HTTPS Enabled
content-security-policydefault-src 'self' 'unsafe-eval' 'unsafe-inline' *.bucherer.magnolia-platform.io prod.bucherer-prod.magnolia-platform.io http://localhost:8080 *.bucherer.com bucherer.com development-eu01-bucherer.demandware.net staging-eu01-bucherer.demandware.net production-eu01-bucherer.demandware.net *.affirm.com *.amazonaws.com *.bing.com *.bing.net *.bucherer.com *.clarity.ms *.cloudinary.com *.collect.igodigital.com *.commercecloud.salesforce.com *.equalweb.com *.force.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.inspify.io *.linkedin.com *.mktgcdn.com *.mouseflow.com *.my.salesforce-scrt.com *.my.site.com *.onetrust.com *.patek.com *.pinterest.com *.recruiterbox.com *.rolex.com *.salesforce.com *.salesforceliveagent.com *.tagmanager.google.com *.tangiblee.com *.teads.tv *.test.salesforce.com analytics.tiktok.com assets.adobedtm.com bucherer--uat.sandbox.my.salesforce-sites.com bucherer.my.salesforce-sites.com campaigns.brame.io cdn.cookielaw.org cm.everesttech.net cm.everestterch.net connect.facebook.net data: dc.services.visualstudio.com dpm.demdex.net google.com googleads.g.doubleclick.net googletagmanager.com http://localhost:8080/* iframe.patek.com/* live.brame-gamification.com rolex.demdex.net s.pinimg.com snap.licdn.com ssl.pstatic.net static.cloudflareinsights.com stats.g.doubleclick.net wcs.naver.net www.facebook.com www.gooegle.es www.google.ch www.google.co.uk www.google.de www.google.dk www.google.es www.google.fr www.google.pl www.google.pt www.youtube.com youtube.com;img-src 'self' 'unsafe-eval' 'unsafe-inline' *.bucherer.magnolia-platform.io prod.bucherer-prod.magnolia-platform.io http://localhost:8080 *.bucherer.com bucherer.com development-eu01-bucherer.demandware.net staging-eu01-bucherer.demandware.net production-eu01-bucherer.demandware.net *.affirm.com *.amazonaws.com *.bing.com *.bing.net *.bucherer.com *.clarity.ms *.cloudinary.com *.collect.igodigital.com *.commercecloud.salesforce.com *.equalweb.com *.force.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.inspify.io *.linkedin.com *.mktgcdn.com *.mouseflow.com *.my.salesforce-scrt.com *.my.site.com *.onetrust.com *.patek.com *.pinterest.com *.recruiterbox.com *.rolex.com *.salesforce.com *.salesforceliveagent.com *.tagmanager.google.com *.tangiblee.com *.teads.tv *.test.salesforce.com analytics.tiktok.com assets.adobedtm.com bucherer--uat.sandbox.my.salesforce-sites.com bucherer.my.salesforce-sites.com campaigns.brame.io cdn.cookielaw.org cm.everesttech.net cm.everestterch.net connect.facebook.net data: dc.services.visualstudio.com dpm.demdex.net google.com googleads.g.doubleclick.net googletagmanager.com http://localhost:8080/* iframe.patek.com/* live.brame-gamification.com rolex.demdex.net s.pinimg.com snap.licdn.com ssl.pstatic.net static.cloudflareinsights.com stats.g.doubleclick.net wcs.naver.net www.facebook.com www.gooegle.es www.google.ch www.google.co.uk www.google.de www.google.dk www.google.es www.google.fr www.google.pl www.google.pt www.youtube.com youtube.com;media-src 'self' 'unsafe-eval' 'unsafe-inline' *.bucherer.magnolia-platform.io prod.bucherer-prod.magnolia-platform.io http://localhost:8080 *.bucherer.com bucherer.com development-eu01-bucherer.demandware.net staging-eu01-bucherer.demandware.net production-eu01-bucherer.demandware.net *.affirm.com *.amazonaws.com *.bing.com *.bing.net *.bucherer.com *.clarity.ms *.cloudinary.com *.collect.igodigital.com *.commercecloud.salesforce.com *.equalweb.com *.force.