Security Analysis Results

clear

br

default-src 'self' https://storage.googleapis.com/sierra-next/ https://*.x.sana.ai/ https://sana.ai/static/;script-src 'self' 'wasm-unsafe-eval' 'nonce-ODg2ZGYwNGMtM2M5NC00MWNiLWJiN2MtNDY5NmM3NTc5OGQz' https://storage.googleapis.com/sierra-next/ https://storage.googleapis.com/sierra-static/ https://*.x.sana.ai/ https://sierra-cdn.sanalabs.com/ https://cdn.segment.com/ https://*.intercom.io/ https://*.intercomcdn.com/ https://www.google-analytics.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://cdnjs.cloudflare.com/ajax/libs/pdf.js/ https://embed.howdou.net/ https://*.sentry.io https://sentry.io https://recaptcha.net https://accounts.google.com/gsi/client https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com blob: https://maps.googleapis.com/;connect-src 'self' data: blob: ws://localhost:1236 https://*.x.sana.ai/ https://*.sana.dev/ https://sierra-cdn.sanalabs.com/ wss://*.sana.dev/ wss://*.sana.ai/ https://api.segment.io/ https://cdn.segment.com/ https://accounts.google.com/ https://*.intercom.io/ ws://*.intercom.io/ https://*.intercomcdn.com/ https://api.unsplash.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://recaptcha.net/recaptcha/ https://sentry.io https://*.sentry.io https://log-api.eu.newrelic.com/log/v1 https://nr-proxy.x.sana.ai https://iframe.ly/ https://embed.howdou.net/ https://cdn.sierra-staging-ec5c.sanalabs.com/ https://cdn.sierra-prod-us-central1.sanalabs.com/ https://cdn.sierra-prod-48bd.sanalabs.com/ https://cdn.sierra-prod-me-central2.sanalabs.com/ https://cdn.wd-sanalearn-staging.sanalabs.com/ https://storage.googleapis.com/sierra-files/ https://storage.googleapis.com/sierra-scorm-uploads/ https://storage.googleapis.com/sierra-prod-eu-scorm-uploads/ https://storage.googleapis.com/sierra-prod-us-central1-scorm-uploads/ https://storage.googleapis.com/sierra-staging-master-scorm-uploads/ https://storage.googleapis.com/sierra-staging-us-central1-scorm-uploads/ https://storage.googleapis.com/sierra-prod-me-central2-scorm-uploads/ https://storage.googleapis.com/wd-sanalearn-staging-scorm-uploads/ https://storage.googleapis.com/sierra-document-uploads/ https://storage.googleapis.com/sierra-prod-eu-document-uploads/ https://storage.googleapis.com/sierra-prod-us-central1-document-uploads/ https://storage.googleapis.com/sierra-staging-master-document-uploads/ https://storage.googleapis.com/sierra-staging-us-central1-document-uploads/ https://storage.googleapis.com/sierra-prod-me-central2-document-uploads/ https://storage.googleapis.com/wd-sanalearn-staging-document-uploads/ https://storage.googleapis.com/sierra-homework-uploads/ https://storage.googleapis.com/sierra-prod-eu-homework-uploads/ https://storage.googleapis.com/sierra-prod-us-central1-homework-uploads/ https://storage.googleapis.com/sierra-staging-master-homework-uploads/ https://storage.googleapis.com/sierra-staging-us-central1-homework-uploads/ https://storage.googleapis.com/sierra-prod-me-central2-homework-uploads/ https://storage.googleapis.com/wd-sanalearn-staging-homework-uploads/ https://storage.googleapis.com/sierra-uploads/ https://storage.googleapis.com/sierra-temporary-file-upload-staging/ https://storage.googleapis.com/sierra-temporary-file-upload-production/ https://storage.googleapis.com/sierra-prod-eu-temporary-file-upload/ https://storage.googleapis.com/sierra-prod-us-central1-temporary-file-upload/ https://storage.googleapis.com/sierra-staging-master-temporary-file-upload/ https://storage.googleapis.com/sierra-staging-us-central1-temporary-file-upload/ https://storage.googleapis.com/sierra-staging-master-temporary-files/ https://storage.googleapis.com/sierra-prod-me-central2-temporary-files/ https://storage.googleapis.com/wd-sanalearn-staging-temporary-files/ https://storage.googleapis.com/sierra-staging-master-media-library/ https://storage.googleapis.com/sierra-staging-develop-media-library/ https://storage.googleapis.com/sierra-staging-us-central1-media-library/ https://storage.googleapis.com/sierra-prod-eu-media-library/ https://storage.googleapis.com/sierra-prod-us-central1-media-library/ https://storage.googleapis.com/sierra-prod-me-central2-media-library/ https://storage.googleapis.com/wd-sanalearn-staging-media-library/ https://storage.googleapis.com/sierra-prod-eu-user-assets/ https://storage.googleapis.com/sierra-prod-us-central1-user-assets/ https://storage.googleapis.com/sierra-staging-master-user-assets/ https://storage.googleapis.com/sierra-staging-us-central1-user-assets/ https://storage.googleapis.com/sierra-prod-me-central2-user-assets/ https://storage.googleapis.com/wd-sanalearn-staging-user-assets/ https://storage.googleapis.com/sierra-prod-eu-assets/ https://storage.googleapis.com/sierra-prod-us-central1-assets/ https://storage.googleapis.com/sierra-staging-master-assets/ https://storage.googleapis.com/sierra-staging-us-central1-assets/ https://storage.googleapis.com/sierra-prod-me-central2-assets/ https://storage.googleapis.com/wd-sanalearn-staging-assets/ https://res.cloudinary.com/sana-ai/ https://storage.googleapis.com/sierra-static/ https://storage.googleapis.com/sierra_live_recordings/ https://maps.googleapis.com/ https://api.hsforms.com/ https://*.agora.io:*/ https://*.sd-rtn.com:*/ wss://*.agora.io:*/ wss://*.sd-rtn.com:*/ https://*.ably.io:*/ wss://*.ably.io:*/ https://*.ably-realtime.com wss://*.ably-realtime.com https://main.realtime.ably.net wss://main.realtime.ably.net https://pfc-server-4fdsufnlta-lz.a.run.app https://gateway.zscloud.net:*/ *.nr-data.net https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.intercomusercontent.com https://res.cdn.office.net https://*.teams.microsoft.com https://teams.microsoft.com https://livekit.rtc.elevenlabs.io https://livekit.rtc.eu.residency.elevenlabs.io wss://livekit.rtc.elevenlabs.io wss://livekit.rtc.eu.residency.elevenlabs.io https://api.eu.residency.elevenlabs.io https://api.elevenlabs.io wss://api.eu.residency.elevenlabs.io wss://api.elevenlabs.io;worker-src 'self' blob: https://*.x.sana.ai/ https://*.x.sana.dev/ https://sierra-cdn.sanalabs.com/;img-src 'self' blob: data: https:;style-src 'self' 'unsafe-inline' https://storage.googleapis.com/sierra-next/ https://*.x.sana.ai/ https://sierra-cdn.sanalabs.com/ https://sana.ai/static/ https://fonts.googleapis.com/ https://cdn.jsdelivr.net/npm/katex@0.16.10/;font-src 'self' data: https:;frame-src 'self' https: blob:;object-src 'none';media-src https: blob:;child-src https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net;form-action https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io;report-uri /x-realtime/report/content-security-policy-violation?version=dc7329a61df7afe49e26ccf38818cb4bc28a70ad;frame-ancestors *.cloud.microsoft.com teams.microsoft.com *.teams.microsoft.com;

text/html; charset=utf-8

Sun, 03 May 2026 06:57:30 GMT

?1

strict-origin-when-cross-origin

max-age=63072000; includeSubDomains; preload

chunked

Accept-Encoding

1.1 google

nosniff