SPECIALISED COVERS
https://www.specialisedcovers.com ↗Your policy is ready
You have two options for deploying this policy. Start with Report-Onlyif the site is live and you want to be cautious — it won't break anything. When you're confident the policy is complete, switch to the enforcing header which actively blocks unauthorised resources.
① Start here — Report-Only
Use Content-Security-Policy-Report-Only. Nothing is blocked. Violations are still reported to CSP Studio so you can catch any gaps.
② When ready — Enforcing
Swap to Content-Security-Policy. Unauthorised resources are now actively blocked. Keep the report-uri so ongoing violations are still captured.
Violation collector endpoint
https://csp.tall.agency/api/report/cfff710e-df47-4dd5-b303-3b76e99ead67Paste this URL as the report-uri in your hosting platform's CSP header.
Content-Security-Policy-Report-Only
default-src 'self' https://www.specialisedcovers.com https://img.specialisedcovers.com https://use.typekit.net data: https://datainventive52.com https://www.googletagmanager.com https://cdn-cookieyes.com https://log.cookieyes.com https://widget.trustpilot.com https://cdn.mouseflow.com https://js.stripe.com https://connect.facebook.net https://directory.cookieyes.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.google.co.uk https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.specialisedcovers.com https://datainventive52.com https://cdn-cookieyes.com https://www.googletagmanager.com data: https://cdn.mouseflow.com https://connect.facebook.net https://widget.trustpilot.com https://js.stripe.com https://www.paypal.com http://www.specialisedcovers.com http://www.googletagmanager.com https://maps.googleapis.com https://stats.wp.com https://cdn.datatables.net https://www.paypalobjects.com https://connect-js.stripe.com https://c.paypal.com https://cdnjs.cloudflare.com https://widget.intercom.io https://js.intercomcdn.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://www.specialisedcovers.com https://p.typekit.net https://fonts.googleapis.com https://www.gstatic.com http://www.specialisedcovers.com https://cdnjs.cloudflare.com https://cdn.datatables.net https://unpkg.com https://cdn.honey.io https://rsms.me; img-src 'self' https://www.specialisedcovers.com data: https://files.bugherd.com https://img.specialisedcovers.com https://www.google.ie https://www.facebook.com https://www.google.es https://cdn-cookieyes.com https://www.google.co.uk https://www.googletagmanager.com https://www.google.hu https://www.paypalobjects.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.si https://i.vimeocdn.com https://connect.facebook.net https://www.google.co.nz https://www.google.com.au https://www.google.cl https://www.google.fr https://www.google.im https://translate.google.com https://www.google.de https://fonts.gstatic.com https://www.google.ca https://www.google.je https://www.google.cz https://www.google.se https://www.google.nl https://pixel.wp.com https://secure.gravatar.com https://www.google.co.za https://www.google.com.vn https://woocommerce.com https://plugin-updates.wpengine.com https://www.google.is https://www.google.pt https://www.google.bg https://c6.paypal.com https://b.stats.paypal.com https://www.google.ch https://c.paypal.com https://www.google.sk https://js.intercomcdn.com https://www.google.be https://www.google.com.ar https://www.google.dk https://stats.g.doubleclick.net https://www.google.at https://pluginrepublic.com https://update.yithemes.com https://s.w.org https://www.google.ae https://www.google.com.gi https://www.google.it https://www.google.bs https://www.google.rs https://www.google.pl https://www.google.hr https://www.google.no https://www.google.com.sg https://www.google.com.qa https://www.google.lt https://cdn.honey.io https://www.google.com.tr https://www.google.co.ke blob: https://www.google.com.my https://www.google.com.eg https://www.google.ro https://www.google.com.sa https://www.google.com.mt https://www.google.co.jp https://emailsignature.trustpilot.com https://specialised-covers.s3.eu-west-2.amazonaws.com https://www.google.lk https://www.google.com.ec https://www.google.co.in https://www.google.tt https://www.google.gg https://www.google.gr https://www.google.com.hk http://www.specialisedcovers.com https://www.google.lu https://lh3.google.com https://encrypted-tbn1.gstatic.com https://encrypted-tbn0.gstatic.com https://encrypted-tbn3.gstatic.com https://www.google.com.mx https://www.google.com.ng https://www.google.lv https://www.google.com.br https://www.google.co.il https://www.google.com.pk https://www.google.co.kr https://www.google.com.cy https://www.google.co.ma https://www.google.co.id; font-src 'self' https://use.typekit.net https://www.specialisedcovers.com data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://s0.wp.com https://fonts.intercomcdn.com https://frontend-cdn.perplexity.ai https://at.alicdn.com https://cdn.yiban.io https://rsms.me; connect-src 'self' wss://ws-mt1.pusher.com https://log.cookieyes.com https://www.specialisedcovers.