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.inspify.io *.linkedin.com *.mktgcdn.com *.mouseflow.com *.my.salesforce-scrt.com *.my.site.com *.onetrust.com *.patek.com *.pinterest.com *.recruiterbox.com *.rolex.com *.salesforce.com *.salesforceliveagent.com *.tagmanager.google.com *.tangiblee.com *.teads.tv *.test.salesforce.com analytics.tiktok.com assets.adobedtm.com bucherer--uat.sandbox.my.salesforce-sites.com bucherer.my.salesforce-sites.com campaigns.brame.io cdn.cookielaw.org cm.everesttech.net cm.everestterch.net connect.facebook.net data: dc.services.visualstudio.com dpm.demdex.net google.com googleads.g.doubleclick.net googletagmanager.com http://localhost:8080/* iframe.patek.com/* live.brame-gamification.com rolex.demdex.net s.pinimg.com snap.licdn.com ssl.pstatic.net static.cloudflareinsights.com stats.g.doubleclick.net wcs.naver.net www.facebook.com www.gooegle.es www.google.ch www.google.co.uk www.google.de www.google.dk www.google.es www.google.fr www.google.pl www.google.pt www.youtube.com youtube.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.bucherer.magnolia-platform.io prod.bucherer-prod.magnolia-platform.io http://localhost:8080 *.bucherer.com bucherer.com development-eu01-bucherer.demandware.net staging-eu01-bucherer.demandware.net production-eu01-bucherer.demandware.net *.affirm.com *.amazonaws.com *.bing.com *.bing.net *.bucherer.com *.clarity.ms *.cloudinary.com *.collect.igodigital.com *.commercecloud.salesforce.com *.equalweb.com *.force.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.inspify.io *.linkedin.com *.mktgcdn.com *.mouseflow.com *.my.salesforce-scrt.com *.my.site.com *.onetrust.com *.patek.com *.pinterest.com *.recruiterbox.com *.rolex.com *.salesforce.com *.salesforceliveagent.com *.tagmanager.google.com *.tangiblee.com *.teads.tv *.test.salesforce.com analytics.tiktok.com assets.adobedtm.com bucherer--uat.sandbox.my.salesforce-sites.com bucherer.my.salesforce-sites.com campaigns.brame.io cdn.cookielaw.org cm.everesttech.net cm.everestterch.net connect.facebook.net data: dc.services.visualstudio.com dpm.demdex.net google.com googleads.g.doubleclick.net googletagmanager.com http://localhost:8080/* iframe.patek.com/* live.brame-gamification.com rolex.demdex.net s.pinimg.com snap.licdn.com ssl.pstatic.net static.cloudflareinsights.com stats.g.doubleclick.net wcs.naver.net www.facebook.com www.gooegle.es www.google.ch www.google.co.uk www.google.de www.google.dk www.google.es www.google.fr www.google.pl www.google.pt www.youtube.com youtube.com;connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.bucherer.magnolia-platform.io prod.bucherer-prod.magnolia-platform.io http://localhost:8080 *.bucherer.com bucherer.com development-eu01-bucherer.demandware.net staging-eu01-bucherer.demandware.net production-eu01-bucherer.demandware.net *.affirm.com *.amazonaws.com *.bing.com *.bing.net *.bucherer.com *.clarity.ms *.cloudinary.com *.collect.igodigital.com *.commercecloud.salesforce.com *.equalweb.com *.force.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.inspify.io *.linkedin.com *.mktgcdn.com *.mouseflow.com *.my.salesforce-scrt.com *.my.site.com *.onetrust.com *.patek.com *.pinterest.com *.recruiterbox.com *.rolex.com *.salesforce.com *.salesforceliveagent.com *.tagmanager.google.com *.tangiblee.com *.teads.tv *.test.salesforce.com analytics.tiktok.com assets.adobedtm.com bucherer--uat.sandbox.my.salesforce-sites.com bucherer.my.salesforce-sites.com campaigns.brame.io cdn.cookielaw.org cm.everesttech.net cm.everestterch.net connect.facebook.net