| x-content-type-options: |
nosniff |
| content-security-policy: |
default-src 'self' 'self' https://*.lessonup.com *.lessonup.com http://localhost:3100/ http://localhost:3050/ http://localhost:3000/ http://localhost:3002/ http://localhost:3200/ https://test.lessonup.dev/ https://staging.lessonup.com/ https://lessonup.com/; img-src 'self' https://www.facebook.com https://*.lessonup.com *.lessonup.com http://localhost:3100/ http://localhost:3050/ http://localhost:3000/ http://localhost:3002/ http://localhost:3200/ https://test.lessonup.dev/ https://staging.lessonup.com/ https://lessonup.com/ *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://t.co https://*.twitter.com https://www.google-analytics.com https://www.googletagmanager.com blob: data: https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://widget.intercom.io/widget/ https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com www.googletagmanager.com https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net images.prismic.io https://lessonup.cdn.prismic.io *.hubspot.com js.hscta.net js-eu1.hscta.net no-cache.hubspot.com *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net bat.bing.com; style-src 'self' unsafe-inline https://*.lessonup.com *.lessonup.com http://localhost:3100/ http://localhost:3050/ http://localhost:3000/ http://localhost:3002/ http://localhost:3200/ https://test.lessonup.dev/ https://staging.lessonup.com/ https://lessonup.com/ 'unsafe-inline' https://optimize.google.com 'unsafe-inline' https://fonts.gstatic.com https://fonts.googleapis.com cloud.typography.com/6162672/684584/css/fonts.css https://www.vangoghmuseum.nl/statics/fonts/796821/50011F6B07DC2A0F8.css https://fonts.googleapis.com/; media-src 'self' https://*.lessonup.com *.lessonup.com http://localhost:3100/ http://localhost:3050/ http://localhost:3000/ http://localhost:3002/ http://localhost:3200/ https://test.lessonup.dev/ https://staging.lessonup.com/ https://lessonup.com/ https://js.intercomcdn.com; font-src 'self' https://*.lessonup.com *.lessonup.com http://localhost:3100/ http://localhost:3050/ http://localhost:3000/ http://localhost:3002/ http://localhost:3200/ https://test.lessonup.dev/ https://staging.lessonup.com/ https://lessonup.com/ http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://js.intercomcdn.com https://fonts.intercomcdn.com https://fonts.gstatic.com https://fonts.googleapis.com https://fonts.googleapis.com/; frame-src 'self' https://www.avo.app/ https://webforms.pipedrive.com/ https://vars.hotjar.com/ https://www.facebook.com/tr/ https://*.lessonup.com *.lessonup.com http://localhost:3100/ http://localhost:3050/ http://localhost:3000/ http://localhost:3002/ http://localhost:3200/ https://test.lessonup.dev/ https://staging.lessonup.com/ https://lessonup.com/ https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://optimize.google.com https://intercom-sheets.com https://js.stripe.com https://hooks.stripe.com youtube.com www.youtube.com *.hubspot.com *.hs-sites.com *.hs-sites-eu1.com *.hubspot.net play.hubspotvideo.com play-eu1.hubspotvideo.com *.hsforms.net *.hsforms.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net https://i.ytimg.com/ https://www.facebook.com/ *.pipedriveassets.com/ https://webforms.pipedrive.com https://*.lessonup.com *.lessonup.com http://localhost:3100/ http://localhost:3050/ http://localhost:3000/ http://localhost:3002/ http://localhost:3200/ https://test.lessonup.dev/ https://staging.lessonup.com/ https://lessonup.com/ *.googletagmanager.com *.g.doubleclick.net http://*.hotjar.co http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 'unsafe-inline' https://*.twitter.com https://*.ads-twitter.com 'unsafe-inline' https://optimize.google.com https://www.googleanalytics.com https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com *.googleapis.com *.googleadservices.com 'unsafe-inline' https://www.googletagmanager.com 'self' https://www.google-analytics.com https://maps.googleapis.com https://www.youtube.com/iframe_api https://js.stripe.com https://images.prismic.io/ https://lessonup.cdn.prismic.io *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hsadspixel.net *.hscollectedforms.net *.hsforms.com *.hsforms.net *.hsleadflows.net *.hubspot.com *.hubspot.net *.usemessages.com feedback-eu1.hubapi.com feedback.hubapi.com js-eu1.hscta.net js.hscta.net static.hsappstatic.net *.hubspotfeedback.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hsadspixel.net connect.facebook.net bat.bing.com; connect-src 'self' https://api.avo.app/ https://collector.test.lessonup.dev https://collector.lessonup.com/ https://stats.g.doubleclick.net https://collector.test.lessonup.com https://vc.hotjar.io/ ws://localhost:3200/site https://in.hotjar.com/api/ https://*.lessonup.com *.lessonup.com http://localhost:3100/ http://localhost:3050/ http://localhost:3000/ http://localhost:3002/ http://localhost:3200/ https://test.lessonup.dev/ https://staging.lessonup.com/ https://lessonup.com/ *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://optimize.google.com https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.intercomusercontent.com https://api-iam.intercom.io/ https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://api.stripe.com *.hscollectedforms.net *.hs-banner.com *.hubspot.com *.hubapi.com js.hscta.net js-eu1.hscta.net *.hsforms.com bat.bing.com; child-src 'self' https://*.lessonup.com *.lessonup.com http://localhost:3100/ http://localhost:3050/ http://localhost:3000/ http://localhost:3002/ http://localhost:3200/ https://test.lessonup.dev/ https://staging.lessonup.com/ https://lessonup.com/ https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://intercom-sheets.com; form-action 'self' https://www.facebook.com/ https://*.lessonup.com *.lessonup.com http://localhost:3100/ http://localhost:3050/ http://localhost:3000/ http://localhost:3002/ http://localhost:3200/ https://test.lessonup.dev/ https://staging.lessonup.com/ https://lessonup.com/ https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io *.hsforms.net *.hsforms.com *.hubspot.com |
| permissions-policy: |
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), gamepad=(), geolocation=(), gyroscope=(), usb=(), microphone=(), interest-cohort=() |
| strict-transport-security: |
value: max-age=63072000; includeSubDomains; preload |
| x-frame-options: |
SAMEORIGIN |
| referrer-policy: |
origin |
| x-powered-by: |
Next.js |
| etag: |
"f662-lIfwKNAwF+XVFr/R7Fu8fD6WvHI" |
| content-type: |
text/html; charset=utf-8 |
| content-length: |
63074 |
| cache-control: |
private, no-cache, no-store, max-age=0, must-revalidate |
| vary: |
Accept-Encoding |
| date: |
Wed, 02 Oct 2024 12:16:52 GMT |
| via: |
1.1 google |
| alt-svc: |
h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 |
| connection: |
close |
|
