Stack census— back to the censusSurvey 016 · 07.10.2026
CDN
Amazon S3
60 of 1,197
Found in survey 016. Each line gives the string in that product’s response that put it here — go and look, the response is public.
- header — x-amz-server-side-encryption: AES256
- header — server: AmazonS3
- header — server: AmazonS3
- header — x-amz-server-side-encryption: AES256
- header — content-security-policy: report-uri https://o4505075539902464.ingest.us.sentry.io/api/4505075559825408/security/?s…
- header — content-security-policy: base-uri 'self'; default-src 'self' blob: data: https: ; worker-src 'self' blob:; …
- header — content-security-policy: default-src 'self'; connect-src 'self' https://api.polar.sh https://polar-production-f…
- header — content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.osano.com https://*.posthog.com…
- header — content-security-policy: default-src 'self'; connect-src 'self' data: https://api.liveblocks.io wss://api.liveb…
- header — server: AmazonS3
- header — content-security-policy: default-src 'self'; script-src 'self' 'nonce-NmJkOGVlMzEtZWMwOS00ZGFiLWIwYzItZWExOGU3ODMw…
- header — content-security-policy: default-src 'self' vercel.com *.vercel.com assets.vercel.com *.vercel.sh vercel.live wss:…
- header — content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-…
- header — server: AmazonS3
- header — x-amz-server-side-encryption: AES256
- header — content-security-policy: default-src 'self';base-uri 'self';child-src blob:;connect-src 'self' wss: https: https:/…
- header — content-security-policy: default-src 'none'; style-src 'self' 'unsafe-inline'; connect-src 'self' cfengine-package…
- header — content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https://cdn.ablyft.com https…
- header — server: AmazonS3
- header — server: AmazonS3
- header — x-amz-server-side-encryption: AES256
- header — server: AmazonS3
- header — x-amz-server-side-encryption: AES256
- header — x-amz-server-side-encryption: AES256
- header — server: AmazonS3
- header — x-amz-server-side-encryption: AES256
- header — x-amz-server-side-encryption: AES256
- header — x-amz-server-side-encryption: AES256
- header — x-amz-server-side-encryption: AES256
- header — x-amz-server-side-encryption: AES256
- header — x-amz-server-side-encryption: AES256
- header — content-security-policy: default-src * blob: data:;connect-src 'self' 'unsafe-inline' https://us.consent.api.terml…
- header — server: AmazonS3
- header — server: AmazonS3
- header — server: AmazonS3
- header — server: AmazonS3
- header — server: AmazonS3
- header — x-amz-server-side-encryption: AES256
- header — content-security-policy: default-src 'none' ; script-src 'self' ajax.googleapis.com maxcdn.bootstrapcdn.com code…
- header — server: AmazonS3
- header — content-security-policy: default-src 'self' https://infisical.com ; script-src 'self' https://assets.positional-bu…
- header — server: AmazonS3
- header — x-amz-server-side-encryption: AES256
- header — content-security-policy: base-uri 'self' https://kestra.io; object-src 'none'; script-src-attr 'unsafe-inline'; de…
- header — server: AmazonS3
- header — x-amz-server-side-encryption: AES256
- header — content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-…
- header — content-security-policy: default-src 'none'; form-action 'self' https://login.microsoftonline.com https://madmimi.…
- header — content-security-policy: script-src 'unsafe-eval' blob: 'self' meta.wikimedia.org *.wikimedia.org *.wikipedia.org …
- script — //s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js
- header — content-security-policy: default-src 'none'; object-src 'none'; script-src 'self' https://*.chargebee.com https://…
- header — content-security-policy: default-src 'self'; child-src 'self'; font-src 'self'; frame-ancestors 'self'; frame-src …
- header — content-security-policy: default-src 'self'; script-src 'self' https://snap.licdn.com/ https://sjs.bizographics.co…
- header — content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-…
- header — x-amz-server-side-encryption: AES256
- header — server: AmazonS3
- header — x-amz-server-side-encryption: AES256
- header — content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests; form-a…
- header — content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://ji7ugh6u.stategraph.com htt…
- script — //s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js
- header — server: AmazonS3
- header — x-amz-server-side-encryption: AES256
- header — content-security-policy: default-src 'self' https://userlike-cdn-umm.b-cdn.net; img-src 'self' data: https:; media…
- script — https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com/aace8643339041178197dff3635e283ea…
- header — server: AmazonS3
- header — content-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.hs-analytics…
- header — server: AmazonS3
- header — content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-…
- header — content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js-eu1.hsform…
Back to the census, or read what this cannot see.