data: dc.services.visualstudio.com dpm.demdex.net google.com googleads.g.doubleclick.net googletagmanager.com http://localhost:8080/* iframe.patek.com/* live.brame-gamification.com rolex.demdex.net s.pinimg.com snap.licdn.com ssl.pstatic.net static.cloudflareinsights.com stats.g.doubleclick.net wcs.naver.net www.facebook.com www.gooegle.es www.google.ch www.google.co.uk www.google.de www.google.dk www.google.es www.google.fr www.google.pl www.google.pt www.youtube.com youtube.com;frame-src 'self' 'unsafe-eval' 'unsafe-inline' *.bucherer.magnolia-platform.io prod.bucherer-prod.magnolia-platform.io http://localhost:8080 *.bucherer.com bucherer.com development-eu01-bucherer.demandware.net staging-eu01-bucherer.demandware.net production-eu01-bucherer.demandware.net *.affirm.com *.amazonaws.com *.bing.com *.bing.net *.bucherer.com *.clarity.ms *.cloudinary.com *.collect.igodigital.com *.commercecloud.salesforce.com *.equalweb.com *.force.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.inspify.io *.linkedin.com *.mktgcdn.com *.mouseflow.com *.my.salesforce-scrt.com *.my.site.com *.onetrust.com *.patek.com *.pinterest.com *.recruiterbox.com *.rolex.com *.salesforce.com *.salesforceliveagent.com *.tagmanager.google.com *.tangiblee.com *.teads.tv *.test.salesforce.com analytics.tiktok.com assets.adobedtm.com bucherer--uat.sandbox.my.salesforce-sites.com bucherer.my.salesforce-sites.com campaigns.brame.io cdn.cookielaw.org cm.everesttech.net cm.everestterch.net connect.facebook.net data: dc.services.visualstudio.com dpm.demdex.net google.com googleads.g.doubleclick.net googletagmanager.com http://localhost:8080/* iframe.patek.com/* live.brame-gamification.com rolex.demdex.net s.pinimg.com snap.licdn.com ssl.pstatic.net static.cloudflareinsights.com stats.g.doubleclick.net wcs.naver.net www.facebook.com www.gooegle.es www.google.ch www.google.co.uk www.google.de www.google.dk www.google.es www.google.fr www.google.pl www.google.pt www.youtube.com youtube.com;style-src 'self' 'unsafe-eval' 'unsafe-inline' *.bucherer.magnolia-platform.io prod.bucherer-prod.magnolia-platform.io http://localhost:8080 *.bucherer.com bucherer.com development-eu01-bucherer.demandware.net staging-eu01-bucherer.demandware.net production-eu01-bucherer.demandware.net *.affirm.com *.amazonaws.com *.bing.com *.bing.net *.bucherer.com *.clarity.ms *.cloudinary.com *.collect.igodigital.com *.commercecloud.salesforce.com *.equalweb.com *.force.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.inspify.io *.linkedin.com *.mktgcdn.com *.mouseflow.com *.my.salesforce-scrt.com *.my.site.com *.onetrust.com *.patek.com *.pinterest.com *.recruiterbox.com *.rolex.com *.salesforce.com *.salesforceliveagent.com *.tagmanager.google.com *.tangiblee.com *.teads.tv *.test.salesforce.com analytics.tiktok.com assets.adobedtm.com bucherer--uat.sandbox.my.salesforce-sites.com bucherer.my.salesforce-sites.com campaigns.brame.io cdn.cookielaw.org cm.everesttech.net cm.everestterch.net connect.facebook.net data: dc.services.visualstudio.com dpm.demdex.net google.com googleads.g.doubleclick.net googletagmanager.com http://localhost:8080/* iframe.patek.com/* live.brame-gamification.com rolex.demdex.net s.pinimg.com snap.licdn.com ssl.pstatic.net static.cloudflareinsights.com stats.g.doubleclick.net wcs.naver.net www.facebook.com www.gooegle.es www.google.ch www.google.co.uk www.google.de www.google.dk www.google.es www.google.fr www.google.pl www.google.pt www.youtube.com youtube.com;font-src 'self' 'unsafe-eval' 'unsafe-inline' *.bucherer.magnolia-platform.io prod.bucherer-prod.magnolia-platform.io http://localhost:8080 *.bucherer.com bucherer.com development-eu01-bucherer.demandware.net staging-eu01-bucherer.demandware.net production-eu01-bucherer.demandware.net *.affirm.com *.amazonaws.com *.bing.com *.bing.net *.bucherer.com *.clarity.ms *.cloudinary.com *.collect.igodigital.com *.commercecloud.salesforce.com *.equalweb.com *.force.