Values for content-security-policy:
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; 5,174
upgrade-insecure-requests 4,685
upgrade-insecure-requests; 2,569
frame-ancestors 'self' 1,659
block-all-mixed-content 908
block-all-mixed-content; frame-ancestors *; upgrade-insecure-requests; 526
frame-ancestors 'self'; 428
frame-ancestors 'self' https://*.granicus.com http://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src * 307
frame-ancestors 'none' 302
block-all-mixed-content; 253
default-src https: data: 'unsafe-inline' 'unsafe-eval' 183
frame-ancestors 'none'; 156
146
frame-ancestors 'self' https://*.ally.ac; 129
default-src * data: 'unsafe-eval' 'unsafe-inline' 126
report-uri /report-csp-violation 108
img-src https: data:; upgrade-insecure-requests 102
frame-ancestors 'self' ; 100
default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;block-all-mixed-content;upgrade-insecure-requests; 76
frame-ancestors 'self' http://webvisor.com 62
frame-ancestors 'self'; default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; child-src https: blob: data:; connect-src https: blob: data: wss:; font-src https: blob: data:; img-src https: blob: data:; media-src https: blob: data:; object-src https: blob: data:; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: blob: data: 'unsafe-inline'; upgrade-insecure-requests 57
default-src 'self'; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 53
upgrade-insecure-requests; frame-ancestors 'self' 52
frame-ancestors 'self' https://app.kajabi.com 51
block-all-mixed-content; frame-ancestors 'self'; upgrade-insecure-requests 48
default-src * blob: data: cid:; img-src * data: cid: 'unsafe-inline'; media-src * data: blob:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline'; style-src-elem * blob: data: 'unsafe-inline', font-src * data: 45
frame-ancestors 'self' live.sagepay.com 34
default-src 'self' http: https: data: blob: 'unsafe-inline' 33
sandbox allow-scripts; default-src 'self'; img-src https:; style-src 'unsafe-inline'; script-src 'unsafe-inline'; report-uri http://csp.yahoo.com/beacon/csp?src=redirect 32
default-src http: https: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self' *.gov.cn 32
frame-ancestors 'self' https://explore.oracle.com https://my.oracle.com https://eeho.fa.us2.oraclecloud.com 31
frame-ancestors 'self' continuum.epublishing.com *.continuum.epublishing.com 30
frame-ancestors 'self' *.google.com *.googleusercontent.com 29
frame-ancestors 'self'; upgrade-insecure-requests 28
default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 28
default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: data: blob:; media-src blob: data: https:; object-src https:; child-src https: data: blob:; upgrade-insecure-requests; block-all-mixed-content; 25
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: 24
default-src 'self' 24
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; 23
frame-ancestors about: 'self' 22
* 22
frame-ancestors 'self' azeu.marketing.adobe.com 21
self 20
frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com 20
script-src 'unsafe-inline' 'unsafe-eval' http: https: 20
default-src * data: 'unsafe-eval' 'unsafe-inline' blob: 19
default-src 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://cdn.exoticads.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://chaturbateapps.disqus.com https://*.disquscdn.com https://disqus.com https://certify-js.alexametrics.com ;  style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://*.disquscdn.com ;  img-src 'self' data: https://*.highwebmedia.com https://*stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://public.chaturbate.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://public.chaturbate.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://bam.nr-data.net https://*.disquscdn.com https://links.services.disqus.com https://referrer.disqus.com https://certify.alexametrics.com https://stats.g.doubleclick.net ;  font-src 'self' data: https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com ;  connect-src 'self' blob: blob https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com wss://recommend.chaturbate.com:8443 https://www.google-analytics.com https://links.services.disqus.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://public.chaturbate.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://public.chaturbate.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ;  media-src 'self' https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://public.chaturbate.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://public.chaturbate.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com;  object-src 'self' https://*.highwebmedia.com https://download.macromedia.com https://public.chaturbate.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://public.chaturbate.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ;  frame-src 'self' https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://disqus.com https://wnu.com https://checkout.2000charge.com ;  child-src 'self' blob: blob ;  worker-src 'self' blob: blob ;  form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://www.coinpayments.net https://wnu.com ;  manifest-src 'self' https://*.highwebmedia.com ;  report-uri https://report-uri.highwebmedia.com/r/t/csp/enforce; 19
frame-ancestors https://s.salla.sa 19
default-src 'none'; base-uri 'self'; block-all-mixed-content; connect-src 'self' uploads.github.com www.githubstatus.com collector.githubapp.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com; frame-ancestors 'none'; frame-src render.githubusercontent.com; img-src 'self' data: github.githubassets.com identicons.github.com collector.githubapp.com github-cloud.s3.amazonaws.com *.githubusercontent.com; manifest-src 'self'; media-src 'none'; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/socket-worker-5029ae85.js gist.github.com/socket-worker-5029ae85.js 18
frame-ancestors https://*.poki.io http://localhost:1234 17
default-src 'self'; connect-src 'self' www.google-analytics.com https://www.google-analytics.com; frame-src 'none'; img-src 'self' data: *.pbwstatic.com https://*.pbwstatic.com www.google-analytics.com https://www.google-analytics.com; media-src 'none'; object-src 'none'; script-src 'self' www.google-analytics.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' 17
default-src * data: 'self' 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data:; font-src * 'self' data: 16
report-uri /report-csp-violation; upgrade-insecure-requests 15
default-src https:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss: 15
frame-ancestors https://cue.forum.cue.cloud 15
default-src 'none' 15
report-uri https://f6044819c139be406e5131b1724188ab.report-uri.com/r/t/csp/enforce; worker-src blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com dev.visualwebsiteoptimizer.com *.adnxs.com *.appier.net *.doubleclick.net *.google.co.uk *.googleadservices.com *.googlesyndication.com *.mathtag.com *.openx.net *.scupio.com bigsea.frontend.weborama.fr dx.bigsea.weborama.com cs.gssprt.jp match.adsrvr.org pixel.rubiconproject.com ps.eyeota.net ssp.adskom.com sync.ad-stir.com sync.adap.tv sync.adaptv.advertising.com tags.clickintext.net tapestry.tapad.com *.semasio.net *.disquscdn.com *.disqus.com disqus.com d17m68fovwmgxj.cloudfront.net apps-cdn.britishcouncil.org embed.scribblelive.com bat.bing.com public.tableau.com *.socdm.com britishcouncil-email.createsend.com *.googleapis.com *.gstatic.com www.google.de www.google.es *.google.com *.salesforceliveagent.com *.qualaroo.com s3.amazonaws.com *.bizographics.com sjs.bizographics.com idsync.rlcdn.com aa.agkn.com stags.bluekai.com sync.crwdcntrl.net loadus.exelator.com ml314.com *.adroll.com ucarecdn.com *.streamamg.com bookeo.com www-2903b.bookeo.com britishcouncil.github.io olc.live.solas.britishcouncil.digital bam.nr-data.net js-agent.newrelic.com *.akamaihd.net x.bidswitch.net *.ads-twitter.com *.twimg.com *.twitter.com *.fbcdn.net *.facebook.com cx.atdmt.com cx.atdmt.com connect.facebook.net *.linkedin.com snap.licdn.com *.sharethis.com vk.com cdn.polyfill.io www.googletagmanager.com sui.britishcouncil.org *.vimeocdn.com player.vimeo.com vimeo.com *.ytimg.com www.youtube.com *.google-analytics.com *.yahoo.com b92.yahoo.co.jp s.yimg.com britishcouncil.wufoo.com *.instagram.com *.hotjar.com *.stripe.com *.artfut.com cookies.onetrust.com cdn.cookielaw.org optanon.blob.core *.youtube-nookie.com *.fospha.com *.shorthand.com *.shorthandstories.com *.hs-scripts.com js.hs-banner.com js.hs-analytics.net js.hscollectedforms.net *.pardot.com sc-static.net *.tiktok.com *.snapchat.com *.ibytedtos.com *.arabclicks.com js.hsadspixel.net js.usemessages.com *.go-mpulse.net; 15
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: *.xvideos.com *.xnxx.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com z8y8f3q6.ssl.hwcdn.net https://www.xvideos.com https://wg-xvdev.xvideos.com *.trafficfactory.biz fonts.googleapis.com fonts.gstatic.com ajax.googleapis.com www.google-analytics.com www.googletagmanager.com *.addthis.com *.addthisedge.com www.iwanttodeliver.com apis.google.com www.google.com www.gstatic.com accounts.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.lswcdn.net *.llnwd.net *.hwcdn.net fcm.googleapis.com *.nk-img.com https://static-dev-xvlive.xvideos.com https://dev-api.naked.com http://dev-api.naked.com *.googleapis.com *.exoclick.com *.exosrv.com *.realsrv.com *.exdynsrv.com *.ackcdn.net *.adtng.com *.adglare.net *.bngpt.com bngpt.com *.trafficjunky.net *.ohmybutt.com *.flirt4free.com *.xlovecam.com *.wlresources.com *.medleyads.com *.cams.com *.acdn5165543.com *.protoawe.com *.google-analytics.com *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com *.promo-bc.com *.bongacams.com *.bongacash.com *.gammae.com *.servingmillions.com *.super-route.com cdn01.flashmediaportal.com engine.asf4f.us *.htdvt.com *.jerkmate.com *.vfgtb.com *.hytxg2.com *.awemdia.com *.cfgr3.com *.ajxx98.online *.sf4f.us *.adworldmedia.com as.air2s.com bngpst.com cretgate.com mysexchatroom.com trknex.com medleyads.com ajxx98.online gamesfromheaven.com go.hpyjmp.com r.trwl2.com bongacams.com clickserve.dartsearch.net afrtrk.com track.cam4tracking.com creative.smljmp.com sffsdvc.com www.sffsdvc.com bmedia.justservingfiles.net blkditsup.com vast.bimbim.com promo.cameraprive.com bngprl.com *.bngprl.com trafforsrv.com *.adglare.net www.flirt4free.com www.ohmybutt.com www.secretpartners.com *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com etahub.com ctrack.trafficjunky.net tracking.sexcash.com;img-src 'self' 'unsafe-inline' data: blob: *.xvideos.com *.xnxx.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com *.hwcdn.net *.trafficfactory.biz www.google.com www.google-analytics.com ssl.gstatic.com *.nk-img.com *.camster.com *.vscdns.com *.doubleclick.net *.google.fr *.google.com *.exoclick.com *.exosrv.com *.realsrv.com *.exdynsrv.com *.ackcdn.net bmedia.justservingfiles.net; 14
sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=frontpage&site=fp&region=US&lang=en-US&device=desktop&partner=default; 14
frame-ancestors none; 14
frame-ancestors 'self' https://widget.stackla.com https://app-sj14.marketo.com https://store.nvidia.com https://resources.nvidia.com https://www.youtube.com https://www.quadro-selector.com http://player.youku.com https://player.youku.com https://live.nvidia-china.com https://www.google.com https://www.nvidia.cn https://wwwqa.nvidia.com https://preview.nvidia.com https://www.nvidia.com https://events.rainfocus.com https://store.nvidia.com https://www.twitch.tv https://store.nvidia.ru https://store.nvidia.in; 14
default-src 'self'; connect-src https:; font-src https:; frame-src https:; img-src https: data:; media-src https:; object-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; 14
frame-ancestors 'self' websitebuilder.godaddy.com websitebuilder.secureserver.net 14
default-src https: data: blob: 'unsafe-eval' 'unsafe-inline'; object-src 'none' 13
default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 13
upgrade-insecure-requests; block-all-mixed-content 13
default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *; 13
default-src 'self'; img-src * data: 'unsafe-inline'; style-src * 'unsafe-inline' blob:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src *; form-action *; media-src *.readspeaker.com *.streamlock.net 'self' blob:; frame-src *; 13
report-uri //report-csp-violation 12
default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; 12
default-src 'self' wss: http: https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors https: http:; report-uri https://secure.booked.net/?page=stat&t=csp 12
default-src * data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 12
default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; 12
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; 11
frame-ancestors self 11
script-src * 'self' 'unsafe-inline' 'unsafe-eval' 11
report-uri https://99designs.report-uri.io/r/default/csp/enforce; frame-ancestors 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' wss: https: data: blob: android-webview-video-poster:; upgrade-insecure-requests; 11
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.sc.pages02.net https://www.google.com  http://addshoppers.s3.amazonaws.com  http://connect.facebook.net  https://www.gstatic.com http://www.rtb123.com  http://pixel.quantserve.com http://*.shop.pe http://shop.pe https://googleads.g.doubleclick.net https://code.jquery.com    http://tt.mbww.com https://staticxx.facebook.com https://secure.quantserve.com https://tag.bounceexchange.com https://insight.adsrvr.org https://api.bounceexchange.com https://*.cloudfront.net https://*.scdn2.secure.raxcdn.com *.bounceexchange.com http://api.bounceexchange.com https://cdn.optimizely.com/ www.youtube.com s.ytimg.com static.getchute.com mpsnare.iesnare.com https://connect.facebook.net https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://siteimproveanalytics.com https://tagmanager.google.com optimizely.s3.amazonaws.com app.optimizely.com cdn3.optimizely.com  *.rtb123.com  *.s3.amazonaws.com https://tt.mbww.com/  https://shop.pe  https://*.s3.amazonaws.com https://www.googleadservices.com/ https://www.google-analytics.com https://s3.amazonaws.com https://beacon.sojern.com https://*.micpn.com *.bing.com https://tracker.marinsm.com https://cdn.onesignal.com http://cdnjs.cloudflare.com/ *.googleadservices.com/ beacon.sojern.com cdn.onesignal.com *.mathtag.com rules.quantcount.com https://ak1s.abmr.net https://maps.googleapis.com/ https://sc-static.net/ https://translate.google.com/ https://translate.googleapis.com/ https://s.pinimg.com/ https://resources.xg4ken.com/ https://services.xg4ken.com/ https://js.adsrvr.org/ https://cdn.quantummetric.com/ https://seaworld-app.quantummetric.com https://members.cj.com ci-mpsnare.iovation.com https://c212.net https://cdn.c212.net https://commercelibs.ibm.com  https://tag.mtrcs.samba.tv/v3/tag/edelman/seaworld-all/sambaTag.js https://optimizely-hrd.appspot.com/ https://*.trustarc.com/ https://consent.trustarc.com/ http://consent.trustarc.com/ https://consent.truste.com/ *.queue-it.net *.taboola.com/ secfld.vmmpxl.com https://isz.app.sparkinfluence.net/ https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js  https://ajax.cloudflare.com https://cdn1.affirm.com/ https://www.affirm.com/  https://zn88kiqxnnojsefct-seaworldcx.siteintercept.qualtrics.com/ https://siteintercept.qualtrics.com/;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com http://*.shop.pe http://addshoppers.s3.amazonaws.com https://*.scdn2.secure.raxcdn.com https://*.cloudfront.net https://*.secure.raxcdn.com maxcdn.bootstrapcdn.com tagmanager.google.com  *.s3.amazonaws.com https://s3.amazonaws.com https://addstrap-ui.addshoppers.com https://translate.googleapis.com https://members.cj.com https://assets.bounceexchange.com https://cdn1.affirm.com/  https://zn88kiqxnnojsefct-seaworldcx.siteintercept.qualtrics.com/ https://siteintercept.qualtrics.com/;font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com *.shop.pe  *.scdn2.secure.raxcdn.com https://*.buschgardens.com  https://buschgardens.com *.seaworld.com *.sesameplace.com https://www.sesameplace.com *.cloudfront.net *.secure.raxcdn.com https://www.aexp-static.com https://seaworld.scdn3.secure.raxcdn.com https://maxcdn.bootstrapcdn.com s3.amazonaws.com http://maxcdn.bootstrapcdn.com https://members.cj.com https://assets.bounceexchange.com https://www.affirm.com/  https://zn88kiqxnnojsefct-seaworldcx.siteintercept.qualtrics.com/ https://siteintercept.qualtrics.com/;frame-src 'self' https://*.fls.doubleclick.net/ http://*.fls.doubleclick.net/ http://*.facebook.com/ https://bid.g.doubleclick.net/  https://www.youtube.com https://www.seaworldlibrary.com https://docs.google.com https://*.seaworld.com/ https://Commerce.4adventure.com https://*.seaworldparks.com https://*.watercountry.com https://*.Commerce.4adventure.com https://*.adventureisland.com https://*.aquaticabyseaworld.com https://*.sesameplace.com http://6258894.fls.doubleclick.net http://6258894.fls.doubleclick.net http://4174228.fls.doubleclick.net https://4174228.fls.doubleclick.net https://www.googletagmanager.com https://staticxx.facebook.com https://insight.adsrvr.org https://assets.bounceexchange.com/ https://*.cdn.optimizely.com/ https://www.pages02.net/ https://tt.mbww.com/ https://secure.buschgardens.com https://maps.google.com https://www.google.com/ https://secure.aquatica.com https://*.bounceexchange.com http://contentz.mkt922.com/ https://pixel.mathtag.com/ https://www.chargerback.com https://*.widencdn.net/ https://*.seaworldlibrary.com https://www.surveygizmo.com/ https://tr.snapchat.com/ https://qa-secure.buschgardens.com https://members.cj.com https://survey.seaworldentertainment.com/ https://survey.zohopublic.com/ https://hpc.uat.freedompay.com/ https://hpc.freedompay.com/ https://consent-pref.trustarc.com/ https://*.trustarc.com https://x.m.buschgardens.com/ http://www.youtube.com/ https://cdn1.affirm.com/ https://www.affirm.com/ https://seaworldcx.iad1.qualtrics.com/ https://siteintercept.qualtrics.com/ %0d%0a%0d%0a;connect-src 'self' https://staticxx.facebook.com https://insight.adsrvr.org https://*.scdn2.secure.raxcdn.com https://logx.optimizely.com https://*.secure.raxcdn.com *.s3.amazonaws.com cache.getchute.com https://tapi.optimizely.com https://shopper.shop.pe https://shop.pe  https://rtb123.com https://api.getchute.com https://stats.g.doubleclick.net https://www.google-analytics.com https://*.as-labs.addshoppers.com/ https://as-labs.addshoppers.com https://s3.amazonaws.com https://www.google.com https://events.bouncex.net https://onesignal.com https://*.optimizely.com https://onesignal.com https://errors.client.optimizely.com https://translate.googleapis.com https://ct.pinterest.com/ https://seaworld-app.quantummetric.com/ https://commercelibs.ibm.com https://tag.mtrcs.samba.tv/v3/tag/edelman/seaworld-all/sambaTag.js https://cdn.quantummetric.com/qscripts/quantum-seaworld.js https://pixel.mtrcs.samba.tv/v2/tag/edelman/seaworld-all/ https://trc.taboola.com/ https://isz.app.sparkinfluence.net/ https://api-cf.affirm.com/ https://tracker.affirm.com/ https://www.affirm.com/api/v2/cookie_sent/ https://www.affirm.com/ https://*.siteintercept.qualtrics.com/  https://siteintercept.qualtrics.com/ https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_88KIqXnnoJSEFCt&Q_CLIENTVERSION=1.41.0&Q_CLIENTTYPE=web/ https://siteintercept.qualtrics.com/ %0d%0a; img-src 'self' data: * ; media-src 'self' https://scontent.cdninstagram.com https://*.as-labs.addshoppers.com/  *.s3.amazonaws.com/ https://s3.amazonaws.com/images/BackgroundImage.jpeg  s3.amazonaws.com/ https://seaworld.scdn3.secure.raxcdn.com/  https://stage-media.scdn6.secure.raxcdn.com/; 11
default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval' 11
default-src 'self'; 11
default-src * 'unsafe-inline' 'unsafe-eval' data: blob: 11
report-uri https://www.instagram.com/security/csp_report/; default-src 'self' https://www.instagram.com; img-src data: blob: https://*.fbcdn.net https://*.instagram.com https://*.cdninstagram.com https://*.facebook.com https://*.giphy.com; font-src data: https://*.fbcdn.net https://*.instagram.com https://*.cdninstagram.com; media-src 'self' blob: https://www.instagram.com https://*.cdninstagram.com https://*.fbcdn.net; manifest-src 'self' https://www.instagram.com; script-src 'self' https://instagram.com https://www.instagram.com https://*.www.instagram.com https://*.cdninstagram.com wss://www.instagram.com https://*.facebook.com https://*.fbcdn.net https://*.facebook.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https://*.www.instagram.com https://www.instagram.com 'unsafe-inline'; connect-src 'self' https://instagram.com https://www.instagram.com https://*.www.instagram.com https://graph.instagram.com https://*.graph.instagram.com https://*.cdninstagram.com https://api.instagram.com https://i.instagram.com wss://www.instagram.com wss://edge-chat.instagram.com https://*.facebook.com https://*.fbcdn.net https://*.facebook.net chrome-extension://boadgeojelhgndaghljhdicfkmllpafd blob:; worker-src 'self' blob: https://www.instagram.com; frame-src 'self' https://instagram.com https://www.instagram.com https://*.instagram.com https://staticxx.facebook.com https://www.facebook.com https://web.facebook.com https://connect.facebook.net https://m.facebook.com; object-src 'none'; upgrade-insecure-requests 11
default-src *; script-src 'unsafe-eval' 'self' 'unsafe-inline'  https:; object-src 'self' *.ytimg.com ytimg.com *.youtube.com youtube.com; style-src * 'unsafe-inline'; img-src * data:; frame-src *; font-src * data:; connect-src *; media-src * blob:; 11
default-src 'self' blob: wss: data: https:; img-src 'self' data: https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https:; style-src 'self' 'unsafe-inline' data: https:; 10
frame-ancestors none 10
default-src 'self' http: https: data: blob: wss: 'unsafe-inline' 'unsafe-eval' 10
frame-ancestors  'self' *.espn.com:* *.espnqa.com:* *.espnsb.com *.espn.co.uk *.espndeportes.espn.com *.espn.com.br *.espn.com.mx *.espn.com.ve *.espn.com.ar *.espn.com.co *.espnfc.com.au *.espn.com.au *.espn.in *.espn.com.sg *.espn.cl *.espn.com.pe *.espn.com.gt *.espn.com.do *.espn.com.ec *.espn.com.uy *.espn.com.pa *.espn.co.cr http://*.espnqa.com:* http://*.espn.com:* 10
block-all-mixed-content; object-src 'none'; form-action 'self' *.indeed.com  https://go.indeedassessments.com/ https://take.indeedassessments.com/; frame-src 'self' *.indeed.com  https://accounts.google.com/ https://smartlock.google.com/ https://www.google.com/recaptcha/ https://www.youtube.com/embed/; img-src 'self' *.indeed.com  data: d13w2n5a9i6r56.cloudfront.net d3hbwax96mbv6t.cloudfront.net d12632ofg6v5f7.cloudfront.net d2q79iu7y748jz.cloudfront.net d3s4xzh46vzktb.cloudfront.net d1ymdoy4af119w.cloudfront.net d3fw5vlhllyvee.cloudfront.net https://res.cloudinary.com www.google-analytics.com https://www.google.com/ads https://www.facebook.com/tr/ https://sb.scorecardresearch.com https://stats.g.doubleclick.net https://*.tvpixel.com/* https://*.optimizely.com/* https://d.turn.com/* https://idsync.rlcdn.com/* https://pt.ispot.tv; default-src 'self' 'unsafe-inline' data: *.indeed.com  d3hbwax96mbv6t.cloudfront.net d3hbwax96mbv6t.cloudfront.net https://smartlock.google.com/ https://d13w2n5a9i6r56.cloudfront.net/ https://accounts.google.com/ https://cdn.ravenjs.com/3.14.2/raven.min.js d3hbwax96mbv6t.cloudfront.net d12632ofg6v5f7.cloudfront.net d2q79iu7y748jz.cloudfront.net d3s4xzh46vzktb.cloudfront.net d1ymdoy4af119w.cloudfront.net d3fw5vlhllyvee.cloudfront.net www.google-analytics.com https://www.facebook.com/tr/ https://sb.scorecardresearch.com https://connect.facebook.net *.serving-sys.com maps.googleapis.com csi.gstatic.com https://ad.doubleclick.net/ddm/activity/ https://www.google.com/recaptcha/ https://www.gstatic.com https://www.youtube.com https://pp.d2-apps.net/v1/impressions/log dpuk71x9wlmkf.cloudfront.net https://privacyportal.onetrust.com https://stats.g.doubleclick.net https://d3fw5vlhllyvee.cloudfront.net/frontend-sentry-bundle/v1.1.2/js/sentry.js https://apis.google.com/js/platform.js https://app-sj07.marketo.com/js/forms2/js/forms2.min.js https://browser.sentry-cdn.com/4.3.3/bundle.min.js https://browser.sentry-cdn.com/4.4.2/bundle.min.js https://*.tvpixel.com/* https://*.optimizely.com/* https://cdn.optimizely.com/js/10668710116.js https://munchkin.marketo.net/munchkin.js https://www.google-analytics.com/analytics.js https://www.google-analytics.com/plugins/ua/linkid.js https://fonts.gstatic.com/ https://fonts.googleapis.com/ https://pxl.indeed.com/* https://match.prod.bidr.io/cookie-sync/indeed https://rs.fullstory.com/rec/; 10
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: blob:; media-src 'self' https: blob:; worker-src 'self' https: blob:; block-all-mixed-content; connect-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: blob: https://*.trouter.io:443 https://*.trouter.skype.com:443 wss://*.trouter.io:443 wss://*.trouter.skype.com:443; 10
frame-ancestors 'self' https://*.plazz.net ; 10
frame-ancestors * 10
default-src https: 'unsafe-inline' 'unsafe-eval' 10
object-src 'none' 10
script-src 'self'    10
base-uri 'self'; img-src * data: 'unsafe-inline'; default-src data: * 'unsafe-inline'; frame-ancestors 'self'; manifest-src 'none'; media-src *.readspeaker.com *.speechstream.net 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; object-src 'self'; plugin-types application/x-shockwave-flash application/pdf; report-uri https://www.cspreport.nl 10
block-all-mixed-content; style-src https: 'unsafe-inline'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src https:; 9
frame-ancestors https://*.marketo.com 9
frame-ancestors 'self' https://help.glassdoor.com http://library.glassdoor.com https://library.glassdoor.com http://glassdoor.lookbookhq.com https://glassdoor.lookbookhq.com https://glassdoor2.lookbookhq.com https://howto.glassdoor.com https://apply.indeed.com ; 9
default-src https: blob:; connect-src https: wss: blob:; font-src https: data:; frame-src https:; frame-ancestors 'self'; img-src https: blob: data:; media-src https: blob:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'unsafe-inline' https:; 9
object-src 'self' 9
frame-ancestors 'self' https://sage.pathfactory.com; 9
default-src https: data: 'unsafe-inline' 'unsafe-eval'; 9
default-src 'self' http: https: *.yandex.ru *.google.com *.googlesyndication.com googleads.g.doubleclick.net www.googletagservices.com www.googletagmanager.com securepubads.g.doubleclick.net adservice.google.com.ua adservice.google.com *.googleadservices.com cse.google.com *.google.com *.googlesyndication.com *.googlesyndication.com data: blob: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://widget.my.feedot.com/ https://a24help.ru/ https://top-fwz1.mail.ru/ https://yastatic.net *.googlesyndication.com *.yandex.ru cdn.ampproject.org pagead2.googlesyndication.com storage.googleapis.com googleads.g.doubleclick.net ajax.googleapis.com www.googletagmanager.com www.googletagservices.com securepubads.g.doubleclick.net adservice.google.com.ua adservice.google.com securepubads.g.doubleclick.net www.google-analytics.com *.googleadservices.com cse.google.com *.google.com *.googlesyndication.com;  img-src 'self'  data: *.alicdn.com *.gstatic.com  *.yandex.ru *.yandex.net  https://wcm-ru.frontend.weborama.fr https://www.tns-counter.ru https://top-fwz1.mail.ru/ https://edugram.com *.doubleclick.net *.googleads.g.doubleclick.net *.googlesyndication.com storage.googleapis.com pagead2.googlesyndication.com  securepubads.g.doubleclick.net google-analytics.com *.googleapis.com *.google.com *.googlesyndication.com *.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.google.com *.googlesyndication.com; font-src 'self' *.gstatic.com fonts.googleapis.com; frame-ancestors 'self'; object-src 'self' 9
default-src 'self' 'unsafe-inline' https://park.101datacenter.net  https://*.deviceatlascloud.com/ https://cs-cdn.deviceatlas.com data: 9
frame-ancestors 'self' https://preview.citynavigator.nl 9
frame-ancestors 'self' http://toolpool.circit.de https://toolpool.circit.de 8
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.etracker.com https://*.etracker.de https://*.jwpcdn.com https://customers.lmis.de; style-src 'self' 'unsafe-inline' https://*.etracker.de https://*.jwpcdn.com; img-src 'self' data: https://sg.geodatenzentrum.de https://jwpltx.com; connect-src 'self' https://*.etracker.com https://*.etracker.de https://sg.geodatenzentrum.de https://*.jwpcdn.com; font-src 'self' data: https://*.jwpcdn.com; object-src 'self'; media-src 'self' https://*.streamfarm.net http://*.bmwi.de; form-action 'self'; frame-src 'self' https://*.twitter.com https://vimeo.com https://player.vimeo.com https://customers.lmis.de https://vdi.p5.easire.com https://bmwi-batteriezellfertigung.interactive-scape.com; frame-ancestors 'self'; 8
frame-ancestors *; 8
default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none' 8
default-src blob: https: 'unsafe-eval' 'unsafe-inline'; connect-src https: 'self' https: *.amazonaws.com *.cfauthx.com *.mapbox.com  data: *.accesso.com; img-src 'self' https: data: blob:; 8
default-src 'none'; connect-src 'self' *.mil.ru *.tildacdn.com *.gcdn.co *.mail.ru top100.ru stat.sputnik.ru mc.yandex.ru www.google-analytics.com *.anycaster.tv *.vintera.tv *.cdnvideo.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' yastatic.net megatimer.ru stat.sputnik.ru *.stat.sputnik.ru tildacdn.com *.tildacdn.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.mil.ru *.rambler.ru *.yandex.ru *.mail.ru *.google-analytics.com *.google.com top100.ru *.top100.ru *.tvzvezda.ru tvzvezda.ru *.mail.ru tns-counter.ru *.tns-counter.ru *.googletagmanager.com mil.ru *.mil.ru *.xn--90anlfbebar6i.xn--p1ai; object-src 'self' *.mil.ru *.vintera.tv *.cdnvideo.ru *.youtube.com; style-src 'self' 'unsafe-inline' megatimer.ru mil.ru *.mil.ru *.googleapis.com; img-src 'self' mil.ru *.mil.ru stat.sputnik.ru cnt.sputnik.ru doubleclick.net *.doubleclick.net tns-counter.ru *.tns-counter.ru *.google.com google.com data: counter.yadro.ru *.yandex.net *.yandex.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.mail.ru *.google-analytics.com *.rambler.ru ; media-src 'self' mil.ru *.mil.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.xn--90anlfbebar6i.xn--p1ai; frame-src 'self' mil.ru *.mil.ru anycaster.tv *.anycaster.tv livezvezda.mediacdn.ru *.livezvezda.mediacdn.ru newapp.bonus-tv.ru *.newapp.bonus-tv.ru vk.com *.vk.com ok.ru *.ok.ru tvzvezda.ru *.tvzvezda.ru yandex.ru *.yandex.ru *.yandex.net *.youtube.com youtube.com *.youtu.be youtu.be *.google.com *.vintera.tv *.cdnvideo.ru; font-src 'self' fonts.gstatic.com tildacdn.com *.tildacdn.com *.mil.ru *.vintera.tv *.cdnvideo.ru *.mil.ru *.youtube.com *.youtube.com *.youtu.be *.google.com; frame-ancestors 'self' http://mil.ru http://*.mil.ru https://vuz.mil.ru https://www.mil.ru https://*.mil.ru https://anycaster.tv https://livezvezda.mediacdn.ru https://youtube.com https://*.youtube.com https://youtu.be https://*.youtu.be; base-uri 'self'; form-action 'self' mil.ru *.mil.ru; 8
default-src 'self' *.edge-cdn.net; object-src www.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.analytics.edgekey.net  *.bing.com  *.ccmp.eu  *.cookiebot.com  *.edge-cdn.net   *.google-analytics.com  *.googletagmanager.com  *.lidl  *.lidl-flyer.com  *.lidl.com  *.lidl.net  *.multichannelacd.de  *.secrz.de  *.virtualearth.net  ads.yahoo.com  advdl.ammadv.it  assets.zendesk.com  c.imedia.cz  cm.g.doubleclick.net  connect.facebook.net  d.adroll.com  d.adroll.mgr.consensu.org  form.lidl.com  lidl.media01.eu  lidlplus-prod-api.azurewebsites.net lidlqform.omax.cz  s.adroll.com  s.ytimg.com  tagmanager.google.com  track.adform.net  us-u.openx.net  www.dwin1.com  www.googleadservices.com www.google.com www.youtube.com; img-src 'self' data: *.bing.com *.ccmp.eu *.doubleclick.net *.edge-cdn.net *.google-analytics.com *.googleusercontent.com *.lidl *.lidl-flyer.com *.lidl.com *.lidl.net *.openstreetmap.org *.osm.org *.secrz.de *.virtualearth.net advdl.ammadv.it assets.zendesk.com c.imedia.cz d.adroll.com ib.adnxs.com idsync.rlcdn.com lidlplusprod.blob.core.windows.net lidlplusstaticcontentpro.blob.core.windows.net lidlplusstoragestaging.blob.core.windows.net s-static.ak.facebook.com ssl.gstatic.com stats.g.doubleclick.net track.adform.net www.facebook.com www.google.com www.googletagmanager.com www.gstatic.com x.bidswitch.net; style-src 'self' 'unsafe-inline' *.bing.com *.secrz.de assets.zendesk.com fonts.googleapis.com form.lidl.com tagmanager.google.com; font-src 'self' 'unsafe-inline' fonts.gstatic.com form.lidl.com data: themes.googleusercontent.com; frame-src 'self' https: 'unsafe-inline'; connect-src 'self' *.analytics.edgekey.net *.bing.com *.ccmp.eu *.edge-cdn.net *.google-analytics.com *.lidl *.lidl.com *.lidl.net *.multichannelacd.de *.openstreetmap.org *.osm.org *.secrz.de *.test *.video-cdn.net *.virtualearth.net appgateway.lidlplus.com content.lidlplus.com form.lidl.com lidl.media01.eu lidlplus-prod-api.azurewebsites.net lidlplus-uat-api.azurewebsites.net stats.g.doubleclick.net; frame-ancestors 'self' *.bing.com *.ccmp.eu *.google-analytics.com *.googletagmanager.com *.lidl *.lidl.ch *.lidl.com *.lidl.net *.poi-service.de *.secrz.de *.test accounts-qa.lidl.com accounts-stg.lidl.com accounts-uat.lidl.com accounts.lidl.com website-lidl-account-dev.azurewebsites.net *.lidl-shop.pl *.lidl-sklep.pl; 8
script-src 'self' 'unsafe-inline' 'unsafe-eval'  connect.facebook.net tagmanager.google.com maps.googleapis.com www.googleadservices.com www.google-analytics.com www.google.com www.googletagmanager.com googleads.g.doubleclick.net www.gstatic.com 8
img-src data: https: 8
block-all-mixed-content; frame-ancestors 'self' 8
default-src 'self' 'unsafe-inline' 8
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.sbo.top *.sbobet.com *.sbobetex.com *.youtube.com *.ytimg.com *.cloudfront.net optimize.google.com *.google-analytics.com *.hotjar.com *.googletagmanager.com *.qsmly.com *.googleapis.com *.cdnnetworks.net *.purseno.com *.syndication.twimg.com *.sportradar.com *.sportradarserving.com *.digitru.st *.bidswitch.net *.gstatic.com *.geetest.com widgets.sir.sportradar.com avplayer-cdn.sportradar.com; worker-src 'self' blob:; report-uri https://csp.trackit.tk/z/7046ef45-99d6-447d-9ac3-6d42ae2a70fa 8
default-src * 'unsafe-eval' 'unsafe-inline' blob: data:; 8
default-src 'self';script-src * 'unsafe-inline' 'unsafe-eval';style-src * 'unsafe-inline'; frame-src * 'unsafe-inline'; img-src * data:; connect-src * 'unsafe-inline';  font-src * 'unsafe-inline' 8
policy-definition 8
default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self' 8
default-src 'none'; script-src 'self' 'unsafe-inline' *.loszona.com www.google.com youtube.com *.youtube.com *.loszona.com *.facebook.com *.facebook.net *.twitter.com; style-src 'self' 'unsafe-inline' data: *.loszona.com; img-src 'self' data: *.fisioestetic.com *.loszona.com www.google.com youtube.com *.youtube.com *.loszona.com *.facebook.com *.facebook.net *.twitter.com; connect-src 'self' wss://*.socialengagementcoaching.com:* wss://*.glrsales.com:*; manifest-src 'self'; worker-src 'self'; frame-src www.google.com youtube.com *.youtube.com *.loszona.com *.facebook.com *.facebook.net *.twitter.com 8
upgrade-insecure-requests; block-all-mixed-content; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-orientation-lock allow-pointer-lock; 7
frame-ancestors 'self' http://hybris.com https://hybris.com https://discovery-center.cloud.sap https://www.discovery-center.cloud.sap http://*.hybris.com https://*.hybris.com http://sap.lookbookhq.com https://sap.lookbookhq.com http://*.sap.com https://*.sap.com http://*.sap.cn https://*.sap.cn https://www.gigya.com *.lookbookhq.com https://cloudplatform.sap.com https://cal.sap.com https://developers.sap.com *.omtrdc.net;default-src 'self' blob: https: data: 'unsafe-inline' 'unsafe-eval' github.com api.github.com raw.githubusercontent.com *.liveperson.net http://*.sap.com https://*.sap.com http://*.sap.cn https://*.sap.cn *.adobedtm.com *.company-target.com *.omtrdc.net *.w55c.net platform.twitter.com *.siteintercept.qualtrics.com *.doubleclick.net cdnjs.cloudflare.com charts3.equitystory.com http://sap-espresso.com http://*.akamai.net ust-servlet.dataxu.net https://*.cdn.sap.com *.2mdn.net *.2o7.net *.qualtrics.com https://*.akamaihd.net http://*.akamaihd.net *.lpsnmedia.net *.truste.com *.newrelic.com *.nr-data.net https://*.youtube.com https://*.youtu.be https://*.ytimg.com *.twitter.com http://*.twimg.com https://*.twimg.com *.adobe.com *.demdex.net *.liveperson.com *.liveengage.net *.liveengage.com http://livefyre.com *.liveper.sn *.licdn.com *.hana.ondemand.com http://dc1cp8nqqrmxi.cloudfront.net http://*.edgesuite.net https://bcmcps.enter.sap *.d41.co 7
default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 7
child-src 'self' https://b2b.verizonmedia.com https://pages.oath.com https://www.youtube.com https://pages.verizonmedia.com https://delivery.vidible.tv https://content.uplynk.com/; worker-src 'self' blob:; frame-ancestors 'self' https://b2b.verizonmedia.com 7
default-src http: https: 'unsafe-inline' 'unsafe-eval' data: blob: mediastream:; 7
default-src data: 'unsafe-inline' 'unsafe-eval' https: http:;script-src data: 'unsafe-inline' 'unsafe-eval' https: http: blob:;style-src data: 'unsafe-inline' https: http: blob:;img-src data: https: http: blob:;font-src data: https: http:;connect-src https: wss: ws: http: blob:;media-src https: blob: http:;object-src https: http:;child-src https: data: blob: http:;form-action https: http:;block-all-mixed-content; 7
upgrade-insecure-requests; block-all-mixed-content; 7
frame-ancestors 'self' esbroadcom.lookbookhq.com mfbroadcom.lookbookhq.com; 7
frame-ancestors https:; 7
default-src 'self' 'unsafe-inline' 'unsafe-eval' data:  24703.online-adventskalender.de *.b-ite.com *.bitkomplex.de *.bright-guide.de *.cdn.office.net *.cookiebot.com *.dvinci-hr.com *.etracker.com *.etracker.de *.exmap.de *.facebook.com *.flickr.com *.google-analytics.com *.google.com *.google.de *.googleapis.com *.gstatic.com *.haffhus.de *.highcharts.com *.hk24.de *.ihk.de *.ihk24.de *.jobcluster.de *.linkedin-ei.com *.microsoft.com *.multipage.online *.newsletter2go.com *.staticflickr.com *.twimg.com *.twitch.tv *.twitter.com *.userlike.com *.vimeo.com *.wahlplus.de *.wirecard.com *.xing-events.com *.youtube.com app.cituro.com b6df6a39-9bba-47b4-b1e3-367604039de3.rlets.com bc.pressmatrix.com berufsausbildung-aachen-ihk.de cdn.contentful.com cdn.doo.net/assets/js/viovendi-embed-static-1.js cdn.podigee.com cdn.rlets.com cdnjs.cloudflare.com code.createjs.com code.jquery.com/jquery-3.1.1.min.js con.arbeitsagentur.de connect.facebook.net consentcdn.cookiebot.com corona.conterra.de cottbus-ihk-pruefungen.de covid19.webtvcampus.de d3dc1lgancj6l0.cloudfront.net datawrapper.dwcdn.net dbaw.specials-bahn.de detmold.ihk-beitragsrechner.de dihk.imageplant.de doo.net dq4irj27fs462.cloudfront.net e.issuu.com e.video-cdn.net editor.signavio.com embed.nexx.cloud expertenpool.automatisierungsregion.de geoportal-hamburg.de haffhus.s3.eu-central-1.amazonaws.com handelskammer-bremen.appointmind.net hk24.perbit-job.de hk24.perbit-job.de  html5-player.libsyn.com iframe.wvd-portfolio.de ihk-ar.ycms.rocks ihk-darmstadt-portal.rexx-recruitment.com ihk-potsdam.perbit-job.de ihk-schwerin.wahlplus.de ihk-weiterbildung-oldenburg.de ihk.selbstdenker.com ihkob.wekando.eu imagemarker.com ims-files-cdn.net infographic.statista.com inx.odav.de isi.hdb-hamburg.de komsis.inecos.de kvg-kassel.widget-generator.de link.webropolsurveys.com live.c3networking.de livestream.watch/vp/nachhaltigkeitsdialog.html maxcdn.bootstrapcdn.com pam.ihk-schleswig-holstein.de plugins.flockler.com roundme.com routenplaner.bus-bahn-thueringen.de start.video-stream-hosting.de static-exp1.licdn.com static.dvinci-easy.com static.issuu.com tuerchen.com umap.openstreetmap.fr userlike-cdn-operators.s3-eu-west-1.amazonaws.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com vimeo.com vstdbv3 w.soundcloud.com walls.io web.ihk-pfalz.net web.inxmail.com wss://chat.userlike.com/chat/ wss://umd.userlike.com/umd/ www.ausbildungslauf.de www.azubi-magdeburg-ihk.de www.bahn.de www.berufe.tv www.bso-hessen.de www.etermin.net www.finest-jobs.com www.forschungsfinder-hessen.de www.gatewatch.eu www.giu-kalender.org www.google.analytics.com www.googletagmanager.com www.hvv.de www.ihk-arbeitsgemeinschaft-rlp.de www.ihk-berlin.de www.ihk-berlin.org www.ihk-bw.digital www.ihk-ecofinder.de www.ihk-gfi.de www.ihk-koblenz.de www.ihk-lehrstellenboerse.de www.ihk-lueneburg.de www.ihk-magdeburg.de www.ihk-ostbrandenburg.de www.ihk-praktikumsportal.de www.ihk-rlp.de www.ihk-wiesbaden.de www.ihkac-anwendungen.de www.instagram.com www.iwd.de www.kandidatenmanagement.de www.leg-thueringen.de www.onlinebewerbungsserver.de www.plattform-i40.de www.powr.io www.praktikum.info www.rmv.de www.terminland.de www.tfaforms.com www.unikam.de www.vvs.de www.youtube-nocookie.com  ;  report-uri /blueprint/servlet/serviceport/rest/csplogging/logViolation ;  7
script-src 'self' https: 'unsafe-eval' 'unsafe-inline' 7
frame-ancestors 'self'; report-uri /report-csp-violation 7
default-src * data: 'unsafe-inline' 'unsafe-eval' 7
default-src https: 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' data: *; media-src blob: 'self' *; font-src 'self' data: *; connect-src 'self' *; child-src blob: 'self' *; block-all-mixed-content; 7
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: *; 7
connect-src 'self' wss://*.zopim.com https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; frame-ancestors https://*.adobemsbasic.com https://*.lingotek.com https://*.nuance.com https://*.nuance.fr https://*.nuance.de https://*.nuance.es https://*.nuance.co.uk 'self' https:; frame-src 'self' https:; upgrade-insecure-requests; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:; img-src data: http://www.w3.org/2000/svg https:; 7
frame-ancestors 'self' sun.eduzz.com *.monetizze.com.br *.hotmart.com; 7
prefetch-src *.metartnetwork.com *.hustler.com *.metartmoney.com; default-src 'self' blob: *.metartnetwork.com *.hustler.com; connect-src 'self' blob: wss: *.zdassets.com *.zendesk.com *.atlassian.com *.atl-paas.net *.hustler.com *.metartnetwork.com *.metart.network *.google-analytics.com *.googleapis.com *.doubleclick.net *.mixpanel.com *.metartmoney.com; style-src 'self' blob: 'unsafe-inline' *.googleapis.com fonts.gstatic.com platform.twitter.com *.twimg.com maxcdn.bootstrapcdn.com *.google.com *.hustler.com *.metartnetwork.com cdn.cookielaw.org; font-src 'self' data: *.zopim.com fonts.gstatic.com *.googleapis.com ssl.p.jwpcdn.com maxcdn.bootstrapcdn.com *.hustler.com *.metartnetwork.com; script-src 'self' 'unsafe-inline' *.zdassets.com *.atlassian.com *.zopim.com *.twitter.com *.twimg.com ssl.p.jwpcdn.com *.googletagmanager.com *.google-analytics.com cdn.mouseflow.com *.google.com cdn.polyfill.io *.hustler.com *.metartnetwork.com *.metart.network cdn.cookielaw.org code.jquery.com geolocation.onetrust.com *.mxpnl.com *.googleapis.com *.gstatic.com; frame-src 'self' *.twitter.com *.hustler.com *.metartnetwork.com *.youtube.com *.vimeo.com *.atlassian.net *.metartmoney.com; img-src 'self' data: *.nsimg.net *.twimg.com *.zopim.com *.twitter.com jwpltx.com *.google-analytics.com *.gstatic.com *.googletagmanager.com *.googleapis.com *.doubleclick.net *.google.com *.hustler.com *.metartnetwork.com; media-src 'self' data: blob: *.nsimg.net *.hustler.com *.metartnetwork.com *.zdassets.com; worker-src 'self' data: blob: wss:; object-src 'none' 7
script-src 'self' https: 'unsafe-inline' 'unsafe-eval' 7
base-uri 'self'; 7
frame-ancestors https://unileverbrazil.marketing.adobe.com https://unilever3.marketing.adobe.com https://unilever2.marketing.adobe.com https://unilever.marketing.adobe.com; 7
frame-ancestors 'self'; img-src 'self' i.notino.com cdn.notinoimg.com blob: data: *; 7
'self' https://ajax.googleapis.com 7
default-src 'self' https://*.ndcmediagroep.nl;base-uri 'self';frame-ancestors 'self';object-src 'none';block-all-mixed-content;upgrade-insecure-requests;img-src 'self' data: https://s3.eu-central-1.amazonaws.com/ndc-cookiewall-images/;script-src 'self' https://cdn.harvest.graindata.com/ 'unsafe-inline';style-src 'self' 'unsafe-inline' 7
script-src *; 7
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data: https:; font-src * 'self' data: https:; style-src * 'self' 'unsafe-inline' data: https: 7
default-src https:; connect-src https: wss:; font-src https: data:; img-src https: data: blob:; frame-src https:; frame-ancestors 'self'; worker-src https: data: 'unsafe-inline' 'unsafe-eval'; form-action https: javascript:; script-src https: data: 'unsafe-inline' 'unsafe-eval';style-src https: data: 'unsafe-inline'; base-uri 'self'; 7
frame-ancestors 'self' *.pubble.nl *.pubble.cloud *.pubble.dev *.omnyo.nl 7
frame-ancestors 'self' *.roomlynx.net  7
upgrade-insecure-requests; base-uri 'self' 6
block-all-mixed-content; upgrade-insecure-requests 6
default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob: wss://*.hotjar.com; font-src https: data:; img-src https: data: blob:; media-src https: data: blob:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests 6
default-src 'unsafe-eval' 'unsafe-inline' * blob:; script-src 'unsafe-inline' 'unsafe-eval' * blob:; img-src * data:; connect-src *; font-src * data:; upgrade-insecure-requests; block-all-mixed-content 6
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.timeweb.net *.timeweb.ru timeweb.eu *.yandex.ru yandex.ru wss://*.timeweb.ru wss://*.timeweb.net www.googletagmanager.com www.google-analytics.com disutgh7q0ncc.cloudfront.net eligibility.wootric.com wootric-eligibility.herokuapp.com mc.yandex.ru *.livetex.ru *.livetex.me stats.g.doubleclick.net *.google.com *.google.ru *.sendpulse.com data: vk.com *.vk.com dadata.ru *.dadata.ru *.hostings.info *.hosters.ru bitrix.info static.criteo.net *.push.world *.gstatic.com recreativ.ru sslwidget.criteo.com *.googleapis.com *.webpushs.com onthe.io *.onthe.io i.imgur.com ipic.su *.sendpulse.com www.youtube.com s.tmimgcdn.com cdn.jsdelivr.net mc.webvisor.org https://*.getsitecontrol.com yastatic.net blob: staging.timeweb.com 6
default-src 'self'; script-src 'self' 'unsafe-inline' translate.googleapis.com blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com translate.googleapis.com; font-src 'self' fonts.gstatic.com data:; img-src 'self' data:; object-src 'none'; report-uri https://hpage-report.uriports.com/reports/enforce 6
default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net wss://*.hotjar.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true&a=cmscache 6
frame-src *.2checkout.com *.bitdefender.com *.bitdefender.biz *.bitdefender.net *.bitdefender.fr *.bitdefender.de *.bitdefender.com.au *.bitdefender.co.uk *.bitdefender.es *.bitdefender.it *.bitdefender.pt *.bitdefender.com.br *.bitdefender.ro *.bitdefender.nl *.bitdefender.be *.bitdefender.se bitdefender.marketing.adobe.com download.bitdefender.com *.facebook.com *.doubleclick.net *.adsrvr.org *.mathtag.com *.google.com *.google.ro *.flashtalking.com *.amazon-adsystem.com *.livechatinc.com *.twitter.com *.cedexis.com *.cedexis-test.com *.youtube.com *.soundcloud.com *.hubspot.com *.cookiebot.com *.vimeo.com *.edgecastcdn.net *.linkedin.com *.hsforms.com *.cloudfront.net *.edgecastdns.net *.hotjar.com *.zanox.ws *.zanox.com *.usemax.de usemax.de bitdefender.demdex.net *.omniture.com widget.trustpilot.com *.2o7.net *.omtrdc.net *.demdex.net assets.adobedtm.com api-eu.boldchat.com livechat-eu.boldchat.com *.youtube-nocookie.com *.instagram.com instawidget.net consentcdn.cookiebot.com recommender.scarabresearch.com *.zenaps.com hal9000.redintelligence.net pixel.xonaz.com static-hello.bitdefender.com tags.dynamo.one *.redintelligence.net 20787700p.rfihub.com pixel.xonazz.com *.adobe.com *.outgrow.us bitdefender.applytojob.com 6
frame-ancestors 'self' https://*.ccma.cat http://*.ccma.cat; 6
frame-ancestors 'self' *.ci360.sas.com 6
frame-ancestors *.benq.com *.benq.eu 6
default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 6
frame-ancestors 'self' https://immobilier.jll.be https://events1.social27.com https://jll.maps.arcgis.com; 6
default-src 'self' d1a19ys8w1wkc1.cloudfront.net; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval' https://rcdfcdn.mars.com https://stage-rcdfcdn.mars.com;worker-src * blob:; style-src * 'unsafe-inline'; frame-ancestors 'self' *.royal-canin.de; 6
default-src *;script-src * 'unsafe-inline' 'unsafe-eval';style-src * 'unsafe-inline';img-src * data: 6
frame-ancestors 'self' http://customer-hornbach.loop21.net https://customer-hornbach.loop21.net http://public-location-hornbach.loop21.net https://public-location-hornbach.loop21.net 6
frame-ancestors 'self' godaddy.com test-godaddy.com dev-godaddy.com *.godaddy.com *.test-godaddy.com *.dev-godaddy.com 6
default-src * 'self' 'unsafe-inline' 'unsafe-eval' blob:;script-src * 'self' 'unsafe-inline' 'unsafe-eval'; style-src * 'self' 'unsafe-inline';img-src * 'self' data:;frame-ancestors 'self' https://www.visma.com/ online.superoffice.com apps.risevision.com desktop.visma.com asp.visma.com hlasp.visma.com es-eu-dev-api01.episerver.net;worker-src * 'self' blob:;connect-src * 'self' blob:;font-src * 'self' data:;frame-src * 'self';media-src * 'self' blob:;object-src * 'self'; 6
script-src 'self' 'unsafe-inline' 'unsafe-eval' * 6
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; 6
referrer origin 6
frame-ancestors 'self' *.smartagent.app http://localhost:* https://localhost:*; form-action https:; script-src https: 'unsafe-inline' 'unsafe-eval' 6
frame-ancestors *.cas.cn 6
default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss: 6
default-src https: data: blob: mediastream: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; font-src https: data: 'self' 'unsafe-eval' 'unsafe-inline' 6
frame-ancestors 'self'; base-uri 'self'; 6
reflected-xss block 6
child-src 'self' blob: https://*.tagcommander.com *.tagcommander.com optimize.google.com gateway.euronext.com forms.logiforms.com https://*.iadvize.com *.iadvize.com aax-eu.amazon-adsystem.com *.trustcommander.net *.overkiz.com *.somfy.com *.somfysystems.pl e.issuu.com projects.perfoweb.fr www.tahomalink.com www.tahomalink.com boutique.somfy.fr www.youtube.com www.googletagmanager.com static.addtoany.com client.alwaysupport.com *.doubleclick.net static.olark.com 212.203.79.55 somfykorea.linux.gabiauser.com shop.somfy.de shop.somfy.es shop.somfy.it easyshop.somfypro.fr tv.connexoon.de tvaktion.connexoon.de tv-at.connexoon.de *.addthis.com *.disqus.com disqus.com www.google.com webdev.abastra.com kartor.eniro.se http://kartor.eniro.se www.somfy-smart.de api.soundcloud.com w.soundcloud.com www.lespetitespierres.org https://giphy.com/upload https://hearthis.at/ https://soundcloud.com/ https://www.youtube.com/ https://www.lespetitespierres.org/ *.rlets.com https://giphy.com/ https://www.franceinter.fr/ *.zohopublic.com *.smartrecruiters.com https://subscriptions.smartrecruiters.com/ marketing.net.elogia.net www.facebook.com https://www.facebook.com https://www.youtube-nocookie.com/ www.123formbuilder.com https://c.imedia.cz/ player.ina.fr https://*.hotjar.com https://*.tfaforms.net *.tfaforms.net www.ausschreiben.de cdn.thinglink.me *.thinglink.com 6
script-src * 'unsafe-inline' 'unsafe-eval' file: data: blob: filesystem: 6
frame-ancestors accounts.shopbase.com:443 templates.shopbase.com:443 test-templates.shopbase.com:443 'self' 6
script-src * 'self' 'unsafe-inline' 'unsafe-eval' wistia.com youtube.com blob: 6
frame-ancestors 'self' *.nokia.com; report-uri /report-csp-violation 5
default-src * 'unsafe-eval' 'unsafe-inline' data:; frame-ancestors 'self' app.optimizely.com apps.facebook.com fonts.googleapis.com 5
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://script.hotjar.com/modules.cd1eea15fc08cdfc520a.js https://script.hotjar.com/modules.a6cfc71c5ac4549d913e.js https://snap.licdn.com/li.lms-analytics/ https://services.cognitoforms.com/scripts/ https://embedsocial.com/cdn/iframe.js https://embedsocial.com/embedscript/in.js https://view-awesome-table.com/ https://static.hotjar.com/c/ https://script.hotjar.com/modules.0734134ae79697970353.js https://googleads.g.doubleclick.net/ https://www.googleadservices.com/pagead/conversion_async.js https://cdn.jotfor.ms/js/ https://js.jotform.com/ https://js.jotform.com/vendor/ https://cdn.jotfor.ms/static/ https://cdnjs.cloudflare.com/ajax/libs/punycode/1.4.1/ https://form.jotform.com/jsform/ https://js.hs-analytics.net/analytics/1598004900000/ https://js.hs-analytics.net/analytics/ https://js.hs-banner.com/3788602.js https://js.hscollectedforms.net/collectedforms.js https://forms.hsforms.com/ https://js.hs-scripts.com/3788602.js https://js.hsforms.net/forms/v2.js https://euc-widget.freshworks.com https://app-static.turtl.co/embed/turtl.embed.v1.js https://s.ytimg.com https://www.youtube.com/iframe_api https://pi.pardot.com/ https://go.tnsglobal.com/ https://preferences.kantarworldpanel.com/ https://go.millwardbrown.com/ https://www2.kantar.com https://consent.cookiebot.com/ https://cdn.saberfeedback.com https://feedback.saberfeedback.com/ https://www.youtube.com https://ssl.google-analytics.com/ga.js https://ajax.googleapis.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://embedsocial.com/cdn/iframe-lightbox.min.css https://cdn.jotfor.ms/wizards/languageWizard/custom-dropdown/css/ https://cdn.jotfor.ms/css/styles/payment/ https://cdn.jotfor.ms/themes/CSS/ https://cdn.jotfor.ms/css/ https://cdn.jotfor.ms/css/styles/ https://cdn.jotfor.ms/static/ https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css https://euc-widget.freshworks.com https://app-static.turtl.co/embed/turtl.embed.v1.css https://feedback.saberfeedback.com/ https://cdn.saberfeedback.com https://tagmanager.google.com/ https://fast.fonts.net https://fonts.googleapis.com; connect-src *; img-src 'self' data: https://www.google.com/ https://www.google.co.uk/ https://www.google.co.uk/ads/ https://events.jotform.com/ https://events.jotform.com/jsform/200924737274357/ https://cdn.jotfor.ms/ https://assets.turtl.co/covers/ https://www.google.co.za/ads/ https://www.googletagmanager.com/ https://www.google.com/ads/ https://track.hubspot.com/ https://forms.hsforms.com/embed/v3/ https://forms.hubspot.com/outpost/formsnextembed/ https://s3-eu-central-1.amazonaws.com/euc-cdn.freshdesk.com/ *.doubleclick.net https://www.google-analytics.com *.gstatic.com https://maps.googleapis.com https://assets.turtl.co/covers/5ef0c513e144c46e0f06dcca.jpg; frame-src 'self' https://services.cognitoforms.com/f/ https://embedsocial.com/ https://view-awesome-table.com/ https://vars.hotjar.com/ https://www.kantarworldpanel.com https://form.jotform.com/ https://submit.jotformeu.com/ https://app-widgets.jotform.io https://www3.kantarmedia.com/ https://datawrapper.dwcdn.net https://widgets.jotform.io/ https://www.kantarmarketplace.com/ https://preferences.kantarworldpanel.com/ https://html5-player.libsyn.com/ https://mkt.kantar.com/ https://forms.hsforms.com/ https://go.pardot.com/ https://kantar.wd3.myworkdayjobs.com/ https://player.vimeo.com/ https://kantar.turtl.co/ https://www2.kantar.com/ https://staginglocal.kantarmarketplace.com https://go.kantarmarketplace.com/ https://www.youtube.com/iframe_api https://consentcdn.cookiebot.com/ https://go.millwardbrown.com/ https://www.google.com https://www.youtube.com https://apps.sitecore.net/; font-src 'self' data: https://www.kantar.com/-/media/Themes/Kantar/Global/KantarMain/fonts/ https://www.kantar.com/-/media/Themes/Kantar/Global/KantarMain/fonts/KantarBrown https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/ https://sites.kantarconsulting.com/toolbox/fonts/KantarBrownWeb-Regular.woff2 https://feedback.saberfeedback.com https://fonts.gstatic.com 5
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://optimize.google.com https://www.googleadservices.com https://www.google.com https://connect.facebook.net www.snapengage.com https://storage.googleapis.com/code.snapengage.com/js/ https://prod-nplayer.dacast.com/lib/theoplayer/ https://analytics.webgains.io/ https://analytics-wg.webgains.io/ https://track.webgains.com/ https://w-it.m-t.io/ https://www.mczbf.com/; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://optimize.google.com; img-src 'self' https: data:; media-src 'self' https://ftr.imgix.net; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://view.vzaar.com https://www.facebook.com https://*.fls.doubleclick.net https://optimize.google.com www.snapengage.com https://www.expresvpn-private-analytics.net; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://*.amazonaws.com https://www.google-analytics.com https://stats.g.doubleclick.net/j/collect https://www.facebook.com/tr/ https://www.snapengage.com https://dvqigh9b7wa32.cloudfront.net https://d330aiyvva2oww.cloudfront.net https://d1lu3pmaz2ilpx.cloudfront.net https://api.webgains.io/ https://track.webgains.com/ https://w-it.m-t.io/ https://www.mczbf.com; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests 5
report-uri https://www.homeaffairs.gov.au; frame-ancestors https://app.monsido.com https://*.immi.gov.au https://*.border.gov.au https://*.customs.gov.au https://*.abf.gov.au https://*.homeaffairs.gov.au https://*.harmony.gov.au https://*.nationalsecurity.gov.au https://*.idmatch.gov.au https://*.disasterassist.gov.au https://*.livingsafetogether.gov.au https://*.organisationalresilience.gov.au https://*.tisn.gov.au https://*.triplezero.gov.au https://*.cicentre.gov.au 5
frame-ancestors 'self' *.optus.com.au *.ippayments.com *.pegacloud.net *.gomo.com.au; 5
frame-ancestors https://*.flexera.com https://*.flexerasoftware.com https://*.revenera.com; 5
default-src 'self'; script-src 'self' 'unsafe-inline' 5
default-src *; script-src https://cdnjs.cloudflare.com https://autosug.ebay.com https://www.google-analytics.com https://js-agent.newrelic.com https://bam-cell.nr-data.net https://bam.nr-data.net https://www.google.com https://s.flocdn.com https://*.s1search.co https://swurl.com 'unsafe-inline' 'unsafe-eval' 'self'; style-src https://cdnjs.cloudflare.com 'unsafe-inline' 'self'; connect-src https://api.picclick.com https://www.google-analytics.com https://bam-cell.nr-data.net https://bam.nr-data.net https://*.s1search.co https://soflopxl.com https://swurl.com 'self'; img-src *; font-src https://cdnjs.cloudflare.com data: 'self'; 5
block-all-mixed-content; upgrade-insecure-requests; 5
frame-ancestors *.ivanti.com https://dash.cloudflare.com 5
base-uri 'self' 5
frame-ancestors 'self' https://adventhealth.com https://*.adventhealth.com 5
; 5
frame-ancestors 'self' *.psplugin.com 5
default-src https: data: 'self' 'unsafe-inline' 'unsafe-eval'; 5
default-src *; font-src * data:;img-src * data:; script-src * data: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; frame-src *; media-src * blob:; 5
upgrade-insecure-requests; frame-ancestors *.cisco.com *.jasper.com *.ciscospark.com *.ciscolive.com  http://cisco.lookbookhq.com https://cisco.lookbookhq.com testcisco.marketing.adobe.com cisco.marketing.adobe.com ciscosales.my.salesforce.com test.salesforce.com zedo.com hindustantimes.com economictimes.indiatimes.com *.webex.com *.cdw.com *.cdwg.com *.cdw.ca *.meraki-go.com http://ciscopartners.lookbookhq.com https://ciscopartners.lookbookhq.com ciscolearningsystem.com ciscocustomer.lookbookhq.com cisco.lookbookhq.com ccsmedia.com *.itquotes.ie dteonline.com ampito-cisco.com arkphire.com *.insight.com *.ccsmedia.com *.ebuyer.com *.lambda-tek.com *.storm-technologies.com *.vohkus.com *.bechtle.com *.rainfocus.com *.broadbandbuyer.com *.hardware.com shop.redpontem.com; 5
default-src https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'self' 'unsafe-inline' https:; img-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: mediastream:; connect-src 'self' https: data: mediastream: blob:; font-src 'self' 'unsafe-inline' https: data:; media-src 'self' 'unsafe-inline' https: data: mediastream: blob:; child-src *; form-action 'self' 'unsafe-inline' https:; frame-ancestors *; object-src *; frame-src *; worker-src *; manifest-src *; base-uri *; upgrade-insecure-requests 5
default-src https: 'unsafe-eval' 'unsafe-inline' 5
frame-ancestors 'self'  teams.microsoft.com *.teams.microsoft.com 5
frame-ancestors *.adikteev.com 'self' *.facebook.com *.nikonelearning.com; 5
img-src * 5
default-src 'self' *.cscglobal.com *.swiftypecdn.com  *.swiftype.com *.doubleclick.net *.google-analytics.com geoip-js.com *.maxmind.com *.typekit.net api.company-target.com sample-api-v2.crazyegg.com api.hubapi.com; script-src 'self' ws.zoominfo.com js.hs-banner.com js.hsadspixel.net *.swiftypecdn.com  *.swiftype.com *.wufoo.com tag.demandbase.com script.crazyegg.com s3.amazonaws.com dnn506yrbagrg.cloudfront.net gateway.zscalertwo.net sjs.bizographics.com px.ads.linkedin.com *.google-analytics.com *.googletagmanager.com *.maxmind.com 'unsafe-inline' 'unsafe-eval' *.typekit.net forms.hsforms.com api.hubapi.com js.hs-analytics.net js.hs-scripts.com js.hsforms.net *.hubspot.com *.googleadservices.com tagmanager.google.com *.zmags.com snap.licdn.com; style-src 'self' ocp.cscglobal.com ocu.cscglobal.com gateway.zscalertwo.net *.swiftypecdn.com fast.fonts.net fonts.googleapis.com 'unsafe-inline' tagmanager.google.com ssl.gstatic.com *.gstatic.com; img-src 'self' p.adsymptotic.com *.swiftype.com *.cscglobal.com  *.googletagmanager.com googleapis.com match.prod.bidr.io segments.company-target.com cdn2.hubspot.net *.google-analytics.com *.crazyegg.com *.google.com track.hubspot.com data: *.doubleclick.net ssl.gstatic.com *.gstatic.com *.zmags.com px.ads.linkedin.com; font-src 'self' 'unsafe-inline' ocp.cscglobal.com ocu.cscglobal.com data: fonts.gstatic.com *.typekit.net; frame-src 'self' *.youtube.com *.wufoo.com forms.hsforms.com *.zmags.com drive.google.com 5
frame-ancestors 'self' *.vpro.nl:* *.human.nl *.vprobroadcast.com *.netinnederland.nl *.2doc.nl *.vprogids.nl; 5
base-uri 'self'; frame-src https:; object-src 'none'; worker-src 'self'; img-src 'self' data: http: https:; upgrade-insecure-requests; default-src 'self' https://*.googlesyndication.com; connect-src 'self' https://*.google-analytics.com/ https://*.facebook.com https://*.ioam.de https://*.taboola.com https://translate.googleapis.com https://*.doubleclick.net https://eum-eu-west-1.instana.io wss://mpsnare.iesnare.com https://logx.optimizely.com/v1/events https://www.eharmony.com/lane/ https://s7.addthis.com/l10n/ https://eharmony-app.quantummetric.com/ https://yoast.com/feed/widget/ https://m.addthis.com https://*.googlesyndication.com https://connect.facebook.net https://*.usercentrics.eu https://api.personio.de/recruiting/applicant ; font-src data: 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://assets.eharmony.com https://assets.eharmony.com.au https://assets.eharmony.co.uk https://assets.eharmony.ca https://assets.squarespace.com/universal/fonts/ https://static.squarespace.com/universal/fonts/ ; script-src https: 'report-sample' 'unsafe-inline' 'unsafe-eval' data: 'self' https://*.custhelp.com https://*.ioam.de; style-src 'self' 'unsafe-inline' https://www.parship.com https://*.custhelp.com https://fonts.googleapis.com https://partnerboerse.parship.de https://translate.googleapis.com https://assets.eharmony.com https://assets.eharmony.com.au https://assets.eharmony.co.uk https://assets.eharmony.ca https://s.po.st/static/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://static1.squarespace.com/static/sitecss/ ; media-src 'self' data: https://mpsnare.iesnare.com https://assets.eharmony.com/files/us/images/careers/ https://www.googleapis.com/youtube/; prefetch-src 'self' https://*.googlesyndication.com/safeframe/; frame-ancestors 'self'; report-uri /ls/ 5
default-src * 'unsafe-inline' 'unsafe-eval' data: blob: mediastream: filesystem: *.rakuten.com *.linksynergy.com *.nxtck.com *.xg4ken.com;frame-ancestors 'self' 5
frame-ancestors https://*.fw1.biz https://*.freewebstore.org https://*.freewebstore.com https://*.ridge.pro http://127.0.0.1:55779 http://localhost:55779; 5
default-src 'self' https://www.bmbf.de https://*.bmbfcluster.de https://cdn1.readspeaker.com https://app-eu.readspeaker.com https://media-eu.readspeaker.com https://rstts-eu.readspeaker.com https://f1-eu.readspeaker.com https://monitoring.echobot.de https://event.beyondwork2020.com https://walls.io https://streaming.talk42.de 'unsafe-inline' blob:; img-src 'self' https://www.bmbf.de https://*.bmbfcluster.de https://*.tile.openstreetmap.org/ https://api.mapbox.com/ 'unsafe-inline' data:;font-src 'self' data:; 5
default-src 'self'; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 5
default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data: blob: https:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 5
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *; 5
frame-src * 5
frame-ancestors 'self' *.vergic.com 5
script-src 'self' 'unsafe-inline' 'unsafe-eval' api.salemove.com api.salemove.eu ui.customsearch.ai analytics.twitter.com assets.adobedtm.com connect.facebook.net static.ads-twitter.com www.googleadservices.com maps.googleapis.com cdn.tt.omtrdc.net absa.tt.omtrdc.net www.google.com www.gstatic.com analytics.analytics-egain.com abdemo.egain.cloud absablog-dev.disqus.com absablog-sit.disqus.com absablog-uat.disqus.com absablog-prod.disqus.com ajax.googleapis.com platform.twitter.com platform.linkedin.com assets.pinterest.com c.disquscdn.com disqus.com secure.rating-widget.com log.pinterest.com rating-widget.com s.ytimg.com www.youtube.com youtube.com esb.ext.api.uat.absa.co.za client.crisp.chat googleads.g.doubleclick.net www.google.co.za www.google.pl dsp-aud.eskimi.com dsp.eskimi.com dsp-pix.eskimi.com dsp-media.eskimi.com cdn.syndication.twimg.com cse.google.com api-iam.intercom.io api.salemove.eu app.salemove.eu asset-proxy.salemove.eu assets.salemove.eu chunderw-gll.twilio.com chunderw-vpc-gll.twilio.com client-logger.salemove.eu eventgw.twilio.com fonts.googleapis.com fonts.gstatic.com io.salemove.eu js.intercomcdn.com kluster.ws.salemove.eu libs.salemove.com maps.googleapis.com maps.gstatic.com media.twiliocdn.com nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io s3-eu-west-1.amazonaws.com s3.amazonaws.com uplot.salemove.eu widget.intercom.io googletagmanager.com www.googletagmanager.com js-agent.newrelic.com bam.nr-data.net d.la1-c2-frf.salesforceliveagent.com d.la1-c2cs-cdg.salesforceliveagent.com d.la1-c1cs-frf.salesforceliveagent.com c.la1-c2-par.salesforceliveagent.com c.la1-c2cs-frf.salesforceliveagent.com d.la1-c2cs-frf.salesforceliveagent.com d.la1-c2-par.salesforceliveagent.com d.la1-c1cs-cdg.salesforceliveagent.com c.la1-c2cs-cdg.salesforceliveagent.com c.la1-c1cs-cdg.salesforceliveagent.com c.la2-c2-cdg.salesforceliveagent.com d.la2-c2-cdg.salesforceliveagent.com d.la2-c1cs-cdg.salesforceliveagent.com c.la2-c1cs-cdg.salesforceliveagent.com fls.doubleclick.net tt.mbww.com pixel.mathtag.com snap.licdn.com 5
frame-ancestors 'self' http://*.elsevier.es/ 5
script-src 'self'; object-src 'self' 5
frame-ancestors 'self' *.egovcdn.com 5
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*; object-src 'self' 5
frame-ancestors https://*.gov.cn  http://*.gov.cn http://zwfw.cq.gov.cn http://wmcs.devdemo.trs.net.cn 5
base-uri 'self'; img-src * data: 'unsafe-inline'; default-src data: * 'unsafe-inline'; frame-ancestors 'self'; manifest-src 'self'; media-src 'self' blob: *.readspeaker.com *.speechstream.net; script-src * 'unsafe-inline' 'unsafe-eval'; object-src 'self' 5
frame-ancestors 'self' *.ffxblue.com.au *.ffx.io *.smh.com.au *.theage.com.au *.brisbanetimes.com.au *.watoday.com.au *.cdn.ampproject.org; upgrade-insecure-requests 4
frame-ancestors 'self' hhs.gov *.hhs.gov 4
script-src 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com *.unicef.org *.sharethis.com rules.quantcount.com connect.facebook.net secure.quantserve.com www.google-analytics.com www.googletagmanager.com cdn.poll-maker.com embeds.tagboard.com maps.googleapis.com e.infogram.com *.hscampaigns.com *.getchute.com ssl.mousestats.com tagmanager.google.com js-agent.newrelic.com bam.nr-data.net js-agent.newrelic.com/* www.youtube.com s.ytimg.com *.instagram.com platform.twitter.com cdn.syndication.twimg.com syndication.twitter.com cdn.nativemsg.com hm.baidu.com optimize.google.com siteimproveanalytics.com downloads.mailchimp.com mc.us2.list-manage.com sjs.bizographics.com unicef.us2.list-manage.com s3.amazonaws.com www.googleadservices.com *.doubleclick.net cdn.curator.io eisi-ext.azurewebsites.net *.aparat.com *.tableau.com *.wufoo.com s.pinimg.com ct.pinterest.com analytics.tiktok.com; object-src 'self' *.youtube.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.sharethis.com cdn.poll-maker.com stories.getchute.com cdn-images.mailchimp.com downloads.mailchimp.com l.sharethis.com platform.twitter.com optimize.google.com *.unicef.org cdn.curator.io *.twimg.com; img-src 'self' data: *.unicef.org www.google-analytics.com ssl.gstatic.com sb.scorecardresearch.com  *.sharethis.com www.facebook.com pixel.quantserve.com stats.g.doubleclick.net www.gstatic.com cdn.poll-maker.com csi.gstatic.com maps.gstatic.com maps.googleapis.com www.google.com *.cdninstagram.com pixel.getchute.com media.chute.io static.getchute.com avatars.io syndication.twitter.com *.twimg.com platform.twitter.com dynamite-images.appspot.com hm.baidu.com www.googletagmanager.com unicef-images.appspot.com 88988.global.siteimproveanalytics.io cdn-images.mailchimp.com gallery.mailchimp.com downloads.mailchimp.com *.tableau.com; media-src 'self' *.cdninstagram.com video.twimg.com; frame-src 'self' *.facebook.com www.google.com *.twitter.com e.infogram.com infogram-download-us2.s3.eu-west-1.amazonaws.com infogram-download-eu.s3.eu-west-1.amazonaws.com *.sharethis.com *.hscampaigns.com embeds.tagboard.com www.youtube.com infogram.com connect.facebook.net *.unicef.org api.getchute.com static.getchute.com giphy.com *.wufoo.com www.instagram.com cdn.nativemsg.com twitter.com *.ustream.tv *.youku.com c.sharethis.mgr.consensu.org optimize.google.com embed.ted.com *.doubleclick.net player.vimeo.com forms.office.com *.aparat.com *.tableau.com oms.gameloft.com *.soundcloud.com app.powerbi.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com data: maxcdn.bootstrapcdn.com stories.getchute.com *.unicef.org cdn.curator.io; connect-src 'self' *.sharethis.com www.quiz-maker.com ssl.mousestats.com www.google-analytics.com s3.amazonaws.com getchute.com *.getchute.com c.sharethis.mgr.consensu.org stats.g.doubleclick.net unicefhq.cp.bsd.net script.google.com script.googleusercontent.com *.unicef.org api.curator.io bam.nr-data.net rpapigatewaytest.azurewebsites.net i2e.azurewebsites.net; report-uri /report-csp-violation 4
frame-ancestors https://*.ionos.com https://ionos.com; 4
frame-ancestors 'self' *.kaskus.co.id *.kaskus.id 4
block-all-mixed-content;frame-ancestors *.mail.com 4
frame-ancestors 'self' https://*.pandasecurity.com http://*.pandasecurity.com; 4
default-src 'self';object-src 'self' *.cdn.datatables.net cdn.datatables.net;connect-src 'self' *.mt.lv maps.googleapis.com fonts.googleapis.com *.doubleclick.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: unpkg.com i.mt.lv *.google.com gstatic.com code.jquery.com *.gstatic.com www.google-analytics.com googleapis.com *.googleapis.com *.mikrotik.com mikrotik.com;style-src 'self' 'unsafe-inline' i.mt.lv fonts.googleapis.com unpkg.com *.mikrotik.com mikrotik.com code.jquery.com use.typekit.net www.mikrotik.com;img-src 'self' data: i.mt.lv api.tiles.mapbox.com *.tile.openstreetmap.org unpkg.com *.arcgisonline.com stats.g.doubleclick.net www.google-analytics.com mikrotik.com www.mikrotik.com forum.mikrotik.com 1.aerial.maps.cit.api.here.com 2.aerial.maps.cit.api.here.com 3.aerial.maps.cit.api.here.com 4.aerial.maps.cit.api.here.com gstatic.com http://services.ga.gov.au *.gstatic.com *.googleapis.com *.arcgisonline.com *.google.com *.google.lv *.routerboard.com;frame-src 'self' youtu.be youtube.com www.youtube.com www.google.com;font-src 'self' data: mikrotik.com fonts.gstatic.com www.mikrotik.com i.mt.lv;frame-ancestors 'self'; 4
default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src https: blob:; object-src https:; child-src https: data: blob:; form-action https:; block-all-mixed-content; 4
frame-ancestors 'self' app.contentful.com 4
frame-src *; 4
block-all-mixed-content; default-src data: https: wss: blob: 'unsafe-inline'  'unsafe-eval'; 4
upgrade-insecure-requests ; 4
frame-ancestors 'self' https://dbwas.service.deutschebahn.com 4
upgrade-insecure-requests;connect-src * 4
font-src 'self' https://fonts.gstatic.com https://ka-p.fontawesome.com https://themes.googleusercontent.com https://static.juicer.io data: https://js.intercomcdn.com https://maxcdn.bootstrapcdn.com https://thriv.sportsengine.com https://cdnjs.cloudflare.com https://static.formstack.com; img-src 'self' https://www.sportsengine.com https://se-portal-production.s3.amazonaws.com *.facebook.com *.sestage.us *.google.com https://se-portal-staging.s3.amazonaws.com *.youtube.com https://s0.2mdn.net *.googleusercontent.com *.googlesyndication.com *.visualwebsiteoptimizer.com https://sb.scorecardresearch.com https://www.google-analytics.com *.g.doubleclick.net https://audible.sp1.convertro.com https://fast.wistia.com https://embedwistia-a.akamaihd.net https://s3.amazonaws.com *.adsafeprotected.com *.mparticle.com https://assets.ngin.com https://embed-fastly.wistia.com https://img1.niftyimages.com data: https://js.intercomcdn.com https://static.intercomassets.com https://pixel.quantserve.com https://bat.bing.com *.googletagmanager.com https://golfmds.s3.amazonaws.com/ https://sportngin-lddxb.formstack.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net *.visualwebsiteoptimizer.com *.g.doubleclick.net https://sb.scorecardresearch.com *.googleadservices.com *.googletagmanager.com *.mparticle.com *.user.sportngin.com https://se-api.sportngin.com.dev https://www.google-analytics.com https://adservice.google.com *.googlesyndication.com https://cdn.ampproject.org https://www.googletagservices.com https://fast.wistia.com https://www.olympicchannel.com https://assets.juicer.io https://communityforum.sportngin.com https://assets.ngin.com https://www.google.com https://js-agent.newrelic.com https://bam-cell.nr-data.net https://www.burst.com https://secure.quantserve.com https://pixel.quantserve.com https://rules.quantcount.com https://bat.bing.com https://widget.intercom.io https://js.intercomcdn.com https://js.braintreegateway.com https://s3.amazonaws.com https://cdnjs.cloudflare.com https://thriv.sportsengine.com https://sportngin-lddxb.formstack.com https://static.formstack.com https://ajax.googleapis.com blob: https://kit.fontawesome.com; style-src 'self' 'unsafe-inline' https://assets.ngin.com https://fonts.googleapis.com https://assets.juicer.io https://www.burst.com https://maxcdn.bootstrapcdn.com https://thriv.sportsengine.com https://s3.amazonaws.com https://cdnjs.cloudflare.com https://thrivsports.s3.us-east-1.amazonaws.com https://static.formstack.com cloud.typography.com fonts.googleapis.com; frame-ancestors 'self'; report-uri https://www.sportsengine.com/report-uri/enforce 4
frame-ancestors 'self' https://tektronix.lookbookhq.com https://buzz.tek.com 4
default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm https://api.mapbox.com https://*.tiles.mapbox.com;block-all-mixed-content;upgrade-insecure-requests; 4
referrer no-referrer 4
upgrade-insecure-requests; frame-ancestors *.lumen.com *.lumentech.com http://static.virtualroi.com/; 4
default-src 'self'; connect-src 'self' www.google-analytics.com https://www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; font-src 'self' http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; frame-src https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; img-src 'self' *.pbwstatic.com www.google-analytics.com https://www.google-analytics.com data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; media-src 'none'; object-src 'none'; script-src 'self' www.google-analytics.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval' http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; style-src 'self' 'unsafe-inline' 4
frame-ancestors 'self' *.freshworks.com *.freshsuccess.com *.freshsuccess.io views.paperflite.com app.paperflite.com web.paperflite.com canvas.paperflite.com 4
frame-ancestors 4
img-src * data:; default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; 4
default-src * data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' app.optimizely.com; 4
default-src http://ip-api.com/ 'self' 'unsafe-inline' 'unsafe-eval' https: data: 4
<options and value> 4
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; report-uri /json/csp-violation 4
Content-Security-Policy-Report-Only 4
connect-src 'self' *.algolia.io *.algolia.net *.algolianet.com *.facebook.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.sentry.io *.sumo.com code.jquery.com sentry.io stats.g.doubleclick.net sumo.com; default-src 'self'; font-src 'self' *.facebook.com *.googleapis.com *.gstatic.com assets.targetbarn.com cdn-secure.luckygunner.com d1w4q6ldc8l0qo.cloudfront.net d3s1gm5djwyp3q.cloudfront.net data: dp8k5pf9le6li.cloudfront.net static-cdn.ammunitiontogo.com static-secure.cheapammo.com static1-bulkammocom.netdna-ssl.com themes.googleusercontent.com wrss-2c7e.kxcdn.com; frame-src 'self' *.facebook.com *.google.com *.googleapis.com *.libsyn.com *.twitter.com sumo.com twitter.com; img-src 'self' *.bbb.org *.facebook.com *.google-analytics.com *.googleapis.com *.gstatic.com *.sumo.com about: assets.targetbarn.com cdn-secure.luckygunner.com d1w4q6ldc8l0qo.cloudfront.net d3s1gm5djwyp3q.cloudfront.net data: dp8k5pf9le6li.cloudfront.net extended-validation-ssl.thawte.com https://seal.verisign.com pubads.g.doubleclick.net seal.thawte.com static-cdn.ammunitiontogo.com static-secure.cheapammo.com static1-bulkammocom.netdna-ssl.com stats.g.doubleclick.net sumo.b-cdn.net sumo.com syndication.twitter.com twitter.com verify.authorize.net wrss-2c7e.kxcdn.com; manifest-src ammo.com assets.targetbarn.com cdn-secure.luckygunner.com d1w4q6ldc8l0qo.cloudfront.net d3s1gm5djwyp3q.cloudfront.net dp8k5pf9le6li.cloudfront.net static-cdn.ammunitiontogo.com static-secure.cheapammo.com static1-bulkammocom.netdna-ssl.com wrss-2c7e.kxcdn.com www.ammoforsale.com www.ammoman.com www.ammunitiontogo.com www.bulkammo.com www.cheapammo.com www.luckygunner.com www.targetbarn.com www.wideners.com; media-src 'self' *.facebook.com; object-src 'self' *.facebook.com www.luckyreferrals.com; report-uri https://sentry.io/api/1201369/security/?sentry_key=66651cc2476b475987e75acc58880acc; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.algolia.io *.bbb.org *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.sumo.com *.sumome.com *.twitter.com api.bufferapp.com assets.targetbarn.com blob: browser.sentry-cdn.com buttons.reddit.com cdn-secure.luckygunner.com cdn.ravenjs.com code.jquery.com d1w4q6ldc8l0qo.cloudfront.net d3s1gm5djwyp3q.cloudfront.net dp8k5pf9le6li.cloudfront.net reddit.com seal.thawte.com seal.verisign.com static-cdn.ammunitiontogo.com static-secure.cheapammo.com static1-bulkammocom.netdna-ssl.com stats.g.doubleclick.net sumo.b-cdn.net sumome-140a.kxcdn.com verify.authorize.net widgets.pinterest.com wrss-2c7e.kxcdn.com www.linkedin.com www.luckyreferrals.com www.reddit.com; style-src 'self' 'unsafe-inline' *.bbb.org *.facebook.com *.google.com *.googleapis.com *.gstatic.com *.twitter.com assets.targetbarn.com cdn-secure.luckygunner.com d1w4q6ldc8l0qo.cloudfront.net d3s1gm5djwyp3q.cloudfront.net dp8k5pf9le6li.cloudfront.net sload.sumo.com static-cdn.ammunitiontogo.com static-secure.cheapammo.com static1-bulkammocom.netdna-ssl.com sumo.b-cdn.net wrss-2c7e.kxcdn.com 4
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval' 4
frame-src 'self' https://www.google.com/ https://cartera-stage.freetls.fastly.net/ https://cartera-cdn.freetls.fastly.net/ https://client-services.rclon.com/ https://players.brightcove.net/ https://fast.wistia.com/ https://static-client-services.rclon.com/ https://stage.savingsace.com https://www.savingsace.com https://www.surveymonkey.com https://www.youtube.com; 4
default-src http: data: 'unsafe-inline' 'unsafe-eval' 4
frame-ancestors 'self' https://www.bosoy-online.com 4
default-src https: 'unsafe-inline' 'unsafe-eval'; 4
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.verbraucherzentrale.de/ https://www.verbraucherzentrale.nrw/core/modules/ckeditor/ https://lebensmittel-reise.de/foodmap/ https://www.googletagmanager.com https://gemeinschaftsredaktion.de https://www.googleadservices.com https://googleads.g.doubleclick.net https://api.kns.codiac.de https://cdn.podigee.com https://cdnjs.cloudflare.com https://code.highcharts.com https://cdn.podlove.org https://verbraucherzentrale.bryter.io https://prod-bryter-assets.s3.eu-central-1.amazonaws.com https://static.newsletter2go.com/ https://cdn.rawgit.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://app.bryter.io https://heizsystemvergleich.vz-nrw.de https://maps.googleapis.com https://www.helpmundo.de https://www.helpdirect.org https://rdr.kns.codiac.de https://empathy-portal.de/; script-src-elem 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' 'unsafe-eval' *; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://prod-bryter-assets.s3.eu-central-1.amazonaws.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.podlove.org https://rdr.kns.codiac.de https://www.verbraucherzentrale.nrw; frame-ancestors 'self' vznrw-piwik.init-ag.de; 4
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.map.baidu.com *.bdimg.com bdimg.share.baidu.com res.wx.qq.com pucha.kaipuyun.cn dcs.conac.cn webservice.coolwei.com www.gov.cn; object-src 'self' 4
upgrade-insecure-requests; base-uri 'self'; 4
default-src * data: 'unsafe-inline' 'unsafe-eval' blob: 4
default-src https: wss: 'unsafe-eval' 'unsafe-inline'; object-src 'self' blob:; img-src 'self' data: https:; font-src 'self' data: https:; frame-ancestors 'self' https://*.hubspot.com https://info.atlascopco.us https://info.atlascopcoupdates.com 4
default-src *; img-src * data: blob:; media-src * data: blob:; script-src 'unsafe-inline' 'unsafe-eval' * data: blob:; worker-src 'unsafe-inline' 'unsafe-eval' * data: blob:; connect-src *; font-src * data: blob:; frame-src *; object-src * data: blob:; style-src 'unsafe-inline' * data: blob: 4
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval' wss://*.iadvize.com 4
default-src 'self' *.infinity-tracking.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com *.google.com *.facebook.net *.aspnetcdn.com *.youtube.com *.twitter.com *.ytimg.com *.twimg.com *.linkedin.com *.stumbleupon.com *.azureedge.net *.marketo.net *.eloqua.com *.en25.com *.ampproject.org *.cloudflare.com *.bootstrapcdn.com *.trustpilot.com *.jsdelivr.net *.unpkg.com *.googletagmanager.com *.hotjar.com *.jquery.com *.doubleclick.net *.kldiscovery.com *.googleusercontent.com *.google-analytics.com *.googleadservices.com *.krollontrack.com *.bootstrapcdn.com *.momentjs.com *.typeform.com *.infinity-tracking.net *.usemessages.com *.hsleadflows.net *.hubspot.com *.hsforms.net *.hsforms.com *.hubspot.com *.hubapi.com *.hscollectedforms.net *.hsforms.net *.hs-banner.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hsforms.com *.unpkg.com unpkg.com *.google.com *.yimg.jp *.yahoo.co.jp; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.telerik.com *.google.com *.azureedge.net *.twitter.com *.twimg.com *.typekit.net *.trustpilot.com *.bootstrapcdn.com *.jquery.com *.bootstrapcdn.com; font-src 'self' *.gstatic.com *.telerik.com *.bootstrapcdn.com data: *.krollontrack.com *.typekit.net *.bootstrapcdn.com; img-src 'self' data: blob: *.azureedge.net *.cleverbridge.com *.delicious.com *.doubleclick.net *.eloqua.com *.facebook.com *.google.com *.googleapis.com *.google-analytics.com *.googleusercontent.com *.google.co.uk *.google.pl *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.com *.hubspot.com *.hubspotusercontent20.net *.ibas.com *.kldiscovery.com *.krollontrack.com *.linkedin.com *.ontrack.com *.redditstatic.com *.sitefinity.com *.static.licdn.com *.tumblr.com *.twimg.com *.twitter.com *.windows.net *.yahoo.co.jp; media-src 'self' data: blob: *.krollontrack.com *.youtu.be *.youtube.com *.blob.core.windows.net *.kldiscovery.com *.googleusercontent.com; frame-src 'self' *.google.com *.youtu.be *.youtube.com *.hubspot.com *.taleo.net *.trustpilot.com *.hubapi.com *.hotjar.com *.doubleclick.net *.krollontrack.com *.hsforms.com *.typeform.com *.avrotros.nl; child-src 'self' *.twitter.com *.twitter.com *.youtube.com *.youtu.be *.vimeo.com *.soundcloud.com *.google.com *.google.com *.facebook.com *.facebook.com *.stumbleupon.com *.trustpilot.com *.doubleclick.net *.hubspot.com *.infinity-tracking.net *.hsforms.com blob:; connect-src 'self' *.google.com *.sitefinity.com *.mktoresp.com *.trustpilot.com *.googleusercontent.com *.hotjar.com *.infinity-tracking.net google-analytics.com *.google-analytics.com *.unpkg.com unpkg.com *.hubspot.com *.hsforms.com *.hubspot.com *.hubapi.com *.cleverbridge.com *.ampproject.org *.doubleclick.net; 4
frame-ancestors 'self' https://*.ariba.com https://*.micron.com https://*.iu.edu https://*.sciquest.com 4
frame-ancestors 'self' https://*.build.com/ https://*.build-catalogs.com/ https://bcom.my.salesforce.com/ https://*.visual.force.com/ https://omconsole.com/ https://*.omconsole.com/ 4
default-src 'self' wss://www.reasedoper.pw wss://www.nathetsof.com https://pagead2.googlesyndication.com/ https://mc.yandex.ru/ http://rb.revolvermaps.com/;style-src 'unsafe-inline' *;child-src * 'self' blob: ;img-src * data:;media-src *;font-src *;script-src 'self' http://sdnats.com http://zstat.org/ http://www.sparnove.com/ https://www.sparnove.com/ http://sparnove.com/ https://sparnove.com/ http://sparnove.com https://sparnove.com http://www.sparnove.com https://www.sparnove.com http://igropoisk.com http://www.igropoisk.com http://rigaletto.info/ http://listat.org https://listat.org https://static.reasedoper.pw https://nathetsof.com https://www.nathetsof.com http://nathetsof.com http://www.nathetsof.com http://static.reasedoper.pw https://dl.metabar.ru/ http://azbns.com/ http://cdn.mobidea.com/ https://cdn.mobidea.com/ http://mytomatosoup.com/ http://*.s1block.com/ https://*.exoclick.com/ http://*.exoclick.com/ http://*.criteo.com/ http://webgringo.ru/ http://dancepoisk.ru/ http://*.google.com.ua https://*.google.com.ua https://*.vim100.ru http://*.vim100.ru https://vim100.ru http://vim100.ru http://*.kavanga.ru https://*.kavanga.ru http://dreamcode.pw https://dreamcode.pw https://*.advertur.ru *.advertur.ru http://cdn-rtb.sape.ru/ http://*.sape.ru/ http://wslocker.ru/ http://www.photoshop.in.ua 'self' 'unsafe-inline' 'unsafe-eval' http://code.jquery.com https://oss.maxcdn.com yandex.st *.yandex.st https://*.google-analytics.com http://*.google-analytics.com acint.net www.acint.net http://meelba.com http://*.meelba.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.uptolike.com https://*.uptolike.com *.leadada.com http://*.yandex.ru http://yandex.ru  https://yandex.ru https://*.yandex.ru http://*.doubleclick.net https://*.doubleclick.net cepereh.ru promoskiki.ru brandomatic.ru http://info.datacadet.com https://info.datacadet.com http://*.metabar.ru https://*.youtube.com http://*.youtube.com https://*.google.com http://*.google.com http://*.yandex.net https://*.yandex.net http://*.dumedia.ru http://userapi.com https://*.twitter.com http://*.twitter.com https://yastatic.net http://yastatic.net http://*.ya.ru http://*.fbcdn.net http://*.facebook.net https://*.facebook.net http://ad.oyy.ru http://pr-cy.ru http://*.rotaban.ru http://*.addthis.com http://*.mail.ru https://*.mail.ru http://*.adriver.ru https://*.googleapis.com http://*.googleapis.com http://*.reformal.ru https://vk.com http://*.vk.com http://vk.com http://*.vk.com http://estat-translator.com http://*.openstat.net http://openstat.net http://*.hit.ua http://api.cpatext.ru http://disgusting.ru http://counter.rambler.ru http://allskidkimos.ru http://*.acint.net http://*.beeline.ru http://*.smi2.ru https://*.alexa.com http://js-agent.newrelic.com http://*.odnoklassniki.ru http://*.directadvert.ru http://vkontakte.ru http://meteoprog.ua http://*.meteoprog.ua http://*.ok.ru https://*.ok.ru http://api.recaptcha.net http://ulogin.ru http://*.ukr.net http://*.semrash.com http://*.nr-data.net http://*.mgts.ru http://commontools.net http://*.wordpress.com http://informer.name http://*.bigmir.net https://*.bigmir.net http://www.samnews.ru http://adv.rb-edu.ru http://nastart.com.ua http://*.betweendigital.com http://*.google.ru http://*.cloudfront.net http://api.pozvonim.com http://*.24webclock.com https://*.zemanta.com http://disqus.com http://*.gismeteo.ru http://*.spylog.ru http://*.sharethis.com http://*.disqus.com http://*.c8.net.ua http://www.semrush.com http://loginza.ru http://*.redtram.com https://*.facebook.com http://*.facebook.com http://reformal.ru http://mreporter.ru http://n.lcads.ru http://*.leadia.ru http://www.vesti.ru http://*.begun.ru http://google.com.ua https://google.com.ua http://gamebomb.ru https://*.skype.com http://*.contextbar.ru http://*.googleadservices.com https://*.googleadservices.com http://*.lcads.ru http://*.googlevideo.com https://*.googlevideo.com http://*.gstatic.com https://*.gstatic.com https://*.ytimg.com http://*.ytimg.com http://*.yadro.ru https://*.yadro.ru; connect-src 'self' wss://sparnove.com https://api.push.world/ https://api.push.world/ https://static.reasedoper.pw/ wss://www.nathetsof.com wss://nathetsof.com wss://www.reasedoper.pw/ http://meelba.com/ http://stat.qload.ru http://uxm.ru https://mc.yandex.ru/ https://pagead2.googlesyndication.com 4
default-src * data: 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.jimdo.com jimdo.com; 4
frame-ancestors 'self' *.pedidosya.com *.pedidosya.cl *.pedidosya.com.ar *.pedidosya.com.bo *.pedidosya.com.pa *.pedidosya.com.py *.pedidosya.com.uy *.pedidosya.com.ve 4
frame-ancestors 'self'  *.interactivebrokers.com  *.interactivebrokers.com.hk  *.interactivebrokers.ch  *.interactivebrokers.co.uk  *.interactivebrokers.com.au  *.interactivebrokers.co.jp  *.interactivebrokers.co.in  *.ibkram.com  *.interactiveadvisors.com  *.ibkr.com  *.ibkr.com.cn  *.clientam.com  *.clientam.ch  *.clientam.com.hk  *.traderstation-international.com; 4
img-src *; 4
frame-ancestors 'self' *.casinomodule.com *.playngonetwork.com; 4
default-src 'self' 'unsafe-inline';script-src 'self' 'unsafe-inline' *.ametek.com *.ametekweb.com *.baidu.com *.boltdns.net *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightinfo.com *.cloudflare.com *.facebook.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hsforms.com *.hsforms.net *.hs-analytics.net *.hs-scripts.com *.usemessages.com *.hsadspixel.net *.hubspot.com *.jquery.com *.list-manage.com *.mailchimp.com *.maxcdn.com *.pardot.com *.pingdom.net *.sharethis.com *.site24x7rum.com *.spectro.com *.thomasnet.com *.twimg.com *.twitter.com *.vimeo.com *.webtraxs.com *.youku.com *.youtube.com *.zencdn.net *.zopim.com *.vresp.com *.zdassets.com *.marketingautomation.services *.leadforensics.com *.constantcontact.com *.icontact.com *.linkedin.com *.hootsuite.com *.3dpublisher.net *.amazonaws.com https://js.hscta.net https://js.hs-banner.com https://js.hsleadflows.net *.force.com https://analytics-eu.clickdimensions.com *.clickdimensions.com *.zoominfo.com https://snap.licdn.com *.salesforceliveagent.com https://bat.bing.com *.salesforce.com *.salesforceliveagent.com *.salesforce.com *.visualforce.com *.lightning.com *.visualforce.com *.adobedtm.com *.rumiview.com *.simpli.fi *.googletagmanager.com *.kickfire.com *.doubleclick.net *.lightning.com *.adroll.com *.ytimg.com *.loopanalytics.com *.surveymonkey.com https://www.qlzn6i1l.com https://secure.neck6bake.com 'unsafe-eval';style-src * 'unsafe-inline';font-src * 'unsafe-inline' data:;img-src * 'unsafe-inline' data:;frame-src * 'unsafe-inline';connect-src * 'unsafe-inline';worker-src 'self' blob:;media-src 'self' *.boltdns.net *.akamaihd.net blob:;object-src 'unsafe-inline' 'self' 4
default-src * 'unsafe-inline' 'unsafe-eval' 4
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://optimize.google.com https://survey.g.doubleclick.net https://tagmanager.google.com *.googleapis.com *.gstatic.com  https://dyv6f9ner1ir9.cloudfront.net https://362-lxb-565.mktoutil.com https://storage.googleapis.com https://i.ytimg.com https://pnapi.invoca.net https://www.google-analytics.com https://player.vimeo.com https://pixel.mathtag.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.twitter.com *.marketo.com *.inquicker.com *.sitefinity.xyz *.tenethealth.com  *.googletagmanager.com *.youtube.com/iframe_api  https://app-sj01.marketo.com https://pnapi.invoca.net https://maps.googleapis.com https://d.monetate.net https://se.monetate.net https://s.ytimg.com https://pixel.mathtag.com https://player.vimeo.com https://rw1.marchex.io https://resources.xg4ken.com https://rw1.marchex.io https://resources.xg4ken.com https://ajax.googleapis.com https://solutions.invocacdn.com https://polyfill.io http://siteimproveanalytics.com https://cdn.siteimprove.net https://connect.facebook.net https://s.ytimg.com https://maps.googleapis.com https://se.monetate.net https://d.monetate.net  accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com *.twitter.com *.marketo.com *.inquicker.com *.sitefinity.xyz *.tenethealth.com  *.siteimprove.net *.facebook.com *.google.com *.google.co.in *.gstatic.com  https://googleads.g.doubleclick.net https://static.doubleclick.net https://munchkin.net https://stats.g.doubleclick.net https://pnapi.invoca.net https://www.google-analytics.com https://player.vimeo.com https://pixel.mathtag.com https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://s.ytimg.com https://se.monetate.net https://maps.googleapis.com https://maps.gstatic.com https://siteimproveanalytics.com https://d.monetate.net https://rw1.marchex.io https://resources.xg4ken.com https://www.googletagmanager.com https://ajax.googleapis.com https://px.marchex.io https://my2.siteimprove.com https://www.googletagmanager.com https://maps.googleapis.com https://munchkin.marketo.net https://solutions.invocacdn.com https://service-uat.tenethealth.com https://service-test.tenethealth.com https://service-prep.tenethealth.com  https://id.siteimprove.com https://cdn.siteimprove.net https://polyfill.io https://www.google-analytics.com https://www.youtube.com https://munchkin.marketo.net https://68956.global.siteimproveanalytics.io https://siteimproveanalytics.com https://stats.g.doubleclick.net https://connect.facebook.net https://px.marchex.io https://www.googletagmanager.com https://my2.siteimprove.com https://s.ytimg.com https://maps.googleapis.com https://maps.gstatic.com https://se.monetate.net https://rw1.marchex.io https://ajax.googleapis.com https://resources.xg4ken.com https://cdnjs.cloudflare.com https://radiomd.com https://tours.sunnymedia.com; style-src 'self' 'unsafe-inline' https://optimize.google.com https://tagmanager.google.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com *.twimg.com *.marketo.com *.sitefinity.xyz *.tenethealth.com https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' https://www.gstatic.com https://ssl.gstatic.com https://optimize.google.com *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com *.twimg.com data: blob: *.eloqua.com track.hubspot.com  *.google.co.in *.google.com *.googletagmanager.com *.tenethealth.com  https://*.youtube.com https://app-sj01.marketo.com https://stats.g.doubleclick.net https://service-prep.tenethealth.com https://68956.global.siteimproveanalytics.io https://i.ytimg.com https://px.marchex.io https://pixel.mathtag.com  *.baptisthealthsystem.com *.nacmedicalcenter.com *.resolutehealth.com *.providencechildrenshospital.com *.thehospitalsofprovidence.com *.valleybaptist.net *.dmc.org *.childrensdmc.org *.rimrehab.org *.brookwoodbaptisthealth.com *.saintfrancishosp.com *.saintfrancisbartlett.com *.eastcoopermedctr.com *.hiltonheadregional.com *.piedmontmedicalcenter.com *.coralgableshospital.com *.delraymedicalctr.com *.floridamedctr.com *.goodsamaritanmc.com *.hialeahhosp.com *.northshoremedical.com *.palmbeachchildrenshospital.com *.pbgmc.com *.palmettogeneral.com *.stmarysmc.com *.westbocamedctr.com *.stvincenthospital.com *.mwmc.com *.abrazohealth.com *.carondelet.org *.desertcarenetwork.com *.doctorsmanteca.com *.dmc-modesto.com *.emanuelmedicalcenter.org *.fountainvalleyhospital.com *.lakewoodregional.com *.losalamitosmedctr.com *.placentialinda.com *.sanramonmedctr.com *.sierravistaregional.com *.twincitieshospital.com *.brookwoodbaptistmedicalcenter.com *.brookwoodwomensmedicalcenter.com *.citizensbaptistmedicalcenter.com *.princetonbaptistmedicalcenter.com *.shelbybaptistmedicalcenter.com *.walkerbaptistmedicalcenter.com *.tenethealthcentralcoast.com; media-src 'self' data: blob:; form-action *.sitefinity.xyz *.facebook.com 'self' https://optimize.google.com https://paypage.epx.com; frame-src *.marketo.com *.sitefinity.xyz 'self'  *.tenethealth.com *.google.com *.youtube.com *.facebook.com *.facebook.com/tr/  https://optimize.google.com https://tenethealth.outgrow.us https://platform.twitter.com https://tenethealthbotprodcontainer01.azurewebsites.net/ https://pixel.mathtag.com/ https://player.vimeo.com/ https://radiomd.com https://tours.sunnymedia.com https://9207741.fls.doubleclick.net https://my2.siteimprove.com; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.marketo.com *.sitefinity.xyz *.tenethealth.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  https://optimize.google.com https://survey.g.doubleclick.net https://dyv6f9ner1ir9.cloudfront.net https://362-lxb-565.mktoutil.com https://storage.googleapis.com https://i.ytimg.com https://pnapi.invoca.net https://www.google-analytics.com https://player.vimeo.com https://pixel.mathtag.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.twitter.com *.marketo.com *.inquicker.com *.sitefinity.xyz *.tenethealth.com  *.googletagmanager.com *.youtube.com/iframe_api  https://pnapi.invoca.net https://maps.googleapis.com https://d.monetate.net https://se.monetate.net https://s.ytimg.com https://pixel.mathtag.com https://player.vimeo.com https://rw1.marchex.io https://resources.xg4ken.com https://rw1.marchex.io https://resources.xg4ken.com https://ajax.googleapis.com https://solutions.invocacdn.com https://polyfill.io http://siteimproveanalytics.com https://cdn.siteimprove.net https://connect.facebook.net https://s.ytimg.com https://maps.googleapis.com https://se.monetate.net https://d.monetate.net  'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com *.twitter.com *.marketo.com *.inquicker.com *.sitefinity.xyz *.tenethealth.com  *.siteimprove.net *.facebook.com *.google.com *.google.co.in *.gstatic.com  https://googleads.g.doubleclick.net https://static.doubleclick.net https://munchkin.net https://stats.g.doubleclick.net https://pnapi.invoca.net https://www.google-analytics.com https://player.vimeo.com https://pixel.mathtag.com https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://s.ytimg.com https://se.monetate.net https://maps.googleapis.com https://maps.gstatic.com https://siteimproveanalytics.com https://d.monetate.net https://rw1.marchex.io https://resources.xg4ken.com https://www.googletagmanager.com https://ajax.googleapis.com https://px.marchex.io https://my2.siteimprove.com https://www.googletagmanager.com https://maps.googleapis.com https://munchkin.marketo.net https://solutions.invocacdn.com https://service-uat.tenethealth.com https://service-test.tenethealth.com https://service-prep.tenethealth.com  https://id.siteimprove.com https://cdn.siteimprove.net https://polyfill.io https://www.google-analytics.com https://www.youtube.com https://munchkin.marketo.net https://68956.global.siteimproveanalytics.io https://siteimproveanalytics.com https://stats.g.doubleclick.net https://connect.facebook.net https://px.marchex.io https://www.googletagmanager.com https://my2.siteimprove.com https://s.ytimg.com https://maps.googleapis.com https://maps.gstatic.com https://se.monetate.net https://rw1.marchex.io https://ajax.googleapis.com https://resources.xg4ken.com  *.baptisthealthsystem.com *.nacmedicalcenter.com *.resolutehealth.com *.providencechildrenshospital.com *.thehospitalsofprovidence.com *.valleybaptist.net *.dmc.org *.childrensdmc.org *.rimrehab.org *.brookwoodbaptisthealth.com *.saintfrancishosp.com *.saintfrancisbartlett.com *.eastcoopermedctr.com *.hiltonheadregional.com *.piedmontmedicalcenter.com *.coralgableshospital.com *.delraymedicalctr.com *.floridamedctr.com *.goodsamaritanmc.com *.hialeahhosp.com *.northshoremedical.com *.palmbeachchildrenshospital.com *.pbgmc.com *.palmettogeneral.com *.stmarysmc.com *.westbocamedctr.com *.stvincenthospital.com *.mwmc.com *.abrazohealth.com *.carondelet.org *.desertcarenetwork.com *.doctorsmanteca.com *.dmc-modesto.com *.emanuelmedicalcenter.org *.fountainvalleyhospital.com *.lakewoodregional.com *.losalamitosmedctr.com *.placentialinda.com *.sanramonmedctr.com *.sierravistaregional.com *.twincitieshospital.com *.brookwoodbaptistmedicalcenter.com *.brookwoodwomensmedicalcenter.com *.citizensbaptistmedicalcenter.com *.princetonbaptistmedicalcenter.com *.shelbybaptistmedicalcenter.com *.walkerbaptistmedicalcenter.com *.tenethealthcentralcoast.com https://img.youtube.com https://radiomd.com; 4
child-src 'self' https://optimize.google.com https://player.vimeo.com https://w.soundcloud.com https://kit.fontawesome.com https://www.yumpu.com https://www.facebook.com https://vars.hotjar.com https://content.googleapis.com https://accounts.google.com https://calendar.google.com https://www.google.com https://forms.tandfonline.com https://taylorandfrancis.formstack.com https://tfforms.wpengine.com https://web-player.art19.com https://www.youtube.com; connect-src 'self' data: https://www.facebook.com  https://bam.eu01.nr-data.net https://stats.g.doubleclick.net https://www.google-analytics.com https://yoast.com https://ayepeaeye.wpengine.com https://tandfapi.co.uk https://authorservices.taylorandfrancis.com https://vc.hotjar.io https://in.hotjar.com; default-src 'self' https://www.tandf.co.uk https://bam.eu01.nr-data.net https://abc123-wpengine.netdna-ssl.com; font-src 'self' data: https://script.hotjar.com https://static.formstack.com https://abc123-wpengine.netdna-ssl.com https://fonts.googleapis.com https://fonts.gstatic.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; img-src 'self' data: https://www.google.be https://hm.baidu.com https://p.adsymptotic.com https://www.gstatic.com https://optimize.google.com https://badges.altmetric.com https://covers.tandf.co.uk https://www.linkedin.com https://images.tandf.co.uk https://px.ads.linkedin.com https://www.googletagmanager.com https://www.google.co.uk https://www.google.com https://stats.g.doubleclick.net http://t.co https://www.facebook.com https://s.w.org https://abc123-wpengine.netdna-ssl.com https://app.imagify.io https://cdn.syndication.twimg.com https://i.ytimg.com https://www.google-analytics.com https://imagify.io https://pbs.twimg.com https://storage.imagify.io https://secure.gravatar.com https://t.co https://ton.twimg.com https://maps.googleapis.com https://maps.gstatic.com; media-src 'self' https://www.buzzsprout.com https://www.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://hm.baidu.com https://www.googleoptimize.com https://optimize.google.com https://d1bxh8uas1mnw7.cloudfront.net https://api.altmetric.com https://bam.eu01.nr-data.net https://d1bxh8uas1mnw7.cloudfront.net https://d1bxh8uas1mnw7.cloudfront.net https://js-agent.newrelic.com https://static.formstack.com https://khan.github.io/tota11y/dist/tota11y.min.js http://www.googleadservices.com https://abc123-wpengine.netdna-ssl.com https://ajax.googleapis.com https://analytics.twitter.com https://api.wpengineapi.com https://apis.google.com https://app.imagify.io https://c.cnzz.com https://cdn.ravenjs.com https://cdnjs.cloudflare.com https://cnzz.mmstat.com https://code.jquery.com https://connect.facebook.net https://content.googleapis.com https://dify.wpengine.com https://fast.wistia.com https://forms.tandfonline.com https://googleads.g.doubleclick.net https://i.ytimg.com https://imagify.io https://in.hotjar.com https://journalapp.taylorandfrancis.com https://maps.googleapis.com https://maps.gstatic.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://pbs.twimg.com https://pi.pardot.com https://pixel.wp.com https://placehold.it https://platform.twitter.com https://player.youku.com https://px.ads.linkedin.com https://s.w.org https://s0.wp.com https://s13.cnzz.com https://script.hotjar.com https://secure.gravatar.com https://sjs.bizographics.com https://snap.licdn.com https://ssl.google-analytics.com https://stackpath.bootstrapcdn.com https://static.addtoany.com https://static.ads-twitter.com https://static.hotjar.com https://stats.g.doubleclick.net https://stats.wp.com https://storage.imagify.io https://syndication.twitter.com https://t.co https://taylorandfrancis.formstack.com https://tfforms.wpengine.com https://translate.google.com https://translate.googleapis.com https://vars.hotjar.com https://ws.sharethis.com https://www.advancedcustomfields.com https://www.facebook.com https://www.fullstory.com https://www.google-analytics.com https://www.google.co.uk https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gravityforms.com https://www.gravityforms.local https://www.gstatic.com https://www.netdna-ssl.com https://www.paypalobjects.com https://www.tablepress.org https://www.wpengine.co.uk https://www.yoast.com; style-src 'self' 'unsafe-inline' https://optimize.google.com https://d1bxh8uas1mnw7.cloudfront.net https://ajax.googleapis.com https://static.formstack.com https://abc123-wpengine.netdna-ssl.com https://cdn.ravenjs.com https://fonts.googleapis.com https://forms.tandfonline.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://snap.licdn.com https://stackpath.bootstrapcdn.com https://stackpath.bootstrapcdn.com https://taylorandfrancis.formstack.com https://tfforms.wpengine.com https://www.advancedcustomfields.com https://www.gravityforms.com https://www.gravityforms.local https://www.tablepress.org https://use.fontawesome.com https://www.yoast.com; 4
default-src https: http://*.sim-cms.net http://sdk.listenlive.co 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https: http://cdn.saleminteractivemedia.com; 4
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: https://sb.scorecardresearch.com blob: wss:; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-top-navigation-by-user-activation allow-presentation; img-src 'self' https: data: blob:; object-src https://*.engadget.com https://s.yimg.com; worker-src 'self'; manifest-src 'self' https://s.yimg.com; font-src 'self' data: https://www.engadget.com https://s.yimg.com https://fonts.gstatic.com https://*.spot.im; connect-src 'self' https://*.engadget.com https://s.yimg.com https://*.yahoo.net https://*.yahoo.com https://*.oath.com https://*.advertising.com https://*.cdn.yimg.com https://ad.doubleclick.net https://*.doubleverify.com https://*.googlesyndication.com https://*.spot.im https://*.giphy.com https://*.vidible.com https://*.media.yahoo.com:4443 https://*.skimresources.com; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp.yahoo.com/beacon/csp?src=engadget; report-to csp-endpoint; 3
font-src https://cdnjs.cloudflare.com/ http://www.aexp-static.com/ https://use.typekit.net/ 'self' http://fonts.gstatic.com/ https://*.bootstrapcdn.com/ https://*.aexp-static.com/; img-src 'self' data: https: http:; script-src http://assets.adobedtm.com/ https://cdnjs.cloudflare.com/ https://assets.adobedtm.com/ 'unsafe-inline' 'self' https://*.liveperson.net/ https://googleads.g.doubleclick.net/ https://*.lpsnmedia.net/ https://www.googleadservices.com/ https://service.maxymiser.net/ https://*.aexp-static.com/ https://c00.adobe.com/ https://aexp.demdex.net/ http://nexus.ensighten.com/ https://connect.facebook.net/ http://*.aexp-static.com/ https://*.americanexpress.com/ https://cdn.appdynamics.com/ https://ct.contentsquare.net/ https://nexus.ensighten.com/ https://contentsquare.com/ https://adservice.google.co.il/ http://*.americanexpress.com/ https://*.contentsquare.com/ http://*.liveperson.net/ https://www.google.com/ https://*.akamaihd.net/ http://service.maxymiser.net/ 'unsafe-eval'; base-uri http://www.americanexpress.com/ https://*.americanexpress.com/ https://ds-aksb-a.akamaihd.net/ 'self'; frame-src https://staticxx.facebook.com/ https://*.americanexpress.com/ https://*.demdex.net/ https://*.liveperson.net/ https://lpcdn.lpsnmedia.net/ http://*.demdex.net/ https://googleads.g.doubleclick.net/ http://*.americanexpress.com/ https://www.payback.it/ https://service.maxymiser.net/ https://www.youtube.com/ https://*.aexp-static.com/ https://*.akamaihd.net/; form-action http://www.americanexpress.com/ https://*.americanexpress.com/; worker-src  'self' blob:; frame-ancestors https://*.aexp.com/  https://*.americanexpress.com/; style-src https://14106077.va.cobrowse.liveperson.net/ https://*.aexp-static.com/ 'unsafe-inline' 'self'; report-uri https://csp.tsrs.cloud/r/62c749c0b9b5a14a94559129ab0017b432d368a1; media-src 'self' https://lpcdn.lpsnmedia.net/ https://lpchat.americanexpress.com/; connect-src https://assets.adobedtm.com/ http://www.aexp-static.com/ https://*.americanexpress.com/ https://papi.walkme.com/ wss://iwmap.americanexpress.com/ https://nexus.ensighten.com/ https://*.demdex.net/ wss://www.americanexpress.com/ https://*.liveperson.net/ https://*.contentsquare.net/ http://dpm.demdex.net/ http://*.americanexpress.com/ https://www.facebook.com/ https://ad.doubleclick.net/ https://aeopprodvip.acxiom.com/ https://*.aexp-static.com/ https://*.akamaihd.net/; object-src  'self';  3
frame-ancestors https://*.citi.com https://*.citigroup.net https://*.nsroot.net 3
media-src https: blob:; connect-src 'self' https: blob: wss:; child-src https: blob:; default-src https: wss: 'unsafe-inline' 'unsafe-eval' data:; font-src https: data:; img-src https: data: blob:; report-uri https://sentry.io/api/115794/csp-report/?sentry_key=40c3396129f24aacbf05aed4885600b3 3
default-src https: data: blob:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src https: data: blob:; media-src https: http: blob: data:; connect-src http: https: ws: wss:; 3
frame-ancestors 'self' *.cbssports.com *.sportsline.com popculture.com comicbook.com 247sports.com *.247sports.com *.maxpreps.com *.scout.com *.wired2fish.com *.ampproject.org; default-src https: blob: wss: 'unsafe-inline' 'unsafe-eval'; font-src https: blob: data:; img-src https: blob: data: android-webview: android-webview-video-poster:; block-all-mixed-content; 3
frame-ancestors 'self' *.force.com *.salesforce.com *.lightning.com *.sony.com 3
default-src 'none'; img-src 'self' https://fedoramagazine.org; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://builds.coreos.fedoraproject.org;  3
frame-ancestors 'self' www.lgechat.com www.group-digital.fr; 3
frame-ancestors https://pam.mcafee.com 3
frame-src 'self' *.microfocus.com *.ubembed.com https://js.driftt.com https://bid.g.doubleclick.net https://optimize.google.com/ https://dev.visualwebsiteoptimizer.com https://www.facebook.com/ https://www.google.com/ https://www.youtube.com/ https://www.brighttalk.com/ https://bcove.video/ https://www.googletagmanager.com https://microfocuspartner.force.com https://www.linkedin.com/ https://platform.twitter.com/ https://www.research.net https://irs.tools.investis.com/ https://players.brightcove.net/ https://otp.tools.investis.com/ https://html5-player.libsyn.com/; frame-ancestors 'self' *.microfocus.com https://microfocus.lookbookhq.com https://microfocuspartner.force.com; 3
connect-src 'self' checkout.stripe.com sentry.io api.github.com www.npmjs.com;default-src 'none';img-src * data:;script-src 'self' data: 'unsafe-inline' https://checkout.stripe.com/checkout.js https://static.accountdock.com https://platform.twitter.com/widgets.js https://static.npmjs.com/;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.npmjs.com/;frame-src checkout.stripe.com https://accountdock.com/app https://www.youtube.com/embed/mKMaG0cixXw https://static.accountdock.com/;font-src https://fonts.gstatic.com https://static.npmjs.com/ ;media-src https://player.vimeo.com https://fpdl.vimeocdn.com https://gcs-vimeo.akamaized.net https://vod-progressive.akamaized.net 3
default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' *.oculus.com *.atdmt.com www.google-analytics.com static.oculuscdn.com forums.oculusvr.com tags.tiqcdn.com *.youtube.com *.ytimg.com;style-src data: blob: 'unsafe-inline' * *.oculus.com *.facebook.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm *.oculus.com *.oculuscdn.com;font-src *.oculus.com data: *.fbcdn.net *.facebook.com *.akamaihd.net *.oculuscdn.com;img-src *.oculus.com *.fbcdn.net *.facebook.com *.facebook.net *.fbthirdpartypixel.com *.akamaihd.net *.oculuscdn.com *.atdmt.com data: blob: www.google-analytics.com stats.g.doubleclick.net www.google.com googleads.g.doubleclick.net media-library.stackla.com img.youtube.com *.ytimg.com alb.reddit.com;frame-src *.oculus.com *.fbthirdpartypixel.com *.facebook.com *.youtube.com; 3
default-src 'self' https:; frame-src 'self' https: blob:; worker-src 'self' blob: ; child-src blob: ; script-src 'self' https: 'unsafe-inline' https://vaas.acapela-group.com 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: https://api.pusherapp.com wss://ws.pusherapp.com wss://*.firebaseio.com http://localhost:8080 https://curriculum.code.org/; media-src 'self' https: http://vaas.acapela-group.com; report-uri //code.org/https/mixed-content; frame-ancestors 'self' http://*.disney.com http://*.diznee.net cuantrix.mx cuantrix.gilasw.com code.org studio.code.org curriculum.code.org codecurricula.com 3
frame-ancestors *.motor1.com 3
frame-ancestors http://*.ccf.org https://*.ccf.org https://clevelandclinic.ungerboeck.com https://*.clevelandclinic.org http://*.clevelandclinic.org 3
frame-ancestors http://kpmg.experiencecloud.adobe.com 3
script-src 'self' 3
default-src 'self' https:; script-src * blob: 'unsafe-inline' 'unsafe-eval' https://*.m-pathy.com; style-src 'self' 'unsafe-inline'; img-src https: data:; font-src 'self' data:; media-src https: http: blob: 'self' hdshlsdbbahn-vh.akamaihd.net; connect-src 'self' https: wss://*.m-pathy.com 3
frame-ancestors 'self' sharepoint.com *.sharepoint.com https://ukom.uk.net eloqua.com *.eloqua.com; 3
default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss:; media-src https: blob:; object-src https:; child-src https: data: blob:; form-action https:; block-all-mixed-content; 3
default-src 'self' https://maxcdn.bootstrapcdn.com https://cdn.knightlab.com https://*.marketo.com https://www.google.com https://www.youtube.com https://fonts.gstatic.com https://*.ul.com data: blob:; connect-src 'self' https://*.lift.acquia.com https://*.wistia.com http://*.wistia.com https://*.ul.com https://*.solosegment.com https://www.google-analytics.com https://spreadsheets.google.com https://www.facebook.com https://stats.addtoany.com https://*.hotjar.com https://*.hotjar.io https://*.mktoutil.com https://*.mktoresp.com https://embedwistia-a.akamaihd.net https://sessions.bugsnag.com https://stats.g.doubleclick.net https://fg8vvsvnieiv3ej16jby.litix.io https://bam.nr-data.net https://bam-cell.nr-data.net https://sheets-proxy.knightlab.com https://cdn.cookielaw.org https://*.onetrust.com; font-src 'self' https://maxcdn.bootstrapcdn.com http://maxcdn.bootstrapcdn.com https://cdn.knightlab.com https://fonts.gstatic.com https://script.hotjar.com data:; frame-src 'self' https://*.marketo.com https://www.google.com https://player.vimeo.com https://www.youtube.com https://fast.wistia.com https://vars.hotjar.com https://www.facebook.com http://quote.ul.com https://quote.ul.com https://optimize.google.com; img-src 'self' https://*.adroll.com https://*.linkedin.com https://*.facebook.com https://*.google.com https://*.wistia.com https://*.wistia.net https://*.solosegment.com https://embedwistia-a.akamaihd.net https://www.google-analytics.com https://www.googletagmanager.com https://www.ul.com https://legacy-uploads.ul.com https://optimize.google.com data:; media-src 'self' https://embedwistia-a.akamaihd.net https://*.wistia.com https://*.youtube.com blob: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.acquia.com http://*.acquia.com https://*.wistia.com http://*.wistia.net https://*.wistia.net https://app.wistia.com https://www.youtube.com http://www.youtube.com https://*.vimeo.com https://connect.facebook.net https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://*.hotjar.com https://*.marketo.net https://www.recaptcha.net https://cdnjs.cloudflare.com https://*.adroll.com https://*.ytimg.com https://snap.licdn.com https://*.adroll.mgr.consensu.org https://js-agent.newrelic.com https://bam.nr-data.net https://bam-cell.nr-data.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.onetrust.com https://optimize.google.com blob:  https://app-ab11.marketo.com https://app-sj08.marketo.com https://cdn.knightlab.com https://code.jquery.com https://embed.solosegment.com https://static.addtoany.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.marketo.com https://cdn.cookielaw.org https://static.addtoany.com https://*.acquia.com https://optimize.google.com https://fonts.googleapis.com https://cdn.knightlab.com maxcdn.bootstrapcdn.com; frame-ancestors 'self'; report-uri https://ulcsp.report-uri.com/r/t/csp/reportOnly 3
frame-ancestors https://*.ringcentral.com https://*.ringcentral.co.uk https://*.ringcentral.com.au https://*.ringcentral.eu https://outlook.live.com https://outlook.office365.com https://outlook.office.com 3
upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; report-uri https://csp.nytimes.com/report; 3
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; frame-src https: data:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss:; child-src https: blob: 3
frame-ancestors 'self' https://*.opera.com; upgrade-insecure-requests; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.netsuite.com http://consent.truste.com *.trustarc.com *.adroll.com *.bing.com https://*.doubleclick.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com https://vlog.leadformix.com *.googleapis.com *.ensighten.com *.demandbase.com http://chat.leadformix.com static.atgsvcs.com rules.atgsvcs.com netsuite-salechat.custhelp.com http://netsuite-salechat.widget.custhelp.com www.rnengage.com *.rightnowtech.com https://assets.adobedtm.com http://img.en25.com http://netsuite-www.baynote.net *.facebook.com *.facebook.net *.google.com *.twitter.com *.yahoo.com *.akamaihd.net *.demdex.net *.omtrdc.net https://*.adobetag.com https://*.linkedin.com *.licdn.com https://*.openx.net https://*.rubiconproject.com https://*.gumgum.com https://*.casalemedia.com https://*.media6degrees.com *.company-target.com *.rlcdn.com https://*.pubmatic.com https://*.w55c.net https://*.bidswitch.net https://*.narrative.io *.bidr.io *.2o7.net https://tags.bkrtx.com flex.atdmt.com https://s.yimg.com; style-src 'self' 'unsafe-inline' https://netsuite-salechat.widget.custhelp.com; font-src 'self' data: https://fonts.gstatic.com; img-src * data: ; frame-src 'self' *.doubleclick.net *.youtube.com *.youtu.be *.facebook.com *.facebook.net *.omtrdc.net *.trustarc.com http://chat.leadformix.com https://netsuite-salechat.custhelp.com https://netsuite-salechat-de.custhelp.com https://netsuite-salechat-es.custhelp.com https://netsuite-salechat-fr.custhelp.com https://netsuite-salechat-jp.custhelp.com https://netsuite-salechat-ko.custhelp.com https://netsuite-salechat-nl.custhelp.com https://netsuite-salechat-pt.custhelp.com https://netsuite-salechat-sv.custhelp.com https://netsuite-salechat-zhcn.custhelp.com https://netsuite-salechat-zhtw.custhelp.com *.demdex.net *.bluekai.com; connect-src 'self' https://api.company-target.com https://*.doubleclick.net https://*.googlevideo.com *.omtrdc.net *.demdex.net http://rules.atgsvcs.com https://bat.bing.com https://netsuite-salechat.custhelp.com https://s.yimg.com http://www.oracle.com; media-src 'self' blob: ; report-uri https://nlcorp.app.netsuite.com/app/security/csp/cspaudit.nl 3
frame-ancestors 'self' https://studio.first.sandbox.ua.coremedia.cloud https://public-studio.first.sandbox.ua.coremedia.cloud https://preview.uat.ua.coremedia.cloud https://studio.uat.ua.coremedia.cloud https://first.sandbox.ua.coremedia.cloud https://studio.production.ua.coremedia.cloud https://preview.production.ua.coremedia.cloud 3
default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data: blob:; media-src https: data: blob:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests 3
frame-ancestors 'self' http://*.bbt.com https://*.bbt.com; 3
connect-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com www.googletagmanager.com www.google-analytics.com logs.convertexperiments.com 1003350.metrics.convertexperiments.com 1003343.metrics.convertexperiments.com sentry.prod.mozaws.net https://accounts.firefox.com/ https://accounts.firefox.com.cn/; frame-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com www.googletagmanager.com www.google-analytics.com www.youtube-nocookie.com trackertest.org www.surveygizmo.com accounts.firefox.com accounts.firefox.com.cn www.youtube.com; script-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com tagmanager.google.com www.youtube.com s.ytimg.com cdn-3.convertexperiments.com app.convert.com data.track.convertexperiments.com 1003350.track.convertexperiments.com 1003343.track.convertexperiments.com; child-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com www.googletagmanager.com www.google-analytics.com www.youtube-nocookie.com trackertest.org www.surveygizmo.com accounts.firefox.com accounts.firefox.com.cn www.youtube.com; default-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com; img-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com data: mozilla.org firefox.com www.firefox.com www.googletagmanager.com www.google-analytics.com adservice.google.com adservice.google.de adservice.google.dk creativecommons.org cdn-3.convertexperiments.com logs.convertexperiments.com ad.doubleclick.net; style-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com 'unsafe-inline' app.convert.com 3
frame-ancestors 'self'; default-src 'self' https://*.youtube.com https://*.ytimg.com https://*.iesnare.com https://www.paypalobjects.com https://insights.algolia.io; img-src 'self' data: blob: *.indigo.ca *.indigoimages.ca *.bazaarvoice.com *.nr-data.net https://*.cloudfront.net https://*.doubleclick.net https://*.facebook.com https://*.googleapis.com https://*.google-analytics.com https://*.google.com https://*.google.ca https://www.googletagmanager.com https://*.gstatic.com https://*.pinimg.com https://*.twimg.com https://*.twitter.com https://*.webtype.com *.omtrdc.net https://t.co https://notify.bugsnag.com https://s3.amazonaws.com https://tracker.marinsm.com https://kbimages1-a.akamaihd.net https://ds-aksb-a.akamaihd.net www.paypalobjects.com https://*.paypal.com https://*.piwikpro.com https://secure.adnxs.com https://www.offlinx.com https://gtrk.s3.amazonaws.com https://heapanalytics.com https://*.cdninstagram.com https://dpm.demdex.net https://cm.everesttech.net https://*.online-metrix.net https://insights.hotjar.com https://static.hotjar.com https://ct.pinterest.com https://scontent.xx.fbcdn.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.indigo.ca *.indigoimages.ca ajax.aspnetcdn.com code.jquery.com *.bazaarvoice.com https://*.cloudflare.com https://www.myregistry.com https://www.babylist.com/ https://*.cloudfront.net https://*.facebook.com https://*.facebook.net https://*.google.com https://*.google.ca https://googleads.g.doubleclick.net https://*.gstatic.com https://*.googleapis.com *.omtrdc.net https://*.richrelevance.com https://*.twimg.com https://*.twitter.com https://*.ads-twitter.com https://*.vimeo.com https://*.youtube.com https://*.ytimg.com https://ajax.aspnetcdn.com https://api.pinterest.com https://bam.nr-data.net https://bam-cell.nr-data.net https://dpm.demdex.net https://fbstatic-a.akamaihd.net https://ds-aksb-a.akamaihd.net https://indigo.soapboxhq.com https://maps.gstatic.com https://s3.amazonaws.com https://www.bluecore.com js-agent.newrelic.com tracker.marinsm.com https://mpsnare.iesnare.com www.googleadservices.com www.paypalobjects.com www.paypal.com https://*.iesnare.com https://*.smartrecruiters.com https://cdn.heapanalytics.com https://api.instagram.com https://www.buyatab.com https://www.googletagmanager.com https://static.hotjar.com https://script.hotjar.com https://ln-rules.rewardstyle.com https://members.cj.com https://s.pinimg.com https://s.yimg.com https://sp.analytics.yahoo.com/; style-src 'self' 'unsafe-inline' blob: https://*.bazaarvoice.com https://*.google.com https://*.google.ca https://*.googleapis.com https://*.gstatic.com https://*.indigoimages.ca https://*.twitter.com https://*.webtype.com https://*.smartrecruiters.com https://ln-rules.rewardstyle.com https://members.cj.com; connect-src 'self' https://*.indigo.ca https://*.indigoimages.ca https://bam.nr-data.net https://bam-cell.nr-data.net https://triggeredmail.appspot.com www.chapters.indigo.ca *.omtrdc.net https://www.paypal.com https://dpm.demdex.net https://kbepubs1-a.akamaihd.net https://*.google.ca https://*.google.com https://*.bluecore.com https://ds-aksb-a.akamaihd.net https://*.hotjar.com https://vc.hotjar.io wss://*.hotjar.com https://web.delighted.com https://www.facebook.com https://ct.pinterest.com https://insights.algolia.io https://graph.instagram.com https://*.algolianet.com https://*.algolia.net https://s.yimg.com; font-src 'self' https://*.indigoimages.ca https://*.googleapis.com https://*.gstatic.com https://*.webtype.com data: https://static.hotjar.com https://members.cj.com; frame-src 'self' https://*.bazaarvoice.com blob: https://www.myregistry.com https://www.babylist.com/ https://ln-rules.rewardstyle.com https://ln.rewardstyle.com https://members.cj.com https://*.doubleclick.net https://*.facebook.com https://*.google.ca https://*.google.com https://*.indigo.ca https://*.indigoimages.ca https://*.twitter.com https://*.vimeo.com https://*.youtube.com https://indigo.soapboxhq.com https://indigo.taleo.net https://snapwidget.com https://www.google.com https://display.ugc.bazaarvoice.com http://assessment.taleo.net www.paypalobjects.com https://*.paypal.com https://cdn-akamai.mookie1.com https://www.buyatab.com https://*.facebook.net https://h.online-metrix.net/ https://indigo.demdex.net/ *.lrgrewards.com https://vars.hotjar.com; child-src https://vars.hotjar.com; upgrade-insecure-requests; report-uri https://indigo.report-uri.com/r/d/csp/enforce; 3
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.adobedtm.com therandomhousegroupltd.d3.sc.omtrdc.net ssl.google-analytics.com *.google.com *.gstatic.com connect.facebook.net www.dwin2.com *.riddle.com *.hotjar.com *.jotfor.ms *.jotformeu.com cdn.livefyre.com *.eventbrite.co.uk *.cloudfront.net *.newrelic.com *.nr-data.net instagram.com *.instagram.com *.twitter.com; object-src 'self' 3
style-src 'unsafe-inline' 'self' *.yximgs.com https://captcha.gtimg.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' *.yximgs.com hm.baidu.com/hm.js retcode.alicdn.com/retcode/bl.js https://captcha.guard.qcloud.com https://captcha.gtimg.com; img-src 'self' *.yximgs.com data: http: *.kuaishou.com hm.baidu.com/hm.gif arms-retcode.aliyuncs.com/r.png; media-src 'self' *.yximgs.com data:; font-src 'self' *.yximgs.com data:; worker-src 'self' *.yximgs.com blob:; report-uri /api/csp-report 3
base-uri 'self'; frame-ancestors 'self' 3
frame-ancestors 'self';default-src https: data: 'unsafe-inline' 'unsafe-eval' 3
frame-ancestors  'self' *.pnet.ch *.post.ch *.becompany.ch *.signdemo.com 3
font-src * data:; img-src * data: blob:; worker-src blob:; default-src 'self' 'unsafe-eval' 'unsafe-inline' *.marchofdimes.com *.marchforbabies.org *.marchofdimes.org *.ywxi.net *.addthis.com *.addthisedge.com feed2js.org *.cloudfront.net *.crazyegg.com ajax.googleapis.com *.juicer.io api.usersnap.com *.optimizely.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.twitter.com *.facebook.com *.facebook.net *.doubleclick.net *.visualwebsiteoptimizer.com *.atdmt.com *.adsrvr.org *.youtube.com *.googleadservices.com *.cetrk.com *.rfihub.net *.gwallet.com *.godaddy.com *.amazonaws.com *.adroll.com doublethedonation.com *.braintreegateway.com *.payments-amazon.com *.paypalobjects.com *.paypal.com *.amazon.com *.ssl-images-amazon.com *.google.com *.bing.com *.mathtag.com *.acquireinsight.net code.highcharts.com *.jquery.com *.cloudflare.com *.rfihub.com *.formstack.com siteimproveanalytics.com cdn.usersnap.com maxcdn.bootstrapcdn.com *.pinimg.com *.amazonpay.com static.ads-twitter.com *.braintree-api.com *.hotjar.com p2a.co *.gstatic.com cdn.jsdelivr.net cqrcengage.com platform-api.sharethis.com buttons-config.sharethis.com *.trustedsite.com c.sharethis.mgr.consensu.org *.osano.com l.sharethis.com *.cookielaw.org *.pinterest.com pixel-a.basis.net pixel.sitescout.com *.googlesyndication.com maxcdn.bootstrapcdn.com *.moatads.com *.cloudflareinsights.com js.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com *.marketo.net *.mktoresp.com marchofdimes.formstack.com api.mapbox.com events.mapbox.com *.tiles.mapbox.com cdn.heapanalytics.com heapanalytics.com *.taboola.com *.hsleadflows.net *.hsforms.com *.steelhousemedia.com secure.quantserve.com *.quantcount.com apps.rokt.com/; 3
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://d18kwxxua7ik1y.cloudfront.net https://d22r54gnmuhwmk.cloudfront.net https://assets.change.org https://static.change.org https://assets-fe.change.org https://change-production.s3.amazonaws.com https://change-public-stuff.s3.amazonaws.com https://www.google.ca https://www.googleadservices.com https://www.youtube.com https://*.doubleclick.net https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.recaptcha.net https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.fbcdn.net fbrpc://* fb-messenger://* https://*.twitter.com https://*.twimg.com https://*.ads-twitter.com https://vk.com https://*.vk.com https://ajax.cdnjs.com https://cdnjs.cloudflare.com https://service.force.com https://change.my.salesforce.com https://help.change.org https://*.salesforceliveagent.com https://*.braintreegateway.com https://*.paypalobjects.com https://*.paypal.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com https://px-cdn.net https://*.px-cloud.net https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://p2a.co https://public.profitwell.com https://code.jquery.com https://js.stripe.com https://cdn.embedly.com https://player.vimeo.com https://bat.bing.com https://soundcloud.com https://w.soundcloud.com https://www.instagram.com https://www.flickr.com https://*.staticflickr.com https://*.voteamerica.com https://*.jotform.com https://actionnetwork.org; connect-src 'self' blob: https://*.change.org https://change-production.s3.amazonaws.com https://*.googleapis.com https://*.google-analytics.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net fbrpc://* fb-messenger://* https://*.twitter.com https://*.vk.com https://*.braintreegateway.com https://*.paypal.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com https://*.px-client.net https://*.px-cloud.net https://pxchk.net https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://*.profitwell.com https://api.stripe.com https://api.soundcloud.com https://api.airbrake.io https://www.voteamerica.com https://actionnetwork.org; font-src 'self' data: https://assets.change.org https://static.change.org https://d18kwxxua7ik1y.cloudfront.net https://d22r54gnmuhwmk.cloudfront.net https://fonts.gstatic.com https://*.hotjar.com https://*.hotjar.io; img-src * blob: data:; form-action 'self'; 3
default-src 'self' *.kpn.com; frame-ancestors 'self' app.optimizely.com kpn.blueconic.net mijnzakelijk.kpn.com www.grip-on-it.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static-accept.customersaas.com *.optimizely.com cdn.blueconic.net kpn.blueconic.net *.kpn.com *.salesforceliveagent.com www.googletagmanager.com tagmanager.google.com invitation.opinionbar.com www.googleadservices.com connect.facebook.net *.doubleclick.net *.mouseflow.com kpn-compleet-fpi-info.fourstack.nl www.pingvp.com kpn.pingvp.com static.customersaas.com www.google-analytics.com maps.googleapis.com kpnarmor.nl w.usabilla.com api.usabilla.com deploy.mopinion.com collect.mopinion.com kpn.mopinion.com cacheorcheck.mopinion.com survey.mopinion.com kpn-reload.liquix.eu dwin1.com mijnzakelijk.kpn.com www.grip-on-it.com https://*.demdex.net https://assets.adobedtm.com *.pardot.com; style-src 'self' 'unsafe-inline' data: *.kpn.com www.pingvp.com kpn.pingvp.com d1r5etm691cejh.cloudfront.net static.customersaas.com d6tizftlrpuof.cloudfront.net kpn.mopinion.com tagmanager.google.com cacheorcheck.mopinion.com survey.mopinion.com; img-src 'self' data: is-accept.customersaas.com *.kpn.com www.google.nl www.google.com www.facebook.com *.doubleclick.net adservice.google.com invitation.opinionbar.com *.optimizely.com www.pingvp.com kpn.pingvp.com d35v9wsdymy32b.cloudfront.net csi.gstatic.com maps.gstatic.com maps.googleapis.com kpn.com fonts.googleapis.com www.google-analytics.com api.customersaas.com static.customersaas.com d3mwk3f7r8fv9u.cloudfront.net d6tizftlrpuof.cloudfront.net cms-images.s3.amazonaws.com kpncomvod.download.kpnstreaming.nl w.usabilla.com www.telfort.nl mobielshop.test.marketingmakers.nl fra1.digitaloceanspaces.com cacheorcheck.mopinion.com survey.mopinion.com https://*.demdex.net https://assets.adobedtm.com; media-src 'self' kpncomvod.download.kpnstreaming.nl *.kpn.com pingmediavod.download.kpnstreaming.nl kpn.pingvp.com; frame-src *.optimizely.com *.doubleclick.net ezpay.liquix.eu callmenow.eu3.vanadaloha.net rpv.reviva.nl *.kpn.com portal.bp.nu www.youtube.com kpngroup.emsecure.net kpn.mopinion.com kpn-mini.speedtestcustom.com www.pingvp.com kpn.pingvp.com reload.alphacomm.network mijnzakelijk.kpn.com www.grip-on-it.com https://*.demdex.net; font-src 'self' data: *.kpn.com www.pingvp.com kpn.pingvp.com fonts.gstatic.com static.customersaas.com; connect-src 'self' api-accept.customersaas.com www.google-analytics.com *.optimizely.com kpn.blueconic.net *.kpn.com *.mouseflow.com tracker.customersaas.com kpn.api.ruwido.com api-agendaplanner.kpnretail.nl api.customersaas.com scripts.kpn.nl pastease.mopinion.com kpn.mopinion.com deploy.mopinion.com cacheorcheck.mopinion.com survey.mopinion.com kpn-compleet-fpi-info.fourstack.nl ezpay.liquix.eu wss://*.twilio.com https://*.twilio.com https://*.demdex.net https://assets.adobedtm.com *.tt.omtrdc.net https://adobeioruntime.net; object-src 'self' 3
frame-ancestors 'self' www.haier.com *.haier.com cnwcm.haier.com http://cnwcm.haier.com https://mgta.trs.cn http://mgta.trs.cn http://devta.trs.cn *.haier.net *.tongshuai.com *.casarte.com *.geappliances.cn 3
frame-ancestors 'self' *.cnet.com *.ampproject.org *.amp.cloudflare.com *.bing-amp.com www.google.com; default-src https: blob: about: 'unsafe-inline' 'unsafe-eval'; font-src https: blob: data:; img-src https: data: blob: android-webview-video-poster: about:; form-action https:; block-all-mixed-content; media-src https: blob: data:; 3
default-src https://*.belastingdienst.nl https://vinden.belastingdienst.nl https://*.readspeaker.com; connect-src 'self' https://*.belastingdienst.nl https://*.optimizely.com https://*.readspeaker.com *.abtasty.com; child-src 'self' https://belastingdienst.nl https://*.belastingdienst.nl https://*.cdn.optimizely.com https://secure.opinionlab.com https://*.readspeaker.com https://www.anbi-instellingen.nl https://www.youtube.com https://www.youtube-nocookie.com; frame-src 'self' https://*.belastingdienst.nl https://*.readspeaker.com https://secure.opinionlab.com https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self' https://*.belastingdienst.nl https://*.pagefreezer.com https://*.pagefreezer.nl ; img-src 'self' https://n01d05.cumulus-cloud.com https://*.readspeaker.com  https://img.youtube.com data: https://*.belastingdienst.nl blob: data: *.abtasty.com; font-src 'self' https://*.belastingdienst.nl blob: data: *.abtasty.com; script-src 'self' https://*.belastingdienst.nl https://cdn.optimizely.com https://*.readspeaker.com https://bdtm.containers.piwik.pro 'unsafe-eval' 'unsafe-inline' blob: *.abtasty.com ; style-src 'self' https://*.belastingdienst.nl https://*.readspeaker.com *.abtasty.com 'unsafe-inline' 3
script-src * 'unsafe-inline' 'unsafe-eval' 3
default-src 'self' atos.net *.atos.net *.pardot.com assets.adobedtm.com *.cloudflare.com *.cloudfront.net *.yoast.com data: 'unsafe-inline' 'unsafe-eval' code.jquery.com *.gravatar.com tools.eurolandir.com static.dialogflow.com pbs.twimg.com *.youtube.com *.ytimg.com *.gstatic.com *.googleapis.com tribl.io *.olark.com *.mrpdata.net *.linkedin.com *.company-target.com *.google-analytics.com *.google.fr *.google.com *.oktopost.com okt.to *.adform.net *.demandbase.com *.rlcdn.com *.bidr.io *.accountinsight.cloud *.licdn.com atos.tt.omtrdc.net content.onlinexperiences.com onlinexperiences.com w.soundcloud.com *.aio-events.com *.appspot.com; frame-ancestors 'self' atos.net *.atos.net atosnews.net; 3
default-src 'self' http: https: data: blob: 'unsafe-eval' 'unsafe-inline' 3
connect-src * 'self' 3
frame-ancestors 'self' nurture.solarwinds.com; 3
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: *.xvideos.com *.xnxx.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com z8y8f3q6.ssl.hwcdn.net https://www.xvideos.com https://wg-xvdev.xvideos.com *.trafficfactory.biz fonts.googleapis.com fonts.gstatic.com ajax.googleapis.com www.google-analytics.com www.googletagmanager.com *.addthis.com *.addthisedge.com www.iwanttodeliver.com apis.google.com www.google.com www.gstatic.com accounts.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.lswcdn.net *.llnwd.net *.hwcdn.net fcm.googleapis.com *.nk-img.com https://static-dev-xvlive.xvideos.com https://dev-api.naked.com http://dev-api.naked.com *.googleapis.com *.exoclick.com *.exosrv.com *.realsrv.com *.exdynsrv.com *.ackcdn.net *.adtng.com *.adglare.net *.bngpt.com bngpt.com *.trafficjunky.net *.ohmybutt.com *.flirt4free.com *.xlovecam.com *.wlresources.com *.medleyads.com *.cams.com *.acdn5165543.com *.protoawe.com *.google-analytics.com *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com *.promo-bc.com *.bongacams.com *.bongacash.com *.gammae.com *.servingmillions.com *.super-route.com cdn01.flashmediaportal.com engine.asf4f.us *.htdvt.com *.jerkmate.com *.vfgtb.com *.hytxg2.com *.awemdia.com *.cfgr3.com *.ajxx98.online *.sf4f.us *.adworldmedia.com as.air2s.com bngpst.com cretgate.com mysexchatroom.com trknex.com medleyads.com ajxx98.online gamesfromheaven.com go.hpyjmp.com r.trwl2.com bongacams.com clickserve.dartsearch.net afrtrk.com track.cam4tracking.com creative.smljmp.com sffsdvc.com www.sffsdvc.com bmedia.justservingfiles.net blkditsup.com vast.bimbim.com promo.cameraprive.com bngprl.com *.bngprl.com trafforsrv.com *.adglare.net www.flirt4free.com www.ohmybutt.com www.secretpartners.com *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com etahub.com ctrack.trafficjunky.net tracking.sexcash.com wss://dev-chatserver.camster.com wss://staging-chatserver.camster.com wss://m.1ka.com wss://c1.1ka.com wss://c11.1ka.com wss://c12.1ka.com wss://c13.1ka.com wss://c14.1ka.com wss://c15.1ka.com wss://c16.1ka.com wss://c17.1ka.com wss://c18.1ka.com wss://c19.1ka.com wss://c110.1ka.com wss://c111.1ka.com wss://c112.1ka.com wss://c113.1ka.com wss://c114.1ka.com wss://c115.1ka.com wss://c2.1ka.com wss://c21.1ka.com wss://c22.1ka.com wss://c23.1ka.com wss://c24.1ka.com wss://c25.1ka.com wss://c26.1ka.com wss://c27.1ka.com wss://c28.1ka.com wss://c29.1ka.com wss://c210.1ka.com wss://c211.1ka.com wss://c212.1ka.com wss://c213.1ka.com wss://c214.1ka.com wss://c215.1ka.com wss://c3.1ka.com wss://c31.1ka.com wss://c32.1ka.com wss://c33.1ka.com wss://c34.1ka.com wss://c35.1ka.com wss://c36.1ka.com wss://c37.1ka.com wss://c38.1ka.com wss://c39.1ka.com wss://c4.1ka.com wss://c41.1ka.com wss://c42.1ka.com wss://c43.1ka.com wss://c44.1ka.com wss://c45.1ka.com wss://c46.1ka.com wss://c47.1ka.com wss://c48.1ka.com wss://c49.1ka.com wss://c410.1ka.com wss://c411.1ka.com wss://c412.1ka.com wss://c413.1ka.com wss://c414.1ka.com wss://c415.1ka.com wss://c5.1ka.com wss://c51.1ka.com wss://c52.1ka.com wss://c53.1ka.com wss://c54.1ka.com wss://c55.1ka.com wss://c56.1ka.com wss://c57.1ka.com wss://c58.1ka.com wss://c59.1ka.com wss://c510.1ka.com wss://c511.1ka.com wss://c512.1ka.com wss://c513.1ka.com wss://c514.1ka.com wss://c515.1ka.com https://dev-chatserver.camster.com https://staging-chatserver.camster.com https://m.1ka.com https://c1.1ka.com https://c11.1ka.com https://c12.1ka.com https://c13.1ka.com https://c14.1ka.com https://c15.1ka.com https://c16.1ka.com https://c17.1ka.com https://c18.1ka.com https://c19.1ka.com https://c110.1ka.com https://c111.1ka.com https://c112.1ka.com https://c113.1ka.com https://c114.1ka.com https://c115.1ka.com https://c2.1ka.com https://c21.1ka.com https://c22.1ka.com https://c23.1ka.com https://c24.1ka.com https://c25.1ka.com https://c26.1ka.com https://c27.1ka.com https://c28.1ka.com https://c29.1ka.com https://c210.1ka.com https://c211.1ka.com https://c212.1ka.com https://c213.1ka.com https://c214.1ka.com https://c215.1ka.com https://c3.1ka.com https://c31.1ka.com https://c32.1ka.com https://c33.1ka.com https://c34.1ka.com https://c35.1ka.com https://c36.1ka.com https://c37.1ka.com https://c38.1ka.com https://c39.1ka.com https://c4.1ka.com https://c41.1ka.com https://c42.1ka.com https://c43.1ka.com https://c44.1ka.com https://c45.1ka.com https://c46.1ka.com https://c47.1ka.com https://c48.1ka.com https://c49.1ka.com https://c410.1ka.com https://c411.1ka.com https://c412.1ka.com https://c413.1ka.com https://c414.1ka.com https://c415.1ka.com https://c5.1ka.com https://c51.1ka.com https://c52.1ka.com https://c53.1ka.com https://c54.1ka.com https://c55.1ka.com https://c56.1ka.com https://c57.1ka.com https://c58.1ka.com https://c59.1ka.com https://c510.1ka.com https://c511.1ka.com https://c512.1ka.com https://c513.1ka.com https://c514.1ka.com https://c515.1ka.com https://media.1ka.com https://u.1ka.com https://n.1ka.com;img-src 'self' 'unsafe-inline' data: blob: *.xvideos.com *.xnxx.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com *.hwcdn.net *.trafficfactory.biz www.google.com www.google-analytics.com ssl.gstatic.com *.nk-img.com *.camster.com *.vscdns.com *.doubleclick.net *.google.fr *.google.com *.exoclick.com *.exosrv.com *.realsrv.com *.exdynsrv.com *.ackcdn.net bmedia.justservingfiles.net; 3
frame-ancestors 'self' https://wiki.abbyy.com 3
upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval' 3
frame-ancestors 'self' *.zdnet.com *.ampproject.org *.amp.cloudflare.com; default-src https: blob: 'unsafe-inline' 'unsafe-eval' data:; font-src https: blob: data:; img-src https: data: android-webview-video-poster: blob:; form-action https:; block-all-mixed-content; media-src https: blob: data:; 3
default-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https: blob:; img-src * data:; font-src https: data:; frame-ancestors 'self' *.carnival.com https://*.goccl.com https://*.goccl.co.uk https://*.uatcarnival.com https://www.kayak.com http://*.carnivalmeetings.wuata.com https://*.carnivalmeetings.wuata.com https://*.carnivalmeetings.com http://carnivalmeetings.wuata.com https://carnivalmeetings.wuata.com https://carnivalmeetings.com https://*.goccl.com.au http://carnivalmeetings.com.s227501.gridserver.com https://carnivalmeetings.com.s227501.gridserver.com/ https://carnivalmeetings.prod.carnivalcloud.net; worker-src blob: 3
default-src https: blob: data: 'unsafe-inline' 'unsafe-eval' 3
frame-ancestors https://www.zyxel.com https://communicasia.zyxel.com/ https://bbwf.zyxel.com https://mwc.zyxel.com https://www.zyxel.ch https://www.zyxel.fr https://www12.zyxel.com 3
frame-ancestors 'self' http://www.dove.com unilever3.marketing.adobe.com unileverbrazil.marketing.adobe.com unilever2.marketing.adobe.com unilever.marketing.adobe.com unilever3.experiencecloud.adobe.com unileverbrazil.experiencecloud.adobe.com unilever2.experiencecloud.adobe.com unilever.experiencecloud.adobe.com emea1-proxy.adobemc.com us1-proxy.adobemc.com us1-proxy.adobemc.com apac-proxy.adobemc.com adobedemoemea131.marketing.adobe.com adobedemoemea131.experiencecloud.adobe.com 3
default-src https: data: 'unsafe-inline' 'unsafe-eval' 'self' https://*.eqads.com https://*.msecnd.net https://*.cookielaw.org https://*.cloudflare.com https://*.facebook.net https://*.googleapis.com https://*.gstatic.com https://*.crazyegg.com https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.googleapis.com https://*.googlesyndication.com https://*.doubleclick.net https://*.vimeo.com https://*.secure.payconex.net 3
frame-ancestors 'self' *.scot.nhs.uk *.nhsgrampian.org; upgrade-insecure-requests; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report-block; report-to csp-endpoint-block 3
default-src  https: *.willistowerswatson data: blob: 'unsafe-eval' 'unsafe-inline' 3
default-src *; script-src 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' *; img-src http: https: data: 3
frame-ancestors 'self' http://*.iframely.com 3
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; report-uri /security-report.php 3
default-src 'self' blob: data:  *.miraheze.org *.wikimedia.org *.wikipedia.org *.wikibooks.org *.wiktionary.org *.wikiquote.org *.wikisource.org *.wikiversity.org *.wikinews.org *.wikivoyage.org *.mediawiki.org mediawiki.org *.wikidata.org wikidata.org *.wmflabs.org *.google.com *.gstatic.com *.addthis.com *.youtube.com *.youtube-nocookie.com maxcdn.bootstrapcdn.com twitter.com *.creativecommons.org images.uncyc.org www.mikrodev.com *.reviservices.com *.twitter.com www.sciencedaily.com *.googleapis.com *.twimg.com discordapp.com tile.openstreetmap.org *.freenode.net *.sorcery.net *.fontawesome.com *.a.wmflabs.org nenawiki.org *.cloudytheology.com i.imgur.com na.llnet.sims3store.cdn.ea.com cdn.discordapp.com m.media-amazon.com image.tmdb.org *.stripe.com *.twitch.tv *.fastly.net *.facebook.com *.shields.io *.bilibili.com *.163.com discord.com googleusercontent.com imgbox.com cdnjs.cloudflare.com cdn.jsdelivr.net reddit.com *.reddit.com redd.it *.redd.it redditmedia.com *.redditmedia.com dropbox.com *.dropbox.com dropboxstatic.com *.dropboxstatic.com disqus.com *.disqus.com *.nicovideo.jp lh3.googleusercontent.com db.onlinewebfonts.com wikiapiary.com *.vimeo.com *.googleusercontent.com *.imgbox.com www.gnu.org www.desmos.com z.moatads.com www.recaptcha.net snap.berkeley.edu *.netease.com openlayers.org wikiplus-app.com minotar.net 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'  *.miraheze.org 3
upgrade-insecure-requests; frame-ancestors 'self'; 3
default-src 'self'  http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com ; frame-ancestors 'self' https://trustseal.enamad.ir 3
frame-ancestors 'self' https://www.growingio.com 3
script-src 'unsafe-inline' 'unsafe-eval' * 3
frame-ancestors *.straumann.com  3
frame-ancestors 'self' *.quattropod.com quattropod.com *.quattropod.com.cn quattropod.com.cn ezcast-pro.com 3
frame-ancestors 'self' *.nexxt.com/ https://lensa.com/; 3
frame-ancestors *.bilimal.kz *.mycollege.kz *.citorleu.kz *.cit-orleu.kz *.elumiti.kz *.fpp.kz *.presidentfoundation.kz 3
default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src https: blob:; object-src https:; child-src https: data: blob:; form-action https:; block-all-mixed-content 3
default-src * 'self' data: 'unsafe-inline' 'unsafe-eval'; 3
default-src 'self' *.googleapis.com *.vdo.ai *.vlitag.com *.adnxs.com *.avantisvideo.com *.addthis.com http: https: data: blob: 'unsafe-inline' 'unsafe-eval' 3
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' 3
frame-ancestors *; report-uri https://www.rackspace.com/report-uri/enforce 3
default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src https: 3
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src wss: https:  3
frame-ancestors 'self'; base-uri 'self';upgrade-insecure-requests; 3
frame-ancestors 'self' http://www.kayak.com http://www.kayak.com.ar http://www.kayak.cl http://www.kayak.com.co http://www.kayak.com.pe http://www.kayak.com.mx http://www.kayak.com.br http://www.tripadvisor.com http://www.tripadvisor.com.br http://www.tripadvisor.com.mx www.farecompare.com www.idealo.com http://viajala.com.co http://viajala.com.mx http://viajala.com.pe www.clicktripz.com http://viajala.cl http://viajala.com.ar 3
frame-ancestors 'self' cms.golfadvisor.com cms.golfpass.com  *.golfpass.com *.golfgenius.com golfgenius.com  ggstest.com ggstest2.com 3
default-src https:; font-src https: data:; img-src https: data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; 3
default-src 'self' https://tramitesanonimos.cnmc.es;  script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdnjs.cloudflare.com https://translate.googleapis.com https://translate.google.com https://www.google-analytics.com https://cdn.jsdelivr.net https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com;  child-src 'self' https://www.google.com/recaptcha/ https://docs.google.com https://www.gstatic.com/recaptcha/ https://fonts.googleapis.com https://www.youtube.com; img-src 'self' data: https://translate.google.com https://getbootstrap.com https://www.jsdelivr.com https://www.gstatic.com https://www.google.com https://translate.googleapis.com https://www.google-analytics.com https://blog.cnmc.es;  media-src 'self';  style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://translate.googleapis.com https://cdn.jsdelivr.net https://fonts.googleapis.com  https://www.gstatic.com/recaptcha/;  font-src 'self' https://cdn.jsdelivr.net https://fonts.gstatic.com https://www.gstatic.com/recaptcha/;  object-src 'self';  connect-src 'self' https://bootswatch.com https://translate.googleapis.com https://www.google-analytics.com;  3
upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; base-uri 'self'; object-src 'self'; connect-src wss: https: 3
upgrade-insecure-requests; frame-ancestors 'self' https://mangaku.co https://manganime.id https://manganime.in 3
frame-ancestors 'self' https://help.patagonia.com/ https://notouchie-patagoniacommunity.cs7.force.com/ 3
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *; 3
default-src 'self' 'unsafe-inline' *; 3
upgrade-insecure-requests; form-action 'self'; frame-ancestors 'self' 3
frame-ancestors 'self' *.dnc.io 3
frame-ancestors 'self' *.randstadservices.com 3
frame-ancestors 'self' *.windy.com:* 3
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: archive.org web.archive.org analytics.archive.org pragma.archivelab.org 3
default-src 'self' cdn.register.to 'unsafe-eval' https:; font-src 'unsafe-inline' https: data:; img-src 'unsafe-inline' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.register.to tld.register.to cdn.ywxi.net www.google-analytics.com seal.websecurity.norton.com s3-us-west-2.amazonaws.com www.trustedsite.com cdn.jsdelivr.net www.google.com cdn.datatables.net https:; style-src 'unsafe-inline' https:; manifest-src 'self' cdn.register.to 'unsafe-eval' https:; 3
frame-ancestors vuviphimzz.com 3
frame-ancestors https://nurture.solarwinds.com/ https://try.solarwinds.com/ https://www.solarwinds.com/ 3
frame-ancestors 'self' https://www.tibco.com http://tibco.lookbookhq.com https://tibco.lookbookhq.com https://sso-awsqa.tibco.com https://sso-ext.tibco.com http://library.tibco.com https://library.tibco.com https://www-dev.tibco.com https://tibco.seismic.com; report-uri /report-csp-violation 3
frame-ancestors https://*.complex.com 3
default-src * 'unsafe-inline' 'unsafe-eval' data: 3
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.exposebox.com *.windows.net *.googletagmanager.com *.google-analytics.com *.jquery.com *.us4.list-manage.com yoast.com unpkg.com *.cookiepro.com *.facebook.net *.cloudflare.com static.cloudflareinsights.com fast.wistia.com *.google.com *.gstatic.com;style-src 'self' 'unsafe-inline' *.windows.net *.googleapis.com unpkg.com *.fontawesome.com *.cookiepro.com yoast.com;img-src 'self' 'unsafe-inline' data: blob: *;child-src 'self' facebook.com instagram.com twitter.com *.exposebox.com yoast.com *.vimeo.com;connect-src 'self' yoast.com *.joomunited.com *.arcgis.com *.mapbox.com stats.g.doubleclick.net *.google-analytics.com;font-src 'self' 'unsafe-inline' data: fonts.gstatic.com fonts.googleapis.com use.fontawesome.com yoast.com;frame-src 'self' *.exposebox.com *.vimeo.com *.facebook.com *.cdnx.co.uk *.google.com;worker-src 'self' blob:;upgrade-insecure-requests;report-to default; 3
frame-ancestors 'self' *.promod.fr *.promod.com *.promod.de *.promod.pl *.promod.it *.promod.ch *.promod.cz *.promod.es *.promod.co.uk *.promod.eu *.promod.hu *.wonderpush.com 3
img-src *;font-src * 3
default-src * blob: data: 'unsafe-inline' 'unsafe-eval' 3
worker-src 'self' http://*.austlii.edu.au *.datalex.org www.lawnet.sg; 3
frame-ancestors 'self' https://*.myshopify.com https://*.teemill.com teemill.com 3
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *; 3
frame-ancestors self *.haagendazs.us; report-uri /report-csp-violation 3
upgrade-insecure-requests; frame-ancestors 'self' analytics.google.com analytics.webtrends.com secure.minorhotels.com *.naladhu.com *.oakshotels.com *.telerain.com:* 3
frame-ancestors 'self' weleda.sabio.de 3
default-src https: blob:; frame-ancestors 'self' *.ford.com.cn *.lincolnstore.com.cn https://www.ford.com.au https://www.ford.co.th https://www.india.ford.com; connect-src https: wss:; font-src  https: data:; img-src https: data: blob:; media-src https: blob:; object-src 'self'; script-src  https:  'unsafe-inline' 'unsafe-eval' blob:; style-src 'unsafe-inline' https:; base-uri 'self'; 3
frame-ancestors 'self' https://*.indiatimes.com https://*.samayam.com https://maharashtratimes.com https://vijaykarnataka.com https://m.timesofindia.com https://m.economictimes.com https://www.iamgujarat.com https://www.google.com https://*.google.com https://cdn.ampproject.org https://*.cdn.ampproject.org https://*.ampproject.org 3
frame-ancestors 'self' *.basf.com basf-performance-materials.expo-ip.com 3
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 3
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://medium.com https://*.medium.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 3
object-src 3
frame-ancestors 'self' *.bruxelles.be *.brussel.be *.brussels.be 3
font-src 'self' 3
default-src * 'unsafe-inline' data: 'unsafe-eval'; 3
frame-ancestors 'self' https://help.jouwweb.nl; 3
frame-ancestors 'self'; report-uri https://www.goodnes.com/report-uri/enforce 3
script-src 'self' 'unsafe-inline' 3
frame-ancestors 'self' *.shutterfly.com *.tinyprints.com *.onehippo.io; 3
default-src https: wss:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data: 3
default-src https: data: 'unsafe-inline' 'unsafe-eval' blob: 3
default-src * 'unsafe-inline' 'unsafe-eval' data: blob 3
default-src 'self' *.ceros.com go.optiv.com *.codepen.io optiv.showpad.com optivstorage.blob.core.windows.net *.marketo.com https://www.google-analytics.com *.doubleclick.net https://staticxx.facebook.com https://platform.twitter.com http://i.vimeocdn.com https://player.vimeo.com *.youtube-nocookie.com https://www.youtube.com/iframe_api *.linkedin.com *.mktoresp.com http://stats.sa-as.com https://www.facebook.com https://www.google.com https://tracking.leadlander.com *.siteimproveanalytics.io https://8f2a3f802cdf2859af9e-51128641de34f0801c2bd5e1e5f0dc25.ssl.cf1.rackcdn.com https://optiv.postclickmarketing.com https://html5-player.libsyn.com http://html5-player.libsyn.com http://widget.surveymonkey.com https://widget.surveymonkey.com https://www.surveymonkey.com https://consent.cookiebot.com *.fullstory.com https://api.company-target.com https://static.smartrecruiters.com https://www.smartrecruiters.com https://subscriptions.smartrecruiters.com/ https://cdn.jsdelivr.net https://scripts.demandbase.com https://themes.googleusercontent.com https://consentcdn.cookiebot.com/ https://cdn.cookielaw.org/ https://bam.nr-data.net/events/1/f277460712 https://public.tableau.com/ https://api.ceros.com https://google.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://api.lever.co/v0/postings/optiv https://api.lever.co/v0/postings/optiv-2; img-src 'self' data: https://public.tableau.com/static/images/cy/cybersecurity_tool/Story1/1.png https://cdn.bizible.com/ https://cdn.bizibly.com https://www.facebook.com https://stats.g.doubleclick.net https://tracking.leadlander.com https://*.global.siteimproveanalytics.io https://px.ads.linkedin.com https://www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ceros.com go.optiv.com *.codepen.io optiv.showpad.com optivstorage.blob.core.windows.net https://www.googletagmanager.com https://tagmanager.google.com https://s.ytimg.com http://siteimproveanalytics.com https://www.google-analytics.com https://sjs.bizographics.com *.linkedin.com http://connect.facebook.net https://apis.google.com http://platform.twitter.com http://*.marketo.net https://*.marketo.net http://*.marketo.com https://*.marketo.com http://t.sf14g.com http://stats.sa-as.com https://d6digital.atlassian.net https://player.vimeo.com http://i.vimeocdn.com *.youtube-nocookie.com https://www.youtube.com/iframe_api https://8f2a3f802cdf2859af9e-51128641de34f0801c2bd5e1e5f0dc25.ssl.cf1.rackcdn.com https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.js https://optiv.postclickmarketing.com https://html5-player.libsyn.com http://html5-player.libsyn.com http://widget.surveymonkey.com https://widget.surveymonkey.com https://www.surveymonkey.com https://consent.cookiebot.com https://fullstory.com/s/fs.js https://tag.demandbase.com https://scripts.demandbase.com https://static.smartrecruiters.com/job-widget/1.4.2/script/smart_widget.js https://static.smartrecruiters.com/job-widget/1.4.2/script/jquery.min.js https://use.fontawesome.com/releases/v5.8.2/js/all.js https://use.fontawesome.com/releases/v5.8.2/js/v4-shims.js https://www.smartrecruiters.com https://trk.techtarget.com/tracking.js https://ionfiles.scribblecdn.net/scripts/ionizer-1.1.min.js https://subscriptions.smartrecruiters.com/widget/v1/sr-job-alerts.js https://cdn.jsdelivr.net https://themes.googleusercontent.com https://consentcdn.cookiebot.com/ https://cdn.cookielaw.org/ https://js-agent.newrelic.com/ https://bam.nr-data.net/ https://snap.licdn.com/li.lms-analytics/insight.min.js https://public.tableau.com/javascripts/api/viz_v1.js https://cdn.bizible.com https://munchkin.marketo.net/159/munchkin.js https://api.ceros.com https://js-agent.newrelic.com/nr-1184.min.js https://google.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://andreasmb.github.io/lever-jobs-embed/index.js app-sj21.marketo.com https://www.youtube.com pagecdn.io; style-src 'self' 'unsafe-inline' *.ceros.com go.optiv.com *.codepen.io optiv.showpad.com optivstorage.blob.core.windows.net *.marketo.com https://tagmanager.google.com https://fonts.googleapis.com https://static.smartrecruiters.com/job-widget/1.4.2/css/smart_widget.css https://scripts.demandbase.com https://cdn.jsdelivr.net https://themes.googleusercontent.com https://consentcdn.cookiebot.com/ https://cdn.cookielaw.org/ https://google.com https://andreasmb.github.io/lever-jobs-embed/embed-css/style.css 3
default-src https: data: wss://*.hotjar.com ; script-src 'unsafe-eval' 'self' https: 'unsafe-inline'; style-src https: 'unsafe-inline';img-src https: data:;media-src https: data: blob: mediastream: 3
; frame-ancestors 'self' 3
frame-ancestors 'self' https://*.etracker.com 3
connect-src *; default-src 'self'; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 3
default-src * ; img-src * 'self' data: blob: mediastream: https: 'unsafe-inline' 'unsafe-eval'; font-src * 'unsafe-inline' 'unsafe-eval' 'self' data: ; script-src * 'unsafe-inline' 'unsafe-eval' ; style-src * 'unsafe-inline' 'unsafe-eval'; 3
upgrade-insecure-requests; default-src https: data: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' 3
default-src 'self' wibu.com *.wibu.com 'unsafe-inline' 'unsafe-eval' *.brighttalk.com *.adobe.com *.wibu.us *.surveymonkey.com *.brightcove.net *.wibu.com *.typo3.org *.googleapis.com www.google-analytics.com *.google.com *.youtube.com *.youtube-nocookie.com *.youtube.de *.ytimg.com *.baidu.com *.pardot.com *.joomag.com *.cleverreach.de *.cloudfront.net *.amazonaws.com *.hubspot.com *.gstatic.com *.iiconsortium.org data:; img-src * data:; font-src 'self' data: *.wibu.com *.gstatic.com; frame-src 'self' *.wibu.com www.wibu.com *.googleapis.com www.google-analytics.com *.google.com *.google.de *.google.fr *.google.co.uk *.youtube.com *.youtube-nocookie.com *.youtube.de *.ytimg.com *.baidu.com *.joomag.com *.surveymonkey.com *.brighttalk.com 3
style-src 'self' 'unsafe-inline' use.typekit.net fonts.googleapis.com cdnjs.cloudflare.com tagmanager.google.com config1.veinteractive.com veinteractive.com cookiehub.net; font-src 'self' *.typekit.net fonts.gstatic.com data:; report-uri /report-csp-violation 3
frame-ancestors 'self' experience.adobe.com aldinord.experiencecloud.adobe.com; default-src * 'unsafe-eval' 'unsafe-inline' data: blob: 3
frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com  https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com  https://app.accelus.com 3
object-src 'none'; form-action 'self' 3
default-src 'self'; connect-src *; style-src 'self' 'unsafe-inline'; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ioam.de *.nmrodam.com *.imrworldwide.com *.sensic.net *.bunchbox.co; img-src 'self' data: *.ardmediathek.de *.ard.de *.nmrodam.com *.imrworldwide.com *.argosdata.io *.bunchbox.co; media-src * mediastream: blob:; frame-src 'self' localhost:* *.ard.de *.nmrodam.com *.imrworldwide.com *.sensic.net *.ioam.de *.bunchbox.co; worker-src 'self' blob: 3
default-src 'self'  https://*.cms.vwfs.tools https://*.vwfsindia.co.in;  img-src 'self'  data:  https://cms-assets.vwfs.io https://*.cms.vwfs.tools https://*.volkswagenbank.de https://*.omtrdc.net https://*.demdex.net https://img.youtube.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://*.iadvize.com https://maps.googleapis.com https://maps.gstatic.com https://i.ytimg.com https://cm.everesttech.net  https://*.scene7.com https://*.userzoom.com https://smetrics.www.vwfs.de https://*.adform.net https://www.facebook.com https://*.linkedin.com https://t23.intelliad.de https://c.imedia.cz https://dev.day.com https://t.co https://www.google.com https://www.google.de;    script-src 'self'  'unsafe-inline' https://*.volkswagenbank.de https://*.iadvize.com https://*.youtube.com https://*.vimeo.com https://s.ytimg.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://maps.googleapis.com https://storagewebcalcweud.blob.core.windows.net https://www.volkswagenbank-cloud.de https://t23.intelliad.de https://t13.intelliad.de https://assets.adobedtm.com https://*.omtrdc.net https://*.omniture.com https://*.adobe.com https://*.demdex.net https://cm.everesttech.net https://*.userzoom.com https://*.adform.net https://connect.facebook.net https://www.googletagmanager.com https://c.imedia.cz https://www.seznam.cz https://*.thunderhead.com https://*.twitter.com https://*.fls.doubleclick.net https://static.ads-twitter.com https://www.googleadservices.com https://*.vwfsindia.co.in https://cc.cdn.civiccomputing.com https://*.advsearch.vwfs.io;  style-src 'self' 'unsafe-inline' https://*.iadvize.com https://fonts.googleapis.com https://*.userzoom.com https://*.vwfsindia.co.in;  connect-src 'self' https://vimeo.com    https://calculator.volkswagenbank.de https://*.iadvize.com wss://*.iadvize.com https://*.youtube.com https://cfpoi-search.p-sunhill.com https://apikeys.civiccomputing.com https://*.demdex.net https://cm.everesttech.net https://*.tt.omtrdc.net https://*.omtrdc.net *.2o7.net https://*.cms.vwfs.io https://*.advsearch.vwfs.io;  frame-ancestors 'self' https://vwfs.experiencecloud.adobe.com https://vwfs.marketing.adobe.com https://experience.adobe.com;  object-src 'none';  font-src 'self' https://fonts.gstatic.com ;  frame-src https://player.vimeo.com https://www.youtube-nocookie.com https://*.adform.net https://*.iadvize.com https://*.adobe.com https://*.omniture.com https://*.demdex.net https://*.fls.doubleclick.net https://vwfms.com https://online.flowpaper.com https://jobs.careerpage.fr https://faleconosco.bancovw.com.br https://atendimento-eletronico.bancovw.com.br https://www.vwfstools.co.uk; 3
default-src * data: blob: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; 3
default-src 'none'; font-src 'self' https://use.fontawesome.com https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zorgvoorbeter.nl https://*.kennispleingehandicaptensector.nl https://apps.elfsight.com https://*.vo.msecnd.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com https://code.jquery.com https://*.blueconic.net https://*.hotjar.com https://*.hotjar.io https://extend.vimeocdn.com https://www.google-analytics.com https://js.driftt.com https://connect.facebook.net https://www.youtube.com https://*.ytimg.com https://*.bizographics.com https://*.linkedin.com https://*.licdn.com; connect-src 'self' https://dc.services.visualstudio.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.blueconic.net https://api.ipify.org https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; img-src 'self' https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.vilans.nl https://*.blueconic.net https://*.linkedin.com data:; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://use.fontawesome.com https://*.blueconic.net; frame-src 'self' https://w.soundcloud.com https://www.youtube.com https://player.vimeo.com https://www.google.com https://www.facebook.com https://js.driftt.com https://*.hotjar.com https://www.veiligheid.nl; frame-ancestors 'self'; object-src 'self'; 3
frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: http: https: https://api.exponea.com https://www.googletagmanager.com https://www.google-analytics.com https://libs.de.coremetrics.com https://tmscdn.de.coremetrics.com https://20779843p.rfihub.com https://analytics-static.ugc.bazaarvoice.com https://api.sovendus.com https://api.trustedshops.com https://apps-stg.nexus.bazaarvoice.com https://apps.nexus.bazaarvoice.com https://appsapi.veinteractive.com https://ariane.abtasty.com https://bat.bing.com https://benefits.sovendus.com https://config1.veinteractive.com https://cookiee1.veinteractive.com https://datacollect6.abtasty.com https://dcinfos-cache.abtasty.com https://dcinfos.abtasty.com https://display-stg.ugc.bazaarvoice.com https://display.ugc.bazaarvoice.com https://drs2.veinteractive.com https://elk.vhwrz.net https://googleads.g.doubleclick.net https://images.baby-walz.at https://images.baby-walz.ch https://images.baby-walz.de https://insitez.blob.core.windows.net https://live.adyen.com https://magpie-static.ugc.bazaarvoice.com https://maps.googleapis.com https://maps.gstatic.com https://meya.ai https://network-eu-stg.bazaarvoice.com https://network.bazaarvoice.com https://rum.vhwrz.net https://s.kelkoogroup.net https://s.kk-resources.com https://s.ytimg.com https://s3.amazonaws.com https://sessionapi.veinteractive.com https://shops-si.trustedshops.com https://stg.api.bazaarvoice.com https://t13.intelliad.de https://t23.intelliad.de https://test.adyen.com https://trustbadge.api.etrusted.com https://try.abtasty.com https://widgets.trustedshops.com https://www.awin1.com https://www.billiger.de https://www.dwin1.com https://www.econda-monitor.de https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.sovendus.com; report-uri /walz-webservices/csp-report-collector 3
default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; style-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: 3
frame-ancestors 'self' https://*.facebook.com 3
default-src 'self' 'unsafe-inline' *.2degreesmobile.co.nz *.2degreesbroadband.co.nz *.2degrees.nz *.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com *.google-analytics.com *.lift.acquia.com *.sentry.io *.addsearch.com *.qualtrics.com *.youtube.com unpkg.com *.nice-incontact.com staticcdn.co.nz *.doubleclick.net *.google.com *.hotjar.com *.newrelic.com *.bugsnag.com *.nr-data.net *.googleadservices.com *.segment.com *.segment.io *.amplitude.com *.contentsquare.net blob:; object-src 'none'; img-src * data: 3
default-src 'self' static.mycity.travel static.www.villars-diablerets.ch * 'unsafe-inline' 'unsafe-eval' data: blob:; upgrade-insecure-requests; frame-ancestors: 'self' https://static.mycity.travel *; 3
frame-src 'self' *.jiathis.com *.baidu.com 3
frame-ancestors 'self' https://*.facebook.com; 3
frame-ancestors 'self'; form-action 'self' 3
frame-ancestors cuedev.ece.ksml.fi cue.media.fi; 3
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.amazonaws.com cdn.cookielaw.org privacyportal.onetrust.com www.google-analytics.com platform.twitter.com www.youtube.com agent.nuance-va.com *.nuance-va.com cocacolaco.tt.omtrdc.net *.doubleclick.net *.coca-colacompany.com www.google.com www.gstatic.com *.coke.com; img-src * data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn-social.janrain.com cdn.cookielaw.org geolocation.onetrust.com www.googletagmanager.com www.google-analytics.com platform.twitter.com www.instagram.com connect.facebook.net *.krxd.net *.amazonaws.com www.google.com www.youtube.com s.ytimg.com www.gstatic.com stackpath.bootstrapcdn.com *.coke.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' use.typekit.net p.typekit.net cdn-social.janrain.com cdn.cookielaw.org stackpath.bootstrapcdn.com *.coke.com; font-src 'self' use.typekit.net *.coke.com; frame-src 'self' * 3
default-src 'self' 'unsafe-inline' 'unsafe-eval' 3
script-src 'self' *.seksualiteit.nl *.seksindepraktijk.nl *.seksuelevorming.nl *.rutgers.international *.rutgers.nl *.weekvandelentekriebels.nl *.rutgers.ug *.rutgers.id *.anticonceptievoorjou.nl *.hotjar.com *.adform.net *.addthisedge.com *.addthis.com *.facebook.com *.newrelic.com *.nr-data.net *.cdn77.org *.ckeditor.com *.smartsupp-widget-161959.c.cdn77.org *.smartsuppchat.com *.adscience.nl *.bugherd.com *.googletagmanager.com *.googleapis.com *.pinterest.com *.readspeaker.com 'unsafe-inline' connect.facebook.net 'unsafe-eval' dev.visualwebsiteoptimizer.com *.google-analytics.com *.bootstrapcdn.com *.google.com *.gstatic.com *.typekit.net *.vimeocdn.com *.youtube.com *.ytimg.com *.fbcdn.net; style-src 'self' 'unsafe-inline' *.fonts.googleapis.com *.googleapis.com *.cdn77.org *.bootstrapcdn.com *.myfonts.net *.readspeaker.com *.youtube.com; font-src 'self' *.cdn77.org *.fonts.gstatic.com *.gstatic.com *.bootstrapcdn.com *.fonts.googleapis.com *.googleapis.com *.ckeditor.com *.newrelic.com; media-src * 'self' data: 3
default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval';script-src * data: blob: 'unsafe-inline' 'unsafe-eval';connect-src * data: blob:;img-src * data: blob: 'unsafe-inline';frame-src * data: blob:;style-src * data: blob: 'unsafe-inline';font-src * data: blob: 'unsafe-inline' 3
frame-ancestors http://webvisor.com 3
frame-ancestors 'none' ; 3
default-src data: https: 'self' 'unsafe-eval' 'unsafe-inline'; img-src data: https: 'self' 'unsafe-eval' 'unsafe-inline' 3
media-src 'self' *.ebaystatic.com; font-src 'self' *.ebaystatic.com 3
default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ https://duck.co ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; 3
frame-ancestors 'self' *.cms.snakeware.nl *.snakeware.nl *.snakeware.cloud *.snakeware.test 3
default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline'; 3
frame-ancestors 'self' https://control.studentpad.com https://control.pad-group.com https://control.localpad.co.uk https://control.lettingspad.co.uk https://sandbox.studentpad.co.uk; 3
default-src *; img-src * data:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; base-uri 'self'; form-action *; frame-ancestors * 3
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: ; frame-ancestors 'self' 3
default-src 'self' *.aticdn.net *.bootstrapcdn.com cdn.matomo.cloud *.clickdimensions.com *.comaweb.de data: *.easyway.site *.elfsquad.io *.firebot.io *.formsite.com *.galacticweb.net *.google.com *.google.de googleads.g.doubleclick.net *.googleapis.com www.googletagmanager.com *.gstatic.com *.msecnd.net *.netrk.net prod.purechatcdn.com *.purechat.com px.ads.linkedin.com *.randomuser.me randomuser.me s3-eu-west-1.amazonaws.com snap.licdn.com *.usercentrics.eu webasto-comfort.com *.webasto-comfort.com *.webasto.com webasto.matomo.cloud wss://firebot.galacticweb.net *.xiti.com *.youtube-nocookie.com *.youtube.com *.ytimg.com; style-src 'self' 'unsafe-inline' *.aticdn.net *.bootstrapcdn.com *.clickdimensions.com *.easyway.site *.elfsquad.io *.firebot.io *.formsite.com *.galacticweb.net *.googleapis.com *.gstatic.com *.msecnd.net *.netrk.net prod.purechatcdn.com *.purechat.com px.ads.linkedin.com *.randomuser.me snap.licdn.com *.webasto.com *.xiti.com *.youtube-nocookie.com *.youtube.com *.ytimg.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.aticdn.net *.bootstrapcdn.com cdn.matomo.cloud *.clickdimensions.com *.easyway.site *.elfsquad.io *.firebot.io firebot.io *.formsite.com *.galacticweb.net *.google.com *.google.de googleads.g.doubleclick.net *.googleadservices.com *.googleapis.com www.googletagmanager.com *.gstatic.com *.msecnd.net *.netrk.net prod.purechatcdn.com *.purechat.com px.ads.linkedin.com *.randomuser.me randomuser.me snap.licdn.com *.usercentrics.eu *.webasto.com webasto.matomo.cloud *.xiti.com *.youtube-nocookie.com *.youtube.com *.ytimg.com; 3
default-src 'self' 'unsafe-inline'; 3
default-src data: http: https: 'unsafe-inline' 'unsafe-eval' 3
default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src * 3
default-src https: data:; script-src https: data: 'self' 'unsafe-inline' 'unsafe-eval'; style-src https: 'self' 'unsafe-inline' 3
frame-ancestors 'self' learn.arcgis.com *.esri.com 3
img-src https://www.facebook.com https://abs.twimg.com https://pbs.twimg.com https://syndication.twitter.com https://platform.twitter.com www.google-analytics.com https://www.googletagmanager.com 'self' data:; 3
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.braintreegateway.com/ https://code.jquery.com/ https://cdnjs.cloudflare.com/ https://cdn.ckeditor.com/ https://www.google.com/ https://ajax.googleapis.com/ https://s3-us-west-2.amazonaws.com/; style-src 'self' 'unsafe-inline' https://cdn.ckeditor.com/ https://cdnjs.cloudflare.com/ https://code.jquery.com/ https://ajax.googleapis.com/; font-src 'self'; img-src 'self' data: https://cdn.ckeditor.com/ https://code.jquery.com/; frame-src 'self' https://www.openstreetmap.org/; frame-ancestors 'self'; connect-src 'self'; object-src 'self' 3
frame-ancestors 'self' godaddy.com *.godaddy.com test-godaddy.com *.test-godaddy.com dev-godaddy.com *.dev-godaddy.com 3
default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data:; media-src blob: data: https:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests 2
frame-ancestors 'self' *.wildberries.ru 2
frame-ancestors https://ads.idntimes.com https://fyi.idntimes.com 2
default-src 'self'; child-src 'self' http://127.0.0.1:8111 https://127.0.0.1:8112; connect-src 'self' piwik.openstreetmap.org https://nominatim.openstreetmap.org/ https://overpass-api.de/api/interpreter https://routing.openstreetmap.de/ https://graphhopper.com/api/1/route; font-src 'none'; form-action 'self' render.openstreetmap.org; frame-ancestors 'self'; frame-src 'self' http://127.0.0.1:8111 https://127.0.0.1:8112; img-src 'self' data: www.gravatar.com *.wp.com tile.openstreetmap.org *.tile.openstreetmap.org *.tile.thunderforest.com tileserver.memomaps.de *.openstreetmap.fr piwik.openstreetmap.org https://openstreetmap-user-avatars.s3.dualstack.eu-west-1.amazonaws.com; manifest-src 'self'; media-src 'none'; object-src 'self'; script-src 'self' piwik.openstreetmap.org; style-src 'self' 'unsafe-inline'; worker-src 'none' 2
upgrade-insecure-requests; default-src 'self' blob: *.brightcove.com ; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob: http: *.images.express.co.uk *.images.dailyexpress.co.uk; media-src https: data: blob:; font-src https: data:; frame-src https: data: blob:; connect-src https: wss: blob:; object-src https:; 2
frame-ancestors 'self' *.shopeemobile.com *.shopee.tw *.shopee.cn *.facebook.com;  2
default-src 'self' blob:; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://assets.adobedtm.com https://players.brightcove.net https://vjs.zencdn.net https://w3.siemens.com https://prod.ste.dc.siemens.com https://tools.adlytics.net https://www.googletagmanager.com https://connect.facebook.net https://snap.licdn.com https://www.googleadservices.com https://googleads.g.doubleclick.net; style-src 'report-sample' 'self' 'unsafe-inline' https://tools.adlytics.net; object-src https://players.brightcove.net https://w3.siemens.com; base-uri 'self'; connect-src 'self' https://*.execute-api.eu-west-1.amazonaws.com https://edge.api.brightcove.com https://house-fastly-signed-eu-west-1-prod.brightcovecdn.com https://manifest.prod.boltdns.net https://metrics.brightcove.com https://new.siemens.com https://assets.new.siemens.com https://api.dc.siemens.com https://w3.siemens.com https://searchapi.new.siemens.com https://privacyportal-eu.onetrust.com https://siemens.sc.omtrdc.net https://siemens.tt.omtrdc.net https://*.demdex.net https://tools.adlytics.net blob:; font-src 'self' https://www.siemens.com https://tools.adlytics.net data:; frame-src 'self'; img-src 'self' https://assets.new.siemens.com https://cf-images.eu-west-1.prod.boltdns.net https://metrics.brightcove.com https://siemens.sc.omtrdc.net https://siemens.tt.omtrdc.net https://*.demdex.net https://tools.adlytics.net https://new.siemens.com https://w3.siemens.com https://px.ads.linkedin.com https://www.facebook.com https://www.google.com https://www.google.de data:; manifest-src 'self'; media-src 'self' https://manifest.prod.boltdns.net https://house-fastly-signed-eu-west-1-prod.brightcovecdn.com blob:; worker-src blob:; report-uri https://report-uri.dc.siemens.com/ 2
upgrade-insecure-requests; default-src https: wss: data: blob: 'unsafe-inline' 'unsafe-eval' 2
frame-ancestors 'self' http://*.schwabplan.com https://*.schwabplan.com http://*.schwab.com https://*.schwab.com https://content.schwab.com http://content.schwab.com https://client.schwab.com https://lms.schwab.com https://www.schwabcdn.com https://*.schwabinstitutional.com https://*.dev-schwab.acsitefactory.com https://*.test-schwab.acsitefactory.com https://*.train-schwab.acsitefactory.com https://*.schwab.acsitefactory.com https://*.schwab.co.uk https://*.schwab.com.hk https://*.schwab.com.sg https://*.schwab.com.au https://*.schwabcharitable.org https://*.schwabmoneywise.com https://*.schwabsavingsfundamentals.com https://*.schwabbankfunds.com https://*.schwabadvisorcenter.com https://*.schwabfunds.com https://*.schwabpt.com https://*.windhaveninvestments.com https://*.schwab.tech http://www.schwabintelligenttechnologies.com https://www.schwabintelligenttechnologies.com https://*.wallst.com http://*.wallst.com https://*.aboutschwab.com 2
default-src 'self' https://static.garmin.com https://static.garmincdn.com https://www.garmin.com; style-src https://my.tealiumiq.com 'unsafe-inline' 'self' https://fonts.googleapis.com https://static.garmin.com https://static.garmincdn.com https://sso.garmin.com https://www.garmin.com; connect-src 'self' https://static.garmincdn.com https://www.garmin.com *; script-src * 'unsafe-inline' 'unsafe-eval' https://consent.trustarc.com https://consent-pref.trustarc.com https://consent-st.trustarc.com https://tracker-api.trustarc.com https://consent.truste.com https://consent-pref.truste.com https://consent-st.trustecom https://tracker-api.truste.com https://prefmgr-cookie.truste-svc.net; font-src 'self' data: https://static.garmin.com https://static.garmincdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.garmin.com; img-src *; frame-src https://sso.garmin.com https://sso.garmin.cn https://www.garmin.com https://my.tealiumiq.com https://static.garmincdn.com https://support.garmin.com https://www.google.com https://vars.hotjar.com https://www.youtube.com https://player.youku.com https://consent.trustarc.com https://consent-pref.trustarc.com https://consent-st.trustarc.com https://tracker-api.trustarc.com https://consent.truste.com https://consent-pref.truste.com https://consent-st.trustecom https://tracker-api.truste.com https://prefmgr-cookie.truste-svc.net; object-src 'none'; upgrade-insecure-requests 2
default-src http: https: data: blob:; media-src http: https: data: blob:; img-src http: https: data: blob:; script-src http: https: data: 'unsafe-inline' 'unsafe-eval'; style-src http: https: data: 'unsafe-inline' 'unsafe-eval'; connect-src http: https: data:; worker-src http: https: data: blob:; font-src http: https: data:; 2
default-src 'none'; connect-src 'self' www.linkedin.com www.google-analytics.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; script-src 'self' 'sha256-DwtT8+ZZKpxH9pqZNAmJ3GdbLAh5SsYaXR3omTXPCns=' 'sha256-sV9jZa797T0QWBzcU/CNd4tpBhTnh+TFdLnfjlitl28=' 'sha256-aa/Q8CRBDSqTQbCIyioPhZaz+G+dbPyu7BzsjInEmiU=' 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-zTIusdVJJeXz9+iox2a+pdDglzbpRpFVRzEwvW4AONk=' 'sha256-iC8MPqNLw0FDnsBf4DlSkFLNTwhkI85aouiAEB819ic=' 'sha256-y5uW69VItKj51mcc7UD9qfptDVUqicZL+bItEpvVNDw=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' snap.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; img-src data: blob: * android-webview-video-poster:; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src dms.licdn.com *.lynda.com; child-src blob: lnkd-communities: voyager: *; frame-src 'self' https://www.youtube.com/embed/ https://www.youtube-nocookie.com/embed/ lnkd.demdex.net https://smartlock.google.com/ https://accounts.google.com/ linkedin.cdn.qualaroo.com player.vimeo.com www.linkedin.com www.slideshare.net *.megaphone.fm msit.powerbi.com app.powerbi.com linkedin.github.io; manifest-src 'self'; report-uri https://www.linkedin.com/platform-telemetry/csp?f=gg 2
frame-ancestors 'self' *.mathworks.com feedads.baidu.com; 2
frame-ancestors na.amzheimdall.com delorean-na.amazon.com delorean-prod.corp.amazon.com delorean-na.sandbox.amazon.com delorean-sandbox.corp.amazon.com delorean-preprod.corp.amazon.com delorean-beta.corp.amazon.com delorean-alpha.corp.amazon.com potserviceui-gamma.vrsnl.com potserviceui-gamma.findzen.com potserviceui-gamma.zappos.com potserviceui-gamma.6pm.com drive-render.corp.amazon.com cscentral-na-beta.vipinteg.amazon.com cscentral.amazon.com delorean-6pm-gamma.corp.amazon.com delorean-6pm-preprod.corp.amazon.com delorean-6pm-prod.corp.amazon.com delorean-6pm-na.amazon.com; report-uri /marty/api/csp-report 2
frame-ancestors 'self' *.benzinga.com 2
frame-ancestors 'self' *.sc.com *.standardchartered.com *.standardchartered.co.in *.standardchartered.co.th *.standardchartered.com.hk *.standardchartered.com.my *.standardchartered.com.sg *.standardchartered.co.id *.standardchartered.com.tw standchartbank.experiencecloud.adobe.com experience.adobe.com 2
default-src * 'unsafe-inline'; img-src * data: blob:; frame-ancestors 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; media-src * blob:; worker-src 'self' blob:; style-src * blob: 'unsafe-inline' 'unsafe-eval' 2
default-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' * https://www.google-analytics.com https://optimize.google.com https://optanon.blob.core.windows.net http://*.hotjar.com https://*.onetrust.com https://www.googletagmanager.com https://connect.facebook.net *.rfihub.net *.bing.com *.ads-twitter.com *.twitter.com *.t.co *.ytimg.com; style-src 'self' 'unsafe-inline' * blob: https://optimize.google.com https://fonts.googleapis.com https://optanon.blob.core.windows.net cdnjs.cloudflare.com cloud.typography.com *.twitter.com *.t.co ; img-src 'self' 'unsafe-inline' data: * https://www.google-analytics.com https://optimize.google.com https://code.jquery.com/ *.twitter.com *.facebook.com *.bing.com *.t.co; frame-src 'self' data: * https://optimize.google.com https://*.adsrvr.org *.rfihub.com; font-src 'self' 'unsafe-inline' data: * https://fonts.gstatic.com cdnjs.cloudflare.com; connect-src 'self' * https://*.optmnstr.com; report-uri /report-csp-violation 2
frame-ancestors https://*.swissinfo.ch 2
upgrade-insecure-requests; media-src https: blob:; child-src https: blob:; default-src https: wss: 'unsafe-inline' 'unsafe-eval' data:; font-src https: data:; img-src https: data:; 2
frame-ancestors 'self' http://localhost:* https://*.bustle.com 2
frame-ancestors https://ads.idntimes.com 2
'frame-ancestors' http://localhost:8100 https//*.tn.gov 2
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: *.adroll.com d.adroll.mgr.consensu.org *.dca0.com *.adyen.com *.akamaihd.net *.go-mpulse.net *.akstat.io *.aexp-static.com *.americanexpress.com app.link tag.yieldoptimizer.com hm.baidu.com *.bambuser.com x.bidswitch.net bat.bing.com *.branch.io s.thebrighttag.com s.btstatic.com *.brightcove.com *.brightcove.net dpdb.webvr.rocks *.burberry.com burberry.com cdnjs.cloudflare.com *.contentsquare.net script.crazyegg.com *.doubleclick.net connect.facebook.net www.facebook.com *.fitanalytics.com reporting.us1.fredhopperservices.com d1snv67wdds0p2.cloudfront.net *.googleapis.com *.googlesyndication.com *.gstatic.com adservice.google.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.googletagservices.com cdn.grata.cn *.usehero.com *.twilio.com wss://*.us1.twilio.com wss://*.eu1.twilio.com *.ipinyou.com www.ist-track.com x.klarnacdn.net *.klarna.com *.liveperson.net wss://*.liveperson.net *.lpsnmedia.net *.mathtag.com service.maxymiser.net bam.nr-data.net bam-cell.nr-data.net js-agent.newrelic.com cdn.cookielaw.org geolocation.onetrust.com privacyportal-eu.onetrust.com *.online-metrix.net *.openx.net *.optimizely.com cdn-assets-prod.s3.amazonaws.com optimizely.s3.amazonaws.com www.personifyxpassets.com 7vr7bv2vla.execute-api.eu-west-1.amazonaws.com ct.pinterest.com s.pinimg.com bookings.qudini.com bookings-us.qudini.com po.st s.po.st rp.gwallet.com *.rakuten.com *.nxtck.com *.xg4ken.com *.linksynergy.com intljs.rmtag.com ln-rules.rewardstyle.com *.richrelevance.com *.riskified.com sb.scorecardresearch.com *.shoprunner.com *.shoprunner.net shopstylecollective.com i.simpli.fi d1fc8wv8zag5ca.cloudfront.net *.sonobi.com *.spotify.com t.a3cloud.net p.teads.tv idsync.rlcdn.com *.turn.com analytics.twitter.com static.ads-twitter.com platform.twitter.com vjs.zencdn.net sp.analytics.yahoo.com s.yimg.com s.yimg.jp b97.yahoo.co.jp mc.yandex.ru *.zooz.com; style-src * data: 'unsafe-inline'; img-src * data:; font-src * data:; media-src * blob:; object-src 'self'; frame-ancestors 'self' *.burberry.com burberry.com; upgrade-insecure-requests; base-uri 'self'; report-uri https://brby.report-uri.com/r/t/csp/enforce 2
default-src 'self'  https://analytics.govinfo.gov https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self'   https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com; object-src 'unsafe-inline' 'self' ; style-src 'unsafe-inline' 'self' https://maxcdn.bootstrapcdn.com   https://stackpath.bootstrapcdn.com https://fonts.googleapis.com; img-src 'unsafe-inline' 'self' http://insideanalytics.gpo.gov https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com  https://analytics.govinfo.gov data:; font-src 'unsafe-inline' 'self'  https://stackpath.bootstrapcdn.com  https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self'; frame-src 'self'  https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com; 2
frame-ancestors 'self' icrc.org *.icrc.org icrcproject.org *.icrcproject.org forum-icrc.org www.forum-icrc.org 2
default-src 'self'; connect-src 'self' *.consumerfinance.gov *.google-analytics.com *.tiles.mapbox.com api.mapbox.com bam.nr-data.net s3.amazonaws.com public.govdelivery.com n2.mouseflow.com api.iperceptions.com *.qualtrics.com; img-src 'self' *.consumerfinance.gov www.ecfr.gov s3.amazonaws.com www.gstatic.com ssl.gstatic.com stats.g.doubleclick.net img.youtube.com *.google-analytics.com trk.cetrk.com searchstats.usa.gov gtrk.s3.amazonaws.com *.googletagmanager.com tagmanager.google.com maps.googleapis.com optimize.google.com api.mapbox.com *.tiles.mapbox.com stats.search.usa.gov blob: data: www.facebook.com www.gravatar.com *.qualtrics.com; style-src 'self' 'unsafe-inline' *.consumerfinance.gov fast.fonts.net tagmanager.google.com optimize.google.com api.mapbox.com fonts.googleapis.com; media-src 'self' *.consumerfinance.gov; font-src 'self' data: *.consumerfinance.gov fast.fonts.net fonts.google.com fonts.gstatic.com; frame-src 'self' *.consumerfinance.gov *.googletagmanager.com *.google-analytics.com optimize.google.com www.youtube.com *.doubleclick.net universal.iperceptions.com www.facebook.com staticxx.facebook.com mediasite.yorkcast.com *.qualtrics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.consumerfinance.gov *.google-analytics.com *.googletagmanager.com tagmanager.google.com optimize.google.com ajax.googleapis.com search.usa.gov api.mapbox.com js-agent.newrelic.com dnn506yrbagrg.cloudfront.net bam.nr-data.net *.youtube.com *.ytimg.com trk.cetrk.com universal.iperceptions.com cdn.mouseflow.com n2.mouseflow.com us.mouseflow.com geocoding.geo.census.gov tigerweb.geo.census.gov about: connect.facebook.net www.federalregister.gov storage.googleapis.com *.qualtrics.com 2
frame-ancestors 'self' btprt.dj snip.ly 2
frame-ancestors *.cox.net *.cox.com *.coxbusiness.com coxcommunications.experiencecloud.adobe.com *.discovercoxonline.com agent.bold360.com *.cox-ondemand.com *.yext-cdn.com *.yextpages.net 2
default-src 'self' data: https://*.commerce.gov https://*.mbda.gov https://*.d.commerce.gov https://content.govdelivery.com https://www.google-analytics.com https://use.fontawesome.com https://dap.digitalgov.gov https://*.twitter.com https://*.twimg.com https://*.youtube.com https://livestream.com https://*.livestream.com https://api.new.livestream.com https://rev-vbrick.uspto.gov https://*.facebook.com https://*.mapbox.com https://*.cloudflare.com https://*.tile.openstreetmap.org https://git.commerce.gov https://cdn.siteimprove.net https://youtube-nocookie.com https://www.youtube-nocookie.com https://*.uspto.gov 'unsafe-inline' 'unsafe-eval' ;upgrade-insecure-requests;  2
frame-ancestors 'self' http://www.farmzone.com https://www.farmzone.com http://www.zoneverte.com https://www.zoneverte.com http://widget.twnmm.com https://widget.twnmm.com https://s1.twnmm.com http://beta.theweathernetwork.com https://beta.theweathernetwork.com http://beta.meteomedia.com https://beta.meteomedia.com http://*.theweathernetwork.com https://*.theweathernetwork.com http://*.meteomedia.com https://*.meteomedia.com https://www.flonase.ca 2
upgrade-insecure-requests; frame-ancestors 'self' https://stackexchange.com 2
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; child-src * 'unsafe-inline' 'unsafe-eval' data: blob:; connect-src * 'unsafe-inline' 'unsafe-eval' data: blob:; font-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' admin.reverb.tools; media-src * 'unsafe-inline' 'unsafe-eval' data: blob: 2
default-src 'self' https: data: 'unsafe-eval' 'unsafe-inline' blob:; object-src 'self'; img-src 'self' http: data: 2
default-src https: data: blob: chrome-extension: android-webview-video-poster: ms-appx-web: 'unsafe-eval' 'unsafe-inline'; report-uri /content-security-policy-report.php 2
frame-ancestors 'self' http://*.stumbleupon.com https://*.stumbleupon.com http://*.medpagetoday.com https://*.medpagetoday.com; 2
frame-src https://*.doubleclick.net:* https://*.facebook.com:* https://*.google.com:* https://*.soundcloud.com:* https://*.spotify.com:* https://*.twitter.com:* https://*.vimeo.com:* https://*.youtube.com:*; frame-ancestors 'self'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com/beacon.min.js https://en.wikipedia.org https://commons.wikimedia.org https://www.mediawiki.org https://code.highcharts.com https://ajax.cloudflare.com/ https://cdnjs.cloudflare.com/ajax/libs/Chart.js/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://www.googletagmanager.com https://*.weirdgloop.org https://*.runescape.wiki https://unpkg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://en.wikipedia.org https://commons.wikimedia.org https://www.mediawiki.org https://unpkg.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://soundcloud.com https://*.weirdgloop.org https://*.runescape.wiki https://*.googleapis.com https://www.google-analytics.com; frame-src https://w.soundcloud.com www.google.com; frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests; base-uri 'self' 2
default-src 'self' *.maybank2u.com.my *.google-analytics.com *.googlesyndication.com *.doubleclick.net *.useinsider.com https://perfectsencollector.com *.google.com  https://analytics.google.com *.googleapis.com *.googletagmanager.com; object-src *.maybank2u.com.my; style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com; style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.google.com *.gstatic.com; font-src *.gstatic.com *.maybank2u.com.my *.google.com; script-src 'self' *.maybank2u.com.my *.google-analytics.com *.googletagmanager.com *.googlesyndication.com *.googleapis.com 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.mbww.com *.useinsider.com https://connect.facebook.net *.googleadservices.com *.google.com *.gstatic.com; frame-src 'self' *.maybank2u.com.my *.useinsider.com https://unity.cadreon.com *.doubleclick.net *.youtube.com *.google.com; img-src 'self' data: blob: *.maybank2u.com.my https://emerchant.maybank2u.com.my:8443 *.google-analytics.com *.googlesyndication.com *.doubleclick.net https://www.google.com https://www.google.com.my https://www.google.com.sg https://www.google.co.in https://www.google.co.id https://www.facebook.com/tr/ *.useinsider.com www.maybank.com *.gstatic.com *.googleapis.com http://dbv47yu57n5vf.cloudfront.net https://perfectsencollector.com *.amazonaws.com *.oto.my *.googletagmanager.com *.youtube.com 2
frame-ancestors 'self' investor.cmegroup.com  http://investor.cmegroup.com *.quikstrike.net commodex.co.il openexchange.community.cmegroup.com staging.tickertocker.com http://www.straitsfinancial.com  www.straitsfinancial.com http://straitsfinancial.com https://datamine.cmegroup.com http://dataminelocal.cmegroup.com https://dataminedev.cmegroup.com https://login.cmegroup.com https://www.home.saxo https://go.cmegroup.com https://app.topsteptrader.com https://help.topsteptrader.com https://staging.topsteptrader.com https://blueeditsitecore.sys.dom https://bluesitecore.sys.dom https://sitecoredev.orange.saxobank.com https://sitecoredev-nocache.orange.saxobank.com https://sitecoredevedit.orange.tst2.dom http://star-website.com  https://www.investing.com https://www.benzinga.com https://m.benzinga.com https://amp.benzinga.com https://bz.zingbot.bz https://www.zingbot.bz https://gdcdyn.interactivebrokers.com https://www.interactivebrokers.com  https://benzinga.com https://www.benzinga.com https://m.benzinga.com  https://bz.benzinga.com https://zingbot.bz https://www.zingbot.bz https://m.zingbot.bz https://bz.zingbot.bz https://dev.futuresfirstacademy.com https://uat.futuresfirstacademy.com https://futuresfirstacademy.com http://stage.barchart.com http://www.barchart.com https://stage.barchart.com https://www.barchart.com https://www.infinityfutures.com https://datamineuat.cmegroup.com https://next.benzinga.com https://quotes.benzinga.com https://kilofutures.com https://m.cqg.com https://mdemo.cqg.com https://uatm.cqg.com  https://local.zingbot.bz https://www.gulfbondsukuk.org www.kgieworld.sg https://www.propex24.wpcomstaging.com https://www.propex24.com *.straitsfinancial.gate39tech.com us.straitsfinancial.com https://*.kapcoclients.com https://kapcoclients.com https://*.wallstreetbound.org https://wallstreetbound.org https://cofcointl.plateau.com https://rise.articulate.com https://members.tradeday.com; 2
connect-src 'self' https://*.google-analytics.com https://*.doubleclick.net https://*.index-education.com http://*.index-education.com http://*.datatables.net https://www.googleapis.com;default-src 'self' *.bootstrapcdn.com *.google-analytics.com *.gstatic.com https://*.index-education.com http://*.index-education.com;frame-ancestors 'self' ;frame-src http://*.index-education.net https://*.index-education.net *.hyperplanning.fr http://*.vimeo.com https://vimeo.com https://*.vimeo.com https://www.youtube.com https://*.google.com https://*.index-education.com http://*.index-education.com http://index-education.com;media-src 'self' https://*.vimeo.com https://vimeo.com https://*.index-education.com http://*.index-education.com;object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.adobe.com *.cloudflare.com https://www.googletagmanager.com https://*.vimeo.com https://vimeo.com https://*.vimeocdn.com https://*.google.com *.gstatic.com code.jquery.com http://*.google-analytics.com https://*.google-analytics.com *.datatables.net https://*.index-education.com http://*.index-education.com https://*.bootstrapcdn.com http://index-education.com;style-src 'self' 'unsafe-inline' http://*.googleapis.com https://*.googleapis.com *.bootstrapcdn.com https://*.index-education.com http://*.index-education.com;font-src 'self' *.bootstrapcdn.com *.gstatic.com https://*.index-education.com http://*.index-education.com;img-src 'self' *.google-analytics.com *.gstatic.com *.doubleclick.net *.google.com *.google.fr data:; 2
default-src * data: blob: 'unsafe-eval' 'unsafe-inline' 2
default-src * data: blob: ;script-src * 'self' 'unsafe-inline' 'unsafe-eval' ;worker-src * blob: ;style-src * 'unsafe-inline' data: ;frame-ancestors 'self' static-s.aa-cdn.net *.appannie.com *.appannie.com.cn *.appannie.org;img-src * data: blob: ;font-src * data: ;media-src * data: blob: ;base-uri 'self' d6tizftlrpuof.cloudfront.net manifest.prod.boltdns.net secure.brightcove.com ;connect-src * data: blob: wss://api.appcues.net;report-uri https://sentry.smart-sense.org/api/96/csp-report/?sentry_key=28d56c139d1542a19730a3eb84757027; 2
style-src 'self' 'unsafe-inline'; 2
frame-ancestors 'self' t4.scu.edu cms.scu.edu cms01.scu.edu thetrustproject.org media.scu.edu ecampus.scu.edu hrdev.scu.edu hrusr.scu.edu t4dev.scu.edu 166.78.46.137 campaign.scu.edu vanillasoft.net 2
frame-ancestors 'self' https://*.rightmessage.com; 2
frame-ancestors 'self' https://epr.onepath.com.au https://eprotectpriv.service.anz https://eprotect.service.anz https://eprotectauth.service.anz https://eprotect; 2
frame-ancestors 'self' https://sr.se https://*.sr.se https://sverigesradio.se https://*.sverigesradio.se http://*.dm.sr.se https://*.dm.sr.se; report-uri /csp-error; 2
frame-ancestors 'self' https://www.grainger.com; 2
frame-ancestors 'self' http://info.barchart.com 2
frame-ancestors 'self' localhost *.teamwork.com *.teamworkpm.net teams.microsoft.com *.teams.microsoft.com *.skype.com teamworkintegrations.ngrok.io *.us.teamworkops.com; 2
font-src https://cdnjs.cloudflare.com data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://staging-static-eu.christianlouboutin.com https://staging-eu.christianlouboutin.com https://staging-admin-eu.christianlouboutin.com https://static-eu.christianlouboutin.com https://prod-eu.christianlouboutin.com https://eu.christianlouboutin.com https://admin-eu.christianlouboutin.com *.iadvize.com *.iadvize.net wss://xmpp-sd-alb.iadvize.com/websocket https://s3-eu-central-1.amazonaws.com wss://cobrowsing.iadvize.com/socket.io 'self' 'unsafe-inline'; form-action https://www.facebook.com https://idcheck.acs.touchtechpayments.com/v1/payerAuthentication https: https://cs22.salesforce.com/ https://webto.salesforce.com/ https://*/* 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src www.paypal.com www.sandbox.paypal.com https://player.freecaster.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live-us.adyen.com https://checkoutshopper-live-au.adyen.com https://www.facebook.com https://www.youtube.com https://vimeo.com https://s7.addthis.com https: 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com data: https://www.facebook.com https://www.facebook.com/tr/* https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://stats.g.doubleclick.net https://bat.bing.com https://www.google.com https://www.google.fr https://www.google.at https://maps.gstatic.com https://maps.googleapis.com https://chart.googleapis.com https://staging-static-eu.christianlouboutin.com https://staging-eu.christianlouboutin.com https://staging-admin-eu.christianlouboutin.com https://static-eu.christianlouboutin.com https://prod-eu.christianlouboutin.com https://eu.christianlouboutin.com https://admin-eu.christianlouboutin.com *.gstatic.com https://lh3.googleusercontent.com *.iadvize.com *.iadvize.net wss://xmpp-sd-alb.iadvize.com/websocket https://s3-eu-central-1.amazonaws.com wss://cobrowsing.iadvize.com/socket.io https://googleads.g.doubleclick.net 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com https://cdnjs.cloudflare.com https://staging-static-eu.christianlouboutin.com https://staging-eu.christianlouboutin.com https://staging-admin-eu.christianlouboutin.com https://static-eu.christianlouboutin.com https://prod-eu.christianlouboutin.com https://eu.christianlouboutin.com https://admin-eu.christianlouboutin.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com *.iadvize.com *.iadvize.net https://cdn.mxpnl.com wss://xmpp-sd-alb.iadvize.com/websocket https://s3-eu-central-1.amazonaws.com wss://cobrowsing.iadvize.com/socket.io data: *.google.com *.googletagmanager.com https://polyfill.io https://vimeo.com https://www.youtube.com www.gstatic.com https://bat.bing.com https://maps.googleapis.com https://c.la1-c2-ord.salesforceliveagent.com https://www.google.com https://www.gstatic.com https://bat.bing.com/bat.js https://*.facebook.net https://connect.facebook.net https://s7.addthis.com https://m.addthis.com https://v1.addthisedge.com https://z.moatads.com https://assets.pinterest.com https://widgets.pinterest.com https://graph.facebook.com https://d.line-scdn.net https://analytics.tiktok.com https://sf16-scmcdn-va.ibytedtos.com https://f.vimeocdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com https://fonts.googleapis.com https://cdnjs.cloudflare.com data: https://maxcdn.bootstrapcdn.com https://staging-static-eu.christianlouboutin.com https://staging-eu.christianlouboutin.com https://staging-admin-eu.christianlouboutin.com https://static-eu.christianlouboutin.com https://prod-eu.christianlouboutin.com https://eu.christianlouboutin.com https://admin-eu.christianlouboutin.com https://tagmanager.google.com *.iadvize.com *.iadvize.net wss://xmpp-sd-alb.iadvize.com/websocket https://s3-eu-central-1.amazonaws.com wss://cobrowsing.iadvize.com/socket.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src https://player.vimeo.com https://vod-progressive.akamaized.net https://www.vimeo.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src https://us-central1-data-hal-9000.cloudfunctions.net *.algolia.net https://www.google-analytics.com https://stats.g.doubleclick.net https://bat.bing.com https://staging-static-eu.christianlouboutin.com https://staging-eu.christianlouboutin.com https://staging-admin-eu.christianlouboutin.com https://static-eu.christianlouboutin.com https://prod-eu.christianlouboutin.com https://eu.christianlouboutin.com https://admin-eu.christianlouboutin.com https://s7.addthis.com https://api-js.mixpanel.com *.iadvize.com *.iadvize.net https://www.facebook.com https://www.facebook.com/tr/* https://pinterest.com https://google.com wss://xmpp-sd-alb.iadvize.com/websocket https://s3-eu-central-1.amazonaws.com wss://cobrowsing.iadvize.com/socket.io https://analytics.tiktok.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
frame-ancestors 'self' libertystreeteconomics.newyorkfed.org; 2
frame-ancestors 'self' http://redhat.lookbookhq.com https://redhat.lookbookhq.com; report-uri /report-csp-violation 2
frame-ancestors 'self' https://*.movavi.de https://*.movavi.com https://*.movavi.ru http://webvisor.com 2
frame-ancestors 'self' *.qnap.com *.qnap.com.tw 2
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' http://img.youtube.com 2
report-uri https://csp.rz.uni-kiel.de/report; report-to csp; upgrade-insecure-requests; 2
