EDPUZZLE.COM Website Review

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 12 Sep 2024 22:19:43 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Security-Policy-Report-Only: script-src-elem 'self' *.edpuzzle.com *.edpuzzle.dev 'unsafe-inline' 'unsafe-eval' latex.codecogs.com legacy.codecogs.com service.mtcaptcha.com service2.mtcaptcha.com *.google.com *.googleapis.com *.google-analytics.com lh3.googleusercontent.com accounts.google.com/gsi/style www.googletagmanager.com *.youtube.com www.youtube.com *.ytimg.com *.soundcloud.com *.mxpnl.com *.newrelic.com *.nr-data.net d1htrclywvryi1.cloudfront.net js.stripe.com *.twitter.com *.awswaf.com *.us-east-1.token.awswaf.com *.us-east-1.sdk.awswaf.com *.appcues.com login.microsoftonline.com *.codecogs.com;script-src-attr 'self' *.edpuzzle.com *.edpuzzle.dev 'unsafe-inline' 'unsafe-eval' latex.codecogs.com legacy.codecogs.com service.mtcaptcha.com service2.mtcaptcha.com *.google.com *.googleapis.com *.google-analytics.com lh3.googleusercontent.com accounts.google.com/gsi/style www.googletagmanager.com *.youtube.com www.youtube.com *.ytimg.com *.soundcloud.com *.mxpnl.com *.newrelic.com *.nr-data.net d1htrclywvryi1.cloudfront.net js.stripe.com *.twitter.com *.awswaf.com *.us-east-1.token.awswaf.com *.us-east-1.sdk.awswaf.com *.appcues.com login.microsoftonline.com *.codecogs.com;script-src 'self' *.edpuzzle.com *.edpuzzle.dev 'unsafe-inline' 'unsafe-eval' latex.codecogs.com legacy.codecogs.com service.mtcaptcha.com service2.mtcaptcha.com *.google.com *.googleapis.com *.google-analytics.com lh3.googleusercontent.com accounts.google.com/gsi/style www.googletagmanager.com *.youtube.com www.youtube.com *.ytimg.com *.soundcloud.com *.mxpnl.com *.newrelic.com *.nr-data.net d1htrclywvryi1.cloudfront.net js.stripe.com *.twitter.com *.awswaf.com *.us-east-1.token.awswaf.com *.us-east-1.sdk.awswaf.com *.appcues.com login.microsoftonline.com *.codecogs.com;connect-src 'self' *.edpuzzle.com *.edpuzzle.dev edpuzzle.imgix.net *.us-east-1.token.awswaf.com *.nr-data.net *.mxpnl.com *.mixpanel.com *.google-analytics.com *.googleapis.com accounts.google.com login.microsoftonline.com wss://5uj9b5geqb.execute-api.us-east-1.amazonaws.com wss://5k3vufy1vh.execute-api.us-east-1.amazonaws.com wss://api.appcues.net *.appcues.com audio-uploads-us-standard.s3.amazonaws.com uploaded-profile-images-us-standard.s3.amazonaws.com test-audio-uploads-us-standard.s3.amazonaws.com test-uploaded-profile-images.s3.amazonaws.com res.cdn.office.net video-uploads-us-standard.s3.amazonaws.com test-video-uploads-us-standard.s3.amazonaws.com uploaded-images-us-standard.s3.amazonaws.com test-uploaded-images-dev-us-standard.s3.amazonaws.com vimeo.com;frame-ancestors 'self';frame-src *;img-src * 'self' data: blob:;style-src * 'unsafe-inline' 'self';media-src * 'self' blob:;report-uri /api/v3/violations/csp;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self' *.instructure.com *.edu;object-src 'none';upgrade-insecure-requests
Referrer-Policy: same-origin
Strict-Transport-Security: max-age=5184000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-XSS-Protection: 0
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: SAMEORIGIN
set-cookie: edpuzzleCSRF=k9EufV9oQzi3LXkXBFG3v8R3; Path=/; HttpOnly; Secure; SameSite=None
ETag: W/"1613-smOBKqB5o1cjqFbJuObMwhJ1DGQ"
X-Cache: Miss from cloudfront
Via: 1.1 2dd59b0ea355cb92a87e9e385032622a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: JFK50-P8
X-Amz-Cf-Id: en9atIhrGF6UL1FGsUzkp70-CTa5LHzYEXAIzZE4zXYKcOWxh4_BlA==