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.inspify.io *.linkedin.com *.mktgcdn.com *.mouseflow.com *.my.salesforce-scrt.com *.my.site.com *.onetrust.com *.patek.com *.pinterest.com *.recruiterbox.com *.rolex.com *.salesforce.com *.salesforceliveagent.com *.tagmanager.google.com *.tangiblee.com *.teads.tv *.test.salesforce.com analytics.tiktok.com assets.adobedtm.com bucherer--uat.sandbox.my.salesforce-sites.com bucherer.my.salesforce-sites.com campaigns.brame.io cdn.cookielaw.org cm.everesttech.net cm.everestterch.net connect.facebook.net data: dc.services.visualstudio.com dpm.demdex.net google.com googleads.g.doubleclick.net googletagmanager.com http://localhost:8080/* iframe.patek.com/* live.brame-gamification.com rolex.demdex.net s.pinimg.com snap.licdn.com ssl.pstatic.net static.cloudflareinsights.com stats.g.doubleclick.net wcs.naver.net www.facebook.com www.gooegle.es www.google.ch www.google.co.uk www.google.de www.google.dk www.google.es www.google.fr www.google.pl www.google.pt www.youtube.com youtube.com;frame-ancestors 'self' *.bucherer.magnolia-platform.io prod.bucherer-prod.magnolia-platform.io http://localhost:8080 *.bucherer.com bucherer.com development-eu01-bucherer.demandware.net staging-eu01-bucherer.demandware.net production-eu01-bucherer.demandware.net bucherer.my.salesforce.com bucherer--uat.sandbox.my.salesforce.com bucherer--uat--c.sandbox.vf.force.com bucherer--c.vf.force.com bucherer--uat.sandbox.lightning.force.com bucherer.lightning.force.com;script-src-attr 'unsafe-inline';upgrade-insecure-requests;base-uri 'self';block-all-mixed-content;object-src 'none'Controls resources the browser can load. Prevents XSS.
x-content-type-optionsnosniffPrevents MIME type sniffing. Should be 'nosniff'.
x-frame-optionsSAMEORIGINControls framing. Use CSP frame-ancestors instead.
strict-transport-securitymax-age=31536000; preloadForces HTTPS. Recommended: max-age=31536000; includeSubDomains
referrer-policyno-referrerControls referrer info. Recommended: strict-origin-when-cross-origin
permissions-policyControls browser features. Recommended: camera=(), microphone=(), geolocation=()
cross-origin-opener-policyControls cross-origin window access. Recommended: same-origin
cross-origin-resource-policyControls cross-origin resource access. Recommended: same-origin
cross-origin-embedder-policyControls cross-origin embedding. Recommended: require-corp
cache-controlCaching policy. Use no-store/private for sensitive pages.
x-powered-byShould be removed. Reveals server technology to attackers.
Missing: permissions-policy
Recommendation: Controls browser features. Recommended: camera=(), microphone=(), geolocation=()
Missing: cross-origin-opener-policy
Recommendation: Controls cross-origin window access. Recommended: same-origin
Missing: cross-origin-resource-policy
Recommendation: Controls cross-origin resource access. Recommended: same-origin
Missing: cross-origin-embedder-policy
Recommendation: Controls cross-origin embedding. Recommended: require-corp
Missing: cache-control
Recommendation: Caching policy. Use no-store/private for sensitive pages.