default-src 'self' *.beeline.ru *.oktaplan.ru *.fls.doubleclick.net suggestions.dadata.ru ad.mail.ru ads.betweendigital.com *.ads.betweendigital.com adservice.google.com an.yandex.ru *.rutarget.ru *.g.doubleclick.net mc.yandex.ru *.google.com sync.upravel.com top-fwz1.mail.ru vk.com connect.facebook.net www.facebook.com www.google.ru www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com static.criteo.net *.tmcrussia.com sslwidget.criteo.com dis.eu.criteo.com api-maps.yandex.ru enterprise.api-maps.yandex.ru api.flocktory.com flocktory.com api.mindbox.ru *.artfut.com click.adkratos.ru code.jquery.com fullstory.com bn.adblender.ru aprtx.com aprtn.com px.adhigh.net mod.calltouch.ru *.googleapis.com www.youtube.com st.yagla.ru k50-a.akamaihd.net *.k50.ru *.ruru.ru widgets.mos.ru *.kaspersky-labs.com *.popmechanic.ru metrika.yandex.ru *.yandex.tld *.yandex.net webvisor.com *.carrotquest.io yastatic.net *.gdeslon.ru gdeslon.ru *.aebdgd.ru aebdgd.ru *.s4fmvl.ru s4fmvl.ru go.epnbest.bz c.4clouds.org *.witstroom.com *.witstroom.com:8080 *.dashamail.com *.onesignal.com onesignal.com suggest-maps.yandex.ru *.maps.yandex.ru 'unsafe-inline'; frame-src *; media-src *; img-src * data: blob:; font-src *.beeline.ru data:; script-src 'self' *.beeline.ru *.oktaplan.ru *.fls.doubleclick.net kasko-osago-online.ru ad.mail.ru ads.betweendigital.com *.ads.betweendigital.com adservice.google.com an.yandex.ru *.rutarget.ru *.g.doubleclick.net mc.yandex.ru *.google.com sync.upravel.com top-fwz1.mail.ru vk.com connect.facebook.net www.facebook.com www.google.ru www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com static.criteo.net *.tmcrussia.com sslwidget.criteo.com dis.eu.criteo.com api-maps.yandex.ru enterprise.api-maps.yandex.ru api.flocktory.com flocktory.com api.mindbox.ru *.artfut.com click.adkratos.ru code.jquery.com fullstory.com bn.adblender.ru aprtx.com aprtn.com px.adhigh.net mod.calltouch.ru *.googleapis.com www.youtube.com st.yagla.ru k50-a.akamaihd.net *.k50.ru *.ruru.ru widgets.mos.ru *.kaspersky-labs.com *.popmechanic.ru metrika.yandex.ru *.yandex.tld *.yandex.net webvisor.com *.carrotquest.io yastatic.net  *.gdeslon.ru gdeslon.ru *.aebdgd.ru aebdgd.ru *.s4fmvl.ru s4fmvl.ru go.epnbest.bz c.4clouds.org *.witstroom.com *.witstroom.com:8080 *.dashamail.com *.onesignal.com onesignal.com suggest-maps.yandex.ru *.maps.yandex.ru 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.beeline.ru metrika.yandex.ru mc.yandex.ru http://webvisor.com *.yandex.net *.mtproxy.yandex.net *.yandex.tld yastatic.net; connect-src 'self' *.beeline.ru *.oktaplan.ru *.fls.doubleclick.net suggestions.dadata.ru kasko-osago-online.ru ad.mail.ru ads.betweendigital.com *.ads.betweendigital.com adservice.google.com an.yandex.ru *.rutarget.ru *.g.doubleclick.net mc.yandex.ru *.google.com sync.upravel.com top-fwz1.mail.ru vk.com connect.facebook.net www.facebook.com www.google.ru www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com static.criteo.net *.tmcrussia.com sslwidget.criteo.com dis.eu.criteo.com api-maps.yandex.ru enterprise.api-maps.yandex.ru api.flocktory.com flocktory.com api.mindbox.ru *.artfut.com click.adkratos.ru code.jquery.com fullstory.com bn.adblender.ru aprtx.com aprtn.com px.adhigh.net mod.calltouch.ru *.googleapis.com www.youtube.com st.yagla.ru k50-a.akamaihd.net *.k50.ru *.ruru.ru widgets.mos.ru *.kaspersky-labs.com *.popmechanic.ru metrika.yandex.ru *.yandex.tld *.yandex.net webvisor.com *.carrotquest.io wss://*.carrotquest.io yastatic.net *.gdeslon.ru gdeslon.ru *.aebdgd.ru aebdgd.ru *.s4fmvl.ru s4fmvl.ru go.epnbest.bz c.4clouds.org *.witstroom.com *.witstroom.com:8080 anketa.alfabank.ru *.dashamail.com *.onesignal.com onesignal.com suggest-maps.yandex.ru *.maps.yandex.ru 'unsafe-inline' 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.ads-twitter.com analytics.twitter.com analytics.tiktok.com sf16-scmcdn-va.ibytedtos.com www.gstatic.com www.google.com www.googletagmanager.com www.google-analytics.com *.appboycdn.com; style-src 'self' 'unsafe-inline'; connect-src 'self' www.google-analytics.com stats.g.doubleclick.net life360.zendesk.com  *.greenhouse.io *.braze.com; img-src 'self' *.cloudfront.net *.locationiq.org life360-wordpress.s3.amazonaws.com life360.zendesk.com www.googletagmanager.com www.google-analytics.com *.google.com t.co www.facebook.com *.ytimg.com data: *.gravatar.com; child-src 'self' www.youtube-nocookie.com www.google.com; font-src 'self' data:; 2
frame-ancestors https://*.1stdibs.com; 2
frame-ancestors 'self' https://mtt-live.apps.emea.vwapps.io https://mtt-live-blue.apps.emea.vwapps.io https://mtt.apps.emea.vwapps.io https://mtt-blue.apps.emea.vwapps.io http://mtt-local.apps.emea.vwapps.io; 2
child-src * blob: 2
frame-ancestors 'self' https://*.theactivetimes.com https://*.thedailymeal.com https://*.doubleclick.net https://*.googlesyndication.com https://*.rubiconproject.com https://*.adnxs.com https://*.openx.net https://*.casalemedia.com 2
default-src 'self' data: gap: https://*.maersk.com https://*.maersk.com.cn https://*.maerskline.com https://*.apmoller.net https://*.go-mpulse.net https://*.salesforceliveagent.com https://*.force.com *.mpstat.us *.akstat.io https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.akamaihd.net https://*.igodigital.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://rum-http-intake.logs.datadoghq.eu https://100qrcey9nsltilmpwezagts.blob.core.windows.net https://*.cookieinformation.com https://*.bing.com https://*.virtualearth.net https://*.visualforce.com https://*.contentsquare.net https://*.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.maersk.com https://*.maersk.com.cn https://*.maerskline.com https://*.apmoller.net https://*.akamaihd.net https://*.salesforceliveagent.com https://*.force.com https://*.salesforce.com https://*.steelcentral.net *.mpstat.us *.akstat.io https://*.igodigital.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://pub.s1.exacttarget.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://*.google-analytics.com https://*.cookieinformation.com https://www.datadoghq-browser-agent.com/datadog-rum-eu.js https://*.bing.com https://*.virtualearth.net https://*.contentsquare.net https://*.contentsquare.com https://*.hotjar.com; img-src 'self' data: https://*.maersk.com https://*.maersk.com.cn https://*.maerskline.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.gstatic.com https://lh3.googleusercontent.com https://*.steelcentral.net https://*.vimeocdn.com https://*.youtube.com https://*.igodigital.com https://*.akamaihd.net https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://pixel.mathtag.com https://bs.serving-sys.com https://www.google.co.uk https://api.adsymptotic.com https://media-cdn.ipredictive.com https://*.linkedin.com https://*.facebook.com https://*.twitter.com https://vk.com https://mail.ru https://clickserve.dartsearch.net https://*.doubleclick.net https://*.google.dk https://secure.adnxs.com https://cs.adingo.jp https://admaym.com https://ih.adscale.de https://d.agkn.com https://ib.adnxs.com https://x.bidswitch.net https://stags.bluekai.com https://pix.btrll.com https://contextual.media.net https://dis.criteo.com https://e.nexac.com https://loadm.exelator.com https://cs.gssprt.jp https://global.ib-ibi.com https://ad.360yield.com https://dsum-sec.casalemedia.com https://beacon.krxd.net https://idsync.rlcdn.com https://ums.adtechus.com https://sync.adaptv.advertising.com https://us-u.openx.net https://simage2.pubmatic.com https://bh.contextweb.com https://idsync.reson8.com https://pixel.rubiconproject.com https://uipglob.semasio.net https://rtb-csync.smartadserver.com https://ad.sxp.smartclip.net https://sync.go.sonobi.com https://ce.lijit.com https://sync.search.spotxchange.com https://ads.stickyadstv.com https://delivery.swid.switchads.com https://aa.agkn.com https://ads.yahoo.com https://u3s.mathtag.com https://eu-u.openx.net https://serving.experianmarketingservices.digital https://uip.semasio.net https://fo-api.omnitagjs.com https://*.akstat.io https://*.bing.com https://*.virtualearth.net https://*.contentsquare.net; object-src 'self' ; style-src 'self' 'unsafe-inline' https://*.maersk.com https://*.maersk.com.cn https://*.apmoller.net https://*.gstatic.com https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.maerskline.com https://*.force.com https://*.bing.com https://*.virtualearth.net; frame-src https://*.maersk.com https://*.maersk.com.cn https://*.maerskline.com https://*.apmoller.net http://emanage.maerskline.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.google.com https://www.youtube.com/embed/ https://player.vimeo.com/video/ https://service.force.com https://*.cookieinformation.com https://*.youku.com/ https://*.force.com/  https://*.salesforce.com https://app.powerbi.com http://my.maerskline.com https://vars.hotjar.com https://*.doubleclick.net; font-src 'self' data: https://*.maersk.com https://*.maersk.com.cn https://*.maerskline.com https://*.apmoller.net https://*.gstatic.com https://*.googleapis.com; 2
frame-ancestors https://*.ionos.fr https://ionos.fr; 2
frame-ancestors 'self' *.jetstar.com/; 2
frame-ancestors 3dna.nationbuilder.com 2
object-src 'none'; 2
frame-ancestors https://*.etracker.com; script-src 'self' https://*.signalize.com https://*.etracker.com https://*.etracker.de 'unsafe-inline' 2
default-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch; script-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://google.com http://www.googleadservices.com https://googleads.g.doubleclick.net https://static.ads-twitter.com http://static.ads-twitter.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://www.google.com https://tagmanager.google.com https://www.gstatic.com https://www.linkedin.com https://analytics.twitter.com https://px.ads.linkedin.com https://maps.googleapis.com https://platform.twitter.com https://cdn.checkout.com https://static-resource.com https://sjs.bizographics.com https://snap.licdn.com http://bat.bing.com https://bat.bing.com https://www.dwin1.com http://www.dwin1.com https://*.intercom.io http://*.intercom.io https://*.intercomcdn.com http://*.intercomcdn.com https://p.teads.tv; font-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch 'unsafe-inline' chrome-extension 'self' data: http://*.gstatic.com https://*.gstatic.com https://*.intercomcdn.com https://github.com/google/fonts; style-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com https://tagmanager.google.com; img-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch 'unsafe-inline' 'self' data: android-webview-video-poster https://* http://*; object-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch https://vjs.zencdn.net; connect-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch ws://*.infomaniak.ch:* ws://*.infomaniak.com:* wss://*.infomaniak.ch:* wss://*.infomaniak.com:* https://www.google.com https://nexus-long-poller-a.intercom.io https://*.bugsnag.com https://bat.bing.com http://bat.bing.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.facebook.com https://*.facebook.net https://*.linkedin.com https://*.checkout.com https://*.intercom.io http://*.intercom.io wss://*.intercom.io; child-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch https://www.google.com https://www.facebook.com https://www.youtube.com https://www.googletagmanager.com https://player.vimeo.com; frame-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch https://www.google.com https://www.facebook.com https://www.youtube.com https://www.googletagmanager.com https://player.vimeo.com; media-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch https://js.intercomcdn.com; worker-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch data: blob:; report-uri /api/csp-report; 2
default-src 'self'; connect-src * data:  filesystem:  'unsafe-inline' 'unsafe-eval'; font-src * data:  filesystem:; frame-src * data:  filesystem:  'unsafe-inline' 'unsafe-eval'; img-src * data:  filesystem:  'unsafe-inline' 'unsafe-eval'; media-src * data:  filesystem:  'unsafe-inline' 'unsafe-eval'; object-src * data:  filesystem:  blob:  'unsafe-inline' 'unsafe-eval'; script-src * blob:  'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 2
default-src 'self' service.maxymiser.net; child-src 'self' 'unsafe-inline' https://www.googleadservices.com  https://*.fls.doubleclick.net/ https://*.santander.co.uk https://santander.demdex.net;  script-src 'self' 'unsafe-inline' https://cdn.usersnap.com https://screencapture.kampyle.com https://nebula-cdn.kampyle.com https://resources.digital-cloud-uk.medallia.eu https://pagead2.googlesyndication.com https://js-cdn.dynatrace.com https://activitymap.adobe.com https://cdn-ukwest.onetrust.com https://cdn.mouseflow.com https://googleads.g.doubleclick.net lptag.liveperson.net lo.v.liveperson.net lo.msg.liveperson.net accdn.lpsnmedia.net lpcdn.lpsnmedia.net https://www.googletagservices.com https://ad.doubleclick.net service.maxymiser.net https://connect.facebook.net https://*.fls.doubleclick.net/ https://www.googleadservices.com https://www.googletagmanager.com https://assets.adobedtm.com https://dpm.demdex.net/ https://*.santander.co.uk 'unsafe-eval'; connect-src 'self' 'unsafe-inline' https://udc-neb.kampyle.com https://*.bf.dynatrace.com https://privacyportal-uk.onetrust.com https://cdn-ukwest.onetrust.com https://o2.mouseflow.com https://googleads4.g.doubleclick.net wss://lo.msg.liveperson.net https://dpm.demdex.net https://*.santander.co.uk; img-src 'self' https://lpcdn.lpsnmedia.net service.maxymiser.net 'unsafe-inline' https://*.santander.co.uk data: https:; style-src 'self' service.maxymiser.net 'unsafe-inline'; font-src 'self'; frame-src 'self' 'unsafe-inline' https://resources.digital-cloud-uk.medallia.eu https://lo.tokenizer.liveperson.net https://lo.msghist.liveperson.net https://lo.msg.liveperson.net https://lpcdn.lpsnmedia.net lo.idp.liveperson.net server.lon.liveperson.net https://authorize.omniture.com https://sitecatalyst.omniture.com service.maxymiser.net https://edigitalsurvey.com https://www.youtube.com https://santander.demdex.net https://*.fls.doubleclick.net; object-src 'self'; media-src lpcdn.lpsnmedia.net; worker-src blob:; 2
default-src * data: blob: about: vkcall:;script-src 'self' https://vk.com https://*.vk.com https://static.vk.me https://*.mail.ru https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com https://connect.facebook.net https://telegram.org https://*.yandex.ru https://*.google-analytics.com https://*.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://*.google.com https://google.com https://*.vkpartner.ru https://*.moatads.com https://*.adlooxtracking.com https://*.gstatic.com https://*.google.ru https://securepubads.g.doubleclick.net https://cdn.ampproject.org https://www.googletagmanager.com https://googletagmanager.com https://*.vk-cdn.net https://*.hit.gemius.pl https://yastatic.net 'unsafe-inline' 'unsafe-eval' blob:;style-src https://vk.com https://*.vk.com https://static.vk.me https://ton.twimg.com https://tagmanager.google.com https://platform.twitter.com https://*.googleapis.com 'self' 'unsafe-inline';report-uri /csp 2
default-src 'self'; script-src 'unsafe-inline' 'self' 'unsafe-eval' translate.googleapis.com translate.google.com ajax.cloudflare.com www.google-analytics.com www.googletagmanager.com deepknow.egoid.me static.geetest.com dn-staticdown.qbox.me api.geetest.com *.ronghub.com *.udesk.cn qiyukf.com c.cnzz.com s9.cnzz.com z12.cnzz.com https://imge1.bitzapp.top https://imge2.bitzapp.top https://imge3.bitzapp.top; style-src 'unsafe-inline' 'self' 'unsafe-eval' static.geetest.com translate.googleapis.com *.udesk.cn https://imge1.bitzapp.top https://imge2.bitzapp.top https://imge3.bitzapp.top; frame-src 'self' https://imge1.bitzapp.top https://imge2.bitzapp.top https://imge3.bitzapp.top *.bitz-service.com *.bitz.com *.bit-z.com *.bit-z.pro *.bitz.top *.bitz.so *.bitz.plus *.bitz.ai *.bitz.bz *.bitz.info *.bitz.tech *.bitzhd.com *.bitz.cm *.hyjztc.cn *.bitzapp.top appad.ahighapp.com qiyukf.com *.udesk.cn; frame-ancestors *.bitz-service.com; font-src 'self' data: https://imge1.bitzapp.top https://imge2.bitzapp.top https://imge3.bitzapp.top; img-src 'self' data: blob: www.gxchaintop.org static.gxb.io translate.googleapis.com *.google.com bit-z-frontdesk.oss-cn-hongkong.aliyuncs.com www.gstatic.com static.geetest.com stats.g.doubleclick.net www.google-analytics.com sensors.ahighapi.com *.127.net qiyukf.com *.qiyukf.com *.bibidev.com *.udesk.cn z12.cnzz.com cnzz.mmstat.com https://imge1.bitzapp.top https://imge2.bitzapp.top https://imge3.bitzapp.top; media-src 'self' static.geetest.com qiyukf.com *.bibidev.com *.127.net *.udesk.cn; connect-src 'self' wss://ws.ahighapi.com wss://*.s2.udesk.cn translate.googleapis.com stats.g.doubleclick.net www.google-analytics.com monitor.geetest.com api.geetest.com *.udesk.cn qiyukf.com sentry.ahighapi.com test-push-trade.biwebapi.com https://sensors.ahighapi.com https://ucapi.ahighapi.com https://otcapinew.ahighapi.com https://app.ahighapi.com https://v2.ahighapi.com https://api.ahighapi.com https://app.ahighapi.com wss://ws.ahighapi.com wss://pushser.ahighapi.com https://app.ahighapi.com 2
frame-ancestors vidiq-marketing-cms.now.sh vidiq-marketing-cms-git-dev.vidiq.now.sh vidiq-marketing-cms-git-staging.vidiq.now.sh vitals.vercel-analytics.com localhost:3333 2
default-src 'self' data: *.bouncex.net *.pressablecdn.com *.wp.com *.gravatar.com  *.google-analytics.com *.hotjar.com *.doubleclick.net *.convertkit.com 'unsafe-inline'; object-src *; img-src *; media-src *; frame-src *; font-src 'self' data: *.pressablecdn.com *.wp.com *.gstatic.com maxcdn.bootstrapcdn.com; style-src 'self' *.pressablecdn.com *.wp.com maxcdn.bootstrapcdn.com fonts.googleapis.com 'unsafe-inline'; script-src 'self' data: *.pressablecdn.com app.convertkit.com ajax.googleapis.com www.googletagmanager.com connect.facebook.net secure.gaug.es stats.g.doubleclick.net *.wp.com *.google-analytics.com *.hotjar.com *.bounceexchange.com *.optimizely.com 'unsafe-inline' 'unsafe-eval' 2
frame-ancestors https://*.crashplan.com https://*.crashplan.com:4285 https://*.crashplanpro.com https://*.crashplanpro.com:4285 https://*.code42.com https://*.code42.com:4285; https://*.us2.code42.com; https://*.us2.code42.com:4285; 2
frame-ancestors 'self' https://app.optimizely.com 2
script-src https: http: 'unsafe-eval' 'unsafe-inline'; worker-src https: http: blob: 'unsafe-eval' 'unsafe-inline'; style-src https: http: 'unsafe-inline'; img-src https: http: data: blob: about:; font-src https: http: data:; connect-src https: http: wss:; object-src https: http: 2
frame-ancestors 'self' corning.com *.corning.com *.siteworx.com *.ceros.com *.ariba.com 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; media-src 'self' 'unsafe-inline' *;img-src 'self' blob: data: *; style-src 'self' 'unsafe-inline' *; font-src 'self' *; frame-src 'self' *; connect-src 'self' *; object-src 'none' 2
frame-ancestors 'self' http://cloudera.lookbookhq.com https://cloudera.lookbokhq.com http://pages.cloudera.com https://pages.cloudera.com 2
default-src 'self' https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://at.cloud.fabasoft.com; style-src 'self' 'unsafe-inline' https://*.oebb.at https://apis.google.com https://*.googleapis.com  https://*.azureedge.net https://static.userback.io; script-src 'self' https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://apis.google.com https://*.googleapis.com https://at.cloud.fabasoft.com https://www.youtube.com https://*.ytimg.com https://*.azureedge.net https://static.userback.io; connect-src 'self' https://*.oebb.at https://obc.rola.at https://*.azureedge.net https://directline.botframework.com wss://directline.botframework.com https://api.userback.io; img-src 'self' https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://at.cloud.fabasoft.com https://*.ytimg.com https://apis.google.com https://*.googleapis.com https://*.gstatic.com https://*.azureedge.net https://static.userback.io https://oebbtalentinastorage.blob.core.windows.net data: blob:; frame-src https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://*.google.com https://content.googleapis.com https://www.youtube-nocookie.com  https://at.cloud.fabasoft.com https://roundme.com https://*.yumpu.com https://www.zepp-cam.at https://*.soundcloud.com https://*.spotify.com https://*.waca.at https://ec21aac802964ead8485bcf19e4d7cc9.svc.dynamics.com https://*.azureedge.net https://live.virtual-events.at https://*.streaming.media.azure.net https://www.traumgutscheine.com; frame-ancestors https://oebb-test.hafas.de https://*.oebb.at http://fahrplan.oebb.at; font-src 'self' https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://*.gstatic.com; 2
frame-ancestors 'self' https://metrika.yandex.ru https://webvisor.com http://webvisor.com 2
frame-ancestors 'self' *.ibm.com ; child-src blob: * 2
frame-ancestors 'self' *.blackbaud.com; 2
default-src * 'unsafe-inline' 'unsafe-eval';img-src * 'unsafe-inline' 'unsafe-eval' 'self' data:; 2
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 'unsafe-eval'; font-src data: https://www.blueconic.com https://fonts.blueconic.com  https://cdn2.hubspot.net; img-src https: data:; media-src https: blob:; worker-src blob: 2
upgrade-insecure-requests; frame-ancestors *.gonitro.com *.live.com *.sharepoint.com 2
frame-ancestors 'self' connectappypie.com; 2
default-src 'self'; connect-src 'self'  https://col.site24x7rum.com https://app.litmusworld.com https://*.tatasky.com https://*.g.doubleclick.net https://logs.juspay.in https://payments.juspay.in https://*.taboola.com/ https://www.google-analytics.com/ ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sf16-muse-va.ibytedtos.com https://s0.ipstatp.com https://static.bytedance.com https://a.quora.com https://bat.bing.com https://www.googletagservices.com https://maps.googleapis.com https://code.jquery.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.sokrati.com https://ad.doubleclick.net https://www.googleadservices.com https://static.site24x7rum.com https://tagmanager.google.com https://ssl.gstatic.com https://www.tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com/ https://*.google.co.in/ https://www.gstatic.com/recaptcha/ https://*.twitter.com/ https://*.twimg.com/ https://www.youtube.com/ https://s.ytimg.com/ https://*.googlesyndication.com/ https://*.taboola.com/ https://payments.juspay.in/ https://static.ads-twitter.com/ https://cdn.invitereferrals.com/ https://www.googleoptimize.com/ https://optimize.google.com https://www.ref-r.com/ ; img-src 'self' https://business-sg.topbuzz.com https://business.topbuzz.com https://q.quora.com https://www.ref-r.com https://bat.bing.com https://maps.gstatic.com https://maps.googleapis.com https://*.facebook.com https://*.sokrati.com https://www.google.com https://www.google.co.in https://*.fls.doubleclick.net https://*.linkedin.com https://www.googleadservices.com https://*.g.doubleclick.net https://*.fls.doubleclick.net https://tagmanager.google.com https://www.google-analytics.com https://ssl.gstatic.com https://*.twitter.com/ https://*.twimg.com/ https://ad.doubleclick.net/ https://*.google.com/ https://*.google.co.in/ https://*.tatasky.com/ https://*.taboola.com/ https://secure.adnxs.com/ https://optimize.google.com https://www.gstatic.com/ data: ; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://ssl.gstatic.com https://*.twitter.com/ https://*.twimg.com/ https://optimize.google.com ; font-src 'self' https://tagmanager.google.com https://fonts.gstatic.com https://ssl.gstatic.com https://optimize.google.com data: ; frame-src 'self' bytedance: https://*.g.doubleclick.net https://*.fls.doubleclick.net https://app.litmusworld.com https://www.youtube.com https://www.google.com/ https://help.tatasky.com https://www.facebook.com/ https://*.twitter.com/ https://*.twimg.com/ https://www.ref-r.com/ https://player.vimeo.com/ https://payments.juspay.in/ https://optimize.google.com ; object-src 'self'; frame-ancestors https://*.tatasky.com ; 2
frame-ancestors 'none'; connect-src 'self' *.google-analytics.com *.stripe.com *.braintreegateway.com *.braintree-api.com *.exploretock.com *.fullstory.com *.facebook.com api.rollbar.com *.doubleclick.net www.google.com  *.podium.com *.googleapis.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.stripe.com *.braintreegateway.com *.chase.com *.exploretock.com connect.facebook.net *.fullstory.com www.googleadservices.com api.rollbar.com optimize.google.com maps.googleapis.com  *.podium.com static.cloudflareinsights.com; img-src 'self' blob: data: *.exploretock.com *.stripe.com *.braintreegateway.com *.facebook.com *.fbsbx.com *.gravatar.com i0.wp.com i1.wp.com *.google.com *.googleapis.com *.googleusercontent.com www.google-analytics.com www.gstatic.com maps.gstatic.com *.doubleclick.net *.googletagmanager.com; child-src 'self' *.exploretock.com *.stripe.com *.braintreegateway.com www.facebook.com optimize.google.com; frame-src 'self' *.exploretock.com *.stripe.com *.braintreegateway.com *.chase.com www.facebook.com optimize.google.com connect.facebook.net www.google.com *.kaptcha.com; 2
default-src * 'self' blob: data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-src * 'self'; frame-ancestors * 'self' 2
default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.wistia.com *.wistia.net www.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net embedwistia-a.akamaihd.net *.litix.io www.facebook.com *.ubembed.com hubspot-forms-static-embed.s3.amazonaws.com *.hsforms.net *.hsforms.com *.marketo.com *.marketo.net *.mktoresp.com *.mktoutil.com *.emarsys.com; font-src 'self' data: *.kinstacdn.com fonts.gstatic.com *.slidesharecdn.com; form-action 'self' www.facebook.com *.hsforms.net *.hsforms.com; frame-ancestors 'self'; frame-src 'self' *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.marketo.com *.marketo.net *.cookiebot.com html5-player.libsyn.com bid.g.doubleclick.net www.facebook.com js.driftt.com *.ubembed.com *.googlesyndication.com *.hsforms.net *.hsforms.com *.slideshare.net *.wistia.com *.wistia.net *.on24.com; img-src 'self' data: *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.wistia.com *.wistia.net *.gravatar.com www.googletagmanager.com www.google-analytics.com analytics.twitter.com px.ads.linkedin.com googleads.g.doubleclick.net www.linkedin.com www.facebook.com connect.facebook.net t.co embedwistia-a.akamaihd.net *.hsforms.net *.hsforms.com *.adsymptotic.com *.glasgowlive.co.uk; media-src 'self' blob: data: *.kinstacdn.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com *.marketo.com *.marketo.net *.ubembed.com *.wistia.com *.wistia.net googleads.g.doubleclick.net www.googleadservices.com tracking.g2crowd.com snap.licdn.com connect.facebook.net *.cookiebot.com static.ads-twitter.com analytics.twitter.com js.driftt.com *.hsforms.net *.hsforms.com *.googlesyndication.com; style-src 'self' 'unsafe-inline' *.kinstacdn.com fonts.googleapis.com *.marketo.com *.marketo.net; worker-src 'self' blob:; 2
default-src 'none'; script-src 'self'; style-src 'self'; connect-src 'self' https://start.1password.com https://start.1password.ca https://start.1password.eu https://www.google-analytics.com https://322-bwx-936.mktoresp.com https://322-bwx-936.mktoutil.com https://9gnqx00du4.execute-api.us-east-1.amazonaws.com/prod/contact_us https://flow.1passwordservices.com/api/v1/event https://createsend.com/t/getsecuresubscribelink; font-src 'self'; object-src 'self'; img-src 'self' https://www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net; child-src https://www.youtube-nocookie.com https://secure.livechatinc.com; frame-src https://www.youtube-nocookie.com https://secure.livechatinc.com; form-action 'self' https://agilemail.createsend.com https://www.createsend.com/t/subscribeerror https://www.createsend.com/t/securedsubscribe https://start.1password.com; prefetch-src https://app.1password.com https://app.1password.ca https://app.1password.eu; frame-ancestors 'none' 2
default-src https: 'unsafe-eval' 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data: blob: *; media-src https: data: blob: *; object-src 'none'; frame-ancestors 'none'; connect-src *; base-uri 'self'; upgrade-insecure-requests; font-src https: 'unsafe-inline' data: 'unsafe-inline'; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.omegawatches.com https://www.omegawatches.cn https://www.omegawatches.com.tw https://www.omegawatches.com.hk https://www.omegawatches.jp https://www.omegawatches.co.kr https://fonts.googleapis.com https://fonts.gstatic.com https://tagmanager.google.com https://cdn1.affirm.com https://fonts.googleaps.com https://fonts.gstatic.com http://chart.apis.google.com https://maxcdn.bootstrapcdn.com https://vjs.zencdn.net http://vjs.zencdn.net https://optimize.google.com https://*.inside-graph.com https://use.typekit.net https://p.typekit.net; font-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.omegawatches.com https://www.omegawatches.cn https://www.omegawatches.com.tw https://www.omegawatches.com.hk https://www.omegawatches.jp https://www.omegawatches.co.kr https://fonts.googleaps.com https://fonts.gstatic.com http://chart.apis.google.com https://maxcdn.bootstrapcdn.com https://*.inside-graph.com https://use.typekit.net https://p.typekit.net data:; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.omegawatches.com https://www.omegawatches.cn https://www.omegawatches.com.tw https://www.omegawatches.com.hk https://www.omegawatches.jp https://www.omegawatches.co.kr https: http:; connect-src 'self' 'unsafe-inline' 'unsafe-eval' https: http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com wss://*.inside-graph.com https://use.typekit.net https://p.typekit.net; child-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; media-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: 2
frame-ancestors http://*.visitsingapore.com/ http://*.visitsingapore.com.cn/ https://*.visitsingapore.com/ https://*.visitsingapore.com.cn/ 'self'; 2
frame-ancestors 'self' www.facebook.com www.messenger.com liligo.fr admin.liligo.fr; report-uri /vsctcspreport 2
frame-ancestors * 'self'; 2
frame-ancestors 'self' *.wellsfargo.com 2
default-src 'self' ; style-src 'self' ; media-src 'self' https://download.elster.de ; connect-src 'self' https://lxelma5p.bfinv.de wss://www.elster.de https://datenabholung1.elster.de https://datenabholung2.elster.de ; object-src 'self' blob: ; form-action 'self' ; frame-ancestors 'self' 2
default-src 'self' vercel.com *.vercel.com zeit.co *.zeit.co *.zeit.sh *.stripe.com twitter.com *.twitter.com *.github.com *.intercom.io *.intercomcdn.com https://*.googletagmanager.com:* wss://*.zeit.co wss://*.vercel.com localhost:* chrome-extension://*;script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.com www.googletagmanager.com www.google-analytics.com www.gstatic.com *.googleapis.com *.youtube.com *.ytimg.com *.twimg.com *.coinbase.com *.zdassets.com cdn.sift.com vercel.com *.vercel.com zeit.co *.zeit.co *.zeit.sh *.stripe.com twitter.com *.twitter.com *.github.com *.intercom.io *.intercomcdn.com https://*.googletagmanager.com:* wss://*.zeit.co wss://*.vercel.com localhost:* chrome-extension://*;child-src *.youtube.com *.stripe.com www.google.com *.coinbase.com object-detection.now.sh serverless-vrs.now.sh github.com vercel.com *.vercel.com zeit.co *.zeit.co *.zeit.sh *.stripe.com twitter.com *.twitter.com *.github.com *.intercom.io *.intercomcdn.com https://*.googletagmanager.com:* wss://*.zeit.co wss://*.vercel.com localhost:* chrome-extension://*;style-src 'self' 'unsafe-inline' *.googleapis.com vercel.com *.vercel.com zeit.co *.zeit.co *.zeit.sh *.stripe.com twitter.com *.twitter.com *.github.com *.intercom.io *.intercomcdn.com https://*.googletagmanager.com:* wss://*.zeit.co wss://*.vercel.com localhost:* chrome-extension://*;img-src * blob: data:;media-src 'self' stream.mux.com *.fastly.net *.stackpathdns.com *.hwcdn.net videos.ctfassets.net blob: vercel.com *.vercel.com zeit.co *.zeit.co *.zeit.sh *.stripe.com twitter.com *.twitter.com *.github.com *.intercom.io *.intercomcdn.com https://*.googletagmanager.com:* wss://*.zeit.co wss://*.vercel.com localhost:* chrome-extension://*;connect-src *;font-src *.zeit.co *.vercel.com *.gstatic.com *.intercomcdn.com;worker-src blob: 2
frame-ancestors 'self'; report-uri https://3533eaa516fe10a59521ffab0a98b9a4.report-uri.com/r/t/csp/enforce; report-to https://3533eaa516fe10a59521ffab0a98b9a4.report-uri.com/r/t/csp/enforce; 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://quip-amazon-cdn.com https://quip-cdn.com; report-uri /csp-report 2
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https://* data: ; frame-src https://* about: javascript: ; report-uri /vdc-csp-report 2
default-src 'self' 'unsafe-inline' *.bzga.de *.creativecommons.org https://www.youtube-nocookie.com data:; frame-src 'self' https://www.bzga.de/ https://piwik.bzga.de/ https://www.youtube-nocookie.com 2
default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.fonts.net analyticsssl.forcepoint.com *.licdn.com *.tiqcdn.com *.marketo.com *.marketo.net *.mktoresp.com *.demdex.net *.burly.io *.omtrdc.net *.llnwd.net *.tealiumiq.com *.googleadservices.com *.marinsm.com  *.amazonaws.com  *.quantserve.com *.facebook.net *.serving-sys.com *.google-analytics.com *.hirebridge.com *.websense.com *.bizographics.com *.linkedin.com *.cloudfront.net *.newrelic.com *.nr-data.net *.adnxs.com *.demandbase.com *.twitter.com *.omtrdc.net *.youtube.com static.ads-twitter.com *.company-target.com *.omniture.com *.doubleclick.net  *.forcepoint.com *.google.com *.facebook.com  bam.nr-data.net maps.gstatic.com *.getsmartcontent.com *.vidyard.com *.adroll.com s.ml-attr.com attr.ml-api.io *.driftt.com *.sharethis.com *.vimeo.com *.slideshare.net  *.techvalidate.com *.gartner.com *.gstatic.com *.libsyn.com *.s3.amazonaws.com *.cdnbasket.net ids.cdnwidget.com app.vwo.com *.visualwebsiteoptimizer.com use.typekit.net p.typekit.net cdn.vwo-analytics.com  dev-forcepoint.pantheonsite.io test-forcepoint.pantheonsite.io live-forcepoint.pantheonsite.io *.googleapis.com *.cloudflare.com activitymap.adobe.com *.consensu.org *.ubembed.com *.bizible.com *.theadex.com tag.aumago.com js.driftqa.com; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' pixel.cdnwidget.com *.tealiumiq.com *.google.com *.googleadservices.com *.doubleclick.net *.websense.com *.marinsm.com *.facebook.com *.quantserve.com *.google-analytics.com *.w55c.net *.marketo.com *.iasds01.com *.linkedin.com *.cloudfront.net *.forcepoint.com *.adnxs.com *.twitter.com t.co *.omtrdc.net tags.w55c.net *.demandbase.com *.company-target.com maps.gstatic.com tags.tiqcdn.com munchkin.marketo.net *.newrelic.com connect.facebook.net static.ads-twitter.com a.burly.io sjs.bizographics.com bam.nr-data.net snap.licdn.com https://websense.tt.omtrdc.net/m2/websense/mbox/json *.getsmartcontent.com *.adroll.com *.vidyard.com s.ml-attr.com attr.ml-api.io ml314.com *.ml314.com *.bing.com *.driftt.com *.crazyegg.com *.sharethis.com *.vimeo.com *.slideshare.net *.techvalidate.com *.gartner.com *.googletagmanager.com *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com app.vwo.com *.js.ubembed.com assets.ubembed.com js.driftt.com cdn.vwo-analytics.com *.s3.amazonaws.com s3.amazonaws.com dev-forcepoint.pantheonsite.io test-forcepoint.pantheonsite.io live-forcepoint.pantheonsite.io *.clearbit.com *.googleapis.com *.cloudflare.com https://activitymap.adobe.com/sc15/activitymap/index.js *.consensu.org *.bizible.com *.theadex.com tag.aumago.com ws.zoominfo.com *.redditstatic.com rules.quantcount.com tracking.g2crowd.com; img-src * data: *; connect-src 'self' app.vwo.com dpm.demdex.net websense.tt.omtrdc.net *.mktoresp.com *.cdnbasket.net ids.cdnwidget.com *.forcepoint.com sample-api-v2.crazyegg.com *.visualwebsiteoptimizer.com insight.adsrvr.org bam.nr-data.net *.tealiumiq.com live-evercurrent-clone.pantheonsite.io *.sharethis.com *.doubleclick.net *.theadex.com tag.aumago.com *.google-analytics.com; report-uri /admin/config/system/seckit/csp-report 2
frame-ancestors 'self' *.regmovies.com *.authorize.net 2
upgrade-insecure-requests; connect-src * https:; img-src * data: https:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob: data:; worker-src * blob: data: 2
default-src 'self' *.uci.ch *.uci.org *.googletagmanager.com *.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.twitter.com *.cloudflare.com *.googletagmanager.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com *.twitter.com *.cloudflare.com *.googletagmanager.com *.jquery.com; font-src 'self' *.uci.ch fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.uci.ch *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com; media-src 'self' data: blob:; frame-src 'self' *.uci.ch *.uci.org *.twitter.com *.cloudflare.com *.googletagmanager.com *.tissottiming.com *.youtube.com *.chronorace.be chronorace.blob.core.windows.net; frame-ancestors 'self' *.uci.ch *.uci.org; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.uci.ch *.uci.org *.twitter.com *.cloudflare.com *.googletagmanager.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com *.uci.ch *.uci.org *.twitter.com *.cloudflare.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net; 2
default-src * 'unsafe-inline' data:; img-src     * 'unsafe-inline' 'unsafe-eval' data:;  script-src  'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.wpengine.com *.bootstrapcdn.com *.twitter.com *.jquery.com *.fontawesome.com *.google.com *.pinterest.com *.gstatic.com *.uploadlibrary.com *.thomascook.com *.hotjar.com *.imi.chat *.adyen.com *.spendology.io *.webtrends-optimize.com *.azurewebsites.net *.webtrends.com *.optimize.com *.doubleclick.net *.googlesyndication.com *.googletagservices.com *.google.co.uk *.google.com.ua;  style-src   'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.wpengine.com *.bootstrapcdn.com *.imi.chat *.adyen.com *.spendology.io *.thomascook.com *.google.com *.webtrends-optimize.com *.azurewebsites.net *.webtrends.com *.optimize.com;  font-src    'self' data: *.googleapis.com *.gstatic.com *.wpengine.com *.imi.chat *.spendology.io *.thomascook.com;  object-src  'self' ;  frame-src   'self' data: *.facebook.com https://platform.twitter.com/ *.google.com *.hotjar.com *.imi.chat *.adyen.com *.vimeo.com *.youtube.com *.doubleclick.net *.thomascook.io *.youtu.be *.googlesyndication.com;  form-action * 'self' 'unsafe-inline' 'unsafe-eval' *.adyen.com *.thomascook.io; 2
frame-ancestors 'self' https://webvisor.com 2
default-src 'self' http://localhost:* https://*.supercharge-srp.co https://*.safeframe.googlesyndication.com https://tpc.googlesyndication.com; prefetch-src http://tpc.googlesyndication.com https://tpc.googlesyndication.com http://securepubads.g.doubleclick.net https://securepubads.g.doubleclick.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://web.sol-data.com http://localhost:* https://*.jobsdb.com/ https://*.supercharge-srp.co https://*.hotjar.com/ https://unpkg.com/ https://polyfill.io/ https://cdnjs.cloudflare.com https://cdn.ravenjs.com https://widget.intercom.io http://www.googletagservices.com https://www.googletagservices.com http://pagead2.googlesyndication.com https://pagead2.googlesyndication.com https://adservice.google.com https://securepubads.g.doubleclick.net http://tpc.googlesyndication.com https://tpc.googlesyndication.com https://adservice.google.com.au https://adservice.google.com.hk https://adservice.google.com.sg https://js.intercomcdn.com http://www.googletagmanager.com https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com https://www.googleadservices.com https://bat.bing.com https://connect.facebook.net https://googleads.g.doubleclick.net https://cdn.branch.io/ https://app.link/ https://www.google-analytics.com http://tags.tiqcdn.com https://tags.tiqcdn.com https://www.youtube.com https://s.ytimg.com https://*.useinsider.com; style-src 'unsafe-inline' 'self' http://localhost:* https://*.jobsdb.com/ https://*.supercharge-srp.co https://fonts.googleapis.com/ https://tagmanager.google.com https://*.useinsider.com; img-src * data:; font-src 'self' https://*.jobsdb.com https://*.supercharge-srp.co https://fonts.gstatic.com/ https://static.hotjar.com/ https://js.intercomcdn.com data:; connect-src 'self' https://www.seek.com.au/ http://www.seek.com.au.staging/ http://candidate-graphql-api-candy-shared-dev-active.ap-southeast-2.elasticbeanstalk.com/ http://localhost:* ws://localhost:* https://*.sol-data.com https://*.supercharge-srp.co:8080/ https://*.jobsdb.com/ https://*.jobstreet.com/ http://*.supercharge-srp.co https://*.supercharge-srp.co https://*.hotjar.com:*/ https://*.elasticbeanstalk.com:8080/ ws://*.hotjar.com/ wss://*.hotjar.com/ https://*.intercom.io wss://*.intercom.io https://securepubads.g.doubleclick.net https://csi.gstatic.com https://api2.branch.io/ https://app.link/ https://pagead2.googlesyndication.com https://*.useinsider.com https://*.jobstreet.com.ph; frame-src https://vars.hotjar.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://tpc.googlesyndication.com https://staticxx.facebook.com https://www.youtube.com https://*.useinsider.com https://*.safeframe.googlesyndication.com 2
frame-src 'self' https://www.google.com *.youtube.com https://*.hubspot.com https://www.facebook.com https://s-static.ak.facebook.com https://js.hs-scripts.com https://js.usemessages.com https://js.hscollectedforms.net https://www.snigel.com https://maps.googleapis.com; connect-src 'self' *.snigelweb.com https://*.hubspot.com https://www.google-analytics.com  https://www.google.com https://www.gstatic.com; font-src 'self' *.snigelweb.com https://fonts.gstatic.com https://themes.googleusercontent.com https://snigel.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdn.jsdelivr.net  https://maps.googleapis.com https://www.gstatic.com https://www.google.com https://cdnjs.cloudflare.com https://js.hs-banner.com *.snigelweb.com https://js.hscollectedforms.net https://js.hs-analytics.net https://www.google-analytics.com https://js.usemessages.com https://ssl.google-analytics.com https://js.hs-scripts.com https://www.googletagmanager.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com; img-src 'self' * *.google.com *.snigelweb.com https://maps.googleapis.com https://maps.gstatic.com https://i.ytimg.com https://forms.hsforms.com https://secure.gravatar.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://snigel.com https://www.googletagmanager.com https://*.hubspot.com https://www.google-analytics.com data:; media-src 'self' *.youtube.com *.snigelweb.com; object-src 'self'; form-action 'self' *.snigelweb.com https://*.hubspot.com https://forms.hsforms.com; default-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://maps.googleapis.com https://www.gstatic.com https://www.google.com https://cdnjs.cloudflare.com https://js.hs-banner.com *.snigelweb.com https://js.hscollectedforms.net https://js.hs-analytics.net https://www.google-analytics.com https://js.usemessages.com https://ssl.google-analytics.com https://js.hs-scripts.com https://www.googletagmanager.com https://connect.facebook.net https://maps.gstatic.com https://i.ytimg.com https://forms.hsforms.com https://secure.gravatar.com https://s-static.ak.facebook.com https://snigel.com https://*.hubspot.com https://fonts.gstatic.com https://themes.googleusercontent.com https://fonts.googleapis.com data: 2
frame-ancestors 'self' https://bob.santanderbank.com https://shdwbob.santanderbank.com https://rolb.santanderbank.com https://shdwrolb.santanderbank.com https://einsteincrm.sov.gs.corp https://shdweinsteincrm.sov.gs.corp http://bkoffice.sov.gs.corp http://shdwbkoffice.sov.gs.corp; 2
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.adobedtm.com https://*.api.here.com https://*.flashtalking.com https://*.go-mpulse.net https://*.krxd.net https://*.oneweb.mercedes-benz.com https://*.ytimg.com https://ajax.googleapis.com https://app.usercentrics.eu https://cdn.smooch.io https://daimlerag.d2.sc.omtrdc.net https://daimleragmoneapp.tt.omtrdc.net https://places.mercedes-benz.com https://scripts.psyma.com https://storage.googleapis.com https://www.youtube.com webpack://*; style-src 'self' 'unsafe-inline' https://*.adobedtm.com https://*.api.here.com https://*.oneweb.mercedes-benz.com; font-src 'self' data:; frame-src 'self' https://*.adobedtm.com https://*.api.here.com https://*.flashtalking.com https://*.oneweb.mercedes-benz.com https://*.plugsurfing.com https://*.usercentrics.eu https://cdn.motor1.com https://maps.google.com https://share4business.es https://smart.demdex.net https://usercentrics.mgr.consensu.org https://www.google.com https://www.youtube.com; connect-src 'self' https://*.adobedtm.com https://*.akstat.io https://*.api.here.com https://*.apps.atlas.cf.intra.oneweb.mercedes-benz.io https://*.cloudfront.net https://*.daimler-mobility.com https://*.demdex.net https://*.flashtalking.com https://*.mercedes-benz.com https://*.microservice.smart.com https://*.oneweb.mercedes-benz.com https://*.smart.com https://*.usercentrics.eu https://*.ytimg.com https://ajax.googleapis.com https://api.corpinter.net https://c.go-mpulse.net https://cdn.scp.smart.computerrock.com https://cm.everesttech.net https://daimlerag.d2.sc.omtrdc.net https://daimleragmoneapp.tt.omtrdc.net https://europe.starconnect-ce.i.daimler.com https://www.youtube.com; img-src 'self' blob: data: https://*.akstat.io https://*.daimler-financialservices.com https://*.daimler-mobility.com https://*.krxd.net https://*.oneweb.mercedes-benz.com https://*.s3.eu-central-1.amazonaws.com https://*.usercentrics.eu https://*.ytimg.com https://analytics.smart.com https://assets.smart.com https://cm.everesttech.net https://cms.smart.com https://daimlerag.d2.sc.omtrdc.net https://europe.starconnect-ce.i.daimler.com https://ice.fs.mercedes-benz.com https://sanalytics.smart.com; media-src 'self' blob: data: https://*.akstat.io https://*.krxd.net https://*.oneweb.mercedes-benz.com https://*.s3.eu-central-1.amazonaws.com https://assets.smart.com; 2
default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com s.c.exp1.licdn.com s.c.exp2.licdn.com m.c.exp1.licdn.com m.c.exp2.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com slideshare.www.linkedin.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' 2
frame-ancestors 'self' ' *.ampproject.org .zdbb.net 2
font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' tracking.paysera.com https://optimize.google.com https://www.google.com/recaptcha/ https://www.youtube.com/embed/; img-src 'self' data: *.paysera.com maps.googleapis.com *.gstatic.com https://www.google-analytics.com https://optimize.google.com; script-src 'self' maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://optimize.google.com 'unsafe-inline'; style-src 'self' fonts.googleapis.com https://optimize.google.com 'unsafe-inline'; report-uri /v2/csp-violations/report 2
default-src 'none'; script-src 'self'; child-src 'self'; frame-src https://*.youtube.com  https://*.vimeo.com; font-src 'self'; img-src http: data: *; style-src 'self' 'unsafe-inline'; frame-ancestors 'none'; base-uri 'none'; connect-src 'self' https://tutanota.com https://api.github.com https://www.reddit.com https://mail.tutanota.com; 2
frame-ancestors 'self' https://de.page4.com https://en.page4.com; 2
connect-src 'self' https://track.adform.net https://unpkg.com https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://swedbankab.d3.sc.omtrdc.net *.swedbank.net https://dpm.demdex.net https://*.swedbank.se https://dpm.swedbank.se https://dpu.swedbank.se https://agent.nina-nuance.com/  https://www.swedbank.se https://swedbank.se https://enklafondhjalpen.swedbank.se https://agent-locator.nina-nuance.com https://agent-fp.nina-nuance.com https://swedbank.dfs.investis.com https://agent-ha.nina-nuance.com 2
frame-ancestors 'self' https://legacyshield.com https://www.legacyshield.com https://hotfix.legacyshield.com https://test049.legacyshield.com https://lsapp.legacyshield.com https://getzuby.com https://staging.getzuby.com https://www.assistancedocs.com https://connectedinvestors.com https://www.furnishedfinder.com https://www.keycheck.com https://dev18.furnishedfinder.com https://dev18.keycheck.com https://www.lawyerless.com.au/ https://lawyerless.com.au http://local.lawyerless.com.au/ https://www.american-apartment-owners-association.org/ https://www.tenantalert.com/ https://secure.american-apartment-owners-association.org/ https://aragdc.eyelightdev.ca https://members.dginstitute.com.au https://honcho.com.au https://honcho.com.au:8080 https://infinitedocs.com; 2
default-src 'self';  object-src 'self';  media-src 'self' blob: data: https://*.akamaihd.net ;  connect-src 'self'   https://hella.containers.piwik.pro  https://hella.piwikpro.com  https://hella.piwik.pro  https://*.video-cdn.net  https://licensing.bitmovin.com   https://*.akamaihd.net ;  font-src 'self' data:   https://*.video-cdn.net https://fonts.gstatic.com;  frame-src 'self'   https://*.video-cdn.net  https://edge-cdn.net http://irpages2.equitystory.com  https://charts3.equitystory.com  https://irpages2.equitystory.com https://www.edge-cdn.net  https://hella.containers.piwik.pro https://hella.piwikpro.com https://hella.piwik.pro https://start.video-stream-hosting.de;   script-src 'self' 'unsafe-eval' 'unsafe-inline' blob:  https://uu.createsend.com  https://js.createsend1.com    https://*.video-cdn.net/ https://hella.piwik.pro https://hella.containers.piwik.pro https://hella.piwikpro.com   https://www.google.com  https://www.googleadservices.com  https://googleads.g.doubleclick.net https://www.google-analytics.com  https://www.googletagmanager.com  https://ajax.googleapis.com https://translate.google.com  https://translate.googleapis.com https://www.gstatic.com;  style-src 'self' 'unsafe-inline'   https://translate.googleapis.com  https://translate.googleapis.com   https://translate.google.com;   img-src data: 'self' blob: https://*.video-cdn.net   https://hella.containers.piwik.pro  https://hella.piwik.pro  https://hella.piwikpro.com   https://www.google.ac https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.com.kh https://www.google.cc https://www.google.cd https://www.google.cf https://www.google.cat https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.g.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gf https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gp https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.iq https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.io https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.com.lc https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.ne https://www.google.com.nf https://www.google.com.ng https://www.google.com.ni https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pk https://www.google.com.pa https://www.google.com.pe https://www.google.com.ph https://www.google.pl https://www.google.com.pg https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.sm https://www.google.so https://www.google.st https://www.google.sr https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tk https://www.google.tl https://www.google.tm https://www.google.to https://www.google.tn https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.vg https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.co.za https://www.google.co.zm https://www.google.co.zw  https://www.google.com  https://www.googleadservices.com  https://googleads.g.doubleclick.net https://www.google-analytics.com  https://www.googletagmanager.com https://ajax.googleapis.com https://translate.google.com https://translate.googleapis.com https://www.gstatic.com ; worker-src blob: 'self'; report-uri https://hella.report-uri.com/r/d/csp/enforce 2
default-src 'self' data: ws: blob: *.nr-data.net fonts.gstatic.com fonts.googleapis.com *.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nr-data.net *.newrelic.com *.embedly.com *.embed.ly *.googletagmanager.com *.doubleclick.net *.googleadservices.com *.facebook.net snap.licdn.com *.linkedin.com *.bing.com *.ads-twitter.com *.twitter.com *.bizographics.com *.baidu.com *.google.com *.gstatic.com *.instabot.io *.yandex.ru *.convertwork.cn *.hotjar.com *.cavy9soho.com; img-src 'self' data: *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; child-src 'self' blob: *.vimeo.com; frame-src 'self' *.investis.com *.quartalflife.com *.youtube.com *.youtu.be *.youku.com *.embedly.com *.embed.ly player.youku.com *.eqs.com https: *.doubleclick.net snap.licdn.com *.presono.com *.linkedin.com *.juicer.io *.audi-mediacenter.com; connect-src 'self' data: ws: blob: *.googleadservices.com adservice.google.com *.instabot.io *.yandex.ru *.hotjar.com *.bing.com; 2
block-all-mixed-content; style-src https: 'unsafe-inline'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src https:; report-uri https://collectors.au.sumologic.com/receiver/v1/http/ZaVnC4dhaV2fq-TmkezxDM5kD77zglzTUyrlNqPe059oQhlSBcEFmaLaBbMi5G2BkSSJjyA6wJZ-iUDLrux0ATja4lHZr94sfyyTtdVcA_GiHULLYxFY7Q== 2
default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline' *.openlayers.org openlayers.org *.openstreetmap.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.openlayers.org openlayers.org *.openstreetmap.org; object-src 'self' multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com media.deutsche-rentenversicherung.de;child-src *.google.com *.gstatic.com *.youtube.com ; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.openlayers.org openlayers.org *.openstreetmap.org; frame-ancestors 'self'; 2
frame-ancestors https://*.uwhealth.org https://*.uwhealthkids.org https://*.med.wisc.edu https://*.uwhealth.wisc.edu 2
default-src 'self' blob:; img-src 'self' *.nextiveo.com *.maropost.com platform-api.sharethis.com *.livehelpnow.net *.pcdn.co *.sharethis.com  *.contentsquare.net *.content-square.fr *.contentsquare.com *.googleapis.com *.s3.us-east-1.amazonaws.com *.amazonaws.com *.gstatic.com *.cloudfront.net *.clicktale.net pixy.org *.chargebee.com *.nextsphere.com *.ppipe.net *.nstitan.com mecdb.myecheck.com www1.myecheck.com  *.oppwa.com *.flptitanqa.com *.flptitan.com *.foreverliving.com *.flpi.com foreverliving.com seeklogo.com www.google-analytics.com stats.g.doubleclick.net www.google.com data: *.s3.us-west-2.amazonaws.com *.s3-us-west-2.amazonaws.com www.google.co.in *.vimeocdn.com *.youtube.com *.s3.amazonaws.com s3-us-west-2.amazonaws.com x1.xingassets.com maps.gstatic.com maps.googleapis.com optimize.google.com cdn-dev.flptitan.com blob: *.flptitan.com *.foreverliving.com *.s3.us-east-1.amazonaws.com *.googleapis.com *.ppipe.net *.nextsphere.com *.nstitan.com *.oppwa.com *.flptitanqa.com mecdb.myecheck.com www1.myecheck.com oppwa.com *.flptitan.com *.foreverliving.com *.flpi.com foreverliving.com seeklogo.com *.google-analytics.com stats.g.doubleclick.net www.google.com *.clicktale.net data: *.s3.us-west-2.amazonaws.com *.s3-us-west-2.amazonaws.com www.google.co.in *.vimeocdn.com *.youtube.com *.s3.amazonaws.com s3-us-west-2.amazonaws.com x1.xingassets.com maps.gstatic.com *.facebook.com *.googletagmanager.com maps.googleapis.com optimize.google.com *.boxcloud.com; script-src 'self' *.nextiveo.com *.userlike.com *.boxcdn.net *.boxcloud.com *.box.com *.cloudfront.net *.s3-eu-west-1.amazonaws.com *.payvision.com *.siteprerender.com siteprerender.com *.google.com platform-api.sharethis.com *.mgr.consensu.org *.livehelpnow.net *.contentsquare.net *.content-square.fr *.contentsquare.com *.sharethis.com walls.io  *.facebook.net *.cdn-javascript.net cdn-javascript.net x-apple-ql-id *.static-resource.com static-resource.com flpqa.com flp.com flp360.social *.flpqa.com *.flp.com *.flp360.social *.clicksapp.net clicksapp.net *.s3.us-east-1.amazonaws.com *.clicktale.net *.chargebee.com *.authorize.net *.ppipe.net www.youtube.com *.oppwa.com  *.s3-us-west-2.amazonaws.com mecdb.myecheck.com www1.myecheck.com *.googleapis.com *.flptitanqa.com *.flptitan.com foreverliving.com *.foreverliving.com *.flpi.com *.cloudflare.com *.bootstrapcdn.com  *.s3.amazonaws.com  *.nextsphere.com *.nstitan.com optimize.google.com www.googletagmanager.com *.google-analytics.com blob: fonts.gstatic.com test.acaptureservices.com test.oppwa.com maxcdn.bootstrapcdn.com  *.ppipe.net *.facebook.net *.authorize.net www.youtube.com *.oppwa.com *.s3-us-west-2.amazonaws.com mecdb.myecheck.com www1.myecheck.com oppwa.com acaptureservices.com test.oppwa.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.nextiveo.com *.livehelpnow.net *.clicktale.net *.chargebee.com *.contentsquare.net *.content-square.fr *.contentsquare.com *.google-analytics.com *.nextsphere.com x-apple-ql-id *.s3-us-west-2.amazonaws.com *.ppipe.net *.typekit.net *.nstitan.com *.oppwa.com mecdb.myecheck.com *.flptitanqa.com www1.myecheck.com *.flptitan.com *.foreverliving.com foreverliving.com *.flpi.com optimize.google.com tagmanager.google.com fonts.googleapis.com cdnjs.cloudflare.com oppwa.com *.s3.amazonaws.com maxcdn.bootstrapcdn.com *.boxcdn.net 'unsafe-inline'; font-src 'self' *.nextiveo.com *.boxcdn.net *.box.com *.cloudfront.net *.livehelpnow.net *.clicktale.net *.chargebee.com *.nextsphere.com *.ppipe.net *.contentsquare.net *.content-square.fr *.contentsquare.com *.typekit.net www1.myecheck.com  flpqa.com flp.com flp360.social *.flpqa.com *.flp.com *.flp360.social mecdb.myecheck.com *.bootstrapcdn.com *.nstitan.com *.oppwa.com *.flptitanqa.com *.flptitan.com *.foreverliving.com foreverliving.com *.flpi.com data: cdnjs.cloudflare.com fonts.gstatic.com *.s3.amazonaws.com oppwa.com 'unsafe-inline'; connect-src 'self' *.nextiveo.com *.box.com *.boxcloud.com api.ipify.org platform-api.sharethis.com *.livehelpnow.net *.consensu.org *.contentsquare.net *.content-square.fr *.contentsquare.com *.sharethis.com maps.googleapis.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com *.s3.us-west-2.amazonaws.com *.socialsales.io *.clicktale.net *.nextsphere.com  *.ppipe.net vimeo.com *.authorize.net  mecdb.myecheck.com *.oppwa.com www1.myecheck.com *.flptitan.com *.foreverliving.com foreverliving.com *.flpi.com *.nstitan.com  s3-us-west-2.amazonaws.com *.s3.amazonaws.com *.s3-us-west-2.amazonaws.com *.chargebee.com *.google.com *.flptitanqa.com oppwa.com *.google-analytics.com *.google.co.in; media-src 'self' *.nextiveo.com *.flptitan.com *.youtube.com *.youtu.be *.s3-us-west-2.amazonaws.com *.s3.us-west-2.amazonaws.com *.amazonaws.com blob:; frame-src 'self' *.ngenius-payments.com *.facebook.com *.livehelpnow.net *.sandbox.ngenius-payments.com *.acehubpaymentservices.com *.contentsquare.net *.content-square.fr *.contentsquare.com *.nextiveo.com platform-api.sharethis.com  *.sharethis.com *.mgr.consensu.org  walls.io player.vimeo.com *.chargebee.com x-apple-ql-id *.youtube.com *.ppipe.net *.socialsales.io socialsales.io *.nextsphere.com *.worldpay.com *.nextsphere.com  vimeo.com *.oppwa.com mecdb.myecheck.com www1.myecheck.com *.nstitan.com *.flptitanqa.com *.flptitan.com *.foreverliving.com foreverliving.com *.boxcloud.com *.flpi.com optimize.google.com *.vimeo.com oppwa.com optimize.google.com; frame-ancestors 'self' *.nextiveo.com *.socialsales.io socialsales.io foreverliving.com *.foreverliving.com *.flptitan.com flptitan.com flptitanqa.com *.flptitanqa.com *.contentsquare.net *.content-square.fr *.contentsquare.com *.chargebee.com flpqa.com flp.com flp360.social *.flpqa.com *.flp.com *.flp360.social 2
default-src 'self' data: https:; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: https://c.iad.oracleinfinity.io blob:; style-src 'self' data: 'unsafe-inline' https:; img-src 'self' data: https:; frame-src 'self' https://*.beocms.de https://*.beocms.com data: https: blob:; connect-src 'self' data: https:; media-src 'self' data: https: blob: 2
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests 2
default-src wss://*.hotjar.com https: 'unsafe-eval' 'unsafe-inline'; img-src https: data:; object-src 'none'; frame-ancestors 'none' 2
frame-ancestors 'self' *.ebscohost.com *.ebsco.com; report-uri /report-csp-violation; upgrade-insecure-requests 2
frame-ancestors 'self' barhama.com *.museums.tours *.treedis.com *.matterport.com 2
frame-ancestors 'self' *.shutterfly.com:* *.tinyprints.com:*; 2
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src http: https: data:; font-src https: data:; media-src https: data: blob:; object-src https; frame-ancestors 'self' https://secure.thetoptens.com/ https://avatars.thetoptens.com/; 2
default-src 'self' data: https: 'unsafe-inline' 'unsafe-eval' 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: wss:; 2
frame-src 'self' https://www.terminland.de *.novomind.com *.datev.de *.datev.com 2
default-src 'self' https:; script-src 'self' data: https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; media-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src https: 2
frame-ancestors 'self' https://cart.penguinrandomhouse.com/ 2
frame-ancestors https://*.zscalertwo.net *.sick.com *.sickcn.net *.sickcn.com; 2
default-src https://player.vimeo.com www.abtasty.com wss://*.hotjar.com try.abtasty.com https://*.hotjar.io stats.g.doubleclick.net app.abtasty.com *.try.abtasty.com wss://ws3.hotjar.com teddytor.abtasty.com *.app.abtasty.com *.abtasty.com dcinfos.abtasty.com *.ratatu.pl *.googleads.g.doubleclick.net bnp-paribas.user.com https://graylog.hotjar.com:12443 http://*.hotjar.com:* https://try.abtasty.com https://insights.hotjar.com https://*.hotjar.com:* https://vimeo.com googleads.g.doubleclick.net http://*.hotjar.io qtank.salesmore.pl *.google.com 52.166.95.107 'self'; font-src https://themes.googleusercontent.com/ *.googleads.g.doubleclick.net fonts.googleapis.com *.try.abtasty.com https://fonts.gstatic.com googleads.g.doubleclick.net themes.googleusercontent.com *.app.abtasty.com *.abtasty.com *.google.com *.ratatu.pl data: 'self'; style-src *.googleads.g.doubleclick.net https://tagmanager.google.com bnp-paribas.user.com https://bgz-fb.squiz.pl www.googleapis.com bnp-optima-uat-search01.squiz.pl https://app.abtasty.com https://www.s.ytimg.com https://teddytor.abtasty.com *.try.abtasty.com https://bnp-search01.squiz.pl https://test-bgz-fb.squiz.pl googleads.g.doubleclick.net https://skk.erecruiter.pl https://www.gstatic.com teddytor.abtasty.com www.google.com *.app.abtasty.com *.abtasty.com *.google.com *.ratatu.pl https://www.ytimg.com 52.166.95.107 https://fonts.googleapis.com 'self' 'unsafe-inline'; img-src https://www.facebook.com https://pixel.wp.pl https://cm.g.doubleclick.net https://*.googleapis.com stats.g.doubleclick.net *.try.abtasty.com https://bnp-search01.squiz.pl https://test-bgz-fb.squiz.pl *.app.abtasty.com www.google.com bcp.crwdcntrl.net *.ratatu.pl www.google-analytics.com www.0.s-nk.pl *.googleads.g.doubleclick.net https://www.i1.ytimg.com bnp-paribas.user.com *.gstatic.com https://www.googleapis.com googleads.g.doubleclick.net https://skk.erecruiter.pl www.s3.cdn03.imgwykop.pl *.google.com https://www.twitter.com www.s.c.lnkd.licdn.com https://emplocity.com https://googleads4.g.doubleclick.net https://www.googleadservices.com i.ctnsnet.com www.s-passets.pinimg.com bnp-optima-uat-search01.squiz.pl https://ib.adnxs.com https://dot.wp.pl https://*.gstatic.com https://www.google-analytics.com/ https://googleads.g.doubleclick.net https://maps.google.com gcm.ctnsnet.com www.googletagmanager.com teddytor.abtasty.com *.abtasty.com https://www.emplocity.com clients1.google.com https://tbl.tradedoubler.com https://ad.doubleclick.net www.linkedin.com https://bgz-fb.squiz.pl https://s1.2mdn.net *.ggpht.com https://www.google.pl https://sp.analytics.yahoo.com www.passets.pinterest.com https://i.vimeocdn.com https://developers.google.com www.passets.pinimg.com 'self' data:; frame-src https://emplocity.com www.wykop.pl https://player.vimeo.com https://www.linkedin.com https://vars.hotjar.com https://s-static.ak.facebook.com https://www.s-static.ak.facebook.com https://www.facebook.com try.abtasty.com stats.g.doubleclick.net app.abtasty.com *.try.abtasty.com https://platform.linkedin.com teddytor.abtasty.com *.app.abtasty.com www.google.com static.ak.facebook.com *.abtasty.com www.youtube.com dcinfos.abtasty.com *.ratatu.pl https://www.wykop.pl https://www.youtube.com https://9274211.fls.doubleclick.net www.facebook.com *.googleads.g.doubleclick.net https://bid.g.doubleclick.net bnp-paribas.user.com https://4397256.fls.doubleclick.net https://accounts.google.com https://try.abtasty.com https://vimeo.com googleads.g.doubleclick.net https://web.facebook.com *.google.com 52.166.95.107 'self'; script-src https://player.vimeo.com www.widgets.pinterest.com https://script.hotjar.com https://app.ehoundplatform.com https://pixel.wp.pl https://www.ssl.gstatic.com https://*.googleapis.com https://bnp-search01.squiz.pl https://test-bgz-fb.squiz.pl https://platform.linkedin.com *.www.abtasty.com https://www.gstatic.com www.google.com https://www.fbstatic-a.akamaihd.net *.ratatu.pl www.assets.pinterest.com https://www.youtube.com www.google-analytics.com www.0.s-nk.pl https://www.google.com https://cse.google.com *.vimeo.com bnp-paribas.user.com www.cdn.api.twitter.com https://www.googleapis.com www.platform.linkedin.com https://teddytor.abtasty.com www.static.ak.facebook.com https://apis.google.com https://skk.erecruiter.pl https://www.abtasty.com https://emplocity.com https://px.wp.pl www.abtasty.com https://www.googleadservices.com https://static.hotjar.com https://dcinfos.abtasty.com https://www.s-static.ak.facebook.com https://www.oauth.googleusercontent.com bnp-optima-uat-search01.squiz.pl https://app.abtasty.com https://www.s.ytimg.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://maps.google.com www.googletagmanager.com *.abtasty.com https://cdn.jsdelivr.net https://ad.doubleclick.net https://connect.facebook.net https://tagmanager.google.com http://platform.linkedin.com https://s.ytimg.com www.linkedin.com https://bgz-fb.squiz.pl https://www.bnpparibas.pl https://try.abtasty.com https://www.google.pl https://maps.gstatic.com https://developers.google.com https://vimeo.com *.ad.doubleclick.net https://www.google-analytics.com www.platform.twitter.com https://www.apis.google.com 52.166.95.107 https://www.static.hotjar.com 'self' 'unsafe-eval' 'unsafe-inline'; object-src *.googleads.g.doubleclick.net https://stats.g.doubleclick.net bnp-paribas.user.com try.abtasty.com stats.g.doubleclick.net https://try.abtasty.com app.abtasty.com *.try.abtasty.com googleads.g.doubleclick.net *.ad.doubleclick.net teddytor.abtasty.com *.app.abtasty.com *.abtasty.com *.google.com dcinfos.abtasty.com *.ratatu.pl 52.166.95.107 'self'; connect-src https://emplocity.com www.abtasty.com wss://ws4.hotjar.com wss://*.hotjar.com https://www.facebook.com try.abtasty.com bnp-optima-uat-search01.squiz.pl stats.g.doubleclick.net app.abtasty.com https://app.userengage.com *.try.abtasty.com https://bnp-search01.squiz.pl https://test-bgz-fb.squiz.pl wss://bnp-paribas.user.com teddytor.abtasty.com wss://ws3.hotjar.com *.app.abtasty.com *.abtasty.com dcinfos.abtasty.com *.ratatu.pl *.googleads.g.doubleclick.net wss://ws9.hotjar.com https://vc.hotjar.io bnp-paribas.user.com https://bgz-fb.squiz.pl https://graylog.hotjar.com:12443 https://insights.hotjar.com https://in.hotjar.com https://vimeo.com googleads.g.doubleclick.net qtank.salesmore.pl *.google.com 52.166.95.107 'self' 2
default-src 'none'; connect-src https://hqiem7393d.execute-api.us-west-2.amazonaws.com https://myscript.prismic.io https://myscript.cdn.prismic.io; font-src data:; img-src 'self' https://cdn-images-1.medium.com https://cdn.myscript.com data:; script-src 'self' 'unsafe-inline' https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://cdn.myscript.com https://cloud.typography.com; media-src 'self'; manifest-src 'self'; object-src 'none' 2
default-src 'self' * 'unsafe-eval' 'unsafe-inline' data: filesystem: blob:; object-src *.cloudfront.net; 2
frame-ancestors 'self' https://baby.ru https://www.baby.ru https://m.baby.ru; 2
script-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 2
default-src 'self' *.bka.de bka.preview.prod.gsb.bka.zivb.net; base-uri 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com piwik.itzbund.de; script-src 'self' 'unsafe-eval' *.googleapis.com piwik.itzbund.de;object-src 'self' piwik.itzbund.de; media-src 'self' www.bka.de *.youtube.com www.quirksmode.org *.googleapis.com piwik.itzbund.de bka.preview.prod.gsb.bka.zivb.net; child-src *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; font-src 'self' data: *.googleapis.com *.gstatic.com piwik.itzbund.de; frame-ancestors bka.preview.prod.gsb.bka.zivb.net piwik.itzbund.de  *.facebook.com 2
default-src https: 'self' 'unsafe-inline' 'unsafe-eval';img-src data: https: 'self';connect-src https: 'self' wss://*.hotjar.com; 2
frame-ancestors 'self' https://pge.segmanta.com https://www.babylist.com shop.pampers.com 2
form-action https: 2
frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com tinydotdesigns.com crrgala2020.brand.live reprorightsgala2020.brand.live; report-uri http://support.reproductiverights.org/site/XFrameViolation 2
default-src 'self'; form-action 'self'; object-src 'self';             connect-src 'self' https://api.github.com;             media-src 'self';             style-src 'self' 'unsafe-inline' https://*.googleapis.com https://cdnjs.cloudflare.com;             font-src 'self' data: https://fonts.gstatic.com;             img-src 'self' data: https://matomo.riot.im/matomo.php;             script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://*.cloudfront.net https://ajax.googleapis.com https://matomo.riot.im/matomo.js;             child-src 'self' 2
frame-src https://riksbanken.solidtango.com https://web103.reachmee.com https://www.riksbank.se https://www.google.com https://www.riksdagen.se https://vars.hotjar.com bankid: 2
frame-ancestors https://*.ionos.co.uk https://ionos.co.uk; 2
policy-uri /'self' 2
default-src * 'unsafe-inline'; img-src * data: ; script-src * 'unsafe-eval' 'unsafe-inline'; worker-src * blob:; font-src * data: 2
object-src 'self' *; 2
upgrade-insecure-requests; default-src 'self' 'unsafe-inline' 'unsafe-eval' *; 2
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss: 2
frame-ancestors 'self' *.lovecrafts.com 2
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src  * data:;connect-src * wss: 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: blob: vjs.zencdn.net bofa.demdex.net tags.tiqcdn.com *.akamaihd.net *.baml.com bankofamerica.tt.omtrdc.net *.ml.com secure.insightexpressai.com *.businesswire.com testdata.coremetrics.com http://*.bankofamerica.com https://*.bankofamerica.com  *.brightcove.com *.brightcove.net *.sharethis.com *.twitter.com twitter.com *.facebook.com www.linkedin.com delicious.com digg.com api.pinterest.com www.stumbleupon.com www.myspace.com buzz.yahoo.com www.bankofamerica.com www.boa.com www.ml.com www.merrill.com www.totalmerrill.com www.merrilllynch.com www.ust.com www.us-trust.com www.ustrust.com www.baml.com www.ba-ml.com www.bac.com acemegreen.thismoment.com analytics1.onedotone.net *.googleapis.com ecx.images-amazon.com brightcove.vo.llnwd.net *.doubleclick.net cdnt.meteorsolutions.com expressyourthanks.thismoment.com thismoment-a.akamaihd.net api.tiles.mapbox.com *.google.com *.gstatic.com www.youtube.com www.google-analytics.com bofa.44doors.com *.mapbox.com bofa.demdex.net *.maxmind.com *.betrad.com sjs.bizographics.com www.googletagmanager.com *.userzoom.com *.evidon.com *.zencdn.net *.licdn.com *.company-target.com *.demandbase.com brightcove.hs.llnwd.net *.boldchat.com *.2mdn.net *.dartmotif.net *.doubleclick.com *.merrilledge.com *.digitas.com *.serving-sys.com *.mediamind.com *.corporate-ir.net *.imwx.com; font-src 'self' http: https: *.zencdn.net *.ml.com data:; 2
frame-ancestors 'self' https://partners.arozone.com https://treehousei.com https://www.impartner.com *.3sharecorp.com 2
base-uri 'self';block-all-mixed-content;connect-src https://website.informer.com 'self';default-src 'none';font-src 'self';form-action 'self';frame-ancestors 'none';img-src data: 'self';manifest-src 'self';media-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline';style-src-elem 'self';style-src-attr 'unsafe-inline';worker-src 'none'; 2
default-src wss://*.hotjar.com/ https://cx.atdmt.com https://ve1panelsettingssa.blob.core.windows.net https://s.yimg.com/ https://*.windows.net https://ct.pinterest.com https://*.google.de https://c1.adform.net https://prod-druid-api.azurewebsites.net https://life.aegon.ro/ https://cdn-assets-pi3.nxtservers.com https://a.volvelle.tech https://bsw.digitru.st wss://ws12.hotjar.com wss://ws7.hotjar.com https://api.sitesearch360.com https://www.youtube.com/ https://creativecdn.com/ https://panel-settings-cdn-e1.ve.com/ https://www.facebook.com/ https://dc.services.visualstudio.com  https://html5-player.libsyn.com/ https://hwcdn.libsyn.com/ https://traffic.libsyn.com/ https://directline.botframework.com https://maps.gstatic.com/ https://maps.googleapis.com/ https://*.bancatransilvania.ro/ https://config1.veinteractive.com/ https://*.typekit.net/ https://*.veinteractive.com/ https://sessionapi.veinteractive.com/ https://*.creativecdn.com/ https://*.google.com/ https://*.google-analytics.com/ https://*.doubleclick.net/ https://*.google.ro https://*.bidswitch.net/ https://*.hotjar.com https://*.twitter.com/ https://*.oberthur.com https://bt4.druidplatform.com/ blob: data:; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; font-src 'self' https://use.fontawesome.com/ https://*.veinteractive.com https://*.typekit.net/ https://*.gstatic.com https://*.bt4.druidplatform.com data:; object-src 'none' 2
default-src https:; font-src https: data:; base-uri 'none'; style-src https: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; img-src https: data: 2
default-src 'self' cdn-vsh.prague.eu;font-src 'self' cdn-vsh.prague.eu data: fonts.gstatic.com *.cachefly.net *.platnosci.pl;connect-src 'self' cdn-vsh.prague.eu analytics.monkeytracker.cz maps.googleapis.com *.hotjar.com *.googlesyndication.com www3-prague-eu-test.fg.cz *.prague.eu *.google.com *.google.cz *.facebook.com *.doubleclick.net *.google-analytics.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn-vsh.prague.eu maps.google.com *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.google.com *.googleadservices.com *.facebook.net *.imedia.cz *.hotjar.com *.adform.net *.doubleclick.net *.google.cz s.yimg.jp *.yahoo.co.jp *.cachefly.net *.payu.com *.platnosci.pl *.facebook.com *.cloudflare.com cdn.tiny.cloud;form-action 'self' cdn-vsh.prague.eu *.facebook.com *.gpwebpay.com *.payu.com *.facebook.net *.platnosci.pl *.google-analytics.com;frame-src 'self' cdn-vsh.prague.eu www.youtube.com *.hotjar.com *.doubleclick.net *.adform.net *.booking.com *.facebook.com *.issuu.com *.vimeo.com *.facebook.net *.rozhlas.cz *.imedia.cz;child-src 'self' cdn-vsh.prague.eu www.youtube.com *.hotjar.com *.doubleclick.net *.adform.net *.booking.com *.facebook.com *.issuu.com *.vimeo.com *.facebook.net *.rozhlas.cz *.imedia.cz;frame-ancestors 'self' cdn-vsh.prague.eu;img-src 'self' cdn-vsh.prague.eu data: *.gstatic.com *.googleapis.com *.googlecode.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.ggpht.com *.google.com *.imedia.cz *.facebook.com *.google.cz *.googlesyndication.com *.yahoo.co.jp www3-prague-eu-test.fg.cz *.prague.eu *.cachefly.net *.payu.com *.platnosci.pl *.tinymce.com *.seznam.cz;style-src 'self' 'unsafe-inline' cdn-vsh.prague.eu fonts.googleapis.com analytics.monkeytracker.cz *.google.com *.hotjar.com *.cachefly.net *.payu.com *.platnosci.pl cdn.tiny.cloud;object-src 'self' cdn-vsh.prague.eu 2
default-src https: data: 'unsafe-inline' 2
font-src 'self' code.freent.de oauth.freenet.de https://fonts.gstatic.com; img-src * data:; frame-ancestors *.freenet.de; plugin-types application/pdf application/x-shockwave-flash 2
default-src 'none';                                     connect-src https://sonarsource.cdn.prismic.io https://sonarsource.prismic.io https://www.google-analytics.com https://veh6ryrcr4.execute-api.eu-central-1.amazonaws.com https://stats.g.doubleclick.net;                                     font-src 'self' https://fonts.gstatic.com data:;                                     frame-src https://sonarsource.prismic.io https://www.youtube.com;                                     img-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://ssl.gstatic.com https://www.gstatic.com https://googleads.g.doubleclick.net https://www.google.com;                                     media-src 'self';                                     script-src 'self' 'unsafe-inline' https://code.jquery.com https://static.cdn.prismic.io https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com;                                     style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com 2
default-src * data: blob:;script-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: *.licdn.com *.quantcount.com *.quantserve.com *.virtualearth.net *.bing.com https://s.ytimg.com/ https://www.youtube.com/ https://sp.analytics.yahoo.com/ https://s.yimg.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://sjs.bizographics.com/insight.min.js https://bat.bing.com/bat.js https://static.ads-twitter.com/uwt.js https://s3.amazonaws.com/trk.cetrk.com/f/t.js https://tagmanager.google.com/ https://instafeed.assets.pixlee.com https://www.buzzsprout.com https://api.volunteer.com.au https://volwidget.s3.amazonaws.com https://www.bing.com https://dev.virtualearth.net https://t.ssl.ak.dynamic.tiles.virtualearth.net https://fast.wistia.net https://ecn.dev.virtualearth.net https://openlayers.org mapstraction.com https://www.bing.com/ https://vudoo.com https://dme0ih8comzn4.cloudfront.net *.admaxim *.addthis.com https://m.addthisedge.com https://cdnjs.cloudflare.com https://d1ig6folwd6a9s.cloudfront.net https://sample.crazyegg.com *.crazyegg.com https://script.crazyegg.com https://sample-api-v2.crazyegg.com/n/588250/all https://s3.amazonaws.com/trk.cetrk.com/d/t.js https://e.issuu.com/embed.js https://everydayhero.com *.facebook.com *.facebook.net fast.wistia.com https://www.google.com http://www.google-analytics.com *.google-analytics.com *.googleapis.com https://maps.google.com https://optimize.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net http://s.gravatar.com https://code.jquery.com https://s.c.appier.net https://jscdn.appier.net https://assets.juicer.io/ https://embed.playbuzz.com https://sb.scorecardresearch.com https://mcd-sdk.playbuzz.com https://res-format-story.playbuzz.com https://cdn.playbuzz.com https://widget.surveymonkey.com https://salvos.org.au/ https://www.salvationarmy.org.au/ http://salvationarmy.org.au/ http://src.litix.io/ https://s0.wp.com https://stats.wp.com/ https://public.tableau.com/ *.twitter.com *.twimg.com https://users.dialogfeed.com *.verisign.com http://fast.wistia.com 127.0.0.1:* *.localhost; style-src 'self' *.bing.com https://tagmanager.google.com/debug/css.css https://assets.buzzsprout.com https://volwidget.s3.amazonaws.com https://openlayers.org https://www.bing.com https://dme0ih8comzn4.cloudfront.net https://salvos.org.au/ https://www.salvationarmy.org.au/ https://salvationarmy.org.au/ data: *.addthis.com *.bootstrapcdn.com https://d1ig6folwd6a9s.cloudfront.net https://fonts.googleapis.com http://fonts.googleapis.com *.googleapis.com *.gstatic.com https://optimize.google.com *.jquery.com https://assets.juicer.io/ *.myfonts.net https://res-format-story.playbuzz.com *.twimg.com *.twitter.com http://s.gravatar.com 'unsafe-inline'; media-src * data:; font-src * data:; connect-src 'self' https://*.google.com *.botframework.com wss://directline.botframework.com *.crazyegg.com https://sample-api-v2.crazyegg.com/ https://s.yimg.com/ https://bat.bing.com https://sample-api-v2.crazyegg.com/n/588250/all https://s.c.appier.net https://www.bing.com https://salvos.org.au/ https://www.salvationarmy.org.au/ https://salvationarmy.org.au/ https://anylist.c.appier.net *.addthis.com https://stats.g.doubleclick.net/ *.facebook.com https://www.google-analytics.com https://assets.juicer.io/ http://www.juicer.io https://www.juicer.io https://prd-collector-anon.playbuzz.com https://pixel.playbuzz.com https://mcd-sdk.playbuzz.com https://embed.playbuzz.com https://cdn.playbuzz.com https://syndication.twitter.com *.vimeocdn.com pipedream.wistia.com https://e.issuu.com https://users.dialogfeed.com embed.wistia.com distillery.wistia.com/x; report-uri https://salvos.org.au/csp-reports/ 2
default-src https:; style-src https: 'unsafe-inline'; img-src * data:; font-src *; script-src https: 'unsafe-inline' 'unsafe-eval'; connect-src *; 2
frame-ancestors 'self' https://fullsb-supportjfrog.cs84.force.com https://ppp-supportjfrog.cs100.force.com https://partners.jfrog.com; 2
block-all-mixed-content; frame-ancestors 'self' qualys.com *.qualys.com; 2
frame-ancestors self *.uhg.com *.optum.com *.uhc.com; 2
report-uri / 2
default-src self https: data: 'unsafe-inline' 'unsafe-eval'; script-src self https: 'unsafe-inline' 'unsafe-eval'; base-uri 'self' https://creator.zmags.com https://www.googletagmanager.com; 2
frame-src                     'self'                     https://eu-west-2-elume.s3.us-east-1.amazonaws.com/                     https://forms.hsforms.com/                     https://app.hubspot.com                     https://www.googletagmanager.com                     https://accounts.google.com                     https://sdk.companywebcast.com                     https://ir.asp.manamind.com                     https://www.youtube.com                     https://www.youtube-nocookie.com                     *.metric.gstatic.com                     https://webcast.seria.no                     https://spinzam.com/                     https://player.vimeo.com                     https://cdn.embedly.com                     https://www.facebook.com                     https://www.google.com/                     https://twitter.com/                     https://kongsberg.easycruit.com;                  frame-ancestors                     'self' 2
default-src ‘self’ ‘unsafe-inline’ data: *.google.com *.youtube.com *.naver.com *.daum.net *.kakao.com *.cdc.go.kr *.kdca.go.kr *.nih.go.kr *.macromedia.com *.mohw.go.kr *.mohw.com *.korea.net *.sun.com *.springframework.org *.w3.org *.juso.go.kr *.softforum.com *.ipify.org *.google-analytics.com *.epeople.go.kr ; 2
default-src 'none'; base-uri 'none'; frame-src www.google.com checkout.stripe.com; frame-ancestors 'none'; style-src *.scryfall.com scryfall.com; script-src *.scryfall.com scryfall.com checkout.stripe.com www.google-analytics.com www.google.com www.gstatic.com 'unsafe-eval'; img-src *.scryfall.com scryfall.com *.stripe.com www.google-analytics.com data:; font-src *.scryfall.com scryfall.com; manifest-src *.scryfall.com scryfall.com; connect-src api.scryfall.com scryfall.com www.google-analytics.com checkout.stripe.com; block-all-mixed-content; 2
default-src 'self' 'unsafe-inline' blob: *.disquscdn.com disqus.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.freeagent.com *.fre.ag *.googleapis.com *.google-analytics.com *.doubleclick.net *.googleadservices.com *.adroll.com *.cloudfront.net *.getdrip.com *.facebook.net *.twitter.com script.crazyegg.com *.reviews.co.uk *.addthis.com *.addthisedge.com *.disqus.com *.twimg.com www.googletagmanager.com *.tfaforms.com s3.amazonaws.com/trk.cetrk.com/ *.disquscdn.com disqus.com *.wistia.com *.wistia.net www.gstatic.com www.google.com *.workable.com px.ads.linkedin.com static.ads-twitter.com snap.licdn.com widget.reviews.co.uk cdn.ampproject.org www.linkedin.com pro.ip-api.com bat.bing.com widget.trustpilot.com tagmanager.google.com tinymce.cachefly.net optimize.google.com js.maxmind.com z.moatads.com widget-prime.rafflecopter.com www.dwin1.com cdnjs.cloudflare.com/ajax/libs/rollbar.js/ optanon.blob.core.windows.net code.jquery.com *.onetrust.com *.cookielaw.org cdnjs.cloudflare.com *.bizographics.com geoip-js.com cdn.rollbar.com *.appointedd.com s3-eu-west-1.amazonaws.com *.zdassets.com widget-mediator.zopim.com; img-src data: blob: *; frame-src 'self' *.doubleclick.net www.facebook.com *.wistia.com *.wistia.net widget.reviews.co.uk *.twitter.com disqus.com *.addthis.com embedwistia-a.akamaihd.net www.youtube.com www.youtube-nocookie.com www.google.com *.disquscdn.com widget.trustpilot.com *.googletagmanager.com optimize.google.com widget-prime.rafflecopter.com *.appointedd.com; font-src 'self' data: fonts.gstatic.com fast.wistia.com maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' data: blob: fonts.googleapis.com *.disquscdn.com *.twitter.com *.twimg.com tagmanager.google.com hello.myfonts.net optimize.google.com; media-src 'self' blob: data: *.wistia.net embedwistia-a.akamaihd.net *.wistia.com *.zdassets.com; connect-src 'self' data: wss: *.litix.io *.reviews.co.uk *.wistia.com *.wistia.net *.facebook.com *.addthis.com *.freeagent.com *.fre.ag *.google-analytics.com api.rollbar.com *.doubleclick.net embedwistia-a.akamaihd.net www.google.com *.adroll.com www.google.co.uk widget.trustpilot.com geoip-js.com geoip-js.maxmind.com geoip.maxmind.com *.crazyegg.com adservice.google.com *.cookielaw.org *.onetrust.com *.zdassets.com *.zendesk.com widget-mediator.zopim.com; object-src 'self' embedwistia-a.akamaihd.net; report-uri https://freeagent.report-uri.com/r/d/csp/enforce 2
frame-src 'self' *.betradar.com *.sportradar.com *.aitcloud.de consentcdn.cookiebot.com vars.hotjar.com www.googletagmanager.com www.youtube.com; frame-ancestors 'self' *.betradar.com *.sportradar.com *.aitcloud.de 2
base-uri https: http:; object-src *; script-src 'unsafe-inline' 'unsafe-eval' https: http: 'self' blob: 2
frame-ancestors https://*.greatcall.com 2
frame-ancestors cms.pptvthailand.com *.pptvhd36.com 2
sandbox allow-forms allow-pointer-lock allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts allow-top-navigation-by-user-activation 2
frame-ancestors 'self' https://www.anglaisfacile.com https://www.francaisfacile.com https://www.tolearnenglish.com https://www.tolearnfrench.com https://www.allemandfacile.com https://www.espagnolfacile.com https://www.nlfacile.com https://www.italien-facile.com https://www.mesoutils.com https://www.mesexercices.com https://www.mathematiquesfaciles.com https://www.touslescours.com https://www.tolearnfrench.com https://*.tolearnfree.com; report-uri https://tolearnfree.report-uri.io/r/default/csp/enforce; base-uri 'self'; 2
default-src 'self' https: blob: data: 'unsafe-inline' 'unsafe-eval';frame-ancestors https://grandcentral.beescloud.com https://grandcentral.cloudbees.com 'self' 2
default-src 'self' chatdate.app eu1.chatdate.app us1.chatdate.app am1.chatdate.app *.chatdate.app *.eu1.chatdate.app *.us1.chatdate.app *.am1.chatdate.app honcdn.com *.honcdn.com pd1eu.honcdn.com *.pd1eu.honcdn.com   *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' honcdn.com *.honcdn.com pd1eu.honcdn.com *.pd1eu.honcdn.com *.googleapis.com *.gstatic.com *.google.com vk.com *.vk.me cdn.syndication.twitter.com *.facebook.net *.facebook.com *.paypal.com www.paypalobjects.com *.youtube.com *.ytimg.com api.ok.ru *.google-analytics.com *.googletagmanager.com *.api.here.com *.instagram.com *.digicert.com *.mapbox.com *.googlesyndication.com *.googletagservices.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com *.ampproject.org *.amazon-adsystem.com adservice.google.com https://cdn.ampproject.org; style-src 'self' 'unsafe-inline' honcdn.com *.honcdn.com pd1eu.honcdn.com *.pd1eu.honcdn.com vk.com *.vk.me *.googleapis.com; font-src 'self' data: honcdn.com *.honcdn.com pd1eu.honcdn.com *.pd1eu.honcdn.com fonts.googleapis.com fonts.gstatic.com; img-src * data: blob:; child-src 'self' chatdate.app eu1.chatdate.app us1.chatdate.app am1.chatdate.app *.chatdate.app *.eu1.chatdate.app *.us1.chatdate.app *.am1.chatdate.app honcdn.com *.honcdn.com pd1eu.honcdn.com *.pd1eu.honcdn.com   *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com blob:; worker-src 'self' chatdate.app eu1.chatdate.app us1.chatdate.app am1.chatdate.app *.chatdate.app *.eu1.chatdate.app *.us1.chatdate.app *.am1.chatdate.app honcdn.com *.honcdn.com pd1eu.honcdn.com *.pd1eu.honcdn.com   *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com blob:; media-src * data: blob:; frame-src * hon:; prefetch-src 'self' *.googlesyndication.com *.googletagservices.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com *.ampproject.org *.amazon-adsystem.com adservice.google.com; frame-ancestors 'self' apps.facebook.com; report-uri /jss/csp_report.phtml 2
default-src https: 'unsafe-eval' 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval' embedsocial.com www.google-analytics.com ajax.googleapis.com www.publicalbum.org; font-src 'self' fonts.googleapis.com fonts.gstatic.com; 2
child-src 'self' https://cart.jlcpcb.com https://jlcpcb.com www.google.com https://www.youtube.com 2
frame-ancestors 'self'; font-src 'self' data:; 2
script-src 'self' at.alicdn.com 'unsafe-eval' 'unsafe-inline' data: blob: *.dancf.com *.gaoding.com hm.baidu.com tongji.baidu.com assetscli.udesk.cn ttxsapp.udesk.cn retcode.alicdn.com www.google-analytics.com www.googletagmanager.com cdn.lr-ingest.io www.googleadservices.com googleads.g.doubleclick.net; frame-ancestors 'self' *.gaoding.com god-mgr.dancf.com ttxsapp.udesk.cn tongji.baidu.com www.huodongxing.com www.365editor.com https://ytcs.lenovo.net http://ytcs.lenovo.net https://ytcstest.lenovo.net http://pnew.365editor.com http://pwww.365editor.com http://new.365editor.com https://new.365editor.com https://ex.365editor.com http://ex.365editor.com http://www.365editor.com https://cdn.lr-ingest.io https://mp.weixin.qq.com https://testsmb.lenovo.net/ www.wxb.com http://local.wxb.com http://*.gaoding.com https://*.gaoding.com https://www.xmyeditor.com http://xmyplus.jiangniaocloud.top https://xmyplus.jiangniaocloud.top http://editor.chinaso.com http://*.huanleguang.com http://*.huanleguang.cn  https://bj.96weixin.com http://bj.96weixin.com http://*.haoche.cn https://*.haoche.cn http://*.haoche.cn:*/ https://*.shuaishou.com http://*.shuaishou.com http://localhost:* 2
upgrade-insecure-requests; default-src https: blob: wss: data:; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: blob: data:;frame-src https: blob: data:; report-uri /cspreports 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.parp.gov.pl https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://connect.facebook.net https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://snap.licdn.com https://stats.g.doubleclick.net; 2
default-src 'self' *.vidyard.com https: mailto:; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https: mailto:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; media-src 'self' https: blob:; font-src 'self' https: data:; connect-src 'self' https: wss: ; upgrade-insecure-requests 2
frame-ancestors 'self' *.investec.com https://ng.secure.investec.com:8080; 2
frame-ancestors 'self' temenos.seismic.com 2
default-src *.whatuseek.com 'unsafe-inline'; frame-ancestors 'none'; 2
default-src 'self' https://*.eaze.com https://*.eaze.dev https://*.eaze.tech;connect-src 'self' https://*.eaze.com https://*.eaze.dev https://*.eaze.tech https://*.eazeup.com https://xid.eaze.io https://xid.eazewellness.com https://*.firebaseio.com wss://*.firebaseio.com https://*.googlevideo.com https://api.berbix.com https://api.inoviopay.com https://api.lever.co https://api.segment.io https://auth.split.io https://eaze.pxf.io https://eaze.zendesk.com https://ekr.zdassets.com https://events.split.io https://googleads.g.doubleclick.net https://res.cloudinary.com https://rs.fullstory.com https://sdk.split.io/ https://sentry.io https://split-realtime.ably.io https://spreadsheets.google.com https://streaming.split.io https://skyfire.vimeocdn.com https://widget-mediator.zopim.com wss://widget-mediator.zopim.com https://www.google-analytics.com https://www.youtube.com;font-src 'self' data: https://*.eaze.com https://*.eaze.dev https://*.eaze.tech https://fonts.gstatic.com https://s3.lightboxcdn.com https://verify.berbix.com;frame-ancestors 'self' https://*.eaze.com https://*.eaze.dev https://*.eaze.tech;frame-src 'self' https://*.eaze.com https://*.eaze.dev https://*.eaze.tech https://*.firebaseio.com https://player.vimeo.com https://verify.berbix.com https://www.youtube.com https://9619304.fls.doubleclick.net https://10503490.fls.doubleclick.net;img-src 'self' data: https://*.eaze.com https://*.eaze.dev https://*.eaze.tech https://*.eazeup.com https://aa.agkn.com https://adadvisor.net https://ads.creative-serving.com https://bh.contextweb.com https://bm.adentifi.com https://ce.lijit.com https://cm.g.doubleclick.net https://col.surfside.io https://dmx.districtm.io https://dpm.demdex.net https://dsum.casalemedia.com https://eb2.3lift.com https://edge.surfside.io https://hexagon-analytics.com https://i.vimdeocdn.com https://i.ytimg.com https://ib.adnxs.com https://id5-sync.com https://inv-nets.admixer.net https://logs-01.loggly.com https://maps.googleapis.com https://maps.gstatic.com https://match.adsrvr.org https://pixel.adswizz.com https://pixel.rubiconproject.com https://pixel.tapad.com https://pixelb.randi.adswizz.com https://q75ihpqk.micpn.com https://res.cloudinary.com https://rs.fullstory.com https://rtb-csync.smartadserver.com https://rtb.gumgum.com https://s.pubmine.com https://s3.lightboxcdn.com https://secure.adnxs.com https://simage2.pubmatic.com https://ssl.gstatic.com https://sync.1rx.io https://sync.outbrain.com https://sync.search.spotxchange.com https://t.co https://tr.outbrain.com https://us-u.openx.net https://v2uploads.zopim.io https://verify.berbix.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://www.lightboxcdn.com https://www.youtube.com https://yt3.ggpht.com https://x.bidswitch.net;media-src 'self' https://*.eaze.com https://*.eaze.dev https://*.eaze.tech https://static.zdassets.com;object-src 'self' https://*.eaze.com https://*.eaze.dev https://*.eaze.tech;script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.eaze.com https://*.eaze.dev https://*.eaze.tech https://*.firebaseio.com https://ads.creative-serving.com https://amplify.outbrain.com https://analytics.twitter.com https://cdn.segment.com https://cdn.siftscience.com https://cm.g.doubleclick.net https://d.impactradius-event.com https://edge.fullstory.com https://f.vimeocdn.com https://lightboxapi.azurewebsites.net https://maps.googleapis.com https://match.adsrvr.org https://pixel.tapad.com https://q75ihpqk.micpn.com https://secure.adnxs.com https://ssl.google-analytics.com https://static.ads-twitter.com https://static.zdassets.com https://static2.creative-serving.com https://tagmanager.google.com https://tr.outbrain.com https://verify.berbix.com https://widget-mediator.zopim.com https://fullstory.com https://www.fullstory.com https://www.google-analytics.com https://www.googletagmanager.com https://www.lightboxcdn.com https://www.youtube.com;style-src 'self' 'unsafe-inline' https://*.eaze.com https://*.eaze.dev https://*.eaze.tech https://fonts.googleapis.com https://s3.lightboxcdn.com https://tagmanager.google.com https://verify.berbix.com https://www.lightboxcdn.com;upgrade-insecure-requests 2
default-src * 'unsafe-eval' 'unsafe-inline' data:; 2
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.b0e8.com https://*.bc0a.com https://cdnjs.cloudflare.com https://cdn.cookielaw.org https://connect.facebook.net https://d2oh4tlt9mrke9.cloudfront.net https://googleads.g.doubleclick.net https://maps.googleapis.com https://p.typekit.net https://service.maxymiser.net https://ssl.google-analytics.com https://tagmanager.google.com https://translate.google.com https://translate.googleapis.com https://ws.sessioncam.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com;object-src https://*.avalonbay.com https://*.avaloncommunities.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://p.typekit.net https://tagmanager.google.com https://translate.googleapis.com https://use.typekit.net;img-src 'self' data: *.avaloncommunities.com *.avalonbay.com *.azureedge.net https://*.b0e8.com https://www.facebook.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://maps.gstatic.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://translate.googleapis.com https://translate.google.com https://via.placeholder.com https://*.sessioncam.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com;media-src 'none';frame-src 'self' *.avaloncommunities.com *.avalonbay.com https://*.doubleclick.net https://*.merchante-solutions.com https://service.maxymiser.net https://www.youtube.com;font-src data: *.avaloncommunities.com https://fonts.gstatic.com https://use.typekit.net;connect-src https://*.avalonbay.com https://*.avaloncommunities.com https://*.merchante-solutions.com https://stats.g.doubleclick.net https://translate.googleapis.com https://*.sessioncam.com https://www.google-analytics.com;base-uri 'self';child-src 'self' https://*.avalonbay.com;form-action 'self';frame-ancestors 'none';plugin-types application/pdf;report-uri https://api.avalonbay.com/report/csp 2
frame-ancestors https://*.trabajando.cl https://*.gpsrrhh.com http://*.trabajando.cl http://*.gpsrrhh.com; 2
default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: erm-chat.bod.de:8080 *.bod.de images.bod.com *.bod.com  *.trustpilot.com *.googletagmanager.com ssl.google-analytics.com *.google-analytics.com *.facebook.net *.facebook.com *.facebook.de *.bing.com *.twitter.com static.ads-twitter.com t.co *.google.com googleads.g.doubleclick.net *.adfarm1.adition.com connect.facebook.net fast.fonts.net *.fonts.net *.google.de stats.g.doubleclick.net *.googleadservices.com *.googleapis.com *.gstatic.com *.cookiefirst.com *.bootstrapcdn.com *.cloudflare.com *.youtube.com *.youtu.be *.vimeo.com; img-src 'self' data: blob: https:; 2
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: 'unsafe-inline'; frame-src https: data:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss:; child-src https: blob:; object-src 'none'; base-uri 'none' 2
frame-ancestors 'self' *.lowermybills.com app.optimizely.com analytics.google.com 2
frame-ancestors https://community.personio.de https://www.personio.de https://personio.elearnio.com/ 2
frame-ancestors 'self' blaetterkatalog.musicstore.de  ; 2
frame-ancestors *.adobe.com 2
default-src 'self'; script-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; media-src; object-src; prefetch-src; child-src; frame-src 'self'; worker-src; frame-ancestors 'self' https://scripts.zdv.uni-mainz.de; form-action 'self' www.paypal.com; base-uri; manifest-src; plugin-types; report-uri; report-to 2
frame-ancestors 'self' http://www.quironsalud.es https://www.quironsalud.es http://betaweb.quironsalud.es https://betaweb.quironsalud.es http://intranetfjd.idc.local https://intranetfjd.idc.local http://overweightinstitute.fjd.es https://overweightinstitute.fjd.es http://www.cirujanosdelcorazon.es https://www.cirujanosdelcorazon.es http://www.clinicadelpilar.org https://www.clinicadelpilar.org http://www.clinicavalles.com https://www.clinicavalles.com http://www.cuidamosdelamujer.es https://www.cuidamosdelamujer.es http://www.diverhospital.es https://www.diverhospital.es http://www.e-quironsalud.com https://www.e-quironsalud.com http://www.fjd.es https://www.fjd.es http://www.fundacionquironsalud.org https://www.fundacionquironsalud.org http://www.hgc.es https://www.hgc.es http://www.hgvillalba.es https://www.hgvillalba.es http://www.hope-documental.es https://www.hope-documental.es http://www.hospitalinfantaelena.es https://www.hospitalinfantaelena.es http://www.hospitalpublicocolladovillalba.es https://www.hospitalpublicocolladovillalba.es http://www.hospitalreyjuancarlos.es https://www.hospitalreyjuancarlos.es http://www.hscor.com https://www.hscor.com http://www.idcsaludenfermeria.es https://www.idcsaludenfermeria.es http://www.idcsalud.es https://www.idcsalud.es http://www.jornadaspbp.es https://www.jornadaspbp.es http://www.lungscreen.eu https://www.lungscreen.eu http://www.oncohealth.eu https://www.oncohealth.eu http://www.porquesabeselegir.es https://www.porquesabeselegir.es http://www.quironsalud-hospitals.com https://www.quironsalud-hospitals.com http://www.rare-genomics.com https://www.rare-genomics.com http://www.redneurosalud.es https://www.redneurosalud.es http://www.ruber.es https://www.ruber.es http://www.ruberinternacional.es https://www.ruberinternacional.es http://www.teknonbarcelona.com https://www.teknonbarcelona.com http://www.teknonbarcelona.it https://www.teknonbarcelona.it http://www.teknonbarcelona.ru https://www.teknonbarcelona.ru http://www.teknon.es https://www.teknon.es http://www.tucanaldesalud.es https://www.tucanaldesalud.es 2
default-src 'self' http: bott-tc.nautilus https: *.bosch-thermotechnology.com s.webtrends.com *.boschtt-documents.com www.bimstore.co.uk services.kittelberger.net *.mycliplister.com bott-tc.nautilus; media-src 'self' *.boschtt-documents.com services.kittelberger.net *.mycliplister.com mycliplister.com; font-src 'self' fonts.gstatic.com foerderrechner.bosch-thermotechnology.com www.bosch-easycontrol.com www.heizung-steuern.com; object-src data: 'self'; img-src http: bott-tc.nautilus bott-fs.nautilus https: bott-tc.nautilus bott-fs.nautilus data: blob:; style-src 'self' 'unsafe-inline' cdn.datatables.net fonts.googleapis.com www.bosch-easycontrol.com www.heizung-steuern.com; script-src https: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https: mailto: bosch.mi4biz.net www.boschthermolife.com junkers-de-de-b.boschtt-documents.com; frame-ancestors 'self' https: bosch.mi4biz.net http://bott-fs.kittelberger.net 2
default-src 'self' data: https://*.spcollege.edu https://ai.ocelotbot.com https://api.hubapi.com https://blog.spcollege.edu https://cdn.yoshki.com https://*.facebook.com https://*.adroll.com https://*.g.doubleclick.net https://*.gstatic.com https://dpm.demdex.net https://fonts.gstatic.com https://forms.hsforms.com https://*.hubspot.com https://www.google.com https://*.googleapis.com https://www.google-analytics.com https://hubspot-forms-static-embed.s3.amazonaws.com https://img.youtube.com https://insight.adsrvr.org https://px.ads.linkedin.com https://t.co https://translate.google.com https://translate.googleapis.com https://webapps.spcollege.edu; child-src 'self' https://adservices.brandcdn.com https://askalibrarian.org https://bid.g.doubleclick.net https://d1eoo1tco6rr5e.cloudfront.net https://embed.ocelotbot.com https://embeds.tagboard.com https://forms.hsforms.com https://www.google.com https://insight.adsrvr.org https://player.vimeo.com https://spcollege.financialaidtv.com https://www.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.facebook.net https://*.googleapis.com https://*.hubspot.com https://adservices.brandcdn.com https://ai.fatv.us https://ai.ocelotbot.com https://analytics.twitter.com https://cdn.yoshki.com https://cdnjs.cloudflare.com https://d.adroll.com https://d.adroll.mgr.consensu.org https://connect.facebook.net https://e.com https://embed.financialaidtv.com https://embed.ocelotbot.com https://forms.hsforms.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://js.hsadspixel.net https://js.hsforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://platform.twitter.com https://px.ads.linkedin.com https://s.adroll.com https://s.ytimg.com https://snap.licdn.com https://static.ads-twitter.com https://static.tagboard.com https://tag.brandcdn.com/ https://translate.google.com https://utils.spcollege.edu https://webapps.spcollege.edu https://www.youtube.com; style-src 'self' 'unsafe-inline' https://*.tagboard.com https://ai.ocelotbot.com https://*.googleapis.com https://utils.spcollege.edu; frame-ancestors 'self' https://www.youtube.com https://embed.ocelotbot.com https://embeds.tagboard.com; object-src 'none'; 2
default-src 'self'; base-uri 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; frame-src 'self'; img-src 'self' data:; object-src 'self'; frame-ancestors 'none'; connect-src 'self' https://api.transferwise.com; 2
default-src *;script-src * 'unsafe-inline' 'unsafe-eval';style-src * 'unsafe-inline';img-src * data:;font-src 'self' data: https://fonts.googleapis.com:* https://fonts.gstatic.com:* https://www.googletagmanager.com:* https://www.google-analytics.com:* https://googleads.g.doubleclick.net:* https://maxcdn.bootstrapcdn.com:*;upgrade-insecure-requests;block-all-mixed-content;manifest-src 'self';object-src 'none'; 2
worker-src 'self'; 2
default-src 'none';connect-src 'self' https://*.salemove.com wss://pubsub.salemove.com wss://kluster.salemove.com https://*.twilio.com wss://chunderw-vpc-gll.twilio.com https://*.secumd.org https://*.bethpagefcu.com https://*.bellco.org https://js.callrail.com https://n2.mouseflow.com https://s.yimg.com wss://mpsnare.iesnare.com wss://ci-mpsnare.iovation.com https://*.google.com https://stats.g.doubleclick.net https://files.bethpagefcu.com https://api.datatrac.net https://*/api/fraudforce/FraudForce/Post https://siteintercept.qualtrics.com https://*.nanorep.co https://*.nanorep.com https://performance.typekit.net https://bat.bing.com https://secure-ds.serving-sys.com https://www.google-analytics.com https://*.jotform.com https://app.textrecruit.com https://app1.textrecruit.com https://*.segmint.net https://s3.amazonaws.com/cdn.segmint.net/ https://*.fontawesome.com;font-src 'self' data: https://*.gstatic.com https://use.typekit.net https://insight.adsrvr.org https://*.fontawesome.com https://apps.pcdgroup.com https://*.cloudflare.com https://*.formstack.com;frame-src 'self' https://*.doubleclick.net https://pixel-a.basis.net https://www.youtube.com https://pixel.sitescout.com https://*.locatorsearch.com https://pixel.mathtag.com https://insight.adsrvr.org https://*.cloudfront.net https://*.google.com https://www2.iraservicecenter.com https://*.bethpagefcu.com https://*.secumd.org https://*.bellco.org https://*.orb.alkamitech.com https://www.agentinsure.com https://fliphtml5.com https://vizi.vizirecruiter.com https://secumd.satmetrix.com https://www.youtube-nocookie.com https://secure.checkout.visa.com https://assets.secure.checkout.visa.com https://sandbox.secure.checkout.visa.com https://a.pgtb.me https://*.formstack.com https://*.jotform.io https://*.jotform.us https://*.jotform.com https://www.facebook.com https://connect.segmint.net https://m.lndg.page;frame-ancestors 'self';img-src 'self' data: https://*.google.com https://bat.bing.com https://bs.serving-sys.com https://pixel-a.basis.net https://p.typekit.net https://*.siteimproveanalytics.io https://detectca.easysol.net https://www.facebook.com https://pixel.sitescout.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://*.doubleclick.net https://ssiteid.t.eloqua.com https://*.salemove.com https://images.locatorsearch.com https://www.pages03.net https://pixel.mathtag.com https://track.hubspot.com https://insight.adsrvr.org https://cs.choozle.com https://idsync.rlcdn.com https://s3.amazonaws.com/provelo.bold360demo.com/ https://images.printable.com https://mpp.specificclick.net https://cx.atdmt.com https://dpm.demdex.net https://pixel.rubiconproject.com https://pixel.advertising.com https://tags.bluekai.com https://pixel.tapad.com https://idpix.media6degrees.com https://aa.agkn.com https://dsum-sec.casalemedia.com https://loadm.exelator.com https://odr.mookie1.com https://cache.vindicosuite.com https://uipglob.semasio.net https://eb2.3lift.com https://e.nexac.com https://dmp.truoptik.com https://mid.rkdms.com https://ml314.com https://cw.addthis.com https://cache.vindicosuite.com https://www.glassdoor.com https://*.oflows.net https://www.navyfederal.org https://match.adsrvr.org https://online.citi.com https://www2.bac-assets.com https://ib.adnxs.com http://img.en25.com/EloquaImages/clients/BellcoCreditUnion/ https://*.facebook.net https://*.simpli.fi https://*.jotfor.ms https://*.jotform.com https://*.formstack.com https://ups.analytics.yahoo.com https://simplifi.partners.tremorhub.com https://sync.intentiq.com https://image2.pubmatic.com https://ads.stickyadstv.com https://fei.pro-market.net https://sync.bfmio.com https://stags.bluekai.com https://bcp.crwdcntrl.net https://ce.lijit.com https://load77.exelator.com https://sync.search.spotxchange.com https://bh.contextweb.com https://us-u.openx.net https://pippio.com https://sync1.intentiq.com https://in.xspadvertising.com https://usermatch.krxd.net https://beacon.krxd.net https://su.addthis.com https://d.agkn.com https://match.sharethrough.com https://simage2.pubmatic.com https://io.narrative.io https://i.liadm.com https://x.bidswitch.net https://s.thebrighttag.com https://t.mookie1.com https://login.dotomi.com https://*.googleusercontent.com https://*.gstatic.com https://app.textrecruit.com https://app1.textrecruit.com https://jelly.mdhv.io https://www.yext-pixel.com;media-src 'self' data: https://mpsnare.iesnare.com https://ci-mpsnare.iovation.com https://libs.salemove.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com https://cdn.callrail.com https://*.salemove.com https://bat.bing.com https://cdn.mouseflow.com https://*.facebook.net https://detectca.easysol.net https://googleads.g.doubleclick.net https://s.btstatic.com/tag.js https://s.yimg.com/wi/ytc.js https://siteimproveanalytics.com https://www.google-analytics.com https://*.google.com https://www.googletagmanager.com https://www.googleadservices.com https://www.youtube.com/iframe_api https://*.bethpagefcu.com https://mpsnare.iesnare.com https://use.typekit.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://script.crazyegg.com https://sp.analytics.yahoo.com https://code.getmdl.io/1.3.0/material.min.js https://www.googleadservices.com https://img.en25.com/i/elqCfg.min.js https://s.thebrighttag.com https://s.ytimg.com https://ci-mpsnare.iovation.com https://js.callrail.com https://js.locatorsearch.com https://*.cloudflare.com https://*.cloudfront.net https://www.sc.pages03.net https://*.siteintercept.qualtrics.com https://pixel.mathtag.com https://browser.sentry-cdn.com https://*.nanorep.co https://*.nanorep.com https://*.gstatic.com https://s3.amazonaws.com/data.vizirecruiter.com/ https://*.fontawesome.com https://*.cudlautosmart.com https://nexus.ensighten.com https://ssl.geoplugin.net https://secure.checkout.visa.com http://*.serving-sys.com https://*.serving-sys.com https://cdn.rawgit.com/noelboss/featherlight/ https://schedule.lobbycentral.com https://*.simpli.fi https://bethpagefederalcreditunion.formstack.com https://*.jotform.com https://*.jotform.us https://*.jotformpro.com https://*.jotfor.ms https://*.jotform.io https://*.formstack.com https://sandbox.secure.checkout.visa.com https://knowledgetags.yextpages.net https://app.textrecruit.com https://app1.textrecruit.com https://action.dstillery.com https://cdn.segmint.net https://analytics.yext-static.com;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.salemove.com https://code.getmdl.io/1.3.0/ https://cloud.typography.com https://*.fontawesome.com https://*.cloudflare.com https://cdn.rawgit.com/noelboss/featherlight/ https://schedule.lobbycentral.com https://*.jotfor.ms https://*.formstack.com https://*.google.com; 2
frame-ancestors 'self' https://*.superoffice.com https://royalqueenseedssp.inone.useinsider.com 2
script-src 'unsafe-inline' 'unsafe-eval' http: https: blob: https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/ https://cdn.ampproject.org/rtv/ 2
frame-src https://*; frame-ancestors *.chivas.com; 2
default-src 'self'; font-src *;img-src * data:; script-src *; style-src *; 2
frame-ancestors 'self' *.blacknight.com *.blacknight.ie *.blacknight.blog *.blacknight.tech *.feedpress.me 2
default-src 'self' *.vidyard.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bidr.io *.bizzabo.com *.cloudfront.net acsbapp.com *.acsbapp.com *.bc0a.com *.b0e8.com *.ads-twitter.com *.adsrvr.org *.srv.stackadapt.com *.stackadapt.com *.fontawesome.com *.cookielaw.org *.jquery.com *.marketo.com *.marketo.net *.twimg.com *.onetrust.com *.driftt.com *.bing.com *.bootstrapcdn.com *.myfonts.net *.cloudflare.com *.callrail.com *.aspnetcdn.com *.vidyard.com *.ceridian.ca *.en25.com *.eloqua.com *.googletagmanager.com *.swiftypecdn.com *.google-analytics.com *.google.com *.google.ca *.licdn.com *.facebook.net *.terminus.services *.windows.net *.g2crowd.com *.adsrvr.org *.ads-twitter.com *.ads.linkedin.com *.twitter.com go.ceridian.com *.hotjar.com; style-src 'self' 'unsafe-inline' *.fontawesome.com *.marketo.com *.twitter.com *.bootstrapcdn.com fastcdn.org *.cloudflare.com optanon.blob.core.windows.net *.swiftypecdn.com go.ceridian.com *.stackadapt.com; img-src * data:; font-src 'self' acsbapp.com *.acsbapp.com *.fontawesome.com *.cloudflare.com *.bootstrapcdn.com; connect-src 'self' *.doubleclick.net ka-p.fontawesome.com *.fontawesome.com *.collector.snplow.net acsbapp.com *.acsbapp.com *.srv.stackadapt.com *.cookielaw.org *.facebook.com *.marketo.com *.mktoresp.com *.eloqua.com *.swiftype.com *.ceridian.ca *.swiftypecdn.com *.callrail.com go.ceridian.com *.onetrust.com *.hotjar.com wss://*.hotjar.com;  media-src * 'unsafe-inline'; frame-src 'self' accessibe.com *.accessibe.com *.acsbapp.com acsbapp.com *.bizzabo.com *.facebook.com *.marketo.com *.twitter.com *.youtube.com *.driftt.com *.vidyard.com *.adsrvr.org  go.ceridian.com *.hotjar.com 2
default-src * 'unsafe-inline' 'unsafe-eval' 'self' *.charlemagneinstitute.org *.chroniclesmagazine.org *.intellectualtakeout.org; frame-ancestors 'self' *.hawksearch.com *.hawksearch.net *.americaneagle.com; media-src 'self' blob: data: https://charlemagne-vid.azureedge.net; img-src 'self' blob: data: * 2
frame-ancestors 'self' https://www.endesaclientes.com 2
frame-ancestors *.officiallondontheatre.com uktheatre.org *.theatretokens.com *.solt.co.uk *.theatreartists.fund *.theatrehelpline.org *.theatremeansbusiness.info; default-src https: data: wss: 'unsafe-inline' 'unsafe-eval' 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' * blob:; object-src 'none'; style-src 'self' 'unsafe-inline' *; img-src 'self' data: *; media-src 'self' *.jwplayer.com *.jwpsrv.com *.jwplatform.com blob: *.snapengage.com; font-src 'self' *.googleapis.com *.gstatic.com acsbapp.com data:; connect-src 'self' *; report-uri /report-csp-violation 2
frame-ancestors 'self' iguidewebapp.next-uk.next.loc/ end-duws02.next-uk.next.loc/ end-dpws02.next-uk.next.loc/ studio.mgmt.qa.test/ studio.mgmt.next-uk.next.loc/ 2
default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src blob:; worker-src blob:; frame-src https: data: 'unsafe-inline' 'unsafe-eval'; 2
default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob: wss://*.hotjar.com; font-src https: data:; img-src https: blob: data:; media-src blob: data: https:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests 2
frame-ancestors 'self' metrika.yandex.ru mc.yandex.ru http://webvisor.com; frame-src *.youtube.com vk.com https: blob: mc.yandex.ru jivosite.com; 2
frame-ancestors https://www.att.com.mx/ http://visualivr.att.com.mx/ 2
frame-ancestors 'self' corelogic.com.au *.corelogic.com.au elev.io *.elev.io 2
default-src 'self' https: wss: data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-endpoint.timeinc.net/ 2
frame-ancestors 'self' https://solar.justpark.com https://business.justpark.com 2
frame-ancestors 'self'  wbpa.wdo.io ru.wotblitz.com eu.wotblitz.com na.wotblitz.com asia.wotblitz.com 2
connect-src 'self' * *.12go.co 12go.co *.12go.asia 12go.asia *.onetwogo.com onetwogo.com mc.yandex.ru *.google-analytics.com *.doubleclick.net *.facebook.com *.omise.co *.paypal.com *.mapbox.com *.ipqualityscore.com ipqualityscore.com *.googlesyndication.com *.getsitecontrol.com trainbusferry.com *.trainbusferry.com api.alternativepayments.com *.logs.datadoghq.com api-js.datadome.co cdn.ampproject.org; default-src 'self' * *.12go.co 12go.co *.12go.asia 12go.asia *.onetwogo.com onetwogo.com fonts.gstatic.com maxcdn.bootstrapcdn.com blob:; font-src 'self' * data: *.onetwogo.com maxcdn.bootstrapcdn.com; frame-src 'self' * *.12go.co 12go.co *.12go.asia 12go.asia *.onetwogo.com onetwogo.com mc.yandex.md *.youtube.com *.doubleclick.net *.facebook.com *.omise.co *.paypal.com *.google.com *.stripe.com paymentpage.ecommpay.com s2.mailorsoon.net *.googletagmanager.com; img-src * blob: * data:; media-src *; script-src 'self' * 'unsafe-inline' 'unsafe-eval' *.12go.co 12go.co *.12go.asia 12go.asia *.onetwogo.com onetwogo.com *.bing.com mc.yandex.ru *.ads-twitter.com analytics.twitter.com connect.facebook.net *.gstatic.com *.google.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.doubleclick.net *.omise.co *.paypalobjects.com *.paypal.com ipqualityscore.com *.getsitecontrol.com *.googleapis.com pagead2.googlesyndication.com googletagservices.com *.stripe.com trainbusferry.com *.trainbusferry.com paymentpage.ecommpay.com s7.addthis.com cdn.ampproject.org www.datadoghq-browser-agent.com js.datadome.co blob:; style-src 'self' * 'unsafe-inline' *.12go.co 12go.co *.12go.asia 12go.asia *.onetwogo.com onetwogo.com *.googleapis.com paymentpage.ecommpay.com maxcdn.bootstrapcdn.com; 2
font-src 'self' data: *.kornferry.com *.kfadvance.com *.fontawesome.com *.typography.com *.hotjar.com *.hotjar.io *.hotjar.io *.juicer.io; 2
frame-ancestors *.firstclasswatches.co.uk *.firstclasswatches.com 2
img-src 'self' data: https://cdn-web.cemex.com https://cdn-web-qa.cemex.com https://cdn-web-intdev.lfgwcemex.services https://cxcdn.lfgwcemex.services https://assets.cemex.com https://www.facebook.com/tr/ https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://www.linkedin.com/px/ https://px.ads.linkedin.com https://p.adsymptotic.com/d/px/ https://c.contentsquare.net https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org https://c.seznam.cz https://npmcdn.com/leaflet@0.7.3/dist/images/ https://s916025651.t.eloqua.com https://tags.bluekai.com https://service.maxymiser.net https://www.google.com/ https://www.google.com.mx/ https://www.google.fr/ https://www.google.com.co/ https://www.google.co.cr/ https://www.google.hr/ https://www.google.cz/ https://www.google.de/ https://www.google.com.do/ https://www.google.com.eg/ https://www.google.com.gt/ https://www.google.lv/ https://www.google.com.ni/ https://www.google.com.pa/ https://www.google.com.pe/ https://www.google.com.ph/ https://www.google.pl/ https://www.google.com.pr/ https://www.google.es/ https://www.google.ae/ https://www.google.co.uk/ https://www.google.com.sv/ 2
frame-ancestors 'none'; default-src 'self'; script-src 'self' 'unsafe-inline' https://maps.googleapis.com https://cdn.appdynamics.com https://cloud.typography.com https://flyers.pcoptimum.ca *.salesforceliveagent.com https://lcljoefresh.sc.omtrdc.net https://assets.adobedtm.com https://smetrics.pcoptimum.ca https://www.circularhub.com https://connect.facebook.net https://www.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com https://optimize.google.com https://tagmanager.google.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://*.hotjar.com *.doubleclick.net https://tagmanager.google.com https://s.pinimg.com https://ct.pinterest.com *.kampyle.com *.zeronaught.com; frame-src https://www.circularhub.com https://assets.adobedtm.com https://lcljoefresh.demdex.net https://cdn.appdynamics.com https://optimize.google.com https://bid.g.doubleclick.net https://vars.hotjar.com *.doubleclick.net https://flyers.pcoptimum.ca *.kampyle.com *.zeronaught.com; connect-src 'self' https://api.loblaw.ca https://api.pcoptimum.ca https://accounts.pcid.ca https://api.pcid.ca https://pco-tumeric.lblw.ca https://ws2.bullseyelocations.com https://flyers.pcoptimum.ca https://maps.gstatic.com https://maps.googleapis.com https://smetrics.pcoptimum.ca https://dpm.demdex.net *.omtrdc.net https://connect.facebook.net https://tagmanager.google.com https://www.google-analytics.com https://www.google.com *.hotjar.com *.doubleclick.net https://s.pinimg.com https://ct.pinterest.com https://co-loblawdigital-prod1.mini.snplow.net https://co-loblawdigital-prod1.collector.snplow.net https://col.eum-appdynamics.com *.kampyle.com https://cdn.contentful.com https://assets.pcoptimum.ca *.zeronaught.com; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://fonts.googleapis.com https://assets.shop.loblaws.ca *.kampyle.com https://tagmanager.google.com https://optimize.google.com; img-src 'self' https://assets.pcoptimum.ca https://pcoptimum.s3.us-east-1.amazonaws.com https://pcoptimum.s3.amazonaws.com data: https://*.wishabi.net https://maps.gstatic.com https://maps.googleapis.com https://www.googleadservices.com https://www.facebook.com https://cm.everesttech.net https://www.google.com https://www.google.ca https://dpm.demdex.net https://www.googletagmanager.com https://lcljoefresh.sc.omtrdc.net https://cx.atdmt.com https://connect.facebook.net https://cm.everesttech.net https://cdn.appdynamics.com https://www.google-analytics.com https://optimize.google.com https://fcmatch.google.com https://fcmatch.youtube.com https://ssl.gstatic.com https://www.gstatic.com https://googleads.g.doubleclick.net https://script.hotjar.com *.doubleclick.net *.kampyle.com *.ctfassets.net https://*.assetful.loblaw.ca https://smetrics.pcoptimum.ca; font-src 'self' https://fonts.gstatic.com https://script.hotjar.com data: *.kampyle.com; media-src 'self' *.lwcdn.com; child-src *.zeronaught.com; upgrade-insecure-requests 2
default-src 'self'; media-src https://*.amazonaws.com/live.iap.static/; img-src *; script-src 'self' https://www.dynamicyield.com/ https://www.google-analytics.com/ 'sha256-kfxO7WVMRNMq7PDT0hFqH4U0oMzftgNJuHQz/57HMN0=' https://www.googletagmanager.com/ https://consent-notice.magix.com/ https://*.hotjar.com/; style-src 'self' 'unsafe-inline'; frame-src https://www.googletagmanager.com/ https://checkout.producerplanet.com/ https://*.hotjar.com/; connect-src 'self' https://www.google-analytics.com/ https://*.hotjar.com/ https://stats.g.doubleclick.net/ 2
frame-ancestors https://*.trend.at http://*.trend.at; upgrade-insecure-requests; block-all-mixed-content 2
default-src 'none'; connect-src 'self' https://www.google-analytics.com https://ssl.google-analytics.com https://api.mypurecloud.com.au wss://carrier-pigeon.mypurecloud.com.au; font-src *; frame-src 'self' apps.afca.org.au hcm613.peoplestreme.net www.google.com www.youtube.com docs.google.com service02.afca.org.au hcm616.peoplestreme.net; img-src * data:; media-src 'self'; script-src 'self' 'unsafe-inline' www.google-analytics.com cdn.rawgit.com https://ssl.google-analytics.com https://api.mypurecloud.com.au wss://carrier-pigeon.mypurecloud.com.au cdnjs.cloudflare.com https://apps.mypurecloud.com.au https://cdn.jsdelivr.net https://cdnjs.cloudflare.com mdbootstrap.com stackpath.bootstrapcdn.com; script-src-elem 'self' 'unsafe-inline' www.google-analytics.com cdn.rawgit.com cdnjs.cloudflare.com https://apps.mypurecloud.com.au https://cdn.jsdelivr.net https://cdnjs.cloudflare.com mdbootstrap.com stackpath.bootstrapcdn.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com; frame-ancestors 'self' stagingsecure.afca.org.au secure.afca.org.au 2
default-src 'self'; connect-src 'self'; img-src 'self' data: 'unsafe-eval' ;  style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' data:  2
frame-ancestors 'self'  *.interactivebrokers.com  *.interactivebrokers.ca  *.interactivebrokers.com.hk  *.interactivebrokers.hk  *.interactivebrokers.ch  *.interactivebrokers.eu  *.interactivebrokers.com.sg  *.ibkr.com.sg  *.interactivebrokers.ch  *.interactivebrokers.co.uk  *.interactivebrokers.com.au  *.interactivebrokers.co.jp  *.interactivebrokers.co.in  *.ibkram.com  *.interactiveadvisors.com  *.ibkr.com  *.ibkr.com.cn  *.clientam.com  *.clientam.ch  *.youtube.com  *.clientam.com.hk  *.greenwichcompliance.com; 2
default-src: https:; frame-ancestors 'self' X-Frame-Options: SAMEORIGIN 2
default-src 'self' 'unsafe-inline' ;script-src data: 'self' 'unsafe-inline' 'unsafe-eval' static.cloud.coveo.com *.r42tag.com *.usabilla.com ssl.google-analytics.com www.google-analytics.com www.googleadservices.com tags.nmrc.nl *.onmarc.nl *.doubleclick.net d6tizftlrpuof.cloudfront.net *.zilverenkruis.nl babm.texthelp.com surfly.com plus.browsealoud.com www.zorgkantoorfriesland.nl *.prolife.nl www.googletagmanager.com toolbar.speechstream.net apis.google.com bat.bing.com admin.relay42.com a.svtrd.com cdnjs.cloudflare.com  ads.creative-serving.com www.browsealoud.com *.defriesland.nl static2.creative-serving.com survey.insocial.nl optimize.google.com *.interpolis.nl *.mopinion.com  *.fbto.nl connect.facebook.net;style-src 'self' 'unsafe-inline' d6tizftlrpuof.cloudfront.net plus.browsealoud.com fonts.googleapis.com www.zilverenkruis.nl optimize.google.com;img-src data: blob: 'self' *.svtrd.com www.google.com www.google.nl d6tizftlrpuof.cloudfront.net *.usabilla.com www.google-analytics.com  *.onmarc.nl ssl.google-analytics.com *.zilverenkruis.nl plus.browsealoud.com usabilla-themes.s3-eu-west-1.amazonaws.com ads.creative-serving.com www.zorgkantoorfriesland.nl *.prolife.nl stats.g.doubleclick.net bat.bing.com www.browsealoud.com *.defriesland.nl *.r42tag.com admin.relay42.com speechstreamv3-webservices-8.texthelp.com www.gstatic.com *.fbto.nl www.insocial.nl www.facebook.com;font-src data: 'self' fonts.gstatic.com fonts.googlapis.com d6tizftlrpuof.cloudfront.net;connect-src 'self' *.zilverenkruis.nl *.surfly.com surfly.com sentry.io *.prolife.nl *.zorgkantoorfriesland.nl plus.browsealoud.com pronunciation.speechstream.net api.usabilla.com babm.texthelp.com speech.speechstream.net www.google-analytics.com pre-i-portaal.achmea.nl speechstreamv3-webservices-8.texthelp.com *.defriesland.nl *.mopinion.com www.browsealoud.com plusqa.browsealoud.com *.interpolis.nl;media-src 'self' blob: *.zilverenkruis.nl *.zorgkantoorfriesland.nl *.prolife.nl *.defriesland.nl *.interpolis.nl *.fbto.nl;object-src 'self' ;child-src 'self' t.svtrd.com player.vimeo.com youtube-nocookie.com www.youtube-nocookie.com surfly.com app.surfly.com d6tizftlrpuof.cloudfront.net www.zilverenkruis.nl www.zorgkantoorfriesland.nl www.prolife.nl content.googleapis.com vimeo.com secure.zilverenkruis.nl www.defriesland.nl optimize.google.com i-portaal.achmea.nl survey.insocial.nl secure.prolife.nl secure.defriesland.nl w.soundcloud.com *.doubleclick.net ;frame-ancestors 'self' www.youtube-nocookie.com youtube-nocookie.com player.vimeo.com vimeo.com i-portaal.achmea.nl survey.insocial.nl *.doubleclick.net;form-action 'self' t.svtrd.com *.achmea.nl *.zilverenkruis.nl *.zorgkantoorfriesland.nl *.prolife.nl *.defriesland.nl *.fbto.nl *.interpolis.nl;manifest-src 'self' ;upgrade-insecure-requests;block-all-mixed-content; 2
default-src 'self' *.brilliantcollector.com  *.studio  *.hotjar.io  *.arena.im/  *.gstatic.com  in.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: edit.co.uk *.brilliantcollector.com  *.cookiebot.com *.allinleeds.com *.googleadservices.com giphy.com www.google-analytics.com www.googletagmanager.com ajax.googleapis.com maps.googleapis.com stats.g.doubleclick.net googleadservices.com px.ads.linkedin.com static.ads-twiter.com facebook.com googleads.g.doubleclick.net t.co google.com googletagmanager.com hotjar.com *.hotjar.com snap.licdn.com *.twitter.com platform.twitter.com analytics.twitter.com connect.facebook.net apis.google.com; img-src * data:; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.allinleeds.com *.vimeo.com giphy.com latex.codecogs.com platform.twitter.com; font-src 'self' *.gstatic.com  data:; frame-src 'self' *.studio  https://public.flourish.studio  www.youtube.com *.vimeo.com *.cookiebot.com www.facebook.com *.facebook.com *.hotjar.com *.allinleeds.com giphy.com platform.twitter.com syndication.twitter.com; 2
object-src 'self'; 2
frame-ancestors 'self' statistiques-opus-prod.chambres-agriculture.fr 2
frame-src 'self' https://*.vidyard.com https://*.infogr.am https://*.youtu.be https://*.youtube.com https://*.akamaihd.net https://*.unibuddy.co https://*.google.com https://*.hubspot.com https://*.googlevideo.com https://*.facebook.com https://*.linkedin.com https://*.twitter.com https://*.inspectlet.com https://*.hotjar.com https://vidyard.com https://infogr.am https://youtu.be https://youtube.com https://akamaihd.net https://unibuddy.co https://google.com https://hubspot.com https://googlevideo.com https://facebook.com https://linkedin.com https://twitter.com https://inspectlet.com https://hotjar.com https://googletagmanager.com http://zendesk.com https://*.googletagmanager.com https://*.ehl.edu https://*.adskom.com https://*.doubleclick.net https://*.hs-analytics.net https://*.infogram.com https://infogram.com https://wwwwebapi.ehl.edu 2
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.stihl.com https://wm.wiredminds.de https://www.google-analytics.com https://www.googletagmanager.com https://analytics-udg.netdna-ssl.com https://www.googleadservices.com https://bat.bing.com https://rns.matelso.de https://googleads.g.doubleclick.net https://maps.googleapis.com https://static.criteo.net https://sslwidget.criteo.com https://static.hotjar.com https://connect.facebook.net https://ssl.geoplugin.net https://www.google.com https://www.gstatic.com https://api.openweathermap.org https://e.video-cdn.net https://79423.analytics.edgekey.net https://mc.yandex.ru https://vk.com https://top-fwz1.mail.ru https://cdn.taboola.com https://trc.taboola.com https://ssl.google-analytics.com https://www.sc.pages02.net https://track.adform.net https://s2.adform.net https://cstatic.weborama.fr https://chimpstatic.com https://amplify.outbrain.com https://tr.outbrain.com https://lib-3pas.admatrix.jp https://eventd-cro.admatrix.jp https://static.ads-twitter.com https://analytics.twitter.com https://s.pinimg.com https://ajax.googleapis.com https://wm.wiredminds.de https://static.stihl-timbersports.com https://www.youtube.com https://s.ytimg.com https://*.mouseflow.com;style-src 'self' 'unsafe-inline' https://static.stihl.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://static.stihl-timbersports.com;img-src 'self' data: *;font-src 'self' https://static.stihl.com https://fonts.gstatic.com https://netdna.bootstrapcdn.com https://e.video-cdn.net https://maxcdn.bootstrapcdn.com https://*.mouseflow.com;child-src 'self' https://*.mouseflow.com;frame-src 'self' https://www.google.com https://www.facebook.com https://e.video-cdn.net https://googleads.g.doubleclick.net https://www.google.de https://ad3.adfarm1.adition.com https://*.fls.doubleclick.net https://cstatic.weborama.fr https://rd.frontend.weborama.fr https://www.youtube-nocookie.com https://www.youtube.com https://e.issuu.com https://*.mouseflow.com https://app11.jaggaer.com;connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://d.video-cdn.net https://c.video-cdn.net https://ca.video-cdn.net https://ma307-r.analytics.edgekey.net https://asset-out-cdn.video-cdn.net https://mc.yandex.ru https://top-fwz1.mail.ru https://trc-events.taboola.com https://ext.nonstoppartner.net https://ct.pinterest.com https://*.mouseflow.com;media-src 'self' https://videocdnvod1-vh.akamaihd.net https://asset-out-cdn.video-cdn.net;object-src 'self' https://static.stihl.com; 2
default-src 'self' unify.com *.unify.com atos.net *.atos.net fastviewer.com *.pardot.com *.marketing-cloud.io dein-arbeitsplatz-der-zukunft.com *.rlcdn.com myunify.my.salesforce.com assets.adobedtm.com *.cloudflare.com *.cloudfront.net *.yoast.com data: 'unsafe-inline' 'unsafe-eval' code.jquery.com *.gravatar.com tools.eurolandir.com static.dialogflow.com pbs.twimg.com *.youtube.com *.ytimg.com *.gstatic.com *.googleapis.com tribl.io *.olark.com *.mrpdata.net *.linkedin.com *.company-target.com *.google-analytics.com *.google.fr *.google.com *.oktopost.com okt.to *.adform.net *.demandbase.com *.bidr.io *.accountinsight.cloud *.licdn.com atos.tt.omtrdc.net content.onlinexperiences.com onlinexperiences.com w.soundcloud.com *.aio-events.com; frame-ancestors 'self' atos.net *.atos.net unify.com *.unify.com; 2
default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src	'self' 'unsafe-inline' *; img-src 'self' data: *;font-src 'self' data: * 2
frame-ancestors 'self' https://*.cybusinessonline.co.uk https://*.cbonline.co.uk https://*.ybonline.co.uk https://*.cybonline.co.uk; report-uri https://cyburi.report-uri.com/r/t/csp/enforce; 2
upgrade-insecure-requests;   default-src 'self' *.openbank.es;   script-src 'self' 'unsafe-inline' 'unsafe-eval' snap.licdn.com track.adform.net     *.openbank.es *.openbank.de *.openbank.nl *.openbank.pt *.openbank.com *.openbank.com.ar     https://maps.googleapis.com simuladores-pre.afi.es simuladores.afi.es     *.nr-data.net https://browseranalytic.com https://www.google.com     *.gstatic.com https://tags.tiqcdn.com *.google-analytics.com *.tealiumiq.com     https://tealium.hs.llnwd.net https://*.g.doubleclick.net  *.amazonaws.com     *.youtube.com *.googleadservices.com *.ads-twitter.com *.facebook.net     *.ytimg.com api-ob.nd.nudatasecurity.com     https://cdnjs.cloudflare.com     *.googletagmanager.com *.we-stats.com static.browseranalytic.com     optimize.google.com bat.bing.com blob: openbanksimuladores-pre.afi.es     openbanksimuladores.afi.es;   style-src 'self' 'unsafe-inline' optimize.google.com https://fonts.googleapis.com     *.amazonaws.com *.openbankwealth.com *.openbank.es *.openbank.de *.openbank.nl *.openbank.com.ar     *.openbank.pt api-ob.nd.nudatasecurity.com https://maxcdn.bootstrapcdn.com;   img-src 'self' px.ads.linkedin.com *.idealista.com track.adform.net     www.financeads.net data: 'unsafe-inline' *.amazonaws.com     *.googletagmanager.com https://maps.googleapis.com *.gstatic.com     *.google-analytics.com *.doubleclick.net *.openbank.es     *.openbank.de *.openbank.nl *.openbank.pt *.openbank.com.ar *.google.com *.google.es     *.google.ie *.facebook.com api-ob.nd.nudatasecurity.com     https://aax-eu.amazon-adsystem.com bat.bing.com     tr.outbrain.com www.linkedin.com s-central1-madrid-investing.cloudfunctions.net     tbl.tradedoubler.com dmpue.el-mundo.net action.metaffiliation.com;   media-src 'self' 'unsafe-inline' *.amazonaws.com  *.openbank.es *.youtube.com;   frame-src 'self' optimize.google.com https://www.google.com *.gstatic.com     *.youtube.com simuladores-pre.afi.es simuladores.afi.es *.doubleclick.net     api-ob.nd.nudatasecurity.com *.openbank.es blob:     openbanksimuladores-pre.afi.es openbanksimuladores.afi.es;   child-src  https://www.google.com *.gstatic.com *.youtube.com     simuladores-pre.afi.es simuladores.afi.es *.doubleclick.net     api-ob.nd.nudatasecurity.com *.openbank.es blob:     openbanksimuladores-pre.afi.es openbanksimuladores.afi.es;   font-src 'self' *.openbank.es *.openbank.de *.openbank.com.ar     *.openbank.nl *.openbank.pt maxcdn.bootstrapcdn.com data:     https://fonts.gstatic.com *.openbankwealth.com api-ob.nd.nudatasecurity.com     maxcdn.bootstrapcdn.com;   connect-src 'self' www.google-analytics.com *.openbank.pt *.openbank.nl     *.openbank.de *.openbank.es *.openbank.com.ar *.nr-data.net *.we-stats.com     *.tealiumiq.com api-ob.nd.nudatasecurity.com     lib-eu-1.brilliantcollector.com op.browseranalytic.com *.ok-cloud.net     adservice.google.com www.google.com *.openbank.com;   frame-ancestors 'self' *.openbank.de *.openbank.nl *.openbank.pt *.openbank.es     api.paycomet.com https://www.paytpv.com *.openbank.com.ar     https://openbank-mkt-dev1-1.campaign.adobe.com https://openbank-mkt-stage1-1.campaign.adobe.com https://openbank-mkt-prod1-1.campaign.adobe.com     https://openbank-mkt-dev1.campaign.adobe.com https://openbank-mkt-stage1.campaign.adobe.com https://openbank.campaign.adobe.com;   object-src 'self' *.openbank.es 2
default-src https:; font-src https: data:; img-src https: data:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; 2
frame-ancestors *.uninassau.edu.br *.uninabuco.edu.br *.sereducacional.com *.sereduc.com *.leiaja.com *.ung.br *.unama.br *.univeritas.com *.uninorte.com.br *.blackboard.com http://*.joaquimnabuco.edu.br http://*.unama.br *.gokursos.com *.ig.com.br http://*.ung.br *.uninassau.digital *.unama.digital *.univeritas.digital *.uninorte.digital *.uninabuco.digital *.facimed.edu.br *.unifacimed.digital *.unijuazeiro.edu.br; 2
frame-ancestors 'self' blank;object-src 'self' blank; 2
frame-ancestors 'self' https://*.sweb.ru https://webvisor.com ; 2
default-src*; font-src*;img-src* data:; script-src*; style-src*; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.rubensteintech.com https://static.hotjar.com https://script.hotjar.com https://www.googletagmanager.com https://dnn506yrbagrg.cloudfront.net https://www.google-analytics.com https://uk1.siteimprove.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://fast.wistia.com https://script.crazyegg.com https://js.hs-scripts.com https://js.hs-banner.com https://s3.amazonaws.com https://js.hs-analytics.net https://js.hsforms.net https://forms.hsforms.com https://tagmanager.google.com; style-src 'self' 'unsafe-inline' https://cloud.webtype.com https://hello.myfonts.net https://fonts.googleapis.com https://tagmanager.google.com; font-src 'self' data: https://*.wistia.com https://cloud.webtype.com https://static.hotjar.com https://fonts.gstatic.com; img-src 'self' https://pls.webtype.com https://insights.hotjar.com https://static.hotjar.com https://analytics.rubensteintech.com https://www.google-analytics.com https://uk1.siteimprove.com https://www.googletagmanager.com https://maps.gstatic.com https://maps.googleapis.com https://embedwistia-a.akamaihd.net https://fast.wistia.com https://embed-fastly.wistia.com https://user-event-tracker.crazyegg.com https://track.hubspot.com https://forms.hubspot.com https://10144.global.siteimproveanalytics.io https://ssl.gstatic.com https://www.gstatic.com data:; connect-src 'self' https://*.hotjar.com:* wss://*.hotjar.com https://embedwistia-a.akamaihd.net https://embed-fastly.wistia.com https://distillery.wistia.com https://pipedream.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io https://embed-ssl.wistia.com https://www.google-analytics.com; frame-src 'self' https://vars.hotjar.com https://www.google.com/recaptcha/ https://www.youtube.com https://player.vimeo.com https://fast.wistia.com https://forms.hsforms.com https://cdn.yoshki.com; child-src 'self' https://vars.hotjar.com; media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net; frame-ancestors 'self' https://fast.wistia.com https://fast.wistia.net; 2
default-src 'self';style-src 'unsafe-inline' *;frame-src 'self' https://torrents-igruha.org https://telegram.im https://moytorrent.ru https://k3node.com https://send-push.info https://www.google.com http://youtube.com https://youtube.com http://www.youtube.com https://www.youtube.com https://vk.com http://vk.com http://*.vk.com https://*.vk.com http://vk.me https://vk.me http://*.vk.me https://*.vk.me;img-src * data:;media-src *;font-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://torrents-igruha.org https://telegram.im https://moytorrent.ru https://k3node.com https://send-push.info https://www.google.com http://youtube.com https://youtube.com http://www.youtube.com https://www.youtube.com https://vk.com http://vk.com http://*.vk.com https://*.vk.com http://vk.me https://vk.me http://*.vk.me https://*.vk.me; connect-src 'self' https://torrents-igruha.org https://telegram.im https://k3node.com https://moytorrent.ru https://send-push.info http://youtube.com https://youtube.com http://www.youtube.com https://www.youtube.com http://*.amazonaws.com https://vk.com http://vk.com http://*.vk.com https://*.vk.com http://vk.me https://vk.me http://*.vk.me https://*.vk.me; 2
frame-ancestors 'self' *.ally.com; 2
default-src 'self' https: data: blob:;style-src data: blob: https: 'unsafe-inline';script-src https: data: blob: 'unsafe-inline' 'unsafe-eval';img-src 'self' https: data: blob:;worker-src 'self';block-all-mixed-content;upgrade-insecure-requests; 2
connect-src 'self' 2
base-uri ' ' 2
frame-ancestors 'self' analytics.pt-dlr.de 2
frame-ancestors 'self' http://*.trendin.com https://*.trendin.com 2
default-src * 'unsafe-inline' 'unsafe-eval' data:; media-src * blob:; child-src * blob:; report-uri /report-csp-violation 2
default-src https: blob: data: 'unsafe-inline' 2
frame-ancestors https://*.obozrevatel.com 2
script-src https: 'unsafe-inline' 'unsafe-eval' 2
frame-ancestors 'self' http://jobcloud.ch http://*.jobcloud.ch http://jobs.ch http://*.jobs.ch http://jobup.ch http://*.jobup.ch http://ingjobs.ch http://ictcareer.ch http://jobs4sales.ch http://financejobs.ch http://medtalents.ch http://jobwinner.ch http://alpha.ch http://topjobs.ch http://*.jobscout24.ch http://impieghi.ch http://*.impieghi.ch http://*.stellenmarkt.ch http://*.rhenus.com https://www.rhenus-truckerjobs.com https://www.lager-mitarbeiter.de 2
frame-ancestors *.motorsport.com 2
default-src 'self' data: 'unsafe-inline' *; 2
value 2
frame-ancestors 'self' https://commerceinsights.ibmcloud.com 2
font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net https://fonts.googleapis.com data: 2
default-src 'self' data: blob: *.octopus.com.hk *.octopuscards.com *.octopusrewards.com.hk *.online-octopus.com *.oepay.com.hk *.octopus-cards.com *.oepay.octopus-cards.com *.comm.octopus.com.hk www.youtube.com 'unsafe-inline' 'unsafe-eval'; 2
default-src * 'self' data: https: blob: 'unsafe-inline' 'unsafe-eval' 2
frame-ancestors 'self' https://rewarding.wind.it https://grandecinema3.tre.it https://www.grandecinema3.it; 2
connect-src 'self'   *.doubleclick.net    https://www.google-analytics.com       https://open.http.mp.streamamg.com    *.matterport.com  *.schema.org   *.streamamg.com  https://cf.vod.mp.streamamg.com   *.matterport.com     http://www.aragontelevision.es       *.twitch.tv    *.cloudfront.net       *.yourcommunify.com       yourcommunify.com        *.google-analytics.com  *.realsociedad.eus ;           default-src   *.doubleclick.net  *.realsociedad.com       *.realsociedad.eus       blob:       'self';              style-src 'self' 'unsafe-inline'  *.doubleclick.net   *.schema.org *.streamamg.com  *.cloudfront.net       *.googleapis.com;              img-src 'self'     *.schema.org    *.realsociedad.eus    *.streamamg.com     http://placehold.it        https://twitter.github.io        https://stats.g.doubleclick.net        https://www.google.com        https://www.facebook.com/        https://www.google.es        http://realsociedadcdnpre.barrabes.biz                       https://cdn.realsociedad.eus        https://cdntienda.realsociedad.eus                       https://cdntienda.realsociedad.com                        http://twemoji.maxcdn.com                        https://pbs.twimg.com                        *.cdninstagram.com                        *.fbcdn.net                        www.google-analytics.com        *.cloudfront.net         *.vimeo.com              https://img.youtube.com    *.genial.ly    *.azureedge.net        *.google-analytics.com        https://cdn.realsociedad.com        data:  *.doubleclick.net  *.schema.org *.streamamg.com    https://maps.googleapis.com        https://open.http.mp.streamamg.com        https://cdn.bleacherreport.net/        *.w55c.net         *.gstatic.com;              media-src 'self'               *.schema.org *.streamamg.com         https://cdn.realsociedad.eus                        https://cdntienda.realsociedad.com        https://cdntienda.realsociedad.eus                              http://twemoji.maxcdn.com                        https://pbs.twimg.com                        *.cdninstagram.com                        *.fbcdn.net                        www.google-analytics.com         *.vimeo.com     *.genial.ly         https://img.youtube.com    *.matterport.com    http://www.aragontelevision.es        *.twimg.com;              font-src 'self'   *.doubleclick.net  *.schema.org *.streamamg.com   https://open.http.mp.streamamg.com       *.gstatic.com;               script-src 'self'                          'unsafe-inline'   https://*.vimeocdn.com/      https://stats.mp.streamamg.com       http://open.http.mp.streamamg.com                         https://www.realsociedad.com       https://www.realsociedad.eus          https://mkt.realsociedad.eus               https://www.googletagmanager.com                          http://www.google-analytics.com       https://ssl.google-analytics.com       'unsafe-eval'  *.vimeo.com   *.genial.ly  https://www.youtube.com     *.twitch.tv     https://connect.facebook.net       *.ytimg.com       *.cloudfront.net       *.w55c.net        *.hspvst.com       *.yourcommunify.com       yourcommunify.com       https://maps.googleapis.com;    object-src https://www.realsociedad.eus                          https://fundazioa.realsociedad.eus;    frame-src *.realsociedad.com        *.realsociedad.eus        *.cloudfront.net       *.yourcommunify.com       yourcommunify.com   *.vimeo.com  *.genial.ly   http://www.youtube.com       https://www.youtube.com       https://connect.facebook.net       https://www.facebook.com       https://open.http.mp.streamamg.com/       https://www.eitb.eus   *.matterport.com    https://www.aragontelevision.es       http://www.aragontelevision.es      *.twitch.tv    *.powerbi.com *.flipsnack.com; 2
frame-src 'self' https://playbook.chelseapiers.com https://www.chelseapiers.com https://www.chelseapiersct.com https://signs.reachcm.com https://www.fitmetrix.io https://www.youtube.com https://bid.g.doubleclick.net https://apps.dashplatform.com www.googletagmanager.com https://snapwidget.com https://www.paycomonline.net https://www.today.com https://abcnews.go.com https://w3.cdn.anvato.net http://players.brightcove.net https://giphy.com https://www.goodmorningamerica.com https://player.vimeo.com 2
frame-ancestors 'self' account.elama.global new.elama.ru elama.global *.elama.global elama.ru *.elama.ru elama.com.br *.elama.com.br elama.kz *.elama.kz mc.yandex.ru mc.webvisor.com mc.webvisor.org yastatic.net webvisor.com http://webvisor.com metrika.yandex.ru yandex.com yandex.ru *.yandex.com *.yandex.net *.yandex.ru; report-uri https://sn.elama.global/api/26/security/?sentry_key=cf985e6d1e254161bef105622a6e28a4; 2
default-src 'self' *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *;style-src 'self' 'unsafe-inline' *;img-src 'self' * data:;frame-src 'self' *;font-src 'self' *;connect-src 'self' *;child-src 'self' * 2
frame-ancestors 'self' https://www.onbase.sharebase.com https://www.hyland.com https://www.communitylive.com https://www.onbase.com https://profiles.onbase.com; 2
frame-ancestors https://*.1-grid.com/ 'self'; 2
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval' 2
frame-ancestors 'self' *.glasgowairport.com *.aberdeenairport.com *.southamptonairport.com 2
sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-top-navigation; 2
frame-ancestors whitelabel.camspower.com wlbackoffice3.xcams.com 2
manifest-src 'self' https://*.ng-source.com 2
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline' https: data:; font-src https: data:; img-src * data:; 2
default-src 'self'; connect-src 'self' s3.us-west-2.amazonaws.com/upload.com.fmod/uploads/ www.google-analytics.com/j/collect; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com code.jquery.com; font-src 'self' cdnjs.cloudflare.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com code.jquery.com blob:; img-src 'self' d1s9dnlmdewoh1.cloudfront.net d26jga8jjsa591.cloudfront.net www.google-analytics.com; frame-src 'self' www.youtube.com player.twitch.tv; media-src 'self' d26jga8jjsa591.cloudfront.net; worker-src 'self' blob: 2
font-src *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com *.klevu.com/ https://cdn.bronto.com/ https://acsbapp.com/ data: http://cdn.materialdesignicons.com/ *.formstack.com/ http://ajax.googleapis.com/ *.fonts.googleapis.com/ *.richpanel.com https://bam-cell.nr-data.net https://ws.richpanel.com/ *.americanmeadows.com/ *.highcountrygardens.com/ *.landrethseed.com/ *.fontawesome.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.twitter.com *.facebook.com https://app.bronto.com/ http://app.bronto.com/ https://input.noibu.com/ *.formstack.com/ http://ajax.googleapis.com/ http://highcountrygardens.com/ http://www.americanmeadows.com/ http://www.landrethseed.com/ https://highcountrygardens.com/ https://www.americanmeadows.com/ https://www.landrethseed.com/ https://ws.richpanel.com/ *.americanmeadows.com/ *.highcountrygardens.com/ *.landrethseed.com/ 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com https://accessibe.com/ https://assets.braintreegateway.com/ https://secure.livechatinc.com/ *.formstack.com/ https://www.youtube.com/ http://ajax.googleapis.com/ https://api.richpanel.com/ https://bam-cell.nr-data.net https://ws.richpanel.com/ *.americanmeadows.com/ *.highcountrygardens.com/ *.landrethseed.com/ *.hotjar.com *.weltpixel.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.cloudflare.com *.gstatic.com *.google.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com data: *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net *.youtube.com https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.klevu.com/ http://fast.wistia.com/ https://fast.wistia.com/ 'self' https://embed-fastly.wistia.com/ http://cdn.bronto.com/ http://services.postcodeanywhere.co.uk https://acsbapp.com/ http://assets.pinterest.com/ http://media.americanmeadows.com/ http://t.powerreviews.com/ https://log.pinterest.com/ http://res.cloudinary.com/ http://embed.wistia.com/ https://amidev.americanmeadows.com/ https://embedwistia-a.akamaihd.net/ https://cdn.livechatinc.com/ *.formstack.com/ *.ksearchnet.com/ https://script.crazyegg.com/ http://app.bronto.com/ https://app.bronto.com/ https://input.noibu.com/ https://email.americanmeadows.com/ http://ajax.googleapis.com/ *.richpanel.com https://bam-cell.nr-data.net https://ws.richpanel.com/ *.americanmeadows.com/ *.highcountrygardens.com/ *.landrethseed.com/ *.bing.com/ *.amazonaws.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com js.authorize.net jstest.authorize.net www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com js.braintreegateway.com s.ytimg.com video.google.com vimeo.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com *.paypal.com https://chimpstatic.com *.googletagmanager.com *.youtube.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com https://cdn.polyfill.io/ https://cdn.noibu.com/ http://script.crazyegg.com/ https://cdn.bronto.com/ https://snip.bronto.com/ https://acsbap.com/ *.klevu.com/ https://acsbapp.com/ http://cdn.bronto.com/ https://cdn.acsbapp.com/ https://secure.livechatinc.com/ http://ui.powerreviews.com/ https://fast.wistia.com/ http://fast.wistia.com/ http://rest.bronto.com/ http://api.addressy.com/ http://static.powerreviews.com/ http://connect.facebook.net/ http://assets.pinterest.com/ https://js-agent.newrelic.com/ http://www.americanmeadows.com/ *.formstack.com/ https://bam.nr-data.net/ *.ksearchnet.com/ https://script.crazyegg.com/ *.magento.cloud/ https://app.bronto.com/ https://input.noibu.com/ https://email.americanmeadows.com/ http://ajax.googleapis.com/ *.richpanel.com https://bam-cell.nr-data.net https://ws.richpanel.com/ *.americanmeadows.com/ *.highcountrygardens.com/ *.landrethseed.com/ *.hotjar.com/ *.bing.com/ https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.cloudflare.com http://ajax.googleapis.com/ *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.klevu.com/ http://cdn.bronto.com/ http://ui.powerreviews.com/ http://api.addressy.com/ http://cdn.materialdesignicons.com/ *.formstack.com/ *.ksearchnet.com/ https://script.crazyegg.com/ *.magento.cloud/ https://app.bronto.com/ https://input.noibu.com/ https://email.americanmeadows.com/ https://fonts.googleapis.com/ *.richpanel.com https://bam-cell.nr-data.net https://ws.richpanel.com/ *.americanmeadows.com/ *.highcountrygardens.com/ *.landrethseed.com/ data: *.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src https://cdn.livechatinc.com/ https://embed-fastly.wistia.com/ http://embed.wistia.com/ blob: https://embedwistia-a.akamaihd.net/ https://ws.richpanel.com/ *.americanmeadows.com/ *.highcountrygardens.com/ *.landrethseed.com/ *.formstack.com/ data: *.bing.com/ *.amazonaws.com *.richpanel.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google.com *.google.co.in *.facebook.com wss://metroplex-dot-noibu-unicron.uc.r.appspot.com/ https://maw.bronto.com/ https://acsbapp.com/ https://cdn.acsbapp.com/ http://ui.powerreviews.com/ http://pipedream.wistia.com/ http://distillery.wistia.com/ https://fg8vvsvnieiv3ej16jby.litix.io/ https://api.addressy.com/ *.braintreegateway.com *.braintree-api.com wss: https://i.noibu.com/ http://display.powerreviews.com/ https://tracking.crazyegg.com/ https://fiddler.brontops.com/ https://input.noibu.com/ https://shipseasons.americanmeadows.com/ https://bam.nr-data.net/ https://uscs22.ksearchnet.com/ *.ksearchnet.com/ https://embedwistia-a.akamaihd.net/ https://script.crazyegg.com/ *.klevu.com/ https://email.americanmeadows.com/ *.formstack.com/ *.google-analytics.com/ https://stats.g.doubleclick.net/ *.richpanel.com https://bam-cell.nr-data.net https://embed-fastly.wistia.com/ https://ws.richpanel.com/ *.americanmeadows.com/ *.highcountrygardens.com/ *.landrethseed.com/ *.hotjar.com *.bing.com/ wss://*.richpanel.com 'self' 'unsafe-inline'; child-src blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'unsafe-inline' https:; img-src data: https: 2
default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; frame-src * 2
default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.typekit.net *.episerver.net zefzhat.appspot.com www.googletagmanager.com tagmanager.google.com *.hotjar.com *.hotjar.io *.google-analytics.com code.jquery.com ajax.googleapis.com az416426.vo.msecnd.net dc.services.visualstudio.com netdna.bootstrapcdn.com storage.googleapis.com pi.pardot.com syndication.twitter.com sjs.bizographics.com connect.facebook.net stats.livezhat.com *.ads.linkedin.com www.linkedin.com s.ytimg.com *.googleapis.com api.siteattention.com www.googleadservices.com cdn.syndication.twimg.com flockler.com embed-cdn.flockler.com static.flockler.com fl-cdn.scdn1.secure.raxcdn.com cdn.datatables.net *.licdn.com www.youtube.com gateway.zscloud.net viewer.blipstar.com translate.googleapis.com static.handpickedcherries.com maxcdn.bootstrapcdn.com rules.quantcount.com secure.quantserve.com apps.myzef.com tools.eurolandir.com webcc.sonera.fi stackpath.bootstrapcdn.com cdnjs.cloudflare.com api.ipify.org munchkin.marketo.net googleads.g.doubleclick.net eu1.snoobi.com ethn.io siteimproveanalytics.com www.google.com www.gstatic.com *.interactions.giosgusercontent.com optimize.google.com *.lfeeder.com *.leadfeeder.com code.createjs.com www.gstatic.com *.vimeo.com go.upmspecialtypapers.com upm.leadfamly.com hm.baidu.com service.giosg.com s3.amazonaws.com/beacon.pmmimediagroup.com/ *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live; font-src 'self' data: *.typekit.net fonts.gstatic.com fonts.googleapis.com storage.googleapis.com netdna.bootstrapcdn.com i.s-microsoft.com upmapi.portal.azure-api.net *.hotjar.com *.hotjar.io css.zohostatic.com cdnjs.cloudflare.com use.fontawesome.com *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live; img-src 'self' data: blob: about: *.typekit.net livezhat.zef.fi *.hotjar.com *.hotjar.io www.google-analytics.com www.upmbiofore.fi pbs.twimg.com secure.adnxs.com www.upmbiofore.com stats.g.doubleclick.net googleads.g.doubleclick.net www.google.com www.google.co.uk www.google.fi www.google.dk www.google.de www.google.at www.google.pl www.google.ru www.google.se *.googleapis.com maps.gstatic.com www.gstatic.com www.facebook.com static.flockler.com flockler.com hm.baidu.com img.youtube.com translate.google.com cdn.datatables.net s3.amazonaws.com www.googletagmanager.com tagmanager.google.com ssl.gstatic.com translate.googleapis.com hugin.info graph.facebook.com scontent.xx.fbcdn.net pixel.quantserve.com commondatastorage.googleapis.com i.ytimg.com *.episerver.net cdn2.siteattention.com  amplifypixel.outbrain.com *.ads.linkedin.com ad.doubleclick.net adservice.google.com adservice.google.com.hk www.linkedin.com 6049499.global.siteimproveanalytics.io assets.upm.com eu1.snoobi.com ml-eu.globenewswire.com gateway.zscloud.net optimize.google.com *.lfeeder.com *.leadfeeder.com go.upmspecialtypapers.com p.adsymptotic.com upm.leadfamly.com *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live; connect-src 'self' *.hotjar.com *.hotjar.io www.upmbiofore.com dc.services.visualstudio.com api.siteattention.com www.google-analytics.com stats.g.doubleclick.net upm-prod.taiste.fi translate.googleapis.com hm.baidu.com api.mapbox.com a.tiles.mapbox.com b.tiles.mapbox.com wss://*.hotjar.com tagmanager.google.com restdev.siteattention.com *.mktoresp.com events.mapbox.com *.facebook.com api.giosg.com *.typekit.net *.interactions.giosgusercontent.com service.giosg.com prospector.pmmimediagroup.com wss://www.upm.com *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live; style-src 'self' 'unsafe-inline' livezhat.zef.fi netdna.bootstrapcdn.com static.flockler.com fonts.googleapis.com maxcdn.bootstrapcdn.com translate.googleapis.com cdnjs.cloudflare.com *.episerver.net tagmanager.google.com use.fontawesome.com stackpath.bootstrapcdn.com optimize.google.com service.giosg.com *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live; frame-src 'self' data: *.doubleclick.net www.facebook.com connect.facebook.net www.google.com go.pardot.com www.youtube.com *.hotjar.com *.hotjar.io www.ciuvo.com www.googletagmanager.com tagmanager.google.com viewer.blipstar.com apps.myzef.com gamma.euroland.com tools.euroland.com tagmanager.google.com pr.globenewswire.com *.youku.com *.vimeo.com *.metsasoppi.com *.arbonaut.com optimize.google.com ethn.io web.microsoftstream.com *.giosgusercontent.com service.giosg.com go.upmspecialtypapers.com upm.leadfamly.com tools.eurolandir.com *.upm.com *.upm.uy *.upmbiochemicals.com *.upmbiofuels.com *.upmbiomedicals.com *.upmbonvesta.fi *.upmcargohandling.com *.upmchina.com *.upmenergy.com *.upmformi.com *.upmgrada.com *.upmkiinteistot.fi *.upmmetsa.fi *.upmnachhaltigerzellstoff.de *.upmpaper.com *.upmprofi.com *.upmpulp.com *.upmraflatac.com *.upmraumacell.com *.upmsilvesta.fi *.upmspecialtypapers.com *.upmtimber.com *.upmyhteismetsa.fi *.wisaplywood.com *.solitaonline.fi *.upm.live; upgrade-insecure-requests; report-uri https://upmcms.report-uri.com/r/d/csp/enforce 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.valcartier.com *.calypsopark.com gcv-static.azureedge.net gcv-cms-static.azureedge.net gcv-staging-static.azureedge.net gcv-dev-static.azureedge.net gcv-qa-static.azureedge.net gcv-qa2-static.azureedge.net gcv-qa3-static.azureedge.net www-gcv-static.azureedge.net *.googletagmanager.com *.google-analytics.com *.googleapis.com *.ticket-ops.com data: *.tripadvisor.ca *.tripadvisor.com *.jscache.com static.tacdn.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.google.com fonts.gstatic.com facebook.net *.facebook.com *.google.ca *.googleadservices.com *.doubleclick.net acuityplatform.com securecode.com *.securecode.com moneris.com *.moneris.com visa.com *.visa.com verifiedbyvisa.com *.verifiedbyvisa.com *.arcot.com *.vgdelivery.com vgdelivery.com *.cardinalcommerce.com cardinalcommerce.com *.online-metrix.net online-metrix.net securesuite.net *.securesuite.net az416426.vo.msecnd.net dc.services.visualstudio.com connect.facebook.net player.vimeo.com cdn.livechatinc.com secure.livechatinc.com app.livechatinc.com www.livechatinc.com; 2
default-src https: 'unsafe-inline' 'unsafe-eval' blob: data: http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: yastatic.net cse.google.com ajax.googleapis.com php.pdc.nl www.google.com www.gstatic.com translate.googleapis.com translate.google.com maps.google.com maps.googleapis.com api.microsofttranslator.com; report-uri /cspreport 2
default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 2
frame-ancestors 'self' keycontentservice.com *.tescodev.com *.facebook.com tesco.hu itesco.cz tesco.sk tesco.pl itesco.sk 2
frame-ancestors 'self'  *.ampproject.org *.zdbb.net 2
default-src 'self'; connect-src 'self' yandex.ru *.yandex.ru *.google-analytics.com stats.g.doubleclick.net *.facebook.com *.vk.com *.branch.io *.google.com *.google.ru *.livetex.ru *.livetex.me *.mail.ru *.google.com.ua odds.ru *.yastatic.net *.adfox.ru *.yandex.net onesignal.com *.onesignal.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.syndication.twimg.com opentracking.ru *.gstatic.com *.twitter.com *.ytimg.com app.link *.branch.io *.vk.com onesignal.com *.onesignal.com *.livetex.me *.livetex.ru *.googletagmanager.com *.google-analytics.com *.yandex.ru *.facebook.net *.facebook.com odds.ru vk.com *.youtube.com *.vimeo.com *.wp.com *.google.com *.cloudflare.com yastatic.net webvisor.com *.mail.ru *.instagram.com *.imgur.com *.yastatic.net *.adfox.ru *.yandex.net; script-src-elem 'self' 'unsafe-inline' cdn.syndication.twimg.com opentracking.ru *.gstatic.com *.twitter.com *.ytimg.com app.link *.branch.io *.vk.com onesignal.com *.onesignal.com *.livetex.me *.livetex.ru *.googletagmanager.com *.google-analytics.com *.yandex.ru *.facebook.net *.facebook.com odds.ru vk.com *.youtube.com *.vimeo.com *.wp.com *.google.com *.cloudflare.com yastatic.net webvisor.com *.mail.ru *.instagram.com *.imgur.com *.yastatic.net *.adfox.ru *.yandex.net; img-src 'self' data: *.wp.com *.w.org *.gravatar.com www.facebook.com *.youtube.com *.livetex.ru *.livetex.me *.google-analytics.com *.doubleclick.net *.google.com *.google.ru *.googleapis.com graph.facebook.com vk.com *.vk.com *.yandex.ru odds.ru opentracking.ru www.opentracking.ru *.twimg.com *.twitter.com *.gstatic.com *.googletagmanager.com *.google.com.ua *.yastatic.net *.adfox.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru *.ligastavok.ru ligastavok.ru *.yandex.net; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com odds.ru *.twitter.com *.twimg.com *.yastatic.net *.adfox.ru *.yandex.net onesignal.com *.onesignal.com; child-src 'self' *.youtube.com *.vimeo.com *.facebook.com *.vk.com vk.com *.twitter.com twitter.com *.livetex.ru *.livetex.me onesignal.com *.onesignal.com www.instagram.com *.google.com *.yandex.ru webvisor.com blob: https://mc.yandex.ru *.imgur.com imgur.com *.yastatic.net *.adfox.ru *.yandex.net vimeo.com; font-src 'self' 'unsafe-inline' *.gstatic.com *.livetex.ru *.livetex.me data:; media-src 'self' *.livetex.ru *.livetex.me *.yastatic.net *.adfox.ru *.yandex.net; frame-ancestors 'self' https://metrika.yandex.ru http://webvisor.com https://yastatic.net https://mc.yandex.ru; 2
“upgrade-insecure-requests” 2
frame-ancestors https://*.derwent.io http://*.derwent.io http://*.derwent.io:* https://*.derwent.io:* 'self' 2
default-src 'self' mailto: https://www.google.com/recaptcha/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://edge.addthis.com/ https://optimize.google.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com http://localhost:50029 https://z.moatads.com/addthismoatframe568911941483/moatframe.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://maps.googleapis.com https://ajax.googleapis.com http://ajax.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com stats.g.doubleclick.net https://angular-ui.github.io https://sjs.bizographics.com https://snap.licdn.com https://px.ads.linkedin.com https://siteimproveanalytics.com/ https://policy.cookiereports.com/ https://connect.facebook.net https://*.twitter.com https://www.googleadservices.com/pagead/conversion_async.js https://v1.addthisedge.com https://v1.addthis.com https://extend.vimeocdn.com https://googleads.g.doubleclick.net https://cdn.syndication.twimg.com https://*.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://optimize.google.com https://fonts.googleapis.com https://tagmanager.google.com https://cdnjs.cloudflare.com https://*.twitter.com; img-src 'self' https://www.googletagmanager.com https://gowlingwlg.com *.google.com https://www.google.co.uk http://*.twimg.com https://*.twimg.com https://www.google.ca/ https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://csi.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://us2.siteimprove.com stats.g.doubleclick.net data: https://*.twitter.com https://www.facebook.com https://px.ads.linkedin.com https://61281065.global.siteimproveanalytics.io https://p.adsymptotic.com https://stats.g.doubleclick.net https://www.linkedin.com ; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:; connect-src 'self' http://localhost:50029 https://*.addthis.com https://www.google-analytics.com https://stats.g.doubleclick.net; report-uri /WebResource.axd?cspReport=true https://m.addthis.com; frame-src 'self' https://mozbar.moz.com/ https://edge.addthis.com/ https://optimize.google.com s7.addthis.com https://*.youtube.com https://*.youtube-nocookie.com https://*.media-server.com https://*.slideshare.net https://*.vuturevx.com https://*.gowlingwlg.com https://cdn.yoshki.com/ https://w.soundcloud.com/ https://html5-player.libsyn.com https://player.vimeo.com https://*.twitter.com https://twitter.com https://www.google.com; media-src 'self' https://*.gowlingwlg.com http://*.libsyn.com 2
frame-ancestors 'self' https://*.iproperty.com.my https://*.squarefoot.com.hk ; 2
default-src https: blob:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; img-src data: https: blob: android-webview android-webview-video-poster:; font-src data: https:; connect-src * blob:; media-src https: data: blob:; worker-src https: blob:; upgrade-insecure-requests; 2
frame-ancestors 'self' https://*.moody.edu 2
default-src 'self' *.projects-abroad.net ssl.google-analytics.com tagmanager.google.com fonts.googleapis.com www.google-analytics.com www.gstatic.com fonts.gstatic.com connect.facebook.net www.googletagmanager.com cdn.cookielaw.org www.googleadservices.com googleads.g.doubleclick.net static.hotjar.com script.hotjar.com js.hs-scripts.com js.hscta.net js.hsforms.net forms.hsforms.com js.hs-analytics.net cta-service-cms2.hubspot.com d10lpsik1i8c69.cloudfront.net code.jquery.com maxcdn.bootstrapcdn.com ajax.googleapis.com cdnjs.cloudflare.com native.testing.equest.com www.google.com *.docusign.net www.youtube.com youtu.be player.vimeo.com docs.google.com 'unsafe-inline' 'unsafe-eval' data: font;frame-src 'self' www.google.com www.youtube.com www.facebook.com staticxx.facebook.com orangehrm.orangehrm.com vars.hotjar.com bid.g.doubleclick.net forms.hsforms.com native.testing.equest.com *.amazonaws.com;connect-src 'self' *.orangehrm.com www.google-analytics.com settings.luckyorange.net vc.hotjar.com vc.hotjar.io in.hotjar.com;worker-src blob: 'self';img-src * 'self' www.googletagmanager.com ssl.gstatic.com www.gstatic.com www.google-analytics.com googleads.g.doubleclick.net www.google.com data: blob: 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' about: https://goodwin.photoshelter.com https://www.google-analytics.com https://www.googletagmanager.com https://use.typekit.net http://cdnjs.cloudflare.com http://us1.siteimprove.com https://p.typekit.net https://fonts.gstatic.com https://siteimproveanalytics.com https://view.ceros.com https://cdn.yoshki.com https://61282325.global.siteimproveanalytics.io https://w.soundcloud.com photoshelter.com https://player.vimeo.com/ https://cdn.cookielaw.org;                                                          script-src 'self' 'unsafe-inline' 'unsafe-eval' https://view.ceros.com https://goodwin.photoshelter.com https://www.google-analytics.com https://www.googletagmanager.com https://use.typekit.net http://cdnjs.cloudflare.com http://us1.siteimprove.com https://cdnjs.cloudflare.com https://siteimproveanalytics.com https://cdn.yoshki.com https://61282325.global.siteimproveanalytics.io https://w.soundcloud.com https://photoshelter.com https://player.vimeo.com/ https://cdn.cookielaw.org  https://j.6sc.co;                                                          frame-ancestors 'self' http://goodwinlaw.com https://goodwinlaw.com https://cdn.yoshki.com https://61282325.global.siteimproveanalytics.io;                                                          frame-src 'self'  https://goodwin.photoshelter.com http://players.brightcove.net https://www.google.com https://www.youtube.com https://player.simplecast.com https://embed.simplecast.com https://players.brightcove.net https://ud.tiaa-cref.org https://view.ceros.com https://cdn.yoshki.com https://61282325.global.siteimproveanalytics.io https://w.soundcloud.com photoshelter.com https://player.vimeo.com/;                                                          img-src 'self' data: https://us1.siteimprove.com https://www.google-analytics.com https://nowexttype.com https://p.typekit.net https://www.googletagmanager.com https://cdn.yoshki.com https://61282325.global.siteimproveanalytics.io https://cdn.cookielaw.org;                                                          font-src 'self' https://fonts.gstatic.com https://advance.lexis.com https://use.typekit.net https://61282325.global.siteimproveanalytics.io;                                                          connect-src 'self' https://performance.typekit.net https://www.google-analytics.com https://61282325.global.siteimproveanalytics.io https://cdn.cookielaw.org;                                                          report-uri https://233122823c47f119af0143cbea7853d6.report-uri.com/r/d/csp/reportOnly 2
form-action 'self' https://coworkingresources.org https://*.coworkingresources.org https://www.facebook.com https://getkisi.com https://*.getkisi.com https://kisi-webflow-production.herokuapp.com https://kisi-webflow-staging.herokuapp.com; script-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://a.omappapi.com https://a.optmnstr.com https://a.quora.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://connect.facebook.net https://d.adroll.com https://d.adroll.mgr.consensu.org https://googleads.g.doubleclick.net https://idsync.rlcdn.com https://js.hsadspixel.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.usemessages.com https://kisi-webflow-production.herokuapp.com https://kisi-webflow-staging.herokuapp.com https://www.redditstatic.com https://s.adroll.com https://ssl.google-analytics.com https://script.hotjar.com https://snap.licdn.com https://static.hotjar.com https://tagmanager.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com 2
frame-ancestors 'self' http://jobcloud.ch http://*.jobcloud.ch http://jobs.ch http://*.jobs.ch http://jobup.ch http://*.jobup.ch http://ingjobs.ch http://ictcareer.ch http://jobs4sales.ch http://financejobs.ch http://medtalents.ch http://jobwinner.ch http://alpha.ch http://topjobs.ch http://*.jobscout24.ch http://impieghi.ch http://*.impieghi.ch http://*.stellenmarkt.ch 2
default-src 'self' data: blob: gap: 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.google.com *.linkedin.com *.bizographics.com *.loggly.com *.doubleclick.net *.wistia.com *.twimg.com *.twitter.com *.googleadservices.com *.facebook.com *.googletagmanager.com *.snapengage.com *.visualwebsiteoptimizer.com *.facebook.net *.iforex.com *.google-analytics.com *.bootstrapcdn.com *.youtube.com *.wistia.net *.opmnstr.com *.webapi-services.net *.googlesyndication.com *.optnmnstr.com *.mxpnl.net https://pixel-tracking.appspot.com https://pixelmachine-981.appspot.com *.mte-media.com mte-media.com *.typekit.net  *.optimizely.com d5phz18u4wuww.cloudfront.net *.hotjar.com *.ads-twitter.com *.finadsr.com wcs.naver.net *.criteo.net *.criteo.com; img-src 'self' data: blob: *; font-src 'self' data: blob: *.gstatic.com *.bootstrapcdn.com *.typekit.net *.webapi-services.net *.hotjar.com; connect-src 'self' data: *.doubleclick.net *.facebook.com *.wistia.com https://embedwistia-a.akamaihd.net *.googletagmanager.com *.opmnstr.com *.mxpnl.net *.iforex.com *.webapi-services.net *.litix.io *.hotjar.io *.hotjar.com wss://*.hotjar.com *.google-analytics.com *.finadsr.com *.snapengage.com *.criteo.com *.criteo.net *.iforex.co.uk *.vestle.com *.toredofx.com; child-src 'self' data: blob: *.googletagmanager.com *.iforex.com *.webapi-services.net; frame-src 'self' data: gap: *.webapi-services.net *.facebook.com *.twitter.com *.google.com *.linkedin.com *.snapengage.com *.youtube.com *.wistia.com *.googlesyndication.com *.googletagmanager.com *.iforex.com https://fast.wistia.net *.hotjar.com *.criteo.com; media-src 'self' blob: data: *.iforex.com *.webapi-services.net *.gstatic https://embedwistia-a.akamaihd.net *.mte-media.com *.snapengage.com; object-src 'self' https://embed-ssl.wistia.com *.mte-media.com; worker-src 'self' data: blob: *.googletagmanager.com *.iforex.com *.webapi-services.net; frame-ancestors 'self' *.iforex.com *.efix.local; report-uri https://content.webapi-services.net/csp-reports; 2
default-src 'self' * data: blob:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *;style-src 'self' 'unsafe-inline' *;font-src 'self' maxcdn.bootstrapcdn.com fonts.gstatic.com data:;connect-src 'self' blob: *.bg.co.uk *.wgp-bgs.co.uk *.birdguides.com *.birdguides-cdn.com https://vimeo.com https://api.raygun.io https://apikeys.civiccomputing.com https://clapi.civiccomputing.com ws://am.freshrelevance.com http://am.freshrelevance.com *.traveldesk.io *.advertising.com *.adnxs.com *.doubleverify.com *.serving-sys.com *.g.doubleclick.net *.googlesyndication.com *.pbstck.com;base-uri 'self' 2
upgrade-insecure-requests; frame-ancestors 'none' 2
base-uri 'self'; connect-src 'self'  *.edgy.app; media-src 'self'  *.edgy.app; frame-ancestors 'self'  *.edgy.app 2
default-src * blob: data: http: https: 'unsafe-inline' 'unsafe-eval'; report-uri https://reports.nameshield.net/ 2
frame-ancestors https://l7804403c1dev-admin.occa.ocs.oraclecloud.com https://l7804403c1dev-store.occa.ocs.oraclecloud.com https://www.milanomalpensa-airport.com https://www.milanolinate-airport.com https://external.airport.ai 2
default-src 'self' https: data: blob: 'unsafe-inline' 2
default-src https: data:; script-src https: data: 'unsafe-eval' 'unsafe-inline'; style-src https: data: 'unsafe-inline' 2
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.tradingview.com https://storage.googleapis.com https://files.bitkan.com https://img.szsing.com https://img.bitkan.net https://mobile.bitkan.com https://res.wx.qq.com https://static.bitkan.com https://static.bitkan.net https://www.google-analytics.com https://www.googletagmanager.com https://hm.baidu.com https://www.sobot.com https://aeis.alicdn.com https://g.alicdn.com https://cf.aliyun.com https://ynuf.alipay.com https://static.geetest.com https://api.geetest.com https://monitor.geetest.com https://dn-staticdown.qbox.me; img-src * data: blob:; style-src 'self' 'unsafe-inline' https://bee.bitkan.com https://www.tradingview.com https://files.bitkan.com https://img.szsing.com https://img.bitkan.net https://mobile.bitkan.com https://static.bitkan.com https://static.bitkan.net https://fonts.googleapis.com https://static.geetest.com https://dn-staticdown.qbox.me; font-src 'self' data: https://www.tradingview.com https://files.bitkan.com https://img.szsing.com https://img.bitkan.net https://mobile.bitkan.com https://static.bitkan.com https://static.bitkan.net https://fonts.gstatic.com https://at.alicdn.com; frame-src 'self' redpacket: https://www.tradingview.com https://player.bilibili.com https://files.bitkan.com https://mobile.bitkan.com  https://bitkan.com https://beta.bitkan.com https://static.bitkan.com https://static.bitkan.net https://www.sobot.com https://v.qq.com https://player.youku.com; connect-src 'self' https://static.bitkan.net https://www.tradingview.com https://files.bitkan.com https://img.szsing.com https://img.bitkan.net https://mobile.bitkan.com https://wapi.bitkan.com wss://s.btckan.com:8080 wss://imws.sobot.com:* https://sentry.io https://www.google-analytics.com https://stats.g.doubleclick.net https://hm.baidu.com https://upload.qiniup.com https://ynuf.alipay.com https://cors-anywhere.bitkan.com https://uplog.qbox.me https://api.qiniu.com ; object-src 'none' 2
frame-ancestors 'self' webforce.com new.webforce.com webforce1111.c45stagehostopia.com wfsites-to.websitecreatorprotool.com wfsites.websitecreatorprotool.com wfsites-ie.websitecreatorprotool.com wf.mktgsuite.deluxe.com fl.sitekreator.com portal.mktgsuite.deluxe.com dex.wfsites.websitecreatorprotool.com sites2.freelogoservices.com cpaneltest.sitekreator.com; 2
default-src 'self' https:; base-uri 'self'; block-all-mixed-content; connect-src 'self' wss: https:; font-src 'self' https: data:; frame-src 'self' https: data:; img-src 'self' https: data:; media-src 'self' https: blob:; object-src 'self' https: data:; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline' 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' msg.playcanvas.com code.playcanvas.com https://js.stripe.com https://*.google.com https://*.google-analytics.com cdn.webglstats.com https://s3-eu-west-1.amazonaws.com 2
frame-ancestors 'self' https://s.salecycle.com https://vodafoneromania.demdex.net https://vars.hotjar.com https://c1.adform.net 2
report-uri https://sentry.io/api/1481323/security/?sentry_key=6a0d90a447e5404786cce69b90774dbc https://sentry.io/api/1481316/security/?sentry_key=5ed17bd323a34165b4278b59fe665e28 2
frame-ancestors 'self';script-src 'unsafe-inline' 'unsafe-eval' 'self' www.google.com www.gstatic.com  www.onlinechatcenters.com *.hotjar.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com googleads.g.doubleclick.net data:; style-src 'unsafe-inline' 'self' fonts.gstatic.com www.gstatic.com  fonts.googleapis.com tagmanager.google.com 2
object-src 'self'; frame-ancestors 'self' 2
default-src wss: https: data: blob: 'unsafe-inline' 'unsafe-eval'; img-src data: https: 2
default-src 'self'; block-all-mixed-content; script-src 'self' https://bin.bnbstatic.com https://www.googletagmanager.com https://tagmanager.google.com https://monitor.geetest.com https://static.geetest.com https://dn-staticdown.qbox.me https://api.geetest.com 'unsafe-inline' https://accounts.binance.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://tagmanager.google.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://static.geetest.com https://dn-staticdown.qbox.me https://bin.bnbstatic.com https://tagmanager.google.com https://fonts.googleapis.com; font-src 'self' data: https://at.alicdn.com https://static.geetest.com https://dn-staticdown.qbox.me https://bin.bnbstatic.com https://fonts.gstatic.com; connect-src 'self' https://frontend-m.binance.cloud https://sensors.binance.cloud https://sensors.binance.com https://ss.datasconsole.com https://report.binance.gg https://stats.g.doubleclick.net https://bin.bnbstatic.com  https://stats.g.doubleclick.net https://gtm-n3ck8wk-n2nln.uc.r.appspot.com https://www.google-analytics.com; img-src 'self' data: https://sensors.binance.cloud https://sensors.binance.com https://static.geetest.com https://dn-staticdown.qbox.me https://bin.bnbstatic.com https://us-central1-madrid-investing.cloudfunctions.net https://stats.g.doubleclick.net https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://analytics.twitter.com https://t.co https://www.facebook.com; media-src 'self'; frame-src 'self' https://ss.datasconsole.com https://www.google.com https://bid.g.doubleclick.net; object-src 'none'; base-uri 'self' 2
default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss:; base-uri 'self'; 2
frame-ancestors 'self' https://*.ci360.sas.com; 2
default-src 'self'; frame-src 'self' data: fbrpc://call https://*.zip.co https://*.stripe.com https://*.shophumm.com.au/ https://wenzhang.baidu.com https://tpc.googlesyndication.com https://masterpass.com https://roktcdn1.akamaized.net https://www.youtube.com https://*.masterpass.com https://www.google.com/recaptcha/  https://*.rokt.com https://*.doubleclick.net https://*.kaptcha.com https://*.addthis.com https://*.facebook.com https://*.braintreegateway.com https://*.paypal.com https://*.visa.com https://*.cardinalcommerce.com https://*.paypalobjects.com; script-src 'self' data: https://www.clarity.ms/ https://*.zipmoney.com.au https://*.partpay.co.nz https://*.rakuten.com https://*.linksynergy.com https://*.dc-storm.com https://*.jrs5.com https://*.mediaforge.com https://*.nxtck.com https://*.stripe.com  https://*.shophumm.com.au/ https://www.googletagservices.com/ https://adservice.google.com.au/ https://adservice.google.com/ https://pagead2.googlesyndication.com/ https://cdn.jsdelivr.net/npm/newrelic-reduced@1.1.2/lib/index.js https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://*.addthisedge.com https://assets.pinterest.com https://swenzhang.baidu.com https://roktcdn1.akamaized.net https://cdn.optimizely.com/js/ https://ds-aksb-a.akamaihd.net/aksb.min.js https://tpc.googlesyndication.com https://uua1puwkv5-dsn.algolia.net https://*.algolianet.com https://*.masterpass.com https://masterpass.com https://*.rokt.com https://*.nr-data.net https://cdn.jsdelivr.net/algoliasearch/ https://*.facebook.net https://*.facebook.com https://*.newrelic.com https://*.marinsm.com https://*.google-analytics.com https://*.googleadservices.com https://*.googleapis.com https://*.postcodeanywhere.co.uk https://*.paypal.com https://*.paypalobjects.com https://*.braintreegateway.com https://*.visa.com https://*.kaptcha.com https://*.addthis.com https://*.nanigans.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: blob: https:; style-src 'self' https://use.fontawesome.com https://roktcdn1.akamaized.net https://*.visa.com https://*.masterpass.com https://masterpass.com https://swenzhang.baidu.com https://*.googleapis.com https://*.postcodeanywhere.co.uk 'unsafe-inline'; font-src 'self' data: https://use.fontawesome.com https://*.googleapis.com https://*.gstatic.com https://roktcdn1.akamaized.net ; connect-src 'self' https://www.clarity.ms/ https://*.zip.co https://zip.co https://*.zipmoney.com.au https://pagead2.googlesyndication.com https://*.postcodeanywhere.co.uk https://*.visa.com	https://*.addthis.com https://www.google-analytics.com https://*.nr-data.net https://*.rokt.com https://*.braintreegateway.com https://*.paypal.com https://*.kaptcha.com https://*.facebook.com https://ds-aksb-a.akamaihd.net/RRT; object-src 'self' https://c2.mysalec.com https://*.visa.com https://www.paypalobjects.com; 2
script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; 2
-Report-Only '/some-report-uri'; 2
frame-ancestors https://*.ionos.com https://*.ionos.at https://*.ionos.co.uk https://*.ionos.de https://*.ionos.es https://*.ionos.fr https://*.ionos.it https://*.ionos.ca https://*.ionos.mx https://*.ionos.us https://*.website-editor.net https://*.mywebsite-editor.com www.gesangverein-waldbrunn.com 2
default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' 2
frame-ancestors 'self'; report-uri /_/commcsp?disposition=enforce 2
default-src 'self' https://*.shakepay.com/;connect-src https://*.shakepay.com/ https://api.amplitude.com/ https://api.segment.io/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://s3.ca-central-1.amazonaws.com/ https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com;child-src https://share.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com  https://www.youtube.com https://player.vimeo.com https://fast.wistia.net;font-src 'self' https://*.fontawesome.com/ https://js.intercomcdn.com/;frame-src https://www.google.com/;img-src 'self' blob: data: https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com  https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-9.com https://www.gravatar.com/ https://www.google-analytics.com/ https://static.intercomassets.com/;script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/axios/ https://cdnjs.cloudflare.com/ajax/libs/vue/ https://cdnjs.cloudflare.com/ajax/libs/Chart.js/ https://www.google-analytics.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.amplitude.com/ https://cdn.segment.com/ https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/animate.css/ https://cdnjs.cloudflare.com/ajax/libs/bulma/ https://pro.fontawesome.com/releases/;media-src https://js.intercomcdn.com/;form-action https://intercom.help https://api-iam.intercom.io 2
base-uri 'self'; object-src 'none'; img-src 'self' https://www.google-analytics.com https://storage.googleapis.com/operating-anagram-8280/ https://lh3.googleusercontent.com/ https://stats.g.doubleclick.net/r/collect https://i.ytimg.com/ https://ad.doubleclick.net https://adservice.google.com https://www.googletagmanager.com data:; script-src 'self' 'unsafe-eval' 'sha256-If5YkXjOaX9+Y2b1TABwFRqsMHrOMW2l2cQ5lJdj3w8=' https://www.google-analytics.com/analytics.js https://ajax.googleapis.com/ajax/libs/angularjs/1.6.8/angular.min.js https://ajax.googleapis.com/ajax/libs/angularjs/1.6.8/angular-animate.min.js https://ajax.googleapis.com/ajax/libs/angularjs/1.6.8/angular-touch.min.js https://www.gstatic.com/brandstudio/kato/cookie_choice_component/cookie_consent_bar.v3.js https://www.gstatic.com/external_hosted/hammerjs/v2_0_2/hammer.min.js https://www.googletagmanager.com/gtag/js https://stats.g.doubleclick.net/r/collect https://www.youtube.com/iframe_api https://s.ytimg.com/yts/ 2
default-src 'self' https://www-cdn01.avisonyoung.com; style-src 'self' 'unsafe-inline' https://www-cdn01.avisonyoung.com https://fonts.googleapis.com https://proxy.ay.prod.3whst.com https://platform.twitter.com https://ton.twimg.com https://avison-young.foleon.com https://avison-young.preview.foleon.com https://tagmanager.google.com https://fast.fonts.net https://cdn.foleon.com https://s3.eu-west-2.amazonaws.com https://optimize.google.com; font-src 'self' data: https://www-cdn01.avisonyoung.com https://proxy.ay.prod.3whst.com https://fonts.gstatic.com https://s3.eu-west-2.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www-cdn01.avisonyoung.com https://proxy.ay.prod.3whst.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://pi.pardot.com https://go.avisonyoung.com https://buildout.com https://platform.twitter.com https://www-cdn01.avisonyoung.com https://avison-young.foleon.com https://avison-young.preview.foleon.com https://ceros.com https://static.cloudflareinsights.com https://cdn.syndication.twimg.com https://maps.googleapis.com https://vimeo.com https://player.vimeo.com https://public.tableau.com https://widget.usersnap.com https://resources.usersnap.com https://ajax.googleapis.com https://s3.eu-west-2.amazonaws.com https://cdn.analytics.foleon.com https://previewer.foleon.com https://optimize.google.com; img-src https: data: blob:; frame-src 'self' https://buildout.com https://platform.twitter.com https://syndication.twitter.com https://youtu.be https://www.youtube.com https://avison-young.foleon.com https://avison-young.preview.foleon.com https://www.google.com https://go.avisonyoung.com https://vimeo.com https://player.vimeo.com https://public.tableau.com https://forms.office.com *.youtube-nocookie.com https://dev.gvadob.ie https://experience.arcgis.com https://infogram.com https://optimize.google.com; connect-src 'self' https://www.google-analytics.com https://widget.usersnap.com https://api.analytics.foleon.com https://api.foleon.com https://s3.eu-west-2.amazonaws.com; media-src 'self' blob: https://www-cdn01.avisonyoung.com *.youtube-nocookie.com; object-src 'self' https://www-cdn01.avisonyoung.com *.youtube-nocookie.com; worker-src 'self' blob: 2
default-src 'unsafe-inline' 'unsafe-eval' 'self' wss: *.mouseflow.com *.hotjar.com roundpic.io http://roundpic.io/ *.cinema.com.hk *.googleadservices.com placehold.it remote.captcha.com https://www.transported.co/ *.tekcent.com *.google.com *.maps.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.google-analytics.com *.pinterest.com *.twitter.com *.twitch.tv *.youtube.com *.themiddlehousehotel.com cdnjs.cloudflare.com api.userinfo.io *.google.com *.sinaimg.cn *.doubleclick.net *.typekit.net data: *.cdninstagram.com *.typography.com browser-update.org *.swireproperties.com *.linkedin.com www.irasia.com *.addthis.com *.addthisedge.com aspen.refineryclub.com *.msecnd.net *.corporateshowcase.com *.windows.net maps.gstatic.cn jsonip.com *.google.cn freegeoip.net *.gstatic.com stackpath.bootstrapcdn.com code.jquery.com placehold.it code.createjs.com *.tekcent.com *.azure.net *.addthisedge.com *.msecnd.net *.baidu.com *.windows.net http://*.sinaimg.cn https://j02.optimix.asia https://s3-ap-southeast-1.amazonaws.com http://swireproperties.blob.core.windows.net https://e02.optimix.asia https://www.tripadvisor.com https://www.jscache.com https://www.tripadvisor.com https://en.tripadvisor.com.hk https://www.jscache.com *.tekcent.com https://static.tacdn.com https://p.travelsmarter.net https://tag.yieldoptimizer.com https://pixel.sojern.com https://ib.adnxs.com http://spl.blob.core.windows.net *.map.bdimg.com j02.optimix.asia e02.optimix.asia tag.adaraanalytics.com dsum-sec.casalemedia.com us-u.openx.net sd.turn.com pixel.advertising.com ad.yieldlab.net i.liadm.com idsync.rlcdn.com tag.yieldoptimizer.com tapestry.tapad.com ib.adnxs.com pixel.rubiconproject.com dsum.casalemedia.com rtb.gumgum.com www.google.com.vn dpm.demdex.net beacon.krxd.net *.triptease.io addtocalendar.com *.tripadvisor.co.uk *.tripadvisor.com *.tripadvisor.com.hk theta360.com http://api.map.baidu.com api.stathat.com  blob: z.moatads.com *.sharerails.com *.hotjar.com *.hotjar.io api.ipstack.com s3.amazonaws.com www.pacificplace.com.hk https://sitecore-xp-cms-cd.azurewebsites.net *.cloudfront.net *.adsrvr.org *.google.com.hk *.moatads.com *.bidswitch.net *.pubmatic.com *.yahoo.com; 2
frame-ancestors 'self' https://adv-a6915c7bc.dispatcher.hana.ondemand.com https://adv22-a22528b4f.dispatcher.hana.ondemand.com https://adv-a3457bf4a.dispatcher.hana.ondemand.com 2
default-src 'self' *.lvvwd.com *.youtube.com data:; style-src 'self' 'unsafe-inline' *.lvvwd.com *.juicer.io *.mqcdn.com *.cludo.com *.cludo.com.cdn.cloudflare.net *.googleapis.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.lvvwd.com *.juicer.io *.digicert.com *.mqcdn.com *.google-analytics.com *.googleapis.com *.jwpcdn.com *.onefiserv.com *.gstatic.com *.google.com *.googletagmanager.com *.facebook.net https://sdks.shopifycdn.com *.cludo.com *.cludo.com.cdn.cloudflare.net data:; connect-src 'self' *.lvvwd.com *.juicer.io *.mqcdn.com *.mapquestapi.com *.mapquest.com *.google-analytics.com *.googleapis.com *.gstatic.com *.doubleclick.net https://springs-preserve.myshopify.com *.cludo.com *.cludo.com.cdn.cloudflare.net data:; font-src 'self' *.lvvwd.com *.juicer.io *.mqcdn.com *.jwpcdn.com *.gstatic.com data:; img-src * data: * blob:; frame-src 'self' *.onefiserv.com *.streamtext.net *.youtube.com *.doubleclick.net *.google.com *.facebook.com data:; media-src 'self' *.lvvwd.com blob: data:; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://we-pay.dodopizza.com https://eu2-pay.dodopizza.com https://dodopizza-a.akamaihd.net https://dodopizza.azureedge.net https://cdn.dodostatic.net https://eu2dodostatic.blob.core.windows.net https://globalapi.dodopizza.com https://publicapi.dodois.io https://*.ivideon.com https://*.extcam.com https://eventstream.dodopizza.com https://api.mindbox.ru https://www.google.com https://www.google.ru https://www.googletagmanager.com https://tagmanager.google.com https://optimize.google.com https://firebaseinstallations.googleapis.com https://firebaseremoteconfig.googleapis.com https://analytics.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://*.fls.doubleclick.net https://mc.yandex.ru https://yastatic.net https://top-fwz1.mail.ru https://connect.facebook.net https://www.facebook.com https://vk.com https://login.vk.com https://ssp.adriver.ru https://www.google.by https://www.artfut.com https://z.asbmit.com https://pafutos.com https://ad.admitad.com https://inv-dmp.admixer.net https://lenkmio.com https://*.appsflyer.com https://impressions.onelink.me https://config.metomic.io/ https://apipub.metomic.io/ https://consent-manager.metomic.io/ https://api.rollbar.com https://dodopizza428687.typeform.com/ https://embed.typeform.com/ 2
default-src 'self'; script-src 'self' 'unsafe-inline' www.google.com www.gstatic.com ajax.googleapis.com cdn.jsdelivr.net www.google-analytics.com platform.twitter.com platform.instagram.com syndication.twitter.com player.ooyala.com linkhelp.clients.google.com cdn.syndication.twimg.com js.gleam.io www.instagram.com www.recaptcha.net connect.facebook.net ; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com platform.twitter.com ajax.googleapis.com cdn.jsdelivr.net ; img-src * data:; media-src *; child-src 'self' www.google.com www.twitch.tv player.twitch.tv clips.twitch.tv www.youtube.com player.ooyala.com giphy.com plays.tv *.twitter.com www.instagram.com gleam.io viewer.autodesk.com open.spotify.com www.facebook.com ; frame-ancestors 'self'; font-src fonts.googleapis.com fonts.gstatic.com; connect-src 'self' tl.net; block-all-mixed-content; 2
default-src 'self' http: https: data: blob: 'unsafe-eval' style-src: 'unsafe-inline' wss://vts.zohopublic.com 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://analytics.twitter.com https://www.googleadservices.com https://tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://static.zdassets.com https://static.ads-twitter.com; img-src * data:; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com data:; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data:; frame-src https://contactnash.zendesk.com https://www.youtube.com; connect-src 'self' https://d2044444.sibforms.com https://www.google-analytics.com https://ekr.zdassets.com https://contactnash.zendesk.com wss://widget-mediator.zopim.com https://nashproxy.dev.nash.io; object-src 'none'; media-src 'self' https://static.zdassets.com; 2
default-src 'self' 'unsafe-inline' *.tableau.com *.vimeo.com *.youtube.com cdnjs.cloudflare.com cdn.rawgit.com raw.githubusercontent.com *.googletagmanager.com cdn.jsdelivr.net www.google-analytics.com www.googletagmanager.com fonts.gstatic.com www.google.com *.googleapis.com maps.gstatic.com developers.google.com tagmanager.google.com ssl.gstatic.com www.gstatic.com tagmanager.google.com apikeys.civiccomputing.com cc.cdn.civiccomputing.com cdn.siteimprove.net data:; 2
connect-src 'self' disqus.com *.disqus.com *.disquscdn *.addthis.com *.gstatic.com *.googlesyndication.com 2
frame-ancestors 'self' http://zpe20virtual.expo-ip.com/ 2
default-src 'self'; script-src 'self'; img-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; frame-src 'none'; object-src 'none' 2
frame-ancestors 'self' *.techrepublic.com *.ampproject.org *.amp.cloudflare.com; default-src https: blob: 'unsafe-inline' 'unsafe-eval'; font-src https: blob: data:; img-src https: data: android-webview-video-poster: blob:; form-action https:; block-all-mixed-content; media-src https: blob: data:; 2
base-uri 'self' https://docs.helpscout.net/; child-src blob:; connect-src *; default-src 'self' https://api.luckyorange.com/ https://files.zadapps.info/islamqa.info/; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://static-v.tawk.to/a-v3/fonts/ https://use.fontawesome.com/; frame-src 'self' https://cse.google.com/ https://djtflbt20bdde.cloudfront.net/ https://files.zadapps.info/ https://js.stripe.com/ https://optimize.google.com https://www.google.com/ https://www.googletagmanager.com/ https://www.youtube.com/; img-src 'self' data: https://*.gstatic.com/ https://cdn.jsdelivr.net/emojione/assets/png/ https://clients1.google.com/generate_204 https://d10lpsik1i8c69.cloudfront.net/graphics/ https://files.zadapps.info/islamqa.info/ https://i.ytimg.com/ https://optimize.google.com https://static-v.tawk.to/a-v3/images/ https://stats.g.doubleclick.net/ https://www.google.com.tr/ads/ https://www.google.com/ads/ https://www.google.com/cse/static/ https://www.google.com/uds/ https://www.googleapis.com/generate_204 https://www.googletagmanager.com www.google-analytics.com/; media-src 'self' https://d10lpsik1i8c69.cloudfront.net/sounds/ https://files.zadapps.info/islamqa.info/ https://www.youtube.com/; object-src 'self' https://djtflbt20bdde.cloudfront.net/img/ https://files.zadapps.info/islamqa.info/; script-src 'self' 'unsafe-eval' 'unsafe-inline' http://cdnjs.cloudflare.com/ajax/libs/ https://ajax.cloudflare.com/cdn-cgi/scripts/ https://apis.google.com/ https://app.insignal.co/pixel/ https://cdn.ampproject.org/ https://cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js https://cse.google.com/ https://d10lpsik1i8c69.cloudfront.net/ https://djtflbt20bdde.cloudfront.net/ https://embed.tawk.to/5e9ecbae69e9320caac5cb92/default https://js.sentry-cdn.com/ https://js.stripe.com/v3/ https://optimize.google.com/ https://static-v.tawk.to/683/languages/ar.js https://tagmanager.google.com/ https://use.fontawesome.com/ https://www.google-analytics.com/ https://www.google.com/cse/ https://www.google.com/jsapi/ https://www.google.com/recaptcha/api.js https://www.google.com/uds/api/search/ https://www.googletagmanager.com/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/emojione/2.2.7/assets/css/emojione.min.css https://cdnjs.cloudflare.com/ajax/libs/ https://d10lpsik1i8c69.cloudfront.net/css/ https://djtflbt20bdde.cloudfront.net/css/ https://fonts.googleapis.com https://optimize.google.com https https://tagmanager.google.com https://use.fontawesome.com https://use.fontawesome.com/ https://www.google.com/cse/ https://www.google.com/uds/api/search/; worker-src blob: 2
default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data: blob:; media-src * data:; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 2
default-src https: 'unsafe-eval' 'unsafe-inline'; object-src https: ; child-src https: platform.twitter.com; img-src https: data: 2
frame-ancestors 'self' goqubit.net ; 2
default-src * 'self' data: 'unsafe-inline' 'unsafe-eval' ; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' ; style-src * 'self' data: 'unsafe-inline' ; img-src * 'self' data: ; font-src * 'self' data: ; connect-src * 'self' ; media-src 'self' ; frame-src * 'self' ;  2
frame-ancestors 'self' http://*.vseigru.net http://vseigru.net 2
default-src 'self';connect-src https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://operateurtec.tt.omtrdc.net/ 'self' blob: ; script-src https://www.gstatic.com/charts/loader.js http://cdn.jsdelivr.net/momentjs/latest/moment.min.js https://connect.facebook.net https://www.google-analytics.com/analytics.js https://cdn.jsdelivr.net:443 https://www.google.com:443 https://maps.googleapis.com:443 https://www.googletagmanager.com/ https://tagmanager.google.com/ https://assets.adobedtm.com 'unsafe-inline' 'unsafe-eval' 'self';style-src https://fonts.googleapis.com:443 https://tagmanager.google.com/ 'self' 'unsafe-inline'; font-src https://fonts.gstatic.com:443 'self'; img-src https: data: 'self' 'unsafe-inline' https://ssl.gstatic.com/ blob:; frame-src https://*.letec.be https://*.youtube.com https://www.facebook.com/ https://player.vimeo.com:443 https://www.dailymotion.com:443; 2
default-src http: https: data: 'unsafe-inline' 'unsafe-eval' 2
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://optimize.google.com/optimize/ https://dev.visualwebsiteoptimizer.com *.google.com https://*.googleapis.com https://*.gstatic.com https://*.vo.msecnd.net https://www.googletagmanager.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com https://bam.nr-data.net https://js-agent.newrelic.com https://tagmanager.google.com/debug https://tagmanager.google.com/debug/angular-bundle.js https://tagmanager.google.com/debug/debuguiApp.js https://tagmanager.google.com/debug/api/templates https://d6unz3nsyh8vw.cloudfront.net https://cdn.cai.tools.sap/webchat/webchat.js https://vimeo.com *.vimeo.com; 2
default-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com liberapay.com data: 2
default-src https:; connect-src https:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:;  object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https: 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.cybersource.com https://*.mapbox.com https://*.tiles.mapbox.com https://cdn.loop11.com https://*.readspeaker.com https://www.bugherd.com https://*.google-analytics.com https://www.googletagmanager.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.segment.com https://d2iiunr5ws5ch1.cloudfront.net https://h.online-metrix.net https://*.usabilla.com https://d6tizftlrpuof.cloudfront.net/ https://optimize.google.com; child-src blob: https://*.vic.gov.au https://*.cybersource.com https://*.readspeaker.com https://*.youtube.com https://h.online-metrix.net https://*.usabilla.com https://d6tizftlrpuof.cloudfront.net ; img-src 'self' * data: blob: https://*.cybersource.com https://*.google-analytics.com https://optimize.google.com ; style-src 'self' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com *.readspeaker.com https://d6tizftlrpuof.cloudfront.net; font-src 'self' data: https://fonts.gstatic.com https://d6tizftlrpuof.cloudfront.net; frame-src https://app.powerbi.com 'self' https://optimize.google.com https://h.online-metrix.net https://*.cybersource.com *.readspeaker.com https://*.youtube.com https://d6tizftlrpuof.cloudfront.net; 2
script-src 'self' https: 'unsafe-eval' 2
default-src 'self' data: 'unsafe-inline' https: *; 2
default-src 'self' https: data: blob:; connect-src https: wss:;script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' blob:; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com https://www.riskdataobject.com https:; upgrade-insecure-requests; 2
unsafe-inline 2
form-action https:; upgrade-insecure-requests 2
default-src https: 'unsafe-inline' 'unsafe-eval' data: 2
style-src 'self' 'unsafe-inline' *; report-uri /report-csp-violation 2
default-src 'self' https://*.consumerratequotes.com https://*.vimeo.com https://*.youtube.com; frame-src 'self' https://*.google.com https://*.consumerratequotes.com https://www.facebook.com https://platform.twitter.com https://*.vimeo.com https://*.youtube.com https://*.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.gstatic.com https://*.google.com https://platform.twitter.com https://*.googleapis.com https://*.licdn.com https://*.facebook.net https://*.google-analytics.com https://googleads.g.doubleclick.net https://*.googleadservices.com https://*.salemove.com https://*.glia.com; connect-src 'self' https://*.doubleclick.net https://*.google-analytics.com wss://*.salemove.com https://*.salemove.com wss://*.glia.com https://*.glia.com https://*.twilio.com wss://*.twilio.com; media-src 'self' https://*.salemove.com https://*.glia.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.salemove.com https://*.glia.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https://*.ggpht.com https://*.googleapis.com https://*.twitter.com https://*.ytimg.com https://*.gstatic.com https://www.google.com https://*.google-analytics.com https://*.linkedin.com https://*.facebook.com https://hello.myfonts.net blob: data: https://*.salemove.com https://*.glia.com; 2
frame-ancestors 'self' https://sgl-live01.mcon-group.com https://logon.sglcarbon.com; 2
frame-ancestors 'self' https://*.j2t.com https://j2t.com https://*.j2t.exchange https://j2t.exchange https://*.just2trade.cn https://just2trade.cn 2
default-src 'self' static.mycity.travel static.j3l.ch * 'unsafe-inline' 'unsafe-eval' data: blob:; upgrade-insecure-requests; frame-ancestors: 'self' https://static.mycity.travel *; 2
default-src 'self' https:; child-src *; frame-src *; img-src * data:; media-src *; script-src 'self' *.windowsforum.com *.facebook.net *.google-analytics.com *.maxcdn.com *.facebook.com *.cloudflare.com *.google.com *.googleapis.com *.googlesyndication.com *.googletagservices.com *.doubleclick.net *.twitter.com *.bootstrapcdn.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.windowsforum.com *.facebook.net *.google-analytics.com *.maxcdn.com *.facebook.com *.cloudflare.com *.google.com *.googleapis.com *.googlesyndication.com *.googletagservices.com *.doubleclick.net *.twitter.com *.bootstrapcdn.com 'unsafe-inline' 2
default-src 'self'; script-src 'self' 'unsafe-inline'; img-src data: 'self'; connect-src 'self' services2.lfrz.at; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'; worker-src 'self'; frame-src 'self' www.youtube-nocookie.com; form-action 'self'; block-all-mixed-content; upgrade-insecure-requests; 2
frame-ancestors 'none'; form-action 'self'; base-uri 'self'; upgrade-insecure-requests 2
default-src * 'unsafe-eval' 'unsafe-inline' gap://ready file:; style-src 'self' 'unsafe-inline'; media-src *; img-src * 'self' filesystem: data: blob:; 2
default-src 'self' *.cloudfront.net; style-src 'self' 'unsafe-inline' *.googleapis.com *.bootstrapcdn.com *.cloudfront.net *.google.com *.cloudflare.com *.fontawesome.com *.optimonk.com *.intercomassets.com s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.addthis.com *.addthisedge.com *.hotjar.com *.google.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.doubleclick.net *.facebook.com *.facebook.net *.trackedlink.net cdn-akamai.mookie1.com cdn.districtm.ca secure.adnxs.com tags.tiqcdn.com *.authorize.net *.signifyd.com *.livechatinc.com *.bing.com *.hs-analytics.net *.hs-scripts.com *.hsadspixel.net *.hsleadflows.net *.cloudfront.net *.dotmailer-surveys.com *.cloudflare.com *.jquery.com *.trackedweb.net *.youtube.com *.ytimg.com *.bizographics.com *.fontawesome.com *.optimonk.com *.hscollectedforms.net *.connecoutdoors.com connecoutdoors.com *.intercom.io *.intercomcdn.com *.adroll.com; font-src 'self' data: *.gstatic.com *.bootstrapcdn.com *.amazonaws.com *.fontawesome.com *.intercomcdn.com garneau.com; img-src 'self' data: blob: *.paypalobjects.com *.signifyd.com *.online-metrix.net *.google-analytics.com *.doubleclick.net *.gstatic.com *.googleapis.com *.cdninstagram.com *.google.com *.facebook.com *.google.ca *.livechatinc.com *.hubspot.com *.cloudfront.net *.bronto.com *.abmr.net *.bing.com *.cloudflare.com *.jquery.com *.dotmailer-surveys.com *.googletagmanager.com *.optimonk.com *.hsforms.com *.intercomassets.com *.intercomcdn.com *.adroll.com; media-src 'self' *.cloudfront.net *.livechatinc.com; frame-src 'self' acdn.adnxs.com tags.tiqcdn.com *.hotjar.com *.addthis.com *.googletagmanager.com *.moneris.com *.signifyd.com *.youtube.com *.vimeo.com *.doubleclick.net *.livechatinc.com *.dotmailer-surveys.com *.facebook.net *.online-metrix.net *.google.com *.cloudfront.net *.facebook.com *.freshdesk.com; connect-src 'self' *.authorize.net *.addthis.com *.luckyorange.net *.cloudfront.net *.hubspot.com *.googleapis.com *.hubapi.com *.visitors.live wss://*.visitors.live wss://visitors.live *.doubleclick.net *.cloudflare.com *.youtube.com *.trackedweb.net *.google-analytics.com *.luckyorange.com *.mixpanel.com *.optimonk.com *.intercom.io wss://*.intercom.io; worker-src 'self' blob:; 2
default-src 'self'; style-src 'self' 'unsafe-inline' use.typekit.net/ p.typekit.net/; script-src 'self' 'unsafe-inline' www.space.net/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; form-action 'self'; worker-src 'none'; frame-src 'self' www.space.net/ www.youtube.com/ www.youtube-nocookie.com/ https://www.google.com/recaptcha/; img-src 'self' www.space.net/ data:; object-src 'none'; font-src 'self' use.typekit.net/; 2
upgrade-insecure-requests; report-uri /__csp-collector/index 2
script-src * https: 'unsafe-eval' 'unsafe-inline';style-src https: 'unsafe-inline';worker-src https: blob: 2
default-src 'self'; block-all-mixed-content; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net; font-src 'self' self data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src *; img-src 'self' self data: 'unsafe-inline' 'unsafe-eval' https://pbs.twimg.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.at; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com; report-uri /nelmio/csp/report 2
manifest-src 'self' *.mywebinar.net;default-src 'self' blob:;connect-src 'self' wss: *.mywebinar.com *.mywebinar.io *.mywebinar.live myownconference.net *.myownconference.net v2.zopim.com widget-mediator.zopim.com widget-mediator.zdassets.com static.zdassets.com ekr.zdassets.com www.google-analytics.com stats.g.doubleclick.net chimpstatic.com yoast.com my.yoast.com;frame-src 'self' www.youtube.com www.google.com yoa.st;script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.myownconference.com *.mywebinar.com *.mywebinar.net *.mywebinar.io www.google.com www.gstatic.com www.google-analytics.com www.googletagmanager.com ssl.google-analytics.com ajax.googleapis.com v2.zopim.com widget-mediator.zopim.com widget-mediator.zdassets.com static.zdassets.com chimpstatic.com a.quora.com;img-src 'self' data: *;media-src 'self' blob: *.mywebinar.com *.mywebinar.net *.mywebinar.io myownconference.net *.myownconference.net v2.zopim.com static.zdassets.com;style-src 'self' 'unsafe-inline' *.mywebinar.com *.mywebinar.net *.mywebinar.io;font-src 'self' data: *.mywebinar.net *.mywebinar.io v2.zopim.com static.zdassets.com;object-src 'self' *.mywebinar.net *.mywebinar.io; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.connexity.net *.googleadservices.com *.ubembed.com *.msn.com *.pricegrabber.com https://client.perimeterx.net https://collector-pxd62eqwow.perimeterx.net *.bizrate.com t.pepperjamnetwork.com http://www.pricegrabber.com/14C *.bing.com *.dsply.com *.webcollage.net https://gateway.answerscloud.com/eastcoasthardware/production/gateway.min.js *.cloudflare.com http://www.eastcoasthardware.com *.eastcoasthardware.com *.pupdaddy.com http://www.pupdaddy.com *.gracesgreens.com http://www.gracesgreens.com *.yumza.com http://www.yumza.com *.marinescreens.com http://www.marinescreens.com *.iovation.com seal-newjersey.bbb.org *.cloudfront.net *.doubleclick.net *.newrelic.com bam.nr-data.net *.google-analytics.com gsa://onpageload *.linkedin.com *.pinterest.com *.certona.net *.googleapis.com *.google.com *.gstatic.com *.yotpo.com *.googlecommerce.com *.iesnare.com pixeleze.com *.pixeleze.com shop.pe *.shop.pe *.klaviyo.com *.segment.io *.res-x.com  *.facebook.net *.facebook.com  https://www.googletagmanager.com https://settings.luckyorange.net wss://in.visitors.live wss://visitors.live https://sentry.io https://cdn.segment.com https://api.luckyorange.com https://use.fontawesome.com *.paypalobjects.com; 2
