# | Time Frame | Framing Control | TLS Enforce | Content Control | Third JS Parties | 'unsafe-inline' | http / https / * | data: | Diffs | Normalized Policy |
---|---|---|---|---|---|---|---|---|---|---|
0 |
2018-11-19 - 2018-11-27 |
False |
False |
True |
13 |
True |
False |
False |
0 |
child-src *.youtube.com *.gstatic.com *.arcgis.com *.google.com *.answerscloud.com; connect-src *.customsearch.ai *.gstatic.com *.akstat.io *.googleapis.com *.foresee.com 'self' *.go-mpulse.net 'unsafe-inline' *.4seeresults.com *.okta.com *.google.com *.sce.com *.opower.com *.oktapreview.com; default-src *.gstatic.com hosteduxprod.blob.core.windows.net *.googleapis.com 'self' 'unsafe-inline' *.okta.com blob: *.google.com *.opower.com *.answerscloud.com; frame-src *.youtube.com *.gstatic.com *.facebook.com *.facebook.net *.arcgis.com *.google.com *.answerscloud.com *.twitter.com; img-src data: *; report-uri report; script-src *.customsearch.ai *.gstatic.com *.twimg.com *.facebook.net *.fontawesome.com *.adobedtm.com *.googleapis.com 'self' *.go-mpulse.net 'unsafe-inline' 'unsafe-eval' *.okta.com *.google.com *.opower.com *.answerscloud.com *.twitter.com; |
1 |
2018-11-28 - END |
False |
False |
True |
14 |
True |
False |
False |
4 |
child-src *.youtube.com *.gstatic.com *.foresee.com *.arcgis.com *.google.com *.answerscloud.com; connect-src *.customsearch.ai *.gstatic.com *.akstat.io *.googleapis.com *.foresee.com 'self' *.go-mpulse.net 'unsafe-inline' *.4seeresults.com *.okta.com *.google.com *.sce.com *.opower.com *.oktapreview.com; default-src *.gstatic.com hosteduxprod.blob.core.windows.net *.googleapis.com *.foresee.com 'self' 'unsafe-inline' *.okta.com blob: *.google.com *.opower.com *.answerscloud.com; frame-src *.youtube.com *.gstatic.com *.facebook.com *.facebook.net *.foresee.com *.arcgis.com *.google.com *.answerscloud.com *.twitter.com; img-src data: *; report-uri report; script-src *.customsearch.ai *.gstatic.com *.twimg.com *.facebook.net *.fontawesome.com *.adobedtm.com *.googleapis.com 'self' *.go-mpulse.net *.foresee.com 'unsafe-inline' 'unsafe-eval' *.okta.com *.google.com *.opower.com *.answerscloud.com *.twitter.com; |