.com https://www.google.com/ads/; media-src 'self'; object-src 'self'; script-src connect.facebook.net https://s.ytimg.com/yts/jsbin/ 'self' 'unsafe-eval' apis.google.com https://app.vwo.com/visitor-behavior-analysis/ http://www.ingdirect.fr http://*.visualwebsiteoptimizer.com/ http://trendtext.eu/ www.google.com 'unsafe-inline' https://www.youtube.com/iframe_api https://www.google.com/jsapi http://www.youtube.com/iframe_api code.jquery.com www.google-analytics.com https://cse.google.com/cse/brand http://b.mxpnl.net/cs/ https://cdn.ampproject.org/ http://trendtext.eu/metric/ http://d5phz18u4wuww.cloudfront.net/ platform.twitter.com ssl.google-analytics.com; style-src https://s3.amazonaws.com/vwo-surveys/theme/ https://fonts.googleapis.com/ 'self' http://app.vwo.com/ https://dev.visualwebsiteoptimizer.com/static/0.5/styles/themes/ 'unsafe-inline';