default-src * ; script-src * data: 'unsafe-inline' 'unsafe-eval' ; style-src * 'unsafe-inline' ; img-src * ; font-src * ; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://wwww.stanleysecuritysolutions.com https://*.jsdelivr.net https://*.rlcdn.com https://*.vteximg.com.br  https://*.wistia.com https://*.pardot.com https://go.stanleyengineeredfastening.com https://*.coveo.com  https://*.addthisedge.com  https://*.moatads.com https://*.addthis.com https://*.d41.co https://*.como.com  https://*.cloudflare.com https://*.jquery.com https://*.vtexassets.com https://*.vtex.com.br https://*.google.com https://*.google.fr https://*.google.be https://*.google.nl https://*.google-analytics.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.googleadservices.com https://*.bing.com https://*.go-mpulse.net https://*.akamaihd.com https://*.akamaihd.net https://*.janraincapture.com https://*.rpxnow.com https://rpxnow.com https://*.nr-data.net https://*.newrelic.com https://*.marketo.net https://*.marketo.com https://*.youtube.com https://*.ytimg.com https://*.onetrust.com https://*.cookielaw.org https://*.drift.com https://*.driftt.com https://*.reevoo.com https://*.pricespider.com https://*.cloudfront.net https://*.mapbox.com https://*.hotjar.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.linkedin.com https://*.licdn.com https://*.ads.linkedin.com https://*.facebook.net https://*.facebook.com resource://pdf.js  https://*.bazaarvoice.com https://*.salesforceliveagent.com https://*.force.com; img-src 'self' data: blob: https://*.google.com https://*.vtexassets.com  https://*.stanleyengineeredfastening.com https://*.vteximg.com.br https://*.google.nl https://*.google.be https://*.google.fr https://*.googleusercontent.com https://*.google.com.ua https://*.facebook.com https://*.facebook.net https://*.linkedin.com https://*.adsymptotic.com https://*.google-analytics.com https://*.googleapis.com https://*.google.co.in https://*.googletagmanager.com https://*.gstatic.com https://*.ggpht.com https://*.akamaihd.net https://*.google.by https://*.ytimg.com https://*.reevoo.com https://*.pricespider.com https://*.cloudfront.net https://*.doubleclick.net https://*.bing.com https://*.mapbox.com https://*.bazaarvoice.com; style-src 'self' 'unsafe-inline' https://*.google.com https://*.jquery.com https://*.google.nl https://*.google.fr https://*.google.be https://*.marketo.net https://*.marketo.com https://*.google-analytics.com https://*.googleapis.com https://*.reevoo.com https://*.pricespider.com https://*.cloudfront.net https://*.hotjar.com https://*.mapbox.com https://*.typekit.net https://*.bazaarvoice.com https://*.force.com https://*.vtexassets.com; font-src 'self' data: https://wwww.stanleysecuritysolutions.com https://*.vtexassets.com https://*.googleapis.com https://*.googleusercontent.com https://*.gstatic.com https://*.typekit.net https://*.bazaarvoice.com https://*.force.com; connect-src 'self' https://*.doubleclick.net https://*.akamaihd.net https://*.googletagmanager.com https://*.vtexassets.com https://*.d41.co https://*.biggylabs.com.br https://*.vteximg.com.br https://*.vtex.com:8088 https://*.vtex.com https://*.vtex.com.br https://*.google.com https://*.biggylabs.com.br https://*.google.nl https://*.google.fr https://*.google.be https://*.facebook.com https://*.facebook.net https://*.driftcdn.com https://*.googleapis.com https://*.google-analytics.com https://*.mktoresp.com https://*.bing.com https://*.googlevideo.com https://*.hotjar.com https://*.hotjar.io https://*.nr-data.net https://*.onetrust.com https://*.cookielaw.org wss://*.driftt.com https://*.reevoo.com https://*.mapbox.com https://*.bazaarvoice.com https://*.visibleconsumerinsight.com; worker-src data: blob:  https://www.stanleyengineeredfastening.com ; frame-src 'self' https://*.google.com https://*.addthis.com  https://*.google.nl https://*.google.fr https://*.google.be https://*.marketo.net https://*.marketo.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.googletagmanager.com https://*.hotjar.com https://*.janraincapture.com https://*.youtube.com https://*.drift.com https://*.driftt.com https://*.reevoo.com https://*.stanleyengineeredfastening.com https://*.pricespider.com https://*.force.com; frame-ancestors 'self'; media-src 'self' https://*.driftqa.com; upgrade-insecure-requests; report-uri /csp.cgi; 2
upgrade-insecure-requests; object-src 'none'; base-uri 'self'; 2
default-src * data: 'unsafe-inline' 'unsafe-eval'; script-src * data: 'unsafe-inline' 'unsafe-eval'; object-src * data: 'unsafe-inline' 'unsafe-eval'; 2
base-uri 'self'; img-src * data: 'unsafe-inline'; default-src data: * 'unsafe-inline'; frame-ancestors https://fryslan.maps.arcgis.com 'self'; manifest-src 'none'; media-src *.readspeaker.com *.speechstream.net 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; object-src 'self'; plugin-types application/x-shockwave-flash application/pdf; report-uri https://www.cspreport.nl 2
default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src *;        script-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-src 'self'        'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline'         'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self'         'unsafe-inline' 'unsafe-eval'; font-src 'self'                                                          'unsafe-inline' 'unsafe-eval' 2
default-src https:; script-src https: data: blob: 'unsafe-eval' 'unsafe-inline'; object-src https:; style-src https: blob: 'unsafe-eval' 'unsafe-inline'; img-src https: blob: data: http://ad.doubleclick.net; media-src https: data:; frame-src https: data: instagram:; child-src https: data: instagram:; font-src https: data:; connect-src https: wss: blob:; report-uri https://virgindotcom.report-uri.com/r/d/csp/enforce; upgrade-insecure-requests 2
frame-ancestors  https://www.schoolhealth.com https://mcprod.schoolhealth.com https://portal.punchout2go.com https://qa-portal.punchout2go.com https://dev-portal.punchout2go.com https://portal.punchout2go.com https://qa-portal.punchout2go.com https://dev-portal.punchout2go.com https://sapportal.ocps.net https://sapportalqap.ocps.net https://shop.equallevel.com 2
font-src * ; media-src * ; 2
default-src * blob: data: 'unsafe-eval' 'unsafe-inline'; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: ajax.googleapis.com fonts.googleapis.com clients1.google.com  cse.google.com encrypted-tbn0.gstatic.com fonts.gstatic.com googleads.g.doubleclick.net i1.ytimg.com i.ytimg.com img.youtube.com l.sharethis.com s.ytimg.com seg.sharethis.com ssl.gstatic.com static.doubleclick.net stats.g.doubleclick.net va.ecitizen.gov.sg ws.sharethis.com www.google-analytics.com www.google.com www.youtube.com yt3.ggpht.com cdn.thinglink.me forms.cwp.gov.sg www.bloomberg.com *.facebook.com netdna.bootstrapcdn.com s3-us-west-2.amazonaws.com *.wogaa.sg *.demdex.net cm.everesttech.net wogadobeanalytics.sc.omtrdc.net assets.adobedtm.com form.gov.sg; 2
frame-src 'self' *.microfocus.com *.ubembed.com https://js.driftt.com https://bid.g.doubleclick.net https://optimize.google.com/ https://dev.visualwebsiteoptimizer.com https://www.facebook.com/ https://www.google.com/ https://www.youtube.com/ https://www.brighttalk.com/ https://bcove.video/ https://www.googletagmanager.com https://microfocuspartner.force.com https://www.linkedin.com/ https://platform.twitter.com/ https://www.research.net https://irs.tools.investis.com/ https://players.brightcove.net/ https://otp.tools.investis.com/ https://html5-player.libsyn.com/ http://demo.havendemo.com/; frame-ancestors 'self' *.microfocus.com https://microfocus.lookbookhq.com https://microfocuspartner.force.com; 2
default-src 'self' https://www.bam.eu01.nr-data.net edge.api.brightcove.com viz.tools.investis.com *.brightcove.com *.jsdelivr.net www.facebook.com https://js-agent.newrelic.com https://bam.eu01.nr-data.net stats.g.doubleclick.net https://brightcove.hs.llnwd.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nr-data.net cdn.rawgit.com cdnjs.cloudflare.com https://www.bam.eu01.nr-data.net ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edge.api.brightcove.com *.googleapis.com boards.greenhouse.io https://js-agent.newrelic.com https://bam.eu01.nr-data.net  https://www.youtube.com https://s.ytimg.com tagmanager.google.com stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net greenhouse-integration-demo.herokuapp.com tagmanager.google.com; img-src 'self' 'unsafe-inline' * data:; frame-src 'self' staticcontents.investis.com www.google.com irs.tools.investis.com otp.tools.investis.com digital.feprecisionplus.com ir.tools.investis.com boards.greenhouse.io www.ocado.com www.youtube.com jobsfeed.ocado.com https://players.brightcove.net; font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com tagmanager.google.com; connect-src 'self' https://www.bam.eu01.nr-data.net https://js-agent.newrelic.com https://bam.eu01.nr-data.net https://edge.api.brightcove.com https://viz.tools.investis.com https://stats.g.doubleclick.net https://www.facebook.com 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: wss:; img-src https: data:; font-src https: data:; 2
frame-ancestors 'self' https://nielsensports.com https://www.qa.nielsen.com https://develop.nielsen.com 2
default-src 'self' *.googlesyndication.com;style-src 'unsafe-inline' *.livenationinternational.com *.googleapis.com *.monetate.net tagmanager.google.com platform.twitter.com;img-src 'self' data: *.livenationinternational.com www.lntvglobal.com *.2mdn.net *.betrad.com *.celtra.com *.doubleverify.com *.evidon.com *.facebook.com *.g.doubleclick.net *.googleapis.com *.googlesyndication.com *.googletagservices.com *.gstatic.com *.mgr.consensu.org *.monetate.net *.ticketm.net *.tmol.co *.quantserve.com *.youtube.com *.adzip.co *.twitter.com *.tiktokcdn.com *.scdn.co *.twimg.com ad.doubleclick.net ads.celtra.com adservice.google.com dt.adsafeprotected.com cache-ssl.celtra.com media.ticketmaster.com media.ticketmaster.co.uk pixel.adsafeprotected.com pixel.moatads.com px.moatads.com secure.adnxs.com tagmanager.google.com track.celtra.com www.google-analytics.com www.google.co.uk www.google.com www.googletagmanager.com api.permutive.com cdn.permutive.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.livenationinternational.com *.2mdn.net *.bannersnack.com *.doubleverify.com *.evidon.com *.g.doubleclick.net *.google.com *.googleapis.com *.googlesyndication.com *.googletagservices.com *.gstatic.com *.quantcount.com *.monetate.net *.universe.com *.adzip.co *.tiktok.com *.tiktokcdn.com cdn.ampproject.org cdn.polyfill.io ad.doubleclick.net ads.celtra.com adservice.google.co.uk adservice.google.com bam.nr-data.net cache-ssl.celtra.com connect.facebook.net evidon.mgr.consensu.org js-agent.newrelic.com pixel.adsafeprotected.com secure.adnxs.com secure.quantserve.com static.adsafeprotected.com tagmanager.google.com widget.ticketmaster.eu www.google-analytics.com www.googletagmanager.com z.moatads.com api.permutive.com cdn.permutive.com www.instagram.com platform.twitter.com cdn.syndication.twimg.com secure.wufoo.com static.ads-twitter.com;connect-src 'self' *.doubleverify.com *.evidon.com *.g.doubleclick.net *.googleapis.com *.tmol.co *.tmol.io csi.gstatic.com vendorlist.consensu.org widget.ticketmaster.eu www.google-analytics.com www.googletagmanager.com track.celtra.com www.ticketmaster.co.uk www.ticketmaster.co.nz www.ticketmaster.com.au www.ticketmaster.de api.permutive.com adservice.google.com;font-src *.livenationinternational.com fonts.gstatic.com widget.ticketmaster.eu;frame-src *.2mdn.net *.bannersnack.com *.doubleverify.com *.dvtps.com *.evidon.com *.facebook.com *.fls.doubleclick.net *.googlesyndication.com *.googletagservices.com *.monetate.net *.ticketmaster.co.uk *.twitch.tv *.player.vimeo.com *.soundcloud.com *.instagram.com *.twitter.com *.spotify.com *.tiktok.com *.tiktokcdn.com *.youtube.com *.youtu.be player.vimeo.com secureframe.doubleclick.net universe.queue-it.net www.google.com www.universe.com www.youtube.com youtu.be terriverhoeven.wufoo.com;worker-src 'self' blob: 2
default-src 'self' www.vic.gov.au *.content.vic.gov.au content.vic.gov.au; script-src 'self' data: www.vic.gov.au *.content.vic.gov.au content.vic.gov.au cdnjs.cloudflare.com 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com tagmanager.google.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.google-analytics.com cdn.monsido.com connect.facebook.net *.cloudfront.net chatbot.digital.vic.gov.au *.chatbot.digital.vic.gov.au media.twiliocdn.com *.youtube.com ytimg.com *.ytimg.com usercheck.vgso.vic.gov.au public.tableau.com *.openforms.com *.serving-sys.com player.vimeo.com spreadsheets.google.com; style-src 'self' 'unsafe-inline' www.vic.gov.au *.content.vic.gov.au content.vic.gov.au fonts.googleapis.com tagmanager.google.com ui.chatbot.digital.vic.gov.au fast.fonts.net *.openforms.com; img-src 'self' data: www.vic.gov.au *.content.vic.gov.au content.vic.gov.au *.amazee.io tracking.monsido.com *.google-analytics.com *.g.doubleclick.net www.google.com *.google.com *.google.com.au *.hotjar.com *.hotjar.io wss://*.hotjar.com api.mapbox.com *.gstatic.com vic-bot.netlify.app secure.adnxs.com www.facebook.com i.ytimg.com www.google.com.eg www.google.com.co www.google.ie www.google.com.br www.google.co.jp www.google.gr www.google.co.za www.google.co.uk www.google.com.mx www.google.com.na www.google.it www.google.rs www.google.com.sg www.google.co.id www.googletagmanager.com www.google.com.tr www.google.com.pk www.google.nl www.google.lk www.google.hr www.google.fr www.google.com.bo www.google.com.co www.google.com.om www.google.com.ua au-gmtdmp.mookie1.com lh3.googleusercontent.com; font-src 'self' data: www.vic.gov.au *.content.vic.gov.au content.vic.gov.au fonts.gstatic.com *.hotjar.com *.hotjar.io wss://*.hotjar.com fonts.gstatic.com; frame-src 'self' www.vic.gov.au *.content.vic.gov.au content.vic.gov.au *.hotjar.com *.hotjar.io wss://*.hotjar.com www.vic.gov.au *.vimeo.com vimeo.com *.youtube.com youtube.com *.youtube-nocookie.com youtube-nocookie.com batchgeo.com www.google.com app.powerbi.com *.vic.gov.au macuport.com dhhs.carto.com public.tableau.com *.libsyn.com *.soundcloud.com *.openforms.com; connect-src 'self' www.vic.gov.au *.content.vic.gov.au content.vic.gov.au *.hotjar.com *.hotjar.io wss://*.hotjar.com *.elastic.sdp.vic.gov.au *.hotjar.io *.google-analytics.com *.g.doubleclick.net api.ipify.org *.myvictoria.vic.gov.au *.api.mapbox.com discover.data.vic.gov.au drwgdblqzrfiz.cloudfront.net chatbot.digital.vic.gov.au *.chatbot.digital.vic.gov.au iam.twilio.com tsock.us1.twilio.com flex-api.twilio.com tsock.us1.twilio.com wss://tsock.us1.twilio.com www.facebook.com www.google.com secure-ds.serving-sys.com api.sdp.vic.gov.au api.go.vic.gov.au; frame-ancestors 'self' *.lagoon.vicsdp.amazee.io *.vic.gov.au; report-uri https://sdpops.report-uri.com/r/d/csp/enforce; 2
frame-ancestors 'self' *.sprintecommerce.com *.venditan.com *.venditan.io 2
default-src https: data: 'unsafe-inline' 'unsafe-eval' always; upgrade-insecure-requests 2
default-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cai.tools.sap/ https://maps.googleapis.com https://maps.gstatic.com https://tagmanager.google.com/ https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://connect.facebook.net https://chatbot.elmuemasz.hu/; style-src 'self' 'unsafe-inline' https://storage.chatbot.elmuemasz.hu/ https://elmurg11chatbot.blob.core.windows.net/ https://maps.googleapis.com https://maps.gstatic.com https://tagmanager.google.com/ https://fonts.googleapis.com/ https://chatbot.elmuemasz.hu/; img-src 'self' 'unsafe-inline' data: https://storage.chatbot.elmuemasz.hu/ https://elmurg11chatbot.blob.core.windows.net/ https://i.ibb.co/61frh4q/elmuelek.png https://i.imgur.com/ https://cdn.cai.tools.sap/ https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://www.facebook.com https://ssl.gstatic.com/ https://chatbot.elmuemasz.hu/; font-src 'self' https://cdnjs.cloudflare.com/ https://fonts.gstatic.com;connect-src 'self' https://elmu.proebiz.com/ https://api.cai.tools.sap/ https://www.google-analytics.com https://chatbot.elmuemasz.hu/ wss://chatbot.elmuemasz.hu/; frame-src https://www.google.com/recaptcha/ https://www.facebook.com https://staticxx.facebook.com https://docs.google.com/forms/ https://my.matterport.com/show/ https://www.youtube.com/embed/;frame-ancestors 'self'; form-action 'self'; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: 2
default-src *;script-src * 'unsafe-inline' 'unsafe-eval';style-src * 'unsafe-inline' 'unsafe-eval';img-src * data:; 2
default-src 'self' *.zoom.us *.doubleclick.net *.cloudfront.net *.googlesyndication.com *.twitter.com *.opticsinfobase.org *.titanembeds.com *.boltdns.net blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.osa.org https://unpkg.com *.cvent.com cdn.mxpnl.com *.mixpanel.com https://zoom.us *.zoom.us code.jquery.com *.twitter.com adservice.google.com *.doubleclick.net *.ampproject.org *.googlesyndication.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com www.google.com tagmanager.google.com www.googletagservices.com *.brightcove.net *.zencdn.net *.twimg.com *.ytimg.com www.youtube.com *.myfonts.net *.licdn.com *.simpli.fi blob:; style-src 'unsafe-inline' *; font-src * data:; connect-src 'self' cdn.opticsinfobase.org *.google.com *.cloudfront.net *.osa.org http://www.frontiersinoptics.com www.frontiersinoptics.org www.cleoconference.org www.ofcconference.com api-js.mixpanel.com www.google-analytics.com *.brightcove.com *.brightcove.net *.boltdns.net *.googlesyndication.com *.akamaihd.net *.doubleclick.net https://unpkg.com *.zoom.us wss://*.zoom.us blob:; object-src 'self' cdn.opticsinfobase.org *.cloudfront.net *.googlesyndication.com https://*.zoom.us blob:; frame-src 'self' *.cloudfront.net *.osa.org cdn.opticsinfobase.org *.frontiersinoptics.com *.googlesyndication.com *.youtube.com https://titanembeds.com; frame-ancestors 'self' *.osa.org *.frontiersinoptics.com; 2
default-src data: https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; media-src * blob: 2
frame-ancestors 'self' *.infor.com *.Inforcloudsuite.com *.infor.cn *.infor.de *.infor.es *.infor.fr *.infor.jp *.infor.kr 2
default-src * 'unsafe-inline' 'unsafe-eval' data: gap: content: blob:; form-action *; upgrade-insecure-requests 2
default-src 'none'; connect-src https:; font-src https: data:; frame-src https://www.youtube.com/ https://*.siemens.com https://diswlogintest.siemens.com https://*.sw.siemens.com https://*.sw.siemens-test.com https://*.sw.siemens-dev.com https://*.mentor.com https://*.mentor-test.com https://*.mentor-dev.com https://*.mentorvlab.com https://video.mentor.com https://*.mentor.com https://*.ias.plm.automation.siemens.com https://*.pads.com https://www.pads.com https://*.auth0.com https://s7.addthis.com https://www.linkedin.com; img-src https: data:; media-src https://videos.mentor-cdn.com; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; manifest-src 'self';  report-uri https://csp.mentor-apis.com/Prod/report 2
frame-ancestors 'self' *.vice.com vicetv.com *.vicetv.com vicetv.nl vicetv.be vicesports.nl vicemoney.nl vicebelgique.com survey18.toluna.com *.viceops.net survey-d.dynata.com 2
default-src * 'self' data: https: blob: 'unsafe-inline' 'unsafe-eval'; frame-src *; frame-ancestors https://*.offshore-energy.biz 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.google.com *.gstatic.com; img-src 'self' *.google-analytics.com *.nzbvortex.com; style-src 'self' 'unsafe-inline'; font-src 'self'; frame-src 'self' *.google.com; object-src 'none'; frame-ancestors 'self' 2
block-all-mixed-content; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; object-src 'none'; 2
default-src 'none'; frame-src https://www.youtube.com/ https://www.figma.com/ ; img-src 'self' data: https://track.hubspot.com https://forms.hsforms.com https://analytics.helio.app https://js.intercomcdn.com https://static.intercomassets.com https://www.google-analytics.com; script-src 'self' 'unsafe-inline' https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hs-scripts.com https://analytics.helio.app https://static.cloudflareinsights.com https://ajax.cloudflare.com https://js.intercomcdn.com https://widget.intercom.io https://www.googletagmanager.com https://d20luy73ujukeu.cloudfront.net https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://analytics.helio.app; object-src 'none'; media-src 'self' https://js.intercomcdn.com https://d20luy73ujukeu.cloudfront.net; font-src 'self' data: https://js.intercomcdn.com; connect-src 'self' https://forms.hubspot.com https://analytics.helio.app https://www.google-analytics.com https://api-m.helio.app *.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io 2
frame-ancestors 'self' http://tags2.adshell.net http://clk.sportstream.live 2
frame-ancestors 'self' psa.digitalinsight.com; 2
frame-ancestors 'self' *.ergodirekt.de:* *.ergo.com:* *.ergo:* *.ergo.de *.dkv.com; 2
default-src 'self' https://recreativdesign.com blob:;script-src 'self' nonce-guXj7w7oWwUuGz/RZw2vXUoxt7E 'unsafe-inline' 'unsafe-eval' recreativ.com *.recreativ.com recreativ.ru *.recreativ.ru *.facebook.net *.facebook.com *.google.com.ua *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.doubleclick.net *.googletagmanager.com *.wayforpay.com https://browser.sentry-cdn.com https://recreativdesign.com;frame-src 'self' recreativ.com *.recreativ.com recreativ.ru *.recreativ.ru *.facebook.net *.facebook.com *.google.com.ua *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.doubleclick.net *.googletagmanager.com *.wayforpay.com https://www.google.lv;img-src 'self' recreativ.com *.recreativ.com recreativ.ru *.recreativ.ru *.facebook.net *.facebook.com *.google.com.ua *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.doubleclick.net *.googletagmanager.com *.wayforpay.com data: blob: https://via.placeholder.com/200x200 https://recreativdesign.com;font-src 'self' data: recreativ.com *.recreativ.com recreativ.ru *.recreativ.ru *.facebook.net *.facebook.com *.google.com.ua *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.doubleclick.net *.googletagmanager.com *.wayforpay.com https://recreativdesign.com;style-src 'self' 'unsafe-inline' recreativ.com *.recreativ.com recreativ.ru *.recreativ.ru *.facebook.net *.facebook.com *.google.com.ua *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.doubleclick.net *.googletagmanager.com *.wayforpay.com https://recreativdesign.com;report-uri //recreativ.com/csp_report.php; 2
default-src  * 'unsafe-inline' 'unsafe-eval' ; img-src * blob: data: 'unsafe-inline' ; font-src * data: 'unsafe-inline' ; media-src * blob: 'unsafe-inline' ; frame-src * data: 'unsafe-inline' 'unsafe-eval' ; 2
script-src 'self' filesystem: 'unsafe-eval' 'unsafe-inline' *.spaggiari.eu https://ajax.googleapis.com/ https://cdnjs.cloudflare.com/ https://cdn.jsdelivr.net/ https://code.jquery.com/ https://d31qbv1cthcecs.cloudfront.net/atrk.js https://fonts.googleapis.com/ https://www.google-analytics.com/ https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://www.gstatic.com/recaptcha/ https://cdn.syndication.twimg.com/timeline/ https://code.highcharts.com/ https://connect.facebook.net/it_IT/sdk.js https://livestream.com/assets/plugins/ https://maps.googleapis.com/ https://platform.twitter.com/js/ https://platform.twitter.com/widgets.js https://rawgit.com/tyrasd/osmtogeojson/ https://use.fontawesome.com/;frame-ancestors 'self' file: *.spaggiari.eu italiascuola.it www.italiascuola.it; 2
default-src https: 'self' *.mohrsiebeck.com; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' *.mohrsiebeck.com; style-src https: 'self' 'unsafe-inline' *.mohrsiebeck.com; img-src https: 'self' *.mohrsiebeck.com 2
frame-ancestors https://*.ionos.de https://ionos.de https://*.ionos.at https://ionos.at https://*.profiseller.de https://profiseller.de https://*.1und1-partner.de https://1und1-partner.de https://*.1und1-hostingpartner.de https://1und1-hostingpartner.de https://*.1und1-premiumpartner.de https://1und1-premiumpartner.de; 2
default-src 'self' consentcdn.cookiebot.com *.adobe.com bcove.video optimize.google.com *.api.brightcove.com api.bcovlive.io *.bcovlive.io *.sep.bcovlive.io bcovlive-a.akamaihd.net *.o.brightcove.com players.brightcove.net hls.ak.o.brightcove.com uds.ak.o.brightcove.com *.boltdns.net brightcove.vo.llnwd.net *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.analytics.edgekey.net *.media.brightcove.com hlstoken-a.akamaihd.net *.gallerysites.net *.bcvp0rtal.com *.brightcovecdn.com manifest.prod.boltdns.net eba-api.uk.experian.com smeservices.uk.experian.com *.hotjar.com sjs.bizographics.com cdn.taboola.com trc.taboola.com *.js.ubembed.com *.events.ubembed.com assets.ubembed.com www.dwin1.com bat.bing.com t.co cdn.smct.co smct.co j.flxpxl.com *.doubleclick.net www.googleadservices.com www.google.com www.googletagmanager.com tagmanager.google.com fonts.googleapis.com ssl.gstatic.com www.google-analytics.com ssl.google-analytics.com adservice.google.com adservice.google.co.uk ajax.googleapis.com www.google.co.uk analytics.twitter.com platform.twitter.com static.ads-twitter.com *.linkedin.com www.facebook.com connect.facebook.net *.outbrain.com builder-assets.unbounce.com *.boldchat.com www.dianomi.com *.pingdom.net *.cloudfront.net *.eloqua.com *.quantserve.com rules.quantcount.com img.en25.com snap.licdn.com secure.livechatinc.com maxcdn.bootstrapcdn.com *.gstatic.com experian-thinking.s3-eu-west-1.amazonaws.com cdn.livechatinc.com themes.googleusercontent.com translate.googleapis.com *.experian.com ui.customsearch.ai hosteduxprod.blob.core.windows.net *.brightcove.com *.brightcove.net vjs.zencdn.net *.adobedtm.com *.demdex.net *.omniture.com *.youtube.com *.hotjar.io; img-src 'self' data: *; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' *; font-src 'self' data: *; object-src 'none'; media-src * blob:; worker-src blob: 'self'; 2
connect-src 'self' wss: https://www.google-analytics.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://test.oppwa.com https://oppwa.com https://test.ppipe.net/ https://ppipe.net/ https://api.trustedshops.com https://hexagon-analytics.com http://bat.bing.com https://bat.bing.com http://*.taboola.com https://ctx-nsp-sell-watches-dev.s3.eu-west-1.amazonaws.com https://ctx-nsp-sell-watches.s3.eu-central-1.amazonaws.com https://*.g.doubleclick.net https://sis.redsys.es/ https://mc-id-check.firstdata.de/ https://*.intercom.io https://*.hotjar.com/ https://*.hotjar.io/ https://static.zipmoney.com.au https://static.zdassets.com https://kreditrechner-long-test.creditplus.de https://kess.creditplus.de https://j4s6cgablv-dsn.algolia.net https://cdn.contentful.com https://connect.facebook.net https://*.sift.com https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://*.emarsys.net https://*.scarabresearch.com https://*.execute-api.eu-central-1.amazonaws.com https://ful-pricing-tool-backend.chronext.com; default-src 'self'; font-src 'self' data: * https://fonts.gstatic.com http://fonts.gstatic.com https://test.oppwa.com https://oppwa.com https://test.ppipe.net/ https://ppipe.net/ https://sis.redsys.es/ https://mc-id-check.firstdata.de/ https://*.hotjar.com/ https://static.zipmoney.com.au https://static.zdassets.com; frame-src 'self' https: https://www.youtube.com https://wpp-test.wirecard.com https://wpp.wirecard.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://test.oppwa.com https://oppwa.com https://test.ppipe.net/ https://ppipe.net/ http://widget.trustpilot.com https://sis.redsys.es/ https://mc-id-check.firstdata.de/ https://*.hotjar.com/ https://static.zipmoney.com.au https://static.zdassets.com https://googleads.g.doubleclick.net http://googleads.g.doubleclick.net https://connect.facebook.net https://*.sift.com; img-src 'self' data: * blob: * https://ssl.gstatic.com/ https://hexagon-analytics.com http://cdn.taboola.com https://cdn.taboola.com http://bat.bing.com https://bat.bing.com https://sis.redsys.es/ https://mc-id-check.firstdata.de/ https://*.hotjar.com/ https://static.zipmoney.com.au https://static.zdassets.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com https://ssl.google-analytics.com www.googletagmanager.com www.googleadservices.com tag.manager.google.com tagmanager.google.com/ https://www.youtube.com https://wpp-test.wirecard.com https://wpp.wirecard.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.sift.com https://test.oppwa.com https://oppwa.com https://test.ppipe.net/ https://ppipe.net/ https://maps.googleapis.com https://widget.trustpilot.com https://hexagon-analytics.com http://bat.bing.com http://*.taboola.com https://test.dekopay.com https://secure.dekopay.com https://sis.redsys.es/ https://mc-id-check.firstdata.de/ https://*.intercom.io https://*.intercomcdn.com https://*.hotjar.com/ https://static.zipmoney.com.au https://static.zdassets.com https://*.youtube.com http://*.youtube.com https://s.ytimg.com https://static.doubleclick.net https://connect.facebook.net https://www.dwin1.com https://*.scarabresearch.com; style-src 'self' 'unsafe-inline' blob: https://fonts.googleapis.com https://tagmanager.google.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://test.oppwa.com https://oppwa.com https://test.ppipe.net/ https://ppipe.net/ https://sis.redsys.es/ https://mc-id-check.firstdata.de/ https://*.hotjar.com/ https://static.zipmoney.com.au https://static.zdassets.com 2
frame-ancestors 'self' *.optimizely.com 2
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src * 'unsafe-inline'; img-src * data:; connect-src *; font-src 'self' https: data:; media-src 'self' https: blob:; frame-ancestors 'self' https:; object-src 'self' https:; frame-src 'self' https: 2
default-src https: *.hwcdn.net *.teeitup.com *.golfid.io; connect-src https: wss:; script-src https: data: *.hwcdn.net 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://optimize.google.com; style-src https: data: *.hwcdn.net https://optimize.google.com https://fonts.googleapis.com 'unsafe-inline'; img-src https: blob: data: *.hwcdn.net s3.amazonaws.com https://www.google-analytics.com https://optimize.google.com; font-src https: data: *.hwcdn.net https://fonts.gstatic.com; frame-src https: data: *.hwcdn.net *.teeitup.com *.golfid.io https://optimize.google.com; frame-ancestors 'self' https://www.onlinereservationsystems.com; 2
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 2
frame-ancestors 'self' www.jobs.ch www.jobup.ch www.itjobs.ch ictjobs.ch 2
default-src 'self' s3.amazonaws.com www.youtube.com csi.gstatic.com *;frame-src 'self' optimize.google.com *;worker-src 'self';connect-src 'self' *;font-src 'self' fonts.gstatic.com fonts.googleapis.com www.tinymce.com use.fontawesome.com;img-src 'self' 'unsafe-inline' data: blob: *;manifest-src 'self';media-src 'self' s3.amazonaws.com;object-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagservices.com www.google-analytics.com securepubads.g.doubleclick.net tpc.googlesyndication.com pagead2.googlesyndication.com 7233492.collect.igodigital.com optimize.google.com * blob:;style-src 'self' 'unsafe-inline' fonts.googleapis.com *;base-uri 'self' optimize.google.com;form-action 'self' *;frame-ancestors 'self' optimize.google.com;block-all-mixed-content;upgrade-insecure-requests; 2
report-uri 'self' 2
frame-ancestors 'self' chrome-extension://hfdhpmpfpcnbboppkkkblilhbloejijj https://backit.me 2
default-src https: blob: data:; script-src data: 'unsafe-inline' 'unsafe-eval' blob: https: piwik.bmvg.de *.video-cdn.net *.bundeswehr.de *.bmvg.de maps.googleapis.com maps.gstatic.com; style-src data: 'unsafe-inline' https: *.bundeswehr.de *.bmvg.de ; img-src data: *.bundeswehr.de *.bmvg.de *.ytimg.com *.fbcdn.net *.twimg.com *.staticflickr.com *.video-cdn.net *.facebook.com *.akamaihd.net *.gstatic.com maps.googleapis.com syndication.twitter.com platform.twitter.com scontent.cdninstagram.com; font-src data: www.bundeswehr.de *.bmvg.de *.video-cdn.net fonts.gstatic.com; connect-src https: blob: data: wss:; report-uri https://piwik.bmvg.de/report-uri/ 2
object-src 'none'; base-uri 'none'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://pi.pardot.com/pd.js https://pi.pardot.com/analytics https://www2.hillebrand.com/analytics https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.recaptcha.net *.google.cn http://maps.google.cn http://ditu.google.cn https://www.gstatic.cn; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com http://fonts.googleapis.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: http://fonts.gstatic.com; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com *.gstatic.cn *.google.cn http://maps.gstatic.cn http://maps.google.cn; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com www.google.com https://www.recaptcha.net; connect-src 'self' accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com https://www.google-analytics.com; 2
default-src 'self' * 'unsafe-inline' data:; 2
font-src *;img-src * data:; 2
default-src 'self'; child-src https://flickrembed.com https://maps.google.com https://www.google.com https://connect.facebook.net; script-src 'self' https://oss.maxcdn.com https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://connect.facebook.net https://ajax.googleapis.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://stackpath.bootstrapcdn.com https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://stackpath.bootstrapcdn.com https://fonts.gstatic.com; frame-ancestors; form-action 'self'; base-uri 'self'; object-src;  2
font-src unsafe-inline *.gstatic.com *.trustarc.com 'self' data: *.bootstrapcdn.com https://script.hotjar.com/ https://qaapp02.xisecurenet.com/ *.helenoftroy.custhelp.com helenoftroy.custhelp.com https://helenoftroy.custhelp.com https://helenoftroy.custhelp.com/ 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com unsafe-inline *.trustarc.com https://stinger-dev.heledigital.com/ https://home-health.heledigital.com/ *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com unsafe-inline *.google.com *.oraclecloud.com https://data-a495851.data.us2.oraclecloud.com/ https://www.youtube.com/ http://youtube.com/ https://qaapp02.xisecurenet.com/ https://www.gstatic.com/ https://vars.hotjar.com/ https://consent-st.trustarc.com/ *.paymetric.com *.custhelp.com *.trustarc.com *.doubleclick.net https://insight.adsrvr.org/ *.cloudfront.net *.facebook.com *.pur.com *.helenoftroy.custhelp.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com unsafe-inline *.magentocommerce.com *.oraclecloud.com 'self' data: *.googleadservices.com *.google-analytics.com *.paypal.com *.paypalobjects.com *.heledigital.com *.mailchimp.com *.doubleclick.net *.google.com *.google.co.in *.cdninstagram.com https://consent.trustarc.com/ *.trustarc.com https://consent-pref.trustarc.com/ https://a5.behance.net/ https://amasty.com/ *.honeywellpluggedin.com/ https://consent.truste.com/ *.co *.facebook.com *.apple.com *.rnengage.com *.googletagmanager.com data: *.pur.com https://crrecommendedmark.org *.ytimg.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com js.authorize.net jstest.authorize.net www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com js.braintreegateway.com s.ytimg.com video.google.com vimeo.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com *.google.com *.googleadservices.com https://www.gstatic.com/ *.googleads.g.doubleclick.net/ https://www.googleapis.com *.oraclecloud.com *.amazonaws.com *.googletagmanager.com *.mouseflow.com *.hotjar.com https://ajax.cloudflare.com/ consent.trustarc.com https://js-agent.newrelic.com/ https://bam.nr-data.net/ https://www.youtube.com/ http://youtube.com/ *.pur.com *.atgsvcs.com https://static.ads-twitter.com/ *.facebook.net/ *.doubleclick.net/ https://s.yimg.com/  *.rapidspike.com *.custhelp.com *.twitter.com *.yahoo.com *.cardinalcommerce.com unsafe-inline *.rnengage.com *.google.co.in *.paymetric.com *.rightnowtech.com *.honeywellpluggedin.com *.magentocommerce.com *.helenoftroy.custhelp.com https://crrecommendedmark.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com unsafe-inline *.trustarc.com *.googleapis.com *.bootstrapcdn.com *.mailchimp.com *.getfirebug.com *.heledigital.com *.custhelp.com *.helenoftroy.custhelp.com https://crrecommendedmark.org 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src https://magento.com https://devdocs.magento.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com unsafe-inline *.google-analytics.com consent.trustarc.com *.trustarc.com *.instagram.com *.hotjar.com https://vc.hotjar.io/ https://data-a495851.data.us2.oraclecloud.com/ https://bam.nr-data.net/ https://www.pur.com/community/ https://qaapp02.xisecurenet.com/ *.doubleclick.net *.yimg.com  *.rapidspike.com *.atgsvcs.com *.facebook.com *.custhelp.com https://crrecommendedmark.org 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
frame-ancestors 'self' *.espn.com:* *.espnqa.com:* *.espnsb.com *.espn.co.uk *.espndeportes.espn.com *.espn.com.br *.espn.com.mx *.espn.com.ve *.espn.com.ar *.espn.com.co *.espnfc.com.au *.espn.com.au *.espn.in *.espn.com.sg *.espn.cl *.espn.com.pe *.espn.com.gt *.espn.com.do *.espn.com.ec *.espn.com.uy *.espn.com.pa *.espn.co.cr http://*.espnqa.com:* http://*.espn.com:* 2
frame-ancestors 'self' https://*.xealth.io; 2
default-src 'self' *.sysnet.ie *.sysnetgs.com player.vimeo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.boldchat.com; connect-src 'self' assurance.sysnetgs.com *.boldchat.com www.google-analytics.com *.demdex.net; img-src 'self' data: adservice.google.com images.boldchat.com *.sysnet.ie www.google-analytics.com *.demdex.net ad.doubleclick.net stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.fonts.net; font-src 'self' data: fonts.gstatic.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' iscan: data: *.sysnetgs.com *.vimeo.com *.boldchat.com; 2
frame-ancestors 'self' https://shopproxy.p-s-s.de 2
default-src 'self'; script-src 'self' *.storyblok.com 'unsafe-inline' *.cloudfront.net *.googleapis.com *.gstatic.com recaptcha.net *.facebook.net *.google-analytics.com *.googletagmanager.com tagmanager.google.com *.livechatinc.com *.stripe.com 'unsafe-eval'; style-src 'self' *.storyblok.com 'unsafe-inline' *.googleapis.com *.gstatic.com tagmanager.google.com; img-src 'self' *.storyblok.com *.cloudinary.com *.facebook.com *.google.com *.google.com.au placehold.it *.cloudfront.net *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.simplybook.me lh3.googleusercontent.com data: *.trackjs.com *.vicinity.com.au; font-src 'self' *.amazonaws.com *.storyblok.com *.googleapis.com *.gstatic.com https://fonts.gstatic.com data:; connect-src 'self' stats.g.doubleclick.net *.cloudfront.net *.mappedin.com *.google-analytics.com sentry.io *.simplybook.me *.vicinity.com.au *.trackjs.com; frame-src 'self' *.youtube.com *.vimeo.com *.googletagmanager.com *.google.com *.facebook.com *.livechatinc.com *.stripe.com socialq.net 2
frame-ancestors 'self' *.facebook.com *.vk.com 2
frame-ancestors 'self' *.medialift.nl *.drugsinfo.nl *.alcoholinfo.nl *.helderopvoeden.nl *.rokeninfo.nl *.verslaafdaanjou.nl *.gokkeninfo.nl *.gameninfo.nl *.mentaalvitaal.nl; 2
default-src https:; script-src https: data: 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src 'self' data: blob: filesystem: https: http: 'unsafe-inline' 2
script-src 'unsafe-inline' 'unsafe-eval' 'self' www.googletagmanager.com idtechex.bamboohr.com platform.twitter.com ssl.google-analytics.com www.googleadservices.com *.idtechex.com oss.maxcdn.com ie7-js.googlecode.com https://googleads.g.doubleclick.net https://translate.google.com https://translate.googleapis.com https://cdn.syndication.twimg.com www.google.com www.gstatic.com ajax.googleapis.com *.livechatinc.com *.arcot.com *.verifiedbyvisa.com *.3dsecure-vrp.de *.cardinalcommerce.com *.securesuite.net *.securesuite.co.uk *.securecode.com *.citibank.com *.citibank.co.kr *.cardcenter.ch *.swisscard.ch *.icscards.nl *.sia.eu *.swedbank.se *.dnp-cdms.jp acs.cafis-paynet.jp *.hanacard.co.kr *.shinhancard.com *.wooricard.com *.hyundaicard.com *.wlp-acs.com *.secure.dkb.de *.nab.com.au *.mbank.pl *.ccb.com.cn *.cmbchina.com *.bccard.com *.cartasi.it *.modirum.com ws.zoominfo.com 2
block-all-mixed-content; base-uri 'none'; default-src 'none'; frame-ancestors 'none'; frame-src consentcdn.cookiebot.com player.vimeo.com www.google.com www.youtube.com *.hotjar.com; object-src 'self'; media-src 'self'; form-action 'self' dmtrk.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' consent.cookiebot.com consentcdn.cookiebot.com bam.nr-data.net js-agent.newrelic.com vimeo.com player.vimeo.com maps.googleapis.com www.googleadservices.com ssl.google-analytics.com www.google-analytics.com www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ tagmanager.google.com *.hotjar.com; connect-src 'self' skyfire.vimeocdn.com maps.googleapis.com ssl.google-analytics.com www.google-analytics.com *.doubleclick.net *.googlesyndication.com *.hotjar.com wss://*.hotjar.com; img-src 'self' maps.gstatic.com maps.googleapis.com www.google-analytics.com www.google.com www.google.co.uk *.doubleclick.net *.googlesyndication.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com *.hotjar.com data:; style-src 'self' 'unsafe-inline' maps.googleapis.com fonts.googleapis.com tagmanager.google.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com *.hotjar.com data:; 2
default-src * data: 'self' 'unsafe-eval' 'unsafe-inline' blob: www.here.tv https://appcmsprod.viewlift.com/; 2
frame-src 'self'; 2
default-src 'none'; font-src * data:; img-src * data:; frame-src 'self' https://*.taboola.com https://*.2checkout.com https://*.paddle.com https://*.youtube.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://web.facebook.com https://amazon.com https://*.amazon.co.uk https://*.amazon.ca https://*.amazon.de https://*.amazon.fr https://*.amazon.it https://*.amazon.es https://*.amazon.in https://*.amazon.com.mx https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://ioscout.postaffiliatepro.com/ https://secure.avangate.com/ https://eligibility.wootric.com/ https://wootric-eligibility.herokuapp.com/ https://www.facebook.com/ https://graph.facebook.com/ https://secure.2checkout.com/; style-src 'self' 'unsafe-inline' https://*.taboola.com https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://amazon.com https://*.amazon.co.uk https://*.amazon.ca https://*.amazon.de https://*.amazon.fr https://*.amazon.it https://*.amazon.es https://*.amazon.in https://*.amazon.com.mx; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.taboola.com https://*.yimg.com/ https://*.yahoo.com/ https://*.2checkout.com https://*.paddle.com https://*.optimize.google.com https://*.googlesyndication.com https://*.doubleclick.net https://bat.bing.com https://ajax.googleapis.com/ https://www.googletagmanager.com/ https://*.wootric.com/ https://*.google-analytics.com https://*.googleanalytics.com https://*.googleadservices.com https://*.doubleclick.com https://ioscout.io https://amazon.com https://*.amazon.co.uk https://*.amazon.ca https://*.amazon.de https://*.amazon.fr https://*.amazon.it https://*.amazon.es https://*.amazon.in https://*.amazon.com.mx https://*.facebook.net https://*.onthe.io https://*.intercom.io/ https://*.intercomcdn.com/ http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://ioscout.postaffiliatepro.com/ https://secure.avangate.com/ https://eligibility.wootric.com/ https://wootric-eligibility.herokuapp.com/ https://*.google.com/ https://connect.facebook.net; connect-src https://*.taboola.com https://*.yimg.com/ https://*.yahoo.com/ https://*.2checkout.com/ https://*.paddle.com https://*.doubleclick.net https://bat.bing.com https://*.google-analytics.com https://*.googleanalytics.com https://*.googleadservices.com https://*.doubleclick.com https://www.facebook.com/ https://graph.facebook.com/ https://ioscout.io/ https://*.ioscout.io/ https://*.onthe.io/ https://*.intercom.io/ wss://*.intercom.io/ https://*.intercomcdn.com https://*.intercomusercontent.com https://*.cloudfront.net http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://ioscout.postaffiliatepro.com/ https://secure.avangate.com/ https://eligibility.wootric.com/ https://wootric-eligibility.herokuapp.com/ https://production.wootric.com; media-src https://ioscout.io https://*.onthe.io/ https://*.intercom.io/ https://*.intercomcdn.com/ https://ioscout.postaffiliatepro.com/ https://secure.avangate.com/ https://eligibility.wootric.com/ https://wootric-eligibility.herokuapp.com/; frame-ancestors 'self' https://www.amazon.com/ https://*.amazon.co.uk https://*.amazon.ca https://*.amazon.de https://*.amazon.fr https://*.amazon.it https://*.amazon.es https://*.amazon.in https://*.amazon.com.mx; 2
: frame-ancestors "none" 2
default-src 'self'; font-src 'self' data: https://fast.fonts.net https://fonts.gstatic.com https://script.hotjar.com https://use.fontawesome.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://unpkg.com https://service.maxymiser.net https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://ajax.googleapis.com https://www.google-analytics.com https://maps.googleapis.com https://*.en25.com https://fullstory.com https://edge.fullstory.com https://script.hotjar.com https://static.hotjar.com https://www.youtube.com https://s.ytimg.com https://secure.leadforensics.com https://app-static.turtl.co https://ldynamicspublicapi.leadforensics.com https://snap.licdn.com https://cdn.mouseflow.com https://tag.demandbase.com https://use.fontawesome.com; style-src 'self' 'unsafe-inline' https://fast.fonts.net https://unpkg.com https://fonts.googleapis.com https://*.en25.com https://app-static.turtl.co https://use.fontawesome.com; img-src 'self' data: https://*.t.eloqua.com https://www.google-analytics.com https://img.youtube.com https://i.ytimg.com https://maps.gstatic.com https://maps.googleapis.com https://service.maxymiser.net https://assets.turtl.co https://assets.ricoh-europe.com https://www.google.com https://px.ads.linkedin.com https://match.prod.bidr.io https://id.rlcdn.com https://segments.company-target.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://rs.fullstory.com https://in.hotjar.com https://www.googleadservices.com; frame-src https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://vars.hotjar.com https://ricoh-docuware-calculator.tbtmarketing.com https://gestiondocumentaire.ricoh.fr https://supportrequest.ricoh.ch https://discover.ricoh.co.uk https://webforms.ricoh.de 2
frame-ancestors https://www.sapo.pt; block-all-mixed-content; upgrade-insecure-requests; 2
default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; media-src * blob:; style-src * 'unsafe-inline'; 2
frame-ancestors 'self' *.plentymarkets-cloud-de.com 2
default-src 'self'; connect-src *; font-src *; frame-src *; img-src * blob: data: ; media-src *; object-src *; script-src * data: 'unsafe-inline' 'unsafe-eval'; style-src * data: 'unsafe-inline'; 2
style-src https: 'unsafe-inline' ; script-src https: data 'unsafe-inline' 'unsafe-eval' ; default-src * data: ; 2
default-src 'self'  'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.sarthe.fr *.sarthe.fr *.googleapis.com *.gogowego.com www.google-analytics.com/analytics.js platform.twitter.com *.twimg.com *.addtoany.com *.vimeo.com cdnjs.cloudflare.com api.tiles.mapbox.com *.piktochart.com *.google.com *.gstatic.com code.jquery.com *.ckeditor.com *.facebook.com sibforms.com *.sendinblue.com *.amcharts.com *.adobe.com blob www.instagram.com www.google.com connect.facebook.net *.facebook.com data:  https://www.google-analytics.com https://www.google-analytics.com/analytics.js; object-src data:; style-src 'unsafe-inline' *.sarthe.fr https://fonts.gstatic.com https://use.fontawesome.com https://fonts.googleapis.com *.twitter.com *.twimg.com cdnjs.cloudflare.com api.tiles.mapbox.com code.jquery.com *.ckeditor.com *.facebook.com sibforms.com *.sendinblue.com *.adobe.com; img-src 'unsafe-inline' *.sarthe.fr www.google-analytics.com *.twitter.com *.twimg.com data: api.tiles.mapbox.com *.jawg.io *.ckeditor.com *.facebook.com sibforms.com *.sendinblue.com *.amcharts.com *.adobe.com maps.gstatic.com maps.googleapis.com *.media.tourinsoft.eu i.vimeocdn.com *.google.com log.pinterest.com; frame-src 'unsafe-inline' *.gogowego.com twitter.com *.twitter.com *.sarthe.fr vimeopro.com *.vimeo.com vimeo.com *.youtube.com www.youtube-nocookie.com *.addtoany.com *.google.com *.opendatasoft.com *.calameo.com *.marches-publics.info *.cg72.fr *.facebook.com sibforms.com *.sendinblue.com *.amcharts.com *.adobe.com *.instagram.com *.myvideoplace.tv; frame-ancestors *.sarthe.fr *.gogowego.com *.prisme.ai ; child-src 'unsafe-inline' *.gogowego.com *.twitter.com *.sarthe.fr vimeopro.com *.vimeo.com vimeo.com *.youtube.com *.addtoany.com *.google.com *.opendatasoft.com *.calameo.com *.marches-publics.info *.cg72.fr *.sibforms.com *.sendinblue.com; font-src 'unsafe-inline' *.sarthe.fr fonts.gstatic.com use.fontawesome.com fonts.googleapis.com cdnjs.cloudflare.com *.googleusercontent.com sibforms.com *.sendinblue.com *.adobe.com github.com; connect-src 'unsafe-inline' data.sarthe.fr www.google-analytics.com *.addtoany.com *.sarthe.fr *.sibforms.com *.sendinblue.com geo.api.gouv.fr; report-uri /report-csp-violation 2
default-src 'self' http: https: data: blob: 'unsafe-inline' blob: 'unsafe-eval' 2
default-src 'self' http: https: ; img-src http: https: data: ; font-src http: https: data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ ; connect-src 'self' https: wss: ; style-src 'unsafe-inline' http: https: ; frame-ancestors 'self' http://*.stage.peri.info https://*.stage.peri.info http://*.live.peri.info https://*.live.peri.info ; child-src 'self' * ;frame-src 'self' * 2
default-src * 'unsafe-inline' 'unsafe-eval'; 2
frame-ancestors 'self' .psplugin.com 2
default-src 'self'              https://sc.detecas.com/di/activator.ashx              https://sc.detecas.com/di2/activator.ashx              https://ws.detecas.com              https://sc.starixsoft.com/di2/activator.ashx              https://fps.starixsoft.com/ws              https://fps.starixsoft.com/di/activator.ashx              https://sc.detecas.com/di/ec.ashx              https://sc.detecas.com/di/dd.ashx              https://pw.detecas.com              https://www.google-analytics.com              https://www.google.com              https://www.gstatic.com              https://sentry.starixplay.com;              style-src 'self' 'unsafe-inline';              script-src 'self' 'unsafe-eval' 'unsafe-inline'              https://www.gstatic.com              https://www.google.com              https://sc.detecas.com/di/activator.ashx              https://sc.detecas.com/di2/activator.ashx              https://ws.detecas.com              https://sc.starixsoft.com/di2/activator.ashx              https://fps.starixsoft.com/ws              https://fps.starixsoft.com/di/activator.ashx              https://sc.detecas.com/di/ec.ashx              https://sc.detecas.com/di/dd.ashx              https://www.google-analytics.com              https://sentry.starixplay.com; 2
default-src 'self' data: code.jquery.com stackpath.bootstrapcdn.com cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' stackpath.bootstrapcdn.com; frame-src 'self' *.youtube-nocookie.com 2
frame-src 'self' https://intranet.m800.com https://www.youtube.com https://bid.g.doubleclick.net https://www.google.com 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' ws: https: http: data: 2
default-src * data: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; block-all-mixed-content; report-uri https://94f62820d7c43df17e384a74a389587c.report-uri.com/r/t/csp/enforce 2
frame-ancestors https://uscreen.io https://*.uscreen.io https://www.uscreen.tv 2
default-src 'self' wss: https://static.zdassets.com https://ekr.zdassets.com https://*.contentful.com https://*.zendesk.com https://*.kampyle.com https://*.tigocloud.net http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; frame-src 'self' https://bid.g.doubleclick.net https://*.tigocloud.net https://*.tigo.com.bo https://*.tigo.com.py https://www.youtube.com https://*.kampyle.com https://khipu.com/ https://*.hotjar.com https://*.hotjar.com:* https://*.hotjar.io https://www.reportv.com.ar https://*.crwdcntrl.net https://6493920.fls.doubleclick.net https://*.google.com https://*.tigo.com.hn; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://optimize.google.com https://www.google.com.ar https://*.tigocloud.net https://static.zdassets.com https://connect.facebook.net https://s.ytimg.com https://www.youtube.com/iframe_api https://widget-mediator.zopim.com https://*.kampyle.com https://js-agent.newrelic.com https://bam.nr-data.net http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.reportv.com.ar https://*.crwdcntrl.net https://tigo.us7.list-manage.com https://web.webpushs.com https://tigo.us18.list-manage.com https://static.ads-twitter.com https://www.gstatic.com https://cdn.epica.ai https://*.inbenta.chat https://*.inbenta.io https://*.googleoptimize.com https://ad.doubleclick.net https://cdn.smooch.io https://tigo.us9.list-manage.com; font-src 'self' data: blob: https://fonts.gstatic.com https://*.kampyle.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.tigocloud.net https://*.inbenta.io; img-src 'self' data: blob: https://www.google-analytics.com https://googleads.g.doubleclick.net https://*.tigocloud.net https://*.contentful.com https://www.facebook.com https://*.kampyle.com https://static.zdassets.com https://www.googletagmanager.com https://images.ctfassets.net https://stats.g.doubleclick.net https://*.zopim.io https://lh3.googleusercontent.com https://platform-lookaside.fbsbx.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.tigo.com.bo https://ssl.gstatic.com https://www.gstatic.com https://cdn.sendpulse.com https://www.google.com https://www.google.com.ar https://www.google.com.bo https://www.google.com.co https://www.google.com.sv https://www.google.com.gt https://www.google.hn https://www.google.com.ni https://www.google.com.pa https://www.google.com.py https://t.co https://analytics.twitter.com https://svr.mic.edge.com.py http://openweathermap.org https://openweathermap.org https://bcp.crwdcntrl.net https://cx.atdmt.com https://ad.doubleclick.net https://*.inbenta.com https://*.inbenta.io;  style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.kampyle.com https://tagmanager.google.com https://cdn.sendpulse.com https://*.tigocloud.net https://*.inbenta.io https://*.google.com; connect-src *; 2
default-src 'self' 'self' data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *; img-src 'self' blob: data: * 2
frame-src 'self'; frame-ancestors 'self'; object-src 'none'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.facebook.net *.google-analytics.com *.addthisedge.com *.marketo.com *.googletagmanager.com *.mookie1.com *.serving-sys.com *.marketo.net *.calltrk.com *.tiqcdn.com *.jwpcdn.com *.youtube.com *.addthis.com m.addthisedge.com s.ytimg.com *.facebook.com *.pinterest.com *.googleapis.com *.typekit.net *.northwell.edu *.limelight.com *.delvenetworks.com *.addtoany.com *.github.io *.aspnetcdn.com s.gravatar.com *.wp.com *.amazonaws.com *.googleadservices.com *.microsoft.com *.jquery.com *.html5media.info *.cloudfront.net *.jwpcdn.com *.newrelic.com *.nr-data.net tagmanager.google.com *.surveymonkey.com *.brightwhistle.com *.callrail.com *.healthwise.net *.merklesearch.com *.rkdms.com *.rawgit.com *.cloudflare.com ethn.io e.infogram.com *.gigya.com *.influencehealth.com *.bing.com *.visto1.net *.linkedin.com *.hotjar.com *.doubleclick.net *.creative-serving.com *.invocacdn.com *.invoca.net *.adsrvr.org *.acquia.com *.segment.com *.rdcdn.com *.msecnd.net *.mymarketingreports.com *.optimizely.com *.syllable.ai *.conveythis.com *.force.com *.salesforce.com *.salesforceliveagent.com *.sanzone.io api.dpx.northwell.io *.yimg.com *.yahoo.com tags.srv.stackadapt.com pagecdn.io; object-src 'self' video.limelight.com assets.delvenetworks.com *.gigya.com; style-src 'self' 'unsafe-inline' rtp-static.marketo.com *.googleapis.com *.vm *.bootstrapcdn.com *.northwell.edu malihu.github.io static.addtoany.com s.gravatar.com code.jquery.com  *.cloudfront.net *.surveymonkey.com *.marketo.com *.rkdms.com tagmanager.google.com *.acquia.com *.syllable.ai *.force.com *.salesforce.com api.dpx.northwell.io *.yimg.com *.srv.stackadapt.com; img-src 'self' data: *.google-analytics.com *.g.doubleclick.net www.facebook.com www.google.com jwpltx.com api.nslijweb.com csi.gstatic.com *.googleapis.com maps.gstatic.com img.delvenetworks.com *.llnw.net m.addthis.com *.northwell.edu northwellhealt.wpengine.com *.gravatar.com *.wp.com *.cloudfront.net *.amazonaws.com www.bugherd.com *.surveymonkey.com img.youtube.com *.googleadservices.com maps.googleapis.com *.mxptint.net dpm.demdex.net ad.yieldmanager.com ad.afy11.net d.agkn.com idsync.rlcdn.com *.bluekai.com *.openx.net *.rubiconproject.com *.adnxs.com sync.adaptv.advertising.com *.rkdms.com i.ytimg.com *.gigya.com *.bing.com *.googletagmanager.com *.doubleclick.net *.google.com *.gstatic.com *.tilehosting.com *.hotjar.com *.maptiler.com *.rdcdn.com https://rdcdn.com clickserv.pixel.ad *.syllablecdn.com *.syllable.ai *.conveythis.com *.force.com *.salesforce.com *.sanzone.dev *.northwell.io api.dpx.northwell.io *.yimg.com *.googleusercontent.com *.marketo.com; media-src 'self' blob: *.llnw.net *.delvenetworks.com *.llnw.com; frame-src 'self' blob: cdn-akamai.mookie1.com tags.tiqcdn.com s7.addthis.com www.youtube.com static.addtoany.com *.doubleclick.net www.google.com *.understand.com *.marketo.com *.sli.do ethn.io e.infogram.com *.gigya.com w.soundcloud.com view.knowledgevision.com 8065684-gigya.northwell.edu intakeforms.sequencehealth.com mednews.hofstra.edu app.stitcher.com vars.hotjar.com *.googletagmanager.com www.facebook.com insight.adsrvr.org *.acquia.com *.segment.com *.optimizely.com *.force.com *.salesforce.com *.pledgeling.com *.adsrvr.org *.healthgrades.com *.podbean.com *.libsyn.com *.simplecast.com; child-src 'self' blob:; font-src 'self' data: themes.googleusercontent.com fonts.gstatic.com *.bootstrapcdn.com www.bugherd.com static.hotjar.com api.dpx.northwell.io *.hotjar.com; connect-src 'self' 'unsafe-inline' 309-lvl-470.mktoresp.com sjrtp4.marketo.com *.addthis.com *.pusherapp.com *.pusher.com www.bugherd.com *.google-analytics.com *.northwell.edu content.healthwise.net *.cloudflare.com *.rkdms.com *.callrail.com *.serving-sys.com api.dpx.northwell.io *.gigya.com *.llnw.net *.hotjar.com wss://*.hotjar.com *.doubleclick.net *.hotjar.io www.facebook.com *.cloudfront.net *.acquia.com *.segment.com *.visualstudio.com *.bugsnag.com *.mktoresp.com *.nr-data.net *.optimizely.com *.syllable.ai *.locationiq.com *.conveythis.com *.force.com *.sanzone.io *.sanzone.dev *.northwell.io *.yimg.com *.srv.stackadapt.com sentry.io *.reachnorthwell.com; report-uri https://northwell.report-uri.com/r/d/csp/reportOnly 2
frame-ancestors  *.marincounty.org *.marinpublic.com *.mcera.org *.marinfair.org *.marincountyhr.org *.marincountyparks.org *.marinhhs.org 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net https://fp.zenaps.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.dwin1.com/ https://www.youtube.com/iframe_api https://s.ytimg.com https://assets.planethoster.com/ https://maps.googleapis.com/ https://ads2.adverline.com/ https://tags.dynamo.one/ https://smct.co/ https://apis.google.com/ https://widget.trustpilot.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/; img-src 'self' www.facebook.com data: https://www.planethoster.com/ https://assets.planethoster.com/ https://maps.gstatic.com/ https://smct.co/ https://www.google-analytics.com/; font-src 'self' data: fonts.gstatic.com https://assets.planethoster.com/; frame-src https://www.zenaps.com/ https://ads2.adverline.com/ https://staticxx.facebook.com/ https://www.google.com/ https://www.facebook.com/ https://player.vimeo.com https://www.youtube.com/ https://tags.dynamo.one/ https://smct.co/ https://accounts.google.com/ https://widget.trustpilot.com/; connect-src 'self' https://fp.zenaps.com/ https://assets.planethoster.com/ https://smct.co/ https://widget.trustpilot.com/ https://www.google-analytics.com/; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://assets.planethoster.com/; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: cdnjs.cloudflare.com *.google-analytics.com https://www.google-analytics.com *.googleapis.com https://www.google.com/js https://www.google.com/ads https://www.googletagmanager.com https://cloud.typography.com *.gstatic.com https://stats.g.doubleclick.net *.cloudfront.net https://www.youtube.com *.youtube.com https://app.termly.io https://i.ytimg.com https://yt3.ggpht.com https://static.doubleclick.net https://secure.quantserve.com https://snap.licdn.com https://rules.quantcount.com https://pixel.quantserve.com https://px.ads.linkedin.com http://www.google.com https://p.adsymptotic.com https://lbm.doitbestonline.com https://media.mydoitbest.com ; frame-src 'self' https://app.termly.io https://www.youtube.com https://www.google.com ; frame-ancestors 'self'; base-uri 'none'; object-src 'none'; 2
frame-ancestors 'self' https://*.nzherald.co.nz https://*.apnnz.co.nz https://nzme.coral.coralproject.net/; 2
default-src 'self' wss://www.mataharirama.xyz wss://mataharirama.xyz http://www.mataharirama.xyz https://www.mataharirama.xyz http://www.mataharirama.xyz http://www.mataharirama.xyz wss://www.reasedoper.pw wss://nathetsof.com wss://www.nathetsof.com http://nathetsof.com https://nathetsof.com http://reasedoper.pw https://reasedoper.pw wss://sparnove.com wss://www.sparnove.com https://sparnove.com http://sparnove.com https://pagead2.googlesyndication.com https://api.push.world/ http://banners.mlgame.org https://*.pozvonim.com/ http://api.pozvonim.com/ https://mc.yandex.ru/ http://rb.revolvermaps.com/;style-src 'unsafe-inline' *;child-src * 'self'  blob: ;img-src * data:;media-src *;font-src *;script-src http://sdnats.com http://vuryua.ru/ https://adservice.google.de/ http://sparnove.com https://sparnove.com http://zstat.org https://zstat.org https://gridiogrid.com/ https://www.gridiogrid.com/ http://www.gridiogrid.com/ https://wwwgridiogrid.com/ http://bstat.org/  http://igrid.org/ http://ogrid.org/ http://code.moviead55.ru http://mataharirama.xyz http://rigaletto.info/ https://cdnjs.cloudflare.com/ http://syndication.exdynsrv.com https://syndication.exdynsrv.com http://vogozaw.ru http://cdn.jsdelivr.net https://cdn.jsdelivr.net http://adcentr.info https://adcentr.info http://listat.org https://listat.org https://static.reasedoper.pw http://nathetsof.com https://nathetsof.com http://www.nathetsof.com https://www.nathetsof.com http://static.reasedoper.pw http://polldaddy.com/ https://relap.io/ http://*.poll.fm/ https://relboxru.push.world http://vogorana.ru/ http://vogozaq.ru/ http://videopotok.pro/ http://youtuibes.com http://t.insigit.com/ http://front.facetz.net http://kitbit.net/ http://*.pluso.ru http://*.pinterest.com 'self' http://m.addthis.com/ http://wqogrp.yjgmmpkot.xyz/ http://m.addthisedge.com/ http://myhit.cc http://zdravv.ru/ http://zebroid.tv/ http://*.linkedin.com/ http://api.pinterest.com/ http://feeds.delicious.com/ https://dl.metabar.ru/ http://azbns.com/  http://cdn.mobidea.com/ https://cdn.mobidea.com/ http://mytomatosoup.com/ http://*.s1block.com/ https://*.exoclick.com/ http://*.exoclick.com/ https://*.pozvonim.com/ http://*.pozvonim.com/ http://rt.intarget.ru/ http://*.criteo.com/ http://webgringo.ru/ http://dancepoisk.ru/ http://*.google.com.ua https://*.google.com.ua https://*.vim100.ru http://*.vim100.ru https://vim100.ru http://vim100.ru http://*.kavanga.ru https://*.kavanga.ru http://dreamcode.pw https://dreamcode.pw https://*.advertur.ru *.advertur.ru http://cdn-rtb.sape.ru/ http://*.sape.ru/ http://wslocker.ru/ http://www.photoshop.in.ua 'self' 'unsafe-inline' 'unsafe-eval' http://code.jquery.com https://oss.maxcdn.com yandex.st *.yandex.st https://*.google-analytics.com http://*.google-analytics.com acint.net www.acint.net http://meelba.com http://*.meelba.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.uptolike.com https://*.uptolike.com *.leadada.com http://*.yandex.ru http://yandex.ru  https://yandex.ru https://*.yandex.ru http://*.doubleclick.net https://*.doubleclick.net cepereh.ru promoskiki.ru brandomatic.ru http://info.datacadet.com https://info.datacadet.com http://*.metabar.ru https://*.youtube.com http://*.youtube.com https://*.google.com http://*.google.com http://*.yandex.net https://*.yandex.net http://*.dumedia.ru http://userapi.com https://*.twitter.com http://*.twitter.com https://yastatic.net http://yastatic.net http://*.ya.ru http://*.fbcdn.net http://*.facebook.net https://*.facebook.net http://ad.oyy.ru http://pr-cy.ru http://*.rotaban.ru http://*.addthis.com http://*.mail.ru https://*.mail.ru http://*.adriver.ru https://*.googleapis.com http://*.googleapis.com http://*.reformal.ru https://vk.com http://*.vk.com http://vk.com http://*.vk.com http://estat-translator.com http://*.openstat.net http://openstat.net http://*.hit.ua http://api.cpatext.ru http://disgusting.ru http://counter.rambler.ru http://allskidkimos.ru http://*.acint.net http://*.beeline.ru http://*.smi2.ru https://*.alexa.com http://js-agent.newrelic.com http://*.odnoklassniki.ru http://*.directadvert.ru http://vkontakte.ru http://meteoprog.ua http://*.meteoprog.ua http://*.ok.ru https://*.ok.ru http://api.recaptcha.net http://ulogin.ru http://*.ukr.net http://*.semrash.com http://*.nr-data.net http://*.mgts.ru http://commontools.net http://*.wordpress.com http://informer.name http://*.bigmir.net https://*.bigmir.net http://www.samnews.ru http://adv.rb-edu.ru http://nastart.com.ua http://*.betweendigital.com http://*.google.ru http://*.cloudfront.net http://api.pozvonim.com http://*.24webclock.com https://*.zemanta.com http://disqus.com http://*.gismeteo.ru http://*.spylog.ru http://*.sharethis.com http://*.disqus.com http://*.c8.net.ua http://www.semrush.com http://loginza.ru http://*.redtram.com https://*.facebook.com http://*.facebook.com http://reformal.ru http://mreporter.ru http://n.lcads.ru http://*.leadia.ru http://www.vesti.ru http://*.begun.ru http://google.com.ua https://google.com.ua http://gamebomb.ru https://*.skype.com http://*.contextbar.ru http://*.googleadservices.com https://*.googleadservices.com http://*.lcads.ru http://*.googlevideo.com https://*.googlevideo.com http://*.gstatic.com https://*.gstatic.com https://*.ytimg.com http://*.ytimg.com http://*.yadro.ru https://*.yadro.ru; connect-src 'self' https://gridiogrid.com/ wss://gridiogrid.com/ https://ogrid.org wss://www.igrid.org wss://www.mataharirama.xyz https://mataharirama.xyz https://www.mataharirama.xyz wss://mataharirama.xyz http://api.pozvonim.com/ https://api.push.world/ https://static.reasedoper.pw/ http://nathetsof.com https://nathetsof.com wss://nathetsof.com wss://www.nathetsof.com wss://www.reasedoper.pw/ wss://sparnove.com wss://www.sparnove.com http://sparnove.com https://sparnove.com http://meelba.com/ http://stat.qload.ru http://uxm.ru https://mc.yandex.ru/ https://pagead2.googlesyndication.com https://stats.lptracker.ru 2
default-src 'self' https://*.allkeyshop.com https://*.allkeyshop.ru https://*.keyforsteam.de https://*.goclecd.fr https://*.clavecd.es https://*.cdkeyit.it https://*.cdkeypt.pt https://*.cdkeynl.nl https://*.keyforsteam.com https://cheapdigitaldownload.com https://*.cheapdigitaldownload.com https://*.steamkeybox.com https://static.zdassets.com https://ekr.zdassets.com https://allkeyshop.zendesk.com wss://allkeyshop.zendesk.com wss://*.zopim.com https://www.google-analytics.com http://cdn.sendpulse.com https://*.twitch.tv https://cdn.jsdelivr.net https://www.youtube.com https://s.ytimg.com https://widget.gleamjs.io https://gleam.io https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://www.googletagservices.com https://ad.doubleclick.net 'unsafe-inline' data:; style-src 'self' https://*.allkeyshop.com https://*.allkeyshop.ru https://*.keyforsteam.de https://*.goclecd.fr https://*.clavecd.es https://*.cdkeyit.it https://*.cdkeypt.pt https://*.cdkeynl.nl https://*.keyforsteam.com https://cheapdigitaldownload.com https://*.cheapdigitaldownload.com https://*.steamkeybox.com https://cdn.jsdelivr.net https://cdn.sendpulse.com 'unsafe-inline'; img-src 'self' https://*.allkeyshop.com https://*.allkeyshop.ru https://*.keyforsteam.de https://*.goclecd.fr https://*.clavecd.es https://*.cdkeyit.it https://*.cdkeypt.pt https://*.cdkeynl.nl https://*.keyforsteam.com https://cheapdigitaldownload.com https://*.cheapdigitaldownload.com https://*.steamkeybox.com https://v2assets.zopim.io https://static.zdassets.com data: https://steamcdn-a.akamaihd.net https://www.google-analytics.com https://static-cdn.jtvnw.net https://cdn.sendpulse.com https://*.gravatar.com https://graph.facebook.com https://i0.wp.com/www.allkeyshop.com https://platform-lookaside.fbsbx.com https://*.fbcdn.net https://*.googleusercontent.com https://*.cloudfront.net/facebook/ https://*.cloudfront.net/twitter/ https://*.cloudfront.net/instagram/ https://js.gleam.io https://static-cdn.jtvnw.net https://i.ytimg.com 2
default-src 'self' 'unsafe-eval' http: https: data: blob: 'unsafe-inline' 2
default-src 'self' data: *; img-src 'self' blob: data: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' * 2
frame-ancestors 'self' https://saint-gobain.wmh-demos.com/; 2
default-src 'self' *.readspeaker.com data:; base-uri 'self'; style-src 'self' 'unsafe-inline' *.readspeaker.com; script-src 'self' 'unsafe-eval' *.google.com piwik.itzbund.de *.readspeaker.com;object-src 'self' multimedia.gsb.bund.de piwik.itzbund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com www.quirksmode.org; child-src *.itzbund.de *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com piwik.itzbund.de; upgrade-insecure-requests; frame-ancestors 'self'; 2
script-src https: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; frame-ancestors 'self' 2
default-src *     ;report-uri /xp/CSPReport.ashx     ;script-src * 'unsafe-inline' 'unsafe-eval' data: about:     ;style-src * 'unsafe-inline'     ;connect-src * blob:     ;font-src * data:     ;object-src *     ;img-src * data: blob:     ;media-src * blob:     ;frame-src * data: gsa: ajaxhandler:     ;child-src * blob:     ;worker-src * blob:     ;form-action * javascript:     ;frame-ancestors 'self' 2
img-src 'self' *.instagram.com *.gravatar.com *.cdninstagram.com *.cloudflare.com *.explorerbyx.org farm5.staticflickr.com geo.yahoo.com maps.googleapis.com maps.gstatic.com www.google-analytics.com; 2
1; mode=block 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.kaltura.com https://platform.twitter.com https://syndication.twitter.com https://*.twimg.com https://connect.facebook.net https://maps.google.com https://hosting.img.dk https://siteimproveanalytics.com https://*.global.siteimproveanalytics.io 2
default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' 2
default-src https: *; script-src https: 'unsafe-inline' 'unsafe-eval' *;img-src data: https:;font-src data: https:;style-src https: 'unsafe-inline' *;upgrade-insecure-requests;frame-ancestors 'self'; base-uri 'none'; frame-src mailto: * 2
default-src 'unsafe-inline' 'unsafe-eval' 'self' * data: ; 2
default-src 'unsafe-inline' data: about: hcom: blob: callback: chrome-error: *; script-src 'unsafe-eval' 'unsafe-inline' data: about: blob: asset: *; report-uri https://hcom.report-uri.com/r/t/csp/enforce 2
default-src 'self' multibanner.net *.multibanner.net redclick.ru *.redclick.ru my.pusk.ua adlabs-mobile.ru *.adlabs-mobile.ru clickio.com *.clickio.com adlabs.ru *.adlabs.ru adlabsnetworks.com *.adlabsnetworks.com adlabsnetworks.ru googleapis.com googletagmanager.com gstatic.com *.google-analytics.com clickio.mgr.consensu.org luxup.ru luxadv.com luxupcdna.com luxupcdnb.com luxupcdnc.com luxupadva.com luxupadvb.com luxupadvc.com luxup2.ru hubspot.com js.hs-scripts.com js.hscollectedforms.net luxcdn.com fonts.gstatic.com *.online.tableau.com *.luxup.ru *.tipalti.com *.googleapis.com www.google.com www.gstatic.com datastudio.google.com *.dev.luxup.ru *.adlabs-retail.ru adlabs-retail.ru  www.googleadservices.com 'unsafe-inline' 'unsafe-eval' 2
frame-ancestors 'self' https://*.adobe.com; 2
default-src 'none'; script-src 'self'; img-src 'self' https://www.google-analytics.com:443 https://*.qbrick.com:443 https://*.dna.ip-only.net https://bilder.hemnet.se:443 https://mb.cision.com; media-src 'self' https://*.qbrick.com:443 https://*.dna.ip-only.net; connect-src 'self' https://*.qbrick.com:443 synpunkter-1788b.firebaseio.com; style-src 'self' 'unsafe-inline'; frame-src *.handelsbanken.se *.handelsbanken.fi *.handelsbanken.no *.handelsbanken.dk *.handelsbanken.co.uk *.handelsbanken.pl *.handelsbanken.de r1.surveysandforms.com secure.msse.se www.efn.se clients.maptoweb.dk borsrum.episerverhosting.com shbfxcalc.millistream.com www.anpdm.com services.cicero.no nettbank.edb.com shbdk.millistream.com cphspk01.shbmain.shb.biz www.shb.dk priolaan.dk weblaan.shb.bec.dk web37.prod.bec.dk netbank.shb.dk irs.tools.investis.com otp.tools.investis.com vp292.alertir.com forms.apsisforms.com handelsbanken.easycruit.com handelsbankendk.easycruit.com video.qbrick.com dreambroker.com handelsbanken.dreambroker.com web.efn.se news.alertir.com giosg-handelsbanken.giosg.com; font-src 'self' 2
default-src 'self'; img-src * data: 'unsafe-inline'; style-src * 'unsafe-inline';script-src * data: 'unsafe-inline' 'unsafe-eval'; font-src thyssenkrupp.com *.thyssenkrupp.com *.recruitmentplatform.com *.bootstrapcdn.com; connect-src *;frame-src *; media-src * blob:; object-src * data: 'unsafe-eval'; worker-src blob: 2
frame-ancestors 'self' *.commercevision.biz *.commercevision.com.au 2
default-src https: 'self' blob:; media-src https: data: blob:; font-src https: data:; img-src https: 'self' 'unsafe-inline' data: about:; style-src https: 'self' 'unsafe-inline'; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' blob:; frame-ancestors https://*.psychic-readings-for-free.com; 2
default-src 'self' https://cdn.perf1.com https://saspresence.perf1.com; object-src 'none'; frame-src * 2
frame-ancestors 'none'; connect-src http://127.0.0.1:*; default-src https: 'unsafe-inline' 2
default-src 'none'; connect-src 'self' *.mil.ru api-maps.yandex.ru *.tildacdn.com *.gcdn.co *.mail.ru top100.ru mc.yandex.ru *.anycaster.tv *.vintera.tv *.cdnvideo.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' yastatic.net *.yastatic.net tildacdn.com *.tildacdn.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.mil.ru *.rambler.ru *.yandex.ru *.mail.ru *.google-analytics.com *.google.com top100.ru *.top100.ru *.tvzvezda.ru tvzvezda.ru *.mail.ru tns-counter.ru *.tns-counter.ru *.googletagmanager.com mil.ru *.mil.ru *.xn--90anlfbebar6i.xn--p1ai *.cloudfront.net *.cloudflare.com *.bootstrapcdn.com *.googleapis.com; object-src 'self' *.mil.ru *.vintera.tv *.cdnvideo.ru *.youtube.com; style-src 'self' 'unsafe-inline' mil.ru *.mil.ru *.googleapis.com *.bootstrapcdn.com; img-src 'self' mil.ru *.mil.ru mc.yandex.ru *.mc.yandex.ru doubleclick.net *.doubleclick.net tns-counter.ru *.tns-counter.ru *.google.com google.com data: counter.yadro.ru *.yandex.net *.yandex.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.mail.ru *.google-analytics.com *.rambler.ru *.mil.ru ; media-src 'self' mil.ru *.mil.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.xn--90anlfbebar6i.xn--p1ai; frame-src 'self' mil.ru *.mil.ru livezvezda.mediacdn.ru *.livezvezda.mediacdn.ru vk.com *.vk.com ok.ru *.ok.ru tvzvezda.ru *.tvzvezda.ru *.yandex.ru *.yandex.net *.youtube.com youtube.com *.youtu.be youtu.be *.google.com *.vintera.tv *.cdnvideo.ru; font-src 'self' fonts.gstatic.com tildacdn.com *.tildacdn.com *.mil.ru *.vintera.tv *.cdnvideo.ru *.mil.ru *.youtube.com *.youtube.com *.youtu.be *.google.com; frame-ancestors 'self' http://mil.ru http://*.mil.ru https://mil.ru https://*.mil.ru https://youtube.com https://*.youtube.com https://youtu.be https://*.youtu.be; base-uri 'self'; form-action 'self' mil.ru *.mil.ru; 2
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; 2
default-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline'; script-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline'; connect-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline'; font-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline'; img-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline'; child-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline' 2
default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline' 2
default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'self'; frame-ancestors 'self' 2
frame-ancestors 'self' *.selwo.es *.selwomarina.es 2
default-src 'self'; script-src 'self' 'unsafe-inline' *.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://api.easygis.eu *.cloudflare.com *.ogone.com https://connect.facebook.net *.google.com https://www.gstatic.com https://cdn.rawgit.com *.instagram.com/embed.js http://www.googleadservices.com *.hotjar.com https://googleads.g.doubleclick.net; object-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.gstatic.com *.googleapis.com https://api.easygis.eu *.cloudflare.com *.ogone.com *.google.com; img-src 'self' http://*.visitlimburg.be *.gstatic.com *.googleapis.com https://www.google-analytics.com https://stats.g.doubleclick.net data: https://*.easygis.eu/ https://*.mailchimp.com *.ogone.com *.facebook.com *.google.com *.google.be; media-src 'self'; frame-src 'self' https://*.hotjar.com https://*.youtube.com http://plugin.routeyou.com *.joomag.com *.resengo.com *.google.com *.ogone.com *.wlp-acs.com *.wandeleninlimburg.be *.limburg.be https://vlaanderenfietsland.azurewebsites.net *.vlaanderen-fietsland.be https://apps.nodemapp.com *.instagram.com https://player.kinomap.com *.vimeo.com; font-src 'self' https://fonts.gstatic.com *.googleapis.com data: https://api.easygis.eu; connect-src 'self' https://public.easygis.eu *.hotjar.com *.hotjar.io; report-uri /report-csp-violation 2
default-src https:; font-src https: data:; img-src https: data:; script-src https:  https://www.googletagmanager.com https://ajax.googleapis.com https://cdn.jsdelivr.net 'unsafe-inline'; style-src https: https://cloud.typography.com https://fonts.googleapis.com https://cdn.jsdelivr.net 'unsafe-inline'; 2
object-src 'self'; base-uri 'self'; frame-ancestors 'self'; default-src blob: https://*.vacaturesonline.nl https://*.ictergezocht.nl https://*.werkzoeken.nl https://*.technicus.nl https://vars.hotjar.com https://accounts.google.com https://www.youtube.com https://www.facebook.com https://docs.google.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com https://*.werkzoeken.nl https://*.technicus.nl https://*.vacaturesonline.nl https://*.ictergezocht.nl; script-src 'self' 'unsafe-inline' blob: https://ajax.cloudflare.com https://*.google.com https://*.google.nl https://*.hotjar.com https://*.licdn.com https://*.werkzoeken.nl https://*.technicus.nl https://*.vacaturesonline.nl https://*.ictergezocht.nl https://*.zopim.com https://*.zdassets.com https://www.googletagmanager.com https://www.googleadservices.com https://maps.googleapis.com https://*.doubleclick.net https://*.twitter.com https://*.ads-twitter.com https://*.linkedin.com https://www.gstatic.com https://js.live.net https://www.google-analytics.com https://sjs.bizographics.com https://connect.facebook.net https://www.dropbox.com https://apis.google.com; connect-src 'self' https://api.maptiler.com https://*.microsoft.com https://*.hotjar.io https://*.hotjar.com https://www.facebook.com https://*.doubleclick.net https://*.zdassets.com https://www.google-analytics.com wss://*.hotjar.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io; frame-src 'self' https://*.google.com/ https://www.youtube.com https://vars.hotjar.com; font-src 'self' https://*.werkzoeken.nl https://*.vacaturesonline.nl https://*.technicus.nl https://*.ictergezocht.nl https://*.hotjar.com https://fonts.gstatic.com https://*.zopim.com; img-src 'self' blob: data: https://script.hotjar.com https://*.linkedin.com https://*.werkzoeken.nl https://*.technicus.nl https://v2assets.zopim.io https://*.vacaturesonline.nl https://*.ictergezocht.nl https://maps.gstatic.com https://*.zopim.com https://maps.googleapis.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.nl https://*.doubleclick.net; 2
default-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'unsafe-inline' https: data:; img-src data: https: blob: android-webview android-webview-video-poster:; font-src data: https:; connect-src *; media-src https: data: blob:; worker-src https: blob:; frame-src 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.ravenjs.com https://www.googletagmanager.com https://ajax.aspnetcdn.com https://www.gstatic.com https://use.fontawesome.com https://*.googlesyndication.com https://googleadservices.com https://tag.getdrip.com https://connect.facebook.net https://cdnjs.cloudflare.com https://*.google.com https://code.jquery.com https://cdn.mathjax.org https://*.google-analytics.com https://*.googleapis.com https://oss.maxcdn.com https://maxcdn.bootstrapcdn.com https://checkout.stripe.com; frame-src https://checkout.stripe.com https://googleads.g.doubleclick.net https://docs.google.com https://maps.google.com https://www.google.com https://www.youtube.com https://player.vimeo.com https://*.facebook.com; block-all-mixed-content; frame-ancestors 'none'; report-uri https://ivydev.report-uri.io/r/default/csp/enforce 2
default-src 'self' ;script-src 'self' 'unsafe-inline' 'unsafe-eval' ;style-src 'self' 'unsafe-inline' ;img-src 'self' data:  *.tile.openstreetmap.org;object-src 'none'; 2
default-src * 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-ancestors 'self' http://webvisor.com 2
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; upgrade-insecure-requests; report-uri https://drinksco.report-uri.io/r/default/csp/enforce 2
block-all-mixed-content; report-uri https://de.forumhome.com/cspreport.php 2
default-src 'self'  *.readspeaker.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.siteimprove.net/cms/overlay.js siteimproveanalytics.com siteimprove.com *.readspeaker.com *.timeblockr.com; object-src 'self'; style-src 'self' 'unsafe-inline' *.readspeaker.com *.timeblockr.com; img-src 'self' data: *.siteimprove.com *.servmetric.com *.govmetric.com *.siteimproveanalytics.io *.timeblockr.com; media-src 'self' *.readspeaker.com; frame-src 'self' *.readspeaker.com *.youtube.com; frame-ancestors 'self'; child-src 'self' *.youtube.com; font-src 'self' data: *.googleusercontent.com *.readspeaker.com *.ionicframework.com *.timeblockr.com; connect-src 'self' *.readspeaker.com *.timeblockr.com; report-uri /report-csp-violation 2
object-src 'none'; frame-ancestors 'none' 2
frame-ancestors 'self' bibliocms.com *.bibliocms.com bibliocommons.com *.bibliocommons.com libanswers.com *.libanswers.com sccl.bibliocms.com *.sccl.bibliocms.com https://sccld.org sccld.org *.sccld.org; 2
frame-ancestors *.ral.de; 2
default-src 'self' https://*.sogur.com https://*.saga.org https://www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.twitter.com https://www.linkedin.com https://amplify.outbrain.com https://px.ads.linkedin.com https://tagmanager.google.com https://www.googletagmanager.com https://cdn.mxpnl.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://cdnjs.cloudflare.com https://*.sogur.com https://*.saga.org https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.comeet.co https://www.comeet.com https://static.ads-twitter.com https://sjs.bizographics.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.wisepops.com https://snap.licdn.com; connect-src 'self' https://vimeo.com https://saga.us16.list-manage.com https://www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://*.sogur.com https://*.saga.org https://api.mixpanel.com https://api-js.mixpanel.com https://*.wisepops.com https://stats.g.doubleclick.net; img-src 'self' data: https://*.sogur.com https://*.saga.org https://www.facebook.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://t.co https://amplifypixel.outbrain.com https://tr.outbrain.com https://www.gstatic.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.google-analytics.com https://tagmanager.google.com https://www.googletagmanager.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.prismic.io https://px.ads.linkedin.com https://*.linkedin.com https://*.adsymptotic.com https://*.google.com https://www.google.co.il https://*.wisepops.com; style-src 'self' 'unsafe-inline' https://*.sogur.com https://*.saga.org https://tagmanager.google.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; child-src 'self' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; frame-src 'self' https://*.sogur.com https://*.saga.org https://www.google.com https://www.youtube.com https://www.facebook.com https://www.comeet.co https://www.comeet.com https://sagahelp.freshdesk.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://player.vimeo.com https://bid.g.doubleclick.net https://sogurhelp.freshdesk.com; media-src 'self' https://*.sogur.com https://*.saga.org https://*.hotjar.com http://*.hotjar.com;frame-ancestors 'self' https://*.sogur.com https://*.saga.org https://www.w3schools.com; 2
default-src data: blob: http://* https://* wss://* 'self' 'unsafe-inline' 'unsafe-eval'; 2
default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data:; 2
default-src 'self' https: data: blob:; connect-src https: wss:;script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' blob:; frame-ancestors 'self' https:; upgrade-insecure-requests; 2
default-src 'self' *.staticflickr.com *.flickr.com maps.google.com api.rollbar.com *.nr-data.net api.mapbox.com blob:; script-src 'self' cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com js-agent.newrelic.com *.twitter.com *.twimg.com *.nr-data.net 'unsafe-eval' 'unsafe-inline' api.mapbox.com blob:; style-src 'self' *.flickr.com *.staticflickr.com fonts.googleapis.com use.fontawesome.com *.twitter.com *.twimg.com 'unsafe-inline' api.mapbox.com; img-src 'self' www.un.org.vn *.un.org gallery.mailchimp.com *.staticflickr.com https: data: blob:; media-src 'self' www.un.org.vn *.un.org; frame-src 'self' maps.google.com www.google.com www.youtube.com *.vimeo.com country-profiles.unstatshub.org; font-src 'self' fonts.googleapis.com use.fontawesome.com fonts.gstatic.com *.twitter.com *.twimg.com; connect-src 'self' *.staticflickr.com *.flickr.com maps.google.com api.rollbar.com *.nr-data.net https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com www.google-analytics.com; report-uri /report-csp-violation 2
frame-ancestors 'self' http://localhost:* https://*.admin.faithlifesites.com https://admin.faithlifesites.com https://*.sites.faithlife.com https://*.faithlife.com; object-src 'none'; base-uri https://optimize.google.com; block-all-mixed-content 2
default-src 'self' https://static.akademiai.hu; style-src 'self' 'unsafe-inline' https://static.akademiai.hu https://fonts.googleapis.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com; font-src 'self' data: https://fonts.gstatic.com https://www.google-analytics.com; img-src 'self' data: https://static.akademiai.hu https://www.gstatic.com https://www.google-analytics.com https://www.google.hu https://www.google.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://www.szotar.net https://static.angolteszt.eisz.akademiai.hu https://image.arukereso.hu https://www.arukereso.hu https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://s1364398973.t.eloqua.com https://ad.adverticum.net https://www.paypalobjects.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://static.akademiai.hu https://www.google.com https://www.google.hu https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.adverticum.net https://img.en25.com https://connect.facebook.net https://assets.arukereso.com https://cdnjs.cloudflare.com; frame-src 'self' https://www.facebook.com https://platform.twitter.com https://www.googletagmanager.com https://www.youtube.com https://bid.g.doubleclick.net; connect-src 'self' https://static.akademiai.hu https://www.google-analytics.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://connect.facebook.net https://www.facebook.com https://ad.adverticum.net; report-uri /report_csp.php 2
default-src 'self'; img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; child-src * blob:; style-src * 'unsafe-inline'; font-src * data:; frame-src *; media-src *; connect-src *; worker-src blob:; block-all-mixed-content 2
“block-all-mixed-content” 2
frame-ancestors https://*.zscloud.net 'self' macom.com *.macom.com smrtsrc.com *.smrtsrc.com jahia-macpd-03.smartsource.local jahia-macpd-04.smartsource.local jahia-mactd-01.smartsource.local jahia-macdd-01.smartsource.local 2
default-src * data: blob: 'unsafe-inline' 'unsafe-eval' 2
script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src www.openstreetmap.org; 2
connect-src 'self' habboo-a.akamaihd.net *.habbo.com cookie-cdn.cookiepro.com privacyportal.cookiepro.com cookies.onetrust.mgr.consensu.org geolocation.onetrust.com www.facebook.com www.google-analytics.com csi.gstatic.com *.googlesyndication.com *.g.doubleclick.net hb.improvedigital.com pub.tunnl.com; img-src 'self' data: habboo-a.akamaihd.net *.habbo.com cookie-cdn.cookiepro.com habbo-stories-content.s3.amazonaws.com www.facebook.com www.google-analytics.com www.google.com *.g.doubleclick.net *.googlesyndication.com *.gstatic.com images.habbogroup.com docj27ko03fnu.cloudfront.net d3hmp0045zy3cs.cloudfront.net quilt-cdn.janrain.com pay.openbucks.com trck.spoteffects.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' habboo-a.akamaihd.net *.habbo.com cookie-cdn.cookiepro.com connect.facebook.net www.google-analytics.com www.google.com www.gstatic.com apis.google.com *.g.doubleclick.net *.googlesyndication.com www.googletagservices.com partner.googleadservices.com adservice.google.com adservice.google.ad adservice.google.ae adservice.google.com.af adservice.google.com.ag adservice.google.com.ai adservice.google.al adservice.google.am adservice.google.co.ao adservice.google.com.ar adservice.google.as adservice.google.at adservice.google.com.au adservice.google.az adservice.google.ba adservice.google.com.bd adservice.google.be adservice.google.bf adservice.google.bg adservice.google.com.bh adservice.google.bi adservice.google.bj adservice.google.com.bn adservice.google.com.bo adservice.google.com.br adservice.google.bs adservice.google.bt adservice.google.co.bw adservice.google.by adservice.google.com.bz adservice.google.ca adservice.google.cd adservice.google.cf adservice.google.cg adservice.google.ch adservice.google.ci adservice.google.co.ck adservice.google.cl adservice.google.cm adservice.google.cn adservice.google.com.co adservice.google.co.cr adservice.google.com.cu adservice.google.cv adservice.google.com.cy adservice.google.cz adservice.google.de adservice.google.dj adservice.google.dk adservice.google.dm adservice.google.com.do adservice.google.dz adservice.google.com.ec adservice.google.ee adservice.google.com.eg adservice.google.es adservice.google.com.et adservice.google.fi adservice.google.com.fj adservice.google.fm adservice.google.fr adservice.google.ga adservice.google.ge adservice.google.gg adservice.google.com.gh adservice.google.com.gi adservice.google.gl adservice.google.gm adservice.google.gp adservice.google.gr adservice.google.com.gt adservice.google.gy adservice.google.com.hk adservice.google.hn adservice.google.hr adservice.google.ht adservice.google.hu adservice.google.co.id adservice.google.ie adservice.google.co.il adservice.google.im adservice.google.co.in adservice.google.iq adservice.google.is adservice.google.it adservice.google.je adservice.google.com.jm adservice.google.jo adservice.google.co.jp adservice.google.co.ke adservice.google.com.kh adservice.google.ki adservice.google.kg adservice.google.co.kr adservice.google.com.kw adservice.google.kz adservice.google.la adservice.google.com.lb adservice.google.li adservice.google.lk adservice.google.co.ls adservice.google.lt adservice.google.lu adservice.google.lv adservice.google.com.ly adservice.google.co.ma adservice.google.md adservice.google.me adservice.google.mg adservice.google.mk adservice.google.ml adservice.google.com.mm adservice.google.mn adservice.google.ms adservice.google.com.mt adservice.google.mu adservice.google.mv adservice.google.mw adservice.google.com.mx adservice.google.com.my adservice.google.co.mz adservice.google.com.na adservice.google.com.nf adservice.google.com.ng adservice.google.com.ni adservice.google.ne adservice.google.nl adservice.google.no adservice.google.com.np adservice.google.nr adservice.google.nu adservice.google.co.nz adservice.google.com.om adservice.google.com.pa adservice.google.com.pe adservice.google.com.pg adservice.google.com.ph adservice.google.com.pk adservice.google.pl adservice.google.pn adservice.google.com.pr adservice.google.ps adservice.google.pt adservice.google.com.py adservice.google.com.qa adservice.google.ro adservice.google.ru adservice.google.rw adservice.google.com.sa adservice.google.com.sb adservice.google.sc adservice.google.se adservice.google.com.sg adservice.google.sh adservice.google.si adservice.google.sk adservice.google.com.sl adservice.google.sn adservice.google.so adservice.google.sm adservice.google.sr adservice.google.st adservice.google.com.sv adservice.google.td adservice.google.tg adservice.google.co.th adservice.google.com.tj adservice.google.tk adservice.google.tl adservice.google.tm adservice.google.tn adservice.google.to adservice.google.com.tr adservice.google.tt adservice.google.com.tw adservice.google.co.tz adservice.google.com.ua adservice.google.co.ug adservice.google.co.uk adservice.google.com.uy adservice.google.co.uz adservice.google.com.vc adservice.google.co.ve adservice.google.vg adservice.google.co.vi adservice.google.com.vn adservice.google.vu adservice.google.ws adservice.google.rs adservice.google.co.za adservice.google.co.zm adservice.google.co.zw adservice.google.cat rpxnow.com d29usylhdk1xyu.cloudfront.net trck.spoteffects.net hb.improvedigital.com cdn.ampproject.org; style-src 'self' 'unsafe-inline' habboo-a.akamaihd.net *.habbo.com www.gstatic.com fonts.googleapis.com d3hmp0045zy3cs.cloudfront.net quilt-cdn.janrain.com; child-src 'self' *.habbo.com *.facebook.com www.google.com *.g.doubleclick.net *.googlesyndication.com habboo-a.akamaihd.net www.youtube.com www.offertoro.com hb.improvedigital.com; font-src 'self' fonts.gstatic.com habboo-a.akamaihd.net *.habbo.com; frame-ancestors 'self' *.idcgames.com www.funnygames.fi www.funnygames.es www.funnygames.nl www.funnygames.fr www.funnygames.it www.funnygames.us www.funnygames.eu www.funnygames.biz www.funnygames.com.br www.funnygames.org *.gamesxl.com keygames.com www.games.co.za www.bgames.com starbie.co.uk nyckelspel.se www.games.co.uk www.a10.com www.gry.pl www.spela.se www.gamesgames.com www.ourgames.ru www.permainan.co.id www.games.co.id www.agame.com www.flashgames.ru www.mousebreaker.com kizi.com yepi.com www.integrations.partner.spilgames.com www.teens-integrations.partner.spilgames.com www.youdagames.com www.elkspel.nl www.spele.nl www.spele.be www.spelletjesoverzicht.nl *.orangegames.com hyvesgames.nl spele.nl www.spelletjes.nl www.spel.nl *.giochixl.it www.1001giochi.it minigioco.it www.gioco.it www.giochi.it *.jeuxdelajungle.fr www.1001games.fr jouerjouer.com spele.be www.jeux.fr www.jeu.fr oyun.mynet.com gamecell.com www.gamecell.com oyungemisi.com www.oyunskor.com *.1001pelit.com pelaaleikkia.com www.isladejuegos.es clavejuegos.com www.juegos.com *.1001spiele.de www.jetztspielen.ws www.jetztspielen.de www.spielaffe.de *.spielspiele.de spielspiele.de www.spielen.com *.1001jogos.pt jogojogar.com www.ojogos.com.br hb.improvedigital.com; frame-src 'self' *.habbo.com *.facebook.com www.google.com *.g.doubleclick.net *.googlesyndication.com habboo-a.akamaihd.net www.youtube.com www.offertoro.com hb.improvedigital.com; upgrade-insecure-requests; report-uri /csp/report 2
default-src *; script-src * 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline'; img-src * blob: data:; frame-ancestors 'self' skmmall.17life.com; 2
default-src * 'self' data: 'unsafe-inline' 'unsafe-eval' ; 2
default-src https: data: 'unsafe-eval' 'unsafe-inline'; 2
script-src 'self' 'unsafe-eval' blob: open.scdn.co open-review.scdn.co quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com s3.amazonaws.com/ki.js/51746/b0R.js turbo.qualaroo.com optimize.google.com cdn.cookielaw.org geolocation.onetrust.com www.googleoptimize.com 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss='; frame-ancestors 'self'; 2
frame-ancestors 'self' http://*.tiarccms.co.uk https://*.tiarccms.co.uk; 2
policy-uri /'none' 2
default-src 'self' * ; script-src 'self' * 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; img-src data: *; object-src 'self' 2
default-src *; script-src 'unsafe-eval' 'self' 'unsafe-inline'  https:; object-src 'self' *.youtube.com youtube.com; style-src * 'unsafe-inline'; img-src * data:; frame-src *; font-src * data:; connect-src *; media-src * blob:; worker-src 'self' blob:; 2
default-src https: 'unsafe-inline' 'unsafe-eval'; script-src * 'self' 'unsafe-inline' 'unsafe-eval' https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com; img-src * 'self' data: https:; font-src * 'self' data: https:; style-src * 'self' 'unsafe-inline' data: https:; connect-src https: wss: 'self'; 2
default-src 'self' *.hotetec.com; connect-src 'self' ws: *.hotetec.com *.hotelinking.com *.clarity.ms *.smooch.io *.quicktext.im  *.sendpulse.com *.reviewpro.com backend.fideltour.com stats.g.doubleclick.net www.google-analytics.com in.hotjar.com www.123compare.me cognito-identity.eu-west-1.amazonaws.com firehose.eu-west-1.amazonaws.com www.googleadservices.com www.google.es www.facebook.com dev-traffic.attby.io vc.hotjar.io *.parthenon.io *.triptease.io api.rollbar.com www.thehotelsnetwork.com; frame-src *; ; font-src * data:;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 2
frame-ancestors 'self' https://*.mawebcenters.com 2
base-uri 'self'; img-src * data: 'unsafe-inline'; default-src data: * 'unsafe-inline'; frame-ancestors 'self'; manifest-src 'self'; media-src 'self' blob: *.readspeaker.com *.speechstream.net ; script-src * 'unsafe-inline' 'unsafe-eval';  object-src 'none'; 2
default-src https: 2
connect-src 'self' 'unsafe-inline' www.google-analytics.com; script-src 'self' 'unsafe-inline' tags.tiqcdn.com www.youtube.com img6.wsimg.com img1.wsimg.com www.google-analytics.com s.ytimg.com; object-src 'none'; default-src 'self' 'unsafe-inline' img6.wsimg.com img1.wsimg.com; style-src 'self' 'unsafe-inline' img6.wsimg.com img1.wsimg.com; img-src 'self' 'unsafe-inline' img6.wsimg.com img1.wsimg.com www.google-analytics.com 2
default-src *; img-src * data:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; base-uri 'self'; form-action *; frame-ancestors 'self' 2
default-src 'none'; frame-ancestors 'none'; script-src 'self'; img-src 'self'; style-src 'self'; base-uri 'self'; form-action 'self'; 2
report-uri https://www.yelp.com/csp_block?id=e0c34fa9cca9449f&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609204650; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com 'strict-dynamic' 'nonce-MTk1ODk0NTA3Nyw5NDExMTI2Mzc='; report-uri https://exceptions.hubspot.com/csp/report; 1
child-src blob:; connect-src 'self' https: wss://ws.airbnb.com https://netverify.com https://*.netverify.com wss: *.amap.com https://*.mapbox.com; default-src 'self' https: blob:; font-src 'self' data: https://*.muscache.com fonts.gstatic.com https://use.typekit.net; frame-src * https://*.cardinalcommerce.com; img-src 'self' https: data: https://*.mapbox.com blob:; media-src 'self' https: blob:; script-src 'self' 'unsafe-eval' https://a0.muscache.com https://cdn.siftscience.com https://ss.musthird.com https://t1.musthird.com https://bat.bing.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://a.cdn.intentmedia.net https://maps.googleapis.com https://ajax.googleapis.com https://*.g.doubleclick.net https://www.google.com https://www.gstatic.com https://smartlock.google.com https://accounts.google.com https://app.link https://cdn.branch.io https://api.branch.io https://bam.nr-data.net https://js-agent.newrelic.com https://sslwidget.criteo.com https://static.criteo.net https://dis.criteo.com https://widget.us.criteo.com https://*.gbc.criteo.net https://ethn.io https://s.yimg.jp https://api.geetest.com https://cdn.ampproject.org https://storage.googleapis.com/workbox-cdn/ https://tagmanager.google.com https://pay.google.com https://songbird.cardinalcommerce.com/ https://www.recaptcha.net https://www.gstatic.cn 'sha256-rAm9O8JPZLtQmd84zMDzhsG5q35JscESxxcaFL7+DDc=' 'sha256-ck0NYnSq6evDrSU3QAgDAso6GSMHXE8SDlqTKWnxpKI=' 'sha256-sO4dzj4GCPy/fjcfZxvf9FaqfYdAw3bHeAjnjqMO0Us=' 'sha256-+DMqUACVS8B0N29g0M3MeqqvH2pF88VHSCl59PH+Z0Q=' 'sha256-2/yXkkTVHnugYrntfDcr3lt7RqMS4ygfw4RRB1zP0VM=' 'sha256-IHl3vH+GqA+cA317zSZ1UMqVGO7oeUm5eQmDuO1DSF0=' https://netverify.com https://*.netverify.com https://icm.aexp-static.com https://qicm.americanexpress.com https://qwww435.americanexpress.com https://checkout.americanexpress.com https://www.paypalobjects.com https://c.paypal.com https://www.paypal.com blob: https://vdata.amap.com https://webapi.amap.com https://restapi.amap.com https://*.mapbox.com https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://includes.ccdc02.com https://includestest.ccdc02.com https://js.stripe.com; style-src 'self' https: 'unsafe-inline' https://*.mapbox.com; worker-src 'self'; report-uri /tracking/csp?controller=core-guest-loop&action=%2F&req_uuid=c7e35e70-4750-4dc2-beee-1bf5159fa911&version=sha%3D1507a2800e4&report_only=false; report-to /tracking/csp?controller=core-guest-loop&action=%2F&req_uuid=c7e35e70-4750-4dc2-beee-1bf5159fa911&version=sha%3D1507a2800e4&report_only=false 1
script-src 'report-sample' 'nonce-ji7Ixbwd0/XXuKhBWh6pZQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport 1
frame-ancestors 'self' *.pathfactory.com *.lookbookhq.com *.newrelic.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'nonce-OSwxMjYsOTUsOTMsNjUsMTYxLDk5LDI1MA==' https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://ssl.google-analytics.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://hcaptcha.com https://*.hcaptcha.com https://s.ytimg.com/yts/jsbin/ https://www.youtube.com/iframe_api; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hcaptcha.com https://hcaptcha.com; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://cdn.discordapp.com https://hackerone-api.discord.workers.dev/user-avatars/ https://safety.discord.com https://discordmoderatoracademy.zendesk.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://discordapp.com https://discord.com https://connect.facebook.net https://api.greenhouse.io https://api.github.com https://sentry.io https://www.google-analytics.com https://hackerone-api.discord.workers.dev https://*.hcaptcha.com https://hcaptcha.com ws://127.0.0.1:* http://127.0.0.1:*; media-src 'self' https://cdn.discordapp.com/assets/; frame-src https://discordapp.com/domain-migration https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://www.youtube.com/embed/ https://hackerone.com/631fba12-9388-43c3-8b48-348f11a883c0/; 1
frame-ancestors https://*.facebook.com https://*.parallels.com https://*.parallels.cn https://*.prls.net; 1
default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com ; img-src 'self' data: blob: https://www.google-analytics.com https://www.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com ; 1
frame-ancestors https://www.icicibank.com https://rmwb.icicibank.com https://ipfms.icicibank.com https://imbuat.icicibank.com https://cibnext.icicibank.com https://help.icicibank.com https://infiniteindia.icicibank.com 1
frame-ancestors 'self' https://cms.qz.com; upgrade-insecure-requests 1
default-src 'none';base-uri 'self';form-action platform.twitter.com syndication.twitter.com;frame-ancestors 'none';script-src 'self' 'unsafe-inline' stackpath.bootstrapcdn.com www.google-analytics.com code.jquery.com platform.twitter.com api.github.com www.ziprecruiter.com api.ziprecruiter.com 'nonce-YzAyZjJkNzAtZTRkOS00NDYyLTg4MjItOWFkYjhjOTkxNjJi';style-src 'self' 'unsafe-inline' stackpath.bootstrapcdn.com fonts.googleapis.com platform.twitter.com;img-src 'self' data: www.google-analytics.com bootswatch.com stats.g.doubleclick.net ad.doubleclick.net *.convertro.com *.c3tag.com *.2mdn.net launchbit.com www.launchbit.com www.ziprecruiter.com;font-src 'self' stackpath.bootstrapcdn.com fonts.gstatic.com;frame-src 'self' img.shields.io platform.twitter.com syndication.twitter.com;child-src 'self' img.shields.io platform.twitter.com syndication.twitter.com;connect-src syndication.twitter.com;object-src img.shields.io;manifest-src 'self' 1
object-src 'none'; base-uri 'none'; script-src https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/ https://cdn.ampproject.org/rtv/ https://ngastatic.com https://www.googletagmanager.com https://assets.allegrostatic.com https://adservice.google.pl https://adservice.google.com https://securepubads.g.doubleclick.net https://ad.doubleclick.net https://allegro.hit.gemius.pl https://connect.facebook.net https://nebula-cdn.kampyle.com https://www.googletagservices.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.youtube.com https://player.vimeo.com https://www.googleadservices.com https://s.ytimg.com https://www.google-analytics.com https://secure.payu.com https://maps.googleapis.com https://*.go-mpulse.net 'nonce-yC/AsO7N2LItTMcUAC6ypg==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' 'report-sample'; block-all-mixed-content; report-uri https://edge.allegro.pl/seclog/csp; 1
frame-ancestors 'self' https://adp.lookbookhq.com http://adp.lookbookhq.com https://discover.adp.com http://discover.adp.com https://*.adp.com http://*.adp.ca https://*.adp.ca; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.joomla.org https://*.pingdom.net https://*.googleapis.com https://*.doubleclick.net https://*.amazon-adsystem.com https://completion.amazon.com; style-src 'self' 'unsafe-inline' https://*.joomla.org https://hcaptcha.com https://*.hcaptcha.com https://fonts.googleapis.com; connect-src 'self' https://*.joomla.org https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com https://*.google.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.slideshare.net; font-src 'self' https://fonts.gstatic.com https://*.joomla.org; img-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com https://*.joomla.org https://*.pingdom.net https://*.doubleclick.net https://*.gstatic.com https://*.google.com https://*.googleapis.com https://img.youtube.com  https://i1.ytimg.com https://i.ytimg.com https://i9.ytimg.com https://s.ytimg.com https://*.amazon-adsystem.com https://*.ssl-images-amazon.com https://*.assoc-amazon.com https://m.media-amazon.com https://opensourcematters.org https://*.opensourcematters.org; media-src 'self' https://*.googlevideo.com; report-uri https://joomla.report-uri.com/r/t/csp/enforce 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' mailto: data: census.gov *.census.gov http://www.census.gov 2020census.gov *.2020census.gov cep.gov house.gov *.house.gov senate.gov *.senate.gov *.sharethis.com *.ytimg.com *.consensu.org *.addthis.com *.moatads.com *.exelator.com *.youtube.com *.twitter.com *.facebook.net *.facebook.com *.google-analytics.com *.google.com *.gstatic.com *.googleapis.com *.googlecode.com *.googletagmanager.com *.doubleclick.net *.jquery.com *.alicdn.com  *.highcharts.com *.adobe.com *.adobedtm.com *.amsadobe.com *.demdex.net *.omtrdc.net *.everesttech.net *.arcgisonline.com *.digitalgov.gov *.calendarwiz.com *.tableau.com *.instagram.com *.go-mpulse.net *.cspan.org; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.google.com https://maps.googleapis.com https://s.go-mpulse.net; object-src 'self'; 1
frame-ancestors 'self' acs.virtualeventsengine.com virtualexhibits360.com psav.digital 1
block-all-mixed-content; report-uri /csp-report?p=; base-uri 'none'; default-src 'none'; style-src 'unsafe-inline' 'self' https://*.stripecdn.com; connect-src 'self' https://errors.stripe.com https://*.stripecdn.com https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://ga.clearbit.com; font-src 'self' https://*.stripecdn.com; frame-src 'self' https://*.stripecdn.com https://www.googletagmanager.com; img-src 'self' https://*.stripecdn.com https://q.stripe.com https://images.ctfassets.net https://assets.ctfassets.net https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com data:; media-src 'self' https://*.stripecdn.com https://videos.ctfassets.net; script-src 'self' 'sha256-6hCrKkhcyMhhMFEfSpCTaBOu2I3bF+wiEjLQdI7s+jQ=' 'sha256-cCM0Z4lzGkzQnmbdVw+ouz0JRawyaKcZ4yiqzqYS7ek=' 'sha256-Dl4kDTvi3IPO83pu8XmRKoIW4XAR53R9h9gRPskUbdc=' 'sha256-beLzNcen8LrazzSCRjAapoIMTgJI0osPWGNSX7aK6lc=' https://*.stripecdn.com https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net 'sha256-ELZBkO1eLwWs6QKigj+FQzktzusJRQek0e2CLudl4N8=' https://www.googletagmanager.com https://ga.clearbit.com 'report-sample' 1
default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm; 1
frame-ancestors 'self' *.shopeemobile.com *.shopee.co.id *.shopee.cn *.facebook.com;  1
connect-src 'self' https: wss://www.fool.com wss://*.33across.com wss://*.hotjar.com https://api.pink-boat.fool.com; media-src 'self' https:; font-src 'self' data: https: https://fonts.gstatic.com; img-src 'self' data: https: https://g.foolcdn.com http://px.moatads.com https://optimize.google.com https://www.google-analytics.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://optimize.google.com https: https://evs.pink-boat.fool.com; style-src 'self' data: 'unsafe-inline' https: http://fonts.googleapis.com https://fonts.googleapis.com https://optimize.google.com; upgrade-insecure-requests; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https:; frame-src 'self' https: https://optimize.google.com 1
base-uri 'self';  form-action 'self' https://*.facebook.com https://plus.ouedkniss.com  https://pubs.ouedkniss.com https://images.ouedkniss.com ; object-src 'self'; frame-ancestors 'self'; default-src data: 'self' 'unsafe-inline' 'unsafe-eval' https://*.ouedkniss.com https://*.criteo.com https://*.criteo.net https://*.googletagservices.com https://*.google-analytics.com https://*.cloudfront.net https://*.doubleclick.net https://*.google.dz https://*.alexametrics.com https://*.google.com https://*.googlesyndication.com https://*.autobip.com https://*.facebook.com https://*.facebook.net https://*.jquery.com https://*.gstatic.com https://*.tripadvisor.com https://*.googleapis.com https://*.google.fr https://*.doubleclick.net https://*.gstatic.com https://*.ampproject.org https://*.tripadvisor.com https://*.tripadvisor.fr https://*.facebook.com https://partner.googleadservices.com https://www.googletagmanager.com https://www.googleadservices.com https://annuaire.ouedkniss.com 1
default-src 'self' https://www.freebsd.org/ https://docs.freebsd.org/; style-src 'self' https://www.freebsd.org/ https://docs.freebsd.org/ 'unsafe-inline'; script-src 'self' https://www.freebsd.org/ https://docs.freebsd.org/ https://ssl.google-analytics.com/ga.js 'unsafe-inline' resource: data: blob:; img-src 'self' https://www.freebsd.org/ https://docs.freebsd.org https://ssl.google-analytics.com/ https://chart.googleapis.com/ data: blob:; upgrade-insecure-requests 1
frame-ancestors 'self' https://banaozel.sahibinden.com 1
default-src 'self'; img-src https: data: 1
default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' *.messenger.com;style-src data: blob: 'unsafe-inline' * *.messenger.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm *.messenger.com wss://*.messenger.com:*;font-src *.messenger.com *.facebook.com https://*.fbcdn.net data:; 1
frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.teams.microsoft.us teams.microsoft.us *.teams.office.com *.skype.com outlook.office.com outlook-sdf.office.com outlook.office365.com outlook-sdf.office365.com outlook.live.com outlook-sdf.live.com 1
default-src 'self' data: https://*.pcdn.co http://*.pcdn.co https://www.google-analytics.com https://www.googletagmanager.com http://www.googleadservices.com https://*.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat http://t.co https://*.facebook.com https://*.facebook.net https://*.quora.com http://trk.in25app.com https://*.ads-twitter.com https://*.media.net http://*.media.net https://*.cookiepro.com https://*.onetrust.com https://*.twitter.com https://*.youtube.com https://*.ytimg.com https://noembed.com https://cdn.plyr.io https://*.akamaihd.net https://*.googleapis.com  https://*.googleusercontent.com https://*.gstatic.com https://*.consensu.org https://*.livechatinc.com/ https://*.ads.linkedin.com/ https://*.linkedin.com/  'unsafe-inline'; 1
upgrade-insecure-requests; frame-ancestors 'self' *.nhs.uk 1
frame-ancestors 'self' *.shopeemobile.com *.shopee.vn *.shopee.cn *.facebook.com;  1
frame-ancestors 'self'; default-src 'self' 'unsafe-eval' 'unsafe-inline' http://q-xx.bstatic.com http://dom.jtb.co.jp secure.worldpay.com centinelapi.cardinalcommerce.com images.krisshop.com http://pix6.agoda.net maps.gstatic.com *.googleapis.com *.ggpht.com edge.prod-ext.api.manulife.com  cm.g.doubleclick.net fcmatch.google.com fcmatch.youtube.com www.trinaxmind.com api-us.faceplusplus.com cdn.glassboxcdn.com report.gbpilot.glassboxdigital.io report.dbs.glassboxdigital.io s.ytimg.com  idealanalyticsapi.dbs.com vc.hotjar.io dbs.com.sg https://qmslivechat.dbs.com www.orangeteeproperties.com storage.googleapis.com v1.addthisedge.com v1.addthis.com ampcid.google.com adservice.google.com ad.doubleclick.net ampcid.google.com.sg amp-error-reporting.appspot.com cdn.ampproject.org ssl.gstatic.com i.travelapi.com http://www.tripadvisor.com marketplace.dbs.com.sg marketplace-pilot.dbs.com.sg avp.blob.core.windows.net marketplace-pilot.dbs.com in.hotjar.com prod2-content-care-community-cdn.sprinklr.com script.hotjar.com vars.hotjar.com http://www.outbrain.com static.hotjar.com pixel.tapad.com res.cloudinary.com sc4.omniture.com authorize.omniture.com authorize.omniture.com sitecatalyst.omniture.com marketplace.dbs.com tagmanager.google.com wss://chatbanking.dbs.com gllt.morningstar.com img.tepcdn.com wss://qmslivechat.dbs.com platform-lookaside.fbsbx.com http://chart.googleapis.com http://tags.crwdcntrl.net http://bs.serving-sys.com cdn.jsdelivr.net http://www.dbs.com.sg prod2-content.sprinklr.com prod2-care-community-cdn.sprinklr.com *.akstat.io directline.botframework.com www.dbs.com.sg qmslivechat.dbs.com cdnjs.cloudflare.com www.gstatic.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.google.com certify.alexametrics.com www.dbs.com.sg www.youtube.com www.linkedin.com www.google.com.sg bcp.crwdcntrl.net www.dbs.com www.googleapis.com ajax.googleapis.com maps.gstatic.com fonts.googleapis.com property.atomic-marketplace.com www.facebook.com dc.ads.linkedin.com chatbanking.dbs.com bat.bing.com tr.outbrain.com snap.licdn.com chart.googleapis.com assets.adobedtm.com dbs.tt.omtrdc.net somniture.dbs.com.sg dpm.demdex.net dbs.demdex.net www.posb.com.sg farm-sg.plista.com amplifypixel.outbrain.com js.adsrvr.org s.go-mpulse.net c.go-mpulse.net maxcdn.bootstrapcdn.com sjs.bizographics.com tags.crwdcntrl.net code.jquery.com tpt.mysocialpixel.com www.dbs.com.sg use.fontawesome.com ds-aksb-a.akamaihd.net googleads.g.doubleclick.net px.ads.linkedin.com bs.serving-sys.com secure-ds.serving-sys.com ssl.google-analytics.com connect.facebook.net chatbanking-uat.dbs.com qmslivechat.dbs.com i.ytimg.com scrbizim.xyz insight.adsrvr.org www.google.co.in cx.atdmt.com *.2o7.net *.omtrdc.net *.tt.omtrdc.net *.demdex.net secure.marketinghub.hp.com m.addthisedge.com m.addthis.com s7.addthis.com graph.facebook.com api-public.addthis.com atomic-marketplace.com i.i-sgcm.com s3-ap-southeast-1.amazonaws.com by.essl.optimost.com secure.marketinghub.opentext.com chatbanking-sit.dbs.com stats.g.doubleclick.net maps.googleapis.com amplify.outbrain.com fonts.gstatic.com prod2-sprcdn-assets.sprinklr.com prod2-sprcdn.sprinklr.com lookaside.facebook.com www.sprinklr.com api-01.ubx.ibmmarketingcloud.com s7.addthis.com dbs.demdex.net platform.twitter.com d31qbv1cthcecs.cloudfront.net bid.g.doubleclick.net cdn-akamai.mookie1.com tags.tiqcdn.com wss://directline.botframework.com directline.com *.akamaihd.net *.fls.doubleclick.net wss://directline.botframework.com directline.botframework.com directline.com blob: data:; style-src 'self' 'unsafe-inline' tagmanager.google.com prod2-care-community-cdn.sprinklr.com chatbanking.dbs.com qmslivechat.dbs.com wss://directline.botframework.com fonts.googleapis.com graph.facebook.com maxcdn.bootstrapcdn.com directline.botframework.com www.dbs.com.sg cug-www.dbsvonline.com cug-www.dbsvickers.com directline.com chatbanking.dbs.com; 1
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; object-src 'none'; worker-src 'self'; upgrade-insecure-requests; block-all-mixed-content; sandbox allow-forms allow-same-origin allow-scripts allow-modals allow-popups allow-popups-to-escape-sandbox allow-presentation 1
block-all-mixed-content; frame-ancestors 'self'; 1
frame-ancestors 'self' *.shopeemobile.com *.shopee.com.my *.shopee.cn *.facebook.com;  1
default-src 'self' data: blob: *.mega.co.nz *.mega.nz http://*.mega.co.nz http://*.mega.nz wss://*.karere.mega.nz *.karere.mega.nz:1380 http://127.0.0.1:6341 localhost.megasyncloopback.mega.nz:6342; script-src 'self' *.mega.co.nz *.mega.nz data: blob:; style-src 'self' 'unsafe-inline' *.mega.co.nz *.mega.nz data: blob:; frame-src 'self' mega: *.megaad.nz; img-src 'self' *.mega.co.nz *.mega.nz data: blob: 1
frame-ancestors https://*.frontier.com https://frontier.com http://*.ftr.com https://*.ftr.com http://*.corp.pvt:* https://*.corp.pvt:*; 1
script-src 'nonce-6f93925cd5a14a9638896dddcdb5ce8f' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=6299950494823879; frame-ancestors 'self' 1
default-src https: wss: data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri https://seekingalpha.com/report/csp 1
frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.thoughtco.com 1
default-src 'self' *.ecosia.org data: *.sentry.io; script-src 'sha256-KTDFkjLFDkEw7ubSpJFGPsKQsS0RRJdVtHteoO6rG8Q=' 'self' 'self' *.ecosia.org *.sentry.io dy1cy3yp6fd82.cloudfront.net; img-src 'self' *.ecosia.org s3.amazonaws.com data: ecosia-notifications.ghost.io; style-src 'self' *.ecosia.org 'unsafe-inline'; connect-src 'self' *.ecosia.org *.sentry.io; frame-ancestors 'none' 1
default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-TjuN+b7xqlFhMg6WMLZiQYGywHHbI3dccCUBeBUUNm0UEGd4' 'self' 'unsafe-inline' 'unsafe-eval' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; font-src 'self' https://*.paypal.com https://*.paypalobjects.com data:; object-src 'none'; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.paypal.com https://nexus.ensighten.com https://*.go-mpulse.net https://*.akstat.io https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; block-all-mixed-content;; report-uri https://www.paypal.com/csplog/api/log/csp 1
default-src 'self' ; img-src 'self' https://*.lmiutil.com/  https://sp1.convertro.com/api/hit/lastpass/ https://www.google-analytics.com/ https://*.company-target.com/ https://logmeincdn.azureedge.net/ https://*.company-target.com/* https://*.lastpass.com https://lastpass.com https://*.go-mpulse.net https://*.akstat.io/ data: https://*.g2.com  https://*.akstat.io/ https://*.go-mpulse.net https://*.company-target.com/* https://*.adnxs.com/ https://*.doubleclick.net https://*.google-analytics.com https://www.google.com https://www.facebook.com/tr https://t.co/i/adsct https://analytics.twitter.com/i/adsct https://img.youtube.com https://adfarm.mediaplex.com/ad/bk/ https://*.rfihub.com/ https://secure.leadback.advertising.com https://secure.ace-tag.advertising.com https://iad-login.dotomi.com  https://*.company-target.com/ https://www07.clicktale.net/ https://lastpass-sc.usva.logmeinx.com/ https://lastpass-sc.usca.logmeinx.com/ https://lastpass-sc.usil.logmeinx.com/ https://lastpass-sc.ustx.logmeinx.com/ https://lastpass-sc.defr.logmeinx.com/ https://lastpass-sc.ukay.logmeinx.com/ https://lastpass-sc-gamma.usca.logmeinx.com/ https://*.logmeinx.com https://d.adroll.com https://secimg.vmmpxl.com https://rs.gwallet.com https://s-cs.send.microad.jp https://pixel.rubiconproject.com https://*.openx.net https://dpm.demdex.net https://ads.yahoo.com https://dsum-sec.casalemedia.com https://simage2.pubmatic.com https://trc.taboola.com https://x.bidswitch.net https://idsync.rlcdn.com https://stags.bluekai.com https://ums.adtechus.com https://io.narrative.io https://atemda.com https://t.brand-server.com https://pixel.quantserve.com; object-src 'self' https://*.akstat.io/ https://*.go-mpulse.net https://*.googlevideo.com https://*.youtube.com https://*.youtube.com https://*.ytimg.com https://*.ytimg.com https://www.google.com https://youtube.googleapis.com; connect-src 'self'  https://*.cardinalcommerce.com https://*.akstat.io/ https://*.go-mpulse.net https://*.lastpass.com https://lastpass.com wss://*.lastpass.com https://*.optimizely.com https://5399020466.log.optimizely.com  https://pollserver.lastpass.com https://loglogin.lastpass.com https://*.clicktale.net https://dc.services.visualstudio.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cardinalcommerce.com https://*.lmiutil.com/  https://logmeincdn.azureedge.net https://fonts.googleapis.com/ https://*.lastpass.com https://lastpass.com https://html-lastpass-develop.azurewebsites.net https://html-lastpass-master.azurewebsites.net; plugin-types application/x-invalid-type application/pdf ; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://*.cardinalcommerce.com https://cdn.lmiutil.com/ https://*.go-mpulse.net https://cdn.lmiutil.com/lpassets/clicktale/ https://lastpass.com/m.php/quickdl2 https://*.cybersource.com/  https://www.google-analytics.com https://www.googletagmanager.com https://www.google-analytics.com/ https://www.googletagmanager.com/ https://logmeincdn.azureedge.net https://cdn.clicktale.net/ https://*.lastpass.com https://lastpass.com https://www.youtube.com https://*.ytimg.com https://cdnssl.clicktale.net/ https://www.sc.pages04.net https://cdn.getsmartcontent.com/ https://api.bizographics.com https://us-east-1.profile-api.ads.linkedin.com https://s.getsmartcontent.com https://az416426.vo.msecnd.net ; font-src 'self' 'unsafe-inline' 'unsafe-eval'  https://litmus.com https://lmistatic.blob.core.windows.net/ https://fonts.gstatic.com/ https://*.lastpass.com https://lastpass.com; media-src ;frame-src *;frame-ancestors 'self'  https://*.lookbookhq.com https://*.pathfactory.com https://*.logmein.com https://*.lastpass.com;worker-src https://*.lastpass.com blob: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.doubleclick.net/ https://ad.atdmt.com/ https://bat.bing.com/ https://code.jquery.com/ https://connect.facebook.net/ https://f.vimeocdn.com/ https://img.en25.com/ https://js-agent.newrelic.com/ https://snap.licdn.com/ https://static.ads-twitter.com/ https://tracker.marinsm.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://s1659.t.eloqua.com/ https://sjs.bizographics.com https://j.6sc.co/ https://px.ads.linkedin.com https://analytics.twitter.com https://www.linkedin.com https://bam.nr-data.net https://tag.demandbase.com https://*.company-target.com https://*.bidr.io https://*.rlcdn.com https://gateway.zscaler.net https://translate.google.com https://geolocation.onetrust.com https://optanon.blob.core.windows.net https://cdn.cookielaw.org https://trk.techtarget.com https://api.rollbar.com https://pcdnscwx001.azureedge.net https://ajax.googleapis.com https://*.drift.com https://*.driftt.com https://*.simplecast.com https://*.crazyegg.com https://tagmanager.google.com https://live-scwx-pe.pantheonsite.io; report-uri https://scwx.report-uri.com/r/d/csp/reportOnly; 1
frame-ancestors https://www.surveymonkey.com https://google.com https://app.asana.com https://blog.asana.com https://academy.asana.com 1
default-src 'self' *.binomo.com *.binomo.com; child-src *; connect-src 'self' analytics.tiktok.com *.adroll.com static.criteo.net static.ads-twitter.com bat.bing.com sc-static.net tr.snapchat.com top-fwz1.mail.ru *.hotjar.io *.hotjar.com wss://*.hotjar.com stats.g.doubleclick.net *.optimizely.com *.zopim.com *.launchdarkly.com api.exponea.com ekr.zdassets.com analytics.google.com fcm.googleapis.com www.googleapis.com www.google-analytics.com wss://*.zopim.com binomo.zendesk.com app.getsentry.com *.binomo.com *.binomo.com wss://as.binomo.com:* wss://as.binomo.com:* wss://ws.binomo.com:* wss://ws.binomo.com:* s.yimg.com; font-src data: 'self' *.zopim.com themes.googleusercontent.com *.binomo.com *.binomo.com; img-src * data:; media-src 'self' *.binomo.com *.binomo.com; script-src 'self' static.ads-twitter.com sc-static.net tr.snapchat.com *.hotjar.io *.hotjar.com www.redditstatic.com *.googleoptimize.com *.doubleclick.net *.google.com assets.zendesk.com static.zdassets.com *.zopim.com wss://*.zopim.com *.zopim.io binomo.co *.adroll.com static.criteo.net *.getsitecontrol.com binstats.com *.googletagmanager.com *.google-analytics.com echo.ecortb.com connect.facebook.net vk.com *.youtube.com s.yimg.com s.ytimg.com bat.bing.com www.gstatic.com www.googleadservices.com binomo.go2affise.com api.exponea.com *.adnetwork.vn storage.googleapis.com sp.analytics.yahoo.com top-fwz1.mail.ru 'unsafe-eval' 'unsafe-inline' *.binomo.com *.binomo.com; style-src 'self' *.google.com fonts.googleapis.com 'unsafe-inline' *.binomo.com *.binomo.com 1
frame-ancestors 'self' *.app.clicktale.com app.optimizely.com analytics.google.com; 1
default-src https: data: vine:;img-src 'self' data: https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.twimg.com https://*.cdn.vine.co https://media.vineapp.com https://t.co https://analytics.twitter.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://twemoji.maxcdn.com https://twitter.github.io/;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vine.co https://*.twitter.com https://vines.s3.amazonaws.com https://archive.vine.co https://*.cdn.vine.co https://platform.vine.co https://stats.g.doubleclick.net https://ssl.google-analytics.com https://ajax.googleapis.com https://connect.facebook.net;style-src 'self' 'unsafe-inline' https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.cdn.vine.co;media-src 'self' blob: https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.twimg.com https://*.cdn.vine.co https://*.vncdn.co https://media.vineapp.com;object-src 'self' blob: https://vine.co https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.twimg.com https://*.cdn.vine.co https://media.vineapp.com;connect-src 'self' https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.twimg.com https://*.cdn.vine.co https://media.vineapp.com https://graph.facebook.com;font-src 'self' https://vine.co https://vines.s3.amazonaws.com https://archive.vine.co https://*.cdn.vine.co;report-uri https://twitter.com/i/csp_report?a=OZUW4ZI=&ro=false 1
frame-ancestors 'self' *.globalsources.com *.asiansources.com *.globalsources.com.hk; 1
default-src 'self' blob: ; style-src https: 'self' 'unsafe-inline' blob: *.onetrust.com fast.wistia.com *.wistia.com *.wistia.net *.chargebee.com js.chargebee.com *.chargebeestatic.com *.cloudfront.net *.greenhouse.io *.onetrust.local *.youtube-nocookie.com *.googleleadservices.com *.cookiebanners.com *.g2.com *.otprivacy.com ;script-src 'self' 'unsafe-inline' blob: 'unsafe-eval'  fast.wistia.com *.wistia.com *.wistia.net *.onetrust.com *.cookielaw.org *.googletagmanager.com *.chargebee.com js.chargebee.com *.chargebeestatic.com *.cloudfront.net *.amazonaws.com *.gstatic.com *.google.com *.greenhouse.io *.onetrust.local onetrust.local *.google-analytics.com *.youtube-nocookie.com *.bizographics.com *.bing.com *.en25.com *.googleleadservices.com *.eloqua.com *.licdn.com *.googleadservices.com *.linkedin.com *.otprivacy.com;font-src https: 'self' data: *.googletagmanager.com fonts.google.com;img-src * data: fast.wistia.com *.wistia.com *.wistia.net *.akamaihd.net *.greenhouse.io *.onetrust.com *.g2.com *.otprivacy.com ; media-src 'self' blob: data: *.wistia.com *.wistia.net *.akamaihd.net *.youtube-nocookie.com *.g2.com *.otprivacy.com;object-src 'none'; frame-ancestors 'self'; frame-src 'self' fast.wistia.com *.wistia.com *.wistia.net *.onetrust.com *.cookielaw.org *.googletagmanager.com *.chargebee.com js.chargebee.com *.chargebeestatic.com *.cloudfront.net *.greenhouse.io *.youtube-nocookie.com *.google.com *.gstatic.com *.cookiebanners.com *.g2.com *.otprivacy.com;connect-src 'self' data: * pipedream.wistia.com distillery.wistia.com embed-e.wistia.com *.wistia.com *.wistia.net *.chargebeestatic.com *.g2.com ; 1
frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.thebalancecareers.com 1
frame-ancestors 'self' https://*.justia.com http://*.justia.com 1
frame-ancestors http://*.crionline.cn http://*.cri.cn 1
script-src 'nonce-ba85993bd5f1ee61578eed8053682a0e' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=1865191887104812; frame-ancestors 'self' 1
default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data: 'unsafe-inline'; manifest-src 'self'; media-src *; object-src 'none'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; worker-src 'self'; base-uri 'self'; form-action *; frame-ancestors 'self' http://content.to https://content.to 1
script-src 'sha256-UpGwIV/Gv0LKSJPGL+C/6H43EvJge1xCtEo7g6m9ZPE=' 'nonce-yg7MI8cvz6rYmoAJ+vyTuQ==' 'self' 'unsafe-inline' https://note.com https://d291vdycu0ht11.cloudfront.net https://d2l930y2yx77uc.cloudfront.net https://polyfill.io https://www.clarity.ms https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com/firebasejs https://*.facebook.net https://platform.twitter.com https://*.twimg.com cdn.iframe.ly https://cdn.embedly.com https://*.tiktok.com https://*.tiktokcdn.com https://*.ibytedtos.com https://speakerdeck.com https://*.flickr.com https://*.mul-pay.jp https://*.canva.com; object-src 'none'; base-uri 'self' 1
default-src 'self' blob: ; style-src https: 'self' 'unsafe-inline' *.onetrust.com *.wistia.com *.wistia.net *.chargebee.com *.chargebeestatic.com *.cloudfront.net *.greenhouse.io *.cookielaw.org ;script-src 'self' 'unsafe-inline' blob: 'unsafe-eval'  *.wistia.com *.wistia.net *.cookielaw.org *.googletagmanager.com *.chargebee.com *.chargebeestatic.com *.cloudfront.net *.amazonaws.com *.greenhouse.io *.google-analytics.com *.cookiepro.com *.en25.com *.bing.com *.ads-twitter.com *.twitter.com *.1trust.app *.onetrust.com *.eloqua.com *.google.com *.gstatic.com;font-src https: 'self' data: *.googletagmanager.com fonts.google.com;img-src * data: *.wistia.com *.wistia.net *.akamaihd.net *.greenhouse.io *.onetrustpro.com ; media-src 'self' blob: data: *.wistia.com *.wistia.net *.akamaihd.net;object-src 'none'; frame-ancestors 'self'; frame-src 'self' *.wistia.com *.wistia.net *.cookielaw.org *.googletagmanager.com *.chargebee.com js.chargebee.com *.chargebeestatic.com *.cloudfront.net *.greenhouse.io *.cookielaw.org *.google.com;connect-src 'self' data: * ; 1
font-src 'self' fonts.gstatic.com; base-uri 'none'; object-src 'none'; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://accounts.google.com/gsi/status https://accounts.google.com/gsi/log https://releases.wagtail.io https://login.thinkwithgoogle.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com/gsi/style; img-src 'self' data: *.googleapis.com https://*.googleadservices.com *.google-analytics.com *.googletagmanager.com https://*.doubleclick.net https://*.google.com *.youtube.com https://*.ytimg.com https://*.googleusercontent.com https://www.google.com.co/ads/ga-audiences; frame-src 'self' *.googletagmanager.com *.doubleclick.net https://*.google.com https://*.youtube.com https://accounts.google.com/; script-src 'self' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.googleadservices.com https://*.youtube.com https://*.ytimg.com https://apis.google.com https://accounts.google.com/gsi/client 'sha256-X/2y0k5CqBhwyz7GjCuTbjDh8SEG3n0yZQXUof0iutg=' 'sha256-NcpdQlNlNRkHugLjvly0tTsNmv1u+XFNMVyZJt9OME8=' 'sha256-X0JWsAG/k2sIeTfXAL+VH5SdA6bef2aT/CoRG/FEQFc=' 'sha256-uV3MJak3jcDQZeDpjoi5NuUOKAQe8qE+Z+MpOCWxhpE=' 'sha256-Bv1iXGLhTynxdNruU+taauqCn9hasRiuUf78c9KuhE8=' 'sha256-p8DHh8ADxJ+fxRhMf8/63d8uDUhed5gGb94GSjXk/mo=' 'sha256-0Cqwq2yr0A7o9kZpqY/cNveUUoUADOFM99v4/8FS4i4=' 'sha256-iesGR3JHRGeyvATAtjwQmvlAioN6sazp6KuT/uKGobQ=' 'sha256-QANjaoIfOQm9O/Caf6DcNtAQEU052VPjPZkZCkqFlbc='; default-src 'self' 1
frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.thespruce.com 1
report-uri https://csp.yandex.net/csp?project=morda&from=morda.big.ru&showid=1609219908.28134.82711.141500&h=stable-morda-sas-yp-35&csp=new&date=20201229&yandexuid=1405258981609219908;img-src an.yandex.ru gdero.hit.gemius.pl yastat.net amc.yandex.ru data: awaps.yandex.ru auto.ru content.adfox.ru strm.yandex.net ads.adfox.ru strm.yandex.ru awaps.yandex.net banners.adfox.ru gdeby.hit.gemius.pl pixel.adlooxtracking.com wcm-ru.frontend.weborama.fr mc.yandex.ru www.kinopoisk.ru www.maximonline.ru ad.adriver.ru ad.doubleclick.net favicon.yandex.net resize.yandex.net px.moatads.com avatars.mds.yandex.net yandex.ru ads6.adfox.ru *.mediascope.mc.yandex.ru mc.yandex.com zen.s3.yandex.net *.tns-counter.ru 'self' s3.mds.yandex.net wcm.solution.weborama.fr yastatic.net verify.yandex.ru avatars-fast.yandex.net *.strm.yandex.net *.verify.yandex.ru zen.yandex.ru mc.admetrica.ru thequestion.ru bs.serving-sys.com;child-src yandex.ru banners.adfox.ru 'self' *.yandex.ru *.yandexadexchange.net zen.yandex.ru yastat.net blob: yandexadexchange.net mc.yandex.ru mc.yandex.md yastatic.net awaps.yandex.net;style-src 'unsafe-inline' yastat.net yastatic.net content.adfox.ru zen.yandex.ru yandex.st banners.adfox.ru;default-src zen.yandex.ru yastatic.net yastat.net awaps.yandex.net awaps.yandex.ru;font-src data: yastatic.net yastat.net zen.yandex.ru an.yandex.ru 'self';media-src blob: data: yastat.net *.strm.yandex.ru banners.adfox.ru *.strm.yandex.net yandex.ru yastatic.net *.yandex.net strm.yandex.ru yandex.st *.cdn.ngenix.net content.adfox.ru;connect-src auto.ru strm.yandex.ru log.strm.yandex.ru awaps.yandex.net ads.adfox.ru wss://push.yandex.ru an.yandex.ru awaps.yandex.ru yastat.net wss://portal-xiva.yandex.net www.kinopoisk.ru www.maximonline.ru wss://webasr.voicetech.yandex.net yabs.yandex.ru games.yandex.ru mc.yandex.ru matchid.adfox.yandex.ru yastatic.net frontend.vh.yandex.ru 'self' portal-xiva.yandex.net ads6.adfox.ru yandex.ru *.cdn.ngenix.net yandex.st thequestion.ru mobile.yandex.net zen.yandex.ru *.strm.yandex.net jstracer.yandex.ru adfox.yandex.ru mc.admetrica.ru *.strm.yandex.ru;script-src ads.adfox.ru yastatic.net yandex.st yastat.net mc.yandex.ru banners.adfox.ru yandex.ru ads6.adfox.ru zen.yandex.ru 'nonce-zVDmeN+giQjBJkQg515wBA==' 'self' an.yandex.ru;object-src avatars.mds.yandex.net 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com 'strict-dynamic' 'nonce-MTQ4MDM4NjM2NCwxOTY4OTQ3MjAw'; report-uri https://exceptions.hubspot.com/csp/report; 1
default-src 'none'; script-src 'nonce-9kWOLc7k3N7roSdxF0utjw==' 'unsafe-inline' https://yastatic.net mc.yandex.ru mc.yandex.com mc.webvisor.com mc.webvisor.org; style-src 'unsafe-inline' https://yastatic.net; img-src 'self' https://yastatic.net mc.yandex.ru mc.yandex.com mc.webvisor.com mc.webvisor.org; font-src yastatic.net; connect-src yandex.ru mc.yandex.ru mc.yandex.com mc.webvisor.com mc.webvisor.org; child-src blob: mc.yandex.ru; frame-src blob: mc.yandex.ru; 1
default-src 'self' *.brightcove.com *.criteo.com *.criteo.net *.demdex.net *.doubleclick.net *.eloqua.com *.ensighten.com *.experian.com *.experiancs.com *.experiandirect.com *.freecreditreport.com *.googleapis.com *.gstatic.com *.hotjar.com *.iesnare.com *.infogram.com *.linkedin.com *.optmster.com *.optmstr.com *.optnmnstr.co *.optnmnstr.com *.optnmstr.com *.powerreviews.com *.soundcloud.com *.tableau.com *.twitter.com *.twonil.com *.vimeo.com *.yahooapis.com *.youtube.com *.hubapi.com *.hubspot.com *.tt.omtrdc.net adobetag.com api.company-target.com api.experianmarketingservices.com api.instagram.com api.jublo.net api.omniture.com app.optinmonster.com assets.adobedtm.com bat.bing.com businesscreditfacts.com cdn.appdynamics.com *.decibelinsight.net cdn.syndication.twimg.com cdn.taboola.com cdnjs.cloudflare.com code.highcharts.com connect.facebook.net contractorcheck.com d.net.google.com d.turn.com dev.visualwebsiteoptimizer.com embed.pscp.tv experianservicescorp.122.2o7.net fbcdn.net forms.hubspot.com freecreditscore.com graph.facebook.com googleapis.com hooks.slack.com img.en25.com info.inbound-bis.com itunes.apple.com js.bizographics.com js.hs-analytics.net js.hs-scripts.com js.hscollectedforms.net jsonip.com js.usemessages.com loadm.exelator.com m.addthis.com m.addthisedge.com maps.google.com maxcdn.bootstrapcdn.com mediaplayer.yahoo.com moodysanalytics.com optinmonster.com pixel.tapad.com play.google.com players.brightcove.net plus.google.com pt.ispot.tv rtd-tm.everesttech.net s.amazon-adsystem.com s.yimg.com s.ytimg.com s7.addthis.com scontent.cdninstagram.com scontent.xx.fbcdn.net scripts.demandbase.com secure.adnxs.com secure.leadback.advertising.com securetracking.adsprotection.com *.xg4ken.com smartbusinessreports.com snap.licdn.com sp.analytics.yahoo.com ssl.google-analytics.com static.ads-twitter.com sync.tidaltv.com tag.demandbase.com tagmanager.google.com trc.taboola.com twemoji.maxcdn.com video.xx.fbcdn.net vjs.zencdn.net widget.surveymonkey.com widgets.outbrain.com https://*.brightfunnel.com http://*.hotjar.com https://*.hotjar.com https://*.hsadspixel.net https://*.jsdelivr.net https://*.mstrlytcs.com https://a.optmnstr.com https://api.optmnstr.com https://autocomplete.demandbase.com http://autocomplete.demandbase.com ws://*.hotjar.com wss://*.hotjar.com wss://*.decibelinsight.net *.edq.com www.facebook.com www.google-analytics.com www.google.com http://www.google.com www.googleadservices.com www.googletagmanager.com www.slideshare.net www.youtube.com globalsiteanalytics.com 'unsafe-inline' 'unsafe-eval' blob:; img-src * data:;font-src * data: 1
frame-ancestors 'none'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-EolxISWES7CxKa9jDkyW/A==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.youtube.com *.yahooapis.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; img-src 'self' data: https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv; media-src * blob:; object-src *; connect-src *; font-src * data:; child-src blob:; 1
frame-ancestors *.skysports.com *.livefyre.com *.google.com *.google.co.uk *.ampproject.org; 1
sandbox allow-forms allow-modals allow-orientation-lock allow-popups allow-popups-to-escape-sandbox allow-presentation allow-same-origin allow-scripts 1
frame-ancestors 'self' *.tdameritrade.com *.ameritrade.com http://*.tdameritrade.com/ https://*.tdainstitutional.com https://*.amtd.com https://amtd.com https://*.tradewise.com https://tdaconferences.com https://*.tdameritradeconferences.com https://*.exploringyourindependence.com https://*.thinkorswim.com https://*.tdameritradenetwork.com https://tdameritradenetwork.com https://*.eliteadvisorsummit.com https://*.essentialoptionstrategies.com; object-src 'self' 1
frame-ancestors *.dowjones.net *.onservo.com 1
default-src 'self' *.filezilla-project.org; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src * blob: 1
script-src 'report-sample' 'nonce-uriroZVg9vEdE7rqbIf30g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport 1
frame-ancestors 'self'; upgrade-insecure-requests; 1
media-src 'self' data: blob: https://*.pscp.tv/ https://*.periscope.tv/ https://*.global.ssl.fastly.net https://*.twimg.com https://*.video.pscp.tv; img-src 'self' data: blob: https://*.pscp.tv/ https://*.periscope.tv/ https://prod-periscope-profile.s3-us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com/prod-periscope-profile/ https://*.twimg.com https://*.googleusercontent.com https://scontent.xx.fbcdn.net https://*.bugsnag.com https://*.google-analytics.com; default-src 'self' blob: https://*.global.ssl.fastly.net https://*.pscp.tv/ https://*.periscope.tv/; object-src 'self' https://*.pscp.tv/ https://*.periscope.tv/; child-src 'self' blob: https://*.pscp.tv/ https://*.periscope.tv/ https://twitter.com https://*.google.com/recaptcha/; frame-ancestors 'self' https://*.pscp.tv/ https://*.periscope.tv/; style-src 'self' blob: 'unsafe-inline' https://*.pscp.tv/ https://*.periscope.tv/; font-src 'self' data: https://*.pscp.tv/ https://*.periscope.tv/; frame-src 'self' blob: https://*.pscp.tv/ https://*.periscope.tv/ https://twitter.com https://periscope-all.firebaseapp.com/ https://*.google.com/recaptcha/ https://*.vimeo.com https://*.tipalti.com; report-uri https://twitter.com/i/csp_report?a=OBSXE2LTMNXXAZJNO5SWE%3D%3D%3D&ro=false; script-src 'self' https://*.pscp.tv/ https://*.periscope.tv/ https://cdn.polyfill.io https://d24n15hnbwhuhn.cloudfront.net https://app.link https://bnc.lt https://*.branch.io https://*.google-analytics.com https://apis.google.com/ https://*.google.com/recaptcha/ https://*.gstatic.com/recaptcha/ https://appleid.cdn-apple.com 'unsafe-eval' 'nonce-d9850d9699954edd86f3134c30f6532e'; connect-src 'self' https://*.pscp.tv/ https://*.periscope.tv/ wss://*.pscp.tv/ wss://*.periscope.tv/ https://*.video.pscp.tv https://*.twimg.com https://twitter.com https://*.global.ssl.fastly.net https://api.amplitude.com/ https://*.branch.io https://bnc.lt https://*.bugsnag.com https://licensing.bitmovin.com/ https://analytics-ingress-global.bitmovin.com https://www.googleapis.com/ https://securetoken.googleapis.com https://s3.us-west-2.amazonaws.com/periscope-user-data-reports-prod/ https://s3.us-west-2.amazonaws.com/periscope-user-data-reports-dev/ https://periscope-user-data-reports-prod.s3.us-west-2.amazonaws.com/ https://periscope-user-data-reports-dev.s3.us-west-2.amazonaws.com/ 1
script-src 'nonce-612e71546a3094a5ff2c6809629998a7' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval'; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=1005540360409068; frame-ancestors 'self' 1
frame-ancestors https://talks.uzone.id https://www.useetv.com https://www.rctiplus.com https://technology.uzone.id https://entertainment.uzone.id https://automotive.uzone.id https://travel.uzone.id https://movie.uzone.id https://hangout.uzone.id http://internetpositif.uzone.id http://mercusuar.uzone.id https://sport.uzone.id https://health.uzone.id https://games.uzone.id https://startup.uzone.id https://telco.uzone.id https://gadget.uzone.id https://digilife.uzone.id https://www.alexa.com https://certify-js.alexametrics.com https://uzone.id 1
frame-ancestors 'self' *.imperial.ac.uk *.ic.ac.uk 1
"default-src 'self';" 1
frame-ancestors 'self' https://*.scotiabank.com https://www.scotiaitrade.com/ https://www.scotialifefinancial.com/ https://www.scotiafunds.com/ http://*.bns https://*.bns https://www.scotiabank.com; 1
default-src * 'unsafe-inline' 'unsafe-eval' data: https: blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com/; img-src 'self' https://www.google-analytics.com/ https://www.paypalobjects.com/ https://stats.g.doubleclick.net/; style-src 'self' 'unsafe-inline'; child-src 'none'; object-src 'none' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com www.google-analytics.com www.googletagmanager.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com; font-src 'self' 'unsafe-inline' 'unsafe-eval'; 1
frame-ancestors *.anjuke.com http://*.anjuke.com *.aifang.com http://*.aifang.com *.58ganji.com http://*.58ganji.com *.58.com http://*.58.com *.jikejia.cn http://*.jikejia.cn http://jikejia.cn yfyk.youfangyouke.com http://yfyk.youfangyouke.com *.58corp.com http://*.58corp.com 1
default-src https:; img-src https: data:; frame-ancestors 'none' 1
upgrade-insecure-requests; default-src https: wss: data: blob: 'unsafe-inline' 'unsafe-eval'; media-src https: data: blob: 'unsafe-inline'; img-src https: data: blob: 'unsafe-inline' android-webview-video-poster: ; report-uri https://csp.ansa.it/report/ 1
base-uri 'self'; default-src 'self'; connect-src 'self' blob: https://*.tenor.co https://*.tenor.com https://*.googleapis.com https://api.tenor.com https://api.tenor.com https://*.google-analytics.com https://*.doubleclick.net https://pixel.mtrcs.samba.tv; script-src 'self' data: https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com https://*.google-analytics.com https://*.facebook.net https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://pixel.mtrcs.samba.tv https://*.google.com 'nonce-YjFjYTA0NGMtMzZiZi00OTc3LThiOTAtODhhNTYwNGVjZjI2' 'unsafe-eval'; style-src 'self' https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com 'unsafe-inline'; font-src 'self' https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com; img-src 'self' blob: data: https://media.tenor.co https://media.tenor.com https://media1.tenor.co https://media1.tenor.com https://*.google-analytics.com https://*.doubleclick.net https://*.facebook.com https://pixel.mtrcs.samba.tv http: https:; media-src 'self' blob: data: https://media.tenor.co https://media.tenor.com https://media1.tenor.co https://media1.tenor.com; frame-src 'self' https://www.google.com/recaptcha/ https://www.facebook.com/tr/ https://*.google.com https://*.googleapis.com; object-src 'none' 1
img-src https: data:; script-src https: 'unsafe-inline' 'unsafe-eval'; object-src https:; worker-src blob:; report-uri https://dailykos.report-uri.io/r/default/csp/enforce; upgrade-insecure-requests; 1
frame-ancestors 'self' www.sprint.com shop.sprint.com mysprint.sprint.com m.sprint.com es.sprint.com sprint.inq.com static.inq.com api-sprint.touchcommerce.com auth-sprint.touchcommerce.com portal-sprint.touchcommerce.com chatrouter-sprint.inq.com cobrowse-sprint.inq.com forms-sprint.inq.com media-sprint.inq.com api.touchcommerce.com auth.touchcommerce.com portal.touchcommerce.com chatrouterv3.inq.com cobrowse.inq.com formsv3.inq.com mediav3.inq.com business.sprint.com smallbusiness.sprint.com stage-er-www.sprint.com opmt.sprint.com tc.sprint.com storelocator.sprint.com storelocator-staging.sprint.com 1
script-src 'self' https://assets.tumblr.com https://sb.scorecardresearch.com/beacon.js https://ssl.google-analytics.com/ga.js https://www.google-analytics.com/analytics.js https://fc.yahoo.com/sdarla/php/client.php https://s.yimg.com/rq/darla/ https://www.googletagservices.com/tag/js/gpt.js https://securepubads.g.doubleclick.net/gpt/ https://securepubads.g.doubleclick.net/gampad/ads https://pagead2.googlesyndication.com/pagead/osd.js https://www.google.com/recaptcha/api.js https://consent.cmp.oath.com https://*.gemini.yahoo.com https://s.yimg.com/av/gemini/ga/gemini-iframe.js https://s.yimg.com/av/curveball/ https://*.quantserve.com https://*.quantcount.com https://quantcast.mgr.consensu.org 'unsafe-eval' 'nonce-Oy5czWhKYIOWRCkpB3x6g9XSw0' https://www.google.com/recaptcha/api.js https://www.gstatic.com; object-src 'none'; worker-src blob:; base-uri 'self'; 1
report-uri https://cspreport.bol.com/report/b/14100  ; default-src https://tpc.googlesyndication.com https://www.bol.com ; connect-src https://*.akstat.io https://*.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.googlesyndication.com https://*.gstatic.com https://*.mpstat.us https://*.s-bol.com https://aai.bol.com https://c.go-mpulse.net https://chat1.bol.com https://chatr.bol.com https://fbstatic-a.akamaihd.net https://firefly.bol.com https://www.bol.com ; font-src data: https://*.s-bol.com https://fonts.gstatic.com https://secure.ogone.com https://www.bol.com ; frame-src https://*.2mdn.net https://*.adyen.com https://*.akstat.io https://*.doubleclick.net https://*.mpstat.us https://*.youtube-nocookie.com https://bolfelicitatie.b05-apps.nl https://chat1.bol.com https://chatr.bol.com https://info.bol.com https://platform.twitter.com https://s-static.ak.facebook.com https://secure.ogone.com https://tpc.googlesyndication.com https://view.publitas.com https://www.bol.com https://www.facebook.com https://www.google.com ; img-src blob: data: https://*.2mdn.net https://*.adyen.com https://*.akstat.io https://*.doubleclick.net https://*.google-analytics.com https://*.google.be https://*.google.nl https://*.krxd.net https://*.moatads.com https://*.mpstat.us https://*.s-bol.com https://adservice.google.be https://adservice.google.com https://adservice.google.nl https://bol.com https://bol.ugc.bazaarvoice.com https://cbks0.googleapis.com https://cbks1.googleapis.com https://csi.gstatic.com https://ds-aksb-a.akamaihd.net https://fbstatic-a.akamaihd.net https://img.youtube.com https://kbimages1-a.akamaihd.net https://khms0.googleapis.com https://khms1.googleapis.com https://m.bol.com https://maps.googleapis.com https://maps.gstatic.com https://mts0.googleapis.com https://mts1.googleapis.com https://pagead2.googlesyndication.com https://partner.bol.com https://photos-eu.bazaarvoice.com https://platform.twitter.com https://secure.ogone.com https://ssl.gstatic.com https://static.bol.com https://swa.bol.com https://syndication.twitter.com https://tpc.googlesyndication.com https://view.publitas.com https://weblog.bol.com https://www.bol.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.ups.com ; media-src blob: https://*.kobo.com https://*.phononet.de https://*.s-bol.com https://bolfelicitatie.b05-apps.nl https://rovimusic.rovicorp.com https://static.bol.com https://www.bol.com ; object-src https://bolfelicitatie.b05-apps.nl https://st1.streamzilla.jet-stream.nl https://view.publitas.com https://www.bol.com ; script-src 'unsafe-eval' 'unsafe-inline' data: https://*.2mdn.net https://*.adyen.com https://*.doubleclick.net https://*.google-analytics.com https://*.krxd.net https://*.moatads.com https://*.s-bol.com https://*.youtube-nocookie.com https://aai.bol.com https://adservice.google.be https://adservice.google.com https://adservice.google.nl https://ajax.googleapis.com https://apis.google.com https://bol.com https://c.go-mpulse.net https://cbks0.googleapis.com https://cdn.ampproject.org https://cdn.syndication.twimg.com https://cdn.syndication.twitter.com https://chat1.bol.com https://connect.facebook.net https://d31qbv1cthcecs.cloudfront.net https://ds-aksb-a.akamaihd.net https://fbstatic-a.akamaihd.net https://firefly.bol.com https://maps.googleapis.com https://maps.gstatic.com https://mts0.googleapis.com https://mts1.googleapis.com https://pagead2.googlesyndication.com https://partner.bol.com https://partner.googleadservices.com https://platform.twitter.com https://s.ytimg.com https://secure.ogone.com https://static.bol.com https://tpc.googlesyndication.com https://translate.googleapis.com https://tu.tu-vms.com https://view.publitas.com https://weblog.bol.com https://www.bol.com https://www.google.com https://www.googletagmanager.com https://www.googletagservices.com https://www.gstatic.com ; style-src 'unsafe-inline' https://*.s-bol.com https://bol.com https://fonts.googleapis.com https://partner.bol.com https://platform.twitter.com https://secure.ogone.com https://static.bol.com https://view.publitas.com https://www.bol.com ; worker-src blob: ; frame-ancestors 'self' 1
frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.thespruceeats.com 1
frame-ancestors *.nypost.com *.decider.com *.pagesix.com http://www.stumbleupon.com https://www.stumbleupon.com 1
default-src https:; style-src https: 'unsafe-inline'; img-src       * data:; worker-src    * blob:; font-src      *; script-src https: 'unsafe-inline' 'unsafe-eval'; connect-src   *; 1
frame-ancestors learn.arcgis.com *.esri.com pro.arcgis.com doc.arcgis.com 1
frame-ancestors 'self' https://onlinexperiences.com https://next.brella.io 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com tagmanager.google.com bbox.blackbaudhosting.com olx.britishmuseum.org www.britishmuseum.org maps.googleapis.com cdn.rawgit.com services.postcodeanywhere.co.uk www.youtube.com s.ytimg.com payments.blackbaud.com secure.adnxs.com ad.360yield.com ib.adnxs.com cm.g.doubleclick.net prf.audiencemanager.de cdn.audiencemanager.de secure-ds.serving-sys.com bs.serving-sys.com connect.facebook.net secure.quantserve.com edge.quantserve.com www.google-analytics.com rules.quantcount.com partners.designmynight.com cdn.loop11.com www.loop11.com platform.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com payments.blackbaud.com bbox.blackbaudhosting.com partners.designmynight.com cdn.loop11.com www.loop11.com platform.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com; img-src 'self' 'unsafe-inline' bbox.blackbaudhosting.com ssl.gstatic.com www.googletagmanager.com googletagmanager.com www.gstatic.com gstatic.com maps.gstatic.com maps.googleapis.com cdn.rawgit.com olx.britishmuseum.org secure.adnxs.com ad.360yield.com ib.adnxs.com cm.g.doubleclick.net prf.audiencemanager.de cdn.audiencemanager.de secure-ds.serving-sys.com bs.serving-sys.com www.facebook.com pixel.quantserve.com www.google-analytics.com stats.g.doubleclick.net www.google.com/ads www.google.co.uk/ads static.designmynight.com cdn.loop11.com www.loop11.com platform2.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com ttp://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io openseadragon.github.io libimages1.princeton.edu 51.11.16.222 media.britishmuseum.org http://media.britishmuseum.org data:;; frame-src 'self' player.vimeo.com payments.blackbaud.com bbox.blackbaudhosting.com sketchfab.com w.soundcloud.com www.youtube.com bookings.designmynight.com www.facebook.com cdn.loop11.com www.loop11.com platform2.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; frame-ancestors 'self'; child-src https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 'self'; font-src 'self' fonts.gstatic.com themes.googleusercontent.com cdn.loop11.com www.loop11.com platform2.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io data:;; connect-src 'self' www.google-analytics.com payments.blackbaud.com olx.britishmuseum.org bookings.designmynight.com www.facebook.com facebook.com cdn.loop11.com www.loop11.com platform2.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://stats.g.doubleclick.net https://51.143.128.218 media.britishmuseum.org 1
img-src 'self' https: data: cdn.paris.fr 1
default-src 'self'; frame-ancestors 'self' https://*.facebook.com; connect-src 'self' https://demo.synology.com:5001 https://*.demo.synology.com:5001 https://demo.synology.de:5001 https://*.demo.synology.de:5001 https://api-fra.livechatinc.com https://www.google-analytics.com/j/collect https://stats.g.doubleclick.net/j/collect https://in.hotjar.com/ https://vc.hotjar.io wss://*.hotjar.com/; object-src 'none'; report-uri https://secreport.synology.com/csp/report; font-src 'self' data: https://themes.googleusercontent.com https://fonts.gstatic.com https://cdn.livechatinc.com; frame-src 'self' https://cse.google.com https://www.googletagmanager.com https://bid.g.doubleclick.net https://optimize.google.com https://www.youtube.com https://www.facebook.com https://staticxx.facebook.com https://secure.livechatinc.com https://secure-fra.livechatinc.com https://player.youku.com/ https://vars.hotjar.com/ https://synology.jobbase.io https://*.synology.com https://synoform.synology.com; img-src 'self' https://www.synology.com https://global.download.synology.com https://download.synology.com https://cndl.synology.cn https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googleapis.com https://*.google.com https://www.google.com.tw https://*.gstatic.com https://ssl.google-analytics.com https://maps.googleapis.com https://www.googletagmanager.com https://secure.livechatinc.com https://secure-fra.livechatinc.com https://cdn.livechatinc.com https://www.facebook.com https://wcs.naver.com https://www.facebook.com/tr https://dc.ads.linkedin.com https://px.ads.linkedin.com/ https://www.linkedin.com/px https://alb.reddit.com https://t.co/i/adsct https://p.adsymptotic.com/d/px https://bat.bing.com data: blob:; media-src 'self' https://download.synology.com https://cdn.livechatinc.com; script-src 'self' data: blob: https://demo.synology.com https://demo.synology.de https://www.google-analytics.com https://www.google.com https://clients1.google.com https://www.gstatic.com https://www.googletagmanager.com https://cse.google.com https://www.googleapis.com https://ssl.google-analytics.com https://maps.googleapis.com https://optimize.google.com https://connect.facebook.net https://cdn.livechatinc.com https://code.jquery.com https://secure.livechatinc.com https://secure-fra.livechatinc.com https://accounts.livechatinc.com https://cdnjs.cloudflare.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://wcs.naver.net/wcslog.js https://snap.licdn.com https://www.linkedin.com/px/ https://px.ads.linkedin.com https://analytics.twitter.com https://static.ads-twitter.com https://www.redditstatic.com https://static.hotjar.com https://script.hotjar.com/ https://sjs.bizographics.com/insight.min.js https://bat.bing.com/bat.js https://synology.jobbase.io 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://www.google.com https://fonts.googleapis.com https://optimize.google.com https://cdnjs.cloudflare.com https://tagmanager.google.com/debug/css.css 'unsafe-inline' 1
frame-ancestors 'self' *.signupgenius.com 1
script-src 'nonce-922af87b5a0e3dd8c89ecc52ee56a706' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=8606258504404658; frame-ancestors 'self' 1
default-src 'self' https://api.mixpanel.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.facebook.net https://www.facebook.com https://snap.licdn.com https://connect.liblynx.com https://sandbox.liblynx.com https://www.google-analytics.com https://optimize.google.com https://ssl.google-analytics.com https://cdnjs.cloudflare.com https://ajax.cloudflare.com https://cdn.mxpnl.com https://cdn4.mxpnl.com https://api.mixpanel.com https://www.googletagmanager.com https://use.fontawesome.com https://pro.fontawesome.com https://scholar.google.com https://api.altmetric.com https://d1bxh8uas1mnw7.cloudfront.net https://js.trendmd.com; img-src 'self' https://ssl.google-analytics.com https://www.google-analytics.com https://optimize.google.com https://www.googletagmanager.com https://connect.liblynx.com https://sandbox.liblynx.com https://stats.g.doubleclick.net https://cdn.mxpnl.com https://badges.altmetric.com https://d1uo4w7k31k5mn.cloudfront.net https://www.facebook.com https://px.ads.linkedin.com https://www.linkedin.com data:; connect-src 'self' https://www.facebook.com https://www.google-analytics.com https://api.mixpanel.com/ https://scholar.google.com https://*.trendmd.com https://cc.trendmd.co; style-src 'self' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com https://use.fontawesome.com https://pro.fontawesome.com https://d1bxh8uas1mnw7.cloudfront.net https://trendmd.s3.amazonaws.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://use.fontawesome.com https://pro.fontawesome.com; frame-src https://www.googletagmanager.com https://optimize.google.com; object-src 'self' 1
default-src https:; connect-src https: wss:; font-src https: data:; img-src https: data:; media-src https: blob: data:; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; worker-src https: blob: 1
frame-ancestors 'none' default-src 'self' 1
default-src 'self'; child-src 'self' share.intercom.io connect.facebook.net fast.wistia.com fast.wistia.net googleads.g.doubleclick.net *.hotjar.com bid.g.doubleclick.net 10317493.fls.doubleclick.net 10366747.fls.doubleclick.net youtube.com www.youtube.com js.stripe.com www.facebook.com staticxx.facebook.com *.soundcloud.com ti.to *.tito.io *.cdn.optimizely.com tpc.googlesyndication.com www.google.com ethn.io *.quora.com intercom-sheets.com app-ab27.marketo.com www.intercom-reporting.com d2c7xlmseob604.cloudfront.net js.intercomcdn.com insight.adsrvr.org; connect-src 'self'   www.intercom.com app.intercom.io app.intercom.com api.intercom.io api-visitor-analytics.intercom.com api-iam.intercom.io api-ping.intercom.io api.smartling.com js.intercomcdn.com nexus-websocket-a.intercom.io nexus-websocket-test.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-test.intercom.io store.intercomassets.com widget.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-test.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com abrtp1.marketo.com abrtp1-cdn.marketo.com app.getsentry.com stats.g.doubleclick.net www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com sentry.io www.facebook.com *.akamaihd.net *.optimizely.com *.wistia.com *.wistia.net *.quora.com *.soundcloud.com *.sndcdn.com *.clearbit.com 258-clw-344.mktoresp.com bat.bing.com cdn.bizible.com d2c7xlmseob604.cloudfront.net rum-collector-2.pingdom.net rum-http-intake.logs.datadoghq.com public-trace-http-intake.logs.datadoghq.com heapanalytics.com; font-src data: https: ; img-src data: blob: https: ; media-src data: blob: https: ; object-src 'none'; script-src 'self' 'unsafe-eval' app.intercom.io app.intercom.com js.intercomcdn.com store.intercomassets.com marketing.intercomassets.com widget.intercom.io ajax.googleapis.com analytics.twitter.com abrtp1.marketo.com abrtp1-cdn.marketo.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com bat.bing.com cdn-assets-prod.s3.amazonaws.com cdn.optimizely.com cdn3.optimizely.com cdn.ravenjs.com browser.sentry-cdn.com connect.facebook.net distillery.wistia.com distillery-main.wistia.com ethn.io fast.wistia.com fast.wistia.net ga.clearbit.com googleads.g.doubleclick.net sjs.bizographics.com js.stripe.com munchkin.marketo.net platform.twitter.com reveal.clearbit.com rtp-static.marketo.com script.hotjar.com secure.adnxs.com snap.licdn.com static.ads-twitter.com static.hotjar.com stats.g.doubleclick.net store.intercom.io ti.to tpc.googlesyndication.com www.datadoghq-browser-agent.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com *.jquery.com *.tito.io *.linkedin.com *.quora.com *.soundcloud.com *.sndcdn.com *.widerfunnel.com 'strict-dynamic' 'nonce-OTlmMTg2ZWItNDQwMS00NTc1LWJlNTItNmYzMzcyOTA1ZDY3'; style-src 'self' 'unsafe-inline' *.tito.io app-ab27.marketo.com marketing.intercomassets.com maxcdn.bootstrapcdn.com rtp-static.marketo.com fonts.googleapis.com tagmanager.google.com heapanalytics.com; worker-src data: blob: 1
frame-ancestors 'self' https://*.elastic.co https://elasticsandbox.docebosaas.com https://elastic.docebosaas.com; 1
default-src * blob: https: data: 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self' ; img-src data: 'self' http://etransaction.rajasthan.gov.in https://etransaction.rajasthan.gov.in http://bioscope.rajasthan.gov.in https://bioscope.rajasthan.gov.in http://gis.rajasthan.gov.in; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://bioscope.rajasthan.gov.in https://bioscope.rajasthan.gov.in https://www.google.com/recaptcha/api.js https://www.gstatic.com/ http://gis.rajasthan.gov.in;  style-src 'self' 'unsafe-inline'; child-src 'self' http://etransaction.rajasthan.gov.in https://etransaction.rajasthan.gov.in http://bioscope.rajasthan.gov.in https://bioscope.rajasthan.gov.in https://www.google.com/ https://www.gstatic.com http://gis.rajasthan.gov.in; font-src 'self' ;connect-src 'self' http://etransaction.rajasthan.gov.in https://etransaction.rajasthan.gov.in http://bioscope.rajasthan.gov.in https://bioscope.rajasthan.gov.in http://gis.rajasthan.gov.in 1
default-src *;frame-ancestors 'self' eiv.baidu.com *.vip.vip.com *.vip.com;script-src *.vip.com *.vipstatic.com *.mediav.com *.gdt.qq.com *.emarbox.com *.mjoys.com *.sogou.com cm.e.qq.com *.baidu.com *.ipinyou.com *.admaster.com.cn *.miaozhen.com *.youku.com *.tanx.com *.doubleclick.net *.vpimg1.com *.vpimg2.com *.vpimg3.com *.vpimg4.com *.gtimg.cn 'unsafe-eval' 'unsafe-inline';style-src *.vip.com *.vipstatic.com 'unsafe-inline';img-src * data:; report-uri //stat.vipstatic.com/pcfront/antiskyjack; 1
default-src 'self' blob: https://*.futurelearn.com; object-src https://*.vzaar.com https://vzaar-video.ccindex.cn https://vjs.zencdn.net; base-uri 'self' https://*.futurelearn.com; frame-ancestors 'self' https://*.futurelearn.com; frame-src 'self' *; connect-src 'self' *; form-action 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: about: *; style-src 'self' 'unsafe-inline' blob: *; img-src 'self' data: *; media-src 'self' * blob:; font-src 'self' about: data: *; report-uri /csp-violation 1
frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.treehugger.com 1
default-src 'self' badoo.com eu1.badoo.com us1.badoo.com am1.badoo.com *.badoo.com *.eu1.badoo.com *.us1.badoo.com *.am1.badoo.com badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com   *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com *.googleapis.com *.gstatic.com *.google.com vk.com *.vk.me cdn.syndication.twitter.com *.facebook.net *.facebook.com *.paypal.com www.paypalobjects.com *.youtube.com *.ytimg.com api.ok.ru *.google-analytics.com *.googletagmanager.com *.api.here.com *.instagram.com *.digicert.com *.mapbox.com *.googlesyndication.com *.googletagservices.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com *.ampproject.org *.amazon-adsystem.com adservice.google.com https://cdn.ampproject.org; style-src 'self' 'unsafe-inline' badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com vk.com *.vk.me *.googleapis.com; font-src 'self' data: badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com fonts.googleapis.com fonts.gstatic.com; img-src * data: blob:; child-src 'self' badoo.com eu1.badoo.com us1.badoo.com am1.badoo.com *.badoo.com *.eu1.badoo.com *.us1.badoo.com *.am1.badoo.com badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com   *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com blob:; worker-src 'self' badoo.com eu1.badoo.com us1.badoo.com am1.badoo.com *.badoo.com *.eu1.badoo.com *.us1.badoo.com *.am1.badoo.com badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com   *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com blob:; media-src * data: blob:; frame-src * bds: bdp:; prefetch-src 'self' *.googlesyndication.com *.googletagservices.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com *.ampproject.org *.amazon-adsystem.com adservice.google.com; frame-ancestors 'self' apps.facebook.com; report-uri /jss/csp_report.phtml 1
report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-pIM/Fo9x3M05aLUsI70e' 'nonce-B/of1mqW2koLas8doPnC' 1
upgrade-insecure-requests; frame-ancestors 'self'; report-uri https://www.argos.co.uk/logging-api/2/security 1
worker-src blob: ; default-src https: data: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self' http://fireeye.lookbookhq.com https://fireeye.lookbookhq.com http://content.fireeye.com https://content.fireeye.com 1
default-src 'self' data: blob: *.mega.co.nz *.mega.nz http://*.mega.co.nz http://*.mega.nz wss://ws.chain.com wss://*.karere.mega.nz localhost.megasyncloopback.mega.nz:6342; script-src 'self' *.mega.co.nz *.mega.nz data: blob:; style-src 'self' 'unsafe-inline' *.mega.co.nz *.mega.nz data: blob:; frame-src 'self' mega: *.megaad.nz; img-src 'self' *.mega.co.nz *.mega.nz data: blob: 1
default-src 'self' https://api.zotero.org; script-src 'self' https://api.zotero.org 'nonce-boedsmqwz0'; style-src 'self' hello.myfonts.net 'nonce-zckgt75afa'; img-src 'self' https://s3.amazonaws.com/; frame-src 'self'; connect-src 'self' https://api.zotero.org https://api.zotero.org https://www.zotero.org https://zoterofilestorage.s3.amazonaws.com https://zoterofilestorage.s3.us-east-1.amazonaws.com/ https://t0guvf0w17.execute-api.us-east-1.amazonaws.com wss://stream.zotero.org; child-src 'self'; worker-src 'self' 1
frame-ancestors https://www.ato.gov.au https://virtualassistant.ato.gov.au https://group2.tdv.atogov.acc.ato.gov.au 1
upgrade-insecure-requests;  default-src 'self';  img-src 'self' blob: https: data:;   script-src 'self' cdn.wfp.org *.jwplatform.com www.google.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com survey.g.doubleclick.net *.doubleclick.net *.adalyser.com *.jwpcdn.com www.gstatic.com adservice.google.com connect.facebook.net www.facebook.com squizlabs.github.io cdnjs.cloudflare.com unpkg.com cdn.sparkcentral.com *.smooch.io *.user1st.info www.googleadservices.com     adservice.google.com adservice.google.ac adservice.google.ad adservice.google.ae adservice.google.com.af adservice.google.com.ag adservice.google.com.ai adservice.google.al adservice.google.am adservice.google.co.ao adservice.google.com.ar adservice.google.as adservice.google.at adservice.google.com.au adservice.google.az adservice.google.ba adservice.google.com.bd adservice.google.be adservice.google.bf adservice.google.bg adservice.google.com.bh adservice.google.bi adservice.google.bj adservice.google.com.bn adservice.google.com.bo adservice.google.com.br adservice.google.bs adservice.google.bt adservice.google.co.bw adservice.google.by adservice.google.com.bz adservice.google.ca adservice.google.com.kh adservice.google.cc adservice.google.cd adservice.google.cf adservice.google.cat adservice.google.cg adservice.google.ch adservice.google.ci adservice.google.co.ck adservice.google.cl adservice.google.cm adservice.google.cn adservice.google.com.co adservice.google.co.cr adservice.google.com.cu adservice.google.cv adservice.google.com.cy adservice.google.cz adservice.google.de adservice.google.dj adservice.google.dk adservice.google.dm adservice.google.com.do adservice.google.dz adservice.google.com.ec adservice.google.ee adservice.google.com.eg adservice.google.es adservice.google.com.et adservice.google.fi adservice.google.com.fj adservice.google.fm adservice.google.fr adservice.google.ga adservice.google.ge adservice.google.gf adservice.google.gg adservice.google.com.gh adservice.google.com.gi adservice.google.gl adservice.google.gm adservice.google.gp adservice.google.gr adservice.google.com.gt adservice.google.gy adservice.google.com.hk adservice.google.hn adservice.google.hr adservice.google.ht adservice.google.hu adservice.google.co.id adservice.google.iq adservice.google.ie adservice.google.co.il adservice.google.im adservice.google.co.in adservice.google.io adservice.google.is adservice.google.it adservice.google.je adservice.google.com.jm adservice.google.jo adservice.google.co.jp adservice.google.co.ke adservice.google.ki adservice.google.kg adservice.google.co.kr adservice.google.com.kw adservice.google.kz adservice.google.la adservice.google.com.lb adservice.google.com.lc adservice.google.li adservice.google.lk adservice.google.co.ls adservice.google.lt adservice.google.lu adservice.google.lv adservice.google.com.ly adservice.google.co.ma adservice.google.md adservice.google.me adservice.google.mg adservice.google.mk adservice.google.ml adservice.google.com.mm adservice.google.mn adservice.google.ms adservice.google.com.mt adservice.google.mu adservice.google.mv adservice.google.mw adservice.google.com.mx adservice.google.com.my adservice.google.co.mz adservice.google.com.na adservice.google.ne adservice.google.com.nf adservice.google.com.ng adservice.google.com.ni adservice.google.nl adservice.google.no adservice.google.com.np adservice.google.nr adservice.google.nu adservice.google.co.nz adservice.google.com.om adservice.google.com.pk adservice.google.com.pa adservice.google.com.pe adservice.google.com.ph adservice.google.pl adservice.google.com.pg adservice.google.pn adservice.google.com.pr adservice.google.ps adservice.google.pt adservice.google.com.py adservice.google.com.qa adservice.google.ro adservice.google.rs adservice.google.ru adservice.google.rw adservice.google.com.sa adservice.google.com.sb adservice.google.sc adservice.google.se adservice.google.com.sg adservice.google.sh adservice.google.si adservice.google.sk adservice.google.com.sl adservice.google.sn adservice.google.sm adservice.google.so adservice.google.st adservice.google.sr adservice.google.com.sv adservice.google.td adservice.google.tg adservice.google.co.th adservice.google.com.tj adservice.google.tk adservice.google.tl adservice.google.tm adservice.google.to adservice.google.tn adservice.google.com.tr adservice.google.tt adservice.google.com.tw adservice.google.co.tz adservice.google.com.ua adservice.google.co.ug adservice.google.co.uk adservice.google.com adservice.google.com.uy adservice.google.co.uz adservice.google.com.vc adservice.google.co.ve adservice.google.vg adservice.google.co.vi adservice.google.com.vn adservice.google.vu adservice.google.ws adservice.google.co.za adservice.google.co.zm adservice.google.co.zw     'unsafe-inline' 'unsafe-eval';  frame-src 'self' *.jwpsrv.com www.google.com survey.g.doubleclick.net *.doubleclick.net cdn.knightlab.com forms.office.com content.jwplatform.com *.user1st.info;  font-src 'self' cdn.wfp.org *.jwpcdn.com fonts.gstatic.com *.bootstrapcdn.com cdn.sparkcentral.com *.user1st.info data:;  style-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.wfp.org tagmanager.google.com fonts.googleapis.com *.bootstrapcdn.com squizlabs.github.io cdn.sparkcentral.com *.user1st.info;  connect-src 'self' data: cdn.wfp.org geonode.wfp.org www.google-analytics.com api.mapbox.com geoip.nekudo.com api.ipify.org api.ip2country.info mycountry.picktek.org content.jwplatform.com *.jwpsrv.com cdn.jwplayer.com acr.api.spring.wfp.org cdn.sparkcentral.com *.smooch.io *.user1st.info stats.g.doubleclick.net 'self' ws:;  media-src 'self' content.jwplatform.com *.jwpsrv.com cdn.jwplayer.com cdn.sparkcentral.com *.user1st.info blob:;  worker-src 'self' blob:;  child-src 'self' blob: 1
script-src 'nonce-7530f0b767b188b160b2d15659922806' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=7428129328344058; frame-ancestors 'self' 1
frame-ancestors 'self' *.tapjoy.net:*/ *.tapjoy.com/; 1
frame-ancestors 'self' http://127.0.0.1:13688 https://webhare.utwente.nl https://employees.utwente.nl 1
connect-src 'self' https://*.akafms.net https://*.akamaihd.net https://*.media.brightcove.com https://*.brightcove.com https://*.brightcovecdn.com https://*.brightcove.net https://*.digitalpfizer.com https://*.evidon.com https://*.hotjar.com https://*.llnw.net/ https://*.llnwd.net/ https://adservice.google.com https://amer-identity.pfizer.com https://bam-cell.nr-data.net https://bam.nr-data.net https://brightcove.hs.llnwd.net https://emea-identity.pfizer.com https://house-cloudfront.ap-northeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-2.prod.boltdns.net https://house-cloudfront.eu-west-1.prod.boltdns.net https://house-cloudfront.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://knrpc.olark.com/nrpc/ https://l.betrad.com https://stats.addtoany.com/menu https://stats.g.doubleclick.net https://tagmanager.google.com https://vc.hotjar.io/ https://www.facebook.com https://www.google-analytics.com wss://*.hotjar.com wss://*.pfizer.com https://pfe-pfizercom-d8-dev.s3.us-east-1.amazonaws.com https://m.addthis.com https://api-v3.conductrics.com https://cdn-v3.conductrics.com https://pfe-pfizercom-d8-dev.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.us-east-1.amazonaws.com https://players.brightcove.net/ https://players.brightcove.net/1852113022001/ByY1aeWF_default/config.json https://players.brightcove.net/1852113022001/7eDMrqTZyS_default/config.json https://www.youtube.com/iframe_api https://svc.webspellchecker.net; font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://docs.gcs.digitalpfizer.com/fonts/ https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://script.hotjar.com https://use.fontawesome.com/releases/ https://use.typekit.net https://vjs.zencdn.net https://www.youtube.com https://maxcdn.bootstrapcdn.com https://s3.us-east-2.amazonaws.com https://svc.webspellchecker.net; frame-src 'self' tel: https://*.fls.doubleclick.net https://*.janrainsso.com https://bid.g.doubleclick.net https://l3.evidon.com https://players.brightcove.net https://static.addtoany.com https://static.olark.com https://tpc.googlesyndication.com https://vars.hotjar.com https://www.facebook.com https://www.google.com/maps/ https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.youtube.com https://s7.addthis.com https://platform.twitter.com https://syndication.twitter.com https://www.hapyak.com https://player.simplecast.com https://p2a.co https://www.pfizer.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://action.pfizer.com https://www.medrespond-pfra.com https://twitter.com https://insight.adsrvr.org; img-src 'self' about: data: https://* https://img.youtube.com https://cdnjs.cloudflare.com https://pbs.twimg.com https://images-cdn.newscred.com https://pfe-pfizercom-d8-dev.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://syndication.twitter.com https://abs.twimg.com https://ton.twimg.com https://platform.twitter.com https://developers.google.com https://pixel.newscred.com https://t.co/i/adsct https://tr.outbrain.com/pixel https://amplifypixel.outbrain.com/pixel https://px.ads.linkedin.com/collect https://p.adsymptotic.com/d/px/ https://app.icontact.com https://s3.us-east-2.amazonaws.com https://secure.adnxs.com https://pixel.mediaiqdigital.com; media-src 'self' data: blob: https://brightcove.hs.llnwd.net https://*.media.brightcove.com https://static.olark.com https://secure.brightcove.com/services/mobile/streaming/ https://pfe-pfizercom-d8-dev.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.digitalpfizer.com https://ajax.googleapis.com https://api.olark.com https://assets.adobedtm.com https://bam.nr-data.net https://cdnjs.cloudflare.com https://connect.facebook.net https://c.evidon.com https://l.evidon.com https://d1v9u0bgi1uimx.cloudfront.net https://d29usylhdk1xyu.cloudfront.net https://d7v0k4dt27zlp.cloudfront.net/assets/ https://docs.gcs.digitalpfizer.com https://googleads.g.doubleclick.net https://js.bizographics.com https://js-agent.newrelic.com https://knrpc.olark.com/nrpc/ https://l.betrad.com https://maps.googleapis.com https://optoutapi.evidon.com https://p.adsymptotic.com https://pfizer-grv-eu.janraincapture.com https://players.brightcove.net https://px.ads.linkedin.com https://rpxnow.com/load/ https://s3.amazonaws.com/pfe_grv https://s3.amazonaws.com/pfe_im/ https://script.hotjar.com https://sjs.bizographics.com https://static.hotjar.com https://static.addtoany.com https://static.olark.com https://tagmanager.google.com https://tpc.googlesyndication.com https://vjs.zencdn.net https://www.bizographics.com https://www.google.com/recaptcha/ https://www.google.com/search/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.linkedin.com https://cdn.jsdelivr.net https://s7.addthis.com https://z.moatads.com https://v1.addthisedge.com https://m.addthis.com https://platform.twitter.com https://cdn.syndication.twimg.com https://p2a.co https://www.youtube.com/iframe_api https://action.pfizer.com https://s.ytimg.com https://maxcdn.bootstrapcdn.com https://static.ads-twitter.com/uwt.js https://analytics.twitter.com https://amplify.outbrain.com https://snap.licdn.com https://app.icontact.com https://d2qrdklrsxowl2.cloudfront.net https://pfe-pfizercom-d8-dev.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://js.adsrvr.org https://svc.webspellchecker.net cdn-v3.conductrics.com cdnjs.cloudflare.com https://pkg-cdn.digitalpfizer.com https://polyfill.io https://unpkg.com; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://cookies.pfizer.com https://d3hmp0045zy3cs.cloudfront.net https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://pfredirect.pfizersite.io https://quilt-cdn.janrain.com/HEAD/providers.css https://quilt-cdn.janrain.com/HEAD/widgets.css https://s3.amazonaws.com/pfe_grv/ https://static.olark.com https://stackpath.bootstrapcdn.com https://tagmanager.google.com https://translate.googleapis.com https://use.typekit.net https://cdn.jsdelivr.net https://p.typekit.net https://www.youtube.com https://platform.twitter.com https://ton.twimg.com https://app.icontact.com https://pfe-pfizercom-d8-dev.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://svc.webspellchecker.net cdnjs.cloudflare.com fonts.googleapis.com https://cdnjs.cloudflare.com https://unpkg.com; child-src 'self'; manifest-src 'self'; worker-src 'self' blob:; report-uri https://pfeprod.report-uri.com/r/t/csp/enforce 1
base-uri 'self'; frame-ancestors 'self' https://*.smartinsights.com; frame-src 'self'  https://ff.doubleclick.net https://cdn.embedly.com https://www.google.com https://staticxx.facebook.com https://www.facebook.com https://www.g2.com https://www.g2crowd.com/ https://vars.hotjar.com https://go.pardot.com https://*.smartinsights.com https://checkout.stripe.com  http://www.scribd.com https://www.slideshare.net/ https://js.stripe.com https://*.twitter.com https://*.vimeo.com https://youtu.be https://*.youtube.com https://www.youtube-nocookie.com; img-src data: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://4screens.net https://ws.amazon.co.uk https://z-eu.amazon-adsystem.com https://s3-us-west-1.amazonaws.com https://cdn.ampproject.org https://sjs.bizographics.com https://*.cloudflare.com https://*.cloudfront.net https://secure.comodo.com https://*.convertexperiments.com https://*.g.doubleclick.net https://connect.facebook.net https://t.gatorleads.co.uk https://adservice.google.co.uk https://adservice.google.com https://apis.google.com https://www.google.com https://www.google-analytics.com https://www.googleadservices.com https://ajax.googleapis.com https://www.googletagmanager.com https://www.googletagservices.com https://www.gstatic.com https://*.hotjar.com https://instant.page https://widget.intercom.io https://js.intercomcdn.com https://e.issuu.com https://code.jquery.com https://cdn.jsdelivr.net https://snap.licdn.com/ https://platform.linkedin.com https://*.newrelic.com https://bam.nr-data.net https://a.opmnstr.com https://api.opmnstr.com https://*.pardot.com https://assets.pinterest.com https://secure.polldaddy.com https://scout-cdn.salesloft.com https://go.smartinsights.com https://checkout.stripe.com https://js.stripe.com https://static.ads-twitter.com https://analytics.twitter.com https://cdn.syndication.twimg.com https://platform.twitter.com https://unpkg.com https://platform.vine.co https://visual.ly https://fast.wistia.com https://t.wowanalytics.co.uk; style-src 'self' 'unsafe-inline' https://code.ionicframework.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdn.pardot.com https://pi.pardot.com https://checkout.stripe.com https://static.ads-twitter.com https://*.twitter.com; 1
frame-ancestors 'self' http://wa.aruba.it https://wa.aruba.it 1
frame-src https://connect.facebook.net/ https://www.paypalobjects.com/ http://media.mtvnservices.com/ https://*.xoom.com/ 'self' https://*.cardinalcommerce.com/ https://*.google.com/ https://*.cloudfront.net/ https://*.facebook.com/ https://*.braintreegateway.com/ https://*.doubleclick.net/ https://*.paypal.com/ https://youtube.com/ https://*.online-metrix.net/; object-src  https://*.online-metrix.net/; base-uri  'self'; frame-ancestors https://*.salesforce.com/  https://*.paypal.com/; plugin-types  application/x-shockwave-flash; script-src https://www.paypalobjects.com/ 'unsafe-inline' 'self' https://*.googleadservices.com/ https://*.gstatic.com/ https://*.s-xoom.com/ https://*.segment.com/ https://*.online-metrix.net/ https://connect.facebook.net/ https://*.google-analytics.com/ https://*.mxpnl.com/ https://nexus.ensighten.com/ https://*.google.com/ https://bat.bing.com/ https://*.ctfassets.net/ https://iesnare.com/ https://*.braintreegateway.com/ https://*.googleapis.com/ https://pin-up.vet/ https://*.doubleclick.net/ https://*.paypal.com/ 'unsafe-eval' https://www.recaptcha.net/ https://www.googletagmanager.com/; media-src https://ssl.gstatic.com/; form-action 'self' https://*.paypal.com/ https://help.xoom.com/; connect-src https://*.xoom.com/ 'self' https://*.google-analytics.com/ https://*.mixpanel.com/ https://*.cloudfront.net/ https://*.braintreegateway.com/ https://*.googleapis.com/ wss://*.xoom.com/ https://*.doubleclick.net/ https://*.segment.io/ https://*.paypal.com/ https://*.s-xoom.com/ https://www.google.com/ https://*.online-metrix.net/ https://*.braintree-api.com/ https://paypalobjects.com/; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://*.s3.amazonaws.com/ 'self' https://*.s-xoom.com/ data:; worker-src  'self'; style-src https://*.ctfassets.net/ 'unsafe-inline' 'self' https://*.s-xoom.com/ https://google.com/; img-src 'self' data: https:; report-uri https://csp.tsrs.cloud/r/e3d9a13c4c3309190dc6e46007e8a8ae2c5de6a9; 1
object-src * 'unsafe-inline' 1
default-src https:; child-src blob: https:; connect-src https: wss:; form-action https:; frame-ancestors https: http://webvisor.com; media-src https:; object-src https:; img-src https: data: blob:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; font-src https: data: 1
frame-ancestors *.ntu.edu.sg 1
img-src * data:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' code.highcharts.com http://pbs.twimg.com irs.tools.investis.com maps.googleapis.com s.ytimg.com http://i3.ytimg.com www.youtube.com blob: www.recaptcha.net www.gstatic.com brightcove.net *.brightcove.net brightcove.com  *.brightcove.com tags.tiqcdn.com hsbcglobalcommon.tt.omtrdc.net vjs.zencdn.net pws.internal.hsbc *.pws.internal.hsbc hsbc.com; connect-src 'self' hsbcglobalcommon.sc.omtrdc.net dpm.demdex.net brightcove.com *.brightcove.com bcsecure01-a.akamaihd.net *.akamaihd.net hsbcglobalcommon.tt.omtrdc.net brightcove.com *.brightcove.com www.youtube.com; img-src 'self'  i.ytimg.com http://i3.ytimg.com data:  http://pbs.twimg.com sprcdn-assets.sprinklr.com media-exp1.licdn.com dms.licdn.com brightcove.net  *.brightcove.net brightcove.com *.brightcove.com tags.tiqcdn.com hsbcglobalcommon.tt.omtrdc.net hsbcglobalcommon.sc.omtrdc.net akamaihd.net *.akamaihd.net maps.gstatic.com maps.googleapis.com blob: pws.internal.hsbc *.pws.internal.hsbc hsbc.com; style-src 'self' 'unsafe-inline' ;base-uri 'self';form-action 'self'; font-src 'self' data:; frame-src 'self' www.youtube.com www.google.com irs.tools.investis.com; media-src 'self' blob: video.twimg.com dms.licdn.com pws.internal.hsbc *.pws.internal.hsbc hsbc.com hsbcbankcommon.demdex.net brightcove.com *.brightcove.com; 1
default-src https:; img-src https: 'unsafe-inline' data; style-src https: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.curator.io https://embedsocial.com https://www.findaphd.com https://fonts.googleapis.com https://www.gstatic.com https://meetandengage.com https://*.flockler.com https://tagmanager.google.com; img-src 'self' data: https://*.adnxs.com https://cdn.curator.io https://*.cdninstagram.com https://*.doubleclick.net https://connect.facebook.net https://discoveruni.gov.uk https://www.facebook.com https://*.fbcdn.net https://www.findaphd.com https://*.flockler.com https://flockler.com https://*.google.com https://www.google.com https://www.google.co.uk https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.googleapis.com https://www.googletagmanager.com https://*.gstatic.com https://i.ytimg.com https://www.instagram.com https://le.ac.uk https://www.linkedin.com https://livestream.com https://meetandengage.com https://pbs.twimg.com https://px.ads.linkedin.com https://*.rackcdn.com https://*.scdn1.secure.raxcdn.com https://stats.g.doubleclick.net https://t.co https://www.tag4arm.com https://*.twitter.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.curator.io https://cdnjs.cloudflare.com https://cdn.unibuddy.co https://connect.facebook.net https://discoveruni.gov.uk https://dnn506yrbagrg.cloudfront.net https://embedsocial.com https://fl-cdn.scdn1.secure.raxcdn.com https://www.findaphd.com https://*.flockler.com https://flockler.embed.codes https://googleads.g.doubleclick.net https://tagmanager.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googleapis.com https://www.googletagmanager.com https://www.gstatic.com https://*.hotjar.com https://*.ibytedtos.com https://www.linkedin.com https://meetandengage.com https://popcard.unibuddy.co https://px.ads.linkedin.com https://s.ytimg.com https://s0.ipstatp.com https://sc-static.net https://snap.licdn.com https://static.ads-twitter.com https://www.tag4arm.com https://*.tiktok.com https://*.twitter.com https://widget.discoveruni.gov.uk https://widget.unistats.ac.uk https://www.youtube.com; frame-src 'self' https://cdn.flipsnack.com https://embedsocial.com https://www.facebook.com https://*.fls.doubleclick.net https://www.google.com https://www.googleapis.com https://www97.lamp.le.ac.uk https://leicester.cloud.panopto.eu https://livestream.com https://www.le.ac.uk https://meetandengage.com https://myleicester.le.ac.uk https://player.vimeo.com https://podcasts.le.ac.uk https://popcard.unibuddy.co https://w.soundcloud.com https://static.ads-twitter.com https://staticxx.facebook.com https://www.tag4arm.com https://tourmkr.com https://platform.twitter.com https://tr.snapchat.com https://unibuddy.co https://vars.hotjar.com https://www.viewmake.com https://widget.unistats.ac.uk https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self'; connect-src 'self' https://api.curator.io https://stats.g.doubleclick.net https://www.facebook.com https://*.flockler.com https://www.google.com https://www.google-analytics.com https://www.googleapis.com https://*.hotjar.com https://vc.hotjar.io wss://*.hotjar.com https://www97.lamp.le.ac.uk https://prod-discoveruni.azure-api.net https://www.tag4arm.com https://tourmkr.com https://ekr.zdassets.com; font-src 'self' data: https://maxcdn.bootstrapcdn.com https://cdn.curator.io https://fonts.gstatic.com https://le.ac.uk; object-src 'self'; media-src 'self' https://*.fbcdn.net https://*.xx.fbcdn.net https://videos.dailymail.co.uk; upgrade-insecure-requests; 1
frame-ancestors 'self' https://wendy.westpac.com.au; 1
frame-ancestors https://adm.findagrave.com 1
default-src *.marxists.org 'self'; script-src *.marxists.org 'self' 'unsafe-inline' 'unsafe-eval'; worker-src *.marxists.org 'self'; style-src *.marxists.org 'self' 'unsafe-inline'; connect-src 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
require-sri-for script 1
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob:; media-src https: data: blob:; worker-src https: data: blob:; font-src https: data:; connect-src https: wss: 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com 'strict-dynamic' 'nonce-Mzg3Mzc5ODcwMiwxMTAwNDc5ODc1'; report-uri https://exceptions.hubspot.com/csp/report; 1
frame-ancestors 'self' https://*.inconvo.chat https://*.yougov.chat 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: d2e70e9yced57e.cloudfront.net d2k0escgkdw2ev.cloudfront.net d3k4ohqf5n453g.cloudfront.net *.googleapis.com *.google.com *.gstatic.com *.google-analytics.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net cdn.ampproject.org bat.bing.com s.yimg.com cdn.taboola.com trc.taboola.com sp.analytics.yahoo.com *.facebook.com connect.facebook.net www.linkedin.com www.reddit.com *.twitter.com static.ads-twitter.com *.linkedin.com *.pinterest.com *.reddit.com www.dianomi.com loadus.exelator.com ct.buyright.com affiliate.icclicktracker.com amplify.outbrain.com track.supersonicads.com ads.trafficjunky.net cdn.ckeditor.com *.wistia.com sentry.io www.datadoghq-browser-agent.com opensharecount.com *.mediaalpha.com smartforms.ekomi.com *.amazonaws.com cfstatic.efdevhub.info cdn.wallethub.com static.olark.com api.olark.com 1
frame-ancestors 'self' https://bz-medien.expo-ip.com/ 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=TW&lang=zh-Hant-TW&device=desktop&yrid=1n85hjhful90j&partner=; 1
script-src 'nonce-64cc0ac9a85d64b5b6523bfe8dfe06bf' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=2165230163608970; frame-ancestors 'self' 1
frame-ancestors 'self' https://piwik.mz.tu-dresden.de 1
frame-ancestors *.constantcontact.com www.redmangomarketing.com www.ezymarketing.com www.igvinc.com www.etouchmarketing.net 1
upgrade-insecure-requests; frame-ancestors *.cisco.com *.jasper.com *.ciscospark.com *.ciscolive.com *.appdynamics.com 1
default-src 'none'; script-src 'strict-dynamic' 'nonce-zOU5e6NzkT33+lOpsFgrUgK/v+4C90v4updVmecqalQ/C1Ztqa' 'self' 'report-sample' 'unsafe-inline' assets.wearehearken.com cdn.syndication.twimg.com connect.facebook.net emp.bbci.co.uk ems.wearehearken.com modules.wearehearken.com mybbc-analytics.files.bbci.co.uk nav.files.bbci.co.uk news.files.bbci.co.uk platform.twitter.com public.flourish.studio static.bbc.co.uk static.bbci.co.uk static.chartbeat.com static2.chartbeat.com www.bbc.co.uk www.instagram.com www.ons.gov.uk gn-web-assets.api.bbc.com www.google-analytics.com static.files.bbci.co.uk; img-src 'self' c.files.bbci.co.uk data: https://a1.api.bbc.co.uk i.ytimg.com ichef.bbci.co.uk logws1363.ati-host.net news.bbcimg.co.uk news.files.bbci.co.uk newsimg.bbc.co.uk pbs.twimg.com ping.chartbeat.net platform.twitter.com r.bbci.co.uk syndication.twitter.com ton.twimg.com www.google-analytics.com static.files.bbci.co.uk; font-src gel.files.bbci.co.uk static.bbci.co.uk news.files.bbci.co.uk ws-downloads.files.bbci.co.uk; style-src cdn.riddle.com flo.uri.sh news.files.bbci.co.uk platform.twitter.com static.bbc.co.uk static.bbci.co.uk ton.twimg.com www.riddle.com 'unsafe-inline'; frame-src 'self' bbc001.carto.com bbc003.carto.com bbc-maps.carto.com cdn.riddle.com chartbeat.com emp.bbc.co.uk emp.bbc.com flo.uri.sh m.facebook.com news.files.bbci.co.uk personaltaxcalculator2.deloittecloud.co.uk platform.twitter.com public.flourish.studio static2.chartbeat.com syndication.twitter.com web.facebook.com www.bbc.co.uk www.facebook.com www.instagram.com www.ons.gov.uk www.riddle.com www.youtube.com; object-src 'none'; worker-src 'self' blob:; manifest-src static.files.bbci.co.uk; connect-src 'self' cookie-oven.api.bbc.co.uk cookie-oven.api.bbc.com ems.wearehearken.com https://a1.api.bbc.co.uk locator-service.api.bbci.co.uk logws1363.ati-host.net modules.wearehearken.com mybbc-analytics.files.bbci.co.uk news.files.bbci.co.uk static.files.bbci.co.uk platform.twitter.com search.api.bbci.co.uk search.api.bbci.com www.bbc.co.uk www.bbc.com www.google-analytics.com idcta.api.bbc.co.uk https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net; child-src blob:; base-uri 'none'; form-action 'self' platform.twitter.com syndication.twitter.com; frame-ancestors 'none'; upgrade-insecure-requests; report-to default; report-uri https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net/report-endpoint; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://dap.digitalgov.gov https://platform.twitter.com https://www.google.com https://static.addtoany.com https://syndication.twitter.com https://abs.twimg.com https://pbs.twimg.com https://cdn.syndication.twimg.com https://ton.twimg.com https://fonts.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://themes.googleusercontent.com https://www.google-analytics.com https://*.gstatic.com https://stats.g.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com *.ytimg.com *.qualtrics.com, frame-ancestors 'self' 1
block-all-mixed-content;frame-ancestors 'self' https://www.dashlane.com https://www.google.com https://www-dashlane-com.cdn.ampproject.org https://www-dashlane-com.amp.cloudflare.com;base-uri 'none';default-src https://d38muu3h4xeqr1.cloudfront.net;style-src 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com https://app-ab14.marketo.com https://heapanalytics.com;font-src data: https://fonts.gstatic.com https://d38muu3h4xeqr1.cloudfront.net https://d1sk9wm475w15q.cloudfront.net https://heapanalytics.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://kck3hlb9.dashlane.com https://d38muu3h4xeqr1.cloudfront.net https://d1sk9wm475w15q.cloudfront.net https://cdn.ampproject.org https://ajax.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://heapanalytics.com https://cdn.heapanalytics.com https://js.stripe.com https://js.processout.com https://widget.trustpilot.com https://munchkin.marketo.net https://app-ab14.marketo.com https://api.greenhouse.io https://www.youtube.com https://s.ytimg.com/yts/jsbin/ https://tagmanager.google.com https://platform.twitter.com https://*.visualwebsiteoptimizer.com https://khan.github.io/tota11y/dist/tota11y.min.js https://static.ads-twitter.com/uwt.js https://analytics.twitter.com https://connect.facebook.net https://cm.g.doubleclick.net https://bid.g.doubleclick.net/ https://googleads.g.doubleclick.net https://s.pinimg.com/ct/ https://a.quora.com/qevents.js https://b-code.liadm.com/a-00ou.min.js https://bat.bing.com/bat.js https://platform.twitter.com/oct.js https://www.googleadservices.com/pagead/ https://www.redditstatic.com/ads/pixel.js https://static.criteo.net https://*.criteo.com https://*.taboola.com https://t.a3cloud.net https://collector-9064.us.tvsquared.com https://js.adsrvr.org https://u.ipw.metadsp.co.uk https://snap.licdn.com https://*.rokt.com;img-src 'self' data: https://d38muu3h4xeqr1.cloudfront.net https://d1sk9wm475w15q.cloudfront.net https://d2erpoudwvue5y.cloudfront.net https://kwift-icons-desktop.s3.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com/static-icons/_web/ https://blog.dashlane.com https://www.google-analytics.com https://www.googletagmanager.com https://heapanalytics.com https://q.stripe.com https://www.gstatic.com https://ssl.gstatic.com https://app-ab14.marketo.com https://*.visualwebsiteoptimizer.com https://www.google.com https://www.facebook.com https://ct.pinterest.com/v3/ https://*.liadm.com https://goo.gl https://stats.g.doubleclick.net https://*.adsymptotic.com https://q.quora.com https://i.geistm.com/x/ https://gravatar.com https://t.co https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://alb.reddit.com https://bat.bing.com/action/ https://js.processout.com https://*.taboola.com https://pixel.videohub.tv https://tn.alphonso.tv https://ib.adnxs.com https://segment.a3cloud.net https://*.metadsp.co.uk https://collector-9064.us.tvsquared.com https://px.ads.linkedin.com https://*.adnxs.com https://www.dianomi.com https://ampcid.google.at https://ampcid.google.be https://ampcid.google.ca https://ampcid.google.ch https://ampcid.google.co.id https://ampcid.google.co.in https://ampcid.google.co.jp https://ampcid.google.co.kr https://ampcid.google.co.nz https://ampcid.google.co.uk https://ampcid.google.co.za https://ampcid.google.com https://ampcid.google.com.ar https://ampcid.google.com.au https://ampcid.google.com.br https://ampcid.google.com.co https://ampcid.google.com.do https://ampcid.google.com.mx https://ampcid.google.com.my https://ampcid.google.com.np https://ampcid.google.com.ph https://ampcid.google.com.sg https://ampcid.google.com.tr https://ampcid.google.com.vr https://ampcid.google.de https://ampcid.google.dk https://ampcid.google.es https://ampcid.google.fi https://ampcid.google.fr https://ampcid.google.ie https://ampcid.google.it https://ampcid.google.lk https://ampcid.google.nl https://ampcid.google.no https://ampcid.google.pl https://ampcid.google.pt https://ampcid.google.ro https://ampcid.google.ru https://ampcid.google.se;media-src 'self' https://d38muu3h4xeqr1.cloudfront.net;connect-src 'self' https://*.dashlane.com https://cdn.ampproject.org https://d1sk9wm475w15q.cloudfront.net https://d38muu3h4xeqr1.cloudfront.net https://www.google-analytics.com https://www.googletagmanager.com https://heapanalytics.com https://api.stripe.com https://widget.trustpilot.com https://*.mktoresp.com https://api.trustpilot.com https://*.visualwebsiteoptimizer.com https://ampcid.google.com/v1 https://www.facebook.com https://ct.pinterest.com/ https://*.liadm.com https://stats.g.doubleclick.net https://checkout.processout.com https://api.processout.com https://*.taboola.com https://*.google.at https://*.google.be https://*.google.ca https://*.google.ch https://*.google.co.id https://*.google.co.in https://*.google.co.jp https://*.google.co.kr https://*.google.co.nz https://*.google.co.uk https://*.google.co.za https://*.google.com https://*.google.com.ar https://*.google.com.au https://*.google.com.br https://*.google.com.co https://*.google.com.do https://*.google.com.mx https://*.google.com.my https://*.google.com.np https://*.google.com.ph https://*.google.com.sg https://*.google.com.tr https://*.google.com.vr https://*.google.de https://*.google.dk https://*.google.es https://*.google.fi https://*.google.fr https://*.google.ie https://*.google.it https://*.google.lk https://*.google.nl https://*.google.no https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.ru https://*.google.se;object-src 'self';child-src 'self' blob:;worker-src 'self' blob:;manifest-src 'self';frame-src 'self' https://d1sk9wm475w15q.cloudfront.net https://d3mfqat9ni8wb5.cloudfront.net https://d3qm0vl2sdkrc.cloudfront.net https://s3.eu-west-1.amazonaws.com/mac.dashlane.com/ https://s3.eu-west-1.amazonaws.com/binaries.dashlane.com/ https://app.adjust.com https://*.dashlane.com safari-extension://com.dashlane.dashlanesafari-5p72e3gc48 dashlane: https://js.stripe.com https://hooks.stripe.com https://api2.checkout.com https://js.processout.com https://widget.trustpilot.com https://app-ab14.marketo.com https://www.youtube.com https://staticxx.facebook.com https://platform.twitter.com https://www.facebook.com https://i.liadm.com https://checkout.processout.com https://api.processout.com https://*.criteo.com https://*.criteo.net https://*.doubleclick.net https://*.adsrvr.org https://*.rokt.com 1
default-src 'self' https://*.googlesyndication.com; script-src 'self' 'unsafe-eval' 'unsafe-inline'  connect.facebook.net yandex.st *.doubleclick.net *.googleadservices.com  *.googlesyndication.com *.criteo.com *.criteo.net vk.com *.vk.com *.imgsmail.ru *.google.com *.google.ru connect.mail.ru *.connect.mail.ru *.ok.ru *.adriver.ru *.r-99.com cdn.mxpnl.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.googleadservices.com *.gstatic.com yandex.ru *.yandex.ru *.yandex.md yastatic.net cdnjs.cloudflare.com  *.yandex.net oimenkr.com *.2mdn.net 2mdn.net   *.twitter.com *.google.com.ua *.google.by *.google.cz *.google.kz *.google.de *.google.es js.mamydirect.com  abp.smartadcheck.de *.ampproject.org  *.adfox.ru mc.webvisor.org *.google.ge *.google.ee *.google.me *.google.co.uk *.google.be *.google.no *.google.bg *.google.fr *.google.az *.google.is *.google.lu *.google.in *.google.lv *.google.lt *.google.nl *.google.iq *.google.dk *.google.kg *.google.com.tr *.google.fi *.google.md *.google.me *.google.gr *.google.it *.google.pl *.google.co.il *.google.hu *.google.ae *.google.co.ve *.google.ch *.google.co.uz *.google.co.th *.betweendigital.com yastat.net  *.google.rs *.google.at *.google.com.cy *.google.jo *.google.com.qa *.google.com.tj *.google.pt *.google.ro *.google.ca *.google.ie *.google.sk *.google.tm *.google.co.jp *.google.co.ug *.google.com.ng *.google.com.sg *.google.se *.webvisor.org *.googletagservices.com *.googletagmanager.com code.jquery.com; object-src 'self' *; style-src 'unsafe-inline' 'unsafe-eval' 'self'  * *.googleapis.com; img-src 'self' data: blob: * ; media-src 'self' data: *; frame-src 'self' *.googlesyndication.com *.facebook.com  facebook.com vk.com *.vk.com apis.google.com connect.odnoklassniki.ru *.ok.ru connect.mail.ru accounts.google.com  *.doubleclick.net  *.doubleclick.net  *.youtube.com www.google.com *.criteo.com  *.criteo.net *.gstatic.com yandex.ru *.yandex.ru *.r-99.com oimenkr.com *.oimenkr.com   *.yandexadexchange.net yandexadexchange.net *.2mdn.net 2mdn.net *.twitter.com yastatic.net *.yandex.net *.vimeo.com *.hpmdnetwork.ru ams.creativecdn.com *.betweendigital.com *.archive.org archive.org yastat.net *.adfox.ru *.yandex.md *.google-analytics.com *.webvisor.org irecommend.ru; font-src 'self' data: blob: * ; connect-src 'self' * 1
default-src 'self' blob:; img-src 'self' data: blob: 'unsafe-inline' sitecoremedia.blob.core.windows.net stats.g.doubleclick.net *.stats.g.doubleclick.net *.googleapis.com *.gstatic.com *.twitter.com *.twimg.com jwpltx.com *.youtube.com *.facebook.com *.google.com *.google.gr *.googletagmanager.com px.ads.linkedin.com linkedin.com googleads.g.doubleclick.net cdn.cookielaw.org *.google-analytics.com *.usabilla.com *.cloudfront.net *.hotjar.com ad.doubleclick.net; media-src 'self' blob: *.streaming.mediaservices.windows.net; script-src 'self' data: optimize.google.com *.google-analytics.com snap.licdn.com code.jquery.com *.onetrust.com blob: 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com  *.google.com *.googleapis.com *.gstatic.com *.inbroker.com *.angularjs.org *.twitter.com *.syndication.twimg.com *.jwpcdn.com *.facebook.net *.facebook.com *.hotjar.com cdn.cookielaw.org optanon.blob.core.windows.net www.googleadservices.com googleads.g.doubleclick.net az416426.vo.msecnd.net *.googletagmanager.com *.usabilla.com *.cloudfront.net; style-src 'self' 'unsafe-inline' *.googleapis.com *.inbroker.com *.twitter.com optimize.google.com optanon.blob.core.windows.net cdn.cookielaw.org *.usabilla.com *.cloudfront.net fonts.googleapis.com; font-src 'self' *.gstatic.com *.inbroker.com *.jwpcdn.com *.usabilla.com *.cloudfront.net fonts.googleapis.com *.hotjar.com; connect-src 'self' optimize.google.com *.visualstudio.com www.google-analytics.com *.inbroker.com *.streaming.mediaservices.windows.net *.twitter.com *.hotjar.com adservice.google.com az416426.vo.msecnd.net *.doubleclick.net *.usabilla.com *.cloudfront.net *.cookielaw.org *.hotjar.com *.hotjar.io; frame-src 'self' data: blob: *.youtube.com *.ytimg.com *.google.com *.inbroker.com *.twitter.com *.onetrust.mgr.consensu.org *.hotjar.com *.facebook.com legacy.eurobank.gr uat.eurobank.gr  uat-legacy.eurobank.gr *.doubleclick.net *.fls.doubleclick.net *.usabilla.com *.cloudfront.net; object-src 'self' *.streaming.mediaservices.windows.net *.jwpcdn.com;  child-src 'self' data: blob: *.youtube.com *.ytimg.com *.google.com *.inbroker.com *.twitter.com *.hotjar.com *.facebook.com legacy.eurobank.gr uat.eurobank.gr uat-legacy.eurobank.gr; 1