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://api.specialisedcovers.com https://cdn-cookieyes.com https://www.googletagmanager.com https://directory.cookieyes.com https://www.paypal.com https://api.ideal-postcodes.co.uk https://www.facebook.com https://region1.google-analytics.com https://www.google.co.uk http://www.specialisedcovers.com https://analytics.google.com https://maps.googleapis.com https://www.google-analytics.com https://www.google.com https://www.google.com.au https://www.google.se https://www.google.com.vn https://www.google.fr https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://www.google.nl https://www.google.de https://www.google.at data: https://www.google.ie https://www.google.es https://www.google.co.nz https://www.google.bs https://www.google.no https://www.google.com.sg https://www.google.je https://www.google.ae https://pagead2.googlesyndication.com https://www.bugherd.com https://www.google.co.za https://use.typekit.net https://p.typekit.net https://www.google.be https://www.google.lk https://www.google.co.in https://www.google.pt https://www.google.it https://www.google.com.hk https://www.google.gr https://img.specialisedcovers.com https://www.google.lu https://www.google.com.mx https://translate.googleapis.com https://www.google.com.pk https://js.stripe.com https://www.google.ch https://www.google.cl https://www.google.com.tr https://www.google.hu; frame-src https://widget.trustpilot.com https://www.facebook.com https://js.stripe.com https://my.matterport.com https://www.paypal.com https://player.vimeo.com https://www.specialisedcovers.com https://connect-js.stripe.com https://c.paypal.com https://my.matterportvr.cn https://www.paypalobjects.com blob:; object-src 'none'; base-uri 'self'; form-action 'self'; media-src 'self' https://www.specialisedcovers.com data:; worker-src 'self' blob: https://www.specialisedcovers.com; report-uri https://csp.tall.agency/api/report/cfff710e-df47-4dd5-b303-3b76e99ead67
Content-Security-Policy (enforcing)
default-src 'self' https://www.specialisedcovers.com https://img.specialisedcovers.com https://use.typekit.net data: https://datainventive52.com https://www.googletagmanager.com https://cdn-cookieyes.com https://log.cookieyes.com https://widget.trustpilot.com https://cdn.mouseflow.com https://js.stripe.com https://connect.facebook.net https://directory.cookieyes.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.google.co.uk https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.specialisedcovers.com https://datainventive52.com https://cdn-cookieyes.com https://www.googletagmanager.com data: https://cdn.mouseflow.com https://connect.facebook.net https://widget.trustpilot.com https://js.stripe.com https://www.paypal.com http://www.specialisedcovers.com http://www.googletagmanager.com https://maps.googleapis.com https://stats.wp.com https://cdn.datatables.net https://www.paypalobjects.com https://connect-js.stripe.com https://c.paypal.com https://cdnjs.cloudflare.com https://widget.intercom.io https://js.intercomcdn.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://www.specialisedcovers.com https://p.typekit.net https://fonts.googleapis.com https://www.gstatic.com http://www.specialisedcovers.com https://cdnjs.cloudflare.com https://cdn.datatables.net https://unpkg.com https://cdn.honey.io https://rsms.me; img-src 'self' https://www.specialisedcovers.com data: https://files.bugherd.com https://img.specialisedcovers.com https://www.google.ie https://www.facebook.com https://www.google.es https://cdn-cookieyes.com https://www.google.co.uk https://www.googletagmanager.com https://www.google.hu https://www.paypalobjects.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.si https://i.vimeocdn.com https://connect.facebook.net https://www.google.co.nz https://www.google.com.au https://www.google.cl https://www.google.fr https://www.google.im https://translate.google.com https://www.google.de https://fonts.gstatic.com https://www.google.ca https://www.google.je https://www.google.cz https://www.google.se https://www.google.nl https://pixel.wp.com https://secure.gravatar.com https://www.google.co.za https://www.google.com.vn https://woocommerce.com https://plugin-updates.wpengine.com https://www.google.is https://www.google.pt https://www.google.bg https://c6.paypal.com https://b.stats.paypal.com https://www.google.ch https://c.paypal.com https://www.google.sk https://js.intercomcdn.com https://www.google.be https://www.google.com.ar https://www.google.dk https://stats.g.doubleclick.net https://www.google.at https://pluginrepublic.com