23 technologies4 categories
britishairways.com is built on Next.js with Akamai mPulse and Microsoft 365. It ranks #6,932 globally.
Analytics are handled by Google Tag Manager. Infrastructure includes Amazon S3 and Akamai.
Tech Stack Highlights
Frameworks & Languages7
Next.js
JavaScript frameworks
100%
3 evidence signals
JS Global
__NEXT_DATA__ → objectDOM
nextjs-rootDOM
nextjs-dataTailwind CSS
UI frameworks
75%
1 evidence signal
css
--tw-React
JavaScript frameworks
75%
1 evidence signal
HTML
implied by Next.jsNode.js
Programming languages
75%
1 evidence signal
HTML
implied by Next.jsBootstrap
UI frameworks
75%
1 evidence signal
Script
https://tagman.britishairways.com/britishairways/nexus-prod/Bootstrap.jsshadcn/ui
UI frameworks
75%
1 evidence signal
HTML
data-radix-Radix UI
UI frameworks
75%
1 evidence signal
HTML
data-radix-Analytics & Marketing5
Akamai mPulse
RUM
100%
2 evidence signals
HTML
<script>(window.BOOMR_mq=window.BOOMR_mq||[]).push(["addVar",{"rua.upush":"false","rua.cpush":"falseJS Global
BOOMR_API_key → stringM
Microsoft 365
Email
100%
1 evidence signal
dns
MX: britishairways-com.mail.protection.outlook.comGoogle Tag Managerv1.0
Tag managers
75%
1 evidence signal
JS Global
dataLayer → object(v1.0)Microsoft Advertising
Advertising
75%
1 evidence signal
JS Global
uetq → objectDatadogv6.25.4
RUM
75%
1 evidence signal
JS Global
DD_RUM → object(v6.25.4)Infrastructure & Security8
OneTrust
Cookie compliance
75%
3 evidence signals
Script
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsScript
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsScript
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsEnvoy
Reverse proxies
75%
2 evidence signals
Header
^envoy$: envoyHeader
100HSTS
Security
75%
1 evidence signal
Header
max-age=31536000; includeSubDomains;hCaptcha
Security
75%
1 evidence signal
Header
(?:\.|//)hcaptcha\.com: default-src 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'self'; style-src 'self' https: 'unsafe-inline' *.site.com *.salesforce.com *.digital-cloud.medallia.eu *.quantummetric.com fonts.googleapis.com hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org; font-src 'self' https: data:; script-src 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-MjE5ZjEwODUtYTM3NC00OWQxLWIxMWYtZTBjOWE4MjBjN2Zm'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.datatrans.com *.ensighten.com *.sec.levexis.com tagman.britishairways.com doh.cq0.co *.adsrvr.org adsrvr.org *.fls.doubleclick.net *.doubleclick.net *.google.com google.com *.stackadapt.com *.digital-cloud.medallia.eu *.quantummetric.com browser-intake-datadoghq.eu datadoghq-browser-agent.com *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.auth0.com *.iagl.digital *.adoberesources.net *.adobedc.net *.activitymap.adobe.com cm.everesttech.net *.accdab.net *.akamaihd.net s.go-mpulse.net *.kg668dbov0.execute-api.us-east-1.s3.amazonaws.com *.prd-webforms-livesite-dirty.s3.amazonaws.com *.s3-eu-west-1.amazonaws.com *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.cdn-net.com *.csnjs.cloudflare.com *.api.cybersource.com *.dynatrace.com *.viajes.iberia.com *.iag.cloud.com *.mpsnare.iesnare.com *.ci-mpsnare.iovation.com *.code.jquery.com *.ajax.googleapis.com *.api.pci-proxy.com *.traveldocs.ba.com *.joinsherpa.io *.joinsherpa.com *.smartling.com *.seal.globalsign.com *.avios.com *.cheapflights.co.uk *.cheapflights.com *.facebook.com connect.facebook.net *.googleadservices.com *.google.co.uk *.googlesyndication.com *.googletagmanager.com *.instagram.com *.kayak.co.uk *.kayak.com *.bat.bing.com *.prf.hn api.impact.com *.reevoo.com *.platform.twitter.com *.decibelinsight.net *.decibelinsight.com *.decibel.net *.decibel.com *.cb-eu.maxymiser.com *.service.maxymiser.net www.momondo.com www.momondo.co.uk www.momondo.de *.omniture.com *.skyscanner.net *.amadeus.com *.icm.aero analytics.tiktok.com hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org *.paypal.com *.paypalobjects.com *.venmo.com; frame-src 'self' *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.doubleclick.net *.ensighten.com *.sec.levexis.com tagman.britishairways.com doh.cq0.co *.adsrvr.org adsrvr.org *.fls.doubleclick.net *.google.com google.com *.stackadapt.com *.datatrans.com *.cardinalcommerce.com *.cdn-net.com *.digital-cloud.medallia.eu *.quantummetric.com *.demdex.net *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.auth0.com *.iagl.digital hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org *.paypal.com *.paypalobjects.com *.venmo.com; connect-src 'self' ui.prod1.ba-nexus.iag.cloud 'unsafe-eval' https://test.widget-api.safetravel.amadeus.com *.tt.omtrdc.net *.sc.omtrdc.net *.ba.experiencecloud.adobe.com *.ensighten.com *.sec.levexis.com tagman.britishairways.com doh.cq0.co *.adsrvr.org adsrvr.org *.fls.doubleclick.net *.doubleclick.net *.google.com google.com *.stackadapt.com *.digital-cloud.medallia.eu *.quantummetric.com wss://*.decibelinsight.net *.kampyle.com *.demdex.net *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.adoberesources.net *.adobedc.net *.activitymap.adobe.com cm.everesttech.net *.accdab.net *.akamaihd.net s.go-mpulse.net *.auth0.com *.iagl.digital *.kg668dbov0.execute-api.us-east-1.s3.amazonaws.com *.prd-webforms-livesite-dirty.s3.amazonaws.com *.s3-eu-west-1.amazonaws.com *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.cdn-net.com *.csnjs.cloudflare.com *.api.cybersource.com *.dynatrace.com *.viajes.iberia.com *.iag.cloud.com *.mpsnare.iesnare.com *.ci-mpsnare.iovation.com *.code.jquery.com *.ajax.googleapis.com *.api.pci-proxy.com *.traveldocs.ba.com *.joinsherpa.io *.joinsherpa.com *.smartling.com *.seal.globalsign.com *.avios.com *.cheapflights.co.uk *.cheapflights.com *.facebook.com connect.facebook.net *.googleadservices.com *.google.co.uk *.googlesyndication.com *.googletagmanager.com *.instagram.com *.kayak.co.uk *.kayak.com *.bat.bing.com *.prf.hn api.impact.com *.reevoo.com *.platform.twitter.com *.decibelinsight.net *.decibelinsight.com *.decibel.net *.decibel.com *.cb-eu.maxymiser.com *.service.maxymiser.net www.momondo.com www.momondo.co.uk www.momondo.de *.omniture.com *.skyscanner.net *.amadeus.com *.icm.aero browser-intake-datadoghq.eu datadoghq-browser-agent.com analytics.tiktok.com hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org *.paypal.com *.paypalobjects.com *.venmo.com; object-src 'self' blob:; script-src-attr 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-MjE5ZjEwODUtYTM3NC00OWQxLWIxMWYtZTBjOWE4MjBjN2Zm'; img-src 'self' https: data: http:; worker-src 'self' blob:; base-uri 'self'; form-action 'self' *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.akamaihd.net s.go-mpulse.net *.cardinalcommerce.com *.cdn-net.com *.site.com *.force.com *.auth0.com *.iagl.digital *.paypal.com *.paypalobjects.com *.venmo.com; frame-ancestors 'self' *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.auth0.com *.iagl.digital; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pub53073635752918fa5e68dff599900c6c&dd-evp-origin=content-security-policy&ddsource=csp-report
Amazon S3
CDN
75%
1 evidence signal
Header