default-src http: https://*.livemaster.ru https://*.googlesyndication.com 'self'; script-src http: https://*.livemaster.ru https://googletagmanager.com https://*.cloudfront.net https://*.maps.yandex.net https://secure.payu.ru https://use.fontawesome.com https://adservice.google.com https://adservice.google.ru https://*.google-analytics.com https://www.googletagservices.com https://*.yandex.ru https://mc.webvisor.org https://www.googletagmanager.com https://*.google.com https://securepubads.g.doubleclick.net https://cdn.jsdelivr.net https://www.gstatic.com https://*.pinterest.com https://i.pinimg.com https://*.twitter.com https://twitter.com https://connect.facebook.net https://yastatic.net https://vk.com https://cdn.ampproject.org https://pagead2.googlesyndication.com https://top-fwz1.mail.ru https://api.vk.com https://connect.ok.ru https://connect.mail.ru https://checkout.rbk.money 'unsafe-inline' 'unsafe-eval' 'self' blob: data:; font-src http: https://*.livemaster.ru 'self' https://fonts.gstatic.com; img-src https://*.livemaster.ru https://www.livemaster.ru:1812 https://csi.gstatic.com https://log.pinterest.com https://*.adfox.ru https://*.googlesyndication.com https://*.googletagmanager.com https://syndication.twitter.com https://top-fwz1.mail.ru https://*.google-analytics.com https://*.facebook.com https://*.google.com https://*.google.ru https://counter.yadro.ru https://*.yandex.ru https://*.yandex.net https://mc.webvisor.org https://vk.com https://*.vk.com https://*.g.doubleclick.net https://*.livemaster.ru https://*.livemaster.com 'self' data: blob: http:; frame-src http: https://*.livemaster.ru 'self' https://*.facebook.net https://*.googlesyndication.com https://dl.metabar.ru https://static.cmptch.com https://www.livemaster.ru:1862 https://secure.payu.ru https://checkout.rbk.money https://*.yandex.ru https://www.googletagmanager.com https://*.twitter.com https://*.facebook.com https://vk.com https://*.vk.com https://*.g.doubleclick.net https://yastatic.net https://www.youtube.com https://*.google.com https://player.vimeo.com https://mc.webvisor.org; frame-ancestors 'self' https://*.livemaster.ru https://www.livemaster.ru:1862 https://*.payu.ru https://secure.payu.ru https://checkout.rbk.money https://*.yandex.ru https://www.googletagmanager.com https://*.twitter.com https://*.facebook.com https://vk.com https://*.vk.com https://*.g.doubleclick.net https://yastatic.net https://www.youtube.com https://www.google.com https://player.vimeo.com https://mc.webvisor.org https://webvisor.com http://webvisor.com; style-src http: https://*.livemaster.ru 'unsafe-inline' https://tagmanager.google.com https://*.googleapis.com https://www.livemaster.ru:1862 https://*.livemaster.ru; connect-src https://*.livemaster.ru https://*.googlesyndication.com https://yandex.ru https://yandex.com  https://mc.webvisor.org https://login.vk.com http: https://yandexmetrica.com:29010 https://*.payu.ru https://*.payu.com https://www.livemaster.ru:1862 https://*.lmteam.ru https://*.yandex.net https://ymetrica.com https://ymetrica1.com https://ymetrica2.com https://*.google-analytics.com http://*.google.com https://www.googleapis.com wss://*.livemaster.ru https://*.livemaster.ru https://*.livemaster.com https://graph.facebook.com https://matchid.adfox.yandex.ru https://*.g.doubleclick.net https://top-fwz1.mail.ru https://*.adfox.ru https://*.yandex.ru https://*.yandex.com https://getyabrowser.com https://*.appmetrica.webvisor.com https://www.facebook.com https://csi.gstatic.com https://player.vimeo.com https://*.clickmeeting.com 'self'; object-src http: https://*.livemaster.ru 'self' https://player.vimeo.com https://www.youtube.com; report-uri /ajax/cspcollector.php 1
base-uri 'self'; frame-ancestors https://*.tweaktown.com; 1
frame-ancestors https://*.alternativeto.net https://alternativeto.net 1
script-src 'self' assets.adobedtm.com https://www.gstatic.com/recaptcha/api2/* *.adform.net *.cognizant.com www.cognizant.com.au insight.adsrvr.org maps.googleapis.com www.google-analytics.com global.cognizant.com pi.pardot.com scripts.demandbase.com www.google-analytics.com px.ads.linkedin.com www.youtube.com tr.outbrain.com amplifypixel.outbrain.com munchkin.marketo.net ssl.google-analytics.com static.doubleclick.net ssl.google-analytics.com www.facebook.com connect.facebook.net www.googletagmanager.com connect.facebook.net miscmagazine.com graph.facebook.com api.linkedin.com api.instagram.com news.cognizant.com investors.cognizant.com api.twitter.com googleads.g.doubleclick.net static.doubleclick.net public.slidesharecdn.com www.slideshare.net consent.truste.com api.demandbase.com assets.adobedtm.com stats.g.doubleclick.net www.googleadservices.com cm.g.doubleclick.net dpm.demdex.net snap.licdn.com global.cognizant.com px.ads.linkedin.com trackcmp.net amplify.outbrain.com 2899686.fls.doubleclick.net api.company-target.com d.company-target.com segments.company-target.com pixel.advertising.com s.ytimg.com www.linkedin.com *.doubleclick.net match.adsrvr.org  fonts.gstatic.com msdn.microsoft.com ajax.googleapis.com api.soundcloud.com cdnjs.cloudflare.com *.AKAMAIHD.NET *.akamai.edgekey.net public.inpwrd.com consent.trustarc.com *.cognizant.co.jp cognizant.co.jp www.gstatic.com www.google.com in.taskanalytics.com v2.listenloop.com web-analytics.engagio.com api.company-target.com dn1f1hmdujj40.cloudfront.net digitally.cognizant.com t.contentsquare.net code.jquery.com app.hubspot.com js.hsleadflows.net js.usemessages.com js.hs-analytics.net bat.bing.com go.pardot.com t.contentsquare.net c.contentsquare.net l.contentsquare.net *.contentsquare.net s.yimg.com sp.analytics.yahoo.com j.6sc.co webapi.amap.com vdata.amap.com restapi.amap.com mapclick.amap.com *.turtl.co s.go-mpulse.net t.contentsquare.net/uxa/* pixel.sitescout.com app.contentsquare.com app.contentsquare.com www.gstatic.cn https://www.recaptcha.net/recaptcha/api.js sandbox 'unsafe-inline' 'unsafe-eval' data: blob: 1
default-src 'self'; font-src https://github-atom-io-herokuapp-com.freetls.fastly.net https://github-atom-io-herokuapp-com.global.ssl.fastly.net; frame-src 'self' https://www.youtube.com; img-src https: 'self' https://github-atom-io-herokuapp-com.freetls.fastly.net data:; media-src 'self'; object-src 'self' https://github-atom-io-herokuapp-com.freetls.fastly.net; script-src 'self' 'unsafe-inline' https://ssl.google-analytics.com https://www.google-analytics.com https://platform.twitter.com https://github-atom-io-herokuapp-com.freetls.fastly.net; style-src 'self' 'unsafe-inline' https://github-atom-io-herokuapp-com.freetls.fastly.net; 1
default-src 'none'; font-src 'self' https: data:; child-src blob:; script-src 'self' blob: cdn.shopify.com cdnjs.cloudflare.com d2wy8f7a9ursnm.cloudfront.net fast.wistia.com v.shopify.com www.google-analytics.com maps.googleapis.com arrive-server.shopifycloud.com 'nonce-3rh4i8wyBcT9ra4eJSULWA=='; style-src 'self' 'unsafe-inline' cdn.shopify.com sdks.shopifycdn.com fonts.googleapis.com; media-src 'self' blob: data: cdn.shopify.com embedwistia-a.akamaihd.net; img-src 'self' data: blob: api.mapbox.com cdn.shopify.com embedwistia-a.akamaihd.net fast.wistia.com proxy.shopifycdn.com sdks.shopifycdn.com shopify-arrive.s3.amazonaws.com storage.googleapis.com v.shopify.com www.google-analytics.com maps.googleapis.com maps.gstatic.com; connect-src 'self' https: api.mapbox.com distillery.wistia.com events.mapbox.com monorail-edge.shopifysvc.com pipedream.wistia.com *.bugsnag.com arrive-server.shopifycloud.com; frame-src fast.wistia.com; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=index&source%5Bapp%5D=ArriveWebsite&source%5Bcontroller%5D=marketing&source%5Buuid%5D=df48ee5fe1f66d934c96f7f934f44ec8 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.prdnpci.tbk.cl https://unpkg.com/markdown-it/dist/markdown-it.min.js https://unpkg.com/adaptivecards/dist/adaptivecards.js https://connect.facebook.net https://www.portaltransbank.cl https://www.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://www.gstatic.com *.liveperson.net *.liveperson.com *.lprnd.net *.lpsnmedia.net; frame-ancestors 'self' https://www.transbank.cl/; object-src 'none'; base-uri 'none'; 1
default-src 'none'; connect-src 'self' www.google-analytics.com; font-src 'self' data:; img-src 'self' www.google-analytics.com; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'unsafe-inline' 'self' www.google-analytics.com; style-src 'unsafe-inline' 'self' 1
frame-ancestors 'self'  http://*.droom.in https://*.droom.in 1
connect-src 'self' https://*.clicktale.net https://*.demdex.net https://*.doubleclick.net https://*.everesttech.net https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.mktoresp.com https://*.optimizely.com https://*.pingdom.net https://*.reddit.com https://*.securelist.com https://*.youtube.com https://cdn.securelist.com https://e.infogram.com https://hn.algolia.com https://kaspersky.d3.sc.omtrdc.net https://kasperskycontenthub.com https://securelist.com https://tagmanager.google.com https://tpc.googlesyndication.com https://www.google-analytics.com; default-src 'self' https://*.securelist.com https://cdn.securelist.com https://kasperskycontenthub.com https://kasperskycontenthub.com/securelist https://securelist.com https://tpc.googlesyndication.com; font-src 'self' data: https://*.gstatic.com https://*.securelist.com https://*.wp.com https://assets.kasperskycontenthub.com https://assets.threatpost.com https://cdn.securelist.com https://fonts.googleapis.com https://fonts.gstatic.com https://kasperskycontenthub.com https://securelist.com https://tpc.googlesyndication.com; frame-src 'self' http://*.slideshare.net https://*.addthis.com https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.infogram.com https://*.instagram.com https://*.libsyn.com https://*.marketo.com https://*.securelist.com https://*.sekindo.com https://*.sharethis.com https://*.slideshare.net https://*.twitter.com https://*.wp.com https://*.youtube.com https://cdn.securelist.com https://infogram.com https://kasperskycontenthub.com https://player.vimeo.com https://s-static.ak.facebook.com https://securelist.com https://tagmanager.google.com https://tpc.googlesyndication.com https://www.brighttalk.com; img-src 'self' data: http://*.netdna-cdn.com http://*.wordpress.com http://*.wp.com http://assets.kasperskycontenthub.com http://assets.kasperskydaily.com http://assets.threatpost.com http://d2538mqrb7brka.cloudfront.net http://forum.kasperskyclub.ru http://i0.poll.fm http://media.kasperskycontenthub.com http://media.kasperskydaily.com http://media.threatpost.com https://*.addthis.com https://*.cdninstagram.com https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.gravatar.com https://*.gstatic.com https://*.infogram.com https://*.instagram.com https://*.netdna-cdn.com https://*.netdna-ssl.com https://*.securelist.com https://*.sekindo.com https://*.sharethis.com https://*.staticflickr.com https://*.twimg.com https://*.twitter.com https://*.wordpress.com https://*.wp.com https://*.ytimg.com https://addevent.com https://assets.kasperskycontenthub.com https://assets.kasperskydaily.com https://assets.threatpost.com https://blog.kaspersky.com https://cdn.securelist.com https://csi.gstatic.com https://d1srlirzdlmpew.cloudfront.net https://d2538mqrb7brka.cloudfront.net https://geo.yahoo.com https://images.telechargement.fr https://instagramimages-a.akamaihd.net https://kaspersky.d2.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://maps.googleapis.com https://media.kasperskycontenthub.com https://media.kasperskydaily.com https://media.threatpost.com https://player.vimeo.com https://polldaddy.com https://rum-collector.pingdom.net https://s.w.org https://s3-eu-west-1.amazonaws.com https://scontent.cdninstagram.com https://securelist.com https://stats.g.doubleclick.net https://t.co https://tagmanager.google.com https://threatpost.com https://tpc.googlesyndication.com https://track.addevent.com; object-src 'self' https://*.securelist.com https://kasperskycontenthub.com https://player.vimeo.com https://polldaddy.com https://securelist.com https://tpc.googlesyndication.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' http://assets.kasperskycontenthub.com http://assets.threatpost.com https://*.addevent.com https://*.addthis.com https://*.cloudfront.net https://*.crazyegg.com https://*.demdex.net https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.flickr.com https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.googlesyndication.com https://*.gravatar.com https://*.gstatic.com https://*.instagram.com https://*.kaspersky.com https://*.marketo.com https://*.marketo.net https://*.optimizely.com https://*.polldaddy.com https://*.securelist.com https://*.sekindo.com https://*.sharethis.com https://*.twimg.com https://*.twitter.com https://*.woopra.com https://*.wp.com https://addthisevent.com https://adservice.google.com https://adservice.google.hr https://adservice.google.ru https://assets.adobedtm.com https://assets.kasperskycontenthub.com https://assets.threatpost.com https://cdn.optimizely.com https://cdn.securelist.com https://connect.facebook.net https://connect.mail.ru https://e.infogram.com https://kaspersky.d2.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://m.addthisedge.com https://munchkin.marketo.net https://player.vimeo.com https://polldaddy.com https://rum-static.pingdom.net https://script.crazyegg.com https://securelist.com https://share.yandex.ru/ https://static.ads-twitter.com https://tagmanager.google.com https://tpc.googlesyndication.com https://vk.com https://www.addevent.com https://www.brighttalk.com https://www.flickr.com https://www.googletagmanager.com https://www.googletagservices.com https://www.linkedin.com; style-src 'self' 'unsafe-inline' http://*.googleapis.com http://assets.kasperskycontenthub.com http://assets.threatpost.com https://*.googleapis.com https://*.gravatar.com https://*.kaspersky.com https://*.marketo.com https://*.securelist.com https://*.sekindo.com https://*.sharethis.com https://*.twimg.com https://*.twitter.com https://*.wp.com https://assets.kasperskycontenthub.com https://assets.threatpost.com https://cdn.securelist.com https://fonts.googleapis.com https://kasperskycontenthub.com https://s0.wp.com https://secure.gravatar.com https://securelist.com https://tagmanager.google.com https://tpc.googlesyndication.com 1
default-src wss://ws.ttsep.com/ accounts.google.com 'self' blob: data: 'unsafe-inline' 'unsafe-eval' https:; form-action https:; upgrade-insecure-requests; 1
default-src 'none'; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' *.apple.com *.cdn-apple.com *.apple-mapkit.com *.apple-cloudkit.com *.apple-livephotoskit.com; style-src 'self' data: 'unsafe-inline' *.icloud.com.cn *.apple.com *.cdn-apple.com; img-src 'self' blob: data: icloud.com.cn *.icloud.com.cn *.apple.com *.cdn-apple.com *.icloud-content.com *.apple-mapkit.com; media-src 'self' blob: data: *.icloud.com.cn *.apple.com *.cdn-apple.com *.icloud-content.com; font-src 'self' blob: data: icloud.com.cn *.icloud.com.cn *.apple.com *.cdn-apple.com; connect-src blob: 'self' icloud.com.cn *.icloud.com.cn *.apple.com *.cdn-apple.com *.icloud-content.com *.apple-mapkit.com; frame-src 'self' blob: mailto: tel: *.icloud.com.cn *.apple.com *.icloud-sandbox.com *.icloud-content.com; frame-ancestors 'self' *.icloud.com.cn *.apple.com; form-action 'self' *.icloud.com.cn; child-src blob: 'self'; base-uri 'self' *.icloud.com.cn *.cdn-apple.com; report-uri https://feedbackws.icloud.com.cn/reportRaw 1
frame-ancestors *.toast.com *.dooray.com dooray.com 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; media-src 'self' blob: https:; worker-src 'self' blob:; frame-ancestors 'self'; frame-src 'self' https: data:; upgrade-insecure-requests; manifest-src 'self'; report-uri https://hwacuk.report-uri.com/r/d/csp/enforce 1
frame-ancestors vanderbilt.edu/AEA 'self' 1
default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src blob: js.driftt.com *.youtube-nocookie.com *.marketo.com; connect-src 'self' *.6sc.co *.6sense.com *.company-target.com *.google-analytics.com *.litix.io *.mktoresp.com *.mktoutil.com *.stripe.com *.wistia.com api.lever.co embedwistia-a.akamaihd.net hackerone.com secure.adnxs.com stats.g.doubleclick.net; font-src 'self' data: fonts.gstatic.com; form-action 'self' *.marketo.com *.twitter.com; frame-ancestors 'self'; frame-src 'self' fast.wistia.com js.driftt.com *.youtube.com *.youtube-nocookie.com *.marketo.com *.twitter.com my.pima.app; object-src 'self'; img-src 'self' data: *.6sc.co *.adsymptotic.com *.bidr.io *.company-target.com *.google-analytics.com *.google.com *.linkedin.com *.techtarget.com *.twimg.com *.twitter.com cdn.bizible.com cdn.bizibly.com cdn.ttgtmedia.com embed-fastly.wistia.com embedwistia-a.akamaihd.net fast.wistia.com id.rlcdn.com stats.g.doubleclick.net t.co via.placeholder.com; media-src 'self' blob: data: *.wistia.com embedwistia-a.akamaihd.net; script-src 'self' 'unsafe-eval' 'sha256-chw1FVji+ddLlO/RrcP3fhKOLsJUUh+FaKbjsOC2BiQ=' 'sha256-D6d37gZGDMRuNu3bDdYkGuOfCaaNGdTrB3eF5d5IU/Y=' 'sha256-XrP50Mq6s78GLH2Vyt4BfKhn8rx4OdU6FYqQGbxRuZc=' *.6sc.co *.ads-twitter.com *.cloudflare.com *.demandbase.com *.google-analytics.com *.linkedin.com *.techtarget.com *.twitter.com *.marketo.com *.ads-twitter.com cdn.bizible.com cdn.syndication.twimg.com fast.wistia.com js.driftt.com munchkin.marketo.net snap.licdn.com unpkg.com; style-src 'self' 'unsafe-inline' *.twitter.com *.marketo.com checkout.stripe.com fast.wistia.com fonts.googleapis.com; report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598 1
child-src https://www.policybazaar.com https://static.pbcdn.in/ https://www.youtube.com/ https://s7.addthis.com/ https://platform-api.sharethis.com/ https://c.sharethis.mgr.consensu.org/ https://pbchat.policybazaar.com/ https://maps.google.co.in/ 1
default-src 'self'; style-src 'self' s.weblate.org; img-src 'self' data: stats.cihar.com hosted.weblate.org blog.cihar.com www.thepay.cz *.githubusercontent.com; script-src 'self' cdn.ravenjs.com stats.cihar.com; connect-src 'self' stats.cihar.com; object-src 'none'; font-src 'self' s.weblate.org; frame-src 'none'; frame-ancestors 'none'; report-uri https://sentry.io/api/1305560/security/?sentry_key=795461fdeabc4ff6a3b6a6dedc495b5f 1
script-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com tagmanager.google.com www.youtube.com s.ytimg.com cdn-3.convertexperiments.com app.convert.com data.track.convertexperiments.com 1003350.track.convertexperiments.com 1003343.track.convertexperiments.com; style-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com 'unsafe-inline' app.convert.com; img-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com data: mozilla.org www.googletagmanager.com www.google-analytics.com adservice.google.com adservice.google.de adservice.google.dk creativecommons.org cdn-3.convertexperiments.com logs.convertexperiments.com api.map.baidu.com; child-src www.googletagmanager.com www.google-analytics.com www.youtube-nocookie.com trackertest.org www.surveygizmo.com accounts.firefox.com accounts.firefox.com.cn www.youtube.com; connect-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com www.googletagmanager.com www.google-analytics.com https://accounts.firefox.com.cn/ https://accounts.firefox.com.cn/; frame-src www.googletagmanager.com www.google-analytics.com www.youtube-nocookie.com trackertest.org www.surveygizmo.com accounts.firefox.com accounts.firefox.com.cn www.youtube.com; media-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com *.firefox.com.cn; default-src 'self' *.mozilla.net *.mozilla.org *.mozilla.com 1
default-src https: 'unsafe-inline'; script-src 'self' https://dev.visualwebsiteoptimizer.com https://www.google-analytics.com https://embed.typeform.com https://d5phz18u4wuww.cloudfront.net https://cdnjs.cloudflare.com https://seal.digicert.com https://js.stripe.com https://www.googleadservices.com https://billing.quaderno.io https://www.gstatic.com https://s3-eu-west-1.amazonaws.com https://snap.licdn.com https://px.ads.linkedin.com https://www.linkedin.com https://d1fc8wv8zag5ca.cloudfront.net ; img-src 'self' data: https://dev.visualwebsiteoptimizer.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.es https://www.google.com https://mailtrackio.typeform.com https://www.googleadservices.es https://www.googleadservices.com https://googleads.g.doubleclick.net https://seal.digicert.com https://billing.quaderno.io https://s3-eu-west-1.amazonaws.com https://dc.ads.linkedin.com https://d1ptrxl5bj7757.cloudfront.net https://px.ads.linkedin.com ; object-src 'none'; font-src 'self' https://fonts.gstatic.com https://netdna.bootstrapcdn.com https://cdnjs.cloudflare.com https://s3-eu-west-1.amazonaws.com 1
default-src 'self'; script-src 'self' c.mql5.com www.tradays.com trade.mql5.com www.mql5.com content.mql5.com search.mql5.com connect.facebook.net www.facebook.com player.youku.com mc.yandex.ru https://c.paypal.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com pagead2.googlesyndication.com www.googletagservices.com adservice.google.com.cy adservice.google.com tpc.googlesyndication.com https://cdn.chatbot.com test-api.sumsub.com api.sumsub.com static.sumsub.com 'unsafe-inline' 'unsafe-eval'; style-src player.youku.com c.mql5.com www.tradays.com 'unsafe-inline'; img-src 'self' msg1.mql5.com c.mql5.com www.mql5.com content.mql5.com download.mql5.com charts.mql5.com www.metatrader5.com www.metatrader4.com www.metaquotes.net www.metaquotes.ru www.tradays.com trade.mql5.com blob: data: *.tile.openstreetmap.org connect.facebook.net www.facebook.com mc.yandex.ru https://c.paypal.com https://b.stats.paypal.com https://dub.stats.paypal.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com pagead2.googlesyndication.com; media-src 'self' msg1.mql5.com trade.mql5.com c.mql5.com; font-src c.mql5.com trade.mql5.com; connect-src 'self' content.mql5.com trade.mql5.com https://msg1.mql5.com wss://msg1.mql5.com wss://gwt1.mql5.com wss://gwt2.mql5.com wss://gwt3.mql5.com wss://gwt4.mql5.com wss://gwt5.mql5.com wss://gwt6.mql5.com wss://gwt7.mql5.com wss://gwt8.mql5.com wss://gwt9.mql5.com wss://gwt10.mql5.com wss://gwt11.mql5.com wss://gwt12.mql5.com wss://gwt13.mql5.com wss://gwt14.mql5.com wss://gwt15.mql5.com wss://gwt99.mql5.com connect.facebook.net www.facebook.com mc.yandex.ru https://cdn.chatbot.com https://www.google-analytics.com pagead2.googlesyndication.com; frame-src 'self' c.mql5.com www.tradays.com trade.mql5.com content.mql5.com player.youku.com www.youtube.com www.facebook.com https://c.paypal.com https://www.googletagmanager.com https://bid.g.doubleclick.net https://googleads.g.doubleclick.net googleads.g.doubleclick.net tpc.googlesyndication.com https://cdn.chatbot.com test-api.sumsub.com api.sumsub.com blob: mql5buy: mql4buy:; object-src 'self' c.mql5.com www.tradays.com trade.mql5.com player.youku.com www.youtube.com blob:; worker-src 'self' c.mql5.com trade.mql5.com player.youku.com www.youtube.com blob:; 1
frame-ancestors 'self' https://*.ohio.edu http://*.ohio.edu http://*.ohiou.edu https://*.ohiou.edu; 1
frame-ancestors 'self' stc.marketing.adobe.com 1
default-src 'self'  *.destatis.de; base-uri 'self'; style-src 'self' 'unsafe-inline' *.destatis.de piwik.itzbund.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.destatis.de piwik.itzbund.de doo.net ;object-src 'self' multimedia.gsb.bund.de  *.destatis.de piwik.itzbund.de ; media-src 'self' multimedia.gsb.bund.de *.youtube.com www.quirksmode.org  *.destatis.de piwik.itzbund.de; child-src *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com *.destatis.de *.itzbund.de *.euro-area-statistics.org *.ims-cms.net *.teambits.events doo.net/de-de/widget/ data: ; img-src 'self' data: blob: *.google.com *.gstatic.com *.youtube.com  *.destatis.de piwik.itzbund.de; frame-ancestors 'self'; 1
default-src 'self' * data: blob: https: *.vpnmentor.com vpnmentor.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.datadoghq-browser-agent.com *.ampproject.org *.gstatic.com *.google.com *.alooma.com *.doubleclick.net  *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.hhtpp.com *.bing.com *.yandex.ru *.quora.com *.yimg.com sp.analytics.yahoo.com *.hotjar.com *.ipify.org blob: data:; style-src 'self' data: blob: 'unsafe-inline' *;connect-src 'self' data: blob: https: vpnmentor.com *.vpnmentor.com  *.ampproject.org *.google-analytics.com *.doubleclick.net *.google.com *.hhtpp.com *.yandex.ru *.gravatar.com wss://*.hotjar.com *.wp.com;font-src 'self' data: blog: *.ampproject.org *.googletagmanager.com *.googleapis.com *.gstatic.com; 1
script-src 'nonce-395b97cb44902d493dc2d634420dd2ef' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=2759579384162838; frame-ancestors 'self' 1
script-src 'nonce-0ae4b0ddfc8cd2597ddac6046a926cda' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=4995148168096656; frame-ancestors 'self' 1
default-src 'self';      script-src 'self' 'unsafe-inline' 'unsafe-eval' *.fisglobal.com *.wistia.net *.wistia.com *.addtoany.com *.google-analytics.com *.marketo.net *.googletagmanager.com *.hotjar.com *.facebook.net *.google.com *.marketo.com *.googleadservices.com *.jquery.com *.googleapis.com *.linkedin.com *.cloudflare.com *.ads-twitter.com *.doubleclick.net *.twitter.com *.facebook.com *.instagram.com *.twitter.com *.youtube.com *.adwords.google.com *.fisevents.com *.addevent.com *.ceros.com *.feefo.com *.siteimproveanalytics.com *.optimizely.com *.mediahawk.co.uk *.taboola.com *.force24.co.uk *.bing.com *.baidu.com *.gstatic.com okt.to *.addtoany.com *.oktopost.com *.adnxs.com *.bizographics.com *.cloudfront.net *.licdn.com *.litix.io *.yourvoice2us.com *.strala.com *.adsrvr.org *.crwdcntrl.net *.brainshark.com *.mapbox.com *.adsymptotic.com *.bizible.com;     connect-src 'self' *.fisglobal.com *.wistia.com *.hotjar.com *.akamaihd.net *.facebook.com *.marketo.com *.google.com *.twitter.com *.facebook.com *.instagram.com *.twitter.com *.youtube.com *.adwords.google.com *.fisevents.com fisevents.com *.linkedin.com *.feefo.com *.strala.com *.yahooapis.com *.litix.io *.mktoresp.com *.amazonaws.com *.optimizely.com *.taboola.com *.mediahawk.co.uk *.mapbox.com;      img-src 'self' 'unsafe-inline' blob: data: *.fisglobal.com *.wistia.com *.wistia.net *.doubleclick.net *.google-analytics.com fast.wistia.net *.google.com *.marketo.com *.facebook.com  *.akamaihd.net *.googleadservices.com *.googletagmanager.com *.linkedin.com *.google.co.uk *.gstatic.com *.adnxs.com *.google.co.in t.co *.litix.io *.bing.com *.siteimproveanalytics.com *.baidu.com *.mapbox.com *.adsymptotic.com *.bizible.com *.bizibly.com;      style-src 'self' 'unsafe-inline' *.fisglobal.com *.wistia.com *.wistia.net *.bootstrapcdn.com *.googleapis.com *.marketo.com *.googleapis.com  *.google.com *.cloudflare.com *.mapbox.com;     child-src 'self' 'unsafe-inline' blob: *.fisglobal.com *.sitecore.net *.wistia.com *.wistia.net *.nyceinfomanager.com *.nyceinfomanagerdr.com *.hotjar.com *.fls.doubleclick.net *.youtube.com *.marketo.com fast.wistia.net *.ceros.com *.fisevents.com http://fisevents.com *.frontarena.com *.facebook.net *.doubleclick.net *.facebook.com *.instagram.com *.twitter.com *.youtube.com *.adwords.google.com *.linkedin.com *.amazonaws.com *.google.com *.peopleclick.com *.segmint.net *.brainshark.com *.mapbox.com *.brightcove.net *.transistor.fm;      font-src 'self' 'unsafe-inline' data: *.fisglobal.com *.wistia.com *.wistia.net fast.wistia.net *.bootstrapcdn.com *.cloudflare.com *.gstatic.com;     media-src 'self' 'unsafe-inline' blob: data: *.fisglobal.com *.wistia.com *.wistia.net fast.wistia.net *.akamaihd.net;  frame-ancestors 'self' *.nyceinfomanager.com 1
object-src 'none'; script-src 'nonce-MVj2Vk1T5gAT60Lh1SFq' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'none'; report-uri https://sentry.io/api/1833953/security/?sentry_key=760cfc2ebe6c4907beef03ce792ac5bb 1
frame-ancestors 'self' https://*.kicker.de; 1
frame-ancestors 'self'  *.interactivebrokers.com  *.interactivebrokers.ca  *.interactivebrokers.com.hk  *.interactivebrokers.ch  *.interactivebrokers.co.uk  *.interactivebrokers.com.au  *.interactivebrokers.co.jp  *.interactivebrokers.co.in  *.ibkram.com  *.interactiveadvisors.com  *.ibkr.com  *.ibkr.com.cn  *.clientam.com  *.youtube.com  *.clientam.ch  *.clientam.com.hk  *.greenwichcompliance.com; 1
default-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; style-src 'unsafe-inline' https:; img-src data: https: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; font-src 'unsafe-inline' https: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; connect-src https: http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; 1
frame-ancestors *.melia.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'nonce-NzAsMjQyLDczLDY4LDIxMywxMDAsMTkwLDI1Mw==' https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://ssl.google-analytics.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://hcaptcha.com https://*.hcaptcha.com https://s.ytimg.com/yts/jsbin/ https://www.youtube.com/iframe_api; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hcaptcha.com https://hcaptcha.com; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://cdn.discordapp.com https://hackerone-api.discord.workers.dev/user-avatars/ https://safety.discord.com https://discordmoderatoracademy.zendesk.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://discordapp.com https://discord.com https://connect.facebook.net https://api.greenhouse.io https://api.github.com https://sentry.io https://www.google-analytics.com https://hackerone-api.discord.workers.dev https://*.hcaptcha.com https://hcaptcha.com ws://127.0.0.1:* http://127.0.0.1:*; media-src 'self' https://cdn.discordapp.com/assets/; frame-src https://discordapp.com/domain-migration https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://www.youtube.com/embed/ https://hackerone.com/631fba12-9388-43c3-8b48-348f11a883c0/; 1
child-src mc.yandex.md blob: yandexadexchange.net yandex.com.tr yandex.ru mc.yandex.com.tr yastat.net zen.yandex.com.tr awaps.yandex.net *.yandexadexchange.net mc.yandex.ru *.yandex.ru banners.adfox.ru yastatic.net;media-src strm.yandex.ru yandex.ru *.strm.yandex.ru yandex.st blob: *.yandex.net yastatic.net banners.adfox.ru data: yastat.net content.adfox.ru;default-src yastatic.net awaps.yandex.net zen.yandex.com.tr awaps.yandex.ru yastat.net;img-src yastat.net awaps.yandex.net banners.adfox.ru mc.yandex.com *.tns-counter.ru ad.doubleclick.net *.verify.yandex.ru wcm.solution.weborama.fr awaps.yandex.ru avatars-fast.yandex.net amc.yandex.ru favicon.yandex.net content.adfox.ru zen.s3.yandex.net mc.yandex.ru gdeby.hit.gemius.pl wcm-ru.frontend.weborama.fr px.moatads.com verify.yandex.ru ads6.adfox.ru pixel.adlooxtracking.com an.yandex.ru gdero.hit.gemius.pl data: yastatic.net bs.serving-sys.com ad.adriver.ru 'self' mc.yandex.com.tr ads.adfox.ru zen.yandex.com.tr *.mediascope.mc.yandex.ru s3.mds.yandex.net yandex.com.tr avatars.mds.yandex.net mc.admetrica.ru yandex.ru;script-src ads.adfox.ru zen.yandex.com.tr mc.yandex.com.tr 'nonce-Vn54uazP5G+7oUpMjxqg0g==' yastat.net an.yandex.ru yastatic.net banners.adfox.ru mc.yandex.ru ads6.adfox.ru yandex.com.tr yandex.ru yandex.st;connect-src mc.yandex.ru zen.yandex.com.tr ads.adfox.ru mc.yandex.com.tr yandex.ru mc.admetrica.ru yandex.com.tr ads6.adfox.ru *.strm.yandex.net adfox.yandex.ru yastatic.net yabs.yandex.ru awaps.yandex.net an.yandex.ru yastat.net strm.yandex.ru *.strm.yandex.ru yandex.st matchid.adfox.yandex.ru awaps.yandex.ru jstracer.yandex.ru;report-uri https://csp.yandex.net/csp?project=morda&from=morda.spok.com.tr&showid=1609215441.89082.82710.142434&h=stable-morda-sas-yp-44&csp=new&date=20201229&yandexuid=1861483801609215441;style-src yastatic.net banners.adfox.ru yandex.st zen.yandex.com.tr 'unsafe-inline' yastat.net content.adfox.ru;font-src 'self' yastatic.net an.yandex.ru yastat.net zen.yandex.com.tr data: 1
frame-ancestors 'self' http://register.rcsreg.com 1
default-src 'self' data: ws: 'unsafe-inline' 'unsafe-eval' *.clutch.co cdn.jsdelivr.net *.cloudflare.com *.google.com *.google.pl *.googleapis.com *.gstatic.com *.googletagmanager.com *.cookiebot.com *.google-analytics.com *.hs-scripts.com *.hsleadflows.net js.hs-banner.com *.hs-analytics.net *.hsforms.net *.hsforms.com js.usemessages.com *.cloud.es.io *.hubspot.com *.doubleclick.net *.shgstatic.com *.hotjar.com *.hotjar.io *.pingdom.net cdn.tiny.cloud *.addthis.com *.addthisedge.com youtube.com *.youtube.com *.youtube-nocookie.com *.facebook.com *.vimeo.com z.moatads.com *.s3.amazonaws.com consent.azureedge.net *.paystand.com *.kickfire.com *.stripe.com browser.sentry-cdn.com hcaptcha.com *.hcaptcha.com; img-src 'self' data: blob: *.shgstatic.com clutch.co *.clutch.co *.tinymce.com *.google.com *.google.pl *.hubspot.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.addthis.com *.ytimg.com *.gstatic.com *.kickfire.com *.googletagmanager.com *.hotjar.com; 1
frame-ancestors 'self' *.gsmarena.com *.killerfeatures.com *.91mobiles.com 1
frame-ancestors https://ww2.coolmathgames.com https://www.coolmathgames.com http://www.coolmath-games.com https://www.coolmath-games.com 1
frame-src https://*; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.uibk.ac.at; style-src 'self' 'unsafe-inline' https://*.uibk.ac.at; img-src 'self' data: https://*.uibk.ac.at; media-src 'self' blob: https://*.uibk.ac.at; font-src 'self' data: https://*.uibk.ac.at; object-src 'self'; default-src 'self' https://*.uibk.ac.at; report-uri /csp-reports/ 1
default-src 'self' *.ekantipur.com *.kantipurdaily.com; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; prefetch-src 'none'; 1
frame-ancestors 'self' tvn24.pl *.tvn24.pl 1
default-src 'self'; child-src * 'self'; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; worker-src 'self' blob:; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data:; media-src https: blob:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests; report-uri https://lavoz.report-uri.io/r/default/csp/enforce 1
default-src * data: 'unsafe-inline'; frame-ancestors 'self' *.metacpan.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.metacpan.org *.google-analytics.com *.google.com www.gstatic.com *.flattr.com 1
default-src 'unsafe-inline' 'unsafe-eval' https: data:; block-all-mixed-content; upgrade-insecure-requests 1
default-src 'self' gstatic.gitbook.com *.gitbook-staging.com *.gitbook.com *.firebaseio.com wss://*.firebaseio.com *.cloudfunctions.net *.googleapis.com *.gstatic.com data: *.google.com *.github.com *.algolianet.com *.algolia.net sentry.io *.logrocket.io *.lr-ingest.io *.stripe.com *.clearbit.com *.google-analytics.com d3hb14vkzrxvla.cloudfront.net d1j8pt39hxlh3d.cloudfront.net *.iframe.ly blob: cdn.jsdelivr.net cdnjs.cloudflare.com api.amplitude.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://share.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://js.intercomcdn.com https://intercom.help; script-src 'self' gstatic.gitbook.com 'unsafe-inline' *.firebaseio.com *.google.com polyfill.io cdn.lr-ingest.io cdn.logrocket.io *.stripe.com *.clearbit.com *.google-analytics.com *.iframe.ly *.gstatic.com cdnjs.cloudflare.com *.intercom.io *.intercomcdn.com gitbookio.github.io https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com; style-src 'self' gstatic.gitbook.com 'unsafe-inline' fonts.googleapis.com unpkg.com cdnjs.cloudflare.com cdn.jsdelivr.net; img-src * data: blob: https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com  https://messenger-apps.intercom.io https://*.intercom-attachments.com; frame-src *; object-src 'none'; child-src 'self' blob:; worker-src 'self' blob:; frame-ancestors https: 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' api-us1.cludo.com ajax.googleapis.com https://*.boisestate.edu fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ d25vtythmttl3o.cloudfront.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' api-us1.cludo.com ajax.googleapis.com customer.cludo.com https://*.boisestate.edu fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ d25vtythmttl3o.cloudfront.net; style-src 'self' 'unsafe-inline' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ d25vtythmttl3o.cloudfront.net ajax.googleapis.com cloud.typography.com customer.cludo.com https://*.boisestate.edu; img-src data: * ; font-src data: cloud.typography.com 'self' https://*.boisestate.edu; connect-src 'self' api-us1.cludo.com https://*.boisestate.edu *.pusherapp.com *.pusher.com fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/; media-src 'self' https://*.boisestate.edu fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ d25vtythmttl3o.cloudfront.net; object-src 'self' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ d25vtythmttl3o.cloudfront.net https://*.boisestate.edu; worker-src 'self' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ d25vtythmttl3o.cloudfront.net https://*.boisestate.edu; frame-src 'self' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ d25vtythmttl3o.cloudfront.net https://*.boisestate.edu; ; frame-ancestors 'self' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ d25vtythmttl3o.cloudfront.net https://*.boisestate.edu ; form-action 'self' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ d25vtythmttl3o.cloudfront.net https://*.boisestate.edu ; upgrade-insecure-requests; block-all-mixed-content; 1
default-src https:; connect-src https: *; script-src 'unsafe-inline' 'unsafe-eval' https: *; style-src 'unsafe-inline' https: *; img-src 'self' data: https: www.googletagmanager.com www.google-analytics.com; font-src 'self' data: https: fonts.gstatic.com; object-src 'self'; frame-src *; frame-ancestors 'self' 1
frame-ancestors 'self' https://*.myfxbook.com 1
default-src https: 'self' data:; font-src https: data:; img-src https: data:; script-src https: 'self' data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; report-uri https://dxw.report-uri.com/r/d/csp/enforce; 1
frame-ancestors 'self' https://my.kinsta.com https://mydev.kinsta.com https://mydev2.kinsta.com https://demo.kinsta.com https://kinsta-demo.herokuapp.com https://*.kinsta.ninja 1
frame-ancestors 'self' *.dillards.com 1
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob; img-src data: https: android-webview-video-poster: blob:; font-src data: https:; upgrade-insecure-requests; 1
default-src data: https: https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'none' 1
frame-ancestors 'self' *.themeforest.net themeforest.net codecanyon.net *.codecanyon.net 1
frame-ancestors https://*.stoiximan.gr:* 1
object-src https://liveshareeast3.seismic.com https://cvent.seismic.com https://explore.cvent.com http://explore.cvent.com https://*.speedrfp.com https://speedrfp.com https://*.elitemeetings.com https://elitemeetings.com https://*.hotelprofiler.com https://www.lanyon.com http://www.lanyon.com; frame-ancestors 'self' https://liveshareeast3.seismic.com https://cvent.seismic.com https://explore.cvent.com http://explore.cvent.com  https://*.speedrfp.com https://speedrfp.com https://*.elitemeetings.com https://elitemeetings.com https://*.hotelprofiler.com https://www.lanyon.com http://www.lanyon.com https://*.cvent.com http://*.cvent.com; report-uri /report-csp-violation 1
default-src 'self'; child-src 'self' share.intercom.io connect.facebook.net fast.wistia.com fast.wistia.net googleads.g.doubleclick.net *.hotjar.com bid.g.doubleclick.net 10317493.fls.doubleclick.net 10366747.fls.doubleclick.net youtube.com www.youtube.com js.stripe.com www.facebook.com staticxx.facebook.com *.soundcloud.com ti.to *.tito.io *.cdn.optimizely.com tpc.googlesyndication.com www.google.com ethn.io *.quora.com intercom-sheets.com app-ab27.marketo.com www.intercom-reporting.com d2c7xlmseob604.cloudfront.net js.intercomcdn.com insight.adsrvr.org; connect-src 'self'   www.intercom.com app.intercom.io app.intercom.com api.intercom.io api-visitor-analytics.intercom.com api-iam.intercom.io api-ping.intercom.io api.smartling.com js.intercomcdn.com nexus-websocket-a.intercom.io nexus-websocket-test.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-test.intercom.io store.intercomassets.com widget.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-test.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com abrtp1.marketo.com abrtp1-cdn.marketo.com app.getsentry.com stats.g.doubleclick.net www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com sentry.io www.facebook.com *.akamaihd.net *.optimizely.com *.wistia.com *.wistia.net *.quora.com *.soundcloud.com *.sndcdn.com *.clearbit.com 258-clw-344.mktoresp.com bat.bing.com cdn.bizible.com d2c7xlmseob604.cloudfront.net rum-collector-2.pingdom.net rum-http-intake.logs.datadoghq.com public-trace-http-intake.logs.datadoghq.com heapanalytics.com; font-src data: https: ; img-src data: blob: https: ; media-src data: blob: https: ; object-src 'none'; script-src 'self' 'unsafe-eval' app.intercom.io app.intercom.com js.intercomcdn.com store.intercomassets.com marketing.intercomassets.com widget.intercom.io ajax.googleapis.com analytics.twitter.com abrtp1.marketo.com abrtp1-cdn.marketo.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com bat.bing.com cdn-assets-prod.s3.amazonaws.com cdn.optimizely.com cdn3.optimizely.com cdn.ravenjs.com browser.sentry-cdn.com connect.facebook.net distillery.wistia.com distillery-main.wistia.com ethn.io fast.wistia.com fast.wistia.net ga.clearbit.com googleads.g.doubleclick.net sjs.bizographics.com js.stripe.com munchkin.marketo.net platform.twitter.com reveal.clearbit.com rtp-static.marketo.com script.hotjar.com secure.adnxs.com snap.licdn.com static.ads-twitter.com static.hotjar.com stats.g.doubleclick.net store.intercom.io ti.to tpc.googlesyndication.com www.datadoghq-browser-agent.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com *.jquery.com *.tito.io *.linkedin.com *.quora.com *.soundcloud.com *.sndcdn.com *.widerfunnel.com 'strict-dynamic' 'nonce-M2JiOGYwNzEtZGM5MS00ZDg3LTg2MWMtYjA5YmQ1NGU5YjVm'; style-src 'self' 'unsafe-inline' *.tito.io app-ab27.marketo.com marketing.intercomassets.com maxcdn.bootstrapcdn.com rtp-static.marketo.com fonts.googleapis.com tagmanager.google.com heapanalytics.com; worker-src data: blob: 1
default-src 'self' https://tpc.googlesyndication.com https://*.safeframe.googlesyndication.com https://p11.techlab-cdn.com p11.techlab-cdn.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://be.wizzair.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://optimize.google.com https://connect.facebook.net https://cloudfront.loggly.com https://aff.bstatic.com https://widget.rentalcars.com *.akamaihd.net https://youtube.com https://www.youtube.com https://*.ytimg.com https://instagram.com https://www.instagram.com https://securepubads.g.doubleclick.net https://adservice.google.hu https://adservice.google.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://cdn.ampproject.org https://www.googletagservices.com https://p11.techlab-cdn.com https://*.pingdom.net https://browser.sentry-cdn.com p11.techlab-cdn.com; connect-src 'self' wss: *.wizzair.com *.loggly.com *.akamaihd.net https://waplazrass01.search.windows.net https://www.google-analytics.com https://partner.wizzair.com https://widget.rentalcars.com https://api.instagram.com https://www.facebook.com https://stats.g.doubleclick.net https://wizzmarathon.mito.hu https://www.rentalcars.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://csi.gstatic.com https://www.googleadservices.com https://p11.techlab-cdn.com https://*.pingdom.net https://*.sentry.io p11.techlab-cdn.com; img-src 'self' data: https:; media-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com https://widget.rentalcars.com https://cars.wizzair.com; font-src 'self' data: https://fonts.gstatic.com; frame-src https://covidmap.wizzair.com https://5308433.fls.doubleclick.net https://ff.doubleclick.net https://*.booking.com https://secure.rentalcars.com https://www.facebook.com https://web.facebook.com https://connect.facebook.net https://staticxx.facebook.com https://www.youtube.com https://optimize.google.com https://www.google.com https://www.instagram.com https://ir.q4europe.com https://tpc.googlesyndication.com https://*.safeframe.googlesyndication.com; prefetch-src https://*.safeframe.googlesyndication.com; frame-ancestors 'none'; object-src 'self'; manifest-src 'self' 1
connect-src 'self' logx.optimizely.com *.optimizely.com api.segment.io cdn.mxpnl.com api-js.mixpanel.com https://*.internal-weedmaps.com https://*.weedmaps.com https://internal-weedmaps.com https://weedmaps.com https://weedmaps.secure.force.com/ https://twitter.com https://*.twitter.com wss://*.internal-weedmaps.com wss://*.weedmaps.com *.google-analytics.com preview.contentful.com cdn.contentful.com graphql.contentful.com *.uptime.com api.honeybadger.io sdk.iad-03.braze.com *.perimeterx.net *.px-cloud.net *.pxchk.net *.px-cdn.net *.px-client.net https://rs.fullstory.com *.g.doubleclick.net *.google.com *.googlesyndication.com *.adzerk.net;default-src 'self' tpc.googlesyndication.com https://static.weedmaps.com;font-src 'self' data: https://static.weedmaps.com;frame-ancestors 'self';frame-src 'self' howlive.tv boards.greenhouse.io hire.withgoogle.com www.youtube.com app.optimizely.com a6360251288.cdn.optimizely.com www.google.com https://*.instagram.com https://twitter.com https://*.twitter.com https://*.facebook.com tr.snapchat.com service.force.com pixel-a.basis.net pixel.sitescout.com *.googletagmanager.com *.googlesyndication.com *.googletagservices.com weedmaps.secure.force.com weedmaps.force.com;img-src 'self' data: stats.g.doubleclick.net *.google-analytics.com weedmaps.com *.weedmaps.com https://wm-platform-users-production.s3-us-west-2.amazonaws.com *.internal-weedmaps.com weedmaps-uploads-production.s3.amazonaws.com i.ytimg.com api.mapbox.com acuityplatform.com *.ytimg.com *.google.com cdn.optimizely.com pixel-a.basis.net *.twimg.com https://twitter.com *.twitter.com images.ctfassets.net *.srv.stackadapt.com appboy-images.com pixel.sitescout.com *.perimeterx.net *.trafficjunky.net https://*.teads.tv https://ad.ipredictive.com https://rs.fullstory.com *.googlesyndication.com clickserv.basis.net/ ads.trafficjunky.net/ *.g.doubleclick.net/ clickserv.sitescout.com/ wmnews.wpengine.com;report-uri https://api-g.weedmaps.com/policy/reports;script-src 'self' 'unsafe-eval' *.greenhouse.io *.srv.stackadapt.com pixel.sitescout.com pixel-a.basis.net clickserv.basis.net clickserv.sitescout.com amplify.outbrain.com tr.snapchat.com sc-static.net *.google-analytics.com d24n15hnbwhuhn.cloudfront.net evs.segment.weedmaps.com cdn.mxpnl.com api-js.mixpanel.com acuityplatform.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com js.honeybadger.io weedmaps.my.salesforce.com *.salesforceliveagent.com service.force.com weedmaps.secure.force.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ uptime.com *.instagram.com https://twitter.com https://*.twitter.com https://*.twimg.com https://*.facebook.net *.googletagmanager.com client.perimeterx.net https://polyfill.io https://cdn.jsdelivr.net https://*.teads.tv https://ad.ipredictive.com https://edge.fullstory.com https://www.fullstory.com https://fullstory.com *.g.doubleclick.net *.google.com *.googletagservices.com *.googlesyndication.com cdn.ampproject.org https://static.weedmaps.com 'nonce-MSSrldt3Heg26l4Cm1Oo592WOobA1BDd0cCbX0e1LmRZAy5J' ;style-src 'self' data: 'unsafe-inline' service.force.com weedmaps.secure.force.com https://twitter.com *.twitter.com *.twimg.com *.googlesyndication.com;manifest-src 'self' https://static.weedmaps.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.acfun.tv https://*.acfun.cn http://*.acfun.cn http://*.aixifan.com https://*.aixifan.com wx.qq.com *.gifshow.com *.yximgs.com *.kuaishou.com http://*.etoote.com https://*.etoote.com fonts.gstatic.com at.alicdn.com cdnjs.cloudflare.com translate.googleapis.com http://fanyi.youdao.com fonts.googleapis.com http://*.aixifan.com data: blob: chrome-extension: ms-appx-web:;font-src 'self' 'unsafe-inline' * data: blob: http: https: safari-extension: chrome-extension:;img-src * data: blob: http: https: android-webview-video-poster:;media-src * data: blob: http: https: android-webview-video-poster: chrome-extension: ms-appx-web:;script-src 'self' 'unsafe-eval' 'unsafe-inline' http://*.acfun.cn https://*.acfun.cn http://*.yximgs.com https://*.yximgs.com *.acfun.tv *.gifshow.com *.kuaishou.com *.aixifan.com https://*.aixifan.com http://*.acfun.cn https://*.acfun.cn hm.baidu.com a.alipayobjects.com http://res.wx.qq.com https://res.wx.qq.com open.mobile.qq.com tjs.sjs.sinajs.cn cdnjs.cloudflare.com translate.google.com translate.google.cn translate.googleapis.com http://fanyi.youdao.com www.pagespeed-mod.com blob: data: chrome-extension:;connect-src 'self' * http: https: wss: data: blob: chrome-extension:;frame-src 'self' https://*.kuaishou.com http://fanyi.youdao.com *.acfun.cn https://*.acfun.cn http://*.acfun.cn jsbridge: bdvideo: sinaweibo: qqvideo: blob:;form-action 'self' *.acfun.cn http://*.acfun.cn https://*.acfun.cn;report-uri https://csplog.kuaishou.com/log/acfun 1
frame-ancestors 'self' *.dkb.de 1
default-src 'self' 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval' data:; frame-ancestors 'self' *.owncloud.com; img-src * data: blob: 'unsafe-inline'; frame-src *; connect-src 'self' *.mktoresp.com *.mktoutil.com *.owncloud.com *.google-analytics.com *.facebook.com *.doubleclick.net *.fontawesome.com; media-src 'self' *.24liveblog.com 'unsafe-inline'; style-src 'self' *.google.com *.gstatic.com *.googleapis.com *.cloudflare.com *.marketo.com *.mktoresp.com *.owncloud.com *.fontawesome.com 'unsafe-inline'; font-src 'self' * data: 1
default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' wss: https:; img-src * 'self' data: https:; font-src * 'self' data: https:; style-src * 'self' 'unsafe-inline' data: https: 1
base-uri https://www.mbank.pl; report-uri https://www.csp.mbank.pl; default-src 'none'; manifest-src 'self'; upgrade-insecure-requests; block-all-mixed-content; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' https://ad.doubleclick.net https://cdn.ampproject.org https://cdn.skp.mbank.pl https://cdn.syndication.twimg.com https://connect.facebook.net https://ghmpl.hit.gemius.pl https://googleads.g.doubleclick.net https://maps.googleapis.com https://optimize.google.com https://platform.twitter.com https://r.skp.mbank.pl https://s.ytimg.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://tagmanager.google.com https://tpc.googlesyndication.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.mbank.pl https://www.youtube.com; style-src 'report-sample' 'self' 'unsafe-inline' https://cdn.ampproject.org https://cdn.skp.mbank.pl https://fonts.googleapis.com https://fonts.gstatic.com https://optimize.google.com https://platform.twitter.com https://tagmanager.google.com https://ton.twimg.com https://www.mbank.pl; img-src 'report-sample' 'self' data: https://*.fls.doubleclick.net https://abs.twimg.com https://ad.doubleclick.net https://adservice.google.com https://cdn.ampproject.org https://cdn.skp.mbank.pl https://cm.g.doubleclick.net https://csi.gstatic.com https://ghmpl.hit.gemius.pl https://googleads.g.doubleclick.net https://i.ytimg.com https://khms0.googleapis.com https://khms1.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://marketing.tr.netsalesmedia.pl https://optimize.google.com https://pbs.twimg.com https://platform.twitter.com https://redirect.skp.mbank.pl https://s.ytimg.com https://ssl.google-analytics.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://syndication.twitter.com https://tagmanager.google.com https://ton.twimg.com https://www.facebook.com https://www.google-analytics.com https://www.google.be https://www.google.ch https://www.google.co.uk https://www.google.com https://www.google.com.ua https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.hr https://www.google.ie https://www.google.it https://www.google.nl https://www.google.no https://www.google.pl https://www.google.se https://www.google.sk https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.mbank.pl; font-src 'report-sample' 'self' https://fonts.gstatic.com https://www.mbank.pl; connect-src 'report-sample' 'self' https://ad.doubleclick.net https://adservice.google.com https://api.skp.mbank.pl https://cdn.ampproject.org https://cm.g.doubleclick.net https://form.axaubezpieczenia.pl https://ghmpl.hit.gemius.pl https://lp.skp.mbank.pl https://r.skp.mbank.pl https://redirect.skp.mbank.pl https://search.interconsystems.pl https://stats.g.doubleclick.net https://syndication.twitter.com https://tagmanager.google.com https://tracker.skp.mbank.pl https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.pl https://www.googletagmanager.com https://www.mbank.pl wss://api.skp.mbank.pl wss://r.skp.mbank.pl; media-src 'report-sample' 'self' data: https://cdn.skp.mbank.pl https://www.mbank.pl; object-src 'report-sample' 'self' https://www.mbank.pl https://www.youtube.com; frame-src 'report-sample' 'self' https://*.fls.doubleclick.net https://bid.g.doubleclick.net https://form.mbank.pl https://optimize.google.com https://platform.twitter.com https://tagmanager.google.com https://tpc.googlesyndication.com https://www.facebook.com https://www.googletagmanager.com https://www.mbank.pl https://www.youtube.com; child-src 'report-sample' 'self' https://*.fls.doubleclick.net https://bid.g.doubleclick.net https://form.mbank.pl https://tagmanager.google.com https://www.facebook.com https://www.googletagmanager.com https://www.mbank.pl https://www.youtube.com; form-action 'report-sample' 'self' https://form.mbank.com.pl https://form.mbank.pl https://www.mbank.pl; frame-ancestors 'report-sample' 'self' https://www.mbank.pl;  1
frame-ancestors 'self' https://splice.datadoghq.com 1
default-src 'self'; img-src 'self' data: *; font-src 'self' data:; connect-src 'self' *.ardmediathek.de *.tagesschau.de *.sportschau.de *.kika.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ioam.de; style-src 'self' 'unsafe-inline' 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.cnki.com.cn *.cnki.net *.baidu.com *.cnzz.com; 1
base-uri 'none'; script-src https: 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://services.postcodeanywhere.co.uk/ https://www.recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; font-src https: data:; object-src 'none'; default-src https:; style-src https: 'unsafe-inline' https://services.postcodeanywhere.co.uk/; img-src https: data: www.googletagmanager.com 1
worker-src 'self' *.austlii.edu.au *.austlii.unsw.edu.au *.datalex.org www.lawnet.sg; 1
report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-qJJq6bwXUqWiDsiivFIl' 'nonce-gdRL9v4NKosrl2af1p2c' 1
default-src 'self' * *.xhamsterpremium.com; img-src * data: blob:; media-src *; script-src 'self' 'unsafe-inline' https://assets-l3.flixcdn.com www.google.com www.gstatic.com *.amplitude.com www.google-analytics.com www.googletagmanager.com *.hotjar.com; style-src * 'unsafe-inline'; font-src * data: 'unsafe-inline' 1
default-src *; script-src * 'unsafe-inline'; style-src * 'unsafe-inline' blob:; img-src * data: blob: 1
frame-ancestors 'none'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-G/LbLWFx5UBTOM/WSjXriA==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.youtube.com *.yahooapis.com blob:; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; img-src 'self' data: https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv; media-src * blob:; object-src *; connect-src *; font-src * data:; child-src blob:; 1
default-src 'self' *.gradeup.co *.grdp.co; img-src 'self' blob: data: *.gradeup.co https://optimize.google.com https://events.ub-analytics.com business.topbuzz.com gradestack.com i.ytimg.com trc.taboola.com cost.affcost.com platform-lookaside.fbsbx.com d9hhrg4mnvzow.cloudfront.net csm.hk.as.criteo.net cm.g.doubleclick.net primedigital.go2cloud.org ad.admitad.com track.in.omgpm.com dis.criteo.com traqkar.com www.googletagmanager.com www.googleadservices.com myfaqprime.appspot.com heapanalytics.com *.googleusercontent.com *.grdp.co grdp.co *.facebook.com connect.facebook.net q.quora.com ssl.gstatic.com www.google-analytics.com stats.g.doubleclick.net *.google.com *.google.co.in googleads.g.doubleclick.net www.gstatic.com https://px.ads.linkedin.com https://p.adsymptotic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://optimize.google.com https://cdn.jsdelivr.net/gh/cferdinandi/smooth-scroll@15.0.0/dist/smooth-scroll.polyfills.min.js https://www.google.co.in/pagead cdn.heapanalytics.com *.gradeup.co s.ytimg.com cdn.ampproject.org cdn.taboola.com www.googletagservices.com tagmanager.google.com https://d34qb8suadcc4g.cloudfront.net https://sticker-d8067.firebaseio.com  https://s-usc1c-nss-281.firebaseio.com ajax.cloudflare.com builder-assets.unbounce.com accounts.google.com myfaqprime.appspot.com portal.referralcandy.com go.referralcandy.com cdn.asbmit.com platform.twitter.com www.youtube.com maps.googleapis.com adservice.google.com cdnjs.cloudflare.com adservice.google.co.in www.googleadservices.com *.googlesyndication.com smartlock.google.com *.g.doubleclick.net wzrkt.com d2r1yp2w7bby2u.cloudfront.net connect.facebook.net track.in.omgpm.com www.googletagmanager.com *.hansel.io *.grdp.co grdp.co www.google-analytics.com cdn.mouseflow.com static.bytedance.com sslwidget.criteo.com  www.gstatic.com *.wzrkt.com *.criteo.net *.ipstatp.com www.google.com apis.google.com static.cloudflareinsights.com widget.as.criteo.com maxcdn.bootstrapcdn.com ajax.googleapis.com; connect-src 'self' *.gradeup.co gradeup.co https://sheets.googleapis.com https://script.google.com https://script.googleusercontent.com wss://sticker-d8067.firebaseio.com wss://s-usc1c-nss-281.firebaseio.com json.faqprime.com *.facebook.com firebaseinstallations.googleapis.com *.hansel.io *.googlesyndication.com *.grdp.co grdp.co cdnjs.cloudflare.com o2.mouseflow.com heapanalytics.com www.googletagmanager.com fizz.gradestack.co wss://*.gradeup.co www.google-analytics.com cdn.ampproject.org accounts.google.com www.google.com stats.g.doubleclick.net cdn.ampproject.com; frame-src whatsapp: stats.g.doubleclick.net https://optimize.google.com https://sin.creativecdn.com https://asia.creativecdn.com https://10486142.fls.doubleclick.net https://s-usc1c-nss-281.firebaseio.com ts.tradetracker.net tl.tradetracker.net tracking.icubeswire.co www.youtube.com portal.referralcandy.com go.onelink.me accounts.google.com gum.criteo.com tpc.googlesyndication.com secure.payu.in gradeup.referralcandy.com www.facebook.com gradeup.co *.gradeup.co gradestack.com smartlock.google.com bid.g.doubleclick.net static.criteo.net www.googletagmanager.com workspace.hansel.io; style-src 'self' blob: data: *.grdp.co *.gradeup.co 'unsafe-inline' https://optimize.google.com unpkg.com builder-assets.unbounce.com cdnjs.cloudflare.com myfaqprime.appspot.com fonts.googleapis.com tagmanager.google.com translate.googleapis.com maxcdn.bootstrapcdn.com accounts.google.com cdn.ampprojectorg cdn.materialdesignicons.com cloud.typography.com; object-src 'none'; font-src 'self' blob: data: *.grdp.co https://optimize.google.com fonts.gstatic.com maxcdn.bootstrapcdn.com fast.fonts.net cloud.typography.com fonts.googleapis.com use.fontawesome.com cdnjs.cloudflare.com cdn.honey.io; worker-src blob: gradeup.co gradestack.com; report-uri https://sentry.gradeup.co/api/33/security/?sentry_key=3ae5b74ebfec4dda8b38c873ad01b036; 1
upgrade-insecure-requests;default-src https: wss: 'unsafe-inline' 'unsafe-eval' data:;media-src https: blob:;child-src https: blob:;font-src https: data:; img-src https: data:; 1
frame-src 'self' intent: https://*.adyen.com https://*.criteo.com https://*.criteo.net https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.ftrace.com https://*.lidl-info.com https://*.lidl-onlinenewsletter.de https://*.lidl.com https://*.lidl.de https://*.mynetfair.com https://*.sit.sys.odj.cloud https://*.vrxs.de https://consentcdn.cookiebot.com https://facebook.com https://h.online-metrix.net https://searchhub.io https://www.awin1.com https://www.edge-cdn.net https://www.google.com https://www.lidl-gewinnspiel.de https://www.youtube-nocookie.com https://www.youtube.com https://*.reisebank.de https://*.targobank.de https://3d-secure.pluscard.de https://3ds-secure.cardcomplete.com https://3ds.borica.bg https://3ds.sia.eu https://3dsecure-vrp.de https://acs.touch.tech https://acs2.gpesecure.com https://acspa.petafuel.net https://acsv2.centrum24.pl https://german-3ds.wlp-acs.com https://mc-id-check.firstdata.de https://ps4acs.netcetera-payment.ch https://securesuite.co.uk https://ssl-prd-u5g-fo-acs-areq.wlp-acs.com:9743 https://tsys.arcot.com https://visa-secure.ing.de ; object-src data: https://*.facebook.com https://*.facebook.net https://*.lidl-flyer.com https://*.online-metrix.net https://facebook.com https://h.online-metrix.net https://searchhub.io https://www.google.com ; img-src 'self' data: moz-extension: http://www.adobe.com https://*.360yield.com https://*.addthis.com https://*.adition.com https://*.adnxs.com https://*.adscale.de https://*.advertising.com https://*.adyen.com https://*.casalemedia.com https://*.criteo.com https://*.criteo.net https://*.demdex.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-flyer.com https://*.lidl-onlinenewsletter.de https://*.lidl-shop.com https://*.lidl.de https://*.online-metrix.net https://*.openx.net https://*.parcellab.com https://*.pubmatic.com https://*.searchhub.io https://*.semtrack.de https://*.sit.sys.odj.cloud https://*.stickyadstv.com https://*.taboola.com https://*.twiago.com https://*.virtualearth.net https://*.yahoo.com https://*.yieldlab.net https://contextual.media.net https://event.yoochoose.net https://facebook.com https://h.online-metrix.net https://lidl.de https://match.sharethrough.com https://searchhub.io https://sync.outbrain.com https://translate.google.com https://via.placeholder.com https://visitor.omnitagjs.com https://www.adobe.com https://www.awin1.com https://www.bing.com https://www.bizrate.com https://www.google-analytics.com https://www.google.at https://www.google.ba https://www.google.be https://www.google.bg https://www.google.ch https://www.google.co.uk https://www.google.com https://www.google.com.bd https://www.google.com.tr https://www.google.com.ua https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.is https://www.google.it https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.sk https://www.googletagmanager.com https://www.gstatic.com https://x.bidswitch.net ; report-uri https://lidl1csp.report-uri.com/r/t/csp/enforce ; frame-ancestors 'self' https://*.lidl.com https://*.lidl.de https://beeem.co ; style-src 'self' 'unsafe-inline' https://*.lidl-flyer.com https://*.lidl.de https://*.parcellab.com https://*.sit.sys.odj.cloud https://facebook.com https://searchhub.io https://www.bing.com https://www.google.com ; default-src 'self' blob: data: intent: wss://127.0.0.1:* https://*.8select.io https://*.adyen.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.kameleoon.com https://*.lidl-flyer.com https://*.lidl-shop.com https://*.lidl.de https://*.online-metrix.net https://*.parcellab.com https://*.semtrack.de https://*.sit.sys.odj.cloud https://*.virtualearth.net https://event.yoochoose.net https://facebook.com https://fonts.gstatic.com https://h.online-metrix.net https://lidl.media01.eu https://searchhub.io https://tracking.s24.com https://www.bing.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.lacmp.net https://lidl1csp.report-uri.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: http://*.fitanalytics.com https://*.8select.io https://*.adyen.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-flyer.com https://*.lidl.com https://*.lidl.de https://*.online-metrix.net https://*.parcellab.com https://*.searchhub.io https://*.semtrack.de https://*.virtualearth.net https://ajax.googleapis.com https://cdn.ravenjs.com https://code.etracker.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://facebook.com https://h.online-metrix.net https://lidl.de https://lidl.media01.eu https://s.ytimg.com https://searchhub.io https://tracking.s24.com https://www.bing.com https://www.dwin1.com https://www.etracker.de https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.lacmp.net https://www.youtube.com ; 1
frame-ancestors https://*.db.com https://*.postbank.de 1
default-src 'self'; style-src 'self'; object-src 'none'; frame-src 'none'; media-src * http://*; connect-src * http://* 1
default-src 'none'; base-uri 'self' docs.helpscout.net; block-all-mixed-content; child-src 'self' assets.braintreegateway.com c.paypal.com www.youtube.com player.vimeo.com fast.wistia.net moz-extension://* chrome-extension://*; connect-src 'self' api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.sandbox.braintreegateway.com client-analytics.braintreegateway.com *.braintree-api.com *.paypal.com www.google-analytics.com connect.facebook.net www.facebook.com ysxtsrzt2b4s.statuspage.io rescuetime.helpscoutdocs.com secure.helpscout.net api.ipify.org beaconapi.helpscout.net chatapi.helpscout.net d3hb14vkzrxvla.cloudfront.net *.sumologic.com sentry.io wss: wss://*.pusher.com slack.com github.com exist.io accounts.automatic.com *.visualwebsiteoptimizer.com app.vwo.com logo.clearbit.com *.ubembed.com; font-src 'self' data: fonts.gstatic.com app.vwo.com *.ubembed.com; form-action 'self' *.welltory.com; frame-ancestors moz-extension://* chrome-extension://*; frame-src 'self' assets.braintreegateway.com *.paypal.com djtflbt20bdde.cloudfront.net beacon-v2.helpscout.net platform.twitter.com www.googletagmanager.com www.google.com tst.kaptcha.com ssl.kaptcha.com www.youtube.com moz-extension://* chrome-extension://* ifttt.com *.vimeo.com app.vwo.com *.ubembed.com; img-src 'self' data: assets.braintreegateway.com *.paypal.com platform.twitter.com pbs.twimg.com www.google-analytics.com connect.facebook.net *.facebook.com d33v4339jhl8k0.cloudfront.net moz-extension://* chrome-extension://* via.placeholder.com ifttt.com api.producthunt.com zapier.com cdn.zapier.com *.visualwebsiteoptimizer.com app.vwo.com track.customer.io secure.gravatar.com logo.clearbit.com *.ubembed.com; manifest-src 'self'; media-src 'self' beacon-v2.helpscout.net; object-src 'self' djtflbt20bdde.cloudfront.net beacon-v2.helpscout.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.braintreegateway.com assets.braintreegateway.com www.paypalobjects.com *.paypal.com d12wqas9hcki3z.cloudfront.net d33v4339jhl8k0.cloudfront.net djtflbt20bdde.cloudfront.net beacon-v2.helpscout.net cdn.ravenjs.com platform.twitter.com www.google-analytics.com www.googletagmanager.com www.google.com www.gstatic.com zapier.com connect.facebook.net dev.visualwebsiteoptimizer.com app.vwo.com cdn.rawgit.com player.vimeo.com assets.customer.io *.ubembed.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com beacon-v2.helpscout.net d12wqas9hcki3z.cloudfront.net djtflbt20bdde.cloudfront.net app.vwo.com *.ubembed.com; upgrade-insecure-requests; worker-src blob:; report-uri https://www.rescuetime.com/csp-report 1
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://*.truefitcorp.com http://*.truefitcorp.com https://www.googletagmanager.com http://*.bazaarvoice.com https://*.bazaarvoice.com https://code.jquery.com https://*.evergage.com http://*.evergage.com http://*.academy.com https://*.academy.com https://*.iesnare.com https://*.amazonaws.com http://*.google-analytics.com https://*.google-analytics.com https://*.googleapis.com https://*.scene7.com http://*.scene7.com  https://*.firstdata.com https://*.google.com https://*.paypalobjects.com https://unpkg.com https://*.evgnet.com http://www.youtube.com https://www.youtube.com https://*.go-mpulse.net http://*.go-mpulse.net https://*.ytimg.com https://*.googleadservices.com https://cdn.b0e8.com https://*.micpn.com https://*.pbbl.co https://*.pinimg.com https://*.myvisualiq.net https://*.facebook.net https://*.doubleclick.net http://*.googleapis.com https://*.googleapis.com https://*.evgnet.com https://tagmanager.google.com https://*.cdn-net.com http://*.cdn-net.com https://*.akamaihd.net https://*.paymentjs.firstdata.com https://*.paypal.com https://*.rfihub.net https://*.rfihub.com https://*.dealtime.com http://*.myregistry.com https://*.myregistry.com https://*.gstatic.com http://incl-v2.academy.com.searchdex.net https://incl-v2.academy.com.searchdex.net https://*.bing.com http://*.bing.com https://*.iovation.com https://*.googletagservices.com https://*.rewardstyle.com https://*.kaptcha.com https://*.pingdom.net https://*.quantummetric.com https://*.adsrvr.org https://*.criteo.net http://*.criteo.net https://*.criteo.com http://*.criteo.com https://*.tokenex.com https://*.cobrowse.oraclecloud.com https://*.livelook.com 1
frame-ancestors 'self' https://*.waldenfacts.com http://waldenfacts.com http://laureate.postclickmarketing.com http://50years.waldenu.edu 1
default-src 'self' files.virgool.io blob:; connect-src 'self' https://bfetch.yektanet.com https://nfetch.yektanet.com https://www.google-analytics.com bam.eu01.nr-data.net  https://o2.mouseflow.com https://n2.mouseflow.com  p.errorception.com stats.vstat.ir heapanalytics.com cdn.iframe.ly https://geoip-db.com; font-src 'self' data: https://virgool.io;  img-src blob: data: https: 'self' files.virgool.io https://www.google-analytics.com; object-src 'self' virgool.io; media-src cdn.virgool.io; script-src 'self' blob: https://virgool.io 'unsafe-eval' 'unsafe-inline' https://bfetch.yektanet.com https://nfetch.yektanet.com www.googletagmanager.com https://o2.mouseflow.com https://n2.mouseflow.com  https://www.google-analytics.com js-agent.newrelic.com p.errorception.com bam.eu01.nr-data.net heapanalytics.com cdn.iframe.ly https://cdn.iframe.ly https://geoip-db.com  https: 'self'; style-src 'unsafe-inline' data: https: 'self'; frame-src 'self' cdn.iframe.ly https://cdn.iframe.ly  chromenull: https: webviewprogressproxy: ; worker-src blob: 'self'; 1
frame-ancestors 'self' centinelapi.cardinalcommerce.com; script-src 'self' www.youtube.com *.worldpay.com *.facebook.net cdn.mouseflow.com script.crazyegg.com www.google-analytics.com static.sandisk.com bat.bing.com *.googleadservices.com d.adroll.com googleads.g.doubleclick.net *.googletagmanager.com s.adroll.com snap.licdn.com www.googletagmanager.com trc.taboola.com analytics.xscreenattribution.com *.marketo.net *.trustarc.com www.redditstatic.com cdn.taboola.com tags.tiqcdn.com *.twitter.com s.go-mpulse.net static.ads-twitter.com js.adsrvr.org d.adroll.mgr.consensu.org s.ytimg.com unpkg.com *.marketo.com js.maxmind.com *.truste.com tagmanager.google.com *.adobe.com ajax.googleapis.com *.expertvoice.com *.experticity.com cdn1.affirm.com *.tt.omtrdc.net *.adobedtm.com *.sc.omtrdc.net www.google.com *.criteo.net *.criteo.com www.gstatic.com cdn.pdst.fm ext.chtbl.com *.signifyd.com 'unsafe-eval' 'unsafe-inline'; 1
default-src 'none'; img-src * data:; script-src 'self' 'unsafe-inline' https://fonts.intercomcdn.com/ https://*.intercomassets.com/ https://static.ads-twitter.com https://analytics.twitter.com https://*.albacross.com https://*.quora.com https://*.googleadservices.com https://*.hs-analytics.net https://snap.licdn.com https://*.hscollectedforms.net https://*.ampproject.org  https://*.hs-scripts.com https://*.onthe.io/ https://*.facebook.net/ https://*.google-analytics.com/ https://*.intercom.io/ https://*.intercomcdn.com/ https://*.lfeeder.com/ https://*.leadfeeder.com/ http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://ws.zoominfo.com; style-src 'self' 'unsafe-inline'  https://fonts.intercomcdn.com/ https://*.intercomassets.com/ https://*.onthe.io/ https://iotechnologies.com/; font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com https://js.intercomcdn.com https://fonts.intercomcdn.com/ https://*.intercomassets.com/ http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://ws.zoominfo.com; connect-src 'self' https://fonts.intercomcdn.com/  https://*.intercomassets.com/ https://*.albacross.com https://*.hubspot.com https://*.doubleclick.net https://*.onthe.io/ https://news.c8.net.ua/ https://ws.onthe.io/ https://api-iam.intercom.io/ https://*.intercom.io/ wss://*.intercom.io/ https://www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io https://ws.zoominfo.com wss://*.hotjar.com; frame-src 'self' https://*.onthe.io https://www.youtube.com/ https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://ws.zoominfo.com; media-src 'self' https://*.onthe.io https://*.iotechnologies.com https://*.dropboxusercontent.com/ https://*.dropbox.com/ 1
frame-src 'self' share.intercom.io intercom-sheets.com www.intercom-reporting.com www.youtube.com;connect-src 'self' appcenter.ms install.appcenter.ms https://secure.gravatar.com *.intercom.io *.optimizely.com uploads.intercomcdn.com uploads.intercomusercontent.com *.cloudfront.net wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io *.visualstudio.com *.documents.azure.com *.hockeyapp.net *.blob.core.windows.net https://*.ingest.sentry.io https://graph.microsoft.com appcenter.ms install.appcenter.ms *.xamarin.com xtc-prod-artifacts.s3-eu-west-1.amazonaws.com testcloud-artifacts.s3-eu-west-1.amazonaws.com wss://api-service-live-build-prod-east-us-build.prod.avalanch.es https://api-prod-east-us2.prod.avalanch.es:8088 https://file.appcenter.ms wss://api-service-live-build-prod-east-us-build.prod.avalanch.es https://upload.appcenter.ms mobilecenter.azureedge.net mobilecenter-int.azureedge.net;default-src 'self' *.msecnd.net data:;font-src 'self' data: js.intercomcdn.com fonts.gstatic.com assets.onestore.ms c.s-microsoft.com;img-src * data:;media-src js.intercomcdn.com xtc-staging-artifacts.s3-eu-west-1.amazonaws.com xtc-prod-artifacts.s3-eu-west-1.amazonaws.com testcloud-staging-artifacts.s3-eu-west-1.amazonaws.com testcloud-artifacts.s3-eu-west-1.amazonaws.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.msecnd.net app.intercom.io widget.intercom.io js.intercomcdn.com monaco-cdn-int.azureedge.net accessibility-bookmarklets.org uhf.microsoft.com c.s-microsoft.com assets.onestore.ms mobilecenter.azureedge.net mobilecenter-int.azureedge.net;style-src 'self' 'unsafe-inline' monaco-cdn-int.azureedge.net accessibility-bookmarklets.org/ uhf.microsoft.com c.s-microsoft.com assets.onestore.ms mobilecenter.azureedge.net mobilecenter-int.azureedge.net;worker-src 'self' blob: 1
frame-ancestors https://www.stellamccartney.com/ https://www.stellamccartney.com/ ; 1
upgrade-insecure-requests ;report-uri https://i.snssdk.com/log/sentry/v2/api/slardar/main/?ev_type=csp&bid=douyin_inapp 1
style-src https: 'unsafe-inline'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src https:; upgrade-insecure-requests; 1
default-src 'self';script-src 'nonce-rJi9a0yFM/luX4xLhX4GvPyj' 'unsafe-eval' https://*.uwe.ac.uk https://uwe-azukw-sc-prod-cd.azurewebsites.net https://uwe-azukw-sc-prod-dr-cd.azurewebsites.net https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/ https://p.typekit.net https://embed.geckochat.io https://app.geckoform.com/gecko-embed/ https://maps.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://tagmanager.google.com https://www.googletagmanager.com https://secure.adnxs.com https://polyfill.io/v3/polyfill.min.js 'sha256-QvHOyumupilC6mKZMGO4JKBzGqUIezSLhrDQNLSeloI=' 'sha256-HXuPksdYgGVCWZW3Jout9JiRgQBVSTD2/0Tc5tYsfHc=' 'sha256-kvefD2Ndo4YusfwOjROflpjVzIMIpDnWkdcMll5uUgI=' 'sha256-Mb8Lae27VyQCOHsbMM01FwrEYv01xizfOz9YGchzWdU=' 'sha256-c8LNyKH3sxXn9/PcDglhseuT1BbBbIFSxK9e/lkVWqg=' 'sha256-P47zixDuDT29rO2YUp8jpK1fcTn6D/lB3t8fgBTOWQs=' 'sha256-sWwQJUNFSIOP2Z0Se9xDwz9zpeGtsE83nszd5wR6aj8=' 'sha256-DkIOMaD1ZGEvLMmW4Y1l7OqThW5jJr+NsIKFcm8lEj8=' 'sha256-zEF/ALwwDYV2nZ+rdYGh2XpjU1lbO3oZ2osZayOlmpw=' 'sha256-uRH3jzuA9wJNU8vEQ5Aj7OUe8UhkhInN1eyVD9Rq908=' 'sha256-WJon2J1Mv+aiR4/Ba6MhlQdPNZV3p2Qh4xbGfT1689k=' https://*.doubleclick.net https://*.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://*.googlesyndication.com https://www.googletagservices.com https://snap.licdn.com/li.lms-analytics/insight.beta.min.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://sc-static.net/scevent.min.js https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://static-ssl.responsetap.com/static/scripts/rTapTrack.min.js 'sha256-xHJMT+ZUJXwtKHkz7LtBdCyxWtgh/tUzdxkDBf5s7/k=' https://metrics.responsetap.com/track/ https://analytics.twitter.com https://platform.twitter.com/widgets.js https://cdn.syndication.twimg.com https://platform.twitter.com/js/ https://www.youtube-nocookie.com https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/ https://www.gstatic.com/cv/js/sender/v1/cast_sender.js https://www.youtube.com/s/player/f82a8c37/player_ias.vflset/en_US/remote.js https://www.youtube.com/s/player/77da52cd/www-widgetapi.vflset/www-widgetapi.js https://www.youtube.com https://lptag.liveperson.net/tag/ https://lptag.liveperson.net/lptag/api/account/38851187/configuration/applications/taglets/ https://accdn.lpsnmedia.net/api/account/38851187/ https://lo.v.liveperson.net/api/js/ https://lpcdn.lpsnmedia.net https://region-eu.libanswers.com https://uwelibrary.libanswers.com https://cdn.unibuddy.co/unibuddy-iframe.js https://uwelibrary.libanswers.com/1.0/widgets/7390 https://uwelibrary.libanswers.com/js2.37.7/LibAnswers_widget.min.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://tfaforms.com/js/iframe_resize_helper.js https://uwe-azukw-sc-test-cd.azurewebsites.net https://sitecoretest.uwe.ac.uk https://v4in1-si.click4assistance.co.uk https://script.hotjar.com https://sc-static.net https://www.uwe.ac.uk;object-src 'none';style-src 'unsafe-inline' https://*.uwe.ac.uk https://uwe-azukw-sc-prod-cd.azurewebsites.net https://uwe-azukw-sc-prod-dr-cd.azurewebsites.net https://p.typekit.net https://use.typekit.net https://embed.geckochat.io/main.css https://fonts.geckoform.com/metropolis.css https://tagmanager.google.com https://fonts.googleapis.com https://platform.twitter.com/css/ https://ton.twimg.com/tfw/css/ https://uwelibrary.libanswers.com/css2.37.7/LibAnswers_widget.min.css https://uwelibrary.libanswers.com/css2.39.0/LibAnswers_widget.min.css https://uwelibrary.libanswers.com https://www.uwe.ac.uk;img-src * data: https://p.typekit.net https://www.google-analytics.com https://www.googletagmanager.com https://secure.adnxs.com https://ssl.gstatic.com https://googleads.g.doubleclick.net https://www.google.com;media-src https://audio.geckochat.io https://lpcdn.lpsnmedia.net;frame-src https://uwe-azukw-sc-prod-cd.azurewebsites.net https://uwe-azukw-sc-prod-dr-cd.azurewebsites.net https://*.uwe.ac.uk https://w.soundcloud.com https://www.facebook.com https://app.geckoform.com https://*.doubleclick.net https://*.snapchat.com https://www.youtube.com https://www.youtube-nocookie.com https://unibuddy.co/embed/uwe-bristol https://unibuddy.co https://lpcdn.lpsnmedia.net https://lo.idp.liveperson.net https://lo.msg.liveperson.net https://lo.msghist.liveperson.net https://uwe.cloud.panopto.eu https://e.issuu.com https://keyreporter.uwe.ac.uk https://platform.twitter.com https://syndication.twitter.com https://region-eu.libanswers.com https://uwe-azukw-sc-test-cd.azurewebsites.net https://sitecoretest.uwe.ac.uk http://www.robobraille.org https://tfaforms.com https://v4in1-si.click4assistance.co.uk https://v4in1-ti.click4assistance.co.uk https://www.revolutionviewing.co.uk https://vars.hotjar.com https://www.google.com https://www.uwe.ac.uk;font-src https://embed.geckochat.io/media/ https://fonts.geckoform.com https://uwe-azukw-sc-test-cd.azurewebsites.net https://sitecoretest.uwe.ac.uk https://components.uwe.ac.uk https://use.typekit.net https://maps.googleapis.com https://fonts.gstatic.com;connect-src https://www.facebook.com/tr/ https://privacyportal.cookiepro.com https://api.geckochat.io https://*.geckochat.io/live_chat/ wss://router-euwest2.geckochat.io https://www.google-analytics.com https://*.g.doubleclick.net https://*.googlesyndication.com performance.typekit.net https://info.uwe.ac.uk/announcements/ https://cookie-cdn.cookiepro.com https://bat.bing.com wss://lo.msg.liveperson.net https://cascade2-eu.libchat.com https://uwelibrary.libanswers.com/1.0/form/submit https://uwe-azukw-sc-test-cd.azurewebsites.net https://sitecoretest.uwe.ac.uk https://*.hotjar.com/ wss://*.hotjar.com/ https://www.uwe.ac.uk 1
default-src 'self' https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.dynamicyield.com www.googletagmanager.com www.google-analytics.com connect.facebook.net ajax.cloudflare.com *.wistia.com blob: static.cloudflareinsights.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://static.addtoany.com mdbootstrap.com stackpath.bootstrapcdn.com; script-src-attr 'self' 'unsafe-inline' *.dynamicyield.com www.googletagmanager.com www.google-analytics.com connect.facebook.net ajax.cloudflare.com *.wistia.com blob: static.cloudflareinsights.com; script-src-elem 'self' 'unsafe-inline' *.dynamicyield.com www.googletagmanager.com www.google-analytics.com connect.facebook.net ajax.cloudflare.com *.wistia.com blob: static.cloudflareinsights.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://static.addtoany.com mdbootstrap.com stackpath.bootstrapcdn.com; style-src 'self' 'unsafe-inline' *.dynamicyield.com fonts.googleapis.com https://cdn.jsdelivr.net https://use.fontawesome.com mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com; style-src-attr 'self' 'unsafe-inline' *.dynamicyield.com; frame-ancestors 'self' 1
frame-ancestors 'self' *.virginmoneygiving.com 1
frame-ancestors 'self' http://instapage.lookbookhq.com https://instapage.lookbookhq.com http://instapage.pathfactory.com https://instapage.pathfactory.com http://learn.instapage.com https://learn.instapage.com; 1
frame-ancestors secure.livechatinc.com www.youtube.com www.google.com 'self'; frame-src analytics.clickdimensions.com *.doubleclick.net *.dynamics.com secure.livechatinc.com www.youtube.com www.google.com 'self'; 1
worker-src 'none'; report-uri about:blank 1
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; connect-src https: wss:; font-src https: data:; media-src https: blob:; 1
default-src 'self' https://www.bmbf.de https://*.bmbfcluster.de https://cdn1.readspeaker.com https://app-eu.readspeaker.com https://media-eu.readspeaker.com https://rstts-eu.readspeaker.com https://f1-eu.readspeaker.com blob:; img-src 'self' https://www.bmbf.de https://*.bmbfcluster.de data:;style-src 'self' https://cdn1.readspeaker.com 'unsafe-inline';font-src 'self' data:; 1
frame-ancestors *.splunk.com *.touchcast.com *.salesforce.com, frame-ancestors *.splunk.com *.touchcast.com 1
frame-ancestors 'self'; upgrade-insecure-requests; report-uri /api/csp-report 1
frame-ancestors 'self' qa-app.fastspring.com app.fastspring.com go.fastspring.com *.onfastspring.com; 1
frame-ancestors 'self' https://officeworks.experiencecloud.adobe.com 1
default-src 'self'; img-src 'self' data: https://s3.eu-west-1.amazonaws.com/ncsc-content/ https://s3-eu-west-1.amazonaws.com/ncsc-content/ 'unsafe-inline' https://ssl.gstatic.com/ https://www.google-analytics.com www.google-analytics.com; media-src 'self' https://s3.eu-west-1.amazonaws.com/ncsc-content/ https://s3-eu-west-1.amazonaws.com/ncsc-content/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://storage.googleapis.com/; style-src 'self' 'unsafe-inline' https://tagmanager.google.com/* https://fonts.googleapis.com/; font-src 'self' https://fonts.gstatic.com ; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net  https://db.cyberessentials.ncsc.gov.uk; manifest-src 'self' https://s3.eu-west-1.amazonaws.com/ncsc-content/ https://s3-eu-west-1.amazonaws.com/ncsc-content/; worker-src 'self'; frame-src 'self' https://www.youtube.com/ https://www.youtube-nocookie.com; object-src 'self' 1
default-src https: http://*.miisolutions.net:1935; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline'; img-src https: data: blob: 'unsafe-inline'; connect-src https:; font-src https: data: 'unsafe-inline'; object-src https: data: 'unsafe-inline'; media-src data: https: http://*.miisolutions.net:1935 http://c.brightcove.com https://brightcove.hs.llnwd.net https://secure.brightcove.com http://brightcove.vo.llnwd.net blob:; child-src data: https: 'self' blob:;  frame-src data: https: 'self'; form-action https: 'self'; frame-ancestors http: https: 'self' http://library.uml.edu 1
script-src 'nonce-a4afb4074efeff24de2f13df96e3ae5c' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=9479574060391325; frame-ancestors 'self' 1
media-src 'self' blob: livestream.st-andrews.ac.uk livestream1.st-andrews.ac.uk livestream2.st-andrews.ac.uk livestream-test.st-andrews.ac.uk; 1
default-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data: http://*.travp.net; font-src https: data: 1
frame-ancestors 'self' *.lookbookhq.com explore.apptentive.com 1
default-src 'self' http://api.crackwatch.com https://api.crackwatch.com http://cdn.crackwatch.com https://cdn.crackwatch.com http://b2.crackwatch.com https://b2.crackwatch.com http://s3.crackwatch.com https://s3.crackwatch.com http://*.google.com https://*.google.com http://*.gstatic.com https://*.gstatic.com http://encrypted-tbn0.gstatic.com/images https://encrypted-tbn0.gstatic.com/images http://img.youtube.com https://img.youtube.com http://images.unsplash.com https://images.unsplash.com http://cdn.onesignal.com https://cdn.onesignal.com http://onesignal.com https://onesignal.com http://www.google-analytics.com https://www.google-analytics.com http://www.googletagmanager.com https://www.googletagmanager.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.instant-gaming.com https://*.instant-gaming.com http://*.gamivo.com https://*.gamivo.com http://f000.backblazeb2.com https://f000.backblazeb2.com; script-src 'self' 'unsafe-inline' http://api.crackwatch.com https://api.crackwatch.com http://cdn.crackwatch.com https://cdn.crackwatch.com http://b2.crackwatch.com https://b2.crackwatch.com http://s3.crackwatch.com https://s3.crackwatch.com http://*.google.com https://*.google.com http://*.gstatic.com https://*.gstatic.com http://encrypted-tbn0.gstatic.com/images https://encrypted-tbn0.gstatic.com/images http://img.youtube.com https://img.youtube.com http://images.unsplash.com https://images.unsplash.com http://cdn.onesignal.com https://cdn.onesignal.com http://onesignal.com https://onesignal.com http://www.google-analytics.com https://www.google-analytics.com http://www.googletagmanager.com https://www.googletagmanager.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.instant-gaming.com https://*.instant-gaming.com http://*.gamivo.com https://*.gamivo.com http://f000.backblazeb2.com https://f000.backblazeb2.com 'unsafe-eval'; connect-src * 'self' http://api.crackwatch.com https://api.crackwatch.com http://cdn.crackwatch.com https://cdn.crackwatch.com http://b2.crackwatch.com https://b2.crackwatch.com http://s3.crackwatch.com https://s3.crackwatch.com http://*.google.com https://*.google.com http://*.gstatic.com https://*.gstatic.com http://encrypted-tbn0.gstatic.com/images https://encrypted-tbn0.gstatic.com/images http://img.youtube.com https://img.youtube.com http://images.unsplash.com https://images.unsplash.com http://cdn.onesignal.com https://cdn.onesignal.com http://onesignal.com https://onesignal.com http://www.google-analytics.com https://www.google-analytics.com http://www.googletagmanager.com https://www.googletagmanager.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.instant-gaming.com https://*.instant-gaming.com http://*.gamivo.com https://*.gamivo.com http://f000.backblazeb2.com https://f000.backblazeb2.com; img-src data: 'self' http://api.crackwatch.com https://api.crackwatch.com http://cdn.crackwatch.com https://cdn.crackwatch.com http://b2.crackwatch.com https://b2.crackwatch.com http://s3.crackwatch.com https://s3.crackwatch.com http://*.google.com https://*.google.com http://*.gstatic.com https://*.gstatic.com http://encrypted-tbn0.gstatic.com/images https://encrypted-tbn0.gstatic.com/images http://img.youtube.com https://img.youtube.com http://images.unsplash.com https://images.unsplash.com http://cdn.onesignal.com https://cdn.onesignal.com http://onesignal.com https://onesignal.com http://www.google-analytics.com https://www.google-analytics.com http://www.googletagmanager.com https://www.googletagmanager.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.instant-gaming.com https://*.instant-gaming.com http://*.gamivo.com https://*.gamivo.com http://f000.backblazeb2.com https://f000.backblazeb2.com; style-src 'self' 'unsafe-inline' http://api.crackwatch.com https://api.crackwatch.com http://cdn.crackwatch.com https://cdn.crackwatch.com http://b2.crackwatch.com https://b2.crackwatch.com http://s3.crackwatch.com https://s3.crackwatch.com http://*.google.com https://*.google.com http://*.gstatic.com https://*.gstatic.com http://encrypted-tbn0.gstatic.com/images https://encrypted-tbn0.gstatic.com/images http://img.youtube.com https://img.youtube.com http://images.unsplash.com https://images.unsplash.com http://cdn.onesignal.com https://cdn.onesignal.com http://onesignal.com https://onesignal.com http://www.google-analytics.com https://www.google-analytics.com http://www.googletagmanager.com https://www.googletagmanager.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://*.instant-gaming.com https://*.instant-gaming.com http://*.gamivo.com https://*.gamivo.com http://f000.backblazeb2.com https://f000.backblazeb2.com; 1
default-src 'self'  *.thehartford.com  *.hfdstatic.com aa.agkn.com;  font-src 'self'  *.thehartford.com  *.hfdstatic.com fonts.gstatic.com;   frame-ancestors 'self'  *.thehartford.com;  frame-src *.optimizely.com *.thehartford.com cl.exct.net www.youtube.com pub.s1.exacttarget.com *.doubleclick.net hosted.where2getit.com nebula-cdn.kampyle.com uk132.infusionsoft.com *.tealiumiq.com connect.facebook.net *.akamaihd.net pinecast.com storage.pinecast.net insight.adsrvr.org match.adsrvr.org pixel.mathtag.com;  connect-src *.tealiumiq.com *.thehartford.com rules.atgsvcs.com www.google-analytics.com *.doubleclick.net img.c3tag.com www.googletagmanager.com ui.powerreviews.com ampcid.google.com s.srvsynd.com readservices-b2c.powerreviews.com ct.pinterest.com api.genesyscloud.com 530-ct.c3tag.com  display.powerreviews.com *.akamaihd.net *.optimizely.com api4391.d41.co;  img-src 'self' data: *.thehartford.com *.optimizely.com *.hfdstatic.com  api4391.d41.co cdn-0.d41.co ecf.d41.co aa.agkn.com so.rlcdn.com http://image.insurance.thehartford.com  res.cloudinary.com aa.agkn.com ct.pinterest.com pinterest.adsymptotic.com *.tealiumiq.com da.usaa.com uk132.infusionsoft.com hits.convergetrack.com pixel.quantserve.com t.powerreviews.com www.google-analytics.com *.doubleclick.net www.google.com www.facebook.com secure.adnxs.com login.dotomi.com nebula-cdn.kampyle.com udc-neb.kampyle.com www.googletagmanager.com sp.analytics.yahoo.com bat.bing.com analytics.convertlanguage.com *.akamaihd.net thumb.service.pinecast.com px.ads.linkedin.com insight.adsrvr.org login-ds.dotomi.com px.ads.linkedin.com p.adsymptotic.com www.linkedin.com pixel.mathtag.com sync.mathtag.com cookie.havasedge.com event.havasedge.com tag.havasedge.com ads.stickyadstv.com cx.atdmt.com idsync.rlcdn.com simage2.pubmatic.com us-u.openx.net pixel.rubiconproject.com ib.adnxs.com dsum-sec.casalemedia.com ce.lijit.com pixel.advertising.com sync.search.spotxchange.com i.liadm.com rtb-csync.smartadserver.com sync.go.sonobi.com x.bidswitch.net eb2.3lift.com px.powerlinks.com match.sharethrough.com gw.helixbi.io;  style-src 'self'  *.thehartford.com  *.hfdstatic.com ui.powerreviews.com fonts.googleapis.com *.custhelp.com *.akamaihd.net 'unsafe-inline';  script-src 'self' 'unsafe-inline' 'unsafe-eval' *.tealiumiq.com *.optimizely.com *.thehartford.com *.hfdstatic.com vsvipmw01.rightnowtech.com *.custhelp.com rules.atgsvcs.com display.powerreviews.com www.linkedin.com s.pinimg.com *.doubleclick.net secure.quantserve.com *.akamaihd.net secure.adnxs.com insight.adsrvr.org data.adxcel-ec2.com aa.agkn.com aa.agkn.com sp.analytics.yahoo.com static.atgsvcs.com beacon.krxd.net bat.bing.com sjs.bizographics.com 530-ct.c3tag.com assets.contently.com track.contently.com hits.convergetrack.com s.delvenetworks.com login.dotomi.com as00.estara.com conv-tm.everesttech.net www.facebook.com connect.facebook.net adservice.google.com www.google.com www.googleadservices.com www.google-analytics.com  www.googletagmanager.com mpsnare.iesnare.com uk132.infusionsoft.com solutions.invocacdn.com nebula-cdn.kampyle.com secure.leadforensics.com video.limelight.com www.limelight.com px.ads.linkedin.com www.livelook.com cdn.mouseflow.com mpp.mxptint.net onlinebusinessservicsc60333118us1.cobrowse.oraclecloud.com public.cobrowse.oraclecloud.com pixelg.adswizz.com readservices-b2c.powerreviews.com t.powerreviews.com ui.powerreviews.com pixel.quantserve.com www.rackcdn.com bcvipmw11.rightnowtech.com www.rnengage.com s.srvsynd.com trc.taboola.com tags.tiqcdn.com www.youtube.com i.ytimg.com i9.ytimg.com s.ytimg.com adadvisor.net cdn.ampproject.org fontawesome.io rules.quantcount.com analytics.convertlanguage.com api4391.d41.co cdn-0.d41.coso.rlcdn.com ecf.d41.co cdn.embed.ly js.adsrvr.org cdn-assets-prod.s3.amazonaws.com optimizely.s3.amazonaws.com cdn.invoca.solutions pnapi0.invoca.net sdk.helixbi.io snap.licdn.com pnapi.invoca.net pixel.mathtag.com cdn.evgnet.com sftp.us-4.evergage.com hartfordfire.evergage.com;  media-src storage.pinecast.net pinecast.com; 1
font-src https://fonts.gstatic.com https://fonts.googleapis.com https://w.chatlio.com https://cdn1.psfk.com data: 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.yell.com https://*.yellqatest.com https://devssopres01-vip.yellgroup.com https://www.google-analytics.com https://*.adtech.de https://*.googlesyndication.com https://sb.scorecardresearch.com https://cdn.mouseflow.com https://*.livechatinc.com https://lptag.liveperson.net https://lpcdn.lpsnmedia.net https://*.lpsnmedia.net https://lo.v.liveperson.net/ https://*.go-mpulse.net https://*.datadoghq-browser-agent.com https://*.threatpulse.net https://maps.googleapis.com https://connect.facebook.net https://www.google.com https://www.gstatic.com https://static.cdn-apple.com https://www.googletagmanager.com https://platform.twitter.com https://static.ads-twitter.com https://analytics.twitter.com https://www.googleadservices.com https://*.g.doubleclick.net https://5035.xg4ken.com; style-src 'self' 'unsafe-inline' https://*.yell.com https://fonts.googleapis.com https://www.google.com; img-src 'self' data: https: http://*.yellgroup.com; connect-src 'self' https://*.mouseflow.com https://*.go-mpulse.net https://*.datadoghq-browser-agent.com https://rum-http-intake.logs.datadoghq.com https://*.akstat.io https://*.akamaihd.net https://www.google-analytics.com https://*.sendbird.com wss://*.sendbird.com https://*.g.doubleclick.net wss://lo.msg.liveperson.net; font-src 'self' data: https://fonts.gstatic.com; object-src *; media-src 'self' http://cdn.yell.com https://*.livechatinc.com https://lpcdn.lpsnmedia.net; frame-src 'self' https://search.ipromote.com https://ib.adnxs.com https://*.doubleclick.net https://*.yellgroup.com https://*.yellqatest.com https://*.yell.com https://devssopres01-vip.yellgroup.com https://*.livechatinc.com https://www.facebook.com https://www.google.com https://lpcdn.lpsnmedia.net https://*.liveperson.net https://*.youtube.com; 1
default-src 'self' *.googleapis.com *.vdo.ai *.vlitag.com *.adnxs.com *.avantisvideo.com *.quantumdex.io *.addthis.com http: https: data: blob: 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors *.upgrad.com; 1
style-src 'self' https://*.nfb.ca https://*.onf.ca https://cdnjs.cloudflare.com 'unsafe-inline' https://dkyhanv6paotz.cloudfront.net hello.myfonts.net fonts.googleapis.com tagmanager.google.com https://www.google.com; script-src 'self' https://*.nfb.ca https://*.onf.ca https://cdnjs.cloudflare.com https://player.vimeo.com https://maps.googleapis.com https://graph.facebook.com 'unsafe-inline' 'unsafe-eval' https://dkyhanv6paotz.cloudfront.net www.googletagmanager.com tagmanager.google.com connect.facebook.net *.google-analytics.com sb.scorecardresearch.com widget.surveymonkey.com apis.google.com cdnapisec.kaltura.com cdnapi.kaltura.com widget.surveymonkey.com www.gstatic.com js.adsrvr.org survey.g.doubleclick.net https://www.google.com https://adservice.google.ca https://survey.g.doubleclick.net ajax.googleapis.com https://cdn.c212.net/ https://c212.net/ https://pixel.mathtag.com/sync/js; frame-ancestors 'self' https://*.nfb.ca https://*.onf.ca; frame-src 'self' https://*.google.com https://www.gstatic.com https://www.facebook.com https://insight.adsrvr.org https://esqa.moneris.com https://www3.moneris.com https://player.vimeo.com https://www.youtube.com https://connect.facebook.net https://*.nfb.ca https://*.onf.ca https://player.twitch.tv https://pixel.mathtag.com/; default-src 'none'; connect-src 'self' https://*.nfb.ca https://*.onf.ca https://*.kaltura.com https://www.facebook.com https://s3.amazonaws.com https://dkyhanv6paotz.cloudfront.net *.google-analytics.com https://stats.g.doubleclick.net https://c212.net https://thumbor-interactive-cms.s3.ca-central-1.amazonaws.com; manifest-src 'self' https://*.nfb.ca https://*.onf.ca https://dkyhanv6paotz.cloudfront.net; worker-src 'self' *.onf.ca *.nfb.ca https://*.kaltura.com blob:; object-src 'self' https://*.nfb.ca https://*.onf.ca https://*.kaltura.com; img-src 'self' sb.scorecardresearch.com b.scorecardresearch.com *.google-analytics.com cfvod.kaltura.com www.facebook.com http://*.onf.ca http://*.nfb.ca https://*.onf.ca https://*.nfb.ca https://*.kaltura.com stats.g.doubleclick.net *.gstatic.com data: https://interactive-cms.s3.amazonaws.com https://interactive-cms-dev.s3.amazonaws.com http://*.gravatar.com https://*.gravatar.com https://dkyhanv6paotz.cloudfront.net https://www.google.com/ads https://www.google.com/ads/ga-audiences https://www.google.ca/ads https://www.google.ca/ads/ga-audiences https://pixel.mathtag.com/misc/img; media-src 'self' https://*.onf.ca https://*.nfb.ca https://*.kaltura.com https://dkyhanv6paotz.cloudfront.net blob:; font-src 'self' https://*.onf.ca https://*.nfb.ca fonts.gstatic.com cdnapi.kaltura.com cdnapisec.kaltura.com https://dkyhanv6paotz.cloudfront.net data: 1
frame-ancestors 'self' www.ellipsizdss.com keysight.lookbookhq.com keysight.pathfactory.com *.keysight.com 1
default-src * data: blob:; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: https://ssl.google-analytics.com https://www.storygize.net https://cdn.storygize.net https://s.yimg.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://stats.sa-as.com https://*.paymetric.com http://*.avaya.com https://com-avaya.netmng.com https://nan.netmng.com https://audiences.ignitionone.com https://a.rfihub.com https://c1.rfihub.net https://4529201.fls.doubleclick.net https://sp.analytics.yahoo.com com-avaya.qa.netmng.com https://gateway.zscalertwo.net https://s0.2mdn.net https://geolocation.onetrust.com https://cdn.cookielaw.org https://prdapp02.xisecurenet.com http://wm2.wiredminds.de https://wm2.wiredminds.de https://*.adroll.com https://*.avaya.com https://*.cloudfront.net https://*.en25.com https://*.googleapis.com https://www.googletagmanager.com https://*.google.com https://avaya.greenshootlabs.com https://*.kaltura.com https://*.linkedin.com https://*.serving-sys.com https://*.webengage.co https://*.webengage.com https://*.webtrends.com https://*.webtrendslive.com https://79423.analytics.edgekey.net https://ad.atdmt.com https://cdn.syndication.twimg.com https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://cookies.onetrust.com https://ds-aksb-a.akamaihd.net https://gateway.zscaler.net https://gateway.zscloud.net https://googleads.g.doubleclick.net https://optanon.blob.core.windows.net https://*.twitter.com https://static.ads-twitter.com https://qaapp02.xisecurenet.com https://s1737033466.t.eloqua.com https://s3.amazonaws.com https://secure.adnxs.com https://service.maxymiser.net https://snap.licdn.com https://tags.tiqcdn.com https://use.fontawesome.com https://use.typekit.net https://www.bizographics.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.gstatic.com https://www.viewbix.com https://*.arkoselabs.com; style-src 'self' 'unsafe-inline' https://*.avaya.com https://*.kaltura.com https://www.gstatic.com https://cdn.jsdelivr.net https://*.google.com https://*.googleapis.com https://avaya.greenshootlabs.com https://gateway.zscaler.net https://maxcdn.bootstrapcdn.com https://optanon.blob.core.windows.net https://cdn.cookielaw.org https://platform.twitter.com https://ton.twimg.com https://use.fontawesome.com; connect-src 'self' https://analytics.google.com https://s1737033466.t.eloqua.com https://s.yimg.com https://api.kickfire.com http://*.avaya.com wss://www.avaya.com https://*.avaya.de https://s1737033466.t.eloqua.com https://*.akstat.io https://*.kaltura.com https://*.viewbix.com http://production.shippingapis.com https://secure.shippingapis.com https://c.go-mpulse.net https://c.webengage.com https://code.jquery.com https://ds-aksb-a.akamaihd.net https://*.googleapis.com https://avaya.greenshootlabs.com https://ma193-r.analytics.edgekey.net https://optanon.blob.core.windows.net https://cdn.cookielaw.org https://ru.api4load.com https://syndication.twitter.com https://www.apple.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.postescanada-canadapost.ca; frame-ancestors 'self' ; report-uri https://ce4597319c39d6fb9172e9cd9821a217.report-uri.io/r/default/csp/enforce; 1
frame-ancestors https://*.pogo.com:* http://localhost:* 1
frame-ancestors 'self' https://*.paperflite.com https://experience.chargebee.com 1
frame-ancestors 'self' https://microapps.google.com; report-uri https://www.practo.com/consumer-home/cspreport 1
frame-ancestors 'self' *.facebook.com facebook.com *.miniclip.com miniclip.com 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.goodrx.com http://blocked.goodrx.com https://*.grxstatic.com https://*.grxweb.com https://*.heydoctor.com https://d4fuqqd5l3dbz.cloudfront.net https://*.px-cloud.net https://*.perimeterx.net https://*.pxchk.net https://*.px-cdn.net https://*.px-client.net https://*.split.io https://gx9e.app.link https://app.link https://*.branch.io https://bnc.lt https://*.doubleclick.net https://*.2mdn.net https://*.osano.com https://optimizely-edge.com https://*.optimizely.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.googlesyndication.com https://*.googleadservices.com https://*.google-analytics.com https://*.googletagservices.com https://*.googletagmanager.com https://bat.bing.com https://*.sentry-cdn.com https://sentry.io https://cdn.ampproject.org https://*.doubleverify.com https://*.typekit.net https://c.evidon.com https://l.betrad.com https://d79i1fxsrar4t.cloudfront.net https://static.legitscript.com https://cdn.contentful.com https://unpkg.com https://images.ctfassets.net https://cdnjs.cloudflare.com https://*.appsflyer.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://*.polyfill.io https://polyfill.io https://*.smartystreets.com https://s3-us-west-2.amazonaws.com https://s3.amazonaws.com https://my.wpengine.com https://secure.gravatar.com https://*.embed.ly https://yoast.com https://*.mzstatic.com https://*.onelink.me https://www.recaptcha.net https://*.qualaroo.com https://datawrapper.dwcdn.net https://hire.withgoogle.com https://www.youtube.com https://*.insightexpressai.com https://connect.facebook.net https://www.facebook.com https://adservice.google.co.in https://adservice.google.com.au https://adservice.google.ca https://*.ytimg.com https://*.verticalhealth.net https://d.turn.com https://*.demdex.net https://idsync.rlcdn.com https://*.adsafeprotected.com https://bcg.coupons.com https://*.embedly.com https://servedby.flashtalking.com https://pixel.sbal4kp.com https://secure.adnxs.com https://api.lever.co https://*.segment.io https://*.segment.com https://*.userzoom.com https://sc.iasds01.com https://sb.voicefive.com https://*.tapad.com https://js.stripe.com https://www.redditstatic.com https://alb.reddit.com https://wsdk.rokt.com https://di.rlcdn.com https://*.speedcurve.com; report-uri https://sentry.io/api/5148329/security/?sentry_key=b77e90b1f5654f2e83a0238f4cf07987 1
default-src 'self' *.st001.com static.stpk.cn; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.stpk.cn static.st001.com zhanwei.st001.com login.st001.com mall.st001.com hm.baidu.com zz.bdstatic.com push.zhanzhang.baidu.com www.google-analytics.com ssl.google-analytics.com idm-su.baidu.com; style-src 'self' 'unsafe-inline' static.stpk.cn static.st001.com zhanwei.st001.com; img-src 'self' data: *.st001.com *.stpk.cn img1.st001.com *.baidu.com api.share.baidu.com wpa.qq.com pub.idqqimg.com www.google-analytics.com ssl.google-analytics.com; frame-src post.st001.com; object-src 'none'; child-src 'self'; 1
frame-ancestors http://www.r18.com/ 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: about: *.googletagmanager.com *.visualwebsiteoptimizer.com *.fullstory.com *.crazyegg.com *.whova.com whova.com *.cloudfront.net *.typekit.net use.typekit.net *.adroll.com *.adroll.mgr.consensu.org cors-anywhere.herokuapp.com gist.github.com  rum-static.pingdom.net *.ckeditor.com translate.googleapis.com translate.google.com *.jotform.com *.crazyegg.com cdn.jotfor.ms static.issuu.com instagram.com www.instagram.com t.sf14g.com 1.tl813.com http://static.issuu.com analytics.twitter.com srdrvp.com static.ads-twitter.com apis.google.com *.addthis.com *.addthisedge.com secure.comodo.net static.ads-twitter.com platform.twitter.com www.googleadservices.com http://www.googleadservices.com *.akamaihd.net www.google-analytics.com www.google.com cdnjs.cloudflare.com *.typekit.net *.jotform.us cdn.jsdelivr.net ajax.googleapis.com connect.facebook.net www.facebook.com facebook.com use.typekit.net ssl.google-analytics.com *.gstatic.com cse.google.com www.googleapis.com *.mobilecause.com bam.nr-data.net googletagmanager.com formalyzer.com maps.googleapis.com e.issuu.com *.silkroad.com *.createsend.com *.createsend1.com *.polldaddy.com polldaddy.com *.berkeley.edu https://coolclimate-calculator-ui.firebaseapp.com secure4.entertimeonline.com *.dafdirect.org; img-src 'self' data: about: 1.tl813.com arbordayblog.org * *.adroll.com *.leadlander.com *.advertising.com *.facebook.com *.google-analytics.com *.outbrain.com *.pubmatic.com *.3lift.com *.taboola.com dsum-sec.casalemedia.com *.rubiconproject.com ads.yahoo.com *.adnxs.com x.bidswitch.net *.youtube.com idsync.rlcdn.com us-u.openx.net *.atdmt.com *.s3.amazonaws.com log.pinterest.com i.ytimg.com *.jotform.com t.co *.gstatic.com *.instagram.com *.cdninstagram.com *.fbcdn.net www.google-analytics.com *.doubleclick.net *.jotfor.ms csi.gstatic.com maps.gstatic.com p.typekit.net www.google.com www.googleapis.com maps.googleapis.com www.facebook.com *.google.com *.arborday.org www.googleapis.com ssl.google-analytics.com syndication.twitter.com shpg.org; font-src 'self' data: use.typekit.net fonts.googleapis.com fonts.gstatic.com; style-src 'self' 'unsafe-inline' assets-cdn.github.com *.githubassets.com use.typekit.net translate.googleapis.com *.gstatic.com cdn.jotfor.ms www.google.com ajax.googleapis.com fonts.googleapis.com fonts.gstatic.com *.dafdirect.org; frame-src 'self' *.soundcloud.com *.jotform.com whova.com *.whova.com *.berkeley.edu https://coolclimate.berkeley.edu https://coolclimate-calculator-ui.firebaseapp.com www.facebook.com *.google.com *.vimeo.com www.instagram.com syndication.twitter.com *.jotform.us https://staticxx.facebook.com *.igive.com cse.google.com pdf.snapandread.com app.mobilecause.com *.arborday.org www.arborday.org hotelfootprints.org www.hotelfootprints.org www.youtube.com http://www.youtube.com e.issuu.com api.braintreegateway.com treesandutilities.com *.silkroad.com ajax.googleapis.com connect.facebook.net platform.twitter.com *.addthis.com *.createsend.com *.createsend1.com *.leadlander.com; frame-ancestors 'self' www.logees.com *.liedlodge.org shop.arborday.org corporategifts.arborday.org  *.domaincontrol.com *.ip.secureserver.net *.upnllc.com *.godaddy.com logees.com *.dutchmantreefarms.com dutchmantreefarms.com http://www.dutchmantreefarms.com www.bluehillwildlifenursery.com bluehillwildlifenursery.com treesandutilities.com www.treesandutilities.com *.secureserver.net *.akam.net *.godaddy.com *.silkroad.com createsend.com; connect-src 'self' arbordayblog.org *.google-analytics.com *.fullstory.com *.jotform.com cors-anywhere.herokuapp.com *.gstatic.com secure4.entertimeonline.com rum-collector-2.pingdom.net *.crazyegg.com wss://www.arborday.org performance.typekit.net ssl.google-analytics.com *.jotform.us createsend.com *.doubleclick.net *.cloudfront.net appstoreconnect.com *.berkeley.edu; 1
frame-ancestors 'self' https://*.duke-energy.com 1
frame-ancestors *.indiatimes.com *.zigwheels.com *.google.com *.cdn.ampproject.org 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.m-pathy.com *.amazon-adsystem.com *.ampproject.org *.glassboxdigital.io *.glassboxcdn.com *.foresee.com *.humana.com *.ensighten.com *.omtrdc.net *.coremetrics.com *.cmcore.com *.answerscloud.com *.mpeasylink.com *.zscaler.net *.gigya.com *.googleadservices.com *.yimg.com *.facebook.net *.yahoo.com *.google.com *.gstatic.com *.salesforceliveagent.com *.googleapis.com *.4seeresults.com *.youtube.com *.azureedge.net *.cloudfront.net *.dialogtech.com *.linkedin.com *.longtailvideo.com *.truste.com *.prescribeitrx.com *.amazonaws.com *.glancecdn.net *.humana-government.com *.careplushealthplans.com *.ytimg.com *.facebook.com *.healthwise.net *.humanavitality.com *.go365.com *.requirejs.org *.cdc.gov *.outbrain.com *.eloqua.com *.4see.mobi *.foreseeresults.com *.bing.com *.doubleclick.net *.xg4ken.com *.licdn.com *.twitter.com *.360yield.com *.casalemedia.com *.kargo.com *.bidswitch.net *.ad-stir.com humananews.com *.humananews.com *.en25.com *.msecnd.net *.visualstudio.com *.tealium.com *.tealiumiq.com *.tiqcdn.com *.ads-twitter.com *.3lift.com *.everesttech.net *.gumgum.com *.deepintent.com *.teads.tv *.everestjs.net *.googletagmanager.com *.mathtag.com *.demdex.net *.coveo.com data: blob:; object-src 'none'; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com 'strict-dynamic' 'nonce-MTQ2NzI3NTUzMCw0MjczNjIzOTQz'; report-uri https://exceptions.hubspot.com/csp/report; 1
frame-ancestors 'self' file: filesystem: http://localhost:8080 app.optimizely.com; 1
default-src * 'unsafe-inline' blob:; script-src 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' *; font-src 'self' data: https:; worker-src 'self' blob:; img-src * data: https: about: 1
block-all-mixed-content; object-src 'none'; form-action 'self' *.indeed.com *.indeed.co.uk https://go.indeedassessments.com/ https://take.indeedassessments.com/; frame-src 'self' *.indeed.com *.indeed.co.uk https://accounts.google.com/ https://smartlock.google.com/ https://www.google.com/recaptcha/ https://www.youtube.com/embed/; img-src 'self' *.indeed.com *.indeed.co.uk data: d13w2n5a9i6r56.cloudfront.net d3hbwax96mbv6t.cloudfront.net d12632ofg6v5f7.cloudfront.net d2q79iu7y748jz.cloudfront.net d3s4xzh46vzktb.cloudfront.net d1ymdoy4af119w.cloudfront.net d3fw5vlhllyvee.cloudfront.net https://res.cloudinary.com www.google-analytics.com https://www.google.com/ads https://www.facebook.com/tr/ https://sb.scorecardresearch.com https://stats.g.doubleclick.net https://*.tvpixel.com/* https://*.optimizely.com/* https://d.turn.com/* https://idsync.rlcdn.com/* https://pt.ispot.tv; default-src 'self' 'unsafe-inline' data: *.indeed.com *.indeed.co.uk d3hbwax96mbv6t.cloudfront.net d3hbwax96mbv6t.cloudfront.net https://smartlock.google.com/ https://d13w2n5a9i6r56.cloudfront.net/ https://accounts.google.com/ https://cdn.ravenjs.com/3.14.2/raven.min.js d3hbwax96mbv6t.cloudfront.net d12632ofg6v5f7.cloudfront.net d2q79iu7y748jz.cloudfront.net d3s4xzh46vzktb.cloudfront.net d1ymdoy4af119w.cloudfront.net d3fw5vlhllyvee.cloudfront.net www.google-analytics.com https://www.facebook.com/tr/ https://sb.scorecardresearch.com https://connect.facebook.net *.serving-sys.com maps.googleapis.com csi.gstatic.com https://ad.doubleclick.net/ddm/activity/ https://www.google.com/recaptcha/ https://www.gstatic.com https://www.youtube.com https://pp.d2-apps.net/v1/impressions/log dpuk71x9wlmkf.cloudfront.net https://privacyportal.onetrust.com https://stats.g.doubleclick.net https://d3fw5vlhllyvee.cloudfront.net/frontend-sentry-bundle/v1.1.2/js/sentry.js https://apis.google.com/js/platform.js https://app-sj07.marketo.com/js/forms2/js/forms2.min.js https://browser.sentry-cdn.com/4.3.3/bundle.min.js https://browser.sentry-cdn.com/4.4.2/bundle.min.js https://*.tvpixel.com/* https://*.optimizely.com/* https://cdn.optimizely.com/js/10668710116.js https://munchkin.marketo.net/munchkin.js https://www.google-analytics.com/analytics.js https://www.google-analytics.com/plugins/ua/linkid.js https://fonts.gstatic.com/ https://fonts.googleapis.com/ https://pxl.indeed.com/* https://match.prod.bidr.io/cookie-sync/indeed https://rs.fullstory.com/rec/; 1
script-src 'nonce-559124ef4c00ad8ecc1f5f06adab6087' 'nonce-zlyW/2i9LAtiNutwQrNL2dLjs5LuRHW+6TjSc+WlQE8=' 'self' 'unsafe-eval' https: 'sha256-jTbbX7kA2AFEiHkjGYboK9ooUurX+Mc9th2/quUZwkI=' 'sha256-yntX1DMo3v8w5zK0Wt5LS96gm1dTl95wU0As+x8+vsU='; frame-ancestors 'none' 1
default-src 'self' data: https:; script-src 'self' https: 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src https: data:; object-src 'none'; 1
base-uri 'none';child-src 'self' * blob:;connect-src 'self' https://cdn.coda.io wss://coda.io https://coda.io wss://*.intercom.io https://coda-us-west-2-prod-blobs.s3.us-west-2.amazonaws.com https://coda-us-west-2-prod-blobs-upload.s3-accelerate.amazonaws.com https://codahosted.io https://codacontent.io https://*.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://app.getsentry.com https://iframe.ly https://cdn.iframe.ly https://api.rollbar.com https://baconipsum.com https://api.trello.com https://www.google-analytics.com https://api.stripe.com https://stats.g.doubleclick.net https://www.facebook.com;default-src 'self' https://cdn.coda.io https://codacontent.io https://coda-us-west-2-prod-blobs.s3.us-west-2.amazonaws.com;font-src data: https://cdn.coda.io https://js.intercomcdn.com https://fonts.gstatic.com https://fonts.googleapis.com https://use.typekit.net;form-action 'self' https://api-iam.intercom.io https://intercom.help;frame-ancestors 'self' *.coda.io ;frame-src *;img-src * blob: data:;media-src https://js.intercomcdn.com;object-src 'none';report-uri /csp-violation;script-src 'strict-dynamic' 'nonce-9984cc5472a6482a8b50ca39def0b0bd' 'unsafe-inline' 'unsafe-eval' https:;style-src 'self' 'unsafe-inline' blob: https://cdn.coda.io https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net;worker-src 'self' blob: 1
frame-ancestors 'self' https://www.bitmex.com https://static.bitmex.com https://cx-k8s.app-production.prod.eu-west-1.aws.bitmex https://support.abs.sh https://support.rescue.services.bitmex.com https://support.services.bitmex.com https://www.bitmex.com https://www.rescue.services.bitmex.com https://www.services.bitmex.com;report-uri https://sentry.services.bitmex.com/api/2/csp-report/?sentry_key=5a2d0d5524c54b908d447fe1ca308d25; 1
default-src https://recreation.gov https://*.recreation.gov https://cdn.recreation.gov *.e.internal.r1s-prod.com 'self' blob: ; script-src https://recreation.gov https://*.recreation.gov https://cdn.recreation.gov https://recaptcha.net https://*.mapbox.com https://mapbox.com https://*.gstatic.com https://*.dialogflow.com https://dialogflow.cloud.google.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://*.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://cdn.ravenjs.com https://sentry.io https://www.google.com/recaptcha/ https://connect.facebook.net https://*.sharethis.com https://www.ssa.gov 'unsafe-eval' 'unsafe-inline' ; style-src https://recreation.gov https://*.recreation.gov https://cdn.recreation.gov https://use.fontawesome.com https://*.mapbox.com https://mapbox.com https://fonts.googleapis.com https://tagmanager.google.com 'unsafe-inline' ; img-src https://recreation.gov https://*.recreation.gov https://cdn.recreation.gov https://stats.g.doubleclick.net https://recaptcha.net https://*.mapbox.com https://mapbox.com https://*.gstatic.com https://www.google-analytics.com https://ridb.recreation.gov https://fs.usda.gov https://www.fs.usda.gov https://*.staticflickr.com https://*.googleusercontent.com https://www.googletagmanager.com https://www.google.com https://google.com https://*.siteintercept.qualtrics.com https://*.qualtrics.com https://*.sharethis.com https://s3.amazonaws.com/sharethis-socialab-prod/ 'self' data: blob: ; media-src https://www.nps.gov https://www.youtube.com https://youtu.be 'self' ; font-src https://recreation.gov https://*.recreation.gov https://cdn.recreation.gov https://fonts.gstatic.com https://use.fontawesome.com; connect-src https://recreation.gov https://*.recreation.gov https://www.google-analytics.com https://stats.g.doubleclick.net https://cdn.recreation.gov https://*.mapbox.com https://mapbox.com https://freegeoip.net https://*.launchdarkly.com https://*.dialogflow.com https://dialogflow.cloud.google.com https://sentry.io https://siteintercept.qualtrics.com https://*.sharethis.com 'self' ; object-src 'self' blob: ; worker-src https://www.nps.gov https://www.youtube.com https://youtube.com https://youtu.be https://*.cdc.nicusa.com https://www.google.com https://google.com 'self' blob: ; frame-src https://www.nps.gov https://www.youtube.com https://youtube.com https://youtu.be https://*.cdc.nicusa.com https://www.google.com https://google.com https://tagmanager.google.com https://www.googletagmanager.com https://*.consensu.org http://recreationgov.co1.qualtrics.com 'self' blob: ; 1
default-src 'self'; img-src * data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://webtrack.uni-marburg.de https://live.hrz.uni-marburg.de; child-src https://webtrack.uni-marburg.de; font-src 'self' data: 1
frame-ancestors 'self' *.bazaarvoice.com 1
script-src  'unsafe-inline' 'unsafe-eval' *.key-systems.net www.google-analytics.com maps.google.com *.googleapis.com data:; style-src 'unsafe-inline' *.key-systems.net *.googleapis.com 1
default-src 'self' www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com fonts.gstatic.com api.kudoway.com stats.g.doubleclick.net cdn-broadcast002-iad.tokbox.com prd.jwpltx.com blob: cdn-broadcast002-pdx.tokbox.com *.tokbox.com www.odwebp.svc.ms; font-src 'self' fast.fonts.net; img-src 'self' i.ytimg.com www.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com stats.g.doubleclick.net ssl.p.jwpcdn.com content.jwplatform.com developer.jwplayer.com blob: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; script-src-attr 'self' 'unsafe-inline' www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com; script-src-elem 'self' 'unsafe-inline' www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com ssl.p.jwpcdn.com content.jwplatform.com translate.google.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com fast.fonts.net kudo-widget.s3.amazonaws.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob: ; frame-ancestors 'self' *.cienradios.com www.clarin.com *.devcr.com.ar *.cienradios-pre.com.ar prepro.int.clarin.com *.prepro.int.clarin.com viapais.com.ar *.viapais.com.ar alpha.viapais.com.ar *.alpha.viapais.com.ar beta.viapais.com.ar *.beta.viapais.com.ar prepro.viapais.com.ar *.prepro.viapais.com.ar cdn.ampproject.org *.cdn.ampproject.org google.com *.google.com google.com.ar *.google.com.ar; 1
frame-ancestors self https://community.pregnancy.org https://optum.marketing.adobe.com *.uhg.com *.optum.com *.uhc.com; 1
img-src blob: data: 'self' firstdatacloverwebsite.122.2o7.net bat.bing.com res.cloudinary.com dxkdvuv3hanyu.cloudfront.net *.clover.com cloverstatic.com images.contentful.com mver.agkn.com images.ctfassets.net googleads.g.doubleclick.net stats.g.doubleclick.net www.facebook.com connect.facebook.net www.google-analytics.com lh3.googleusercontent.com www.google.com www.google.com.pr www.google.com.br www.google.com.co www.google.ca www.google.de www.google.ie www.google.co.uk www.google.co.in www.google.co.id www.googletagmanager.com *.gstatic.com heapanalytics.com static.intercomassets.com js.intercomcdn.com *.intercomcdn.com uploads.intercomusercontent.com *.online-metrix.net *.perka.com *.rfihub.com api.swiftype.com pixel.quantserve.com apintego.com app.nav.com t.powerreviews.com *.t.eloqua.com track.hubspot.com play.vidyard.com cdn.vidyard.com px.ads.linkedin.com p.adsymptotic.com amplify.outbrain.com amplifypixel.outbrain.com tr.outbrain.com data.pendo.io recaptcha.net www.linkedin.com s.amazon-adsystem.com *.walkme.com d3sbxpiag177w8.cloudfront.net s3.walkmeusercontent.com data.adxcel-ec2.com s.yimg.com *.mydisputemanager.com; frame-src mailto: 'self' tel: players.brightcove.net *.clover.com cloverstatic.com bid.g.doubleclick.net *.fls.doubleclick.net www.facebook.com accounts.google.com docs.google.com optimize.google.com www.google.com boards.greenhouse.io vars.hotjar.com intercom-sheets.com h.online-metrix.net *.cdn.optimizely.com *.perka.com player.vimeo.com www.youtube.com *.ytimg.com play.vidyard.com *.lendingfront.com s.amazon-adsystem.com *.walkme.com mainstreetinsights.firstdata.com *.mydisputemanager.com; connect-src 'self' bat.bing.com *.clover.com cloverstatic.com wss://*.clover.com *.contentful.com stats.g.doubleclick.net secure.geonames.org www.facebook.com www.google-analytics.com apis.google.com storage.googleapis.com *.greenhouse.io heapanalytics.com in.hotjar.com vc.hotjar.io uploads.intercomcdn.com uploads.intercomusercontent.com *.intercom.io wss://*.intercom.io h.online-metrix.net *.optimizely.com *.perka.com sentry.io api.swiftype.com d8a92f8280d84184bb69a3a4b74b61d1.app-search.us-west-2.aws.found.io *.powerreviews.com collection.bgalytics.com *.tt.omtrdc.net oamportal.fdvs.com *.donorschoose.org collection.sperse.io data.pendo.io recaptcha.net *.walkme.com s.yimg.com *.mydisputemanager.com; default-src 'self' *.clover.com cloverstatic.com; font-src 'self' maxcdn.bootstrapcdn.com *.clover.com cloverstatic.com fonts.gstatic.com heapanalytics.com js.intercomcdn.com use.fontawesome.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' bat.bing.com cdnjs.cloudflare.com *.clover.com cloverstatic.com nifegwy.neustar.biz googleads.g.doubleclick.net stats.g.doubleclick.net connect.facebook.net www.googleadservices.com www.google-analytics.com apis.google.com maps.googleapis.com tagmanager.google.com optimize.google.com www.google.com www.googletagmanager.com tracker.gaconnector.com *.greenhouse.io www.gstatic.com heapanalytics.com cdn.heapanalytics.com script.hotjar.com static.hotjar.com mpsnare.iesnare.com js.intercomcdn.com widget.intercom.io solutions.invocacdn.com pnapi.invoca.net h.online-metrix.net cdn.optimizely.com rules.quantcount.com cdn.ravenjs.com tags.tiqcdn.com www.youtube.com secure.quantserve.com *.ytimg.com ui.powerreviews.com *.t.eloqua.com play.vidyard.com apps.mypurecloud.com secure.adnxs.com js.hs-scripts.com js.hs-analytics.net analytics.bgalytics.com img.en25.com snap.licdn.com amplify.outbrain.com app.pendo.io cdn.pendo.io data.pendo.io pendo-io-static.storage.googleapis.com recaptcha.net *.walkme.com d3sbxpiag177w8.cloudfront.net s3.walkmeusercontent.com s.yimg.com sp.analytics.yahoo.com *.mydisputemanager.com; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.clover.com cloverstatic.com fonts.googleapis.com tagmanager.google.com optimize.google.com heapanalytics.com *.natwest-tyl.com *.usetyl.com ui.powerreviews.com *.walkme.com d3sbxpiag177w8.cloudfront.net s3.walkmeusercontent.com *.mydisputemanager.com; media-src 'self' *.clover.com cloverstatic.com videos.ctfassets.net js.intercomcdn.com cdn.vidyard.com gateway.zscloud.net; object-src 'self' *.clover.com cloverstatic.com h.online-metrix.net vd.vidoplay.com; frame-ancestors *.clover.com cloverstatic.com *.natwest-tyl.com *.usetyl.com *.perka.com; child-src intercom-sheets.com player.vimeo.com www.youtube.com; report-uri https://us-central1-csp-violation-report-service.cloudfunctions.net/report; 1
script-src 'nonce-ZtY07kTmabjYkbIcV0I3hg' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/webmaster/www_google; base-uri 'none' 1
frame-ancestors 'self' *.boursorama-banque.com *.boursorama.com 1
frame-ancestors 'self' https://*.leetcode.com https://leetcode.com https://*.leetcode-cn.com https://leetcode-cn.com https://*.lingkou.com https://lingkou.com https://tongji.baidu.com https://www.growingio.com https://*.leetcode.pro https://leetcode.pro 1
media-src 'self' https://*.epidemicsound.com https://d34qmkt8w5wll9.cloudfront.net https://cdn.epidemicsound.com https://cdn.epidemicsound.com https://dkihjuum4jcjr.cloudfront.net https://s3-eu-west-1.amazonaws.com https://videos.ctfassets.net; connect-src 'self' https://cdn.epidemicsound.com https://cdn.epidemicsound.com https://*.epidemicsound.com https://www.googleapis.com https://api.sandbox.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://api.braintreegateway.com https://*.cardinalcommerce.com https://client-analytics.braintreegateway.com https://sentry.io https://dev.visualwebsiteoptimizer.com https://rec1.visualwebsiteoptimzer.com https://rec2.visualwebsiteoptimizer.com https://rec3.visualwebsiteoptimizer.com https://rec4.visualwebsiteoptimizer.com https://heatmap.visualwebsiteoptimizer.com https://www.facebook.com/tr/ https://*.braintree-api.com https://www.paypal.com https://cdn.contentful.com https://preview.contentful.com https://api.recurly.com/ https://cdn.ampproject.org/ https://www.googletagmanager.com https://tagmanager.google.com https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com/pagead/ https://bat.bing.com https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com; img-src 'self' data: https: https://cdn.epidemicsound.com/player/20201222.5-3ece6573fe39a8d1c527051b4c5d007d64fdc9bf/ https://cdn.epidemicsound.com/player/20201222.5-3ece6573fe39a8d1c527051b4c5d007d64fdc9bf/ https://tr.snapchat.com/p; frame-src 'self' https://cdn.epidemicsound.com https://cdn.epidemicsound.com https://assets.braintreegateway.com https://*.cardinalcommerce.com https://api.sandbox.braintreegateway.com https://api.braintreegateway.com https://c.paypal.com https://www.youtube.com https://www.paypal.com https://www.sandbox.paypal.com https://js.driftt.com https://www.google.com/recaptcha/ https://api.recurly.com/ https://vars.hotjar.com https:; object-src 'self'; font-src 'self' https://d34qmkt8w5wll9.cloudfront.net https://cdn.epidemicsound.com https://cdn.epidemicsound.com data: https://script.hotjar.com; default-src 'self' https://*.epidemicsound.com https://d34qmkt8w5wll9.cloudfront.net https://cdn.epidemicsound.com https://cdn.epidemicsound.com https://dkihjuum4jcjr.cloudfront.net https://s3-eu-west-1.amazonaws.com; worker-src blob:; child-src 'self' assets.braintreegateway.com c.paypal.com https://vars.hotjar.com; style-src 'self' 'unsafe-inline' https://d34qmkt8w5wll9.cloudfront.net https://cdn.epidemicsound.com https://cdn.epidemicsound.com https://tagmanager.google.com https://assets.braintreegateway.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://d34qmkt8w5wll9.cloudfront.net https://cdn.epidemicsound.com https://cdn.epidemicsound.com https://bat.bing.com https://js.braintreegateway.com https://songbirdstag.cardinalcommerce.com https://songbird.cardinalcommerce.com https://api.braintreegateway.com https://api.sandbox.braintreegateway.com https://www.paypalobjects.com https://client-analytics.sandbox.braintreegateway.com https://client-analytics.braintreegateway.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://mbsy.co https://dev.visualwebsiteoptimizer.com https://connect.facebook.net/ https://serve.albacross.com https://assets.braintreegateway.com https://www.paypal.com https://www.googleadservices.com https://code.jquery.com https://js.driftt.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js.recurly.com/ https://cdn.ampproject.org/ https://static.ads-twitter.com/uwt.js https://static.hotjar.com https://script.hotjar.com https://sc-static.net/scevent.min.js https://sc-static.net/js-sha256-v1.min.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://snap.licdn.com/li.lms-analytics/insight.beta.min.js https://px.ads.linkedin.com/collect 1
frame-ancestors 'self' https://*.wikiloc.com; 1
frame-ancestors 'self' *.shopeemobile.com *.shopee.com.br *.shopee.cn *.facebook.com *.shopeebrasil.com.br;  1
script-src 'nonce-ee9746a453ed2b529141f09eba10b971' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval'; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=1950519864056394; frame-ancestors 'self' 1
default-src http: data: 'unsafe-inline' 'unsafe-eval';connect-src 'self'; 1
default-src blob: data: https://*.akamaihd.net https://*.akamaized.net https://*.footprint.net https://*.linkpulse.com https://*.svt.se https://*.svtplay.se https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://analytics.codigo.se https://pp.lp4.io https://sb.scorecardresearch.com https://sentry.io https://time.akamai.com https://trafficgateway.research-int.se https://www.gstatic.com http://www.gstatic.com https://www.svtstatic.se http://www.svtstatic.se https://cdnjs.cloudflare.com https://track.adform.net https://s2.adform.net https://c1.adform.net https://server.seadform.net 'self' 'unsafe-eval' 'unsafe-inline';report-uri https://o98317.ingest.sentry.io/api/1353514/security/?sentry_key=0315c06fbd134be8af424a54041a7040; report-to csp-sentry 1
default-src 'self' data: blob: *.nr-data.net *.force.com *.browsealoud.com *.constantcontact.com *.ctctcdn.com www.facebook.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com cascade2.libchat.com px.ads.linkedin.com track.mailerlite.com *.monsido.com *.newrelic.com *.sdge.com *.sharethis.com speech.speechstream.net public.tableau.com *.twimg.com *.twitter.com www.wageworks.com static.wixstatic.com cola.unh.edu www.consumer.ftc.gov sandiego.gov *.sandiego.gov stats.g.doubleclick.net bam.nr-data.net speech.speechstream.net firstsearch.oclc.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: bam.nr-data.net *.force.com bam.nr-data.net js-agent.newrelic.com www.google-analytics.com translate.googleapis.com static.ads-twitter.com *.browsealoud.com cdnjs.cloudflare.com *.ctctcdn.com *.google.com *.google-analytics.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com t.ifvox.com v2.libanswers.com snap.licdn.com *.monsido.com *.newrelic.com www.peakdemocracy.com *.sharethis.com public.tableau.com cdn.syndication.twimg.com *.twitter.com *.cloudfront.net connect.facebook.net bam.nr-data.net vjs.zencdn.net firstsearch.oclc.org; style-src 'self' 'unsafe-inline' *.force.com *.browsealoud.com ws.sharethis.com events.constantcontact.com static.ctctcdn.com *.googleapis.com cdn-images.mailchimp.com static.mailerlite.com ton.twimg.com platform.twitter.com vjs.zencdn.net; img-src 'self' data: * www.google.es .browsealoud.com *.constantcontact.com *.ctctcdn.com www.facebook.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com cascade2.libchat.com px.ads.linkedin.com track.mailerlite.com *.monsido.com *.newrelic.com *.sdge.com *.sharethis.com public.tableau.com *.twimg.com *.twitter.com www.wageworks.com static.wixstatic.com *.ytimg.com cola.unh.edu www.consumer.ftc.gov sandiego.gov *.sandiego.gov stats.g.doubleclick.net bam.nr-data.net firstsearch.oclc.org www.google.it www.google.pt www.google.com.ph www.google.com.om www.google.co.uk www.google.com.mx www.google.de www.google.co.in; frame-src 'self' data: s3.amazonaws.com *.arcgis.com sandiego.bibliocommons.com www.facebook.com support.gale.com *.google.com portal.hdontap.com manage.hdrelay.com cdn.knightlab.com stories.opengov.com www.opentownhall.com www.peakdemocracy.com prezi.com sandiego.seamlessdocs.com public.tableau.com app.truelook.com *.twitter.com player.vimeo.com youtube.com www.youtube.com www.youtube-nocookie.com *.sandiego.gov *.sharethis.com c.sharethis.mgr.consensu.org; font-src 'self' data: *.force.com themes.googleusercontent.com fonts.gstatic.com vjs.zencdn.net; report-uri /report-csp-violation 1
frame-ancestors 'self' https://*.uit.no https://app.xtramile.no https://www.kunnskapscim.no https://uit.topdesk.net 1
frame-ancestors 'self' http://www.kayak.com.au https://checkin.si.amadeus.net https://pdt.checkin.amadeus.net http://www.momondo.com.au http://www.cheapflights.com.au http://www.ca.kayak.com http://www.momondo.ca http://www.cheapflights.ca http://www.cn.kayak.com http://www.momondo.com.cn http://www.kayak.com.hk http://www.momondo.hk http://www.cheapflights.com.hk http://www.kayak.co.in http://www.momondo.in http://www.in.cheapflights.com http://www.kayak.co.id http://www.cheapflights.co.id http://www.kayak.co.jp http://www.kayak.co.kr http://www.kayak.com.my http://www.cheapflights.com.my http://www.nz.kayak.com http://www.momondo.co.nz http://www.cheapflights.co.nz http://www.cheapflights.com.ph http://www.kayak.com.ph http://www.kayak.sg http://www.cheapflights.com.sg http://www.tw.kayak.com http://www.momondo.tw http://www.kayak.co.th http://www.kayak.co.uk http://www.momondo.co.uk http://www.cheapflights.co.uk http://www.cheapflights.co.uk http://www.kayak.com http://www.momondo.com http://www.cheapflights.com http://www.ae.cheapflights.com http://www.kayak.ae http://global.cheapflights.com http://global.momondo.com http://kayak.de http://momondo.de http://swoodoo.com http://kayak.fr http://momondo.fr http://www-malaysiaairlines-com.cdn.ampproject.org http://cdn.ampproject.org http://www.ampify.ga https://www.kayak.com.au https://www.momondo.com.au https://www.cheapflights.com.au https://www.ca.kayak.com https://www.momondo.ca https://www.cheapflights.ca https://www.cn.kayak.com https://www.momondo.com.cn https://www.kayak.com.hk https://www.momondo.hk https://www.cheapflights.com.hk https://www.kayak.co.in https://www.momondo.in https://www.in.cheapflights.com https://www.kayak.co.id https://www.cheapflights.co.id https://www.kayak.co.jp https://www.kayak.co.kr https://www.kayak.com.my https://www.cheapflights.com.my https://www.nz.kayak.com https://www.momondo.co.nz https://www.cheapflights.co.nz https://www.cheapflights.com.ph https://www.kayak.com.ph https://www.kayak.sg https://www.cheapflights.com.sg https://www.tw.kayak.com https://www.momondo.tw https://www.kayak.co.th https://www.kayak.co.uk https://www.momondo.co.uk https://www.cheapflights.co.uk https://www.cheapflights.co.uk https://www.kayak.com https://www.momondo.com https://www.cheapflights.com https://www.ae.cheapflights.com https://www.kayak.ae https://global.cheapflights.com https://global.momondo.com https://kayak.de https://momondo.de https://swoodoo.com https://kayak.fr https://momondo.fr https://www-malaysiaairlines-com.cdn.ampproject.org https://cdn.ampproject.org https://www.ampify.ga https://mobile-api.oneworld.com/ https://oneworld.com/ https://digital.malaysiaairlines.com/ https://ma-stage64-01.adobecqms.net/ https://ma-sit64.adobecqms.net/ https://ma-dev64.adobecqms.net/ 1
default-src 'none';img-src data: https:;script-src 'unsafe-inline' 'unsafe-eval' blob: https:;style-src 'unsafe-inline' https:;font-src data: https:;frame-ancestors 'self';connect-src https:; media-src blob: https:;frame-src https: data: blob:;child-src https:;worker-src blob: https:;base-uri https:;form-action https:; 1
frame-ancestors *.dowjones.net *.mansionglobal.com *.huanyuju.com *.onservo.com 1
default-src 'self'; connect-src 'self' blob: https://api.twitter.com https://upload.twitter.com https://ton.twimg.com https://sentry.io/api/1352207/store https://a.tiles.mapbox.com https://api-ssl.bitly.com https://gateway.dataminr.com; font-src 'self' https://ton.twimg.com data:; frame-src https:; frame-ancestors 'self'; img-src https: data:; media-src blob: https://video.twimg.com https://ton.twimg.com; object-src 'self' https://www.youtube.com; script-src 'self' 'unsafe-eval' https://*.twitter.com https://*.twimg.com https://www.google-analytics.com https://api-ssl.bitly.com; style-src 'self' 'unsafe-inline' https://platform.twitter.com https://ton.twimg.com; report-uri https://twitter.com/i/csp_report?a=OR3WKZLUMRSWG2ZNON2GC5DJMNZWS5DF&ro=false; 1
script-src 'report-sample' 'nonce-Z0kAhXltJJg4eODnoKOjlQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport 1
require-sri-for 'script';require-sri-for 'style'; 1
frame-ancestors 'self' http://content.servicenow.com https://content.servicenow.com https://your.servicenow.com  https://servicenow.highspot.com 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://uxplanet.org https://*.uxplanet.org https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
frame-ancestors https://*.meijer.com 1
default-src 'self' data: blob: *.ocbc.com; img-src 'self' data: blob: *;style-src 'self' 'unsafe-inline' *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ocbc.com  *.ocbc.com.my *.sc.omtrdc.net *.adobedtm.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.doubleclick.net *.google.com *.youtube.com *.facebook.net *.facebook.com *.pages07.net *.greateasterngeneral.com *.ibmmarketingcloud.com dpm.demdex.net *.everestjs.net *.mookie1.com  https://anchor.fm *.sqreemtech.com *.adsrvr.org *.qualtrics.com *.ytimg.com  *.licdn.com *.outbrain.com;object-src 'self' *.ocbc.com *.ocbc.com.my;font-src 'self' *;frame-src 'self' https://5376815.fls.doubleclick.net https://9036546.fls.doubleclick.net *.youtube.com https://tags.tiqcdn.com https://ocbc.demdex.net https://bid.g.doubleclick.net *.crwdcntrl.net *.sqreemtech.com https://anchor.fm *.adsrvr.org;connect-src 'self' *.ocbc.com *.google-analytics.com *.doubleclick.net dpm.demdex.net *.qualtrics.com; 1
frame-ancestors 'self' http://webvisor.com http://awards.ratingruneta.ru 1
frame-ancestors *.shockwave.com *.addictinggames.com *.smosh.com *.break.com *.thegloss.com *.crushable.com *.gurl.com *.teen.com *.mademan.com *.escapistmagazine.com *.blisstree.com *.thegrindstone.com *.mommyish.com 1
frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.mydomaine.com 1
default-src https: data: blob: 'self'; upgrade-insecure-requests; script-src 'unsafe-inline' 'unsafe-eval' https: data: blob: 'self'; style-src 'unsafe-inline' 'unsafe-eval' https: data: blob: 'self'; img-src 'unsafe-inline' 'unsafe-eval' https: data: blob: 'self' 1
default-src 'self' 'unsafe-inline' https://stats.g.doubleclick.net googleads.g.doubleclick.net www.google-analytics.com snap.licdn.com px.ads.linkedin.com www.youtube.com https://syndication.twitter.com assets.piraeusbankgroup.com googlevideo.com apis.google.com data: maps.googleapis.com http://rum-collector-2.pingdom.net ;      style-src 'self' assets.piraeusbankgroup.com  assets.piraeusbank.gr 'unsafe-inline' fonts.googleapis.com platform.twitter.com ton.twimg.com;      script-src 'self' cdn.rawgit.com https://developers.google.com https://snap.licdn.com assets.piraeusbankgroup.com assets.piraeusbank.gr https://maps.google.com connect.facebook.net platform.twitter.com apis.google.com 'unsafe-inline' 'unsafe-eval' www.google-analytics.com maps.googleapis.com seal.thawte.com syndication.twitter.com https://cdn.syndication.twimg.com https://www.youtube.com https://s.ytimg.com http://rum-static.pingdom.net ;      font-src   data: 'self' fonts.gstatic.com;     img-src 'self' data: https://developers.google.com asset.piraeusbank.gr 'unsafe-inline'  assets.piraeusbank.gr   px.ads.linkedin.com https://maps.google.com assets.piraeusbankgroup.com http://www.piraeusbank.gr https://www.piraeusbank.gr https://seal.thawte.com www.piraeusbankgroup.com 'unsafe-inline' www.google.com  syndication.twitter.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com www.google.gr csi.gstatic.com maps.gstatic.com maps.googleapis.com platform.twitter.com pbs.twimg.com o.twimg.com ton.twimg.com googleads.g.doubleclick.net img.youtube.com http://rum-collector.pingdom.net ;      frame-src staticxx.facebook.com www.facebook.com accounts.google.com apis.google.com platform.twitter.com syndication.twitter.com 'self' www.youtube.com https://cap.attempts.securecode.com aacsw.3ds.verifiedbyvisa.com https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/www-widgetapi-vflPBjLfx/www-widgetapi.js 1
frame-ancestors minval.az tr.minval.az; 1
default-rsc https: data: 'unsafe-inline' unsafe-eval' 1
script-src 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample' 'nonce-4zElMFl40MNvkpUrZXt1wbJJFlH2QhqgmSB7dluujBs='; object-src 'none'; base-uri 'self'; frame-src player.vimeo.com w.soundcloud.com www.slideshare.net www.youtube.com bandcamp.com sketchfab.com *.google.com *.facebook.com *.facebook.net *.twitter.com social-plugins.line.me *.g.doubleclick.net www.googletagmanager.com booth.karakuri.ai manage-booth.karakuri.ai point.widget.rakuten.co.jp hub.vroid.com ext.nicovideo.jp https://booth.pm https://*.booth.pm https://factory.pixiv.net https://booth.pximg.net https://connect.buyee.jp https://www.googletagmanager.com; connect-src 'self' *.pixiv.net *.pawoo.net www.google-analytics.com www.facebook.com connect.facebook.net www.googletagmanager.com www.googleadservices.com www.google.co.jp b92.yahoo.co.jp *.buyee.jp d.line-scdn.net stats.g.doubleclick.net ekr.zdassets.com *.zendesk.com errortrace.dev https://booth.pm https://*.booth.pm https://factory.pixiv.net https://booth.pximg.net https://connect.buyee.jp https://www.googletagmanager.com 1
default-src 'self' *.servsafe.com restaurant.org *.restaurant.org; script-src 'self' *.servsafe.com restaurant.org *.restaurant.org 'unsafe-eval' 'unsafe-inline' ajax.googleapis.com *.google-analytics.com www.googletagmanager.com www.livehelpnow.net snap.licdn.com lptag.liveperson.net public.tableau.com *.tableau.com *.tableausoftware.com googleads.g.doubleclick.net *.googleadservices.com www.googleadservices.com connect.facebook.net *.google.com www.youtube.com *.addthis.com *.twitter.com cdn.syndication.twimg.com m.addthisedge.com s.ytimg.com fs6.formsite.com munchkin.marketo.net sjs.bizographics.com maxcdn.bootstrapcdn.com z.moatads.com v1.addthisedge.com code.jquery.com *.marketo.com; style-src 'self' *.restaurant.org *.servsafe.com 'unsafe-inline' *.googleapis.com cloud.typography.com use.fontawesome.com platform.twitter.com maxcdn.bootstrapcdn.com *.marketo.com; font-src 'self' *.servsafe.com restaurant.org *.restaurant.org fonts.gstatic.com use.fontawesome.com maxcdn.bootstrapcdn.com; img-src 'self' *.servsafe.com restaurant.org *.restaurant.org data: *.google.com www.livehelpnow.net cdn.livehelpnow.net www.google-analytics.com *.doubleclick.net *.google.com www.textbooks.restaurant.org flex.msn.com www.googleadservices.com insight.adsrvr.org ssl.google-analytics.com *.twitter.com pbs.twimg.com px.ads.linkedin.com p.adsymptotic.com www.facebook.com *.azurewebsites.net pixel.advertising.com; connect-src 'self' *.servsafe.com *.mktoresp.com www.facebook.com; frame-ancestors 'self' *.servsafe.com *.discoverlink.com; object-src 'self' *.servsafe.com; frame-src 'self' *.servsafe.com restaurant.org *.restaurant.org player.simplecast.com bid.g.doubleclick.net *.discoverlink.com www.youtube.com www.twitter.com player.vimeo.com transistor.fm *.google.com *.facebook.com *.twitter.com *.addthis.com share.transistor.fm createaclickablemap.com fs6.formsite.com *.marketo.com; child-src 'self' *.servsafe.com bid.g.doubleclick.net 1
frame-ancestors *.bluenile.com; object-src *.bluenile.com; base-uri *.bluenile.com; report-uri /api/csp-report 1
frame-ancestors *.insideevs.com insideevs.com 1
img-src * data: blob:; 1
frame-ancestors https://*.prokerala.com https://*.nxstatic.com; 1
default-src *.bing.com https://onlinebanking.nationwide.co.uk 'self'; connect-src *.bing.com cdn.decibelinsight.net collection.decibelinsight.net http://track.contently.com https://d083-uk.api.decibelinsight.net/ dpm.demdex.net https://enrolment.mynationwide.io/ wss://lo.msg.liveperson.net http://metrics.nationwide.co.uk/ https://nationwide.egain.cloud/ https://nationwidedev1.egain.cloud https://nationwidedev2.egain.cloud *.omtrdc.net https://rsa.egain.cloud https://cdn.decibelinsight.net 'self' https://ws.sessioncam.com https://smetrics.nationwide.co.uk/ *.swiftype.com *.virtualearth.net wss://cdn.decibelinsight.net wss://collection.decibelinsight.net https://www.googleadservices.com; font-src data: 'self'; frame-src accounts.google.com https://adservice.google.com/ apis.google.com *.bing.com https://assets.contently.com *.doubleclick.net https://analytics.analytics-egain.com/ googleads.g.doubleclick.net https://www.youtube.com https://lo.idp.liveperson.net https://lo.msg.liveperson.net https://lo.msghist.liveperson.net https://lo.tokenizer.liveperson.net https://lpcdn.lpsnmedia.net https://nationwide.demdex.net https://nationwide.egain.cloud https://nationwidedev1.egain.cloud notifyme-uat.nationwide-mats.co.uk platform.twitter.com https://pixel.mathtag.com https://accounts.google.com https://apis.google.com https://s-static.ak.facebook.com https://static.ak.facebook.com https://www.facebook.com 'self' s-static.ak.facebook.com static.ak.facebook.com https://embed.ustudio.com/ www.facebook.com www.google.com *.youtube.com; frame-ancestors nationwide.egain.cloud 'self'; img-src data: https://proactive.nationwide.co.uk 'self' *; media-src https://lpcdn.lpsnmedia.net; object-src 'self' http://d2oh4tlt9mrke9.cloudfront.net; script-src https://accdn.lpsnmedia.net analytics.analytics-egain.com apis.google.com assets.kampyle.com *.bing.com https://www.adobetag.com clients1.google.com https://cloud-emea.analytics-egain.com connect.facebook.net http://assets.contently.com cse.google.com data: dpm.demdex.net https://analytics.analytics-egain.com https://nationwide.egain.cloud/ https://nationwidedev1.egain.cloud https://nationwidedev2.egain.cloud https://www.google.co.uk https://www.gstatic.com ipv4.google.com https://lo.v.liveperson.net https://lpcdn.lpsnmedia.net https://lptag.liveperson.net *.nationwide.co.uk *.omtrdc.net platform.linkedin.com platform.twitter.com https://proactive.nationwide.co.uk *.reevoo.com rsaparaturetest.prod.parature.com https://cdn.decibelinsight.net https://app.decibelinsight.com/js/hm.js  https://pixel.mathtag.com https://apis.google.com https://cse.google.com https://nationwidechat.prod.parature.com https://platform.linkedin.com https://platform.twitter.com https://static.ak.facebook.com https://www.google.com 'self' http://d2oh4tlt9mrke9.cloudfront.net https://ws.sessioncam.com static.ak.facebook.com https://cdn.tt.omtrdc.net *.virtualearth.net https://s.ytimg.com 'unsafe-eval' 'unsafe-inline' http://nationwidebuildingso.tt.omtrdc.net https://nationwidebuildingso.tt.omtrdc.net http://www.google.com http://www.googleadservices.com http://metrics.nationwide.co.uk/; style-src assets.kampyle.com *.bing.com cse.google.com *.nationwide.co.uk https://nationwide.egain.cloud https://nationwidedev1.egain.cloud *.reevoo.com 'self' *.virtualearth.net https://www.google.com 'unsafe-inline' http://www.google.com/; 1
default-src 'unsafe-inline' 'unsafe-eval' https: data:; script-src 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'unsafe-inline' 'unsafe-eval' https: data:; img-src 'unsafe-inline' 'unsafe-eval' https: data:; connect-src 'unsafe-inline' 'unsafe-eval' http: https: data: *.netzpolitik.org; font-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: *.netzpolitik.org; report-to hostmaster@netzpolitik.org; upgrade-insecure-requests 1
default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org https://fdroid.gitlab.io;media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline'; 1
connect-src 'self' https://bundesbank-http.mescdn.com https://*.etracker.de https://*.readspeaker.com https://*.slidesync.com; style-src 'self' 'unsafe-inline' https://assets.slidesync.com https://*.readspeaker.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.slidesync.com https://d3js.org https://*.etracker.com https://*.etracker.de https://*.readspeaker.com blob:; frame-src 'self' https://*.readspeaker.com https://slidesync.com https://www.youtube-nocookie.com https://www.podcaster.de; media-src 'self' https://*.slidesync.com https://bundesbank-http.mescdn.com https://*.readspeaker.com blob: data:; frame-ancestors 'self'; img-src 'self' https://www.bundesbank.de https://www.hochschule-bundesbank.de https://www.stiftung-geld-und-waehrung.de https://www.supervisory-disclosure.de https://www.ese-initiative.org https://www.euro20plus.de data:; default-src 'self' blob:; font-src 'self' data: https://*.readspeaker.com 1
script-src 'nonce-09f0009c1d91356629c23d64c7015e0e' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=6659506279813088; frame-ancestors 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:; connect-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: wss://client.relay.crisp.chat; img-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:; style-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: 1
default-src 'self'; frame-ancestors 'self'; img-src 'self' avatars.githubusercontent.com; frame-src 'self' player.vimeo.com 1
frame-ancestors 'self' *.dxnssee-cloud.eu *.kotsovolos.gr *.dynamics.com 1
frame-ancestors 'self' https://optimize.google.com/ https://forum.opticsplanet.com 1
frame-ancestors https://*.modelmayhem.com; script-src * https://ssl.google-analytics.com https://pxlssl.ibpxl.com  https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com 'unsafe-inline' 'unsafe-eval'; object-src * 1
base-uri https://bitpay.com; connect-src 'self' https://bitpay.com https://ekr.zdassets.com https://api.intercom.io https://bitpay.zendesk.com https://api-iam.intercom.io wss://widget-mediator.zopim.com https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://ssl.mousestats.com https://rum-collector-2.pingdom.net https://249-omd-845.mktoresp.com https://api.onfido.com/v3/documents https://api.onfido.com/v3/snapshots https://api.onfido.com/v3/live_photos https://api.onfido.com/v2/documents https://api.onfido.com/v2/live_photos wss://sync.onfido.com https://telephony.onfido.com https://www.facebook.com/tr https://www.google-analytics.com/j/collect https://stats.g.doubleclick.net/j/collect https://analytics.google.com/g/collect; default-src 'self' https://bitpay.com; font-src 'self' https://fonts.gstatic.com https://js.intercomcdn.com; form-action 'self' https://bitpay.com https://bitpay.us7.list-manage.com; frame-ancestors 'self'; frame-src 'self' https://bitpay.com https://www.google.com/recaptcha/api2/ gap-iab: bitcoin: bitcoincash: ethereum: ripple: bitpay: paypro: https://www.youtube.com https://player.vimeo.com https://intercom-sheets.com https://bitpay.applytojob.com https://landing.bitpay.com https://bid.g.doubleclick.net https://xj85sy9rc4v9.statuspage.io/; img-src 'self' data: blob: https://bitpay.com https://www.google.com https://ssl.gstatic.com https://gravatar.com https://www.google-analytics.com https://js.intercomcdn.com https://static.intercomassets.com https://stats.g.doubleclick.net https://i0.wp.com https://i1.wp.com https://i2.wp.com https://csi.gstatic.com https://ssl.google-analytics.com/ga.js https://*.cloudfront.net https://maps.gstatic.com https://rum-collector.pingdom.net https://www.facebook.com https://px.ads.linkedin.com https://p.adsymptotic.com https://linkedin.com https://www.linkedin.com/px https://www.googleadservices.com https://googleads.g.doubleclick.net https://secure.leadforensics.com https://www.google.ae https://www.google.at https://www.google.al https://www.google.az https://www.google.ba https://www.google.be https://www.google.bf https://www.google.bg https://www.google.bj https://www.google.bs https://www.google.by https://www.google.ca https://www.google.ch https://www.google.ci https://www.google.cl https://www.google.cm https://www.google.cz https://www.google.de https://www.google.dk https://www.google.dz https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.ge https://www.google.gr https://www.google.gy https://www.google.hu https://www.google.hn https://www.google.hr https://www.google.ie https://www.google.is https://www.google.it https://www.google.kz https://www.google.lk https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.ml https://www.google.mn https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.si https://www.google.sk https://www.google.sn https://www.google.sr https://www.google.tg https://www.google.tm https://www.google.tn https://www.google.tt https://www.google.co.ao https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.co.ma https://www.google.co.nz https://www.google.co.ug https://www.google.co.uk https://www.google.co.uz https://www.google.co.th https://www.google.co.tz https://www.google.co.ve https://www.google.co.za https://www.google.co.zw https://www.google.com.ai https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.bh https://www.google.com.br https://www.google.com.co https://www.google.com.cy https://www.google.com.do https://www.google.com.ec https://www.google.com.eg https://www.google.com.gh https://www.google.com.gt https://www.google.com.hk https://www.google.com.jm https://www.google.com.kw https://www.google.com.lb https://www.google.com.mt https://www.google.com.mx https://www.google.com.my https://www.google.com.ng https://www.google.com.np https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.ph https://www.google.com.pk https://www.google.com.pr https://www.google.com.py https://www.google.com.qa https://www.google.com.sa https://www.google.com.sg https://www.google.com.sv https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.uy https://www.google.com.vn https://api.onfido.com/v2/documents https://api.onfido.com/v2/live_photos https://lipis.github.io/; media-src 'self' https://js.intercomcdn.com/audio https://static.zdassets.com/; report-uri /cspViolation; script-src 'self' https://bitpay.com https://io.bitpay.com https://ajax.googleapis.com https://www.google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://static.zdassets.com/ https://app.intercom.io https://www.google.com https://www.gstatic.com/recaptcha/api2/ https://www.gstatic.com/recaptcha/releases/ https://*.cloudfront.net/ https://stats.g.doubleclick.net https://maps.googleapis.com https://rum-static.pingdom.net https://rum-collector.pingdom.net https://ssl.mousestats.com https://connect.facebook.net https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.polyfill.io https://assets.onfido.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://assets.onfido.com; worker-src 'none'; upgrade-insecure-requests 1
default-src 'self' *.lendingclub.com lendingclub.com 'self' *.extole.io *.xtlo.net; img-src * data: 'self' *.extole.io *.xtlo.net data: api.cloudsponge.com; script-src 'unsafe-inline' 'self' *.lendingclub.com lendingclub.com js-agent.newrelic.com bam.nr-data.net t.a3cloud.net cdn.plaid.com *.googletagmanager.com/gtag/ *.googleadservices.com/pagead/conversion_async.js *.googleadservices.com/pagead/conversion/ s.pinimg.com connect.facebook.net tags.tiqcdn.com www.google-analytics.com/analytics.js s3.amazonaws.com/static.lendingclub.com/ www.google.com/pagead/* googleads.g.doubleclick.net/pagead/viewthroughconversion/ 'unsafe-eval' *.optimizely.com optimizely.s3.amazonaws.com *.loggly.com *.persado.com cdn-assets-prod.s3.amazonaws.com; connect-src 'self' js-agent.newrelic.com bam.nr-data.net ct.pinterest.com *.lendingcloud.us:8200 www.facebook.com www.google-analytics.com stats.g.doubleclick.net heapanalytics.com *.optimizely.com 'self' *.cloudsponge.com *.extole.io *.xtlo.net refer.lendingclub.com; frame-src 'self' cdn.plaid.com bid.g.doubleclick.net 'self' view.ceros.com creative-services.ceros.com static.lendingclub.com/www/src/hosted/ceros-pages/fin-health-desktop/index.html static.lendingclub.com/www/src/hosted/ceros-pages/fin-health-tablet/index.html static.lendingclub.com/www/src/hosted/ceros-pages/fin-health-mobile/index.html static.lendingclub.com/www/src/hosted/ceros-pages/fin-health-quiz-desktop/index.html static.lendingclub.com/www/src/hosted/ceros-pages/fin-health-quiz-mobile/index.html; font-src 'self' *.lendingclub.com data: static.lendingclub.com/www/src/hosted/fonts/neue-haas-grotesk/neue-haas-grotesk-text-regular.woff2 static.lendingclub.com/www/src/hosted/fonts/neue-haas-grotesk/neue-haas-grotesk-text-bold.woff2 'self' *.extole.io *.xtlo.net fonts.gstatic.com api.cloudsponge.com; style-src 'unsafe-inline' 'self' 'self' 'unsafe-inline' *.extole.io *.xtlo.net fonts.googleapis.com api.cloudsponge.com; report-uri /site/csp/report /site/csp/report; media-src static.lendingclub.com 1
default-src 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https:; object-src 'self' https:; style-src 'self' data: 'unsafe-inline' https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: mediastream: https:; frame-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' data: https: 1
frame-ancestors *.justlanded.com *.justlanded.es *.justlanded.co.uk *.justlanded.de *.justlanded.fr *.justlanded.it *.justlanded.jp *.justlanded.at *.justlanded.mx *.justlanded.gr *.justlanded.ru *.justlanded.se *.justlanded.cn *.justlanded.ch *.justlanded.be *.justlanded.co.in *.justlanded.co.nz tpc.googlesyndication.com; form-action *.justlanded.com *.justlanded.es *.justlanded.co.uk *.justlanded.de *.justlanded.fr *.justlanded.it *.justlanded.jp *.justlanded.at *.justlanded.mx *.justlanded.gr *.justlanded.ru *.justlanded.se *.justlanded.cn *.justlanded.ch *.justlanded.be *.justlanded.co.in *.justlanded.co.nz tpc.googlesyndication.com; object-src 'none'; base-uri 'self'; 1
default-src 'self' https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com cse.google.com cdn.syndication.twimg.com platform.twitter.com cdn1.developermedia.com cdn2.developermedia.com apis.google.com www.google-analytics.com www.googletagservices.com adservice.google.com securepubads.g.doubleclick.net ajax.aspnetcdn.com ssl.google-analytics.com cdn.polyfill.io az416426.vo.msecnd.net;style-src 'self' 'unsafe-inline' www.google.com platform.twitter.com cdn.syndication.twimg.com fonts.googleapis.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' ; style-src 'self' 'unsafe-inline'; img-src 'self' https://user-content.yiiframework.com https://www.gravatar.com http://www.gravatar.com data: ; child-src 'self' https://kiwiirc.com ; frame-src 'self' https://kiwiirc.com ; upgrade-insecure-requests ; 1
default-src https:; font-src https: data:; img-src https: data:; style-src https: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval'; connect-src https: wss:; child-src https: blob:; frame-src https: blob: 'self'; 1
script-src 'nonce-f06b92e9a254d41c29089b2296167970' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=7923611357005925; frame-ancestors 'self' 1
frame-ancestors d.pr 1
frame-ancestors 'self' *.educba.com *.wallstreetmojo.com 1
frame-ancestors https://*.tradestation.com https://*.tradestation.io 1
frame-ancestors 'self' *.singtel.com *.singtelgroup.net *.singtelshop.com; 1
frame-src 'self' 'unsafe-eval' 'unsafe-inline' player.vimeo.com *.vimeo.com googletagmanager.com *.googletagmanager.com youtube.com *.youtube.com facebook.com *.facebook.com google.com *.google.com *.googlesyndication.com ff.doubleclick.net *.doubleclick.net *.criteo.com *.hotjar.com; 1
default-src 'self' 'unsafe-eval' https://*.tgdd.vn https://*.thegioididong.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; img-src 'self' data: https: http:; style-src 'self' 'unsafe-inline' https: data:; font-src 'self' data: https:; frame-src 'self' https://*.api.useinsider.com https://vuivuilocal.firebaseapp.com https://thegioididong.typeform.com https://embed.24liveblog.com https://node.24live.co https://googleads.g.doubleclick.net https://static.apester.com https://*.doubleclick.net https://*.thegioididong.com https://*.facebook.com https://*.google.com https://youtube.com https://*.youtube.com https://twitter.com https://*.twitter.com https://vars.hotjar.com/; media-src 'self' https://*.tgdd.vn https://*.thegioididong.com; connect-src 'self' https://*.useinsider.com https://*.api.useinsider.com https://stats.g.doubleclick.net https://vc.hotjar.io https://in.hotjar.com https://sample-api-v2.crazyegg.com https://tracking.crazyegg.com https://www.facebook.com wss://socket.24live.co wss://connect.24liveplus.com https://stats.qmerce.com https://api.mixpanel.com https://*.twitter.com https://renderer.qmerce.com https://*.apester.com https://display.apester.com https://*.facebook.com https://*.googleapis.com https://*.google-analytics.com connect.facebook.net *.ampproject.net cdn.ampproject.org script.crazyegg.com https://*.google.com https://*.thegioididong.com wss://*.dienmayxanh.com wss://*.thegioididong.com; object-src 'self'; report-uri /lien-he/ 1
default-src 'self' static.zdassets.com ekr.zdassets.com avm.zendesk.com v2.zopim.com wss://widget-mediator.zopim.com vimeo.com player.vimeo.com vimeocdn.com *.vimeocdn.com ytimg.com s.ytimg.com aax-eu.amazon-adsystem.com data: service.avm.de news.avm.de bingo.avm.de scope.avm.de piwik.avm.de track.adform.net maps.google.com *.googleapis.com *.gstatic.com shoplogos.commerce-connector.de www.commerce-connector.com i.ytimg.com https://www.youtube-nocookie.com https://www.youtube.com img.youtube.com *.xx.fbcdn.net www.surveygizmo.eu 'unsafe-inline' 'unsafe-eval'; media-src 'self' *.avm.de data: blob: *.avm.de;frame-ancestors 'self' 1
frame-ancestors 'self' zooniverse.org *.zooniverse.org 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' *.kcp.co.kr:* www.googletagmanager.com www.google-analytics.com wcs.naver.net; object-src 'self' 1
default-src 'self'; script-src-elem 'self' 'unsafe-inline' https://members.cj.com https://www.s2d6.com https://ad.admitad.com https://www.google-analytics.com https://di0tpek82kamr.cloudfront.net https://d2r1yp2w7bby2u.cloudfront.net https://www.googletagmanager.com https://wzrkt.com http://static.clevertap.com https://connect.facebook.net https://www.gstatic.com https://www.google.com; script-src 'self' 'unsafe-inline' https://members.cj.com https://dci.o18.click https://www.s2d6.com https://di0tpek82kamr.cloudfront.net https://www.google-analytics.com https://wzrkt.com https://d2r1yp2w7bby2u.cloudfront.net https://www.googletagmanager.com http://static.clevertap.com https://connect.facebook.net https://www.gstatic.com https://www.google.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://members.cj.com https://fonts.googleapis.com;  img-src *; media-src 'self' https://dci.o18.click https://tracktrack.org https://1.tracktrack.org https://assets.magzter.com; frame-src 'self' https://ts.tradetracker.net https://members.cj.com https://cj.dotomi.com https://www.emjcd.com https://tracking.icubeswire.co https://tracking.salesleaf.com https://ad.admitad.com https://traqkar.com https://staticxx.facebook.com https://www.google.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://members.cj.com https://facebook.com https://ad.admitad.com https://nx739gu4ee.execute-api.ap-southeast-1.amazonaws.com https://m01og1v9h2.execute-api.ap-southeast-1.amazonaws.com https://sls.magzter.com https://www.google-analytics.com https://services.magzter.com https://magarticles.magzter.com https://newsfeeds.magzter.com https://live.magzter.com https://helpservices.magzter.com https://graph.facebook.com https://stats.g.doubleclick.net; report-uri https://sls.magzter.com/trackevents/prod/log/csplog 1
default-src *; font-src * data:;img-src * data:; script-src * 'unsafe-inline'; style-src * 'unsafe-inline'; 1
default-src 'self' https://internshala.com https://*.internshala.com; img-src 'self' https://internshala.com https://*.internshala.com https://s3-ap-southeast-1.amazonaws.com/internshala-uploads/ https://internshala-uploads.s3-ap-southeast-1.amazonaws.com/ https://*.google.com https://*.google.co.in https://*.google-analytics.com https://*.g.doubleclick.net data: https://pagead2.googlesyndication.com https://maps.gstatic.com https://www.googletagmanager.com https://conv.indeed.com https://csi.gstatic.com; media-src 'self' https://internshala.com https://*.internshala.com https://s3-ap-southeast-1.amazonaws.com/internshala-uploads/ https://internshala-uploads.s3-ap-southeast-1.amazonaws.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'nonce-2Ia2K9Wjd6DUZe52N/c0mw==' https://internshala.com https://*.internshala.com https://*.google.com https://*.googletagmanager.com https://*.googleadservices.com https://*.facebook.net https://*.facebook.com https://*.googleads.g.doubleclick.net https://*.jquery.com https://*.bootstrapcdn.com https://*.google-analytics.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.gstatic.com https://*.linkedin.com; style-src 'self' 'unsafe-inline' https://internshala.com https://*.internshala.com https://*.bootstrapcdn.com https://fonts.googleapis.com https://*.google.com; font-src 'self' data: https://internshala.com https://*.internshala.com https://fonts.googleapis.com https://*.gstatic.com https://*.bootstrapcdn.com https://*.google.com; frame-src https://*.facebook.com https://*.facebook.net https://*.doubleclick.net https://*.google.com https://*.googletagmanager.com https://*.linkedin.com https://*.youtube.com https://*.ccavenue.com https://content.googleapis.com; frame-ancestors 'self' https://internshala.com https://*.internshala.com; object-src 'none'; connect-src 'self' wss://internshala.com wss://*.internshala.com https://*.google.com https://*.google-analytics.com https://*.doubleclick.net https://*.google.co.in https://*.facebook.com https://*.instagram.com; base-uri 'self'; report-uri /csp_report/report_csp_error; 1
frame-ancestors 'self' myonline.bradley.edu bradley.meritpages.com 1
script-src 'self' *.abmr.net *.awin1.com *.dwin1.com *.bazaarvoice.com *.bing.com *.brsrvr.com *.curbside.com *.doubleclick.net *.euro.confirmit.com *.facebook.com *.facebook.net *.fredhopperservices.com *.google.co.uk *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.kfplc.com *.micpn.com *.network-eu.bazaarvoice.com *.paypalobjects.com *.res-x.com *.screwfix.com *.screwfix.local *.tiqcdn.com *.trustarc.com *.truste.com *.twitter.com *.wufoo.com *.yottaa.net *.youtube.com *.zenaps.com analytics.twitter.com bat.bing.com k1u3gele.micpn.com screwfixmedia.co.uk tealiumiq.com youtube.com 'unsafe-inline' 'unsafe-eval'; object-src 'self' *.gstatic.com 1
upgrade-insecure-requests; connect-src * https:; img-src * blob: data: https:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob: data:; worker-src * blob: data: 1
frame-ancestors https://*.wm.com 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' https: http: data: blob: 1
frame-ancestors 'self' porkbun.weeblycloud.com; default-src 'none'; object-src 'self' porkbun-media.s3-us-west-2.amazonaws.com; media-src 'self' beacon-v2.helpscout.net; frame-src widget.trustpilot.com porkbun-media.s3-us-west-2.amazonaws.com www.recaptcha.net *.paypal.com assets.braintreegateway.com www.facebook.com hooks.stripe.com stripe.com www.youtube.com bid.g.doubleclick.net 'self' www.google.com www.googletagmanager.com *.fls.doubleclick.net js.stripe.com nonce-51d7860062389132f723620572a7cf6ddd1ab654; script-src data: 'self' 'unsafe-eval' chimpstatic.com widget.trustpilot.com www.recaptcha.net www.paypalobjects.com *.paypal.com js.braintreegateway.com tpc.googlesyndication.com beacon-v2.helpscout.net translate.google.com translate.googleapis.com www.gstatic.com www.gstatic.cn js.stripe.com use.fontawesome.com googleads.g.doubleclick.net www.googletagmanager.com www.google-analytics.com www.googleadservices.com connect.facebook.net www.google.com js.stripe.com 'unsafe-inline'; connect-src 'self' nonce-51d7860062389132f723620572a7cf6ddd1ab654 wss://ws-helpscout.pusher.com *.paypal.com core33-helpscout.pusher.com *.braintree-api.com *.braintreegateway.com sentry.io sockjs-helpscout.pusher.com d3hb14vkzrxvla.cloudfront.net beaconapi.helpscout.net chatapi.helpscout.net translate.googleapis.com translate.google.com stats.g.doubleclick.net www.google-analytics.com; img-src 'self' data: porkbun-media.s3-us-west-2.amazonaws.com *.paypal.com beacon-v2.helpscout.net porkbun.com q.quora.com d33v4339jhl8k0.cloudfront.net porkbunblog.files.wordpress.com www.googletagmanager.com www.gstatic.com www.gstatic.cn translate.google.com translate.googleapis.com stats.g.doubleclick.net www.google.com googleads.g.doubleclick.net www.google-analytics.com www.facebook.com q.stripe.com nonce-51d7860062389132f723620572a7cf6ddd1ab654; style-src 'self' assets.braintreegateway.com translate.googleapis.com fonts.googleapis.com 'unsafe-inline'; font-src 'self' fonts.gstatic.com nonce-51d7860062389132f723620572a7cf6ddd1ab654; 1
default-src https: 'unsafe-inline' 'unsafe-eval' data:  wss:; frame-src https: appsflyerevent: fbrpc:; img-src https: blob: data:; report-uri https://internations.report-uri.com/r/t/csp/enforce 1
script-src 'self' https://*.patreon.com 'unsafe-inline' 1
script-src 'nonce-4d88690e3eee047603bf7671c711e4d9' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=3368808535083196; frame-ancestors 'self' 1
script-src 'strict-dynamic' 'nonce-3c051a304d0047d8ae42ab7e862a1a17' https: 'unsafe-inline' 'unsafe-eval' 'sha256-Uso0LfeBshT35JP1WDzn9KF9S1vFB3Qjf3whX63+p9Y' 'sha256-cWB6LeQeTPFHH9QCg8VrP0sPJfqqdgDupHwitbxysNo' 'sha256-up0uZfQVTmUQiOTQxNJmLrgq6IRkI7viZcpQMmVQl4o' 'sha256-1DKvbN+HgsZeFhE0aOvW80/CLSZqmIf80iKV8fr7Zms' 'sha256-Cew3JHaYZQh1NXER6+zMiIs0A5T4VeVm7LE56DDuTeQ' 'sha256-7IWl402jAQKfrGk0oeHEc2rO55/ibilfjzw9t/wh2zE' 'sha256-7kB9hVY6TOyKnT4HzvfGkVb5WepuCfi78o2NoWu0diI' 'sha256-rugzeIeOAbHu8C2ZBKnm6BEVkJn83Qjckw74j9LCVhg' 'sha256-8RIg1eUhopcNp9CzGBkk+nhNOkAoJ38tBWvNCcqx42M' 'sha256-kM5ZPLMOillb4HLQsbo7zB4ndziWbxu1/+OFjt7BHbE' 'sha256-4kdQEMufGIybwc/IpC5J8LiTAYOZ3uyqXbdNNxR9G18' 'sha256-MujPPKAkqxKI8F8pVMdmvdGMYzioyawJAheU44lV+ZY'; object-src https://secure.donorschoose.org/ https://donorschoose-storage.s3.amazonaws.com/ https://h.online-metrix.net/; base-uri https://www.donorschoose.org/ https://secure.donorschoose.org/; report-uri https://4bxqy2fn08.execute-api.us-east-1.amazonaws.com/default/csp-report-lambda; frame-ancestors 'self' https://*.donorschoose.org https://*.donorschoose.net 1
default-src https: 'unsafe-eval' 'unsafe-inline'; connect-src https: http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io:* https://*.hotjar.io:* wss://*.hotjar.com 'unsafe-eval' 'unsafe-inline'; font-src https: data:; img-src https: data:; 1
frame-ancestors 'self' https://www-bikewale-com.cdn.ampproject.org https://www-bikewale-com.amp.cloudflare.com https://www-bikewale-com.bing-amp.com https://cdn.ampproject.org https://www.google.com/ 1
default-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline' https:; img-src 'self' 'unsafe-inline' data: http: https:; script-src-elem 'self' https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; connect-src https:; frame-src 'self' https:; object-src 'self' 'unsafe-inline' https:; style-src-elem 'self' 'unsafe-inline' https:; report-uri /csp-violation-report-endpoint/ 1
default-src 'self' 'report-sample'; object-src 'self' *.aleks.com *.connectmath.com www.viddler.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.aleks.com *.connectmath.com www.youtube.com s.ytimg.com ssl.p.jwpcdn.com cdn.mathjax.org cdnjs.cloudflare.com connect.facebook.net rum-static.pingdom.net munchkin.marketo.net js.braintreegateway.com maps.googleapis.com www.googleadservices.com googleads.g.doubleclick.net www.google-analytics.com www.google.com www.gstatic.com linkhelp.clients.google.com static.cdn-ec.viddler.com 'report-sample'; style-src 'self' 'unsafe-inline' *.aleks.com *.connectmath.com fonts.googleapis.com static.cdn-ec.viddler.com; connect-src 'self' *.aleks.com *.connectmath.com *.mktoresp.com *.mktoutil.com api.viddler.com subtitles.cdn-ec.viddler.com www.facebook.com www.googleapis.com stats.g.doubleclick.net *.pingdom.net api.sandbox.braintreegateway.com *.sandbox.braintree-api.com api.braintreegateway.com client-analytics.braintreegateway.com; font-src 'self' static.aleks.com static.connectmath.com http://themes.googleusercontent.com http://fonts.gstatic.com themes.googleusercontent.com fonts.gstatic.com data:; media-src  *.aleks.com *.connectmath.com s3.amazonaws.com aleks-corp.s3.amazonaws.com mcgrawhill-vfs.cdn-ec.viddler.com www.viddler.com data:; img-src https://* data: blob:; frame-src * ldb1: data:; base-uri 'self'; report-uri /aleks/csp_report?stamp=web2020121601 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.bimbolive.com *.google.com https://www.google.com *.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net *.gstatic.com fonts.googleapis.com cdn.fluidplayer.com https://blog.bongacams.com *.bongacash.com bngpt.com bngpst.com bngprl.com i.bongacash.com db.bngpt.com *.bongacams.com; img-src * data:; media-src * data:; frame-ancestors 'self' *.bongacash.com; 1
default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src *; font-src *; media-src *; frame-src *; connect-src *; frame-ancestors 'none'; worker-src 'self' blob:; 1
default-src * 'unsafe-inline' 'unsafe-eval'; connect-src * www.acf.hhs.gov *.addthis.com; script-src * 'unsafe-inline' 'unsafe-eval' www.acf.hhs.gov *.siteimproveanalytics.io *.siteimprove.com *.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net *.addthis.com; img-src 'self' www.acf.hhs.gov *.siteimprove.com *.siteimproveanalytics.io *.googletagmanager.com *.google-analytics.com stats.g.doubleclick.net *.addthis.com *.adoptuskids.org adoptuskids.org *.childwelfare.gov *.icfwebservices.com *.addsearch.com addsearch.com *.cloudfront.net *.ortussolutions.com *.qualtrics.com *.govdelivery.com data:; font-src 'self' *.gstatic.com maxcdn.bootstrapcdn.com *.bootstrapcdn.com data: 1
default-src 'self' * data: blob: https: *.websiteplanet.com websiteplanet.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudfront.net *.datadoghq-browser-agent.com *.ampproject.org *.gstatic.com *.google.com *.alooma.com *.doubleclick.net  *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.hhtpp.com *.bing.com *.yandex.ru *.quora.com *.yimg.com sp.analytics.yahoo.com *.hotjar.com *.ipify.org blob: data:; style-src 'self' data: blob: 'unsafe-inline' *;connect-src 'self' data: blob: https: websiteplanet.com *.websiteplanet.com  *.ampproject.org *.google-analytics.com *.doubleclick.net *.google.com *.hhtpp.com *.yandex.ru *.gravatar.com wss://*.hotjar.com *.wp.com;font-src 'self' data: blob: *.ampproject.org *.googletagmanager.com *.googleapis.com *.gstatic.com; 1
frame-ancestors 'self' bcit.ca *.bcit.ca *.bcit.dev 1
connect-src 'self' blob: https://yandexmetrica.com:* https://ads.adfox.ru https://ads6.adfox.ru api.youla.io https://mc.admetrica.ru https://thequestion.ru wss://comments.yandex.net wss://comments-alpha.yandex.net https://turbopages.org https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://yandex.net https://*.yandex.net https://an.yandex.ru https://yastat.net https://*.yastat.net https://*.yandex-team.ru https://*.calltouch.ru https://*.comagic.ru taxi.taxi.tst.yandex.%tld% aflt.market.yandex.ru sentry.iddqd.yandex.net backend.messenger.yandex.ru yandex.st matchid.adfox.yandex.ru ads.adfox.ru ads6.adfox.ru yastat.net *.yandex-team.ru yandex.ru *.yandex.ru *.yandex.com *.yandex.com.tr *.yandex.by *.yandex.kz *.yandex.ua *.yandex.uz *.yandex.net; default-src 'none'; font-src 'self' data: https://yastatic.net https://yandex.ru an.yandex.ru yastat.net *.s3.yandex.net yastatic.net *.yandex.ru; frame-src 'self' data: yabrowser: https://yandexadexchange.net https://*.yandexadexchange.net https://turbopages.org https://*.turbopages.org banners.adfox.ru https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://yandex.net https://*.yandex.net https://an.yandex.ru https://yastat.net https://*.yastat.net https://*.yandex-team.ru *.video.yandex.ru *.market.yandex.ru yastatic.net www.youtube.com *.vimeo.com embed.megogo.net coub.com awaps.yandex.net yandexadexchange.net *.yandexadexchange.net yastat.net meyou.ru broadcast.comdi.com *.yandex-team.ru yandex.ru yandex.com yandex.com.tr yandex.by yandex.kz yandex.ua yandex.uz yandex.net *.yandex.ru *.yandex.com *.yandex.com.tr *.yandex.by *.yandex.kz *.yandex.ua *.yandex.uz *.yandex.net; form-action https://*; img-src * 'self' blob: data: android-webview-video-poster: *.yandex.net *.s3.yandex.net yastatic.net http://lpc.s3.mds.yandex.net http://yastatic.net mc.admetrica.ru avatars-fast.yandex.net favicon.yandex.net *.verify.yandex.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net avatars.mds.yandex.net *.yandex.ru *.yandex.com *.yandex.com.tr *.yandex.by *.yandex.kz *.yandex.ua *.yandex.uz; media-src * 'self' data: blob: *.video.yandex.ru *.storage.yandex.net *.s3.yandex.net *.cdn.yandex.net yastatic.net *.yandex.net *.strm.yandex.ru yandex.st banners.adfox.ru content.adfox.ru yastat.net yandex.ru *.yandex.ru; script-src 'self' blob: 'nonce-8554' 'unsafe-inline' 'unsafe-eval' https://ads.adfox.ru https://ads6.adfox.ru https://banners.adfox.ru mc.yandex.ru https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://yandex.net https://*.yandex.net https://an.yandex.ru https://yastat.net https://*.yastat.net https://*.yandex-team.ru yastatic.net aflt.market.yandex.ru www.youtube.com *.vimeo.com s.ytimg.com lpc.s3.mdst.yandex.net chat.s3.yandex.net *.api-maps.yandex.ru yandex.st banners.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net yandex.ru *.yandex.ru *.yandex.com *.yandex.com.tr *.yandex.by *.yandex.kz *.yandex.ua *.yandex.uz *.yandex.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' banners.adfox.ru content.adfox.ru https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://yandex.net https://*.yandex.net https://an.yandex.ru https://yastat.net https://*.yastat.net *.yandex.net *.s3.yandex.net yastatic.net lpc.s3.mdst.yandex.net yandex.st yastat.net *.yandex.ru; worker-src blob: https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://yandex.net https://*.yandex.net https://an.yandex.ru https://yastat.net https://*.yastat.net https://*.yandex-team.ru; report-uri https://csp.yandex.net/csp?from=turbo%3aphone&reqid=1609210135513614-101907324749267118300107-production-app-host-vla-web-yp-320&yandexuid=4999804131609210135&yandex_login=&project=turbo; object-src  yastatic.net; child-src  'self'; frame-ancestors  'self' webvisor.com http://webvisor.com *.mtproxy.yandex.net www.kinopoisk.ru *.yandex-team.ru n.maps.yandex.ru yandex.ru yandex.com yandex.com.tr yandex.by yandex.kz yandex.ua yandex.uz yandex.net *.yandex.ru *.yandex.com *.yandex.com.tr *.yandex.by *.yandex.kz *.yandex.ua *.yandex.uz *.yandex.net; 1
script-src 'sha256-5RV8NvuiAP41+aIKpLESmz+GyeIg2rcsnZuwaYOC25c=' 'self' 'self' 'unsafe-eval' https://*.google-analytics.com https://*.googletagmanager.com https://*.hotjar.com https://*.googleadservices.com https://googleads.g.doubleclick.net http://*.geetest.com https://*.geetest.com https://*.zdassets.com https://*.zopim.com https://*.qbox.me; frame-ancestors 'self' https://*.hotjar.com/ https://*.zdassets.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' * ; frame-src 'self' * ; object-src 'self' 1
default-src 'self' 'unsafe-inline' https://www.google-analytics.com https://*.google.com https://*.brightcove.com https://*.akamaihd.net https://*.boltdns.net https://brightcove.hs.llnwd.net https://stats.g.doubleclick.net https://www.classmarker.com https://*.crossref.org https://cm.scholarlyiq.com blob: data:;                     script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://*.google.com https://www.gstatic.com https://*.crossref.org https://cdnjs.cloudflare.com https://vjs.zendcdn.net https://vjs.zencdn.net https://players.brightcove.net https://www.youtube.com https://s.ytimg.com https://www.classmarker.com blob:;                     font-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com data: about:;                     style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.crossref.org;                     img-src 'self' 'unsafe-inline' https://www.google-analytics.com https://*.crossref.org https://stats.g.doubleclick.net https://*.brightcove.com http://*.brightcove.com https://*.boltdns.net https://imagebank.osa.org https://account.osa.org;                     object-src 'self' 'unsafe-inline' https://*.akamaihd.net https://*.boltdns.net; 1
frame-ancestors 'self' https://brex.sanity.studio 1
default-src 'self' *.ncr.com; frame-src 'self' *.ncr.com *.hotjar.com *.hotjar.io *.demdex.net *.springcm.com *.demandbase.com *.callrail.com *.rakuten.com ncrpresalesfundrequest.secure.force.com *.doubleclick.net *.addthis.com *.salesforceliveagent.com www.youtube.com *.typeform.com *.ncrsilver.com calendly.com apisandbox.zuora.com *.artefactscloud.com www.facebook.com www.youtube-nocookie.com *.juicer.io *.linksynergy.com *.whiteboard.is marketo.net *.marketo.net marketo.com *.marketo.com hsforms.net *.hsforms.net hsforms.com *.hsforms.com jotform.com *.jotform.com powerbi.com *.powerbi.com fliphtml5.com *.fliphtml5.com *.google.com airtable.com *.amelia.com *.webflow.io *.msgctrl.com *.whiteboard.is *.shapespark.com *.tiktok.com; img-src data: *; media-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ncr.com data: *.adobedtm.com px.ads.linkedin.com *.salesforceliveagent.com googleads.g.doubleclick.net snap.licdn.com assets.juicer.io s.ytimg.com *.addthis.com *.addthisedge.com connect.facebook.net www.googletagmanager.com www.google-analytics.com sjs.bizographics.com www.googleadservices.com maps.google.com maps.googleapis.com www.youtube.com www.google.com *.hotjar.io *.hotjar.com cdn.schemaapp.com ajax.googleapis.com assets.adobedtm.com cdn.cookielaw.org img.en25.com *.typeform.com use.edgefonts.net *.rakuten.com fullstory.com *.fullstory.com *.demandbase.com *.callrail.com *.linksynergy.com *.bing.com *.cloudfront.net *.calendly.com jquery.com *.jquery.com marketo.net *.marketo.net marketo.com *.marketo.com unpkg.com rtb123.com *.rtb123.com *.cybba.solutions *.cybba.us storage.googleapis.com rmtag.com *.rmtag.com hsforms.net *.hsforms.net hsforms.com *.hsforms.com jotform.com *.jotform.com microsoft.github.io *.omtrdc.net *.bizible.com *.moatads.com *.gstatic.com *.adnxs.com *.clarity.ms *.tiktok.com *.ibytedtos.com *.tiktokcdn.com; style-src 'self' 'unsafe-inline' *.ncr.com assets.juicer.io cdnjs.cloudflare.com fonts.googleapis.com www.youtube.com optanon.blob.core.windows.net *.hotjar.com use.edgefonts.net *.calendly.com *.cloudfront.net jquery.com *.jquery.com marketo.net *.marketo.net marketo.com *.marketo.com *.tiktokcdn.com; font-src 'self' *.ncr.com data: assets.juicer.io cdnjs.cloudflare.com fonts.gstatic.com *.hotjar.com *.hotjar.io use.edgefonts.net *.cloudfront.net; connect-src 'self' *.ncr.com *.demdex.net *.addthis.com www.juicer.io *.hotjar.com *.hotjar.io data.schemaapp.com *.omtrdc.net wss://*.hotjar.com *.demandbase.com *.callrail.com *.s3.amazonaws.com s3.amazonaws.com api.company-target.com *.fullstory.com *.mktoresp.com *.facebook.com *.google.com *.google-analytics.com *.googleadservices.com stats.g.doubleclick.net *.whiteboard.is *.clarity.ms *.ibytedtos.com; 1
default-src 'self' *.dwd.de *.readspeaker.com *.twitter.com *.youtube.com; script-src 'self' *.dwd.de *.readspeaker.com *.twitter.com *.twimg.com *.youtube.com *.jwpcdn.com *.ytimg.com 'unsafe-inline' 'unsafe-eval' data:; style-src 'self' *.dwd.de *.twitter.com *.twimg.com 'unsafe-inline' data:; img-src * data: blob:; font-src 'self' data:; frame-src 'self' *.dwd.de twitter.com *.twitter.com *.youtube.com; worker-src *.twitter.com; child-src 'self' *.dwd.de twitter.com *.twitter.com *.youtube.com; 1
frame-ancestors https://platform-as.marketintelligence.spglobal.com https://platform-av.marketintelligence.spglobal.com https://platform.mi.spglobal.com https://platform.marketintelligence.spglobal.com https://www.snl.com https://platform.mi.spglobal.cn https://platform.ratings360.spglobal.com https://platform.platts.spglobal.com https://www.platform.spgi.spglobal.cn https://platform.spgi.spglobal.cn https://www.platform.spgi.spglobal.com https://platform.spgi.spglobal.com  'self'; 1
upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.stripe.com *.capterra.com *.tawk.to *.crisp.chat *.jsdelivr.net *.xing-share.com *.xing.com *.hotjar.com *.opmnstr.com *.alexametrics.com *.yandex.ru *.youtube.com s.ytimg.com *.syncfusion.com *.syncfusion.de *.google.com maps.googleapis.com ajax.googleapis.com www.gstatic.com *.googletagmanager.com cdnjs.cloudflare.com www.googleadservices.com connect.facebook.net use.typekit.net *.google-analytics.com googleads.g.doubleclick.net *.youtube.com *.ytimg.com cdn.swaychat.com serve.albacross.com api.swayio.com *.firebaseio.com verify.authorize.net smarticon.geotrust.com cdn.rawgit.com *.addthis.com m.addthisedge.com; style-src  'self' 'unsafe-inline'   *.xing-share.com *.xing.com *.jsdelivr.net *.crisp.chat *.bootstrapcdn.com *.syncfusion.com *.syncfusion.de cdn.swaychat.com *.google.com *.googleapis.com cdn.jsdelivr.net cdn.rawgit.com; frame-src cdn.swaychat.com *.stripe.com *.facebook.com  *.xing-share.com *.xing.com *.hotjar.com *.opmnstr.com *.firebaseio.com *.syncfusion.com *.syncfusion.de bid.g.doubleclick.net *.addthis.com www.youtube.com api.swayio.com *.google.com www.gstatic.com; object-src 'none'; base-uri 'none'; frame-ancestors 'self' 1
frame-ancestors 'self' firesidegatherings.com *.firesidegatherings.com localhost localhost:* *.corp.blizzard.net; 1
frame-ancestors https://www.montblanc.com/ https://www.montblanc.com/ https://lb.pcae.cms01.int1.ewe1.aws.yoox.net https://lb.cae.cms01.int1.ewe1.aws.yoox.net https://lb.pcae.cms01.prd1.ewe1.aws.prod.e-comm https://lb.cae.cms01.prd1.ewe1.aws.prod.e-comm https://ecomm.ynap.biz/api/richemont1 *.dimelo.com https://richemont.ws.dimelo.com https://dimelo.s3.amazonaws.com richemont.dimelochat.com https://media.yoox.biz; 1
default-src 'none';base-uri 'none';child-src 'self' https://www.youtube.com/embed/;connect-src 'self' https://www.google-analytics.com/collect https://www.google-analytics.com/r/collect https://www.google-analytics.com/j/collect https://www.googletagmanager.com https://www.google.com/recaptcha/;font-src 'self';frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self';media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/;script-src 'self' 'nonce-KiEiS2ihT5C/fewT0P+GSdiIrwL44PqB' 'strict-dynamic';style-src 'self'; 1
frame-ancestors 'self' http://www.philips.de *.philips.com *.philips.de 1
upgrade-insecure-requests ; frame-ancestors 'self' https://stcloudstate.ims.mnscu.edu; 1
default-src 'self' data: https://*.googleapis.com https://apis.google.com https://accounts.google.com https://www.google.com *.addthis.com https://*.facebook.com *.facebook.com https://*.linkedin.com https://*.thecn.com https://platform.twitter.com platform.twitter.com *.pinterest.com https://www.google-analytics.com; connect-src 'self' https://translate.googleapis.com https://www.google-analytics.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' translate.googleapis.com *.addthis.com *.addthisedge.com *.pinterest.com https://www.google.com https://translate.google.com https://ajax.googleapis.com https://www.gstatic.com https://apis.google.com apis.google.com https://accounts.google.com https://translate.googleapis.com https://www.google-analytics.com https://connect.facebook.net https://*.facebook.com https://platform.twitter.com *.facebook.com platform.twitter.com https://*.thecn.com https://*.linkedin.com; frame-ancestors 'self' http://www.oeconsortium.org https://www.oeconsortium.org; style-src 'self' 'unsafe-inline' https://translate.googleapis.com https://fonts.googleapis.com http://www.w3.org/2000/svg; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' * https://* *.addthis.com data: 1
default-src * 'unsafe-inline'; font-src https: data:; frame-ancestors 'self' localhost:4000; frame-src 'self' www.mindmeister.com accounts.google.com docs.google.com dl.dropboxusercontent.com platform.harvestapp.com player.vimeo.com zapier.com www.youtube.com www.facebook.com optimize.google.com chrome://pdf-viewer; img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * data: 'unsafe-inline' 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' ; style-src https: 'self' 'unsafe-inline' *.onetrust.com *.chargebee.com js.chargebee.com *.chargebeestatic.com *.cloudfront.net *.force.com *.cookiebanners.com ;script-src 'self' 'unsafe-inline' blob: 'unsafe-eval' *.onetrust.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net *.cookielaw.org *.googletagmanager.com *.google-analytics.com *.googleapis.com *.chargebee.com *.jquery.com *.fullstory.com js.chargebee.com *.chargebeestatic.com *.1trust.app *.cloudfront.net *.cookiepro.com *.bing.com *.en25.com *.intercom.io *.intercomcdn.com *.gstatic.com *.google.com *.driftt.com *.force.com *.cookiebanners.com;font-src https: 'self' data: *.onetrust.com *.googletagmanager.com fonts.google.com *.force.com;img-src 'self' data: *; media-src 'self' blob:  data: *.onetrust.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net *.cookiebanners.com;object-src 'none'; base-uri 'none'; frame-ancestors 'self'; frame-src 'self' *.onetrust.com *.wistia.com *.wistia.net *.cookielaw.org *.googletagmanager.com *.chargebee.com js.chargebee.com *.chargebeestatic.com *.cloudfront.net *.google.com *.driftt.com *.force.com *.cookiebanners.com;connect-src 'self' data: * ; 1
frame-src app.powerbi.com *.deutschland-machts-effizient.de *.youtube-nocookie.com piwik.itzbund.de 1
frame-ancestors https://library.mulesoft.com https://resources.mulesoft.com 'self' 1
default-src 'unsafe-inline'  'unsafe-eval' 'self' *.shangdu.com *.shangdu.net *.baidu.com *.qq.com *.weibo.com *.huliang.com *.shangdu.pro *.online.cn *.thangdu.com thangdu.com *.zz.ha.cn 1
frame-ancestors https://*.donorperfect.net; 1
frame-ancestors 'self' *.webwire.com *.authorize.net; 1
default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.unibuddy.co cdn.jsdelivr.net embed.tawk.to pub21.bravenet.com assets.bnidx.com apps.bravenet.com widgets.flickr.com embedr.flickr.com public.tableau.com e1.envoke.com cdnjs.cloudflare.com ajax.googleapis.com 25livepub.collegenet.com platform.twitter.com googleads.g.doubleclick.net cdn.syndication.twimg.com code.jquery.com connect.facebook.net cse.google.com e.issuu.com ssl.google-analytics.com ucads-cdn.ucweb.com uwinnipeg.ca www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com www.gstatic.com ; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net pub21.bravenet.com e1.envoke.com cdnjs.cloudflare.com  www.google.com platform.twitter.com fonts.googleapis.com ajax.googleapis.com uwinnipeg.ca ton.twimg.com 'unsafe-eval'; img-src 'self' data: cdn.jsdelivr.net static-v.tawk.to c1.staticflickr.com farm5.staticflickr.com public.tableau.com files.envoke.com abs.twimg.com www.google.ca www.gstatic.com 25livepub.collegenet.com clients1.google.com encrypted-tbn0.gstatic.com encrypted-tbn1.gstatic.com encrypted-tbn2.gstatic.com encrypted-tbn3.gstatic.com googleads.g.doubleclick.net pbs.twimg.com ton.twimg.com www.google-analytics.com www.facebook.com syndication.twitter.com uwinnipeg.ca platform.twitter.com www.fourmilab.ch ssl.google-analytics.com www.google.com www.googleapis.com www.googletagmanager.com; font-src 'self' data: static-v.tawk.to apps.bravenet.com maxcdn.bootstrapcdn.com fonts.gstatic.com; connect-src 'self' *.tawk.to wss://*.tawk.to 25livepub.collegenet.com pub21.bravenet.com fonts.googleapis.com ajax.googleapis.com www.google.com www.google.com e1.envoke.com api.ipapi.com google-analytics.com www.facebook.com www.google-analytics.com ssl.google-analytics.com ca.api4load.com gjtrack.ucweb.com plugin.ucads.ucweb.com; object-src 'self' www.youtube.com; child-src 'self' www.googletagmanager.com www.youtube.com bid.g.doubleclick.net cse.google.ae cse.google.ca cse.google.com e.issuu.com indd.adobe.com platform.twitter.com syndication.twitter.com uwinnipeg.ca www.google.com; frame-src 'self' player.vimeo.com popcard.unibuddy.co unibuddy.co www.juicer.io uwinnipegca.elluciancrmrecruit.com uwinnipegcatest.elluciancrmrecruit.com  va.tawk.to embed.radiopublic.com www.chemicalsafety.com chemicalsafety.com static.issuu.com  w.soundcloud.com www.flickr.com public.tableau.com www.lapersonnelle.com www.thepersonal.com www.youtube.com 25livepub.collegenet.com cse.google.ca cse.google.com bid.g.doubleclick.net uwinnipeg.ca platform.twitter.com syndication.twitter.com www.google.com e.issuu.com indd.adobe.com ; frame-ancestors 'self' uwinnipegca.elluciancrmrecruit.com panopto.uwinnipeg.ca collegiate.uwinnipeg.ca ; form-action 'self' www.bettermail.ca platform.twitter.com syndication.twitter.com; upgrade-insecure-requests; block-all-mixed-content; 1
default-src 'self' data: blob: https://*;frame-src 'self' https://googleads.g.doubleclick.net https://accounts.google.com https://content.googleapis.com https://docs.google.com https://js.stripe.com data: blob: https://*;script-src 'self' blob: https://script.hotjar.com https://static.hotjar.com https://js.usemessages.com https://analytics.twitter.com https://tagmanager.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://js.hs-analytics.net/ https://js.hsadspixel.net/ https://js.hscollectedforms.net/ https://js.hs-banner.com/ https://js.hs-scripts.com https://static.ads-twitter.com https://connect.facebook.net https://snap.licdn.com https://adservice.google.com.vn https://sjs.bizographics.com/ https://js.intercomcdn.com https://widget.intercom.io https://pagead2.googlesyndication.com https://adservice.google.com https://www.googletagservices.com https://www.googletagmanager.com https://www.google-analytics.com https://apis.google.com https://js.stripe.com https://www.dropbox.com/ 'unsafe-inline' 'unsafe-eval';connect-src 'self' https://api.hubspot.com https://vc.hotjar.io https://*.hotjar.com https://lumin-pdf.cdn.prismic.io https://forms.hubspot.com https://api.hubapi.com https://*.luminpdf.com https://*.luminpdf.com/api/web/graphql wss://www.luminpdf.com/api/web/graphql ws: https://lumin-documents-california.s3.us-west-1.amazonaws.com https://lumin-documents-california.s3.amazonaws.com https://api-iam.intercom.io https://*.doubleclick.net https://www.google-analytics.com https://dl.dropboxusercontent.com https://s3-us-west-1.amazonaws.com https://api.emailjs.com https://sentry.io https://socket.luminpdf.com wss://socket.luminpdf.com https://s3.amazonaws.com https://www.googleapis.com https://docs.google.com https://*.googleusercontent.com https://content.dropboxapi.com https://api.dropboxapi.com https://www.pdftron.com https://content.googleapis.com/drive;img-src 'self' data: blob: *;object-src 'none';style-src 'self' https://unpkg.com/ https://tagmanager.google.com https://fonts.googleapis.com 'unsafe-inline'; 1
frame-ancestors https://igx.csbsju.edu http://go.twocolleges.com https://virtualtour.csbsju.edu 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://images.101datacenter.net https://*.101domain.com https://chat.livecustomer.com https://my.101domain.com https://*.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://www.youtube.com https://secure.campaigner.com https://connect.facebook.net https://*.kissmetrics.com https://*.googleapis.com https://*.facebook.com https://*.llnwd.net https://*.doubleclick.net https://*.infusionsoft.com https://*.google.bg https://d3pkntwtp2ukl5.cloudfront.net https://*.livechatinc.com https://*.googleusercontent.com https://*.gstatic.com https://*.licdn.com https://*.linkedin.com https://*.bing.com https://*.bizographics.com https://*.infusionsoft.app https://*.adsymptotic.com https://*.truste.com https://*.comodo.com https://*.trust-provider.com data: 1
child-src blob:;connect-src 'self' https://*.yimg.com https://*.yahoo.com https://s.yimg.com/nq/ads/mb/native/* https://service.cmp.oath.com https://www.yahoo.com/p.gif https://smetrics.att.com/id https://dpm.demdex.net/id https://video-api.yql.yahoo.com/ https://edgecast-vod.yahoo.net/ https://*.vpg.cdn.yimg.com/ https://media.zenfs.com/ https://assets.video.yahoo.net/ https://ads.adaptv.advertising.com/ https://video.adaptv.advertising.com/ https://edgecast-cf-prod.yahoo.net/;default-src 'self';font-src https: data:;frame-src https://*.yahoo.com https://*.yimg.com https://*.ymail.com https://6518610.fls.doubleclick.net/ https://6589630.fls.doubleclick.net/ https://8523621.fls.doubleclick.net/ https://delivery.vidible.tv/ https://secure.bannerfarm.ace.advertising.com https://cmp.advertising.com https://assets.video.yahoo.net/ https://cdn-ssl.vidible.tv/prod/ https://safeframes-mbst-pub-uw1.s3-us-west-1.amazonaws.com/darla/ https://www.googletagmanager.com/ns.html;img-src data: blob: http: https:;media-src blob: https://*.yahoo.com https://*.yimg.com;report-uri https://csp.yahoo.com/beacon/csp?src=mail-norrin;script-src 'self' https://s.yimg.com/nq/nr/ https://s.yimg.com/os/yaft/ https://s.yimg.com/ss/ https://s.yimg.com/aaq/yc/ https://s.yimg.com/rq/darla/ https://fc.yahoo.com/sdarla/ https://e2e.fc.yahoo.com/sdarla/ https://safeframes-mbst-pub-uw1.s3-us-west-1.amazonaws.com/darla/ https://s.yimg.com/ds/scripts/ https://www.yahoo.com/polyfill.min.js https://yep.video.yahoo.com/js/ https://www.gstatic.com/cv/js/sender/v1/cast_sender.js https://s.yimg.com/aaq/vzm/ https://cdn-ssl.vidible.tv/prod/player/js/ https://yep.video.yahoo.com/ https://s.yimg.com/rx/ https://assets.video.yahoo.net/ https://jsapi.login.yahoo.com/w/ https://s.yimg.com/cv/apiv2/partner-portals/att/adobe_analytics/ https://consent.cmp.oath.com/ https://s.yimg.com/oa/ https://s.yimg.com/uc/sf/ https://s.yimg.com/aaq/ 'sha256-lRMQ2lQozgbWLOqNJOrnclJXX6G77pQVIlF8SAI3++I=' 'unsafe-inline' 'unsafe-eval' 'report-sample' 'nonce-wTBaTea+FLTKvOtN/aIHljvEXG0HSI4f2nDCex1TTsXPa5jR' ;style-src 'self' https://s.yimg.com/nq/nr/ https://s.yimg.com/rx/ https://assets.video.yahoo.net/ https://s.yimg.com/aaq/fp/ 'unsafe-inline';worker-src 'self' blob:;manifest-src https://s.yimg.com/nq/nr/json/ 1
default-src 'none'; style-src 'self' static.integromat.com fonts.googleapis.com checkout.stripe.com https://js.getuserflow.com/; font-src 'self' static.integromat.com fonts.gstatic.com data:; img-src 'self' static.integromat.com data: stats.g.doubleclick.net www.google-analytics.com www.google.com www.google.cz placehold.it placeholdit.imgix.net secure.gravatar.com usage.trackjs.com q.stripe.com img.youtube.com www.facebook.com t.co www.googletagmanager.com https://js.getuserflow.com/ https://storage.googleapis.com/studio1-prod-blob/; connect-src 'self' static.integromat.com iql.integromat.com wss://www.integromat.com capture.trackjs.com checkout.stripe.com integromat.zendesk.com www.google-analytics.com stats.g.doubleclick.net api.segment.io https://e.getuserflow.com/ wss://e.getuserflow.com/ https://js.getuserflow.com/ https://api-js.mixpanel.com; frame-src 'self' static.integromat.com www.facebook.com www.youtube.com checkout.stripe.com www.google.com; script-src 'self' static.integromat.com www.google-analytics.com www.google.com www.gstatic.com checkout.stripe.com connect.facebook.net static.ads-twitter.com analytics.twitter.com cdn.segment.com https://js.getuserflow.com/ https://cdn.mxpnl.com/; object-src 'self' static.integromat.com; media-src 'self' static.integromat.com https://storage.googleapis.com/studio1-prod-blob/; manifest-src 'self' static.integromat.com; base-uri 'self'; form-action 'self' https://hook.integromat.com/kx3ci9aonhesvtifi9crydlehe8m9p9t; frame-ancestors 'none' 1
script-src https://wesingapp.com http://wesingapp.com  https://*.wesingapp.com http://*.wesingapp.com https://*.qq.com http://*.qq.com https://*.gtimg.cn http://*.gtimg.cn https://*.tenpay.com https://*.idqqimg.com http://*.idqqimg.com https://*.gtimg.com http://*.gtimg.com 'unsafe-inline' 'unsafe-eval'; report-uri https://stat.y.qq.com/monitor/report_csp 1
sandbox allow-scripts allow-same-origin allow-forms allow-popups allow-top-navigation allow-popups-to-escape-sandbox; 1
default-src 'self' https: data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src 'self' data: https:; font-src *; 1
nosniff 1
default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://steamstore-a.akamaihd.net/ https://steamstore-a.akamaihd.net/ *.google-analytics.com https://www.gstatic.com https://recaptcha.net https://www.gstatic.cn/recaptcha/; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://steamcommunity-a.akamaihd.net/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ *.google-analytics.com; frame-src 'self' steam:  http://www.youtube.com https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://steamcommunity.com/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; 1
script-src 'self' www.dbschenker.com 'unsafe-inline' 'unsafe-eval' *.adobedtm.com img.en25.com dk7xb8gkokqbk.cloudfront.net www.google.com www.gstatic.com ecm-mediathek-deutschebahn.cdn.mediamid.com ssl.p.jwpcdn.com platform.twitter.com cdn.syndication.twimg.com s3.eu-central-1.amazonaws.com/dbschenkercom-cdn/; report-uri https://dis-sentry.schenker.sh/api/45/security/?sentry_key=02dc3484201d4d1b8bcbc0adfa098fa8 1
default-src 'self' https://gidonline.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://gidonline.io https://franecki.net https://franeski.net https://brdmin.com https://mrelko.com counter.yadro.ru; frame-src 'self' https://gidonline.io https://*.nogravitycdn.com https://*.ankunding.biz https://*.acdnpro.com https://mrelko.com https://www.mrelko.com https://81.svetacdn.in https://voidboost.net https://www.youtube.com; connect-src 'self' https://gidonline.io https://reichelcormier.bid; style-src 'self' 'unsafe-inline' https://gidonline.io; font-src 'self' https://gidonline.io; img-src 'self' data: https://gidonline.io https://*.nogravitycdn.com https://*.ankunding.biz https://brdmin.com https://*.brdmin.com https://*.acdnpro.com https://counter.yadro.ru; object-src 'self' https://gidonline.io 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com www.googletagmanager.com translate.google.com translate.googleapis.com www.google-analytics.com cdnjs.cloudflare.com js-agent.newrelic.com bam.nr-data.net z.moatads.com v1.addthisedge.com m.addthis.com www.ebmcdn.net ssl.p.jwpcdn.com blob: cdn.rawgit.com public.tableau.com bam-cell.nr-data.net addevent.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com s7.addthis.com; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com translate.googleapis.com addtocalendar.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' 1
frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.learnreligions.com 1
upgrade-insecure-requests; block-all-mixed-content; report-uri https://prezly.report-uri.com/r/d/csp/enforce 1
upgrade-insecure-requests;default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pi.pardot.com https://go.zen.co.uk https://ssl.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://dnn506yrbagrg.cloudfront.net https://az416426.vo.msecnd.net https://dc.services.visualstudio.com https://sjs.bizographics.com https://js.bizographics.com https://snap.licdn.com https://static.hotjar.com https://script.hotjar.com https://bat.bing.com https://s3.amazonaws.com https://dc.ads.linkedin.com https://px.ads.linkedin.com https://errors.angularjs.org https://code.jquery.com https://stackpath.bootstrapcdn.com https://livechat.zen.co.uk https://www.googleadservices.com https://tagmanager.google.com https://www.zen.co.uk https://secure.leadforensics.com https://secure.quantserve.com https://rules.quantcount.com https://platform.twitter.com https://cdn.syndication.twimg.com https://connect.facebook.net https://zen-internet-ltd.disqus.com https://disqus.com https://c.disquscdn.com https://widget.trustpilot.com https://dec.azureedge.net https://cdn.insight.sitefinity.com https://static-demo.mention-me.com https://static.mention-me.com https://tag-demo.mention-me.com https://tag.mention-me.com https://optimize.google.com https://cdn.cookielaw.org;object-src 'none';style-src 'self' 'unsafe-inline' https://c.disquscdn.com https://platform.twitter.com https://ton.twimg.com https://tagmanager.google.com https://stackpath.bootstrapcdn.com https://use.fontawesome.com https://optimize.google.com;img-src 'self' https://www.google-analytics.com https://wallpaperplay.com https://wallpaperaccess.com https://www.google.com https://www.google.co.uk https://i.ytimg.com https://stats.g.doubleclick.net https://gtrk.s3.amazonaws.com https://livechat.zen.co.uk https://zen-marketingwebsite-data.s3.amazonaws.com https://zen-marketingwebsite2-data.s3.amazonaws.com https://zen-marketingwebsite.s3.amazonaws.com data: https://platform.twitter.com https://syndication.twitter.com https://pbs.twimg.com https://abs.twimg.com https://ton.twimg.com https://www.facebook.com https://px.ads.linkedin.com https://www.linkedin.com https://ssl.gstatic.com https://www.gstatic.com https://c.disquscdn.com https://referrer.disqus.com https://pixel.quantserve.com https://bat.bing.com;media-src 'self';frame-src 'self' https://www.youtube.com https://livechat.zen.co.uk https://myaccount.zen.co.uk https://www.google.com https://maps.google.com https://platform.twitter.com https://syndication.twitter.com https://www.facebook.com https://disqus.com https://identity.sysdevext.zen.co.uk https://identity.zen.co.uk https://vars.hotjar.com https://widget.trustpilot.com https://demo.mention-me.com https://mention-me.com https://zen.mention-me.com https://optimize.google.com;font-src 'self' https://use.fontawesome.com https://script.hotjar.com;connect-src 'self' https://www.google-analytics.com https://dc.services.visualstudio.com https://links.services.disqus.com https://nl-api.dec.sitefinity.com https://in.hotjar.com https://vc.hotjar.io wss://*.hotjar.com https://stats.g.doubleclick.net https://tag.mention-me.com https://mention-me.com;frame-ancestors 'self';report-uri /WebResource.axd?cspReport=true 1
report-uri /report-csp;base-uri 'self';child-src number26://* *.n26.com n26.com pixel.mathtag.com n26.go2cloud.org tr.snapchat.com *.youtube-nocookie.com youtube-nocookie.com boards.greenhouse.io;connect-src 'self' https://api.tech26.de https://api.tech26.us * fonts.googleapis.com;font-src 'self' data:;img-src https://api.tech26.de https://api.tech26.us 'self' data: images.ctfassets.net images.contentful.com * *.greenhouse.io;media-src videos.contentful.com videos.ctfassets.net;object-src 'none';style-src 'unsafe-inline' fonts.googleapis.com tagmanager.google.com;script-src n26-trusted.n26.com 'self' polyfill.io cdn.number26.de 'unsafe-inline' * *.youtube-nocookie.com s.ytimg.com youtube-nocookie.com youtube.com boards.greenhouse.io 'unsafe-inline';worker-src 'self';default-src * 1
