- Content-Security-Policy
- default-src 'self' https: *.peoplegrove.com *.pg-test.com apis.google.com www.google.com fonts.googleapis.com www.gstatic.com fonts.gstatic.com *.filestackapi.com www.google-analytics.com www.googletagmanager.com maps.googleapis.com *.facebook.net *.pg.services *.intercom.io *.intercomcdn.com *.mxpnl.com *.stripe.com *.firebaseio.com www.youtube.com *.iframe.ly *.google.co.in *.pg.services cdn.jsdelivr.net *.getbee.io *.logrocket.io *.lr-ingest.io *.logrocket.com *.transloadit.com *.firebaseapp.com *.bootstrapcdn.com *.customer.io *.userway.org *.wistia.com *.wistia.net *.sentry-cdn.com *.trychameleon.com *.chameleon.io *.chmln-cdn.com *.typeform.com;connect-src * blob: data:;script-src 'self' https: *.peoplegrove.com *.pg-test.com apis.google.com www.google.com fonts.googleapis.com www.gstatic.com fonts.gstatic.com *.filestackapi.com www.google-analytics.com www.googletagmanager.com maps.googleapis.com *.facebook.net *.pg.services *.intercom.io *.intercomcdn.com *.mxpnl.com *.stripe.com *.firebaseio.com www.youtube.com *.iframe.ly *.google.co.in *.pg.services cdn.jsdelivr.net *.getbee.io *.logrocket.io *.lr-ingest.io *.logrocket.com *.transloadit.com *.firebaseapp.com *.bootstrapcdn.com *.customer.io *.userway.org *.wistia.com *.wistia.net *.sentry-cdn.com *.trychameleon.com *.chameleon.io *.chmln-cdn.com *.typeform.com 'unsafe-eval' blob: 'report-sample' 'unsafe-inline';style-src 'self' https: *.peoplegrove.com *.pg-test.com apis.google.com www.google.com fonts.googleapis.com www.gstatic.com fonts.gstatic.com *.filestackapi.com www.google-analytics.com www.googletagmanager.com maps.googleapis.com *.facebook.net *.pg.services *.intercom.io *.intercomcdn.com *.mxpnl.com *.stripe.com *.firebaseio.com www.youtube.com *.iframe.ly *.google.co.in *.pg.services cdn.jsdelivr.net *.getbee.io *.logrocket.io *.lr-ingest.io *.logrocket.com *.transloadit.com *.firebaseapp.com *.bootstrapcdn.com *.customer.io *.userway.org *.wistia.com *.wistia.net *.sentry-cdn.com *.trychameleon.com *.chameleon.io *.chmln-cdn.com *.typeform.
- Permissions-Policy
- accelerometer=(), ambient-light-sensor=(), autoplay=(self "https://cdn.iframe.ly/" "https://peoplegrove.wistia.com"), battery=(), camera=(self), cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self "https://cdn.iframe.ly/" "https://peoplegrove.wistia.com"), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=(self "https://cdn.iframe.ly/" "https://peoplegrove.wistia.com"), geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(self), midi=(), navigation-override=(), payment=(*)
- Referrer-Policy
- strict-origin-when-cross-origin
- Strict-Transport-Security
- max-age=63072000; includeSubDomains; preload
- X-Content-Type-Options
- nosniff
- X-Frame-Options
- DENY