s3[^ ]*amazonaws\.com: default-src 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'self'; style-src 'self' https: 'unsafe-inline' *.site.com *.salesforce.com *.digital-cloud.medallia.eu *.quantummetric.com fonts.googleapis.com hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org; font-src 'self' https: data:; script-src 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-MjE5ZjEwODUtYTM3NC00OWQxLWIxMWYtZTBjOWE4MjBjN2Zm'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.datatrans.com *.ensighten.com *.sec.levexis.com tagman.britishairways.com doh.cq0.co *.adsrvr.org adsrvr.org *.fls.doubleclick.net *.doubleclick.net *.google.com google.com *.stackadapt.com *.digital-cloud.medallia.eu *.quantummetric.com browser-intake-datadoghq.eu datadoghq-browser-agent.com *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.auth0.com *.iagl.digital *.adoberesources.net *.adobedc.net *.activitymap.adobe.com cm.everesttech.net *.accdab.net *.akamaihd.net s.go-mpulse.net *.kg668dbov0.execute-api.us-east-1.s3.amazonaws.com *.prd-webforms-livesite-dirty.s3.amazonaws.com *.s3-eu-west-1.amazonaws.com *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.cdn-net.com *.csnjs.cloudflare.com *.api.cybersource.com *.dynatrace.com *.viajes.iberia.com *.iag.cloud.com *.mpsnare.iesnare.com *.ci-mpsnare.iovation.com *.code.jquery.com *.ajax.googleapis.com *.api.pci-proxy.com *.traveldocs.ba.com *.joinsherpa.io *.joinsherpa.com *.smartling.com *.seal.globalsign.com *.avios.com *.cheapflights.co.uk *.cheapflights.com *.facebook.com connect.facebook.net *.googleadservices.com *.google.co.uk *.googlesyndication.com *.googletagmanager.com *.instagram.com *.kayak.co.uk *.kayak.com *.bat.bing.com *.prf.hn api.impact.com *.reevoo.com *.platform.twitter.com *.decibelinsight.net *.decibelinsight.com *.decibel.net *.decibel.com *.cb-eu.maxymiser.com *.service.maxymiser.net www.momondo.com www.momondo.co.uk www.momondo.de *.omniture.com *.skyscanner.net *.amadeus.com *.icm.aero analytics.tiktok.com hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org *.paypal.com *.paypalobjects.com *.venmo.com; frame-src 'self' *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.doubleclick.net *.ensighten.com *.sec.levexis.com tagman.britishairways.com doh.cq0.co *.adsrvr.org adsrvr.org *.fls.doubleclick.net *.google.com google.com *.stackadapt.com *.datatrans.com *.cardinalcommerce.com *.cdn-net.com *.digital-cloud.medallia.eu *.quantummetric.com *.demdex.net *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.auth0.com *.iagl.digital hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org *.paypal.com *.paypalobjects.com *.venmo.com; connect-src 'self' ui.prod1.ba-nexus.iag.cloud 'unsafe-eval' https://test.widget-api.safetravel.amadeus.com *.tt.omtrdc.net *.sc.omtrdc.net *.ba.experiencecloud.adobe.com *.ensighten.com *.sec.levexis.com tagman.britishairways.com doh.cq0.co *.adsrvr.org adsrvr.org *.fls.doubleclick.net *.doubleclick.net *.google.com google.com *.stackadapt.com *.digital-cloud.medallia.eu *.quantummetric.com wss://*.decibelinsight.net *.kampyle.com *.demdex.net *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.adoberesources.net *.adobedc.net *.activitymap.adobe.com cm.everesttech.net *.accdab.net *.akamaihd.net s.go-mpulse.net *.auth0.com *.iagl.digital *.kg668dbov0.execute-api.us-east-1.s3.amazonaws.com *.prd-webforms-livesite-dirty.s3.amazonaws.com *.s3-eu-west-1.amazonaws.com *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.cdn-net.com *.csnjs.cloudflare.com *.api.cybersource.com *.dynatrace.com *.viajes.iberia.com *.iag.cloud.com *.mpsnare.iesnare.com *.ci-mpsnare.iovation.com *.code.jquery.com *.ajax.googleapis.com *.api.pci-proxy.com *.traveldocs.ba.com *.joinsherpa.io *.joinsherpa.com *.smartling.com *.seal.globalsign.com *.avios.com *.cheapflights.co.uk *.cheapflights.com *.facebook.com connect.facebook.net *.googleadservices.com *.google.co.uk *.googlesyndication.com *.googletagmanager.com *.instagram.com *.kayak.co.uk *.kayak.com *.bat.bing.com *.prf.hn api.impact.com *.reevoo.com *.platform.twitter.com *.decibelinsight.net *.decibelinsight.com *.decibel.net *.decibel.com *.cb-eu.maxymiser.com *.service.maxymiser.net www.momondo.com www.momondo.co.uk www.momondo.de *.omniture.com *.skyscanner.net *.amadeus.com *.icm.aero browser-intake-datadoghq.eu datadoghq-browser-agent.com analytics.tiktok.com hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org *.paypal.com *.paypalobjects.com *.venmo.com; object-src 'self' blob:; script-src-attr 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-MjE5ZjEwODUtYTM3NC00OWQxLWIxMWYtZTBjOWE4MjBjN2Zm'; img-src 'self' https: data: http:; worker-src 'self' blob:; base-uri 'self'; form-action 'self' *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.akamaihd.net s.go-mpulse.net *.cardinalcommerce.com *.cdn-net.com *.site.com *.force.com *.auth0.com *.iagl.digital *.paypal.com *.paypalobjects.com *.venmo.com; frame-ancestors 'self' *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.auth0.com *.iagl.digital; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pub53073635752918fa5e68dff599900c6c&dd-evp-origin=content-security-policy&ddsource=csp-report
Akamai
CDN
75%
2 evidence signals
Header
9 29819 0 pmb=mRUM,2dns
CNAME: www.ba.com.edgekey.net
Akamai Bot Manager
Security
75%
3 evidence signals
Cookie
ak_bmscCookie
bm_svCookie
bm_szAmazon Web Services
PaaS
50%
1 evidence signal
HTML
implied by Amazon S3Libraries & Utilities3
Webpack
Miscellaneous
75%
1 evidence signal
HTML
implied by Next.jsPayPal
Payment processors
75%
1 evidence signal
Header
\.paypal\.com: default-src 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'self'; style-src 'self' https: 'unsafe-inline' *.site.com *.salesforce.com *.digital-cloud.medallia.eu *.quantummetric.com fonts.googleapis.com hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org; font-src 'self' https: data:; script-src 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-MjE5ZjEwODUtYTM3NC00OWQxLWIxMWYtZTBjOWE4MjBjN2Zm'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.datatrans.com *.ensighten.com *.sec.levexis.com tagman.britishairways.com doh.cq0.co *.adsrvr.org adsrvr.org *.fls.doubleclick.net *.doubleclick.net *.google.com google.com *.stackadapt.com *.digital-cloud.medallia.eu *.quantummetric.com browser-intake-datadoghq.eu datadoghq-browser-agent.com *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.auth0.com *.iagl.digital *.adoberesources.net *.adobedc.net *.activitymap.adobe.com cm.everesttech.net *.accdab.net *.akamaihd.net s.go-mpulse.net *.kg668dbov0.execute-api.us-east-1.s3.amazonaws.com *.prd-webforms-livesite-dirty.s3.amazonaws.com *.s3-eu-west-1.amazonaws.com *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.cdn-net.com *.csnjs.cloudflare.com *.api.cybersource.com *.dynatrace.com *.viajes.iberia.com *.iag.cloud.com *.mpsnare.iesnare.com *.ci-mpsnare.iovation.com *.code.jquery.com *.ajax.googleapis.com *.api.pci-proxy.com *.traveldocs.ba.com *.joinsherpa.io *.joinsherpa.com *.smartling.com *.seal.globalsign.com *.avios.com *.cheapflights.co.uk *.cheapflights.com *.facebook.com connect.facebook.net *.googleadservices.com *.google.co.uk *.googlesyndication.com *.googletagmanager.com *.instagram.com *.kayak.co.uk *.kayak.com *.bat.bing.com *.prf.hn api.impact.com *.reevoo.com *.platform.twitter.com *.decibelinsight.net *.decibelinsight.com *.decibel.net *.decibel.com *.cb-eu.maxymiser.com *.service.maxymiser.net www.momondo.com www.momondo.co.uk www.momondo.de *.omniture.com *.skyscanner.net *.amadeus.com *.icm.aero analytics.tiktok.com hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org *.paypal.com *.paypalobjects.com *.venmo.com; frame-src 'self' *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.doubleclick.net *.ensighten.com *.sec.levexis.com tagman.britishairways.com doh.cq0.co *.adsrvr.org adsrvr.org *.fls.doubleclick.net *.google.com google.com *.stackadapt.com *.datatrans.com *.cardinalcommerce.com *.cdn-net.com *.digital-cloud.medallia.eu *.quantummetric.com *.demdex.net *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.auth0.com *.iagl.digital hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org *.paypal.com *.paypalobjects.com *.venmo.com; connect-src 'self' ui.prod1.ba-nexus.iag.cloud 'unsafe-eval' https://test.widget-api.safetravel.amadeus.com *.tt.omtrdc.net *.sc.omtrdc.net *.ba.experiencecloud.adobe.com *.ensighten.com *.sec.levexis.com tagman.britishairways.com doh.cq0.co *.adsrvr.org adsrvr.org *.fls.doubleclick.net *.doubleclick.net *.google.com google.com *.stackadapt.com *.digital-cloud.medallia.eu *.quantummetric.com wss://*.decibelinsight.net *.kampyle.com *.demdex.net *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.adoberesources.net *.adobedc.net *.activitymap.adobe.com cm.everesttech.net *.accdab.net *.akamaihd.net s.go-mpulse.net *.auth0.com *.iagl.digital *.kg668dbov0.execute-api.us-east-1.s3.amazonaws.com *.prd-webforms-livesite-dirty.s3.amazonaws.com *.s3-eu-west-1.amazonaws.com *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.cdn-net.com *.csnjs.cloudflare.com *.api.cybersource.com *.dynatrace.com *.viajes.iberia.com *.iag.cloud.com *.mpsnare.iesnare.com *.ci-mpsnare.iovation.com *.code.jquery.com *.ajax.googleapis.com *.api.pci-proxy.com *.traveldocs.ba.com *.joinsherpa.io *.joinsherpa.com *.smartling.com *.seal.globalsign.com *.avios.com *.cheapflights.co.uk *.cheapflights.com *.facebook.com connect.facebook.net *.googleadservices.com *.google.co.uk *.googlesyndication.com *.googletagmanager.com *.instagram.com *.kayak.co.uk *.kayak.com *.bat.bing.com *.prf.hn api.impact.com *.reevoo.com *.platform.twitter.com *.decibelinsight.net *.decibelinsight.com *.decibel.net *.decibel.com *.cb-eu.maxymiser.com *.service.maxymiser.net www.momondo.com www.momondo.co.uk www.momondo.de *.omniture.com *.skyscanner.net *.amadeus.com *.icm.aero browser-intake-datadoghq.eu datadoghq-browser-agent.com analytics.tiktok.com hcaptcha.com *.hcaptcha.com hcaptchastatus.com *.hcaptchastatus.com *.onetrust.com cdn.cookielaw.org *.paypal.com *.paypalobjects.com *.venmo.com; object-src 'self' blob:; script-src-attr 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-1db98b5318d26a619afe05ebe554b2b6' 'nonce-MjE5ZjEwODUtYTM3NC00OWQxLWIxMWYtZTBjOWE4MjBjN2Zm'; img-src 'self' https: data: http:; worker-src 'self' blob:; base-uri 'self'; form-action 'self' *.britishairways.com britishairways.com *.ba.com *.baplc.com *.iag.cloud *.akamaihd.net s.go-mpulse.net *.cardinalcommerce.com *.cdn-net.com *.site.com *.force.com *.auth0.com *.iagl.digital *.paypal.com *.paypalobjects.com *.venmo.com; frame-ancestors 'self' *.force.com *.salesforceliveagent.com *.site.com *.salesforce.com *.auth0.com *.iagl.digital; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pub53073635752918fa5e68dff599900c6c&dd-evp-origin=content-security-policy&ddsource=csp-report
Boomerangv1.720.0
JavaScript libraries
75%
2 evidence signals
JS Global
BOOMR → object(v1.720.0)JS Global
BOOMR_mq → object