frame-ancestors 'self' https://m-redbus-id.cdn.ampproject.org https://www.google.com https://www.google.co.id https://m.redbus.id https://seocms.redbus.com; default-src 'self' https://c.riskified.com wss://*.firebaseio.com wss://rbpub.redbus.com wss://ssbk2-uk.gsecondscreen.com wss://ssbk4-uk.gsecondscreen.com wss://evbk.gamooga.com https://h.online-metrix.net https://s3.rdbuz.com https://evbk.gamooga.com https://*.doubleclick.net https://graph.facebook.com https://cdn-jp.gsecondscreen.com https://*.redbus.in  https://*.redbus.com https://*.googleapis.com https://www.google-analytics.com http://www.googletagmanager.com https://*.google.com https://*.google.co.in https://*.facebook.net http://www.googleadservices.com https://www.facebook.com https://recorder.sessionstack.com https://o2.mouseflow.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://beacon.riskified.com https://tags.tiqcdn.com http://cdn-akamai.mookie1.com https://*.firebaseio.com https://h.online-metrix.net https://*.twitter.com  https://static.ads-twitter.com https://www.googletagservices.com https://bam.nr-data.net https://*.doubleclick.net https://evbk.gamooga.com https://maxcdn.bootstrapcdn.com https://*.google.com https://cdn.jsdelivr.net https://sslwidget.criteo.com https://static.criteo.net https://cdn.mouseflow.com https://bat.bing.com https://maps.googleapis.com http://ae.gsecondscreen.com http://sg-pl.vizury.com https://cdnjs.cloudflare.com http://cdn-jp.gsecondscreen.com http://www.redbus.in https://www.redbus.in https://adservice.google.co.in https://ssl.google-analytics.com https://connect.facebook.net http://pagead2.googlesyndication.com http://www.google-analytics.com https://cdn.sessionstack.com http://www.googletagmanager.com http://connect.facebook.net http://www.googleadservices.com https://*.rdbuz.com https://*.redbus.in https://www.gstatic.com http://*.rdbuz.com; img-src 'self' data: blob: https://img.riskified.com https://web-elb https://*.online-metrix.net https://*.goibibo.com https://barcode-latam.s3.amazonaws.com https://t.co https://www.googletagmanager.com https://*.doubleclick.net https://tpc.googlesyndication.com https://maps.gstatic.com https://maps.googleapis.com  https://s3-ap-southeast-1.amazonaws.com https://*.s3-ap-southeast-1.amazonaws.com https://h.online-metrix.net https://bat.bing.com https://www.google.co.in https://evbk.gamooga.com http://origin-st.redbus.in https://cdn-jp.gsecondscreen.com http://www.redbus.in https://www.redbus.in https://*.google.com https://www.google-analytics.com  https://ssl.google-analytics.com https://*.facebook.com https://*.rdbuz.com https://st.redbus.in  http://*.rdbuz.com http://st.redbus.in https://cdn-jp.gsecondscreen.com https://api.midtrans.com https://www.glassdoor.co.in; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://*.google.com https://cdnjs.cloudflare.com https://www.w3schools.com http://fonts.googleapis.com https://fonts.googleapis.com https://*.rdbuz.com https://st.redbus.in  http://*.rdbuz.com http://st.redbus.in; font-src 'self' data: https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.gstatic.com http://*.rdbuz.com http://st.redbus.in https://fonts.gstatic.com https://*.rdbuz.com https://st.redbus.in; frame-src 'self' https://*.firebaseapp.com https://*.firebaseio.com  https://www.surveymonkey.com https://*.google.com https://isb.au1.qualtrics.com https://www.googletagservices.com/ https://*.redbus.com https://h.online-metrix.net https://checkout.payulatam.com/ https://*.doubleclick.net http://in-tags.vizury.com http://sg-pl.vizury.com https://xds.gsecondscreen.com https://*.facebook.com https://www.youtube.com https://dis.as.criteo.com; object-src 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.tribesocial.com *.intellum.com *.intellumlevel.com *.honeybadger.io *.amazonaws.com *.googleapis.com *.google-analytics.com *.jquery.com *.cookielaw.org *.onetrust.com *.youtube.com *.youtube-nocookie.com *.embedly.com *.embed.ly *.vimeo.com *.brightcove.net *.facebook.com zoom.us *.zoom.us wss://*.cloud.zoom.us *.nest.com *.demandbase.com *.company-target.com *.zscaler.net *.widencdn.net *.ytimg.com *.tealiumiq.com *.atdmt.com *.tiqcdn.com *.facebook.net *.facebook.com *.gstatic.com *.google.com *.doubleclick.net *.googleadservices.com *.googleusercontent.com *.googletagmanager.com *.googleplex.com *.stripe.com *.aptrinsic.com cdn.facebookblueprint.com *.fbcdn.net *.fbsbx.com *.facebook.com *.logmein.com *.gototraining.com *.jointraining.com *.gotowebinar.com *.joinwebinar.com *.googletagmanager.com *.ampproject.org *.doubleclick.net *.googleservices.com *.googleadservices.com *.g.doubleclick.net *.adsrvr.org *.timetap.com wss://websockets.intellum.com *.googleusercontent.com *.githubusercontent.com; img-src * data:; media-src * blob: mediastream:; 1
default-src 'none'; manifest-src 'self'; connect-src 'self'; font-src 'self'; img-src 'self' https://static.jeurissen.co/; style-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; sandbox allow-same-origin allow-popups-to-escape-sandbox; block-all-mixed-content; upgrade-insecure-requests; worker-src 'none'; frame-src 'none'; child-src 'none'; media-src 'none'; object-src 'none'; script-src 'none'; script-src-attr 'none'; style-src-attr 'self'; script-src-elem 'none'; style-src-elem 'self'; report-uri https://api.jeurissen.co/reports/csp/carlos.jeurissen.co; report-to csp-endpoint 1
frame-ancestors 'self' https://*.symplicity.com 1
base-uri 'self'; default-src 'none'; frame-ancestors 'none'; object-src 'none'; form-action 'self' https://www.paypal.com https://www.sandbox.paypal.com https://www.facebook.com ; style-src 'self' 'unsafe-inline' https://www.codeweavers.com https://*.codeweavers.com https://kit-free.fontawesome.com https://kit-pro.fontawesome.com ; img-src 'self' data: *; media-src 'self' data: *; font-src 'self' data: https://www.codeweavers.com https://*.codeweavers.com https://kit-free.fontawesome.com https://kit-pro.fontawesome.com ; script-src 'self' https://www.codeweavers.com https://*.codeweavers.com https://kit.fontawesome.com/ https://ssl.google-analytics.com/ga_exp.js https://www.google-analytics.com/analytics.js https://www.google-analytics.com/plugins/ https://www.googleadservices.com/pagead/conversion_async.js https://connect.facebook.net https://platform.twitter.com https://hm.baidu.com/hm.js ; connect-src 'self' https://*.codeweavers.com https://stats.g.doubleclick.net ; frame-src 'self' https://www.facebook.com https://connect.facebook.net https://www.youtube.com/embed/ ; 1
frame-ancestors 'self' https://www.scottishfa.co.uk/ https://creative.dailymail.co.uk/ https://www.dailymail.co.uk/ https://www.w3schools.com/ 1
frame-ancestors 'self' online.greatergiving.com supporter.greatergiving.com; 1
frame-ancestors *.webtrends.com 'self' 1
frame-ancestors 'self' https://*.designcrowd.com; 1
frame-ancestors 'self' *.3dcart.com *.3dcart.net *.3dc.local *.3dcart.co.uk *.3dcart.ca app.cyfe.com 1
frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.liquor.com 1
default-src 'self'; block-all-mixed-content; child-src 'self' blob: 1327335.fls.doubleclick.net bid.g.doubleclick.net d6tizftlrpuof.cloudfront.net pasaanvraag.schiphol.nl www.youtube.com 5980017.fls.doubleclick.net www.googletagmanager.com www.facebook.com connect.facebook.net analytics-eu.clickdimensions.com www.google.com; connect-src 'self' *.schiphol.nl wss://ws-eu.pusher.com api.usabilla.com app.getsentry.com sentry.io *.nr-data.net d6tizftlrpuof.cloudfront.net doubleclickadexchange.net www.google-analytics.com pagead2.googlesyndication.com jy11djjhoa.execute-api.eu-west-1.amazonaws.com *.g.doubleclick.net *.tiles.mapbox.com api.mapbox.com obipubvideo.s3.eu-central-1.amazonaws.com ws-eu.pusher.com stats.pusher.com events.mapbox.com api-cdn.embed.ly chat-schipholccc.cs83.force.com schipholccc.secure.force.com *.facebook.com; font-src 'self' data: fonts.gstatic.com tagmanager.google.com themes.googleusercontent.com cdn.schiphol.nl cdn.digitalredesign.nl; frame-ancestors 'self' *.my.salesforce.com www.kcmsurvey.com *.schiphol.nl; frame-src 'self' blob: 1327335.fls.doubleclick.net bid.g.doubleclick.net d6tizftlrpuof.cloudfront.net pasaanvraag.schiphol.nl www.youtube.com 5980017.fls.doubleclick.net www.googletagmanager.com www.facebook.com connect.facebook.net analytics-eu.clickdimensions.com www.google.com html5-player.libsyn.com cdn.embedly.com service.force.com schipholccc.secure.force.com *.my.salesforce.com www.kcmsurvey.com consentcdn.cookiebot.com customer.bookingbug.com; img-src 'self' data: blob: *.ctfassets.net *.nr-data.net bat.bing.com bat.r.msn.com cdncash.org d6tizftlrpuof.cloudfront.net doubleclick.net ge0ip.com ge0ip.net ge0ip.org *.g.doubleclick.net lancheck.net maps.googleapis.com *.schiphol.nl schiphol.mobi tagmanager.google.com takethatad.com tm.tradetracker.net ts.tradetracker.net tl.tradetracker.net w.usabilla.com www.google-analytics.com www.google.com www.google.nl www.googleadservices.com www.gstatic.com www.seebuyflyhappyhour.nl connect.facebook.net www.facebook.com s.ytimg.com lh3.googleusercontent.com cdn.digitalredesign.nl ad.doubleclick.net adservice.google.com adservice.google.nl assets.libsyn.com ssl-static.libsyn.com *.content.force.com schipholccc.secure.force.com opt.objectiveportal.com *.ads.linkedin.com; manifest-src 'self' cdn.schiphol.nl cdn.digitalredesign.nl; script-src 'self' data: asset: blob: 'unsafe-inline' 'unsafe-eval' *.schiphol.nl ajax.googleapis.com api.usabilla.com apps-analytics.net *.nr-data.net bat.bing.com cdn.optimizely.com cdncash.org d1fc8wv8zag5ca.cloudfront.net d6tizftlrpuof.cloudfront.net d19tqk5t6qcjac.cloudfront.net ge0ip.com ge0ip.net ge0ip.org js-agent.newrelic.com tagmanager.google.com tm.tradetracker.net w.usabilla.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com connect.facebook.net www.facebook.com *.tiles.mapbox.com www.youtube.com s.ytimg.com googleads.g.doubleclick.net www.google.com analytics-eu.clickdimensions.com cdn.digitalredesign.nl js.pusher.com stats.pusher.com cdn.speedcurve.com spdcrv.global.ssl.fastly.net *.salesforceliveagent.com *.my.salesforce.com service.force.com ajax.cloudflare.com cdn.embedly.com chat-schipholccc.cs83.force.com static.lightning.force.com schipholccc.secure.force.com consent.cookiebot.com opt.objectiveportal.com snap.licdn.com; style-src 'self' 'unsafe-inline' blob: tagmanager.google.com d6tizftlrpuof.cloudfront.net www.gstatic.com api.tiles.mapbox.com cdn.schiphol.nl cdn.digitalredesign.nl cdn.embedly.com static.libsyn.com service.force.com *.my.salesforce.com chat-schipholccc.cs83.force.com schipholccc.secure.force.com; worker-src 'self' blob: 1327335.fls.doubleclick.net bid.g.doubleclick.net d6tizftlrpuof.cloudfront.net pasaanvraag.schiphol.nl www.youtube.com 5980017.fls.doubleclick.net www.googletagmanager.com *.facebook.com analytics-eu.clickdimensions.com www.google.com 1
script-src 'self' https://assets.tumblr.com https://sb.scorecardresearch.com/beacon.js https://ssl.google-analytics.com/ga.js https://www.google-analytics.com/analytics.js https://fc.yahoo.com/sdarla/php/client.php https://s.yimg.com/rq/darla/ https://www.googletagservices.com/tag/js/gpt.js https://securepubads.g.doubleclick.net/gpt/ https://securepubads.g.doubleclick.net/gampad/ads https://pagead2.googlesyndication.com/pagead/osd.js https://www.google.com/recaptcha/api.js https://consent.cmp.oath.com https://*.gemini.yahoo.com https://s.yimg.com/av/gemini/ga/gemini-iframe.js https://s.yimg.com/av/curveball/ https://*.quantserve.com https://*.quantcount.com https://quantcast.mgr.consensu.org 'unsafe-eval' 'nonce-muiHybNrD18N7Rs9h6Jj4hE5s' https://www.google.com/recaptcha/api.js https://www.gstatic.com; object-src 'none'; worker-src blob:; base-uri 'self'; 1
img-src 'self' data: https://ads.yahoo.com https://cm.g.doubleclick.net https://d.adroll.com https://dsum-sec.casalemedia.com https://eb2.3lift.com https://ib.adnxs.com https://idsync.rlcdn.com https://images.prismic.io https://p.typekit.net https://pixel.advertising.com https://pixel.rubiconproject.com https://prismic-io.s3.amazonaws.com https://simage2.pubmatic.com https://stats.g.doubleclick.net https://sync.outbrain.com https://sync.taboola.com https://trc.taboola.com https://ups.analytics.yahoo.com https://us-u.openx.net https://use.typekit.net https://www.facebook.com https://www.google.com https://www.google.pt https://x.bidswitch.net www.google-analytics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.cloudflare.com/ https://connect.facebook.net https://d.adroll.com https://d.adroll.mgr.consensu.org https://s.adroll.com http://static.cdn.prismic.io/prismic.js https://static.zdassets.com/ https://s.adroll.com https://use.typekit.net https://www.datadoghq-browser-agent.com https://www.gstatic.com https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://p.typekit.net/ https://use.typekit.net 1
default-src 'self' data: https://rbl-prod-customize-cc-bucket.s3.ap-south-1.amazonaws.com https://chat.rblbank.com https://chatbotpub.rblbank.com https://chatbot.rblbank.com https://chatbotps.rblbank.com wss://speech.senseforth.com/transcribe https://smartlocator.rblbank.com https://drws17a9qx558.cloudfront.net https://bid.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com https://www.google.co.in https://www.google-analytics.com https://fonts.gstatic.com https://rbl-prod-pkb.s3.ap-south-1.amazonaws.com https://fonts.googleapis.com https://bid.g.doubleclick.net https://stats.g.doubleclick.net https://aware-commons.s3.ap-south-1.amazonaws.com https://signdesk.in ; img-src 'self' data: https://rbl-prod-customize-cc-bucket.s3.ap-south-1.amazonaws.com https://s3-us-west-2.amazonaws.com https://fonts.gstatic.com  https://chat.rblbank.com https://chatbotpub.rblbank.com https://chatbot.rblbank.com https://chatbotps.rblbank.com wss://speech.senseforth.com/transcribe https://drws17a9qx558.cloudfront.net https://stats.g.doubleclick.net https://q.quora.com https://www.google.com https://www.google.co.in https://www.google-analytics.com https://bat.bing.com https://s3.ap-south-1.amazonaws.com https://www.facebook.com https://t.co https://maps.googleapis.com https://fonts.googleapis.com https://maps.gstatic.com https://rbl-prod-pkb.s3.ap-south-1.amazonaws.com https://aware-commons.s3.ap-south-1.amazonaws.com https://signdesk.in ;script-src 'self' https://checkout.razorpay.com https://mozilla.github.io https://fonts.gstatic.com https://api.signdesk.in https://signdesk.in https://chat.rblbank.com https://chatbotpub.rblbank.com https://chatbot.rblbank.com https://chatbotps.rblbank.com wss://speech.senseforth.com/transcribe https://smartlocator.rblbank.com http://10.80.62.159 https://drws17a9qx558.cloudfront.net https://www.googleadservices.com  https://analytics.twitter.com https://www.google.com https://www.google.co.in https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://www.gstatic.com https://bat.bing.com https://static.ads-twitter.com https://a.quora.com https://www.google.com https://c.o-s.io https://googleads.g.doubleclick.net https://rbl-prod-pkb.s3.ap-south-1.amazonaws.com https://fonts.googleapis.com https://maps.googleapis.com https://fonts.googleapis.com https://signdesk.in 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://chat.rblbank.com https://chatbotpub.rblbank.com https://chatbot.rblbank.com https://chatbotps.rblbank.com wss://speech.senseforth.com/transcribe https://drws17a9qx558.cloudfront.net https://fonts.googleapis.com https://rbl-prod-pkb.s3.ap-south-1.amazonaws.com https://signdesk.in 'unsafe-inline' https://fonts.gstatic.com/; object-src 'self' ; media-src 'self' https://chat.rblbank.com https://chatbotpub.rblbank.com https://chatbot.rblbank.com https://chatbotps.rblbank.com wss://speech.senseforth.com/transcribe https://drws17a9qx558.cloudfront.net https://rbl-prod-pkb.s3.ap-south-1.amazonaws.com https://signdesk.in; connect-src 'self' https://api.signdesk.in https://chat.rblbank.com https://chatbot.rblbank.com https://chatbotpub.rblbank.com https://chatbotps.rblbank.com wss://speech.senseforth.com/transcribe https://www.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://www.googletagmanager.com  https://www.google-analytics.com https://bat.bing.com https://static.ads-twitter.com https://a.quora.com  https://connect.facebook.net https://c.o-s.io https://fonts.googleapis.com https://fonts.gstatic.com https://www.facebook.com https://analytics.twitter.com https://www.googleadservices.com  https://q.quora.com https://t.co https://googleads.g.doubleclick.net https://www.google.co.in https://drws17a9qx558.cloudfront.net https://rbl-prod-pkb.s3.ap-south-1.amazonaws.com https://chat.rblbank.com https://chatbotpub.rblbank.com https://chatbot.rblbank.com https://chatbotps.rblbank.com wss://speech.senseforth.com/transcribe https://aware-commons.s3.ap-south-1.amazonaws.com https://signdesk.in; 1
default-src 'self' 'unsafe-inline'  http://*.jmstatic.com https://*.jmstatic.com http://*.jumei.com https://*.jumei.com http://*.qq.com http://*.qcloud.com ;  child-src 'self' 'unsafe-inline' jumeimall: jmweb:  http://*.qcloud.com http://*.youku.com http://*.jumei.com;  script-src http://*.jmstatic.com https://*.jmstatic.com http://*.gtags.net http://*.zampda.net http://*.ipinyou.com http://*.p0y.cn http://s.emarbox.com https://*.qq.com http://*.qq.com http://qzonestyle.gtimg.cn https://qzonestyle.gtimg.cn http://www.google-analytics.com http://*.qcloud.com https://*.qcloud.com http://*.baidu.com https://*.baidu.com http://*.jumei.com https://*.jumei.com http://ssl.google-analytics.com 'unsafe-inline' 'unsafe-eval';  media-src http://*.jumei.com https://*.jumei.com http://*.myqcloud.com https://*.myqcloud.com http://*.qcloud.com https://*.qcloud.com http://playvideo.qcloud.com https://playvideo.qcloud.com http://*.jmstatic.com https://*.jmstatic.com;  img-src 'self' data: http://*.jmstatic.com https://*.jmstatic.com http://*.gtags.net http://*.jumei.com https://*.jumei.com http://*.jumei.com:8080 http://img0.imgtn.bdimg.com http://*.qq.com http://p.qpic.cn https://*.qq.com http://*.qcloud.com https://*.qcloud.com http://*.myqcloud.com https://*.myqcloud.com http://sd.jumei.com:8106 https://sd.jumei.com:8106 http://www.google-analytics.com http://*.baidu.com http://ssl.google-analytics.com http://*.sinaimg.cn https://*.sinaimg.cn http://*.qlogo.cn https://*.qlogo.cn;  frame-src http://s.h5.jumei.com jumeimall: jmweb: https://api.map.baidu.com http://*.p0y.cn http://*.gtags.net http://*.emarbox.com http://*.myqcloud.com https://*.myqcloud.com http://*.qcloud.com https://*.qcloud.com sinaweibo: weixinping: weixin: 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://*.googleapis.com https://www.gstatic.com https://www.google.com https://*.pingdom.net https://cc.cdn.civiccomputing.com https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.joomla.org https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' https://*.doubleclick.net https://*.pingdom.net https://apikeys.civiccomputing.com; frame-src 'self' https://www.google.com https://*.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com; font-src 'self' https://fonts.gstatic.com https://netdna.bootstrapcdn.com https://cdn.joomla.org; img-src 'self' https://*.google-analytics.com https://*.doubleclick.net https://*.googletagmanager.com https://cdn.joomla.org; frame-ancestors 'self'; report-uri https://joomla.report-uri.com/r/t/csp/enforce 1
frame-ancestors *.stc.com.sa; 1
child-src 'self' blob: tlsstgsitecore.azureedge.net tlsprdsitecore.azureedge.net tlsuatsitecore-single.azurewebsites.net;connect-src 'self' *.flickr.com *.staticflickr.com *.civiccomputing.com *.brightcove.net *.brightcove.com *.brightcove.hs.llnwd.net  *.doubleclick.net *.gstatic.com *.googlesyndication.com *.hotjar.com *.google-analytics.com *.yahoo.com *.disquscdn.com *.disqus.com disqus.com *.emailcc.com emailcc.com blob: *.akamaihd.net *.boltdns.net tlsstgsitecore.azureedge.net tlsprdsitecore.azureedge.net tlsuatsitecore-single.azurewebsites.net *.hotjar.com *.hotjar.io wss://*.hotjar.com *.boltdns.net *.akamaihd.net www.facebook.com;default-src 'self' *.googlesyndication.com *.disquscdn.com *.disqus.com disqus.com *.lawsociety.org.uk *.google-analytics.com *.doubleclick.net *.gstatic.com *.adservice.google.ie *.adservice.google.com.sg *.adservice.google.ro *.adservice.google.de *.adservice.google.co.in *.adservice.google.fr *.googletagmanager.com *.brightcove.net *.brightcove.com *.brightcove.hs.llnwd.net  *.hotjar.com *.civiccomputing.com *.emailcc.com emailcc.com *.spreaker.com *.infogram.com tlsstgsitecore.azureedge.net tlsprdsitecore.azureedge.net tlsuatsitecore-single.azurewebsites.net;font-src 'self' data: *.slidesharecdn.com *.slideshare.net fast.fonts.net *.hotjar.com *.gstatic.com tlsstgsitecore.azureedge.net tlsprdsitecore.azureedge.net tlsuatsitecore-single.azurewebsites.net;frame-src 'self' *.livestream.com data: *.youtube.com *.ytimg.com *.twitter.com *.ads-twitter.com *.carto.com *.spreaker.com *.concep.com *.slidesharecdn.com *.slideshare.net *.storify.com *.hotjar.com *.doubleclick.net *.google.com *.google.co.uk *.infogram.com *.disquscdn.com *.disqus.com disqus.com *.googlesyndication.com *.emailcc.com emailcc.com *.akamaihd.net *.boltdns.net *.brightcove.net *.brightcove.com *.brightcove.hs.llnwd.net  tlsstgsitecore.azureedge.net tlsprdsitecore.azureedge.net tlsuatsitecore-single.azurewebsites.net  www.facebook.com staticxx.facebook.com www.googletagservices.com;img-src 'self' data: blob: *.youtube.com *.ytimg.com *.googleapis.com *.google.com *.google.co.uk *.twitter.com *.ads-twitter.com *.twimg.com *.yahoo.com *.webscanningservice.com *.flickr.com *.staticflickr.com *.google-analytics.com *.doubleclick.net *.gstatic.com *.hotjar.com *.lawsociety.org.uk *.disquscdn.com *.disqus.com disqus.com *.brightcove.net *.brightcove.com *.brightcove.hs.llnwd.net  *.boltdns.net tlsstgsitecore.azureedge.net tlsprdsitecore.azureedge.net tlsuatsitecore-single.azurewebsites.net *.boltdns.net *.googlesyndication.com px.ads.linkedin.com www.facebook.com *.lawgazette.co.uk www.linkedin.com d1d8vslyhr7rdg.cloudfront.net;media-src 'self' blob: *.brightcove.net *.brightcove.com *.brightcove.hs.llnwd.net  tlsstgsitecore.azureedge.net tlsprdsitecore.azureedge.net tlsuatsitecore-single.azurewebsites.net;object-src *.brightcove.net *.brightcove.com *.brightcove.hs.llnwd.net  tlsstgsitecore.azureedge.net tlsprdsitecore.azureedge.net tlsuatsitecore-single.azurewebsites.net;report-uri  https://lawsocietyorguk.report-uri.com/r/d/csp/enforce https://7ir5fiw82m.execute-api.eu-west-1.amazonaws.com/beta;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.youtube.com *.ytimg.com *.twitter.com *.ads-twitter.com *.twimg.com blob: *.flickr.com *.staticflickr.com *.concep.com *.googletagmanager.com *.spreaker.com *.hotjar.com *.google-analytics.com *.adservice.google.ie *.adservice.google.com.sg *.adservice.google.ro *.adservice.google.de *.adservice.google.co.in *.adservice.google.fr *.google.com *.google.co.uk *.gstatic.com *.doubleclick.net *.googlesyndication.com *.brightcove.net *.brightcove.com *.brightcove.hs.llnwd.net  *.infogram.com *.disquscdn.com *.disqus.com disqus.com *.civiccomputing.com *.jquery.com *.emailcc.com emailcc.com tlsstgsitecore.azureedge.net tlsprdsitecore.azureedge.net prdsitecore-2019-cd.azurewebsites.net tlsuatsitecore-single.azurewebsites.net tlsstgsitecore-cd.azurewebsites.net tlsstgsitecore-cm.azurewebsites.net tlsuatsitecore-single.azurewebsites.net *.civiccomputing.com *.jquery.com cdnjs.cloudflare.com c.contentsvr.com *.emailcc.com *.ytimg.com *.bizographics.com connect.facebook.net snap.licdn.com cdn.ampproject.org *.googleadservices.com *.googletagservices.com;style-src 'unsafe-inline' *.googleapis.com 'self' fast.fonts.net *.twitter.com *.ads-twitter.com *.disquscdn.com *.disqus.com disqus.com *.googletagmanager.com tlsstgsitecore.azureedge.net tlsprdsitecore.azureedge.net tlsuatsitecore-single.azurewebsites.net tagmanager.google.com cdn.ampproject.org ;upgrade-insecure-requests; 1
frame-ancestors 'self' baku.ws *.baku.ws oxu.az *.oxu.az 1
frame-ancestors 'self' primexbt.com primexbt.ch primexbt-promo.com primexbt-start.com sign-up.primexbt.com prod-express.primexbt.com; 1
default-src 'self' https://*.copaair.com http://*.copaair.com https://*.copa.com http://*.copa.com https://*.sam4m.com/  http://*.adnxs.com http://*.bing.com http://*.copa.com http://*.copaair.com http://*.doubleclick.net http://*.facebook.com http://*.facebook.net http://*.fltmaps.com http://*.frequentflyer.aero http://*.google-analytics.co http://*.google-analytics.com http://*.googleadservices.com http://*.googletagmanager.com http://*.havasdigitalcolombia.com http://*.innosked.com http://*.intelliresponse.com http://*.msn.com http://*.qualtrics.com http://*.trackedlink.net http://*.w55c.net http://*.youtube.com http://ads.dtravelconnection.com http://miparaisoatlantis.com http://panamaesposible.com https://*.copa.com https://*.copaair.com https://*.facebook.com https://*.flightcontrol.io https://*.flightview.com https://*.fltmaps.com https://*.frequentflyer.aero https://*.google.com https://www.google.com.co https://www.google.com.pa https://*.google.sk https://*.googleapis.com https://*.gstatic.com https://*.havasdigitalcolombia.com https://*.innosked.com https://*.intelliresponse.com https://*.mcafeesecure.com https://*.nbxapps.com https://*.sojern.com https://*.twitter.com https://*.w55c.net https://*.websecurity.norton.com https://*.youtube.com https://acuityplatform.com https://beacon.walmart.com https://pr-bh.ybp.yahoo.com https://r1.dotmailer-surveys.com https://static.ads-twitter.com https://t.co https://t.wayfair.com https://*.airtrfx.com http://*.airtrfx.com https://*.hotjar.com https://*.securitytrfx.com http://*.securitytrfx.com https://*.addthis.com https://*.addthisedge.com https://kirnhn54sa.execute-api.us-east-1.amazonaws.com https://*.yimg.com https://*.analytics.yahoo.com https://*.trackedweb.net https://*.groovinads.com https://*.beatdevelop.co https://*.sam4m.co https://*.a3cloud.net https://trackedweb.net https://gwmtracking.com https://kontentroom.com https://alteryz.s3.amazonaws.com/copalove/ https://script.googleusercontent.com 'unsafe-inline' 'unsafe-eval' data: blob: 1
frame-ancestors 'self' http://*.vodafone.com http://*.vodafone.it https://*.vodafone.com https://*.vodafone.it 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontier&region=US&lang=en-US&device=desktop&yrid=a3ih4l1ful7k0&partner=ftr; 1
frame-ancestors *.diffen.com 1
report-uri https://sentry.io/api/5175049/security/?sentry_key=c269bf7b8bc44929b43bbb29e11cece5&sentry_environment=prod_enforcement; script-src 'self' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https: http: 'nonce-00b22c60430e434f6667775fd258ee6b' 'sha384-7uqQfGVKWAthYOKjE4CToVZDjNGO+rxLDL5sFo1HUI3u+vwLmAinEM0/LcURoj1h' 'sha256-spTpc4lvj4dOkKjrGokIrHkJgNA0xMS98Pw9N7ir9oI=' 'sha384-4FS9nLDjKOPIgz/SgGvZV4C8RHHRyRP1Fb6ZW/XH/o8PFaviPmgzLc6kOS2GQ87x' 'sha384-3vojR0D/VZNPM9rutbkAQlVZeDVrc50TkyBVfVpqoZzVQpWA65x5mQXOij0vt2Cu' 'sha384-VI5+XuguQ/l3kUhh4knz7Hxptx47wpQbVRDnp8v7Vvuhzwn1PEYb/uvtH6KLxv6d' 'report-sample'; object-src 'none'; base-uri 'self'; connect-src https://doordash.com https://www.doorcrawl.com https://analytics.google.com https://api.amplitude.com https://api.segment.io https://sentry.io https://o17585.ingest.sentry.io https://bam.nr-data.net https://page-service-qa.doordash.com https://page-service.doordash.com https://page-service.doorcrawl.com https://cdn.doordash.com https://s3-design-language-system.cdn4dd.com https://logx.optimizely.com https://*.optimizely.com https://www.google-analytics.com https://www.doordash.com https://stats.g.doubleclick.net https://order.online https://*.order.online https://preview.trycaviar.com https://staging.trycaviar.com https://qa.trycaviar.com/ https://www.trycaviar.com https://trycaviar.com https://client-analytics.braintreegateway.com https://api.braintreegateway.com https://payments.braintree-api.com https://www.google.com https://www.google.ca https://www.google.com.au https://bat.bing.com https://www.facebook.com https://api.doordash.com https://api-consumer-client.doordash.com https://api-consumer-client-qa.doordash.com https://www.paypal.com https://img.cdn4dd.com; frame-ancestors 'self'; worker-src 'none' 1
default-src 'self' https://c.disquscdn.com https://disqus.com; script-src 'self' 'unsafe-inline' data: https://az620379.vo.msecnd.net https://cdn.taboola.com https://browser.sentry-cdn.com https://*.highcharts.com https://code.jquery.com https://ajax.aspnetcdn.com https://www.google.com https://www.gstatic.com https://disqus.com predictit.disqus.com https://c.disquscdn.com www.googletagmanager.com https://platform.twitter.com https://cdn.syndication.twimg.com https://*.firebaseio.com https://www.googleadservices.com https://www.google-analytics.com https://connect.facebook.net https://googleads.g.doubleclick.net https://tagmanager.google.com https://www.youtube.com https://s.ytimg.com https://browser.sentry-cdn.com https://*.optimove.net https://gateway.optimove.events; style-src 'self' 'unsafe-inline' https://az620379.vo.msecnd.net https://fonts.googleapis.com https://c.disquscdn.com https://platform.twitter.com https://ton.twimg.com https://tagmanager.google.com; font-src 'self' data: https://az620379.vo.msecnd.net https://fonts.gstatic.com https://tagmanager.google.com; img-src 'self' 'unsafe-eval' data: https://*; connect-src 'self' wss://*.firebaseio.com https://*.services.disqus.com wss://*.predictit.org https://hub.predictit.org https://fcm.googleapis.com https://www.google-analytics.com https://www.facebook.com https://sentry.io https://*.optimove.net https://gateway.optimove.events; frame-src 'self' https://news.predictit.org https://*.libsyn.com https://*.firebaseio.com https://disqus.com https://*.twitter.com https://bid.g.doubleclick.net https://predictit.freshdesk.com https://analysis.predictit.org https://www.youtube.com https://www.google.com https://*.soundcloud.com https://widgets.itunes.apple.com https://www.facebook.com; frame-ancestors 'self'; media-src https://aristotle.com; 1
default-src https: wss: gap: gap-iab: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; font-src https: data:; frame-ancestors 'none'; report-uri https://www.trybooking.com/api/v1/csp/report 1
frame-ancestors 'self' https://teams.microsoft.com https://teams.microsoft.us https://local.teams.office.com https://int.teams.microsoft.com https://devspaces.skype.com https://ssauth.skype.com https://teams.microsoft.com.mcas.ms https://teams.microsoft.com.us3.cas.ms; report-uri /cspreport 1
default-src 'none'; img-src 'self' sa.geojs.io api.simpleanalytics.io; script-src 'self' get.geojs.io traffic-stats.geojs.io sa.geojs.io cdn.simpleanalytics.io geojs.us14.list-manage.com www.google.com www.gstatic.com; style-src 'self' 'unsafe-inline'; connect-src sa.geojs.io api.simpleanalytics.io; manifest-src 'self'; form-action 'self' geojs.us14.list-manage.com; frame-src www.google.com simpleanalytics.com simpleanalytics.io; frame-ancestors 'none'; report-uri https://jloh.report-uri.com/r/d/csp/enforce 1
default-src 'self' data: blob: shopify.com *.streamshark.io *.myshopify.io *.wistia.com embedwistia-a.akamaihd.net *.litix.io *.wistia.net *.shopify.com *.shopifysvc.com notify.bugsnag.com *.mode.com fonts.gstatic.com *.youtube.com monorail-edge-staging.shopifycloud.com *.doubleclick.net alb.reddit.com bat.bing.com cdn.bizible.com collect.tealiumiq.com ct.pinterest.com datacloud.tealiumiq.com my.tealiumiq.com p.adsymptotic.com px.ads.linkedin.com t.co tr.snapchat.com www.facebook.com www.google.com www.google.ca www.google-analytics.com shopify-assets.shopifycdn.com; style-src 'self' 'unsafe-inline' data: blob: cdn.shopify.com cdn.shopifycloud.com; script-src 'self' 'nonce-0b32f719-bab3-44a7-bc2d-e2b862e1bac6' 'nonce-0ed50412-1f61-4d8f-9397-8f41867cfb19' www.googletagmanager.com www.google-analytics.com tags.tiqcdn.com cdn.bizible.com deploytealium.com snap.licdn.com static.ads-twitter.com analytics.twitter.com www.redditstatic.com s.yimg.com s.pinimg.com sc-static.net bat.bing.com connect.facebook.net sp.analytics.yahoo.com cdn.shopify.com cdn.shopifycloud.com fast.wistia.com app.wistia.com blob:; block-all-mixed-content; upgrade-insecure-requests 1
default-src https://domene.shop https://www.domeneshop.no https://domeneshop.no https://domainnameshop.com https://domainname.shop https://xn--domn-noa.shop https://xn--domne-ura.shop https://chat.domeneshop.no/ 'unsafe-inline'; img-src https://domene.shop https://www.domeneshop.no https://domeneshop.no https://domainnameshop.com https://domainname.shop https://xn--domn-noa.shop https://xn--domne-ura.shop; frame-src https://domene.shop https://www.domeneshop.no https://domeneshop.no https://domainnameshop.com https://domainname.shop https://xn--domn-noa.shop https://xn--domne-ura.shop 1
default-src 'none'; style-src 'self' https: 'unsafe-inline' https://maxcdn.bootstrapcdn.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https: https://maxcdn.bootstrapcdn.com; font-src 'self' https://maxcdn.bootstrapcdn.com; img-src 'self' https: https://opengl.org https://www.khronos.org 1
default-src 'self' ws: data: 'unsafe-inline' 'unsafe-eval' *.ldlc.com api.userlike.com *.googleapis.com www.googletagmanager.com *.gstatic.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com chat.userlike.com *.cloudfront.net *.hotjar.com *.hotjar.io connect.facebook.net www.google-analytics.com www.googlecommerce.com aswpapieu.com aswpsdkeu.com *.doubleclick.net stats.g.doubleclick.net *.groupe-ldlc.com *.google.com *.google.fr www.facebook.com www.gstatic.com *.googleapis.com www.youtube.com mpshare.iesname.com *.trustpilot.com 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.sams.com.mx https://*.ampproject.org https://*.googlesyndication.com https://*.googleapis.com https://www.google-analytics.com https://*.google.com https://optimize.google.com https://*.google.co.mx https://*.google.co.in https://*.gstatic.com https://*.doubleclick.net https://*.googletagmanager.com https://*.googletagservices.com https://*.googleadservices.com https://*.adform.net https://*.evergage.com https://*.contentsquare.net https://*.veinteractive.com https://*.pages05.net https://*.bing.com https://*.azureedge.net https://*.iesnare.com https://log.pinterest.com https://*.twitter.com https://*.pinterest.com https://*.criteo.com https://*.criteo.net https://*.facebook.net https://www.youtube.com https://*.ibmmarketingcloud.com https://contentsquare.com https://kenshoo.com/ https://rakutenlinkshare.com https://openpay.s3.amazonaws.com https://api.openpay.mx https://cdn.siftscience.com https://*.accpg.accertify.net https://ci-mpsnare.iovation.com https://*.2mdn.net https://*.atdmt.com https://*.ytimg.com https://www.recaptcha.net https://cdn.siftscience.com https://mex-cca-prod.walmart.com https://mex-sams-coreweb-prod.walmart.com https://*.signifyd.com mediastream: blob:; connect-src 'self' * blob:; object-src 'self' https://*.sams.com.mx blob:; base-uri 'self' https://*.google.com; report-uri https://csp.walmart.com/c/r/samsmx 1
default-src 'self' https://d14jjfgstdxsoz.cloudfront.net http://platform.twitter.com https://platform.twitter.com http://syndication.twitter.com https://syndication.twitter.com http://*.olark.com https://*.olark.com http://*.adroll.com https://*.adroll.com http://*.adroll.mgr.consensu.org https://*.adroll.mgr.consensu.org http://meteor-frontpage-assets.s3.amazonaws.com https://meteor-frontpage-assets.s3.amazonaws.com http://*.marketo.com https://*.marketo.com http://*.marketo.net https://*.marketo.net http://*.cloudfront.net https://*.cloudfront.net http://maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://optimize.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://app.convertcalculator.co; script-src 'self' 'unsafe-inline' https://d14jjfgstdxsoz.cloudfront.net 'unsafe-eval' http://cdn.optimizely.com https://cdn.optimizely.com http://www.googletagmanager.com https://www.googletagmanager.com http://cdn.heapanalytics.com https://cdn.heapanalytics.com http://ssl.google-analytics.com https://ssl.google-analytics.com http://www.google-analytics.com https://www.google-analytics.com http://api.mixpanel.com https://api.mixpanel.com http://cdn.mxpnl.com https://cdn.mxpnl.com http://cdn.segment.com https://cdn.segment.com http://api.segment.io https://api.segment.io http://static.chartbeat.com https://static.chartbeat.com http://js.hs-analytics.net https://js.hs-analytics.net http://platform.twitter.com https://platform.twitter.com http://syndication.twitter.com https://syndication.twitter.com http://tag.perfectaudience.com https://tag.perfectaudience.com http://pixel-geo.prfct.co https://pixel-geo.prfct.co http://js.hsforms.net https://js.hsforms.net http://forms.hubspot.com https://forms.hubspot.com http://www.googleadservices.com https://www.googleadservices.com http://app.satismeter.com https://app.satismeter.com http://cdn.syndication.twimg.com https://cdn.syndication.twimg.com http://api.hubapi.com https://api.hubapi.com http://*.olark.com https://*.olark.com http://go.toutapp.com https://go.toutapp.com http://*.adroll.com https://*.adroll.com http://*.adroll.mgr.consensu.org https://*.adroll.mgr.consensu.org http://connect.facebook.net https://connect.facebook.net http://facebook.com https://facebook.com http://js.recurly.com https://js.recurly.com http://api.recurly.com https://api.recurly.com http://*.inspectlet.com https://*.inspectlet.com http://meteor-frontpage-assets.s3.amazonaws.com https://meteor-frontpage-assets.s3.amazonaws.com http://nectar.ninja https://nectar.ninja http://*.marketo.com https://*.marketo.com http://*.marketo.net https://*.marketo.net http://*.cloudfront.net https://*.cloudfront.net http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://threejs.org https://threejs.org http://cdn.jsdelivr.net https://cdn.jsdelivr.net http://maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com http://my.hellobar.com https://my.hellobar.com https://optimize.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://app.convertcalculator.co; connect-src * 'self' https://d14jjfgstdxsoz.cloudfront.net http://platform.twitter.com https://platform.twitter.com http://syndication.twitter.com https://syndication.twitter.com http://*.olark.com https://*.olark.com http://*.adroll.com https://*.adroll.com http://*.adroll.mgr.consensu.org https://*.adroll.mgr.consensu.org http://meteor-frontpage-assets.s3.amazonaws.com https://meteor-frontpage-assets.s3.amazonaws.com http://*.marketo.com https://*.marketo.com http://*.marketo.net https://*.marketo.net http://*.cloudfront.net https://*.cloudfront.net http://maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com wss://www.meteor.com https://www.google-analytics.com https://optimize.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://app.convertcalculator.co; img-src data: 'self' https://d14jjfgstdxsoz.cloudfront.net http://* https://* http://platform.twitter.com https://platform.twitter.com http://syndication.twitter.com https://syndication.twitter.com http://*.olark.com https://*.olark.com http://*.adroll.com https://*.adroll.com http://*.adroll.mgr.consensu.org https://*.adroll.mgr.consensu.org http://meteor-frontpage-assets.s3.amazonaws.com https://meteor-frontpage-assets.s3.amazonaws.com http://*.marketo.com https://*.marketo.com http://*.marketo.net https://*.marketo.net http://*.cloudfront.net https://*.cloudfront.net http://maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://optimize.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://app.convertcalculator.co; style-src 'self' 'unsafe-inline' https://d14jjfgstdxsoz.cloudfront.net http://platform.twitter.com https://platform.twitter.com http://syndication.twitter.com https://syndication.twitter.com http://*.olark.com https://*.olark.com http://*.adroll.com https://*.adroll.com http://*.adroll.mgr.consensu.org https://*.adroll.mgr.consensu.org http://meteor-frontpage-assets.s3.amazonaws.com https://meteor-frontpage-assets.s3.amazonaws.com http://*.marketo.com https://*.marketo.com http://*.marketo.net https://*.marketo.net http://*.cloudfront.net https://*.cloudfront.net http://maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://optimize.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://app.convertcalculator.co; frame-src 'self' https://d14jjfgstdxsoz.cloudfront.net http://* https://* http://platform.twitter.com https://platform.twitter.com http://syndication.twitter.com https://syndication.twitter.com http://*.olark.com https://*.olark.com http://*.adroll.com https://*.adroll.com http://*.adroll.mgr.consensu.org https://*.adroll.mgr.consensu.org http://meteor-frontpage-assets.s3.amazonaws.com https://meteor-frontpage-assets.s3.amazonaws.com http://*.marketo.com https://*.marketo.com http://*.marketo.net https://*.marketo.net http://*.cloudfront.net https://*.cloudfront.net http://maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://optimize.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://app.convertcalculator.co; font-src 'self' https://d14jjfgstdxsoz.cloudfront.net data: http://platform.twitter.com https://platform.twitter.com http://syndication.twitter.com https://syndication.twitter.com http://*.olark.com https://*.olark.com http://*.adroll.com https://*.adroll.com http://*.adroll.mgr.consensu.org https://*.adroll.mgr.consensu.org http://meteor-frontpage-assets.s3.amazonaws.com https://meteor-frontpage-assets.s3.amazonaws.com http://*.marketo.com https://*.marketo.com http://*.marketo.net https://*.marketo.net http://*.cloudfront.net https://*.cloudfront.net http://maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://optimize.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://app.convertcalculator.co; 1
default-src https://assets.easypost.com cdn.plaid.com; script-src assets.easypost.com track.easypost.com tagmanager.google.com www.googletagmanager.com www.googleadservices.com www.google-analytics.com ssl.google-analytics.com www.gstatic.com www.google.com js.stripe.com cdn.plaid.com maps.googleapis.com eu-cdn.walkme.com cdn.walkme.com eu-playerserver.walkme.com playerserver.walkme.com d3sbxpiag177w8.cloudfront.net d2qhvajt3imc89.cloudfront.net 'sha256-t1v231h4Fgv1bBX/cpoBZuwY6r6R6nGx5tOXvVJdBh8=' 'sha256-GNTGX7BhgMv3AL+bv0bfF+5DVGhSrLhYL7AM7TSnAcY=' 'sha256-5yJc48yW6FRCVE9ulLzLOd1lLp7X2Xr2Dd4Y+lZ3XjA=' 'sha256-eV1MSFSoXiIPiHPWbzaJgBby+bxVonlOAE5Cwbaa4lc=' 'sha256-sVKX08+SqOmnWhiySYk3xC7RDUgKyAkmbXV2GWts4fo=' 'sha256-hW1V3UvI+swwT3wQpebXLpXi/7Q9VUws5NlJTNxM/Tg=' 'sha256-zrkY8YxXr6/SilHSYKlWjWW9kOSQsVsrlGluj7eTzoc=' 'sha256-C1JoeFOby67/dRbyCdcT9jfKk3K2hJnqpQZ3LrmmGzs='; style-src track.easypost.com 'unsafe-inline' tagmanager.google.com fonts.googleapis.com assets.easypost.com www.gstatic.com eu-cdn.walkme.com cdn.walkme.com; img-src track.easypost.com assets.easypost.com assets.track.easypost.com eu-ec.walkme.com ec.walkme.com eu-cdn.walkme.com cdn.walkme.com d27zb0m07iyic6.cloudfront.net dzjsfasj4n94t.cloudfront.net d3sbxpiag177w8.cloudfront.net d2qhvajt3imc89.cloudfront.net googleads.g.doubleclick.net www.google.com www.google-analytics.com www.gstatic.com ssl.gstatic.com q.stripe.com brand.easypostpartnercontent.com www.googletagmanager.com ssl.google-analytics.com data: easypost.zendesk.com easypost-fulfillment.zendesk.com; font-src assets.easypost.com track.easypost.com fonts.gstatic.com data:; connect-src https://www.google.com track.easypost.com www.easypost.com assets.easypost.com www-canary.easypost.com usps.easypost.com js.stripe.com www.google-analytics.com boards-api.greenhouse.io cdn.walkme.com eu-ec.walkme.com eu-rapi.walkme.com eu-papi.walkme.com ec.walkme.com rapi.walkme.com papi.walkme.com sentry.io api.segment.io production.plaid.com; worker-src assets.easypost.com www.gstatic.com www.google.com; frame-src assets.track.easypost hire.withgoogle.com cdn.plaid.com eu-cdn.walkme.com cdn.walkme.com js.stripe.com track.easypost.com tagmanager.google.com www.googletagmanager.com www.google.com www.youtube.com; report-uri https://sentry.io/api/1431584/security/?sentry_key=c94f0945b0d34659b3df102773f484d9 1
default-src 'self' https://*.reciteme.com; base-uri 'self'; object-src 'none'; style-src 'self' https://*.google.com https://*.googleapis.com https://*.financial-ombudsman.org.uk https://*.reciteme.com 'unsafe-inline'; img-src * data: https://script.hotjar.com; frame-src 'self' https://*.youtube.com https://*.google.com https://*.googletagmanager.com https://jira.cyberduck.net https://*.powerbi.com https://*.visme.co https://*.youtube-nocookie.com https://*.financial-ombudsman.org.uk https://*.hotjar.com https://*.reciteme.com; connect-src 'self' https://*.doubleclick.net https://*.google-analytics.com https://*.fullstory.com https://*.google.com https://*.financial-ombudsman.org.uk https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://*.reciteme.com; font-src 'self' data: https://*.gstatic.com https://*.financial-ombudsman.org.uk https://script.hotjar.com https://*.reciteme.com; form-action 'self' https://fs2.fos.org.uk/ https://*.financial-ombudsman.org.uk; script-src 'self' https://*.ytimg.com https://*.youtube.com https://*.doubleclick.net https://*.google-analytics.com https://*.google.co.uk https://*.google.com https://*.googleapis.com https://*.googlecode.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.gstatic.com https://*.addthis.com https://*.jquery.com https://*.leadforensics.com https://jira.cyberduck.net https://*.financial-ombudsman.org.uk https://*.hotjar.com https://*.hotjar.io https://*.reciteme.com 'unsafe-inline' 'unsafe-eval' 'nonce-Fo+e250bukIFgG5f9SOnLU62GJ4='; 1
frame-ancestors 'self' https://top.gg 1
base-uri 'none'; font-src 'self' data:* themes.googleusercontent.com *.gstatic.com fonts.googleapis.com; frame-src 'self' www.google.com www.youtube.com *.yourprimer.com webapp-dot-gweb-learn10x.appspot.com services.google.com *.doubleclick.net; script-src 'self' 'unsafe-inline' *.googleanalytics.com *.yourprimer.com *.google-analytics.com *.google.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.youtube.com *.ytimg.com; object-src 'self' *.gstatic.com www.google.com; style-src 'self' 'unsafe-inline' *.googletagmanager.com tagmanager.google.com fonts.googleapis.com *.gstatic.com; 1
default-src 'self' *.cloudfront.net *.sheetmusicplus.com documentcloud.adobe.com *.upsellit.com *.upsellit.turbobytes.net widget.trustpilot.com *.bronto.com *.facebook.com docs.google.com www.youtube.com bid.g.doubleclick.net t.pepperjamnetwork.com;script-src 'self' *.sheetmusicplus.com *.cloudfront.net *.nr-data.net sheetmusic.attn.tv cdn.attn.tv documentcloud.adobe.com *.bc0a.com *.b0e8.com *.pepperjam.com *.pepperjamnetwork.com *.vwo.com *.visualwebsiteoptimizer.com *.upsellit.com *.upsellit.turbobytes.net *.pbbl.co widget.trustpilot.com *.bronto.com pippio.com pv-p.alcmpn.com static.traversedlp.com widget.privy.com optimize.google.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net sp.analytics.yahoo.com seal.digicert.com membrain.getsidecar.com js-agent.newrelic.com connect.facebook.net cdn.optimizely.com reporting.singlefeed.com bat.bing.com bam.nr-data.net ajax.googleapis.com request.eprotect.vantivcnp.com payments.vantivcnp.com assets.adobedtm.com request.eprotect.vantivpostlive.com cdn3.optimizely.com s.yimg.com flex.msn.com flex.atdmt.com 'unsafe-inline' 'unsafe-eval';style-src 'self' tagmanager.google.com optimize.google.com cdn.materialdesignicons.com fonts.googleapis.com assets.privy.com *.cloudfront.net *.sheetmusicplus.com 'unsafe-inline' 'unsafe-eval';img-src 'self' *.sheetmusicplus.com *.cloudfront.net events.attentivemobile.com *.b0e8.com popupstats.brontops.com *.visualwebsiteoptimizer.com *.agkn.com *.upsellit.com upsellit.turbobytes.net *.upsellit.turbobytes.net www.googletagmanager.com optimize.google.com www.google.com www.google.co.uk www.google.com.hk *.pbbl.co www.emjcd.com *.facebook.com ssl.google-analytics.com www.google-analytics.com google-analytics.com ap.lijit.com io.narrative.io api.privy.com events.privy.com assets.privy.com privymktg.com *.bronto.com seal.digicert.com bat.bing.com googleads.g.doubleclick.net stats.g.doubleclick.net tracking.searchmarketing.com;connect-src 'self' *.sheetmusicplus.com sheetmusic.attn.tv *.nr-data.net bat.bing.com d29ci68ykuu27r.cloudfront.net viewlicense.adobe.io *.bc0a.com *.visualwebsiteoptimizer.com widget.trustpilot.com api.traversedlp.com tri.privy.com api.privy.com events.privy.com *.bronto.com logx.optimizely.com a1281752415.cdn.optimizely.com *.doubleclick.net paypal.com *.paypal.com payments.vantivcnp.com freeshipping.com *.vantivpostlive.com themoneyconverter.com apilayer.net adn.16E4F.betacdn.net youtube.com browse-endpoint.brontops.com ssl.google-analytics.com www.google.com www.google.com.hk www.facebook.com;media-src 'self' *.sheetmusicplus.com youtube.com *.cloudfront.net;font-src 'self' fonts.gstatic.com cdn.materialdesignicons.com *.cloudfront.net data:;frame-src 'self' www.sheetmusicplus.com assets.sheetmusicplus.com sheetmusic.attn.tv *.cdn.optimizely.com t.pepperjamnetwork.com www.youtube.com optimize.google.com docs.google.com email.sheetmusicplus.com staticxx.facebook.com www.facebook.com connect.facebook.net bid.g.doubleclick.net widget.trustpilot.com 1
frame-ancestors 'self' https://www.indiedb.com https://*.indiedb.com 1
Content-Security-Policy: default-src 'self' data: 'unsafe-inline' 'unsafe-eval' www.pioneerelectronics.com embedded.pricespider.com embeddedcloud.pricespider.com youtube.com www.google.com ajax.googleapis.com; 1
frame-ancestors 'self' *.betssongroupaffiliates.com *.ptstaging.eu *.onegameslink.com 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ds-aksb-a.akamaihd.net/aksb.min.js https://www.facebook.com/tr/ https://js-agent.newrelic.com https://bam-cell.nr-data.net https://*.evidon.com  https://tagmanager.google.com/  https://www.googletagmanager.com/ https://nexus.ensighten.com/ https://maps.googleapis.com  https://nexus.dell.com/dell/rsadev/Bootstrap.js https://cdn.optimizely.com/js/12345678.js https://use.typekit.net/rxl2unr.js https://code.jquery.com https://snap.licdn.com/li.lms-analytics/ https://*.formsite.com hello.myfonts.net *.googletagmanager.com *.google-analytics.com tagmanager.google.com fast.wistia.net https://www.youtube.com https://bat.bing.com https://www.googleadservices.com https://w.soundcloud.com https://static.ads-twitter.com/ https://analytics.twitter.com/ https://sjs.bizographics.com/ https://connect.facebook.net https://cdn.rawgit.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://s.ytimg.com https://www.sc.pages03.net https://px.ads.linkedin.com  https://bam.nr-data.net https://www.linkedin.com/px/ https://ajax.googleapis.com/ajax/libs/ https://hotel-widget-files.s3.amazonaws.com/ https://onpeak.s3.amazonaws.com/rsac/ https://s3.amazonaws.com/onpeak-compassstatic-magnet/ https://compass.onpeak.com/compass/external/; style-src 'self' 'unsafe-inline'  https://tagmanager.google.com/  https://fonts.googleapis.com/  https://hotel-widget-files.s3.amazonaws.com/  https://onpeak.s3.amazonaws.com/rsac/;  img-src 'self' data: 'unsafe-inline'  https://ssl.gstatic.com/  https: https://www.googletagmanager.com  https://googleads.g.doubleclick.net  https://www.google.com;  font-src https://fonts.gstatic.com  https://use.typekit.net data:;  connect-src 'self'  https://*.evidon.com  https://performance.typekit.net/ https://www.google-analytics.com/ https://stats.g.doubleclick.net https://bam.nr-data.net/ https://www.google-analytics.com/r/collect; form-action 'self' https://go.rsaconference.com/ https://www.facebook.com/tr/; upgrade-insecure-requests; block-all-mixed-content; 1
frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.roh.org.uk roh.global.ssl.fastly.net bam.nr-data.net bat.bing.com bs.serving-sys.com canopylabstracking.s3.amazonaws.com connect.facebook.net *.cloudfront.net intljs.rmtag.com js-agent.newrelic.com nxtck.com rules.quantcount.com secure-ds.serving-sys.com secure.quantserve.com tags.rd.linksynergy.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com https://tagmanager.google.com http://*.hotjar.com https://*.hotjar.com https://optimize.google.com https://*.bookatable.com https://youtube.com https://*.youtube.com https://static.ads-twitter.com https://analytics.twitter.com https://app.charitycheckout.co.uk ; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://*.googleapis.com https://static.roh.org.uk https://static.rolex.com https://optimize.google.com https://*.googleapis.com https://*.bookatable.com https://tagmanager.google.com https://youtube.com https://*.youtube.com; object-src 'none' 1
frame-ancestors 'self' https://fizy.com http://extrajet-gz.turkcell.com.tr/ http://extrajet/; 1
default-src 'self' https://*.bootstrapcdn.com https://www.google.co.jp https://www.google.com https://*.cybertrust.ne.jp https://*.cybertrust.co.jp; style-src 'self' 'unsafe-inline' *; frame-src https://*.youtube.com https://webfont.fontplus.jp https://www.googletagmanager.com https://www.google-analytics.com https://platform.twitter.com https://www.facebook.com; img-src 'unsafe-inline' *; connect-src https://www.google-analytics.com https://stats.g.doubleclick.net https://webfont.fontplus.jp https://wt.msgs.jp https://jsonip.com https://cybertrust-eas.azurewebsites.net; font-src 'self' https://*.fontawesome.com https://webfont.fontplus.jp https://fonts.gstatic.com https://*.amazonaws.com https://*.bootstrapcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapi.com https://webfont.fontplus.jp https://www.googletagmanager.com https://code.jquery.com https://cdnjs.cloudflare.com https://*.bootstrapcdn.com https://tm.msgs.jp https://api.docodoco.jp https://*.cybertrust.co.jp https://www.google-analytics.com https://www.googleadservices.com https://bake.surfpoint.jp https://*.youtube.com  https://platform.twitter.com https://connect.facebook.net; 1
default-src 'none'; script-src 'self' 'nonce-7/g3yjbAuizgaT2XdUjBvg==' 'strict-dynamic' *.facebook.net *.klaviyo.com; style-src 'self' 'unsafe-inline'; img-src * data:; media-src 'self'; frame-src *.google.com *.facebook.com; font-src 'self'; connect-src 'self' *.google-analytics.com *.doubleclick.net *.facebook.com *.klaviyo.com; base-uri 'none' 1
frame-ancestors https://*.tatacliq.com; connect-src 'self' *.tatacliq.com *.tataque.com *.tataunistore.com *.facebook.com *.google.com *.google-analytics.com *.flixcar.com *.juspay.in *.stripe.com *.instacred.me *.ed-sys.net *.appsflyer.com *.madstreetden.com *.demdex.net *.onedirect.in *.ipify.org *.yupl.us *.tt.omtrdc.net *.omtrdc.net *.adobedtm.com *.cloudfront.net *.epsilondelta.co *.amazonaws.com *.facebook.net *.clevertap.com *.doubleclick.net *.haptikapi.com *.hellohaptik.com *.haptik.me *.bing.com *.akamaihd.net instacred.me wss://*.haptik.me *.o-s.io https://cqt.conneqtcorp.com https://e2e.tataque.com 1
frame-ancestors 'self' https://www.messenger.com https://www.facebook.com/; 1
frame-src 'self' *.eprice.com.tw *.eprice.com.hk *.doubleclick.net *.g.doubleclick.net *.googletagservices.com *.googlesyndication.com *.safeframe.googlesyndication.com *.google.com *.yahoo.com www.facebook.com platform.twitter.com www.youtube.com datawrapper.dwcdn.net *.instagram.com *.rubiconproject.com a.amnet.tw cdn.aralego.net s7.addthis.com s0.2mdn.net csync.smartadserver.com *.bilibili.com *.adform.com *.ad-generation.jp *.admanmedia.com *.admixer.net *.adnxs.com *.Adsolut.in *.adsparc.com *.adtech.com *.Advertising.com *.advertising.com *.aniview.com *.aol.com *.aolcloud.net *.appnexus.com *.aps.amazon.com *.aralego.com *.atemda.com *.beachfront.com *.betweendigital.com *.betweendigital.com *.btrll.com *.buzzoola.com *.connectad.io *.console.cmcm.com *.contextweb.com *.districtm.io *.EMXDGT.com *.fair-trademedia.com *.freewheel.tv *.gammassp.com *.genieesspv.jp *.google.com *.gumgum.com *.impactify.io *.improvedigital.com *.indexexchange.com *.innity.com *.lijit.com *.loopme.com *.mox.tv *.oogle.com *.openx.com *.openx.net *.pubmatic.com *.revcontent.com *.rhythmone.com *.rtb.bidsxchange.com *.rtbhouse.com *.rubiconproject.com *.selectmedia.asia *.smaato.com *.smartadserver.com *.smartclip.net *.smartyads.com *.sonobi.com *.sovrn.com *.spotx.tv *.spotxchange.com *.springserve.com *.synacor.com *.teads.tv *.tremorhub.com *.truvid.com *.truvidplayer.com *.ucfunnel.com *.undertone.com *.vdo.ai *.xad.com *.criteo.com *.yimg.com; 1
script-src 'report-sample' 'nonce-0lGtSfgVkaGekhf/uLyLYA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport 1
default-src blob: data: https: 'self'; frame-src *.agkn.com *.doubleclick.net *.google.com mdlink.ucsfmedicalcenter.org ucsfmychart.ucsfmedicalcenter.org testmyc.ucsfmedicalcenter.org 'self' *.sitecore.net *.vimeo.com *.youtube.com; script-src *.answerscloud.com *.azurewebsites.net *.calltrk.com *.clicktale.net *.cloudflare.com *.cloudflareinsights.com *.doubleclick.net *.evaliahealth.com *.facebook.net *.foresee.com *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.invocacdn.com *.jsdelivr.net *.msecnd.net *.radiomd.com 'self' *.skyword.com *.tealiumiq.com *.tiqcdn.com *.twitter.com 'unsafe-eval' 'unsafe-inline' *.vimeo.com *.vimeocdn.com *.visto1.net; style-src *.fonts.net *.googleapis.com 'self' 'unsafe-inline'; worker-src blob:; 1
frame-ancestors *.adobe.com  http://adobe.lookbookhq.com https://adobe.lookbookhq.com http://adobeenterprise.lookbookhq.com https://adobeenterprise.lookbookhq.com 1
frame-ancestors 'self' https://gocardless.lookbookhq.com https://gocardless.pathfactory.com https://content.gocardless.com 1
frame-ancestors 'self' *.brilliant.org *.online.tableau.com apps.facebook.com app.frontapp.com 1
frame-ancestors www.facebook.com 'self' 1
script-src fonts.gstatic.com use.fontawesome.com www.google.co.uk *.dwin1.com www.google.com *.puzzel.com *.bing.com static.addtoany.com *.adnxs.com *.adroll.com *.steelhousemedia.com m.addthisedge.com *.addthis.com *.hotjar.com *.pingdom.net *.qualtrics.com *.cloudfront.net widget.trustpilot.com fp.gdmdigital.com *.linkedin.com *.facebook.com *.typekit.net ajax.googleapis.com analytics.google.com v2.visualwebsiteoptimizer.com useruploads.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com livechat.uk2group.com www.googleadservices.com tagmanager.google.com www.googletagmanager.com d2wy8f7a9ursnm.cloudfront.net *.uk2.net 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com connect.facebook.net platform.twitter.com apis.google.com tracking.websitealive.com www.gstatic.com www.google-analytics.com secure.leadforensics.com; default-src 'self' data: *.puzzel.com *.uk2.net; img-src 'self' googletagmanager.com canarytokens.com *.uk2.net data: *.typekit.net *.gstatic.com *.bing.com secure.gravatar.com *.pingdom.net v2.visualwebsiteoptimizer.com placehold.it useruploads.visualwebsiteoptimizer.com widget.trustpilot.com syndication.twitter.com *.hotjar.com dev.visualwebsiteoptimizer.com livechat.uk2group.com googleads.g.doubleclick.net www.googleadservices.com *.steelhousemedia.com chart.googleapis.com widget.trustpilot.com notify.bugsnag.com stats.g.doubleclick.net www.google.com www.google-analytics.com 55b558c7-resources.bk-partnersasia.com csi.gstatic.com www.facebook.com syndication.twitter.com images.websitealive.com tracking.websitealive.com; style-src 'self' *.uk2.net www.google.co.uk *.puzzel.com *.pingdom.net https://use.fontawesome.com maxcdn.bootstrapcdn.com *.steelhousemedia.com fonts.gstatic.com fonts.googleapis.com www.google.com tagmanager.google.com dev.visualwebsiteoptimizer.com livechat.uk2group.com 'unsafe-inline' tracking.websitealive.com widget.trustpilot.com; frame-src 'self' *.uk2.net static.addtoany.com *.hotjar.com *.twitter.com *.addthis.com www.google.co.uk www.google.com *.steelhousemedia.com player.vimeo.com a5.websitealive.com www.youtube.com widget.trustpilot.com tracking.websitealive.com apis.google.com accounts.google.com platform.twitter.com staticxx.facebook.com www.facebook.com dev.visualwebsiteoptimizer.com livechat.uk2group.com; object-src 'self' *.uk2.net; font-src 'self' *.uk2.net data: script.hotjar.com fonts.gstatic.com use.typekit.net *.puzzel.com https://use.fontawesome.com maxcdn.bootstrapcdn.com fonts.googleapis.com; connect-src 'self' static.addtoany.com googleadservices.com stats.g.doubleclick.net *.puzzel.com *.pingdom.net widget.trustpilot.com wss://ws1.hotjar.com wss://ws2.hotjar.com wss://ws3.hotjar.com wss://ws4.hotjar.com graylog.hotjar.com:12443 *.twitter.com *.uk2.net *.hotjar.com *.addthis.com dev.visualwebsiteoptimizer.com livechat.uk2group.com mw-uk2-uat.thehut.net mw.thghosting.com fonts.googleapis.com www.google-analytics.com www.gstatic.com connect.facebook.net bat.bing.com script.hotjar.com; 1
frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.thebalanceeveryday.com 1
default-src 'self' *.postman.co *.postman.com *.pstmn.io; base-uri 'self'; font-src 'self' data: *.getpostman.com *.postman.co *.cdn.postman.com fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com; frame-ancestors 'none'; frame-src dl-preview-container.pstmn.io; child-src 'self' *.postman.co *.postman.com blob:; worker-src 'self' *.postman.co *.cdn.postman.com blob:; object-src 'self'; img-src https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' *.nr-data.net *.getpostman.com *.postman.co *.cdn.postman.com *.pstmn.io code.jquery.com google-analytics.com googletagmanager.com cdn.ravenjs.com ssl.google-analytics.com cdnjs.cloudflare.com js-agent.newrelic.com 'nonce-zarSymr3Q9qU30JB/hIjp+mfwvPUHWtYfBCJL+5R9BXQYn1y'; style-src 'self' 'unsafe-inline' *.getpostman.com *.postman.co *.cdn.postman.com *.pstmn.io fonts.gstatic.com fonts.googleapis.com tagmanager.google.com cdnjs.cloudflare.com; connect-src http: ws://localhost:10533 https: wss://*.postman.co wss://*.gw.postman.com; report-uri https://sentry.postmanlabs.com/api/572/security/?sentry_key=9d37d7431bdc4c528702ec4d89fc93f7&sentry_environment=production 1
frame-ancestors https://www.marni.com/ https://www.marni.com/ https://www.optimizely.com test; 1
script-src 'self' https://knowledgecenter.2checkout.com/ https://chat.exswap.com/ https://*.cardinalcommerce.com/edge/ https://www.google-analytics.com/analytics.js https://connect.facebook.net https://apis.google.com/ https://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js https://platform.twitter.com https://www.dropbox.com/static/api/ https://www.youtube.com/iframe_api https://s.ytimg.com https://www.youtube.com/s/player/ https://cdnjs.cloudflare.com/ajax/libs/KaTeX/ https://cdn.quilljs.com/1.3.6/ https://vimeo.com/api/oembed.json https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://api.braintreegateway.com/merchants/ https://api.sandbox.braintreegateway.com https://www.2checkout.com/checkout/ https://sandbox.2checkout.com https://cdnjs.cloudflare.com/ajax/libs/zxcvbn/4.2.0/zxcvbn.js ; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/KaTeX/ https://fonts.googleapis.com/ ; object-src 'self' ; report-uri /api/public/csp-error ; base-uri 'self'; frame-ancestors 'self'; 1
frame-ancestors https://*.mybigcommerce.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' bat.bing.com cdn.aimtell.com cdn.shopify.com cdn.shopifycloud.com cdnjs.cloudflare.com connect.facebook.net d2wy8f7a9ursnm.cloudfront.net www.gstatic.com s3.amazonaws.com static.leadpages.net www.google-analytics.com www.googletagmanager.com www.google.com 7209406.collect.igodigital.com tags.tiqcdn.com deploytealium.com stats.g.doubleclick.net www.google-analytics.com player.vimeo.com/api/player.js noembed.com/embed; style-src 'self' 'unsafe-inline' blob: cdn.shopifycloud.com cdnjs.cloudflare.com; img-src 'self' blob: data: bat.bing.com cdn.shopify.com cdn.shopifycloud.com exchange.shopifycdn.com notify.bugsnag.com www.google.com www.gravatar.com www.facebook.com stats.g.doubleclick.net www.google-analytics.com v.shopify.com www.google.com www.google.ac www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.com.kh www.google.cc www.google.cd www.google.cf www.google.cat www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn g.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gf www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gp www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.iq www.google.ie www.google.co.il www.google.im www.google.co.in www.google.io www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.com.lc www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.ne www.google.com.nf www.google.com.ng www.google.com.ni www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pk www.google.com.pa www.google.com.pe www.google.com.ph www.google.pl www.google.com.pg www.google.pn www.google.co.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.rs www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.sm www.google.so www.google.st www.google.sr www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tk www.google.tl www.google.tm www.google.to www.google.tn www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.co.za www.google.co.zm www.google.co.zw i.vimeocdn.com i.vimeocdn.com/video/*; font-src 'self' cdn.shopify.com cdn.shopifycloud.com cdnjs.cloudflare.com; connect-src 'self' www.facebook.com www.google-analytics.com api.leadpages.io cdn.aimtell.com s3.amazonaws.com monorail-edge.shopifysvc.com analytics.aimtell.com collect.tealiumiq.com stats.g.doubleclick.net noembed.com/embed vimeo.com/api/oembed.json vimeo.com/api/oembed* www.shopify.com/content-services/subscribers; frame-src 'self' www.facebook.com beacon.aimtell.com shopify.lpages.co www.google.com 9321158.fls.doubleclick.net player.vimeo.com; frame-ancestors 'none'; upgrade-insecure-requests 1
frame-ancestors 'self' https://*.spglobal.com 1
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 1
frame-ancestors 'self'; report-uri https://zqcie68ipf.execute-api.us-east-1.amazonaws.com/production/report; report-to report-endpoint ; script-src 'self' https://apis.google.com https://js.stripe.com 'report-sample'; object-src 'none' 1
frame-ancestors 'self' *.tdworldwide.com *.techdata.com *.techdata.ca *.cstenet.com *.techdata.eu; 1
default-src 'none'; connect-src 'self' data: https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googletagservices.com 'unsafe-inline' 'unsafe-eval' *; font-src 'self' data: https://nouw.com https://fonts.gstatic.com 'unsafe-inline' 'unsafe-eval' *; form-action 'self' http://nouw.com *.facebook.com *.facebook.net https://secure.payer.se; frame-ancestors 'self' http://frame.bloglovin.com; frame-src 'self' *.youtube.com *.spotify.com *.facebook.com *.facebook.net 'unsafe-inline' 'unsafe-eval' *; img-src * data: blob:; manifest-src 'self'; media-src *; object-src 'none'; report-uri https://nouw.com/api/misc/csp; style-src * blob: 'unsafe-inline'; worker-src 'self'; script-src 'self' https://nouw.com https://cdnjs.cloudflare.com *.facebook.com *.facebook.net https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googletagservices.com 'unsafe-inline' 'unsafe-eval' * 1
script-src 'self' blob: 'nonce-d2715af7-7e08-42ce-a667-3eb8d0bb45f0' https://*.msecnd.net https://*.mxpnl.com https://cdn-mxpnl.com https://cdn.ravenjs.com https://checkout.razorpay.com https://wzrkt.com https://d2r1yp2w7bby2u.cloudfront.net https://www.googletagmanager.com https://s3.amazonaws.com https://www.google-analytics.com; img-src 'self' data: blob: https://www.gravatar.com https://ud-img.azureedge.net https://ud-img-v2.azureedge.net https://ud-dev-img.azureedge.net https://ud-video.azureedge.net https://udaan.azureedge.net https://ud-dev-cdn.azureedge.net https://checkout.razorpay.com https://cdn-mxpnl.com https://www.googletagmanager.com https://www.google-analytics.com; frame-src 'self' https://ud-video.azureedge.net https://www.youtube.com https://api.razorpay.com https://docs.google.com https://drive.google.com; font-src 'self' data: https://fonts.gstatic.com; object-src blob:; 1
default-src 'self' data https:; img-src 'self' https://www.google-analytics.com https://p.typekit.net ;style-src 'self' 'unsafe-inline' https:; script-src-elem 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-eval' https: 'unsafe-inline' https://use.typekit.net https://www.google-analytics.com;  script-src-attr 'self' https: 'unsafe-inline'; 1
default-src 'self' static.cryptowat.ch; script-src 'self' js.stripe.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.ar *.google.at *.google.au *.google.com.au *.google.az *.google.ba *.google.be *.google.br *.google.ca *.google.ch *.google.cl *.google.cn *.google.cz *.google.de *.google.dk *.google.ee *.google.es *.google.fi *.google.fr *.google.hu *.google.it *.google.com.mx *.google.nl *.google.co.nz *.google.pl *.google.ru *.google.co.uk analytics.service.cryptowat.ch blob: 'nonce-DMVBWZTSJEBEKDVYNVJ5' static.cryptowat.ch; worker-src 'self' blob: static.cryptowat.ch; connect-src 'self' *.stripe.com sentry.cwix.org *.reddit.com covidapi.info *.interchangehq.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.ar *.google.at *.google.au *.google.com.au *.google.az *.google.ba *.google.be *.google.br *.google.ca *.google.ch *.google.cl *.google.cn *.google.cz *.google.de *.google.dk *.google.ee *.google.es *.google.fi *.google.fr *.google.hu *.google.it *.google.com.mx *.google.nl *.google.co.nz *.google.pl *.google.ru *.google.co.uk wss://*.cryptowat.ch *.cryptowat.ch; img-src 'self' data: *.stripe.com *.google.com *.imgur.com imgur.com *.redd.it www.tradingview.com cdn.discordapp.com *.twimg.com i.ibb.co *.cryptowat.ch *.googletagmanager.com *.google-analytics.com *.google.com *.google.ar *.google.at *.google.au *.google.com.au *.google.az *.google.ba *.google.be *.google.br *.google.ca *.google.ch *.google.cl *.google.cn *.google.cz *.google.de *.google.dk *.google.ee *.google.es *.google.fi *.google.fr *.google.hu *.google.it *.google.com.mx *.google.nl *.google.co.nz *.google.pl *.google.ru *.google.co.uk analytics.service.cryptowat.ch static.cryptowat.ch; style-src 'self' 'unsafe-inline' static.cryptowat.ch; child-src 'self' *.stripe.com blob:; font-src 'self' static.cryptowat.ch; frame-ancestors 'none'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.sfasu.edu *.typekit.net cdn.jsdelivr.net *.fontawesome.com *.google-analytics.com *.facebook.net *.serving-sys.com *.newrelic.com *.nr-data.net; img-src 'self' *.sfasu.edu *.google-analytics.com *.typekit.net *.facebook.com *.youtube.com; report-uri /report-csp-violation 1
base-uri 'self'; default-src 'self' https://www.google-analytics.com; font-src https://fonts.gstatic.com; ; ; frame-src https://maphub.net https://www.googletagmanager.com https://www.youtube.com https://almamather.zcu.cz:1443; img-src 'self' https://info.zcu.cz https://minerva.zcu.cz https://www.google-analytics.com https://*.openstreetmap.org; ; object-src 'none'; ; script-src 'self' https://www.googletagmanager.com https://zcu.summon.serialssolutions.com https://static-cdn.summon.serialssolutions.com 'nonce-Ff3jnwmMIDC3wvmv7Xdb05+n4hzAU5WLhFONN5zje6g='; style-src 'self' https://fonts.googleapis.com 'nonce-Ff3jnwmMIDC3wvmv7Xdb05+n4hzAU5WLhFONN5zje6g=' 1
default-src 'unsafe-inline' 'unsafe-eval' 'self' https://cse.google.com http://cse.google.com https://clients1.google.com http://clients1.google.com https://va.ecitizen.gov.sg http://assets.adobedtm.com *.demdex.net http://wogadobeanalytics.sc.omtrdc.net http://va.ecitizen.gov.sg https://www.google.com https://s3-us-west-2.amazonaws.com http://fonts.googleapis.com http://ajax.googleapis.com https://fonts.gstatic.com cm.everesttech.net http://fast.wogaa.demdex.net https://tools.onemap.sg https://www.gstatic.com https://forms.cwp.gov.sg https://www.google-analytics.com wogadobeanalytics.sc.omtrdc.net https://assets.juicer.io https://connect.facebook.net https://www.facebook.com https://www.juicer.io https://graph.facebook.com https://static.juicer.io https://i.imgur.com https://scontent.xx.fbcdn.net https://external.xx.fbcdn.net https://external.xx.fbcdn.net https://twitter.com https://wogaa.demdex.net https://www.googleapis.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.onemap.sg http://www.moh.gov.sg http://www.youtube.com https://www.youtube.com https://static.pigeonhole.at https://pigeonhole.at form.gov.sg https://www.googleadservices.com/pagead/conversion_async.js https://googleads.g.doubleclick.net https://www.google.com.sg *.hotjar.com:* *.hotjar.io wss://*.hotjar.com https://*.wogaa.sg assets.adobedtm.com https://youtu.be https://*.arcgis.com https://assets.dcube.cloud; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: *; 1
style-src 'unsafe-inline' data: *.typekit.net *.coveo.com cdnjs.cloudflare.com d10lpsik1i8c69.cloudfront.net *.googleapis.com maxcdn.bootstrapcdn.com *.cloud.coveo.com 'self' *.marketo.com *.wistia.com; child-src blob: *.addthis.com bid.g.doubleclick.net js.driftt.com www.youtube.com *.marketo.com boards.greenhouse.io; connect-src *.fullstory.com bat.bing.com 40e1c630fbbe49b4b3d7ec05b3f47678.events.ubembed.com fg8vvsvnieiv3ej16jby.litix.io *.cloud.coveo.com *.org.coveo.com *.coveo.com *.addthis.com *.mktoresp.com *.mktoutil.com *.mktoresp.com www.google-analytics.com www.google.com *.googleapis.com 'self' api.ipify.org *.salesloft.com settings.luckyorange.net stats.g.doubleclick.net www.facebook.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net o253811.ingest.sentry.io wss://in.visitors.live wss://visitors.live public-auth-dot-lucky-orange.appspot-preview.com t.co; default-src data: blob: 'unsafe-inline' 'unsafe-eval' *.addthis.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com polyfill.io *.cloud.coveo.com *.coveo.com www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com *.youtube.com z.moatads.com 'self' api.ipify.org cdn.jsdelivr.net *.mktoresp.com analytics.twitter.com *.marketo.com *.techtarget.com cdn.bizible.com *.taboola.com cdnjs.cloudflare.com connect.facebook.net d10lpsik1i8c69.cloudfront.net *.g.doubleclick.net *.addthis.com *.marketo.net *.ads.linkedin.com reveal.clearbit.com s.ml-attr.com *.salesloft.com secure.adnxs.com settings.luckyorange.net snap.licdn.com static.ads-twitter.com t.co v1.addthisedge.com wss://in.visitors.live wss://visitors.live www.facebook.com attr.ml-api.io boards.greenhouse.io cc.sj-cdn.net js.driftt.com o253811.ingest.sentry.io p.adsymptotic.com public-auth-dot-lucky-orange.appspot-preview.com s.ytimg.com  www.google.ca www.google.co.in www.google.co.uk www.linkedin.com; frame-src 'self' *.wistia.com *.wistia.net *.coveo.com 40e1c630fbbe49b4b3d7ec05b3f47678.pages.ubembed.com www.facebook.com *.addthis.com js.driftt.com *.marketo.com bid.g.doubleclick.net boards.greenhouse.io www.youtube.com accounts.google.com *.addthis.com; script-src-elem 'unsafe-inline' *.fullstory.com assets.ubembed.com 40e1c630fbbe49b4b3d7ec05b3f47678.js.ubembed.com *.google.com bat.bing.com *.addthis.com v1.addthisedge.com *.googleapis.com googleads.g.doubleclick.net www.google-analytics.com www.googleadservices.com www.googletagmanager.com analytics.twitter.com *.marketo.com boards.greenhouse.io cdn.bizible.com cdn.jsdelivr.net *.taboola.com cdnjs.cloudflare.com connect.facebook.net d10lpsik1i8c69.cloudfront.net js.driftt.com *.marketo.net polyfill.io reveal.clearbit.com s.ytimg.com *.salesloft.com 'self' snap.licdn.com static.ads-twitter.com *.cloud.coveo.com *.coveo.com www.youtube.com z.moatads.com *.wistia.com *.wistia.net *.techtarget.com *.addthis.com platewolf.com; script-src data: blob: 'unsafe-inline' 'unsafe-eval' *.fullstory.com assets.ubembed.com 40e1c630fbbe49b4b3d7ec05b3f47678.js.ubembed.com bat.bing.com *.addthis.com v1.addthisedge.com www.google.com www.google.ca googleads.g.doubleclick.net static.ads-twitter.com *.cloud.coveo.com *.coveo.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.youtube.com z.moatads.com 'self' analytics.twitter.com cdn.bizible.com cdn.jsdelivr.net *.taboola.com cdnjs.cloudflare.com connect.facebook.net d10lpsik1i8c69.cloudfront.net js.driftt.com *.marketo.net polyfill.io reveal.clearbit.com s.ytimg.com *.salesloft.com snap.licdn.com *.techtarget.com chrome://forbidden *.marketo.com *.wistia.com *.wistia.net boards.greenhouse.io; font-src data: cdnjs.cloudflare.com *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com 'self'; form-action 'self' www.facebook.com; img-src blob: data: embedwistia-a.akamaihd.net *.gstatic.com lh3.googleusercontent.com *.coveo.com bat.bing.com cdn.bizibly.com avatars1.githubusercontent.com cdn.bizible.com googleads.g.doubleclick.net img.youtube.com stats.g.doubleclick.net www.facebook.com www.google-analytics.com www.google.ca www.google.ch www.google.co.in www.google.co.uk www.google.com www.google.com.lb www.google.com.my www.googletagmanager.com www.linkedin.com www.google.nl *.techtarget.com attr.ml-api.io cc.sj-cdn.net d10lpsik1i8c69.cloudfront.net *.ads.linkedin.com p.adsymptotic.com s.ml-attr.com secure.adnxs.com t.co 'self' *.wistia.com *.wistia.net i.ytimg.com *.taboola.com www.google.com.mx www.google.com.pk platewolf.com *.coveo.com www.google.co.id www.google.co.il www.google.co.jp www.google.co.ke www.google.com.ec www.google.com.hk www.google.fi www.google.fr; style-src-elem 'unsafe-inline' *.typekit.net tagmanager.google.com *.marketo.com cdnjs.cloudflare.com *.googleapis.com maxcdn.bootstrapcdn.com *.cloud.coveo.com *.coveo.com 'self' d10lpsik1i8c69.cloudfront.net *.wistia.com; frame-ancestors 'self' *.coveo.com; media-src blob: data: 'self' d10lpsik1i8c69.cloudfront.net *.wistia.com *.wistia.net embedwistia-a.akamaihd.net; worker-src 'self' blob:; object-src 'none'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://c.go-mpulse.net https://www.google.com/ https://www.googletagmanager.com https://www.facebook.com/ *.akstat.io/ https://s.go-mpulse.net https://www.google-analytics.com https://connect.facebook.net https://stats.g.doubleclick.net https://w.sharethis.com https://cdn.ckeditor.com https://c.go-mpulse.net http://w.sharethis.com  *.hotjar.com https://vjs.zencdn.net *.viddler.com  https://www.recaptcha.net/ https://www.gstatic.com/ http://*.qualaroo.com 1
frame-ancestors yc.wenming.cn 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.uhhospitals.org *.typekit.net *.uhhospitals.org *.siteimproveanalytics.com siteimproveanalytics.com *.bing.com *.youtube.com *.invoca.net s.ytimg.com *.ytimg.com *.facebook.net *.invocacdn.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.google.com *.facebook.com *.siteimproveanalytics.io *.doubleclick.net *.gstatic.com *.w3.com *.podbean.com *.ads-twitter.com *.twitter.com *.t.co t.co *.alphonso.tv *.calculatestuff.com calculatestuff.com doubleclick.net *.selfcare.info selfcare.info *.digitalmedia.hhs.gov api.digitalmedia.hhs.gov *.appcatalyst.com appcatalyst.com *.staywellsolutionsonline.com staywellsolutionsonline.com *.hhs.gov *.livestream.com livestream.com *.issuu.com issuu.com *.isu.pub isu.pub *.w3.org w3.org *.quantserve.com quantserve.com *.boxcloud.com boxcloud.com *.box.com box.com 1
frame-ancestors https://bni.com https://onlinexperiences.com 'self'; 1
frame-ancestors 'self' admin.truelocal.com.au 1
font-src 'self';media-src 'self' 1
script-src 'self' 'unsafe-inline' https://cdn.mxpnl.com https://fast.appcues.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.aws.training https://a0.awsstatic.com https://js.api.here.com https://*.cit.api.here.com https://dev.ditu.live.com https://*.dev.virtualearth.net https://*.payments-amazon.com https://*.amazon.com https://*.amazon.co.jp/ https://*.amazon.co.uk https://*.amazon.de https://*.bing.com https://*.virtualearth.net https://munchkin.marketo.net https://cdn.aws.training https://kiku-s3-webassets-syvz21p16af0.s3.amazonaws.com/; object-src 'self'; img-src 'self' data: blob: https://*.dev.virtualearth.net https://*.ssl.ak.tiles.virtualearth.net https://*.ssl.ak.dynamic.tiles.virtualearth.net https://static.aws.training https://a0.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://js.api.here.com https://*.cit.api.here.com https://images-na.ssl-images-amazon.com https://internal-cdn.amazon.com https://d2ldlvi1yef00y.cloudfront.net/ https://d23yuld0pofhhw.cloudfront.net https://d1oct1bdmx33tz.cloudfront.net https://googleads.g.doubleclick.net https://www.google.com https://fls-na.amazon.com https://*.media-amazon.com https://cdn.aws.training https://kiku-s3-webassets-syvz21p16af0.s3.amazonaws.com/; style-src 'self' 'unsafe-inline' https://static.aws.training https://js.api.here.com https://a0.awsstatic.com https://images-na.ssl-images-amazon.com https://ecn.dev.virtualearth.net https://images-eu.ssl-images-amazon.com https://www.bing.com https://cdn.aws.training https://kiku-s3-webassets-syvz21p16af0.s3.amazonaws.com/; connect-src 'self' https://*.cit.api.here.com https://*.amazon.com https://prod.tools.shortbread.aws.dev https://prod.log.shortbread.aws.dev https://amazonwebservices.d2.sc.omtrdc.net https://*.amazonpay.com https://apac.account.amazon.com https://na.account.amazon.com https://eu.account.amazon.com https://*.virtualearth.net https://*.mktoresp.com https://s0.awsstatic.com https://*.amazon.co.uk https://*.amazon.co.jp https://*.amazon.de https://cdn.aws.training https://prod.us-east-1.search.avalon.aws.dev https://7m5y5tkfr5.execute-api.us-east-1.amazonaws.com https://ftj9wpwlq4.execute-api.us-east-1.amazonaws.com; font-src 'self' data: https://static.aws.training https://cdn.aws.training https://kiku-s3-webassets-syvz21p16af0.s3.amazonaws.com/; media-src 'self' https://cdn.aws.training; child-src 'self' https://*.amazon.com https://www.bing.com https://*.amazon.co.jp/ https://*.amazon.co.uk https://*.payments-amazon.com https://*.amazon.de https://support.aws.training; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.livechatinc.com https://*.haiku.ai https://api.hubspot.com https://api.mixpanel.com https://cdn.freshmarketer.com https://cdn.mxpnl.com https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://forms.hsforms.com https://googleads.g.doubleclick.net https://info.proctoru.com https://ip.freshmarketer.com https://js.hs-analytics.net https://js.hs-scripts.com https://js.hsadspixel.net https://js.hsforms.net https://js.usemessages.com https://maxcdn.bootstrapcdn.com https://pi.pardot.com https://px.ads.linkedin.com https://snap.licdn.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.linkedin.com https://www.youtube.com https://js.hscta.net https://cta-service-cms2.hubspot.com https://hire.withgoogle.com https://*.adroll.com https://*.consensu.org https://*.twitter.com/ https://cdn.syndication.twimg.com/ https://*.fullstory.com/  https://js.hs-banner.com https://api.hubapi.com https://sc.lfeeder.com https://tagmanager.google.com https://yas.bamboohr.com https://*.cincopa.com https://*.meazurelearning.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.typekit.net https://maxcdn.bootstrapcdn.com https://platform.twitter.com/ https://tagmanager.google.com https://*.bamboohr.com https://*.meazurelearning.com; img-src https: data:; connect-src https://www.google-analytics.com https://*.haiku.ai https://api.mixpanel.com https://api.hubspot.com https://api.hubapi.com https://*.fullstory.com/ https://*.bamboohr.com; font-src https://use.typekit.net https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; media-src https://*.livechatinc.com; frame-ancestors 'none'; object-src 'none'; frame-src https://secure.livechatinc.com https://bid.g.doubleclick.net https://forms.hsforms.com https://www.facebook.com https://www.youtube.com https://hire.withgoogle.com https://www.proctoru.com https://player.vimeo.com https://platform.twitter.com/ https://syndication.twitter.com/ https://twitter.com/; upgrade-insecure-requests 1
default-src 'self' blob:;style-src 'self' 'unsafe-inline';script-src 'self' 'unsafe-eval' 'unsafe-inline' *.riksdagen.se 59b28002cb84d.streamlock.net;worker-src 'self' blob: *.riksdagen.se 59b28002cb84d.streamlock.net;img-src 'self' pbs.twimg.com data: *.riksdagen.se 59b28002cb84d.streamlock.net *.ytimg.com;font-src 'self' fonts.gstatic.com ;media-src 'self' blob: *.riksdagen.se *.readspeaker.com 59b28002cb84d.streamlock.net;connect-src 'self' *.riksdagen.se ws://meta.riksdagen.se wss://meta.riksdagen.se 59b28002cb84d.streamlock.net;frame-src *.readspeaker.com *.riksdagen.se *.youtube-nocookie.com;object-src 'self' 59b28002cb84d.streamlock.net;base-uri 'none';report-uri https://csp.riksdagen.se; 1
default-src 'self' https://*.paypal.com/ https://pagead2.googlesyndication.com/ https://*.safeframe.googlesyndication.com/ https://securepubads.g.doubleclick.net/ https://tpc.googlesyndication.com/ https://*.uniko.co/ https://*.instana.io/ https://seapi.sears.com.mx/ https://staticw2.yotpo.com/ https://*.yotpo.com/ https://resources.claroshop.com/ https://*.youtube.com https://*.flixfacts.com/ https://*.flixsyndication.net/ https://*.flixfacts.co.uk/ https://*.flixcar.com/ https://*.flix360.com/ https://*.go-mpulse.net https://s.go-mpulse.net https://pixel-sync.sitescout.com https://*.poder.io/ https://www.clima.com https://www.googletagmanager.com https://www.sears.com.mx https://resources.sears.com.mx https://*.zopim.io https://www.youtube.com https://staasobj-api.telmex.com https://staasobj-api.telmex.com https://*.online-metrix.net/ https://*.adsrvr.org https://*.doubleclick.net https://dsync.rlcdn.com https://*.facebook.com https://*.facebook.net https://*.gigya.com https://*.googleadservices.com  https://*.google-analytics.com https://*.googleapis.com https://*.google.com https://*.google.com.mx https://*.googletagmanager.com https://*.gstatic.com https://*.hotjar.com https://ib.adnxs.com https://*.jquery.com https://*.krxd.net https://*.pingdom.net https://*.scarabresearch.com https://*.thefancy.com https://*.wisepops.com https://*.criteo.com https://*.creativecdn.com https://*.zdassets.com  https://*.criteo.net https://checkout.payulatam.com https://graylog.hotjar.com:12443 wss://*.hotjar.com/ wss://*.zopim.com https://*.zopim.com data: 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'self' *.sber.ru 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://ssl.google-analytics.com https://dap.digitalgov.gov https://www.youtube.com https://search.usa.gov https://www.googletagmanager.com https://tagmanager.google.com https://static.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://cdnjs.cloudflare.com https://code.jquery.com https://*.vimeocdn.com https://*.ytimg.com; connect-src 'self' https://www.youtube.com https://googleads.g.doubleclick.net https://www.google-analytics.com; img-src 'self' https://*.ytimg.com https://*.ggpht.com https://search.usa.gov https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com; font-src 'self' https://fonts.gstatic.com; frame-ancestors 'self'; frame-src 'self' https://www.youtube.com https://player.vimeo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://search.usa.gov https://www.youtube.com https://*.vimeocdn.com https://tagmanager.google.com; 1
frame-ancestors 'self' http://*.gobdigital.gba.gob.ar  https://*.gobdigital.gba.gob.ar; 1
object-src 'none'; base-uri 'none'; script-src 'nonce-BJYdOx5ncBQzx8pMaoaZew==' 'unsafe-inline' 'strict-dynamic' https: http: 'report-sample'; report-uri https://sentry.io/api/1474740/security/?sentry_key=f510e74496ac409fb59c50c52d7822da 1
default-src 'self' *.vivint.com; script-src data: 'unsafe-inline' 'unsafe-eval' *; object-src *; style-src blob: 'unsafe-inline' *; img-src data: *; media-src *; frame-src *; frame-ancestors *.vivint.com viv.drupalvm; child-src *; font-src data: *; connect-src *; report-uri /report-csp-violation 1
object-src *.calgary.ca:*; frame-ancestors *.calgary.ca:* 1
frame-ancestors 'self' https://app.wisepops.com; 1
default-src blob: firstrepublic data: https: 'self' wss:; frame-ancestors https://*.firstrepublic.com eagleinvest.futureadvisor.com firstrepublicbank.experiencecloud.adobe.com 10to8.com us.10to8.com; script-src *.newrelic.com *.typekit.net *.signalintent.com *.amazonaws.com *.google-analytics.com *.siteimprovementanalytics.io *.gstatic.com *.google.com *.everesttech.net *.doubleclick.net * *.we-stats.com *.googleapis.com *.googletagmanager.com *.youtube.com *.jsdelivr.net *.marketo.net *.splash-screen.net *.omtrdc.com *.siteimprovementanalytics.com *.tiqcdn.com *.branch.io *.ytimg.com *.frbnp2.com *.mktoresp.com *.extole.io *.freshaddress.biz *.nr-data.net *.dmdex.net *.marketo.com *.demandbase.com *.googleadservices.com *.facebook.com *.facebook.net *.linkedin.com *.ads-twitter.com *.twitter.com *.quantserve.com *.postrelease.com *.company-target.com *.adservr.org *.adnxs.com *.bidr.io *.adsymptotic.com *.openx.net *.advertising.com *.casalemedia.com *.rubiconproject.com *.snapchat.com *.tapad.com *.yahoo.com *.3lift.com *.adroll.com *.bidswitch.net *.bing.com *.bttrack.com *.consensu.org *.flashtalking.com *.mathtag.com *.media6degrees.com *.mxptint.net *.outbrain.com *.pubmatic.com *.taboola.com *.newscred.com *.bizographics.com *.vimeo.com *.onlineaccess1.com *.nr-data.net *.fraudmap.net *.10to8.com *.cloudfront.net *.cloudflare.com app.link 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.newrelic.com *.typekit.net *.signalintent.com *.amazonaws.com *.google-analytics.com *.siteimprovementanalytics.io *.gstatic.com *.google.com *.everesttech.net *.doubleclick.net * *.we-stats.com *.googleapis.com *.googletagmanager.com *.youtube.com *.jsdelivr.net *.marketo.net *.splash-screen.net *.omtrdc.com *.siteimprovementanalytics.com *.tiqcdn.com *.branch.io *.ytimg.com *.frbnp2.com *.mktoresp.com *.extole.io *.freshaddress.biz *.nr-data.net *.dmdex.net *.marketo.com *.demandbase.com *.googleadservices.com *.facebook.com *.facebook.net *.linkedin.com *.ads-twitter.com *.twitter.com *.quantserve.com *.postrelease.com *.company-target.com *.adservr.org *.adnxs.com *.bidr.io *.adsymptotic.com *.openx.net *.advertising.com *.casalemedia.com *.rubiconproject.com *.snapchat.com *.tapad.com *.yahoo.com *.3lift.com *.adroll.com *.bidswitch.net *.bing.com *.bttrack.com *.consensu.org *.flashtalking.com *.mathtag.com *.media6degrees.com *.mxptint.net *.outbrain.com *.pubmatic.com *.taboola.com *.newscred.com *.bizographics.com *.vimeo.com *.onlineaccess1.com *.nr-data.net *.fraudmap.net *.10to8.com *.cloudfront.net *.cloudflare.com 'self' 'unsafe-inline'; font-src *.newrelic.com *.typekit.net *.signalintent.com *.amazonaws.com *.google-analytics.com *.siteimprovementanalytics.io *.gstatic.com *.google.com *.everesttech.net *.doubleclick.net * *.we-stats.com *.googleapis.com *.googletagmanager.com *.youtube.com *.jsdelivr.net *.marketo.net *.splash-screen.net *.omtrdc.com *.siteimprovementanalytics.com *.tiqcdn.com *.branch.io *.ytimg.com *.frbnp2.com *.mktoresp.com *.extole.io *.freshaddress.biz *.nr-data.net *.dmdex.net *.marketo.com *.demandbase.com *.googleadservices.com *.facebook.com *.facebook.net *.linkedin.com *.ads-twitter.com *.twitter.com *.quantserve.com *.postrelease.com *.company-target.com *.adservr.org *.adnxs.com *.bidr.io *.adsymptotic.com *.openx.net *.advertising.com *.casalemedia.com *.rubiconproject.com *.snapchat.com *.tapad.com *.yahoo.com *.3lift.com *.adroll.com *.bidswitch.net *.bing.com *.bttrack.com *.consensu.org *.flashtalking.com *.mathtag.com *.media6degrees.com *.mxptint.net *.outbrain.com *.pubmatic.com *.taboola.com *.newscred.com *.bizographics.com *.vimeo.com *.onlineaccess1.com *.nr-data.net *.fraudmap.net *.10to8.com *.cloudfront.net *.cloudflare.com 'self'; img-src *.newrelic.com *.typekit.net *.signalintent.com *.amazonaws.com *.google-analytics.com *.siteimprovementanalytics.io *.gstatic.com *.google.com *.everesttech.net *.doubleclick.net * *.we-stats.com *.googleapis.com *.googletagmanager.com *.youtube.com *.jsdelivr.net *.marketo.net *.splash-screen.net *.omtrdc.com *.siteimprovementanalytics.com *.tiqcdn.com *.branch.io *.ytimg.com *.frbnp2.com *.mktoresp.com *.extole.io *.freshaddress.biz *.nr-data.net *.dmdex.net *.marketo.com *.demandbase.com *.googleadservices.com *.facebook.com *.facebook.net *.linkedin.com *.ads-twitter.com *.twitter.com *.quantserve.com *.postrelease.com *.company-target.com *.adservr.org *.adnxs.com *.bidr.io *.adsymptotic.com *.openx.net *.advertising.com *.casalemedia.com *.rubiconproject.com *.snapchat.com *.tapad.com *.yahoo.com *.3lift.com *.adroll.com *.bidswitch.net *.bing.com *.bttrack.com *.consensu.org *.flashtalking.com *.mathtag.com *.media6degrees.com *.mxptint.net *.outbrain.com *.pubmatic.com *.taboola.com *.newscred.com *.bizographics.com *.vimeo.com *.onlineaccess1.com *.nr-data.net *.fraudmap.net *.10to8.com *.cloudfront.net *.cloudflare.com 'self' data:; worker-src 'self' blob: firstrepublic; 1
frame ancestors 'none'; 1
frame-ancestors 'self' stopandshop.com *.stopandshop.com 1
frame-ancestors 'self' www.klikdokter.com klikdokter.com m.klikdokter.com www.lifebuoy.co.id lifebuoy.co.id wecare.id www.prenagen.com 1
default-src 'self'; img-src 'self' data: *; object-src 'self'; connect-src 'self' https://www.goodsync.com https://www.google-analytics.com https://api.reviews.co.uk https://knrpc.olark.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.goodsync.com/ https://tagmanager.google.com/ https://static.olark.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com https://assets.olark.com https://api.olark.com https://knrpc.olark.com https://static.olark.com https://widget.reviews.co.uk https://www.googletagmanager.com/ https://widget.reviews.io https://www.google-analytics.com/ https://www.googleadservices.com/ https://connect.facebook.net/ https://*.doubleclick.net/ https://tagmanager.google.com/ https://bat.bing.com/ https://www.youtube.com/ https://s.ytimg.com/; font-src data: 'self' 'unsafe-inline' 'unsafe-eval' https://www.goodsync.com; frame-src 'self' https://control.goodsync.com/ https://www.goodsync.com https://jobs.goodsync.com https://docs.google.com https://www.google.com https://static.olark.com https://widget.reviews.co.uk https://widget.reviews.io/ https://*.doubleclick.net/ https://www.youtube.com/ https://s.ytimg.com/; media-src 'self' https://static.olark.com 1
default-src 'self'; frame-src 'self'; block-all-mixed-content; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.egoid.me https://*.zopim.com https://*.geetest.com https://*.qbox.me https://*.wx.qq.com https://*.bhex.com https://*.bhfastime.com https://*.bit-e.com https://www.googletagmanager.com https://hm.baidu.com https://www.google-analytics.com https://static.zdassets.com https://*.hbtc.ai https://*.hbtc.fm https://*.hbtc.live https://*.hbtc.today https://*.bluehelix.com; connect-src 'self' https://*.bhfastime.com https://api.geetest.com wss://*.zopim.com https://ekr.zdassets.com https://*.zendesk.com  https://www.google-analytics.com https://*.hbtc.ai wss://*.hbtc.ai https://*.hbtc.fm wss://*.hbtc.fm https://*.hbtc.live wss://*.hbtc.live https://*.hbtc.today wss://*.hbtc.today https://*.bluehelix.com wss://*.bluehelix.com  https://*.bhex.com wss://*.bhex.com https://*.hbtc.com wss://*.hbtc.com https://*.hbtc.co wss://*.hbtc.co https://*.bit-e.com wss://*.bit-e.com https://*.bhex.us wss://*.bhex.us https://*.bhex.cn wss://*.bhex.cn https://*.gobhex.com wss://*.gobhex.com https://*.bhexb.com wss://*.bhexb.com; img-src * data: blob:; object-src 'none'; base-uri 'self'; style-src 'self' https://static.geetest.com 'unsafe-inline' blob: https://*.bhex.com https://*.bhfastime.com https://*.bit-e.com; font-src * data: blob:; manifest-src 'self' https://*.bhfastime.com; media-src 'self' https://static.zdassets.com https://*.bhfastime.com 1
script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data: blob: *; media-src https: data: blob: *; object-src 'none'; frame-ancestors 'none'; connect-src *; base-uri 'self'; upgrade-insecure-requests; 1
frame-ancestors 'self' http://www.philips.co.uk *.philips.com *.philips.co.uk 1
frame-src 'self' *.google.de google.de *.google.com google.com youtube.com *.youtube.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: ws: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: ws: blob: *.pivotaltracker.com *.swiftypecdn.com *.typekit.net *.addthis.com *.addthisedge.com *.mxpnl.com *.mixpanel.com *.cloudflare.com *.trustarc.com *.cookielaw.org *.vmware.com *.onetrust.com *.stripe.com *.google.com *.googleapis.com *.googleadservices.com *.googletagmanager.com googleads.g.doubleclick.net *.google-analytics.com *.newrelic.com *.nr-data.net; report-uri /services/area_51/security_content_violations 1
report-uri https://web-reports.snyk.io/csp; object-src 'none' 1
script-src 'self' 'sha256-152qnSojXPPJBO5ypmrZJeZhpvmsrci2Y3Qw5yXp7e0=' 'unsafe-inline' https://platform.twitter.com https://stats.hey.com; object-src 'self'; connect-src https://stats.hey.com https://beanstalk.37signals.com 'self'; 1
connect-src 'self' *.novoresume.com https://uploads.intercomcdn.com *.stripe.com https://www.google-analytics.com connect.facebook.net api.usabilla.com api-iam.intercom.io wss://nexus-websocket-a.intercom.io vc.hotjar.io *.hotjar.com ws://*.hotjar.com https://widget.trustpilot.com; default-src 'self' 'unsafe-inline' *.novoresume.com; font-src 'self' data: *.novoresume.com fonts.gstatic.com *.googleapis.com d6tizftlrpuof.cloudfront.net js.intercomcdn.com; frame-src 'self' *.stripe.com *.novoresume.com *.googleapis.com d6tizftlrpuof.cloudfront.net *.google.com *.hotjar.com https://intercom-sheets.com https://optimize.google.com https://widget.trustpilot.com https://player.vimeo.com; img-src 'self' data: https://downloads.intercomcdn.com https://www.googletagmanager.com https://cx.atdmt.com *.novoresume.com csi.gstatic.com www.gstatic.com *.doubleclick.net *.google.com *.google-analytics.com connect.facebook.net *.googleadservices.com www.facebook.com d6tizftlrpuof.cloudfront.net w.usabilla.com gifs.intercomcdn.com t.co static.intercomassets.com js.intercomcdn.com https://www.google-analytics.com https://optimize.google.com https://bat.bing.com www.google.us; media-src 'self' js.intercomcdn.com *.novoresume.com; object-src 'self' 'unsafe-eval' *.novoresume.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.stripe.com d6tizftlrpuof.cloudfront.net *.novoresume.com *.google.com *.google-analytics.com *.googleadservices.com connect.facebook.net www.googletagmanager.com *.doubleclick.net www.facebook.com api.usabilla.com w.usabilla.com widget.intercom.io js.intercomcdn.com *.hotjar.com https://optimize.google.com https://bat.bing.com https://widget.trustpilot.com https://player.vimeo.com www.google.us; style-src 'self' 'unsafe-inline' tagmanager.google.com *.novoresume.com d6tizftlrpuof.cloudfront.net *.googleapis.com https://optimize.google.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.twitter.com *.typekit.net *.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' addevent.com *.addthis.com *.addthisedge.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js *.googletagmanager.com *.hotjar.com *.instagram.com *.pinterest.com *.royalalberthall.com tfl.gov.uk *.twimg.com *.twitter.com *.typekit.net *.ytimg.com www.youtube.com z.moatads.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' addevent.com *.addthis.com *.addthisedge.com *.bugherd.com cdn.syndication.twimg.com *.doubleclick.net *.facebook.com *.facebook.net *.gstatic.com *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js *.googletagmanager.com *.hotjar.com *.mathtag.com *.pinterest.com *.serving-sys.com *.typekit.net *.youtube.com *.ytimg.com *.instagram.com *.royalalberthall.com *.twimg.com *.twitter.com z.moatads.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.addthis.com *.doubleclick.net *.facebook.com *.google-analytics.com *.hotjar.io *.serving-sys.com *.typekit.net *.royalalberthall.com *.hotjar.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.addevent.com cdnjs.cloudflare.com fonts.googleapis.com *.mathtag.com maxcdn.bootstrapcdn.com *.royalalberthall.com *.twitter.com; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.bootstrapcdn.com cdnjs.cloudflare.com fonts.googleapis.com tickets.royalalberthall.com *.twitter.com; img-src 'self' data: *.addevent.com *.adnxs.com *.audience2media.com *.cloudfront.net *.doubleclick.net *.facebook.com *.google.com *.google.co.uk *.googletagmanager.com *.google-analytics.com img.youtube.com pbs.twimg.com *.royalalberthall.com *.s3.amazonaws.com s3-eu-west-1.amazonaws.com *.twitter.com *.typekit.net tfl.gov.uk *.gravatar.com *.youtube.com yt3.ggpht.com *.ytimg.com http://uploads.royalalberthall.com.s3-eu-west-1.amazonaws.com s4-rah.thirdlight.com; media-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudfront.net; font-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.bootstrapcdn.com *.gstatic.com *.typekit.net *.royalalberthall.com; frame-src 'self' *.facebook.com *.royalalberthall.com *.addthis.com *.doubleclick.net *.google.com *.googletagmanager.com open.spotify.com *.soundcloud.com *.twitter.com *.youtube.com *.vimeo.com embed.gettyimages.com iris.time-lapse-systems.co.uk syndication.twitter.com *.instagram.com s3.eu-west-1.amazonaws.com/assets.royalalberthall.com/ widgets.scribblemaps.com *.hotjar.com; object-src 'self'; reflected-xss block; report-uri https://8b2914542e1511c44f4e835f9c638376.report-uri.com/r/d/csp/enforce; 1
frame-ancestors https://*.icicilombard.com/ https://www.icicibank.com/ https://www.icicidirect.com/ https://www.idfcbank.com/ 1
frame-ancestors 'self' https://optimize.google.com  ; report-uri https://skiddle.report-uri.com/r/d/csp/enforce 1
frame-ancestors 'self' http://content.microfocus.com https://content.microfocus.com 1
default-src 'none';               script-src 'self' 'unsafe-inline' 'unsafe-eval' http://ajax.googleapis.com https://cdnjs.cloudflare.com https://www.gstatic.com https://maxcdn.bootstrapcdn.com/ https://www.googletagmanager.com https://tagmanager.google.com https://consent.trustarc.com https://unpkg.com/aos@2.3.1/dist/aos.js https://cdnjs.cloudflare.com/ajax/libs/gsap/1.11.4/TweenMax.min.js https://cdnjs.cloudflare.com/ajax/libs/gsap/1.20.2/utils/Draggable.min.js https://maps.googleapis.com https://www.gstatic.com http://pixel.mathtag.com https://cookie-cdn.cookiepro.com https://cookie-cdn.cookiepro.com https://code.jquery.com https://geolocation.onetrust.com https://www.google-analytics.com http://tags.bkrtx.com https://connect.facebook.net http://consent.trustarc.com;            style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://tagmanager.google.com https://maxcdn.bootstrapcdn.com https://unpkg.com/aos@2.3.1/dist/aos.css https://fonts.googleapis.com https://www.gstatic.com https://cookie-cdn.cookiepro.com https://consent.trustarc.com;             font-src 'self' data: http://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com;             img-src 'self' data: https://www.googletagmanager.com https://consent-pref.trustarc.com https://maps.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://maps.googleapis.com http://pixel.mathtag.com https://cookie-cdn.cookiepro.com https://www.google-analytics.com https://www.facebook.com https://stats.g.doubleclick.net https://consent.trustarc.com http://consent.trustarc.com;            frame-src 'self' https://consent-pref.trustarc.com/ https://www.youtube-nocookie.com http://pixel.mathtag.com https://pepbridge.pepsicodigital.com http://tags.bluekai.com https://stags.bluekai.com https://www.youtube.com http://10095471.fls.doubleclick.net;             connect-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://trackerapi.trustarc.com https://netdna.bootstrapcdn.com https://fonts.googleapis.com;             media-src 'self' data: https://davies-meyer-wsp.s3.eu-central-1.amazonaws.com/ https://www.youtube.com; 1
script-src 'sha256-VZWSAuyx59nrbTUBdlnGeRgZAupg/kuYi0/ZCxezohk=' 'nonce-zqVZMMKIz7JXvjvsZbEWeg==' 'self' 'unsafe-inline' https://note.com https://d291vdycu0ht11.cloudfront.net https://d2l930y2yx77uc.cloudfront.net https://polyfill.io https://www.clarity.ms https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com/firebasejs https://*.facebook.net https://platform.twitter.com https://*.twimg.com cdn.iframe.ly https://cdn.embedly.com https://*.tiktok.com https://*.tiktokcdn.com https://*.ibytedtos.com https://speakerdeck.com https://*.flickr.com https://*.mul-pay.jp https://*.canva.com; object-src 'none'; base-uri 'self' 1
block-all-mixed-content; font-src 'self' fonts.gstatic.com fonts.gstatic.com data:; img-src 'self' blob: data: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' addsearch.com cdn.ampproject.org connect.facebook.net *.g.doubleclick.net *.google.de *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.instagram.com *.ioam.de *.opinary.com *.stry.tl *.taboola.com *.twimg.com *.twitter.com *.wuv.de *.youtube.com *.ytimg.com *.tiktok.com *.tiktokcdn.com *.pinterest.com *.adition.com *.scorecardresearch.com *.searchcdn.com *.teads.tv s0.2mdn.net *.wuv.de gdpr-tcfv2.sp-prod.net widget.perfectmarket.com *.flashtalking.com *.criteo.com *.adform.net *.vidible.tv *.doubleverify.com *.doubleclick.net bs.serving-sys.com static.aivdesk.com secure-ds.serving-sys.com ad.lkqd.net *.cloudflare.com *.adsafeprotected.com *.maximus.mobkoi.com *.celtra.com *.moatads.com sf16-scmcdn-sg.ibytedtos.com; style-src 'self' 'unsafe-inline' *.addsearch.com fast.fonts.net *.googleapis.com *.stry.tl *.taboola.com *.twitter.com *.wuv.de *.tiktok.com *.tiktokcdn.com *.cloudfront.net tagmanager.google.com *.wuv.de s1.adform.net static.aivdesk.com; worker-src blob: *.wuv.de 1
script-src 'self' vimeo.com https://gist.github.com www.slideshare.net 'unsafe-eval' https://assets.hackmd.io https://www.google.com https://apis.google.com https://docs.google.com https://www.dropbox.com https://*.disqus.com https://*.disquscdn.com https://www.google-analytics.com https://stats.g.doubleclick.net https://secure.quantserve.com https://rules.quantcount.com https://pixel.quantserve.com https://js.driftt.com https://embed.small.chat https://static.small.chat https://www.googletagmanager.com https://cdn.ravenjs.com https://browser.sentry-cdn.com https://js.stripe.com 'nonce-72a3901d-d95b-4f71-bab2-2dbddacc3902' 'sha256-EtvSSxRwce5cLeFBZbvZvDrTiRoyoXbWWwvEVciM5Ag=' 'sha256-NZb7w9GYJNUrMEidK01d3/DEtYztrtnXC/dQw7agdY4=' 'sha256-L0TsyAQLAc0koby5DCbFAwFfRs9ZxesA+4xg0QDSrdI=' 'sha256-8HvL1KRq6jEwDkuVgxMDK7Gag1vnT70L0Lfoa1E3YsY=' 'sha256-81acLZNZISnyGYZrSuoYhpzwDTTxi7vC1YM4uNxqWaM='; img-src * data:; style-src 'self' 'unsafe-inline' https://assets-cdn.github.com https://github.githubassets.com https://assets.hackmd.io https://www.google.com https://fonts.gstatic.com https://*.disquscdn.com https://static.small.chat; font-src 'self' data: https://public.slidesharecdn.com https://assets.hackmd.io https://*.disquscdn.com; object-src *; media-src *; frame-src *; child-src *; connect-src *; base-uri 'none'; form-action 'self' https://www.paypal.com; upgrade-insecure-requests 1
script-src 'nonce-NZ3XuCD75Gxt3cFVXTVweg' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/WebLightFeaturePhoneHttp/cspreport 1
frame-ancestors self https://fabfitfun.com; 1
default-src  'self' ; connect-src    *;  worker-src    * data: blob: *.transparent.com *.transparent.local *.s3.amazonaws.com;  font-src   * data: blob: 'unsafe-inline';  frame-src   'self' *.transparent.com *.transparent.local *.whichisenglish.transparent.com *.testwie.transparent.com *.s3.amazonaws.com *.amazon.com *.google.com *.appcues.com *.apple.com *.byki.com *.rbdigital.com *.rbdigitalstage.com *.vimeo.com *.youtube.com *.fastspring.com *.onfastspring.com *.hubspot.com *.facebook.com *.twitter.com *.taleo.net *.addthis.com *.hsforms.com *.iorad.com *.typeform.com *.wistia.net *.oncehub.com *.wistia.com data: blob: mailto: --bridge-loaded-- bridge-loaded --wvjb-queue-message-- wvjb-queue-message 192.168.254.49 192.168.254.52 192.168.254.83 192.168.254.91;  manifest-src   'self' *.transparent.com *.transparent.local *.s3.amazonaws.com 192.168.254.49 192.168.254.52 192.168.254.83 192.168.254.91;  img-src    * data: blob:;  media-src    * data: blob:;  object-src    * data: blob:;  script-src    * 'unsafe-inline' 'unsafe-eval';  style-src    * 'unsafe-inline';  1
default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.itzbund.de *.googleapis.com *.google.com *.gstatic.com www.youtube.com *.ytimg.com piwik.itzbund.de; object-src 'self' multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com; frame-src *.google.com *.gstatic.com *.youtube.com *.vimeo.com; img-src 'self' blob: data: *.google.com *.gstatic.com *.youtube.com *.ytimg.com *.openstreetmap.org piwik.itzbund.de; frame-ancestors 'self'; worker-src 'self'; 1
script-src 'report-sample' 'nonce-e/Ho11T9FVikA5JWSq3kcQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport 1
frame-ancestors 'self' *.coastal.edu; 1
frame-ancestors 'self' https://scstatehouse.sharepoint.com https://scstatehouse.gov http://scstatehouse.gov https://*.scstatehouse.gov http://*.scstatehouse.gov https://*.schouse.gov http://*.schouse.gov https://*.scsenate.gov http://*.scsenate.gov; 1
frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com 1
default-src 'self' *.coinex.com:* *.coinex.co:* coinex.com:* coinex.co:* static.zdassets.com coinex.zendesk.com coinex.zendesk.co *.viabtc.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.coinex.com coinex.com *.coinex.co coinex.co www.google-analytics.com static.geetest.com widget-mediator.zopim.com *.zdassets.com api.geetest.com monitor.geetest.com res.wx.qq.com coinex.zendesk.com coinex.zendesk.co *.viabtc.com; style-src 'unsafe-inline' at.alicdn.com *.coinex.com coinex.com *.coinex.co coinex.co static.geetest.com coinex.zendesk.com coinex.zendesk.co dn-staticdown.qbox.me unpkg.com *.viabtc.com; img-src www.google-analytics.com www.google.com www.google.de *.coinex.com coinex.com *.coinex.co coinex.co data: stats.g.doubleclick.net static.geetest.com file.coinex.com file.coinex.co *.viabtc.com; font-src 'unsafe-inline' at.alicdn.com *.coinex.com *.coinex.co coinex.com coinex.co data: unpkg.com *.viabtc.com; connect-src *.coinex.com:* coinex.com:* *.coinex.co:* coinex.co:* coinex.zendesk.com coinex.zendesk.co coinex-help.zendesk.com coinex-help.zendesk.co *.zdassets.com https://widget-mediator.zopim.com https://p.extfun.com wss://widget-mediator.zopim.com wss://*.coinex.com wss://*.coinex.co ws://widget-mediator.zopim.com ws://*.coinex.com ws://*.coinex.co www.google-analytics.com stats.g.doubleclick.net *.viabtc.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: ; img-src 'self' 'unsafe-inline' data: https: ; font-src 'self' data: https: ; connect-src 'self' *.nr-data.net *.hotjar.com *.iu.edu *.powerbi.com *.nafsa.org *.vimeo.com *.youtube.com *.soundcloud.com *.doubleclick.net *.googlesyndication.com *.google-analytics.com *.live.com *.addtoany.com sentry.utdev.com ; media-src https: ; object-src 'self' ; child-src 'self' *.iu.edu *.powerbi.com *.addtoany.com *.doubleclick.net *.googlesyndication.com *.google.com *.nafsa.org *.vimeo.com *.youtube.com *.soundcloud.com *.live.com ; upgrade-insecure-requests; report-uri https://29af3d3fdd744b61877f6090f6f93c94@sentry.utdev.com/18; 1
frame-ancestors 'self' *.americatv.com.pe ampproject.org www.google.com 1
default-src 'self' https://js.hsforms.net https://forms.hsforms.com/ https://widget.sirena.app/ https://*.instana.io/ https://*.anteater.ai/ https://*.buscador.amarello.com.mx/ https://api.claropagos.com/ https://*.taboola.com/ https://*.anteater.ai/ https://tpc.googlesyndication.com/ https://securepubads.g.doubleclick.net/ https://pagead2.googlesyndication.com/ https://www.googletagservices.com/ https://*.fontawesome.com/ https://www.telmex.com/ https://www.claroshop.com/ https://cotizatuseguro.inbursa.com/ https://www.promociones-inbursa.com/ https://www.promociones-inbursa.com/ https://www.claro.com/ https://www.claromusica.com/ https://www.clarovideo.com/ https://www.mitelcel.com/ https://pixel-sync.sitescout.com/ https://*.claroshop.com https://claropet.com https://api.poder.io/ https://*.inbenta.com https://*.poder.io/ https://cdn.poder.io/ https://*.hotjar.com https://*.inbenta.io https://*.krxd.net/ https://cdn.krxd.net https://*.akstat.io https://*.go-mpulse.net https://*.youtube.com https://www.youtube.com https://staasobj-api.telmex.com https://staasobj-api.telmex.com https://*.online-metrix.net/ https://*.adsrvr.org https://*.doubleclick.net https://dsync.rlcdn.com https://*.facebook.com https://*.facebook.net https://*.gigya.com https://*.googleadservices.com  https://*.google-analytics.com https://*.googleapis.com https://*.google.com https://*.google.com.mx https://*.googletagmanager.com https://*.gstatic.com https://ib.adnxs.com https://*.jquery.com https://*.pingdom.net https://*.scarabresearch.com https://*.thefancy.com https://*.wisepops.com https://*.criteo.com https://*.creativecdn.com https://*.criteo.net https://secure.mlstatic.com/ https://checkout.payulatam.com/ https://api.mercadopago.com/ https://*.mercadopago.com/  https://imgsplaza.sears.com.mx/ https://medios-plazavip.sears.com.mx/ https://cdn.ampproject.org https://claroshop.helpsite.cloud/  https://*.taboola.com/ https://*.yotpo.com  data: 'unsafe-inline' 'unsafe-eval' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; media-src 'self' http: https:; img-src 'self' data: *.fosdem.org; object-src 'self'; style-src 'self' 'unsafe-inline';  1
frame-ancestors *.ooredoo.qa 1
default-src 'self' *.jsdelivr.net ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.google.com *.google-analytics.com *.typekit.com *.addthis.com *.addthisedge.com *.chartbeat.com *.infogram.com *.jquery.com unpkg.com *.newrelic.com *.nr-data.net *.formstack.com *.googleapis.com *.amazonaws.com *.wnyc.org *.cloudflare.com *.twitter.com *.twimg.com airtable.com *.airtable.com *.addthis.com *.moatads.com *.flourish.studio *.uri.sh *.jsdelivr.net; object-src 'self' 'unsafe-inline' *.google.com *.google-analytics.com *.googleapis.com *.wnyc.org *.twitter.com airtable.com *.airtable.com; style-src 'self' 'unsafe-inline' unpkg.com *.formstack.com *.google.com *.googleapis.com *.wnyc.org *.twitter.com airtable.com *.airtable.com *.typekit.net; img-src 'self' 'unsafe-inline' data: *.twimg.com *.typekit.net *.google-analytics.com *.doubleclick.net *.chartbeat.net *.tinypic.com *.wmflabs.org *.formstack.com *.amazonaws.com *.googleapis.com *.wnyc.org *.addthis.com *.twitter.com airtable.com *.airtable.com; media-src 'self' 'unsafe-inline' *.formstack.com *.google.com  *.google-analytics.com *.googleapis.com *.twitter.com airtable.com *.airtable.com; frame-src 'self' 'unsafe-inline' datawrapper.dwcdn.net *.addthis.com *.google.com *.infogram.com *.jquery.com *.formstack.com  *.google-analytics.com *.googleapis.com *.wnyc.org *.twitter.com airtable.com *.airtable.com *.c-span.org *.youtube.com vekeo.com *.moatads.com *.teleforumonline.com *.vekeo.com *.flourish.studio *.uri.sh; frame-ancestors 'self' 'unsafe-inline' *.formstack.com *.google.com  *.google-analytics.com *.googleapis.com *.wnyc.org *.twitter.com airtable.com *.airtable.com *.vekeo.com; font-src 'self' 'unsafe-inline' *.typekit.com *.googleapis.com *.gstatic.com *.twitter.com airtable.com *.airtable.com *.typekit.net data: ; connect-src 'self' 'unsafe-inline' *.addthis.com *.typekit.net *.google.com *.google-analytics.com *.googleapis.com *.wnyc.org *.twitter.com *.doubleclick.net airtable.com *.airtable.com *.newrelic.com bam.nr-data.net *.jsdelivr.net; report-uri /report-csp-violation 1
default-src 'self' data: blob: http://*.iter.org https://*.iter.org; connect-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.iter.org https://*.iter.org http://p.jwpcdn.com http://*.gstatic.com https://*.gstatic.com https://cdnjs.cloudflare.com http://*.facebook.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.twimg.com http://*.linkedin.com https://*.linkedin.com http://*.google-analytics.com https://*.google-analytics.com https://*.googleapis.com http://*.google.com https://*.google.com https://*.google-analytics.com http://*.cloudflare.com https://*.dacast.com https://play.webvideocore.net https://s3.amazonaws.com; object-src 'self' https://player.dacast.com https://*.akamaihd.net; style-src 'self' 'unsafe-inline' http://*.google.com https://*.google.com https://fonts.googleapis.com https://www.gstatic.com https://player.dacast.com https://*.microsoft.com; img-src * data: blob:; frame-src 'self' http://*.iter.org https://*.iter.org http://*.youtube.com https://*.youtube.com https://*.google.com http://*.google.com http://*.googleapis.com https://*.googleapis.com http://*.facebook.com https://*.facebook.com https://play.webvideocore.net https://*.issuu.com; media-src blob: 'self' http://*.iter.org https://*.iter.org https://*.akamaihd.net; font-src 'self' data: blob: http://*.iter.org https://*.iter.org https://player.dacast.com https://*.sharepointonline.com https://*.microsoft.com https://fonts.gstatic.com; worker-src blob: 'self' http://*.iter.org https://*.iter.org 1
frame-ancestors 'self'; style-src 'self' 'unsafe-inline' hello.myfonts.net cloud.typography.com *.vitamix.com *.bazaarvoice.com  https://optimize.google.com https://fonts.googleapis.com *.cj.com; 1
frame-ancestors u.boosj.com www.boosj.com gcw.boosj.com m.boosj.com 1
frame-ancestors 'self' http://wrapper.safe-installation.com/ https://wrapper.safe-installation.com/ *.888.com *.secured-qa.com *.secured-registration.com *.secureutils.com *.images4us.com *.onlinepersonalmessages.com *.888sport.com *.888sport.es *.888sport.it *.888sport.dk *.888sport.ro *.888sport.se *.888sport.us *.888sport.de *.777.com *.personalinfoonline.com *.888.de *.888casino.com *.888poker.com *.888casino.dk *.888poker.dk *.888.de *.888casino.ro *.888poker.ro *.888casino.se *.888poker.se *.888casino.es *.888poker.es *.888casino.it *.888poker.it *.888casino.us *.888poker.us cmsp; report-uri https://888protech.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-eval' https://*.flixcart.com https://*.flixcart.net https://flipkart.d1.sc.omtrdc.net https://dpm.demdex.net https://sslwidget.criteo.com https://widget.as.criteo.com https://tnc.phonepe.com https://www.googletagmanager.com 'nonce-7438559017167750187'; style-src 'self' 'unsafe-inline' https://*.flixcart.com https://tnc.phonepe.com https://*.flixcart.net; img-src 'self' data: blob: https://*.flixcart.com https://*.flixcart.net https://flipkart.d1.sc.omtrdc.net https://www.facebook.com https://*.fkapi.net https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.in https://www.googleadservices.com https://sp.analytics.yahoo.com https://bat.bing.com https://bat.r.msn.com https://www.payzippy.com https://tnc.phonepe.com https://*.youtube.com https://www.google-analytics.com; font-src 'self' data: https://*.flixcart.com https://tnc.phonepe.com https://*.flixcart.net; frame-src 'self' https://*.flipkart.com http://*.flipkart.com https://*.youtube.com https://youtube.com https://*.vimeo.com https://dis.as.criteo.com https://gum.criteo.com https://www.payzippy.com https://tnc.phonepe.com https://cdemux.appspot.com 'nonce-7438559017167750187'; child-src 'self' https://*.flipkart.com 'nonce-7438559017167750187'; connect-src 'self' *; object-src 'none'; base-uri 'self'; report-uri https://csp.flipkart.com/csp 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://fonts.gstatic.com https://tagmanager.google.com https://cdn1.affirm.com https://fonts.googleaps.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://vjs.zencdn.net http://vjs.zencdn.net https://*.inside-graph.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleaps.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.inside-graph.com data:; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; connect-src 'self' 'unsafe-inline' 'unsafe-eval' https: http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://*.inside-graph.com; child-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; media-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: 1
default-src * 'unsafe-eval' 'unsafe-inline'; font-src * data:; img-src * data:; object-src 'none' 1
default-src 'self' *.liberbank.es https://www.google.com https://www.facebook.com/tr/ https://api.liberbank.es:80 https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://www.norbolsa.es https://analytics.twitter.com https://www.liberbank.es https://static.ads-twitter.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://storage.googleapis.com https://www.gstatic.com https://use.fontawesome.com https://use.typekit.net/lzp0kbu.js https://maps.googleapis.com https://cse.google.com *.hotjar.com https://www.googleadservices.com https://bat.bing.com https://track.adform.net https://googleads.g.doubleclick.net *.browseranalytic.com browseranalytic.com https://player.vimeo.com/api/player.js https://piwik.lander.net/piwik.js https://www.youtube.com/iframe_api https://s.ytimg.com/yts/ https://connect.facebook.net https://service.force.com https://liberbankit.my.salesforce.com https://d.la1-c1-frf.salesforceliveagent.com https://onboardinglbk.secure.force.com https://s2.adform.net https://www.tarjetaplaystation.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://maxcdn.bootstrapcdn.com https://use.typekit.net https://use.fontawesome.com https://cdnjs.cloudflare.com https://p.typekit.net https://www.google.com/cse/static/ https://service.force.com https://onboardinglbk.secure.force.com;img-src 'self' https://t.co https://www.google-analytics.com https://www.google.com https://www.facebook.com https://www.norbolsa.es data: https://p.typekit.net https://maps.gstatic.com/ https://maps.googleapis.com/ https://www.googleapis.com https://clients1.google.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://bat.bing.com https://www.google.es *.browseranalytic.com browseranalytic.com https://googleads.g.doubleclick.net https://clean.tracksacai.com https://tbl.tradedoubler.com https://afinia.uinterbox.com https://openlead.bankimia.com https://atrapacredito.go2cloud.org https://liberbankit--devcc2--c.cs84.visual.force.com https://liberbankit--devcc2.cs84.my.salesforce.com https://www.gstatic.com;connect-src 'self' *.hotjar.com https://bat.bing.com https://www.facebook.com https://www.liberbank.es https://bat.bing.com https://analytics.google.com https://www.google-analytics.com https://lbk-asistente-pro-principal.appspot.com https://vc.hotjar.io https://api.liberbank.es https://api-glbk.liberbank.es https://lbkapi-pre.vorago.es https://in.hotjar.com https://sentry.hotjar.com/ *.browseranalytic.com browseranalytic.com https://cse.google.com https://stats.g.doubleclick.net https://devcc4-onboardinglbk.cs109.force.com https://onboardinglbk.secure.force.com https://ws1.premiumnumbers.es/C2M/C2M/NLL/pgXrgNiYWTnjRyy03oavuViq1osOt96N/;font-src 'self' https://fonts.googleapis.com http://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://use.typekit.net https://use.fontawesome.com https://cdnjs.cloudflare.com https://www.facebook.com/tr/;object-src 'self';media-src 'self';sandbox allow-forms allow-scripts allow-modals allow-popups allow-presentation allow-same-origin allow-popups-to-escape-sandbox allow-top-navigation ;child-src 'self' https://portalprov.liberbank.es https://www.facebook.com https://openbanking.liberbank.es https://bedesa-liberbank.ceca.es https://cse.google.com https://vars.hotjar.com https://www.youtube.com https://track.adform.net https://player.vimeo.com https://*.fls.doubleclick.net https://vimeo.com https://service.force.com;form-action 'self' https://www.facebook.com/tr/;frame-ancestors 'self';plugin-types application/pdf; 1
default-src 'none'; manifest-src 'self' https://www.bugatti.com https://assets.bugatti.com https://assets2.bugatti.com; connect-src 'self' https://www.bugatti.com https://assets.bugatti.com https://assets2.bugatti.com https://ssl.google-analytics.com https://scontent.cdninstagram.com https://static.cookiefirst.com https://app.cookiefirst.com/ https://api.cookiefirst.com/ blob:; frame-src 'self' https://www.youtube-nocookie.com; img-src 'self' data: https://www.bugatti.com https://assets.bugatti.com https://assets2.bugatti.com https://scontent.cdninstagram.com https://ssl.google-analytics.com https://i.ytimg.com https://consent.cookiefirst.com https://app.cookiefirst.com/ https://api.cookiefirst.com/ https://stats.g.doubleclick.net/ *.cdninstagram.com; font-src 'self' https://www.bugatti.com https://assets.bugatti.com https://assets2.bugatti.com https://fonts.gstatic.com https://static.cookiefirst.com; media-src 'self' https://assets.bugatti.com https://assets2.bugatti.com https://player.vimeo.com blob:; script-src 'self' https://www.bugatti.com https://assets.bugatti.com https://assets2.bugatti.com https://ssl.google-analytics.com https://www.youtube.com https://s.ytimg.com https://consent.cookiefirst.com 'sha256-V3VsijtxmFN+a6nbMFkBgSrpsCxs/c0DCoegulF76kc=' 'nonce-fofs9p3yF2fc' 'nonce-zei3ul4ReeNu' 'nonce-thaegai3ua5L' 'nonce-yo3Fianginez' 'nonce-AegohRee6Oow' 'nonce-pahneaHoo0uo' 'nonce-ubai2tuezu0C' 'nonce-o7oa6PRhRuQ4' 'nonce-72GBGz3iWpor' 'nonce-xRB3wouneh77'; style-src 'self' https://www.bugatti.com https://assets.bugatti.com https://assets2.bugatti.com https://consent.cookiefirst.com https://static.cookiefirst.com  https://fonts.googleapis.com/ https://consent.cookiefirst.com/ https://consent.cookiefirst.com/ 'unsafe-inline'; object-src 'self'; frame-ancestors 'none'; form-action 'self'; base-uri 'none'; 1
allow 'self'; 1
script-src 'sha256-iUlKqbz23NVVmLgGViKdAjQVee7CvJjdCycxEO+tEIo=' 'self' pagead2.googlesyndication.com 'self' 'unsafe-eval' 'nonce-csp-script-inline' polyfill.io *.madcat.tv *.trovo.live connect.facebook.net 'sha256-4RS22DYeB7U14dra4KcQYxmwt5HkOInieXK1NUMBmQI=' 'sha256-G5gTuBIY0B0A928ho6zDtB8xjEJUVQzb8RILYuCebLE=' www.google.com www.gstatic.com www.googletagmanager.com www.google-analytics.com *.gtimg.cn websdk.appsflyer.com dev.api.unipay.qq.com guigu.singaporepaya.com; style-src 'self' 'unsafe-inline' *.madcat.tv *.trovo.live; worker-src 'self' 'unsafe-eval' *.trovo.live *.madcat.tv connect.facebook.net blob: www.google.com; connect-src *; media-src * blob: data: 1
default-src 'self' https://s.hongleongconnect.my https://www.hlb.com.my; script-src 'self' * 'unsafe-inline' 'unsafe-eval'; connect-src 'self' * 'unsafe-inline'; img-src 'self' * 'unsafe-inline' data: ; style-src 'self' * 'unsafe-inline'; font-src 'self' * data: ; frame-src 'self' * 1
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ncua.mpeasylink.com *.google-analytics.com *.typekit.net *.silvercloudinc.com *.ncua.gov *.googletagmanager.com *.googletagmanager.com; img-src 'self' data: *.ncua.gov *.google-analytics.com *.typekit.net *.amazonaws.com *.silvercloudinc.com; font-src 'self' 'unsafe-inline' data: *.typekit.net fonts.gstatic.com; media-src 'self' s3.amazonaws.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.silvercloudinc.com; connect-src 'self' performance.typekit.net *.silvercloudinc.com *.google-analytics.com *.googletagmanager.com; frame-src 'self' *.youtube.com *.silvercloudinc.com 1
frame-ancestors 'self' https://lkpp-portal.festiware.com http://lkpp-portal.festiware.com http://bela-portal.festiware.com https://bela-portal.festiware.com http://belapengadaan.lkpp.go.id https://belapengadaan.lkpp.go.id; 1
frame-ancestors 'self' http://*.cartoonstock.com https://*.cartoonstock.com http://*.clivegoddard.com https://*.clivegoddard.com; 1
frame-ancestors http://stevemorse.org http://www.stevemorse.org 'self' http://www.jgsmd.org http://jgsmd.org http://www.jgss.org; 1
base-uri 'none'; script-src 'self' blob: https://stackpath.bootstrapcdn.com https://ajax.googleapis.com https://pro.fontawesome.com https://code.jquery.com https://cdnjs.cloudflare.com https://c0.froala.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://use.fontawesome.com https://cdnjs.cloudflare.com; object-src 'none'; upgrade-insecure-requests 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://1444264.collect.igodigital.com https://bam.nr-data.net https://js-agent.newrelic.com https://static.addtoany.com https://static.ads-twitter.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://www.youtube.com https://analytics.twitter.com https://s.ytimg.com https://www.google.com https://www.gstatic.com https://bam-cell.nr-data.net; object-src 'none'; img-src 'self' https://nova.collect.igodigital.com https://www.googletagmanager.com https://t.co data: https:; media-src 'self' https://www.youtube.com; frame-src 'self' https://www.youtube.com https://www.google.com/; frame-ancestors 'none'; font-src 'self'; report-uri /report-csp-violation 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.toodledo.com https://*.toodledo.com https://*.cookielaw.org https://*.onetrust.com https://*.stripe.com https://*.filepicker.io http://*.filepicker.io http://*.twitter.com https://*.twitter.com https://apis.google.com https://*.googleapis.com https://maps.gstatic.com http://apis.google.com http://*.googleapis.com http://maps.gstatic.com http://www.google-analytics.com https://www.google-analytics.com https://ssl.google-analytics.com http://www.googleadservices.com https://www.googleadservices.com http://*.google.com https://*.google.com http://d1h9d4exwfthxc.cloudfront.net https://www.googletagmanager.com https://www.googletagservices.com https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net http://connect.facebook.net http://assets.pinterest.com https://canny.io https://*.chargebee.com https://*.adroll.com https://www.youtube.com https://www.gstatic.com https://*.googlesyndication.com; report-uri /ajax/csp_report.php; 1
script-src *.rmunify.com www.google-analytics.com  'unsafe-inline' 'unsafe-eval' 1
default-src 'self' www.facebook.com player.vimeo.com gcs-vimeo.akamaized.net vod-progressive.akamaized.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' use.typekit.net www.googletagmanager.com tagmanager.google.com www.google-analytics.com maps.googleapis.com connect.facebook.net www.facebook.com cdn.cookielaw.org script.crazyegg.com www.googleadservices.com https://appds8093.blob.core.windows.net; connect-src 'self' cdn.cookielaw.org sentry.io www.google-analytics.com privacyportal.onetrust.com privacyportal-cdn.onetrust.com https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com www.facebook.com stats.g.doubleclick.net sample-api-v2.crazyegg.com tracking.crazyegg.com https://appds8093.blob.core.windows.net; img-src 'self' data: blob: p.typekit.net www.facebook.com www.google-analytics.com stats.g.doubleclick.net api.mapbox.com www.googletagmanager.com nolocdnv.azureedge.net cdn.cookielaw.org; style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com api.mapbox.com use.typekit.net p.typekit.net https://appds8093.blob.core.windows.net privacyportal-cdn.onetrust.com; font-src 'self' data: use.typekit.net fonts.gstatic.com https://appds8093.blob.core.windows.net privacyportal-cdn.onetrust.com; manifest-src 'self'; frame-src 'self' www.googletagmanager.com www.facebook.com; child-src blob:; worker-src blob:; report-uri https://sentry.io/api/1441349/security/?sentry_key=acfde5c8cccf4224962dcbb6bce6f571 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: *.gea.com; form-action 'self'; frame-src 'self' *.gea.com *.eqs.com *.eurolandir.com www.treedom.net console.e-bot7.de *.qualtrics.com vara-services.com 1
font-src https:;img-src https: data:;frame-ancestors 'self' *.movistar.cl *.vtr.com *.sersimple.com *.simplemoviles.com *.simplemoviles.cl sersimple.com simplemoviles.com simplemoviles.cl 1
script-src 'self' 'unsafe-inline' *.dallasfed.org *.google-analytics.com *.federalreserve.org *.twimg.com *.twitter.com *.frswebservices.org; object-src 'self'; style-src 'self' 'unsafe-inline' *.twimg.com *.twitter.com; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://*.criteo.com https://static.criteo.net https://player.vimeo.com https://vimeo.com https://wb.messengerpeople.com https://isitetv.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tpc.googlesyndication.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.iwantoneofthose.com https://m.iwantoneofthose.com https://checkout.iwantoneofthose.com https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://*.criteo.com https://static.criteo.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://tpc.googlesyndication.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
frame-ancestors 'self' *.netatmo.com 1
default-src https:; style-src 'self' 'unsafe-inline'; script-src https: 'unsafe-inline'; object-src 'none' 1
base-uri 'self'; connect-src 'self' *.sovendus.com native-commerce.com csi.gstatic.com translate.googleapis.com; default-src 'self' *.booklooker.de; font-src 'self' data: static.booklooker.de fonts.gstatic.com; frame-ancestors 'self' http://kvk.bibliothek.kit.edu; frame-src 'self' googleads.g.doubleclick.net *.google.de *.google.at *.google.ch *.google.com *.sovendus.com *.creativecdn.com creativecdn.com; img-src 'self' data: *.booklooker.de siegel.ausgezeichnet.org cbooks-piwik.de *.googleadservices.com *.googlesyndication.com *.google.com *.google.de *.googleapis.com *.gstatic.com i.ebayimg.com rover.ebay.com www.ebayadservices.com partners.webmasterplan.com; object-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.booklooker.de siegel.ausgezeichnet.org cbooks-piwik.de api.sovendus.com static.native-commerce.com *.google.com *.google.at *.google.ch www.googletagservices.com *.googlesyndication.com pagead2.googlesyndication.com  adservice.google.de adservice.google.at adservice.google.ch *.googleadservices.com *.googleapis.com adservice.google.nl adservice.google.it adservice.google.pl adservice.google.fr adservice.google.es adservice.google.ru adservice.google.cz adservice.google.co.uk adservice.google.be adservice.google.hu; style-src 'self' 'unsafe-inline' static.booklooker.de *.googleapis.com; worker-src 'self'; report-uri /interface/csp-report.php; 1
default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com js.intercomcdn.com production-cdn.bonus.ly staging-cdn.bonus.ly *.bootstrapcdn.com; img-src * data: blob:; object-src 'self' production-cdn.bonus.ly staging-cdn.bonus.ly; style-src 'self' 'unsafe-inline' *.googleapis.com *.bonus.ly *.google.com js.chilipiper.com *.chilipiper.com; connect-src 'self' https://*.intercom.io https://*.nr-data.net wss://*.intercom.io wss://*.bonus.ly/cable wss://*.hotjar.com api.hubspot.com app.getsentry.com forms.hubspot.com *.hubapi.com syndication.twitter.com uploads.intercomcdn.com uploads.intercomusercontent.com *.algolianet.com *.algolia.net www.google-analytics.com www.facebook.com *.fullstory.com *.hotjar.io *.hotjar.com *.doubleclick.net *.apiary.io log.intellimize.co *.clearbit.com api.lever.co js.chilipiper.com *.chilipiper.com *.bonus.ly; frame-src 'self' fast.wistia.net js.stripe.com share.intercom.io bonus.ly *.bonus.ly *.hubspot.com *.addthis.com *.doubleclick.net *.google.com *.twitter.com *.vimeo.com *.hsforms.com *.youtube.com www.instagram.com *.hotjar.com api.intellimize.co js.chilipiper.com *.chilipiper.com my.pima.app; media-src js.intercomcdn.com media.tenor.com; script-src 'self' 'unsafe-inline' api.usemessages.com connect.facebook.net graph.facebook.com googleads.g.doubleclick.net js.hs-analytics.net js.hs-scripts.com js.hsforms.net forms.hsforms.com js.hsleadflows.net js.chilipiper.com *.chilipiper.com *.hsadspixel.net js.leadin.com js.usemessages.com production-cdn.bonus.ly staging-cdn.bonus.ly unpkg.com *.addthis.com *.addthisedge.com *.adroll.com *.bnsly.co *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.hscta.net *.hubspot.com *.intercom.io *.intercomcdn.com *.linkedin.com *.newrelic.com *.nr-data.net *.perfectaudience.com *.stripe.com *.twimg.com *.twitter.com zapier.com sjs.bizographics.com static.ads-twitter.com pixel.cdnwidget.com reddit.com redditstatic.com quora.com hotjar.com *.hotjar.com www.instagram.com *.fullstory.com *.licdn.com *.quantserve.com *.quantcount.com *.clearbit.com *.clearbitjs.com js.hs-banner.com bat.bing.com ct.capterra.com *.vimeo.com api.intellimize.co 'unsafe-eval' 1
default-src 'none'; manifest-src 'self'; block-all-mixed-content; script-src blob: 'unsafe-eval' 'self' https://stats.eurocontrol.int https://cdnjs.cloudflare.com/ajax/libs/proj4js/ https://public.flourish.studio https://stats.eurocontrol.int https://www.googletagmanager.com/gtm.js https://app.everviz.com 'sha256-CFPNGLBANUFhOL1M8jVvaU3fAdQlYtiwLugJcvT0Q9Y=' 'sha256-+aqVCS7el7iEYu9CC99LCerjjC2XgHVTSqklMsnHL6Q=' 'sha256-JAzQx1TyATh4RS10s1IVWGekoUoE6eBa+EvAkFNFEoc=' https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://portal.nsv.eurocontrol.int https://int-api.nsv.eurocontrol.int https://platform.twitter.com https://cdn.syndication.twimg.com/tweets.json https://cloud.highcharts.com https://code.highcharts.com https://www.google-analytics.com/analytics.js; connect-src 'self' https://int-api.nsv.eurocontrol.int https://cloud-api.highcharts.com/chart/ https://api.everviz.com/; img-src data: 'self' https://stats.eurocontrol.int https://api.maptiler.com https://syndication.twitter.com https://platform.twitter.com https://www.google-analytics.com https://pbs.twimg.com https://stats.g.doubleclick.net https://public.flourish.rocks https://www.google.com/ads/ https://www.google.be/ads/; style-src 'self' 'unsafe-inline' https://platform.twitter.com https://app.everviz.com/fonts/ https://cloud.highcharts.com/fonts/; form-action 'self' https://syndication.twitter.com https://platform.twitter.com; frame-src 'self' https://www.google.com https://platform.twitter.com https://flo.uri.sh https://www.nm.eurocontrol.int https://syndication.twitter.com https://webto.salesforce.com https://www.youtube.com; frame-ancestors 'self'; font-src 'self' data: https://app.everviz.com/fonts/ https://cloud.highcharts.com/fonts/; object-src 'self'; media-src *; base-uri 'self' 1
frame-ancestors 'self' https://cdn.csas.cz 1
default-src 'self'; img-src 'self' data: https: *.twitter.com https://optimize.google.com https://www.google-analytics.com; font-src 'self' https://fonts.gstatic.com fonts.googleapis.com script.hotjar.com; script-src 'self' 'unsafe-inline' data: https: 'unsafe-eval' *.doubleclick.net hotjar.com *.pixel.mathtag.com sipg.micropayment.de *.adnxs.com ssl.hurra.com secure.quantserve.com *.readspeaker.com www.weview.tv cdnjs.cloudflare.com cdn.ampproject.org https://optimize.google.com https://www.google-analytics.com;style-src 'self' 'unsafe-inline' https://optimize.google.com tagmanager.google.com fonts.googleapis.com www.youtube.com cdnjs.cloudflare.com https://api.mapbox.com/mapbox.js/plugins/leaflet-fullscreen/v1.0.1/leaflet.fullscreen.css; child-src 'self' www.youtube.com youtube.com *.doubleclik.net *.hotjar.com  pixel.mathtag.com *.pixel.mathtag.com sipg.micropayment.de acdn.adnxs.com ssl.hurra.com secure.quantserve.com www.facebook.com facebook.com *.fs.doubleclick.net *.g.doubleclick.net *.doubleclick.net *.readspeaker.com *.weview.tv https://*.readspeaker.com *.vimeo.com *.googletagmanager.com *.ampproject.org blob:; connect-src 'self' wss://*.hotjar.com https://*.hotjar.com  *.hotjar.io *.readspeaker.com *.weview.tv *.amazon.com *.amazon.de *.amazonpay.com cdn.ampproject.org *.google-analytics.com https://*.googletagmanager.com https://stats.g.doubleclick.net; frame-src https://optimize.google.com https://insight.adsrvr.org https://www.youtube-nocookie.com static-na.payments-amazon.com payments.amazon.com *.weview.tv vars.hotjar.com pixel.mathtag.com *.doubleclick.net www.youtube.com *.facebook.com acdn.adnxs.com sipg.micropayment.de www.google.com *.drk.de https://*.readspeaker.com *.vimeo.com https://fusiontables.google.com https://fusiontables.googleusercontent.com https://*.amazon.de/ https://*.payments-amazon.com/ https://*.amazonservices.com https://*.account.amazon.com/ https://*.amazon.com/ *.adsrvr.org https://pippio.com/ https://unwfp.maps.arcgis.com https://covid19.who.int/; media-src 'self' *.readspeaker.com *.weview.tv *.vimeo.com http://87.225.254.206 media.drk.de 1
default-src 'self' https://assets.onfido.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.visualwebsiteoptimizer.com https://*.vwo.com *.google-analytics.com https://www.google.com https://optimize.google.com connect.facebook.net https://apis.google.com https://d2wy8f7a9ursnm.cloudfront.net https://www.gstatic.com https://d32exi8v9av3ux.cloudfront.net https://cdn.livechatinc.com/tracking.js https://*.livechatinc.com https://cdn.kustomerapp.com https://js.gleam.io https://*.checkout.com https://www.youtube.com https://s.ytimg.com/ https://cdn.siftscience.com https://*.bannerflow.com https://*.bidswitch.net https://pay.google.com https://*.twitter.com https://cdn.syndication.twimg.com https://impactradius-event.com https://d.impactradius-event.com https://loggly.com https://luno.fl9beu.net https://www.woopra.com https://assets.onfido.com https://sentry.io https://app.intotheblock.com https://sp.analytics.yahoo.com https://s.yimg.com https://www.googletagmanager.com https://a.quora.com https://sjs.bizographics.com https://secure.adnxs.com https://tagmanager.google.com https://www.googleadservices.com https://*.ads.linkedin.com https://static.ads-twitter.com https://analytics.twitter.com https://www.linkedin.com https://platform.twitter.com https://*.adroll.com https://googleads.g.doubleclick.net https://*.mparticle.com https://*.singular.net; style-src 'self' 'unsafe-inline' https://*.visualwebsiteoptimizer.com https://*.vwo.com https://ajax.googleapis.com https://fonts.googleapis.com https://www.google.com https://d2wy8f7a9ursnm.cloudfront.net https://www.gstatic.com https://d32exi8v9av3ux.cloudfront.net https://optimize.google.com https://*.checkout.com https://*.twitter.com https://*.twimg.com https://assets.onfido.com https://tagmanager.google.com; img-src 'self' data: https://*.luno.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://dsum-sec.casalemedia.com https://ups.analytics.yahoo.com https://fcmatch.google.com https://*.livechatinc.com *.google-analytics.com https://www.google.com https://www.google.co.za https://www.google.co.uk https://chart.googleapis.com https://www.facebook.com https://d2wy8f7a9ursnm.cloudfront.net https://*.bugsnag.com https://d32exi8v9av3ux.cloudfront.net https://s3.amazonaws.com https://www.bitx.co https://*.googleusercontent.com https://scontent.xx.fbcdn.net https://stats.g.doubleclick.net https://secure.adnxs.com https://ssl.gstatic.com/ https://www.gstatic.com https://optimize.google.com https://*.checkout.com https://hexagon-analytics.com https://*.freshdesk.com https://*.twitter.com https://*.twimg.com https://www.gravatar.com https://kustomer-prod1-attachments.s3.amazonaws.com https://cdn.kustomerapp.com https://logs-01.loggly.com blob: https://lipis.github.io/flag-icon-css/ https://ecommerce.zapper.com https://www.googletagmanager.com https://imp2.ads.linkedin.com https://dc.ads.linkedin.com https://px.ads.linkedin.com https://q.quora.com https://alb.reddit.com https://t.co https://*.adroll.com https://ads.yahoo.com https://x.bidswitch.net https://idsync.rlcdn.com https://us-u.openx.net https://cm.g.doubleclick.net https://ib.adnxs.com https://eb2.3lift.com https://jadserve.postrelease.com https://googleads.g.doubleclick.net https://rtb.gumgum.com https://pixel.rubiconproject.com https://bsw.digitru.st https://aws-fr.bidswitch.net https://pixel.advertising.com https://sync.outbrain.com https://simage2.pubmatic.com https://trc.taboola.com https://match.adsrvr.org https://sync.mathtag.com https://pm.w55c.net https://usermatch.krxd.net https://p.adsymptotic.com https://sync-tm.everesttech.net https://loadm.exelator.com https://secure.insightexpressai.com https://rrc.rlcdn.com; connect-src 'self' https://ajax.luno.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.bugsnag.com wss://www.luno.com wss://ws.luno.com https://d32exi8v9av3ux.cloudfront.net http://maps.googleapis.com/ https://*.checkout.com https://*.mparticle.com https://*.kustomerapp.com wss://ws-mt1.pusher.com https://sockjs-mt1.pusher.com https://s3.amazonaws.com/kustomer-prod1-attachments https://*.pubnub.com https://*.pubnub.net https://*.pubnub.io https://*.pndsn.com https://www.google-analytics.com https://luno.fl9beu.net blob: *.onfido.com wss://*.onfido.com https://www.woopra.com https://sentry.io wss://ecommerce.zapper.com https://ecommerce.zapper.com https://api.intotheblock.com https://*.singular.net https://stats.g.doubleclick.net; font-src data: https://*.visualwebsiteoptimizer.com https://*.vwo.com https://fonts.googleapis.com https://fonts.gstatic.com https://d32exi8v9av3ux.cloudfront.net https://*.checkout.com https://cdn.kustomerapp.com; media-src blob: https://d2wy8f7a9ursnm.cloudfront.net https://*.checkout.com https://*.twitter.com https://*.twimg.com https://cdn.livechatinc.com https://cdn.kustomerapp.com; worker-src blob: https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.twitter.com; object-src 'self' blob:; frame-src https://*.visualwebsiteoptimizer.com https://*.vwo.com https://secure.livechatinc.com https://cdn.kustomerapp.com https://www.google.com https://accounts.google.com https://staticxx.facebook.com https://www.facebook.com https://www.youtube.com https://gleam.io/ https://optimize.google.com https://*.checkout.com https://pay.google.com https://*.twitter.com https://d32exi8v9av3ux.cloudfront.net 'self' data: blob: https://www.googletagmanager.com https://tagmanager.google.com https://tbl.tradedoubler.com https://connect.facebook.net https://luno.go2cloud.org https://*.visualwebsiteoptimizer.com https://*.vwo.com 184.173.187.125 184.173.187.124 184.173.170.150 184.154.216.62 184.154.216.61 184.154.191.163 184.154.216.57 208.52.182.159 50.97.40.236 208.43.245.133 https://anchor.fm; 1
frame-ancestors 'self' *.radware.com 1
report-uri /csp-violation; default-src 'self' https://*.huntress.io; font-src 'self' data: https://fonts.gstatic.com https://beacon-v2.helpscout.net https://heapanalytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://beacon-v2.helpscout.net https://heapanalytics.com https://checkout.stripe.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://checkout.stripe.com; script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://www.google-analytics.com https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.heapanalytics.com https://heapanalytics.com https://beacon-v2.helpscout.net https://d12wqas9hcki3z.cloudfront.net https://d33v4339jhl8k0.cloudfront.net https://checkout.stripe.com https://js.stripe.com https://canny.io; connect-src 'self' https://*.huntress.io https://huntress-user-uploads.s3.amazonaws.com https://bam.nr-data.net https://d3hb14vkzrxvla.cloudfront.net https://beaconapi.helpscout.net https://chatapi.helpscout.net wss://*.pusher.com https://*.sumologic.com https://heapanalytics.com https://checkout.stripe.com https://canny.io; frame-src 'self' https://www.google.com https://beacon-v2.helpscout.net https://checkout.stripe.com https://js.stripe.com https://canny.io https://changelog-widget.canny.io; object-src 'self' https://beacon-v2.helpscout.net; img-src 'self' data: https://*.huntress.io https://huntress-user-uploads.s3.amazonaws.com https://www.google-analytics.com https://heapanalytics.com https://*.gravatar.com https://beacon-v2.helpscout.net https://d33v4339jhl8k0.cloudfront.net https://linkmaker.itunes.apple.com https://*.stripe.com; media-src 'self' https://beacon-v2.helpscout.net 1
frame-ancestors https://uwv.blueconic.net; 1
default-src 'self'; child-src 'self' share.intercom.io connect.facebook.net fast.wistia.com fast.wistia.net googleads.g.doubleclick.net *.hotjar.com bid.g.doubleclick.net 10317493.fls.doubleclick.net 10366747.fls.doubleclick.net youtube.com www.youtube.com js.stripe.com www.facebook.com staticxx.facebook.com *.soundcloud.com ti.to *.tito.io *.cdn.optimizely.com tpc.googlesyndication.com www.google.com ethn.io *.quora.com intercom-sheets.com app-ab27.marketo.com www.intercom-reporting.com d2c7xlmseob604.cloudfront.net js.intercomcdn.com insight.adsrvr.org; connect-src 'self'   www.intercom.com app.intercom.io app.intercom.com api.intercom.io api-visitor-analytics.intercom.com api-iam.intercom.io api-ping.intercom.io api.smartling.com js.intercomcdn.com nexus-websocket-a.intercom.io nexus-websocket-test.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-test.intercom.io store.intercomassets.com widget.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-test.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com abrtp1.marketo.com abrtp1-cdn.marketo.com app.getsentry.com stats.g.doubleclick.net www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com sentry.io www.facebook.com *.akamaihd.net *.optimizely.com *.wistia.com *.wistia.net *.quora.com *.soundcloud.com *.sndcdn.com *.clearbit.com 258-clw-344.mktoresp.com bat.bing.com cdn.bizible.com d2c7xlmseob604.cloudfront.net rum-collector-2.pingdom.net rum-http-intake.logs.datadoghq.com public-trace-http-intake.logs.datadoghq.com heapanalytics.com; font-src data: https: ; img-src data: blob: https: ; media-src data: blob: https: ; object-src 'none'; script-src 'self' 'unsafe-eval' app.intercom.io app.intercom.com js.intercomcdn.com store.intercomassets.com marketing.intercomassets.com widget.intercom.io ajax.googleapis.com analytics.twitter.com abrtp1.marketo.com abrtp1-cdn.marketo.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com bat.bing.com cdn-assets-prod.s3.amazonaws.com cdn.optimizely.com cdn3.optimizely.com cdn.ravenjs.com browser.sentry-cdn.com connect.facebook.net distillery.wistia.com distillery-main.wistia.com ethn.io fast.wistia.com fast.wistia.net ga.clearbit.com googleads.g.doubleclick.net sjs.bizographics.com js.stripe.com munchkin.marketo.net platform.twitter.com reveal.clearbit.com rtp-static.marketo.com script.hotjar.com secure.adnxs.com snap.licdn.com static.ads-twitter.com static.hotjar.com stats.g.doubleclick.net store.intercom.io ti.to tpc.googlesyndication.com www.datadoghq-browser-agent.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com *.jquery.com *.tito.io *.linkedin.com *.quora.com *.soundcloud.com *.sndcdn.com *.widerfunnel.com 'strict-dynamic' 'nonce-ZmQ2YTFmNjItMGJhNy00NTE2LWFlMjgtZDg1ZDk0NDQzMDky'; style-src 'self' 'unsafe-inline' *.tito.io app-ab27.marketo.com marketing.intercomassets.com maxcdn.bootstrapcdn.com rtp-static.marketo.com fonts.googleapis.com tagmanager.google.com heapanalytics.com; worker-src data: blob: 1
frame-ancestors 'self' zhms.cn 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.navexglobal.com *.ethicspoint.com *.ethicspointvp.com *.navexone.com *.navexglobal.com ethicspointvp.com cdn.pendo.io; connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.navexglobal.com *.ethicspoint.com *.ethicspointvp.com *.navexone.com *.navexglobal.com ethicspointvp.com *.truste.com *.newrelic.com *.nr-data.net *.pendo.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ethicspoint.com *.ethicspointvp.com *.navexone.com *.navexglobal.com ethicspointvp.com *.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5068799715311616.storage.googleapis.com *.truste.com *.newrelic.com *.nr-data.net ajax.googleapis.com ; img-src 'self' data: *.ethicspoint.com *.ethicspointvp.com *.navexone.com *.navexglobal.com ethicspointvp.com *.truste.com *.pendo.io pendo-static-5068799715311616.storage.googleapis.com *.navexglobal.com; frame-src 'self' 'unsafe-eval' *.navexglobal.com *.policytech.com *.ethicspoint.com *.ethicspointvp.com *.navexone.com *.navexglobal.com ethicspointvp.com player.vimeo.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.pendo.io pendo-static-5068799715311616.storage.googleapis.com fonts.googleapis.com; font-src 'self' fonts.gstatic.com ajax.googleapis.com; frame-ancestors 'self' *.pendo.io *.ethicspointvp.com; 1
default-src 'self'; script-src cdn.bookboon.io minio.stage.bookboon.io  script.crazyegg.com *.stripe.com *.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ blob: 'unsafe-eval' 'unsafe-inline' 'self'; style-src *.googleapis.com blob: 'unsafe-inline' 'self'; img-src bookboon.com boont.co *.google-analytics.com www.gravatar.com staging.content.stage.bookboon.io 'self'; connect-src boont.co *.stripe.com *.crazyegg.com sentry.bookboon.io 'self'; font-src fonts.gstatic.com data: 'self'; frame-src *.stripe.com https://www.google.com/recaptcha/ 'self'; media-src *.content.bookboon.com content.bookboon.com minio.stage.bookboon.io 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.facebook.net https://*.twitter.com https://*.linkedin.com https://www.google-analytics.com https://cdn.jsdelivr.net https://code.jquery.com https://cdn.syndication.twimg.com https://cdn.rawgit.com  https://static.addtoany.com  1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.powerbi.com *.mohw.gov.tw *.highcharts.com *.googletagmanager.com www.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.google.com.tw *.facebook.com *.facebook.net *.youtube.com youtu.be;frame-ancestors 'none'; 1
frame-ancestors https://*.codetantra.com; frame-src https://*.codetantra.com https://sso.iitb.ac.in https://ct-public-bucket.s3.ap-south-1.amazonaws.com; 1
frame-ancestors 'self' *.smhi.se klimatanpassning.se sudplan.eu nordicadaptation2018.net http://infoteve.com ; report-uri /userv/cspreporting 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.marketo.com *.marketo.net *.googletagmanager.com *.facebook.net static.ads-twitter.com *.evidon.com *.google-analytics.com sjs.bizographics.com *.bizible.com *.ge.com *.bhge.com *.youtube.com *.ytimg.com *.linkedin.com *.twitter.com gateway.zscalertwo.net *.newrelic.com vidassets.terminus.services blob: doug1izaerwt3.cloudfront.net s.ytimg.com *.demandbase.com data: nasdaqir-prod.apigee.net *.hotjar.com *.zscalertwo.net j.6sc.co bam.nr-data.net fssfed.stage.ge.com cdnjs.cloudflare.com *.kissmetrics.com *.googleadservices.com googleads.g.doubleclick.net *.google.com *.gstatic.com s0-azure.assets-yammer.com maps.googleapis.com cdn.syndication.twimg.com addtocalendar.com maxcdn.bootstrapcdn.com snap.licdn.com ajax.googleapis.com js.createsend1.com *.bing.com https://captcha.gecirtnotification.com *.cloudfront.net https://staging-bakerhughs-event.netlify.app https://bakerhughes-subsea-connect-event.netlify.app plausible.io *.cookielaw.org *.onetrust.com; media-src 'self' *.vimeo.com *.youtube.com https://gateway.zscalertwo.net https://fpdl.vimeocdn.com data: https://designbysoap.b-cdn.net; frame-src 'self' bhge.acquiadam.com *.webdamdb.com  *.zscalertwo.net fssfedpitc.ge.com fssauth.ge.com *.webdamdb.com *.facebook.com *.marketo.com *.youtube.com *.hotjar.com *.adobe.com connect.facebook.net bid.g.doubleclick.net youtu.be *.evidon.com spo-teamsite.ge.com *.google.com spo-teamsite.ge.com fss.gecompany.com https://fss.gecompany.com/ https://ssocentralck.registrar.ge.com/ https://affiliateservices.gecompany.com/ https://ssologin.ssogen2.corporate.ge.com/ https://ssologin.ssogen2.corporate.ge.com/ https://rsologin.ssogen2.corporate.ge.com/ https://smloginmap.ssogen2.corporate.ge.com/ *.yammer.com login.microsoftonline.com fssfedma.o365.ge.com platform.linkedin.com syndication.twitter.com platform.twitter.com www.linkedin.com  https://www.gechannelconnect.com/ https://staging60.gechannelconnect.com/ https://player.vimeo.com/; frame-ancestors 'self' data: fonts.gstatic.com cdnjs.cloudflare.com; font-src 'self' data: fonts.gstatic.com *.cloudflare.com themes.googleusercontent.com *.hotjar.com; report-uri /report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://yastatic.net https://code.jquery.com https://stat.sputnik.ru https://gosmonitor.ru https://www.googletagmanager.com https://www.google-analytics.com https://mc.yandex.ru https://api-maps.yandex.ru https://*.maps.yandex.net https://tcr.tynt.com https://sc.tynt.com https://de.tynt.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://api-public.addthis.com https://vk.com https://www.odnoklassniki.ru https://connect.ok.ru; style-src 'self' 'unsafe-inline' https://gosmonitor.ru https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://stat.sputnik.ru https://mc.yandex.ru https://release-datatron.minfin.ru; frame-src 'self' https://gosmonitor.ru https://skad.minfin.ru https://skadapptest.minfin.ru https://historylib.minfin.ru https://api-maps.yandex.ru https://www.youtube.com https://s7.addthis.com https://www.ntv.ru; img-src 'self' data: https://stat.sputnik.ru https://gosmonitor.ru https://www.google-analytics.com https://stats.g.doubleclick.net https://ic.tynt.com https://mc.yandex.ru https://api-maps.yandex.ru https://*.maps.yandex.net; 1
default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; font-src *; connect-src *; img-src * blob: data:; frame-src *; media-src *; frame-ancestors 'self' 1
default-src 'self' *.latoken.com; font-src 'self' 'unsafe-inline' fonts.gstatic.com; style-src 'self' 'unsafe-inline' *.visualwebsiteoptimizer.com static.tildacdn.com fonts.googleapis.com tilda.ws; manifest-src 'self' 'unsafe-inline' cdn-new.latoken.com; child-src self *.latoken.com; script-src 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com gso.amocrm.ru gso.amocrm.com latoken.breezy.hr static.cloudflareinsights.com *.latoken.com connect.facebook.net mc.yandex.ru *.smartlook.com *.google-analytics.com *.googletagmanager.com *.youtube.com *.tradingview.com *.zdassets.com *.zopim.com www.google.com www.gstatic.com 'self'; connect-src 'self' *.latoken.com wss://*.latoken.com mc.yandex.ru *.smartlook.cloud *.doubleclick.net *.google-analytics.com *.breezy.hr *.zdassets.com *.zendesk.com *.zopim.com *.locize.app sentry.latoken.com:8443 www.gstatic.com wss://widget-mediator.zopim.com api.mercuryo.io www.facebook.com stat.tildacdn.com gso.amocrm.com gso.amocrm.ru forms.tildacdn.com wss://*.cbox.ws widget.mercuryo.io hooks.zapier.com *.visualwebsiteoptimizer.com; frame-src latoken.com *.latoken.com www.google.com api.mercuryo.io pay.itez.com trade-ui.coinify.com widget.xanpool.com embed.bitrefill.com pay.itez.com trade-ui.coinify.com widget.xanpool.com www.youtube.com www.facebook.com gso.amocrm.com gso.amocrm.ru *.cbox.ws widget.mercuryo.io; img-src 'self' latoken.com *.latoken.com data: www.gstatic.com www.google-analytics.com www.facebook.com mc.yandex.ru *.tildacdn.com www.google.com www.google.ru img.youtube.com pbs.twimg.com gso.amocrm.com gso.amocrm.ru *.visualwebsiteoptimizer.com; worker-src self latoken.com *.latoken.com blob: 1
style-src 'self' 'unsafe-inline' *.gac.edu *.gustavus.edu tennisandlifecamps.org www.gstatic.com *.googleapis.com www.reservecloud.com *.curator.io; 1
frame-ancestors 'unsafe-inline' 'self' http://jota-joti.docker.localhost:8000 http://jota-joti.info http://learning-scout.docker.localhost:8000 http://worldjotajoti.info http://www.jotajoti.info http://www.worldjotajoti.info https://jota-joti.develop.ratioweb.pl https://jota-joti.docker.localhost:8000 https://jota-joti.info https://learning.scout.org https://s7.addthis.com https://scouts-staging.infullmobile.com https://worldjotajoti.info https://www.jotajoti.info https://www.worldjotajoti.info 1
frame-ancestors 'self' http://stfrontdeskstg.smartone.com http://stfrontdesk.smartone.com http://smartone-pro.redso.com.hk https://smartone-pro.redso.com.hk 1
frame-src * 'self' https://teams.microsoft.com https://*.youtube.com; 1
frame-ancestors *.lawrence.edu 1
frame-ancestors 'self' https://neo.deutsche-wirtschafts-nachrichten.de 1
default-src https: 'self' *.google.com https://widgets.turnto.com 'sha256-mmA4m52ZWPKWAzDvKQbF7Qhx9VHCZ2pcEdC0f9Xn/Po='; img-src https: data:; style-src 'self' *.googleapis.com *.google.com https://widgets.turnto.com 'sha256-UvsJ5gtL0c/whxmyVt4YoNv7YnPUd0tANZOlq3NshXE=' 'sha256-z0kguVeUlbcxez4SqrO86oejphhqKDFfdCPv4yuhe70=' 'sha256-F7P9UGrwDw2S+mmGfNjm0kP7JoWu2pG7jp96fpSdB7o=' 'sha256-5I0k/VqCDMpiDAoq1eqY3rnuhpP/YY/XHaCPlqvPjwE=' 'sha256-vs9j4DQ6NrTFzqr+WgLFutUEFINnEmB2UGZtgJuv53M=' 'sha256-dnk3F1ZGrgh9Kvk9Vn3ptiaFUoFeGRayv9lz2urXGw8=' 'sha256-V35h8FtGH4p0yIQ7N4YgUHm1WgTAWh72NT+CZjq6/gA=' 'sha256-EqHL6dM74npnc3dlTfDjshGC9aaZRfQRUkDGa028G5Q=' 'sha256-fjvAtStaFBxvVNdldskgty047ARB1tLsZ767Gk6hPuk=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-/4YlUlisxufO6wbKvYp4xV8Hkzxm85+1Tb31SjmAox0=' 'sha256-a2VR/Wq1VPr0+3GRY+lEmAQm7wjwwnDtPpcCPs2zTrw=' 'sha256-/VVOq+Ws/EiUxf2CU6tsqsHdOWqBgHSgwBPqCTjYD3U=' 'sha256-2WQZQFa8KGAig8CPptpS8JDqetQ2jb5arMlI6fTGWiU=' 'sha256-g9aHNH7iF2hhGZYtVVd5mKQSnyLPmXWw5gwiuxBVonI=' 'sha256-VjKqXV9i0mo5RzxvaQpz7qQA91PkjLVqLQGYNI4Cc/I=' 'sha256-iSpdzct2G1Kfyci6Xt5l+iguE7Ni3MEvlbjUvEsbK5M=' 'sha256-mmA4m52ZWPKWAzDvKQbF7Qhx9VHCZ2pcEdC0f9Xn/Po=';  script-src 'self' https: 'nonce-22d1d9da9edb41b8bd7bbc877b5da5bc'; report-uri /csp-report 1
frame-ancestors https://*.tigo.com.bo https://www.tigo.com.co https://www.tigo.cr https://residencial.tigo.com.hn https://www.tigo.com.ni; 1
img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://optimize.google.com https://ssl.gstatic.com https://www.gstatic.com https://cdn.paddle.com https://v2.zopim.com https://*.zopim.io; media-src https://v2.zopim.com https://static.zdassets.com; object-src 'none'; worker-src 'none'; style-src 'self' 'unsafe-inline' https://cdn.paddle.com https://fonts.googleapis.com https://optimize.google.com https://tagmanager.google.com; font-src 'self' data: https://fonts.gstatic.com https://v2.zopim.com; frame-ancestors 'none'; report-uri /api/v1/reports; 1
frame-ancestors 'self' live.sagepay.com www1.siksilk.com 1
default-src https:; connect-src *; font-src https: data:; frame-src https: ; img-src https: data: blob:;  media-src https:; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' https:;  style-src 'unsafe-inline' https:; report-uri /csp_violation_report_endpoint 1
base-uri 'none'; default-src 'self' data: https: wss:; style-src 'self' data: https: wss: 'unsafe-inline'; media-src blob: https://*.brightcovecdn.com https://*.boltdns.net https://*.media.brightcove.com https://*.llnw.net https://*.llnwd.net https://*.akafms.net https://*.akamaihd.net https://shs-components.infopark.io https://siemens-healthineers.com; worker-src blob:; script-src data: blob: 'unsafe-inline' 'unsafe-eval' 'self' https://api.scrivito.com https://assets.scrivito.com https://*.scrvt.com https://*.siemens.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://tools.adlytics.net https://charts3.equitystory.com/ https://irpages2.eqs.com/ https://shs-components.infopark.io https://players.brightcove.net https://vjs.zencdn.net https://siemenshealthcare.postclickmarketing.com https://ionfiles.scribblecdn.net https://manifest.prod.boltdns.net https://*.brightcovecdn.com https://www.adobetag.com https://static.adlytics.net; object-src 'none'; block-all-mixed-content 1
frame-ancestors 'self' https://*.fanbox.cc 1
default-src 'self' *.conac.cn *.jiathis.com *.baidu.com *.bshare.cn *.qq.com *.kaipuyun.cn 'unsafe-inline' 'unsafe-eval'; 1
frame-ancestors 'self' https://legalinvoice.infocert.it/ https://www.camerfirma.com 1
frame-ancestors *.qzwb.com 1
frame-ancestors *.dowjones.net *.fnlondon.com *.efinancialnews.com *.onservo.com 1
frame-ancestors 'self' *.wallstreetmojo.com *.educba.com 1
report-uri https://www.yelp.com/csp_block?id=05aecf9ad678c952&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609211260; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
default-src 'self'; frame-src 'self' unicaja.webfg.com univia.unicaja.es univiapru.unicaja.es 8020496.fls.doubleclick.net www.youtube.com www.google.com asp.quefondos.com; media-src *; img-src 'self' data: *; script-src 'self' 'unsafe-eval' 'unsafe-inline' fonts.gstatic.com www.gstatic.com fonts.gstatic.com 8020496.fls.doubleclick.net  www.unicajabanco.es www.google.com www.google-analytics.com  maps.googleapis.com connect.facebook.net googleads.g.doubleclick.net www.unicajabanco.es.seg.js www.googleadservices.com www.unicajabanco.com unicaja-prod.adobecqms.net www.unicajabanco.com chat.kommunicate.io www.googletagmanager.com www.google.com cdnjs.cloudflare.com widget.kommunicate.io www.unicajabanco.es.seg.js www.unicajabanco.com.seg.js www.google-analytics.com cdn.kommunicate.io cdn.applozic.com; style-src * 'unsafe-inline'; font-src *; connect-src 'self' data: * 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' www.synomia-autocompletion.com s7.addthis.com m.addthis.com api.dmcdn.net 1
default-src 'self' cdn.eurid.eu; style-src 'self' maxcdn.bootstrapcdn.com 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com eurid.matomo.cloud eurid.piwikpro.com www.gstatic.com *.riddle.com ; font-src 'self' maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com; script-src 'self' maxcdn.bootstrapcdn.com 'unsafe-inline' 'unsafe-eval' cdn.eurid.eu fonts.googleapis.com maps.google.com maps.googleapis.com www.google.com www.gstatic.com cdnjs.cloudflare.com connect.facebook.net *.twitter.com eurid.matomo.cloud www.googletagmanager.com www.google-analytics.com *.cookiebot.com *.riddle.com embed.ex.co *.playbuzz.com *.youtube.com *.googleadservices.com *.ytimg.com *.doubleclick.net f.vimeocdn.com *.recaptcha.net recaptcha.net ; img-src 'self' 'unsafe-inline' maps.google.com maps.googleapis.com maps.gstatic.com csi.gstatic.com www.gstatic.com www.google.com *.twitter.com www.facebook.com eurid.matomo.cloud eurid.piwikpro.com www.google-analytics.com data: *.outbrain.com *.playbuzz.com *.google.be *.ytimg.com *.doubleclick.net ; frame-src 'unsafe-inline' *.cookiebot.com *.riddle.com embed.ex.co *.youtube.com vimeo.com player.vimeo.com *.google.com *.recaptcha.net vod-progressive.akamaized.net ; child-src 'self' cdn.embedly.com www.youtube.com *.twitter.com staticxx.facebook.com www.facebook.com  www.gstatic.com www.google.com; connect-src 'self' *.ex.co *.playbuzz.com *.doubleclick.net eurid.matomo.cloud 1
child-src 'self' https://twitter.com https://cdn.syndication.twimg.com https://platform.twitter.com *.moatads.com *.addthisedge.com *.npl.co.uk *.e-npl.co.uk *.scribd.com *.issuu.com *.google.com *.amrislive.com player.vimeo.com s7.addthis.com www.youtube.com *.webspellchecker.net npldigital.atlassian.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://platform.twitter.com https://twitter.com https://cdn.syndication.twimg.com *.moatads.com *.addthisedge.com  script.crazyegg.com fast.fonts.net m.addthisedge.com m.addthis.com s7.addthis.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com maps.googleapis.com *.google.com *.webspellchecker.net npldigital.atlassian.net; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' wss: https: data: blob: android-webview-video-poster:; frame-ancestors 'self'; 1
frame-ancestors about: 'self' https://*.airtransat.com https://*.transat.com 1
frame-ancestors 'self' https://solutions.sciquest.com https://usertest.sciquest.com; 1
default-src 'self'; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' umcdn.um.ac.ir; style-src 'self' 'unsafe-inline' umcdn.um.ac.ir; img-src 'self' data: https://trustseal.enamad.ir www.um.ac.ir um.ac.ir; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; form-action 'self' profdoc.um.ac.ir; frame-src 'self'; worker-src 'self' data: blob:; block-all-mixed-content 1
default-src https://neverbounce.com 'unsafe-inline' https://* ; script-src https://neverbounce.com 'self' 'unsafe-eval' 'unsafe-inline' https://*; connect-src https://neverbounce.com https://* wss://*; style-src https://neverbounce.com 'unsafe-inline' https://* ; frame-src https://neverbounce.com 'self' https://* ; child-src https://neverbounce.com 'self' https://* ; worker-src https://neverbounce.com 'self' https://* ; font-src https://neverbounce.com data: https://* ; img-src https://neverbounce.com data: https://* ; object-src 'none' ; report-uri https://sentry.neverbounce.com/api/4/security/?sentry_key=4a166cf492e041cda3079631d36bb76d&sentry_environment=production&sentry_release=0.2.371 1
default-src 'self' *.paizo.com *.kc-usercontent.com; img-src 'self' *.paizo.com *.kc-usercontent.com *.ytimg.com; connect-src 'self' https://*.paizo.com https://*.kontent.ai; font-src 'self' https://fonts.gstatic.com https://*.typekit.net; frame-src *.paizo.com *.youtube.com; script-src 'self' 'self' 'unsafe-inline' 'unsafe-eval' https://*.paizo.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.typekit.net 1
default-src 'self' *.uast.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io https://www.aparat.com http://info.uast.ac.ir/searchreshte/defaultm.aspx; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com https://www.aparat.com http://info.uast.ac.ir/searchreshte/defaultm.aspx; frame-ancestors 'self' https://trustseal.enamad.ir 1
frame-ancestors 'self' https://documentation.sisense.com/; 1
default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.baua.de; object-src 'self' www.baua.de; media-src 'self' www.baua.de; frame-src www.baua.de; img-src 'self' data: www.baua.de uvi.bfs.de; frame-ancestors 'self'; 1
default-src 'self' https://www.youtube.com/ https://geoip-js.maxmind.com/; style-src 'self' https://fonts.googleapis.com/; img-src 'self' data: https://avatars0.githubusercontent.com https://avatars1.githubusercontent.com https://avatars2.githubusercontent.com https://avatars3.githubusercontent.com https://avatars4.githubusercontent.com https://avatars5.githubusercontent.com https://avatars6.githubusercontent.com https://avatars7.githubusercontent.com https://avatars8.githubusercontent.com https://www.google-analytics.com; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://js.maxmind.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com 1
block-all-mixed-content; upgrade-insecure-requests; base-uri 'self' *.decathlon.es *.dynamicyield.com *.dynamicyield.eu cdn.jsdelivr.net; default-src 'self' 'unsafe-eval' 'unsafe-inline' *.abtasty.com *.akstat.io/ *.bing.com *.braintree-api.com *.braintreegateway.com *.brightcove.com *.cloudfront.net *.commander1.com *.commandersact.com *.cube-net.org *.cube-net.pub *.custhelp.com *.datadoghq.eu *.decathlon.com *.decathlon.es *.decathlon.net *.demdex.net *.doubleclick.net *.dynamicyield.com *.dynamicyield.eu *.fitanalytics.com *.go-mpulse.net *.googleapis.com *.googleusercontent.com *.iadvize.com *.mopinion.com *.mydecathlon.com *.oppwa.com *.paypal.com *.s3.eu-west-1.amazonaws.com *.sc-static.net *.tagcommander.com *.tiendeo.com/ *.tradetracker.net *.woosmap.com *.y-track.com *.youtube.com abtastylab.com adserving.ancoraplatform.com api.oney.io apis.google.com app.beampulse.com appmobile-bridge-js.s3-eu-west-1.amazonaws.com blob: bp-1c51.kxcdn.com browser-update.org bs.serving-sys.com cdn.jsdelivr.net cdnjs.cloudflare.com code.jquery.com code.jquery.com/ui/1.12.1/jquery-ui.js code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css comunidad.decathlon.es connect.facebook.net contents.mediadecathlon.com ct.pinterest.com cx.atdmt.com data: decathlon-prod.pertimm.net decathlon-v2-preprod.pertimm.net decathlon-v2-prod.pertimm.net dis.eu.criteo.com fonts.gstatic.com google-maps-utility-library-v3.googlecode.com gum.criteo.com https://*.algolia.net https://*.decathlon.io https://*.mformedia.es https://*.numerized.com https://*.numerized.fr https://*.privacy-center.org https://*.tiktok.com https://*.trackjs.com https://*.trylive.com https://api.booxi.eu  https://bf97725pbp.bf.dynatrace.com https://booxi-api-be.appspot.com https://brightcove.hs.llnwd.net https://brightcove.vo.llnwd.net https://cdn.trustcommander.net https://emersya.com https://js-cdn.dynatrace.com https://js.squareup.com https://js.stripe.com https://lh3.ggpht.com https://m.stripe.com https://m.stripe.network https://media.alltricks.com https://media.alltricks.com https://quechua.v-cult.com https://s.yimg.com/ https://site.booxi.com https://site.booxi.eu https://smart-engine-dot-booxi-api-be.appspot.com https://ssl.google-analytics.com https://tradetrakerscript-dot-spain-platform-preprod.appspot.com https://tradetrakerscript-dot-spain-platform.appspot.com https://ui.onepay.decathlon.io/main.js https://wurfl.io https://www.booxi.eu ib.adnxs.com keepyeyes.cube-net.org localhost maps.google.com maps.gstatic.com maxcdn.bootstrapcdn.com onepay-ui.decathlon.net oney-staging.azure-api.net operacionesdecathlon.es oppwa.com p.teads.tv pixel.efike.co platform.twitter.com players.brightcove.net pre-comunidad.decathlon.es preprod-keepyeyes.cube-net.org privacy.trustcommander.net pro-decathloneventostienda.s3.amazonaws.com px.sunmedia.tv recommendation-js.woosmap.com s.go-mpulse.net s.pinimg.com s.ytimg.com s3.eu-west-1.amazonaws.com secure-ds.serving-sys.com secure.adnxs.com smc.demdex.net sslwidget.criteo.com static-cdn.mydecathlon.com static.criteo.net staticxx.faceboook.com tm.tradetracker.net tr.outbrain.com track.adform.net vjs.zencdn.net ws: wss://*.iadvize.com www.decathlon.fr www.facebook.com www.google-analytics.com www.google.com www.google.es www.google.fr www.googleadservices.com www.googletagmanager.com www.gstatic.com; font-src 'self' *.brightcove.com *.decathlon.es *.dynamicyield.com *.dynamicyield.eu *.iadvize.com blob: cdn.jsdelivr.net cdnjs.cloudflare.com customizations.fitanalytics.com data: fonts.gstatic.com keepyeyes.cube-net.org localhost maxcdn.bootstrapcdn.com players.brightcove.net preprod-keepyeyes.cube-net.org static-cdn.mydecathlon.com vjs.zencdn.net widget.fitanalytics.com; media-src 'self' *.brightcove.com *.decathlon.es blob: brightcove.hs.llnwd.net https://brightcove.hs.llnwd.net https://brightcove.vo.llnwd.net https://media.alltricks.com https://media.alltricks.com pixel.efike.co players.brightcove.net; worker-src 'self' 'unsafe-eval' 'unsafe-inline' *.decathlon.es blob:; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com; frame-ancestors 'self' https://viajala.com.mx; img-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.google-analytics.com *.googleapis.com *.fusion.com *.google.com *.google.se *.google.com.mx *.vivaaerobus.com *.ezyflight.se *.facebook.com *.cloudflare.com *.ckeditor.com *.doubleclick.net *.placeholder.com *.googletraveladservices.com *.kayak.com *.criteo.com *.criteo.net *.yldr.io *.cartrawler.com services.paynet.com.mx api.openpay.mx ota-cars.imgix.net *.bing.com platform-api.sharethis.com cdn.apixu.com ts.tradetracker.net ad.soicos.com *.intentmedia.net data: *.cdn-net.com *.paypalobjects.com *.paypal.com *.cdn.viajala.com *.viajala.com viajala.com *.playbuzz.com *.office.com *.uplift-platform.com *.openpay.mx ct-supplierimage.imgix.net ct-microsites-core.imgix.net cdn.smooch.io media.smooch.io www.gravatar.com *.cloudfront.net *.usabilla.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.fusion.com *.google.com *.google.com.mx maxcdn.bootstrapcdn.com *.vivaaerobus.com *.ezyflight.se *.cloudflare.com *.hotjar.com *.googleapis.com *.ckeditor.com *.cartrawler.com platform-api.sharethis.com cdn.apixu.com *.paypal.com *.playbuzz.com *.office.com cdn.uplift-platform.com *.uplift.com cdn.smooch.io *.cloudfront.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.googletagservices.com cdnjs.cloudflare.com code.jquery.com maxcdn.bootstrapcdn.com *.google.com cdn.jsdelivr.net *.fusion.com *.google-analytics.com *.google.se *.googletagmanager.com *.g.doubleclick.net *.facebook.net *.hotjar.com *.googleadservices.com *.ckeditor.com *.cloudfront.net *.boxever.com *.cdn.intentmedia.net *.google-analytics.com *.yldr.io *.gstatic.com *.criteo.com *.criteo.net a.intentmedia.net *.google.com.mx *.cartrawler.com bat.bing.com platform-api.sharethis.com cdn.apixu.com tm.tradetracker.net *.intentmedia.net *.viajamas.com 201.131.2.241 *.tradetracker.net *.crazyegg.com *.skyscanner.net *.cdn-net.com *.paypal.com *.paypalobjects.com *.cdn.viajala.com *.viajala.com *.bidflyer.com *.kueskipay.com *.kueskipay.io *.playbuzz.com *.office.com *.ipify.org cdn.uplift-platform.com *.uplift.com cdn.smooch.io api.smooch.io *.appboycdn.com *.usabilla.com *.securitytrfx.com; frame-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.booking.com *.rentalcars.com *.hotjar.com *.google.com *.youtube.com *.criteo.com *.facebook.com *.facebook.net *.doubleclick.net *.safetypay.com *.e-tsw.com *.cartrawler.com platform-api.sharethis.com cdn.apixu.com *.intentmedia.net *.cdn-net.com *.sandbox.paypal.com *.paypal.com us.creativecdn.com *.playbuzz.com *.office.com *.uplift.com d6tizftlrpuof.cloudfront.net *.usabilla.com; font-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.bootstrapcdn.com *.gstatic.com *.cartrawler.com *.playbuzz.com *.office.com cdn.smooch.io; connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com wss://*.bidflyer.com *.fusion.com *.facebook.com *.google-analytics.com *.viajamas.com *.intentmedia.net *.skyscanner.net *.cdn-net.com *.paypal.com *.bidflyer.com 3kxrt0l29e.execute-api.us-east-1.amazonaws.com vmvpz7tc32.execute-api.us-east-1.amazonaws.com enc1wnyb87.execute-api.us-east-1.amazonaws.com 6ytvy2ekla.execute-api.us-east-1.amazonaws.com pu8ewcfeqc.execute-api.us-east-1.amazonaws.com bywvti3o0d.execute-api.us-east-1.amazonaws.com benwyu65h1.execute-api.us-east-1.amazonaws.com 2gvsqxuo5c.execute-api.us-east-1.amazonaws.com 9nwmwnkc3i.execute-api.us-east-1.amazonaws.com 3yd2nmljr8.execute-api.us-east-1.amazonaws.com kbgz8o28m3.execute-api.us-east-1.amazonaws.com rpa944kq0e.execute-api.us-east-1.amazonaws.com fqr97a9mdg.execute-api.us-east-1.amazonaws.com api.kueskipay.io/v1/validate-keys api.kueskipay.com/v1/validate-keys api.kueskipay.io/v1/payments api.kueskipay.com/v1/payments api.kueskipay.com/v1/tracking *.playbuzz.com *.office.com *.uplift-platform.com *.cartrawler.com api.smooch.io 5e46bc82c3d8d5000fb5c147.webloader.smooch.io 5e46bc82c3d8d5000fb5c147.config.smooch.io sdk.iad-03.braze.com wss://api.smooch.io api.ipify.org api.boxever.com api.usabilla.com fcxagjrscb.execute-api.us-east-1.amazonaws.com aymr6n32mf.execute-api.us-east-1.amazonaws.com d6tizftlrpuof.cloudfront.net *.usabilla.com *.securitytrfx.com docs.google.com; form-action 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.vivaaerobus.com *.ezyflight.se *.facebook.net *.facebook.com *.e-tsw.com *.cdn-net.com *.playbuzz.com *.office.com docs.google.com; media-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com cdn.smooch.io; 1
frame-ancestors 'self' editor.construct.net preview.construct.net; 1
default-src 'self' https://trillian.cachefly.net https://static.olark.com; script-src 'self' https://trillian.cachefly.net https://*.olark.com https://www.google-analytics.com https://ct.capterra.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hsleadflows.net https://js.hs-banner.com; style-src 'self' https://trillian.cachefly.net https://static.olark.com 'unsafe-inline'; object-src 'none'; base-uri 'none'; connect-src 'self' https:; media-src 'self' https:; img-src 'self' http: https: data:; 1
self *.24hourfitness.com 1
default-src 'unsafe-inline' * 'unsafe-eval' data: https: blob:; img-src 'unsafe-inline' data: mediastream: blob: * android-webview-video-poster:; font-src 'unsafe-inline' * 'unsafe-eval' data:; form-action https:; report-uri https://sagvhts6ostb5kz5guxaxuzi.httpschecker.net/report 1
frame-ancestors 'self' https://onlineapplication.targobank.de https://onlineapplication.uat.targobank.de 1
script-src https://cs.money wss://ws-new.cs.money https://cs.money 'self' 'unsafe-inline' 'unsafe-eval' cs.money new.cs.money https://support.cs.money https://tagmanager.google.com https://www.googletagmanager.com www.google-analytics.com https://cdn.amplitude.com https://cdn.lr-ingest.io/logger.min.js cdn.logrocket.io cs.money mc.yandex.ru https://api.basisid.com/ https://gleam.io; worker-src 'self' data: blob:; object-src https://cs.money https://cs.money; media-src https://cs.money https://cs.money; frame-src https://cs.money https://cs.money http://www.youtube.com https://europe-api.basisid.com/ https://asia-api.basisid.com/ https://cashier.bridgerpay.com/ 1
frame-ancestors https://tongji.baidu.com/ 1
frame-ancestors https://cloudsecurityalliance.org https://knowledge.cloudsecurityalliance.org https://circle.cloudsecurityalliance.org https://360.articulate.com https://articulateusercontent.com https://sj-cdn.net 1
img-src * data: blob: 'unsafe-inline';object-src *;frame-src *; 1
frame-ancestors 'self' *.svenskakyrkan.se https://*.risevision.com https://www.risevision.com/ http://*.kyrkanstrygghetsrad.se/ http://www.kyrkanstrygghetsrad.se/; 1
default-src 'self' rightel.ir *.rightel.ir webchat-engine.rightel.ir:* www.google.com www.google-analytics.com ssl.google-analytics.com trustseal.enamad.ir stats.g.doubleclick.net cdnjs.cloudflare.com cdn.sibche.com xslt.alexa.com *.openstreetmap.org api.pushe.co 'unsafe-eval' 'unsafe-inline' data: 1
frame-ancestors 'self' http://www.1001spiele.de 1
connect-src 'self' https: https://api.womany.net https://say.womany.net https://cn-api.womany.net https://en-api.womany.net https://jp-api.womany.net https://member.womany.net https://go.justfont.com 1
frame-ancestors https://webvisor.com http://webvisor.com https://live.ratelook.org 1
upgrade-insecure-requests; connect-src * https:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob: data:; worker-src * blob: data: 1
default-src *;img-src * 'unsafe-inline';frame-src *; style-src * 'unsafe-inline' 'unsafe-eval';script-src * 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self'; style-src 'self' 'unsafe-inline' 'self' *.signifyd.com *.addthis.com *.addthisedge.com *.google.com *.google.ca *.youtube.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.zdassets.com pixel.quantserve.com  www.structube.com static.structube.com hello.myfonts.net cdnjs.cloudflare.com cdn.rawgit.com api.getcandid.com maxcdn.bootstrapcdn.com *.listrakbi.com use.typekit.net p.typekit.net gi7a.structube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: 'self' *.signifyd.com *.addthis.com *.addthisedge.com *.google.com *.google.ca *.youtube.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.zdassets.com pixel.quantserve.com  www.googletagmanager.com www.googleleadservices.com *.firebaseapp.com googleads.g.doubleclick.net s.ytimg.com www.gstatic.com use.typekit.net www.structube.com static.structube.com cdnjs.cloudflare.com cdn.rawgit.com connect.facebook.net *.cloudfront.net static.hotjar.com script.hotjar.com s.adroll.com d.adroll.com *.trackedlink.net bat.bing.com cdn.jsdelivr.net webinsight.s3.amazonaws.com s.pinimg.com *.zopim.com platform.twitter.com analytics.twitter.com static.ads-twitter.com api.getcandid.com content-getcandid.netdna-ssl.com sp.analytics.yahoo.com s.yimg.com *.stripe.com sc-static.net secure.quantserve.com rules.quantcount.com *.listrakbi.com quantcast.mgr.consensu.org js.gleam.io widget.gleamjs.io *.filepicker.io snap.licdn.com *.linkedin.com eulerian.structube.com *.eulerian.net ca.ew3.io gi7a.structube.com *.myregistry.com *.alexametrics.com *.adroll.mgr.consensu.org *.publitas.com; font-src 'self' data: 'self' *.signifyd.com *.addthis.com *.addthisedge.com *.google.com *.google.ca *.youtube.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.zdassets.com pixel.quantserve.com  use.typekit.net www.structube.com static.structube.com maxcdn.bootstrapcdn.com *.zopim.com fonts.gstatic.com themes.googleusercontent.com script.hotjar.com gi7a.structube.com; img-src 'self' data: android-webview-video-poster: * 'self' *.signifyd.com *.addthis.com *.addthisedge.com *.google.com *.google.ca *.youtube.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.zdassets.com pixel.quantserve.com  h.online-metrix.net; frame-src 'self' 'self' *.signifyd.com *.addthis.com *.addthisedge.com *.google.com *.google.ca *.youtube.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.zdassets.com pixel.quantserve.com  bid.g.doubleclick.net www.googletagmanager.com s.amazon-adsystem.com vars.hotjar.com www.facebook.com connect.facebook.net staticxx.facebook.com api.getcandid.com *.doubleclick.net player.vimeo.com *.stripe.com *.moneris.com *.snapchat.com static.quantcast.mgr.consensu.org gleam.io *.filepicker.io *.myregistry.com bca.ea.eulerian.com h.online-metrix.net *.publitas.com; frame-ancestors 'self' https://tourmkr.com/; connect-src 'self' 'self' *.signifyd.com *.addthis.com *.addthisedge.com *.google.com *.google.ca *.youtube.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.zdassets.com pixel.quantserve.com  stats.g.doubleclick.net *.hotjar.com *.hotjar.io performance.typekit.net services.structube.com wss://www.structube.com wss://*.zopim.com wss://*.hotjar.com *.cloudfront.net s.adroll.com api.smartrecruiters.com cdn.contentful.com api.quantcast.mgr.consensu.org *.pinterest.com *.cloudinary.com gi7a.structube.com enews.structube.com; media-src 'self' 'self' *.signifyd.com *.addthis.com *.addthisedge.com *.google.com *.google.ca *.youtube.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.zdassets.com pixel.quantserve.com  *.structube.com player.vimeo.com *.vimeocdn.com gcs-vimeo.akamaized.net vod-progressive.akamaized.net *.cdninstagram.com; report-uri /csp-violation.php; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.lpages.co/ https://*.doubleclick.net https://api.myjson.com https://translate.googleapis.com https://static.ads-twitter.com https://analytics.twitter.com https://cdn.syndication.twimg.com https://*.zopim.com https://cdn.jsdelivr.net https://*.hotjar.com https://localhost:* wss://localhost:* https://js.center.io https://my.leadpages.net https://cdn.mxpnl.com https://*.google-analytics.com https://*.optimizely.com https://*.bootstrapcdn.com https://*.jquery.com https://*.sharethis.com https://*.haikudeck.com https://*.newrelic.com https://connect.facebook.net https://www.googleadservices.com https://assets.pinterest.com https://*.nr-data.net https://checkout.stripe.com https://js.stripe.com/v2/ https://platform.twitter.com  https://*.surveymonkey.com https://*.googleapis.com https://static.accountdock.com https://*.accountdock.com https://*.cloudfront.net https://*.intercom.io https://*.intercomcdn.com https://tagmanager.google.com https://www.googletagmanager.com https://*.ytimg.com https://cdnjs.cloudflare.com https://*.google.com; object-src 'self'; img-src * data:; frame-src 'self'  https://*.hotjar.com https://*.doubleclick.net https://syndication.twitter.com https://js.center.io https://*.google.com https://twitter.com https://facebook.com https://linkedin.com https://www.haikudeck.com https://*.vimeo.com https://*.parse.com https://*.sharethis.com https://*.filepicker.io https://googleads.g.doubleclick.net https://checkout.stripe.com https://js.stripe.com/v2/ https://twitter.com https://facebook.com https://linkedin.com https://platform.twitter.com https://*.facebook.com https://*.surveymonkey.com https://*.amazonaws.com https://static.accountdock.com https://*.accountdock.com https://accountdock.com https://www.googletagmanager.com https://*.youtube.com  https://surveymonkey.com https://*.cloudfront.net; font-src 'self' data: https://api.myjson.com https://static.accountdock.com https://*.accountdock.com https://*; connect-src 'self' https://l.sharethis.com https://api.leadpages.io https://api.myjson.com https://translate.googleapis.com wss://*.hotjar.com https://*.hotjar.com wss://*.zopim.com https://*.zopim.com https://localhost:* wss://localhost:* https://*.haikudeck.com:* https://*.mixpanel.com https://*.optimizely.com https://*.nr-data.net wss://*.haikudeck.com:* https://*.profitwell.com wss://*.intercom.io https://*.intercom.io http://*.haikudeck.com https://*.stripe.com https://*.cloudfront.net; style-src 'self' 'unsafe-inline' https://translate.googleapis.com https://platform.twitter.com https://static.accountdock.com https://*.accountdock.com https://*.cloudflare.com https://fonts.googleapis.com https://*.bootstrapcdn.com https://*.sharethis.com https://checkout.stripe.com https://js.stripe.com/v2/ https://*.google.com https://*.cloudfront.net; 1
frame-ancestors https://*.mygreatlakes.org https://*.glhec.org https://*.greatlakeslink.com 'self' 1
default-src 'self' ; script-src 'self' 'unsafe-inline' * 'unsafe-eval' *; object-src 'self' 'unsafe-inline' * 'unsafe-eval' *; style-src 'self' 'unsafe-inline' * 'unsafe-eval' *; img-src 'self' 'unsafe-inline' * 'unsafe-eval' *; media-src 'self' 'unsafe-inline' * 'unsafe-eval' *; child-src 'self' 'unsafe-inline' * 'unsafe-eval' *; font-src 'self' 'unsafe-inline' * 'unsafe-eval' *; connect-src 'self' 'unsafe-inline' * 'unsafe-eval' *; report-uri /report-csp-violation 1
default-src *;script-src 'self' 'unsafe-inline'  'unsafe-eval'  changba.com *.changba.com *.changbaimg.com *.cdn.changbaimg.com *.bootcss.com *.bokecc.com *.qbox.me *.google-analytics.com *.qq.com *.alipay.com *.alibaba.com *.aliyun.com  *.alicdn.com hm.baidu.com *.cnzz.com *.cnzz.cn *.irs01.com  irs01.com zz.bdstatic.com *.zhanzhang.baidu.com s.url.cn cdn.jsdelivr.net unpkg.com;style-src * 'unsafe-inline';frame-src 'self' changba.com *.changba.com changba://*;img-src 'self' data: blob: *;media-src 'self' data: blob: * 1
frame-ancestors 'self' *.myshopify.com *.mybigcommerce.com *.yotpo.com *.boldcommerce.com 1
frame-ancestors 'self' https://www.learn4good.com/; worker-src https://www.learn4good.com/; 1
default-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline' 'unsafe-eval'; script-src 'self' https://tagmanager.google.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://www.gstatic.com https://api.midtrans.com https://cdn.appsflyer.com https://s.yimg.com https://sp.analytics.yahoo.com https://api.midtrans.com https://stats.g.doubleclick.net https://fcm.googleapis.com *.midtrans.com *.veritrans.co.id *.mixpanel.com *.google-analytics.com https://websdk.appsflyer.com https://maps.googleapis.com blob: https://banner.appsflyer.com https://wa.onelink.me https://wa.appsflyer.com https://cdnjs.cloudflare.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://*.google.co.in https://maps.gstatic.com https://maps.googleapis.com https://s-media-cache-ak0.pinimg.com https://i.pinimg.com https://*.cloudfront.net http://*.cloudfront.net https://reviews.123rf.com https://wikipedia.org https://api.veritrans.co.id https://res.cloudinary.com https://image.shutterstock.com https://tineye.com https://stats.g.doubleclick.net https://doctor.halodoc.com http://www.linkdokter.com https://www.google-analytics.com https://www.facebook.com https://halodoc-sumba.s3-ap-southeast-1.amazonaws.com https://s3-ap-southeast-1.amazonaws.com https://www.google.com https://www.google.com.sg data: *.midtrans.com *.veritrans.co.id *.mixpanel.com *.google-analytics.com; connect-src 'self' https://pinimg.com https://*.cloudfront.net http://*.cloudfront.net https://123rf.com https://fonts.gstatic.com https://tineye.com https://res.cloudinary.com https://image.shutterstock.com https://www.halodoc.com https://halodoc-sumba.s3-ap-southeast-1.amazonaws.com https://tagmanager.google.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://www.gstatic.com https://s3-ap-southeast-1.amazonaws.com https://doctor.halodoc.com https://web-halodoc-api.prod.halodoc.com https://qiscus-lb.api.halodoc.com wss://qiscus-mqtt.api.halodoc.com:1886/mqtt https://api.midtrans.com https://cdn.appsflyer.com https://s.yimg.com https://api.midtrans.com https://api.veritrans.co.id https://stats.g.doubleclick.net https://sp.analytics.yahoo.com https://fonts.googleapis.com https://www.google.com.sg https://www.google.com https://sentry.io/api/ https://fcm.googleapis.com *.midtrans.com *.veritrans.co.id *.mixpanel.com *.google-analytics.com https://firebaseinstallations.googleapis.com https://banner.appsflyer.com https://wa.onelink.me https://wa.appsflyer.com https://websdk.appsflyer.com https://halodoc-sumba.s3.ap-southeast-1.amazonaws.com http://gcp.stage.halodoc.com http://gcp.prod.halodoc.com https://web.prod.halodoc.com http://localhost:14000 https://script.google.com https://script.googleusercontent.com; font-src 'self' https://fonts.gstatic.com data:; object-src 'self' https://*.cloudfront.net http://*.cloudfront.net; frame-src * 1
frame-ancestors 'self' www.riverbed.com *.riverbed.com *.lookbookhq.com *.pathfactory.com pf.riverbed.com riverbed.lookbookhq.com *.adobecqms.net 1
default-src 'self' *.gbif.org *.gbif-uat.org *.gbif-dev.org *.gbif-staging.org *.gbif.org *.google.com *.google-analytics.com fonts.gstatic.com images.ctfassets.net data: api.mapbox.com *.tiles.mapbox.com player.vimeo.com eepurl.com gbif.us18.list-manage.com zenodo.org *.youtube.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com api.mapbox.com unpkg.com/react@17/umd/react.production.min.js unpkg.com/react-dom@17/umd/react-dom.production.min.js cdn.jsdelivr.net/gh/gbif/gbif-web@latest/packages/react-components/dist/gbif-react-components.js;style-src 'self' 'unsafe-inline' *.googleapis.com cdnjs.cloudflare.com/ajax/libs/mapbox-gl/1.12.0/mapbox-gl.min.css api.mapbox.com;media-src *;worker-src blob:;upgrade-insecure-requests 1
default-src 'self' *.youtube.com *.facebook.com https://*.wogaa.sg https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/; script-src 'self' 'unsafe-inline' 'unsafe-eval' va.ecitizen.gov.sg blob: https://*.wogaa.sg https://assets.adobedtm.com/; img-src 'self'  data: va.ecitizen.gov.sg  attachment.outlook.office.net *.googleusercontent.com *.yusercontent.com https://wogadobeanalytics.sc.omtrdc.net/ https://cm.everesttech.net/ https://dpm.demdex.net/; connect-src 'self' https://*.wogaa.sg https://dpm.demdex.net/; style-src 'self' 'unsafe-inline' fonts.googleapis.com va.ecitizen.gov.sg https://assets.wogaa.sg/fonts/; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.amazonaws.com va.ecitizen.gov.sg data: https://assets.wogaa.sg/fonts/; media-src 'self' ; 1
default-src 'self' *.kk.dk *.testkkms.kk.dk; base-uri 'self'; child-src 'self' *.kk.dk star.23video.com dw3.dk kk.halbooking.dk ipaper.ipapercms.dk kk.sites.itera.dk app.ivolunteer.dk www.video.kk.dk kk-bioposer.dk vemcount.app l.vemcount.com player.vimeo.com www.youtube.com; connect-src 'self' *.kk.dk dawa.aws.dk ibikecph.dk kortforsyningen.kms.dk cphvolunteers.kubedata.dk geoserver.plandata.dk *.septima.dk id.siteimprove.com my2.siteimprove.com; font-src 'self' *.kk.dk cphvolunteers.kubedata.dk cdn.materialdesignicons.com *.septima.dk data:; form-action 'self' *.kk.dk centernordvest.us10.list-manage.com familieplejekk.metimus.dk idp.tabulex.net kbenhavns-kommune.clients.ubivox.com *.uxmail.io www.workindenmark.dk; frame-ancestors 'self' *.kk.dk; frame-src 'self' 'unsafe-eval' *.kk.dk www.google.com bif.23video.com star.23video.com kkpdfgen.dis-play.dk dw3.dk chat.ecmr.biz kk.halbooking.dk ipaper.ipapercms.dk kk.sites.itera.dk app.ivolunteer.dk www.video.kk.dk kk-bioposer.dk cphvolunteers.kubedata.dk openstreetmap.org my2.siteimprove.com trafikkort.vejdirektoratet.dk vemcount.app l.vemcount.com player.vimeo.com youtu.be www.youtube.com www.youtube-nocookie.com; img-src 'self' *.kk.dk *.testkkms.kk.dk www.defgo.net app01.defgosoftware.net *.services.kortforsyningen.dk cphvolunteers.kubedata.dk www.kultunaut.dk *.mqcdn.com http://tile.openstreetmap.org https://tile.openstreetmap.org kec.plan2learn.dk *.septima.dk ssl.siteimprove.com 259887.global.siteimproveanalytics.io www.skrivopgave.dk kkkortdata.spatialsuite.dk teambade.dk api.vandudsigten.dk data: blob:; object-src 'self' 'unsafe-eval'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.kk.dk dawa.aws.dk www.defgo.net chat.ecmr.biz fast.fonts.net www.google.com ajax.googleapis.com cdn.jsdelivr.net cphvolunteers.kubedata.dk www.kultunaut.dk openstreetmap.org *.septima.dk septimamap.dk cdn.siteimprove.net siteimproveanalytics.com responder.wt-safetag.com www.gstatic.com data: blob:; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.kk.dk dawa.aws.dk www.defgo.net chat.ecmr.biz fast.fonts.net cphvolunteers.kubedata.dk cdn.materialdesignicons.com *.septima.dk data:; worker-src 'self' blob:; upgrade-insecure-requests; report-uri https://municipalityofcopenhagen.report-uri.com/r/d/csp/enforce 1
default-src 'self'; img-src *; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.suub.uni-bremen.de 1
: script-src "self" 1
default-src 'self' 'unsafe-inline' *.twitter.com *.youtube.com *.gstatic.com *.ytimg.com *.doubleclick.net *.typekit.net *.googleapis.com *.twimg.com *.idio.episerver.net *.msecnd.net *.episerver.net *.google.com *.visualstudio.com *.googletagmanager.com *.google-analytics.com; img-src 'self' 'unsafe-inline' * data: 1
object-src 'self'; frame-ancestors 'self' http://*.win2day.at https://*.win2day.at https://*.lottery.co.at:* http://*.lottery.co.at:* http://static.ipoker.com  https://static.ipoker.com http://pokermoblogin.framegas.com  https://pokermoblogin.framegas.com http://*.bitsfabrik.com https://*.bitsfabrik.com; script-src 'nonce-cbd3d1d8281d0b1d8cb33e3d2b873bf7' 'report-sample' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'self'; report-uri /html/cspReport.jsp 1
default-src 'self'; script-src 'self' cdnjs.cloudflare.com www.google-analytics.com www.googletagmanager.com; img-src 'self' www.google-analytics.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com; form-action 'self'; report-uri https://scotthelme.report-uri.com/r/default/csp/enforce 1
default-src 'self'; img-src *;media-src 'self' * blob:; connect-src 'self' * data:; script-src 'self' 'unsafe-inline' https://d2r1yp2w7bby2u.cloudfront.net/js/a.js https://in.wzrkt.com/a *.google-analytics.com https://connect.facebook.net/en_US/sdk.js https://d2r1yp2w7bby2u.cloudfront.net/js/wzrk_dialog.min.js https://ssl.p.jwpcdn.com/player/v/8.7.6/jwpsrv.js; style-src 'self' 'unsafe-inline'; font-src 'self';object-src 'self' 1
default-src https: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.csub.edu; 1
default-src 'self' 'unsafe-inline' data: 'unsafe-eval' *.gymboree.com *.childrensplace.com dpm.demdex.net tcp.demdex.net *.xtlo.net *.akstat.io *.akamaihd.net *.go-mpulse.net *.adobedtm.com *.google.com *.googleapis.com *.bazaarvoice.com *.getcandid.com *.candid.io *.quantummetric.com *.omniture.com *.vibescm.com *.unbxd.io *.braintreegateway.com *.braintree-api.com *.borderfree.com *.briteverify.com *.raygun.io *.gstatic.com *.theplace.com *.omtrdc.net *.paypal.com *.paypalobjects.com *.iperceptions.com *.melissadata.net *.facebook.net *.facebook.com *.stylitics.com stylitics-ampersand-production.sfo2.cdn.digitaloceanspaces.com comenity.net *.netdna-ssl.com *.comenity.net *.fiftyone.com *.omtrdc.net *.demdex.net *.channeladvisor.com *.impactradius-event.com *.googletagmanager.com *.micpn.com *.bing.com *.filepicker.io *.cloudinary.com *.cloudfront.net *.theplace.com *.netdna-ssl.com *.filepicker.io *.iesnare.com *.googleadservices.com *.steelhousemedia.com *.impactradius-event.com *.channeladvisor.com *.amazonaws.com *.kaptcha.com thechildrensplace.ay6u.net *.unbxdapi.com *.dotomi.com gymboree.fhsxpf.net *.pegacloud.net *.epsilon.com *.wufoo.com match.prod.bidr.io *.adsrvr.org *.doubleclick.net *.forter.com *.monetate.net *.google-analytics.com *.wufoo.com search-dr.unbxd.io; worker-src 'self' blob: 1
default-src 'self' https://privacyportal.cookiepro.com https://pagestrip.com;  script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com cdn.ampproject.org https://cdnjs.cloudflare.com https://cdnjs.com/ https://fast.fonts.net/ https://code.jquery.com/ https://api.usersnap.com https://www.googletagmanager.com https://rum-static.pingdom.net https://s7.addthis.com https://sjs.bizographics.com https://snap.licdn.com https://v1.addthisedge.com https://m.addthis.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://kendo.cdn.telerik.com https://cookie-cdn.cookiepro.com/ https://emea3.recruitmentplatform.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://unpkg.com https://downloads.mailchimp.com https://mc.us5.list-manage.com https://secure.adnxs.com https://z.moatads.com https://geolocation.onetrust.com https://stackpath.bootstrapcdn.com https://walls.io https://cse.google.com *.pagestrip.com;   style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://fast.fonts.net https://cdnjs.cloudflare.com https://emea3.recruitmentplatform.com https://maxcdn.bootstrapcdn.com  https://downloads.mailchimp.com https://cdn-images.mailchimp.com https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net *.pagestrip.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://maxcdn.bootstrapcdn.com *.pagestrip.com;   img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com https://px.ads.linkedin.com data: blob: *.eloqua.com https://i3.ytimg.com https://i.ytimg.com https://ml.globenewswire.com https://p.adsymptotic.com https://downloads.mailchimp.com http://media.corporate-ir.net https://resource.globenewswire.com https://cookie-cdn.cookiepro.com https://shp.qpic.cn https://img.youtube.com https://magna-p.magna.com https://magna.com https://cdnjs.cloudflare.com https://clients1.google.com https://www.google.com https://www.googletagmanager.com *.magna.com *.pagestrip.com;   media-src 'self' *.ssl.cf1.rackcdn.com data: blob:;   child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://magna.gcs-web.com https://s7.addthis.com https://consentcdn.cookiebot.com/ https://www.google.com https://v.qq.com/ https://walls.io/ https://cse.google.com/ https://pagestrip.com https://*.pagestrip.com https://my.walls.io;   connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://rum-collector-2.pingdom.net https://m.addthis.com https://cookie-cdn.cookiepro.com https://s7.addthis.com https://emea3.recruitmentplatform.com https://emea3.recruitmentplatform.com https://global3.recruitmentplatform.com https://www.google-analytics.com https://privacyportal.cookiepro.com https://pagestrip.com https://*.pagestrip.com; 1
font-src 'self' *.fandangonow.com *.fandango.com data: *.mgo-images.com; object-src *.visa.com data:; script-src 'self' *.fandangonow.com *.fandango.com 'unsafe-inline' 'unsafe-eval' *; style-src 'self' *.fandangonow.com *.fandango.com data: 'unsafe-inline' * 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://cdnjs.cloudflare.com https://widgets.kimbia.com https://api.kimbia.com https://krpc.kimbia.com https://cdn.kimbia.com https://www.google.com https://ssl.google-analytics.com https://www.google-analytics.com https://linkhelp.clients.google.com https://connect.facebook.net https://www.facebook.com https://graph.facebook.com https://platform.twitter.com https://syndication.twitter.com https://cdn.syndication.twimg.com https://video.foxnews.com https://d2zah9y47r7bi2.cloudfront.net https://www.googleadservices.com https://www.youtube.com https://s.ytimg.com https://static.aclj.org https://static.ads-twitter.com https://analytics.twitter.com https://vimeo.com https://www.paypal.com https://chat.aclj.org https://optimize.google.com https://cqrcengage.com https://www.google.com https://pagead2.googlesyndication.com https://www.gstatic.com https://rumble.com https://i.rmbl.ws; connect-src 'unsafe-inline' 'unsafe-eval' 'self' https://cdnjs.cloudflare.com https://widgets.kimbia.com https://api.kimbia.com https://krpc.kimbia.com https://cdn.kimbia.com https://www.google.com https://ssl.google-analytics.com https://www.google-analytics.com https://linkhelp.clients.google.com https://connect.facebook.net https://www.facebook.com https://graph.facebook.com https://platform.twitter.com https://syndication.twitter.com https://cdn.syndication.twimg.com https://video.foxnews.com https://d2zah9y47r7bi2.cloudfront.net https://www.googleadservices.com https://www.youtube.com https://s.ytimg.com https://static.aclj.org https://static.ads-twitter.com https://analytics.twitter.com https://vimeo.com https://www.paypal.com https://chat.aclj.org https://optimize.google.com https://cqrcengage.com https://www.google.com https://pagead2.googlesyndication.com https://www.gstatic.com https://rumble.com https://i.rmbl.ws 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://www.gstatic.com https://maps.googleapis.com https://static.ads-twitter.com https://analytics.twitter.com https://us1.siteimprove.com https://siteimproveanalytics.com/ https://cdn.jsdelivr.net https://snap.licdn.com https://use.typekit.net https://www.instagram.com https://cdnjs.cloudflare.com https://code.jquery.com https://www.tintup.com; report-uri https://www.whitecase.com/report-uri/enforce 1
frame-ancestors 'self' http://alienvault.lookbookhq.com/ https://alienvault.lookbookhq.com/ http://learn-cybersecurity.att.com https://learn-cybersecurity.att.com http://walkme.com https://walkme.com http://www.alienvault-demo-usm-anywhere.com https://www.alienvault-demo-usm-anywhere.com always; 1
connect-src 'self';default-src 'self';font-src 'self' https://fonts.gstatic.com data:;frame-ancestors 'self' chrome-extension://mnojpmjdmbbfmejpflffifhffcmidifd;frame-src 'self' https://player.vimeo.com https://boards.greenhouse.io https://www.youtube-nocookie.com;img-src 'self' data: https://brave.com https://analytics.basicattentiontoken.org https://basicattentiontoken.org https://analytics.brave.com https://boards.greenhouse.io https://s.gravatar.com https://*.gravatar.com https://*.githubusercontent.com https://secure.gravatar.com https://www.gravatar.com https://blog.brave.com https://*.ggpht.com https://*.jtvnw.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.basicattentiontoken.org https://cdn.jsdelivr.net https://secure.gaug.es https://boards.greenhouse.io https://code.jquery.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cloud.typography.com 1
default-src 'self' *.statcan.gc.ca *.statcan.ca; style-src 'self' 'unsafe-inline' *.statcan.gc.ca https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.statcan.gc.ca *.adobedtm.com use.fontawesome.com blob:; connect-src 'self' *.statcan.gc.ca *.omtrdc.net *.demdex.net *.everesttech.net; img-src 'self' *.statcan.gc.ca *.omtrdc.net *.demdex.net *.everesttech.net data:; font-src 'self' *.statcan.gc.ca https://fonts.gstatic.com 1
default-src 'self' https: blob: wss: data: 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'none'; default-src 'none'; media-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com; img-src 'self' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src https://www.youtube.com https://player.vimeo.com https://www.rai.it https://www.rai.tv https://www.streamliveevents.it; object-src 'self' https://www.googletagmanager.com https://www.google-analytics.com; 1
frame-ancestors 'self' *.purestorage.com *.flashstack.com; 1
default-src 'self' 'unsafe-inline' data: https://www.google-analytics.com https://cdn.userway.org; script-src 'self' 'unsafe-inline' data: 'unsafe-eval' https://www.nostarch.com https://nostarch.com https://ajax.googleapis.com https://www.google-analytics.com https://cdn.userway.org https://api.userway.org https://ajax.cloudflare.com; object-src https://www.youtube.com https://w.soundcloud.com; img-src 'self' 'unsafe-inline' data: blob: https://www.nostarch.com https://nostarch.com https://www.google-analytics.com https://www.paypal.com https://www.paypalobjects.com https://api.userway.org https://cdn.userway.org; frame-ancestors 'self'; child-src https://cdn.userway.org https://www.youtube.com https://w.soundcloud.com  https://nostarch.com; connect-src 'self' 'unsafe-inline' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://api.userway.org; report-uri /report-csp-violation 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://static.criteo.net https://*.criteo.com https://ln-rules.rewardstyle.com https://player.vimeo.com https://*.hotjar.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://tr.snapchat.com https://www.shoplooks.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.akamaihd.net https://*.hotjar.com wss://*.hotjar.com https://*.sciencebehindecommerce.com https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.skinstore.com https://m.skinstore.com https://checkout.skinstore.com https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.cn https://*.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://*.criteo.com https://static.criteo.net https://ssl.bing.com https://ln-rules.rewardstyle.com https://*.akamaihd.net https://*.recaptcha.net https://*.hotjar.com https://*.sciencebehindecommerce.com https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://*.google-analytics.com https://*.pinimg.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://*.shoplooks.com https://slooks.top https://slooks.me; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com https://www.shoplooks.com https://static.shoplooks.com; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self'; base-uri 'self'; connect-src 'self' www.google-analytics.com api.lever.co vimeo.com; font-src 'self' fonts.gstatic.com; frame-ancestors 'self'; frame-src 'self' player.vimeo.com www.youtube.com www.youtube-nocookie.com palantir.tfaforms.net; img-src 'self' data: www.google-analytics.com www.googletagmanager.com i.ytimg.com; script-src 'self' www.google-analytics.com www.gstatic.com www.google.com ajax.googleapis.com www.googletagmanager.com mozilla.github.io cdnjs.cloudflare.com palantir.tfaforms.net; style-src 'self' 'unsafe-inline' hello.myfonts.net fonts.googleapis.com palantir.tfaforms.net; upgrade-insecure-requests; 1