https://update.yithemes.com https://s.w.org https://www.google.ae https://www.google.com.gi https://www.google.it https://www.google.bs https://www.google.rs https://www.google.pl https://www.google.hr https://www.google.no https://www.google.com.sg https://www.google.com.qa https://www.google.lt https://cdn.honey.io https://www.google.com.tr https://www.google.co.ke blob: https://www.google.com.my https://www.google.com.eg https://www.google.ro https://www.google.com.sa https://www.google.com.mt https://www.google.co.jp https://emailsignature.trustpilot.com https://specialised-covers.s3.eu-west-2.amazonaws.com https://www.google.lk https://www.google.com.ec https://www.google.co.in https://www.google.tt https://www.google.gg https://www.google.gr https://www.google.com.hk http://www.specialisedcovers.com https://www.google.lu https://lh3.google.com https://encrypted-tbn1.gstatic.com https://encrypted-tbn0.gstatic.com https://encrypted-tbn3.gstatic.com https://www.google.com.mx https://www.google.com.ng https://www.google.lv https://www.google.com.br https://www.google.co.il https://www.google.com.pk https://www.google.co.kr https://www.google.com.cy https://www.google.co.ma https://www.google.co.id; font-src 'self' https://use.typekit.net https://www.specialisedcovers.com data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://s0.wp.com https://fonts.intercomcdn.com https://frontend-cdn.perplexity.ai https://at.alicdn.com https://cdn.yiban.io https://rsms.me; connect-src 'self' wss://ws-mt1.pusher.com https://log.cookieyes.com https://www.specialisedcovers.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://api.specialisedcovers.com https://cdn-cookieyes.com https://www.googletagmanager.com https://directory.cookieyes.com https://www.paypal.com https://api.ideal-postcodes.co.uk https://www.facebook.com https://region1.google-analytics.com https://www.google.co.uk http://www.specialisedcovers.com https://analytics.google.com https://maps.googleapis.com https://www.google-analytics.com https://www.google.com https://www.google.com.au https://www.google.se https://www.google.com.vn https://www.google.fr https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://www.google.nl https://www.google.de https://www.google.at data: https://www.google.ie https://www.google.es https://www.google.co.nz https://www.google.bs https://www.google.no https://www.google.com.sg https://www.google.je https://www.google.ae https://pagead2.googlesyndication.com https://www.bugherd.com https://www.google.co.za https://use.typekit.net https://p.typekit.net https://www.google.be https://www.google.lk https://www.google.co.in https://www.google.pt https://www.google.it https://www.google.com.hk https://www.google.gr https://img.specialisedcovers.com https://www.google.lu https://www.google.com.mx https://translate.googleapis.com https://www.google.com.pk https://js.stripe.com https://www.google.ch https://www.google.cl https://www.google.com.tr https://www.google.hu; frame-src https://widget.trustpilot.com https://www.facebook.com https://js.stripe.com https://my.matterport.com https://www.paypal.com https://player.vimeo.com https://www.specialisedcovers.com https://connect-js.stripe.com https://c.paypal.com https://my.matterportvr.cn https://www.paypalobjects.com blob:; object-src 'none'; base-uri 'self'; form-action 'self'; media-src 'self' https://www.specialisedcovers.com data:; worker-src 'self' blob: https://www.specialisedcovers.com
Directive breakdown — 12 directives
img-src'self' https://www.specialisedcovers.com data: https://files.bugherd.com https://img.specialisedcovers.com https://www.google.ie https://www.facebook.com https://www.google.es https://cdn-cookieyes.com https://www.google.co.uk https://www.googletagmanager.com https://www.google.hu https://www.paypalobjects.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.si https://i.vimeocdn.com https://connect.facebook.net https://www.google.co.nz https://www.google.com.au https://www.google.cl https://www.google.fr https://www.google.im https://translate.google.com https://www.google.de https://fonts.gstatic.com https://www.google.ca https://www.google.je https://www.google.cz https://www.google.se https://www.google.nl https://pixel.wp.com https://secure.gravatar.com https://www.google.co.za https://www.google.com.vn https://woocommerce.com https://plugin-updates.wpengine.com https://www.google.is https://www.google.pt https://www.google.bg https://c6.paypal.com https://b.stats.paypal.com https://www.google.ch https://c.paypal.com https://www.google.sk https://js.intercomcdn.com https://www.google.be https://www.google.com.ar https://www.google.dk https://stats.g.doubleclick.net https://www.google.at https://pluginrepublic.com https://update.yithemes.com https://s.w.org https://www.google.ae