Ucop.edu - Ehs.ucop.edu

date: Tue, 14 Oct 2025 03:10:44 GMT
content-type: text/html
content-length: 679
last-modified: Fri, 10 Oct 2025 23:57:50 GMT
etag: "74ee3e58eaa8fc9706df2f6ddb943514"
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains
reporting-endpoints: default='/graph/api/csp-report'
content-security-policy: form-action 'self' www.shoesforcrews.com www.srmax.com; default-src 'self'; child-src 'self' blob:; worker-src 'self' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.riskandsafety.com app.pendo.io cdn.pendo.io pendo-io-static.storage.googleapis.com data.pendo.io web-sdk.aptrinsic.com cdn.lr-ingest.com cse.google.com www.google.com/cse/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cdnjs.cloudflare.com cdn.logrocket.io cdn.lr-ingest.io cdn.lr-in.com cdn.lr-in-prod.com cdn.lr-ingest.com cdn.ingest-lr.com cdn.logr-ingest.com cdn.lrkt-in.com cdn.lr-intake.com cdn.intake-lr.com pendo-static-5685814896623616.storage.googleapis.com api.feedback.us.pendo.io js.arcgis.com; script-src-attr 'unsafe-inline'; img-src 'self' blob: data: riskandsafety.com *.riskandsafety.com cdn.pendo.io app.pendo.io pendo-static-5685814896623616.storage.googleapis.com data.pendo.io web-sdk.aptrinsic.com storage.googleapis.com cdn.filepicker.io rss-drive-safe-prod.s3.us-west-2.amazonaws.com rss-app-prod.s3.us-west-2.amazonaws.com cdn.arcgis.com services.arcgisonline.com services6.arcgis.com js.arcgis.com; style-src 'self' 'unsafe-inline' app.pendo.io cdn.pendo.io pendo-static-5685814896623616.storage.googleapis.com web-sdk.aptrinsic.com cdnjs.cloudflare.com www.google.com/cse/ fonts.googleapis.com app.powerbi.com content.powerapps.com js.arcgis.com; font-src 'self' data: fonts.gstatic.com content.powerapps.com cdnjs.cloudflare.com cdn.scite.ai cdn.jsdelivr.net; connect-src 'self' data: auth.app.riskandsafety.com cognito-idp.us-west-2.amazonaws.com app.pendo.io data.pendo.io api.feedback.us.pendo.io pendo-static-5685814896623616.storage.googleapis.com *.launchdarkly.com esp.aptrinsic.com web-sdk.aptrinsic.com r.logrocket.io r.lr-ingest.io r.lr-in.com r.lr-in-prod.com r.lr-ingest.com r.ingest-lr.com r.logr-ingest.com r.lrkt-in.com r.lr-intake.com r.intake-lr.com rss-drive-safe-prod.s3.us-west-2.amazonaws.com https://s3.us-west-2.amazonaws.com/rss-drive-unsafe-prod rss-app-prod.s3.us-west-2.amazonaws.com https://s3.us-west-2.amazonaws.com/rss-app-prod app.powerbi.com pbivisuals.powerbi.com wabi-west-us-b-primary-redirect.analysis.windows.net dc.services.visualstudio.com bing.com osi.office.net msecnd.net store.office.com store-images.s-microsoft.com microsoft.com *.riskandsafety.com wss: www.google-analytics.com stats.g.doubleclick.net cdn.arcgis.com static.arcgis.com services.arcgisonline.com services6.arcgis.com server.arcgisonline.com services7.arcgis.com services.gis.ca.gov www.arcgis.com services1.arcgis.com js.arcgis.com basemaps.arcgis.com geocode.arcgis.com; frame-src 'self' app.pendo.io www.google.com app.powerbi.com rss-drive-safe-prod.s3.us-west-2.amazonaws.com blob: data: app.powerbi.com; frame-ancestors 'self' app.pendo.io app.powerbi.com; report-uri /graph/api/csp-report; report-to default
permissions-policy: geolocation=*, camera=(), fullscreen=(self), accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
x-download-options: noopen