frame-ancestors skyteam.com 1
script-src 'nonce-LKwTUcais1KxnLaFt3yctA' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://www.google-analytics.com/analytics.js https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport 1
default-src 'none'; style-src 'unsafe-inline' cdn.welcometothejungle.co tagmanager.google.com fonts.googleapis.com optimize.google.com app.getbeamer.com *.axept.io; script-src 'unsafe-inline' cdn.welcometothejungle.co platform.linkedin.com www.linkedin.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com connect.facebook.net www.facebook.com www.youtube.com *.ytimg.com loader.wisepops.com app.wisepops.com cdn.wisepops.com optimize.google.com app.getbeamer.com realtime.getbeamer.com player.vimeo.com speakerdeck.com www.slideshare.net talks.golang.org docs.google.com slides.com static.hotjar.com script.hotjar.com *.batch.com polyfill.io *.axept.io; img-src http: https: blob: data: optimize.google.com www.google-analytics.com script.hotjar.com *.axept.io; media-src cdn.welcometothejungle.co; font-src cdn.welcometothejungle.co cdn.welcometothejungle.com cdn.welcometothejungle.co fonts.gstatic.com data: script.hotjar.com *.axept.io; frame-src 'self' platform.linkedin.com www.linkedin.com api.linkedin.com cdn.iframe.ly www.youtube.com www.dailymotion.com www.facebook.com soundsgood.co play.soundsgood.co app.soundsgood.co playlist.soundsgood.co connect.facebook.net w.soundcloud.com optimize.google.com app.getbeamer.com push.getbeamer.com player.vimeo.com speakerdeck.com www.slideshare.net talks.golang.org docs.google.com slides.com vars.hotjar.com *.axept.io; connect-src https://api.welcometothejungle.com wss://api.welcometothejungle.com sp.welcometothejungle.com https://alerts.welcometothejungle.com wss://realtime.getbeamer.com *.algolianet.com *.algolia.net *.facebook.com sentry.io popup.wisepops.com app.wisepops.com tracking.wisepops.com cdn.wisepops.com backend.getbeamer.com www.google-analytics.com vimeo.com *.hotjar.com wss://*.hotjar.com vc.hotjar.io ip2c.org autocomplete.geocoder.ls.hereapi.com geocoder.ls.hereapi.com reverse.geocoder.ls.hereapi.com *.batch.com *.axept.io http://cypress.preprod.wttj.tech/zafoh2ie/ae3; worker-src 'self' 1
default-src 'self' ; connect-src 'self' https://s1259914507.t.eloqua.com https://www.google-analytics.com; font-src 'self' https://*.twimg.com https://*.twitter.com data:; frame-src 'self' https://twitter.com https://*.twitter.com; img-src 'self' https://*.twimg.com https://*.twitter.com https://www.google-analytics.com https://cdn.cms-twdigitalassets.com https://s1259914507.t.eloqua.com data:; media-src 'self' https://*.twimg.com https://*.twitter.com https://cdn.cms-twdigitalassets.com; object-src 'self' ; script-src 'self' 'sha256-ppW1Vv+qSVcs+/pIj1ZXvMiCLoyHyCdRqtDMeK9fQ9w=' 'sha256-4vjRgvPWP4vJR8o44Hly4wuWPbcPosEtObsy+q163L0=' https://*.twitter.com https://static.ads-twitter.com 'nonce-9c4696443489bd300da5198eb2da715'; style-src 'self' 'unsafe-inline' https://*.twimg.com https://*.twitter.com; report-uri https://twitter.com/i/csp_report; frame-ancestors 'self' 1
default-src 'self' https://*.instana.io/ https://snapi.sanborns.com.mx/ https://*.s3.amazonaws.com/ https://*.yotpo.com/ https://*.googlesyndication.com/ https://*.taboola.com/ https://connect.facebook.net/ https://adservice.google.com.mx/ https://adservice.google.com/ https://connect.facebook.net/ https://adservice.google.com.mx/ https://adservice.google.com/ https://tpc.googlesyndication.com/ https://vc.hotjar.io/ https://securepubads.g.doubleclick.net/ https://ekr.zdassets.com/ https://s2.go-mpulse.net/ https://static.zdassets.com/ https://*.flixcar.com/ https://*.flix360.com/ https://*.flixfacts.com/ https://viewer.sanborns.binpar.cloud/ https://resources.sanborns.com.mx/ https://www.claroshop.com/ https://*.youtube.com https://*.zopim.io https://www.youtube.com https://staasobj-api.telmex.com https://staasobj-api.telmex.com https://*.online-metrix.net/ https://*.adsrvr.org https://*.doubleclick.net https://dsync.rlcdn.com https://*.facebook.com https://*.facebook.net https://*.gigya.com https://*.googleadservices.com  https://*.google-analytics.com https://*.googleapis.com https://*.google.com https://*.google.com.mx https://*.googletagmanager.com https://*.gstatic.com https://*.hotjar.com https://ib.adnxs.com https://*.jquery.com https://*.krxd.net https://*.pingdom.net https://*.scarabresearch.com https://*.thefancy.com https://*.wisepops.com https://*.criteo.com https://*.creativecdn.com https://*.criteo.net https://checkout.payulatam.com https://graylog.hotjar.com:12443 wss://*.hotjar.com/ wss://*.zopim.com https://*.zopim.com https://api.claropagos.com/ data: 'unsafe-inline' 'unsafe-eval' 1
script-src 'self'  'unsafe-inline' 'nonce-aDcZPYj4kwGqzuEq0X2T3A==' *.faithlifecdn.com *.faithlife.com api.reftagger.com serve.faithlifeads.com platform.twitter.com *.google.com connect.facebook.net cdn.syndication.twimg.com www.googletagmanager.com www.google-analytics.com reftaggercdn.global.ssl.fastly.net cdnjs.cloudflare.com netdna.bootstrapcdn.com *.live.net cdn.amplitude.com cdn.raygun.io request.eprotect.vantivprelive.com request.eprotect.vantivcnp.com maps.googleapis.com www.gstatic.com www.sc.pages08.net *.adroll.com d.adroll.mgr.consensu.org cdn.siftscience.com js.hs-scripts.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net; object-src 'none'; base-uri 'none' 1
default-src 'none'; script-src 'self' 'unsafe-inline' https://onlinechat2.nic.cz https://test-ipv6.nic.cz https://*.test-ipv6.nic.cz https://piwik.nic.cz/piwik.js https://platform.twitter.com https://cdn.syndication.twimg.com https://s.ytimg.com https://*.googleapis.com https://*.google.com https://connect.facebook.net https://*.mapy.cz; object-src 'self'; style-src 'self' 'unsafe-inline' https://platform.twitter.com https://*.nic.cz https://fonts.googleapis.com https://api.mapy.cz; img-src *; media-src *; frame-src *; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.test-ipv6.nic.cz https://*.labs.nic.cz https://widget.nic.cz https://ipv4-widget.nic.cz https://ipv6-widget.nic.cz https://rdap.nic.cz https://www.rhybar.cz https://akademie.nic.cz https://piwik.nic.cz/piwik.php https://dns53.check.odvr.cz https://dot.check.odvr.cz https://doh.check.odvr.cz https://www.nic.cz/files/CORS/projects-bar/ https://mojeid.cz https://syndication.twitter.com; report-uri https://csp.nic.cz/report/ 1
frame-ancestors 'self' https://*.doubleclick.net http://*.doubleclick.net https://*.ranker.com https://*.ranker-dev.com https://*.ranker-stage.com https://*.showtime.com https://*.sho.com http://*.showtime.com http://*.sho.com https://showtime.com https://sho.com https://www.showtime.com https://www.sho.com 1
frame-ancestors *.pennymacusa.com *.adobe.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' ws://localhost:3000 *.postmarkapp.com fonts.googleapis.com app.vwo.com *.cloudfront.net wildbit.sinter-collect.com createsend.com wildbit.createsend.com js.createsend1.com api.craftcms.com *.createsend.com *.typekit.net fast.fonts.net fast.fonts.com *.helpscout.net *.googletagmanager.com *.googleadservices.com  *.google-analytics.com *.google.com *.visualwebsiteoptimizer.com *.simplecast.com *.twitter.com *.ads-twitter.com t.co *.facebook.net *.hs-analytics.net *.hs-banner.com *.fullstory.com feed-proxy.craftcms.com *.gstatic.com *.getsitecontrol.com *.helpscoutdocs.com *.github.io *.twimg.com *.vimeo.com *.youtube.com api.usemessages.com tag.rightmessage.com js.hs-scripts.com *.wistia.com *.wistia.net *.akamaihd.net src.litix.io wss://*.pusher.com data: blob: https://api.keen.io https://*.rightmessage.com; img-src * data: blob:; frame-ancestors 'self' http://app.vwo.com https://*.rightmessage.com https://*.postmarkapp.com; 1
frame-ancestors 'self' *.taxact.com *.taxactonline.com *.salemove.com secure.balancefin.com 1
report-uri /admin/config/system/seckit/csp-report 1
frame-ancestors *.rideapart.com 1
connect-src https://api.posteo.de https://payment.posteo.de https://cdn.posteo.de wss://posteo.de 'self'; child-src 'self'; font-src 'self' data:; form-action https://www.paypal.com https://hooks.stripe.com 'self' data:; frame-ancestors 'self'; frame-src 'self' blob:; img-src data: *; media-src 'self' https://cdn.posteo.de; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-eval' 'unsafe-inline'; default-src 'none'; reflected-xss block; referrer no-referrer; 1
default-src 'self' data: *.akamaihd.net *.bugcrowd.com *.cookielaw.org *.clearbit.com *.disqus.com *.doubleclick.net *.google.com *.google-analytics.com *.litix.io *.lever.co *.outreach.io *.segment.io *.fullstory.com *.quora.com *.rollbar.com *.sharethis.com *.terminus.services *.wistia.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.quantserve.com *.quantcount.com *.adsrvr.org *.bizzabo.com https://bugcrowd.com *.bugcrowdusercontent.com *.bugcrowd.com *.consensu.org *.cookielaw.org *.capterra.com *.cloudflare.com *.cloudfront.net *.facebook.com *.g2crowd.com *.google.com *.google-analytics.com *.linkedin.com *.doubleclick.net *.influitive.com *.fullstory.com *.licdn.com *.onetrust.com *.wistia.com *.disquscdn.com *.pushcrew.com *.sharethis.com *.terminus.services *.disqus.com *.quora.com *.googletagmanager.com *.bing.com *.googleadservices.com *.facebook.net *.adroll.com *.driftt.com *.outreach.io *.fullstory.com *.madkudu.com *.greenhouse.io *.google-analytics.com *.pardot.com *.fontawesome.com *.segment.com *.googleapis.com *.bizible.com *.clearbit.com *.clearbitjs.com; style-src 'self' 'unsafe-inline' *.bugcrowd.com *.cloudfront.net *.disqus.com *.disquscdn.com data: *.fontawesome.com *.google.com *.googleapis.com *.google-analytics.com *.pushcrew.com https://outreach.io; img-src * 'self' data:; media-src 'self' blob: data: *.outreach.io *.akamaihd.net *.wistia.com; frame-src *; font-src 'self' data: *.fontawesome.com *.cloudfront.net *.gstatic.com; frame-ancestors 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://www.googleadservices.com/pagead/conversion_async.js https://googleads.g.doubleclick.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://bat.bing.com/bat.js https://sjs.bizographics.com/insight.min.js https://static.ads-twitter.com/uwt.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/ https://analytics.twitter.com/i/adsct https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/ https://use.typekit.net https://static.oktopost.com/oktrk.js https://okt.to https://www.browsealoud.com https://plus.browsealoud.com https://*.speechstream.net https://fonts.googleapis.com https://apis.google.com https://wikisum.texthelp.com/ https://www.gstatic.com/firebasejs/6.0.4/firebase-app.js https://www.gstatic.com/firebasejs/6.0.4/firebase-messaging.js https://mautic.texthelp.com https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js https://f.vimeocdn.com/js/froogaloop2.min.js https://www.buzzsprout.com https://mautic.texthelp.com ;frame-ancestors https://mautic.texthelp.com; 1
default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 1
base-uri 'self' https://app.onlim.com;img-src https: data:; 1
default-src https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js https://www.googletagmanager.com/gtm.js https://www.youtube.com/iframe_api kameleoon.com kameleoon.eu https:; style-src 'self' 'unsafe-inline' kameleoon.com kameleoon.eu https:; img-src data: https:; frame-ancestors 'self' accounts.lidl.com accounts-stg.lidl.com accounts-uat.lidl.com accounts-qa.lidl.com https://beeem.co; report-uri https://lidlcsp.report-uri.io/r/default/csp/reportOnly; 1
default-src 'self' https://*.jsdelivr.net https://wp-themes.com https://*.cloudflare.com https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.gravatar.com https://*.w.org data: 'unsafe-inline' 'unsafe-eval'; img-src * data:; frame-src  'self' *.youtube.com assets.zendesk.com *.facebook.com s-static.ak.facebook.com tautt.zendesk.com; object-src 'self'  1
child-src 'self' app.pendo.io *.youtube.com; default-src * 'unsafe-inline'; font-src 'self' fonts.gstatic.com; frame-src 'self' app.pendo.io *.driftt.com *.hotjar.com *.plaid.com *.youtube.com; manifest-src 'self'; media-src 'self'; object-src 'none'; prefetch-src 'self'; worker-src 'self' *.youtube.com; frame-ancestors 'self' app.pendo.io https://*.squareup.com https://squareup.com https://*.squareupstaging.com https://squareupstaging.com; base-uri 'self'; form-action 'self'; navigate-to * 1
frame-ancestors 'self' *.wildberries.kz 1
default-src 'self' data:; font-src 'self' data: https://fonts.gstatic.com/; media-src 'self' blob:; img-src * data:; style-src 'unsafe-inline' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.google-analytics.com/ https://cdn.plaid.com/ https://d.impactradius-event.com/ data:; frame-src 'self' https://www.google.com/recaptcha/ https://player.vimeo.com/ https://*.privacy.com/ https://*.facebook.com/ https://cdn.plaid.com/ https://d.impactradius-event.com/; connect-src 'self' https://s3.amazonaws.com/privacy-web/ https://a.qwepw.com/ https://privacycom.7oyhzp.net/ 1
frame-ancestors https://*.bizapedia.com 1
default-src 'self' www.uniflip.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.google.com ajax.googleapis.com www.gstatic.com platform.twitter.com *.cloudflare.com *.cloudfront.net cdn.syndication.twimg.com vjs.zencdn.net ajax.aspnetcdn.com www.uniflip.com www.youtube.com *.addthis.com s.ytimg.com *.addthisedge.com tagmanager.google.com *.gstatic.com sample-api-v2.crazyegg.com www.googletagmanager.com script.crazyegg.com; style-src 'self' 'unsafe-inline' vjs.zencdn.net *.twitter.com tagmanager.google.com fonts.googleapis.com *.twimg.com www.uniflip.com netdna.bootstrapcdn.com; frame-src 'self' *.twitter.com www.google.com custom.statenet.com custom.statenet.com custom.statenet.com/ncsbni freesecure.timeanddate.com *.addthis.com *.youtube.com; img-src 'self' insight.adsrvr.org *.gstatic.com www.google-analytics.com *.doubleclick.net www.google.com *.twitter.com *.twimg.com www.uniflip.com data:; font-src 'self' fastfonts.net *.gstatic.com netdna.bootstrapcdn.com data:; media-src 'self' media.ncsbn.org; connect-src 'self' www.google-analytics.com tracking.crazyegg.com *.doubleclick.net; 1
frame-ancestors 'self' *.google.com *.googlesyndicate.com 1
default-src https: data: blob: resource: 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors hoa.org.uk staging-hoaorguk.kinsta.cloud kuldea.com www.ufurnish.com tilegiant.co.uk sturents.com www.santander.co.uk lifestyleflooringuk.co.uk storiesflooring.co.uk enhancemykitchen.co.uk www.ironmongerydirect.co.uk www.farrow-ball.com tenantshop.uk www.buyfencingdirect.co.uk www.hometander.co.uk staging.ufurnish.com 1
frame-ancestors http://www.vistaprint.ca https://www.vistaprint.ca http://vistaprint.ca https://vistaprint.ca; default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.interco.io wss://endpoint.twilio.com wss://sdkgw.us1.twilio.com wss://*.twilio.com wss://*.firebaseio.com  https://cdn.firebase.com https://*.firebaseio.com; report-uri https://endpoint1.collection.us2.sumologic.com/receiver/v1/http/ZaVnC4dhaV1YajQYljNDyq_HZcQMFwMFIEBS9eHG3wV3FNhihD_eeXQkr_HnJMjSGly5t4VQFrfZujfZFoFY5wHaTC8TvTlxRcur_pISTvX0Dw96EIlb4Q== 1
object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.instagram.com *.google.com *.gstatic.com *.googleapis.com *.doubleclick.net *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.jquery.com *.vimeo.com *.sierranevada.us2.list-manage.com *.newrelic.com *.nr-data.net *.formstack.com *.anyguide.com *.bootstrapcdn.com *.cloudflare.com *.eventbrite.com *.sc-static.net gatherhere.com *.sharethis.com *.shopifycdn.com *.adsrvr.org *.dstillery.com *.media6degrees.com *.redditstatic.com *.embed-withus.com *.ceros.com *.cookielaw.org *.onetrust.com *.hotjar.com sc-static.net; 1
default-src    'self'     'unsafe-inline'     'unsafe-eval'    i.4see.mobi;    script-src  https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css   https://scontent.cdninstagram.com    https://p.typekit.net    https://*.juicer.io    https://instafeed.pixlee.com/    https://instafeed.assets.pixlee.com    https://use.typekit.net    https://data.schemaapp.com    https://prd01.launch.banfield.com/    http://*.g.doubleclick.net/    https://*.g.doubleclick.net/    http://*.google.com    https://*.google.com    http://tags.srv.stackadapt.com    https://tags.srv.stackadapt.com    http://*.stackadapt.com    https://*.stackadapt.com    'self'    'unsafe-inline'    'unsafe-eval'    http://code.jquery.com/    https://code.jquery.com/    http://assets.adobedtm.com    https://assets.adobedtm.com    http://cdn.optimizely.com    https://cdn.optimizely.com    http://use.typekit.net    https://use.typekit.net    http://fast.fonts.net/    https://fast.fonts.net/    http://gateway.answerscloud.com/    https://gateway.answerscloud.com/    http://*.foresee.com    https://*.foresee.com    http://cdnjs.cloudflare.com/   https://cdnjs.cloudflare.com/    http://www.googletagmanager.com    https://www.googletagmanager.com    http://www.googleadservices.com    https://www.googleadservices.com    http://ssl.google-analytics.com    https://ssl.google-analytics.com    http://js.clickequations.net    https://js.clickequations.net    http://connect.facebook.net    https://connect.facebook.net    http://az416426.vo.msecnd.net/    https://az416426.vo.msecnd.net/    http://www.google-analytics.com/    https://www.google-analytics.com/    http://localhost https://localhost    http://localhost:*    https://localhost:*    http://*.googleapis.com    https://*.googleapis.com    http://*.inspectlet.com    https://*.inspectlet.com    http://*.openweathermap.org    https://*.openweathermap.org    http://*.sharethis.com    https://*.sharethis.com    http://*.sharethis.com    https://*.sharethis.com    http://images.banfield.com    https://images.banfield.com    http://scripts.banfield.com    https://scripts.banfield.com    http://assets.banfield.com    https://assets.banfield.com    http://*.xg4ken.com    https://*.xg4ken.com    http://*.cloudflare.com    https://*.cloudflare.com    http://*.youtube.com    https://*.youtube.com    http://*.ytimg.com    https://*.ytimg.com    http://*.bing.com    https://*.bing.com    http://*.iatspayments.com    https://*.iatspayments.com    http://*.instagram.com    https://*.instagram.com     http://banfield-assets.azureedge.net    https://banfield-assets.azureedge.net    http://banfield-images.azureedge.net    https://banfield-images.azureedge.net    http://banfield-scripts.azureedge.net    https://banfield-scripts.azureedge.net    https://remote.vroptimal-3dx-assets.com/    https://gateway.foresee.com/    i.4see.mobi    https://cdn.schemaapp.com/    https://banfield-scripts.azureedge.net/    https://*.helpshift.com    https://home-c14.incontact.com/inContact/ChatClient/js/embed.min.js;  blob:'self' 'unsafe-inline' 'unsafe-eval' https://*.foresee.com  https://*.4seeresults.com  https://*.foreseeresults.com  http://*.foresee.com  http://*.4seeresults.com  https://*.foresee.com/code/*    https://stats.g.doubleclick.net   http://*.foreseeresults.com;  connect-src  https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css   https://scontent.cdninstagram.com    https://p.typekit.net    https://*.juicer.io    https://instafeed.pixlee.com/    https://instafeed.assets.pixlee.com    https://use.typekit.net    https://data.schemaapp.com    blob:    'self'    'unsafe-inline'    'unsafe-eval' https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css   http://logx.optimizely.com/log/event    https://logx.optimizely.com/log/event    http://*.visualstudio.com    https://*.visualstudio.com    http://localhost    https://localhost    http://*.inspectlet.com    https://*.inspectlet.com    http://*.typekit.net    https://*.typekit.net    http://*.googleapis.com    https://*.googleapis.com    http://*.facebook.com    https://*.facebook.com    http://*.sharethis.com    https://*.sharethis.com    http://*.optimizely.com    https://*.optimizely.com    https://analytics.foresee.com    https://brain.foresee.com    https://4seeresults.com    https://foreseeresults.com    https://www.google-analytics.com    https://ssl.google-analytics.com/    i.4see.mobi    https://device.4seeresults.com    https://srv.stackadapt.com/    https://tags.srv.stackadapt.com    https://ssl.google-analytics.com/    https://www.google.com/    https://data.schemaapp.com/    https://c.sharethis.mgr.consensu.org/    http://*.foresee.com    https://*.foresee.com    https://banfield-scripts.azureedge.net/    https://*.helpshift.com    https://home-c14.incontact.com/inContact/ChatClient/js/embed.min.js;    frame-src https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css   https://scontent.cdninstagram.com    https://p.typekit.net    https://*.juicer.io    https://instafeed.pixlee.com/    https://instafeed.assets.pixlee.com     https://use.typekit.net    https://data.schemaapp.com    https://prd01.launch.banfield.com/    https://*.helpshift.com https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css   https://checkout.globalgatewaye4.firstdata.com/payment    'self'    'unsafe-inline'    'unsafe-eval'    http://googleads.g.doubleclick.net    https://googleads.g.doubleclick.net    http://www.google.com/    https://www.google.com/    http://www.youtube.com    https://www.youtube.com    http://gateway.answerscloud.com    https://gateway.answerscloud.com    http://*.foresee.com    https://*.foresee.com    http://*.facebook.com    https://*.facebook.com    http://*.adobedtm.com    https://*.adobedtm.com    http://*.doubleclick.net    https://*.doubleclick.net    http://*.doubleclick.net    https://*.doubleclick.net    http://*.sharethis.com    https://*.sharethis.com    http://*.rallybound.org    https://*.rallybound.org    http://*.cdn.optimizely.com    https://*.cdn.optimizely.com    http://sketchfab.com/    https://sketchfab.com/    http://*.cloudfront.net/    https://*.cloudfront.net/    https://demo.globalgatewaye4.firstdata.com/    https://www.vroptimal-3dx-assets.com/    https://static.vroptimal-3dx-assets.com/    https://connect.facebook.net/    i.4see.mobi https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css    https://banfield-scripts.azureedge.net/    https://*.helpshift.com    https://home-c14.incontact.com;    img-src https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css   https://scontent.cdninstagram.com    https://p.typekit.net    https://*.juicer.io    https://instafeed.pixlee.com/    https://instafeed.assets.pixlee.com    https://use.typekit.net    https://data.schemaapp.com    https://maps.google.com    'self'    'unsafe-inline'    'unsafe-eval'    http://*.cloudflare.com    https://*.cloudflare.com    blob:    http://*.iatspayments.com    https://*.iatspayments.com    http://*.bidswitch.net    https://*.bidswitch.net    http://*.adnxs.com    https://*.adnxs.com    http://*.stackadapt.com    https://*.stackadapt.com  https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css  'self' 'unsafe-inline'    'unsafe-eval' data: https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css   http://googleads.g.doubleclick.net    https://googleads.g.doubleclick.net    http://*.google-analytics.com/    https://*.google-analytics.com/    http://centro.pixel.ad    https://centro.pixel.ad    http://beacon.clickequations.net/    https://beacon.clickequations.net/    http://www.google.com    https://www.google.com    http://*.banfield.com    https://*.banfield.com    http://www.facebook.com    https://www.facebook.com    http://maps.googleapis.com    https://maps.googleapis.com    http://*.gstatic.com    https://*.gstatic.com    http://pixel.sitescout.com/    https://pixel.sitescout.com/    http://images.banfield.com    https://images.banfield.com   http://scripts.banfield.com    https://scripts.banfield.com    http://assets.banfield.com    https://assets.banfield.com    http://media.banfield.com    https://media.banfield.com    http://*.doubleclick.net    https://*.doubleclick.net    http://*.typekit.net    https://*.typekit.net    http://*.4seeresults.com    https://*.4seeresults.com    http://*.foreseeresults.com    https://*.foreseeresults.com    http://*.answerscloud.com    https://*.answerscloud.com    http://*.foresee.com    https://*.foresee.com    http://*.truste.com    https://*.truste.com    http://*.googleadservices.com    https://*.googleadservices.com    http://*.xg4ken.com    https://*.xg4ken.com    http://*.sharethis.com    https://*.sharethis.com    http://*.bing.com    https://*.bing.com    http://*.azureedge.net    https://*.azureedge.net    http://sb.scorecardresearch.com/    https://sb.scorecardresearch.com/    https://foresee.mobi    https://static.foresee.com/    https://gateway.foresee.com/    i.4see.mobi  https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css  https://i.liadm.com/    https://pixel.rubiconproject.com/    https://pixel.advertising.com/    https://simage2.pubmatic.com/    https://banfield-scripts.azureedge.net/    https://*.helpshift.com    https://home-c14.incontact.com/inContact/ChatClient/js/embed.min.js;    style-src https://maxcdn.bootstrapcdn.com/  https://unpkg.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css   https://scontent.cdninstagram.com    https://p.typekit.net   https://*.juicer.io    https://instafeed.pixlee.com/    https://instafeed.assets.pixlee.com    https://use.typekit.net    https://data.schemaapp.com    http://*.fonts.net/    https://*.fonts.net/    'self'    http://*.iatspayments.com    https://*.iatspayments.com    'unsafe-inline'    'unsafe-eval'    http://*.fonts.net    https://*.fonts.net    http://fast.fonts.net    https://fast.fonts.net  https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css   http://*.banfield.com    https://*.banfield.com    http://images.banfield.com    https://images.banfield.com    http://scripts.banfield.com    https://scripts.banfield.com    http://assets.banfield.com    https://assets.banfield.com   http://*.googleapis.com    https://*.googleapis.com    http://*.jquery.com    https://*.jquery.com    http://*.answerscloud.com    https://*.answerscloud.com    http://*.foresee.com    https://*.foresee.com    http://*.sharethis.com    https://*.sharethis.com    http://cdnjs.cloudflare.com/    https://cdnjs.cloudflare.com/    http://*.fonts.net   https://*.fonts.net    http://*.azureedge.net    https://*.azureedge.net    https://gateway.foresee.com    i.4see.mobi    https://cdn.jsdelivr.net    https://banfield-scripts.azureedge.net/    https://*.helpshift.com    https://home-c14.incontact.com/inContact/ChatClient/js/embed.min.js;    font-src https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css  https://unpkg.com/  https://scontent.cdninstagram.com    https://p.typekit.net    https://*.juicer.io    https://instafeed.pixlee.com/    https://instafeed.assets.pixlee.com    https://use.typekit.net     https://data.schemaapp.com    'self'    'unsafe-inline'    'unsafe-eval'    http://fast.fonts.net    https://fast.fonts.net    http://*.gstatic.com    https://*.gstatic.com    http://use.typekit.net    https://use.typekit.net    http://images.banfield.com    https://images.banfield.com    http://scripts.banfield.com    https://scripts.banfield.com    http://assets.banfield.com    https://assets.banfield.com    http://*.azureedge.net    https://*.azureedge.net    http://*.optimizely.com    https://*.optimizely.com    i.4see.mobi https://maxcdn.bootstrapcdn.com/  https://unpkg.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css   https://cdnjs.cloudflare.com    http://*.foresee.com    https://*.foresee.com    https://banfield-scripts.azureedge.net/    https://*.helpshift.com  https://maxcdn.bootstrapcdn.com/  https://unpkg.com/gijgo@1.9.13/css/gijgo.min.css   https://home-c14.incontact.com/inContact/ChatClient/js/embed.min.js;   1
upgrade-insecure-requests; default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com fast.wistia.net *.wistia.com form.jotform.com cdn.jotfor.ms secure.jotformpro.com submit.jotformpro.com;style-src 'self' 'unsafe-inline' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com;child-src 'self' https://voicethread.com fast.wistia.net *.wistia.com player.vimeo.com;connect-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com wss://prod-mq.voicethread.com *.sentry.io *.sentry.io;font-src 'self'  https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com;form-action 'self'  https://voicethread.com;frame-ancestors * ;img-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com *.akamaihd.net fast.wistia.com embed.wistia.com embedwistia-a.akamaihd.net events.jotform.com cdn.jotfor.ms embed-fastly.wistia.com;media-src 'self' https://voicethread.com https://prod-cdn.voicethread.com https://prod-transcode.voicethread.com embed.wistia.com embedwistia-a.akamaihd.net embed-fastly.wistia.com;object-src 'self' https://prod-cdn.voicethread.com; 1
frame-ancestors 'self' *.psplugin.com vergic.com 1
default-src 'unsafe-eval' 'unsafe-inline' 'self' http: https: data: wss://socket.showtalk.jp blob: 1
frame-ancestors 'self' boxoffice.yapsody.com; 1
default-src https://*.cordis.europa.eu:443 https://cordis.europa.eu:443 https://europa.eu:443 https://sdc-cordis.mainstrat.com:443 https://ec.europa.eu:443 https://opanalytics.containers.piwik.pro/consent/stats https://opanalytics.piwik.pro data:; base-uri https://*.cordis.europa.eu:443 https://cordis.europa.eu:443; style-src 'unsafe-inline' https://*.cordis.europa.eu:443 https://cordis.europa.eu:443 https://europa.eu:443 https://webtools.ec.europa.eu:443; font-src data: https://*.cordis.europa.eu:443 https://cordis.europa.eu:443; img-src data: https://*.cordis.europa.eu:443 https://cordis.europa.eu:443 https://sdc-cordis.mainstrat.com:443 https://europa.eu:443 https://webtools.ec.europa.eu:443 https://webanalytics.europa.eu:443 https://webgate.ec.europa.eu/fpfis/piwik/ https://opanalytics.piwik.pro; media-src data: https://*.cordis.europa.eu:443 https://cordis.europa.eu:443 https://sdc-cordis.mainstrat.com:443 https://europa.eu:443 https://webtools.ec.europa.eu:443; script-src 'unsafe-eval' 'unsafe-inline' https://*.cordis.europa.eu:443 https://cordis.europa.eu:443 https://sdc-cordis.mainstrat.com:443 https://europa.eu:443 https://ec.europa.eu:443 https://webtools.ec.europa.eu:443 https://webanalytics.europa.eu:443 https://webgate.ec.europa.eu/fpfis/piwik/ https://opanalytics.containers.piwik.pro https://opanalytics.piwik.pro; form-action https://*.cordis.europa.eu:443 https://cordis.europa.eu:443; frame-ancestors https://*.cordis.europa.eu:443 https://cordis.europa.eu:443; object-src 'none'; connect-src https://*.cordis.europa.eu:443 https://cordis.europa.eu:443 https://opanalytics.containers.piwik.pro/ https://opanalytics.piwik.pro/ https://europa.eu/webtools/rest/gisco/api https://webanalytics.europa.eu/piwik.php ; report-uri https://cordis.europa.eu/csp-report/report;  1
frame-ancestors https://*.letslinc.com https://*.criteo.com https://*.criteo.net https://*.facebook.com https://*.venus.com https://*.doubleclick.net https://*.attn.tv https://*.brightmountainmedia.com https://*.paypal.com https://*.paypalobjects.com https://*.evergage.com  1
frame-ancestors 'self' *.buildertrend.com *.buildertrend.net; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.onlineaccess1.com https: dc.services.visualstudio.com dl.episerver.net s.ytimg.com js-agent.newrelic.com bam.nr-data.net rum-static.pingdom.net  d.impactradius-event.com umpqua-bank.sjv.io *.mookie1.com tags.tiqcdn.com adnxs.com pxl.jivox.com snap.licdn.com dc.ads.linkedin.com px.ads.linkedin.com www.linkedin.com static.ads-twitter.com analytics.twitter.com az416426.vo.msecnd.net connect.facebook.net bat.bing.com cdn.cookielaw.org js.hsforms.net forms.hsforms.com js.hsleadflows.net js.hs-scripts.com js.hs-analytics.net *.onetrust.com cdn.cookielaw.org js.hs-banner.com *.hotjar.com *.hotjar.io www.gstatic.com lh3.googleusercontent.com www.googletagmanager.com www.google-analytics.com maps.googleapis.com googleads.g.doubleclick.net 8316073.fls.doubleclick.net www.googleadservices.com *.google.com ssl.google-analytics.com www.youtube.com js.adsrvr.org *.umpquabank.com; style-src 'self' 'unsafe-inline' https: www.gstatic.com lh3.googleusercontent.com dc.services.visualstudio.com *.umpquabank.com dl.episerver.net js.hs-scripts.com js.hs-analytics.net d.impactradius-event.com umpqua-bank.sjv.io *.mookie1.com tags.tiqcdn.com adnxs.com pxl.jivox.com snap.licdn.com *.ads.linkedin.com static.ads-twitter.com analytics.twitter.com az416426.vo.msecnd.net *.hotjar.com connect.facebook.net bat.bing.com cdn.cookielaw.org 8316073.fls.doubleclick.net js.hsforms.net forms.hsforms.com js.hs-banner.com fonts.googleapis.com tagmanager.google.com; img-src 'self' 'unsafe-inline' https: lh3.googleusercontent.com dc.services.visualstudio.com *.hotjar.com *.hotjar.io *.gstatic.com www.google-analytics.com googleads.g.doubleclick.net www.google.com stats.g.doubleclick.net bat.bing.com px.ads.linkedin.com *.hubspot.com p.adsymptotic.com gateway.zscalerthree.net cdn.cookielaw.org *.umpquabank.com www.googletagmanager.com insight.adsrvr.org  www.linkedin.com pixel.advertising.com  ib.adnxs.com  pixel.rubiconproject.com  *.adsrvr.org  cm.g.doubleclick.net  t.co  x.bidswitch.net   dsum-sec.casalemedia.com  simage2.pubmatic.com data: maps.gstatic.com *.googleapis.com *.ggpht; connect-src 'self' 'unsafe-inline' wss://*.hotjar.com https: www.gstatic.com lh3.googleusercontent.com dc.services.visualstudio.com *.umpquabank.com *.hotjar.com:* *.hotjar.io www.google-analytics.com cdn.cookielaw.org *.hubspot.com forms.hsforms.com stats.g.doubleclick.net rum-collector-2.pingdom.net; frame-src 'self' 'unsafe-inline' https: *.q4cdn.com *.adsrvr.org www.theroishop.com www.gstatic.com lh3.googleusercontent.com dc.services.visualstudio.com forms.hsforms.com *.umpquabank.com *.hotjar.com *.hotjar.io bid.g.doubleclick.net player.megaphone.fm 9395210.fls.doubleclick.net platform.mi.spglobal.com *.youtube.com *.onetrust.com cdn.cookielaw.org player.ooyala.com *.q4web.com; font-src 'self' 'unsafe-inline' https: *.umpquabank.com *.hotjar.com *.hotjar.io fonts.gstatic.com data:; 1
default-src 'self' https: *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *;style-src 'self' 'unsafe-inline';img-src 'self' https://walkme.psa.datto.com/Images/ https://s3.walkmeusercontent.com data: https://www.datto.com/img/  1
default-src * 'unsafe-inline' 'unsafe-eval' ; child-src blob: ; worker-src 'self' https://via.batch.com blob: ; script-src * 'unsafe-inline' 'unsafe-eval' ; connect-src * ; media-src * ; img-src * data: blob: ; frame-src *; frame-ancestors 'self' https://plan-salle-de-bain-3d.castorama.fr;style-src * data: 'unsafe-inline'; font-src * data: ; 1
frame-ancestors *.barry.edu; 1
default-src 'self' https://cdn.cleantalk.org; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com https://gitcdn.github.io/bootstrap-toggle/ https://www.google.com/cse/ https://cdn.cleantalk.org https://cdn.datatables.net https://cdnjs.cloudflare.com/ https://fonts.googleapis.com/ https://cdn.jsdelivr.net/gh/google/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://cse.google.com/ https://clients1.google.com/ https://www.google.com/cse/ https://connect.facebook.net/ https://cdn.datatables.net *.bootstrapcdn.com https://ajax.googleapis.com https://cdn.cleantalk.org https://gitcdn.github.io/bootstrap-toggle/ https://platform.linkedin.com/ https://cdnjs.cloudflare.com/ajax/libs/ekko-lightbox/ https://www.googletagmanager.com; frame-src https://cse.google.com/ *.youtube.com *.facebook.com; font-src 'self' data: *.bootstrapcdn.com https://cdn.datatables.net https://fonts.gstatic.com/s/opensans/; img-src 'self' data: https://cdn.cleantalk.org https://www.google.ie/ https://www.googleapis.com/ https://blog.cleantalk.org https://www.google-analytics.com *.gstatic.com *.google.com https://www.google.com/ https://stats.g.doubleclick.net/ http://s.cleantalk.org/ https://s.cleantalk.org/ https://www.gravatar.com/avatar/ https://i2.wp.com/cleantalk.org/images/ https://s3.amazonaws.com/cleantalk-screenshots/ https://cleantalk-screenshots.s3.amazonaws.com/ https://secure.gravatar.com/avatar/ https://platform.slack-edge.com/img/ https://www.googletagmanager.com https://www.google.co.uk; connect-src 'self' https://api.cleantalk.org/ https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.co.uk; base-uri 'self'; 1
frame-ancestors https://www.dsquared2.com/ https://www.dsquared2.com/ ; 1
report-uri https://forum.americanexpress.com/home/report/security/csp-violation; block-all-mixed-content; default-src 'self' *.aexp.com *.americanexpress.com wss://*.americanexpress.com *.aexp-static.com stage.sp100500b5.guided.ss-omtrdc.net sp100500b5.guided.ss-omtrdc.net events.bouncex.net; script-src 'nonce-a469e86c-eb8c-4c76-8ee0-4042addbabae' 'self' *.aexp.com *.americanexpress.com *.aexp-static.com assets.adobedtm.com nexus.ensighten.com aexp.demdex.net *.bounceexchange.com analytics.newscred.com s.ntv.io www.youtube.com s.ytimg.com *.liveperson.net *.liveperson.com *.lpsnmedia.net *.liveengage.net *.liveengage.com *.liveper.sn; img-src 'self' *.aexp.com *.americanexpress.com *.aexp-static.com data: events.bouncex.net pixel.newscred.com jadserve.postrelease.com p.adsymptotic.com dc.ads.linkedin.com px.ads.linkedin.com www.linkedin.com/px/ www.facebook.com aax-eu.amazon-adsystem.com sp.analytics.yahoo.com analytics.twitter.com ad4.adfarm1.adition.com ad2.adfarm1.adition.com imagesrv.adition.com *.liveperson.net *.liveperson.com *.lpsnmedia.net *.liveengage.net *.liveengage.com *.liveper.sn adservice.google.com ad.doubleclick.net googleads.g.doubleclick.net; style-src 'unsafe-inline' *.aexp.com *.aexp-static.com *.liveperson.net *.liveperson.com *.lpsnmedia.net *.liveengage.net *.liveengage.com *.liveper.sn; connect-src 'self' *.aexp.com *.americanexpress.com *.aexp-static.com aexp.demdex.net dpm.demdex.net stage.sp100500b5.guided.ss-omtrdc.net sp100500b5.guided.ss-omtrdc.net wss://*.liveperson.net; manifest-src 'self' *.aexp.com *.americanexpress.com *.aexp-static.com; worker-src 'self' *.aexp.com *.americanexpress.com *.aexp-static.com; frame-ancestors none; frame-src aexp.demdex.net www.youtube.com *.liveperson.net *.liveperson.com *.lpsnmedia.net *.liveengage.net *.liveengage.com *.liveper.sn 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.facebook.net *.facebook.com *.fbcdn.net *.tableau.com app.icontact.com *.gstatic.com *.twitter.com *.ws.frb.org *.frswebservices.org *.bostonfed.org bostonfed *.federalreserve.org *.google-analytics.com *.googleapis.com cdn.syndication.twimg.com *.brightcove.net *.brightcove.com *.ytimg.com *.googletagmanager.com *.google-analytics.com *.taleo.net *.google.com *.highcharts.com; style-src 'self' 'unsafe-inline' *.facebook.net *.facebook.com *.fbcdn.net *.tableau.com app.icontact.com *.twitter.com *.ws.frb.org *.frswebservices.org *.bostonfed.org bostonfed *.googleapis.com *.taleo.net *.google.com *.highcharts.com; img-src * data:; media-src * data:; connect-src 'self' *.google-analytics.com; font-src 'self' *.facebook.net *.facebook.com *.fbcdn.net *.tableau.com app.icontact.com *.twitter.com *.ws.frb.org *.frswebservices.org *.bostonfed.org bostonfed *.gstatic.com *.taleo.net *.google.com data:; frame-src 'self' *.facebook.net *.facebook.com *.fbcdn.net *.tableau.com app.icontact.com *.twitter.com *.youtube.com *.brightcove.net *.brightcove.com *.ws.frb.org *.frswebservices.org *.bostonfed.org *.taleo.net *.google.com data:; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: cdn.jsdelivr.net fonts.googleapis.com fonts.gstatic.com stats.kindhouse.com www.projectcbd.org projectcbd.org certify-js.alexametrics.com 1
default-src 'self' http: https: wss:; img-src * 'self' data: https:; style-src 'self' 'unsafe-inline' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *.googleapis.com; frame-ancestors file: cdvfile: 'self'; 1
default-src 'none'; connect-src 'self'; font-src *.anidb.net; form-action 'self'; img-src * data:; script-src 'self' *.anidb.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' *; child-src kiwiirc.com *.youtube-nocookie.com www.google.com/recaptcha/; frame-ancestors 'self'; base-uri 'self'; manifest-src *.anidb.net; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' 'self' https://dhqbrvplips7x.cloudfront.net/ https://storage.googleapis.com/ https://www.gstatic.com/ https://dc.services.visualstudio.com/ https://gensweb.moj.gov.sa/ https://www.google.com/ https://apps.mypurecloud.com/ https://cobrowse.mypurecloud.de/ https://cdn.moj.gov.sa/ https://maps.googleapis.com/ https://maps.gstatic.com/ https://taqadhi.moj.gov.sa/ data:; object-src 'self'; frame-ancestors 'none'; sandbox allow-downloads allow-forms allow-same-origin allow-scripts allow-modals allow-popups allow-popups-to-escape-sandbox; base-uri 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://cdn.moj.gov.sa/ https://cdnjs.cloudflare.com/; font-src 'self' https://fonts.gstatic.com/ https://cdn.moj.gov.sa/ https://maps.googleapis.com/ https://maps.gstatic.com/ data:; 1
default-src 'self'; img-src * data: 'unsafe-inline'; media-src *; script-src 'self' *.hotjar.com *.adroll.com *.adroll.mgr.consensu.org *.analytics.yahoo.com s.yimg.com static.zdassets.com www.recaptcha.net *.poems.com.sg *.facebook.net tagmanager.google.com *.twitter.com *.twimg.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.zopim.com *.googletagmanager.com *.cloudflare.com www.google.com googleads.g.doubleclick.net *.gstatic.com maps.google.com *.zumata.com snap.licdn.com cdn.polyfill.io *.linkedin.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; font-src * data:; connect-src 'self' vc.hotjar.io *.hotjar.com *.adroll.com s.yimg.com chatbot.poems.com.sg:1234 *.poems.com.sg www.facebook.com yoast.com *.g.doubleclick.net *.google-analytics.com *.zumata.com *.zopim.com *.zdassets.com phillipchatbot3.zendesk.com wss: ; frame-src 'self' vars.hotjar.com *.phillipmobile.com.sg *.phillip.com.sg *.poems.com.sg www.youtube.com www.google.com www.facebook.com connect.facebook.net *.cqtrader.com.sg www1.cqtraderonline.com *.cqtraderonline.com  *.doubleclick.net view.vzaar.com; report-uri /csp-report.php 1
default-src *.livejournal.com *.livejournal.net tpc.googlesyndication.com; script-src *.livejournal.com *.livejournal.net *.google-analytics.com *.googletagmanager.com *.scorecardresearch.com *.top100.ru *.criteo.com yastatic.net *.plista.com *.facebook.com vk.com *.ok.ru *.pingdom.com *.pingdom.net *.vk.com *.twitter.com *.twimg.com *.facebook.net *.instagram.com *.services.livejournal.com *.videos.livejournal.com *.adfox.ru *.exelator.com *.rambler.ru *.rubiconproject.com *.yahooapis.com *.newrelic.com *.nr-data.net *.doubleclick.net googleads.g.doubleclick.net *.lj.ru *.googleapis.com *.youtube.com *.varlamov.me *.varlamov.com *.google.com static.xx.fbcdn.net dsp-rambler.ru openstat.net *.rnet.plus twemoji.maxcdn.com *.googletagservices.com *.googlesyndication.com ymetrica.com telegram.org *.webturn.ru www.dropbox.com *.criteo.net z.moatads.com r.webturn.ru *.pinterest.com *.google.ru ssl.p.jwpcdn.com *.gstatic.com js.mamydirect.com cdn.ampproject.org adservice.google.ca an.yandex.ru yandex.st mc.yandex.ru banners.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net yandex.ru 'unsafe-inline' 'unsafe-eval'; style-src http: https: data: yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net 'unsafe-inline' 'unsafe-eval'; img-src http: https: data: avatars-fast.yandex.net favicon.yandex.net an.yandex.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net *.yandex.net verify.yandex.ru *.verify.yandex.ru 'self'; frame-src http: https: awaps.yandex.net yandexadexchange.net *.yandexadexchange.net yastatic.net *.yandex.ru banners.adfox.ru yastat.net; font-src http: https: data: an.yandex.ru yastatic.net yastat.net 'self'; connect-src *.livejournal.com *.livejournal.net *.services.livejournal.com *.google-analytics.com ssp.rambler.ru *.ssp.rambler.ru lj.stat.eagleplatform.com *.pingdom.net *.googleapis.com kraken.rambler.ru *.twitter.com *.youtube.com googleads.g.doubleclick.net static.xx.fbcdn.net *.lj.ru *.rnet.plus ymetrica.com *.webturn.ru *.criteo.com dsp-rambler.ru *.rambler.ru stats.g.doubleclick.net *.eaglecdn.com wss://www.livejournal.com *.g.doubleclick.net an.yandex.ru strm.yandex.ru mc.yandex.ru yandex.st yastatic.net matchid.adfox.yandex.ru adfox.yandex.ru ads.adfox.ru ads6.adfox.ru jstracer.yandex.ru yastat.net yandex.ru static-mon.yandex.net 'self'; media-src http: https: data: *.yandex.net strm.yandex.ru *.strm.yandex.ru yandex.ru yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net report-uri https://livejournal.com/csp_reports 1
frame-ancestors 'self' bibliocms.com *.bibliocms.com bibliocommons.com *.bibliocommons.com libanswers.com *.libanswers.com bpl.bibliocms.com *.bpl.bibliocms.com https://www.bpl.org www.bpl.org *.www.bpl.org; 1
img-src 'self' 'unsafe-eval' data: http://www.snapsurveys.com https://v2.zopim.com https://www.google-analytics.com https://www.google.co.uk https://www.google.com https://www.gstatic.com https://ajax.googleapis.com; style-src 'self' 'unsafe-inline' 'report-sample' https://use.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://ajax.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://widget-mediator.zopim.com https://player.vimeo.com https://www.google.com https://www.gstatic.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://v2.zopim.com https://static.zdassets.com https://www.google-analytics.com https://www.googletagmanager.com https://ajax.googleapis.com https://cdn.jsdelivr.net; font-src 'report-sample' 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://v2.zopim.com; connect-src 'self' https://ekr.zdassets.com https://stats.g.doubleclick.net https://www.google-analytics.com https://www.googleadservices.com https://yoast.com wss://widget-mediator.zopim.com https://www.google.co.uk; frame-src 'self' https://*.snapsurveys.com https://www.google.com https://player.vimeo.com; base-uri 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' ; object-src 'none'; manifest-src 'self'; media-src 'self'; worker-src 'self'; report-uri https://www.snapsurveys.com/scripts/report_csp.php;frame-ancestors 'self' https://*.snapsurveys.com 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' http://www.google-analytics.com; img-src 'self' https://ssl.google-analytics.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' http://duenquiry.digitaluniversity.ac https://www.google.com; connect-src 'self'; object-src 'self'; frame-ancestors 'self' http://duenquiry.digitaluniversity.ac; 1
default-src 'self' https://api.observablehq.com https://events.observablehq.com https://static.observablehq.com https://static.observableusercontent.com ; connect-src https://api.observablehq.com https://events.observablehq.com https://static.observablehq.com wss://ws.observablehq.com https://connector.observableusercontent.com https://www.google-analytics.com https://checkout.stripe.com https://*.ingest.sentry.io; font-src https://fonts.gstatic.com; frame-ancestors 'none'; frame-src https://*.static.observableusercontent.com https://observablehq.com https://static.observableusercontent.com https://checkout.stripe.com data: blob:; img-src https://static.observableusercontent.com https://static.observablehq.com https://*.githubusercontent.com https://*.stripe.com https://avatars.observableusercontent.com https://www.google-analytics.com data: blob:; manifest-src 'none'; media-src https://static.observablehq.com; object-src 'none'; prefetch-src https://api.observablehq.com https://events.observablehq.com https://static.observablehq.com https://static.observableusercontent.com ; script-src https://static.observablehq.com https://www.google-analytics.com https://checkout.stripe.com 'sha256-7L89jUqbQ2cfpzhKP+MNcU9V8EuqWXtMMW+T9giVbWg=' 'sha256-omBtRi32gmHBQ+dXrFohK9m52CwUetuQ1DO66PbfCZQ=' 'sha256-DEY7uFMT16+BnFyNi41ncPUJCzZFemSkJrxjX6WNKqU=' 'sha256-80Zk4d3d0P2K9LoF7j0feiwfFf67b1Rc/UEUr96WPpA='; style-src https://static.observablehq.com https://fonts.googleapis.com 'unsafe-inline'; worker-src 'none' 1
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; frame-src *; img-src * data:; 1
frame-ancestors www.journoportfolio.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' mepuzz.com *.mepuzz.com *.accesstrade.vn www.gstatic.com connect.facebook.net www.google-analytics.com www.googletagmanager.com widget.subiz.xyz *.sbz.vn file-subiz.com fonts.googleapis.com fonts.gstatic.com storage.googleapis.com www.youtube.com *.doubleclick.net *.subiz.net *.googleapis.com *.google.com *.googleadservices.com *.subiz-cdn.com; frame-src 'self' asia.creativecdn.com www.youtube.com *.facebook.com *.google.com *.doubleclick.net *.hoanghamobile.com; 1
default-src 'self' data: *.bilibili.com *.hdslb.com *.bigfun.cn *.bigfunapp.cn *.biligame.com *.biligame.com; style-src 'self' 'unsafe-inline' *.hdslb.com static.geetest.com; img-src 'self' data: blob: 'unsafe-inline' *.bilibili.com *.hdslb.com http://*.hdslb.com static.geetest.com *.bigfun.cn *.bigfunapp.cn *.biligame.com *.cnzz.com cnzz.mmstat.com open.weixin.qq.com *.bdstatic.com *.baidu.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bilibili.com *.hdslb.com api.geetest.com static.geetest.com *.bigfun.cn *.bigfunapp.cn *.biligame.com *.cnzz.com http://*.cnzz.com *.bdstatic.com *.baidu.com; object-src 'self' *.hdslb.com; media-src 'self' *.acgvideo.com http://*.acgvideo.com *.ksyungslb.com; connect-src 'self' data: wss://*.bilibili.com:* *.bilibili.com *.hdslb.com *.biliapi.net *.biliapi.com *.bigfun.cn *.bigfunapp.cn *.biligame.com; frame-ancestors 'self' *.bilibili.com *.biligame.com *.bigfun.cn *.bigfunapp.cn *.biligame.com; report-uri https://security.bilibili.com/csp_report 1
default-src 'none'; connect-src 'self' collect.tealiumiq.com *.crownpeak.com *.akamaihd.net *.akstat.io *.api.decibelinsight.net smetrics.barclays.co.uk barclaysbankplc.tt.omtrdc.net barclaysinternational.sc.omtrdc.net bat.bing.com beacon.krxd.net collection.decibelinsight.net cdn.decibelinsight.net dpm.demdex.net jslog.krxd.net *.tt.omtrdc.net p11.techlab-cdn.com wss://collection.decibelinsight.net www.media.barclays.co.uk; font-src 'self' fonts.gstatic.com edigitalsurvey.com www.media.barclays.co.uk; frame-src 'self' 4482330.fls.doubleclick.net assets.adobedtm.com barclaysbankplc.demdex.net cdn.krxd.net edigitalsurvey.com www.google.com www.media.barclays.co.uk bid.g.doubleclick.net; img-src 'self' data: www.barclaycard.co.uk collect.tealiumiq.com cdnjs.cloudflare.com loadm.exelator.com twitter.com cimage.adobe.com aax-eu.amazon-adsystem.com ad.doubleclick.net adservice.google.com analytics.twitter.com apiservices.krxd.net bat.bing.com beacon.krxd.net beacon.rci.eggplant.cloud bppmdmxgsg.execute-api.eu-west-1.amazonaws.com cm.everesttech.net cm.g.doubleclick.net dc.ads.linkedin.com dpm.demdex.net googleads.g.doubleclick.net www.google-analytics.com insight.adsrvr.org load77.exelator.com loadus.exelator.com pippio.com pixelg.adswizz.com px.ads.linkedin.com smetrics.barclays.co.uk sp.analytics.yahoo.com t.co t.teads.tv www.facebook.com www.google.co.uk www.google.com www.google.es www.google.it adservice.google.co.uk adservice.google.de www.googleadservices.com adservice.google.co.za edigitalsurvey.com www.google.com.jm www.google.gr www.google.fr www.google.com.au www.google.im www.google.ie www.google.co.th www.google.pt www.google.co.in www.google.je www.google.co.za www.google.hr www.google.com.tr www.google.com.sa www.google.pl www.google.com.gi www.google.co.jp www.google.com.hk www.google.de www.google.co.kr www.google.com.ng www.google.com.cy www.google.nl www.google.se www.google.ca adservice.google.es www.google.co.ke www.google.vg www.google.fi www.google.cz www.google.gg adservice.google.hr www.google.co.cr www.google.co.nz www.google.ro www.google.com.mm www.google.ae www.google.be www.google.com.my www.google.so www.google.at www.google.ee www.google.bg www.google.cl www.google.com.sg adservice.google.ae www.google.lv www.google.mu www.google.ch www.google.com.ph www.google.com.tw www.gstatic.com www.google.com.mx www.google.bs www.google.com.vn www.google.com.sl www.google.no www.google.com.bh www.google.co.ao www.google.com.qa adservice.google.mk adservice.google.bg adservice.google.co.in www.google.iq adservice.google.gr www.google.com.kh www.google.mk adservice.google.com.om www.google.co.id www.google.com.ua www.google.is www.google.com.af adservice.google.com.tw  www.google.ru www.google.ms www.google.dk www.google.sk www.google.hu www.google.co.zw www.google.com.co www.google.com.eg www.google.gy www.google.rs www.google.co.il www.google.com.gh www.google.al www.google.tn www.google.com.om www.google.si www.google.md www.google.sn www.google.co.ug www.google.com.ag usermatch.krxd.net ssl.gstatic.com www.google.lt barclaysinternationalbarcardbusinessprod.112.2o7.net www.linkedin.com www.media.barclays.co.uk cx.atdmt.com jslog.krxd.net; media-src 'self' www.media.barclays.co.uk jslog.krxd.net p.adsymptotic.com cx.atdmt.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.crownpeak.com collect.tealiumiq.com tags.tiqcdn.com assets.adobedtm.com barclaysinternational.sc.omtrdc.net bat.bing.com beacon.krxd.net cdn.decibelinsight.net app.decibelinsight.com collection.decibelinsight.net cdn.krxd.net consumer.krxd.net data.rci.eggplant.cloud googleads.g.doubleclick.net img.en25.com metrics.responsetap.com static-ssl.responsetap.com www.google.com www.googleadservices.com www.gstatic.com www.google-analytics.com www.media.barclays.co.uk edigitalsurvey.com ; style-src  'self' 'unsafe-inline' www.media.barclays.co.uk fonts.googleapis.com; worker-src 'self'; object-src 'self'; manifest-src 'self'; base-uri 'self'; 1
"frame-ancestors 'self'" 1
default-src *.quantummetric.com 'unsafe-inline' 'unsafe-eval' 'self' blob:; worker-src blob:; child-src blob:; object-src 'self'; media-src 'self' usassets.chat.pega.com firefly-chat-production.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://usuat.cobrowse.pega.com/ https://usuatassets.cobrowse.pega.com https://geolocation.onetrust.com https://www.google.com https://cdn.cookielaw.org https://js-staging.poshdevelopment.com/ https://js.poshdevelopment.com https://api.poshdevelopment.com https://staging.poshdevelopment.com *.quantummetric.com http://dfcumanagedservicesstageenvironment.112.2o7.net https://analytics.twitter.com/ *.ads-twitter.com https://us.cobrowse.pega.com https://usassets.cobrowse.pega.com *.steelhousemedia.com https://dcu-mkt-stage1.campaign.adobe.com https://dcu.campaign.adobe.com *.calcxml.com *.cloudflare.com https://googleads.g.doubleclick.net https://chat.usefirefly.com https://usefirefly.com  https://connect.facebook.net www.google-analytics.com assets.adobedtm.com *.timevaluecalculators.com *.bazaarvoice.com *.iesnare.com *.googleapis.com *.dcuinsurance.com tagmanager.google.com www.googletagmanager.com https://www.google-analytics.com https://firefly-chat-production.s3.amazonaws.com  http://www.googleadservices.com https://connect.facebook.net http://digitalfederalcreditunion.sc.omtrdc.net https://digitalfederalcreditunion.sc.omtrdc.net; connect-src 'self' *.ads-twitter.com *.quantummetric.com https://dcu-mkt-stage1.campaign.adobe.com https://dcu.campaign.adobe.com wss://usefirefly.com https://usefirefly.com * *.cloudflare.com *.calcxml.com *.dcu.org *.omtrdc.net *.demdex.net *.bazaarvoice.com wss://chat.usefirefly.com https://www.google-analytics.com  https://www.dcuinsurance.com http://digitalfederalcreditunion.sc.omtrdc.net https://digitalfederalcreditunion.sc.omtrdc.net; img-src 'self' *.com *.yahoo.com http://t.co/ dsum.casalemedia.com su.addthis.com s.thebrighttag.com image2.pubmatic.com ads.scorecardresearch.com t.mookie1.com x.bidswitch.net usermatch.krxd.net match.sharethrough.com cm.g.doubleclick.net ads.yahoo.com pixel.advertising.com insight.adsrvr.org www.facebook.com usassets.chat.pega.com firefly-chat-production.s3.amazonaws.com *.bazaarvoice.com https://www.google.co.in https://www.google.com *.timevaluecalculators.com *.everesttech.net *.demdex.net *.omtrdc.net *.googleapis.com *.gstatic.com *.112.2o7.net https://stats.g.doubleclick.net www.google-analytics.com data:; style-src 'self' 'unsafe-inline' *.cloudflare.com https://usuatassets.cobrowse.pega.com https://usassets.cobrowse.pega.com https://usefirefly.com https://dcu-mkt-stage1.campaign.adobe.com https://dcu.campaign.adobe.com *.calcxml.com https://tagmanager.google.com usassets.chat.pega.com *.timevaluecalculators.com *.googleapis.com *.bazaarvoice.com https://match.adsrvr.org https://match.prod.bidr.io; font-src 'self' fonts.gstatic.com data:; frame-src 'self' *.doubleclick.net *.culookup.com *.dcu.org *.demdex.net *.locatorsearch.com *.bazaarvoice.com  https://www.fmsi-lts.com/DIG_WS https://fmsi-lts.com/ *.adobecqms.net http://cookies.onetrust.mgr.consensu.org/ stage.dcu.org https://dcu-stage.adobecqms.net http://dcu-stage.adobecqms.net https://dcu-mkt-stage1.campaign.adobe.com https://dcu.campaign.adobe.com https://js-staging.poshdevelopment.com/ https://js.poshdevelopment.com https://api.poshdevelopment.com https://staging.poshdevelopment.com *.youtube.com 1
object-src 'none'; script-src https://ajax.googleapis.com https://d20hhedk3h2l88.cloudfront.net https://apis.google.com https://www.google.com https://www.google-analytics.com static.chartbeat.com 'self' 'unsafe-eval'  'nonce-ae49000101524822bf414e547a186d85' 'nonce-99c078c49c7044f2951b0ce6028bec69' 'nonce-4ef17e9701e0436da959588d3f692bdf' 'nonce-64932a46722d4addb684799cc7e76ef1' 'nonce-dc5a1e6edbd744cd8bd1a270f33615c8' 'nonce-4805935fc30143daa40a975a7e28fa2c' 'nonce-4eab5319525b4edb877c35e9858a8da0' 'nonce-f702d0120f834f7d9a0b6c48be1396c6' 'nonce-913e7a5c561f4886b53a6a34275615bc' 'nonce-320d0e384b724727be09575a36f2457d' 1
frame-ancestors www.priceless.com; 1
frame-ancestors 'self' *.uservoice.com *.miamed.de *.amboss.com amboss-miamed-de.ezproxy.medma.uni-heidelberg.de amboss-miamed-de.emedien.ub.uni-muenchen.de amboss-miamed-de.eaccess.ub.tum.de amboss.zendesk.com amboss.com 212699.apps.zdusercontent.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https://www.googletagmanager.com/ https://www.google-analytics.com https://stats.g.doubleclick.net https://*.e2ma.net/ https://public.tableau.com/ https://code.jquery.com/ https://www.ssa.gov; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://stackpath.bootstrapcdn.com/bootstrap/ https://*.e2ma.net/ https://code.jquery.com/ https://www.ssa.gov https://cdn.jsdelivr.net; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com; frame-src 'self' https://frb.taleo.net/ https://*.youtube.com https://*.e2ma.net/ https://public.tableau.com https://policymap.com/ https://www.policymap.com/ https://*.jquery.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com/ https://www.googletagmanager.com https://public.tableau.com/ https://*.e2ma.net/ https://www.ssa.gov https://ajax.googleapis.com https://www.ssa.gov https://cdn.jsdelivr.net; script-src-elem 'self' 'unsafe-inline' https://www.google-analytics.com/ https://www.googletagmanager.com https://public.tableau.com/ https://code.jquery.com/ https://stackpath.bootstrapcdn.com/ https://*.e2ma.net/ https://ajax.googleapis.com https://www.ssa.gov https://cdn.jsdelivr.net; connect-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com/ https://stats.g.doubleclick.net/; upgrade-insecure-requests; block-all-mixed-content; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' browser-update.org wcs.naver.net rum.beusable.net script.beusable.net mgxauaxkqisl514632.cdn.ntruss.com *.beusably.net; object-src 'self' xv-ncloud.pstatic.net *.ncloud.com *.gov-ncloud.com *.fin-ncloud.com; media-src 'self' xv-ncloud.pstatic.net; style-src 'self' 'unsafe-inline' *.beusably.net; img-src 'self' data: ssl.pstatic.net browser-update.org *.ncloud.com xv-ncloud.pstatic.net ncloud-cs.static.naver.com wcs.naver.com; frame-src nid.naver.com *.ncloud.com *.gov-ncloud.com *.fin-ncloud.com *.govdr-ncloud.com www.youtube.com xv-ncloud.pstatic.net; connect-src 'self' *.ncloud.com *.gov-ncloud.com *.fin-ncloud.com *.govdr-ncloud.com xv-ncloud.pstatic.net wss://rum.beusable.net *.beusably.net 1
frame-ancestors  https://steadyhq.com/ https://worldcrunch.com https://worldcrunch.com:443 1
default-src 'self'; connect-src 'self' https://www.google-analytics.com; img-src 'self' https://www.google-analytics.com/ https://cdn.shopify.com https://apps.shopifycdn.com https://images.editor.website https://*.bigcommerce.com https://run.pstmn.io https://*.quora.com *; frame-ancestors 'self' ; frame-src 'self' https://js.stripe.com https://www.google.com; font-src 'self' https://fonts.googleapis.com/ https://fonts.gstatic.com/ data:; script-src 'self' https://www.google-analytics.com/ https://js.stripe.com/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://a.quora.com https://www.google.com https://www.gstatic.com 'unsafe-eval' 'unsafe-inline' data:; style-src 'self' https://fonts.googleapis.com/ https://sdks.shopifycdn.com 'unsafe-inline' 1
frame-ancestors 'self' https://*.eatbook.sg https://*.mustsharenews.com https://*.zula.sg; 1
frame-ancestors 'self' https://*.shareworks.com https://*.solium.com 1
frame-ancestors *.eluniversal.com.co 1
frame-ancestors 'self' https://*.ci360.sas.com 1
default-src 'self' *.viabtc.com:* viabtc.com:* static.zdassets.com viabtc.zendesk.com www.google-analytics.com stats.g.doubleclick.net www.youtube-nocookie.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.viabtc.com viabtc.com www.google-analytics.com static.geetest.com *.zdassets.com api.geetest.com monitor.geetest.com res.wx.qq.com viabtc.zendesk.com www.google-analytics.com stats.g.doubleclick.net; style-src 'unsafe-inline' at.alicdn.com *.viabtc.com viabtc.com static.geetest.com viabtc.zendesk.com dn-staticdown.qbox.me; img-src www.google-analytics.com www.google.com *.aliyuncs.com *.alicdn.com *.viabtc.com viabtc.com viabtcconfig.oss-cn-shenzhen.aliyuncs.com viapoolconfig.oss-cn-hongkong.aliyuncs.com data: stats.g.doubleclick.net static.geetest.com; font-src 'unsafe-inline' at.alicdn.com *.viabtc.com viabtc.com data:; connect-src *.viabtc.com:* viabtc.com:* viabtc.zendesk.com viabtc-help.zendesk.com *.zdassets.com https://widget-mediator.zopim.com https://p.extfun.com wss://widget-mediator.zopim.com www.google-analytics.com stats.g.doubleclick.net 1
default-src 'self' play.vidyard.com dev.visualwebsiteoptimizer.com geoip-db.com omappapi.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: www.googletagmanager.com www.google-analytics.com www.googleadservices.com bat.bing.com ml314.com *.g.doubleclick.net disqus.com *.disqus.com *.disquscdn.com *.ceros.com play.vidyard.com storage.googleapis.com tagmanager.google.com *.mxpnl.com connect.facebook.net *.rfihub.net *.rfihub.com *.doubleclick.net *.addtoany.com w.soundcloud.com widget.surveymonkey.com www.surveymonkey.com ajax.googleapis.com assets.pinterest.com *.bizographics.com *.linkedin.com *.mixpanel.com *.mxpnl.com *.addtoany.com ade.clmbtech.com pixel.mathtag.com intlinks.netmng.com *.opmnstr.com cdnjs.cloudflare.com *.visualwebsiteoptimizer.com *.vwo.com snap.licdn.com p.adsymptotic.com munchkin.marketo.net *.marketo.com *.bizible.com *.oktopost.com okt.to *.driftt.com geoip-db.com www3.intralinks.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net *.omappapi.com hm.baidu.com www2.intralinks.com *.intralinks.com services.intralinks.com cdn.cookielaw.org geolocation.onetrust.com; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com c.disquscdn.com tagmanager.google.com *.mxpnl.com www2.intralinks.com optimize.google.com *.vwo.com *.marketo.com www3.intralinks.com *.driftt.com *.driftqa.com *.api.drift.com; img-src * data: optimize.google.com; media-src 'self' *.snapengage.com js.driftqa.com; frame-src 'self' www3.intralinks.com disqus.com ceros.com vidyard.com www.googletagmanager.com www.google-analytics.com www.googleadservices.com *.ceros.com play.vidyard.com *.rfihub.com *.doubleclick.net  *.addtoany.com www.youtube.com w.soundcloud.com connect.facebook.net www.surveymonkey.com assets.pinterest.com www2.intralinks.com *.bizographics.com *.linkedin.com *.facebook.com pixel.mathtag.com optimize.google.com app.vwo.com *.marketo.com *.driftt.com geoip-db.com share.zencast.fm blob: 'self'; child-src 'self' blob: www2.intralinks.com dev.visualwebsiteoptimizer.com  *.vwo.com geoip-db.com blob: 'self'; font-src * tagmanager.google.com optimize.google.com; connect-src 'self' 'unsafe-inline' *.disqus.com tagmanager.google.com *.mxpnl.com *.mixpanel.com *.g.doubleclick.net www.google-analytics.com www.facebook.com www2.intralinks.com *.addtoany.com *.opmnstr.com *.visualwebsiteoptimizer.com *.vwo.com 414-bkn-706.mktoresp.com geoip-db.com bam.nr-data.net bam-cell.nr-data.net api.omappapi.com *.intralinks.com *.omappapi.com hm.baidu.com bat.bing.com  cdn.cookielaw.org geolocation.onetrust.com privacyportal-eu.onetrust.com; report-uri /report-csp-violation 1
default-src 'self'; font-src 'self' data:; style-src 'self' 'unsafe-inline'; object-src 'self'; child-src 'self' ujet.co *.ujet.co; connect-src 'self' https://stats.g.doubleclick.net https://segments.company-target.com https://www.google-analytics.com https://connect.facebook.net/ https://vc.hotjar.io https://in.hotjar.com https://*.demdex.net https://api.company-target.com https://smetrics.aveva.com https://cm.everesttech.net https://forms.hsforms.com https://forms.hubspot.com https://forms.hubspot.com https://assets.adobedtm.com https://aveva.tt.omtrdc.net https://m.addthis.com https://api.hubapi.com; img-src 'self' data: https://segments.company-target.com https://a.emtana.com https://whisky.ana.biddingx.com https://whisky.ana.stg8.com https://masky.biddingx.com https://t.co https://connect.facebook.net https://forms.hubspot.com https://*.demdex.net https://match.prod.bidr.io https://stats.g.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.google.co.in https://p.adsymptotic.com https://www.linkedin.com https://px.ads.linkedin.com https://www.facebook.com https://smetrics.aveva.com https://cm.everesttech.net https://assets.adobedtm.com https://avevaenglishdev.112.2o7.net https://forms.hsforms.com https://track.hubspot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://view.ceros.com https://okt.to https://analytics.twitter.com https://script.hotjar.com https://tag.demandbase.com https://secure.feed5mown.com https://static.ads-twitter.com http://clientservices.googleapis.com https://static.hotjar.com https://static.oktopost.com https://www.googletagmanager.com http://r2---sn-ci5gup-cvhz.gvt1.com http://r4---sn-qxaeen7e.gvt1.com http://redirector.gvt1.com http://update.googleapis.com http://www.gstatic.com https://js.driftt.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://js.hsadspixel.net https://connect.facebook.net https://www.googletagmanager.com https://snap.licdn.com https://noembed.com *.adobe.com *.tvsquared.com ujet.co *.ujet.co google-analytics.com *.google-analytics.com trk.clinch.co https://fast.wistia.net http://fast.wistia.com http://vimeo.com https://vimeo.com https://*.vimeo.com https://*.demdex.net https://cm.everesttech.net https://assets.adobedtm.com https://www.youtube.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-banner.com https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hsleadflows.net  https://s.ytimg.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://s7.addthis.com https://v1.addthisedge.com  https://m.addthis.com https://z.moatads.com https://graph.facebook.com; frame-src 'self' https://www.w3.org https://view.ceros.com https://forms.hsforms.com https://vars.hotjar.com https://js.driftt.com https://*.demdex.net https://www.facebook.com https://www.youtube.com https://fast.wistia.net https://s7.addthis.com https://player.vimeo.com https://bid.g.doubleclick.net https://www.slideshare.net; 1
default-src 'self' 'nonce-33205453+1' *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.net *.facebook.com *.youtube.com i.ytimg.com *.twitter.com *.twimg.com *.pna.gov.ph; base-uri 'self'; frame-ancestors 'none'; object-src 'none' 1
upgrade-insecure-requests; default-src 'self' https: *.cwp-stg.sg *.cwp.sg *.addthis.com *.addthisedge.com *.wogaa.sg *.demdex.net *.everesttech.net *.adobetag.com va.ecitizen.gov.sg *.onemap.sg *.moatads.com wogadobeanalytics.sc.omtrdc.net www.google-analytics.com www.googletagmanager.com *.googleapis.com *.gstatic.com api.data.gov.sg ifaqs.flexanswer.com *.doubleclick.net *.bootstrapcdn.com; connect-src 'self' *.addthis.com *.addthisedge.com *.wogaa.sg dpm.demdex.net wogadobeanalytics.sc.omtrdc.net va.ecitizen.gov.sg www.google-analytics.com *.googleapis.com *.gstatic.com api.data.gov.sg smartnation.data.gov.sg ifaqs.flexanswer.com *.doubleclick.net *.bootstrapcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cwp-stg.sg *.cwp.sg *.addthis.com *.addthisedge.com *.wogaa.sg *.adobedtm.com va.ecitizen.gov.sg cdnjs.cloudflare.com *.moatads.com connect.facebook.net www.google-analytics.com www.google.com www.googletagmanager.com *.googleapis.com *.gstatic.com *.twitter.com; style-src 'self' 'unsafe-inline' *.cwp-stg.sg *.cwp.sg va.ecitizen.gov.sg cdnjs.cloudflare.com *.wogaa.sg *.googleapis.com *.gstatic.com; img-src 'self' data: *.cwp-stg.sg *.cwp.sg www.nea.gov.sg *.everesttech.net *.demdex.net va.ecitizen.gov.sg stats.g.doubleclick.net *.onemap.sg wogadobeanalytics.sc.omtrdc.net connect.facebook.net www.google-analytics.com www.googletagmanager.com *.googleapis.com *.gstatic.com *.googleusercontent.com; font-src 'self' data: *.cwp-stg.sg *.cwp.sg *.amazonaws.com va.ecitizen.gov.sg *.wogaa.sg *.googleapis.com *.gstatic.com; object-src 'self'; 1
frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com komentidewater.org komencharlotte.org *.manduka.com komen-dallas.org komenbatonrouge.org komenncalabama.org manduka.com; report-uri http://www.info-komen.org/site/XFrameViolation 1
default-src 'self'; style-src 'self' 'unsafe-inline' occhat.elisa.fi; img-src 'self' data: occhat.elisa.fi vero.piwik.pro https://analytiikka.ahtp.fi/ master.boost.ai data.reactandshare.com; media-src 'self'; font-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' occhat.elisa.fi vero.piwik.pro vero.containers.piwik.pro https://analytiikka.ahtp.fi/ veroskatt.boost.ai vero.boost.ai cdn.reactandshare.com data.reactandshare.com; connect-src 'self' occhat.elisa.fi wss://occhat.elisa.fi veroskatt.boost.ai vero.boost.ai networkmigri.boost.ai prh.boost.ai data.reactandshare.com; frame-src 'self' hkp.maanmittauslaitos.fi https://www.youtube.com https://app.powerbi.com; frame-ancestors 'self' yritys.tunnistus.fi htesti.katso.tunnistus.fi; 1
script-src  'self' 'unsafe-inline' 'unsafe-eval' *.wellsfargo.com *.wellsfargoadvisors.com *.wfafinet.com *.wellsfargoclearingservicesllc.com *.wellsfargo.com:* connect.facebook.net snap.licdn.com www.googletagmanager.com www.google-analytics.com ajax.googleapis.com; frame-ancestors 'self' *.wellsfargoadvisors.com *.wfafinet.com *.wellsfargoclearingservicesllc.com *.wellsfargo.com *.fccaccessonline.com *.wellsfargomedia.com *.wellsfargo:* *.mworld.com *.wellsfargo.net *.markitondemand.com *.wellsfargo.wallst.com *.go.onestop.wf.com; base-uri https:;default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: ad.doubleclick.net px.ads.linkedin.com p.adsymptotic.com cm.everesttech.net dpm.demdex.net;object-src 'self';font-src 'self' data: *.wellsfargo.com *.wellsfargoadvisors.com *.wfafinet.com *.wellsfargoclearingservicesllc.com *.wellsfargo.com:* fonts.gstatic.com;report-uri /reporting/csp.htm;img-src 'self' data: *.wellsfargoadvisors.com *.wfafinet.com *.wellsfargoclearingservicesllc.com wspublicprod.112.2o7.net px.ads.linkedin.com ad.doubleclick.net p.adsymptotic.com adservice.google.com;style-src 'self' 'unsafe-inline' *.wellsfargoadvisors.com *.wfafinet.com *.wellsfargoclearingservicesllc.com 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.guinness-storehouse.com *.googleapis.com maps.gstatic.com s.adroll.com s.ytimg.com stats.mp.streamamg.com streamuk.secure.footprint.net www.google-analytics.com www.googletagmanager.com www.youtube.com footer.diageohorizon.com cdnjs.cloudflare.com *.googleadservices.com *.doubleclick.net *.ads-twitter.com *.hotjar.com *.smartlook.com; object-src 'self' https: *.guinness-storehouse.com streamuk.secure.footprint.net; style-src 'self' 'unsafe-inline' https: *.guinness-storehouse.com cloud.typography.com fonts.googleapis.com footer.diageohorizon.com; img-src 'self' https: *.guinness-storehouse.com *.googleapis.com *.gstatic.com ads.yahoo.com analytics.twitter.com d.adroll.com dps.bing.com googleads.g.doubleclick.net ib.adnxs.com idsync.rlcdn.com scontent.cdninstagram.com streamuk.secure.footprint.net t.mookie1.com us-u.openx.net www.facebook.com www.google.com www.google.ie www.tripadvisor.com x.bidswitch.net www.google-analytics.com; frame-src 'self' https: *.guinness-storehouse.com *.worldnettps.com guinnessarchives.adlibsoft.com www.youtube.com vars.hotjar.com; font-src 'self' https: *.guinness-storehouse.com data: fonts.googleapis.com fonts.gstatic.com streamuk.secure.footprint.net; connect-src 'self' https: *.guinness-storehouse.com *.storehousewall.com query.yahooapis.com streamuk.secure.footprint.net *.hotjar.com:* wss://*.hotjar.com *.smartlook.com; media-src 'self' https: *.guinness-storehouse.com ; worker-src 'self' *.guinness-storehouse.com blob: 1
default-src https: wss: 'self'; font-src https: data:; img-src https: data:; script-src https: 'self' data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; 1
connect-src 'self' wss://*.wire.com wss://*.zinfra.io https://wire.com https://*.wire.com https://*.zinfra.io https://api.mapbox.com https://events.mapbox.com https://*.tiles.mapbox.com https://wire.innocraft.cloud https://*.google-analytics.com;default-src 'self' blob: https://platform.twitter.com/ https://syndication.twitter.com https://*.twimg.com;font-src 'self' https://www.slideshare.net http://www.slideshare.net https://*.slidesharecdn.com;frame-src 'self' https://wire.com https://*.wire.com https://*.zinfra.io https://platform.twitter.com/ https://syndication.twitter.com https://*.twimg.com https://*.marketo.com https://www.slideshare.net http://www.slideshare.net https://*.slidesharecdn.com https://*.youtube.com https://*.youtube-nocookie.com https://*.brightcove.net;img-src 'self' data: blob: images.ctfassets.net https://*.marketo.com https://wire.innocraft.cloud https://www.slideshare.net http://www.slideshare.net https://*.slidesharecdn.com https://platform.twitter.com/ https://syndication.twitter.com https://*.twimg.com https://wire.com https://*.wire.com https://*.zinfra.io https://*.youtube.com https://*.ytimg.com https://*.ggpht.com https://*.brightcove.net;media-src 'self';prefetch-src 'self' https://wire.innocraft.cloud https://platform.twitter.com/ https://syndication.twitter.com https://*.twimg.com;script-src 'self' 'unsafe-inline' blob: https://wire.innocraft.cloud https://platform.twitter.com/ https://syndication.twitter.com https://*.twimg.com https://*.marketo.com https://wire.com https://*.wire.com https://*.zinfra.io https://*.youtube.com https://*.ytimg.com https://*.ggpht.com https://*.brightcove.net https://*.google-analytics.com;style-src 'self' 'unsafe-inline' https://wire.com https://*.wire.com https://*.zinfra.io https://*.marketo.com https://platform.twitter.com/ https://syndication.twitter.com https://*.twimg.com 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' http://cdn.izettle.com/jquery/ https://accounts.livechatinc.com https://adservice.google.com/ddm/ https://bat.bing.com https://br.izettle.com https://c.friendbuy.com https://cdn.cookielaw.org https://cdn.friendbuy.com https://cdn.izettle.com https://cdn.livechatinc.com https://cdn.polyfill.io https://cdn.taboola.com/libtrc/unip/1313048/tfa.js https://cdn1.friendbuy.com https://code.jquery.com https://connect.facebook.net https://de.izettle.com https://discover.izettle.com https://djnf6e5yyirys.cloudfront.net https://dk.izettle.com https://embed.friendbuy.com https://es.izettle.com https://externals.ujet.co https://fi.izettle.com https://fr.izettle.com https://gb.izettle.com https://geolocation.onetrust.com https://googleads.g.doubleclick.net https://it.izettle.com https://main.ujet.co https://mx.izettle.com https://my.izettle.com https://nl.izettle.com https://no.izettle.com https://optanon.blob.core.windows.net https://optimize.google.com https://pi.pardot.com https://player.vimeo.com/api/player.js https://privacyportal-eu.onetrust.com/request/v1/consentreceipts https://s.ytimg.com https://script.hotjar.com https://se.izettle.com https://secure.livechatinc.com https://securetoken.googleapis.com https://sjs.bizographics.com https://snap.licdn.com https://ssl.google-analytics.com https://static.hotjar.com https://tagmanager.google.com https://trc.taboola.com/1313048/ https://vc.hotjar.io https://websdk.ujet.co https://widget.trustpilot.com https://ws.friendbuy.com https://www.facebook.com https://www.google-analytics.com https://www.google.co.uk https://www.google.com https://www.google.com.br https://www.google.com.mx https://www.google.de https://www.google.dk https://www.google.es https://www.google.fi https://www.google.fr https://www.google.ie https://www.google.it https://www.google.nl https://www.google.no https://www.google.pt https://www.google.se https://www.googleadservices.com https://www.googleapis.com https://www.googleoptimize.com https://www.googletagmanager.com https://www.youtube.com/iframe_api; img-src 'self' data: http://a.storyblok.com http://img2.storyblok.com https://analytics.google.com https://assistly-production.s3.amazonaws.com https://bat.bing.com https://cdn.cookielaw.org https://cdn.izettle.com https://cds.taboola.com/ https://cx.atdmt.com https://googleads.g.doubleclick.net https://i.vimeocdn.com https://i.ytimg.com https://i3.ytimg.com https://insights.hotjar.com https://izettle.desk.com https://my.izettle.com https://optanon.blob.core.windows.net https://optimize.google.com https://script.hotjar.com https://secure.livechatinc.com https://ssl.google-analytics.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com https://www.google.co.uk https://www.google.com https://www.google.com.br https://www.google.com.mx https://www.google.de https://www.google.dk https://www.google.es https://www.google.fi https://www.google.fr https://www.google.ie https://www.google.it https://www.google.nl https://www.google.no https://www.google.pt https://www.google.se https://www.googletagmanager.com https://www.gstatic.com; connect-src 'self' https://*.hotjar.com:* https://analytics.google.com https://app.launchdarkly.com https://bat.bing.com https://c.friendbuy.com https://cdn.friendbuy.com https://cdn.izettle.com https://cdn1.friendbuy.com https://clientstream.launchdarkly.com https://embed.friendbuy.com https://events.launchdarkly.com https://kitsune.izettle.com https://logs-01.loggly.com https://main.ujet.co https://my.izettle.com https://optanon.blob.core.windows.net https://privacyportal-eu.onetrust.com/request/v1/consentreceipts https://sapi.searchblok.com https://secure.izettle.com https://sentry.io/api https://ssl.google-analytics.com https://stats.g.doubleclick.net https://status.izettle.com https://trc-events.taboola.com/1313048/ https://trc.taboola.com/1313048/ https://trustpilot.izettle.com https://ujet-chat-auth-staging.herokuapp.com https://vc.hotjar.io https://ws.friendbuy.com https://www.google-analytics.com https://www.google.co.uk/ads/ https://www.google.com.br/ads/ https://www.google.com.mx/ads/ https://www.google.com/ads/ https://www.google.de/ads/ https://www.google.dk/ads/ https://www.google.es/ads/ https://www.google.fi/ads/ https://www.google.fr/ads/ https://www.google.ie/ads/ https://www.google.it/ads/ https://www.google.nl/ads/ https://www.google.no/ads/ https://www.google.se/ads/ https://www.izettle.com wss://*.hotjar.com; style-src 'self' 'unsafe-inline' https://cdn.cookielaw.org https://cdn.izettle.com https://fonts.googleapis.com https://optanon.blob.core.windows.net https://optimize.google.com https://tagmanager.google.com; frame-src https://*.selz.com https://4896710.fls.doubleclick.net https://br.izettle.com https://cdn1.friendbuy.com https://de.izettle.com https://discover.izettle.com https://dk.izettle.com https://es.izettle.com https://fi.izettle.com https://fr.izettle.com https://gb.izettle.com https://go.pardot.com https://it.izettle.com https://izettle-community.force.com https://izettle.go2cloud.org https://mx.izettle.com https://my.izettle.com https://nl.izettle.com https://no.izettle.com https://optimize.google.com https://player.vimeo.com https://privacyportal-eu.onetrust.com https://se.izettle.com https://secure.livechatinc.com https://terms-and-conditions.izettle.com https://vars.hotjar.com https://websdk.ujet.co https://widget.trustpilot.com https://www.youtube.com; font-src https://cdn.izettle.com https://discover.izettle.com https://fonts.googleapis.com https://fonts.gstatic.com https://script.hotjar.com https://static.hotjar.com; child-src https://vars.hotjar.com 1
default-src 'self' https://storage.googleapis.com https://accounts.google.com; child-src 'self' https://www.youtube.com https://storage.googleapis.com https://talkgadget.google.com https://accounts.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://storage.googleapis.com https://cdnjs.cloudflare.com https://ajax.googleapis.com data: https://code.jquery.com https://www.google.com https://apis.google.com https://www.google-analytics.com https://www.youtube.com https://ajax.cdnjs.com https://s.ytimg.com; img-src 'self' https://storage.googleapis.com https://www.google.com data: https://i.ytimg.com data: https://onlinecourses-archive.nptel.ac.in https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://storage.googleapis.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://www.google.com; font-src 'self' https://fonts.gstatic.com https://storage.googleapis.com https://cdnjs.cloudflare.com data:; object-src 'self' 1
default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' google.com/recaptcha maps.googleapis.com *.adroll.com *.consensu.org *.hscollectedforms.net *.hsleadflows.net *.hs-banner.com *.licdn.com www.linkedin.com connect.facebook.net s.adroll.com ml314.com js.hs-scripts.com script.hotjar.com static.hotjar.com js.hs-analytics.net player.vimeo.com www.googletagmanager.com dev.visualwebsiteoptimizer.com sjs.bizographics.com www.google-analytics.com px.ads.linkedin.com djtflbt20bdde.cloudfront.net ajax.googleapis.com; connect-src https: wss: 'self' www.gov.uk yoast.com *.hotjar.com; img-src https: 'self' data: media.nominet.uk maps.googleapis.com track.hubspot.com stats.g.doubleclick.net www.gravatar.com dev.visualwebsiteoptimizer.com www.google-analytics.com www.googletagmanager.com; style-src https: 'self' 'unsafe-inline' djtflbt20bdde.cloudfront.net fonts.googleapis.com; frame-src https: 'self' www.youtube.com player.vimeo.com djtflbt20bdde.cloudfront.net vars.hotjar.com; font-src https: 'self' data: fonts.gstatic.com; media-src https: 'self' media.nominet.uk; frame-ancestors 'self'; base-uri 'self' *.helpscout.net; form-action 'self' *.theukdomain.uk forms.hsforms.com; object-src 'self' *.cloudfront.net; manifest-src 'self'; 1
default-src c.wgr.de 'self'; script-src c.wgr.de https://track.westermann.de connect.facebook.net www.googleadservices.com maps.googleapis.com 'self' 'unsafe-inline'; style-src c.wgr.de 'self' 'unsafe-inline'; object-src 'self'; img-src c.wgr.de https://track.westermann.de www.econda-monitor.de d32wqyuo10o653.cloudfront.net www.facebook.com googleads.g.doubleclick.net maps.googleapis.com *.gstatic.com 'self' data:; frame-src newsletter.schulbuchzentrum-online.de https://track.westermann.de www.facebook.com 'self'; child-src newsletter.schulbuchzentrum-online.de https://track.westermann.de www.facebook.com 'self'; font-src c.wgr.de 'self' data:; connect-src https://secure.schulbuchzentrum-online.de https://track.westermann.de http://www.econda-monitor.de 'self'; report-uri /backend/csp 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://images.101datacenter.net https://*.101domain.com https://chat.livecustomer.com https://my.nic.io https://*.google.com https://seal.verisign.com https://privacy-policy.truste.com https://www.google-analytics.com https://*.gstatic.com https://www.googletagmanager.com https://www.googleadservices.com https://www.youtube.com https://secure.campaigner.com https://connect.facebook.net https://*.kissmetrics.com https://*.googleapis.com https://*.google.bg data: 1
default-src 'self' data: ; script-src 'self' data: developers.google.com www.google.com www.gstatic.com secure.wufoo.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.google.com; img-src *; font-src 'self' fonts.gstatic.com; child-src 'self'; frame-src https://www.google.com/recaptcha/ secure.wufoo.com securitytrails.wufoo.com; form-action 'self'; upgrade-insecure-requests; 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=DE&lang=de-DE&device=desktop&yrid=786k9bhful3qa&partner=; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://embed.acuityscheduling.com https://js.stripe.com https://z.moatads.com https://s7.addthis.com https://blog.volgistics.com https://script.crazyegg.com https://seal.digicert.com https://cdn.leadmanagerfx.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://bat.bing.com https://ct.capterra.com https://www.googletagmanager.com https://tagmanager.google.com; 1
default-src 'self' *.cwp.gov.sg *.cwp-stg.sg https://*.cwp-stg.sg https://*.wogaa.sg https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/; form-action 'self' 'unsafe-inline' 'unsafe-eval' *.demdex.net *.cwp-stg.sg https://*.cwp-stg.sg; frame-src 'self' https://player.vimeo.com *.demdex.net *.onemap.sg assets.adobedtm.com forms.cwp.gov.sg www.google.com www.gstatic.com *.cwp-stg.sg https://*.cwp-stg.sg; connect-src 'self' 'unsafe-inline' https://*.wogaa.sg https://dpm.demdex.net/ *.demdex.net wogadobeanalytics.sc.omtrdc.net *.cwp.gov.sg *.cwp-stg.sg https://*.cwp-stg.sg; style-src 'self' 'unsafe-inline' https://assets.wogaa.sg/fonts/ fonts.googleapis.com www.google.com www.gstatic.com *.cwp.gov.sg *.cwp-stg.sg https://*.cwp-stg.sg maxcdn.bootstrapcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.wogaa.sg https://assets.adobedtm.com/ www.google-analytics.com www.google.com www.gstatic.com ajax.googleapis.com *.cwp.gov.sg *.cwp-stg.sg https://*.cwp-stg.sg maxcdn.bootstrapcdn.com; font-src 'self' data: fonts.gstatic.com *.cwp-stg.sg https://assets.wogaa.sg/fonts/ https://*.cwp-stg.sg *.onemap.sg maxcdn.bootstrapcdn.com; img-src 'self' blob: data: http://www.agc.gov.sg https://wogadobeanalytics.sc.omtrdc.net/ https://cm.everesttech.net/ https://dpm.demdex.net/ *.demdex.net www.google-analytics.com stats.g.doubleclick.net www.google.com www.gstatic.com *.cwp-stg.sg https://*.cwp-stg.sg *.onemap.sg; child-src 'self'; object-src 'self' *.gov.sg *.cwp-stg.sg https://*.cwp-stg.sg 1
frame-ancestors 'self' *.doteasy.com; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval' wss://*.hotjar.com 1
frame-ancestors 'self' vs.t4edu.com vschool.sa schools.t4edu.com schools.madrasati.sa madrasati.sa mobile.vschool.sa ien.edu.sa ibs.ien.edu.sa vcr.ien.edu.sa mobile.ien.edu.sa auth.ien.edu.sa moelms.ien.edu.sa vlc.ien.edu.sa; 1
default-src 'unsafe-inline' 'unsafe-eval' data: https://*; media-src http://download.milestonesys.com/ https://*; 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://mlbcomblogs.mlblogs.com https://*.mlbcomblogs.mlblogs.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src https: 'unsafe-eval' 'unsafe-inline' data:; 1
frame-ancestors 'self' https://reittiopas.hsl.fi https://uusi.reittiopas.hsl.fi https://next-dev.digitransit.fi 1
https://forum.zenphoto.org; block-all-mixed-content 1
script-src 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' 'self' blob: *; img-src * data: blob:; connect-src *; font-src 'self' data: *; object-src 'self'; media-src 'self' blob: *; child-src * 1
default-src https: data: wss:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; connect-src https: wss:; font-src https: data:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' app.calconic.com storage.googleapis.com static.hsappstatic.net use.typekit.net *.cloudfront.net js.hs-scripts.com static.hotjar.com snap.licdn.com script.hotjar.com js.hsadspixel.net js.hs-analytics.net js.usemessages.com www.google-analytics.com connect.facebook.net public.profitwell.com js.hs-banner.com www.googletagmanager.com https://tagmanager.google.com; img-src 'self' p.adsymptotic.com *.cloudfront.net www.linkedin.com px.ads.linkedin.com www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com track.hubspot.com p.typekit.net track.hubspot.com www.facebook.com;connect-src vc.hotjar.io api.mixpanel.com api.hubspot.com in.hotjar.com api.hubapi.com app.calconic.com www2.profitwell.com;font-src 'self' fonts.gstatic.com use.typekit.net data: script.hotjar.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://tagmanager.google.com https://fonts.googleapis.com *.cloudfront.net; frame-src 'self' app.hubspot.com vars.hotjar.com www.google.com; media-src 'self' *.cloudfront.net;upgrade-insecure-requests 1
default-src https://eham.net https://*.eham.net http://*.noaa.gov https://*.paypal.com https://*.googleapis.com data: 'unsafe-inline' 'unsafe-eval';		img-src * data:;		 report-uri https://eham.net/log/csp-report; 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://bothsidesofthetable.com https://*.bothsidesofthetable.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src * 'unsafe-eval' 'unsafe-inline'; script-src 'unsafe-inline' 'unsafe-eval' https://digio.in https://*.digio.in https://*.signpad.in https://seal.godaddy.com https://apis.google.com https://www.google-analytics.com https://connect.facebook.net https://checkout.razorpay.com https://cdnjs.cloudflare.com/ajax/libs/ https://services.digitallocker.gov.in https://www.google.com/recaptcha/api.js https://www.gstatic.com; img-src * data:; media-src * blob:; 1
default-src 'self' static.financialsense.com; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' data: blob:; style-src 'self' static.financialsense.com data: 'unsafe-inline' *.googleapis.com *.twitter.com *.twimg.com svc.webspellchecker.net; img-src 'self' https: data: android-webview-video-poster:; media-src 'self' static.financialsense.com blob: *.giphy.com; frame-src 'self' https://www.financialsense.com data: audioboom.com *.audioboom.com scribd.com *.scribd.com soundcloud.com *.soundcloud.com youtube.com *.youtube.com vimeo.com *.vimeo.com bitchute.com *.bitchute.com twitter.com *.twitter.com *.tradingview.com *.addthis.com *.stripe.com *.doubleclick.net *.googlesyndication.com *.ted.com *.instagram.com *.jwpsrv.com www.google.com ms-appx-web: *.assoc-amazon.com *.amazon.com *.amazon-adsystem.com *.googletagmanager.com *.recaptcha.net facebook.com *.facebook.com cnn.com *.cnn.com cnbc.com *.cnbc.com; frame-ancestors *; child-src 'self' https://www.financialsense.com data: audioboom.com *.audioboom.com scribd.com *.scribd.com soundcloud.com *.soundcloud.com youtube.com *.youtube.com vimeo.com *.vimeo.com bitchute.com *.bitchute.com twitter.com *.twitter.com *.tradingview.com *.addthis.com *.stripe.com *.doubleclick.net *.googlesyndication.com *.ted.com *.instagram.com *.jwpsrv.com www.google.com ms-appx-web: *.assoc-amazon.com *.amazon.com *.amazon-adsystem.com *.googletagmanager.com *.recaptcha.net facebook.com *.facebook.com cnn.com *.cnn.com cnbc.com *.cnbc.com; font-src 'self' static.financialsense.com data: fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com *.googleusercontent.com svc.webspellchecker.net *.avast.com chrome-extension:; connect-src 'self' static.financialsense.com *.addthis.com *.googlesyndication.com www.google-analytics.com *.gstatic.com *.doubleclick.net svc.webspellchecker.net *.jwpltx.com *.nr-data.net 1
frame-ancestors 'self' https://*.teamsupport.com/ 1
base-uri 'none'; default-src 'none'; frame-ancestors 'self' https://*.gab.com https://*.openplatform.us; font-src 'self' https://gab.com; img-src 'self' https: data: blob: https://gab.com; style-src 'self' 'unsafe-inline' https://gab.com; media-src 'self' https: data: https://gab.com; frame-src 'self' https:; manifest-src 'self' https://gab.com; connect-src 'self' blob: https://gab.com wss://gab.com https://*.gab.com; script-src 'self' https://gab.com https://*.gab.com 1
frame-ancestors 'self' http://www.philips.ru *.philips.com *.philips.ru 1
default-src 'none'; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://forms.hubspot.com https://vimeo.com; img-src 'self' data: https://stats.g.doubleclick.net https://d140dcqr6pqow0.cloudfront.net https://crowdmark-com.s3.amazonaws.com https://www.facebook.com https://track.hubspot.com https://www.google-analytics.com; script-src 'self' https://js.driftt.com https://www.gstatic.com https://www.google.com 'sha256-5x22AGTtRbluf0B4P6qWwl51yD49tQD5VVfWBZuKWEw=' 'sha256-MdpKtkAjqULJWpVFgyU2Fe6L+JfF2rkRlbieAQgtFYw=' https://unpkg.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://player.vimeo.com https://connect.facebook.net https://www.googletagmanager.com https://js.hscollectedforms.net https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://d140dcqr6pqow0.cloudfront.net https://crowdmark-com.s3.amazonaws.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; frame-src 'self' https://js.driftt.com https://www.google.com https://player.vimeo.com https://www.youtube.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://webto.salesforce.com; media-src 'self' https://js.driftqa.com https://js.driftt.com https://d140dcqr6pqow0.cloudfront.net https://crowdmark-com.s3.amazonaws.com; object-src 'none'; 1
frame-ancestors 'self' *.vietgiaitri.com 1
default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: github.com img.shields.io codecov.io; font-src 'self' 1
default-src * 'self' 'unsafe-inline' ; script-src 'self' *.cloud.coveo.com *.windows.net *.google-analytics.com *.googletagmanager.com *.gstatic.com *.google.com *.hotjar.com *.qualtrics.com data: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *.google-analytics.com staticcdn.co.nz *.staticcdn.co.nz *.sharepoint.com *.cloud.coveo.com *.windows.net *.ird.govt.nz *.gstatic.com *.google.com *.google.com.au *.google.co.nz *.doubleclick.net *.cloudfront.net *.qualtrics.com; connect-src * ; upgrade-insecure-requests; block-all-mixed-content; frame-src 'self' *.ird.govt.nz staticcdn.co.nz *.staticcdn.co.nz *.google.com *.youtube.com *.cloudfront.net *.googletagmanager.com *.hotjar.com *.slideshare.net *.qualtrics.com; form-action 'self' *.ird.govt.nz; font-src 'self' data: *.typekit.net *.gstatic.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' 'nonce-sclotusinnline' linkhay.com vscc-hosting.mediacdn.vn platform.twitter.com connect.facebook.net cdn.syndication.twimg.com *.sohatv.vn *.admicro.vn *.lotuscdn.vn *.lotus.vn static.amcdn.vn deqik.com imasdk.googleapis.com; child-src 'self' lotus.vn *.lotus.vn linkhay.com *.sohatv.vn sport5.vn sport5.cnnd.vn blob: *.admicro.vn *.youtube.com *.facebook.com *.twitter.com twitter.com *.youtu.be www.instagram.com instagram.com; form-action 'self' *.cnnd.vn wechoice.vn  *.wechoice.vn syndication.twitter.com platform.twitter.com; object-src 'self'; media-src 'self' blob: *.lotuscdn.vn kenh14cdn.com *.sohatv.vn; 1
frame-ancestors 'self' https://www.tibco.com http://tibco.lookbookhq.com https://tibco.lookbookhq.com https://sso-awsqa.tibco.com https://sso-ext.tibco.com http://library.tibco.com https://library.tibco.com https://www-dev.tibco.com https://tibco.seismic.com 1
frame-ancestors 'self' imdb.com *.imdb.com *.media-imdb.com withoutabox.com *.withoutabox.com amazon.com *.amazon.com amazon.co.uk *.amazon.co.uk amazon.de *.amazon.de translate.google.com images.google.com www.google.com www.google.co.uk search.aol.com bing.com www.bing.com 1
default-src 'none'; script-src 'self' www.google-analytics.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: www.google-analytics.com ci.appveyor.com; font-src 'self' data: fonts.gstatic.com; frame-src 'self' www.slideshare.net www.youtube.com; child-src 'self' www.slideshare.net www.youtube.com; manifest-src 'self'; base-uri 'self'; frame-ancestors 'none' 1
frame-ancestors 'self' home.kpmg kpmg.experiencecloud.adobe.com; base-uri 'self'; 1
default-src 'self' https://bug.openrightsgroup.org https: data: ; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' ; style-src 'self' https: 'unsafe-inline' ; report-uri https://openrightsgroup.report-uri.com/r/d/csp/enforce 1
frame-ancestors http://bi.kakaogames-eu.com 1
upgrade-insecure-requests; base-uri 'self'; frame-ancestors *.translink.ca *.surreylangleyskytrain.ca *.compasscard.ca; manifest-src 'self'; 1
frame-ancestors 'self'; report-uri https://www.verybestbaking.com/report-uri/enforce 1
frame-ancestors 'self' https://*.sanity.io https://hjaelp-community-studio-git-staging.sanity-io.vercel.app  https://community.sanity.tools 1
script-src 'self'; 1
default-src https:; connect-src 'self' https: wss://visitors.live wss://*.visitors.live; worker-src blob:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 'unsafe-eval'; img-src http://career.luxoft.com http://www.luxoft.com 'self' https: data:; 1
default-src *; img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src  'self' 'unsafe-inline' *; media-src * 'self' blob:; worker-src * 'self' blob:; frame-ancestors 'self' https:* 1
connect-src 'self' https://api.starlink.com https://www.starlink.com; script-src 'self' 'unsafe-eval' https://api.starlink.com https://maps.googleapis.com/; font-src 'self' https://api.starlink.com https://fonts.gstatic.com; worker-src 'self' blob: ; style-src 'self' 'unsafe-inline' https://api.starlink.com https://fonts.googleapis.com; frame-ancestors 'self' https://api.starlink.com; 1
default-src 'self' *.finma.ch tag.myaspectra.ch fast.fonts.net fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' tag.myaspectra.ch fast.fonts.net *.twitter.com *.twimg.com; img-src 'self' data: tag.myaspectra.ch *.twitter.com *.twimg.com; style-src 'self' 'unsafe-inline' fast.fonts.net fonts.googleapis.com *.twitter.com *.twimg.com; child-src 'self' *.refline.ch register.finma.ch portal.finma.ch; frame-src 'self' *.refline.ch register.finma.ch portal.finma.ch *.vimeo.com jobs.finma.ch *.twitter.com *.twimg.com event.finma.ch; frame-ancestors 'self'; 1
default-src 'self' https: *.gravatar.com *.yahoo.com *.yimg.com *.gstatic.com *.google.com *.adsrvr.org *.adnxs.com *.doubleclick.net *.facebook.net *.sojern.com *.cookielaw.org *.onetrust.com *.google-analytics.com *.bing.com *.crazyegg.com *.googletagmanager.com *.derbysoftsec.com *.simpli.fi *.vimeocdn.com *.jackrabbitsystems.com *.programmatictrader.com *.tiqcdn.com *.w3.org *.azds.com *.montagehotels.com; script-src 'self' *.w3.org *.yahoo.com *.googletagmanager.com *.google.com *.crazyegg.com *.bing.com *.google-analytics.com *.yimg.com *.facebook.net *.onetrust.com *.cookielaw.org *.gstatic.com *.azds.com *.derbysoftsec.com *.sojern.com *.tiqcdn.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' *.montagehotels.com *.cloudfront.net *.adsrvr.org *.derbysoftca.com *.w3.org * https: *.doubleclick.net *.google.com *.sojern.com *.gravatar.com *.youtube.com data:; style-src 'self' *.azds.com 'unsafe-inline'; font-src 'self' *.azds.com data:; object-src 'self'; 1
frame-ancestors 'self' bibliocms.com *.bibliocms.com bibliocommons.com *.bibliocommons.com libanswers.com *.libanswers.com chicago.bibliocms.com *.chicago.bibliocms.com https://chicago.bibliocms.com chicago.bibliocms.com *.chicago.bibliocms.com; 1
default-src 'self' https://*.paytmmoney.com https://*.paytm.com https://*.paytm.in; connect-src 'self' wss://*.paytmmoney.com https://paytmmoney.akamaized.net https://stats.g.doubleclick.net *.googleapis.com www.google-analytics.com www.googletagmanager.com *.go-mpulse.net https://s3-ap-south-1.amazonaws.com https://www.youtube.com https://*.paytmmoney.com https://*.paytm.com https://*.paytm.in; media-src 'self' blob: https://*.paytmmoney.com https://*.paytm.com https://*.paytm.in https://paytmmoney.akamaized.net; frame-src 'self' https://*.paytmmoney.com https://*.paytm.com https://*.paytm.in https://www.youtube.com/ http://www.youtube.com/ ; img-src 'self' data: blob: *.googleapis.com www.googletagmanager.com https://stats.g.doubleclick.net *.googleapis.com https://www.google-analytics.com https://*.paytmmoney.com https://*.paytm.in https://s3-ap-south-1.amazonaws.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.googleapis.com  https://www.gstatic.com cdnjs.cloudflare.com https://*.paytmmoney.com https://*.paytm.in www.google.com www.googletagmanager.com www.google-analytics.com *.go-mpulse.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://*.paytmmoney.com https://*.paytm.in; font-src 'self' data: https://*.paytm.in fonts.gstatic.com; report-uri https://paytm.report-uri.com/r/t/csp/enforce; 1
default-src 'none'; prefetch-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; img-src data: https: http://ip.qgy18.com; style-src 'unsafe-inline' https:; child-src https:; prefetch-src https:; connect-src 'self' https://www.google-analytics.com; frame-src https://disqus.com https://www.slideshare.net; manifest-src 'self'; 1
default-src 'self'; script-src 'self' *.boost.ai *.episerver.net *.sits.no https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ajax.cloudflare.com https://chat.puzzel.com https://maps.googleapis.com 'unsafe-inline' 'unsafe-eval'; media-src https://chat.puzzel.com 'self'; style-src 'self' https://tagmanager.google.com https://dl.episerver.net https://chat.puzzel.com https://fonts.googleapis.com https://fonts.gstatic.com 'unsafe-inline'; connect-src 'self' https://*.boost.ai https://chat.puzzel.com https://www.google-analytics.com wss:;form-action 'self';font-src https://fonts.googleapis.com https://fonts.gstatic.com https://chat.puzzel.com 'self'; img-src 'self' data: www.google-analytics.com *.gstatic.com https://www.googletagmanager.com https://maps.googleapis.com https://mts.googleapis.com https://dl.episerver.net *.sits.no; object-src 'self'; frame-ancestors 'self'; frame-src https: kompensasjonsordning.no *.kompensasjonsordning.no 1
default-src https: data: wss: blob: 'unsafe-eval' 'unsafe-inline' 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=FR&lang=fr-FR&device=desktop&yrid=622f02lfulfql&partner=; 1
frame-ancestors https://*.shapeamerica.org 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' cdn1.louis.de cdn2.louis.de cdn3.louis.de cdnxl1.louis.de cdn4.louis.de www.louis.de www.louis.be https://*.googleapis.com https://*.gstatic.com https://*.googleusercontent.com https://*.google-analytics.com https://*.googleadservices.com https://*.googletagmanager.com https://tagmanager.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://bat.r.msn.com https://bat.bing.com https://content.cptrack.de https://sale.cptrack.de https://*.trustedshops.com https://trustbadge.api.etrusted.com https://fonts.gstatic.com https://s.kk-resources.com https://s.kelkoogroup.net https://s1.cnnx.io; style-src 'self' 'unsafe-inline' cdn1.louis.de cdn2.louis.de cdn3.louis.de cdnxl1.louis.de cdn4.louis.de www.louis.de https://*.googleapis.com https://*.googleusercontent.com https://widgets.trustedshops.com https://tagmanager.google.com; font-src 'self' cdn1.louis.de cdn2.louis.de cdn3.louis.de cdnxl1.louis.de cdn4.louis.de https://*.trustedshops.com data:; img-src 'self' cdn1.louis.de cdn2.louis.de cdn3.louis.de cdnxl1.louis.de cdn4.louis.de www.louis.de www.trustedshops.com www.trustedshops.fr www.trustedshops.de www.trustedshops.co.uk data: https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.google-analytics.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://bat.r.msn.com https://bat.bing.com https://widgets.trustedshops.com https://www.bizrate.com https://fm.flashtalking.com https://servedby.flashtalking.com https://*.youtube.com https://*.ytimg.com https://s.kelkoogroup.net https://*.google.com https://*.google.de; child-src 'self' maps.louis.de maps.louis.at maps.louis.ie maps.louis.nl maps.louis.eu maps.louis.be maps.louis-moto.fr maps.louis-moto.co.uk maps.louis-moto.it maps.louis-moto.dk maps.louis.pl https://*.googleadservices.com https://googleads.g.doubleclick.net https://*.google.com https://*.google.de; frame-src 'self' maps.louis.de maps.louis.at maps.louis.ie maps.louis.nl maps.louis.eu maps.louis.be maps.louis-moto.fr maps.louis-moto.co.uk maps.louis-moto.it maps.louis-moto.dk maps.louis.pl https://*.googleadservices.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://servedby.flashtalking.com https://*.youtube.com/ https://*.google.com https://*.google.de; 1
frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com gala.acsevents.org main.acsevents.org relay.acsevents.org; report-uri http://main.acsevents.org/site/XFrameViolation 1
default-src *;connect-src *;font-src * data:;frame-src *;frame-ancestors *;img-src * data:;media-src https:;object-src https:;script-src 'unsafe-inline' 'unsafe-eval' *;style-src 'unsafe-inline' *; 1
base-uri 'none'; default-src 'self' https: wss:; font-src 'self' cdn.shopify.com data: fonts.gstatic.com; frame-ancestors 'none'; img-src 'self' cdn.shopify.com www.gravatar.com cdn.myshopify.io messenger-commerce.shopifycloud.com placekitten.com is3-ssl.mzstatic.com apple-business-chat-commerce.shopifycloud.com ping-api-production.s3.us-west-2.amazonaws.com platform-lookaside.fbsbx.com graph.facebook.com *.fbcdn.net apple-business-chat-commerce-production.s3.us-west-2.amazonaws.com; object-src 'none'; script-src 'self' cdn.shopify.com argus.shopifycloud.com https://www.googletagmanager.com/ d2wy8f7a9ursnm.cloudfront.net/; style-src 'self' 'unsafe-inline' cdn.shopify.com fonts.googleapis.com; upgrade-insecure-requests 1
frame-ancestors *.windstream.net 1
frame-ancestors 'self' *.cloudme.com 1
frame-ancestors http://www.lativ.com.tw https://www.lativ.com.tw; 1
default-src https: data: 'self' https://*.adriver.ru https://*.kontur.ru https://kontur.ru https://dl.metabar.ru https://www.googletagmanager.com https://www.google-analytics.com https://*.googleapis.com https://ssl.google-analytics.com/ https://*.yandex.ru https://yastatic.net https://*.yandex.ua ya.ru https://counter.yadro.ru https://top-fwz1.mail.ru https://*.facebook.com https://*.twitter.com https://*.vk.com https://vk.com https://*.facebook.net https://*.ok.ru https://*.doubleclick.net 'unsafe-inline' 'unsafe-eval'; report-uri https://www.buhonline.ru/private/csp-report 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.wpml.org *.toolset.com *.stripe.com *.google.com *.googletagmanager.com *.doubleclick.net yoast.com *.googleadservices.com *.jquery.com *.web-view.net *.ytimg.com *.nr-data.net js-agent.newrelic.com *.youtube.com *.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com connect.facebook.net fast.wistia.com *.helpscout.net; frame-src 'self' *.vimeo.com *.stripe.com *.google.com *.doubleclick.net *.youtube.com *.facebook.com s-static.ak.facebook.com wp-rocket.me; object-src 'self'; connect-src 'self' *.google-analytics.com *.helpscout.net *.wistia.com d3hb14vkzrxvla.cloudfront.net *.nr-data.net *.facebook.com yoast.com *.toolset.com *.cloudflare.com wss://chat-support.toolset.com https://chat-support.toolset.com wss://activity-tracker.toolset.com https://activity-tracker.toolset.com *.doubleclick.net 1
frame-ancestors 'self' http://www.jetztspielen.ws 1
default-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital;base-uri 'self';img-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital data: localhost stats.g.doubleclick.net via.placeholder.com biglotteryfund-assets.imgix.net i.ytimg.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;font-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital data: use.typekit.net http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;style-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital 'unsafe-inline' *.typekit.net;script-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital 'unsafe-eval' 'unsafe-inline' http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;child-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital www.google.com https://vars.hotjar.com;connect-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com;frame-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;report-uri https://sentry.io/api/226416/csp-report/?sentry_key=53aa5923a25c43cd9a645d9207ae5b6c 1
default-src 'self' *.streamlock.net streamlock.net *.issuu.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.smsu.edu *.cludo.com cludo.com *.wowza.com *.kaltura.com *.googletagmanager.com *.google-analytics.com google.com *.google.com https://www.google.com *.googleadservices.com googleadservices.com *.googleapis.com *.facebook.net *.facebook.com *.youtube.com *.youtu.be *.twitter.com *.twimg.com *.libcal.com *.tagul.com *.issuu.com *.libapps.com cdn.yoshki.com yoshki.com *.doubleclick.net youvisit.com *.youvisit.com *.wordart.com live.clive.cloud sc-static.net; style-src 'self' 'unsafe-inline' *.cludo.com cludo.com *.kaltura.com *.googletagmanager.com *.google-analytics.com *.google.com https://www.google.com *.googleapis.com *.facebook.net *.facebook.com *.youtube.com *.youtu.be *.twitter.com *.twimg.com *.libcal.com; frame-src 'self' *.snapchat.com *.soundcloud.com *.streamlock.net streamlock.net *.studio1.smsu.edu studio1.smsu.edu kaltura.com *.kaltura.com *.youtube.com *.youtu.be *.candidcareer.com *.askadmissions.net *.facebook.com *.governmentjobs.com *.google.com *.issuu.com libraryh3lp.com *.libraryh3lp.com *.libcal.com studio1tv.ddns.net cdn.yoshki.com yoshki.com credly.com *.credly.com *.googleadservices.com googleadservices.com twitter.com *.twitter.com youvisit.com *.youvisit.com *.doubleclick.net sc-static.net; child-src 'self' kaltura.com *.kaltura.com *.youtube.com *.youtu.be *.candidcareer.com *.askadmissions.net *.facebook.com *.governmentjobs.com *.googlecom *.issuu.com libraryh3lp.com *.libraryh3lp.com *.libcal.com studio1tv.ddns.net cdn.yoshki.com yoshki.com *.googleadservices.com googleadservices.com twitter.com *.twitter.com youvisit.com *.youvisit.com; object-src 'self'; img-src * data: ; connect-src 'self' *.google-analytics.com *.doubleclick.net *.googleapis.com *.clive.cloud *.cludo.com cludo.com *.streamlock.net streamlock.net google.com *.google.com twitter.com *.twitter.com *.facebook.com facebook.com; font-src 'self' data: 1
frame-ancestors 'self' *.prometheanworld.com 1
object-src 'self';script-src 'nonce-ded785e0531a5021eddc3f45178ac447' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:;base-uri 'none';report-uri https://www.checkdomain.de/report-uri/;frame-ancestors 'self' https://*.checkdomain.website 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: ; img-src 'self' 'unsafe-inline' data: https: ; font-src 'self' data: https: ; connect-src 'self' *.doubleclick.net *.googlesyndication.com *.googletagservices.com *.google.com *.gstatic.com *.google-analytics.com *.addtoany.com sentry.utdev.com ; media-src https: ; object-src 'self' *.googlesyndication.com *.addtoany.com *.google.com *.doubleclick.net ; child-src 'self' *.twitter.com *.instagram.com *.youtube.com *.vimeo.com *.dvidshub.net *.facebook.com; form-action 'self'; frame-src *.twitter.com *.instagram.com *.youtube.com *.vimeo.com *.dvidshub.net *.facebook.com 'self' data: go.afa.org disqus.com *.googlesyndication.com ; upgrade-insecure-requests; report-uri https://sentry.utdev.com/api/36/security/?sentry_key=af19106bbd4542c482caea987a6a357c&sentry_environment=production; 1
frame-ancestors 'self' https://*.repairclinic.com 1
report-uri /csp-logger;report-to csp-endpoint;default-src 'self' https://vanguardassets.bmstatic.com/assets/;connect-src 'self' https://vanguardassets.bmstatic.com/assets/ https://mc.yandex.fr https://mc.yandex.kz https://mc.yandex.by https://mc.yandex.ua https://mc.yandex.ru https://mc.yandex.tr https://cognito-identity.us-east-1.amazonaws.com https://mobileanalytics.us-east-1.amazonaws.com https://stats.g.doubleclick.net https://www.facebook.com https://connect.facebook.net https://www.google-analytics.com https://api.rollbar.com https://ajax.googleapis.com;style-src 'self' 'unsafe-inline' https://vanguardassets.bmstatic.com/assets/ https://tagmanager.google.com https://fonts.googleapis.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vanguardassets.bmstatic.com/assets/ https://app.link https://cdn.polyfill.io https://connect.facebook.net https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://js.stripe.com https://mc.yandex.ru https://tagmanager.google.com;font-src 'self' https://vanguardassets.bmstatic.com/assets/ data: https://fonts.gstatic.com;img-src * 'self' 'unsafe-inline' https://vanguardassets.bmstatic.com/assets/ data: https://www.gstatic.com https://ssl.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net;frame-src 'self' https://*.bookmate.com https://*.bookmate.ru https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://js.stripe.com https://simplecast.com https://mc.yandex.ru;object-src 'none' 1
frame-ancestors 'self' https://data.thelawyer.com https://pre-prod-dlt.thelawyer.com 1
img-src 'self' *.ebay.com *.ebay.cn www.google-analytics.com *.salesforce.com *.force.com rcgi.video.qq.com isdspeed.qq.com; 1
default-src 'self'; child-src 'self' https://platform.twitter.com https://staticxx.facebook.com https://www.facebook.com https://fast.wistia.net https://www.useloom.com https://www.loom.com https://play.vidyard.com https://player.vimeo.com https://www.youtube.com https://intercom-sheets.com https://www.intercom-reporting.com; connect-src 'self' wss://*.intercom.io https://*.intercom.io https://*.intercom.com https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://www.google-analytics.com https://stats.g.doubleclick.net; font-src data: https:; frame-ancestors 'self' https://intercom.skilljar.com; img-src data: blob: https: http:; media-src data: blob: https:; object-src 'self' https://static.intercomassets.com; script-src 'self' https://connect.facebook.net https://platform.twitter.com https://static.intercomassets.com https://googleadservices.com https://googletagmanager.com https://google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://intercom.help 'nonce-v+G5OwsqMl5CFQv86jCQe69bXJlhZ/lUJCUctI5+Yeo='; style-src 'self' 'unsafe-inline' https://fonts.intercomcdn.com https://static.intercomassets.com https://static.intercomcdn.com https://marketing.intercomassets.com https://marketing.intercomcdn.com https://intercom.help 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://themes.googleusercontent.com https://www.google-analytics.com http://support.ebscohost.com https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/; connect-src 'self'; child-src 'self' https://google.com https://www.google.com https://www.youtube.com; img-src *; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com; frame-src 'self' https://calendar.google.com https://www.google.com https://google.com; 1
default-src https: ws: data: 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'self' *.bnc.ca *.nbc.ca; 1
default-src 'self' https://*.pinkbike.com https://*.pinkbike.org https://*.trailforks.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.pinkbike.com https://*.pinkbike.org https://*.trailforks.com https://*.google.com https://www.gstatic.com https://*.googleapis.com https://www.google-analytics.com https://js.stripe.com https://www.paypalobjects.com https://*.arcgisonline.com https://*.facebook.net https://appleid.cdn-apple.com; style-src 'self' 'unsafe-inline' https://*.pinkbike.com https://*.pinkbike.org https://*.trailforks.com https://*.google.com https://*.googleapis.com https://*.gstatic.com; img-src * data: blob:; font-src * data: ; worker-src blob: ; child-src blob: ; media-src * data: ; connect-src 'self' blob: https://*.pinkbike.com https://*.pinkbike.org https://*.trailforks.com https://*.tiles.mapbox.com https://*.mapbox.com https://*.google.com https://*.openstreetmap.org https://*.arcgisonline.com https://api.maptiler.com https://*.cesium.com https://*.maptiler.com https://www.google-analytics.com https://stats.g.doubleclick.net; frame-src 'self' https://*.pinkbike.com https://*.pinkbike.org https://*.trailforks.com https://www.strava.com https://www.youtube.com https://*.vimeo.com https://www.facebook.com https://*.stripe.com; form-action 'self' https://*.pinkbike.com https://*.pinkbike.org https://*.trailforks.com https://www.paypal.com; 1
script-src 'self' 'unsafe-eval' 'unsafe-inline'  data: https://wapi.nic.fr https://www.google.com http://www.afnic.fr/  http://s7.addthis.com https://s7.addthis.com https://v1.addthisedge.com/live/boost/4e71b845327984d7/_ate.track.config_resp https://z.moatads.com/addthismoatframe568911941483/moatframe.js https://www.gstatic.com/charts/loader.js http://m.addthisedge.com/ https://m.addthisedge.com/ http://m.addthis.com/ https://m.addthis.com/ platform.twitter.com http://www.google-analytics.com https://ssl.google-analytics.com/ https://www.afnic.fr/  https://cdn.syndication.twimg.com/widgets/ ; object-src 'self' https://s7.addthis.com https://www.google.com/jsapi https://cdn.syndication.twimg.com ; form-action 'self'; child-src https://www.openstreetmap.org/ https://platform.twitter.com https://maps.google.fr/ https://www.dailymotion.com https://www.youtube.com/ https://s7.addthis.com https://www.google.com https://www.facebook.com/ http://www.facebook.com/ http://eyedo.tv/ https://eyedo.tv/ ;frame-ancestors https://www.facebook.com/ http://www.facebook.com/ 1
font-src 'self' 'unsafe-inline' data: *.deutsche-apotheker-zeitung.de *.bootstrapcdn.com *.davfobi.de; 1
default-src self; script-src *.cloudfront.net *.sessioncam.com *.hypemarks.com *.krxd.net 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk *.newrelic.com *.betrad.com bam.nr-data.net static.addtoany.com https://cdnjs.cloudflare.com *.fusepump.com *.youtube.com s.ytimg.com *.evidon.com code.jquery.com d22xmn10vbouk4.cloudfront.net *.serving-sys.com 7225833.collect.igodigital.com connect.facebook.net stats.g.doubleclick.net https://www.gstatic.com https://*.sessioncam.com https://d2oh4tlt9mrke9.cloudfront.net ws://*.sessioncam.com wss://*.sessioncam.com *.gigya.com https://bv.js  *.bazaarvoice.com *.amazonaws.com *.adimo.co *.nestle-brands.co.uk https://mpsnare.iesnare.com/snare.js *.rawgit.com *.adsrvr.org *.jsdelivr.net https://optimize.google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com cloud.typography.com *.google.com *.use.fontawesome.com *.bazaarvoice.com *.fontawesome.com *.adimo.co https://optimize.google.com; img-src *.cloudfront.net *.sessioncam.com *.google.co.in *.nestle.co.uk 'self' data: *.googleapis.com *.gstatic.com *.cloudflare.com *.google-analytics.com https://stats.g.doubleclick.net www.google.com www.google.co.uk *.doubleclick.net *.betrad.com *.amazonaws.com px.pump.to brand-ecommerce-assets.fusepump.com *.evidon.com https://nova.collect.igodigital.com https://www.facebook.com *.krxd.net *.nestlebeverages.acsitefactory.com be.factory.nescafe.com belgium.nestlebeverages.acsitefactory.com www.nescafe.com *.ytimg.com *.bazaarvoice.com *.gigya.com *.stage4.factory.nescafe.com *.nescafe.com *.purina.co.uk https://www.google-analytics.com https://optimize.google.com; media-src 'self'; frame-src *.cloudfront.net *.sessioncam.com *.doubleclick.net 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://2275258.fls.doubleclick.net http://2275258.fls.doubleclick.net  http://www.youtube-nocookie.com https://www.youtube-nocookie.com https://cdn.hypemarks.com http://cdn.hypemarks.com https://brand-ecommerce-assets.fusepump.com www.google.com *.krxd.net www.facebook.com https://l3.evidon.com/ *.gigya.com *.adimo.co *.bazaarvoice.com *.nestle-brands.co.uk *.adsrvr.org https://optimize.google.com; child-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://2275258.fls.doubleclick.net http://2275258.fls.doubleclick.net http://www.youtube-nocookie.com https://www.youtube-nocookie.com https://cdn.hypemarks.com http://cdn.hypemarks.com ; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com *.fontawesome.com; connect-src 'self' brand-ecommerce-api.fusepump.com *.google-analytics.com https://collect.analyze.ly https://secure-ds.serving-sys.com *.amazonaws.com *.bazaarvoice.com *.nestle-brands.co.uk *.nr-data.net *.evidon.com *.g.doubleclick.net https://accounts.eu1.gigya.com *.flipkart.com *.api.experianmarketingservices.com https://api.experianmarketingservices.com/sync/queryresult/EmailValidate/1.0/10773728-4c4d-43e6-959a-dd3889366f85 *.sessioncam.com; report-uri /report-csp-violation 1
frame-ancestors https://gms.hongleong.com.my https://tags.tiqcdn.com https://survey.hlb.com.my https://uat.hlb.com.my https://aem-preprod.hlb.com.my https://aem-preprod.hlisb.com.my https://aem-uat.hlb.com.my https://www.hlb.com.my https://www.facebook.com https://www.vivocha.com https://www.youtube.com https://staticxx.facebook.com https://www.googletagmanager.com https://gateway.hlb.com.my https://gateway.hlb.com.my:8446 https://www.google.com https://optimize.google.com https://hongleongbank.sc.omtrdc.net https://dpm.demdex.net https://uat.hlb.my:443 http://uat.hlb.my 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: ajax.aspnetcdn.com www.gstatic.com sadmin.brightcove.com s7.addthis.com assets.transparently.com ajax.googleapis.com www.google.com vjs.zencdn.net mychart.piedmont.org maps.googleapis.com ie7-js.googlecode.com apis.google.com maxcdn.bootstrapcdn.com cdn.kyruus.com z.moatads.com www.google-analytics.com siteimproveanalytics.com www.googletagmanager.com connect.facebook.net cdn.krxd.net d10lpsik1i8c69.cloudfront.net v1.addthisedge.com m.addthis.com guide.loyalhealth.com www.googleadservices.com piedmont.netmng.com secure-ds.serving-sys.com solutions.invocacdn.com *.krxd.net bs.serving-sys.com googleads.g.doubleclick.net js.adsrvr.org assets.pinterest.com log.pinterest.com *.elfsight.com code.jquery.com tagmanager.google.com bbox.blackbaudhosting.com secure.wufoo.com 1
frame-ancestors https://www.medicareresources.org 'self'; 1
frame-ancestors https://*.petsafe.net https://*.petsafe.com https://*.sportdog.com https://radiosystemscorporation.my.salesforce.com https://radiosystemscorporation.lightning.force.com 'self'; 1
base-uri 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.youtube.com *.ytimg.com; 1
default-src https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' 'unsafe-inline' https: data:; connect-src 'self' https:; font-src 'self' 'unsafe-inline' https: data:; media-src 'self' 'unsafe-inline' https: blob:; report-uri https://rokt.report-uri.io/r/default/csp/enforce; child-src *; form-action 'self' 'unsafe-inline' https:; frame-ancestors *; object-src *; frame-src *; worker-src *; manifest-src *; base-uri *; upgrade-insecure-requests 1
frame-ancestors 'self' https://franklin.instructure.com; 1
default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; frame-ancestors 'none'; 1
frame-ancestors https://bulbul.io 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://192.168.1.245; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.facebook.net https://*.google-analytics.com https://www.facebook.com 1
default-src 'self' 'unsafe-inline' data: *.google-analytics.com *.gstatic.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com *.kameleoon.com *.dat.de *.datgroup.com *.fairgarage.de *.fairgarage.com *.b-ite.com *.leadlab.click; form-action 'self' *.dat.de *.datgroup.com *.twitter.com *.cleverreach.com http://mailings.dat.de/; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.akamaihd.net *.kameleoon.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io *.kameleoon.eu *.dat.de *.datgroup.com platform.twitter.com syndication.twitter.com cdn.syndication.twimg.com *.fairgarage.de *.fairgarage.com *.b-ite.com *.leadlab.click *.googletagmanager.com *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com; style-src 'unsafe-inline' 'self' *.kameleoon.com *.googleapis.com *.twitter.com *.twimg.com *.googleapis.com *.fairgarage.de *.fairgarage.com *.dat.de *.datgroup.com *.googletagmanager.com *.google-analytics.com; worker-src data: 'self' *.dat.de *.datgroup.com *.twitter.com *.youtube.com *.google.com *.vimeo.com; frame-src data: 'self' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io *.dat.de *.datgroup.com *.twitter.com *.youtube.com *.youtube-nocookie.com *.google.com *.vimeo.com; img-src 'self' data: *.google.com *.googleapis.com *.gstatic.com *.kameleoon.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io *.datgroup.com *.twimg.com *.twitter.com *.fairgarage.de *.fairgarage.com *.google-analytics.com 1
default-src 'self' https://img.zumpercdn.com;script-src 'self' 'unsafe-eval' www.googleadservices.com *.doubleclick.net www.google-analytics.com www.googletagmanager.com tagmanager.google.com *.googleapis.com cdn.getblueshift.com *.scorecardresearch.com connect.facebook.net tracking.listhub.net cdnjs.cloudflare.com cdn.jsdelivr.net https://img.zumpercdn.com https://d214hhm15p4t1d.cloudfront.net 'nonce-59429c53-c3ba-4f04-9b3a-60d02fea303a' *.surveymonkey.com;connect-src 'self' *.zumper.com api.getblueshift.com www.google-analytics.com www.facebook.com ssl.geoplugin.net *.doubleclick.net api.rollbar.com logx.optimizely.com cdn.optimizely.com https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com *.recombee.us;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com https://img.zumpercdn.com https://d214hhm15p4t1d.cloudfront.net;frame-src 'self' *.facebook.com *.doubleclick.net *.googletagmanager.com www.youtube-nocookie.com my.matterport.com geocv.com viewer.panoskin.com helixmedia360.com *.vimeo.com https://d214hhm15p4t1d.cloudfront.net *.surveymonkey.com;img-src 'self' data: blob: *.googleapis.com *.gstatic.com www.google-analytics.com www.googletagmanager.com www.facebook.com *.ggpht.com *.scorecardresearch.com *.doubleclick.net d2t1047w253zzm.cloudfront.net img.youtube.com *.matterport.com https://static.zumpercdn.com https://img.zumpercdn.com https://d214hhm15p4t1d.cloudfront.net img.zumpercdn.com static.zumpercdn.com accessibility.lcf-fl.org https://s3.amazonaws.com *.surveymonkey.com api.mapbox.com;style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com https://api.tiles.mapbox.com https://img.zumpercdn.com https://d214hhm15p4t1d.cloudfront.net;form-action 'self' www.facebook.com;worker-src blob:;child-src blob:;report-uri https://1bf96f85da4d4d6fd196bd9500cbb0b6.report-uri.com/r/t/csp/enforce;frame-ancestors https://bccondos.net https://www.gradschoolmatch.com/ 1
default-src 'none'; child-src https://www.lolli.com https://share.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; connect-src https://lolli.com https://api.lolli.com https://www.lolli.com https://cdn.contentful.com/spaces/lcg55p58f347/environments/master/entries https://firebaseinstallations.googleapis.com/v1/projects/lolli-prod-fire/ https://firebaseremoteconfig.googleapis.com/v1/projects/lolli-prod-fire/ https://api-iam.intercom.io/messenger/web/ https://uploads.intercomcdn.com https://api.rollbar.com/api/1/item/ https://www.facebook.com/tr/ https://www.googleapis.com/identitytoolkit/v3/ https://www.google-analytics.com/collect https://www.google-analytics.com/r/collect https://www.google-analytics.com/j/collect https://firestore.googleapis.com/ https://securetoken.googleapis.com/v1/token https://stats.g.doubleclick.net/j/collect https://*.algolia.net https://*.algolianet.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://lolli.com/api/advertisers/ad_context/offerExclusions; font-src 'self' https://js.intercomcdn.com https://js.intercomcdn.com; form-action https://lolli.com https://www.lolli.com/login https://www.facebook.com https://intercom.help https://api-iam.intercom.io; frame-src https://lolli.com https://www.lolli.com https://www.dwolla.com https://lolli-prod-fire.firebaseapp.com https://bid.g.doubleclick.net https://www.google.com https://www.facebook.com; img-src https://static.lolli.com 'self' data: https://alb.reddit.com https://googleads.g.doubleclick.net https://t.co https://www.facebook.com https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://images.ctfassets.net blob: https://js.intercomcdn.com https://static.intercomassets.com https://uploads.intercomusercontent.com https://downloads.intercomcdn.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-9.com; media-src https://js.intercomcdn.com; object-src 'none'; script-src https://www.lolli.com https://connect.facebook.net/signals/config/712536369102043 https://analytics.twitter.com/i/adsct https://static.ads-twitter.com/uwt.js https://connect.facebook.net/en_US/fbevents.js https://cdn.dwolla.com/1/dwolla.min.js https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://googleads.g.doubleclick.net/pagead/viewthroughconversion/798540145/ https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/798540145/ https://www.google-analytics.com/analytics.js https://www.google.com/pagead/1p-conversion/798540145/ https://www.google.com/pagead/conversion_async.js https://www.google.com/recaptcha/api.js https://www.googletagmanager.com/gtag/js https://www.gstatic.com/recaptcha/releases/ https://www.redditstatic.com/ads/pixel.js https://apis.google.com/ 'sha256-AU7euAGu2t3l8dFEPB7kkWachwgyD8CA4U37Q3OWlbk=' 'sha256-9d1Bt6Fn1DwJVlKA2ndhYt23FvtVq+cTG7iMtimzYmU=' 'sha256-+lipMSmaCMYDhJxvMpjTV4zVni/dEoeRvsszvzsrjdY=' 'sha256-oKBqiGY9AQRSkgCAziepO2Uj23W6BySc6hJakfcNGIg=' 'sha256-LvpQHroqTN/432JfMrm/mbxAZqv0IBA+hWVW+/RG5Qo=' 'sha256-ncN3GiMXXUNS5+4lYiHaTmEmdKZkqNRyoFhUZpR8Bco=' 'sha256-mt/dcEQLL0bpnoCSiwzDSgbHiQQ5NFl8LWhbokn1VS8='; style-src 'self' 'unsafe-inline'; frame-ancestors https://www.lolli.com; manifest-src https://www.lolli.com/site.webmanifest; 1
default-src 'self'	*.sp sp *.softportal.com softportal.com *.softportal.ua http://www.softportal.com	s.uuidksinc.net actpx.com actiflex.org;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.sp sp *.softportal.com softportal.com *.softportal.ua	an.yandex.ru yandex.st https://mc.yandex.ru https://yastatic.net banners.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net yandex.ru    *.doubleclick.net    https://*.googleapis.com https://*.gstatic.com http://*.googlesyndication.com https://*.googlesyndication.com *.google-analytics.com    https://*.google.com https://*.google.com.ua https://*.google.ru	*.googletagmanager.com    connect.facebook.net *.facebook.com    stg.odnoklassniki.ru *.ok.ru vkontakte.ru vk.com    adv.otclick-adv.ru static.otclick-adv.ru otclick-adv.ru    files.goodadvert.ru engine.goodadvert.ru engine2.goodadvert.ru udb.goodadvert.ru udb.adgear.ru    js.softprotalfiles.com https://relap.io    *.mediatoday.ru mediatoday.ru    *.castplatform.com platform.twitter.com    www.googletagservices.com partner.googleadservices.com    http://universalsrc.com    http://rtb.com.ru/mediatoday-script    https://js.gleam.io slinks.yadro.ru    https://d31j93rd8oukbv.cloudfront.net/metrika/ https://mc.webvisor.com    s7.addthis.com m.addthisedge.com m.addthis.com api-public.addthis.com www.linkedin.com    js.mamydirect.com    https://cdn.ywxi.net https://www.mcafeesecure.com	taverkegaard.com portations.com heroesdom.com https://shroughtened.com https://tranqulitius.com	actpx.com	jsc.marketgid.com https://servicer.marketgid.com https://cm.marketgid.com	bergfi.com *.bergfi.com https://jsc.mgid.com	hdbcode.com	genelevius.com geocheckermy.com	yastatic.net ads.getfastads.com	*.avantisvideo.com *.aniview.com	newrrb.bid	https://cdn.jsdelivr.net	ajax.cloudflare.com;child-src blob: https://mc.yandex.ru 'self' *.sp sp *.softportal.com softportal.com *.softportal.ua http://www.softportal.com	awaps.yandex.net yandexadexchange.net *.yandexadexchange.net yastatic.net *.yandex.ru banners.adfox.ru yastat.net    *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net    youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru http://www.youtube.com    https://images01.iqoption.com https://youtube.com https://*.youtube.ru https://*.youtube.com apis.google.com    https://*.googleapis.com https://*.gstatic.com https://gstatic.com cse.google.com    https://*.googlesyndication.com https://*.doubleclick.net https://apis.google.com https://www.google.com    https://accounts.google.com *.facebook.com vk.com login.vk.com    *.mediatoday.ru mediatoday.ru    yandexadexchange.net https://gleam.io platform.twitter.com https://syndication.twitter.com    s7.addthis.com https://www.mcafeesecure.com	taverkegaard.com heroesdom.com shroughtened.com	bergfi.com;connect-src 'self' *.sp sp *.softportal.com softportal.com *.softportal.ua www.phpmyadmin.net    *.mediatoday.ru mediatoday.ru	an.yandex.ru strm.yandex.ru https://mc.yandex.ru yandex.st yastatic.net matchid.adfox.yandex.ru adfox.yandex.ru ads.adfox.ru ads6.adfox.ru jstracer.yandex.ru yastat.net yandex.ru	https://translate.googleapis.com www.google-analytics.com *.googleapis.com pagead2.googlesyndication.com https://stats.g.doubleclick.net    https://mc.webvisor.com    s7.addthis.com m.addthis.com	taverkegaard.com heroesdom.com https://shroughtened.com https://tranqulitius.com	https://msetup.pro	hdbcode.com genelevius.com	*.avantisvideo.com *.aniview.com https://ib.adnxs.com	https://relap.io	newrrb.bid;style-src 'self' 'unsafe-inline' 'unsafe-eval' *.sp sp *.softportal.com softportal.com *.softportal.ua	yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net    *.googleapis.com *.gstatic.com stg.odnoklassniki.ru cse.google.com www.google.com    *.mediatoday.ru mediatoday.ru    https://*.googleapis.com https://*.gstatic.com https://relap.io data:;font-src 'self' *.sp sp *.softportal.com softportal.com *.softportal.ua	an.yandex.ru yastatic.net yastat.net    *.mediatoday.ru mediatoday.ru    *.googleapis.com *.gstatic.com https://*.googleapis.com https://*.gstatic.com data:;img-src 'self' *.sp sp *.softportal.com softportal.com *.softportal.ua http://www.softportal.com	avatars-fast.yandex.net favicon.yandex.net an.yandex.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net https://mc.yandex.ru    *.googlesyndication.com *.doubleclick.net *.googleapis.com *.gstatic.com www.google-analytics.com ssl.google-analytics.com www.google.com.ua    https://*.yandex.net https://*.yandex.ru https://*.googlesyndication.com www.google.com clients1.google.com    https://*.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://img.youtube.com    https://apycdn.com https://*.iqoption.com *.facebook.com    c.bigmir.net i.bigmir.net counter.rambler.ru counter.yadro.ru top100-images.rambler.ru partner.iobit-team.ru    www.tns-counter.ru vk.com de.c4.b5.a0.top.list.ru yastatic.net *.cloudfront.net cloudfront-labs.amazonaws.com    static.adtidy.net i.webguard.ru advombat.ru wq3.ru https://ad.admitad.com https://cdn.admitad.com/    *.mediatoday.ru mediatoday.ru    *.castplatform.com syndication.twitter.com    http://otclick-adv.ru http://universalsrc.com    http://rtb.com.ru https://i.ytimg.com    https://js.gleam.io cdn.relap.io https://relap.io https://x.cnt.my amscdn.relap.io    https://mc.webvisor.com https://cdn.ywxi.net  https://www.carambis.ru	https://imgg-cdn.marketgid.com c.marketgid.com cm.marketgid.com jsc.marketgid.com servicer.marketgid.com s-img.marketgid.com	imgg-cdn.tovarro.com cm.tovarro.com jsc.tovarro.com servicer.tovarro.com s-img.tovarro.com	cm.mgid.com jsc.mgid.com servicer.mgid.com s-img.mgid.com	udata.mixmarket.biz	bergfi.com https://jsc.mgid.com	hdbcode.com genelevius.com i.kimgcdn.com viighj.com *.viighj.com	*.aniview.com *.avantisvideo.com	newrrb.bid	data:;media-src 'self' *.yandex.net strm.yandex.ru *.strm.yandex.ru yandex.ru yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net	https://play.aniview.com	data:;object-src 'self' *.sp sp *.softportal.com softportal.com *.softportal.ua    *.gstatic.com an.yandex.ru https://*.gstatic.com https://an.yandex.ru    *.mediatoday.ru mediatoday.ru; 1
frame-ancestors *; upgrade-insecure-requests 1
default-src 'self' https://www.siepomaga.pl; base-uri 'self'; connect-src 'self' https://www.siepomaga.pl https://www.ratujemyzwierzaki.pl https://img.siepomaga.pl https://onesignal.com https://www.facebook.com https://connect.facebook.net https://accounts.google.com https://www.google.com https://syndication.twitter.com https://api.rollbar.com/api/1/item/ https://stats.g.doubleclick.net https://www.google-analytics.com https://m.facebook.com https://ssl.google-analytics.com https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://appleid.apple.com https://*.amazonaws.com; font-src 'self' https://www.siepomaga.pl data: https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://*.hotjar.com https://*.hotjar.io; form-action 'self' https://www.siepomaga.pl https://secure.payu.com https://www.platnosci.pl https://www.facebook.com/tr/; frame-ancestors 'self'; frame-src 'self' https://www.siepomaga.pl https://pay.google.com https://www.youtube.com https://onesignal.com/ https://www.facebook.com https://m.facebook.com https://staticxx.facebook.com https://web.facebook.com https://static.xx.fbcdn.net https://player.vimeo.com/ https://secure.snd.payu.com https://bid.g.doubleclick.net https://secure.payu.com https://kibana.siepomaga.pl https://accounts.google.com https://tpc.googlesyndication.com https://*.hotjar.com https://*.hotjar.io http://vintom.com fbrpc://call https://www.google.com https://gum.criteo.com https://widget.eu.criteo.com https://*.amazonaws.com; img-src * data: android-webview-video-poster: https://*.hotjar.com https://*.hotjar.io https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com; media-src 'self' https://www.siepomaga.pl https://img.siepomaga.pl; object-src 'self' https://*.amazonaws.com; script-src https: 'strict-dynamic' 'unsafe-eval' https://connect.facebook.net https://sslwidget.criteo.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://www.google.com 'nonce-H42edg70IpPTp4qtouPWFdZuCX6mxlnTpX0VSf6rWI4=' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://www.siepomaga.pl https://fonts.googleapis.com https://cdnjs.cloudflare.com https://onesignal.com https://secure.przelewy24.pl https://translate.googleapis.com https://tagmanager.google.com; worker-src 'self'; report-uri /csp-report 1
connect-src consumer.krxd.net https://connect.facebook.net edgeapi.ace.teliacompany.net webprovisions-labs.humany.net 'self' telia-se.blueconic.net stats.g.doubleclick.net www.google.se telia-natcenter.humany.net cgchat.callguide.telia.com cdn.blueconic.net pwe.callguide.telia.com *.usabilla.com www.google.com telia.humany.net chat.ace.teliacompany.com www.google-analytics.com; default-src localhost:41680 'self'; font-src https://fonts.gstatic.com webprovisions-labs.humany.net 'self' telia.humany.net data: telia-natcenter.humany.net; frame-src d6tizftlrpuof.cloudfront.net https://optimize.google.com www.telia.se 'self' cdn.krxd.net *.doubleclick.net https://www.facebook.com wds-s.ace.teliacompany.com www.youtube.com wds.ace.teliacompany.com go.pardot.com youtube.com; img-src img.youtube.com https://optimize.google.com webprovisions-labs.humany.net 'self' https://www.facebook.com telia-se.blueconic.net stats.g.doubleclick.net www.google.se telia-natcenter.humany.net beacon.krxd.net d6tizftlrpuof.cloudfront.net cdn.blueconic.net *.usabilla.com www.haynespro-assets.com www.google.com www.haynespro-services.com telia.humany.net gentle-tor-21016.herokuapp.com plugins.blueconic.net data: media.krxd.net www.google-analytics.com humany.blob.core.windows.net; report-uri /.api/csp-report/v1/report?teamId=7dfafa39-0cc44b25-8e7c83f0; script-src 'unsafe-inline' https://optimize.google.com webprovisions-labs.humany.net 'self' cdn.krxd.net https://www.facebook.com telia-natcenter.humany.net cdn.blueconic.net www.googletagmanager.com core.dch.got.telia.se wds-s.ace.teliacompany.com portal-hosting.humany.net pi.pardot.com www.google-analytics.com consumer.krxd.net https://connect.facebook.net https://tagmanager.google.com core.dc.teliacompany.net telia-se.blueconic.net wds.ace.teliacompany.com beacon.krxd.net cdn.pardot.com d6tizftlrpuof.cloudfront.net *.usabilla.com telia.humany.net gentle-tor-21016.herokuapp.com plugins.blueconic.net 'unsafe-eval' media.krxd.net; style-src https://tagmanager.google.com 'unsafe-inline' core.dc.teliacompany.net https://optimize.google.com webprovisions-labs.humany.net 'self' telia-se.blueconic.net wds.ace.teliacompany.com telia-natcenter.humany.net d6tizftlrpuof.cloudfront.net cdn.blueconic.net core.dch.got.telia.se wds-s.ace.teliacompany.com telia.humany.net gentle-tor-21016.herokuapp.com plugins.blueconic.net media.krxd.net https://fonts.googleapis.com 1
frame-ancestors 'none'; report-uri /system/csp_reports 1
connect-src 'self' public.internetude.com www.facebook.com www.google-analytics.com www.googleadservices.com *.cedexis.com *.cedexis-radar.net *.abtasty.com *.doubleclick.net wss://api.nirror.abtasty.com; frame-src 'self' *.doubleclick.net *.indeed.com tpc.googlesyndication.com *.facebook.com *.facebook.net www.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.google.fr *.google.com www.googletagmanager.com connect.facebook.net *.facebook.com www.google-analytics.com www.googleadservices.com *.gstatic.com *.googleapis.com tpc.googlesyndication.com bat.bing.com conv.indeed.com *.abtasty.com radar.cedexis.com public.internetude.com neuvoo.ca *.doubleclick.net *.cloudfront.net s3.amazonaws.com *.appjobs.com cdnjs.cloudflare.com/ajax/libs/bluebird/3.3.4/bluebird.min.js cdn.polyfill.io/v2/polyfill.min.js cdn3.actito.com; 1
base-uri 'none'; default-src 'self' https://uberspace.de https://dashboard.uberspace.de https://*.uberspace.is https://analyti.uber.space; frame-ancestors 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.geotab.com *.google.com *.google.ca *.googleapis.com *.recaptcha.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.incontact.com *.salesforce.com  *.buzzsprout.com *.visualwebsiteoptimizer.com *.vwo.com https://script.crazyegg.com https://googleads.g.doubleclick.net https://514004470.collect.igodigital.com/collect.js https://connect.facebook.net https://snap.licdn.com blob:; font-src 'self' 'unsafe-eval' 'unsafe-inline' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.vwo *.typekit.net data:; style-src 'self' 'unsafe-inline' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.vwo.com *.typekit.net; img-src * data:; connect-src *; object-src *; frame-src 'self' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.youtube.com *.facebook.com *.salesforce.com *.vwo.com https://home-c19.incontact.com https://bid.g.doubleclick.net https://www.buzzsprout.com https://attendee.gotowebinar.com https://register.gotowebinar.com; frame-ancestors 'self' *.geotab.com https://geotab.my.salesforce.com; 1
report-uri /cgi-bin/csp; default-src 'self' securepubads.g.doubleclick.net; connect-src 'self' pagead2.googlesyndication.com googleads.g.doubleclick.net csi.gstatic.com www.google-analytics.com; font-src 'self' data: fonts.gstatic.com; frame-src 'self' *.radio-locator.com *.g.doubleclick.net *.googlesyndication.com; img-src 'self' data: *.google-analytics.com *.googleapis.com *.gstatic.com *.googlesyndication.com googleads.g.doubleclick.net *.googletagmanager.com; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' googleads.g.doubleclick.net *.googlesyndication.com maps.googleapis.com adservice.google.com adservice.google.ca adservice.google.com.mx *.googletagmanager.com *.googletagservices.com *.googleadservices.com *.google-analytics.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com maps.googleapis.com *.googlesyndication.com; manifest-src 'none'; worker-src 'none'; form-action 'self'; frame-ancestors *.radio-locator.com; 1
style-src https: 'unsafe-inline'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; img-src blob: https: data:; frame-src https:; upgrade-insecure-requests; 1
frame-ancestors https://chrome.soundation.com 1
default-src 'self' https://www.koodomobile.com https://koodomobile.com https://b.koodomobile.com https://du4n2wiaamtmk.cloudfront.net/ https://*.googleapis.com https://*.gstatic.com https://nexus.ensighten.com https://assets.adobedtm.com telus.tt.omtrdc.net https://www.google.com https://www.youtube.com https://*.demdex.net https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://*.qualtrics.com https://dev.visualwebsiteoptimizer.com https://*.newrelic.com https://bam.nr-data.net https://static.ada.support https://koodo.ca.ada.support https://koodo-development.ca.ada.support https://cm.everesttech.net https://*.adgear.com https://mobility.telus.com https://koodo.sds.modeaondemand.com https://www.googletagmanager.com https://www.googleadservices.com https://*.doubleclick.net https://cas.cluep.com https://s.yimg.com https://*.analytics.yahoo.com https://analytics.twitter.com https://static.ads-twitter.com https://sc-static.net https://tr.snapchat.com https://*.quantserve.com https://*.quantcount.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' https://www.koodomobile.com https://koodomobile.com https://www.google.com https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' data: https://www.koodomobile.com https://koodomobile.com https://maps.gstatic.com https://maps.googleapis.com https://dev.visualwebsiteoptimizer.com https://*.facebook.com https://b.koodomobile.com https://*.ensighten.com https://*.google-analytics.com https://*.youtube.com https://i.imgur.com https://static.ada.support https://www.google.com https://www.google.ca https://*.doubleclick.net https://cas.cluep.com https://t.co https://*.quantserve.com; 1
default-src * 'unsafe-inline' 'unsafe-eval'; form-action 'self' https://*.formdesk.com https://*.formdesk.nl https://*.formdesk.de 1
object-src 'self'; worker-src 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.googlecommerce.com *.googleadservices.com *.braintreegateway.com *.googleapis.com *.cloudflare.com *.planetart.com *.newrelic.com *.twitter.com *.ads-twitter.com *.facebook.net *.adroll.com *.livechatinc.com cdn.brcdn.com www.paypalobjects.com *.brsrvr.com *.optimizely.com *.nr-data.net *.pcrl.co *.picreel.com *.bing.com *.extole.com *.yimg.com *.yahoo.com *.sharethis.com *.amazonaws.com *.rubiconproject.com *.doubleclick.net *.ups-mi.net *.pinterest.com *.paypal.com *.tellapal.com *.momsaffiliate.com *.emjcd.com *.shareasale.com t.co *.locker2.com *.adxcel-ec2.com *.gstatic.com *.steelhousemedia.com www.googletagmanager.com pixel.cdnwidget.com snap.licdn.com px.ads.linkedin.com *.tvsquared.com unpkg.com d39517acq78dhc.cloudfront.net js.braintreegateway.com *.cardinalcommerce.com *.dca0.com d.adroll.mgr.consensu.org *.ccdc02.com *.openx.net *.rlcdn.com *.adnxs.com *.bidswitch.net *.3lift.com *.taboola.com *.pubmatic.com *.outbrain.com *.casalemedia.com *.advertising.com www.clickcease.com *.mail.simplytoimpress.com track.cordial.io *.personalcreations.com tags.tiqcdn.com use.typekit.net dpm.demdex.net www.lightboxcdn.com t.channeladvisor.com tag.bounceexchange.com s.pinimg.com assets.bounceexchange.com api.bounceexchange.com cdn.staticfile.org cdn.simplytoimpress.com;frame-ancestors 'self' https://www.simplytoimpress.com ;upgrade-insecure-requests 1
frame-ancestors 'self' docs.linkresearchtools.com smart.linkresearchtools.com lrtcon.at lrtcon.com app.linkresearchtools.com test2.linkresearchtools.com *.dev.linkresearchtools.com; 1
default-src 'self'; connect-src 'self' https://*; img-src data: https:; script-src 'self' https://* 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://* 'unsafe-inline'; font-src 'self' https://*; frame-ancestors 'self' https://*; object-src 'none'; frame-src 'self' https://*; 1
frame-ancestors 'self'; object-src 'self'; report-to csp-endpoint; report-uri /csp; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.go-mpulse.net *.siftscience.com *.nxjimg.com *.corporateperks.com *.google-analytics.com *.gstatic.com *.google.com *.googleapis.com *.perksatwork.com *.cloudflare.com *.zopim.com unpkg.com *.zdassets.com data: blob: *.tinymce.com *.partnerbookingkit.com *.forter.com *.rezserver.com *.jsdelivr.net *.datatables.net ; upgrade-insecure-requests; 1
form-action 'self'; frame-ancestors 'self' ; img-src 'self' unpkg.com *.grandlyon.com *.data.grandlyon.com *.xiti.com *.readspeaker.com *.googleapis.com *.gstatic.com *.ytimg.com *.facebook.com t.co *.mathtag.com jwpltx.com data:; script-src 'self'  https: 'unsafe-inline' 'unsafe-eval'  https://www.grandlyon.com 'self' *.data.grandlyon.com unpkg.com *.youtube.com *.googleapis.com *.addthis.com *.moatads.com *.doubleclick.net *.ytimg.com *.onlymoov.com *.facebook.com *.twitter.com *.facebook.net *.adserver.pm *.mathtag.com *.googletagmanager.com *.readspeaker.com jwpltx.com *.xiti.com 1
default-src https: wss: data: blob:; script-src data: 'self'  'unsafe-inline' bogotateescucha.bogota.gov.co stackpath.bootstrapcdn.com sdki.truepush.com *.unpkg.com *.polyfill.io *.twitter.com embed.ex.co e.infogram.com f.vimeocdn.com api.mapbox.com code.jquery.com *.googleadservices.com sc-static.net *.googletagmanager.com sb.scorecardresearch.com *.hotjar.com cdnjs.cloudflare.com cdn.rawgit.com s.ytimg.com *.google-analytics.com www.instagram.com/embed.js unpkg.com www.powr.io translate.googleapis.com cdn.jsdelivr.net *.playbuzz.com googleads.g.doubleclick.net public.tableau.com ajax.googleapis.com maxcdn.bootstrapcdn.com cdn.syndication.twimg.com *.facebook.net platform.twitter.com maps.googleapis.com *.youtube.com *.google.com *.gstatic.com contacto195.comware.com.co *.addtoany.com 'unsafe-eval'; style-src 'self' 'unsafe-inline' bogotateescucha.bogota.gov.co use.fontawesome.com unpkg.com stackpath.bootstrapcdn.com yui.yahooapis.com tagmanager.google.com fonts.googleapis.com ton.twimg.com api.mapbox.com contacto195.comware.com.co maxcdn.bootstrapcdn.com translate.googleapis.com cdn.jsdelivr.net platform.twitter.com fonts.googleapis.com cdnjs.cloudflare.com static.addtoany.com; frame-src 'self' https:; font-src 'self' data: bogotateescucha.bogota.gov.co use.fontawesome.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net *.hotjar.com contacto195.comware.com.co fonts.gstatic.com cdnjs.cloudflare.com; form-action 'self' platform.twitter.com etb.com www.facebook.com tr.snapchat.com syndication.twitter.com; object-src 'self' blmb:; base-uri 'self' 1
default-src 'none'; connect-src 'self' ipleak.net:* *.ipleak.net:* ipleak.net *.ipleak.net; font-src 'self'; frame-src 'self' *.google.com; img-src 'self' data:; script-src 'self'; style-src 'self'; manifest-src 'self'; base-uri 'none'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.criteo.net/ https://sslwidget.criteo.com/ https://www.googleadservices.com/pagead/ https://googleads.g.doubleclick.net/pagead/ https://www.google.rs/pagead/1p-conversion/1014488639/ https://www.google.rs/pagead/1p-user-list/1014203164/ https://www.googletagmanager.com/gtm.js https://d16fk4ms6rqz1v.cloudfront.net/capture/airmauritius.js maps.googleapis.com ajax.googleapis.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; img-src 'self' http://www.airmauritius.com/images/ https://stats.g.doubleclick.net/r/collect https://www.google.com/pagead/1p-user-list/1014203164/ https://www.google.com https://www.google.rs  https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1014488639/ https://booking.airmauritius.com/plnext/default/plnext_git_18.6_prod.20_120718/static/plnextv2/resources/img/loading.gif maps.gstatic.com maps.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; connect-src 'self' https://www.facebook.com/tr/  https://i.salecycle.com/impression https://c.salecycle.com/osr/config accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com; media-src 'self' data: blob:; child-src 'self' https://widget.eu.criteo.com/ https://platform.twitter.com/ https://bid.g.doubleclick.net/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://cargo.airmauritius.com https://s.salecycle.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://google.com; style-src 'self' 'unsafe-inline'; img-src 'self' https://i.ytimg.com https://www.google-analytics.com https://lathamvideo.blob.core.windows.net 'unsafe-inline' 'unsafe-eval' data:; frame-src 'self' mailto: https:; media-src 'self' https://lathamvideo.blob.core.windows.net; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.motel-one.com *.usercentrics.eu data: *.motel-one.com *.usercentrics.eu; script-src *.motel-one.com 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com www.googletagmanager.com *.googleapis.com www.google-analytics.com www.youtube.com s.ytimg.com cdnjs.cloudflare.com code.jquery.com *.hurra.com *.googleadservices.com *.criteo.com *.criteo.net creativecdn.com *.creativecdn.com *.facebook.net *.doubleclick.net *.licdn.com *.linkedin.com *.facebook.com *.adnxs.com *.facebook.com *.bizographics.com *.googlesyndication.com *.bing.com *.adsrvr.org *.cloudfront.net *.sia.eu *.google.ae *.google.at *.google.ba *.google.be *.google.by *.google.ca *.google.cf *.google.ch *.google.co.cr *.google.co.il *.google.co.in *.google.co.jp *.google.co.nz *.google.co.th *.google.co.uk *.google.co.zw *.google.de *.google.com *.google.com.ar *.google.com.au *.google.com.bo *.google.com.br *.google.com.cy *.google.com.ec *.google.com.eg *.google.com.hk *.google.com.kw *.google.com.mt *.google.com.mx *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.ua *.google.cz *.google.dk *.google.dz *.google.es *.google.fi *.google.fr *.google.ge *.google.gr *.google.hr *.google.hu *.google.ie *.google.im *.google.it *.google.li *.google.lt *.google.lu *.google.nl *.google.no *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.se *.google.si *.adup-tech.com static.ads-twitter.com analytics.twitter.com assets.pinterest.com log.pinterest.com squarelovin.com *.squarelovin.com *.usercentrics.eu; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.cdninstagram.com *.squarelovin.com *.google-analytics.com *.doubleclick.net t.co *.adup-tech.com www.facebook.com www.google.de www.google.com *.cx.atdmt.com maps.gstatic.com maps.googleapis.com ssl.gstatic.com www.gstatic.com assets.pinterest.com log.pinterest.com bat.bing.com *.hurra.com *.fbcdn.net image.motel-one.com *.motel-one.com squarelovin.com *.gstatic.com *.usercentrics.eu; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.squarelovin.com fonts.googleapis.com tagmanager.google.com *.google.com; connect-src 'self' *.motel-one.com *.google-analytics.com stats.g.doubleclick.net *.facebook.com *.adup-tech.com *.usercentrics.eu; font-src 'self' *.motel-one.com *.computop-paygate.com *.google.com *.gstatic.com www.googletagmanager.com *.googleapis.com www.google-analytics.com *.doubleclick.net data: *.google.com *.gstatic.com www.googletagmanager.com *.googleapis.com www.google-analytics.com *.doubleclick.net; frame-src 'self' *.motel-one.com *.computop-paygate.com *.google.com *.gstatic.com www.googletagmanager.com *.googleapis.com www.google-analytics.com www.youtube.com cdnjs.cloudflare.com code.jquery.com *.hurra.com *.googleadservices.com *.criteo.com *.criteo.net creativecdn.com *.creativecdn.com *.facebook.net *.doubleclick.net *.licdn.com *.linkedin.com *.facebook.com *.google.de *.adnxs.com *.facebook.com *.bizographics.com *.googlesyndication.com *.bing.com *.adsrvr.org *.cloudfront.net *.sia.eu *.usercentrics.eu assets.pinterest.com log.pinterest.com; report-uri https://booking.motel-one.com/de/api/logCsp?env=WEBSITE; 1
default-src 'self' https://*.google.com/ https://*.dotomi.com/ https://images.winecountrygiftbaskets.com/ https://visitors.winecountrygiftbaskets.com/ https://www.youtube.com/ https://qwww435.americanexpress.com/ https://wcgift.com/ https://aslvwebt1.arroweyesolutions.net/ https://cards.cardways.com/ https://checkout.americanexpress.com/ https://dis.eu.criteo.com/ https://dis.us.criteo.com/ https://*.doubleclick.net/ https://echeckout.americanexpress.com/ https://gum.criteo.com/ https://*.americanexpress.com/ https://mcheckout-qa.americanexpress.com https://www.facebook.com/ https://home-c33.nice-incontact.com/ https://bat.bing.com/ https://card.winecountrygiftbaskets.com;                                                        script-src 'self' https://*.googleapis.com/ https://www.googleadservices.com/ https://*.google.com/ https://www.googletagmanager.com/ https://code.murdoog.com/ https://secure-cdn.mplxtms.com/ https://www.google-analytics.com/ https://custom-wrs.api.responsys.net/ https://images.winecountrygiftbaskets.com/ https://visitors.winecountrygiftbaskets.com/ https://icm.aexp-static.com/ https://qicm.americanexpress.com/ https://qwww435.americanexpress.com/ https://adadvisor.net/ https://apis.murdoog.com/ https://aa.agkn.com/ https://checkout.americanexpress.com/ https://t.mplxtms.com/ https://api.pinterest.com/ https://api.instagram.com/ https://static.criteo.net/js/ld/ld.js https://sslwidget.criteo.com/ https://widget.eu.criteo.com/ http://s7d1.scene7.com/ https://bat.bing.com/ https://s.yimg.com/ https://sp.analytics.yahoo.com/ https://www.adobetag.com/ https://*.doubleclick.net/ https://100008590.collect.igodigital.com/ https://*.americanexpress.com/ https://mcheckout-qa.americanexpress.com https://echeckout.americanexpress.com/ https://s7d5.scene7.com/ https://connect.facebook.net/ https://*.googlesyndication.com/ https://home-c33.nice-incontact.com/ https://s.pinimg.com/ https://static-na.payments-amazon.com/OffAmazonPayments/us/sandbox/js/Widgets.js https://static-na.payments-amazon.com/v2/login.js https://ndn.statistinamics.com https://card.winecountrygiftbaskets.com 'unsafe-inline' 'unsafe-eval';                                                        style-src 'self' https://*.googleapis.com/ https://www.googleadservices.com/ https://*.google.com/ https://www.googletagmanager.com/ https://code.murdoog.com/ https://secure-cdn.mplxtms.com/ https://www.google-analytics.com/ https://custom-wrs.api.responsys.net/ https://images.winecountrygiftbaskets.com/ https://visitors.winecountrygiftbaskets.com/ https://icm.aexp-static.com/ https://qicm.americanexpress.com/ https://qwww435.americanexpress.com/ https://adadvisor.net/ https://apis.murdoog.com/ https://aa.agkn.com/ https://checkout.americanexpress.com/ https://s7d1.scene7.com/ https://www.youtube.com/ https://*.americanexpress.com/ https://mcheckout-qa.americanexpress.com https://echeckout.americanexpress.com/ https://s7d5.scene7.com/ 'unsafe-inline' 'unsafe-eval';                                                        font-src 'self' data: https://*.googleapis.com/ https://fonts.gstatic.com/ https://www.aexp-static.com/nav/ngn/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-3.woff https://www.aexp-static.com/nav/ngn/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-1.ttf;                                                        connect-src 'self' https://*.googleapis.com/ https://*.google.com/ https://www.google-analytics.com/ https://t.mplxtms.com/tags https://wrs.adrsp.net/ https://www.youtube.com/ https://widget.eu.criteo.com/ https://images.winecountrygiftbaskets.com/ https://visitors.winecountrygiftbaskets.com/ https://www.facebook.com/ https://*.yimg.com/ https://ct.pinterest.com/ https://payments-sandbox.amazon.com/ https://bat.bing.com/ https://card.winecountrygiftbaskets.com;                                                        img-src * data:;                                                       media-src 'self'; 1
frame-ancestors http://docplanner-front-test.docplanner.com https://docplanner-front-test.docplanner.com *.znanylekarz.pl doctoraliaone-pl2-candidate.azurewebsites.net 1
default-src 'self' *.originenergy.com.au origin-energy.formstack.com *.google.com *.google.com.au *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleusercontent.com *.doubleclick.net *.gstatic.com *.facebook.com *.facebook.net *.hotjar.com *.hotjar.io w.usabilla.com assets.adobedtm.com *.demdex.net *.everesttech.net cx.atdmt.com *.boldchat.com *.newrelic.com bam.nr-data.net originenergyservices.tt.omtrdc.net 'report-sample' *.monsido.com; script-src 'self' *.originenergy.com.au origin-energy.formstack.com *.google.com *.google.com.au *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleusercontent.com *.doubleclick.net *.gstatic.com *.facebook.com *.facebook.net *.hotjar.com *.hotjar.io w.usabilla.com assets.adobedtm.com *.demdex.net *.everesttech.net cx.atdmt.com *.boldchat.com *.newrelic.com bam.nr-data.net www.everestjs.net cdn.split.io *.branch.io app.link originenergy.nanorep.co 'unsafe-inline' api.quickstream.westpac.com.au *.monsido.com; style-src 'self' *.originenergy.com.au origin-energy.formstack.com *.google.com *.google.com.au *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleusercontent.com *.doubleclick.net *.gstatic.com *.facebook.com *.facebook.net *.hotjar.com *.hotjar.io w.usabilla.com assets.adobedtm.com *.demdex.net *.everesttech.net cx.atdmt.com *.boldchat.com *.newrelic.com bam.nr-data.net 'unsafe-inline'; connect-src *.originenergy.com.au originenergyservices.tt.omtrdc.net *.everesttech.net dpm.demdex.net *.hotjar.io *.hotjar.com *.boldchat.com bam.nr-data.net ws3.ondemand.qas.com sdk.split.io events.split.io collectors.au.sumologic.com *.branch.io api.quickstream.westpac.com.au originenergy.au.auth0.com/.well-known/jwks.json; frame-src *.google.com *.hotjar.com *.hotjar.io fast.originenergyservices.demdex.net originenergyservices.demdex.net *.boldchat.com *.doubleclick.net *.originenergy.com.au; object-src 'none'; img-src 'self' *.originenergy.com.au origin-energy.formstack.com *.google.com *.google.com.au *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleusercontent.com *.doubleclick.net *.gstatic.com *.facebook.com *.facebook.net *.hotjar.com *.hotjar.io w.usabilla.com assets.adobedtm.com *.demdex.net *.everesttech.net cx.atdmt.com *.boldchat.com *.newrelic.com bam.nr-data.net *.monsido.com res.cloudinary.com/originenergy/ data:; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.judicial.gov.tw *.line.me *.line-scdn.net *.doubleclick.net *.googletagmanager.com www.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.google.com.tw *.facebook.com *.facebook.net *.youtube.com;frame-ancestors 'self'; 1
connect-src 'self' https://mercury.service-now.com wss://*.salemove.com https://*.salemove.com https://*.everesttech.net https://assets.adobedtm.com https://*.omtrdc.net https://*.demdex.net https://*.powerreviews.com https://*.decibelinsight.net wss://*.decibelinsight.net *.mercuryinsurance.com https://service.maxymiser.net https://bs.serving-sys.com https://tags.bkrtx.com https://developers.google.com https://*.gomoxie.solutions; frame-ancestors 'self' https://*.mercuryinsurance.com  https://*.mercuryfirst.com 1
default-src 'self' 'unsafe-inline' https: www.facebook.com www.google.com/recaptcha/ static.hotjar.com/ vars.hotjar.com/ www.gstatic.com/recaptcha/ www.google-analytics.com/ www.gstatic.com/ www.googleadservices.com/pagead/ www.googleadservices.com/ script.hotjar.com/ *.mercadobitcoin.com.br *.mercadobitcoin.net stats.g.doubleclick.net/ bam.nr-data.net/; object-src 'unsafe-inline' 'self' https: www.facebook.com www.google.com/recaptcha/ static.hotjar.com/ vars.hotjar.com/ www.gstatic.com/recaptcha/ www.google-analytics.com/ www.gstatic.com/ www.googleadservices.com/ *.hotjar.com/ *.mercadobitcoin.com.br *.mercadobitcoin.net stats.g.doubleclick.net/ bam.nr-data.net/; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: www.facebook.com www.google.com/recaptcha/ static.hotjar.com/ vars.hotjar.com/ www.gstatic.com/recaptcha/ www.google-analytics.com/ www.gstatic.com/ www.googleadservices.com/ script.hotjar.com/ *.mercadobitcoin.com.br *.mercadobitcoin.net stats.g.doubleclick.net/ bam.nr-data.net/; img-src 'self' data: https: *.mercadobitcoin.com.br *.mercadobitcoin.net www.facebook.com stats.g.doubleclick.net www.google-analytics.com/ stats.g.doubleclick.net/ bam.nr-data.net/; 1
default-src https://*.f-list.net; frame-src https://www.google.com/recaptcha/; script-src https://*.f-list.net https://ajax.googleapis.com https://www.google.com https://www.google-analytics.com https://ads.dragonfru.it https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval'; img-src data: https://*.f-list.net https://www.google.com https://www.google-analytics.com https://ads.dragonfru.it; style-src https://*.f-list.net 'unsafe-inline'; connect-src https://*.f-list.net https://ads.dragonfru.it wss://chat.f-list.net:9799 ws://chat.f-list.net:9722 wss://chat.f-list.net:8799 ws://chat.f-list.net:8722 wss://chat.f-list.net; frame-ancestors 'none'; 1
media-src media.example.com 1
frame-ancestors 'self'; report-uri /csp/report 1
frame-ancestors 'self' https://mkt.adventurecycling.org https://*.facebook.com https://*.iframehost.com; 1
child-src 'self' *.adform.net *.criteo.com *.criteo.net *.optimizely.com *.selbstbauprofi.de *.sociomantic.com *.toom.de *.tp-de.net  *.trbo.com *.usercentrics.eu *.webmasterplan.com *.youtube-nocookie.com app.parasol-island.com chat.guuru.com configurator.3yourmind.com deutschland-rundet-auf.de efs-survey.com facebook.com maps.googleapis.com toom-baumarkt.de toom-de.boels.com toom-frame.3yourmind.com toom-rubbeln.safe-promotions.de toom.3yourmind.com www.efs-survey.com www.facebook.com www.findibus-online.de www.google.com/maps/ www.google.com/recaptcha/ www.toom-baumarkt.de www.youtube.com www.youtube.de; frame-src 'self' *.adform.net *.criteo.com *.criteo.net *.optimizely.com *.selbstbauprofi.de *.sociomantic.com *.toom.de *.tp-de.net *.trbo.com *.usercentrics.eu *.webmasterplan.com *.youtube-nocookie.com app.parasol-island.com chat.guuru.com configurator.3yourmind.com deutschland-rundet-auf.de efs-survey.com facebook.com maps.googleapis.com toom-baumarkt.de toom-de.boels.com toom-frame.3yourmind.com toom-rubbeln.safe-promotions.de toom.3yourmind.com www.efs-survey.com www.facebook.com www.findibus-online.de www.google.com/maps/ www.google.com/recaptcha/ www.toom-baumarkt.de www.youtube.com www.youtube.de; object-src 'self'; 1
default-src 'self' 'unsafe-inline' *.uhasselt.be enquete.agconsult.com https://prezi.com/* https://cdn.jsdelivr.net/npm/ https://stream.livemedia.net/obfs  *.tawk.to/* www.google-analytics.com *.twitter.com *.twimg.com * fast.fonts.net *.delijn.be *.deburen.tv img.youtube.com *.gstatic.com *.getflowbox.com *.google.com *.tawk.to;script-src 'self'  'unsafe-eval' 'unsafe-inline' enquete.agconsult.com https://prezi.com/* https://cdn.jsdelivr.net/npm/ *.vimeo.com  https://stream.livemedia.net/obfs *.tawk.to/* www.google-analytics.com *.googleapis.com *.twitter.com *.twimg.com *.deburen.tv *.youtube.com  cdn.syndication.twimg.com *.getflowbox.com *.delijn.be fast.fonts.net https://siteimproveanalytics.com *.addthis.com  *.addthisedge.com *.facebook.com *.linkedin.com *.issuu.com *.google.com *.googletagmanager.com *.folders.eu connect.facebook.net *.amcharts.com *.tawk.to;img-src * data:;connect-src *;media-src *;frame-src 'self' *.uhasselt.be https://www3.uhasselt.be* https://prezi.com/ *.google.be https://cdn.jsdelivr.net/npm/ *.addthis.com https://stream.livemedia.net/obfs *.tawk.to/* *.clickdimensions.com https://uhasselt-uf.be/ https://www.surveygizmo.com *.twitter.com *.twimg.com  *.issuu.com *.delijn.be *.deburen.tv https://vimeo.com/ *.youtube.com  *.vimeo.com   https://siteimproveanalytics.com *.google.com *.folders.eu https://script.google.com/macros/s/AKfycbwDa0K00fdLIaHvDQ9i6OFF6RBjz0kBQv4vc9eXHzpxLuVSBs9Z/exec https://hetmeestmemorabele100dagenfeest.be https://demeestmemorabelechrysostomos.be http://xmos.preflight.space/ *.amcharts.com *.tawk.to;frame-ancestors *.uhasselt.be https://cdn.jsdelivr.net/npm/ *.prezi.com/* *.google.com https://stream.livemedia.net/obfs  *.tawk.to/* https://uhasselt-uf.be/ https://www.surveygizmo.com https://siteimproveanalytics.com *.twitter.com  *.twimg.com *.delijn.be http://*.abmtrans.eu http://abmtrans.eu http://*.mobitwist.be http://mobitwist.be  *.tawk.to; 1
frame-ancestors 'self' https://www.renesas.cn http://www.renesas.cn 1
base-uri 'self';connect-src 'self' https://creditkarmacdn-a.akamaihd.net *.creditkarma.com  *.nr-data.net https://stats.g.doubleclick.net https://sentry.io wss://www.creditkarma.ca https://www.google-analytics.com https://siteintercept.qualtrics.com;default-src 'self' https://creditkarmacdn-a.akamaihd.net *.creditkarma.com;font-src 'self' https://creditkarmacdn-a.akamaihd.net *.creditkarma.com data:;frame-src 'self' https://connect.facebook.net https://www.googletagmanager.com https://bid.g.doubleclick.net https://tags.creditkarma.ca https://tags.creditkarma.com https://tpc.googlesyndication.com https://siteintercept.qualtrics.com https://creditkarma.az1.qualtrics.com;img-src 'self' https://creditkarmacdn-a.akamaihd.net *.creditkarma.com  *.nr-data.net https://stats.g.doubleclick.net https://www.google.com https://www.google.ca https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.facebook.com data: https://ckpoc.imgix.net/ https://intlck.imgix.net https://ck-content.imgix.net https://seal.digicert.com https://www.googletagmanager.com https://sierra.kilo.ckapis.com https://ck-assets.imgix.net https://siteintercept.qualtrics.com https://az1.qualtrics.com;script-src 'self' 'unsafe-inline' 'strict-dynamic' https://creditkarmacdn-a.akamaihd.net data: blob: https://tpc.googlesyndication.com *.creditkarma.com https://bam.nr-data.net https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://connect.facebook.net https://seal.digicert.com https://js-agent.newrelic.com 'report-sample' https://sierra.kilo.ckapis.com https://api-eu-west-1.nd.nudatasecurity.com https://siteintercept.qualtrics.com 'nonce-012d2dd28a16a051249a4d24006f6657';style-src 'self' https://creditkarmacdn-a.akamaihd.net *.creditkarma.com 'unsafe-inline' https://creditkarma-com.go-vip.co data:;worker-src 'self';report-uri https://sentry.io/api/1217228/security/?sentry_key=096b021d1234444e8052ffd5e4540f6e 1
'self' http://trupanion.lookbookhq.com https://trupanion.lookbookhq.com http://explore.trupanion.com https://explore.trupanion.com 1
default-src https: 'unsafe-inline' 'unsafe-eval'; media-src blob: https: 'unsafe-inline' 'unsafe-eval'; worker-src blob: https: 'unsafe-inline' 'unsafe-eval';font-src data: 'self' https: 'unsafe-inline' 'unsafe-eval'; img-src blob: data: 'self' http: http://*.cbtnuggets.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https: http://*.cbtnuggets.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com wss://realtime.getbeamer.com 'unsafe-inline' 'unsafe-eval'; child-src 'self' blob: https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 'unsafe-inline' 'unsafe-eval'; frame-src blob: 'self' https: https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 'unsafe-inline' 'unsafe-eval'; object-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; script-src https: data: 'unsafe-inline' 'unsafe-eval' 1
default-src 'self' blob:; script-src 'self' 'unsafe-inline' *.ampproject.org *.civiccomputing.com *.doubleclick.net *.facebook.net *.getmdl.io *.google.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.quibi.com *.youtube.com *.ytimg.com; style-src 'self' 'unsafe-inline' *.getmdl.io fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' *.ampproject.org *.civiccomputing.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.mparticle.com *.quibi.com us-central1-quibi-website-v3.cloudfunctions.net; font-src 'self' *.gstatic.com *.quibi.com; frame-src 'self' 'unsafe-inline' *.googlesyndication.com *.youtube.com quibi-website-v3.firebaseapp.com; img-src * data:; manifest-src 'self'; media-src 'self'; worker-src 'self' blob:; report-uri https://cspr.quibi.com/report-uri 1
default-src 'self'; connect-src 'self' www.google-analytics.com *.googlesyndication.com https://www.google-analytics.com; frame-src * 'unsafe-inline'; img-src 'self' *.florastatic.com www.google-analytics.com *.googlesyndication.com https://www.google-analytics.com data: https://cookie-cdn.cookiepro.com; media-src 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' * *.googlesyndication.com; style-src 'self' 'unsafe-inline' https://cookie-cdn.cookiepro.com 1
block-all-mixed-content; report-uri https://macrolibrarsiit.report-uri.io/r/default/csp/reportOnly 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; upgrade-insecure-requests 1
default-src 'self' *.unionbankph.com *.azurewebsites.net;                  style-src 'self' 'unsafe-inline' *.unionbankph.com *.azurewebsites.net maxcdn.bootstrapcdn.com *.googleapis.com *.bootstrapcdn.com *.cloudflare.com;                  font-src 'self' maxcdn.bootstrapcdn.com *.gstatic.com;                  script-src 'self' 'unsafe-inline' *.google.com *.facebook.net *.gstatic.com *.googletagmanager.com *.google-analytics.com *.msecnd.net *.addthis.com *.qgraph.io *.googleapis.com;                  frame-src 'self' data: *.gstatic.com *.googleapis.com *.google.com *.youtube.com *.facebook.com;                  connect-src 'self' *.visualstudio.com *.google-analytics.com;                  img-src 'self' *.unionbankph.com *.facebook.com *.theunionbanker.com *.googleapis.com *.gstatic.com *.google-analytics.com *.githubusercontent.com data:; 1
frame-ancestors 'self' intertops.eu www.intertops.eu sblp.intertops.eu sports.intertops.eu poker.intertops.eu casino.intertops.eu classic.intertops.eu lobby.intertops.eu:2072 account.intertops.eu client.horizonpokernetwork.eu 1
default-src 'self' ; frame-ancestors 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.greateasternlife.com *.lifeisgreat.net *.adobedtm.com *.facebook.net *.googletagmanager.com *.addthisedge.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.juicer.io *.addthis.com *.twitter.com *.demdex.net *.omtrdc.net *.youtube.com *.ytimg.com *.licdn.com *.moatads.com *.branch.io ; style-src 'self' 'unsafe-inline' fonts.googleapis.com ; font-src 'self' data: fonts.gstatic.com ; img-src * data: ; media-src 'self' *.scene7.com ; frame-src 'self' *.doubleclick.net *.juicer.io *.twitter.com *.addthis.com *.financialexpress.net *.youtube.com *.facebook.net *.facebook.com *.whispir.com ; object-src 'self' ; connect-src 'self' *.greateasternlife.com *.addthis.com *.demdex.net *.google-analytics.com *.omtrdc.net *.doubleclick.net *.facebook.net *.facebook.com ; report-uri https://www.greateasternlife.com/bin/GreatEastern/sg/csp/report ;  1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.abertay.ac.uk *.vo.msecnd.net *.visualstudio.com *.googletagmanager.com *.gstatic.com *.google-analytics.com *.googleapis.com *.google.com *.cloudfront.net *.googleadservices.com *.bing.com *.facebook.net *.facebook.com *.doubleclick.net apps.akerolabs.com *.hotjar.com *.youtube.com *.akro.io *.skypeassets.com *.olark.com *.crazyegg.com s3.amazonaws.com/trk.cetrk.com *.youvisit.com *.ytimg.com *.juicer.io *.livestream.com livestream.com/assets/plugins/referrer_tracking.js *.walls.io walls.io/js/wallsio-widget-1.2.js cdn.thinglink.me *.siteimproveanalytics.com www.sutori.com *.d1ox703z8b11rg.cloudfront.net hstry-education-production.s3.us-west-2.amazonaws.com owcqxq3rnb.execute-api.us-east-1.amazonaws.com code.jquery.com siteimproveanalytics.com/js/siteanalyze_9953.js *.hellomedian.com cdn.chatbot.com/widget/plugin.js *.chatbot.com https://cdn.livechatinc.com https://secure.livechatinc.com *.littleforest.co.uk *.twitch.tv https://www.google-analytics.com https://bbox.blackbaudhosting.com *.discoveruni.gov.uk *.ads-twitter.com *.justgiving.com;object-src 'self';style-src 'self' 'unsafe-inline' *.abertay.ac.uk *.googleapis.com *.google.com maxcdn.bootstrapcdn.com *.olark.com *.juicer.io *.livestream.com cdn.akro.io *.hellomedian.com *.chatbot.com *.twitch.tv *.facebook.net *.facebook.com *.blackbaudhosting.com;img-src 'self' *.abertay.ac.uk *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.ggpht.com data: abertaylivemedia.azureedge.net umbraco.tv *.cloudfront.net *.googleadservices.com *.bing.com *.facebook.net *.doubleclick.net *.facebook.com *.google.co.uk *.googletagmanager.com *.olark.com *.youvisit.com *.juicer.io gtrk.s3.amazonaws.com *.siteimproveanalytics.io *.hellomedian.com *.chatbot.com https://cdn.livechatinc.com *.twitch.tv *.littleforest.co.uk *.blackbaudhosting.com *.justgiving.com;media-src 'self' *.olark.com abertaylivemedia.azureedge.net *.chatbot.com https://cdn.livechatinc.com *.twitch.tv *.facebook.net *.facebook.com *.justgiving.com;frame-src 'self' *.abertay.ac.uk *.youtube.com *.akerolabs.com *.google.com *.bigtopapp.com *.vimeo.com *.unistats.ac.uk *.hotjar.com *.doubleclick.net *.issuu.com *.olark.com *.wrld3d.com *.youvisit.com biteable.com *.juicer.io *.livestream.com livestream.com *.walls.io *.thinglink.com thinglink-editor.s3.amazonaws.com www.sutori.com *.d1ox703z8b11rg.cloudfront.net hstry-education-production.s3.us-west-2.amazonaws.com owcqxq3rnb.execute-api.us-east-1.amazonaws.com https://s3-eu-west-1.amazonaws.com *.hellomedian.com *.chatbot.com https://secure.livechatinc.com *.twitch.tv *.littleforest.co.uk *.facebook.net *.facebook.com *.discoveruni.gov.uk *.blackbaudhosting.com;font-src 'self' *.abertay.ac.uk fonts.gstatic.com maxcdn.bootstrapcdn.com *.google.com *.juicer.io *.chatbot.com *.twitch.tv *.facebook.net *.facebook.com;connect-src 'self' *.abertay.ac.uk *.google.com *.visualstudio.com *.hotjar.com *.olark.com wss://*.hotjar.com *.crazyegg.com *.livestream.com *.bugsnag.com *.akerolabs.com *.hellomedian.com *.chatbot.com *.twitch.tv *.littleforest.co.uk *.facebook.net *.facebook.com;frame-ancestors 'self' 1
default-src'self'data https:;img-src'self' https;style-src'self'https:;script-src-elem'self https:;script-src'self'https:;script-src-attr'self'https:; 1
default-src 'self' *.39.net; img-src 'self' * blob: data:; script-src 'self' * 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self'; media-src 'self' *.39.net; 1
script-src 'self' 'unsafe-inline' https://tagmanager.google.com https://www.googletagmanager.com https://optimize.google.com https://www.google-analytics.com https://maps.googleapis.com https://www.youtube.com https://www.youtube-nocookie.com https://s.ytimg.com https://sc-static.net https://static.ads-twitter.com https://analytics.twitter.com https://bat.bing.com https://storage.googleapis.com https://www.paypalobjects.com http://www.paypal.com; img-src 'self' data: https://www.googletagmanager.com https://optimize.google.com https://www.google-analytics.com/ https://*.gstatic.com https://*.googleapis.com https://www.google.com/ads/ga-audiences https://www.google.co.uk/ads/ga-audiences https://www.google.de/ads/ga-audiences https://www.google.fr/ads/ga-audiences https://www.google.at/ads/ga-audiences https://www.google.be/ads/ga-audiences https://www.google.dk/ads/ga-audiences https://www.google.fi/ads/ga-audiences https://www.google.ie/ads/ga-audiences https://www.google.it/ads/ga-audiences https://www.google.nl/ads/ga-audiences https://www.google.no/ads/ga-audiences https://www.google.es/ads/ga-audiences https://www.google.ch/ads/ga-audiences https://www.google.se/ads/ga-audiences https://cdn.shopify.com https://cdn2.shopify.com https://stats.g.doubleclick.net https://t.co https://bat.bing.com https://render.bitstrips.com https://www.snapchat.com https://www.paypalobjects.com https://www.paypal.com; media-src 'self' data: https://*.googleapis.com; report-uri https://csp-central.appspot.com/report_csp; connect-src 'self' https://sentry.sc-prod.net https://www.googletagmanager.com https://optimize.google.com https://www.google-analytics.com wss://*.zopim.com https://snap-web-chat.appspot.com https://www.snapchat.com https://www.paypalobjects.com https://www.paypal.com https://*.myshopify.com https://orders.spectacles.com https://*.orders.spectacles.com; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://www.paypalobjects.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://tr.snapchat.com https://optimize.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://optimize.google.com https://tagmanager.google.com 1
frame-ancestors 'self' *.tunegenie.com http://127.0.0.1:* 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://mondaynote.com https://*.mondaynote.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self'; script-src 'self' service.bmf.gv.at bksuche.brz.gv.at static.etracker.com www.etracker.de code.etracker.com 'unsafe-eval' 'unsafe-inline'; img-src data: 'self' www.etracker.de; connect-src 'self' www.etracker.de bksuche.brz.gv.at; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'; child-src 'self'; frame-src *; form-action 'self'; font-src 'self' data: ; block-all-mixed-content; upgrade-insecure-requests; 1
frame-ancestors 'self' alldaf.org; 1
default-src https:; connect-src https: wss:; img-src https: data:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https: 1
ok 1
default-src 'self' yoast.com my.wpengine.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net unpkg.com my.wpengine.com www.google.com www.googletagmanager.com www.google-analytics.com www.gstatic.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net fonts.googleapis.com use.fontawesome.com; img-src 'self' data: 1.gravatar.com secure.gravatar.com dify.wpengine.com www.google-analytics.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com use.fontawesome.com; frame-src 'self' www.youtube.com www.google.com; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://psiloveyou.xyz https://*.psiloveyou.xyz https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
child-src 'self' 3speak.online emb.d.tube player.twitch.tv www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com; connect-src https://images.hive.blog 'self' hive.blog https://api.hive.blog api.blocktrades.us https://anyx.io https://api.openhive.network https://hivesigner.com https://hived.hive-engine.com https://api.followbtcnews.com https://rpc.esteem.app https://api.pharesim.me https://hive.roelandp.nl https://hived.privex.io https://hive.3speak.online https://rpc.ausbit.dev https://api.hivekings.com https://hivebuzz.me https://peakd.com https://api.deathwing.me; default-src tpc.googlesyndication.com 'self' img.3speakcontent.online emb.d.tube www.youtube.com staticxx.facebook.com player.vimeo.com *.streamrail.com; font-src data: fonts.gstatic.com; frame-ancestors 'none'; frame-src 'self' https:; img-src * data:; object-src 'none'; plugin-types application/pdf; script-src 'unsafe-inline' 'unsafe-eval' data: https: 'self' www.google-analytics.com connect.facebook.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com platform.twitter.com; report-uri /api/v1/csp_violation 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: *.adroll.com *.cloudfront.net *.google.com *.tawk.to *.twitter.com *.youtube.com fonts.googleapis.com fonts.gstatic.com goo.gl wss://*.tawk.to; 1
frame-ancestors 'self' http://dds-simplicit-prod.s3-website-ap-southeast-2.amazonaws.com http://dds-simplicit-v2-prod.s3-website-ap-southeast-2.amazonaws.com https://test.salesforce.com *.suncorpbank.com.au https://home.suncorp.com.au *.home.suncorp.com.au; 1
frame-ancestors 'self'; report-uri https://events.ocdn.eu/v2/csp-report?_ac=events&_fv=www.auto-swiat.pl::AS_TST_REF 1
default-src https: wss: data:; script-src blob: https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; media-src http: https: blob:; 1
frame-ancestors 'self' http://www.fx-graphics.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.washingtonpost.com https://www.chasepaymentechhostedpay.com https://sketchfab.com https://r3.visualwebsiteoptimizer.com https://ga-dev-tools.appspot.com https://apis.google.com https://www.google.com https://content.googleapis.com https://ajax.googleapis.com https://www.gstatic.com https://play.vidyard.com https://pi.pardot.com https://dev.visualwebsiteoptimizer.com https://www.googletagmanager.com https://go.jabil.com https://www.google-analytics.com http://stats.g.doubleclick.net https://4bfejp2jq0q2273jfp3mhqaw-wpengine.netdna-ssl.com https://hm.baidu.com https://cse.google.com https://snid.snitcher.com https://platform.twitter.com https://cdn.syndication.twimg.com https://syndication.twitter.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://ton.twimg.com https://analytics.newscred.com https://maps.googleapis.com https://j.6sc.co https://secure.adnxs.com https://c.6sc.co https://w.soundcloud.com https://api.mapbox.com https://*.tiles.mapbox.com https://events.mapbox.com https://go.pardot.com https://maxcdn.bootstrapcdn.com ; img-src 'self' https://* data: blob: ; worker-src 'self' blob: ; child-src 'self' https://www.washingtonpost.com https://www.chasepaymentechhostedpay.com https://sketchfab.com https://r3.visualwebsiteoptimizer.com https://ga-dev-tools.appspot.com https://apis.google.com https://www.google.com https://content.googleapis.com https://ajax.googleapis.com https://www.gstatic.com https://play.vidyard.com https://pi.pardot.com https://dev.visualwebsiteoptimizer.com https://www.googletagmanager.com https://go.jabil.com https://www.google-analytics.com http://stats.g.doubleclick.net https://4bfejp2jq0q2273jfp3mhqaw-wpengine.netdna-ssl.com https://hm.baidu.com https://cse.google.com https://snid.snitcher.com https://platform.twitter.com https://cdn.syndication.twimg.com https://syndication.twitter.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://ton.twimg.com https://analytics.newscred.com https://maps.googleapis.com https://j.6sc.co https://secure.adnxs.com https://c.6sc.co https://w.soundcloud.com https://api.mapbox.com https://*.tiles.mapbox.com https://events.mapbox.com https://go.pardot.com https://maxcdn.bootstrapcdn.com blob: ; font-src 'self' https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com data: ; 1
default-src 'self' *.siteimproveanalytics.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' public.tableau.com siteimproveanalytics.com kcmsurvey.com *.acm.nl popper.js.org sdc.mineleni.nl ssl.p.jwpcdn.com cdn.siteimprove.net cdnjs.cloudflare.com cdn.rawgit.com; connect-src 'self' *.siteimprove.com *.siteimproveanalytics.io; img-src 'self' data: *.acm.nl public.tableau.com *.siteimproveanalytics.io kcmsurvey.com sdc.mineleni.nl jwpltx.com; style-src 'self' 'unsafe-inline' siteimproveanalytics.com cdnjs.cloudflare.com; font-src 'self' data:; media-src 'self' *.acm.nl; frame-src 'self' *.siteimproveanalytics.io public.tableau.com; 1
frame-ancestors 'self' https://loading.com.br 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://code.jquery.com http://www.google-analytics.com  http://fonts.googleapis.com/ https://cdnjs.cloudflare.com http://cdn.ckeditor.com https://cdnjs.cloudflare.com  http://svc.webspellchecker.net https://ajax.googleapis.com/ https://maps.google.com/ https://maps.googleapis.com/ https://weatherwidget.io/; object-src 'self'; style-src 'self' 'unsafe-inline' 'unsafe-eval' http://cdn.ckeditor.com http://fonts.googleapis.com https://cdnjs.cloudflare.com http://svc.webspellchecker.net https://tripura.gov.in; img-src 'self' http://cdn.ckeditor.com http://www.google-analytics.com https://tripura.gov.in https://cbpssubscriber.mygov.in https://w.bookcdn.com https://maps.gstatic.com/ https://maps.gstatic.com/ https://maps.google.com/ https://tripura.gov.in/ https://maps.googleapis.com/ https://cdnjs.cloudflare.com; media-src 'self' https://www.youtube.com/ ; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com http://164.100.127.45 https://weatherwidget.io; font-src 'self' http://fonts.gstatic.com https://cdnjs.cloudflare.com http://fonts.googleapis.com; connect-src 'self' ; report-uri /admin/config/system/seckit/csp-report 1
script-src 'self' * 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' marketplace.goxip.com www.rewardsnap.com 1
frame-ancestors https://www.finanztreff.de; 1
default-src 'self' https://qiyukf.com https://ysf.nosdn.127.net/webapi/; font-src 'self' https://aex.static.btc38.com/ data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://hm.baidu.com/hm.js  https://aex.static.btc38.com https://zz.bdstatic.com/linksubmit/push.js  https://hmcdn.baidu.com/static/tongji/plugins/UrlChangeTracker.js https://qiyukf.com/script/  https://ssl.captcha.qq.com  https://captcha.gtimg.com https://t.captcha.qq.com/cap_union_prehandle; img-src 'self' data: https://aex.static.btc38.com https://aexphoto-1251755124.file.myqcloud.com https://hm.baidu.com/hm.gif https://hm.baidu.com/hm.js https://qiyukf.com https://da.qiyukf.com/webda/da.gif  https://qiyukf.nosdn.127.net/sdk/res/kefu/custom/ https://aq.qq.com/cn2/manage/mbtoken/cap_monitor blob:; style-src http://static.kandan.net http://aex.static.btc38.com 'self' 'unsafe-inline'; frame-src https:; child-src https:; object-src 'self' https://www.aex.com/page/ZeroClipboard.swf; connect-src 'self' blob: wss: https://qiyukf.com; 1
default-src 'self' * 'unsafe-inline' 'unsafe-eval' blob: data: ; 1
default-src 'self' 'unsafe-inline' *.fls.doubleclick.net wtosc.s3.amazonaws.com bid.g.doubleclick.net pixel.mathtag.com ots.optimize.webtrends.com www.youtube.com webtrends-optimize.com c.webtrends-optimize.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://c.webtrends.com ots.optimize.webtrends.com www.googleadservices.com *.mathtag.com googleads.g.doubleclick.net wtosc.s3.amazonaws.com statse.webtrendslive.com webtrends-optimize.com c.webtrends-optimize.com *.webtrends-optimize.com *.webtrends.com; img-src 'self' data: googleads.g.doubleclick.net  wtosc.s3.amazonaws.com secure.adnxs.com statse.webtrendslive.com www.google.com www.google.co.uk www.google.co.in c.webtrends.com google.co.in google.fr https://www.google.fr https://pixel.mathtag.com webtrends-optimize.com c.webtrends-optimize.com; 1
frame-ancestors 'self' https://portalzp.praha.eu http://portalzp.praha.eu; 1
frame-ancestors 'self' https://cdw.lookbookhq.com http://cdw.lookbookhq.com http://solutions.cdw.com https://solutions.cdw.com 1
upgrade-insecure-requests; default-src * data:; script-src 'self' data: https://consentcdn.cookiebot.com https://consent.cookiebot.com 'unsafe-inline' 'unsafe-eval' https://web106.reachmee.com https://s.ytimg.com https://mapclick.amap.com https://restapi.amap.com https://webapi.amap.com https://public.tableau.com https://sdn.sitecore.net https://maps.googleapis.com https://maps.google.com https://sadmin.brightcove.com https://ajax.googleapis.com https://ssl.google-analytics.com https://www.youtube.com https://www.google.com https://bat.bing.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://connect.facebook.net https://platform.twitter.com https://s3.amazonaws.com; style-src 'self' data: 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.9.0/slick.min.css https://cdnjs.cloudflare.com https://webapi.amap.com https://fonts.googleapis.com https://ajax.googleapis.com; img-src * 'self' data:; font-src 'self' data: https://netdna.bootstrapcdn.com https://fonts.gstatic.com https://fonts.typekit.net https://themes.googleusercontent.com; child-src 'self' https://sdn.sitecore.net https://web106.reachmee.com https://sdn.sitecore.net https://www.youtube.com https://www.google.com https://accounts.google.com https://www.googletagmanager.com; frame-src 'self' https://consentcdn.cookiebot.com https://cdn.yoshki.com https://watch.twobirds.com https://www.youtube.com https://player.vimeo.com http://sdn.sitecore.net https://sdn.sitecore.net https://translate.google.com https://web106.reachmee.com; frame-ancestors 'self' https://sdn.sitecore.net; report-uri https://3chillies.report-uri.io/r/default/csp/enforce 1
object-src 'none'; font-src 'self' *.celiac.com *.googleapis.com fonts.gstatic.com www.google-analytics.com; frame-ancestors 'self' *.google.com *.google.de *.google.au *.google.ca *.google.uk *.google.in googleads.g.doubleclick.net *.celiac.com www.google-analytics.com; img-src 'self' data: *.celiac.com *.google.com www.w3.org googleads.g.doubleclick.net doubleclick.net www.google-analytics.com i.ytimg.com googlesyndication.com stats.g.doubleclick.net pagead2.googlesyndication.com cdn.ckeditor.com *.gstatic.com *.googleapis.com; connect-src 'self' *.celiac.com stats.g.doubleclick.net www.google-analytics.com; style-src 'self' 'unsafe-inline' *.celiac.com fonts.googleapis.com fonts.gstatic.com cdn.ckeditor.com cdnjs.cloudflare.com www.google.com *.googleapis.com googleads.g.doubleclick.net www.google-analytics.com; 1
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://code.jquery.com https://production-assets.paperswithcode.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://unpkg.com https://ajax.googleapis.com https://browser.sentry-cdn.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://code.jquery.com https://cdn.jsdelivr.net https://production-assets.paperswithcode.com; media-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src https://www.youtube.com/; default-src 'self'; font-src * data: blob: 'unsafe-inline'; connect-src 'self' https://unpkg.com https://www.google-analytics.com https://sentry.io ws://localhost:3000 1
default-src https: 'unsafe-inline' 'unsafe-eval' *.tawk.to wss: 1
frame-ancestors 'self' viewsonic.com viewsonic.com.tw viewsonic.com.au viewsonic.com.sg viewsoniceurope.com viewsonic.com.cn ap.viewsonic.com hk.viewsonic.com ifppartners.viewsonic.com color.viewsonic.com viewsonicglobal.com; 1
default-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.appdynamics.com https://*.cloudfront.net https://api.usabilla.com https://googleads.g.doubleclick.net https://googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://nconnect.facebook.net https://www.youtube.com https://w.usabilla.com https://scripts.nwebsec.com https://www.google.com https://static.doubleclick.net https://api.wunderground.com https://pym.nprapps.org https://cdnssl.clicktale.net https://connect.facebook.net https://maps.googleapis.com https://*.iperceptions.com https://az452423.vo.msecnd.net https://ips-invite.iperceptions.com https://syndication.twitter.com https://s.ytimg.com https://iperceptions01.azureedge.net https://dnn506yrbagrg.cloudfront.net https://www.gstatic.com https://bat.bing.com https://static.cmptch.com https://s.adroll.com https://d.adroll.com https://media.zoomprospector.com https://*.appdynamics.com https://tagmanager.google.com https://tagmanager.google.com/debug/css.css https://ve-cec-na1.app.clicktale.com blob: https://*.aspnetcdn.com https://*.clicktale.net https://*.clicktale.com https://optimize.google.com https://se-engage-components-dev.herokuapp.com https://se-engage-components-uat.herokuapp.com https://se-engage-manifastener-dev.herokuapp.com https://se-engage-manifastener-uat.herokuapp.com https://se-engage-manifastener-prod.herokuapp.com;object-src 'self' https://www.applianceserviceplan.com;style-src 'self' 'unsafe-inline' https://www.youtube.com https://www.fonts.googleapis.com https://fonts.googleapis.com https://*.cloudfront.net https://tagmanager.google.com/debug/css.css https://optimize.google.com;img-src 'self' https://www.google.com https://www.google-analytics.com https://i.ytimg.com https://www.facebook.com https://*.cloudfront.net https://bat.bing.com https://conductor.clicktale.net https://gtrk.s3.amazonaws.com https://hit.uptrendsdata.com https://i.vimeocdn.com https://ips-img.iperceptions.com https://maps.googleapis.com https://maps.gstatic.com https://pbs.twimg.com https://stats.g.doubleclick.net https://w.usabilla.com https://www.googletagmanager.com https://www.google.ca https://www.google.co.in https://optimize.google.com https: data:;media-src 'self' https:;frame-src https://*.iperceptions.com https://connect.facebook.net https://ipn2.paymentus.com https://na-sj06.marketo.com https://player.vimeo.com https://www.facebook.com https://www.google.com https://tagmanager.google.com https://optimize.google.com https:;font-src 'self' https://fonts.gstatic.com https://cdn.joinhoney.com https: data:;connect-src 'self' https://conductor.clicktale.net https://ing-district.clicktale.net https://api.iperceptions.com https://col.eum-appdynamics.com https://hit.uptrendsdata.com https://stats.g.doubleclick.net https://www.google-analytics.com https:;child-src 'self' https://www.googletagmanager.com https://ipn2.paymentus.com https://connect.facebook.net https://www.google.com https://*.iperceptions.com https://tagmanager.google.com https://www.youtube.com https: blob:;frame-ancestors 'self' https:;worker-src https://cdnssl.clicktale.net https: data: blob:;report-uri /webapi/reporting/csp 1
frame-ancestors 'self' http://www.genau-lotto.de http://genau-lotto.de 1
script-src 'nonce-1r6h/SJgofyndq8ThHR0/Q' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://www.google-analytics.com/analytics.js https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport 1
frame-ancestors http://webvisor.com https://www.youtube.co 1
frame-ancestors 'self' piwik.currence.nl; 1
frame-ancestors *.bryant.edu 1
frame-ancestors aplikace.rozhlas.cz 'self'; 1
frame-ancestors officialgazette.gov.ph 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mastertag.kpcustomer.de *.netcologne.de:* https://bat.bing.com https://connect.facebook.net www.googletagmanager.com:* www.google-analytics.com:* https://partners.webmasterplan.com www.google.de:* https://optimize.google.com https://fonts.googleapis.com https://fonts.gstatic.com https://seal.thawte.com https://www.googleadservices.com https://*.exactag.com *.google.com:* https://*.gstatic.com *.googleapis.com:* https://www.kabelkiosk.de https://*.deepthought.online https://cdn.jsdelivr.net https://wt1.rqtrk.eu https://api.aklamio.com https://googleads.g.doubleclick.net https://config1.veinteractive.com https://netcologne.lamapoll.de https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.surveymonkey.com https://walls.io https://r.df-srv.de https://static.hotjar.com:* https://script.hotjar.com:* https://*.ad4m.at https://ad4m.at https://*.usemaxserver.de https://*.awin1.com https://*.dwin1.com https://zenaps.com https://sciencebehindecommerce.com https://*.criteo.net https://*.criteo.com https://tracking.m6r.eu https://www.youtube.com https://*.ytimg.com https://www.etermin.net https://the.sciencebehindecommerce.com https://www.lacmp.net https://analytics.aklamio.com https://*.adsrvr.org https://adsrvr.org; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://s.ytimg.com https://script.crazyegg.com https://dnn506yrbagrg.cloudfront.net https://planner-widget.goabout.com https://stats.g.doubleclick.net https://www.gstatic.com https://track.adform.net https://blokks.co https://view.genial.ly https://*.cloudfront.net https://static.hotjar.com https://parking-widget.goabout.com https://script.hotjar.com https://*.lightning.force.com https://www.facebook.com https://snap.licdn.com https://connect.facebook.net https://in.hotjar.com/ https://stats.g.doubleclick.net https://radboudumc.bbvms.com/ https://cdn.bluebillywig.com; style-src 'self' 'unsafe-inline'  https://fast.fonts.net https://*.cloudfront.net https://fonts.googleapis.com https://*.lightning.force.com; img-src 'self'  https://www.google.com https://www.google.nl https://www.google-analytics.com https://stats.g.doubleclick.net https://static.genial.ly https://*.amazonaws.com https://*.lightning.force.com https://px.ads.linkedin.com https://www.facebook.com https://*.bbvms.com/ https://*.bluebillywig.com https://*.cloudfront.net; media-src 'self'  https://static.genial.ly/ https://radboudumc.bbvms.com/; font-src 'self'  data: https://*.cloudfront.net https://fonts.gstatic.com https://*.lightning.force.com https://cdn.bluebillywig.com/*; frame-ancestors 'self' https://bewerk.radboudumc.nl https://radboud.app.connexys.nl; frame-src 'self'  https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://radboudumc-web.ungerboeck.com https://planner-widget.goabout.com https://www.google.com https://docs.google.com https://view.genial.ly https://vars.hotjar.com https://parking-widget.goabout.com/ https://*.bbvms.com/ https://embed.nkr-cijfers.nl https://*caresharing.eu.  https://*.bluebillywig.com; connect-src 'self'  https://www.google-analytics.com https://view.genial.ly https://*.lightning.force.com https://in.hotjar.com/ https://stats.g.doubleclick.net https://radboudumc.bbvms.com/; object-src 'self';  1
default-src * wss: data: 'unsafe-inline' 'unsafe-eval' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.belfius.be https://assets.adobedtm.com https://maps.googleapis.com https://www.youtube.com/iframe_api https://*.salemove.eu https://*.salemove.com https://s.ytimg.com; 1
report-uri https://www.yelp.com/csp_block?id=b9a1d55369cbf2fd&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609210948; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
frame-ancestors 'self' *.bpk.go.id 1
frame-ancestors http://webvisor.com/  1
font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://www.concentrix.com http://www.concentrix.com http://concentrix.com data: https://1cfrbv1cz8j13t7nr4n67ss1-wpengine.netdna-ssl.com; frame-ancestors https://cvgdotcomprodprvw.azurewebsites.net/careers https://careers.concentrix.com/ https://careers.concentrix.com/careers? https://cvgdotcomprodprvw.azurewebsites.net https://careers.concentrix.com/careers https://concentrix.my.salesforce.com/ https://careers.concentrix.com/careers/us https://careers.concentrix.com/careers/us/ https://careers.concentrix.com/careers/?country=ca https://careers.concentrix.com/* https://careers.concentrix.com/about/contact-us; 1
frame-ancestors 'self'; report-uri https://scan.campusgroups.com/csp_reports; 1
base-uri 'self';connect-src 'self' https://*.hearnow-cdn.com https://www.google-analytics.com https://stats.g.doubleclick.net site-stats.hearnow.com https://api.spotify.com https://api.found.ee https://api.recurly.com;default-src 'self' https://api.recurly.com;font-src 'self' https://*.hearnow-cdn.com fonts.gstatic.com;form-action 'self';frame-src 'self' site-stats.hearnow.com mailto: https://open.spotify.com https://accounts.spotify.com https://api.recurly.com;img-src 'self' https://*.hearnow-cdn.com www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net site-stats.hearnow.com data: https://open.scdn.co https://www.gstatic.com;media-src 'self' content.cdbaby.com;object-src 'none';script-src 'self' 'nonce-jYor8VLpxvxOoNNmYxCI5S8uF5fH5CMU' https://*.hearnow-cdn.com www.googletagmanager.com https://www.google-analytics.com site-stats.hearnow.com https://found.ee/dmp/pixel.js https://ib.adnxs.com https://secure.adnxs.com https://api.recurly.com https://js.recurly.com;style-src 'self' 'unsafe-inline' https://*.hearnow-cdn.com https://api.recurly.com https://js.recurly.com fonts.googleapis.com 1
default-src 'self' https://cdn-englishdom.gcdn.co https://static.englishdom.com https://cdn-static-englishdom.gcdn.co; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' https://cdn-englishdom.gcdn.co https://static.englishdom.com https://cdn-static-englishdom.gcdn.co data:; object-src 'self' https://cdn-englishdom.gcdn.co https://static.englishdom.com https://cdn-static-englishdom.gcdn.co; style-src data: https: 'self' 'unsafe-inline' https://cdn-englishdom.gcdn.co https://static.englishdom.com https://cdn-static-englishdom.gcdn.co; connect-src https: 'self' wss://www.englishdom.com/wss/ wss://www.englishdom.com/node-wss/ wss://*.zopim.com/ https://cdn-englishdom.gcdn.co https://static.englishdom.com https://cdn-static-englishdom.gcdn.co; frame-src https: https://cdn-englishdom.gcdn.co https://static.englishdom.com https://cdn-static-englishdom.gcdn.co; frame-ancestors 'self' https://www.englishdom.com/ https://webvisor.com https://cdn-englishdom.gcdn.co https://static.englishdom.com https://cdn-static-englishdom.gcdn.co; font-src https: data: https://cdn-englishdom.gcdn.co https://static.englishdom.com https://cdn-static-englishdom.gcdn.co; img-src 'self' https://cdn-englishdom.gcdn.co https://static.englishdom.com https://cdn-static-englishdom.gcdn.co data: blob: *; media-src data: 'self' https://cdn-englishdom.gcdn.co https://static.englishdom.com https://cdn-static-englishdom.gcdn.co; 1
default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none' 1
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *; style-src 'report-sample' 'self' 'unsafe-inline' *; object-src *; base-uri 'self'; child-src 'self' *; connect-src 'self' *; font-src 'self' 'unsafe-inline' data: *; frame-src 'self' *; img-src 'self' *; manifest-src 'self' *; media-src 'self' *; report-uri https://5f9b31bcca69962525be3255.endpoint.csper.io; worker-src *; 1
frame-ancestors http://www.seafoodsource.com https://divcomplatform.s3.amazonaws.com 1
child-src *.doubleclick.net *.dynad.net *.facebook.com *.hotjar.com *.marketo.com *.omniture.com *.pagseguro.uol.com.br *.rm.uol.com.br *.tailtarget.com *.uol.com *.uol.com.br *.youtube.com https://www.google.com *.blip.ai data: 'self'; connect-src *.hotjar.com *.pagseguro.com.br *.uol.com.br wss://ws.0mn.io https: wss: 'self'; frame-ancestors 'self'; default-src *.uol.com.br *.pagseguro.com.br 'self'; media-src *.uol.com.br *.pagseguro.com.br data: 'self'; object-src *.uol.com.br *.pagseguro.com.br data: 'self'; font-src *.pagseguro.uol.com.br *.pagseguro.com.br *.uol.com *.uol.com.br *.imguol.com.br *.gstatic.com *.hotjar.com https://imguol.com.br data: 'self'; img-src *.google.com *.google-analytics.com *.google.com.br *.googleapis.com *.gstatic.com *.facebook.com *.imguol.com *.uol.com *.uol.com.br *.pagseguro.com.br *.scorecardresearch.com *.ytimg.com *.doubleclick.net *.googleadservices.com *.xg4ken.com *.youtube.com *.hotjar.com *.tailtarget.com *.bing.com https://imguol.com https://imguol.com.br trg.adilligo.com takenetomni.blob.core.windows.net data: 'self'; script-src *.ampproject.org *.bing.com *.doubleclick.net *.dynad.net *.facebook.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.googletagmanager.com *.hotjar.com *.jsdelivr.net *.jsuol.com.br *.marketo.com *.pagseguro.com.br *.simg.uol.com.br *.tailtarget.com *.uol.com *.uol.com.br *.xg4ken.com *.ytimg.com https://pagseguro.info https://pag.ae https://imguol.com.br https://www.gstatic.com https://tracking.tunad.io https://js-agent.newrelic.com https://*.nr-data.net about: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.uol.com *.pagseguro.uol.com.br *.pagseguro.com.br *.simg.uol.com.br *.ytimg.com *.marketo.com https://imguol.com.br 'self' *.google.com *.googleapis.com 'unsafe-inline'; report-uri /csp-report 1
base-uri 'none'; object-src 'none'; script-src https://tradingqna.com/logs/ https://tradingqna.com/sidekiq/ https://tradingqna.com/mini-profiler-resources/ https://tradingqna.com/assets/ https://tradingqna.com/brotli_asset/ https://tradingqna.com/extra-locales/ https://tradingqna.com/highlight-js/ https://tradingqna.com/javascripts/ https://tradingqna.com/plugins/ https://tradingqna.com/theme-javascripts/ https://tradingqna.com/svg-sprite/ https://www.google-analytics.com/analytics.js; worker-src 'self' https://tradingqna.com/assets/ https://tradingqna.com/brotli_asset/ https://tradingqna.com/javascripts/ https://tradingqna.com/plugins/ 1
frame-ancestors 'self' https://*.leica-microsystems.com https://*.leica-microsystems.com.cn; 1