https://www.google.com.gi https://www.google.it https://www.google.bs https://www.google.rs https://www.google.pl https://www.google.hr https://www.google.no https://www.google.com.sg https://www.google.com.qa https://www.google.lt https://cdn.honey.io https://www.google.com.tr https://www.google.co.ke blob: https://www.google.com.my https://www.google.com.eg https://www.google.ro https://www.google.com.sa https://www.google.com.mt https://www.google.co.jp https://emailsignature.trustpilot.com https://specialised-covers.s3.eu-west-2.amazonaws.com https://www.google.lk https://www.google.com.ec https://www.google.co.in https://www.google.tt https://www.google.gg https://www.google.gr https://www.google.com.hk http://www.specialisedcovers.com https://www.google.lu https://lh3.google.com https://encrypted-tbn1.gstatic.com https://encrypted-tbn0.gstatic.com https://encrypted-tbn3.gstatic.com https://www.google.com.mx https://www.google.com.ng https://www.google.lv https://www.google.com.br https://www.google.co.il https://www.google.com.pk https://www.google.co.kr https://www.google.com.cy https://www.google.co.ma https://www.google.co.id
base-uri'self'
font-src'self' https://use.typekit.net https://www.specialisedcovers.com data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://s0.wp.com https://fonts.intercomcdn.com https://frontend-cdn.perplexity.ai https://at.alicdn.com https://cdn.yiban.io https://rsms.me
frame-srchttps://widget.trustpilot.com https://www.facebook.com https://js.stripe.com https://my.matterport.com https://www.paypal.com https://player.vimeo.com https://www.specialisedcovers.com https://connect-js.stripe.com https://c.paypal.com https://my.matterportvr.cn https://www.paypalobjects.com blob:
media-src'self' https://www.specialisedcovers.com data:
style-src'self' 'unsafe-inline' https://use.typekit.net https://www.specialisedcovers.com https://p.typekit.net https://fonts.googleapis.com https://www.gstatic.com http://www.specialisedcovers.com https://cdnjs.cloudflare.com https://cdn.datatables.net https://unpkg.com https://cdn.honey.io https://rsms.me
object-src'none'
script-src'self' 'unsafe-inline' 'unsafe-eval' https://www.specialisedcovers.com https://datainventive52.com https://cdn-cookieyes.com https://www.googletagmanager.com data: https://cdn.mouseflow.com https://connect.facebook.net https://widget.trustpilot.com https://js.stripe.com https://www.paypal.com http://www.specialisedcovers.com http://www.googletagmanager.com https://maps.googleapis.com https://stats.wp.com https://cdn.datatables.net https://www.paypalobjects.com https://connect-js.stripe.com https://c.paypal.com https://cdnjs.cloudflare.com https://widget.intercom.io https://js.intercomcdn.com https://unpkg.com
worker-src'self' blob: https://www.specialisedcovers.com
connect-src'self' wss://ws-mt1.pusher.com https://log.cookieyes.com https://www.specialisedcovers.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://api.specialisedcovers.com https://cdn-cookieyes.com https://www.googletagmanager.com https://directory.cookieyes.com https://www.paypal.com https://api.ideal-postcodes.co.uk https://www.facebook.com https://region1.google-analytics.com https://www.google.co.uk http://www.specialisedcovers.com https://analytics.google.com https://maps.googleapis.com https://www.google-analytics.com https://www.google.com https://www.google.com.au https://www.google.se https://www.google.com.vn https://www.google.fr https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://www.google.nl https://www.google.de https://www.google.at data: https://www.google.ie https://www.google.es https://www.google.co.nz https://www.google.bs https://www.google.no https://www.google.com.sg https://www.google.je https://www.google.ae https://pagead2.googlesyndication.com https://www.bugherd.com https://www.google.co.za https://use.typekit.net https://p.typekit.net https://www.google.be https://www.google.lk https://www.google.co.in https://www.google.pt https://www.google.it https://www.google.com.hk https://www.google.gr https://img.specialisedcovers.com https://www.google.lu https://www.google.com.mx https://translate.googleapis.com https://www.google.com.pk https://js.stripe.com https://www.google.ch https://www.google.cl https://www.google.com.tr https://www.google.hu
default-src'self' https://www.specialisedcovers.com https://img.specialisedcovers.com https://use.typekit.net data: https://datainventive52.com https://www.googletagmanager.com https://cdn-cookieyes.com https://log.cookieyes.com https://widget.trustpilot.com https://cdn.mouseflow.com https://js.stripe.com https://connect.facebook.net https://directory.cookieyes.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.google.co.uk https://www.facebook.com
form-action'self'
Snapshot generated 8 June 2026 at 11:52