default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self' data: https://*.privacytools.io; object-src 'none'; frame-src 'none'; font-src 'self'; base-uri 'none'; form-action 'self' https://search.privacytools.io; frame-ancestors 'none'; manifest-src 'self'; 1
object-src 'none'; font-src 'none'; upgrade-insecure-requests 1
frame-ancestors 'self' https://google.com/maps https://fast.wistia.net/embed/iframe https://webto.salesforce.com https://go.pardot.com https://docs.google.com/viewer https://static.olark.com/ 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' * blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' * blob:; object-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' 'unsafe-eval' *; img-src 'self' 'unsafe-inline' 'unsafe-eval' *; media-src 'self' 'unsafe-inline' 'unsafe-eval' * blob: *.jwplayer.com *.jwpsrv.com *.jwplatform.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *; frame-ancestors 'self' 'unsafe-inline' 'unsafe-eval' *; child-src 'self' 'unsafe-inline' 'unsafe-eval' * blob:; font-src 'self' 'unsafe-inline' 'unsafe-eval' *; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *; report-uri /report-csp-violation 1
default-src 'self' 'unsafe-inline' *.web-2-tel.com *.doubleclick.net *.optnmstr.com *.gstatic.com data: *.acquia.com *.unitedrentals.com *.cloudfront.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.unitedrentals.com *.acquia.com *.marchex.io *.egain.cloud *.analytics-egain.com *.criteo.net *.ssl.cf1.rackcdn.com *.doubleclick.net *.google.com *.google-analytics.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.googleapis.com bat.bing.com *.quantserve.com *.getsitecontrol.com *.facebook.net *.crazyegg.com *.quantcount.com st.getsitecontrol.com *.yimg.com snap.licdn.com sp.analytics.yahoo.com *.addtoany.com *.ads.linkedin.com *.newrelic.com *.pardot.com *.nr-data.net web-2-tel.com *.web-2-tel.com *.optnmstr.com *.cloudflare.com *.adnxs.com data: *.acquia.com *.pragmaticcrm.com *.optmstr.com *.bizographics.com *.criteo.com *.linkedin.com *.optmnstr.com *.nr-data.net wvw.unitedrentals.com *.youtube.com *.vimeo.com *.ytimg.com *.opmnstr.com *.cloudfront.net  *.jsdelivr.net https://optimize.google.com *.jsdelivr.net unpkg.com *.kampyle.com polyfill.io *.b-cdn.net cdn.rawgit.com *.jivox.com c3plp.net; style-src 'self' 'unsafe-inline' *.acquia.com *.googleapis.com *.cloudflare.com *.optnmstr.com *.google.com *.egain.cloud *.jsdelivr.net https://optimize.google.com https://fonts.googleapis.com *.jsdelivr.net unpkg.com *.kampyle.com; img-src 'self' data: *.unitedrentals.com bat.bing.com *.marchex.io *.optnmstr.com *.googleapis.com *.google-analytics.com *.doubleclick.net *.facebook.com *.google.com *.quantserve.com *.gstatic.com *.adnxs.com *.optmstr.com res.cloudinary.com *.googletagmanager.com *.linkedin.com *.criteo.com s0.2mdn.net *.egain.cloud https://optimize.google.com *.cloudfront.net *.jsdelivr.net *.kampyle.com *.turn.com images.rouseservices.com *.advanseads.com; frame-src 'self' *.acquia.com *.marchex.io *.doubleclick.net *.criteo.com *.egain.cloud *.analytics-egain.com *.vimeo.com *.facebook.com *.facebook.net *.youtube.com https://optimize.google.com https://youtube.com *.opmnstr.com *.unitedrentals.com *.kampyle.com c3plp.net *.c3portal.net; child-src 'self' *.acquia.com *.marchex.io *.doubleclick.net *.criteo.com *.egain.cloud *.analytics-egain.com *.vimeo.com *.facebook.com *.facebook.net *.youtube.com https://optimize.google.com https://youtube.com *.opmnstr.com *.unitedrentals.com *.kampyle.com blob:; font-src 'self' 'unsafe-inline' *.unitedrentals.com https://fonts.gstatic.com *.jsdelivr.net *.kampyle.com; connect-src 'self' *.acquia.com *.web-2-tel.com web-2-tel.com *.egain.cloud *.optnmstr.com *.optmstr.com *.gstatic.com data: *.acquia.com *.nr-data.net *.optmnstr.com *.google.com *.optmnstr.com *.google-analytics.com stats.g.doubleclick.net *.opmnstr.com *.luckyorange.net *.googleapis.com *.visitors.live *.kampyle.com wss://*.visitors.live *.bugsnag.com *.omappapi.com 1
frame-ancestors 'self' www.porlalibertad.org porlalibertad.org; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:;object-src 'none';block-all-mixed-content;form-action 'self' http: https:;frame-ancestors https://*.atitesting.com; 1
default-src 'none';connect-src * https://rs.fullstory.com/ https://static.zdassets.com/ https://static.zdassets.com/ekr/snippet.js https://www.youtube.com/ https://immunotec-admin.exigo.com/ https://media.immunotec.com https://immunotec.com https://backoffice.immunotec.com;frame-src 'self' https://www.google.com https://sandbox-gateway.safetypay.com https://seal-sanjose.bbb.org/ https://www.youtube.com/ https://immunotec-admin.exigo.com/ https://gateway.safetypay.com/ https://media.immunotec.com https://test-htp.tokenex.com https://test-htp.tokenex.com/Iframe/Iframe-v3.js https://htp.tokenex.com/ https://immunotec.com https://backoffice.immunotec.com;font-src *; img-src * data:; media-src *; object-src 'self'; script-src * http://* 'unsafe-inline' 'unsafe-eval'; style-src * http://* 'unsafe-inline'; worker-src 'none'; manifest-src 'none'; frame-ancestors 'self'; child-src 'self';form-action 'self'  https://shop.immunotec.com http://kyle-immunotec.drivemarketing.com https://www.immunotec.com https://immunotec.zendesk.com https://immunotec-admin.exigo.com/ https://media.immunotec.com https://immunotec.com https://backoffice.immunotec.com;base-uri 'self'; 1
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=index&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=bd93475d-d437-4b46-aadf-8f061660fe97 1
frame-ancestors 'self' *.cnbc.com *.acorns.com; 1
frame-ancestors 'self' https://alamode.com https://*.alamode.com https://titanappraisal.com https://*.titanappraisal.com https://titanoffice.com https://*.titanoffice.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.cognitoforms.com https://services.cognitoforms.com ; img-src 'self' 'unsafe-inline' data: https: ; font-src 'self' data: https: ; connect-src 'self' *.facebook.com *.instagram.com *.podbean.com *.twitter.com *.youtube.com *.intercom.io *.doubleclick.net *.cognitoforms.com services.cognitoforms.com *.googlesyndication.com *.google.com *.gstatic.com *.google-analytics.com *.disqus.com *.addtoany.com *.quiz-maker.com sentry.utdev.com ; media-src https: ; object-src 'self' ; child-src 'self' *.linkedin.com *.facebook.com *.instagram.com *.podbean.com *.twitter.com *.googlesyndication.com *.addtoany.com *.google.com disqus.com *.disqus.com *.opinionstage.com *.youtube.com api.connectedcommunity.org www.votervoice.net *.doubleclick.net *.cognitoforms.com services.cognitoforms.com ; form-action 'self' accounts.ficpa.org ; upgrade-insecure-requests; report-uri https://sentry.utdev.com/api/30/security/?sentry_key=5a6c6f3cab0c4a16bb15c0217c48cc3b; 1
frame-ancestors 'self' *.brightspace.com; 1
object-src 'self'; upgrade-insecure-requests 1
frame-ancestors 'self' *.vaulthealth.com 1
script-src 'nonce-Z9DIFjndxYVWbYMFVbOq/Q' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://youtube.googleapis.com https://youtube.com https://s.ytimg.com https://www.youtube.googleapis.com;report-uri /_/MeetingsUi/cspreport 1
base-uri 'self'; default-src 'self'; connect-src 'self' blob: https://*.tenor.co https://*.tenor.com https://*.googleapis.com https://api.tenor.com https://api.tenor.com https://*.google-analytics.com https://*.doubleclick.net https://pixel.mtrcs.samba.tv; script-src 'self' data: https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com https://*.google-analytics.com https://*.facebook.net https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://pixel.mtrcs.samba.tv https://*.google.com 'nonce-NWMzMGQ3ZWUtMzgyMi00OGYxLTkxYWYtZDljOGFmZDQ3MmE5' 'unsafe-eval'; style-src 'self' https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com 'unsafe-inline'; font-src 'self' https://tenor.co https://tenor.com https://*.tenor.co https://*.tenor.com; img-src 'self' blob: data: https://media.tenor.co https://media.tenor.com https://media1.tenor.co https://media1.tenor.com https://*.google-analytics.com https://*.doubleclick.net https://*.facebook.com https://pixel.mtrcs.samba.tv http: https:; media-src 'self' blob: data: https://media.tenor.co https://media.tenor.com https://media1.tenor.co https://media1.tenor.com; frame-src 'self' https://www.google.com/recaptcha/ https://www.facebook.com/tr/ https://*.google.com https://*.googleapis.com; object-src 'none' 1
frame-ancestors https://metropcs.mobi https://www.metropcs.mobi https://*.metrobyt-mobile.com https://metropcs.mobileposse.com/; 1
base-uri 'self'; default-src 'self' https://api.cleverpush.com https://static.cleverpush.com; connect-src * 'self' https://api.cleverpush.com https://static.cleverpush.com data: https://* wss:* https://api.stripe.com; object-src 'none'; img-src data: 'self' https://* https://api.cleverpush.com https://static.cleverpush.com https://www.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://cdnjs.cloudflare.com https://www.gravatar.com; style-src 'self' 'unsafe-inline' https://api.cleverpush.com https://static.cleverpush.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://*.tiny.cloud https://*.tinymce.com https://cdn.ampproject.org data:; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://api.cleverpush.com https://static.cleverpush.com https://cdnjs.cloudflare.com https://*.tiny.cloud https://*.tinymce.com https://cdn.ampproject.org data:; media-src 'self' https://api.cleverpush.com https://static.cleverpush.com data: https://static.zdassets.com; frame-src 'self' https://api.cleverpush.com https://static.cleverpush.com data: https://www.google.com https://editor.unlayer.com https://bid.g.doubleclick.net https://tpc.googlesyndication.com https://js.stripe.com https://hooks.stripe.com https://*.paypalobjects.com https://*.paypal.com https://*.cdn.ampproject.org; script-src 'self' https://api.cleverpush.com https://static.cleverpush.com data: https://static.zdassets.com https://widget-mediator.zopim.com https://app.leadrebel.io https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://*.tiny.cloud https://*.tinymce.com https://editor.unlayer.com https://js.stripe.com https://*.paypalobjects.com https://*.paypal.com https://cdn.ampproject.org 'nonce-e08935ffe3c2c20b545ba760664a905e' 'nonce-266a675d8decdf0744a52e5527d2acb0' 'nonce-c0fcda6ce6f8f8b24829390f2f5f0ea1' 'sha256-Z2RHz5300IPQDvjTXgBADqUjMXgEnkTkGRsnyV5hAJQ='; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'  www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com *.odd.blackspider.com:* *.dev-rd.websense.net:*  *.websense.net:* *.mailcontrol.com:* *.forcepoint.net:*; img-src 'self' data:; 1
default-src 'self' https://www.itsme.be https://business.itsme.be https://static.zdassets.com; script-src 'self' 'unsafe-inline' data: https://www.itsme.be https://business.itsme.be https://www.google.com https://tagmanager.google.com https://connect.facebook.net https://config.metomic.io https://consent-manager.metomic.io https://*.zopim.com wss://*.zopim.com https://www.gstatic.com code.jquery.com cdnjs.cloudflare.com static.zdassets.com https://www.youtube.com *.googletagmanager.com *.google-analytics.com cdn.polyfill.io *.adnxs.com *.adbutter.net https://optimize.google.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com https://optimize.google.com https://fonts.googleapis.com; img-src 'self' data: https://www.itsme.be https://business.itsme.be *.google-analytics.com https://tagmanager.google.com *.googletagmanager.com *.doubleclick.net https://lh3.googleusercontent.com *.gstatic.com *.adnxs.com https://optimize.google.com *.facebook.com; font-src 'self' *.gstatic.com; object-src 'none' ; frame-src 'self' https://www.itsme.be https://business.itsme.be *.youtube.com *.youtube-nocookie.com *.googletagmanager.com *.google.com *.facebook.com; connect-src https://www.itsme.be https://business.itsme.be *.google-analytics.com ekr.zdassets.com wss://*.zopim.com *.zendesk.com *.googletagmanager.com *.metomic.io *.rollbar.com; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.gstatic.com https://img.youtube.com https://www.youtube.com https://www.google.com https://www.google-analytics.com/analytics.js data: https://www.youtube.com https://www.google-analytics.com https://use.fontawesome.com https://fonts.gstatic.com https://fonts.googleapis.com https://js-agent.newrelic.com https://ajax.cloudflare.com cdn.ckeditor.com https://unpkg.com https://maxcdn.bootstrapcdn.com; report-uri /admin/config/system/seckit/csp-report 1
default-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self' cdn.httparchive.org www.google-analytics.com use.fontawesome.com cdn.speedcurve.com spdcrv.global.ssl.fastly.net lux.speedcurve.com 'nonce-9Rb51gHSr-f1ELGyDtQoqw'; font-src 'self' fonts.gstatic.com; connect-src 'self' cdn.httparchive.org discuss.httparchive.org dev.to cdn.rawgit.com www.webpagetest.org www.google-analytics.com stats.g.doubleclick.net; img-src 'self' almanac.httparchive.org discuss.httparchive.org avatars.discourse.org www.google-analytics.com www.google.com s.g.doubleclick.net stats.g.doubleclick.net sjc3.discourse-cdn.com res.cloudinary.com 1
frame-ancestors *.mncnow.id *.google.com *.okezone.com *.azureedge.net *.visionplus.id; 1
frame-ancestors https://www.cwtanalytiqs.com https://int.cwtanalytiqs.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://cdn.cookielaw.org https://cdnjs.cloudflare.com service.maxymiser.net https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://img04.en25.com https://connect.facebook.net https://fonts.googleapis.com https://s.ytimg.com https://content.mycwt.com https://content-d.mycwt.com https://www.google-analytics.com https://geolocation.onetrust.com https://www.youtube.com img04.en25.com/i/elqCfg.min.js https://s.go-mpulse.net siteimproveanalytics.com *.contentsquare.com *.contentsquare.net *.turtl.co https://cwt-sdk-sandbox.joinsherpa.io https://cwt-sdk.joinsherpa.io https://snap.licdn.com https://s2068514591.t.eloqua.com; object-src 'self'; 1
frame-ancestors *.dowjones.net *.penews.com *.onservo.com 1
frame-ancestors 'self' *.q10soluciones.com *.q10.com sm.q10.com webvisor.com 1
frame-ancestors https://*.ionos.ca https://ionos.ca; 1
default-src http: https: 'self' data: blob:; base-uri 'self'; child-src * blob:; connect-src *; frame-ancestors 'self' https://landing.credit-agricole.it/; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: *.credit-agricole.it http://*.credit-agricole.it https://*.credit-agricole.it *.cloudfront.net http://*.cloudfront.net https://*.cloudfront.net *.doubleclick.net http://*.doubleclick.net https://*.doubleclick.net connect.ekomi.de http://connect.ekomi.de https://connect.ekomi.de widgets.ekomi.com http://widgets.ekomi.com https://widgets.ekomi.com *.facebook.net http://*.facebook.net https://*.facebook.net www.google.com http://www.google.com https://www.google.com www.google.it http://www.google.it https://www.google.it *.google-analytics.com http://*.google-analytics.com https://*.google-analytics.com www.googleadservices.com http://www.googleadservices.com https://www.googleadservices.com www.googletagmanager.com http://www.googletagmanager.com https://www.googletagmanager.com www.gstatic.com http://www.gstatic.com https://www.gstatic.com script.hotjar.com http://script.hotjar.com https://script.hotjar.com static.hotjar.com http://static.hotjar.com https://static.hotjar.com cdn.jsdelivr.net http://cdn.jsdelivr.net https://cdn.jsdelivr.net www.youtube.com http://www.youtube.com https://www.youtube.com ajax.googleapis.com http://ajax.googleapis.com https://ajax.googleapis.com tagmanager.google.com http://tagmanager.google.com https://tagmanager.google.com *.amazonaws.com http://*.amazonaws.com https://*.amazonaws.com cdn.ravenjs.com http://cdn.ravenjs.com https://cdn.ravenjs.com *.ekomiapps.de http://*.ekomiapps.de https://*.ekomiapps.de *.mynsystems.com http://*.mynsystems.com https://*.mynsystems.com service.unyco.net http://service.unyco.net https://service.unyco.net demo.unyco.net http://demo.unyco.net https://demo.unyco.net secure.adnxs.com http://secure.adnxs.com https://secure.adnxs.com ads.avocet.io http://ads.avocet.io https://ads.avocet.io s.yimg.com http://s.yimg.com https://s.yimg.com *.analytics.yahoo.com http://*.analytics.yahoo.com https://*.analytics.yahoo.com; style-src 'unsafe-inline' 'self' *.mapbox.com http://*.mapbox.com https://*.mapbox.com *.credit-agricole.it http://*.credit-agricole.it https://*.credit-agricole.it *.amazonaws.com http://*.amazonaws.com https://*.amazonaws.com fonts.googleapis.com http://fonts.googleapis.com https://fonts.googleapis.com tagmanager.google.com http://tagmanager.google.com https://tagmanager.google.com widgets.ekomi.com http://widgets.ekomi.com https://widgets.ekomi.com *.ekomiapps.de http://*.ekomiapps.de https://*.ekomiapps.de service.unyco.net http://service.unyco.net https://service.unyco.net demo.unyco.net http://demo.unyco.net https://demo.unyco.net 1
frame-ancestors 'self' *.buechen.de ; 1
default-src 'self'; img-src 'self' *.gomaji.com images.buy123.com.tw tr.line.me sb.scorecardresearch.com stats.g.doubleclick.net certify.alexametrics.com cx.atdmt.com *.cloudfront.net cloudfront-labs.amazonaws.com www.google-analytics.com bat.bing.com *.facebook.com *.facebook.net *.google.com *.google.com.tw www.googletagmanager.com data:; script-src 'self' 'unsafe-inline' *.gomaji.com *.google.com www.google-analytics.com www.googleadservices.com sb.scorecardresearch.com bat.bing.com certify-js.alexametrics.com connect.facebook.net code.jquery.com d.line-scdn.net d.line-cdn.net www.googletagmanager.com *.doubleclick.net *.instagram.com *.yahoo.com s.yimg.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.gomaji.com fonts.googleapis.com; font-src 'self' *.gomaji.com fonts.googleapis.com cdnjs.cloudflare.com fonts.gstatic.com; frame-src 'self' *.gomaji.com *.google.com *.facebook.com *.youtube.com *.instagram.com; connect-src 'self' *.gomaji.com www.google-analytics.com www.facebook.com stats.g.doubleclick.net s.yimg.com;report-uri https://csp.gomaji.com/report.php?s=www 1
default-src 'self' cdn.jsdelivr.net bid.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net unpkg.com npmcdn.com googleads.g.doubleclick.net www.googletagmanager.com www.google-analytics.com www.googleadservices.com connect.facebook.net; connect-src 'self' sso.promise.com stats.g.doubleclick.net www.google-analytics.com; img-src 'self' data: cdnjs.cloudflare.com www.google.com.tw www.facebook.com www.google.com googleads.g.doubleclick.net www.google-analytics.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net unpkg.com ; font-src 'self' cdnjs.cloudflare.com; frame-src 'self' bid.g.doubleclick.net www.youtube.com www.facebook.com; base-uri 'self'; form-action 'self' www.facebook.com; frame-ancestors 'self'; 1
frame-ancestors *.vfpnext.com 1
default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
frame-ancestors 'self' http://*.staatsbibliothek-berlin.de https://*.staatsbibliothek-berlin.de https://*.sbb.berlin; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com ajax.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://static.addtoany.com/ http://clients1.google.com/complete/ https://js-agent.newrelic.com/ https://bam.nr-data.net/ https://www.google.com  https://*.fontawesome.com https://*.customsearch.ai https://*.googletagmanager.com https://tagmanager.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.addtoany.com/ https://*.windows.net https://tagmanager.google.com; img-src 'self' https://www.google-analytics.com data: https://www.google.com/recaptcha/ http://www.ecb.int/ http://www.ecb.europa.eu/ https://*.windows.net https://*.gstatic.com https://stats.g.doubleclick.net; frame-src 'self' https://www.google.com/recaptcha/ https://static.addtoany.com/ https://www.youtube-nocookie.com/ https://maps.google.be/maps/ https://www.google.com/maps/ https://mapsengine.google.com/ https://ui.customsearch.ai/; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.customsearch.ai https://*.google-analytics.com; report-uri /admin/config/system/seckit/csp-report 1
default-src 'self' *.srbiau.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io https://www.aparat.com; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com https://www.aparat.com; frame-ancestors 'self' https://trustseal.enamad.ir 1
default-src 'self'; font-src * data:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src https://*.youtube.com/ https://*.oxy.com  https://*.youtube-nocookie.com http://*.corporate-ir.net https://occidentalpetroleum.gcs-web.com 1
frame-ancestors 'self' https://www.fm1today.ch 1
default-src 'self' discord.cryptohopper.com;object-src 'self' discord.cryptohopper.com static.cryptohopper.com chat.cryptohopper.com chat-test.cryptohopper.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cryptohopper.com s0.2mdn.net unpkg.com wchat.freshchat.com cryptohopper.webchat.freshchat.com script.hotjar.com static.hotjar.com cdn.plyr.io cointelegraph.com sockets.cryptohopper.com chat.cryptohopper.com chat-test.cryptohopper.com discord.cryptohopper.com s3.tradingview.com cdn.cryptohopper.com www.cryptohopper.com connect.facebook.net d.adroll.mgr.consensu.org d.adroll.com s.adroll.com api.mixpanel.com cdn4.mxpnl.com ssl.google-analytics.com bat.bing.com s3.amazonaws.com platform.twitter.com cdn.syndication.twimg.com cryptohopper.us17.list-manage.com ajax.cloudflare.com www.gstatic.com js.stripe.com www.google-analytics.com www.googleadservices.com oss.maxcdn.com www.youtube.com www.google.com googleads.g.doubleclick.net static.doubleclick.net; connect-src 'self' ws: cdn.cryptohopper.com www.google-analytics.com static.cryptohopper.com api.cointelegraph.com wchat.freshchat.com vc.hotjar.io ws2.hotjar.com in.hotjar.com saveload.tradingview.com discord.cryptohopper.com cdn.plyr.io sockets.cryptohopper.com www.cryptohopper.com api.mixpanel.com cdn4.mxpnl.com; img-src 'self' script.hotjar.com assets.coingecko.com static.cryptohopper.com stats.g.doubleclick.net www.google.nl dsum-sec.casalemedia.com ups.analytics.yahoo.com pixel.advertising.com pixel.rubiconproject.com sync.outbrain.com simage2.pubmatic.com ads.yahoo.com trc.taboola.com eb2.3lift.com x.bidswitch.net idsync.rlcdn.com cm.g.doubleclick.net us-u.openx.net assetscdn-wchat.freshchat.com cdn.cryptohopper.com www.cryptohopper.com discord.cryptohopper.com chat.cryptohopper.com chat-test.cryptohopper.com s.adroll.com d.adroll.com ib.adnxs.com cdn-images.mailchimp.com api.mixpanel.com cdn4.mxpnl.com s3.tradingview.com bat.bing.com chart.googleapis.com pbs.twimg.com abs.twimg.com syndication.twitter.com q.stripe.com www.google.com googleads.g.doubleclick.net i.ytimg.com cdn.plyr.io www.google-analytics.com www.facebook.com maxcdn.bootstrapcdn.com data:; style-src 'self' 'unsafe-inline' unpkg.com cdnjs.cloudflare.com static.cryptohopper.com assetscdn-wchat.freshchat.com wchat.freshchat.com stats.g.doubleclick.net cdn-images.mailchimp.com discord.cryptohopper.com chat.cryptohopper.com chat-test.cryptohopper.com s3.tradingview.com cdn.plyr.io fonts.googleapis.com maxcdn.bootstrapcdn.com cdn.cryptohopper.com www.cryptohopper.com platform.twitter.com www.youtube.com; font-src 'self' script.hotjar.com fonts.gstatic.com cdn-images.mailchimp.com static.cryptohopper.com discord.cryptohopper.com static.hotjar.com s3.tradingview.com fonts.googleapis.com cdn.cryptohopper.com www.cryptohopper.com fonts.gstatic.com maxcdn.bootstrapcdn.com; frame-src 'self' static.cryptohopper.com vars.hotjar.com cryptohopper.webpush.freshchat.com wchat.freshchat.com js.stripe.com data: coin360.com coins.gourl.io platform.twitter.com chat.cryptohopper.com chat-test.cryptohopper.com www.emjcd.com cj.dotomi.com discord.cryptohopper.com cdn.cryptohopper.com www.cryptohopper.com www.facebook.com api.mixpanel.com cdn4.mxpnl.com www.youtube.com www.tradingview.com discordapp.com s3.tradingview.com s.tradingview.com googleads.g.doubleclick.net www.google.com www.google.nl; media-src 'self' cdn.cryptohopper.com static.cryptohopper.com discord.cryptohopper.com s3.tradingview.com cdn.plyr.io chat.cryptohopper.com chat-test.cryptohopper.com www.cryptohopper.com; child-src 'self' cdn.cryptohopper.com static.cryptohopper.com www.cryptohopper.com chat.cryptohopper.com chat-test.cryptohopper.com www.youtube.com; form-action *; 1
frame-ancestors 'self' *.framebridge.io/ *.framebridge.com/ 1
frame-ancestors https://www.samsungsvc.co.kr https://svars.samsungsvc.co.kr https://portal.samsungsvc.co.kr https://stg-portal.samsungsvc.co.kr 1
default-src 'self'; base-uri 'self'; connect-src 'self' https://*.cludo.com https://www.google-analytics.com wss://*.surreycc.gov.uk; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; form-action 'self' https://*.surreycc.gov.uk; frame-ancestors 'self'; img-src 'self' data: https://customer.cludo.com https://www.google-analytics.com https://*.googleapis.com https://*.siteimprove.com https://465884.global.siteimproveanalytics.io https://*.surreycc.gov.uk; media-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdnjs.cloudflare.com https://customer.cludo.com https://*.google.com https://www.google-analytics.com https://*.googleapis.com https://www.googletagmanager.com https://siteimproveanalytics.com https://*.surreycc.gov.uk https://prodstaticresources.blob.core.windows.net; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://customer.cludo.com https://fonts.googleapis.com https://*.surreycc.gov.uk https://prodstaticresources.blob.core.windows.net; report-uri https://surrey.report-uri.com/r/d/csp/enforce; upgrade-insecure-requests 1
frame-ancestors 'self' *.npngts.cubicnextcloud.com.au *.translink.com.au facebook.com 1
default-src * 'unsafe-inline' 'unsafe-eval' blob: data:; script-src * 'unsafe-inline' 'unsafe-eval' blob: data: blob: https://nitrocdn.com/; style-src * 'unsafe-inline' 'unsafe-eval' blob: data: blob: https://nitrocdn.com/; worker-src * 'unsafe-inline' 'unsafe-eval' blob: data: blob: https://nitrocdn.com/; child-src * 'unsafe-inline' 'unsafe-eval' blob: data: blob:; frame-src * 'unsafe-inline' 'unsafe-eval' blob: data: data:; img-src * 'unsafe-inline' 'unsafe-eval' blob: data: data: https://nitrocdn.com/; font-src * 'unsafe-inline' 'unsafe-eval' blob: data: https://nitrocdn.com/ 1
default-src https: 'unsafe-inline' 'unsafe-eval' data: blob: 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: cdn.jsdelivr.net js.stripe.com www.google.com www.gstatic.com v2.zopim.com static.zdassets.com maps.googleapis.com ; style-src 'self' 'unsafe-inline' http: https: data:; img-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data:; font-src 'self' http: https: data: 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=BR&lang=pt-BR&device=desktop&yrid=97s8ds5fuld5j&partner=; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cnzz.com *.luosimao.com rules.quantcount.com www.google-analytics.com secure.quantserve.com stats.g.doubleclick.net *.bdstatic.com *.baidu.com www.googletagmanager.com dn-cowlevel.qbox.me *.cdncl.net o922x45ft.qnssl.com interface.bilibili.com api.bilibili.com static.hdslb.com cdn.bootcss.com; frame-src 'self' cowlevel.net *.steampowered.com *.luosimao.com bandcamp.com *.missevan.com *.tudou.com itch.io *.acfun.cn  *.youku.com *.163.com *.bilibili.com *.kickstarter.com cowlevel-bridge-loaded cowlevel-wvjb-queue-message; 1
base-uri 'none';child-src 'self' *.doubleclick.net vars.hotjar.com thewarehouse.atlassian.net player.vimeo.com www.youtube.com clean.feedbackhq.net au-live.inside-graph.com cdn.krxd.net www.facebook.com;object-src 'none';script-src 'nonce-QQacJjooMKQ/En64' 'report-sample' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:;block-all-mixed-content;frame-ancestors 'self'; 1
frame-ancestors 'self' *.hivelocity.net; 1
upgrade-insecure-requests;       default-src https: 'unsafe-eval' 'unsafe-inline';       form-action 'self' https://antville.org https://*.antville.org       https://accounts.google.com https://*.facebook.com;       img-src * data: 1
frame-ancestors 'self' https://insivia.app 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' http://www.sprachennetzwerkgraz.at http://cc.ecml.at *.ecml.at *.streaming.at *.vimeo.com *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.facebook.net *.facebook.com *.twitter.com *.twimg.com *.youtube.com; object-src 'self' *.ecml.at; 1
default-src 'self' https://embed-ssl.wistia.com/deliveries/8e4be7011c8173f56f7717e7332cd52a7803b61e.bin embed-ssl.wistia.com fast.wistia.com static.getclicky.com distillery.wistia.com pipedream.wistia.com; script-src 'self' 'unsafe-eval' ssl.google-analytics.com d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net https://www.gartner.com fast.wistia.com static.getclicky.com embedwistia-a.akamaihd.net https://www.google.com https://luoqll1mnc.execute-api.us-west-2.amazonaws.com https://js.driftt.com https://anchor.fm *.googletagmanager.com https://bat.bing.com vwo.com dev.visualwebsiteoptimizer.com heatmap.visualwebsiteoptimizer.com 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com d5phz18u4wuww.cloudfront.net snap.licdn.com seoexperiments.io https://js.driftt.com/deploy https://pi.pardot.com/pd.js https://pi.pardot.com/ https://connect.facebook.net https://www.facebook.com/ https://ct.capterra.com/capterra_tracker.js https://tcp.googlesyndication.com https://x.clearbitjs.com https://static.hotjar.com https://vidassets.terminus.services https://j.6sc.co https://script.hotjar.com https://trk.techtarget.com https://tagmanager.google.com https://www.googleadservices.com https://sjs.bizographics.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://www.linkedin.com https://www.google-analytics.com; style-src 'self' d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net https://www.gartner.com fast.wistia.com app.vwo.com vwo.com *.googleapis.com 'unsafe-inline' https://tagmanager.google.com; frame-src *.youtube.com *.youtube-nocookie.com https://www.gartner.com https://js.driftt.com https://anchor.fm app.vwo.com youtube.com https://bid.g.doubleclick.net https://www.facebook.com/ https://vars.hotjar.com *.googletagmanager.com https://player.vimeo.com; font-src 'self' d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net fast.wistia.com data: stage.netsparker.com *.gstatic.com app.vwo.com; img-src 'self' ssl.google-analytics.com stats.g.doubleclick.net d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net https://reviews.static.gartner.com fast.wistia.com embedwistia-a.akamaihd.net https://embed-fastly.wistia.com https://bat.bing.com *.visualwebsiteoptimizer.com http://e-2072.adzerk.net/e/2072/419463/e.gif data: px.ads.linkedin.com p.adsymptotic.com https://www.facebook.com/ https://www.linkedin.com/px/li_sync https://googleads.g.doubleclick.net *.google.com.tr *.google.com *.googleapis.com *.googletagmanager.com https://www.google.de https://www.google.fr https://www.gravatar.com https://b.6sc.co https://vidassets.terminus.services https://match.adsrvr.org https://apt.techtarget.com https://ssl.gstatic.com https://www.gstatic.com www.google.co.uk https://www.google-analytics.com; object-src 'self'; media-src 'self' blob: https://js.driftqa.com; connect-src 'self' embedwistia-a.akamaihd.net embed-ssl.wistia.com distillery.wistia.com pipedream.wistia.com embed-fastly.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io *.visualwebsiteoptimizer.com https://stats.g.doubleclick.net *.google.com https://www.google-analytics.com https://x.clearbit.com https://c.6sc.co/ https://secure.adnxs.com https://in.hotjar.com https://ws7.hotjar.com wss://ws7.hotjar.com https://vc.hotjar.io wss://ws8.hotjar.com https://ws8.hotjar.com 1
default-src 'self' *.sulzer.com; img-src * data: blob: 'unsafe-inline' 'self' https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://img.youtube.com http://sulzer.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'unsafe-inline' 'self' https://fast.fonts.net https://fonts.googleapis.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com/recaptcha/api.js https://www.gstatic.com https://pi.pardot.com/analytics https://go.sulzer.com/analytics https://pi.pardot.com/pd.js http://cdn.pardot.com/pd.js https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://www.youtube.com https://s.ytimg.com/yts/jsbin/www-widgetapi-vflnjBBxk/www-widgetapi.js https://s.ytimg.com; connect-src 'self' https://www.google-analytics.com https://mybusiness.googleapis.com; child-src 'self' https://www.platform-viewer.v-ex.com https://www.google.com https://sulzer.us6.list-manage.com http://www.sulzerpumpsmexico.com https://app.xtremelocator.com https://ir.tools.investis.com https://www.youtube.com; media-src 'self' https://youtu.be 1
object-src 'none'; form-action 'self'; frame-ancestors 'none' 1
frame-ancestors https://*.norisbank.de 1
default-src *; img-src * 'self' data: https:; font-src * data: blob: 'unsafe-inline'; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: wss: data: 1
img-src * data: blob:* data: blob: 1
frame-ancestors 'self' https://sandbox.cashu.com; 1
default-src 'self'; manifest-src 'self'; font-src 'self' data: f1-eu.readspeaker.com netdna.bootstrapcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' webstatistics.telefonica.de f1-eu.readspeaker.com app.mailjet.com stream.crafted.tm; connect-src 'self' app-eu.readspeaker.com rstts-eu.readspeaker.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' f1-eu.readspeaker.com; base-uri 'self'; form-action 'self'; frame-src 'self' charts3.equitystory.com www.youtube-nocookie.com app.mailjet.com webcast.nc3-cdn.com webcast2.promeas.com 1
script-src 'nonce-180lQr4/YLrW5UKPHdq9sA' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://youtube.googleapis.com https://youtube.com https://s.ytimg.com https://www.youtube.googleapis.com;report-uri /_/MeetingsUi/cspreport 1
default-src * 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://csi.workflowcloud.com https://use.fontawesome.com https://code.jquery.com/ https://connect.facebook.net https://static.hotjar.com https://script.hotjar.com https://bbox.blackbaudhosting.com/ https://csi-856169.workflowcloud.com https://www.googleapis.com https://www.google.com https://cse.google.com https://www.google-analytics.com https://ajax.googleapis.com https://www.googletagmanager.com/ https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/www-widgetapi-vfllf5xrd/www-widgetapi.js https://s.ytimg.com/yts/jsbin/www-widgetapi-vflxda_co/www-widgetapi.js https://maxcdn.bootstrapcdn.com https://secure.adnxs.com/;  style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://stackpath.bootstrapcdn.com https://fonts.googleapis.com/ https://bbox.blackbaudhosting.com/ https://maxcdn.bootstrapcdn.com https://www.google.com;  img-src * data: 'self' www.gstatic.com;  font-src * data: 'self' https://csi.edu https://bootstrapcdn.com https://nintex.io;  form-action 'self' https://*.csi.edu;  upgrade-insecure-requests 1
default-src 'self'; object-src 'self'; child-src 'self' ujet.co *.ujet.co; script-src 'self' 'unsafe-inline' 'unsafe-eval'  *.fuelcdn.com *.exacttarget.com *.adobe.com *.tvsquared.com ujet.co *.ujet.co google-analytics.com *.google-analytics.com trk.clinch.co *.trk.clinch.co cdn.clinch.co *.clinch.co kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com greendot.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net d.impactradius-event.com *.impactradius-event.com *.salesforceliveagent.com *.hypemarks.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.adobecqms.net *.googleadservices.com *.greendot.com greendot.com *.googletagmanager.com googletagmanager.com *.facebook.com facebook.com *.bing.com s.ytimg.com connect.facebook.net assets.adobedtm.com www.youtube.com storify.com player.vimeo.com *.livefyre.com *.everesttech.net *.demdex.net *.omtrdc.net; connect-src 'self' kampyle.com *.kampyle.com mobileapi.locatorsearch.com greendot.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net d.impactradius-event.com vimeo.com *.vimeo.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.adobecqms.net *.googleadservices.com s.ytimg.com connect.facebook.net storify.com *.fyre.co *.greendot.com greendot.com *.googletagmanager.com googletagmanager.com *.facebook.com facebook.com *.bing.com s.ytimg.com connect.facebook.net assets.adobedtm.com www.youtube.com storify.com player.vimeo.com *.livefyre.com *.everesttech.net *.demdex.net *.omtrdc.net; img-src 'self' *.tvsquared.com google-analytics.com *.google-analytics.com www.google.co.in *.google.co.in kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com greendot.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net d.impactradius-event.com *.impactradius-event.com *.force.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.adobecqms.net *.googleadservices.com *.greendot.com greendot.com *.googletagmanager.com googletagmanager.com *.facebook.com facebook.com *.bing.com s.ytimg.com connect.facebook.net assets.adobedtm.com www.youtube.com storify.com cdn.livefyre.com bootstrap.livefyre.com player.vimeo.com *.livefyre.com *.everesttech.net *.demdex.net *.omtrdc.net data: blob:; style-src 'self' 'unsafe-inline'  *.exacttarget.com kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com greendot.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net d.impactradius-event.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.greendot.com *.adobecqms.net *.googleadservices.com cdn.livefyre.com maxcdn.bootstrapcdn.com *.bootstrapcdn.com; font-src 'self' data: kampyle.com *.kampyle.com use.typekit.net *.use.typekit.net *.googleapis.com *.gstatic.com greendot.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net d.impactradius-event.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.greendot.com *.adobecqms.net *.livefyre.com; frame-src 'self' *.pardot.com ujet.co  *.go2bank.com *.ujet.co kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com *.facebook.com facebook.com greendot.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net d.impactradius-event.com *.hypemarks.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.greendot.com *.adobecqms.net www.youtube.com player.vimeo.com *.demdex.net trk.clinch.co *.trk.clinch.co cdn.clinch.co *.clinch.co cdn-gdc.com *.cdn-gdc.com; frame-ancestors 'self' https://*.greendot.com https://*.go2bank.com; 1
script-src 'nonce-VG1k7mNGq0+r1E4i5aSBsw' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://youtube.googleapis.com https://youtube.com https://s.ytimg.com https://www.youtube.googleapis.com;report-uri /_/MeetingsUi/cspreport 1
report-uri /api/submit-csp-violation-report; default-src 'self' blob: data: https://i.mgtbk.nl https://cdn.jsdelivr.net https://www.google-analytics.com https://o2.mouseflow.com https://cdn.mouseflow.com https://jouw.postnl.nl https://*.gstatic.com ; script-src 'self' blob: https://i.mgtbk.nl https://cdn.jsdelivr.net  'nonce-1d6bd1db5e025ff6' https://polyfill.io https://unpkg.com https://www.google-analytics.com https://www.googletagmanager.com https://mouseflow.com https://cdn.mouseflow.com ; style-src 'self' https://i.mgtbk.nl https://cdn.jsdelivr.net https://fonts.googleapis.com data: 'unsafe-inline'; img-src 'self' blob: https://i.mgtbk.nl https://cdn.jsdelivr.net data: https://www.google-analytics.com https://www.google.com https://www.google.nl https://www.google.be https://*.gstatic.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://o2.mouseflow.com https://i.ytimg.com https://i.vimeocdn.com ; connect-src 'self' blob: https://i.mgtbk.nl https://cdn.jsdelivr.net data: https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://o2.mouseflow.com; frame-src https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://www.managementvideo.nl https://*.soundcloud.com https://static.managementboek.nl https://i.mgtbk.nl; frame-ancestors 'none'; 1
frame-ancestors https://www.missoni.com/ https://www.missoni.com/ ; 1
frame-ancestors 'self' https://talkdesk.pathfactory.com http://talkdesk.pathfactory.com https://talkdesk.lookbookhq.com http://talkdesk.lookbookhq.com https://discover.talkdesk.com http://localhost https://talkdesk-com.meza.talkdeskqa.com https://talkdesk-com.meza.talkdeskstg.com 1
upgrade-insecure-requests; frame-ancestors https://*.therapynotes.com https://*.therapyportal.com https://support.therapynotes.com; form-action https://*.therapynotes.com https://*.therapyportal.com; 1
frame-ancestors 'self' *.salesforce.com *.force.com 1
base-uri 'self'; object-src 'none'; frame-ancestors 'self' 1
default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval'; 1
frame-ancestors 'none'; default-src 'self' https://*.aol.com https://*.yahoo.com https://*.yimg.com; img-src * data:; script-src 'self' 'unsafe-inline' 'nonce-zGvPfnTh4YA2ZZkECT0Gmg==' 'unsafe-eval' https://*.yahoo.com https://*.yimg.com https://*.aol.com https://*.aolcdn.com *.oath.com *.google.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net *.googlesyndication.com https://sb.scorecardresearch.com bat.bing.com *.demdex.net; style-src 'self' 'unsafe-inline' https://*.yimg.com; object-src *; connect-src *; font-src * data:; frame-src 'self' https://*.youtube.com https://s.yimg.com https://*.yahoo.com *.g.doubleclick.net *.googlesyndication.com; 1
upgrade-insecure-requests ; default-src * 'unsafe-inline' 'unsafe-eval' data: 1
font-src 'self' https://*.onf.ca https://*.nfb.ca fonts.gstatic.com cdnapi.kaltura.com cdnapisec.kaltura.com https://dkyhanv6paotz.cloudfront.net data:; frame-src 'self' https://*.google.com https://www.gstatic.com https://www.facebook.com https://insight.adsrvr.org https://esqa.moneris.com https://www3.moneris.com https://player.vimeo.com https://www.youtube.com https://connect.facebook.net https://*.nfb.ca https://*.onf.ca https://player.twitch.tv https://pixel.mathtag.com/; default-src 'none'; manifest-src 'self' https://*.nfb.ca https://*.onf.ca https://dkyhanv6paotz.cloudfront.net; frame-ancestors 'self' https://*.nfb.ca https://*.onf.ca; connect-src 'self' https://*.nfb.ca https://*.onf.ca https://*.kaltura.com https://www.facebook.com https://s3.amazonaws.com https://dkyhanv6paotz.cloudfront.net *.google-analytics.com https://stats.g.doubleclick.net https://c212.net https://thumbor-interactive-cms.s3.ca-central-1.amazonaws.com; img-src 'self' sb.scorecardresearch.com b.scorecardresearch.com *.google-analytics.com cfvod.kaltura.com www.facebook.com http://*.onf.ca http://*.nfb.ca https://*.onf.ca https://*.nfb.ca https://*.kaltura.com stats.g.doubleclick.net *.gstatic.com data: https://interactive-cms.s3.amazonaws.com https://interactive-cms-dev.s3.amazonaws.com http://*.gravatar.com https://*.gravatar.com https://dkyhanv6paotz.cloudfront.net https://www.google.com/ads https://www.google.com/ads/ga-audiences https://www.google.ca/ads https://www.google.ca/ads/ga-audiences https://pixel.mathtag.com/misc/img; object-src 'self' https://*.nfb.ca https://*.onf.ca https://*.kaltura.com; worker-src 'self' *.onf.ca *.nfb.ca https://*.kaltura.com blob:; script-src 'self' https://*.nfb.ca https://*.onf.ca https://cdnjs.cloudflare.com https://player.vimeo.com https://maps.googleapis.com https://graph.facebook.com 'unsafe-inline' 'unsafe-eval' https://dkyhanv6paotz.cloudfront.net www.googletagmanager.com tagmanager.google.com connect.facebook.net *.google-analytics.com sb.scorecardresearch.com widget.surveymonkey.com apis.google.com cdnapisec.kaltura.com cdnapi.kaltura.com widget.surveymonkey.com www.gstatic.com js.adsrvr.org survey.g.doubleclick.net https://www.google.com https://adservice.google.ca https://survey.g.doubleclick.net ajax.googleapis.com https://cdn.c212.net/ https://c212.net/ https://pixel.mathtag.com/sync/js; style-src 'self' https://*.nfb.ca https://*.onf.ca https://cdnjs.cloudflare.com 'unsafe-inline' https://dkyhanv6paotz.cloudfront.net hello.myfonts.net fonts.googleapis.com tagmanager.google.com https://www.google.com; media-src 'self' https://*.onf.ca https://*.nfb.ca https://*.kaltura.com https://dkyhanv6paotz.cloudfront.net blob: 1
frame-ancestors 'self' *.dimelochat.com *.engagement.dimelo.com 1
default-src 'self' *.tabrizu.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com ; frame-ancestors 'self' https://trustseal.enamad.ir 1
frame-ancestors http://*.t-mobile.nl https://*.t-mobile.nl http://*.tele2.nl https://*.tele2.nl 1
frame-ancestors 'self' *.amadeus.com *.amadeus.net rentacar.aegeanair.com rentacar.olympicair.com e-ticket.aegeanair.com e-ticket.olympicair.com *.mscgn.de mobile.aegeanair.com kontastousneous.gr 1
default-src 'self'; script-src 'self' dnstest2.ficora.fi dnstest.traficom.fi keha-matomo-sdg-qa-qa.azurewebsites.net analytiikka.ahtp.fi occhat.elisa.fi stat.viestintavirasto.fi 10.250.193.20 'nonce-aca2cfde-f170-41dd-8136-097121c48197'; img-src 'self' data: *.viestintavirasto.fi *.traficom.fi *.ficora.fi trafi.maps.arcgis.com trafi2.stat.fi keha-matomo-sdg-qa-qa.azurewebsites.net analytiikka.ahtp.fi www.youtube.com youtube-nocookie.com *.youtube-nocookie.com registry.qadomain.fi registry.domain.fi www.arcgis.com autokalkulaattori.fi fiho.fi www.epressi.com dreambroker.com www.dreambroker.com occhat.elisa.fi; style-src 'self' dnstest2.ficora.fi dnstest.traficom.fi occhat.elisa.fi 'nonce-aca2cfde-f170-41dd-8136-097121c48197'; font-src 'self' occhat.elisa.fi; object-src 'self' data:; base-uri 'self'; frame-src 'self' *.viestintavirasto.fi *.traficom.fi *.ficora.fi trafi.maps.arcgis.com trafi2.stat.fi keha-matomo-sdg-qa-qa.azurewebsites.net analytiikka.ahtp.fi www.youtube.com youtube-nocookie.com *.youtube-nocookie.com registry.qadomain.fi registry.domain.fi www.arcgis.com autokalkulaattori.fi fiho.fi www.epressi.com dreambroker.com www.dreambroker.com occhat.elisa.fi; connect-src 'self' wss://occhat.elisa.fi https://occhat.elisa.fi; form-action 'self' 1
default-src 'self' *.bcom3test.com *.blob.core.windows.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.cookielaw.org s.ytimg.com geolocation.onetrust.com www.youtube.com www.googletagmanager.com www.google-analytics.com assets.adobedtm.com static.doubleclick.net www.google.com storage.googleapis.com tagmanager.google.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' hello.myfonts.net tagmanager.google.com fonts.googleapis.com; frame-src 'self' www.youtube.com lrspecialty.demdex.net open.spotify.com player.vimeo.com my.matterport.com captivateprimeeu.adobe.com cpcontents.adobe.com; img-src 'self' *.marcel.ai i.ytimg.com *.blob.core.windows.net *.112.2o7.net cm.everesttech.net data: dpm.demdex.net png.icons8.com *.bcom3test.com media-exp1.licdn.com ssl.gstatic.com www.gstatic.com lrssllcmarcel.112.2o7.net; connect-src 'self' cdn.cookielaw.org *.bcom3test.com static.doubleclick.net www.google.com dpm.demdex.net lrspecialty.tt.omtrdc.net www.google-analytics.com dc.services.visualstudio.com *.112.2o7.net *.onetrust.com captivateprimeeu.adobe.com; font-src 'self' data: 1
frame-ancestors 'self' *.betssongroupaffiliates.com 1
default-src 'self';                             script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/                                                 https://cdn.jsdelivr.net/jquery.jssocials/1.4.0/jssocials.min.js                                                 https://cookie-script.com/s/aa44aecf65c7b9c161785136df03df5a.js                                                 https://script.crazyegg.com/                                                 https://maps.googleapis.com/maps/                                                 https://maps.googleapis.com/maps-api-v3/                                                 https://developers.google.com/maps/                                                 https://www.youtube.com/                                                 https://s.ytimg.com/yts/jsbin/                                                 https://getaddress.io/js/                                                 https://platform.twitter.com/                                                 https://cdn.syndication.twimg.com/                                                 https://cloud.tinymce.com/stable/                                                 https://cdn.tiny.cloud/                                                 https://www.googletagmanager.com/                                                 https://www.google-analytics.com/analytics.js                                                 https://analytics-eu.clickdimensions.com/                                                 https://tableau.ahdb.org.uk/               'unsafe-eval' unitegallery.js               ;               style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com/                                                https://fast.fonts.net/                                                https://fonts.googleapis.com/                                                https://use.fontawesome.com/releases/                                                https://platform.twitter.com/css/                                                https://ton.twimg.com/tfw/css/                                                https://www.tinymce.com/css/                                                https://cdn.tiny.cloud/               ;               img-src 'self' data: *                             http://mediauat.ahdbdigital.org.uk/                             https://media.ahdb.org.uk/                             https://projectblue.blob.core.windows.net/media/                             https://maps.gstatic.com/mapfiles/                             https://maps.googleapis.com/maps/               ;               media-src 'self'                          https://projectblue.blob.core.windows.net/               ;               font-src 'self' https://maxcdn.bootstrapcdn.com/                               https://fonts.gstatic.com/                               https://use.fontawesome.com/                               https://cdn.tiny.cloud/               ;               frame-src 'self' https://www.youtube.com/                                https://embeds.audioboom.com/                                https://forms.ahdbdigital.org.uk/                                https://ahdb.org.uk/                                https://*.ahdbdigital.org.uk/                                https://app.powerbi.com/                                https://platform.twitter.com/                                https://syndication.twitter.com/                                https://ahdb-mpc-dev.azurewebsites.net/                                https://media.ahdb.org.uk/                                https://tableau.ahdb.org.uk/                                https://projectblue.blob.core.windows.net/                                https://www.facebook.com/                                https://player.vimeo.com/               ;               connect-src 'self' https://tracking.crazyegg.com/                                  https://sample-api-v2.crazyegg.com/                                  https://maps.googleapis.com/maps/                                  https://script.crazyegg.com/pages/data-scripts/                                                                  https://www.google-analytics.com/                                  https://stats.g.doubleclick.net/                                  https://ahdbsurvey-dev.azurewebsites.net                                  https://ahdbsurvey.azurewebsites.net 1
frame-ancestors 'self' https://mgr.taitra.org.tw https://www.taitra.org.tw/ https://ws.taitra.org.tw 1
default-src 'self' *.picmir.nl; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.picmir.nl *.st02.net *.yandex.net *.yandex.ru http://*.yandex.ru yastatic.net yandex.ru www.google.com www.gstatic.com blob:; img-src 'self' data: *.picmir.nl counter.yadro.ru *.st02.net *.yandex.net *.yandex.ru http://*.yandex.ru yastatic.net yastat.net www.tns-counter.ru; style-src 'self' 'unsafe-inline' yastatic.net; font-src 'self' data:; frame-src 'self' tools.runetki.com www.google.com; connect-src 'self' *.picmir.nl *.yandex.ru http://*.yandex.ru; object-src 'self'; 1
frame-ancestors 'self'; default-src 'self'  'unsafe-eval' 'unsafe-inline' blob: data: chatbanking.dbs.com maps.gstatic.com *.googleapis.com *.ggpht.com js.adsrvr.org google.com jscdn.appier.net flex.msn.com dis.as.criteo.com sslwidget.criteo.com criteo.com criteo.net quantserve.com  www.google-analytics.com static.criteo.net insight.adsrvr.org www.youtube-nocookie.com dis.as.criteo.com sslwidget.criteo.com static.criteo.net criteo.com criteo.net tag.yieldoptimizer.com beacon.sojern.com ad.doubleclick.net adara.com bingads.microsoft.com www.chinesean.com ad.doubleclick.net www.tribalfusion.com www.sojern.com snap.licdn.com dc.ads.linkedin.com directline.com wss://directline.botframework.com directline.botframework.com wss://qmslivechat.dbs.com  pixel.tapad.com dbs.demdex.net sc4.omniture.com authorize.omniture.com sitecatalyst.omniture.com chatbanking.dbs.com wss://chatbanking.dbs.com code.jquery.com  maxcdn.bootstrapcdn.com  portal.interpixel.hk preview.interpixel.hk http://loadm.exelator.com tags.rd.linksynergy.com http://match.adsrvr.org fcmatch.youtube.com su.addthis.com ads.scorecardresearch.com ak1s.abmr.net http://pixel.rubiconproject.com dpm.demdex.net loadm.exelator.com  adservice.google.com fcmatch.google.com s.thebrighttag.com match.sharethrough.com beacon.krxd.net pixel.rubiconproject.com sync.mathtag.com tag.adaraanalytics.com tags.bluekai.com ipac.ctnsnet.com *.doubleclick.net http://insight.adsrvr.org anylist.c.appier.net *.appier.net adm.shinobi.jp sync.ad-stir.com adgen.socdm.com ssl.socdm.com ssp-sync.i-mobile.co.jp ads.yahoo.com www.facebook.com d17m68fovwmgxj.cloudfront.net  cm.g.doubleclick.net ads.stickyadstv.com http://tags.crwdcntrl.net  tag.yieldoptimizer.com u3s.mathtag.com odr.mookie1.com dbs.112.2o7.net *.fls.doubleclick.net www.googletagmanager.com tagmanager.google.com assets.adobedtm.com www.google-analytics.com m.addthisedge.com m.addthis.com s7.addthis.com graph.facebook.com www.linkedin.com api-public.addthis.com dbs.sc.omtrdc.net ds-aksb-a.akamaihd.net sjs.bizographics.com px.ads.linkedin.com s.ytimg.com fonts.gstatic.com www.gstatic.com tags.crwdcntrl.net secure-ds.serving-sys.com bs.serving-sys.com www.media-server.com www.dbs.com.sg www.googleadservices.com googleads.g.doubleclick.net pixel.mathtag.com wt.adctrl.com cdn-akamai.mookie1.com sp.analytics.yahoo.com tags.tiqcdn.com www.google.com s.tribalfusion.com maps.googleapis.com insight.adsrvr.org www.dbs.com.hk bcp.crwdcntrl.net www.dbs.com.hk mathid.mathtag.com maps.gstatic.com fonts.googleapis.com s.go-mpulse.net c.go-mpulse.net www.google.com.sg qmslivechat-uat.dbs.com a.tribalfusion.com i.liadm.com sync.adaptv.advertising.com bid.g.doubleclick.net bat.bing.com secure.adnxs.com directline.botframework.com edge.media-server.com simage2.pubmatic.com www.visa.com offerswidget.visa.com p.adsymptotic.com dsum-sec.casalemedia.com match.adsrvr.org go.flx1.com ib.adnxs.com pixel.advertising.com qmslivechat.dbs.com stats.g.doubleclick.net x.bidswitch.net sqmslc.uat.dbs.com analytics.twitter.com s.yimg.com cdnjs.cloudflare.com www.youtube.com connect.facebook.net image6.pubmatic.com *.akstat.io internet-banking.hk.dbs.com stockquote.dbs.com z.moatads.com v1.addthisedge.com z.moatads.com v1.addthisedge.com z.moatads.com v1.addthisedge.com data:; 1
default-src https://*.scripbox.com/ http://*.scripbox.org/ 'self'; base-uri 'self'; block-all-mixed-content; child-src https://*.scripbox.com/ http://*.scripbox.org/ https://disqus.com https://*.facebook.com https://*.facebook.net https://platform.twitter.com https://www.googletagmanager.com https://player.vimeo.com https://dis.as.criteo.com https://syndication.twitter.com/ https://www.google.com/maps/embed https://app.recruiterbox.com https://app.pageproofer.com https://*.webengagepush.com/ https://*.webengage.co/ https://*.webengage.com/ https://app.vwo.com https://youtube.com https://*.youtube.com https://scripbox.verloop.io https://*.wordlift.io 'self'; connect-src https://scripbox.com/ https://*.scripbox.com/ http://*.scripbox.org/ https://api.amplitude.com/ https://api.mixpanel.com https://sumo.com https://api2.branch.io https://*.webengage.co/ https://*.webengage.com/ https://tracker.scripbox.io https://*.google.com https://cdn.ampproject.org https://performance.typekit.net https://ampcid.google.co.in https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.co.in https://widgets.ekomi.com https://s3.eu-central-1.amazonaws.com/smart-widget/ https://d1lpu0illwydyy.cloudfront.net/ https://utilities.collatebox.com/webServerUtilities.ashx https://utilities.collatebox.com/referralredirect.ashx https://web.collatebox.com/bots/prod/Tira_dev/fbace.ashx https://web.collatebox.com/assets/scripbox/ https://*.pusher.com/pusher/app/308fe5e218c8eaf086a5/ https://api.wordlift.io https://*.tiny.cloud wss://ws-ap2.pusher.com/app/ https://anugu-xeaipw6sqtfv.scripbox.com/api/nudge https://fcm.googleapis.com/fcm/connect/ scripbox.com 'self'; font-src https://use.typekit.net https://js.intercomcdn.com/ https://fonts.gstatic.com https://*.scripbox.com/ https://*.webengage.co/ https://*.webengage.com/ http://*.scripbox.org/ https://maxcdn.bootstrapcdn.com/ https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/ https://cdnjs.cloudflare.com/ajax/libs/summernote/0.8.12/font/ https://netdna.bootstrapcdn.com/font-awesome/4.3.0/fonts/ data: 'self'; form-action 'self' *.scripbox.com http://*.scripbox.org *.facebook.com *.facebook.net *.twitter.com accounts.google.com https://*.webengage.co https://*.webengage.com https://app.recruiterbox.com; img-src https://*.scripbox.com/ http://*.scripbox.org/ https://dusy1lvven6c5.cloudfront.net/ https://dhkxjydftn2u5.cloudfront.net/ https://p.typekit.net/p.gif https://*.scripbox.io https://www.google-analytics.com/ https://stats.g.doubleclick.net https://trc.taboola.com https://www.facebook.com/tr/ https://www.google.com/ https://www.google.co.in https://t.co https://sumome-140a.kxcdn.com https://sumo.com https://*.disqus.com https://*.disquscdn.com https://*.googleusercontent.com https://maps.googleapis.com https://q.quora.com https://*.gstatic.com https://*.facebook.com https://*.fbcdn.net https://s3.eu-central-1.amazonaws.com/smart-widget/ https://*.linkedin.com https://static.licdn.com https://i.vimeocdn.com https://w.recruiterbox.com https://dev.visualwebsiteoptimizer.com https://d1lpu0illwydyy.cloudfront.net https://sw-assets.ekomiapps.de https://sumo.b-cdn.net https://www.googletagmanager.com https://ad.doubleclick.net https://cm.g.doubleclick.net https://adservice.google.com https://adservice.google.co.in https://abs.twimg.com https://ads.instabid.tech https://www.googleadservices.com/pagead/conversion/801472607/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/801472607/ https://money.dailyhunt.in/tracker https://chat.acebot.ai/v2/ https://cdn.branch.io https://syndication.twitter.com/ https://web.collatebox.com/assets/scripbox/ https://*.webengage.co/ https://*.webengage.com/ https://*.tinymce.com https://*.s3-ap-southeast-1.amazonaws.com data: https://secure.adnxs.com https://imp2.ads.linkedin.com/ android-webview-video-poster: 'self'; media-src https://*.scripbox.com/ http://*.scripbox.org/ https://js.intercomcdn.com/ 'self'; object-src 'self'; plugin-types application/x-shockwave-flash; script-src https://use.typekit.net https://cdn.polyfill.io https://browser.sentry-cdn.com https://cdnjs.cloudflare.com/ajax/libs/chartjs-plugin-annotation/0.5.7/chartjs-plugin-annotation.min.js https://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.7.3/Chart.bundle.min.js https://9a15b67347e84322860041c7b2255865@errors.scripbox.com/24 https://www.googletagmanager.com https://*.scripbox.com/ http://*.scripbox.org/ https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://tracker.scripbox.io/piwik.js https://web.mxradon.com/t/Tracker.js https://cdn.mxpnl.com https://cdn.taboola.com/libtrc/scripboxindia-sc/tfa.js https://static.ads-twitter.com/uwt.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://web.mxradon.com https://connect.facebook.net https://*.intercom.io https://d24n15hnbwhuhn.cloudfront.net https://analytics.twitter.com https://sumome-140a.kxcdn.com https://load.sumome.com/ https://cdn.branch.io https://app.link https://disqus.com https://*.disqus.com https://*.disquscdn.com https://secure.adnxs.com https://*.linkedin.com https://*.bizographics.com https://linkedin.com https://bizographics.com https://a.quora.com https://cdn.ampproject.org https://ajax.googleapis.com/ajax/libs/jquery/ https://maps.googleapis.com https://widgets.ekomi.com https://s3.eu-central-1.amazonaws.com/smart-widget/ https://cdnjs.cloudflare.com/ajax/libs/tether/ https://dev.visualwebsiteoptimizer.com https://tagmanager.google.com https://s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js https://sumo.b-cdn.net https://www.gstatic.com/firebasejs/4.8.1/firebase-app.js https://www.gstatic.com/firebasejs/4.8.1/firebase-messaging.js https://stackpath.bootstrapcdn.com/bootstrap/4.1.0/ https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/ https://platform.twitter.com/widgets.js https://sw-assets.ekomiapps.de/static_resources/jquery.min.js https://chat.acebot.ai/v2/ https://code.jquery.com/jquery-3.3.1.min.js https://code.jquery.com/jquery-3.4.1.min.js https://cloud.wordlift.io/app/bootstrap.js https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js https://stackpath.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/js/bootstrap.min.js https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js https://cdnjs.cloudflare.com/ajax/libs/underscore.string/3.2.2/underscore.string.min.js https://cdnjs.cloudflare.com/ajax/libs/codemirror/3.20.0/codemirror.js https://cdnjs.cloudflare.com/ajax/libs/codemirror/3.20.0/mode/xml/xml.js https://cdnjs.cloudflare.com/ajax/libs/codemirror/2.36.0/formatting.js https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.2/jquery.min.js https://cdnjs.cloudflare.com/ajax/libs/jquery-jcrop/0.9.12/js/jquery.Jcrop.min.js https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.1/js/select2.min.js https://player.vimeo.com/api/player.js https://cdnjs.cloudflare.com/ajax/libs/noUiSlider/14.0.2/nouislider.min.js https://widgets.in.webengage.com/js/service-worker.js https://*.webengage.co https://*.webengage.com 'self' 'unsafe-eval' https://code.highcharts.com/stock/highstock.js https://code.highcharts.com/stock/modules/exporting.js https://code.highcharts.com/stock/modules/export-data.js https://code.highcharts.com/stock/data.js https://*.tiny.cloud 'nonce-4EaBwySRYtdUnWzOhmhSAwB8YHiz5ipcjhVlvroQGAg=' 'unsafe-inline'; style-src https://maxcdn.bootstrapcdn.com https://*.scripbox.com/ http://*.scripbox.org/ https://sumome-140a.kxcdn.com https://fonts.googleapis.com https://*.disqus.com https://*.disquscdn.com https://widgets.ekomi.com https://s3.eu-central-1.amazonaws.com/smart-widget/ https://w.recruiterbox.com https://tagmanager.google.com https://cdn-images.mailchimp.com/embedcode/classic-10_7.css https://sumo.b-cdn.net https://sw-assets.ekomiapps.de https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css https://cdnjs.cloudflare.com/ajax/libs/jquery-jcrop/0.9.12/css/jquery.Jcrop.min.css https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.1/css/select2.min.css https://cdnjs.cloudflare.com/ajax/libs/codemirror/3.20.0/theme/monokai.css https://cdnjs.cloudflare.com/ajax/libs/codemirror/3.20.0/codemirror.css https://cdnjs.cloudflare.com/ajax/libs/summernote/0.8.12/summernote.css https://netdna.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.css https://use.typekit.net/rxd6tca.css https://p.typekit.net/ https://stackpath.bootstrapcdn.com/bootstrap/4.1.0/ https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/ https://platform.twitter.com/css/moment https://chat.acebot.ai/v2/ https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css https://stackpath.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css https://cdnjs.cloudflare.com/ajax/libs/noUiSlider/14.0.2/nouislider.min.css https://*.webengage.co https://*.webengage.com https://*.tiny.cloud 'self' 'unsafe-inline'; upgrade-insecure-requests; report-uri 1
frame-ancestors 'self' https://*.pall.com https://*.pall.cn https://*.pall.co.uk https://*.pall.co.in https://*.pall.jp https://*.pall.co.kr https://*.ariba.com; 1
frame-ancestors https://www.icicipruamc.com microapps.google.com; 1
default-src 'self' 'unsafe-inline' use.typekit.net *.rotorootercdn.com *.youtube.com *.googleapis.com *.gstatic.com *.google-analytics.com *.tt.omtrdc.net *.g.doubleclick.net *.facebook.com *.pinterest.com *.google.com *.google.ca *.bing.com data: *.cloudfront.net *.xg4ken.com *.dialogtech.com lptag.liveperson.net *.liveperson.net *.lpsnmedia.net *.ssl.cf1.rackcdn.com *.googletagmanager.com *.googleadservices.com *.pinimg.com *.facebook.net *.callrail.com *.mdhv.io *.advertiserreports.com lh3.googleusercontent.com tagmanager.google.com *.googleusercontent.com *.windows.net;style-src 'self' 'unsafe-inline' *.rotorootercdn.com *.googleapis.com *.google.com;connect-src 'self' *.rotorooter.com localhost:3000 *.rotorootercdn.com *.tt.omtrdc.net *.bing.com *.pinterest.com *.googleapis.com *.google-analytics.com *.facebook.com *.g.doubleclick.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.rotorootercdn.com stats.g.doubleclick.net *.google.com *.google-analytics.com *.tt.omtrdc.net *.googleapis.com *.bing.com *.googleadservices.com *.pinimg.com *.facebook.net *.g.doubleclick.net *.cloudfront.net *.xg4ken.com *.dialogtech.com lptag.liveperson.net *.liveperson.net *.lpsnmedia.net; 1
frame-ancestors 'self' https://*.cosmote.gr https://*.ote.gr https://*.11888.gr https://*.giaola.gr https://joiningdots.co https://*.helppost.gr https://*.irafina.gr https://*.notia.gr 1
default-src 'self'; img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; font-src * data:; frame-src *; media-src *; connect-src *; block-all-mixed-content 1
frame-ancestors 'self' https://app.storyblok.com 1
default-src 'self' 'unsafe-inline' https://api-msworld.mindshareapps.com; connect-src https://www.google-analytics.com https://api-msworld.mindshareapps.com https://vimeo.com; font-src 'self' use.typekit.net; img-src 'self' content.mindshareapps.com p.typekit.net https://www.google-analytics.com data: https://stats.g.doubleclick.net https://api-msworld.mindshareapps.com; media-src content.mindshareapps.com; script-src 'self' 'unsafe-inline' use.typekit.net https://www.google-analytics.com https://ssl.google-analytics.com; style-src 'self' 'unsafe-inline' use.typekit.net; frame-src 'self' https://player.vimeo.com https://app.powerbi.com https://w.soundcloud.com https://embed.actionbutton.co 1
frame-ancestors 'self' tomshardware.fr www.tomshardware.fr tomsguide.fr www.tomsguide.fr cms.galaxiemedia.fr amp.tomsguide.fr amp.tomshardware.fr cdn.tomsguide.fr cdn.tomshardware.fr presence-pc.fr www.presence-pc.fr presence-pc.com www.presence-pc.com; 1
base-uri 'self';script-src 'nonce-95SLkfjN0CEQYQSMWgkdTbWMzQ1RRrQf' *.cu.edu.tr *.cukurova.edu.tr cu.edu.tr cukurova.edu.tr cu.test *.cu.test dabkaf.com www.dabkaf.com 'unsafe-inline' 'unsafe-eval' search.ebscohost.com search.proquest.com mozilla.github.io *.bootstrapcdn.com fonts.googleapis.com *.google-analytics.com *.googletagmanager.com *.google.com *.googleapis.com *.ebsco.com platform.twitter.com *.twimg.com *.amazonaws.com;style-src *.cu.edu.tr *.cukurova.edu.tr cu.edu.tr cukurova.edu.tr cu.test *.cu.test dabkaf.com www.dabkaf.com 'unsafe-inline' *.bootstrapcdn.com fonts.googleapis.com *.google.com *.ebsco.com platform.twitter.com;frame-src *.cu.edu.tr *.cukurova.edu.tr cu.edu.tr cukurova.edu.tr cu.test *.cu.test dabkaf.com www.dabkaf.com search.proquest.com 'unsafe-inline' http://193.140.54.201 *.google.com *.ebsco.com platform.twitter.com syndication.twitter.com *.youtube.com *.facebook.com;form-action *.cu.edu.tr *.cukurova.edu.tr cu.edu.tr cukurova.edu.tr cu.test *.cu.test dabkaf.com www.dabkaf.com https://search.ebscohost.com/login.aspx http://eds.b.ebscohost.com search.proquest.com https://search.proquest.com http://eds.a.ebscohost.com http://eds.b.ebscohost.com/ http://eds.a.ebscohost.com/ platform.twitter.com syndication.twitter.com;img-src * 'unsafe-inline' data:;object-src *.cu.edu.tr *.cukurova.edu.tr cu.edu.tr cukurova.edu.tr cu.test *.cu.test dabkaf.com www.dabkaf.com http://193.140.54.201;font-src 'self' *.bootstrapcdn.com data: fonts.gstatic.com 1
default-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.google-analytics.com https://checkout.stripe.com https://www.google.com https://www.gstatic.com/ https://cdnjs.cloudflare.com; img-src 'self' data: https://appetizeio-static.s3.amazonaws.com https://s3.amazonaws.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.google-analytics.com https://checkout.stripe.com https://www.google.com https://www.gstatic.com/; connect-src * 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.yoshki.com https://sidley.rev.vbrick.com  https://sidley.readz.com https://www.buzzsprout.com https://www.google-analytics.com/ https://www.googletagmanager.com/ http://performance.typekit.net/ https://performance.typekit.net/ http://use.typekit.net/ https://use.typekit.net/ http://fast.fonts.net/ https://fast.fonts.net/ http://p.typekit.net/ https://p.typekit.net/ http://www.youtube.com https://www.youtube.com http://www.vimeo.com https://www.vimeo.com http://siteimproveanalytics.com https://siteimproveanalytics.com http://player.vimeo.com/ https://player.vimeo.com/ https://vimeo.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sidley.readz.com https://www.buzzsprout.com https://www.google-analytics.com/ https://www.googletagmanager.com/ http://use.typekit.net/ https://use.typekit.net/ http://siteimproveanalytics.com https://siteimproveanalytics.com http://fast.fonts.net https://fast.fonts.net https://cdnjs.cloudflare.com http://cdnjs.cloudflare.com https://player.vimeo.com/; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.buzzsprout.com http://use.typekit.net/ https://use.typekit.net/ http://fast.fonts.net/ https://fast.fonts.net/ https://p.typekit.net http://p.typekit.net; media-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.buzzsprout.com http://www.youtube.com https://www.youtube.com http://www.vimeo.com https://www.vimeo.com http://player.vimeo.com https://player.vimeo.com; img-src * 'self' 'unsafe-inline' 'unsafe-eval' data: filesystem:; font-src 'self' http://fast.fonts.net/ https://fast.fonts.net/ http://use.typekit.net/ https://use.typekit.net/ http://p.typekit.net/ https://p.typekit.net/; frame-src 'self' https://cdn.yoshki.com https://sidley.rev.vbrick.com https://sidley.readz.com https://www.buzzsprout.com http://player.vimeo.com https://player.vimeo.com http://www.youtube.com https://www.youtube.com http://www.vimeo.com https://www.vimeo.com; report-uri https://233122823c47f119af0143cbea7853d6.report-uri.com/r/d/csp/enforce 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org  tagmanager.google.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net *.hotjar.com wss://ws4.hotjar.com snap.licdn.com rum-static.pingdom.net px.ads.linkedin.com code.jquery.com cdnjs.cloudflare.com s7.addthis.com z.moatads.com v1.addthisedge.com m.addthis.com www.buzzsprout.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com tagmanager.google.com  p.typekit.net; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:  use.typekit.net; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com  media.fugro.com stats.g.doubleclick.net px.ads.linkedin.com www.google.com www.google.co.uk www.googletagmanager.com; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com  *.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net wss://ws7.hotjar.com s7.addthis.com www.google.com ir1.q4europe.com sdk.companywebcast.com fugrogisportal.maps.arcgis.com https://player.blubrry.com https://www.buzzsprout.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com  rum-collector-2.pingdom.net www.facebook.com *.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net wss://*.hotjar.com vc.hotjar.io m.addthis.com; 1
frame-ancestors 2sao.vn 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https://ads.adthrive.com/sites/5c6717f50a04d9393660fbe4/ads.min.css https://www.gstatic.com/charts/; object-src 'none'; base-uri 'none'; connect-src 'self' https:; font-src 'none'; frame-src 'self' https:; img-src 'self' https: data:; manifest-src 'self'; media-src 'self' https:; worker-src 'none'; prefetch-src 'self' https:; form-action 'self' https: https://newsletter.thestreamable.com 1
frame-ancestors 'self' *.signs.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://i.ytimg.com https://fonts.gstatic.com https://yt3.ggpht.com https://*.youtube.com https://*.cookiebot.com https://consent.cookiebot.com https://securepubads.g.doubleclick.net/ https://www.google.com/ https://www.gstatic.com/ https://*.ucweb.com https://*.stripe.com https://cloud.tinymce.com https://code.jquery.com https://*.facebook.com https://adservice.google.ch https://adservice.google.fr https://adservice.google.com.au https://adservice.google.pt https://adservice.google.es https://adservice.google.co.nz https://adservice.google.co.uk https://adservice.google.ie https://*.googleadservices.com https://*.twitter.com https://adservice.google.co.jp https://adservice.google.co.za https://adservice.google.co.id https://adservice.google.co.in https://adservice.google.co.th https://adservice.google.com.mt https://adservice.google.com.ec https://adservice.google.com.gh https://adservice.google.com.eg https://adservice.google.com.pe https://adservice.google.com.tr https://adservice.google.com.sg https://adservice.google.com.br https://adservice.google.com.sa https://adservice.google.com.hk https://adservice.google.com.pg https://adservice.google.com.ph https://adservice.google.com.mx https://adservice.google.no https://adservice.google.mv https://adservice.google.be https://adservice.google.dk https://adservice.google.ae https://www.google.com https://adservice.google.je https://adservice.google.at https://adservice.google.cz https://translate.google.com https://adservice.google.gr https://adservice.google.fi https://adservice.google.se https://adservice.google.pl https://adservice.google.hu https://adservice.google.cl https://adservice.google.ws https://adservice.google.lt https://*.google-analytics.com https://*.googletagservices.com https://*.facebook.net https://*.ampproject.org https://*.doubleclick.net https://*.googlesyndication.com https://rip.ie https://*.rip.ie https://google.com https://*.google.com; frame-src 'self' https://js.stripe.com https://*.stripe.com https://tpc.googlesyndication.com https://tpc.googlesyndication.com https://consentcdn.cookiebot.com https://*.safeframe.googlesyndication.com https://www.google.com/recaptcha/; style-src https: 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' https:; frame-ancestors http://ptownleyfuneraldirector.ie https://ptownleyfuneraldirector.ie https://rip.ie https://*.rip.ie https://www.bourkesfuneraldirectors.ie https://quinnsfuneralhome.ie https://www.okeeffefunerals.com https://gleasures.ie; report-uri https://rip.ie/csp.php; report-to https://rip.ie/csp.php; 1
default-src 'none';         base-uri 'self';     block-all-mixed-content;     connect-src 'self';     font-src 'self';     form-action 'self';     frame-ancestors 'self';     img-src 'self' https://*.static.flickr.com https://*.staticflickr.com;     media-src 'self';     script-src 'self' 'unsafe-inline';     style-src 'self' 'unsafe-inline';  1
upgrade-insecure-requests; default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src 'self' data:; 1
script-src www.huntsman.com qmod.quotemedia.com www.google.com fonts.googleapis.com fonts.gstatic.com google-analytics.com www.gstatic.com browser-update.org fast.fonts.net cdnjs.cloudflare.com/ajax/libs/font-awesome/ *.onetrust.com cdn.cookielaw.org api.mapbox.com d1io3yog0oux5.cloudfront.net 'unsafe-inline' 'unsafe-eval'; font-src www.huntsman.com qmod.quotemedia.com www.google.com fonts.googleapis.com fonts.gstatic.com google-analytics.com www.gstatic.com browser-update.org fast.fonts.net cdnjs.cloudflare.com/ajax/libs/font-awesome/ *.onetrust.com cdn.cookielaw.org api.mapbox.com d1io3yog0oux5.cloudfront.net 1
default-src 'self' '; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval'; 1
frame-ancestors 'self' *.humacom.com *.iofbonehealth.org *.osteoporosis.foundation 1
script-src 'unsafe-inline' 'unsafe-eval' http: https:; child-src http: https:; frame-ancestors http: https:; object-src http: https: 1
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors *.newswire.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s6.searchcdn.com https://*.surveymonkey.com https://js.arcgis.com https://*.addtoany.com https://www.linkedin.com https://*.googleapis.com http://riversideca.gov https://*.google.com https://vimeo.com https://*.facebook.com  http://*.googleapis.com http://*.google-analytics.com https://*.google-analytics.com https://m.addthisedge.com https://addsearch.com https://*.twitter.com https://www.youtube.com http://vjs.zencdn.net https://*.curator.io http://*.curator.io https://*.happy-or-not.com  https://fresnel.vimeocdn.com http://*.google.com https://m.addthis.com http://m.addthis.com https://*.twitter.com https://cdnjs.cloudflare.com https://code.jquery.com https://f.vimeocdn.com http://corweb.riversideca.gov https://*.legistar.com https://cdn.syndication.twimg.com https://public.govdelivery.com https://*.granicusideas.com https://api-public.addthis.com https://*.granicus.com https://static.doubleclick.net https://vjs.zencdn.net https://player.vimeo.com https://riversideca.gov https://query.yahooapis.com https://www.gstatic.com https://s7.addthis.com http://s7.addthis.com https://googleads.g.doubleclick.net https://*.riversideca.gov https://js-agent.newrelic.com https://uploads.mycusthelp.com; connect-src 'self' https://www2.hdlcompanies.com http://*.arcgisonline.com https://*.arcgisonline.com http://*.arcgis.com https://*.arcgis.com https://feedback-api.happy-or-not.com https://graph.facebook.com https://*.govdelivery.com https://*.twitter.com https://query.yahooapis.com https://googleads.g.doubleclick.net https://api-public.addthis.com https://fresnel.vimeocdn.com https://*.granicus.com https://*.googleapis.com https://api.curator.io; img-src 'self' data: https://maps.gstatic.com https://*.surveymonkey.com https://*.arcgisonline.com https://*.arcgis.com https://*.addsearch.com https://addsearch.com http://*.wunderground.com https://*.facebook.com https://riversideca.legistar.com https://www.gstatic.com https://*.googleapis.com https://www.google-analytics.com https://*.google.com https://*.cloudfront.net http://www.google-analytics.com https://stats.g.doubleclick.net https://riversideca.granicus.com https://i.ytimg.com https://*.riversideca.gov https://ssl.google-analytics.com https://*.cdninstagram.com https://riversideca.gov https://external.xx.fbcdn.net https://i.vimeocdn.com https://*.happy-or-not.com https://pbs.twimg.com https://www.riversideca.gov https://scontent.xx.fbcdn.net http://s7.addthis.com; style-src 'self' 'unsafe-inline' *.arcgis.com https://www.google.com https://*.cloudfront.net http://corweb.riversideca.gov https://*.googleapis.com https://*.riversideca.gov https://app.addsearch.com http://riversideca.gov https://www.youtube.com https://f.vimeocdn.com http://www.riversideca.gov http://vjs.zencdn.net https://riversideca.legistar.com https://riversideca.granicus.com https://corweb.riversideca.gov https://platform.twitter.com https://cdn.curator.io https://vjs.zencdn.net https://cdnjs.cloudflare.com http://ajax.googleapis.com; font-src 'self' http://*.arcgis.com  http://*.arcgis.com http://www.riversideca.gov https://riversideca.gov https://fonts.gstatic.com http://vjs.zencdn.net https://corweb.riversideca.gov http://corweb.riversideca.gov http://riversideca.gov http://fonts.gstatic.com https://cdn.curator.io https://cdnjs.cloudflare.com; frame-src 'self' https://*.office365.com https://*.tableau.com https://sketchfab.com https://www.eventbrite.com https://cad.chp.ca.gov/ https://*.s3.amazonaws.com https://www.youtube.com https://*.google.com/ https://*.riversideca.gov https://*.vimeo.com https://www.surveymonkey.com https://*.twitter.com https://s7.addthis.com https://*.govdelivery.com https://*.maps.arcgis.com https://*.clarity-aip.com https://riversideca.legistar.com https://www.google-analytics.com https://platform.twitter.com https://reporting.happy-or-not.com http://riversideca.granicus.com https://riversideca.mycusthelp.com; frame-ancestors 'self'; object-src 'self' https://www.riversideca.gov http://riversideca.gov 1
style-src 'self'; img-src 'self' images.ctfassets.net https://www.google-analytics.com https://stats.g.doubleclick.net; font-src 'self'; script-src 'self' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com; media-src videos.ctfassets.net; frame-src https://www.google.com https://www.youtube.com 1
default-src 'self' 'unsafe-inline' *.rrbchennai.gov.in 1
frame-ancestors 'self' preview.codecanyon.net 1
frame-ancestors 'self' *.GETPAIDTOSHOP.US *.CASHBACKASSOCIATES.COM *.CASHBACKDONATIONS.ORG *.INTEGRION.US *.integrion.com *.10FREEDOLLARS.com *.10freedollars.com *.localhost *.LOCALHOST *.LOCALHOST:8080 *.localhost:8080; 1
default-src 'self'; frame-ancestors 'self'; frame-src 'self' forms.cwp.gov.sg *.youtube.com ws.sharethis.com wogaa.demdex.net fast.wogaa.demdex.net *.powerbi.com www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.google-analytics.com assets.adobedtm.com *.wogaa.sg *.demdex.net wogadobeanalytics.sc.omtrdc.net va.ecitizen.gov.sg *.sharethis.com *.gstatic.com www.google.com; style-src 'self' 'unsafe-inline' va.ecitizen.gov.sg *.sharethis.com *.gstatic.com assets.wogaa.sg fonts.googleapis.com maxcdn.bootstrapcdn.com; form-action 'self' 'unsafe-inline' 'unsafe-eval' forms.cwp.gov.sg va.ecitizen.gov.sg *.demdex.net *.sharethis.com *.paypal.com; img-src 'self' www.google-analytics.com wogadobeanalytics.sc.omtrdc.net cm.everesttech.net dpm.demdex.net va.ecitizen.gov.sg *.sharethis.com data:; font-src 'self' *.amazonaws.com va.ecitizen.gov.sg *.gstatic.com assets.wogaa.sg maxcdn.bootstrapcdn.com fonts.gstatic.com; connect-src 'self' 'unsafe-inline' www.google-analytics.com dpm.demdex.net wogadobeanalytics.sc.omtrdc.net *.gstatic.com *.wogaa.sg va.ecitizen.gov.sg *.sharethis.com; 1
default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data:; font-src 'self' https://fonts.gstatic.com; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; connect-src 'self'; 1
default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' ad.atdmt.com internalfb.com *.internalfb.com;style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm ad.atdmt.com internalfb.com *.internalfb.com wss://*.internalfb.com wss://*.internalfb.com:*;font-src data: internalfb.com *.internalfb.com *.facebook.com *.fbcdn.net;block-all-mixed-content;upgrade-insecure-requests; 1
default-src *.ncs.gov.in; script-src 'unsafe-inline' 'unsafe-eval' *.ncs.gov.in www.google-analytics.com *.jquery.com; img-src *.ncs.gov.in www.google-analytics.com img.youtube.com *.jquery.com; style-src 'unsafe-inline' *.ncs.gov.in *.jquery.com; frame-src *.ncs.gov.in *.youtube.com; connect-src *.ncs.gov.in www.googleapis.com www.google-analytics.com stats.g.doubleclick.net; media-src *.ncs.gov.in *.youtube.com stats.g.doubleclick.net 1
default-src 'self' data: https://yc.edu https://www.yc.edu https://v5.yc.edu;        script-src 'self' 'unsafe-inline' 'unsafe-eval' https://d.bablic.com/ https://www.jotform.com https://pagead2.googlesyndication.com https://kit.fontawesome.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://tag.simpli.fi https://bat.bing.com https://graph.instagram.com https://www.youtube.com https://bot.ivy.ai https://25livepub.collegenet.com https://api.instagram.com https://script.hotjar.com https://static.hotjar.com https://my.spectate.com https://hit.uptrendsdata.com https://script.crazyegg.com https://cdn.rlets.com https://www.googleapis.com https://cse.google.com https://www.google.com https://www.gstatic.com https://pixel.mathtag.com https://stats.g.doubleclick.net https://www.yc.edu https://v5.yc.edu https://www.googletagmanager.com https://doublethedonation.com https://pi.pardot.com https://s3-eu-west-1.amazonaws.com https://stationdata.wunderground.com https://i.simpli.fi https://connect.facebook.net https://yc.omnilert.net https://www.e2campus.net https://cdn.datatables.net https://maps.googleapis.com https://maps.google.com https://e.issuu.com http://us.libraryh3lp.com https://formscentral.acrobat.com https://cdnjs.cloudflare.com https://cdn.syndication.twimg.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://syndication.twitter.com https://platform.twitter.com https://rum-static.pingdom.net https://ssl.google-analytics.com www.google-analytics.com https://code.jquery.com https://libraryh3lp.com https://query.yahooapis.com;        style-src 'self' 'unsafe-inline' https://kit-pro.fontawesome.com https://www.google.com  https://www.yc.edu https://v5.yc.edu https://doublethedonation.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://code.jquery.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://platform.twitter.com https://ton.twimg.com;       img-src 'self' https://yc.jotform.com https://pubads.g.doubleclick.net https://bat.bing.com https://scontent-lax3-1.cdninstagram.com https://scontent-lax3-2.cdninstagram.com https://scontent-lax3-3.cdninstagram.com https://prodssb1.yc.edu https://bot.ivy.ai https://25livepub.collegenet.com https://scontent.cdninstagram.com https://50th.yc.edu https://hit.uptrendsdata.com https://*.gstatic.com https://clients1.google.com https://www.googleapis.com https://www.google.com https://sync.adaptv.advertising.com https://stats.g.doubleclick.net https://pixel.mathtag.com https://u3s.mathtag.com https://www.yc.edu https://v5.yc.edu https://arthur2.yc.edu https://doublethedonation.com https://image.isu.pub https://i.simpli.fi https://www.facebook.com https://cdnjs.cloudflare.com https://maps.google.com https://maps.gstatic.com https://csi.gstatic.com https://www.yc.edu https://v5.yc.edu https://maps.googleapis.com http://weathersticker.wunderground.com http://www.phe.gov https://www.dhs.gov http://qs1016.pair.com https://scontent.xx.fbcdn.net https://courseweb.yc.edu https://weather.com https://code.jquery.com https://abs.twimg.com https://arthur2.yc.edu https://o.twimg.com https://pbs.twimg.com https://platform.twitter.com https://rum-collector.pingdom.net https://syndication.twitter.com https://ton.twimg.com www.google-analytics.com https://ssl.google-analytics.com data:;       font-src 'self' https://bot.ivy.ai data: https://kit-pro.fontawesome.com https://www.yc.edu https://v5.yc.edu https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com;        child-src 'self' https://calendar.google.com https://cas.yc.edu https://www.fema.gov https://secure.touchnet.com https://yavapai.hosted.panopto.com https://arthur2.yc.edu https://platform.twitter.com https://syndication.twitter.com https://www.yc.edu https://v5.yc.edu https://www.youtube.com https://player.vimeo.com https://cdn.yoshki.com;        frame-src 'self' https://bot.ivy.ai https://public.tableau.com https://vars.hotjar.com https://my.spectate.com https://5f011bc3-d57d-4fcd-9668-5887904b779e.rlets.com https://cse.google.com https://www.google.com https://maps.googleapis.com https://cdn.knightlab.com https://player.vimeo.com https://pixel.mathtag.com https://go.pardot.com https://go2.yc.edu https://e.issuu.com https://yavapaicollege1.typeform.com https://login.yc.edu https://login.microsoftonline.com https://outlook.office.com https://outlook.com https://www.outlook.com https://outlook.live.com https://calendar.google.com https://cas.yc.edu https://www.fema.gov https://secure.touchnet.com https://yavapai.hosted.panopto.com https://arthur2.yc.edu https://platform.twitter.com https://syndication.twitter.com https://www.yc.edu https://v5.yc.edu https://www.youtube.com https://player.vimeo.com https://cdn.yoshki.com https://lgapi-us.libapps.com;        connect-src 'self' https://e2.bablic.com https://c.bablic.com https://capture-api.reachlocalservices.com https://vc.hotjar.io wss://ws3.hotjar.com https://in.hotjar.com https://status.yc.edu https://25livepub.collegenet.com https://yc.omnilert.net https://5f011bc3-d57d-4fcd-9668-5887904b779e.rlets.com https://cse.google.com https://apps.yc.edu https://www.facebook.com https://pingback.issuu.com https://login.microsoftonline.com https://e.issuu.com https://www.yc.edu https://v5.yc.edu https://wwwlb1.yc.edu https://wwwlb2.yc.edu https://wwwlb3.yc.edu https://wwwlb4.yc.edu https://wwwlb5.yc.edu https://wwwlb6.yc.edu;        frame-ancestors 'self' www.ycpac.com https://cas.yc.edu;       object-src 'self' https://www.youtube.com https://static.issuu.com 1
default-src 'none'; img-src wtfismyip.com; script-src ipv4.wtfismyip.com wtfismyip.com; style-src 'unsafe-inline' 1
default-src 'none'; frame-src *.paypal.com blob:; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.solocode.com *.anton.app projects-csqzcpu79ce2yva.netdna-ssl.com *.paypal.com wss:; media-src data: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.paypal.com; frame-ancestors 'self' *.solocode.com ; style-src 'unsafe-inline'; img-src 'self' *.solocode.com *.anton.app data:; font-src data:; base-uri 'self'; form-action 'self' 1
default-src 'none';base-uri 'none';manifest-src 'self';script-src 'self';style-src 'self' ;img-src 'self' data: blob:;font-src 'self' data:;connect-src 'self';media-src 'self';frame-ancestors 'self';worker-src 'self' blob:;form-action 'self' 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com 'strict-dynamic' 'nonce-MzE4OTQ3Mjk1NywxNzMxNjM5MTc='; report-uri https://exceptions.hubspot.com/csp/report; 1
frame-src 'self' https://wp.outstanding.kr *.outstanding.kr *.facebook.com *.facebook.net *.youtube.com *.instagram.com *.kakao.com *.google.com *.paypal.com *.cloudflarestream.com *.videodelivery.net giphy.com kakaotalk: intent:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.paypal.com *.cloudflarestream.com *.videodelivery.net https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com https://*.facebook.net https://www.instagram.com https://platform.twitter.com https://developers.kakao.com https://cdnjs.cloudflare.com https://widget.freshworks.com https://www.clarity.ms https://www.google.com https://www.gstatic.com/; form-action 'self' https://wp.outstanding.kr *.outstanding.kr *.paypal.com; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://*.facebook.net https://widget.freshworks.com 1
base-uri *.emiratespost.ae 'self'; child-src * gap:; frame-src * gap:; connect-src *.typekit.net fonts.googleapis.com use.typekit.net maps.google.com platform.twitter.com *.readspeaker.com www.googletagmanager.com maps.googleapis.com cdn.syndication.twimg.com www.google-analytics.com happinessmeter.gov.ae www.google.com www.gstatic.com 'self'; default-src 'self' gap: 'unsafe-inline' 'unsafe-eval'; font-src *.typekit.net fonts.google.com fonts.googleapis.com fonts.gstatic.com happinessmeter.gov.ae 'self' data:; img-src * data: blob: blob:; media-src *.epg.gov.ae *.emiratespost.ae storage.googleapis.com 'self'; object-src 'none'; script-src maps.google.com platform.twitter.com *.readspeaker.com www.googletagmanager.com maps.googleapis.com www.google-analytics.com cdn.syndication.twimg.com happinessmeter.gov.ae www.google.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.typekit.net fonts.googleapis.com use.typekit.net maps.google.com platform.twitter.com cdn1.readspeaker.com happinessmeter.gov.ae 'self' 'unsafe-inline'; frame-ancestors 'self' gap:; report-uri /SecurityUtils/rest/Report/ReportViolations?Params=05glAWdhwiinGyupgB8ArG7H2dnUTIwdp%2BQAEm9kFFd1pUfK%2Ft8MaN0iWTzOai%2FSmlqIm9YNWkgoRTV80lRI8g%3D%3D;  1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.youtube.com www.google.com *.google-analytics.com https://www.googletagmanager.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com cdn.ampproject.org use.fontawesome.com api.connectedcommunity.org http://www.lifescitrc.org https://cdn.feathr.co cdn.feathr.co polo.feathr.co marco.feathr.co *.crazyegg.com *.hotjar.com *.informz.net; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com https://www.googletagmanager.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com use.fontawesome.com use.typekit.net p.typekit.net *.crazyegg.com *.hotjar.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com use.fontawesome.com data: use.typekit.net *.crazyegg.com *.hotjar.com; img-src 'self' novartis.contacthr.com novartispharmaceuticalscorp.contacthr.com *.gstatic.com *.googleapis.com *.google-analytics.com https://www.googletagmanager.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com twitter.com *.twitter.com *.twimg.com use.fontawesome.com data: blob: *.eloqua.com *.physiology.org connect.the-aps.org *.cloudfront.net *.placehold.it stats.g.doubleclick.net marco.feathr.co match.adsrvr.org polo-v1.feathr.co polo.feathr.co *.crazyegg.com *.hotjar.com *.informz.net; media-src 'self' data: blob: www.youtube.com; frame-src 'self' novartis.contacthr.com novartispharmaceuticalscorp.contacthr.com www.youtube.com api.connectedcommunity.org cdn.feathr.co polo.feathr.co marco.feathr.co *.qzzr.com *.crazyegg.com *.hotjar.com twitter.com *.twitter.com html5-player.libsyn.com www.podbean.com; connect-src 'self' polo.feathr.co; 1
frame-ancestors 'self' https://*.webfleet.com/ http://*.wfs.global:*/ http://*.dev.ttw:*/; 1
frame-ancestors 'self' *.pxg.com *.bigyam.com *.authorize.net *.googleapis.com *.pxg-assets.com 1
frame-ancestors https://*.ptc.com https://ptc.seismic.com https://liveshareeast3.seismic.com 1
default-src 'self' ; img-src 'self' https://piwik.mailbox.org; script-src 'self' https://piwik.mailbox.org ; style-src 'self' data: 'unsafe-inline' ; frame-src 'self'  https://manage.mailbox.org https://status.mailbox.org; frame-ancestors 'self'; object-src 'none'; 1
img-src 'self' *.riogrande.com cdn.powerreviews.com www.facebook.com www.linkedin.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.com.ar t.powerreviews.com lpcdn.lpsnmedia.net products.riogrande.com ct.pinterest.com googleads.g.doubleclick.net res.cloudinary.com www.paypalobjects.com www.paypal.com ak1s.abmr.net privymktg.com google-analytics.com static.licdn.com www.googletagmanager.com *.privy.com bat.bing.com *.adsymptotic.com *.adsrvr.org user-event-tracker.crazyegg.com track.hubspot.com assets.buzzsprout.com events.attentivemobile.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' http: data: https: blob: https://d.la2-c2-ord.salesforceliveagent.com https://logs1125.xiti.com https://www.google-analytics.com https://cdn.optimizely.com https://api.demandbase.com https://app-ab02.marketo.com https://www.googletagmanager.com https://magpie-static.ugc.bazaarvoice.com https://apc.ugc.bazaarvoice.com https://code.jquery.com wss://directline.botframework.com; 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=lifestyle&region=US&lang=en-US&device=desktop&yrid=9nui7tpful035&partner=; 1
default-src https: 'unsafe-inline' 'unsafe-eval' data:; object-src 'self'; frame-ancestors 'self'; base-uri 'self'; 1
child-src blob:;connect-src 'self' https://*.yimg.com https://*.yahoo.com https://s.yimg.com/nq/ads/mb/native/* https://service.cmp.oath.com https://www.yahoo.com/p.gif https://smetrics.att.com/id https://dpm.demdex.net/id https://video-api.yql.yahoo.com/ https://edgecast-vod.yahoo.net/ https://*.vpg.cdn.yimg.com/ https://media.zenfs.com/ https://assets.video.yahoo.net/ https://ads.adaptv.advertising.com/ https://video.adaptv.advertising.com/ https://edgecast-cf-prod.yahoo.net/;default-src 'self';font-src https: data:;frame-src https://*.yahoo.com https://*.yimg.com https://*.ymail.com https://6518610.fls.doubleclick.net/ https://6589630.fls.doubleclick.net/ https://8523621.fls.doubleclick.net/ https://delivery.vidible.tv/ https://secure.bannerfarm.ace.advertising.com https://cmp.advertising.com https://assets.video.yahoo.net/ https://cdn-ssl.vidible.tv/prod/ https://safeframes-mbst-pub-uw1.s3-us-west-1.amazonaws.com/darla/ https://www.googletagmanager.com/ns.html;img-src data: blob: http: https:;media-src blob: https://*.yahoo.com https://*.yimg.com;report-uri https://csp.yahoo.com/beacon/csp?src=mail-norrin;script-src 'self' https://s.yimg.com/nq/nr/ https://s.yimg.com/os/yaft/ https://s.yimg.com/ss/ https://s.yimg.com/aaq/yc/ https://s.yimg.com/rq/darla/ https://fc.yahoo.com/sdarla/ https://e2e.fc.yahoo.com/sdarla/ https://safeframes-mbst-pub-uw1.s3-us-west-1.amazonaws.com/darla/ https://s.yimg.com/ds/scripts/ https://www.yahoo.com/polyfill.min.js https://yep.video.yahoo.com/js/ https://www.gstatic.com/cv/js/sender/v1/cast_sender.js https://s.yimg.com/aaq/vzm/ https://cdn-ssl.vidible.tv/prod/player/js/ https://yep.video.yahoo.com/ https://s.yimg.com/rx/ https://assets.video.yahoo.net/ https://jsapi.login.yahoo.com/w/ https://s.yimg.com/cv/apiv2/partner-portals/att/adobe_analytics/ https://consent.cmp.oath.com/ https://s.yimg.com/oa/ https://s.yimg.com/uc/sf/ https://s.yimg.com/aaq/ 'sha256-lRMQ2lQozgbWLOqNJOrnclJXX6G77pQVIlF8SAI3++I=' 'unsafe-inline' 'unsafe-eval' 'report-sample' 'nonce-p8Ik+tzYfgkpAzGEXhZ+WCYziekxdVSHhmZyyPWrvrvKrIAY' ;style-src 'self' https://s.yimg.com/nq/nr/ https://s.yimg.com/rx/ https://assets.video.yahoo.net/ https://s.yimg.com/aaq/fp/ 'unsafe-inline';worker-src 'self' blob:;manifest-src https://s.yimg.com/nq/nr/json/ 1
default-src https://player.vimeo.com/ https://maxcdn.bootstrapcdn.com/ https://www.contentpagina.nl/ http://studentportal.hku.nl http://medewerkers.hku.nl http://redactie-medewerkers.hku.nl  https://www.googletagmanager.com https://www.youtube-nocookie.com http://redactie-studentportal.hku.nl https://octo.hku.nl/ https://fonts.gstatic.com/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; font-src 'self' data: https://octo.hku.nl; connect-src https://octo.hku.nl/ https://www.facebook.com/ 'self'; frame-src https://*.vimeo.com/ https://www.youtube-nocookie.com  https://www.youtube.com/ https://www.google.com/ https://maps.google.com/ https://octo.hku.nl/ https://vars.hotjar.com/ https://staticxx.facebook.com/ https://federatie.hku.nl/ 'self'; img-src https://www.gravatar.com https://www.contentpagina.nl/ http://studentportal.hku.nl http://medewerkers.hku.nl http://redactie-medewerkers.hku.nl http://redactie-studentportal.hku.nl https://octo.hku.nl/ https://www.google-analytics.com/ 'self' data:; script-src https://redactie-medewerkers.hku.nl https://octo.hku.nl/ 'self' 'unsafe-inline' 'unsafe-eval' data: https: wss: 1
frame-ancestors appfigures.reamaze.com 1
frame-ancestors https://rajaview.id; 1
default-src * 'unsafe-eval' 'unsafe-inline' blob: data: ; frame-ancestors 'self' forums.gunsandammo.com; 1
default-src 'self' blob: http: https: www.krebshilfe.de dkh-stage.dwprev.com; img-src 'self' blob: data: http: https: www.krebshilfe.de dkh-stage.dwprev.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: http: https: www.krebshilfe.de dkh-stage.dwprev.com; style-src 'self' 'unsafe-inline' http: https: www.krebshilfe.de dkh-stage.dwprev.com; font-src 'self' data: http: https: www.krebshilfe.de dkh-stage.dwprev.com; 1
frame-ancestors 'self' monetos.lb.lt *.cv.lt; 1
default-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com cdn.jsdelivr.net *.ensighten.com gateway.zscalertwo.net tagmanager.google.com staticcontents.investisdigital.com ipapi.connectid.cloud youtube.com player.vimeo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net sjp.getmediamanager.com *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edge.api.brightcove.com *.googleapis.com www.youtube.com youtube.com s.ytimg.com unpkg.com *.rawgit.com *.tools.investis.com *.nexus.ensighten.com nexus.ensighten.com tagmanager.google.com gateway.zscalertwo.net *.google.com youtube.com *.investisdigital.com player.vimeo.com ipapi.connectid.cloud; style-src 'self' 'unsafe-inline' 'unsafe-eval' viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net tagmanager.google.com; img-src 'self' 'unsafe-inline' * data:; media-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com *.hs.llnwd.net youtube.com; frame-src 'self' staticcontents.investis.com www.google.com sjp.getmediamanager.com careers.sjp.co.uk irs.tools.investis.com otp.tools.investis.com digital.feprecisionplus.com sjp.hireserve-test.com ir.tools.investis.com staticxx.facebook.com www.youtube.com gateway.zscalertwo.net youtube.com recruitingapp-4152.de.umantis.com/Jobs/1?lang=ger&message=; font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com tagmanager.google.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.ensighten.com *.google-analytics.com *.api.brightcove.com *.tools.investis.com *.google.com *.doubleclick.net *.connectid.cloud; report-uri /report-csp-violation 1
style-src https: 'unsafe-inline' 1
frame-ancestors www.comparasemplice.it pp.enigaseluce.com *.ci360.sas.com design-prod.cidemo.sas.com *.roialty.net *.facebook.com 52.18.162.157 52.17.161.123; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://pawoo.net; img-src 'self' https: data: blob: https://pawoo.net https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://pawoo.net; media-src 'self' https: data: https://pawoo.net; frame-src 'self' https:; manifest-src 'self' https://pawoo.net; connect-src 'self' blob: https://pawoo.net wss://pawoo.net https://www.google-analytics.com https://pagead2.googlesyndication.com; script-src 'self' https://pawoo.net https://www.google-analytics.com https://ssl.google-analytics.com 'nonce-q9F80bNzjWnkUlpdS4z3RvaBq0l7auVpnNpqfGEfjUY=' 1
default-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.elastic-cloud.com *.omniture.com *.adobe.com *.omtrdc.net *.adobedtm.com epoq-systems.de *.epoq.de *.worldshop.eu *.miles-and-more.com *.milesandmore.com *.lufthansa.com *.points.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.googleapis.com *.swiss-shop.com *.mamtools.com *.demdex.net data:; frame-ancestors 'self' 1
object-src 'self'; form-action 'self'; default-src 'none'; manifest-src 'self'; media-src 'self' data: blob: *.wistia.com *.akamaihd.net *.em.lan; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.em.lan *.bing.com *.facebook.net *.google.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.netdna-ssl.com *.cookiebot.com *.doubleclick.net fast.wistia.com app.wistia.com fast.wistia.net *.googleapis.com; style-src 'self' 'unsafe-inline' *.em.lan tagmanager.google.com fast.fonts.net fast.wistia.com fonts.googleapis.com; img-src 'self' data: *.em.lan maps.googleapis.com *.google.com *.google.de *.bing.com *.google-analytics.com *.cookiebot.com *.doubleclick.net *.fbcdn.net img.youtube.com *.ytimg.com embed.wistia.com embed-ssl.wistia.com fast.wistia.net fast.wistia.com *.facebook.com *.akamaihd.net maps.gstatic.com; child-src blob: fast.wistia.com fast.wistia.net www.youtube.com *.em.lan; font-src 'self' data: fast.fonts.net fonts.googleapis.com fonts.gstatic.com *.em.lan; connect-src 'self' *.wistia.com *.litix.io *.akamaihd.net *.google-analytics.com *.cookiebot.com *.doubleclick.net data:; frame-src 'self' *.em.lan *.marco.ch webservices.newsbox.ch *.cmc-engineers.de *.cookiebot.com *.doubleclick.net *.google.com *.facebook.com *.youtube.com *.wistia.net *.wistia.com *.investis.com; 1
default-src 'self' https://bam.nr-data.net; font-src 'self' https://use.typekit.net; form-action 'self' https://syndication.twitter.com https://platform.twitter.com; frame-src 'self' 'unsafe-inline' https://platform.twitter.com https://syndication.twitter.com https://player.vimeo.com https://www.google.com https://www.youtube.com; img-src 'self' data: https://pbs.twimg.com https://platform.twitter.com https://syndication.twitter.com https://stats.g.doubleclick.net https://chart.googleapis.com https://www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bam.nr-data.net https://cdn.jsdelivr.net https://cdn.syndication.twimg.com https://js-agent.newrelic.com https://platform.twitter.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://p.typekit.net https://platform.twitter.com; connect-src 'self' https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net; upgrade-insecure-requests; block-all-mixed-content; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.serving-sys.com *.sitescout.com *.pixel.ad *.analytics.edgekey.net *.forefieldkt.com  *.standard.com *.youtube.com *.gstatic.com *.pages05.net *.silverpop.com *.sc.pages05.net *.googletagmanager.com *.google-analytics.com fonts.googleapis.com ajax.googleapis.com *.google.com *.sharethis.com secure-ds.serving-sys.com *.googleadservices.com *.fonts.net *.twitter.com *.twimg.com *.ubembed.com *.demandbase.com *.userzoom.com   *.googleapis.com tribl.io *.brightcove.com *.brightcove.net *.zencdn.net bcove.video players.brightcove.net *.media.brightcove.com *.brightcovecdn.com *.teads.tv *.adentifi.com *.facebook.com *.cloudflare.com *.linkedin.com bm.adentifi.com *.yahoo.com *.doubleclick.net *.simpli.fi *.facebook.net *.jquery.com; 1
default-src 'none';script-src 'self' 'unsafe-inline' https://static.frag-den-staat.de https://traffic.okfn.de https://js.stripe.com;style-src 'self' 'unsafe-inline' https://static.frag-den-staat.de;img-src 'self' data: blob: https://static.frag-den-staat.de https://media.frag-den-staat.de https://traffic.okfn.de https://i.vimeocdn.com https://raw.githubusercontent.com *.tile.openstreetmap.org *.global.ssl.fastly.net i.ytimg.com;media-src https://static.frag-den-staat.de https://media.frag-den-staat.de;worker-src 'self' blob: https://static.frag-den-staat.de;frame-src 'self' blob: https://static.frag-den-staat.de https://media.frag-den-staat.de https://okfde.github.io https://player.vimeo.com https://www.youtube-nocookie.com https://media.ccc.de https://js.stripe.com https://hooks.stripe.com https://www.paypal.com;object-src 'self' https://media.frag-den-staat.de;connect-src 'self' https://static.frag-den-staat.de https://media.frag-den-staat.de https://api.betterplace.org/ https://sentry.okfn.de https://api.stripe.com;child-src 'self' blob: https://static.frag-den-staat.de;base-uri 'none';font-src data: https://static.frag-den-staat.de;manifest-src https://static.frag-den-staat.de;form-action 'self' https://fragdenstaat.de https://forum.okfn.de https://www.paypal.com https://pretix.eu https://hooks.stripe.com https://stripe.com https://r.girogate.de;frame-ancestors 'self';report-uri https://sentry.okfn.de/api/3/security/?sentry_key=f00c20a879414df69051163a90597a8c; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.127.0.0.1.xip.io *.bootstrapcdn.com *.fdwcorp.com *.fullcompass.com *.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.127.0.0.1.xip.io *.aspnetcdn.com *.bing.com *.bizrate.com *.bootstrapcdn.com *.bounceexchange.com *.cloudfront.com *.cloudfront.net *.doubleclick.net *.ecomm-nav.com *.facebook.net *.fdwcorp.com *.forter.com *.fullcompass.com *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googlecommerce.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.icpro.co *.nextopia.net *.nextopiasoftware.com *.newrelic.com *.nr-data.net *.pinterest.com *.quantcount.com *.quantserve.com *.tiny.cloud *.tinymce.com *.thawte.com *.trustedsite.com *.twitter.com *.typekit.net *.veinteractive.com *.whoson.com woobox.com *.ywxi.net; img-src 'self' data: *.127.0.0.1.xip.io ak1s.abmr.net *.amazonaws.com *.bing.com *.bizrate.com *.bizrateinsights.com *.bouncex.net *.bounceexchange.com *.cdnwidget.com *.chango.com *.cloudfront.net *.doubleclick.net *.facebook.com *.fdwcorp.com *.fullcompass.com *.google.com *.google.ca *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gravatar.com *.gstatic.com img.youtube.com *.nextopia.net *.paypalobjects.com *.pinterest.com placehold.it pippio.com *.quantserve.com *.scanalert.com *.thawte.com *.tinymce.com *.twitter.com *.typekit.net *.whoson.com *.ywxi.net; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.127.0.0.1.xip.io *.amazonaws.com *.bing.com *.bizrate.com *.bounceexchange.com *.bouncex.net *.cdnbasket.net *.cdnwidget.com *.cloudfront.net *.doubleclick.net *.facebook.com *.fdwcorp.com *.forter.com *.fullcompass.com *.google-analytics.com *.pinterest.com *.tiny.cloud *.veinteractive.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.bounceexchange.com *.doubleclick.net *.facebook.com *.fdwcorp.com *.fullcompass.com *.google.com *.googlesyndication.com *.icpro.co *.jobsinmadison.com *.mcafeesecure.com *.pinterest.com *.soundcloud.com www.trustedsite.com *.twitter.com *.veinteractive.com fullcompass.whoson.com *.youtube.com woobox.com *.icpro.co; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.127.0.0.1.xip.io *.bizrate.com *.bootstrapcdn.com cdnjs.cloudflare.com *.cloudfront.net *.fdwcorp.com *.fullcompass.com *.googleapis.com *.nextopia.net tagmanager.google.com *.tiny.cloud *.tinymce.com *.typekit.net *.whoson.com; font-src 'self' data: *.bootstrapcdn.com fonts.gstatic.com tagmanager.google.com *.typekit.net; worker-src 'self' blob: *.fdwcorp.com *.fullcompass.com; frame-ancestors 'self' 'unsafe-inline' 'unsafe-eval' *.fullcompass.com *.fdwcorp.com 1
default-src * blob: ;style-src 'self' 'unsafe-inline' *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.split.io *.google-analytics.com *.googletagmanager.com instant.page *.googleadservices.com *.ranksci.com *.lr-ingest.io *.facebook.net *.yimg.com *.bing.com *.g.doubleclick.net *.yahoo.com *.paypal.com *.paypalobjects.com *.brcdn.com *.bamboohr.com *.powerreviews.com *.braintreegateway.com *.zdassets.com *.zopim.com *.iesnare.com *.msn.com *.twitter.com *.letslinc.com *.gstatic.com *.crisp.chat *.ampproject.org;worker-src 'self' blob: ;img-src 'self' data: *.speedwaymotors.com *;font-src 'self' 'unsafe-inline' data: * 1
frame-ancestors *.ohiohealth.com watccmchart401.ds.ohnet 1
default-src cloudron.io *.cloudron.io; frame-src 'self' cloudron.io *.cloudron.io js.stripe.com; connect-src wss: https: 'self' *.cloudron.io; script-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src * data:; style-src https: 'unsafe-inline'; object-src 'none'; font-src https: 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'; 1
boacompra.com 1
default-src 'self' https://cdnjs.cloudflare.com/ https://*.wogaa.sg/ https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/ https://forms.cwp.gov.sg/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maxcdn.bootstrapcdn.com/ https://cdnjs.cloudflare.com/ https://*.wogaa.sg/ https://assets.adobedtm.com/ https://www.youtube.com/ https://www.google-analytics.com/ https://maps.googleapis.com/ https://stats.pusher.com/ https://files.keyreply.com/ https://cdn.polyfill.io/ https://webchat.blob.core.windows.net/ https://www.googletagmanager.com/ https://va.ecitizen.gov.sg/ https://theta360.com/ https://code.jquery.com/ https://s.ytimg.com/ https://ngeeannpoly.app.keyreply.com/ https://jointpoly-prd.mybluemix.net/ https://preview.keyreply.com/; frame-src 'self' https://www.googletagmanager.com/ https://www.youtube.com/ https://forms.cwp.gov.sg/ https://theta360.com/ https://jointpoly-prd.mybluemix.net/ https://preview.keyreply.com/ https://www.google.com https://wogaa.demdex.net; font-src 'self' data: https://assets.wogaa.sg/fonts/ https://fonts.googleapis.com/ https://use.fontawesome.com/ https://s3-us-west-2.amazonaws.com/ https://va.ecitizen.gov.sg/ https://fonts.gstatic.com/ https://cdnjs.cloudflare.com/ https://webchat.keyreply.com/; img-src 'self' data: https://www.google.com/ https://www.google.com.sg/ https://wogadobeanalytics.sc.omtrdc.net/ https://cm.everesttech.net/ https://dpm.demdex.net/ https://webchat.blob.core.windows.net/ https://www.google-analytics.com/ https://va.ecitizen.gov.sg/ https://stats.g.doubleclick.net/ https://keyreply.blob.core.windows.net/ https://ngeeannpoly.blob.core.windows.net/ https://www.straitstimes.com/ https://www.zaobao.com.sg/; media-src 'self' data:; style-src 'self' 'unsafe-inline' https://assets.wogaa.sg/fonts/ https://va.ecitizen.gov.sg/ https://fonts.googleapis.com/ https://use.fontawesome.com/ https://cdnjs.cloudflare.com/; connect-src 'self' https://www.google-analytics.com/ https://snowplow-web.wogaa.sg/ https://va.ecitizen.gov.sg/ https://keyreply.azurewebsites.net/ https://ngeeannpoly.app.keyreply.com/ https://dpm.demdex.net/ https://jointpoly-prd.mybluemix.net/ https://preview.keyreply.com/ https://api.sentiments.wogaa.sg https://snowplow.wogaa.sg wss://ngeeannpoly.app.keyreply.com/; worker-src 'self' blob:; 1
font-src *.typekit.net 'self' data: *.gstatic.com *.googleapis.com *.googletagmanager.com *.listrakbi.com *.hotjar.com *.hotjar.io *.bootstrapcdn.com *.socialannex.com *.socialannex.net *.elfsight.com *.crazyegg.com apps.elfsight.com *.taboola.com *.instacloud.io *.cdninstagram.com *.noibu.com *.afterpay.com *.narvar.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cybersource.com *.paypal.com *.facebook.com *.socialannex.com *.socialannex.net *.elfsight.com *.crazyegg.com apps.elfsight.com *.taboola.com *.instacloud.io *.cdninstagram.com *.noibu.com *.afterpay.com *.narvar.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.google.com *.vimeo.com *.facebook.com *.cybersource.com *.paypal.com *.googletagmanager.com *.happyfoxchat.com *.listrakbi.com *.hotjar.com *.hotjar.io *.bootstrapcdn.com *.doubleclick.net *.socialannex.com *.socialannex.net *.listrak.com *.elfsight.com *.crazyegg.com apps.elfsight.com *.taboola.com *.instacloud.io *.cdninstagram.com *.noibu.com *.afterpay.com *.narvar.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com https://static.afterpay.com 'self' data: *.imagizer.com *.facebook.com *.doubleclick.net *.google.com *.bing.com *.sugarfina.com *.typekit.com *.typekit.net *.pinterest.com *.paypal.com *.aspireiq.com *.gstatic.com *.googleapis.com google-analytics.com *.googletagmanager.com *.alexametrics.net *.happyfoxchat.com *.listrakbi.com *.socialannex.net *.hotjar.com *.hotjar.io *.bootstrapcdn.com *.google.co.in *.socialannex.com *.elfsight.com *.crazyegg.com apps.elfsight.com *.taboola.com *.instacloud.io *.cdninstagram.com *.noibu.com *.afterpay.com *.narvar.com *.fbcdn.net 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com js.authorize.net jstest.authorize.net www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com js.braintreegateway.com s.ytimg.com video.google.com vimeo.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.google.com *.facebook.net *.celebros.com *.newrelic.com *.nr-data.net *.typekit.net *.listrakbi.com *.listrak.com *.googletagmanager.com *.gstatic.com *.googleapis.com google-analytics.com *.pinimg.com *.bing.com *.socialannex.com *.hotjar.com *.hotjar.io *.alexametrics.net *.doubleclick.net *.happyfoxchat.com *.bootstrapcdn.com *.celebros-analytics.com *.steelhousemedia.com *.socialannex.net *.elfsight.com *.crazyegg.com apps.elfsight.com *.taboola.com *.instacloud.io *.cdninstagram.com *.noibu.com *.afterpay.com *.narvar.com *.googleadservices.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com static.afterpay.com/ *.googleapis.com *.celebros.com *.listrakbi.com *.googletagmanager.com googletagmanager.com *.google.com *.happyfoxchat.com *.hotjar.com *.hotjar.io *.bootstrapcdn.com *.socialannex.com *.socialannex.net celebrosnlp.com *.elfsight.com *.crazyegg.com apps.elfsight.com *.taboola.com *.instacloud.io *.cdninstagram.com *.noibu.com *.afterpay.com *.narvar.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com static.afterpay.com *.google-analytics.com *.paypal.com *.pinterest.com *.nr-data.net *.ipgeolocation.io *.socialannex.net *.facebook.com *.bing.com *.googletagmanager.com *.listrakbi.com *.hotjar.com *.hotjar.io *.bootstrapcdn.com *.googleapis.com *.typekit.net *.happyfoxchat.com happyfoxchat.com *.socialannex.com *.elfsight.com *.crazyegg.com apps.elfsight.com *.taboola.com *.instacloud.io *.cdninstagram.com *.noibu.com wss://vf.noibu.com/vf wss://input.noibu.com/pv_part *.afterpay.com *.narvar.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src *.crazyegg.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors https://*.milwaukeetool.eu https://viewer.ipaper.io 1
frame-ancestors 'self', frame-ancestors 'self' 1
connect-src 'self' https://*.arcot.com https://api.github.com https://api.mypurecloud.ie https://googleads4.g.doubleclick.net wss://carrier-pigeon.mypurecloud.ie https://bam-cell.nr-data.net https://*.qualtrics.com https://privacyportal.cookiepro.com https://app.altocloud.com https://*.pingdom.net https://*.twitter.com https://stats.g.doubleclick.net https://*.cludo.com https://*.bankofireland.com https://*.bsw-dev.net https://siteintercept.qualtrics.com https://www.google-analytics.com https://gmspri.boi.com https://gkcpri.boi.com https://gkcsec.boi.com https://analytics.google.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com 1
frame-src 'self' *.valero.com *.youtube.com; frame-ancestors 'self'; report-uri /report-csp-violation 1
child-src 'self' https://fast.fonts.net https://www.google.com; 1
default-src 'self' dpm.demdex.net *.canadalife.com; connect-src 'self' *.canadalife.com *.greatwestlife.com maps.googleapis.com dpm.demdex.net greatwestlife.hb.omtrdc.net https://greatwestlife.tt.omtrdc.net pdx-col.eum-appdynamics.com https://www.google-analytics.com https://stats.g.doubleclick.net; script-src 'self' *.canadalife.com assets.adobedtm.com s.ytimg.com www.youtube.com *.vidyard.com www.googletagmanager.com snap.licdn.com www.google-analytics.com bat.bing.com connect.facebook.net static.ads-twitter.com analytics.twitter.com *.linkedin.com stats.g.doubleclick.net maps.googleapis.com p.adsymptotic.com ad.doubleclick.net secure.adnxs.com px.ads.linkedin.com cdn.appdynamics.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' fast.fonts.net *.vidyard.com *.canadalife.com fonts.googleapis.com; font-src 'self' *.canadalife.com *.vidyard.com fonts.googleapis.com fonts.gstatic.com; frame-src 'self' *.vidyard.com gwl.demdex.net *.vimeo.com www.youtube.com; child-src *.canadalife.com greatwestlife.sc.omtrdc.net https://greatwestlife.tt.omtrdc.net; img-src 'self' *.vidyard.com nest-assets.s3-us-west-2.amazonaws.com *.canadalife.com greatwestlife.sc.omtrdc.net https://greatwestlife.tt.omtrdc.net cm.everesttech.net bat.bing.com t.co www.google-analytics.com www.facebook.com stats.g.doubleclick.net maps.gstatic.com www.google.com www.google.ca dpm.demdex.net dev.day.com www.googletagmanager.com px.ads.linkedin.com ad.doubleclick.net secure.adnxs.com analytics.twitter.com p.adsymptotic.com adservice.google.com; 1
default-src 'self' https://cdn.zp.ru https://assets.zendesk.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io ; img-src 'self' *.zp.ru *.zp.ru *.zarplata.ru *.zarplata.ru *.ngs.ru *.ngs.ru https://*.yandex.net https://api-maps.yandex.ru googleads.g.doubleclick.net *.gstatic.com https://www.google-analytics.com https://mc.yandex.ru https://counter.yadro.ru https://an.yandex.ru https://stats.g.doubleclick.net https://www.google.com https://www.google.ru https://stats.seedr.com  data: https://i.giphy.com https://media.giphy.com  https://connect.facebook.net https://analytics.google.com https://www.googletagmanager.com https://www.tns-counter.ru https://top-fwz1.mail.ru https://ad.mail.ru https://vk.com https://www.facebook.com  https://gum.criteo.com  https://assets.zendesk.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io https://my.mail.ru https://supportzarplata.zendesk.com  https://p.adsymptotic.com https://px.ads.linkedin.com https://statsb.nativeroll.tv https://statsa.nativeroll.tv https://*.yandex.ru avatars-fast.yandex.net favicon.yandex.net; media-src *.yandex.net yandex.st yastatic.net https://static.zdassets.com  https://stats.seedr.com ; child-src 'self' *.zarplata.ru https://webvisor.com  https://www.googletagmanager.com; frame-src 'self' https://optimize.google.com https://yandex.ru https://yastatic.net https://www.youtube.com https://reklama.zp.ru https://api-maps.yandex.ru https://st.yandexadexchange.net https://yandexadexchange.net https://creativecdn.com https://vk.com/  https://*.criteo.net https://*.criteo.com  https://assets.zendesk.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io https://www.facebook.com https://connect.facebook.net  *.yandex.ru awaps.yandex.net *.yandexadexchange.net yastatic.net  https://cdn01.nativeroll.tv  https://www.google.com/recaptcha/; style-src 'self' https://optimize.google.com https://fonts.googleapis.com  'unsafe-inline' 'unsafe-eval' yandex.st yastatic.net  'unsafe-inline'; object-src https://reklama.zp.ru; script-src 'self' https://snap.licdn.com https://apis.google.com https://optimize.google.com https://www.googleoptimize.com https://www.google.com https://www.googleadservices.com https://*.tns-counter.ru 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://mc.yandex.ru https://api-maps.yandex.ru https://reklama.zp.ru https://yastatic.net https://an.yandex.ru https://top-fwz1.mail.ru https://ad.mail.ru https://tagmanager.google.com https://vk.com/js/api/openapi.js https://www.googletagservices.com https://adservice.google.ru https://adservice.google.com https://securepubads.g.doubleclick.net  https://*.criteo.net https://*.criteo.com https://cdn.ravenjs.com https://assets.zendesk.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io https://*.facebook.net https://*.facebook.com https://connect.mail.ru https://my2.imgsmail.ru https://static.zdassets.com https://*.maps.yandex.net an.yandex.ru yandex.st yastatic.net mc.yandex.ru  https://stats.seedr.com https://cdn01.nativeroll.tv/js/nr-pixel.min.js  https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://assets.zendesk.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io ; connect-src 'self' https://hashproof.zp.ru wss://kek.zp.ru https://analytics.google.com https://*.zp.ru https://*.zarplata.ru https://sentry.zp.ru https://api.content.zp.ru https://*.zarplata.ru https://top-fwz1.mail.ru https://passport.ngs.ru https://mc.yandex.ru https://www.google-analytics.com https://job42.ru https://ngsrabota.com.ua https://ngsrabota.by https://ngsrabota.kz ws://kek.zp.ru https://vk.com/rtrg  https://api.rabota.ru https://api.hh.ru https://stats.g.doubleclick.net https://*.facebook.com https://supportzarplata.zendesk.com  https://*.zopim.com https://*.zopim.io wss://*.zopim.com https://ekr.zdassets.com https://*.yandex.ru yandex.st yastatic.net  https://stats.seedr.com https://cdn01.nativeroll.tv/js/nr-pixel.min.js ; frame-ancestors 'self' http://webvisor.com https://webvisor.com; upgrade-insecure-requests 1
default-src 'self' blob: http://localhost:5000 ws://localhost:3035 *.clutchprep.com *.intercomcdn.com; img-src * data: blob: https://eu.api.fpjs.io/ https://api.sjpf.io/ https://api.fpjs.io/ https://cdn.fpjs.io/@2/fp.js https://api.reviews.io *.clutchprep.com *.stripe.com *.convertflow.co *.convertflow.com *.intercomcdn.com https://d2yyd1h5u9mauk.cloudfront.net https://web.delighted.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net; font-src 'self' data: https://eu.api.fpjs.io/ https://api.sjpf.io/ https://api.fpjs.io/ https://cdn.fpjs.io/@2/fp.js https://api.reviews.io *.clutchprep.com releases.flowplayer.org fonts.gstatic.com *.intercomcdn.com *.fontawesome.com *.hotjar.com *.wiris.net *.convertflow.co *.convertflow.com *.intercomcdn.com https://web.delighted.com https://*.wistia.com https://d1azc1qln24ryf.cloudfront.net; style-src 'unsafe-inline' 'self' data: https://eu.api.fpjs.io/ https://api.sjpf.io/ https://api.fpjs.io/ https://cdn.fpjs.io/@2/fp.js https://api.reviews.io *.reviews.io d1azc1qln24ryf.cloudfront.net *.reviews.co.uk *.clutchprep.com *.stripe.com fonts.googleapis.com https://unpkg.com *.fontawesome.com *.wiris.net *.convertflow.co *.convertflow.com *.intercomcdn.com https://d2yyd1h5u9mauk.cloudfront.net https://web.delighted.com https://fast.wistia.com; connect-src 'self' https://eu.api.fpjs.io/ https://api.sjpf.io/ https://api.fpjs.io/ https://cdn.fpjs.io/@2/fp.js https://api.reviews.io *.clutchprep.com https://api.stripe.com https://checkout.stripe.com *.pusher.com *.pusherapp.com ws://*.pusherapp.com wss://*.pusherapp.com *.mixpanel.com *.hotjar.io *.hotjar.com *.intercom.io ws://*.intercom.io wss://*.intercom.io *.google-analytics.com *.pinterest.com *.snapchat.com *.doubleclick.net *.facebook.com *.profitwell.com sentry.io *.algolianet.com *.algolia.net *.nr-data.net *.filepicker.io *.wiris.net *.ipdata.co *.convertflow.co *.convertflow.com *.intercomcdn.com wss://*.hotjar.com https://d2yyd1h5u9mauk.cloudfront.net https://web.delighted.com *.litix.io *.sentry.io *.s3.amazonaws.com https://*.wistia.com https://embedwistia-a.akamaihd.net; frame-src 'self' https://eu.api.fpjs.io/ https://api.sjpf.io/ https://api.fpjs.io/ https://cdn.fpjs.io/@2/fp.js https://api.reviews.io *.clutchprep.com https://js.stripe.com https://hooks.stripe.com https://checkout.stripe.com *.filepicker.io *.hotjar.com *.facebook.com *.doubleclick.net *.snapchat.com *.youtube.com recruiterflow.com *.google.com *.wiris.net *.ipdata.co *.convertflow.co *.convertflow.com *.intercomcdn.com https://d2yyd1h5u9mauk.cloudfront.net https://web.delighted.com https://fast.wistia.com https://fast.wistia.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://eu.api.fpjs.io/ https://api.sjpf.io/ https://api.fpjs.io/ https://cdn.fpjs.io/@2/fp.js https://api.reviews.io *.reviews.io *.reviews.co.uk *.clutchprep.com *.pusher.com *.filepicker.io https://js.stripe.com https://checkout.stripe.com d3qxef4rp70elm.cloudfront.net *.hotjar.com *.googletagmanager.com *.app-us1.com *.mxpnl.com *.intercom.io *.intercomcdn.com *.getvero.com google-analytics.com *.google-analytics.com *.googleadservices.com *.twitter.com *.ads-twitter.com *.facebook.net *.doubleclick.net cdnjs.cloudflare.com *.gstatic.com *.youtube.com *.sentry-cdn.com *.pinimg.com *.outbrain.com sc-static.net *.sc-static.net *.trackcmp.net trackcmp.net *.snapchat.com *.newrelic.com dna8twue3dlxq.cloudfront.net *.ytimg.com *.google.com *.jsdelivr.net *.algolia.net *.nr-data.net *.algolianet.com *.maxcdn.com *.wiris.net d2yyd1h5u9mauk.clutchfront.net *.ipdata.co *.convertflow.co *.convertflow.com https://convertflow.co *.googleapis.com *.intercomcdn.com https://d2yyd1h5u9mauk.cloudfront.net https://web.delighted.com https://browser.sentry-cdn.com https://*.wistia.com https://*.wistia.net; report-uri /csp-violation-report-endpoint; 1
default-src 'self' 'unsafe-inline'; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.postnl.nl https://*.postnl.be https://*.spring-gds.com https://*.nexive.it https://www.loginpostnl.net https://*.cldsvc.net https://*.salesforce.com https://*.googleapis.com https://*.google.com https://*.abtasty.com https://*.apsis1.com https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://*.postnl.sogeticloudservices.com https://*.usabilla.com https://www.googletagmanager.com https://www.googleadservices.com https://*.cloudfront.net https://*.innomdc.com https://connect.facebook.net https://platform.twitter.com https://*.linkedin.com https://*.pushcall.com https://*.pusher.com https://www.gstatic.com https://s3.amazonaws.com https://*.ads-twitter.com https://*.doubleclick.net https://*.twitter.com https://cdn.segment.com https://cdn.mxpnl.com https://pi.pardot.com https://*.salesforceliveagent.com https://postnl-frontend-locker.herokuapp.com https://*.hotjar.com https://postnlwebintelligence.s3-eu-west-1.amazonaws.com/analytics_global_new https://*.maglr.com https://quadia.webtvframework.com https://tags.tiqcdn.com/utag/postnl-trial/postnl-eval/dev/utag.js https://tags.tiqcdn.com/; connect-src 'self'  https://*.postnl.nl https://*.postnl.be https://*.spring-gds.com https://*.nexive.it https://services.geodan.nl https://api.adreskenmerken.eu https://*.cldsvc.net https://*.abtasty.com https://dc.services.visualstudio.com https://*.cloudfront.net https://*.abtasty.com https://*.pushcall.com wss://*.pusherapp.com https://*.pusher.com https://postnl.cubonacci.com https://twmmxtqwx0.execute-api.eu-central-1.amazonaws.com https://api.segment.io https://www.facebook.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.usabilla.com https://b54wh2j6xi.execute-api.eu-central-1.amazonaws.com; img-src 'self' data: https://*.postnl.nl https://*.postnl.be https://*.spring-gds.com https://*.nexive.it https://services.geodan.nl https://api.innomdc.com https://*.cloudfront.net https://*.usabilla.com https://*.facebook.com https://*.atdmt.com https://*.doubleclick.net https://*.google.com https://*.google.nl https://*.twitter.com https://*.pinterest.com https://t.co https://*.abtasty.com https://apccdn.apsis1.com https://conv.indeed.com https://*.tradetracker.net https://*.maglr.com; frame-src 'self' https://*.postnl.nl https://*.postnl.be https://*.spring-gds.com https://*.nexive.it https://quadia.webtvframework.com https://*.cloudfront.net https://*.salesforce.com https://*.facebook.net https://*.facebook.com https://*.google.com https://*.twitter.com https://*.googletagmanager.com https://*.doubleclick.net https://ir.q4europe.com https://w.soundcloud.com https://projects.ivorystudio.net https://*.salesforceliveagent.com https://*.hotjar.com https://*.us.mytracking.net https://us.mytracking.net; style-src 'self' 'unsafe-inline' https://*.postnl.nl https://*.postnl.be https://*.spring-gds.com https://*.nexive.it https://*.salesforce.com https://*.apsis1.com https://*.abtasty.com https://*.googleapis.com https://*.cloudfront.net https://*.maglr.com https://*.usabilla.com; font-src 'self' data: https://*.postnl.nl https://*.postnl.be https://*.spring-gds.com https://*.nexive.it https://api.mixpanel.com https://fonts.gstatic.com https://teddytor.abtasty.com https://*.cloudfront.net 1
default-src 'self'; script-src 'self' 'report-sample' disqus.com c.disquscdn.com platform.instagram.com cdnjs.cloudflare.com scotthelme.disqus.com a.disquscdn.com go.disqus.com platform.twitter.com cdn.syndication.twimg.com syndication.twitter.com gist.github.com/ScottHelme/ www.googletagmanager.com www.google-analytics.com js.stripe.com; style-src 'self' 'report-sample' 'unsafe-inline' c.disquscdn.com a.disquscdn.com fonts.googleapis.com cdnjs.cloudflare.com platform.twitter.com assets-cdn.github.com github.githubassets.com; img-src 'self' data: www.gravatar.com links.services.disqus.com referrer.disqus.com a.disquscdn.com cdn.syndication.twimg.com syndication.twitter.com pbs.twimg.com platform.twitter.com abs.twimg.com www.google-analytics.com; child-src www.instagram.com twitter.com fusiontables.googleusercontent.com fusiontables.google.com www.google.com disqus.com www.youtube.com syndication.twitter.com platform.twitter.com www.youtube-nocookie.com js.stripe.com; connect-src 'self' syndication.twitter.com links.services.disqus.com scotthelme.ghost.io; font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com fonts.googleapis.com; form-action 'self' syndication.twitter.com; frame-ancestors 'none'; prefetch-src 'self' c.disquscdn.com disqus.com; object-src 'none'; base-uri 'none'; upgrade-insecure-requests; report-uri https://scotthelme.report-uri.com/r/d/csp/enforce; report-to default 1
frame-ancestors 'self' https://*.preis.de; 1
default-src 'self' *.freshfields.com blob: freshfields.azurewebsites.net https://netdna.bootstrapcdn.com/; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.googletagmanager.com/ https://cdnjs.cloudflare.com  https://cdn.cookielaw.org/  https://code.jquery.com/ https://sdk.passle.net/ https://clientsdk.passle.net/ *.vo.msecnd.net https://maxcdn.bootstrapcdn.com/ https://www.google-analytics.com/ https://analytics.twitter.com/ https://secure.leadforensics.com/ https://snap.licdn.com/ https://static.ads-twitter.com/ https://connect.facebook.net/ https://cdn.tinymce.com https://public.flourish.studio/ https://cdn.flourish.rocks https://play.freshfields.com *.podbean.com/ https://js.createsend1.com/javascript/copypastesubscribeformlogic.js https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js https://www.emailmeform.com/ https://freshfields.amicuscrm.co.uk/;style-src 'unsafe-inline' 'self' https://dl.episerver.net/ https://fonts.googleapis.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com/ https://cdn.tinymce.com/ https://netdna.bootstrapcdn.com/ https://cdn.materialdesignicons.com/ https://freshfields.amicuscrm.co.uk/; font-src 'self' https://fonts.gstatic.com https://cdn.tinymce.com/ https://cdn.materialdesignicons.com https://netdna.bootstrapcdn.com/ data:;connect-src 'self' https://clientapi.passle.net/ https://clientsdk.passle.net/  https://cdn.cookielaw.org https://www.google-analytics.com/ *.services.visualstudio.com https://stats.g.doubleclick.net/ https://privacyportal-eu.onetrust.com/ https://createsend.com//t/getsecuresubscribelink;img-src 'self' *.freshfields.com https://images.passle.net *.freshfields.us *.freshfields.de *.freshfields.hk *.freshfields.jp data: *.podbean.com https://www.google-analytics.com/ https://secure.adnxs.com/ http://code.jquery.com/ https://www.facebook.com/ https://t.co/ *.linkedin.com/ https://cdnjs.cloudflare.com/ https://www.google.com/ads/ga-audiences/ https://www.google.com/ads/ga-audiences* https://freshfields.amicuscrm.co.uk/;worker-src 'self' blob:;frame-src *.podbean.com/ https://public.flourish.studio/ https://flo.uri.sh/ https://play.buto.tv/ https://play.freshfields.com/ https://butoembed.twentythree.net/ https://archive-videos.freshfields.com/ https://www.google.com/ https://embed.buto.tv/ https://www.emailmeform.com/ https://www.youtube.com/ *.freshfields.com *.freshfields.us *.freshfields.hk *.freshfields.jp *.freshfields.de http://ssl.freshfields.com/;media-src *.freshfields.com *.freshfields.us *.freshfields.hk *.freshfields.jp *.freshfields.de *.podbean.com/; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: about: *.adbutler-luxon.com *.adsrvr.org *.cdc.gov *.ads-twitter.com *.bamboohr.com *.cmgdigital.com *.doubleclick.net *.facebook.com *.facebook.net *.feedburner.com *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.jeffersoncms.org *.livestream.com *.marchex.io *.scribd.com *.serving-sys.com *.sharethis.com *.slideshare.net *.tapad.com *.tcms.com *.teletownhall.us *.texmed.org *.tmait.org *.twimg.com *.twitter.com *.vimeo.com *.wufoo.com *.youtube.com *.yudu.com gis.fema.gov http://kff.org http://oig.hhs.gov http://rocket.nwood-kensett.k12.ia.us http://www.ncbi.nlm.nih.gov https://badge.facebook.com https://block.opendns.com https://capwiz.com https://cdn.tinymce.com https://centro.pixel.ad https://clickserv.pixel.ad https://clickserv.sitescout.com https://connect.facebook.net https://cqrcengage.com https://data.healthcare.gov https://dpm.demedex.net https://feedburner.google.com https://fonts.googleapis.com https://fusiontables.googleusercontent.com https://googleads.g.doubleclick.net https://hootsuite.com https://insight.adsrvr.org https://js.adsrvr.org https://match.adsrvr.org https://pixel.sitescout.com https://platform.twitter.com https://player.vimeo.com https://servedbyadbutler.com https://static.addtoany.com https://stats.g.doubleclick.net https://storify.com https://syndication.twitter.com https://t.co https://tags.bluekai.com https://texmed.medbuzz.com https://tma.custhelp.com https://uip.semasio.net https://www.facebook.com https://www.google.com https://www.googleadservices.com https://www.paypalobjects.com https://www.youtube.com pixel-geo.prfct.co public.slidesharecdn.com tag.marinsm.com tagmanager.google.com www.cms.gov www.powr.io *.votervoice.net *.quantserve.com *.quantcount.com *.wakelet.com adbutler-fermion.com https://livestream.com https://vimeo.com wss: *.texmed.org *.nnihcm.org *.infogram.com *.poll-maker.com *.qualtrics.com *.hsforms.net *.hsforms.com https://ql.tc https://www.podbean.com https://open.spotify.com 1
default-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' *.googleapis.com; font-src 'self' fonts.gstatic.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://*.twitter.com https://*.twimg.com https://*.instagram.com; child-src 'self' https://www.youtube.com https://www.euro-area-statistics.org https://www.google.com https://*.twitter.com https://*.twimg.com https://*.instagram.com; img-src 'self' https://*.gstatic.com https://*.googleapis.com https://*.google-analytics.com data:; frame-ancestors 'self' https://*.bportugal.pt https://*.gstatic.com https://*.google.com; frame-src 'self' https://*.google.com https://www.youtube.com 1
frame-ancestors 'self' http://heatmap.brick.tools 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://wb.messengerpeople.com https://static.criteo.net https://*.criteo.com https://ct.pinterest.com https://tpc.googlesyndication.com https://*.zenaps.com https://*.hotjar.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://*.google.co.jp https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.hotjar.com wss://*.hotjar.com https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://www.myprotein.jp https://m.myprotein.jp https://checkout.myprotein.jp https://connect.facebook.net https://ct.pinterest.com https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.cn https://*.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://*.criteo.com https://static.criteo.net https://s.pinimg.com https://tpc.googlesyndication.com https://remote.captcha.com https://platform.twitter.com https://static.ads-twitter.com https://analytics.twitter.com https://*.akamaihd.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.hotjar.com https://*.microsofttranslator.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://twitter.com https://*.baidu.com https://sc-static.net https://www.google.com https://*.google.co.uk https://google.co.uk https://static.ads-twitter.com https://analytics.twitter.com https://www.google.co.jp https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
frame-ancestors 'self' http://orbea.altabox.net https://orbea.altabox.net https://www.wegetit.eu 1
frame-ancestors 'self' https://*.hapara.com/ https://teacherdashboard.com https://*.teacherdashboard.com 1
frame-ancestors 'self' https://www2.imba.com/ https://mwba.org/ https://tasmtb.org/ https://routtcountyriders.org 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.googletagmanager.com *.quantserve.com *.quantcount.com https://src-daa.webpu.sh tagmanager.google.com *.addthis.com *.addthisedge.com player.vimeo.com sjs.bizographics.com/insight.min.js snap.licdn.com *.onetrust.com external.airport.ai; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com *.myfonts.net tagmanager.google.com external.airport.ai; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: external.airport.ai; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com *.quantserve.com stats.g.doubleclick.net *.google.com *.google.ie px.ads.linkedin.com *.xtremepush.com cx.atdmt.com *.onetrust.com *.googleusercontent.com external.airport.ai; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.google.com https://afdac.daa.ie/ dub.innosked.com *.addthis.com https://complaints-eu.emsbk.com/ external.airport.ai; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://www.facebook.com/tr/ *.xtremepush.com *.onetrust.com stats.g.doubleclick.net external.airport.ai; 1
worker-src https: 'self' https://media.forbiddenplanet.com www.googletagmanager.com www.googlecommerce.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.instagram.com *.pinterest.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.sagepay.com *.surveymonkey.com *.bootstrapcdn.com *.cloudfront.net *.akamaihd.net data:; img-src https: 'self' https://media.forbiddenplanet.com data: www.gravatar.com tripadvisor.com unpkg.com openstreetmap.com *.tile.openstreetmap.com dyn0.media.forbiddenplanet.com dyn.media.forbiddenplanet.com www.googletagmanager.com www.googlecommerce.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.instagram.com *.pinterest.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.sagepay.com *.surveymonkey.com *.bootstrapcdn.com *.cloudfront.net *.akamaihd.net; style-src *.cloudfront.net www.googletagmanager.com *.bootstrapcdn.com www.google-analytics.com *.twimg.com unpkg.com fonts.googleapis.com *.twitter.com *.facebook.net themes.googleusercontent.com *.youtu.be storage.googleapis.com www.googlecommerce.com https://media.forbiddenplanet.com https: *.surveymonkey.com *.akamaihd.net fonts.gstatic.com *.googleapis.com *.facebook.com 'self' 'unsafe-inline' *.sagepay.com *.pinterest.com *.instagram.com *.gstatic.com *.youtube.com data: *.google.com; default-src https: 'self' https://media.forbiddenplanet.com data:; font-src https: 'self' https://media.forbiddenplanet.com data: fonts.googleapis.com storage.googleapis.com fonts.gstatic.com themes.googleusercontent.com *.bootstrapcdn.com; connect-src openstreetmap.com *.cloudfront.net www.googletagmanager.com *.bootstrapcdn.com www.google-analytics.com *.twimg.com unpkg.com *.twitter.com fonts.googleapis.com *.facebook.net themes.googleusercontent.com *.youtu.be storage.googleapis.com www.googlecommerce.com https://media.forbiddenplanet.com dyn0.media.forbiddenplanet.com https: *.surveymonkey.com *.akamaihd.net fonts.gstatic.com wss://forbiddenplanet.com dyn.media.forbiddenplanet.com *.googleapis.com *.facebook.com 'self' *.sagepay.com *.pinterest.com www.gravatar.com *.instagram.com tripadvisor.com *.gstatic.com *.youtube.com data: *.google.com *.tile.openstreetmap.com; frame-ancestors 'none'; script-src https: 'self' https://media.forbiddenplanet.com data: www.googletagmanager.com www.googlecommerce.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.instagram.com *.pinterest.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.sagepay.com *.surveymonkey.com *.bootstrapcdn.com *.cloudfront.net *.akamaihd.net 'sha256-iUCYWFJNGmxVtXXLJCfYcdVVFoEfD6ifT+a3BH+cLt0=' 'nonce-Jqpgx/YTednUqKX5DWvUCw=='; frame-src https: 'self' https://media.forbiddenplanet.com www.googletagmanager.com www.googlecommerce.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.instagram.com *.pinterest.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.sagepay.com *.surveymonkey.com *.bootstrapcdn.com *.cloudfront.net *.akamaihd.net data:; report-uri /@csp-report 1
default-src 'self';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://cdn.jsdelivr.net/;font-src 'self' https://fonts.gstatic.com/ https://cdn.jsdelivr.net/;img-src 'self' data: https://www.google-analytics.com/ https://www.googletagmanager.com/ https://stats.g.doubleclick.net/;script-src 'self' https://www.google-analytics.com/ https://ssl.google-analytics.com/ https://www.googletagmanager.com/;connect-src 'self' https://www.google-analytics.com/ https://stats.g.doubleclick.net/ o372043.ingest.sentry.io o372043.ingest.sentry.io;frame-ancestors 'self';report-uri https://o372043.ingest.sentry.io/api/5193500/security/?sentry_key=a76d61749b824d8fa8ad84eee7ecc882;upgrade-insecure-requests 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-WyHxEZyImnwll7XJ7KVWeQ' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
base-uri 'none'; object-src 'none'; script-src https://www.zbrushcentral.com/logs/ https://www.zbrushcentral.com/sidekiq/ https://www.zbrushcentral.com/mini-profiler-resources/ https://www.zbrushcentral.com/assets/ https://www.zbrushcentral.com/brotli_asset/ https://www.zbrushcentral.com/extra-locales/ https://www.zbrushcentral.com/highlight-js/ https://www.zbrushcentral.com/javascripts/ https://www.zbrushcentral.com/plugins/ https://www.zbrushcentral.com/theme-javascripts/ https://www.zbrushcentral.com/svg-sprite/ https://www.google-analytics.com/analytics.js https://unpkg.com/masonry-layout@4/dist/masonry.pkgd.min.js https://unpkg.com/imagesloaded@4/imagesloaded.pkgd.min.js https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.4.1/slick.min.js https://pixologic.com/zbc/masonry.min.js http://pixologic.com/zbc/imagesloaded.min.js; worker-src 'self' blob: 1
default-src 'self' 'unsafe-inline' https://secure-ds.serving-sys.com https://*.wogaa.sg https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/; script-src 'self' data: https://sp.analytics.yahoo.com/ https://tr.outbrain.com/ https://vimeo.com/ https://www.vimeo.com/ cdn.taboola.com/ trc.taboola.com/ https://amplify.outbrain.com/ https://s.yimg.com/ https://s.ytimg.com/ https://*.wogaa.sg https://assets.adobedtm.com/ https://www.youtube.com https://tagmanager.google.com http://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://secure-ds.serving-sys.com https://bs.serving-sys.com https://connect.facebook.net/ https://assets.dcube.cloud/ 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://www.googletagmanager.com https://cds.taboola.com/ https://www.gstatic.com https://ssl.gstatic.com https://tr.outbrain.com https://wogadobeanalytics.sc.omtrdc.net/ https://cm.everesttech.net/  https://dpm.demdex.net/ https://tagmanager.google.com https://developers.onemap.sg https://maps-a.onemap.sg  https://maps-b.onemap.sg https://maps-c.onemap.sg dpm.demdex.net cm.everesttech.net wogadobeanalytics.sc.omtrdc.net https://s3-ap-southeast-1.amazonaws.com https://s3.amazonaws.com  https://cm.g.doubleclick.net https://www.google.com.sg http://www.healthhub.sg  https://www.google.com https://stats.g.doubleclick.net https://img.youtube.com https://maps.gstatic.com https://www.google-analytics.com https://app.sttarter.com:9000 https://ssl.sttarter.com:9000  http://app.sttarter.com:9000 http://ssl.sttarter.com:9000 https://ssl.sttarter.com:9443 https://facebook.com data:; style-src 'self' https://tagmanager.google.com https://assets.wogaa.sg/fonts/ https://fonts.googleapis.com data: 'unsafe-inline' 'unsafe-eval'; font-src 'self' https://fonts.gstatic.com https://assets.wogaa.sg/fonts/ data: fonts.googleapis.com 'unsafe-inline'; connect-src 'self' https://www.google.com/ https://www.google-analytics.com https://stats.g.doubleclick.net/ https://trc-events.taboola.com/ https://vimeo.com/ https://www.vimeo.com/ https://www.facebook.com/ https://analytics.google.com/ https://prodigious.imailxpress.com https://trc.taboola.com/ https://s.yimg.com/ https://*.wogaa.sg https://tagmanager.google.com  https://www.healthhub.sg http://www.healthhub.sg dpm.demdex.net wogadobeanalytics.sc.omtrdc.net secure-ds.serving-sys.com 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https://9248167.fls.doubleclick.net/ https://www.player.vimeo.com/ https://www.vimeo.com/ https://player.vimeo.com/ https://vimeo.com/ web.facebook.com connect.facebook.net wogaa.demdex.net/ https://8416677.fls.doubleclick.net https://www.youtube.com  https://tags.tiqcdn.com https://bid.g.doubleclick.net https://www.youtube.com https://syndication.twitter.com https://platform.twitter.com https://www.google.com 1
frame-ancestors 'self' *.virginmoney.com; 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://becominghuman.ai https://*.becominghuman.ai https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' 'unsafe-inline' *.noyb.eu data:; script-src 'self' 'unsafe-inline' *.noyb.eu; frame-src 'self' *.noyb.eu *.dialog-mail.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.puzzel.com *.vps.net *.bing.com *.twitter.com *.linkedin.com *.google.com *.addthisedge.com *.prfct.co *.addthis.com *.getclicky.com *.facebook.net *.marinsm.com *.hotjar.com *.gstatic.com *.googletagmanager.com *.jquery.com *.trustpilot.com *.uk2group.com *.google-analytics.com *.pingdom.net *.qualtrics.com *.visualwebsiteoptimizer.com; img-src data: 'self' *.uk2group.com *.puzzel.com *.bing.com *.adnxs.com *.pubmatic.com *.marinsm.com *.yahoo.com *.openx.net *.prfct.co *.vps.net *.facebook.com *.gravatar.com *.visualwebsiteoptimizer.com *.google-analytics.com *.doubleclick.net *.pingdom.net *.google.com; font-src 'self' data: *.vps.net *.gstatic.com maxcdn.bootstrapcdn.com *.puzzel.com *.visualwebsiteoptimizer.com; style-src 'self' *.vps.net *.bootstrapcdn.com *.googleapis.com *.puzzel.com *.visualwebsiteoptimizer.com 'unsafe-inline'; connect-src livechat.uk2group.com *.addthis.com dev.visualwebsiteoptimizer.com *.puzzel.com *.twitter.com *.trustpilot.com *.pingdom.net *.hotjar.com *.vps.net wss://ws4.hotjar.com 'self'; child-src *.vps.net *.uk2group.com *.puzzel.com *.visualwebsiteoptimizer.com; object-src 'self' *.vps.net *.puzzel.com *.visualwebsiteoptimizer.com; frame-src *.google.com *.uk2group.com *.twitter.com *.addthis.com *.puzzel.com *.trustpilot.com *.facebook.com *.hotjar.com; default-src 'self' *.puzzel.com *.vps.net; media-src data: *.puzzel.com; 1
img-src 'self' data: https:; base-uri 'self'; frame-src https://optimize.google.com https://insight.adsrvr.org https://www.youtube.com https://vars.hotjar.com 1
connect-src 'self' *.intercom.io *.intercomcdn.com *.facebook.com blob: *.shopto.net ws://127.0.0.1:35729 *.trustedsite.com *.google-analytics.com stats.g.doubleclick.net *.sift.com hexagon-analytics.com *.zip.co zip.co *.paymentexpress.com *.partpay.co.nz *.partpay.co.uk *.vimeo.com *.ywxi.net *.klarnaevt.com *.paypalobjects.com *.braintreegateway.com *.braintree-api.com partpayassets.blob.core.windows.net *.nr-data.net *.kaptcha.com *.paypal.com *.cardinalcommerce.com *.amazonaws.com *.braintree-api.com *.braintree.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.klarnauserservices.com *.amazon.com *.amazonpay.com *.payments-amazon.com *.amazon.co.uk;default-src 'self' https://www.shopto.net *.monzo.com *.securesuite.co.uk www.clicksafe.lloydstsb.com *.arcot.com *.barclaycard.co.uk *.barclays.co.uk www.safekey.americanexpress.com *.3dsecure.no *.mycardsecure.com *.cxmlpg.com *.sift.com hexagon-analytics.com *.zip.co zip.co *.paymentexpress.com *.partpay.co.nz *.partpay.co.uk *.braintreegateway.com *.braintree-api.com partpayassets.blob.core.windows.net *.nr-data.net *.kaptcha.com *.paypal.com *.cardinalcommerce.com *.amazonaws.com *.braintree-api.com *.braintree.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.klarnauserservices.com *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.shopto.net *.amazon.com *.amazonpay.com *.payments-amazon.com *.amazon.co.uk;frame-ancestors *.shopto.net *.sift.com hexagon-analytics.com *.zip.co zip.co *.paymentexpress.com *.partpay.co.nz *.partpay.co.uk *.braintreegateway.com *.braintree-api.com partpayassets.blob.core.windows.net *.nr-data.net *.kaptcha.com *.paypal.com *.cardinalcommerce.com *.amazonaws.com *.braintree-api.com *.braintree.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.klarnauserservices.com https://www.facebook.com *.amazon.com *.amazonpay.com *.payments-amazon.com *.amazon.co.uk;font-src 'self' data: *.intercom.io *.intercomcdn.com *.icons8.com *.facebook.com *.cloudfront.net *.sift.com https://hexagon-analytics.com *.zip.co *.paymentexpress.com *.partpay.co.nz *.partpay.co.uk *.vimeo.com *.ywxi.net *.klarnaevt.com *.paypalobjects.com *.braintreegateway.com *.braintree-api.com partpayassets.blob.core.windows.net *.nr-data.net *.kaptcha.com *.paypal.com *.cardinalcommerce.com *.amazonaws.com *.braintree-api.com *.braintree.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.klarnauserservices.com *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.shopto.net;media-src 'self' https://www.shopto.net *.sift.com https://hexagon-analytics.com *.zip.co *.paymentexpress.com *.partpay.co.nz *.partpay.co.uk *.braintreegateway.com *.braintree-api.com partpayassets.blob.core.windows.net *.nr-data.net *.kaptcha.com *.paypal.com *.cardinalcommerce.com *.amazonaws.com *.braintree-api.com *.braintree.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.klarnauserservices.com *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.shopto.net *.amazon.com *.amazonpay.com *.payments-amazon.com *.amazon.co.uk;img-src 'self' blob: https://www.shopto.net data: *.google.co.uk *.google.com *.sift.com https://hexagon-analytics.com *.zip.co *.paymentexpress.com *.partpay.co.nz *.partpay.co.uk *.braintreegateway.com *.braintree-api.com partpayassets.blob.core.windows.net *.nr-data.net *.kaptcha.com *.paypal.com *.cardinalcommerce.com *.amazonaws.com *.braintree-api.com *.braintree.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.klarnauserservices.com https://*.imgur.com *.ssl-images-amazon.com https://*.google-analytics.com https://d23yuld0pofhhw.cloudfront.net *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.shopto.net *.awin1.com *.dwin1.com *.amazon.com *.amazonpay.com *.payments-amazon.com *.amazon.co.uk;frame-src 'self' https://www.computop-paygate.com https://*.mixer.com https://*.twitch.tv https://*.vimeo.com https://*.partpay.co.uk https://*.sift.com https://hexagon-analytics.com https://*.zip.co zip.co https://*.paymentexpress.com *.monzo.com *.securesuite.co.uk www.clicksafe.lloydstsb.com *.arcot.com *.barclaycard.co.uk *.barclays.co.uk www.safekey.americanexpress.com *.3dsecure.no *.mycardsecure.com *.cxmlpg.com https://www.dc-solution.de https://2017.dc-test.de https://www.shopto.net/userdata/files/WelcomeToShopTo.mp4 https://*.amazon.com https://*.payments-amazon.com https://*.trustpilot.com https://*.dwin1.com *.awin1.com https://*.intercom.io https://*.intercomcdn.com *.facebook.com *.nr-data.net *.sift.com hexagon-analytics.com *.zip.co zip.co *.paymentexpress.com *.partpay.co.nz *.partpay.co.uk *.braintreegateway.com *.braintree-api.com partpayassets.blob.core.windows.net *.nr-data.net *.kaptcha.com *.paypal.com *.cardinalcommerce.com *.amazonaws.com *.braintree-api.com *.braintree.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.klarnauserservices.com *.youtube.com *.google.com *.payments-amazon.co.uk *.amazon.com *.amazonpay.com *.payments-amazon.com *.amazon.co.uk;object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.shopto.net *.vimeocdn.com *.trustpilot.com *.dwin1.com *.freespee.com *.intercom.io *.intercomcdn.com *.sift.com hexagon-analytics.com *.zip.co zip.co *.paymentexpress.com *.partpay.co.nz *.partpay.co.uk *.facebook.com *.dekopay.com *.newrelic.com *.nr-data.net *.awin1.com *.queue-it.net *.openpay.com.au *.sift.com hexagon-analytics.com *.zip.co zip.co *.paymentexpress.com *.partpay.co.nz *.partpay.co.uk *.vimeo.com *.ywxi.net *.klarnaevt.com *.paypalobjects.com *.braintreegateway.com *.braintree-api.com partpayassets.blob.core.windows.net *.nr-data.net *.kaptcha.com *.paypal.com *.cardinalcommerce.com *.amazonaws.com *.braintree-api.com *.braintree.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.klarnauserservices.com *.ssl-images-amazon.com *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.shopto.net *.amazon.com *.amazonpay.com *.payments-amazon.com *.amazon.co.uk;style-src 'self' 'unsafe-inline' *.sift.com hexagon-analytics.com *.zip.co zip.co *.paymentexpress.com *.partpay.co.nz *.partpay.co.uk *.braintreegateway.com *.braintree-api.com partpayassets.blob.core.windows.net *.nr-data.net *.kaptcha.com *.paypal.com *.cardinalcommerce.com *.amazonaws.com *.braintree-api.com *.braintree.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.klarnauserservices.com *.icons8.com *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.shopto.net *.shopto.net *.amazon.com *.amazonpay.com *.payments-amazon.com *.amazon.co.uk; 1
default-src 'self'; connect-src 'self' https://api.ready.mobi; font-src 'self'; frame-src https://api.ready.mobi; img-src 'self'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com; style-src 'self' 'unsafe-inline' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; 1
script-src 'self' *.wlresources.com *.acwebconnecting.com http://*.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com/ https://*.gstatic.com https://mpsnare.iesnare.com https://d5nxst8fruw4z.cloudfront.net https://d31qbv1cthcecs.cloudfront.net https://www.google.com *.xlovecam.com 'unsafe-inline' 'unsafe-eval' https://bat.bing.com; connect-src 'self' www.xlovecam.com:9080 www.xlovecam.com:9443 *.wlresources.com wss://*.wlresources.com *.acwebconnecting.com http://*.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com/ https://mpsnare.iesnare.com wss://mpsnare.iesnare.com ws://stt01.wlresources.com wss://stt01.wlresources.com ws://www.xlovecam.com wss://www.xlovecam.com https://bat.bing.com; frame-src 'self' https://*.allopass.com http://*.allopass.com https://*.acwebconnecting.com https://www.google.com; worker-src 'self' blob:; report-uri /en/jserror/?ts=1609212841 1
img-src https://*; 1
frame-ancestors https://*.rue21.com 1
object-src 'self' data: blob: https://*.atende.net https://*.ipm.com.br https://nfs-e.net; block-all-mixed-content; form-action 'self' *.nfs-e.net https://*.ipm.com.br https://*.atende.net https://*.acesso.gov.br; frame-ancestors 'self' https://*.nfs-e.net https://*.ipm.com.br https://*.atende.net; 1
default-src 'self' data: blob: *.gls.freshfiles.de *.api.here.com *.gls-group.eu www.googletagmanager.com www.google-analytics.com  *.bing.com  *.gls-pakete.de tagmanager.google.com ssl.gstatic.com www.gstatic.com googleads.g.doubleclick.net *.googleadservices.com *.google.com *.google.de *.google.at *.google.ch *.doubleclick.net www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.gls.freshfiles.de www.googletagmanager.com www.google-analytics.com *.bing.com  *.gls-pakete.de tagmanager.google.com *.gls-group.eu www.google.com www.google.de *.googleadservices.com  googleads.g.doubleclick.net connect.facebook.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: tagmanager.google.com fonts.googleapis.com; frame-src 'self' data: blob: *.gls.freshfiles.de *.api.here.com *.gls-group.eu *.youtube.com *.youtube-nocookie.com *.gls-pakete.de; font-src 'self' data: blob: *.gls.freshfiles.de *.api.here.com *.gls-group.eu  *.gls-pakete.de fonts.gstatic.com; frame-ancestors 'self' 1
frame-ancestors 'self' http://www.philips.com.sg *.philips.com *.philips.com.sg 1
style-src points.com 'self' 'unsafe-inline'; default-src 'self' points.com static.smartrecruiters.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com stats.g.doubleclick.net wallet.points.com www.points.com fonts.gstatic.com; font-src 'self' data points.com fonts.gstatic.com https://points.com; frame-ancestors 'self' points.com https://www.points.com; img-src 'self' data data: points.com stats.g.doubleclick.net wallet.points.com www.google-analytics.com www.googletagmanager.com www.points.com www.gstatic.com points-ebgt.s3.amazonaws.com s3.amazonaws.com; connect-src 'self' stats.g.doubleclick.net api.smartrecruiters.com www.google-analytics.com; script-src-elem 'self' data data: 'unsafe-inline' points.com consent.cookiebot.com static.smartrecruiters.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com; script-src points.com consent.cookiebot.com static.smartrecruiters.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com 'self'; style-src-elem 'self' 'unsafe-inline' points.com; child-src www.googletagmanager.com; 1
default-src 'self'; script-src  'self'   'unsafe-inline'   'unsafe-eval'   *.googleapis.com   *.gstatic.com   www.google.com   *.google-analytics.com   apis.google.com   tagmanager.google.com   www.googletagmanager.com   connect.facebook.net   ajax.aspnetcdn.com   www.youtube.com/iframe_api   platform.twitter.com   syndication.twitter.com/   s.ytimg.com   publish.twitter.com   *.twimg.com   platform.linkedin.com   platform.stumbleupon.com/1/widgets.js   dec.azureedge.net/   munchkin.marketo.net   *.eloqua.com   js.hs-scripts.com   js.hs-analytics.net   *.en25.com   cdn.ampproject.org   code.jquery.com   maxcdn.bootstrapcdn.com   *.hawksearch.com   *.hawksearch.net   widget.surveymonkey.com   e.infogr.am   e.infogram.com   *.hotjar.com; style-src 'self'   'unsafe-inline'   *.googleapis.com   *.gstatic.com   tagmanager.google.com   www.googletagmanager.com   netdna.bootstrapcdn.com   kendo.cdn.telerik.com   www.google.com   dec.azureedge.net   platform.twitter.com/css/   *.twimg.com   maxcdn.bootstrapcdn.com   *.hawksearch.com   *.hawksearch.net   widget.surveymonkey.com   e.infogr.am   e.infogram.com   *.hotjar.com; font-src  'self'   fonts.gstatic.com   kendo.cdn.telerik.com   netdna.bootstrapcdn.com   *.hotjar.com  data:;  ; img-src  'self'   *.gstatic.com   *.googleapis.com   *.google-analytics.com   tagmanager.google.com   www.googletagmanager.com   platform.tumblr.com   web.facebook.com   www.facebook.com   delicious.com   www.redditstatic.com   www.linkedin.com   syndication.twitter.com   static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png   dec.azureedge.net   dec.sitefinity.com   pbs.twimg.com   platform.twitter.com/css/   *.twimg.com   data:   blob:   *.eloqua.com   track.hubspot.com   widget.surveymonkey.com   e.infogr.am   e.infogram.com   *.hotjar.com; media-src 'self' data: blob:; child-src  'self'   platform.twitter.com/   syndication.twitter.com/   www.youtube.com/   www.youtube-nocookie.com/  player.vimeo.com/   w.soundcloud.com/   apis.google.com   accounts.google.com   staticxx.facebook.com   www.facebook.com   www.google.com   web.facebook.com   badge.stumbleupon.com   widget.surveymonkey.com   e.infogr.am   e.infogram.com   *.hotjar.com; connect-src  'self'   www.google.com   accounts.google.com   tagmanager.google.com   www.googletagmanager.com   *.google-analytics.com   dec.sitefinity.com   *.mktoresp.com   *.hawksearch.net   *.hawksearch.com   widget.surveymonkey.com   e.infogr.am   e.infogram.com   *.hotjar.com; 1
frame-ancestors imgyukle.com i.imgyukle.com googletagmanager.com google-analytics.com ajax.cloudflare.com; 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=HK&lang=zh-Hant-HK&device=desktop&yrid=dfa821hfullf9&partner=; 1
frame-ancestors https://*.fidelity.com/ https://*.adobe.com/ http://*.fidelitycharitable.org/ https://*.fidelitycharitable.org/ https://*.fidelity.com 'self'; 1
frame-ancestors 'self' https://www.bodas.net https://comunidad.bodas.net 1
frame-ancestors http://*.butlercc.edu; 1
img-src 'self' *.openstreetmap.org static.demarches-simplifiees.fr *.cloud.ovh.net stats.data.gouv.fr * data: blob:; script-src 'self' stats.data.gouv.fr *.sendinblue.com *.crisp.chat crisp.chat *.sibautomation.com sibautomation.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com code.jquery.com 'unsafe-eval' 'unsafe-inline' blob:; style-src 'self' *.crisp.chat crisp.chat cdn.jsdelivr.net maxcdn.bootstrapcdn.com 'unsafe-inline'; connect-src 'self' wss://*.crisp.chat *.crisp.chat *.demarches-simplifiees.fr in-automate.sendinblue.com app.franceconnect.gouv.fr sentry.io geo.api.gouv.fr api-adresse.data.gouv.fr openmaptiles.geo.data.gouv.fr openmaptiles.github.io tiles.geo.api.gouv.fr wxs.ign.fr; default-src 'self' data: blob: 'report-sample' fonts.gstatic.com in-automate.sendinblue.com player.vimeo.com app.franceconnect.gouv.fr sentry.io static.demarches-simplifiees.fr *.crisp.chat crisp.chat *.crisp.help *.sibautomation.com sibautomation.com data 1
frame-ancestors 'self' http://nowanimes.com https://www.nowanimes.com/ http://trueliketop.org https://tecnoatual.com https://www.legiaotec.club https://tectecno.com/; 1
base-uri 'self'; default-src 'self'; script-src 'nonce-J6I38p6V4b5hEegGHRrOjPkAqESrP2di' 'strict-dynamic' 'unsafe-inline' https: http: https://stats.g.doubleclick.net https://*.google-analytics.com https://www.gstatic.com https://www.googletagmanager.com https://www.youtube.com; object-src 'none'; img-src 'self' data: https://*.googleapis.com https://maps.gstatic.com https://www.google.com https://*.googleusercontent.com https://*.google-analytics.com https://stats.g.doubleclick.net https://ssl.gstatic.com https://www.gstatic.com https://storage.googleapis.com https://*.ggpht.com https://www.googletagmanager.com https://i.ytimg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://www.googleapis.com https://securetoken.googleapis.com https://accounts.google.com https://www.gstatic.com https://*.google-analytics.com https://stats.g.doubleclick.net; frame-src 'self' https://www.youtube.com https://policies.google.com https://*.doubleclick.net; media-src 'self';  report-uri https://csp.withgoogle.com/csp/gweb-prod-campus-k-frontend/d210aa5e; 1
frame-ancestors 'self' http://www.juegosjuegos.ws 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://app.mouseflow.com https://eu.mouseflow.com https://cdn.mouseflow.com https://s2.adform.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.googletagmanager.com *.danskebank.dk https://assets.adobedtm.com https://snap.licdn.com https://www.linkedin.com https://px.ads.linkedin.com maps.googleapis.com fonts.googleapis.com imasdk.googleapis.com fonts.gstatic.com maps.gstatic.com https://android.com https://windowsphone.com play2.qbrick.com *.dna.qbrick.com danskebank.112.2o7.net www.facebook.com staticxx.facebook.com connect.facebook.net cdn.tt.omtrdc.net danskebank.tt.omtrdc.net https://dpm.demdex.net https://cloud-emea.analytics-egain.com https://analytics.analytics-egain.com https://track.adform.net https://linkmaker.itunes.apple.com *.qualtrics.com https://eum.danskebank.com https://owner-service-dev.sunday.dk https://api.june.dk https://api.test.june.dk syst-services.sunday.dk services.sunday.dk https://beregnerservice.klogem2.dk; object-src 'self' *.danskebank.dk video.qbrick.com; frame-src 'self' https://9821160.fls.doubleclick.net https://authorize.omniture.com https://sitecatalyst.omniture.com *.demdex.net *.danskebank.dk https://priips.danskebank.com https://www.danskeinvest.dk https://android.com https://windowsphone.com video.qbrick.com *.danid.dk https://www.google.com www.facebook.com staticxx.facebook.com web.facebook.com https://analytics.analytics-egain.com https://track.adform.net https://linkmaker.itunes.apple.com *.qualtrics.com https://onlineapi.danskenet.com:8600 https://app.sli.do; 1
script-src 'unsafe-inline' https:; img-src https: data:; object-src 'none' 1
connect-src data: https: *.hotjar.com *.hotjar.io wss://*.hotjar.com;                               default-src https: *.hotjar.com *.hotjar.io;              worker-src * blob:;                                                                media-src * blob:;             img-src * data:;             frame-src https: *.hotjar.com *.hotjar.io;               font-src 'self' data: *.hotjar.com *.hotjar.io *.azurewebsites.net cohrcdn.azureedge.net *.gstatic.com *.google.com *.doubleclick.net *.coherent.com *.google-analytics.com;              script-src *.facebook.net *.hotjar.com *.hotjar.io *.searchcdn.com addsearch.com *.addsearch.com *.gstatic.com *.google.com *.googletagmanager.com *.driftt.com *.azurewebsites.net cohrcdn.azureedge.net geoip-db.com *.wistia.net *.wistia.com *.googleapis.com *.resultspage.com *.coherent.com *.transifex.com  *.pardot.com *.google-analytics.com *.msecnd.net 'unsafe-eval' 'unsafe-inline';              style-src blob: *.googleapis.com *.google.com *.google-analytics.com *.cloudfront.net *.addsearch.com *.driftt.com *.azurewebsites.net cohrcdn.azureedge.net *.coherent.com *.resultspage.com *.transifex.com *.pardot.com  'unsafe-inline'; 1
default-src 'self' https://*.ufone.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://connect.facebook.net https://*.fontawesome.com https://*.bootstrapcdn.com https://cdn-akamai.mookie1.com https://*.googleadservices.com https://*.doubleclick.net https://*.google.com https://*.cloudflare.com https://*.doubleclick.net https://*.gstatic.com https://*.unpkg.com https://bankalfalah.gateway.mastercard.com https://*.datatables.net https://code.jquery.com https://*.googleapis.com https://*.tiqcdn.com; img-src 'self' data: https://*.google-analytics.com https://*.facebook.com https://ufone.syntecx.org https://ufonecloud.syntracx.com https://*.ufone.com https://*.doubleclick.net https://*.google.com https://*.google.com.pk https://*.datatables.net https://code.jquery.com https://*.doubleclick.net https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.gravatar.com https://*.w.org; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.cloudflare.com https://*.bootstrapcdn.com https://*.fontawesome.com https://*.unpkg.com https://*.datatables.net https://code.jquery.com; font-src 'self' data: https://*.googleusercontent.com https://*.gstatic.com https://*.cloudflare.com https://*.fontawesome.com https://*.unpkg.com; frame-src https://*.facebook.com https://*.ufone.com https://*.google.com https://*.doubleclick.net https://bankalfalah.gateway.mastercard.com https://*.youtube.com https://*.tiqcdn.com; object-src 'none' 1
default-src 'self';    style-src 'unsafe-inline'        https://personalexcellence.co        https://*.googleapis.com        https://*.cloudflare.com        https://*.fontawesome.com        https://*.convertbox.com        http://*.convertbar.com        https://*.disquscdn.com        https://*.bootstrapcdn.com;    font-src        data:        https://personalexcellence.co        https://*.fontawesome.com        https://*.convertbox.com        https://app.convertbar.com        https://fonts.gstatic.com        https://*.bootstrapcdn.com;    img-src *        data:;    media-src        https://personalexcellence.co        *.libsyn.com        http://*.libsyn.com;    connect-src        https://personalexcellence.co        https://*.statcounter.com        http://*.google-analytics.com        https://*.googlesyndication.com        https://*.convertbox.com        https://app.convertbar.com        https://*.convertkit.com        https://*.fomo.com        http://*.unsplash.com;    frame-src        https://personalexcellence.co        https://*.google.com        https://*.doubleclick.net        https://*.googlesyndication.com        https://*.youtube.com        https://*.youtube-nocookie.com        https://*.convertbox.com        https://disqus.com        https://www.speakpipe.com;    script-src 'unsafe-inline' 'unsafe-eval'         * ; 1
frame-ancestors https://www.leogallery.cc 1
frame-ancestors 'self' https://*.cae.plexusvirtual.com https://*.caeoneworld2020.com http://3.23.73.238; 1
default-src https: blob: data: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self' *.casinomodule.com *.playngonetwork.com;img-src https: blob: data:;font-src https: data:;connect-src https: wss:;worker-src https: blob:; 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=CA&lang=en-CA&device=desktop&yrid=1u0ul6dfulgp9&partner=; 1
style-src smurfitkappa.concludis.de *.cookiebot.com fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; 1
default-src * data: 'unsafe-eval' 'unsafe-inline'; img-src * 'self' blob: 'unsafe-eval' 'unsafe-inline' data: https: 1
default-src https://*;                   script-src 'unsafe-inline' https://* 'unsafe-eval' https://*.roberts.edu;                   style-src 'unsafe-inline' https://*.roberts.edu https://stackpath.bootstrapcdn.com/ https://kit-free.fontawesome.com https://maxcdn.bootstrapcdn.com https://www.google.com/cse https://fonts.googleapis.com https://use.fontawesome.com https://api2.libanswers.com https://bbox.blackbaudhosting.com/ https://code.jquery.com/ https://widgets.ebscohost.com https://support.ebscohost.com https://cdn.jsdelivr.net 1
frame-ancestors https://www.enelx.com https://d3eepfzwqopgtx.cloudfront.net https://d13hhoqz1xnrhs.cloudfront.net https://yourban.enelx.com 1
script-src-elem 'self' https://www.profamilia.de https://statistik.profamilia.de 'unsafe-inline' 1
frame-ancestors *.mmbang.com 1
frame-ancestors 'self' *.cruiseamerica.com *.bigyam.com *.here.com 1
default-src 'self' https: http:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; style-src 'self' 'unsafe-inline' https: http:; img-src 'self' data: https: http:; frame-ancestors 'self' https://www.suny.edu http://a.cms.omniupdate.com; reflected-xss block; 1
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=index&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=aed2e353-22b9-4f0a-8839-cd1a57a7275d 1
frame-ancestors 'self' https://eatbook.sg https://*.thesmartlocal.com https://zula.sg; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://mc.yandex.ru http://mc.yandex.ru http://platform.twitter.com https://platform.twitter.com https://connect.ok.ru http://connect.ok.ru  *.google-analytics.com  *.gstatic.com *.google.com http://reformal.ru  *.mail.ru *.youtube.com *.ytimg.com *.cackle.me http://cackle.me https://cackle.me http://my2.imgsmail.ru http://forumok.disqus.com *.disquscdn.com http://disgusting.ru https://forumok.com; report-uri /collector.php 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org cdn.icontentall.co.uk *.googletagmanager.com *.google.com http://tagmanager.google.com https://tagmanager.google.com http://tagmanager.google.com/debug* https://tagmanager.google.com/debug* *.jquery.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com *.youtube.com; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ http://www.youtube.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.google.com; connect-src 'self' accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com https://www.google-analytics.com; 1
frame-ancestors 'self' https://*.tacklewarehouse.com; 1
default-src 'self' https://fonts.gstatic.com https://www.gstatic.com:443; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://platform.twitter.com:443 https://www.gstatic.com:443; style-src 'self' 'unsafe-inline' https://www.gstatic.com:443 https://fonts.googleapis.com; frame-src https://platform.twitter.com:443; img-src 'self' data: https://syndication.twitter.com:443; object-src 'none' 1
base-uri 'none';, connect-src 'none';, font-src 'none';, form-action 'self' http://www.isfdb.org https://www.google.com;, frame-src 'none';, frame-ancestors 'none';, img-src http: https:;, manifest-src 'none';, media-src 'none';, object-src 'none';, script-src 'self' http://www.isfdb.org;, style-src 'self' http://www.isfdb.org;, worker-src 'none'; 1
default-src 'self';img-src 'self' data: https://www.googletagmanager.com/ https://www.google-analytics.com/ https://s3-ap-southeast-1.amazonaws.com/agency.form.sg/ https://s3.ap-southeast-1.amazonaws.com/images.form.gov.sg https://s3.ap-southeast-1.amazonaws.com/logos.form.gov.sg *;font-src 'self' data: https://fonts.gstatic.com/;script-src 'self' https://www.googletagmanager.com/ https://ssl.google-analytics.com/ https://www.google-analytics.com/ https://www.tagmanager.google.com/ https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/ https://www.google-analytics.com/;connect-src 'self' https://www.google-analytics.com/ https://ssl.google-analytics.com/ https://sentry.io/api/ https://s3.ap-southeast-1.amazonaws.com/attachments.form.gov.sg/ https://s3.ap-southeast-1.amazonaws.com/images.form.gov.sg https://s3.ap-southeast-1.amazonaws.com/logos.form.gov.sg;frame-src 'self' https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/;object-src 'none';style-src 'self' https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/ 'sha256-b3IrgBVvuKx/Q3tmAi79fnf6AFClibrz/0S5x1ghdGU=';form-action 'self';report-uri https://sentry.io/api/1450832/security/?sentry_key=a6da524b405e4440bfef29457b51dfbc;upgrade-insecure-requests 1
default-src 'self' *.crazyegg.com; script-src 'self' *.crazyegg.com trk.cetrk.com s3.amazonaws.com/trk.cetrk.com/ cdn.embedly.com/widgets/platform.js maps.googleapis.com www.gstatic.com/charts/loader.js https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com platform.instagram.com/en_US/embeds.js www.instagram.com/embed.js https://rules.quantcount.com/ https://surveys-static.survicate.com/ platform.twitter.com/widgets.js platform.twitter.com/js/ cdn.syndication.twimg.com/tweets.json https://connect.facebook.net/ https://www.facebook.com cdn.transport-for-greater-manchester.com/static/js/bundle.js 'sha256-rHYHdPGDuS0mPQkB1Lz7HDkZ19yrTS+guhU4bX7q1fA=' 'sha256-8djXUSnIFgs34hhsRe0uCuyJW99nIX7C55VOG7J8KU8=' 'nonce-N2VlOGRiOGQtZTFmMy00NDJlLTljMmQtM2FjMDhhNzU4NDg0'; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com/ https://fonts.googleapis.com/ platform.twitter.com/css/; img-src 'self' *.crazyegg.com trk.cetrk.com s3.amazonaws.com/trk.cetrk.com/c s3.amazonaws.com/trk.cetrk.com/s gtrk.s3.amazonaws.com s3-eu-west-1.amazonaws.com/congestion-cameras s3-eu-west-1.amazonaws.com/congestion-cameras-test images.ctfassets.net images.contentful.com *.google.com/ *.google.co.uk/ *.googleapis.com *.ggpht.com *.gstatic.com www.google-analytics.com stats.g.doubleclick.net www.googletagmanager.com https://pixel.quantserve.com/ syndication.twitter.com/i/jot syndication.twitter.com/i/jot/syndication pbs.twimg.com/media/ pbs.twimg.com/profile_images/ abs.twimg.com/emoji/ platform.twitter.com/css/ congestion-cameras.s3.amazonaws.com data: https://www.facebook.com https://d20vwa69zln1wj.cloudfront.net https://stats.addsearch.com s3-eu-west-1.amazonaws.com; media-src 'self' s3-eu-west-1.amazonaws.com; connect-src 'self' https://connect.facebook.net/ www.google-analytics.com *.crazyegg.com https://respondent.survicate.com/; frame-src https://www.googletagmanager.com/ www.google.com/maps/ docs.google.com/spreadsheets/d/e/ www.youtube.com www.youtube-nocookie.com www.facebook.com/plugins/post.php www.instagram.com/p/ platform.twitter.com www.manchestereveningnews.co.uk https://forms.office.com/ https://map.zap-map.com/ player.vimeo.com; frame-ancestors 'self' www.manchestereveningnews.co.uk; worker-src 'self'; font-src 'self' fonts.gstatic.com; object-src 'none'; form-action 'self' https://www.facebook.com 1
default-src 'self'; img-src * data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com; child-src https://*.facebook.com https://*.youtube.com https://*.vimeo.com https://*.google.com https://issuu.com https://*.speedrfp.com/; font-src 'self' https://fonts.gstatic.com; media-src 'self' https://*.vimeo.com https://*.youtube.com https://youtu.be.com https://gcs-vimeo.akamaized.net; frame-src 'self' https://*.sertifiguidedapi.com https://*.sertifi.com https://*.vimeo.com https://*.youtube.com  https://foxwoods.mediaroom.com https://*.doubleclick.net https://*.google.com https://*.facebook.com https://*.speedrfp.com https://*.videopoker.com; connect-src 'self' https://*.yimg.com https://*.google-analytics.com 1
default-src 'self'; img-src 'self' data: https://s3.eu-west-1.amazonaws.com/gchq-content/ https://s3-eu-west-1.amazonaws.com/gchq-content/ 'unsafe-inline' https://ssl.gstatic.com/ https://www.google-analytics.com www.google-analytics.com; media-src 'self' https://s3.eu-west-1.amazonaws.com/gchq-content/ https://s3-eu-west-1.amazonaws.com/gchq-content/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://storage.googleapis.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://cdn.polyfill.io/; style-src 'self' 'unsafe-inline' https://tagmanager.google.com/ https://fonts.googleapis.com/; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://fonts.googleapis.com https://s3.eu-west-1.amazonaws.com https://www.google-analytics.com www.google-analytics.com https://*.ncscdev.co.uk https://db.cyberessentials.ncsc.gov.uk; manifest-src 'self' https://s3.eu-west-1.amazonaws.com/gchq-content/ https://s3-eu-west-1.amazonaws.com/gchq-content/; worker-src https://*.ncsc.gov.uk/static-assets/dist/ncsc/service-worker.js https://*.ncscdev.co.uk/static-assets/dist/ncsc/service-worker.js https://*.gchq.gov.uk/static-assets/dist/ncsc/service-worker.js; frame-src 'self' https://www.youtube.com/ https://www.youtube-nocookie.com; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org js.stripe.com www.paypalobjects.com *.bluesnap.com *.quivers.com www.paypal.com chimpstatic.com https://cdn.mouseflow.com/ https://tagmanager.google.com/ https://tagmanager.google.com/debug http://bat.bing.com/ http://servedby.flashtalking.com/ https://www.googleadservices.com https://bat.bing.com/ https://servedby.flashtalking.com/ https://googleads.g.doubleclick.net https://bid.g.doubleclick.net http://bid.g.doubleclick.net https://www.clarios.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com hovercart.quivers.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: hovercart.quivers.com; img-src 'self' *.google.com *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com https://sqlvaenrwfuz2rwysk.blob.core.windows.net https://sqlvaevgsfxov4g2da.blob.core.windows.net https://sqlvawbi4pg46k2imi.blob.core.windows.net data: blob: *.eloqua.com track.hubspot.com t.paypal.com hovercart.quivers.com https://az691558.vo.msecnd.net/ https://stats.g.doubleclick.net/ http://bat.bing.com/ http://servedby.flashtalking.com/ https://bat.bing.com/ https://servedby.flashtalking.com/; media-src 'self' data: blob: https://sqlvaenrwfuz2rwysk.blob.core.windows.net https://sqlvaevgsfxov4g2da.blob.core.windows.net https://sqlvawbi4pg46k2imi.blob.core.windows.net; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com js.stripe.com https://www.youtube.com/ https://www.bluesnap.com/ *.bluesnap.com https://www1.bluesnap.com/ https://ssl.kaptcha.com/ https://hovercart.quivers.com *.quivers.com https://servedby.flashtalking.com/ https://bat.bing.com/ http://servedby.flashtalking.com/ http://bat.bing.com/; connect-src 'self' *.doubleclick.net *.google-analytics.com accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com *.quivers.com wss://hovercart-ws.quivers.com www.paypal.com https://www.bluesnap.com/; 1
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src * data: 1
default-src 'self'; img-src * data:; script-src 'self' www.googletagmanager.com mc.yandex.ru www.google.com www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com data:; frame-src 'self' www.youtube.com www.google.com; media-src 'self'; connect-src 'self' mc.yandex.ru www.google-analytics.com 1
frame-ancestors 'self' https://www.jm.com; 1
default-src photomath.net photomath.app; script-src 'self' 'unsafe-inline' 'unsafe-eval' tcms.photomath.net tpip.photomath.net ajax.googleapis.com apis.google.com code.jquery.com maxcdn.bootstrapcdn.com www.google-analytics.com s.imgur.com cdnjs.cloudflare.com www.googletagmanager.com; connect-src 'self' cms.photomath.net tcms.photomath.net pip.photomath.net www.google-analytics.com stats.g.doubleclick.net script.google.com; img-src 'self' data: cdnjs.cloudflare.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.gstatic.com storage.googleapis.com assets.prod.leanplum.com d2fi4ri5dhpqd1.cloudfront.net; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com maxcdn.bootstrapcdn.com fast.fonts.net; font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com about: data:; frame-src player.vimeo.com imgur.com apis.google.com accounts.google.com plus.google.com; object-src 'self'; 1
default-src 'self' data: blob: https://* shopify-pos://*; style-src 'self' 'unsafe-inline' data: blob: https://*; media-src 'self' data: blob: https://videos.shopifycdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.shopify.com cdn.shopifycdn.net *.shopifycs.com d2c7xlmseob604.cloudfront.net www.google-analytics.com stats.g.doubleclick.net app.myshopify.io app.myshopify.com c.paypal.com www.paypal.com appcenter.intuit.com mpsnare.iesnare.com api.stripe.com maps.googleapis.com js.braintreegateway.com www.youtube.com s.ytimg.com; connect-src 'self' blob: wss://* https://* https://bugsnag-mtl.shopifycloud.com:4900/js; child-src 'self' https://* shopify-pos://*; worker-src 'self' blob:; object-src 'none'; block-all-mixed-content; upgrade-insecure-requests; frame-ancestors 'none'; frame-src app.myshopify.io *.shopifyapps.com *.myshopify.io *.myshopify.com https://* shopify-pos://* 1
frame-ancestors *.ndtv.com *.gadgets360.com pricee.com hotdeals360.com; 1
upgrade-insecure-requests; frame-ancestors 'self' tigertech.net *.tigertech.net; 1
default-src * 'self' data: 'unsafe-inline' blob:;script-src * 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.trustarc.com *.doubleclick.net *.liveperson.net *.sas.com assets.adobedtm.com ssl.google-analytics.com  accdn.lpsnmedia.net www.googletagmanager.com www.google-analytics.com bat.bing.com benchtag.co front.facetz.net *.facebook.net *.facebook.com www.googleadservices.com tb.juiceadv.com *.linkedin.com pixel.mathtag.com pixel.quantserve.com *.quora.com analytics.twitter.com tagmanager.google.com mc.yandex.ru static.ads-twitter.com snap.licdn.com *.bizographics.com dev.visualwebsiteoptimizer.com scripts.demandbase.com consent.truste.com s.yimg.com ssl.gstatic.com api.company-target.com script.crazyegg.com platform.twitter.com sp.analytics.yahoo.com x.bidswitch.net s7.addthis.com ad4.adfarm1.adition.com livestream.co *.brightcove.net track.adform.net insight.adsrvr.org www.vintom.com b92.yahoo.co.jp cdn.appdynamics.com execution-dscvrtraffic.cidev.sas.us *.brightcove.com *.mrpfd.com d3js.org *.d3.org;img-src * 'self' data: *.google-analytics.com *.doubleclick.net www.google.com www.googletagmanager.com *.sas.com front.facetz.net *.facebook.com www.googleadservices.com tb.juiceadv.com ext.ligatus.com bcp.crwdcntrl.net pixel.mathtag.com *.quora.com cdn.taboola.com analytics.twitter.com d.company-target.com mc.yandex.ru t.co px.ads.linkedin.com *.bizographics.com insight.adsrvr.org assets.adobedtm.com *.brightcove.com;font-src * 'self' data: *.sas.com fast.fonts.net;connect-src * 'self' *.sas.com *.brightcove.com ma156-r.analytics.edgekey.net api.company-target.com livestream.com www.vintom.com *.doubleclick.net assets.adobedtm.com;frame-src 'self' assets.adobedtm.com lpcdn.lpsnmedia.net *.liveperson.net www.youtube.com s7.addthis.com *.twitter.com *.sas.com pixel.mathtag.com livestream.com ad4.adfarm1.adition.com www.vintom.com *.doubleclick.net *.facebook.net *.twitter.com *.trustarc.com *.facebook.com *.linkedin.com *.chargebee.com *.sli.do *.logentries.com;frame-ancestors *.sas.com *.jmp.com *.gatheriq.analytics *.curriculumpathways.com 1
frame-ancestors 'self' *.wrike.com 1
frame-ancestors https://admin.dev.by 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.fadada.com fabigbigstatic.oss-cn-hangzhou.aliyuncs.com api.geetest.com static.geetest.com static.sensorsdata.cn api.growingio.com dn-growing.qbox.me hm.baidu.com hmcdn.baidu.com szcert.ebs.org.cn; font-src 'self' data: *.fadada.com 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.com www.google-analytics.com tpc.googlesyndication.com www.googletagmanager.com tagmanager.google.com www.gstatic.com players.brightcove.net app-lon09.marketo.com vjs.zencdn.net securepubads.g.doubleclick.net cdn.ampproject.org adservice.google.com sadmin.brightcove.com www.eventbrite.com cdn.mouseflow.com optimize.google.com www.googleadservices.com googleads.g.doubleclick.net thedeal.com metrics.brightcove.com stats.g.doubleclick.net secure.gravatar.com pagead2.googlesyndication.com dify.wpengine.com ssl.gstatic.com fonts.googleapis.com yoast.com fonts.gstatic.com ff.doubleclick.net w.soundcloud.com bid.g.doubleclick.net edge.api.brightcove.com *.boltdns.net *.brightcovecdn.com *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net o2.mouseflow.com content.comms.euromoneyplc.com ps.w.org my.wpengine.com www.googletagservices.com *.googlesyndication.com www.buzzsprout.com blob: data: 1
frame-ancestors 'self' http://www.philips.ca *.philips.com *.philips.ca 1
default-src 'self' https://www.google-analytics.com https://www.googletagmanager.com *.doubleclick.net http://tagmanager.google.com https://tagmanager.google.com www.googleadservices.com https://www.google.com/recaptcha/api.js *.gstatic.com https://www.google.com/ads/ga-audiences https://assets.contentstack.io http://51.140.158.21 *.bkrtx.com *.serving-sys.com https://secure.adnxs.com https://widget.trustpilot.com analytics.freespee.com https://fonts.googleapis.com https://*.mopinion.com d1q62gfb8siqnm.cloudfront.net/911839/wt_capi.js wtosc.s3.amazonaws.com connect.facebook.net static.ads-twitter.com https://analytics.twitter.com https://sc-static.net mpp2.vindicosuite.com *.zdassets.com *.zopim.com *.zopim.io *.oracleinfinity.io *.maxymiser.net https://*.collect.igodigital.com *.en25.com https://*.onetrust.com 'unsafe-inline' 'unsafe-eval';child-src 'none';img-src 'self' *.zopim.io https://t.co https://www.google-analytics.com *.oracleinfinity.io adservice.google.com *.eloqua.com https://*.mopinion.com sse.co.uk images.contentstack.io https://*.onetrust.com https://*.collect.igodigital.com https://sc-static.net http://t.co https://tr.snapchat.com https://secure.fastclick.net https://secure.adnxs.com https://widget.trustpilot.com https://www.google.com https://www.google.co.uk https://secure-media.msg.dotomi.com *.gstatic.com https://www.google.com/recaptcha/api.js insight.adsrvr.org aax-eu.amazon-adsystem.com *.doubleclick.net www.facebook.com data:;font-src 'self' https://fonts.gstatic.com https://*.mopinion.com data:;connect-src 'self' *.digitalsse.cloud *.sse.co.uk https://fk-contentstack-watch.herokuapp.com/ wss://fk-contentstack-watch.herokuapp.com/ ws://localhost:5000/ *.zdassets.com *.zendesk.com wss://*.zopim.com *.oracleinfinity.io http://*.mopinion.com https://*.onetrust.com https://*.collect.igodigital.com https://sc-static.net;frame-src https://www.google.com https://www.youtube.com https://widget.trustpilot.com https://service.maxymiser.net https://*.mopinion.com *.doubleclick.net *.bkrtx.com *.bluekai.com player.vimeo.com secure.img-cdn.mediaplex.com https://sc-static.net https://tr.snapchat.com https://*.collect.igodigital.com https://*.onetrust.com; 1
script-src 'unsafe-inline' 'unsafe-eval' https: 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; script-src 'self' https://toot.cat; font-src 'self' https://toot.cat; img-src 'self' data: blob: https://toot.cat https://pool.jortage.com https://blob.jortage.com; style-src 'self' https://toot.cat 'nonce-T1bTgvjBu+Chc4/hnIQhig=='; media-src 'self' data: https://toot.cat https://pool.jortage.com https://blob.jortage.com; frame-src 'self' https:; child-src 'self' blob: https://toot.cat; worker-src 'self' blob: https://toot.cat; connect-src 'self' blob: data: wss://toot.cat https://toot.cat https://pool.jortage.com https://blob.jortage.com; manifest-src 'self' https://toot.cat 1
frame-ancestors 'self' cdn.unibuddy.co unibuddy.co popcard.unibuddy.co; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://ssl.google-analytics.com https://www.google-analytics.com/analytics.js https://www.google-analytics.com/j/collect https://www.google.com/pagead/conversion_async.js https://use.typekit.net connect.facebook.net/ https://googleads.g.doubleclick.net/ app.pendo.io cdn.pendo.io pendo-static-5181968941056000.storage.googleapis.com pendo-io-static.storage.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/api.js apis.google.com https://www.googletagmanager.com api.instagram.com https://app-rsrc.getbee.io/plugin/BeePlugin.js https://loader.getbee.io api.instagram.com https://bat.bing.com/bat.js https://www.googleadservices.com/pagead/conversion.js https://connect.facebook.net/en_US/fbevents.js  https://connect.facebook.net/ https://fonts.googleapis.com/ https://ssl.gstatic.com/ https://tagmanager.google.com/ https://core.spreedly.com/iframe/iframe-v1.min.js;style-src 'unsafe-inline' *;img-src * data:;connect-src 'self' https://www.google-analytics.com https://www.google-analytics.com/j/collect app.pendo.io api.feedback.us.pendo.io; frame-ancestors 'self' app.pendo.io pxsweb.com *.pxsweb.com;frame-src 'self' *.myguestaccount.com https://app.getbee.io/ *; 1
default-src 'self' https: wss: data: blob: 'unsafe-inline' 'unsafe-eval' *.unitedtraders.com *.unitedtraders.ru *.uttoken.io *.unitedtraders.team *.utchallenge.com *.utconf.ru *.auroraplatform.com *.finderby.net *.utex.io *.whattobuy.today *.utex.work ; 1
default-src 'self'; connect-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net ;  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.cookielaw.org https://www.gstatic.com https://www.google.com https://www.google-analytics.com https://bluepearlvet.rvetlink.com https://www.googletagmanager.com https://code.jquery.com https://static.addtoany.com https://optanon.blob.core.windows.net https://maps.googleapis.com https://maps.gstatic.com https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net cdn.ckeditor.com; img-src 'self' data: https://forgravity.com https://www.google.com https://secure.gravatar.com https://stats.g.doubleclick.net https://www.google-analytics.com https://maps.gstatic.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com cdn.ckeditor.com https://maps.googleapis.com https://www.google.co.in https://www.google.pt; style-src 'self' 'unsafe-inline' https://optanon.blob.core.windows.net https://fonts.googleapis.com https://assets.zendesk.com maxcdn.bootstrapcdn.com cdn.ckeditor.com; font-src 'self' data: https://fonts.gstatic.com https://themes.googleusercontent.com maxcdn.bootstrapcdn.com; frame-src https://www.carecreditprovidercenter.com https://www.carecredit.com https://www.google.com https://*.rvetlink.com https://static.addtoany.com https://www.youtube.com https://bluepearlvet.rvetlink.com https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com; object-src 'none' 1
default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline' multimedia.gsb.bund.de spaceview.netzlabor.de; connect-src 'self' tracking.netmind-cloud.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' multimedia.gsb.bund.de piwik.itzbund.de webtv.bundestag.de *.googleapis.com *.google.com *.gstatic.com *.instagram.com tracking.netmind-cloud.com twemoji.maxcdn.com maps.wikimedia.org *.ytimg.com *.youtube.com *.youtube-nocookie.com *.googlevideo.com *.openstreetmap.org spaceview.netzlabor.de; object-src 'self' multimedia.gsb.bund.de; media-src 'self' piwik.itzbund.de multimedia.gsb.bund.de *.fbcdn.net *.youtube.com *.youtube-nocookie.com *.googlevideo.com; child-src *.google.com *.gstatic.com webtv.bundestag.de *.cdninstagram.com *.fbcdn.net *.youtube.com *.youtube-nocookie.com *.instagram.com tracking.netmind-cloud.com twemoji.maxcdn.com maps.wikimedia.org *.youtube.com *.youtube-nocookie.com *.googlevideo.com *.openstreetmap.org piwik.itzbund.de; img-src 'self' data: *.google.com *.gstatic.com multimedia.gsb.bund.de piwik.itzbund.de webtv.bundestag.de *.youtube.com *.twimg.com *.fbcdn.net *.youtube-nocookie.com *.cdninstagram.com *.openstreetmap.org twemoji.maxcdn.com maps.wikimedia.org *.youtube-nocookie.com *.googlevideo.com *.cloudfront.net; frame-ancestors 'self'; 1
default-src https: 'unsafe-inline'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://sf-tcu.s3.amazonaws.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://script.crazyegg.com https://s3.amazonaws.com https://connect.facebook.net https://www.youtube.com https://s.ytimg.com https://*.simpli.fi https://maps.googleapis.com https://standby.comm100vue.com/ https://vue.comm100.com/ https://cs.loanspq.com https://www.google.com/ https://www.gstatic.com/ https://cdn.segmint.net/segmint.min.js https://vue.comm100.com.x.e3751dce05c3304bd708b780bfdb0167317d.9270ef4a.id.opendns.com; style-src 'self' 'unsafe-inline' https://s3.amazonaws.com https://fonts.googleapis.com https://tagmanager.google.com; font-src 'self' data: https://s3.amazonaws.com https://fonts.gstatic.com https://vue.comm100.com; img-src * 'self' data: https://sf-tcu.s3.amazonaws.com https://www.facebook.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://ssl.gstatic.com https://www.gstatic.com; frame-src 'self' https://www.facebook.com https://*.fls.doubleclick.net https://www.google.com https://www.youtube.com https://enterpriseportal.comm100.com https://enterprisechatserver.comm100.com https://connect.segmint.net https://w.soundcloud.com https://loanengine.hcdigital.com https://player.vimeo.com; media-src 'self' https://enterprisechatserver.comm100.com; connect-src 'self' https://aware-us.senseforth.com https://www.facebook.com https://www.google-analytics.com https://td-ucsm-01.tcunet.com https://enterprisechatserver.comm100.com https://appmax1service.comm100.com https://sample-api-v2.crazyegg.com https://cdn.segmint.net/4cb76784-520f-4740-84f2-eb7873f4a38b.json https://s3.amazonaws.com/cdn.segmint.net/4cb76784-520f-4740-84f2-eb7873f4a38b.json https://connect.segmint.net/event https://tracking.crazyegg.com https://stats.g.doubleclick.net; 1
default-src 'self' http://www.ltgplc.com/ https://go.ltgplc.com https://pf-marketing.kzoplatform.com https://gomo.kzoplatform.com https://percolate.blogtalkradio.com https://www.blogtalkradio.com http://www.ltgplc.com/ https://go.ltgplc.com https://www.youtube.com https://go.pardot.com;script-src-elem 'self' 'unsafe-inline' https://microapps.pf-labs.net https://ltg.breezy.hr https://pi.pardot.com/ https://www.googletagmanager.com https://tagmanager.google.com https://sjs.bizographics.com https://static.ads-twitter.com https://www.googleadservices.com https://bat.bing.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://go.ltgplc.com https://analytics.twitter.com;script-src 'self' 'unsafe-inline' https://microapps.pf-labs.net https://cdn.inspectlet.com https://ltg.breezy.hr https://sjs.bizographics.com https://analytics.twitter.com https://static.ads-twitter.com https://www.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://bat.bing.com https://tagmanager.google.com https://www.google-analytics.com https://www.googletagmanager.com https://pi.pardot.com https://go.ltgplc.com;font-src 'self' data: https://ui.peoplefluent.com https://use.typekit.net;style-src 'self' 'unsafe-inline' https://ui.peoplefluent.com https://microapps.pf-labs.net https://use.typekit.net https://p.typekit.net https://tagmanager.google.com https://fonts.googleapis.com https://tagmanager.google.com;img-src 'self' data: https://d33wubrfki0l68.cloudfront.net https://t.co https://cdn.sanity.io https://www.google.co.uk https://www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://linkedin.com https://www.linkedin.com https://px.ads.linkedin.com https://bat.bing.com https://ssl.gstatic.com https://www.gstatic.com;media-src 'self' data: https://cdn.sanity.io;connect-src 'self' https://ltg.breezy.hr https://www.google-analytics.com https://stats.g.doubleclick.net 1
default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'sha256-UPkidoMErzWw1gW/eY4LhAi9ZkPch3PP31d6KQoJ6Yc=' https://ssl.google-analytics.com 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src https:; style-src 'self' https: 'unsafe-inline' 1
frame-ancestors 'self' https://resideo.ziftone.com/ https://proportal.resideo.com/ https://pro.resideo.com/ https://resideostaging.staging.ziftone.com/ https://resideo.netdimensions.com/ https://deploy-preview-437--resideo-pro.netlify.com/ https://fxm/ https://resideo-pro-perks.my-rewardsonline/ 1
frame-ancestors https://www.coolinarika.com 1
frame-ancestors 'self' marchedufilm.online 1
default-src 'self' fl.ru *.fl.ru flstatic-a.akamaihd.net *.facebook.com client.getinchat.com *.jivosite.com *.mail.ru *.yandex.ru *.doubleclick.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: *.fl.ru flstatic-a.akamaihd.net client.getinchat.com cityadstrack.com www.cityadstrack.com artfut.com www.artfut.com cdn.userecho.com connect.facebook.net *.adriver.ru counter.rambler.ru *.newrelic.com *.nr-data.net mc.yandex.ru *.doubleclick.net *.criteo.com *.criteo.net *.mail.ru *.gstatic.com *.google.com *.google-analytics.com *.googleadservices.com *.googletagservices.com *.googletagmanager.com adservice.google.com adservice.google.ru adservice.google.com.ua *.tns-counter.ru x.cnt.my d31j93rd8oukbv.cloudfront.net *.jivosite.com; img-src data: blob: *; media-src *.fl.ru flstatic-a.akamaihd.net *.jivosite.com; style-src 'unsafe-inline' 'unsafe-eval' blob: https: 'self' *.fl.ru flstatic-a.akamaihd.net client.getinchat.com fonts.googleapis.com *.jivosite.com; font-src 'self' data: blob: https: fonts.gstatic.com an.yandex.ru yastatic.net yastat.net; frame-src 'self' *.fl.ru flstatic-a.akamaihd.net fl.userecho.com *.typeform.com client.getinchat.com *.criteo.com *.criteo.net *.facebook.com *.adriver.ru *.doubleclick.net *.google.com *.google.ru *.indeed.com onesignal.com rutube.ru *.rutube.ru *.vimeo.com youtube.com *.youtube.com; child-src fl.ru *.fl.ru flstatic-a.akamaihd.net; connect-src 'self' *.fl.ru *.google.com *.adriver.ru *.advcake.com *.acstat.com flstatic-a.akamaihd.net *.doubleclick.net *.facebook.com *.google-analytics.com *.mail.ru client.getinchat.com *.jivosite.com *.yandex.ru wss://*.jivosite.com *.nr-data.net; report-uri flru.report-uri.com/r/d/csp/reportOnly; 1
frame-ancestors 'self' https://*.equitable.com https://*.asedv001.appserviceenvironment.net ionic://localhost http://localhost:8100; 1
default-src https: filesystem data: blob:; style-src https: 'unsafe-inline'  'unsafe-eval'; connect-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: ; frame-src https: https:; 1
default-src 'none'; child-src 'self' ez.no static.addtoany.com www.youtube.com; connect-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com static.addtoany.com cdnjs.cloudflare.com ajax.googleapis.com; style-src 'self' 'unsafe-inline' static.addtoany.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com fonts.googleapis.com; img-src 'self' blob: data: static.addtoany.com www.google-analytics.com; font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com; form-action 'self'; 1
frame-ancestors 'self' https://enterprisecarsales.my.salesforce.com https://login.salesforce.com https://enterprisecarsales.lightning.force.com 1
frame-ancestors 'self' ocfl.net *.ocfl.net onetgov.net *.onetgov.net orangecountyfl.net *.orangecountyfl.net 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' siteimproveanalytics.com sdc.mineleni.nl piwik.dtnr.nl ajax.googleapis.com cdn.siteimprove.net www.google.com; connect-src 'self' *.siteimprove.com *.siteimproveanalytics.io; img-src 'self' data: *.siteimproveanalytics.io http://www.rovid.nl https://www.rovid.nl *.rijksoverheid.nl sdc.mineleni.nl piwik.dtnr.nl; style-src 'self' 'unsafe-inline' www.google.com ajax.googleapis.com; font-src 'self'; media-src 'self' http://www.rovid.nl https://www.rovid.nl *.rijksoverheid.nl player.vimeo.com *.vimeocdn.com gcs-vimeo.akamaized.net; child-src 'self' *.siteimproveanalytics.io; 1
default-src 'self' data:; script-src  'unsafe-inline' 'unsafe-eval' 'self' *.google.com *.gstatic.com consent.cookiebot.com consentcdn.cookiebot.com maps.googleapis.com analytics.twitter.com   connect.facebook.net consent.cookiebot.com consentcdn.cookiebot.com googleads.g.doubleclick.net https://www.googleadservices.com maps.googleapis.com sc-static.net script.hotjar.com  snap.licdn.com  static.ads-twitter.com  static.hotjar.com  *.google-analytics.com https://www.google.com/recaptcha/api.js https://www.googleadservices.com/pagead/conversion_async.js https://platform.twitter.com/oct.js *.bankfab.com *.googletagmanager.com https://player.vimeo.com/api/player.js;child-src  'self' *.bankfab.com   *.google.com *.gstatic.com; style-src 'unsafe-inline'  'self' *.bankfab.com *.google.com *.google.ae *.gstatic.com consent.cookiebot.com maps.googleapis.com https://fonts.googleapis.com; object-src https://tools.eurolandir.com https://tools.euroland.com *.bankfab.com; base-uri 'self'; connect-src 'self' https://in.hotjar.com https://vc.hotjar.io wss://ws7.hotjar.com www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net; font-src 'self' *.bankfab.com https://fonts.gstatic.com https://script.hotjar.com; frame-src   https://player.vimeo.com/ 'self' https://8630187.fls.doubleclick.net https://bid.g.doubleclick.net https://consentcdn.cookiebot.com https://tools.euroland.com tools.euroland.com https://tools.eurolandir.com tools.eurolandir.com https://tr.snapchat.com https://vars.hotjar.com https://www.google.com; img-src 'self' data: *.bankfab.com https://maps.googleapis.com https://maps.gstatic.com https://p.adsymptotic.com https://page-source.com https://px.ads.linkedin.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com https://www.google.ae https://googleads.g.doubleclick.net https://www.google.com https://aax-eu.amazon-adsystem.com https://t.co https://linkedin.com; manifest-src 'self'; media-src 'self' *.bankfab.com https://www.bankfab.com; worker-src 'none' ; 1
default-src 'unsafe-eval' 'unsafe-inline' * blob:; script-src 'unsafe-inline' 'unsafe-eval' * blob:; img-src * data:; connect-src *; font-src * data:; upgrade-insecure-requests; block-all-mixed-content 1
frame-ancestors 'self' http://*.schwab.com https://*.schwab.com https://tags.tiqcdn.com https://static.ads-twitter.com https://t.co https://di.rlcdn.com https://connect.facebook.net https://www.facebook.com https://d.agkn.com https://2530996.fls.doubleclick.net https://sb.scorecardresearch.com https://www.googletagmanager.com https://s.yimg.com https://sp.analytics.yahoo.com https://px.airpr.com https://dpx.airpr.com https://secure.adnxs.com https://schwab.demdex.net https://googleads.g.doubleclick.net https://adservice.google.com https://schwab.tt.omtrdc.net https://smetric.schwab.com https://content.schwab.com https://client.schwab.com https://lms.schwab.com https://www.schwabcdn.com https://*.schwabinstitutional.com https://*.dev-schwab.acsitefactory.com https://*.test-schwab.acsitefactory.com https://*.train-schwab.acsitefactory.com https://*.schwab.acsitefactory.com https://*.schwab.co.uk https://*.schwab.com.hk https://*.schwab.com.sg https://*.schwab.com.au https://*.schwabcharitable.org https://*.schwabmoneywise.com; report-uri /report-csp-violation 1
frame-ancestors 'self' https://admin.vbulletin.com/ https://www.vbulletin.com/ https://members.vbulletin.com/ https://testsecureacceptance.cybersource.com/ https://secureacceptance.cybersource.com/ https://ssl.kaptcha.com/'; script-src * blob: 'unsafe-inline' 'unsafe-eval' ; object-src * 1
default-src 'none'; connect-src 'self' *.mebmarket.com *.readawrite.com www.facebook.com www.google-analytics.com 1827855842.rsc.cdn77.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.mebmarket.com www.googletagmanager.com connect.facebook.net *.google-analytics.com apis.google.com maps.googleapis.com www.google.com www.gstatic.com cdn.jsdelivr.net platform.twitter.com appleid.cdn-apple.com; img-src * data: blob:; style-src 'self' 'unsafe-inline' www.mebmarket.com fonts.googleapis.com; frame-src *; media-src 'self' *.mebmarket.com; font-src 'self' fonts.gstatic.com www.mebmarket.com; manifest-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' media.cdn.epic.com mediacustomerstreaming01.keydelivery.northcentralus.media.azure.net keydelivery.epic.com; object-src 'none'; media-src 'self' blob: cdn.epic.com media.cdn.epic.com; worker-src blob:; frame-ancestors 'self'  1
default-src https: wss://*.hotjar.com; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline';frame-ancestors 'self'; object-src 'none'; base-uri 'self'; 1
script-src 'report-sample' 'nonce-0df5UCHN+p+wzBEs8bSJ0g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self',script-src 'nonce-0df5UCHN+p+wzBEs8bSJ0g' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport 1
img-src *.nicebooker.com *.qlchat.com *.aliyuncs.com *.qlogo.cn *.snssdk.com *.baidu.com *.qianliaowang.com *.baidu.com *.weixin.com *.qq.com *.pstatp.com *.alicdn.com data:; object-src *.nicebooker.com *.qlchat.com *.aliyuncs.com *.qlogo.cn *.snssdk.com *.baidu.com *.qianliaowang.com *.baidu.com *.weixin.com *.qq.com *.pstatp.com *.alicdn.com; style-src *.nicebooker.com *.qlchat.com *.aliyuncs.com *.qlogo.cn *.snssdk.com *.baidu.com *.qianliaowang.com *.baidu.com *.weixin.com *.qq.com *.pstatp.com *.alicdn.com 'unsafe-inline' 'unsafe-eval'; script-src *.nicebooker.com *.qlchat.com *.aliyuncs.com *.qlogo.cn *.snssdk.com *.baidu.com *.qianliaowang.com *.baidu.com *.weixin.com *.qq.com *.pstatp.com *.alicdn.com 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests 1
default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; img-src data: 'unsafe-eval' https: 'unsafe-eval' 'unsafe-inline' 1
report-uri https://www.yelp.com/csp_block?id=a211de8f99816535&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609222792; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: ws://*.hypercomments.com http://matrixcalc.org http://*.googleapis.com http://*.googlesyndication.com http://*.googletagservices.com http://*.doubleclick.net http://*.gstatic.com http://*.wp.com http://*.gravatar.com http://counter.yadro.ru http://*.hypercomments.com http://*.yandex.ru http://*.yastatic.net http://*.megaflowers.ru http://*.vk.me http://*.youtube.com http://*.ytimg.com wss://*.hypercomments.com https://matrixcalc.org https://*.googleapis.com https://*.googlesyndication.com https://*.googletagservices.com https://*.googleadservices.com https://*.doubleclick.net https://*.gstatic.com https://*.wp.com https://*.gravatar.com https://counter.yadro.ru https://adservice.google.ad https://adservice.google.ae https://adservice.google.al https://adservice.google.am https://adservice.google.as https://adservice.google.at https://adservice.google.az https://adservice.google.ba https://adservice.google.be https://adservice.google.bf https://adservice.google.bg https://adservice.google.bi https://adservice.google.bj https://adservice.google.bs https://adservice.google.bt https://adservice.google.by https://adservice.google.ca https://adservice.google.cat https://adservice.google.cd https://adservice.google.cf https://adservice.google.cg https://adservice.google.ch https://adservice.google.ci https://adservice.google.cl https://adservice.google.cm https://adservice.google.cn https://adservice.google.co.ao https://adservice.google.co.bw https://adservice.google.co.ck https://adservice.google.co.cr https://adservice.google.co.id https://adservice.google.co.il https://adservice.google.co.in https://adservice.google.co.jp https://adservice.google.co.ke https://adservice.google.co.kr https://adservice.google.co.ls https://adservice.google.co.ma https://adservice.google.co.mz https://adservice.google.co.nz https://adservice.google.co.th https://adservice.google.co.tz https://adservice.google.co.ug https://adservice.google.co.uk https://adservice.google.co.uz https://adservice.google.co.ve https://adservice.google.co.vi https://adservice.google.co.za https://adservice.google.co.zm https://adservice.google.co.zw https://adservice.google.com https://adservice.google.com.af https://adservice.google.com.ag https://adservice.google.com.ai https://adservice.google.com.ar https://adservice.google.com.au https://adservice.google.com.bd https://adservice.google.com.bh https://adservice.google.com.bn https://adservice.google.com.bo https://adservice.google.com.br https://adservice.google.com.bz https://adservice.google.com.co https://adservice.google.com.cu https://adservice.google.com.cy https://adservice.google.com.do https://adservice.google.com.ec https://adservice.google.com.eg https://adservice.google.com.et https://adservice.google.com.fj https://adservice.google.com.gh https://adservice.google.com.gi https://adservice.google.com.gt https://adservice.google.com.hk https://adservice.google.com.jm https://adservice.google.com.kh https://adservice.google.com.kw https://adservice.google.com.lb https://adservice.google.com.ly https://adservice.google.com.mm https://adservice.google.com.mt https://adservice.google.com.mx https://adservice.google.com.my https://adservice.google.com.na https://adservice.google.com.nf https://adservice.google.com.ng https://adservice.google.com.ni https://adservice.google.com.np https://adservice.google.com.om https://adservice.google.com.pa https://adservice.google.com.pe https://adservice.google.com.pg https://adservice.google.com.ph https://adservice.google.com.pk https://adservice.google.com.pr https://adservice.google.com.py https://adservice.google.com.qa https://adservice.google.com.sa https://adservice.google.com.sb https://adservice.google.com.sg https://adservice.google.com.sl https://adservice.google.com.sv https://adservice.google.com.tj https://adservice.google.com.tr https://adservice.google.com.tw https://adservice.google.com.ua https://adservice.google.com.uy https://adservice.google.com.vc https://adservice.google.com.vn https://adservice.google.cv https://adservice.google.cz https://adservice.google.de https://adservice.google.dj https://adservice.google.dk https://adservice.google.dm https://adservice.google.dz https://adservice.google.ee https://adservice.google.es https://adservice.google.fi https://adservice.google.fm https://adservice.google.fr https://adservice.google.ga https://adservice.google.ge https://adservice.google.gg https://adservice.google.gl https://adservice.google.gm https://adservice.google.gp https://adservice.google.gr https://adservice.google.gy https://adservice.google.hn https://adservice.google.hr https://adservice.google.ht https://adservice.google.hu https://adservice.google.ie https://adservice.google.im https://adservice.google.iq https://adservice.google.is https://adservice.google.it https://adservice.google.je https://adservice.google.jo https://adservice.google.kg https://adservice.google.ki https://adservice.google.kz https://adservice.google.la https://adservice.google.li https://adservice.google.lk https://adservice.google.lt https://adservice.google.lu https://adservice.google.lv https://adservice.google.md https://adservice.google.me https://adservice.google.mg https://adservice.google.mk https://adservice.google.ml https://adservice.google.mn https://adservice.google.ms https://adservice.google.mu https://adservice.google.mv https://adservice.google.mw https://adservice.google.ne https://adservice.google.nl https://adservice.google.no https://adservice.google.nr https://adservice.google.nu https://adservice.google.pl https://adservice.google.pn https://adservice.google.ps https://adservice.google.pt https://adservice.google.ro https://adservice.google.rs https://adservice.google.ru https://adservice.google.rw https://adservice.google.sc https://adservice.google.se https://adservice.google.sh https://adservice.google.si https://adservice.google.sk https://adservice.google.sm https://adservice.google.sn https://adservice.google.so https://adservice.google.sr https://adservice.google.st https://adservice.google.td https://adservice.google.tg https://adservice.google.tk https://adservice.google.tl https://adservice.google.tm https://adservice.google.tn https://adservice.google.to https://adservice.google.tt https://adservice.google.vg https://adservice.google.vu https://adservice.google.ws https://*.hypercomments.com https://*.yandex.ru https://*.yastatic.net https://*.megaflowers.ru https://*.vk.me https://*.youtube.com https://*.ytimg.com https://sun9-37.userapi.com https://telegram.org https://platform.twitter.com ; frame-src *; report-uri https://matrixcalc.org/jserrors.php?csp-report=1 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.usap.gov platform.twitter.com dap.digitalgov.gov script.crazyegg.com cdn.syndication.twimg.com; object-src 'self'; child-src 'self' platform.twitter.com syndication.twitter.com; font-src 'self' www.usap.gov fonts.googleapis.com fonts.gstatic.com; frame-ancestors 'self' 1
default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self' *.kashanu.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com ; frame-ancestors 'self' https://trustseal.enamad.ir 1
upgrade-insecure-requests; default-src *.usclimatedata.com *.gstatic.com https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com/* *.googlesyndication.com adservice.google.nl adservice.google.com adservice.google.cl *.googleadservices.com *.google.com *.googletagservices.com *.google-analytics.com apis.google.com ajax.googleapis.com *.googletagmanager.com *.usclimatedata.com *.bootstrapcdn.com *.gstatic.com *.geolocation.io *.google.com/recaptcha/ *.google-analytics.com *.addthis.com googleads.g.doubleclick.net https:; frame-src bid.g.doubleclick.net googleads.g.doubleclick.net *.googlesyndication.com *.googleadservices.com data: https:; connect-src 'self' *.usclimatedata.com pagead2.googlesyndication.com www.google-analytics.com *.gstatic.com; img-src 'self' *.maps.googleapis.com/* *.googletagmanager.com *.google-analytics.com googleads.g.doubleclick.net *.googlesyndication.com *.googleadservices.com *.google.com data: https:; style-src 'self' 'unsafe-inline' *.apis.google.com *.googleapis.com *.bootstrapcdn.com *.usclimatedata.com *.gstatic.com *.google.com *.googlesyndication.com *.googleadservices.com googleads.g.doubleclick.net;font-src *.bootstrapcdn.com *.usclimatedata.com cdnjs.cloudflare.com data: 'self'; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https://www.google-analytics.com https://ssl.google-analytics.com                https://www.googletagmanager.com https://apis.google.com https://www.google.com https://www.gstatic.com https://cse.google.com/ https://maps.googleapis.com https://maps.gstatic.com               https://maps.googleapis.com/maps/api/* 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https://*;                style-src 'self' https://* 'unsafe-inline'; object-src 'self'; base-uri 'none'; connect-src *; 1
default-src 'self' https://*.allkeyshop.com https://*.allkeyshop.ru https://*.keyforsteam.de https://*.goclecd.fr https://*.clavecd.es https://*.cdkeyit.it https://*.cdkeypt.pt https://*.cdkeynl.nl https://*.keyforsteam.com https://cheapdigitaldownload.com https://*.cheapdigitaldownload.com https://*.steamkeybox.com https://static.zdassets.com https://ekr.zdassets.com https://allkeyshop.zendesk.com wss://allkeyshop.zendesk.com wss://*.zopim.com https://www.google-analytics.com http://cdn.sendpulse.com https://*.twitch.tv https://cdn.jsdelivr.net https://www.youtube.com https://widget.gleamjs.io https://gleam.io https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://www.googletagservices.com https://ad.doubleclick.net 'unsafe-inline' data:; style-src 'self' https://*.allkeyshop.com https://*.allkeyshop.ru https://*.keyforsteam.de https://*.goclecd.fr https://*.clavecd.es https://*.cdkeyit.it https://*.cdkeypt.pt https://*.cdkeynl.nl https://*.keyforsteam.com https://cheapdigitaldownload.com https://*.cheapdigitaldownload.com https://*.steamkeybox.com https://cdn.jsdelivr.net https://cdn.sendpulse.com 'unsafe-inline'; img-src 'self' https://*.allkeyshop.com https://*.allkeyshop.ru https://*.keyforsteam.de https://*.goclecd.fr https://*.clavecd.es https://*.cdkeyit.it https://*.cdkeypt.pt https://*.cdkeynl.nl https://*.keyforsteam.com https://cheapdigitaldownload.com https://*.cheapdigitaldownload.com https://*.steamkeybox.com https://v2assets.zopim.io https://static.zdassets.com data: https://steamcdn-a.akamaihd.net https://www.google-analytics.com https://static-cdn.jtvnw.net https://cdn.sendpulse.com https://*.gravatar.com https://graph.facebook.com https://i0.wp.com/www.allkeyshop.com https://platform-lookaside.fbsbx.com https://*.fbcdn.net https://*.googleusercontent.com https://*.cloudfront.net/facebook/ https://*.cloudfront.net/twitter/ https://*.cloudfront.net/instagram/ https://js.gleam.io https://static-cdn.jtvnw.net https://i.ytimg.com 1
default-src https: data: 'unsafe-inline' 'unsafe-eval';worker-src blob: https://*.ampproject.org/* 1
default-src 'self' 'unsafe-inline' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.doubleclick.net https://www.google-analytics.com https://connect.facebook.net https://www.facebook.com https://munchkin.marketo.net https://www.google.ca https://www.google.com https://*.hotjar.com https://*.hotjar.io https://bat.bing.com  https://www.snapengage.com https://storage.googleapis.com https://www.googletagmanager.com https://app-sjh.marketo.com https://cdnjs.cloudflare.com http://storage.googleapis.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.youtube.com https://s.ytimg.com https://tagmanager.google.com https://unpkg.com http://munchkin.marketo.net http://app-sjh.marketo.com http://tagmanager.google.com http://bat.bing.com https://*.marketo.com http://*.marketo.com https://optimize.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hotjar.com https://*.hotjar.io https://app-sjh.marketo.com https://cdnjs.cloudflare.com https://tagmanager.google.com http://app-sjh.marketo.com https://*.marketo.com http://*.marketo.com https://optimize.google.com data:; img-src 'self' https://rockymountaineer.com https://bat.bing.com https://www.google-analytics.com https://www.facebook.com https://www.google.ca https://www.google.com https://*.doubleclick.net https://www.snapengage.com https://cx.atdmt.com https://www.googletagmanager.com https://www.google.cz https://i.ytimg.com https://ssl.gstatic.com https://lh3.googleusercontent.com https://fonts.gstatic.com data:; media-src 'self' 'unsafe-inline' https://www.snapengage.com; frame-src 'self' https://www.googletagmanager.com https://*.doubleclick.net https://*.hotjar.com https://*.hotjar.io https://www.facebook.com https://app-sjh.marketo.com https://www.youtube.com https://optimize.google.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://themes.googleusercontent.com https://script.hotjar.com data:; connect-src 'self' https://*.mktoresp.com https://*.hotjar.com https://*.hotjar.io https://bat.bing.com https://bam.nr-data.net https://www.google-analytics.com http://280-fby-670.mktoresp.com https://www.snapengage.com https://*.marketo.com http://*.marketo.com https://stats.g.doubleclick.net; report-uri /report-csp-violation 1
frame-ancestors https://app.c-spanbus.org https://*.c-span.org 1
frame-ancestors 'self' http://www.philips.es *.philips.com *.philips.es 1
script-src 'self' cdn.usersnap.com s.ytimg.com www.youtube.com cdn.polyfill.io www.google-analytics.com platform.twitter.com platform.linkedin.com tagmanager.google.com www.googletagmanager.com bacardilimited.zendesk.com api.usersnap.com https://www.gstatic.com https://www.googleadservices.com https://m.addthis.com https://s7.addthis.com https://use.typekit.net https://d3mvnvhjmkxpjz.cloudfront.net https://v1.addthis.com https://www.google.com/recaptcha/ https://z.moatads.com https://googleads.g.doubleclick.net https://d29mknc5251yuj.cloudfront.net https://spl.bacardi.com https://spl.bacardilimited.com/ https://browser-update.org/ https://vk.com/js/api/ https://www.recaptcha.net/recaptcha/ 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; base-uri 'self'; connect-src 'self' 'unsafe-inline' *.walkme.com *.visualstudio.com *.count.ly ws://*.civicweb.net wss://*.civicweb.net *.civicweb.net ws://localhost wss://localhost *.cke-cs.com ws://*.cke-cs.com wss://*.cke-cs.com; font-src 'self' data: use.fontawesome.com *.gstatic.com; frame-src 'self' *.icompasstech.com *.civicweb.net *.earthchannel.com *.google.com *.youtube.com *.twitter.com *.granicus.com *.swagit.com *.livestream.com blob: data:; frame-ancestors 'self'; img-src * data: blob:; media-src 'self' *.youtube.com *.civicweb.net; object-src 'self' blob:; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' cdn.ckeditor.com cdn.jsdelivr.net *.msecnd.net *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.newrelic.com *.walkme.com *.twitter.com *.youtube.com *.ytimg.com *.youtu.be *.civicweb.net; style-src 'self' 'unsafe-inline' use.fontawesome.com code.jquery.com *.googleapis.com; plugin-types application/x-shockwave-flash application/pdf application/x-pnacl 1
default-src 'self' data:; img-src https://*.tile.openstreetmap.org data: 'self'; style-src 'unsafe-inline' 'self'; script-src 'self'; frame-src dietchan.org loadaverage.org 'self' 1
default-src  * 'self' ; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'self' 'unsafe-inline' 'unsafe-eval'; img-src * data: blob: 'unsafe-inline'; frame-src *; font-src 'self' data: fonts.gstatic.com; style-src * 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.snt.com.my http://*.snt.com.my http://*.sarawak.gov.my https://*.googleapis.com https://www.theborneopost.com https://talikhidmat.sarawak.gov.my/talikhidmat/ https://www.facebook.com https://sarawak.gov.my/ https://*.gstatic.com;frame-ancestors 'self' *.sarawak.gov.my https://paybills.sarawak.gov.my/;\ 1
default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; worker-src data: 1
default-src 'none' ; img-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.twitter.com *.twimg.com *.dailymotion.com *.paybox.com *.doubleclick.net *.xiti.com 'nonce-MTYwOTIyNTQzMg==' ; media-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.twitter.com *.dailymotion.com *.paybox.com ; script-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.twitter.com *.twimg.com *.dailymotion.com *.paybox.com 'nonce-MTYwOTIyNTQzMg==' ; script-src-elem 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.twitter.com *.twimg.com *.dailymotion.com *.paybox.com 'nonce-MTYwOTIyNTQzMg==' ; font-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.twitter.com *.dailymotion.com *.paybox.com fonts.gstatic.com github.com ; base-uri 'self' ; form-action *.twitter.com ; frame-ancestors 'self' ; style-src-elem 'self' *.twitter.com *.twimg.com 'sha256-UG3e5GMK0p75fYUzpG+gQ7w8C5Xiho/3IN1lN4MygSs=' 'sha256-LCCG8b1oYMgCStLhXjw2+M/3LsNjoavZBaIwEMJ6Kdg=' 'sha256-e1gMlZC9QqOMyeY/9Z/NZIBDrlArAo46JAbkLbBDm1Q=' 'sha256-UrGjHcu2Sr3l23rKhEgVKMijbWMN2Pell/Dz/a4DGiw=' ; frame-src 'self' *.parcoursup.fr *.parcoursup-nouvelle-caledonie.fr *.dailymotion.com *.twitter.com *.doubleclick.net ; style-src 'self' *.twitter.com *.twimg.com 'sha256-bSIAwE1iB4C95Jp9d+eqVrYwLAfhSBezlR32IAUfBwM=' 'sha256-lbk0T9Eqn9FZGhCh9MPwvsW4o8mfHGljEvl4Z7A1CXw=' 'sha256-zq27PiVE3uKYaCuZd8TdzyuSD1F45+67IRQlUZDK41c=' 'sha256-3DuTxsT+isLRFfaBwfLTvkqwl+5WCvVBwlXHNtnEjR8=' 'sha256-naYrp5ciLxqh93qokH0dHua1L06ytZsEdfzisDnQ9mM=' 'sha256-UG3e5GMK0p75fYUzpG+gQ7w8C5Xiho/3IN1lN4MygSs=' 'sha256-LCCG8b1oYMgCStLhXjw2+M/3LsNjoavZBaIwEMJ6Kdg=' 'sha256-e1gMlZC9QqOMyeY/9Z/NZIBDrlArAo46JAbkLbBDm1Q=' 'sha256-UrGjHcu2Sr3l23rKhEgVKMijbWMN2Pell/Dz/a4DGiw=' 1
frame-ancestors 'self' https://*.gather.town https://gather.town; 1
default-src *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://signrequest.com https://cdn.signrequest.com https://signrequest-static.s3.amazonaws.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.google-analytics.com https://ssl.google-analytics.com https://ajax.googleapis.com https://apis.google.com https://www.googletagmanager.com https://tagmanager.google.com https://optimize.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.stripe.com https://*.zapier.com https://zapier.com https://www.dropbox.com https://*.cookiebot.com https://ct.capterra.com https://connect.facebook.net https://static.zdassets.com https://62vqqh6qv58h.statuspage.io https://snap.licdn.com https://survey.survicate.com https://surveys-static.survicate.com https://trackcmp.net https://diffuser-cdn.app-us1.com https://prism.app-us1.com ; style-src 'self' 'unsafe-inline' https://signrequest-static.s3.amazonaws.com https://tagmanager.google.com https://fonts.googleapis.com https://optimize.google.com ; img-src * data:; font-src 'self' data: https://signrequest-static.s3.amazonaws.com https://assets.website-files.com https://fonts.gstatic.com; report-uri https://sentry.io/api/52052/security/?sentry_key=ec65f667deec4ed98fafeea9169140e5 1
frame-ancestors http://*.yahoosmallbusiness.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' z.moatads.com *.addthis.com *.addthisedge.com *.cloudflare.com *.googletagmanager.com *.google-analytics.com translate.googleapis.com translate.google.com *.facebook.net *.twitter.com *.instagram.com *.twimg.com *.youtube.com *.vimeo.com; frame-ancestors 'self' admin.industriall-union.org; 1
default-src https: blob:; connect-src https: wss: blob:; font-src https: data:; frame-src https:; frame-ancestors 'self' webvisor.com *.webvisor.com http://webvisor.com http://*.webvisor.com; img-src https: blob: data:; media-src https: blob:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'unsafe-inline' https:; 1
frame-ancestors 'self' newsroom.edison.com; 1
frame-ancestors 'self' https://*.adaptavist.com; 1
frame-ancestors 'self' newjira.waterford.org mentor.waterford.org manager.waterford.org upstart.waterford.org teacher.waterford.org wacsportal.waterford.org wacs.waterford.org help.waterford.org 1
child-src https: ; default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; object-src 'self' https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; 1
base-uri 'self' 'unsafe-inline'; frame-src 'self' 'unsafe-inline' https:; connect-src 'self' 'unsafe-inline'; font-src 'self' 'unsafe-inline' data: https: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' 'unsafe-inline' data: * blob:; media-src 'self' 'unsafe-inline' data:; object-src 'self' 'unsafe-inline' data:; default-src 'self' 'unsafe-inline' 1
script-src 'self' https://ssl.google-analytics.com https://platform.twitter.com https://www.google-analytics.com 1
default-src *; script-src * blob: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; style-src * blob: 'unsafe-inline'; img-src * blob: 'unsafe-inline' data:; media-src *; frame-src * 'unsafe-inline'; font-src *; connect-src * 1
frame-ancestors 'self' uptimerobot.com; 1
default-src 'unsafe-inline' 'unsafe-eval' 'self' https: data: https://*.facebook.net https://*.typekit.net https://stats.g.doubleclick.net https://translate.google.com https://translate.googleapis.com https://www.google-analytics.com https://www.google.co.uk https://www.google.com https://www.googletagmanager.com https://maps.googleapis.com http://www.w3.org https://cc.cdn.civiccomputing.com; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https://*.dws.com https://*.dws.de https://*.deawm.com wss://push.etf.dws.com https://dws.extraetf.com https://*.tealiumiq.com https://*.webtrekk.com https://*.wbtrk.net https://*.mateti.net https://secure.adnxs.com https://fbc.wcfbc.net https://*.adition.com https://*.linkedin.com https://*.facebook.net https://*.facebook.com https://cx.atdmt.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.de https://www.google.com https://*.tiqcdn.com https://*.wcfbc.net https://*.brightcove.net https://*.brightcove.com https://*.brightcovecdn.com https://*.boltdns.net https://vjs.zencdn.net https://*.akamaihd.net https://*.akafms.net https://*.llnwd.net https://*.llnw.net https://vjs.zencdn.net https://*.readspeaker.com https://walls.io https://*.cloudfront.net https://maps.googleapis.com https://maps.gstatic.com https://*.highcharts.com https://*.everviz.com https://*.rreefpropertytrust.com; font-src 'self' data: https://vjs.zencdn.net; img-src 'self' data: https://*.brightcove.net https://*.brightcove.com https://*.brightcovecdn.com https://*.boltdns.net https://vjs.zencdn.net https://*.akamaihd.net https://*.akafms.net https://*.llnwd.net https://*.llnw.net https://*.tealiumiq.com https://*.webtrekk.com https://*.wbtrk.net https://*.mateti.net https://secure.adnxs.com https://fbc.wcfbc.net https://*.adition.com https://*.linkedin.com https://*.facebook.net https://*.facebook.com https://cx.atdmt.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.de https://www.google.com https://*.tiqcdn.com https://*.wcfbc.net https://maps.googleapis.com https://maps.gstatic.com https://*.dws.com https://*.dws.de https://*.deawm.com wss://push.etf.dws.com https://dws.extraetf.com https://*.rreefpropertytrust.com; media-src 'self' blob: https://*.brightcove.net https://*.brightcove.com https://*.brightcovecdn.com https://*.boltdns.net https://vjs.zencdn.net https://*.akamaihd.net https://*.akafms.net https://*.llnwd.net https://*.llnw.net; worker-src 'self' blob:; object-src 'self' blob:; child-src 'self'; frame-src *; frame-ancestors 'self'; form-action 'self'; report-uri /ContentSecurityPolicy/Report; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mastodon.xyz; img-src 'self' https: data: blob: https://mastodon.xyz; style-src 'self' https://mastodon.xyz 'nonce-IjyWQPo+RoVX0+Yzvr7atQ=='; media-src 'self' https: data: https://mastodon.xyz; frame-src 'self' https:; manifest-src 'self' https://mastodon.xyz; connect-src 'self' data: blob: https://mastodon.xyz https://6-28.mastodon.xyz wss://mastodon.xyz; script-src 'self' https://mastodon.xyz; child-src 'self' blob: https://mastodon.xyz; worker-src 'self' blob: https://mastodon.xyz 1
default-src 'self' *.cardiosmart.org https://tpc.googlesyndication.com https://*.safeframe.googlesyndication.com; script-src 'self' *.cardiosmart.org 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com https://pro.fontawesome.com https://static.cloud.coveo.com https://tagmanager.google.com https://www.googletagmanager.com https://securepubads.g.doubleclick.net *.acc.org http://tpc.googlesyndication.com https://www.googletagservices.com http://graph.facebook.com https://adservice.google.com https://adservice.google.co.in http://api-public.addthis.com https://z.moatads.com https://m.addthis.com https://api-public-oci-origin.addthis.com https://api-public-oci-origin.addthis.com https://v1.addthisedge.com http://s7.addthis.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.realmagnet.land; style-src 'self' *.cardiosmart.org 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com *.acc.org https://dec.azureedge.net https://tagmanager.google.com https://pro.fontawesome.com platform.twitter.com/css/ *.twimg.com *.realmagnet.land; font-src 'self' *.cardiosmart.org fonts.gstatic.com kendo.cdn.telerik.com https://pro.fontawesome.com netdna.bootstrapcdn.com data:; img-src 'self' *.cardiosmart.org https://i.picsum.photos https://www.google.co.in https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://securepubads.g.doubleclick.net http://www.google.com http://www.googletagmanager.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net http://tpc.googlesyndication.com *.acc.org *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com *.realmagnet.land; media-src 'self' *.cardiosmart.org data: blob:; child-src 'self' *.cardiosmart.org https://s7.addthis.com https://platform.twitter.com/ https://tpc.googlesyndication.com https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ *.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.realmagnet.land; connect-src 'self' *.cardiosmart.org accounts.google.com https://stats.g.doubleclick.net *.ncdr.com  https://csi.gstatic.com http://tpc.googlesyndication.com *.acc.org https://tpc.googlesyndication.com https://securepubads.g.doubleclick.net https://*.dec.sitefinity.com https://pagead2.googlesyndication.com *.mktoresp.com; 1
child-src 'self' hackthissite.org *.hackthissite.org htscdn.org *.htscdn.org; form-action 'self' hackthissite.org *.hackthissite.org htscdn.org *.htscdn.org; upgrade-insecure-requests; report-uri https://hackthissite.report-uri.com/r/d/csp/enforce 1
default-src 'self'; font-src *;img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.uha.fr uha.fr *.kxcdn.com www.google.com; style-src *; 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=entertainment&region=US&lang=en-US&device=desktop&yrid=27ovv6lfuljk4&partner=; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://static.criteo.net https://*.criteo.com https://wb.messengerpeople.com https://*.recaptcha.net https://*.hotjar.com https://*.akamaihd.net https://*.attn.tv https://isitetv.com https://*.translate.naver.net https://ln-rules.rewardstyle.com https://tr.snapchat.com https://www.shoplooks.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://services.postcodeanywhere.co.uk https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.googleapis.com https://translate.yandex.net https://*.hotjar.com wss://*.hotjar.com https://*.trustpilot.com https://*.pinterest.com https://*.bing.com https://*.doubleclick.net https://connect.facebook.net https://*.baidu.com https://*.parcellab.com https://ampcid.google.co.jp; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://www.lookfantastic.jp https://m.lookfantastic.jp https://checkout.lookfantastic.jp https://connect.facebook.net https://www.glossybox.at https://www.glossybox.ch https://www.glossybox.co.uk https://www.glossybox.com https://www.glossybox.de https://www.glossybox.fi https://www.glossybox.fr https://www.glossybox.ie https://www.glossybox.no https://www.glossybox.se https://www.glossybox.dk https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://static.criteo.net https://*.criteo.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.microsofttranslator.com https://*.hotjar.com https://*.akamaihd.net https://*.attn.tv https://*.trustpilot.com https://*.translate.naver.net https://*.bing.com https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://static.ads-twitter.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://*.shoplooks.com https://slooks.top https://slooks.me https://lantern.roeyecdn.com https://lantern.roeye.com https://static.ads-twitter.com https://analytics.twitter.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://www.shoplooks.com https://static.shoplooks.com https://cdn.parcellab.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-eval' https://js.stripe.com https://*.braintreegateway.com https://api.github.com https://www.google.com/ https://www.gstatic.com/ https://www.googletagmanager.com https://www.google-analytics.com https://heapanalytics.com https://*.heapanalytics.com; img-src 'self' data: https://cdn.loom.com/ https://pbs.twimg.com https://checkout.paypal.com https://*.braintreegateway.com heapanalytics.com; style-src 'self' 'unsafe-inline'; media-src 'self' https://*.amazonaws.com; frame-src 'self' https://www.google.com/ https://js.stripe.com/ https://hooks.stripe.com/ https://www.youtube.com/ https://www.loom.com/ player.vimeo.com checkout.paypal.com; object-src 'self'; connect-src 'self' api.github.com https://www.google.com/ www.google-analytics.com heapanalytics.com https://avatar-cdn.atlassian.com https://api.stripe.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://ajax.cloudflare.com/ https://tajs.qq.com https://www.zblogcn.com https://cdn.jsdelivr.net/npm/jquery@3.3.1/dist/jquery.min.js; style-src 'self' 'unsafe-inline' https://*.zblogcn.com; font-src 'self' https://*.zblogcn.com; img-src 'self' https://* data: 1
frame-ancestors 'self' https://home.aami.com.au *.home.aami.com.au; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net data: https://static.hotjar.com https://www.google-analytics.com https://script.hotjar.com https://cdn.rawgit.com cdn.rawgit.com https://cdnjs.cloudflare.com https://js.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; report-uri https://www.ivis.org/report-uri/enforce 1
https: data: 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'self' www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com *.credihealth.com; 1
frame-ancestors 'self' https://*.ericgoldman.org http://*.ericgoldman.org 1
default-src 'unsafe-inline' 'unsafe-eval'  *; worker-src data: blob:; font-src data: *;img-src https: data: *; script-src 'unsafe-inline' 'unsafe-eval'  *; media-src https: blob: *; 1
img-src 'self' https: data:; object-src 'none'; base-uri 'none'; frame-ancestors www.peoplestrong.com; 1
frame-ancestors https://*.gap.im 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=ES&lang=es-ES&device=desktop&yrid=0ql52vdfulaqb&partner=; 1
report-uri https://ivywise.report-uri.com/r/d/csp/enforce ; default-src * data: blob: 'self' ; script-src *.ivywise.com *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.hs-analytics.net *.hsleadflows.net *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hsforms.net *.hsforms.com *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com ivywise-com.disqus.com *.disquscdn.com disqus.com *.disqus.com *.podbean.com indd.adobe.com *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self' ; style-src *.ivywise.com *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.hs-analytics.net *.hsleadflows.net *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hsforms.net *.hsforms.com *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com ivywise-com.disqus.com *.disquscdn.com disqus.com *.disqus.com *.podbean.com indd.adobe.com *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self' ; font-src *.ivywise.com *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.hs-analytics.net *.hsleadflows.net *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hsforms.net *.hsforms.com *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com ivywise-com.disqus.com *.disquscdn.com disqus.com *.disqus.com *.podbean.com indd.adobe.com *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self';img-src *.ivywise.com *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.hs-analytics.net *.hsleadflows.net *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hsforms.net *.hsforms.com *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com ivywise-com.disqus.com *.disquscdn.com disqus.com *.disqus.com *.podbean.com indd.adobe.com *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self' * ; connect-src *.ivywise.com *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.hs-analytics.net *.hsleadflows.net *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hsforms.net *.hsforms.com *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com ivywise-com.disqus.com *.disquscdn.com disqus.com *.disqus.com *.podbean.com indd.adobe.com *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self' ; frame-src *.ivywise.com *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.hs-analytics.net *.hsleadflows.net *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hsforms.net *.hsforms.com *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com ivywise-com.disqus.com *.disquscdn.com disqus.com *.disqus.com *.podbean.com indd.adobe.com *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self';object-src *.ivywise.com *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.hs-analytics.net *.hsleadflows.net *.hubspot.com *.hs-scripts.com *.hs-banner.com *.hsforms.net *.hsforms.com *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com ivywise-com.disqus.com *.disquscdn.com disqus.com *.disqus.com *.podbean.com indd.adobe.com *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self' 1
default-src 'self'; img-src data: *; media-src *; style-src 'self' 'unsafe-inline' *.googleapis.com netdna.bootstrapcdn.com cdn.jsdelivr.net static.automaise.com cdnjs.cloudflare.com; font-src 'self' data: fonts.gstatic.com netdna.bootstrapcdn.com static-v.tawk.to static.automaise.com cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ww3.ipleiria.pt/ipleiria-wa.js *.addthis.com www.google.com code.jquery.com netdna.bootstrapcdn.com support.ebscohost.com embed.tawk.to cdn.jsdelivr.net www.gstatic.com maps.googleapis.com *.googleapis.com widgets.ebscohost.com static.automaise.com; frame-ancestors 'self' *.ipleiria.pt; worker-src mediastream: blob: ; connect-src 'self' ww3.ipleiria.pt *.tawk.to wss://*.tawk.to static.automaise.com api.automaise.com directline.botframework.com wss://directline.botframework.com https://api.github.com; frame-src 'self' analytics.ipleiria.pt *.google.com *.youtube.com *.tawk.to *.europa.eu *.issuu.com www.facebook.com atmz.me *.automaise.com app.powerbi.com; 1
frame-ancestors 'self' http://*.qad.com https://*.qad.com https://*.qad.com:54211 1
frame-ancestors 'self' http://www.philips.fr *.philips.com *.philips.fr 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.addtoany.com  https://ajax.cloudflare.com https://maps.googleapis.com https://code.jquery.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.googletagmanager.com https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net; img-src 'self' data: http://pathao.com https://maps.gstatic.com https://maps.googleapis.com https://cdn.pathao.com https://www.google.com https://stats.g.doubleclick.net  https://www.facebook.com https://www.google-analytics.com https://secure.gravatar.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com; style-src 'self' 'unsafe-inline' https://hello.myfonts.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://assets.zendesk.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://themes.googleusercontent.com; frame-ancestors 'self' localhost https://business-app.pathao.com; frame-src https://static.zdassets.com https://www.youtube.com/ https://staticxx.facebook.com https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com; object-src 'none'; connect-src 'self' https://front-police.pathaointernal.com https://my.yoast.com https://script.google.com https://script.googleusercontent.com https://www.google-analytics.com https://stats.g.doubleclick.net 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mastodon.cloud; img-src 'self' https: data: blob: https://mastodon.cloud; style-src 'self' 'unsafe-inline' https://mastodon.cloud; media-src 'self' https: data: https://mastodon.cloud; frame-src 'self' https:; manifest-src 'self' https://mastodon.cloud; connect-src 'self' data: blob: https://mastodon.cloud https://media.mastodon.cloud wss://mastodon.cloud; script-src 'self' https://mastodon.cloud; worker-src 'self' blob: https://mastodon.cloud 1
default-src https: wss: 'unsafe-eval' 'unsafe-inline'; img-src data: https:; object-src 'self' 1
default-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.datatables.net *.azurewebsites.net api.massrelevance.com; font-src fonts.gstatic.com; img-src 'self' data: images.unsplash.com source.unsplash.com assets-us-01.kc-usercontent.com preview-assets-us-01.kc-usercontent.com *.kc-usercontent.com www.facebook.com t.co www.google-analytics.com i.ytimg.com maps.gstatic.com maps.googleapis.com images.ctfassets.net lamama.org api.massrelevance.com *.instagram.com *.cdninstagram.com pbs.twimg.com massrel-pub.a.ssl.fastly.net *.fbcdn.net *.linkedin.com p.adsymptotic.com; frame-src www.youtube.com share.transistor.fm www.facebook.com; script-src 'unsafe-eval' 'self' 'unsafe-inline' tags.tiqcdn.com tags-eu.tiqcdn.com connect.facebook.net analytics.twitter.com static.ads-twitter.com www.googletagmanager.com www.google-analytics.com www.youtube.com s.ytimg.com maps.googleapis.com *.search.windows.net cdn.datatables.net cdnjs.cloudflare.com unpkg.com www.elanco.com api.massrelevance.com snap.licdn.com/li.lms-analytics/insight.min.js static.doubleclick.net googleads.g.doubleclick.net snap.licdn.com/li.lms-analytics/insight.old.min.js; connect-src *.search.windows.net *.azurewebsites.net www.elanco.com collect.tealiumiq.com api.massrelevance.com *.tealiumiq.com www.google-analytics.com 1
frame-ancestors 'self' *.cinradio.org:* *.wvxu.org:* *.wguc.org:*; 1
frame-ancestors https://admin.hiverhq.com https://v2.hiverhq.com https://hiverhq.com https://mail.google.com chrome-extension://fcinnggknmdfkilogcndkgpojpfojeem 1
frame-ancestors 'self' https://analytics.hypers.com.cn https://vr.venucia.com.cn https://img.dongfeng-nissan.com.cn http://www.uat.dongfeng-nissan.com.cn https://xr.realibox.com https://ui.venucia.com.cn 1
frame-ancestors 'self' *.makegoodfood.ca *.yumm.ca *.zendesk.com 1
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https://maps.gstatic.com/mapfiles/ https://maps.googleapis.com/maps/ 1
frame-ancestors 'self' https://egrow.io; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https: wss://*.driverscollection.com https://*.facebook.net https://*.facebook.com https://*.addthis.com https://*.addthisedge.com https://*.yadro.ru https://widgets.pinterest.com https://www.linkedin.com https://www.reddit.com https://cdn.ampproject.org https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.google-analytics.com https://translate.googleapis.com https://*.google.com https://*.googletagmanager.com https://*.googletagservices.com https://*.gstatic.com https://adservice.google.ad https://adservice.google.ae https://adservice.google.al https://adservice.google.am https://adservice.google.as https://adservice.google.at https://adservice.google.az https://adservice.google.ba https://adservice.google.be https://adservice.google.bf https://adservice.google.bg https://adservice.google.bi https://adservice.google.bj https://adservice.google.bs https://adservice.google.bt https://adservice.google.bt https://adservice.google.by https://adservice.google.ca https://adservice.google.cd https://adservice.google.cf https://adservice.google.cf https://adservice.google.cg https://adservice.google.ch https://adservice.google.ci https://adservice.google.cl https://adservice.google.cm https://adservice.google.co.ao https://adservice.google.co.bw https://adservice.google.co.ck https://adservice.google.co.cr https://adservice.google.co.id https://adservice.google.co.il https://adservice.google.co.in https://adservice.google.co.jp https://adservice.google.co.ke https://adservice.google.co.kr https://adservice.google.co.ls https://adservice.google.co.ma https://adservice.google.co.mz https://adservice.google.co.nz https://adservice.google.co.th https://adservice.google.co.tz https://adservice.google.co.ug https://adservice.google.co.uk https://adservice.google.co.uz https://adservice.google.co.ve https://adservice.google.co.vi https://adservice.google.co.za https://adservice.google.co.zm https://adservice.google.co.zw https://adservice.google.com https://adservice.google.com.af https://adservice.google.com.ag https://adservice.google.com.ar https://adservice.google.com.au https://adservice.google.com.bd https://adservice.google.com.bh https://adservice.google.com.bn https://adservice.google.com.bo https://adservice.google.com.br https://adservice.google.com.bz https://adservice.google.com.co https://adservice.google.com.cu https://adservice.google.com.cy https://adservice.google.com.ec https://adservice.google.com.eg https://adservice.google.com.et https://adservice.google.com.fj https://adservice.google.com.gh https://adservice.google.com.gi https://adservice.google.com.gt https://adservice.google.com.hk https://adservice.google.com.jm https://adservice.google.com.kh https://adservice.google.com.kw https://adservice.google.com.lb https://adservice.google.com.ly https://adservice.google.com.mm https://adservice.google.com.mt https://adservice.google.com.mx https://adservice.google.com.my https://adservice.google.com.na https://adservice.google.com.ng https://adservice.google.com.ni https://adservice.google.com.np https://adservice.google.com.om https://adservice.google.com.pa https://adservice.google.com.pe https://adservice.google.com.pg https://adservice.google.com.ph https://adservice.google.com.pk https://adservice.google.com.pr https://adservice.google.com.py https://adservice.google.com.qa https://adservice.google.com.sa https://adservice.google.com.sb https://adservice.google.com.sg https://adservice.google.com.sv https://adservice.google.com.tj https://adservice.google.com.tr https://adservice.google.com.tw https://adservice.google.com.ua https://adservice.google.com.uy https://adservice.google.com.vc https://adservice.google.com.vn https://adservice.google.cv https://adservice.google.cz https://adservice.google.de https://adservice.google.dj https://adservice.google.dk https://adservice.google.dm https://adservice.google.dz https://adservice.google.ee https://adservice.google.es https://adservice.google.fi https://adservice.google.fm https://adservice.google.fr https://adservice.google.ga https://adservice.google.ge https://adservice.google.gg https://adservice.google.gl https://adservice.google.gm https://adservice.google.gp https://adservice.google.gr https://adservice.google.gy https://adservice.google.hn https://adservice.google.hr https://adservice.google.ht https://adservice.google.hu https://adservice.google.ie https://adservice.google.im https://adservice.google.iq https://adservice.google.is https://adservice.google.it https://adservice.google.je https://adservice.google.jo https://adservice.google.ki https://adservice.google.kg https://adservice.google.kz https://adservice.google.la https://adservice.google.li https://adservice.google.lk https://adservice.google.lt https://adservice.google.lu https://adservice.google.lv https://adservice.google.md https://adservice.google.me https://adservice.google.mg https://adservice.google.mk https://adservice.google.ml https://adservice.google.mn https://adservice.google.mu https://adservice.google.mv https://adservice.google.mw https://adservice.google.ne https://adservice.google.nl https://adservice.google.no https://adservice.google.nr https://adservice.google.pl https://adservice.google.ps https://adservice.google.pt https://adservice.google.ro https://adservice.google.rs https://adservice.google.ru https://adservice.google.rw https://adservice.google.sc https://adservice.google.se https://adservice.google.sh https://adservice.google.si https://adservice.google.sk https://adservice.google.sm https://adservice.google.sn https://adservice.google.so https://adservice.google.sr https://adservice.google.st https://adservice.google.td https://adservice.google.tg https://adservice.google.tl https://adservice.google.tm https://adservice.google.tn https://adservice.google.to https://adservice.google.tt https://adservice.google.vg https://adservice.google.vu https://adservice.google.ws https://cdnjs.cloudflare.com; report-uri https://driverscollection.com/csp-track.php; 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' pazl.academy https://timepad.ru www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net api-maps.yandex.ru suggest-maps.yandex.ru yastatic.net mc.yandex.ru/metrika/watch.js mc.yandex.ru/metrika/tag.js ;media-src *; connect-src *;frame-src 'self' pazl.academy www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net www.youtube.com yastatic.net/ sketchfab.com/ accounts.google.com calendar.google.com docs.google.com ;child-src 'self' www.youtube.com accounts.google.com calendar.google.com docs.google.com ;img-src * data:; style-src * 'unsafe-inline'; font-src *; 1
default-src 'self' https:; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https: 1
default-src *; script-src 'unsafe-eval' 'self' 'unsafe-inline'  https:; object-src 'self' *.ytimg.com ytimg.com *.youtube.com youtube.com; style-src * 'unsafe-inline'; img-src * data:; frame-src *; font-src * data:; connect-src *; media-src * blob:; worker-src 'self' blob:; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://*.akamaihd.net https://*.translate.naver.net https://www.recaptcha.net https://www.google.com https://www.zenaps.com https://tr.snapchat.com https://www.youtube.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://the.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net; default-src 'none'; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com 'self' https://checkout.nealsyardremedies.com https://connect.facebook.net https://tr.snapchat.com; frame-ancestors 'self'; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://the.sciencebehindecommerce.com https://cdn.trackjs.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.googleapis.com https://www.recaptcha.net https://connect.facebook.net https://*.trustpilot.com https://www.googleadservices.com https://*.translate.naver.net https://*.doubleclick.net https://*.google.com https://*.google-analytics.com https://fp.zenaps.com https://www.gstatic.com https://bat.bing.com https://www.googletagmanager.com https://www.youtube.com https://s.ytimg.com https://www.dwin1.com https://sc-static.net; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com; upgrade-insecure-requests; report-to report-endpoint 1
object-src 'none'; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://dev-cdn.businesstrack.com https://cdn.businesstrack.com https://www.googletagmanager.com https://js-cdn.dynatrace.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com;  frame-ancestors 'self'; 1
script-src 'self' https://beacon.errorception.com https://www.google-analytics.com; font-src 'self' https://themes.googleusercontent.com; frame-src 'none'; object-src 'none'; media-src 'none'; connect-src 'self' 1
default-src 'self' www.dubaiairports.ae; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.google.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org thelivechatsoftware.com *.thelivechatsoftware.com cdn.polyfill.io *.cloudflare.com unpkg.com 'unsafe-inline' *.mapbox.com www.googletagmanager.com www.dubaiairports.ae; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com *.google.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com *.thelivechatsoftware.com *.cloudflare.com 'unsafe-inline' *.mapbox.com www.dubaiairports.ae; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com sacwebputilmediaun01.blob.core.windows.net cdn-temp.s3.amazonaws.com *.thelivechatsoftware.com dubaiairports.imgix.net www.dubaiairports.ae cps.dubaiairports.ae scontent.cdninstagram.com stats.g.doubleclick.net *.google.com *.google.ae d1qh9zei5ifdnf.cloudfront.net stats.g.doubleclick.net *.google.de thelivechatsoftware.com *.mapbox.com; media-src 'self' data: blob: cdn.thelivechatsoftware.com *.blob.core.windows.net; frame-src 'self' www.google.com happinessmeter.dubai.gov.ae www.youtube.com; connect-src 'self' wss://blue.thelivechatsoftware.com thechatsoftware.com da.pointr.cloud www.dubaiairports.ae *.mapbox.com; 1
default-src *;frame-ancestors *.obdesign.com.tw; font-src *;img-src * data:; script-src 'unsafe-eval' 'unsafe-inline' *; style-src 'unsafe-inline' *; object-src 'none'; 1
connect-src 'self' *.frbservices.org https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com *.fedsearch.org:*; img-src 'self' *.frbservices.org *.eloqua.com *.federalreserve.org https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com; script-src 'self' *.frbservices.org 'unsafe-inline' https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com *.federalreserve.org; style-src 'self' *.frbservices.org https://fonts.googleapis.com 'unsafe-inline' https://www.googletagmanager.com https://ssl.google-analytics.com https://www.google-analytics.com; object-src 'self' *.frbservices.org; font-src 'self' https://fonts.gstatic.com; frame-src 'self' *.youtube.com information.frbcommunications.org; 1
default-src 'self';    script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com tinyurl.com broschuerenservice.wirtschaft.nrw;    style-src 'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com tinyurl.com;    font-src *;    img-src data: *;    frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com tinyurl.com;    child-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschuerenservice.wirtschaft.nrw tinyurl.com;    object-src 'self';    connect-src 'self' syndication.twitter.com;    media-src *; 1
default-src 'none';script-src 'self' https://www.googletagmanager.com https://code.jquery.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googleadservices.com https://s.adroll.com https://www.gstatic.com https://www.gstatic.com https://connect.facebook.net https://snap.licdn.com https://static.getclicky.com https://analytics.formstack.com https://d.adroll.mgr.consensu.org https://googleads.g.doubleclick.net https://in.getclicky.com https://d.adroll.mgr.consensu.org https://googleads.g.doubleclick.net https://d.adroll.com https://js.hsforms.net https://forms.hsforms.com https://digitalpacificgroup.formstack.com https://static.formstack.com https://ajax.googleapis.com https://hostopia.bamboohr.com https://pi.pardot.com data: blob: 'unsafe-inline' 'unsafe-eval';style-src 'self' https://static.formstack.com https://fonts.googleapis.com https://hostopia.bamboohr.com 'unsafe-inline';img-src 'self' https://www.anchor.com.au https://px.ads.linkedin.com https://www.google-analytics.com https://www.facebook.com https://px.ads.linkedin.com https://www.google-analytics.com https://www.facebook.com https://p.adsymptotic.com https://stats.g.doubleclick.net https://www.google.com.au https://www.google.com https://d.adroll.com https://pixel.advertising.com https://dsum-sec.casalemedia.com https://pixel.rubiconproject.com https://sync.outbrain.com https://simage2.pubmatic.com https://ads.yahoo.com https://trc.taboola.com https://eb2.3lift.com https://x.bidswitch.net https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://cm.g.doubleclick.net https://fcmatch.google.com https://fcmatch.youtube.com https://rc.rlcdn.com data: https://segments.company-target.com https://js.hsforms.net https://www.googletagmanager.com https://resources.bamboohr.com blob: 'unsafe-inline';font-src 'self' https://static.formstack.com https://fonts.gstatic.com https://themes.googleusercontent.com data: blob: 'unsafe-inline';frame-src 'self' https://www.google.com https://www.facebook.com https://www.youtube.com https://player.vimeo.com;media-src https://bid.g.doubleclick.net https://bid.g.doubleclick.net;object-src 'self';connect-src 'self' https://www.googleadservices.com https://in.getclicky.com https://www.googleadservices.com https://www.google.com.au https://hubspot-forms-static-embed.s3.amazonaws.com https://forms.hsforms.com https://www.google-analytics.com https://hostopia.bamboohr.com; 1
frame-ancestors localhost *.nie.edu.sg *ntu.edu.sg youtube.com flickr.com facebook.com maps.google.com google.com e.issuu.com instagram.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: fonts.googleapis.com fonts.gstatic.com googletagmanager.com unpkg.com 1
base-uri 'none'; object-src 'none'; script-src https://mpsocial.com/logs/ https://mpsocial.com/sidekiq/ https://mpsocial.com/mini-profiler-resources/ https://mpsocial.com/assets/ https://mpsocial.com/brotli_asset/ https://mpsocial.com/extra-locales/ https://mpsocial.com/highlight-js/ https://mpsocial.com/javascripts/ https://mpsocial.com/plugins/ https://mpsocial.com/theme-javascripts/ https://mpsocial.com/svg-sprite/ https://www.google-analytics.com/analytics.js pagead2.googlesyndication.com/pagead/js/adsbygoogle.js; worker-src 'self' https://mpsocial.com/assets/ https://mpsocial.com/brotli_asset/ https://mpsocial.com/javascripts/ https://mpsocial.com/plugins/ 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; img-src https://*; connect-src *; media-src * blob:; worker-src * blob: 1
default-src 'self';  style-src  'unsafe-inline'  'self';  script-src  'unsafe-inline' 'unsafe-eval' 'self' *.clcn.net.cn analysis.clcn.net.cn cdn.bootcss.com *.baidu.com *.google-analytics.com;  img-src 'self' data: primo.clcn.net.cn:8991 oss.clcn.net.cn *.baidu.com *.google-analytics.com bjreading.clcn.net.cn;connect-src 'self' *.baidu.com bjreading.clcn.net.cn; media-src 'self' oss.clcn.net.cn 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ecsi.net *.heartlandportico.com *.google-analytics.com *.vergic.com 1
base-uri 'self'; object-src 'none'; frame-ancestors 'none'; report-uri https://dekudeals.report-uri.com/r/d/csp/enforce; upgrade-insecure-requests 1
default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://adservice.google.com/ https://www.googletagservices.com https://*.netcoresmartech.com https://eazydiner-1.disqus.com https://*.crazyegg.com https://tagmanager.google.com https://ucads-cdn.ucweb.com https://*.ucweb.com https://unpkg.com https://*.cloudfront.net https://*.googlesyndication.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.googleadservices.com https://*.googletagmanager.com https://cdn.ampproject.org https://*.adsafeprotected.com https://*.iasds01.com https://cdn.branch.io https://*.googleapis.com https://checkout.razorpay.com https://connect.facebook.net https://*.webengage.com https://*.webengage.co/ https://app.link https://s3.amazonaws.com blob:; img-src 'self' https://pagead2.googlesyndication.com https://c.disquscdn.com https://referrer.disqus.com https://cx.atdmt.com https://www.instagram.com https://instagram.fdel22-1.fna.fbcdn.net https://*.crazyegg.com https://www.google.com.au https://www.google.com.sa  https://www.google.ae https://www.gstatic.com https://www.google.co.il https://www.tripadvisor.com https://*.ggpht.com https://*.google.ca https://*.google.co.uk https://*.googletagmanager.com https://*.alexametrics.com https://*.googleusercontent.com/ https://www.google.co.in https://*.google.com https://*.twitter.com https://www.facebook.com https://ad.doubleclick.net https://intl-tel-input.com https://*.adsafeprotected.com https://*.google-analytics.com https://*.ucweb.com https://*.g.doubleclick.net https://*.cloudfront.net https://*.ytimg.com https://*.webengage.com https://maps.gstatic.com https://static.tacdn.com https://static.eazydiner.com/ https://static-test.eazydiner.com/ https://www.tripadvisor.com https://maps.googleapis.com data:; frame-src 'self' https://survey.webengage.com https://gateway.americanexpress.co.in https://disqus.com https://www.instagram.com https://*.crazyegg.com https://*.google.com https://eazydiner.webengage.com https://eazydiner.webengagepush.com https://api.tripadvisor.com https://*.tripadvisor.com https://www.tripadvisor.in https://*.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com https://api.razorpay.com https://www.youtube.com https://*.webengage.co https://*.facebook.com; font-src 'self' https://*.cloudflare.com https://*.webengage.com https://fonts.gstatic.com data:; connect-src 'self' https://adservice.google.com https://pagead2.googlesyndication.com https://*.netcoresmartech.com https://*.crazyegg.com https://lumberjack.razorpay.com https://server.apxor.com http://gj.track.uc.cn https://*.appspot.com https://stats.g.doubleclick.net https://*.google-analytics.com https://*.ucweb.com https://www.facebook.com https://*.webengage.com https://cdn.ampproject.org https://*.googletagmanager.com https://api2.branch.io https://*.adsafeprotected.com; manifest-src 'self' https://wdc.netcoresmartech.com; script-src-elem 'self' 'unsafe-inline' https://sc.iasds01.com https://static.adsafeprotected.com https://tpc.googlesyndication.com https://adservice.google.com/ https://www.googletagservices.com https://adservice.google.co.in https://pagead2.googlesyndication.com https://z.webengage.co https://s3.amazonaws.com/webengage-files/ https://gateway.americanexpress.co.in https://maps.googleapis.com https://d31qbv1cthcecs.cloudfront.net https://checkout.razorpay.com/ https://*.googletagmanager.com https://cdn.branch.io https://connect.facebook.net https://*.webengage.com https://*.netcoresmartech.com https://pixel.adsafeprotected.com https://*.googleadservices.com https://app.link https://*.google-analytics.com https://googleads.g.doubleclick.net https://cdn.ampproject.org https://eazydiner-1.disqus.com https://c.disquscdn.com; prefetch-src 'self' https://c.disquscdn.com https://disqus.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://c.disquscdn.com; worker-src 'self' blob:; report-uri https://www.eazydiner.com/csp/report; frame-ancestors 'self' https://www.sbicard.com https://sbi-live.sbicard.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https: wss://*.driver.ru https://*.yandex.ru https://mc.yandex.ru https://mc.yandex.ua https://mc.yandex.kz https://mc.yandex.by https://mc.yandex.uz https://mc.yandex.fr https://mc.yandex.com.tr https://yandex.st https://connect.ok.ru https://vk.com https://login.vk.com https://www.odnoklassniki.ru wss://*.driverscollection.com https://*.facebook.net https://*.facebook.com https://*.addthis.com https://*.addthisedge.com https://*.yadro.ru https://widgets.pinterest.com https://www.linkedin.com https://www.reddit.com https://cdn.ampproject.org https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.google-analytics.com https://translate.googleapis.com https://*.google.com https://*.googletagmanager.com https://*.googletagservices.com https://*.gstatic.com https://adservice.google.ad https://adservice.google.ae https://adservice.google.al https://adservice.google.am https://adservice.google.as https://adservice.google.at https://adservice.google.az https://adservice.google.ba https://adservice.google.be https://adservice.google.bf https://adservice.google.bg https://adservice.google.bi https://adservice.google.bj https://adservice.google.bs https://adservice.google.bt https://adservice.google.bt https://adservice.google.by https://adservice.google.ca https://adservice.google.cd https://adservice.google.cf https://adservice.google.cf https://adservice.google.cg https://adservice.google.ch https://adservice.google.ci https://adservice.google.cl https://adservice.google.cm https://adservice.google.co.ao https://adservice.google.co.bw https://adservice.google.co.ck https://adservice.google.co.cr https://adservice.google.co.id https://adservice.google.co.il https://adservice.google.co.in https://adservice.google.co.jp https://adservice.google.co.ke https://adservice.google.co.kr https://adservice.google.co.ls https://adservice.google.co.ma https://adservice.google.co.mz https://adservice.google.co.nz https://adservice.google.co.th https://adservice.google.co.tz https://adservice.google.co.ug https://adservice.google.co.uk https://adservice.google.co.uz https://adservice.google.co.ve https://adservice.google.co.vi https://adservice.google.co.za https://adservice.google.co.zm https://adservice.google.co.zw https://adservice.google.com https://adservice.google.com.af https://adservice.google.com.ag https://adservice.google.com.ar https://adservice.google.com.au https://adservice.google.com.bd https://adservice.google.com.bh https://adservice.google.com.bn https://adservice.google.com.bo https://adservice.google.com.br https://adservice.google.com.bz https://adservice.google.com.co https://adservice.google.com.cu https://adservice.google.com.cy https://adservice.google.com.ec https://adservice.google.com.eg https://adservice.google.com.et https://adservice.google.com.fj https://adservice.google.com.gh https://adservice.google.com.gi https://adservice.google.com.gt https://adservice.google.com.hk https://adservice.google.com.jm https://adservice.google.com.kh https://adservice.google.com.kw https://adservice.google.com.lb https://adservice.google.com.ly https://adservice.google.com.mm https://adservice.google.com.mt https://adservice.google.com.mx https://adservice.google.com.my https://adservice.google.com.na https://adservice.google.com.ng https://adservice.google.com.ni https://adservice.google.com.np https://adservice.google.com.om https://adservice.google.com.pa https://adservice.google.com.pe https://adservice.google.com.pg https://adservice.google.com.ph https://adservice.google.com.pk https://adservice.google.com.pr https://adservice.google.com.py https://adservice.google.com.qa https://adservice.google.com.sa https://adservice.google.com.sb https://adservice.google.com.sg https://adservice.google.com.sv https://adservice.google.com.tj https://adservice.google.com.tr https://adservice.google.com.tw https://adservice.google.com.ua https://adservice.google.com.uy https://adservice.google.com.vc https://adservice.google.com.vn https://adservice.google.cv https://adservice.google.cz https://adservice.google.de https://adservice.google.dj https://adservice.google.dk https://adservice.google.dm https://adservice.google.dz https://adservice.google.ee https://adservice.google.es https://adservice.google.fi https://adservice.google.fm https://adservice.google.fr https://adservice.google.ga https://adservice.google.ge https://adservice.google.gg https://adservice.google.gl https://adservice.google.gm https://adservice.google.gp https://adservice.google.gr https://adservice.google.gy https://adservice.google.hn https://adservice.google.hr https://adservice.google.ht https://adservice.google.hu https://adservice.google.ie https://adservice.google.im https://adservice.google.iq https://adservice.google.is https://adservice.google.it https://adservice.google.je https://adservice.google.jo https://adservice.google.ki https://adservice.google.kg https://adservice.google.kz https://adservice.google.la https://adservice.google.li https://adservice.google.lk https://adservice.google.lt https://adservice.google.lu https://adservice.google.lv https://adservice.google.md https://adservice.google.me https://adservice.google.mg https://adservice.google.mk https://adservice.google.ml https://adservice.google.mn https://adservice.google.mu https://adservice.google.mv https://adservice.google.mw https://adservice.google.ne https://adservice.google.nl https://adservice.google.no https://adservice.google.nr https://adservice.google.pl https://adservice.google.ps https://adservice.google.pt https://adservice.google.ro https://adservice.google.rs https://adservice.google.ru https://adservice.google.rw https://adservice.google.sc https://adservice.google.se https://adservice.google.sh https://adservice.google.si https://adservice.google.sk https://adservice.google.sm https://adservice.google.sn https://adservice.google.so https://adservice.google.sr https://adservice.google.st https://adservice.google.td https://adservice.google.tg https://adservice.google.tl https://adservice.google.tm https://adservice.google.tn https://adservice.google.to https://adservice.google.tt https://adservice.google.vg https://adservice.google.vu https://adservice.google.ws https://cdnjs.cloudflare.com; report-uri https://driverscollection.com/csp-track.php; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; img-src 'self' http: https: data: mediastream: blob: filesystem: https://roko-mobi.s3.amazonaws.com https://metrics.brightcove.com https://secure.gravatar.com https://px.ads.linkedin.com https://www.google-analytics.com https://p.adsymptotic.com https://www.google.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google.lk https://www.linkedin.com https://googleads.g.doubleclick.net; connect-src 'self' https: data: blob: filesystem: http://manifest.prod.boltdns.net/ https://manifest.prod.boltdns.net/; font-src 'self' https: data: blob:; media-src 'self' https: data: blob:; report-uri https:; object-src 'none' 1
upgrade-insecure-requests; default-src 'none'; base-uri 'self'; media-src 'self'; frame-ancestors 'none'; form-action 'self' https://www.mailservis.cz https://mailservis.cz https://online.colosseum.eu https://groups.nm.cz/ https://nm.cz http://www.nm.cz https://webq-online.colosseum.eu; connect-src 'self' https://www.mailservis.cz https://fronta.nm.cz https://online.colosseum.eu https://tickets.colosseum.eu https://stats.mailservis.cz https://www.google-analytics.com; frame-src https://www.youtube.com https://w.soundcloud.com https://www.fyrebox.com https://exhibition.indihu.cz https://indihu.cz; img-src 'self' data: https://www.nm.cz https://nm.cz https://nm2018-cz.nm.netservis.cz https://www.google-analytics.com https://stats.g.doubleclick.net https://api.mapy.cz https://mapserver.mapy.cz https://csi.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://api.mapy.cz; font-src 'self' https://www.nm.cz https://fonts.gstatic.com https://api.mapy.cz; script-src 'self' 'nonce-58053ce2b5a6048d935c6581887722353135ea9f' 'sha256-NeueIEO8rwnaeJW0jYHRwrarPP+KzGzhk6xBJ06ntlw=' https://www.nm.cz https://api.mapy.cz https://www.google-analytics.com; 1
default-src 'self' 'script-src-elem' 'unsafe-inline' 'unsafe-eval' script-src 'self' https://www.google.com/recaptcha/api/siteverify http://www.aemet.es/es/eltiempo/prediccion/municipios/ http://stw.adif.es:8080 https://player.vimeo.com/ https://www.google.com/ https://www.gstatic.com/recaptcha/ data:; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.aeroparking.cz aeroparking.cz wififreetest.prg.aero wififree.prg.aero cdn.jsdelivr.net optimize.google.com *.google-analytics.com *.googletagmanager.com *.cloudfront.net *.cloudfl.net *.pingdom.net *.googleapis.com *.instagram.com *.google.com *.gstatic.com *.twitter.com *.cloudflare.com cdn.rawgit.com *.twimg.com rec.smartlook.com *.facebook.net *.youtube.com; img-src 'self' data:  *.aeroparking.cz aeroparking.cz wififreetest.prg.aero wififree.prg.aero *.cloudflare.com *.ggpht.com *.fbcdn.net *.facebook.com  *.facebook.net *.cdninstagram.com *.googleapis.com maps.gstatic.com www.google.com www.google.cz www.google-analytics.com stats.g.doubleclick.net *.prg.aero *.twitter.com *.twimg.com  apollo.prg.aero rec.smartlook.com i.ytimg.com *.ytimg.com optimize.google.com *.gstatic.com; frame-src 'self' *.aeroparking.cz aeroparking.cz wififreetest.prg.aero wififree.prg.aero *.prg.aero prg.fltmaps.com www.google.com *.twitter.com twitter.com rec.smartlook.com www.flightconnections.com *.youtube.com optimize.google.com *.spotify.com *.mall.tv *.flightradar24.com player.vimeo.com fresnel.vimeocdn.com; 1
default-src 'self'; object-src 'none'; img-src * data: blob:; font-src * data:; connect-src 'self' https://ynuf.aliapp.org/ https://translate.googleapis.com wss://www.bilaxy.com wss://bilaxy.com wss://m.bilaxy.com wss://www.bilaxy.io wss://bilaxy.io wss://m.bilaxy.io wss://www.bilaxy.net wss://bilaxy.net wss://m.bilaxy.net https://discovery.amp.cloudflare.com https://bilaxy.zendesk.com/ https://ekr.zdassets.com/ https://newapi.bilaxy.com/ https://newapi.bilaxy.io/ https://newapi.bilaxy.net/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://translate.googleapis.com cdnjs.cloudflare.com amp.cloudflare.com storage.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.cloudflareinsights.com *.tdum.alibaba.com https://ynuf.aliapp.org/ https://translate.google.com https://translate.googleapis.com storage.googleapis.com ajax.cloudflare.com cdn.polyfill.io amp.cloudflare.com cdnjs.cloudflare.com discovery.amp.cloudflare.com static.zdassets.com ekr.zdassets.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://g.alicdn.com/ https://cf.aliyun.com/ https://ynuf.alipay.com/;frame-src 'self' https://www.google.com/ 1
default-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://* https://snap.licdn.com/ https://fonts.googleapis.com cdnjs.cloudflare.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com cdnjs.cloudflare.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://* https://open-xchange.piwik.pro https://open-xchange.containers.piwik.pro cdnjs.cloudflare.com try-gold.ox.io www.google.com https://www.gstatic.com/; form-action 'self' https://forms.hsforms.com/ https://seu2.cleverreach.com https://portal.open-xchange.com; object-src 'self'; img-src 'self' data: https://forms.hubspot.com https://p.adsymptotic.com https://track.hubspot.com/ https://perf.hsforms.com/ https://forms.hsforms.com/ https://px.ads.linkedin.com/ https://open-xchange.piwik.pro https://*.staticflickr.com https://*.vimeocdn.com https://www.linkedin.com; connect-src 'self' https://forms.hsforms.com/ https://forms.hubspot.com/ https://open-xchange.piwik.pro https://*.vimeo.com open-xchange.containers.piwik.pro https://*.ox.io; media-src 'self'; frame-src 'self' https://forms.hsforms.com/ https://app.hubspot.com www.google.com https://www.gstatic.com/ https://player.vimeo.com http://player.vimeo.com https://fresnel.vimeocdn.com https://*.youtube.com; frame-ancestors 'self' https://app.hubspot.com/; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; img-src 'self' * data:; font-src 'self' *; connect-src 'self' *; frame-src 'self' *; 1
default-src * data: blob:;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com https://static.hotjar.com;frame-src 'self' https://*.mhcache.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://vars.hotjar.com https://*.facebook.com https://*.googleapis.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://www.zenaps.com;script-src *.myheritage.de https://www.myheritage.de  'unsafe-eval' 'unsafe-inline' blob: data: 'self' https://*.myheritage.com https://*.mhcache.com https://cdn.trackjs.com https://tpc.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.googletagmanager.com https://connect.facebook.net https://bat.bing.com https://www.googleadservices.com https://*.google-analytics.com https://www.gstatic.com https://*.googleapis.com https://js-agent.newrelic.com https://*.nr-data.net https://*.mk-sense.com https://code.jquery.com https://*.hotjar.com https://www.dwin1.com https://www.zenaps.com https://ad.zanox.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://tagmanager.google.com https://optanon.blob.core.windows.net;connect-src data: 'self' https://*.myheritage.com https://*.mhcache.com https://www.google-analytics.com https://adservice.google.com https://*.nr-data.net https://sentry.io https://capture.trackjs.com https://*.bing.com https://*.facebook.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io:* https://*.doubleclick.net https://*.mk-sense.com https://privacyportal-eu.onetrust.com *.myheritage.de;media-src 'self' https://*.myheritage.com https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=enforce&canonical_page_id=/company/home/ 1
frame-ancestors http://www.casamples.com https://www.casamples.com https://www.curriculumassociates.com 'self'; 1
frame-ancestors 'self' *.spine.org spineadvocacy.org 1
default-src https:;script-src 'unsafe-inline' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://*.googleadservices.com https://www.googletagservices.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.gstatic.com https://tpc.googlesyndication.com https://cdn.ampproject.org https://adservice.google.com https://www.google.com https://adservice.google.ad https://adservice.google.ae https://adservice.google.com.af https://adservice.google.com.ag https://adservice.google.com.ai https://adservice.google.al https://adservice.google.am https://adservice.google.co.ao https://adservice.google.com.ar https://adservice.google.as https://adservice.google.at https://adservice.google.com.au https://adservice.google.az https://adservice.google.ba https://adservice.google.com.bd https://adservice.google.be https://adservice.google.bf https://adservice.google.bg https://adservice.google.com.bh https://adservice.google.bi https://adservice.google.bj https://adservice.google.com.bn https://adservice.google.com.bo https://adservice.google.com.br https://adservice.google.bs https://adservice.google.bt https://adservice.google.co.bw https://adservice.google.by https://adservice.google.com.bz https://adservice.google.ca https://adservice.google.cd https://adservice.google.cf https://adservice.google.cg https://adservice.google.ch https://adservice.google.ci https://adservice.google.co.ck https://adservice.google.cl https://adservice.google.cm https://adservice.google.cn https://adservice.google.com.co https://adservice.google.co.cr https://adservice.google.com.cu https://adservice.google.cv https://adservice.google.com.cy https://adservice.google.cz https://adservice.google.de https://adservice.google.dj https://adservice.google.dk https://adservice.google.dm https://adservice.google.com.do https://adservice.google.dz https://adservice.google.com.ec https://adservice.google.ee https://adservice.google.com.eg https://adservice.google.es https://adservice.google.com.et https://adservice.google.fi https://adservice.google.com.fj https://adservice.google.fm https://adservice.google.fr https://adservice.google.ga https://adservice.google.ge https://adservice.google.gg https://adservice.google.com.gh https://adservice.google.com.gi https://adservice.google.gl https://adservice.google.gm https://adservice.google.gr https://adservice.google.com.gt https://adservice.google.gy https://adservice.google.com.hk https://adservice.google.hn https://adservice.google.hr https://adservice.google.ht https://adservice.google.hu https://adservice.google.co.id https://adservice.google.ie https://adservice.google.co.il https://adservice.google.im https://adservice.google.co.in https://adservice.google.iq https://adservice.google.is https://adservice.google.it https://adservice.google.je https://adservice.google.com.jm https://adservice.google.jo https://adservice.google.co.jp https://adservice.google.co.ke https://adservice.google.com.kh https://adservice.google.ki https://adservice.google.kg https://adservice.google.co.kr https://adservice.google.com.kw https://adservice.google.kz https://adservice.google.la https://adservice.google.com.lb https://adservice.google.li https://adservice.google.lk https://adservice.google.co.ls https://adservice.google.lt https://adservice.google.lu https://adservice.google.lv https://adservice.google.com.ly https://adservice.google.co.ma https://adservice.google.md https://adservice.google.me https://adservice.google.mg https://adservice.google.mk https://adservice.google.ml https://adservice.google.com.mm https://adservice.google.mn https://adservice.google.ms https://adservice.google.com.mt https://adservice.google.mu https://adservice.google.mv https://adservice.google.mw https://adservice.google.com.mx https://adservice.google.com.my https://adservice.google.co.mz https://adservice.google.com.na https://adservice.google.com.ng https://adservice.google.com.ni https://adservice.google.ne https://adservice.google.nl https://adservice.google.no https://adservice.google.com.np https://adservice.google.nr https://adservice.google.nu https://adservice.google.co.nz https://adservice.google.com.om https://adservice.google.com.pa https://adservice.google.com.pe https://adservice.google.com.pg https://adservice.google.com.ph https://adservice.google.com.pk https://adservice.google.pl https://adservice.google.pn https://adservice.google.com.pr https://adservice.google.ps https://adservice.google.pt https://adservice.google.com.py https://adservice.google.com.qa https://adservice.google.ro https://adservice.google.ru https://adservice.google.rw https://adservice.google.com.sa https://adservice.google.com.sb https://adservice.google.sc https://adservice.google.se https://adservice.google.com.sg https://adservice.google.sh https://adservice.google.si https://adservice.google.sk https://adservice.google.com.sl https://adservice.google.sn https://adservice.google.so https://adservice.google.sm https://adservice.google.sr https://adservice.google.st https://adservice.google.com.sv https://adservice.google.td https://adservice.google.tg https://adservice.google.co.th https://adservice.google.com.tj https://adservice.google.tl https://adservice.google.tm https://adservice.google.tn https://adservice.google.to https://adservice.google.com.tr https://adservice.google.tt https://adservice.google.com.tw https://adservice.google.co.tz https://adservice.google.com.ua https://adservice.google.co.ug https://adservice.google.co.uk https://adservice.google.com.uy https://adservice.google.co.uz https://adservice.google.com.vc https://adservice.google.co.ve https://adservice.google.vg https://adservice.google.co.vi https://adservice.google.com.vn https://adservice.google.vu https://adservice.google.ws https://adservice.google.rs https://adservice.google.co.za https://adservice.google.co.zm https://adservice.google.co.zw https://adservice.google.cat;script-src-attr 'none';style-src 'self' 'unsafe-inline';object-src https://*.googlesyndication.com;frame-src https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://*.g.doubleclick.net https://*.google.com;connect-src 'self' https://api64.com https://appn.center https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://analytics.google.com https://*.g.doubleclick.net https://*.gstatic.com https://adservice.google.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.vg https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat;font-src 'self';base-uri 'self';report-uri https://appn.center/apiv1/csp2; 1
frame-ancestors www.red-gate.com; 1
default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';  media-src * blob: 'unsafe-inline' 'unsafe-eval'; 1
frame-ancestors 'self' us02.procore.com app.procore.com www.procore.com fairfieldpm.nexuspayables.com ap.nexuspayables.com www.nxsap.net payables.nxsap.com saas.nxsap.com www.nxsap.com saasap.payablesnexus.net ap.payablesnexus.net www.payablesnexus.net saas.payablesnexus.net saas.nexuspayables.com www.nexuspayables.com saas.payablesnexus.com www.payablesnexus.com www.rcashasp1.com www.yardimarketplace.com www.rcashqa.com demo.equallevel.com s1-2.ariba.com nexus-dev2.ventasreit.com nexus.ventasreit.com payables.nxsap.net connect.punchout2go.com portal.punchout2go.com usertest.sciquest.com solutions.sciquest.com service.ariba.com s1.ariba.com market.opstechnology.com demomarket.opstechnology.com osu.edirx.com shop.equallevel.com app.spendbridge.com ariba-test.epro.cgipdc.com ariba.epro.cgipdc.com ariba.nova.edu aribatest.nova.edu enterprise-services1.myworkday.com impl-cci.workday.com fsdev.umsystem.edu fsdev2.umsystem.edu fstst.umsystem.edu fsqa.umsystem.edu fsprd.umsystem.edu fsrpt.umsystem.edu nexus.iret.com app.classwallet.com; upgrade-insecure-requests 1
default-src 'self' https: wss:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' https: ; style-src 'self' https: 'unsafe-inline' 1
default-src 'self';script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.youtube.com https://s.ytimg.com https://web103.reachmee.com https://connect.soundcloud.com https://script.e-space.se; style-src 'self' 'unsafe-inline' ;frame-src 'self' https://web103.reachmee.com https://s.ytimg.com https://www.youtube.com https://w.soundcloud.com; img-src 'self' data: https://i.ytimg.com; connect-src 'self' https://www.googleapis.com https://soundcloud.com; object-src 'self' 1
default-src 'self'; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-top-navigation-by-user-activation allow-presentation; img-src 'self' data: blob: about: https://*.yimg.com https://*.yahoo.com https://*.yahoo.net https://*.yahoodns.net https://us.y.atwola.com https://*.scorecardresearch.com https://dishdigital.sp1.convertro.com https://servedby.flashtalking.com https://d.agkn.com https://*.doubleclick.net https://*.adsafeprotected.com https://*.googlesyndication.com https://tps30.doubleverify.com https://secure.insightexpressai.com https://secure-gl.imrworldwide.com/cgi-bin/ https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com https://pbs.twimg.com https://abs.twimg.com https://*.adaptv.advertising.com/ https://trk.vidible.tv/ https://media-mbst-pub-ue1.s3.amazonaws.com https://*.cloudfront.net https://vop-yahoo.secure.footprint.net https://vop-yahoo.akamaized.net https://yahoovod.hs.llnwd.net; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://polyfills.yahooapis.com https://*.oath.com https://s.yimg.com https://fc.yahoo.com/sdarla/ https://www.gstatic.com https://*.yahoo.com https://cdn.syndication.twimg.com https://search.cashay.com https://platform.twitter.com https://instagram.com https://www.instagram.com https://s.yimg.com/rx/ https://assets.video.yahoo.net/; object-src https://cashay.com https://s.yimg.com; style-src 'self' 'unsafe-inline' https://cashay.com https://s.yimg.com https://platform.twitter.com https://assets.video.yahoo.net; media-src 'self' blob: https://*.2mdn.net https://cashay.com https://s.yimg.com https://video-api.yql.yahoo.com https://*.yahoo.net/; frame-src 'self' https://sp.analytics.yahoo.com https://smartasset.com https://s.yimg.com https://fc.yahoo.com https://cashay.com https://guce.oath.com https://guce.yahoo.com https://guce.cashay.com https://delivery.vidible.tv https://platform.twitter.com https://syndication.twitter.com https://*.advertising.com https://www.surveymonkey.com https://www.instagram.com https://www.googletagmanager.com https://www.youtube.com https://embed.acast.com https://assets.video.yahoo.net/ https://cdn-ssl.vidible.tv/prod/; worker-src 'self' blob: https://cashay.com; manifest-src 'self' https://s.yimg.com; font-src 'self' data: https://cashay.com https://s.yimg.com https://fonts.gstatic.com; child-src blob:; connect-src 'self' https://guce.cashay.com https://s.yimg.com https://rtr.innovid.com https://*.yahoo.net https://*.yahoo.com https://*.oath.com https://*.advertising.com https://ima3vpaid.appspot.com https://ad.doubleclick.net https://*.vpg.cdn.yimg.com/ https://media.zenfs.com/ https://*.uplynk.com https://cloudflare-dns.com; report-uri https://csp.yahoo.com/beacon/csp?src=cashay; report-to csp-endpoint; upgrade-insecure-requests; 1
report-uri https://www.yelp.com/csp_block?id=79c513a2e529fb59&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609221280; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
default-src 'self' http://*.hotjar.com:* https://*.hotjar.com:* wss://*.hotjar.com http://*.ecal.com https://sync.ecal.com/button/v1/*; script-src 'self' 'unsafe-inline' https://www.google-analytics.com *.googletagmanager.com *.google.com *.gstatic.com *.facebook.net *.cloudfront.net *.sharethis.com https://vjs.zencdn.net/5.11.6/video.min.js https://www.youtube.com/iframe_api https://api.keen.io/3.0/projects/57e146aa8db53dfda8a703aa/events/* https://s.ytimg.com/yts/jsbin/www-widgetapi-vflN2g023/www-widgetapi.js http://*.hotjar.com *.twitter.com *.twimg.com http://*.hotjar.com https://*.hotjar.com http://sync.ecal.com https://sync.ecal.com http://sync.ecal.com/button/v1/main.js 'unsafe-eval' https://widget.spreaker.com/widgets.js https://4screens.net/* https://cdnjs.cloudflare.com https://open.http.mp.streamamg.com http://stats.mp.streamamg.com https://www.sporcle.com http://www.surveygizmo.eu; object-src *.googletagmanager.com *.google.com; style-src 'self' 'unsafe-inline' *.googletagmanager.com *.google.com https://vjs.zencdn.net/5.11.6/video-js.min.css https://d3b68xc7uyqhns.cloudfront.net/assets/css/schuh.css *.twitter.com https://ws.sharethis.com/button/css/buttons-secure.css http://sync.ecal.com http://sync.ecal.com/* https://sync.ecal.com/button/v1/css/widget.*.css https://sync.ecal.com/button/v1/css/* https://optimize.google.com https://fonts.googleapis.com *.twimg.com https://cs.betradar.com; img-src 'self' data: * http://*.hotjar.com https://*.hotjar.com https://www.google-analytics.com https://optimize.google.com; media-src 'self' *.googletagmanager.com *.google.com http://open.http.mp.streamamg.com blob:; frame-src 'self' https://www.google.com https://www.youtube.com https://video.pdc.tv *.googletagmanager.com *.google.com  https://*.hotjar.com *.twitter.com https://pdc.tell-us-what-you-think.com https://c.sharethis.mgr.consensu.org https://ws.sharethis.com http://t.sharethis.com http://l.sharethis.com https://sync.ecal.com https://widget.spreaker.com https://4screens.net https://4screens.net/* https://www.sporcle.com https://fonts.gstatic.com http://sync.ecal.com https://sync.ecal.com/*; frame-ancestors *.googletagmanager.com *.google.com; child-src *.googletagmanager.com *.google.com https://*.hotjar.com; font-src 'self' *.googletagmanager.com *.google.com http://*.hotjar.com https://*.hotjar.com https://fonts.gstatic.com http://open.http.mp.streamamg.com; connect-src 'self' https://pdclive.servasport.com https://www.sportradar.com *.googletagmanager.com *.google.com https://drive-video.herokuapp.com/mbx/c889b040 https://www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* wss://*.hotjar.com https://t.sharethis.com/* https://*.sharethis.com https://vc.hotjar.io https://api.ecal.com https://api.ecal.com/* http://open.http.mp.streamamg.com http://cf.vod.mp.streamamg.com https://www.facebook.com/tr; report-uri /report-csp-violation 1
block-all-mixed-content; connect-src 'self' wss://*.amateri.com www.google-analytics.com amateri-video-original.s3.eu-west-1.amazonaws.com sentry.amateri.com *.hotjar.com *.hotjar.io; default-src 'self' https://video-cdn.amateri.com; font-src 'self' *.hotjar.com data:; frame-src www.google.com bngpt.com *.hotjar.com; img-src 'self' *.amateri.com data: www.google-analytics.com stats.g.doubleclick.net chart.googleapis.com *.hotjar.com; media-src 'self' https://video-cdn.amateri.com blob:; script-src 'unsafe-inline' 'self' www.google-analytics.com www.google.com www.gstatic.com browser.sentry-cdn.com static.hotjar.com 'nonce-Re2dkY+p8d/BdlqKR2wSzQ==' 'strict-dynamic'; style-src 'self' 'unsafe-inline'; 1
frame-ancestors 'self' https://www.accelebrate.com https://*.opensesame.com 1
default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; img-src * data: blob: 'unsafe-inline'; style-src * data: blob: 'unsafe-inline'; 1
default-src 'self' https://cdn.projects.co.id https://upload.projects.co.id https://disqus.com https://*.disquscdn.com; font-src 'self' https: data:; connect-src 'self' https://upload.projects.co.id ws: wss: https://links.services.disqus.com https://www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.projects.co.id https://www.google-analytics.com https://*.pusherapp.com https://*.pusher.com https://projectscoid.disqus.com https://*.disquscdn.com https://disqus.com https://ajax.googleapis.com; style-src 'self' 'unsafe-inline' https://cdn.projects.co.id https://*.disquscdn.com https://fonts.googleapis.com; img-src 'self' blob: data: https:; media-src 'self' blob: https:; object-src 'self' https://cdn.projects.co.id; frame-src 'self' https://youtube.com https://www.youtube.com https://disqus.com 1
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' spscc.radiusbycampusmgmt.com spscc.hobsonsradius.com 25livepub.collegenet.com bbox.blackbaudhosting.com connect.facebook.net cse.google.com e.issuu.com fonts.googleapis.com loader.webspellchecker.net rw1.marchex.io scripts.mymarketingreports.com translate.google.com translate.googleapis.com www.google-analytics.com www.googleapis.com www.google.com www.googletagmanager.com www.googleadservices.com www.tickcounter.com googleads.g.doubleclick.net siteimproveanalytics.com; object-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' bbox.blackbaudhosting.com cdnjs.cloudflare.com fonts.googleapis.com spscc.radiusbycampusmgmt.com spscc.hobsonsradius.com translate.googleapis.com www.google.com; img-src 'self' 'unsafe-inline' data: 25livepub.collegenet.com bbox.blackbaudhosting.com clients1.google.com fonts.googleapis.com i.ytimg.com px.marchex.io spscc.edu spscc.radiusbycampusmgmt.com spscc.hobsonsradius.com stats.g.doubleclick.net translate.google.com translate.googleapis.com www.facebook.com www.google-analytics.com www.googleapis.com www.google.com www.gstatic.com *.siteimprove.com  *.siteimproveanalytics.io googleads.g.doubleclick.net; media-src 'self' 'unsafe-inline'; frame-src 'self' 5p4rk13.com bbox.blackbaudhosting.com calendar.google.com connect.facebook.net cse.google.com e.issuu.com maps.google.com snapwidget.com staticxx.facebook.com www.facebook.com www.google.com www.tickcounter.com www.youtube.com googleads.g.doubleclick.net forms.office.com publish.smartsheet.com; frame-ancestors 'self' 5p4rk13.com bbox.blackbaudhosting.com calendar.google.com connect.facebook.net cse.google.com e.issuu.com maps.google.com snapwidget.com staticxx.facebook.com www.facebook.com www.google.com www.tickcounter.com www.youtube.com googleads.g.doubleclick.net forms.office.com publish.smartsheet.com; child-src 'self' 5p4rk13.com bbox.blackbaudhosting.com calendar.google.com connect.facebook.net cse.google.com e.issuu.com maps.google.com snapwidget.com staticxx.facebook.com www.facebook.com www.google.com www.tickcounter.com www.youtube.com googleads.g.doubleclick.net forms.office.com publish.smartsheet.com; font-src 'self' data: cdnjs.cloudflare.com fonts.googleapis.com fonts.gstatic.com staticxx.facebook.com www.google.com; connect-src 'self' translate.googleapis.com 25livepub.collegenet.com; report-uri /report-csp-violation 1
default-src 'self'; font-src 'self' data: www.iselect.com.au d6tizftlrpuof.cloudfront.net; frame-src 'self' *.iselect.com.au *.trustpilot.com *.demdex.net *.doubleclick.net; frame-ancestors 'self' *.iselect.com.au ; object-src 'self'; child-src 'self'; media-src 'self' ; img-src data: 'self' *.iselect.com.au *.everesttech.net *.demdex.net *.facebook.com *.google-analytics.com *.doubleclick.net *.google.com *.google.com.au d6tizftlrpuof.cloudfront.net *.bing.com *.usabilla.com; style-src 'self' 'unsafe-inline' d6tizftlrpuof.cloudfront.net; connect-src 'self' 'unsafe-inline' *.iselect.com.au *.tt.omtrdc.net *.demdex.net *.usabilla.com *.akstat.io *.go-mpulse.net *.nr-data.net ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.iselect.com.au *.trustpilot.com *.adobedtm.com *.facebook.net *.googletagmanager.com *.google-analytics.com *.usabilla.com *.nr-data.net *.doubleclick.net *.site24x7rum.com *.googleadservices.com *.bing.com *.go-mpulse.net *.akstat.io ; 1
default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: 1
base-uri 'none'; object-src 'none'; script-src https://twittercommunity.com/logs/ https://twittercommunity.com/sidekiq/ https://twittercommunity.com/mini-profiler-resources/ https://aws1.discourse-cdn.com/twitter/assets/ https://aws1.discourse-cdn.com/twitter/brotli_asset/ https://twittercommunity.com/extra-locales/ https://sjc5.discourse-cdn.com/twitter/highlight-js/ https://sjc5.discourse-cdn.com/twitter/javascripts/ https://sjc5.discourse-cdn.com/twitter/plugins/ https://sjc5.discourse-cdn.com/twitter/theme-javascripts/ https://sjc5.discourse-cdn.com/twitter/svg-sprite/ https://www.google-analytics.com/analytics.js https://platform.twitter.com/widgets.js https://platform.twitter.com/widgets.js; worker-src 'self' https://aws1.discourse-cdn.com/twitter/assets/ https://aws1.discourse-cdn.com/twitter/brotli_asset/ https://sjc5.discourse-cdn.com/twitter/javascripts/ https://sjc5.discourse-cdn.com/twitter/plugins/ 1
default-src 'self'; script-src https://*.google.rs https://*.google.com.tw https://*.google.hu https://*.google.com.kw https://*.google.ch https://*.google.mu https://*.google.com.sg https://*.google.com.vn https://*.google.com.qa https://*.google.com.br https://*.google.com.lb https://*.google.se https://*.google.com.ph https://*.google.com.ua https://*.google.co.za https://*.google.com.au https://*.google.com.hk https://*.google.ie https://*.google.ae https://*.google.az https://*.google.be https://*.google.bg https://*.google.co.id https://*.google.co.il https://*.google.co.kr https://*.google.co.th https://*.google.co.uk https://*.google.co.uz https://*.google.com.ar https://*.google.com.sa https://*.google.com.tj https://*.google.com.tr https://*.google.com.ua https://*.google.cz https://*.google.de https://*.google.ee https://*.google.es https://*.google.fi https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.hr https://*.google.jo https://*.google.kg https://*.google.kz https://*.google.lt https://*.google.lv https://*.google.md https://*.google.nl https://*.google.pl https://*.google.pt https://*.google.tm https://*.google.at https://*.google.ca https://*.google.co.in https://*.google.co.jp https://*.google.co.nz https://*.google.co.tz https://*.google.com.cu https://*.google.com.cy https://*.google.com.eg https://*.google.dk https://*.google.gr https://*.google.it https://*.google.ro https://*.google.sk https://*.google.tg https://*.google.ru https://mc.yandex.ru https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.ua https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net https://clck.yandex.ru https://sitesearch-suggest.yandex.ru https://*.googlesyndication.com https://*.google-analytics.com *.googleapis.com https://*.googlesyndication.com https://*.google.ru https://*.google.com https://*.googletagservices.com https://*.googleadservices.com https://partner.googleadservices.com https://sitesearch-suggest.yandex.ru an.yandex.ru yandex.st yastatic.net mc.yandex.ru banners.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net yandex.ru https://*.yandex.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.googleapis.com yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net 'self' 'unsafe-inline' 'unsafe-eval'; img-src https://site.yandex.net https://*.yandex.ru clck.yandex.ru yandex.ru https://googleads.g.doubleclick.net https://*.gstatic.com https://*.yastatic.net yastatic.net https://*.google.com https://*.yadro.ru https://*.googlesyndication.com https://*.google-analytics.com https://avatars.mds.yandex.net data: avatars-fast.yandex.net favicon.yandex.net an.yandex.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net https://*.yandex.ru 'self'; frame-src https://*.doubleclick.net/ https://*.googlesyndication.com awaps.yandex.net yandexadexchange.net *.yandexadexchange.net yastatic.net *.yandex.ru banners.adfox.ru yastat.net blob: https://mc.yandex.ru 'self'; connect-src https://adservice.google.com https://*.google-analytics.com https://*.googlesyndication.com https://*.gstatic.com an.yandex.ru strm.yandex.ru mc.yandex.ru yandex.st yastatic.net matchid.adfox.yandex.ru adfox.yandex.ru ads.adfox.ru ads6.adfox.ru jstracer.yandex.ru yastat.net yandex.ru https://mc.yandex.ru https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.ua https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net 'self'; media-src 'self' *.yandex.net strm.yandex.ru *.strm.yandex.ru yandex.ru yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net data:; font-src data: fonts.gstatic.com https://fonts.gstatic.com an.yandex.ru yastatic.net yastat.net 'self'; child-src blob: https://mc.yandex.ru; 1
default-src 'self' platformapi.metadata.io js.driftt.com; connect-src *; frame-src *; img-src * data:; media-src *; script-src 'self' *.googleapis.com www.youtube.com s.ytimg.com js.driftt.com *.marketo.com *.marketo.net cdn.bibblio.org analytics.tiktok.com analytics.twitter.com cdnjs.cloudflare.com static.addtoany.com connect.facebook.net sjs.bizographics.com amplify.outbrain.com metadata-static-files.sfo2.cdn.digitaloceanspaces.com px.ads.linkedin.com static.addtoany.com www.googletagmanager.com www.google-analytics.com www.brighttalk.com www.googleadservices.com ct.capterra.com www.linkedin.com www.google.com tpc.googlesyndication.com assets.pinterest.com www.yummly.com www.houzz.com snap.licdn.com static.ads-twitter.com www.googletagmanager.com 'unsafe-inline' 'unsafe-eval' data: blob:; style-src * 'unsafe-inline'; font-src * data:; object-src 'none'; report-uri https://5bg59249.uriports.com/reports/report; report-to default 1
default-src 'self' *.gotoassist.com *.dev-gotoassist.com fastsupport.com i1fastsupport.com stage.fastsupport.com 'unsafe-inline' 'unsafe-eval' data: *.getgo.com *.google.com *.google-analytics.com *.googleapis.com 1
frame-ancestors https://craft.getclockwise.com 1
frame-ancestors 'self'  http://*.impress.ly  http://*.dragndropbuilder.com  https://*.weeblycloud.com  https://*.sitelock.com  https://*.mojomarketplace.com  http://*.ipage.com  http://*.yourhostingaccount.com  https://*.ecwid.com  https://platform.cloud.coveo.com  https://search.cloud.coveo.com 1
frame-ancestors 'self' *.websitebuilder.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com/ https://about.jobbnorge.no/ https://ajax.googleapis.com https://browser-update.org https://www.jobbnorge.no/ https://connect.facebook.net https://browser-update.org/update.min.js https://s.ytimg.com https://policy.app.cookieinformation.com https://www.google-analytics.com https://www.googletagmanager.com/ https://studio.simplifai.ai/is/ https://studio.simplifai.ai/is/api/conversation/init;                                                        connect-src https://app.emarketeer.com https://translate.googleapis.com https://about.jobbnorge.no/ https://export.jobbnorge.no/ https://id.jobbnorge.no/ https://www.jobbnorge.no/ https://studio.simplifai.ai/is/api/ https://www.facebook.com https://consent.app.cookieinformation.com  https://www.google-analytics.com;                                                        script-src-elem 'self' 'unsafe-inline' https://ajax.googleapis.com/ajax/libs/swfobject/2.2/swfobject.js https://ajax.googleapis.com/ajax/libs/jqueryui/1.9.2/jquery-ui.min.js https://browser-update.org/update.show.min.js https://s.ytimg.com/ https://studio.simplifai.ai/ https://about.jobbnorge.no/ https://www.googletagmanager.com/ https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/ https://www.google-analytics.com/ https://policy.app.cookieinformation.com/ https://connect.facebook.net/ https://browser-update.org/update.min.js;                style-src-elem 'self' 'unsafe-inline' https://about.jobbnorge.no/ https://fonts.googleapis.com https://pro.fontawesome.com/releases/v5.7.1/css/ https://netdna.bootstrapcdn.com/font-awesome/4.0.3/css/;               report-uri https://jobbnorge.report-uri.com/r/d/csp/reportOnly 1
frame-ancestors 'self' https://*.boditrax.com/; 1
block-all-mixed-content; script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data: *.gstatic.com *.googleadservices.com *.google.com *.google.cz *.szn.cz *.sdn.cz *.sdn.szn.cz *.mapy.cz *.imedia.cz *.pliing.com *.gemius.pl *.bootstrapcdn.com cdn.ampproject.org https://track.adform.net *.pubmatic.com *.adform.net *.adnxs.com *.doubleclick.net *.doubleverify.com *.serving-sys.com ads.celtra.com *.googletagmanager.com *.google-analytics.com *.googletagservices.com *.googlesyndication.com *.inspectlet.com *.twitter.com *.twimg.com *.facebook.net *.facebook.com *.cloudflare.com *.scif.cz *.kupi.cz *.bbelements.com *.adocean.pl *.consensu.org *.adnxs.net *.adsafeprotected.com *.sbeta.cz *.sklik.cz ads.celtra.com *.imedia.dev.dszn.cz *.scorecardresearch.com *.quantserve.com *.newrelic.com *.etargetnet.com *.seznam.cz *.antiadblock.com *.2mdn.net *.cdn-apple.com; worker-src 'self' blob:; report-uri https://report.kupi.cz/csp/report 1
script-src *.midphase.com *.uk2group.com *.dwin1.com *.hsforms.com *.hsforms.net *.puzzel.com *.google.com *.google.co.uk *.googleapis.com *.gdmdigital.com *.bing.com *.jquery.com *.hotjar.com platform.linkedin.com www.linkedin.com platform.twitter.com *.pingdom.net *.websitealive.com m.addthisedge.com ssl.google-analytics.com *.addthis.com *.trustpilot.com *.cloudfront.net *.visualwebsiteoptimizer.com *.adroll.com *.facebook.net www.googleadservices.com *.qualtrics.com www.google.com apis.google.com www.googletagmanager.com www.google-analytics.com cdn.syndication.twimg.com syndication.twitter.com platform.twitter.com fp.gdmdigital.com connect.facebook.net app.yieldify.com yieldify.com www.gstatic.com *.cloudfront.net tracking.websitealive.com secure.adnxs.com  www.youtube.com s.ytimg.com 'self' 'unsafe-inline' 'unsafe-eval'; default-src 'self' *.midphase.com *.puzzel.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: *.midphase.com *.puzzel.com fonts.gstatic.com maxcdn.bootstrapcdn.com; img-src 'self' *.midphase.com *.uk2group.com *.puzzel.com *.bing.com www.linkedin.com *.gravatar.com ssl.google-analytics.com *.pingdom.net *.websitealive.com *.adroll.com *.licdn.com *.twimg.com *.bidswitch.net *.rlcdn.com *.licdn.com www.privacytrust.com *.twitter.com *.openx.net *.doubleclick.net *.cloudfront.net *.adnxs.com go.flx1.com pbs.twimg.com platform.twitter.com *.facebook.com csi.gstatic.com syndication.twitter.com s.c.lnkd.licdn.com *.etrust.org *.gstatic.com 55b558c7-resources.bk-partnersasia.com *.visualwebsiteoptimizer.com www.google-analytics.com www.facebook.com www.google.com www.google.co.uk stats.g.doubleclick.net data:; style-src 'self' *.midphase.com *.twitter.com *.puzzel.com *.google.com *.pingdom.net *.websitealive.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.cloudfront.net 'unsafe-inline'; frame-src 'self' *.midphase.com *.uk2group.com *.puzzel.com *.hsforms.com *.hsforms.net *.facebook.net *.facebook.com *.hotjar.com *.twitter.com *.websitealive.com staticxx.facebook.com *.addthis.com *.trustpilot.com *.google.com www.youtube.com app.yieldify.com accounts.google.com apis.google.com www.facebook.com; connect-src 'self' *.midphase.com m.addthis.com *.puzzel.com *.trustpilot.com *.pingdom.net *.twitter.com *.hotjar.com ws://127.0.0.1:35729 wss://ws2.hotjar.com wss://ws4.hotjar.com *.visualwebsiteoptimizer.com geo.yieldify.com; frame-ancestors 'self'; 1
block-all-mixed-content; frame-ancestors *; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=index&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=219ccd54-607d-44a8-ba77-629d0ff93fdf 1
frame-ancestors 'self' http://www.growingio.com https://www.growingio.com 1
frame-ancestors 'self' https://bannerhealth.com https://www.bannerhealth.com https://Qa.stage.bannerhealth.com https://stage.bannerhealth.com https://qa.bannerhealth.com https://qa-cm.bannerhealth.com https://iframe.dev.buoyhealth.com https://dev-sc-cd.dbt.testbhealth.com https://qa-sc-cd.dbt.testbhealth.com https://uat.bannerhealth.com https://beta.bannerhealth.com 1
connect-src 'self' wss://*.nestaway.com:* *.nestaway.com *.recruiterbox.com metapod-nestaway.firebaseio.com *.googleapis.com *.razorpay.com us-central1-production-nestaway.cloudfunctions.net us-central1-metapod-nestaway.cloudfunctions.net graph.facebook.com www.facebook.com www.google-analytics.com *.mixpanel.com *.freshmarketer.com wss://*.freshmarketer.com cdnjs.cloudflare.com/ajax/libs/knockout/ www.google.com www.google.co.in *.doubleclick.net *.jquery.com *.mouseflow.com nestaway-assets.nestaway.com *.twitter.com *.qualaroo.com wss://*.qualaroo.com *.nr-data.net wss://*.nr-data.net hooks.zapier.com/hooks/catch/1199663/ hooks.zapier.com/hooks/catch/3492762/ hooks.zapier.com/hooks/catch/5238762/ wss://production-nestaway.firebaseio.com production-nestaway.firebaseio.com *.ucweb.com *.bugsnag.com websdk.moengage.com; manifest-src 'self' https://nestaway-assets.nestaway.com/ https://s3.amazonaws.com/webapp-prod-assets/; report-uri https://nestawayphoenix.report-uri.com/r/d/csp/enforce 1
default-src 'self' https://dyinglightgame.com https://*.dyinglightgame.com https://techland.pl https://*.techland.pl https://techland.net https://*.techland.net; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net https://*.google.com https://www.google-analytics.com https://*.hotjar.com https://static.ads-twitter.com https://analytics.twitter.com https://www.googleadservices.com https://mc.yandex.ru https://googleads.g.doubleclick.net https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/ https://*.draghmar.pl https://www.redditstatic.com https://player.twitch.tv/js/embed/v1.js; style-src 'self' 'unsafe-inline' https://techland.net https://*.techland.net https://fonts.googleapis.com https://*.google.com; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://script.hotjar.com; img-src 'self' http://*.limbo.techland.pl/ https://*.techland.pl https://techland.net https://*.techland.net https://dyinglightgame.com https://*.dyinglightgame.com https://*.facebook.com https://www.google-analytics.com https://*.gstatic.com https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com/ads/ https://www.google.com/ads/ga-audiences/ https://www.google.pl/ads/ga-audiences/ https://www.google.com/pagead/1p-user-list/918877113/ https://www.google.pl/pagead/1p-user-list/918877113/ https://t.co/i/adsct https://i.ytimg.com https://alb.reddit.com/; frame-src 'self' https://*.facebook.com https://*.hotjar.com https://www.youtube.com/embed/ https://player.twitch.tv/; connect-src 'self' https://mc.yandex.ru https://in.hotjar.com wss://ws3.hotjar.com/api/v1/client/ws https://ws3.hotjar.com/api/v2/sites/573666/recordings/content https://vc.hotjar.io; style-src-elem 'self' 'unsafe-inline' https://techland.net https://*.techland.net https://fonts.googleapis.com https://*.google.com; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net https://*.google.com https://www.google-analytics.com https://*.hotjar.com https://static.ads-twitter.com https://analytics.twitter.com https://www.googleadservices.com https://mc.yandex.ru https://googleads.g.doubleclick.net https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/ https://*.draghmar.pl https://www.redditstatic.com https://player.twitch.tv/js/embed/v1.js 1
frame-ancestors https://*.ppcc.edu https://ppcc.edu https://*.cccs.edu 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self'; img-src 'self' d.winrar.es data:; style-src 'self' 'unsafe-inline'; 1
default-src 'self' https://www.google-analytics.com data: https://facebook.com https://*.facebook.com https://ssl.google-analytics.com https://fonts.gstatic.com https://www.youtube.com https://futar.bkk.hu https://maps.google.com https://maps.gstatic.com https://maps.googleapis.com https://*.soundcloud.com; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://futar.bkk.hu https://maps.google.com https://maps.googleapis.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net; 1
default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'self' *.finicity.com *.applytojob.com 1
frame-ancestors https://*.orbi.kr 1
frame-ancestors 'self' https://hoeffner.de http://images.google.de http://images.google.com https://images.google.de https://images.google.com https://ogone.test.v-psp.com https://secure.ogone.com 1
frame-ancestors 'self' *.gisher.org https://gisher.news http://kentron.tv 1
default-src * 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' allianzaustralia.marketing.adobe.com ; img-src * data:; worker-src blob:; 1
frame-ancestors http://docplanner-front-test.docplanner.com https://docplanner-front-test.docplanner.com *.doctoralia.com.mx doctoraliaone-mx2-candidate.azurewebsites.net 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mstdn.social; img-src 'self' https: data: blob: https://mstdn.social; style-src 'self' https://mstdn.social 'nonce-hGvipPoHImlx3ZMqVZ7GAQ=='; media-src 'self' https: data: https://mstdn.social; frame-src 'self' https:; manifest-src 'self' https://mstdn.social; connect-src 'self' data: blob: https://mstdn.social https://mstdn.social wss://mstdn.social; script-src 'self' https://mstdn.social; child-src 'self' blob: https://mstdn.social; worker-src 'self' blob: https://mstdn.social 1
frame-ancestors 'self' *.omronhealthcare.com http://10.196.1.55:8000; 1
default-src 'self'; connect-src 'self' *; font-src 'self' data: fonts.googleapis.com *.fonts.googleapis.com *.gstatic.com *.tagmanager.google.com tagmanager.google.com *.paypalobjects.com *.cloudfront.net; img-src 'self' data: *; object-src jsctool.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; style-src 'self' 'unsafe-inline' *; media-src 'self' *.youtube.de *.youtube-nocookie.com *.youtube.com *.youtu.be; frame-src 'self' afs.bueroshop24.de *.adup-tech.com adup-tech.com *.youtube.de youtube.de *.youtube-nocookie.com *.youtube.com youtube.com *.youtu.be youtu.be *.herma.de *.umfragen-einfach.de umfragen-einfach.de *.doubleclick.net *.criteo.com *.webmasterplan.com *.paypal.com paypal.com *.paypal.de paypal.de uc8.tv *.uc8.tv; manifest-src 'self'; upgrade-insecure-requests 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://chaos.social; img-src 'self' https: data: blob: https://chaos.social; style-src 'self' https://chaos.social 'nonce-VWGF8GOjW0TVsf72GBPhyw=='; media-src 'self' https: data: https://chaos.social; frame-src 'self' https:; manifest-src 'self' https://chaos.social; connect-src 'self' data: blob: https://chaos.social https://chaos.social wss://chaos.social; script-src 'self' https://chaos.social; child-src 'self' blob: https://chaos.social; worker-src 'self' blob: https://chaos.social 1
frame-src 'self' 'unsafe-inline' https://*.adyen.com https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.glami.cz https://*.heureka.pl https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.pl https://*.lidl-sklep.pl https://*.lidl.pl https://*.online-metrix.net https://*.pingdom.net https://*.tradedoubler.com https://*.xplosion.de https://*.yahoo.com https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.pl https://creativecdn.com https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.pl https://lidl-sklep.pl https://lidl.media01.eu https://ligadx.com https://ligatus.com https://login.dognet.pl https://m6r.eu https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://twiago.com https://www.dwin1.com https://www.edge-cdn.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.youtube-nocookie.com https://www.youtube.com https://yahoo.com https://yieldlab.net https://youtube.com https://*.reisebank.de https://*.targobank.de https://3d-secure.pluscard.de https://3ds-secure.cardcomplete.com https://3ds.borica.bg https://3ds.sia.eu https://3dsecure-vrp.de https://acs.touch.tech https://acs2.gpesecure.com https://acspa.petafuel.net https://acsv2.centrum24.pl https://german-3ds.wlp-acs.com https://mc-id-check.firstdata.de https://ps4acs.netcetera-payment.ch https://securesuite.co.uk https://ssl-prd-u5g-fo-acs-areq.wlp-acs.com:9743 https://tsys.arcot.com https://visa-secure.ing.de ; object-src 'unsafe-eval' data: https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.glami.cz https://*.heureka.pl https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.pl https://*.lidl-sklep.pl https://*.online-metrix.net https://*.tradedoubler.com https://*.xplosion.de https://*.yahoo.com https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.pl https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.pl https://lidl-sklep.pl https://lidl.media01.eu https://ligadx.com https://ligatus.com https://login.dognet.pl https://m6r.eu https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://twiago.com https://www.dwin1.com https://www.edge-cdn.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.youtube.com https://yahoo.com https://yieldlab.net https://youtube.com ; img-src 'self' 'unsafe-inline' data: http://www.w3.org https://*.360yield.com https://*.addthis.com https://*.adnxs.com https://*.advertising.com https://*.adyen.com https://*.assets.lidl https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.demdex.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.glami.cz https://*.heureka.pl https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.cz https://*.lidl-shop.pl https://*.lidl-sklep.pl https://*.lidl.de https://*.lidl.pl https://*.online-metrix.net https://*.openx.net https://*.pubmatic.com https://*.retail.lidl.net https://*.searchhub.io https://*.stickyadstv.com https://*.taboola.com https://*.tradedoubler.com https://*.twiago.com https://*.xplosion.de https://*.yahoo.com https://*.yieldlab.net https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://analytics.google.com https://asset.schwarz https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.pl https://content.odj.cloud https://contextual.media.net https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.pl https://lidl-sklep.pl https://lidl.media01.eu https://lidl.pl https://ligadx.com https://ligatus.com https://login.dognet.pl https://m6r.eu https://match.sharethrough.com https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://sync.outbrain.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://translate.google.com https://twiago.com https://visitor.omnitagjs.com https://www.dwin1.com https://www.edge-cdn.net https://www.glami.pl https://www.google-analytics.com https://www.google.at https://www.google.ba https://www.google.be https://www.google.bg https://www.google.ch https://www.google.co.uk https://www.google.com https://www.google.com.bd https://www.google.com.tr https://www.google.com.ua https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.is https://www.google.it https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.sk https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.secrz.de https://www.youtube.com https://x.bidswitch.net https://yahoo.com https://yieldlab.net https://youtube.com ; report-uri https://lidl1csp.report-uri.com/r/t/csp/enforce ; frame-ancestors 'self' ; style-src 'self' 'unsafe-inline' https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.doubleclick.net https://*.glami.cz https://*.googleapis.com https://*.heureka.pl https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.pl https://*.lidl-sklep.pl https://*.online-metrix.net https://*.tradedoubler.com https://*.xplosion.de https://*.yahoo.com https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.pl https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.pl https://lidl-sklep.pl https://lidl.media01.eu https://ligadx.com https://ligatus.com https://login.dognet.pl https://m6r.eu https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://twiago.com https://www.dwin1.com https://www.edge-cdn.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.youtube.com https://yahoo.com https://yieldlab.net https://youtube.com ; default-src 'self' 'unsafe-inline' blob: data: https://*.adyen.com https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.glami.cz https://*.googleapis.com https://*.heureka.pl https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.pl https://*.lidl-sklep.pl https://*.online-metrix.net https://*.pingdom.net https://*.tradedoubler.com https://*.xplosion.de https://*.yahoo.com https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://analytics.google.com https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.pl https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://fonts.gstatic.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.pl https://lidl-sklep.pl https://lidl.media01.eu https://ligadx.com https://ligatus.com https://login.dognet.pl https://m6r.eu https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.kk-resources.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://twiago.com https://www.dwin1.com https://www.edge-cdn.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.youtube-nocookie.com https://www.youtube.com https://yahoo.com https://yieldlab.net https://youtube.com https://lidl1csp.report-uri.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://localhost https://*.adyen.com https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.glami.cz https://*.googleapis.com https://*.heureka.pl https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.pl https://*.lidl-sklep.pl https://*.online-metrix.net https://*.pingdom.net https://*.searchhub.io https://*.tradedoubler.com https://*.xplosion.de https://*.yahoo.com https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.pl https://creativecdn.com https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.pl https://lidl-sklep.pl https://lidl.media01.eu https://ligadx.com https://ligatus.com https://login.dognet.pl https://m6r.eu https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.kk-resources.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://twiago.com https://www.dwin1.com https://www.edge-cdn.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.youtube.com https://yahoo.com https://yieldlab.net https://youtube.com ; 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-MjlhYmJlYTAtNzE1Mi00YzIzLWI2NTgtN2M3NTFkMDE4NmJi'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
script-src 'self' 'unsafe-eval' 'unsafe-inline';script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com platform.twitter.com platform.twitter.com cdn.syndication.twimg.com maps.googleapis.com www.googletagmanager.com www.google-analytics.com thoughtleadershipmphasis.disqus.com www.linkedin.com graph.facebook.com c.disquscdn.com disqus.com munchkin.marketo.net https://snap.licdn.com/li.lms-analytics/insight.min.js; object-src 'none'; frame-src www.youtube.com platform.twitter.com syndication.twitter.com disqus.com www2.mphasis.com www.mphasis.com; 1
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.typekit.net *.mycreditunion.gov *.silvercloudinc.com *.mpeasylink.com; img-src 'self' *.mycreditunion.gov data: *.google-analytics.com *.googletagmanager.com *.typekit.net *.amazonaws.com; font-src 'self' 'unsafe-inline' data: *.typekit.net fonts.gstatic.com; media-src 'self' s3.amazonaws.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.silvercloudinc.com; connect-src 'self' performance.typekit.net *.google-analytics.com *.googletagmanager.com; frame-src 'self' *.youtube.com *.mpeasylink.com 1
default-src 'self' https://accesso.com https://px.ads.linkedin.com https://p.adsymptotic.com https://stats.g.doubleclick.net https://cdn.cookielaw.org; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://snap.licdn.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://pi.pardot.com; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://accesso.com; img-src 'self' https://www.google-analytics.com https://px.ads.linkedin.com https://p.adsymptotic.com https://www.google.com data:; connect-src 'self' https://privacyportal.onetrust.com https://stats.g.doubleclick.net https://cdn.cookielaw.org; font-src 'self' https://cloud.typography.com data:; frame-src 'self' https://bid.g.doubleclick.net https://player.vimeo.com/ https://hello.accesso.com/ https://polaris.brighterir.com; 1
frame-ancestors 'self' https://m.cupid.com https://www.cupid.com 1
frame-ancestors 'self' https://middleware.mnmedya.com 1
frame-ancestors 'self'       *.interactivebrokers.com       *.interactivebrokers.ca       *.interactivebrokers.com.hk       *.interactivebrokers.hk       *.interactivebrokers.ch       *.interactivebrokers.eu       *.interactivebrokers.com.sg       *.ibkr.com.sg       *.interactivebrokers.ch       *.interactivebrokers.co.uk       *.interactivebrokers.com.au       *.interactivebrokers.co.jp       *.interactivebrokers.co.in       *.ibkram.com       *.interactiveadvisors.com       *.clientam.com       *.ibkr.info       *.interactivebrokers.info       *.youtube.com       *.ibkr.com       *.ibkr.com.cn       *.clientam.com       *.clientam.ch       *.clientam.com.hk       *.covestor.com       *.doubleclick.net; 1
default-src'self 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self' wss://foodsharing.de https://sentry.io https://photon.komoot.io https://maps.geoapify.com https://maps01.geoapify.com https://maps02.geoapify.com https://maps03.geoapify.com https://search.mapzen.com blob: ws:; img-src 'self' data: https: blob:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self'; frame-ancestors 'none'; worker-src 'self' blob:; child-src 'self' blob:; 1
frame-ancestors 'self' storyblok.com *.storyblok.com 1
frame-ancestors 'self' https://www.coke2home.com https://microapps.google.com https://shamiaanaskitchen.com https://restoline.vercel.app 1
default-src 'self'; connect-src 'self' https://www.binance.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://image.binance.vision https://api.binance.vision https://ask-api.binance.vision https://ask-api.binance.vision wss://stream.binance.com:9443 wss://ws.blockchain.info https://cdn.ampproject.org; script-src 'self' data: https://cdn.ampproject.org https://www.googletagmanager.com https://www.google-analytics.com 'sha256-Wv9xpbEG/0We1AsY17500es85CXbBCHlowSHWLTMI84='; style-src 'self' 'unsafe-inline'; img-src 'self' data: http://www.google-analytics.com https://www.google-analytics.com https://image.binance.vision https://d383i2qzdd3zq2.cloudfront.net; frame-src https://www.youtube.com https://fast.wistia.net https://embed.theblockcrypto.com; font-src 'self' data: 1
default-src 'self' data: blob:; script-src 'self' 'unsafe-inline'; img-src 'self' 'unsafe-inline' data:; style-src 'self' 'unsafe-inline'; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; 1
default-src 'none'; child-src https://cryptpad.fr; worker-src https://cryptpad.fr; media-src * blob:; style-src 'unsafe-inline' 'self' cryptpad.fr; script-src 'self' resource: cryptpad.fr; connect-src 'self' https://cryptpad.fr cryptpad.fr https://api.cryptpad.fr blob: wss://api.cryptpad.fr api.cryptpad.fr files.cryptpad.fr accounts.cryptpad.fr; font-src 'self' data: cryptpad.fr; img-src data: * blob:; frame-src 'self' sandbox.cryptpad.info blob:; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.infogram.com:* *.quiz-maker.com:* *.sharethis.com:* *.cloudflare.com:* *.bootstrapcdn.com:* *.poll-maker.com:* *.google-analytics.com:* *.ytimg.com:* *.twimg.com:* *.disquscdn.com:* disqus.com:* *.disqus.com:* *.googletagmanager.com:* *.consensu.org:* *.gstatic.com:* *.googleapis.com:* *.fontawesome.com:* *.addtoany.com:* *.unicef.org:* *.disqus.com:* *.facebook.com:* *.facebook.net:* *.google.com:* *.linkedin.com:* *.twitter.com:* *.umblr.com:* *.unicef.org:* *.unicef.org.au:* *.youtube.com:* *.instagram.com:* *.newrelic.com:* *.nr-data.net:* *.soundcloud.com:* *.spotify.com:* *.office.com:* *.tiktok.com:* *.tiktokcdn.com:* *.tiktokv.com:* *.ibytedtos.com:* data:; frame-ancestors 'self'; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.bootstrapcdn.com:* *.gstatic.com:* *.googleusercontent.com:* *.googleapis.com:* *.googleapis.com:* *.fontawesome.com:* data:; report-uri /report-csp-violation 1
frame-ancestors *.vgregion.se *.vastarvet.se *.angeredsnarsjukhus.se *.fhsk.se *.lodosemuseum.se *.naturbruk.nu *.nusjukvarden.se *.vgrfolkhogskolor.se *.narhalsan.se *.forsviksbruk.se *.vanersborgsmuseum.se *.vitlyckemuseum.se *.sahlgrenska.se *.naturbruk.nu *.slojdochbyggnadsvard.se *.mun-h-center.se *.maritimaklustret.se *.botaniska.se *.gnm.se *.insipio.com *.esmaker.net *.samverkandesjukvard.se *.vastfastigheter.se *.fyrbodalshalsoakademi.se *.valdinararelationer.se *.utvag.se *.vardsamverkan.se *.nationellpvkonferens19.se *.utvag.com *.biobankvast.se *.halsoakademinvast.se *.t-d.se; 1
default-src data: https:; script-src data: https: 'unsafe-eval' 'unsafe-inline'; style-src data: https: 'unsafe-inline'; report-uri /report/content-security-policy 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://prh.boost.ai https://vero.boost.ai https://networkmigri.boost.ai https://www.vero.fi https://migri.fi https://enterfinland.fi http://startingupsmoothly.fi https://eu1.snoobi.com https://eu2.snoobi.com https://dnn506yrbagrg.cloudfront.net https://occhat.elisa.fi wss://occhat.elisa.fi https://static.hotjar.com https://vars.hotjar.com https://script.hotjar.com https://insights.hotjar.com https://in.hotjar.com https://mnater.github.io https://www.youtube.com https://livestream.com https://www.emaileri.fi data: 1
default-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com cdn.jsdelivr.net nexus.ensighten.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net sjp.getmediamanager.com *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edge.api.brightcove.com *.googleapis.com www.youtube.com youtube.com s.ytimg.com unpkg.com nexus.ensighten.com otp.tools.investis.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net; img-src 'self' 'unsafe-inline' * data:; media-src 'self' brightcove.hs.llnwd.net edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com; frame-src 'self' qir.tools.investis.com staticcontents.investis.com www.google.com sjp.getmediamanager.com careers.sjp.co.uk irs.tools.investis.com otp.tools.investis.com digital.feprecisionplus.com sjp.hireserve-test.com ir.tools.investis.com staticxx.facebook.com www.youtube.com; font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com; connect-src 'self' www.google-analytics.com edge.api.brightcove.com viz.tools.investis.com; report-uri /report-csp-violation 1
default-src 'self' https://cdn.myanonamouse.net https://www.myanonamouse.net https://myanonamouse.net https://webirc.myanonamouse.net; script-src 'self' https://cdn.myanonamouse.net https://www.myanonamouse.net https://myanonamouse.net https://webirc.myanonamouse.net; style-src 'self' https://cdn.myanonamouse.net https://www.myanonamouse.net https://myanonamouse.net https://webirc.myanonamouse.net; object-src 'none'; img-src 'self' https://cdn.myanonamouse.net https://www.myanonamouse.net https://myanonamouse.net https://webirc.myanonamouse.net https://mrd.ninja data:; media-src https://cdn.myanonamouse.net https://www.myanonamouse.net https://myanonamouse.net https://webirc.myanonamouse.net; block-all-mixed-content; 1
img-src * data: blob: 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://stats.g.doubleclick.net https://www.google-analytics.com https://www.facebook.com https://www.linkedin.com https://maps.googleapis.com https://player.vimeo.com fonts.googleapis.com maps.gstatic.com fonts.gstatic.com 1
frame-ancestors 'self' zerto.lookbookhq.com zerto.pathfactory.com *.seismic.com *.foleon.com *.valooto.com *.recordish.com *.record-ish.com *.zerto.com; 1
frame-ancestors 'self' https://www.matrimonio.com https://community.matrimonio.com 1
default-src 'self' https://static.zdassets.com; connect-src 'self' https://ekr.zdassets.com https://riverfordcs.zendesk.com wss://riverfordcs.zendesk.com wss://*.zopim.com; img-src 'self' https://media.riverford.co.uk https://v2assets.zopim.io https://static.zdassets.com data:; script-src 'self' 'unsafe-inline' https://payments.worldpay.com https://widget.trustpilot.com https://static.zdassets.com https://ekr.zdassets.com https://riverfordcs.zendesk.com https://widget-mediator.zopim.com wss://riverfordcs.zendesk.com wss://*.zopim.com https://secure-test.worldpay.com https://centinelapi.cardinalcommerce.com; style-src 'self' 'unsafe-inline'; worker-src 'self'; frame-src 'self' https://*; font-src 'self' 1
frame-ancestors 'self' portal.indicoweb.com tk.dev.pax1.eu; 1
default-src 'self' data: *.wdpromedia.com:* *.parksmedia.wdprapps.disney.com:* s3-us-west-1.amazonaws.com: * videos.parksmedia.disney.go.com:*; font-src 'self' 'unsafe-inline' data: *.disney.com:* *.disney.go.com:* localhost:* *.wdpromedia.com:* *.parksmedia.wdprapps.disney.com:* fonts.gstatic.com:*; img-src 'self' * data: s3-us-west-1.amazonaws.com: * videos.parksmedia.disney.go.com:*; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.disney.com:* *.disney.go.com:* *.wdpromedia.com:* *.parksmedia.wdprapps.disney.com:* localhost:* s3-us-west-1.amazonaws.com: * videos.parksmedia.disney.go.com:* *.go.com *.content.disney.io *.disneyinternational.com connect.facebook.net *.scorecardresearch.com *.dilcdn.com *.wdpro.wdig.com *.tt.omtrdc.net dpm.demdex.net assets.adobedtm.com tags.bkrtx.com d1ivexoxmp59q7.cloudfront.net disneyparks.sp1.convertro.com stags.bluekai.com tags.bluekai.com bat.bing.com *.doubleclick.net *.clicktale.net s.yimg.com/wi/ytc.js *.ads-twitter.com *.twitter.com *.facebook.com *.lpsnmedia.net *.liveperson.net *.googleadservices.com *.yahoo.com tag.mtrcs.samba.tv *.proofhq.com *.googletagmanager.com *.google-analytics.com static.tacdn.com; style-src 'self' 'unsafe-inline' data: *.wdpromedia.com:* *.parksmedia.wdprapps.disney.com:* s3-us-west-1.amazonaws.com: * videos.parksmedia.disney.go.com:* *.go.com; connect-src 'self' data: *.disney.com:* *.disney.go.com:* localhost:* dpm.demdex.net s3-us-west-1.amazonaws.com: * videos.parksmedia.disney.go.com:* 'self' *.clicktale.net dpm.demdex.net; frame-src 'self' *.go.com *.fls.doubleclick.net stags.bluekai.com tags.bluekai.com assets.adobedtm.com *.lpsnmedia.net *.liveperson.net *.facebook.com *.tamgrt.com *.flashtalking.com *.clicktale.net *.demdex.net *.youtube.com; 1
frame-ancestors http://*.alcampo.es https://*.alcampo.es *.publitas.com 1
frame-ancestors 'self' mga.libwizard.com https://*.mga.edu ; form-action 'self' ; base-uri 'self'; object-src 'self' ; media-src 'self'  1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s.ytimg.com https://www.youtube.com https://maps.googleapis.com https://maps.gstatic.com; style-src 'self' 'unsafe-inline'  'unsafe-eval' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.google.com/maps/ https://www.youtube.com http://player.vimeo.com 1
default-src 'self'  ; script-src 'self' cookie.wieni.be www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com tagmanager.google.com 'sha256-n0qo0a+uNS3EBowOxlDJeqRRacNxVgew48Omj0IYROY=' 'sha256-7jDSgL9/dTEn7w83QbKH2DxAZSXWTe5+pNgp0l6xaGI=' 'sha256-cyhAnyf/da35tv9DMBPcWxiXKF8KRetd7+NRa8ylykg=' 'sha256-A3Dbl/cByN6GbFswAlXt66hMeUW5GNI1G4g6LzsRv0o=' 'sha256-0RBExtvEZO5CsGJ2YygQGmydb+opVDaeBuMtzkrktFw=' static.dnsbelgium.be cookie.wieni.work connect.facebook.net 'sha256-cyhAnyf/da35tv9DMBPcWxiXKF8KRetd7+NRa8ylykg=' 'sha256-tlcmAHpjuLLOIObL2B6OUHigkbt7aSR3rbjRrPQIpzo=' www.youtube.com s.ytimg.com 'sha256-NXWMVdEMk5gJTF2ihgfp+HMOfk0oF4oszJ/FzkC1WpU=' 'sha256-XFVoV8Qods0limIKhsn5/gq5DXmjw8ut+laKnV/oVFo=' 'sha256-/ciuGx0GSImrd0fLrPPotPD8ly4COZ7w9/IgGozr+C8=' 'sha256-fxBxhEkCgNeh5bIHpULVTyyn4VYtPec2plk1YR7dDNY=' 'sha256-m+0khCx/9gmahaVwUf4q8H3NDeQFD3CGcou8BEvR9Ac='; style-src 'self' 'unsafe-inline' fonts.googleapis.com cookie.wieni.be tagmanager.google.com use.fontawesome.com blob: cookie.wieni.work; img-src 'self' data: www.google-analytics.com ssl.gstatic.com www.gstatic.com images.dnsbelgium.be www.countryflags.io static.dnsbelgium.be  www.facebook.com i.ytimg.com; font-src 'self' fonts.gstatic.com use.fontawesome.com data: ; frame-src 'self' www.google.com maps.google.com www.youtube.com player.vimeo.com notfound-static.fwebservices.be *.youtube-nocookie.com calendar.google.com accounts.google.com *.medialaancdn.be www.facebook.com; connect-src 'self' cookie.wieni.be www.google-analytics.com https://api.dnsbelgium.be https://webwhois.nic.vlaanderen https://webwhois.nic.brussels https://www.google-analytics.com www.facebook.com 1
frame-ancestors 'self' *.happymeeple.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ssl.google-analytics.com *.recaptcha.net *.gstatic.cn *.gstatic.com *.google.com recaptcha.net *.google.cn 1
frame-ancestors 'self' https://*.granicus.com http://*.granicus.com https://civiccenter.cpqa.ninja https://identityserver.cpqa.ninja; img-src * data:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src * 1
default-src https:; connect-src https: wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://fast.appcues.com https://api.appcues.net wss://api.appcues.net https://vulpix.appcues.com https://appcues-content-api-prod.herokuapp.com https://nh436jpc4i.execute-api.us-west-2.amazonaws.com https://104cl9psz3.execute-api.us-west-2.amazonaws.com https://appcues-quickstart.s3-us-west-2.amazonaws.com https://*.firebase.com wss://*.firebaseio.com https://*.firebaseio.com; script-src 'unsafe-inline' 'unsafe-eval' blob: https:; font-src https: data:; frame-src https:; img-src https: data:; media-src blob: data: https:; object-src https:; style-src 'unsafe-inline' https: 1
default-src 'self' fonts.gstatic.com fonts.googleapis.com ajax.googleapis.com  wireframecc-9947.kxcdn.com; script-src 'self' 'unsafe-inline' 'nonce-ebe210dfad3bff65f13df1137f245dfb' 'unsafe-eval'  https://fonts.gstatic.com https://fonts.googleapis.com https://ajax.googleapis.com  wireframecc-9947.kxcdn.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com wireframecc-9947.kxcdn.com; img-src 'self' wireframecc-9947.kxcdn.com data:; child-src 'self' 1
frame-ancestors https://www.therow.com/ https://www.therow.com/ ; 1
frame-ancestors 'self' *.arabclicks.com; 1
frame-ancestors 'self' http://emprotest:8080 http://emprolive:8080 http://emprodev:8080 http://ecm-live:8080 http://ecm-test:8080 https://democracy.wandsworth.gov.uk 1
font-src 'self' improvement.nhs.uk/static/ themes.googleusercontent.com https://nhsicorporatesite.blob.core.windows.net/green/static/; img-src data: ssl.google-analytics.com improvement.nhs.uk/static/ improvement.nhs.uk/uploads/ stats.g.doubleclick.net syndication.twitter.com *.twimg.com/ platform.twitter.com/ www.gravatar.com/avatar/ ssl.gstatic.com/ www.google-analytics.com *.oktacdn.com https://dcfdatacollections.improvement.nhs.uk https://datacollections.blob.core.windows.net/ https://nhsicorporatesite.blob.core.windows.net/green/static/ https://nhsicorporatesite.blob.core.windows.net/green/uploads/ https://analytics.improvement.nhs.uk/ https://tabanalytics.data.england.nhs.uk/; connect-src 'self' www.google-analytics.com stats.g.doubleclick.net releases.wagtail.io; style-src 'self' 'unsafe-inline' improvement.nhs.uk/static/ platform.twitter.com/ www.google.com/uds/ ajax.googleapis.com/ajax/static/ cdnjs.cloudflare.com/ *.twimg.com https://nhsicorporatesite.blob.core.windows.net/green/static/; default-src 'self'; frame-src 'self' www.google.com/recaptcha/ content.googleapis.com/ platform.twitter.com/widgets/ syndication.twitter.com/ public.tableau.com/ www.youtube.com/embed/ *.monitor.gov.uk *.ustream.tv/embed/ *.infogram.com *.infogr.am player.vimeo.com/video/; script-src 'self' 'unsafe-inline' data: www.google-analytics.com apis.google.com/ www.google.com/jsapi www.google.com/uds/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ improvement.nhs.uk/static/ platform.twitter.com/ cdn.syndication.twimg.com/widgets/ cdn.syndication.twimg.com/timeline/ ajax.googleapis.com/ajax/libs/jquery/ *.monitor.gov.uk public.tableau.com/javascripts/api/ *.infogram.com *.infogr.am code.jquery.com/ cdnjs.cloudflare.com/ cdn.jsdelivr.net/npm/es6-promise@4/dist/ https://nhsicorporatesite.blob.core.windows.net/green/static/ https://analytics.improvement.nhs.uk/ https://tabanalytics.data.england.nhs.uk/; object-src 'self' 1
img-src 'self' data: http://saint-petersburg.ru https://saint-petersburg.ru http://collector.mediator.media https://collector.mediator.media https://stats.g.doubleclick.net http://top-fwz1.mail.ru https://top-fwz1.mail.ru https://www.facebook.com *.yandex.ru *.yandex.net https://*.yandex.ru counter.yadro.ru www.google-analytics.com vk.com w.uptolike.com *.disquscdn.com https://referrer.disqus.com *.maps.2gis.com *.api.2gis.com http://*.api.2gis.ru http://*.maps.2gis.ru https://*.cloudfront.net *.cloudfront.net https://syndication.twitter.com http://syndication.twitter.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.sputnik8.com https://www.superjob.ru/ https://mediator.imgsmail.ru/ http://mediator.imgsmail.ru/ https://top-fwz1.mail.ru/ http://top-fwz1.mail.ru/ https://syndication.twitter.com http://syndication.twitter.com https://s.ytimg.com player.radiocdn.com wtrfall.com platform.twitter.com https://yastatic.net http://yastatic.net https://*.yandex.ru http://*.yandex.ru https://www.google.com *.facebook.net *.api.2gis.ru cdn.thinglink.me https://w.uptolike.com w.uptolike.com www.google-analytics.com userapi.com http://*.disquscdn.com https://*.disquscdn.com  *.disqus.com storify.com https://storify.com https://www.youtube.com https://*.cloudfront.net *.cloudfront.net; style-src 'self' 'unsafe-inline' https://www.google.com fonts.googleapis.com maps.api.2gis.ru *.disquscdn.com storify.com http://wtrfall.com https://wtrfall.com ; frame-src 'self' *.radiocdn.com www.sputnik8.com https://st.yandexadexchange.net https://yastatic.net http://yastatic.net https://*.facebook.com http://*.facebook.com http://sedu.adhands.ru https://sedu.adhands.ru https://vk.com vk.com m.vk.com yandexadexchange.net w.uptolike.com disqus.com https://disqus.com storify.com www.youtube.com https://www.youtube.com *.yandex.ru player.vimeo.com https://login.vk.com https://www.google.com http://www.google.com; report-uri https://saint-petersburg.ru/csp.php 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net; img-src 'self' https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://assets.zendesk.com; font-src 'self' https://themes.googleusercontent.com; frame-src https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://www.google.com; object-src 'none'; frame-ancestors 'self' 1
default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src 'self' 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com dl.episerver.net *.msecnd.net *.brightcove.net *.brightcove.com vjs.zencdn.net  browser.sentry-cdn.com *.googleapis.com in.taskanalytics.com *.addthis.com z.moatads.com v1.addthisedge.com; img-src 'self' data: *.brightcove.com *.brightcove.net cf-images.eu-west-1.prod.boltdns.net *.googleapis.com *.addthis.com;  worker-src blob:; frame-src 'self' norgesbank.aventia.no *.addthis.com 1
frame-src *.un4seen.com; 1
default-src http: https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' https://*.wogaa.sg https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/; script-src 'self'  va.ecitizen.gov.sg http: https: data: blob: 'unsafe-inline' 'unsafe-eval' https://*.wogaa.sg https://assets.adobedtm.com/; connect-src 'self'  va.ecitizen.gov.sg data: query.yahooapis.com  https://developers.onemap.sg https://www.ns.sg fcm.googleapis.com https://*.wogaa.sg https://dpm.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/; img-src 'self'  va.ecitizen.gov.sg http: https: data: 'unsafe-inline' 'unsafe-eval' https://wogadobeanalytics.sc.omtrdc.net/ https://cm.everesttech.net/ https://dpm.demdex.net/; style-src 'self' va.ecitizen.gov.sg http: https: data: 'unsafe-inline' 'unsafe-eval' https://assets.wogaa.sg/fonts/; font-src 'self' http: https: data: 'unsafe-inline' 'unsafe-eval' https://assets.wogaa.sg/fonts/; 1
script-src
										'self'
										'unsafe-inline'
										'unsafe-eval'
										https://www.google.com
										https://www.google-analytics.com
										https://stats.g.doubleclick.net
										https://www.googletagmanager.com
										https://googleads.g.doubleclick.net
										https://www.googleadservices.com
										tagmanager.google.com
										googleapis.com
										ajax.googleapis.com
										hs-scripts.com
										forms.hsforms.com
										js.hs-scripts.com
										js.hs-analytics.net
										js.hsforms.net
										https://js.hsadspixel.net/fb.js
										https://js.hsleadflows.net/leadflows.js
										platform.twitter.com
										https://cdn.syndication.twimg.com
										https://code.jquery.com/jquery-3.2.1.min.js
										https://cdn.jsdelivr.net/jquery.slick/1.5.6/slick.min.js
										https://cdn.jsdelivr.net/lodash/3.10.1/lodash.min.js
										https://cdnjs.cloudflare.com/ajax/libs/fuse.js/2.6.2/fuse.min.js
										https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.3/umd/popper.min.js
										script.crazyegg.com
										sample.crazyegg.com
										a.optnmstr.com
										a.optmnstr.com
										*.intercom.io
										js.intercomcdn.com
										connect.facebook.net
										cdn.schemaapp.com
										maxcdn.bootstrapcdn.com
										https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.0.3/cookieconsent.min.js
										s.adroll.com
										d.adroll.com
										https://s3.amazonaws.com/trk.cetrk.com/
										https://cdn.jsdelivr.net/mobile-detect.js/1.3.5/mobile-detect.min.js
										https://cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.3/mobile-detect.min.js
										https://freegeoip.net/json/
										http://freegeoip.net/shutdown
										https://optimize.google.com
										*.greenhouse.io
										snap.licdn.com
										*.hs-banner.com
										https://js.maxmind.com/js/apis/geoip2/v2.1/geoip2.js
										https://a.omappapi.com/app/js/webfont/1.5.18/webfont.js
										https://a.omappapi.com/app/js/mobile-detect/1.4.3/mobile-detect.min.js
										https://fast.wistia.com 1
default-src 'self' *.algolianet.com *.algolia.net *.zavasrv.com *.zavamed.com *.segment.io *.segment.com *.nr-data.net *.hotjar.com; connect-src 'self' *.algolianet.com *.algolia.net *.zavasrv.com *.zavamed.com *.segment.io *.segment.com *.nr-data.net logx.optimizely.com *.optimizely.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.pstmn.io www.google-analytics.com bat.bing.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.algolianet.com *.algolia.net *.zavasrv.com *.zavamed.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.googleapis.com connect.facebook.net *.trustpilot.com *.dred.com *.websecurity.norton.com *.segment.com *.optimizely.com optimizely.s3.amazonaws.com www.cqc.org.uk *.newrelic.com *.nr-data.net *.hotjar.com *.qualaroo.com *.bing.com *.amazonaws.com *.surveymonkey.com *.youtube-nocookie.com *.youtube.com *.ytimg.com browser-update.org assets.customer.io; style-src 'self' 'unsafe-inline' *.zavasrv.com *.zavamed.com *.amazonaws.com www.cqc.org.uk fonts.googleapis.com; img-src 'self' data: *.zavasrv.com *.zavamed.com *.google-analytics.com *.hotjar.com maps.gstatic.com maps.googleapis.com www.gstatic.com res.cloudinary.com *.dred.com *.websecurity.norton.com a74971132.cdn-pci.optimizely.com cdn.optimizely.com www.cqc.org.uk *.amazonaws.com bat.bing.com *.doubleclick.net googleads.g.doubleclick.net www.google.com www.google.co.uk *.surveymonkey.com browser-update.org www.facebook.com; font-src 'self' data: *.zavasrv.com *.zavamed.com *.cloudfront.net *.hotjar.com fonts.gstatic.com; frame-src 'self' *.zavasrv.com *.zavamed.com *.doubleclick.net *.youtube-nocookie.com vars.hotjar.com *.surveymonkey.com a74971132.cdn-pci.optimizely.com app.optimizely.com a74971132.cdn.optimizely.com *.trustpilot.com *.qualaroo.com www.facebook.com; report-uri /csp-report 1
frame-ancestors  https://la.utexas.edu https://www.la.utexas.edu https://learn.stanford.edu https://idss.mit.edu https://*.mygreatlearning.com https://*.greatlearning.in https://detectify.com 1
default-src https: data: script-src 'self' wss://127.0.0.1:*/ 'unsafe-inline' 'unsafe-eval' 1
script-src 'unsafe-inline' *.zx58.cn *.baidu.com jspassport.ssl.qhimg.com zz.bdstatic.com s.ssl.qhres.com bdimg.share.baidu.com   static.bshare.cn zximages.oss-cn-hangzhou.aliyuncs.com *.53kf.com res.wx.qq.com hm.baidu.com *.cnzz.com static.bshare.cn bshare.optimix.asia wpa.b.qq.com combo.b.qq.com crm2.qq.com wpl.b.qq.com visitor.crm2.qq.com bqq.gtimg.com tajs.qq.com hb.crm2.qq.com da.qidian.qq.com 'unsafe-eval' none;  style-src 'unsafe-inline' *.zx58.cn *.53kf.com *.baidu.com; 1
frame-ancestors *.dmp *.initiatives.vip live.initiatives-coeur.fr *.k-line.fr; 1
frame-ancestors 'self' waltdisney.org wdfmuseum.org wdfm.stqry.app app.mytoursapp.com ; 1
frame-ancestors 'self' localhost:* *.tason.com 1
img-src 'self' data: 'unsafe-inline' https://prodoctorov.ru https://protabletky.ru https://medotvet.me https://*.google-analytics.com *.google-analytics.com yastatic.net https://yastatic.net *.yandex.ru https://*.yandex.ru https://yandex.ru *.yandex.net https://*.yandex.net yandex.st *.google.com  https://*.google.com  *.googleapis.com https://*.googleapis.com *.googlesyndication.com https://*.gstatic.com *.gstatic.com vk.com https://*.vk.com *.youtube.com *.twitter.com https://*.twitter.com *.googlezip.net https://*.ggpht.com https://www.googletagmanager.com https://*.facebook.com https://*.google.ru https://*.mail.ru seal.websecurity.norton.com www.honcode.ch https://prodoctorov.ru; style-src 'self' 'unsafe-inline' https://prodoctorov.ru https://*.googleapis.com *.googleapis.com https://*.gstatic.com *.gstatic.com yastatic.net yandex.st https://tagmanager.google.com; media-src 'self' *.yandex.net yandex.st yastatic.net *.yandex.ru; default-src 'self'; object-src 'self' *.googlesyndication.com https://*.googlesyndication.com; connect-src 'self' wss://prodoctorov.ru wss://medotvet.me *.yandex.ru *.google-analytics.com https://*.yandex.ru https://yandex.ru ajax.googleapis.com yandex.st https://yandex.st yastatic.net https://fcm.googleapis.com https://stats.g.doubleclick.net https://sentry.medrating.org https://*.facebook.com https://prodoctorov.ru https://rate.prodoctorov.ru; frame-src *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://prodoctorov.ru *.google.com https://www.google.com https://*.google-analytics.com *.google-analytics.com *.googlesyndication.com https://*.googlesyndication.com *.googleapis.com https://*.googleapis.com www.google.com https://*.gstatic.com https://*.yandex.net https://yandex.ru https://*.yandex.ru *.yandex.ru *.gstatic.com https://clck.yandex.ru *.twitter.com https://*.twitter.com yandex.st https://yandex.st https://connect.ok.ru vk.com https://www.youtube.com https://s.ytimg.com https://www.googletagmanager.com https://googletagmanager.com https://yastatic.net yastatic.net https://connect.facebook.net seal.websecurity.norton.com dunsregistered.dnb.com; font-src 'self' https://*.gstatic.com *.gstatic.com; report-uri https://prodoctorov.ru/cspreport/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com code.jquery.com optimize.google.com www.google-analytics.com tagmanager.google.com www.googleadservices.com www.gstatic.com www.google.com cdnjs.cloudflare.com connect.facebook.net js.intercomcdn.com px.ads.linkedin.com s3.amazonaws.com snap.licdn.com use.fontawesome.com widget.intercom.io www.google-analytics.com www.googletagmanager.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: cdnjs.cloudflare.com script.hotjar.com fonts.gstatic.com use.fontawesome.com js.intercomcdn.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.intercomassets.com cdnjs.cloudflare.com tagmanager.google.com optimize.google.com fonts.googleapis.com use.fontawesome.com; img-src 'self' data: blobl: 'unsafe-inline' image.unsplash.com cdn.shortpixel.ai www.google-analytics.com optimize.google.com *.googleusercontent.com *.imgur.com *.medium.com *.paypal.com *.googletagmanager.com *.gstatic.com *.intercom.help *.intercomcdn.com *.intercomassets.com www.google.com *.doubleclick.net *.w.org alb.reddit.com secure.gravatar.com www.facebook.com; frame-src 'self' optimize.google.com vars.hotjar.com www.youtube.com www.google.com wp-themes.com staticxx.facebook.com www.facebook.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' wss://*.hotjar.com *.hotjar.io *.hotjar.com www.facebook.com yoast.com *.doubleclick.net www.google-analytics.com wss://*.intercom.io https://*.intercom.io; media-src 'self' js.intercomcdn.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google-analytics.com *.google.co.in *.herokuapp.com *.ravepay.co *.flutterwave.com *.stripe.com *.atfawry.com *.google.com  *.facebook.net wss://*.zopim.com:* *.zopim.com  *.ywxi.net *.cloudfront.net *.amazonaws.com *.mcafeesecure.com *.freshdesk.com *.zdassets.com *.trustedsite.com  wss://*.citruspay.com:* wss://*.google.co:* *.citruspay.com wss://*.fawrystaging.com wss://*.atfawry.com wss://*.fawry.com wss://*.youtube.com:* *.youtube.com wss://*.tawk.to:* *.tawk.to *.facebook.com *.fawrystaging.com *.mastercard.com.au *.fawry.com atfawry.fawrystaging.com *.facebook.net *.mastercard.com *.razorpay.com *.google-analytics.com *.securecode.com  *.google.com *.dhru.com *.paypal.com *.googletagmanager.com ; img-src * data:; font-src * data: 1
frame-ancestors 'self' https://www.deal4loans.com  https://www.zeebiz.com/ *.wishfin.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://*.googleapis.com https://www.dwin1.com https://*.veinteractive.com https://www.googleadservices.com https://www.zenaps.com https://machinemart.122.2o7.net https://www.youtube.com https://s.ytimg.com https://b.sli-spark.com https://*.criteo.com https://*.google.com https://www.googletagmanager.com https://connect.facebook.net https://www.gstatic.com https://platform.twitter.com https://assets.pinterest.com https://log.pinterest.com https://vimeo.com https://*.dekopay.com https://*.g.doubleclick.net https://*.livechatinc.com https://dccf75d8gej24.cloudfront.net; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://maxcdn.bootstrapcdn.com; img-src 'self' data: https://img.youtube.com https://dccf75d8gej24.cloudfront.net https://csi.gstatic.com https://*.googleapis.com https://maps.gstatic.com https://machinemart.122.2o7.net https://*.veinteractive.com https://www.awin1.com https://e.machinemart.co.uk https://www.zenaps.com https://www.google-analytics.com https://b.sli-spark.com https://*.g.doubleclick.net https://www.google.com https://www.google.co.uk https://ssl.gstatic.com https://*.pinterest.com https://s-passets.pinimg.com https://www.facebook.com https://syndication.twitter.com https://i.vimeocdn.com https://a.volvelle.tech https://go.flx1.com https://*.livechatinc.com; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; frame-src 'self' https://4894704.fls.doubleclick.net https://4735852.fls.doubleclick.net https://www.googleadservices.com https://*.g.doubleclick.net https://*.google.com https://www.google.co.uk https://f.chtah.com https://ebm.cheetahmail.com https://www.youtube.com https://*.veinteractive.com https://dis.eu.criteo.com https://s-static.ak.facebook.com https://staticxx.facebook.com https://www.facebook.com https://platform.twitter.com https://assets.pinterest.com https://player.vimeo.com https://syndication.twitter.com https://*.livechatinc.com; connect-src 'self' https://*.veinteractive.com https://vimeo.com https://www.gravatar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://log.pinterest.com; media-src 'self' https://cdn.livechatinc.com; 1
frame-ancestors 'self' http://www.philips.com.au *.philips.com *.philips.com.au 1
script-src * 'unsafe-inline' 'unsafe-eval' ; style-src 'self' 'unsafe-inline' https://d35islomi5rx1v.cloudfront.net http://code.jquery.com https://www.google.com; font-src 'self' https://d35islomi5rx1v.cloudfront.net ; img-src * 1
frame-ancestors 'self' *.authorize.net; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com https://optimize.google.com https://connect.facebook.net https://edge.fullstory.com https://www.fullstory.com https://widget.trustpilot.com https://cdn.cookielaw.org https://*.onetrust.com https://*.demdex.net https://cm.everesttech.net https://assets.adobedtm.com *.omtrdc.net; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://cdnjs.cloudflare.com https://tagmanager.google.com https://fonts.googleapis.com https://optimize.google.com; connect-src 'self' https://*.globalpoker.com/jackpot/XSD https://stats.g.doubleclick.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://rs.fullstory.com https://widget.trustpilot.com https://cdn.cookielaw.org https://*.onetrust.com https://*.demdex.net https://cm.everesttech.net https://assets.adobedtm.com; font-src 'self' https://use.fontawesome.com https://fonts.gstatic.com https://tagmanager.google.com; img-src 'self' https: data:; frame-src 'self' https://optimize.google.com https://cm.g.doubleclick.net https://widget.trustpilot.com https://*.demdex.net; frame-ancestors 'self'; 1
default-src 'self' *.fitchratings.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com fitchconnect.piwikpro.com cdn.polyfill.io *.brightcove.net *.brightcove.com munchkin.marketo.net your.fitchratings.com c.evidon.com cdn2.funnelenvy.com script.crazyegg.com snap.licdn.com *.clearbit.com *.idio.co tagmanager.google.com chart-studio.plotly.com public.flourish.studio; style-src 'self' 'unsafe-inline' blob: your.fitchratings.com fonts.googleapis.com; connect-src 'self' blob: *.fitchratings.com notify.bugsnag.com *.brightcove.com *.brightcove.net 732-ckh-767.mktoresp.com fx.fitchgroup.co *.boltdns.net *.akamaihd.net *.crazyegg.com *.idio.co *.brightcovecdn.com *.marketo.net your.fitch.group c.evidon.com *.funnelenvy.com www.google-analytics.com fonts.googleapis.com *.piwikpro.com snap.licdn.com images.ctfassets.net fonts.gstatic.com stats.g.doubleclick.net api.sjpf.io api.fpjs.io; prefetch-src 'self' *.funnelenvy.com 732-ckh-767.mktoresp.com *.boltdns.com *.betrad.com *.idio.co ga.clearbit.com house-fastly-signed-us-east-1-prod.brightcovecdn.com c.evidon.com fitchconnect.piwikpro.com munchkin.marketo.net snap.licdn.com script.crazyegg.com www.google-analytics.com www.googletagmanager.com *.brightcove.com; img-src 'self' data: trk.funnelenvy.com images.ctfassets.net *.boltdns.net metrics.brightcove.com www.google-analytics.com stats.g.doubleclick.net l.betrad.com fitchconnect.piwikpro.com *.linkedin.com p.adsymptotic.com *.idio.co your.fitch.group *.fitchratings.com httpsak-a.akamaihd.net; font-src 'self' data: *.fitchratings.com fonts.gstatic.com; frame-src 'self' *.fitchratings.com l3.evidon.com infogram.com e.infogram.com infogram-download-eu.s3.eu-west-1.amazonaws.com infogram-download-us2.s3.eu-west-1.amazonaws.com your.fitch.group flo.uri.sh plotly.com chart-studio.plotly.com fitchgroup.eu.qualtrics.com indd.adobe.com; worker-src 'self' blob:; child-src 'self' blob:; media-src 'self' blob: *.fitchratings.com *.brightcove.com videos.ctfassets.net *.akamaihd.net manifest.prod.boltdns.net; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' seal.verisign.com https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl ; connect-src 'self' 'unsafe-inline' 'unsafe-eval' https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl ; img-src data: blob: 'self' seal.websecurity.norton.com https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl https://www.pekao24.pl ; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl ; font-src 'self' https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl ; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://chat.pekao.com.pl *.hitclick.net *.net.pekao.com.pl ; 1
default-src https://*.mail.ru https://mail.ru https://*.imgsmail.ru https://*.devmail.ru https://*.smailru.net https://*.yandex.net https://*.yandex.ru https://yandex.ru https://*.yandexadexchange.net https://yastatic.net https://*.yastatic.net https://*.mycdn.me https://icq.com https://*.icq.com https://icq.net https://*.icq.net https://ok.ru https://*.ok.ru https://odnoklassniki.ru https://*.odnoklassniki.ru https://*.mradx.net https://2gis.com https://*.2gis.com https://2gis.ru https://*.2gis.ru https://youtube.com https://*.youtube.com https://*.google.com https://*.google.ru https://cdn.consentmanager.mgr.consensu.org https://consentmanager.mgr.consensu.org https://vk.com https://*.vk.com; font-src data: https://*.mail.ru https://*.imgsmail.ru https://*.devmail.ru https://yastatic.net https://*.yastatic.net; img-src data: http: https:; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' https://cdn.consentmanager.mgr.consensu.org https://consentmanager.mgr.consensu.org https://*.mail.ru https://*.mradx.net https://icq.com https://*.icq.com https://icq.net https://*.icq.net https://*.imgsmail.ru https://*.devmail.ru https://*.smailru.net https://ok.ru https://*.ok.ru https://*.odnoklassniki.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://2gis.com https://*.2gis.com https://2gis.ru https://*.2gis.ru https://*.google-analytics.com https://*.google.com https://*.google.ru https://*.maps.yandex.net; style-src 'unsafe-inline' https://cdn.consentmanager.mgr.consensu.org https://consentmanager.mgr.consensu.org https://*.mail.ru https://*.imgsmail.ru https://*.devmail.ru https://*.yandex.net https://2gis.com https://*.2gis.com https://2gis.ru https://*.2gis.ru https://yastatic.net https://*.yastatic.net; report-uri https://go.mail.ru/csp-report?qid=faa9b03aecb5fddd&user_type=5d 1
frame-ancestors 'self' dashboard.skilljar.com akademy.akeneo.com learning.akeneo.com test-akeneo.skilljar.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.ampproject.org opensharecount.com chimpstatic.com *.tiktok.com *.tiktokcdn.com *.ibytedtos.com *.byteoversea.com *.doubleclick.net  *.hypstarcdn.com *.sgpstatp.com *.ibyteimg.com *.ytimg.com *.ipstatp.com *.ggpht.com *.akamaized.net *.googleadservices.com googleapis.com  *.syndication.twimg.com *.google.com *.google.co.kr  *.twitter.com *.facebook.com *.facebook.net *.instagram.com *.google-analytics.com *.cloudflare.com *.googletagmanager.com *.googletagservices.com *.googlesyndication.com  *.daumcdn.net *.daum.net  *.naver.net *.naver.com *.inicis.com ; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.ampproject.org opensharecount.com chimpstatic.com  *.tiktok.com *.tiktokcdn.com *.ibytedtos.com *.byteoversea.com *.doubleclick.net  *.hypstarcdn.com *.sgpstatp.com *.ibyteimg.com *.ytimg.com *.ipstatp.com *.ggpht.com *.akamaized.net *.googleadservices.com googleapis.com  *.syndication.twimg.com *.google.com *.google.co.kr  *.twitter.com *.facebook.com *.facebook.net *.instagram.com *.google-analytics.com *.cloudflare.com *.googletagmanager.com *.googletagservices.com *.googlesyndication.com  *.daumcdn.net *.daum.net  *.naver.net *.naver.com *.inicis.com ; connect-src 'self' *.gstatic.com *.ampproject.org opensharecount.com chimpstatic.com  *.tiktok.com *.tiktokcdn.com *.ibytedtos.com *.byteoversea.com *.doubleclick.net  *.hypstarcdn.com *.sgpstatp.com *.ibyteimg.com *.ytimg.com *.ipstatp.com *.ggpht.com *.akamaized.net *.googleadservices.com googleapis.com  *.syndication.twimg.com *.google.com *.google.co.kr  *.twitter.com *.facebook.com *.facebook.net *.instagram.com *.google-analytics.com *.cloudflare.com *.googletagmanager.com *.googletagservices.com *.googlesyndication.com  *.daumcdn.net *.daum.net  *.naver.net *.naver.com *.inicis.com ;   font-src 'self' data:;   object-src 'none';   media-src 'self'; form-action 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.ampproject.org opensharecount.com  chimpstatic.com  *.tiktok.com *.tiktokcdn.com *.ibytedtos.com *.byteoversea.com *.doubleclick.net  *.hypstarcdn.com *.sgpstatp.com *.ibyteimg.com *.ytimg.com *.ipstatp.com *.ggpht.com *.akamaized.net *.googleadservices.com googleapis.com  *.syndication.twimg.com *.google.com *.google.co.kr  *.twitter.com *.facebook.com *.facebook.net *.instagram.com *.google-analytics.com *.cloudflare.com *.googletagmanager.com *.googletagservices.com *.googlesyndication.com *.daumcdn.net *.daum.net *.naver.net *.naver.com *.inicis.com ; frame-ancestors 'self'; 1
frame-ancestors 'self'; object-src 'none'; form-action 'self'; base-uri 'none'; 1
script-src 'unsafe-eval' 'unsafe-inline' 'self' data: www.google.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://www.googleadservices.com https://*.impactradius-event.com https://cdn.pagesense.io https://fullstory.com https://*.auryc.com https://cdn.heapanalytics.com https://heapanalytics.com https://*.wisepops.com https://*.marketo.com https://player.vimeo.com/* https://cdnjs.cloudflare.com/ajax/libs/font-awesome/* https://naturaltracking.com/track_conversion.js https://diffuser-cdn.app-us1.com/diffuser/diffuser.js https://*.salesforceliveagent.com https://prism.app-us1.com https://identityguard.y8uw.net https://amplify.outbrain.com https://*.quora.com https://bat.bing.com https://*.taboola.com https://pixel.convertize.io https://*.identityguard.com https://*.doubleclick.net https://optimize.google.com https://connect.facebook.net https://*.marketo.net https://prism.app-us1.com https://trackcmp.net https://*.invocacdn.com https://*.invoca.net https://*.app-us1.com https://s.yimg.com https://sp.analytics.yahoo.com https://card.aurasvc.io; img-src * data:; font-src 'self' https://fonts.gstatic.com https://heapanalytics.com data:; worker-src 'self' blob:; report-uri /csp-report 1
frame-ancestors 'self' live.sagepay.com www1.danielfootwear.com 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://*.akamaihd.net https://*.translate.naver.net https://www.recaptcha.net https://www.google.com https://www.zenaps.com https://tr.snapchat.com https://www.youtube.com https://insight.adsrvr.org/track/up https://match.adsrvr.org https://gum.criteo.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://the.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://ct.pinterest.com; default-src 'none'; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.perriconemd.com https://checkout.perriconemd.com https://connect.facebook.net https://tr.snapchat.com; frame-ancestors 'self'; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://the.sciencebehindecommerce.com https://cdn.trackjs.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.googleapis.com https://www.recaptcha.net https://connect.facebook.net https://*.trustpilot.com https://www.googleadservices.com https://*.translate.naver.net https://*.doubleclick.net https://*.google.com https://*.google-analytics.com https://fp.zenaps.com https://www.gstatic.com https://bat.bing.com https://www.googletagmanager.com https://www.youtube.com https://s.ytimg.com https://www.dwin1.com https://sc-static.net https://s.pinimg.com https://js.adsrvr.org https://static.criteo.net https://*.criteo.com; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com; upgrade-insecure-requests; report-to report-endpoint 1
frame-ancestors 'self' https://www.ocbc.com.my https://internet.ocbc.com.my https://unifymymobile.ocbc.com htpps://www.ocbcmalaysia.com; default-src 'self' data: blob: *.ocbc.com *.ocbc.com.my *.ocbcmalaysia.com; img-src 'self' data: *;  script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ocbc.com *.ocbc.com.my *.ocbcmalaysia.com *.googleapis.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.youtube.com *.google.com *.adobedtm.com *.alexa.com *.facebook.net *.facebook.com *.adroll.com *.jquery.com *.bootstrapcdn.com *.hotjar.com *.consensu.org *.brand-display.com *.amazonaws.com *.ytimg.com *.cloudfront.net; font-src 'self' *;frame-src 'self' https://internet.ocbc.com https://internet.ocbc.com.my https://issdlphall1.ocbc.local https://www.ocbcmalaysia.com/ https://8414639.fls.doubleclick.net/ https://vars.hotjar.com/ https://bid.g.doubleclick.net https://cdn.brand-display.com https://www.youtube.com; style-src 'self' 'unsafe-inline' *.ocbc.com *.ocbc.com.my *.ocbc.local http://dcistaging.com https://dcistaging.com *.jquery.com *.bootstrapcdn.com *.cloudflare.com *.googleapis.com; connect-src 'self' *.ocbc.com *.ocbc.com.my *.ocbc.local *.ocbcmalaysia.com; 1
frame-ancestors jillstein.nationbuilder.com 1
base-uri https://*.tennisfame.com; default-src 'self' 'unsafe-inline' data: https: wss: http://192.168.105.45 https://ithof.staging53.com http://res.cloudinary.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' https://connect.facebook.net https://api.scrivito.com https://app.intercom.io https://assets.scrivito.com https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.google-analytics.com https://translate.google.com https://platform.twitter.com https://translate.googleapis.com https://cdn.syndication.twimg.com https://*.sharethis.com https://count-server.sharethis.com https://ithf.disqus.com https://c.disquscdn.com https://disqus.com http://res.cloudinary.com https://www.tennisfame.com https://bbox.blackbaudhosting.com https://t.sharethis.com https://*.en25.com https://*.googletagmanager.com https://*.googleadservices.com https://*.doubleclick.net https://*.adnxs.com http://*.affec.tv https://*.hs-scripts.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hscollectedforms.net https://*.licdn.com https://*.hotjar.com https://*.hsforms.net https://*.hsforms.com https://*.youtube.com https://*.ytimg.com https://*.hs-banner.com https://*.visme.co; object-src 'self' 'unsafe-inline' data: https://www.tennisfame.com https://cdn0.scrvt.com; block-all-mixed-content; 1
default-src 'none'; script-src https: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self'; font-src https: data:; img-src https: data:; connect-src https:; style-src https: 'unsafe-eval' 'unsafe-inline'; media-src https: blob:; frame-src https:; prefetch-src https:; base-uri 'none'; object-src 'self' 1
base-uri 'self'; img-src * data: 'unsafe-inline'; default-src data: * 'unsafe-inline'; frame-ancestors *.noord-holland.nl 'self' ; manifest-src 'none'; media-src *.readspeaker.com 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; object-src 'self' 1
object-src 'self'; frame-ancestors 'self'; 1
default-src 'self' https://static.linear.app; connect-src 'self' https://o415358.ingest.sentry.io/api/5337513/ wss://ornj730p.api.sanity.io/ https://stream.mux.com/ https://*.mux.com/ https://static.linear.app https://download.linear.app https://storage.googleapis.com/video-storage-us-east1-uploads/ https://api.linear.app wss://api.linear.app/ wss://sync.linear.app/ https://storage.googleapis.com/uploads.linear.app/ https://ornj730p.apicdn.sanity.io/ https://www.google-analytics.com/j/collect; script-src 'self' blob: 'unsafe-inline' https://www.googletagmanager.com/gtag/ https://www.google-analytics.com/analytics.js https://js.stripe.com/v3 https://static.linear.app; style-src 'self' 'unsafe-inline' https://static.linear.app; font-src 'self' https://static.linear.app; img-src 'self' data: blob: https://static.linear.app https://images.linear.app https://*.googleusercontent.com https://www.google-analytics.com https://cdn.sanity.io/images/ornj730p/ https://image.mux.com/ https://uploads.linear.app; frame-src https://js.stripe.com/ https://www.loom.com/ https://www.figma.com/ https://airtable.com/embed/ https://www.youtube.com/; media-src blob: https://*.mux.com/ https://linear.app/static/ https://uploads.linear.app; report-uri https://api.linear.app/report-violation 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://s7.addthis.com https://svc.webspellchecker.net https://loader.webspellchecker.net https://www.webspellchecker.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.ckeditor.com https://platform.twitter.com https://maps.googleapis.com https://www.google-analytics.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://svc.webspellchecker.net https://loader.webspellchecker.net https://www.webspellchecker.net https://*.google.com https://*.gstatic.com https://*.freshchat.com https://*.freshworksapi.com https://*.rtschannel.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.ckeditor.com https://fonts.googleapis.com https://fast.fonts.net https://maxcdn.bootstrapcdn.com https://svc.webspellchecker.net https://*.freshchat.com https://*.freshworksapi.com https://*.rtschannel.com; img-src 'self' data: https://cdn.ckeditor.com https://www.google-analytics.com https://svc.webspellchecker.net https://loader.webspellchecker.net https://www.webspellchecker.net http://chart.apis.google.com https://maps.gstatic.com/ https://maps.googleapis.com https://stats.g.doubleclick.net https://*.freshchat.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://s7.addthis.com https://svc.webspellchecker.net https://*.freshchat.com wss://*.freshchat.com; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.freshchat.com; frame-src 'self' https://www.youtube.com https://syndication.twitter.com https://platform.twitter.com https://s7.addthis.com https://loader.webspellchecker.net https://svc.webspellchecker.net https://www.webspellchecker.net https://*.google.com https://*.freshchat.com https://*.freshworksapi.com https://*.rtschannel.com; 1
frame-ancestors 'self' https://jobs.vitzo.com 1
default-src https: 'unsafe-eval' 'unsafe-inline';img-src https: data:; 1
default-src * 'unsafe-inline' 'unsafe-eval' 'self' app.optimizely.com *.hawksearch.com *.hawksearch.net *.americaneagle.com; media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net; img-src 'self' blob: data: * 1
frame-ancestors 'self' *.hellobank.fr *.bnpparibas *.mosaic.fr *.biapi.pro *.bnpparibas.net *.protection24.com *.facil-iti.net *.herokuapp.com *.matmut.com *.cardif-iard.fr; 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-OGNlN2ViY2ItNGIwYi00Y2Q5LTllYjYtNjhjYjA2NDVhOGEz'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
default-src 'self' https://player.vimeo.com https://static.zdassets.com https://syndication.twitter.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googletagservices.com/tag/js/gpt.js https://www.googletagservices.com/pubconsole/loader.js https://www.googletagservices.com https://adservice.google.com https://adservice.google.com.sg https://tpc.googlesyndication.com https://*.braintreegateway.com https://*.bootstrapcdn.com https://*.amazonaws.com https://*.s3.amazonaws.com https://*.twimg.com https://*.facebook.com https://*.google-analytics.com https://*.youtube.com https://fonts.googleapis.com https://*.robertparker.com https://*.g.doubleclick.net https://*.fbcdn.net https://*.cdninstagram.com https://*.cloudfront.net https://*.licdn.com https://*.linkedin.com https://p.adsymptotic.com/d/px https://www.google.com https://www.gstatic.com http://*.amazonaws.com http://www.instagram.com http://platform.twitter.com http://connect.facebook.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://player.vimeo.com https://static.zdassets.com https://syndication.twitter.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googletagservices.com/tag/js/gpt.js https://www.googletagservices.com/pubconsole/loader.js https://www.googletagservices.com https://adservice.google.com https://adservice.google.com.sg https://tpc.googlesyndication.com https://*.braintreegateway.com https://*.bootstrapcdn.com https://*.amazonaws.com https://*.s3.amazonaws.com https://*.twimg.com https://*.facebook.com https://*.google-analytics.com https://*.youtube.com https://fonts.googleapis.com https://*.robertparker.com https://*.g.doubleclick.net https://*.fbcdn.net https://*.cdninstagram.com https://*.cloudfront.net https://*.licdn.com https://*.linkedin.com https://p.adsymptotic.com/d/px https://www.google.com https://www.gstatic.com http://*.amazonaws.com http://www.instagram.com http://platform.twitter.com http://connect.facebook.net; connect-src * 'self' wss: https://player.vimeo.com https://static.zdassets.com https://syndication.twitter.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googletagservices.com/tag/js/gpt.js https://www.googletagservices.com/pubconsole/loader.js https://www.googletagservices.com https://adservice.google.com https://adservice.google.com.sg https://tpc.googlesyndication.com https://*.braintreegateway.com https://*.bootstrapcdn.com https://*.amazonaws.com https://*.s3.amazonaws.com https://*.twimg.com https://*.facebook.com https://*.google-analytics.com https://*.youtube.com https://fonts.googleapis.com https://*.robertparker.com https://*.g.doubleclick.net https://*.fbcdn.net https://*.cdninstagram.com https://*.cloudfront.net https://*.licdn.com https://*.linkedin.com https://p.adsymptotic.com/d/px https://www.google.com https://www.gstatic.com http://*.amazonaws.com http://www.instagram.com http://platform.twitter.com http://connect.facebook.net; img-src data: 'self' https://player.vimeo.com https://static.zdassets.com https://syndication.twitter.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googletagservices.com/tag/js/gpt.js https://www.googletagservices.com/pubconsole/loader.js https://www.googletagservices.com https://adservice.google.com https://adservice.google.com.sg https://tpc.googlesyndication.com https://*.braintreegateway.com https://*.bootstrapcdn.com https://*.amazonaws.com https://*.s3.amazonaws.com https://*.twimg.com https://*.facebook.com https://*.google-analytics.com https://*.youtube.com https://fonts.googleapis.com https://*.robertparker.com https://*.g.doubleclick.net https://*.fbcdn.net https://*.cdninstagram.com https://*.cloudfront.net https://*.licdn.com https://*.linkedin.com https://p.adsymptotic.com/d/px https://www.google.com https://www.gstatic.com http://*.amazonaws.com http://www.instagram.com http://platform.twitter.com http://connect.facebook.net; style-src 'self' 'unsafe-inline' https://player.vimeo.com https://static.zdassets.com https://syndication.twitter.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googletagservices.com/tag/js/gpt.js https://www.googletagservices.com/pubconsole/loader.js https://www.googletagservices.com https://adservice.google.com https://adservice.google.com.sg https://tpc.googlesyndication.com https://*.braintreegateway.com https://*.bootstrapcdn.com https://*.amazonaws.com https://*.s3.amazonaws.com https://*.twimg.com https://*.facebook.com https://*.google-analytics.com https://*.youtube.com https://fonts.googleapis.com https://*.robertparker.com https://*.g.doubleclick.net https://*.fbcdn.net https://*.cdninstagram.com https://*.cloudfront.net https://*.licdn.com https://*.linkedin.com https://p.adsymptotic.com/d/px https://www.google.com https://www.gstatic.com http://*.amazonaws.com http://www.instagram.com http://platform.twitter.com http://connect.facebook.net; font-src 'self' data: https://player.vimeo.com https://static.zdassets.com https://syndication.twitter.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googletagservices.com/tag/js/gpt.js https://www.googletagservices.com/pubconsole/loader.js https://www.googletagservices.com https://adservice.google.com https://adservice.google.com.sg https://tpc.googlesyndication.com https://*.braintreegateway.com https://*.bootstrapcdn.com https://*.amazonaws.com https://*.s3.amazonaws.com https://*.twimg.com https://*.facebook.com https://*.google-analytics.com https://*.youtube.com https://fonts.gstatic.com https://fonts.googleapis.com https://*.robertparker.com https://*.g.doubleclick.net https://*.fbcdn.net https://*.cdninstagram.com https://*.cloudfront.net https://*.licdn.com https://*.linkedin.com https://p.adsymptotic.com/d/px https://www.google.com https://www.gstatic.com http://*.amazonaws.com http://www.instagram.com http://platform.twitter.com http://connect.facebook.net; object-src 'none'; 1
base-uri *; child-src * data: blob: filesystem: mediastream:; form-action *; frame-ancestors *; connect-src * data: blob: filesystem: mediastream:; font-src * data: blob: filesystem: mediastream:; frame-src * data: blob: filesystem: mediastream:; img-src * data: blob: filesystem: mediastream:; media-src * data: blob: filesystem: mediastream:; object-src * data: blob: filesystem: mediastream:; script-src * 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: mediastream:; style-src * 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: mediastream:;  default-src *; report-uri https://listenercare.siriusxm.com/prweb/PRServletCustom/2mCjkZJmJzIb2YFZHOYfCw%5B%5B*/!STANDARD 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src * data:; connect-src *; font-src 'self'; manifest-src 'self'; form-action 'self'; navigate-to *; 1
frame-ancestors https://newapp.etracker.com https://securemail.olb.de/ 1
font-src 'self' https://fonts.gstatic.com https://maps.googleapis.com 1
default-src 'none';block-all-mixed-content;script-src 'self' 'unsafe-eval' https://wchat.freshchat.com https://www.google-analytics.com https://www.google.com https://www.google.com.tw https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.gstatic.com;style-src 'unsafe-inline' https://wchat.freshchat.com https://fonts.googleapis.com;img-src 'self' blob: data: https://www.gstatic.com/images/ https://www.google-analytics.com/r/collect https://googleads.g.doubleclick.net https://www.google.com https://www.google.com.tw https://assets.maicoin.com;frame-src https://maicoin.webpush.freshchat.com https://wchat.freshchat.com https://safe.menlosecurity.com https://www.google.com https://www.google.com.tw https://tpc.googlesyndication.com;connect-src 'self' https://wchat.freshchat.com https://exp.host https://www.google-analytics.com https://www.google.com https://www.google.com.tw https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.gstatic.com https://api.rollbar.com https://stats.g.doubleclick.net https://firebaseinstallations.googleapis.com wss://www.maicoin.com wss://ws.maicoin.com/ws;font-src 'self' data: https://fonts.gstatic.com;prefetch-src 'self';manifest-src 'self';object-src 'none'; report-uri https://0f88e0b7875b2690e127f0d4b529e255.report-uri.com/r/t/csp/enforce 1
frame-ancestors https://*.deejay.de https://*.vinylfuture.com; 1
default-src 'self'; frame-src 'self' https://facebook.com *.facebook.com https://*.youcanbook.me https://www.google.com https://www.youtube.com *.vimeo.com *.doubleclick.net https://optimize.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.digitrust.mgr.consensu.org http://connect.facebook.net https://connect.facebook.net http://hm.baidu.com http://www.google-analytics.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://optimize.google.com https://d2xfav0ywhr7jn.cloudfront.net https://quantcast.mgr.consensu.org https://secure.quantserve.com https://rules.quantcount.com https://maps.googleapis.com https://www.google-analytics.com/analytics.js https://stats.g.doubleclick.net/dc.js https://connect.facebook.net/en_US/sdk.js https://unpkg.com/@google/markerclustererplus@4.0.1/dist/markerclustererplus.min.js; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.googleapis.com https://optimize.google.com https://d2xfav0ywhr7jn.cloudfront.net; img-src 'self' data: blob: https://awardwallet.com http://hm.baidu.com https://www.facebook.com http://www.google-analytics.com https://www.google-analytics.com https://www.google.com https://optimize.google.com https://www.gstatic.com https://d2xfav0ywhr7jn.cloudfront.net https://pixel.quantserve.com https://maps.googleapis.com https://maps.gstatic.com https://developers.google.com/maps/documentation/javascript/examples/markerclusterer/m1.png https://lh3.googleusercontent.com https://s.yimg.com; font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com https://d2xfav0ywhr7jn.cloudfront.net; media-src 'self' 'unsafe-inline'; connect-src 'self' https://cmp.digitru.st https://vendorlist.consensu.org https://www.google-analytics.com https://test.quantcast.mgr.consensu.org https://quantcast.mgr.consensu.org/GVL-v2/vendor-list.json https://comet.awardwallet.com wss://comet.awardwallet.com; worker-src 'self' blob; report-uri /csp-report; 1
frame-ancestors 'self' http://mrgocom01stg.dmz.maggroup.com http://mrgocomforge.dmz.maggroup.com 1
default-src 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval'  www.googletagmanager.com www.congressweb.com https://cdnjs.cloudflare.com/ajax/libs/ *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com https://code.jquery.com;  style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com;  img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com https://archaeology.blob.core.windows.net https://images.saa.org https://documents.saa.org data: blob: *.eloqua.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:;  connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com;  media-src 'self' data: blob:;  frame-src 'self' https://www.google.com/ https://www.congressweb.com/ https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; 1
frame-src 'self' *.driftt.com *.drift.com *.vimeo.com *.youtube.com;                 frame-ancestors 'self' app.pendo.io *.salesforce.com *.lightning.force.com;                                  script-src 'self' 'unsafe-eval' 'unsafe-inline' andreasmb.github.io widget.drift.com js.driftt.com secure.adnxs.com dn1f1hmdujj40.cloudfront.net googleads.g.doubleclick.net web-analytics.engagio.com cdn.bizible.com munchkin.marketo.net j.6sc.co app.hushly.com www.googleadservices.com snap.licdn.com dl.episerver.net www.googletagmanager.com www.google-analytics.com ajax.googleapis.com az416426.vo.msecnd.net app.pendo.io *.zdassets.com *.clari.com *.linkedin.com clari.invisionapp.com logo.clearbit.com *.zdassets.com pendo-io-static.storage.googleapis.com cdn.pendo.io pendo-static-5772685038845952.storage.googleapis.com data.pendo.io *.clari.com cdn.mxpnl.com *.pendo.io cdn.pubnub.com cdn.ravenjs.com *.fullstory.com *.newrelic.com *.nr-data.net;                                img-src * data:;                 worker-src 'self' blob: ;                                 media-src 'self' *.youtube.com *.youtube-nocookie.com;                                object-src 'self' *.googlevideo.com *.ytimg.com *.youtube.com *.youtube-nocookie.com;                                child-src 'self' *.linkedin.com *.pendo.io clari.invisionapp.com *.googlevideo.com *.ytimg.com *.youtube.com *.youtube-nocookie.com  *.vimeo.com; 1
base-uri 'self'; default-src 'self'; child-src https://player.vimeo.com; connect-src 'self' https://*.algolianet.com https://*.algolia.net https://doorbell.io https://*.s3.ap-southeast-2.amazonaws.com https://www.google-analytics.com https://stats.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://www.youtube.com https://www.google-analytics.com https://www.googletagmanager.com https://ssl.google-analytics.com https://tagmanager.google.com https://fonts.googleapis.com https://www.google.com https://vimeo.com https://player.vimeo.com https://player.vimeo.com; img-src 'self' https://www.google-analytics.com https://ssl.gstatic.com https://www.googletagmanager.com https://www.gstatic.com https://www.google.com https://www.google.co.nz https://*.s3.ap-southeast-2.amazonaws.com https://embed.doorbell.io https://www.google.co.nz data:; media-src https://www.youtube.com https://vimeo.com; object-src 'self'; script-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://ssl.google-analytics.com https://tagmanager.google.com https://fonts.googleapis.com https://code.jquery.com https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/api.js https://embed.doorbell.io https://polyfill.io 'sha384-YzQCrEgYx0YMHxd202bqWPvr081aHRPYRk490ivT+/i24ODjLtMfT/e0nhxcgRYf' 'nonce-ZjEzM2JhNjMyYjA1NWJmZThlMjI3ODFmOGVjMzYxYjI4N2FmZjU2ZDgyMjg5NjE3N2IzNzQ4ZjcwMTNlN2QzYjM1YTQwYTU3M2I0NDllMzEwMTFkOGZhNjRiMzI4YWJiMTAwNDliOGIzMzNlYmM5YjM0OWY5OWI1NjI0ZWRkZDI=' 'unsafe-eval'; style-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://ssl.google-analytics.com https://tagmanager.google.com https://fonts.googleapis.com https://embed.doorbell.io/css/doorbell.min.css https://embed.doorbell.io/css/default.css 'unsafe-inline'; report-uri https://2224ea6b5792825a06d61a0bad9d966b.report-uri.com/r/d/csp/enforce; upgrade-insecure-requests 1
block-all-mixed-content; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com cdnjs.cloudflare.com connect.facebook.net googleads.g.doubleclick.net gdpr.madwire.com js.driftt.com maps.googleapis.com platform.twitter.com www.google.com www.google-analytics.com www.googletagmanager.com www.gstatic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; img-src 'self' data: a.mktgcdn.com bat.bing.com d22s7xnafxduco.cloudfront.net maps.googleapis.com maps.gstatic.com s3.amazonaws.com stats.g.doubleclick.net topratedlocal.s3.amazonaws.com www.facebook.com www.google.com www.google-analytics.com www.yextstatic.com; connect-src 'self' bat.bing.com www.facebook.com www.googleapis.com; font-src 'self' fonts.gstatic.com; frame-src 'self' accounts.google.com bid.g.doubleclick.net facebook.com js.driftt.com; frame-ancestors 'self' 1
default-src         'self'         'unsafe-inline'         www.google.com         www.gstatic.com         www.google-analytics.com         www.googletagmanager.com;     font-src         'self'         localhost         code.ionicframework.com         fonts.gstatic.com;     style-src         'self'         'unsafe-inline'         code.ionicframework.com         fonts.googleapis.com;     frame-ancestors         'none';     base-uri         'self';     img-src         'self'         data:;     form-action         'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://connect.facebook.net https://platform.twitter.com https://d.line-scdn.net https://www.google-analytics.com; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com ; img-src 'self' data: https://syndication.twitter.com https://78.media.tumblr.com http://www.narratage.com https://68.media.tumblr.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.asmik-ace.co.jp https://secure.gravatar.com https://s.w.org https://ps.w.org https://www.paypalobjects.com https://ak1s.abmr.net/ https://ts.w.org ; font-src 'self' data: fonts.gstatic.com; frame-src 'self' data: https://www.google.com https://www.youtube.com https://platform.twitter.com https://staticxx.facebook.com https://social-plugins.line.me https://www.facebook.com; 1
frame-ancestors https://source.vmware.com https://onevmw.sharepoint.com https://source.vmware.com/portal/ https://social.vmware.com/ https://vmware.sabacloud.com https://workvivo.com https://vtap.apps.scdc1.itcna.vmware.com https://vtapstage.apps.scdc1.itcna.vmware.com https://vtapdevui.apps.wdc-np.itcna.vmware.com https://gwa-usw4.genesyscloud.com https://gapi-usw4.genesyscloud.com https://vmware-gs--uat2.lightning.force.com https://gabi-portal.eng.vmware.com https://pssolutionbuilder.vmware.com https://vmware-gs--qa.lightning.force.com/lightning/o/Case/ https://vmware-gs.my.salesforce.com https://vmware-gs--gsstage.lightning.force.com/ https://euc-srdrivers.wdc-06-pcf2-apps.oc.vmware.com/ https://srdrivers.wdc-06-pcf2-apps.oc.vmware.com/ https://vmware.my.salesforce.com https://vmware.lightning.force.com https://gwa-use4.genesyscloud.com https://gapi-use4.genesyscloud.com https://sb-prod-staging.gstools.vmware.com https://vmware.onit.com https://vault.netvoyage.com/neWeb2/docCent.aspx https://cmbu-srdrivers.wdc-06-pcf2-apps.oc.vmware.com/ https://dsr-test.svc-stage.eng.vmware.com/ https://dsr.svc.eng.vmware.com/ https://vmware-gs.lightning.force.com https://secure.video.ibm.com/vmware https://cpbu-srdrivers.wdc-08-pcf1-apps.oc.vmware.com/ https://euc-srdrivers.wdc-08-pcf1-apps.oc.vmware.com/ https://cmbu-srdrivers.wdc-08-pcf1-apps.oc.vmware.com/ https://video.ibm.com/internal/embed/23584250 1
default-src 'self'; font-src 'self' fonts.gstatic.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' github.com getglimpse.com cms.clydeco.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com www.youtube.com s.ytimg.com www.gstatic.com *.cookiebot.com cms.clydeco.com clyde-prod.azurewebsites.net clyde-cms-prod.azurewebsites.net clyde-cms-prod2.azurewebsites.net clyde-cms-uat.azurewebsites.net clyde-uat.azurewebsites.net clyde-cms-qa.hosted.positive.co.uk clyde-qa.hosted.positive.co.uk www.clydeco.com clydeco.com www.cc.com cc.com *.twitter.com cdn.syndication.twimg.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com; frame-src 'self' w.soundcloud.com cms.clydeco.com clyde-qa.hosted.positive.co.uk www.clydeco.com clydeco.com www.cc.com cc.com cdn.yoshki.com www.youtube-nocookie.com *.google.com *.ngrok.io www.facebook.com *.pinterest.com pinterest.com player.vimeo.com www.google.com s7.addthis.com www.youtube.com *.webspellchecker.net *.cookiebot.com *.twitter.com; object-src 'none'; img-src 'self' data: https: *.googletagmanager.com; connect-src 'self' api.mixpanel.com cc.local *.google-analytics.com cms.clydeco.com clyde-prod.azurewebsites.net clyde-cms-prod.azurewebsites.net clyde-cms-prod2.azurewebsites.net clyde-cms-uat.azurewebsites.net clyde-qa.hosted.positive.co.uk clyde-cms-qa.hosted.positive.co.uk clyde-uat.azurewebsites.net stats.g.doubleclick.net; media-src 'self' cdn.clydeco.com; frame-ancestors 'self' cms.clydeco.com clyde-cms-prod.azurewebsites.net clyde-cms-prod2.azurewebsites.net clyde-cms-uat.azurewebsites.net admin.cc.local; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mstdn.jp; img-src 'self' https: data: blob: https://mstdn.jp; style-src 'self' https://mstdn.jp 'nonce-irbOQQ2bKKs0HabPCGJgjg=='; media-src 'self' https: data: https://mstdn.jp; frame-src 'self' https:; manifest-src 'self' https://mstdn.jp; connect-src 'self' data: blob: https://mstdn.jp https://media.mstdn.jp wss://mstdn.jp; script-src 'self' https://mstdn.jp; child-src 'self' blob: https://mstdn.jp; worker-src 'self' blob: https://mstdn.jp 1
default-src 'self';connect-src 'self' datavisualisatieportal.nji.nl *.googletagmanager.com *.google-analytics.com *.siteimproveanalytics.com *.hotjar.com:* *.hotjar.io wss://*.hotjar.com;font-src 'self' *.googleapis.com *.gstatic.com *.hotjar.com *.hotjar.io;frame-src 'self' *.vimeo.com *.youtube.com *.youtube.be *.googletagmanager.com *.google.com *.google.nl *.formdesk.com *.obi4wan.com *.hotjar.com *.hotjar.io;img-src * data: *.hotjar.com *.hotjar.io;media-src 'self';object-src 'none';script-src 'self' google.com code.highcharts.com datavisualisatieportal.nji.nl *.googletagmanager.com *.google-analytics.com *.siteimproveanalytics.com siteimproveanalytics.com *.google.nl *.hotjar.com *.hotjar.io 'unsafe-inline' 'unsafe-eval';style-src 'self' datavisualisatieportal.nji.nl *.googleapis.com 'unsafe-inline' 1
default-src 'self'; connect-src 'self' data: 'unsafe-inline' https://bat.bing.com https://*.adobedtm.com http://*.calbanktrust.com https://*.calbanktrust.com https://zionsbancorp.sc.omtrdc.net https://*.demdex.net https://*.cludo.com https://*.sumome.com https://*.sumo.com https://sumo.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://zionsbancorp.sc.omtrdc.net 'unsafe-eval'; script-src 'self' data: 'unsafe-inline' https://*.doubleclick.net https://*.googletagmanager.com https://*.googleadservices.com https://bat.bing.com https://*.adobedtm.com https://connect.facebook.net https://*.pages05.net https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.calbanktrust.com https://*.zionsbank.com https://*.cludo.com https://*.sumome.com https://*.sumo.com https://sumo.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.youtube.com https://*.ytimg.com https://*.vimeo.com 'unsafe-eval'; object-src 'self' data: https://*.calbanktrust.com; style-src 'self' data: 'unsafe-inline' https://*.googleapis.com https://*.google.com https://*.cludo.com https://*.sumome.com https://*.sumo.com https://sumo.com; img-src 'self' data: 'unsafe-inline' https://bat.bing.com https://px.ads.linkedin.com https://p.adsymptotic.com https://www.facebook.com https://*.pages05.net https://*.doubleclick.net https://*.google-analytics.com https://*.gstatic.com https://*.calbanktrust.com https://*.online-metrix.net https://*.omtrdc.net https://*.demdex.net https://*.everesttech.net https://*.googleapis.com https://*.google.com https://*.cludo.com https://*.sumome.com https://*.sumo.com https://sumo.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.youtube.com https://*.ytimg.com https://*.vimeo.com 'unsafe-eval'; media-src 'self' data:; frame-src 'self' https://*.online-metrix.net https://*.calbanktrust.com https://*.demdex.net https://*.doubleclick.net https://secure.checkout.visa.com https://*.youtube.com https://*.ytimg.com https://*.vimeo.com https://*.pages05.net https://*.brightcove.net https://*.sumome.com https://*.sumo.com https://sumo.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://outlook.office365.com; frame-ancestors 'self' https://banking.calbanktrust.com; font-src 'self' data: 'unsafe-inline' https://fonts.gstatic.com https://*.visualwebsiteoptimizer.com https://app.vwo.com; upgrade-insecure-requests; block-all-mixed-content 1
default-src https: http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com 'unsafe-inline' 'unsafe-eval'; font-src 'unsafe-inline' 'unsafe-eval' *; script-src https: www.google-analytics.com ajax.googleapis.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 'unsafe-inline' 'unsafe-eval'; img-src * data: 1
object-src 'none';base-uri 'self';script-src 'nonce-cOc4T3tHTUCGG9QFnlW5' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe 1
default-src 'self' https://cp.mchost.ru/ https://*.jivosite.com/ wss://*.jivosite.com/ https://www.googletagmanager.com/ https://mc.yandex.ru/ https://app.satismeter.com/ https://www.google-analytics.com/ https://vk.com/ https://disqus.com/ https://*.disqus.com/ https://*.disquscdn.com/ https://fonts.gstatic.com/ data: 'unsafe-inline'; frame-ancestors 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net; img-src 'self' https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://assets.zendesk.com; font-src 'self' https://themes.googleusercontent.com; frame-src https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com; object-src 'none' 1
frame-ancestors 'self' ; report-uri https://itickets.report-uri.io/r/default/csp/enforce; 1
default-src 'none'; img-src *; media-src s3.amazonaws.com; manifest-src 'self'; script-src 'self' 'unsafe-inline' www.googletagmanager.com script.hotjar.com static.hotjar.com d.impactradius-event.com; connect-src *.easyship.com in.hotjar.com vc.hotjar.io easyship.ilbqy6.net; frame-src vars.hotjar.com; style-src 'self' 'unsafe-inline'; font-src 'self' data: 1
frame-ancestors 'self'; upgrade-insecure-requests; font-src *.cokesbury.com fonts.gstatic.com *.bounceexchange.com data:; default-src 'unsafe-inline' 'unsafe-eval' *.livechatinc.com *.google.com *.bounceexchange.com *.bing.com *.doubleclick.net *.phonewagon.com *.contentsquare.net *.contentsquare.com *.turnto.com *.cokesbury.com *.facebook.net *.pepperjam.com *.visualwebsiteoptimizer.com *.bouncex.net *.googleapis.com *.gstatic.com *.myfonts.net *.addthis.com *.livechatinc.com *.voltagesearch.com *.addthisedge.com *.facebook.com *.google-analytics.com *.sc.pages08.net *.pages08.net *.moatads.com *.nice-incontact.com *.raygun.io *.paypal.com *.googleadservices.com *.pbbl.co *.agkn.com polyfill.io *.youtube.com *.hoststreamsell.com hoststreamsell.com hoststreamsell-pics.s3.amazonaws.com *.connectedfaith.com *.e2ma.net *.streamlock.net *.ytimg.com *.pepperjamnetwork.com *.edgecastcdn.net *.goacoustic.com acoustic.co *.googletagmanager.com blob: moz-extension: resource:  1
font-src *; 1
default-src 'self' data: gap: https://*.zscalertwo.net https://*.maersk.com https://*.safmarine.com https://*.maerskline.com https://*.apmoller.net https://*.go-mpulse.net https://*.salesforceliveagent.com https://*.force.com *.mpstat.us *.akstat.io https://*.akamaihd.net https://*.igodigital.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://100qrcey9nsltilmpwezagts.blob.core.windows.net https://rum-http-intake.logs.datadoghq.eu https://*.visualforce.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zscalertwo.net https://*.maersk.com https://*.safmarine.com https://*.maerskline.com https://*.apmoller.net https://*.akamaihd.net https://*.salesforceliveagent.com https://*.force.com https://*.salesforce.com https://*.steelcentral.net *.mpstat.us *.akstat.io https://*.igodigital.com https://pub.s1.exacttarget.com https://*.gstatic.com https://*.google.com  https://*.googleapis.com https://www.googletagmanager.com https://*.google-analytics.com https://scai.maerskline.com https://api.massrelevance.com https://img.en25.com https://*.bizographics.com https://*.doubleclick.net https://*.linkedin.com https://www.datadoghq-browser-agent.com/datadog-rum-eu.js https://*.cookieinformation.com; img-src 'self' data: https://*.zscalertwo.net https://*.maersk.com https://*.safmarine.com https://*.maerskline.com https://*.apmoller.net https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.gstatic.com https://lh3.googleusercontent.com https://*.steelcentral.net https://*.vimeocdn.com https://*.youtube.com https://*.igodigital.com https://*.akamaihd.net https://www.google.co.uk https://*.linkedin.com https://*.facebook.com https://*.twitter.com https://*.doubleclick.net https://*.google.dk https://scai.maerskline.com https://www.google.com/ads/ga-audiences* https://*.bizographics.com https://*.akstat.io; object-src 'self'; style-src 'self' 'unsafe-inline' https://*.zscalertwo.net https://*.maersk.com https://*.safmarine.com https://*.apmoller.net https://*.gstatic.com https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.maerskline.com https://*.force.com; frame-src https://*.zscalertwo.net https://*.maersk.com https://*.safmarine.com https://*.maerskline.com https://*.apmoller.net https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.google.com https://www.youtube.com/embed/ https://player.vimeo.com/video/ https://service.force.com https://www.google.com/recaptcha/ https://*.cookieinformation.com/ https://*.salesforce.com/ https://*.force.com https://*.youku.com/; font-src 'self' data: https://*.zscalertwo.net https://*.maersk.com https://*.safmarine.com https://*.maerskline.com https://*.apmoller.net https://*.gstatic.com https://*.googleapis.com; 1
default-src 'self';block-all-mixed-content ;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com assets.rockwerchter.be *.typekit.net;img-src 'self' data: *.gstatic.com maps.googleapis.com www.facebook.com scontent.cdninstagram.com pbs.twimg.com i.ytimg.com scontent.xx.fbcdn.net external.xx.fbcdn.net assets.rockwerchter.be *.google-analytics.com *.doubleclick.net *.betrad.com *.quantserve.com *.evidon.com rockwerchter.be *.x.bidswitch.net *.google.com *.google.be *.consensu.org;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com cdnjs.cloudflare.com connect.facebook.net graph.facebook.com *.instagram.com js-agent.newrelic.com bam.nr-data.net assets.rockwerchter.be *.googletagmanager.com *.google-analytics.com *.evidon.com *.quantserve.com *.betrad.com *.quantcount.com tagmanager.google.com *.googleadservices.com *.doubleclick.net *.bh.contextweb.com www.google.com *.google.com *.google.com *.gstatic.com *.consensu.org;style-src 'self' 'unsafe-inline' fonts.googleapis.com cloud.typography.com assets.rockwerchter.be *.tagmanager.google.com tagmanager.google.com *.typekit.net *.typekit.net;report-uri /nelmio/csp/report;connect-src www.googleapis.com 'self' *.betrad.com *.google-analytics.com *.consensu.org;frame-src www.youtube.com www.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.google.com 'self' *.betrad.com *.evidon.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' dealogic.wpengine.com * www.googletagmanager.com maps.googleapis.com www.google.com ajax.googleapis.com en25.com www.google-analytics.com; 1
default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com maps.google.com *.googleapis.com *.gstatic.com www.google.com js-agent.newrelic.com bam.nr-data.net *.googletagmanager.com platform.twitter.com *.twimg.com ifoa.precedenthost.co.uk *.actuaries.org.uk cdn.rawgit.com e.issuu.com www.youtube.com s.ytimg.com tagmanager.google.com khan.github.io squizlabs.github.io script.crazyegg.com *.eu-west-2.amazonaws.com s3.amazonaws.com  loader.webspellchecker.net webspellchecker.com embed.multichanneltv.com openchannel.multichanneltv.com www.youtube.com www.googletagmanager.com *.streamamg.com d34l49dszxxnhj.cloudfront.net optimize.google.com optimize.google.com/* *.optimize.google.com pagead2.googlesyndication.com *.googlesyndication.com *.googletagservices.com adservice.google.co.uk adservice.google.com; object-src *.issuu.com flash.quantserve.com s3.amazonaws.com 'self' d34l49dszxxnhj.cloudfront.net *.crazyegg.com trk.cetrk.com s3.amazonaws.com/trk.cetrk.com/;; style-src 'self' 'unsafe-inline' *.googleapis.com platform.twitter.com *.actuaries.org.uk tagmanager.google.com squizlabs.github.io *.eu-west-2.amazonaws.com loader.webspellchecker.net webspellchecker.com embed.multichanneltv.com openchannel.multichanneltv.com www.youtube.com www.googletagmanager.com *.streamamg.com svc.webspellchecker.net d34l49dszxxnhj.cloudfront.net  optimize.google.com optimize.google.com/* *.optimize.google.com ; img-src 'self' data: *.google-analytics.com www.googletagmanager.com maps.google.com *.gstatic.com *.googleapis.com rest.mollom.com rest-production.mollom.com bam.nr-data.net syndication.twitter.com platform.twitter.com *.twimg.com *.actuaries.org.uk live.sagepay.com *.doubleclick.net *.openathens.net squizlabs.github.io *.eu-west-2.amazonaws.com s3.amazonaws.com *.amazonaws.com svc.webspellchecker.net loader.webspellchecker.net  d34l49dszxxnhj.cloudfront.net  optimize.google.com optimize.google.com/* *.optimize.google.com *.google.com/ads/ga-audiences *.google.co.uk/ads/ga-audiences  *.googlesyndication.com; frame-src 'self' embed.multichanneltv.com openchannel.multichanneltv.com www.youtube.com www.googletagmanager.com *.streamamg.com loader.webspellchecker.net webspellchecker.com embed.multichanneltv.com openchannel.multichanneltv.com www.youtube.com www.googletagmanager.com *.streamamg.com *.loader.webspellchecker.net svc.webspellchecker.net optimize.google.com optimize.google.com/* *.optimize.google.com  embeds.audioboom.com googleads.g.doubleclick.net *.googlesyndication.com *.bluejeans.com bluejeans.com/no-cookies/; font-src 'self' data: *.gstatic.com ifoa.precedenthost.co.uk *.actuaries.org.uk *.eu-west-2.amazonaws.com d34l49dszxxnhj.cloudfront.net; connect-src 'self' *.crazyegg.com trk.cetrk.com s3.amazonaws.com/trk.cetrk.com/ pagead2.googlesyndication.com *.google-analytics.com *.doubleclick.net *.bluejeans.com; report-uri /IFoA.report-uri.io/r/default/csp/enforce%20 1
default-src *  data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 1
script-src 'self' https://flat.io https://*.flat.io https://*.flat-cdn.com https://*.google-analytics.com https://*.google.com https://connect.facebook.net https://*.youtube.com https://*.ytimg.com https://w.soundcloud.com https://player.vimeo.com https://*.stripe.com https://*.paypal.com https://*.algolianet.com https://*.algolia.net 'unsafe-inline' 'unsafe-eval' data: blob:;connect-src * wss://* data:;font-src 'self' https://*.flat-cdn.com https://fonts.gstatic.com;frame-src blob: *;base-uri https://flat.io https://*.flat.io;report-uri https://peoc.flat.io/api/25/csp-report/?sentry_version=5&sentry_key=24549ed8ab89447988b5ffba60385de7 1
upgrade-insecure-requests; default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: ; style-src 'self' 'unsafe-inline' https: ; base-uri 'none'; form-action 'self' https: 1
frame-ancestors www.jivochat.com.br https://app.jivosite.com https://app3alpha.jivosite.com https://app3beta.jivosite.com; child-src https://mc.yandex.ru 1
frame-ancestors 'self' https://www.thetool.io; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob:*; script-src 'self' 'unsafe-inline' 'unsafe-eval' * data:*; object-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' *; img-src 'self' 'unsafe-inline' * data:; media-src 'self' 'unsafe-inline' http://*.amazonaws.com:* https://*.amazonaws.com:*; frame-src 'self' 'unsafe-inline' * blob:*; frame-ancestors 'self' 'unsafe-inline' *; child-src 'self' 'unsafe-inline' * blob:* blob:; font-src 'self' 'unsafe-inline' *; connect-src 'self' 'unsafe-inline' *; report-uri /report-csp-violation 1
default-src http:  https: wss: data: blob: 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: *; report-uri https://ncreports.report-uri.com/r/d/csp/reportOnly 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data:              https://*.hotjar.io              https://*.hotjar.com              wss://*.hotjar.com              https://*.youtube.com              https://*.youtube-nocookie.com              https://*.ytimg.com              https://*.facebook.net              https://*.facebook.com              https://*.google.com              https://*.google.nl              https://*.google-analytics.com              https://*.googleadservices.com              https://tagmanager.google.com              https://www.googletagmanager.com              https://i.vimeocdn.com              https://player.vimeo.com              https://*.vimeo.com              https://fonts.googleapis.com              https://maps.gstatic.com              https://fonts.gstatic.com              https://maps.googleapis.com              https://code.jquery.com              https://use.typekit.net;              frame-src 'self'               https://*.local              https://*.botest.nl              https://*.basicorange.nl              https://*.netwerkdigitaalerfgoed.nl              https://vars.hotjar.com              https://*.youtube.com              https://*.youtube-nocookie.com              https://player.vimeo.com              https://*.vimeo.com; 1
default-src 'self' 'unsafe-inline' *.hsa.gov.sg *.cwp-stg.sg *.cwp.sg *.wogaa.sg *.demdex.net cm.everesttech.net wogadobeanalytics.sc.omtrdc.net www.google.com *.googleapis.com www.youtube.com www.googletagmanager.com www.google-analytics.com *.dcube.cloud assets.dcube.cloud; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.wogaa.sg *.adobedtm.com www.googletagmanager.com www.google-analytics.com *.google.com www.google.com assets.dcube.cloud *.gstatic.com cdn.polyfill.io *.hsa.gov.sg; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: * wogadobeanalytics.sc.omtrdc.net cm.everesttech.net *.demdex.net www.google-analytics.com wogadobeanalytics.sc.omtrdc.net www.google.com clients1.google.com wogadobeanalytics.sc.omtrdc.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.wogaa.sg *.googleapis.com www.google.com assets.dcube.cloud; font-src 'self' data: *.dcube.cloud *.wogaa.sg *.googleapis.com www.google.com *.gstatic.com 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.youtube.com *.ytimg.com https://dl.episerver.net *.whisbi.com *.nr-data.net https://js-agent.newrelic.com/ https://code.jquery.com https://code.createjs.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.google.com *.gstatic.com *.hotjar.com *.trustpilot.com *.browsealoud.com *.adnxs.com https://static.ads-twitter.com/ https://analytics.twitter.com/ https://platform.twitter.com/; worker-src *.hotjar.com *.whisbi.com *.googletagmanager.com *.browsealoud.com *.adnxs.com *.episerver.net *.google.com *.googleapis.com 'self' data: gap: ws:; connect-src *.nr-data.net js-agent.newrelic.com stats.g.doubleclick.net *.browsealoud.com *.adnxs.com *.hotjar.io *.hotjar.com *.whisbi.com *.gstatic.com *.google-analytics.com *.youtube.com *.ytimg.com *.googletagmanager.com *.episerver.net *.googleapis.com 'self' data: gap: ws:; img-src 'self' data: gap: *.amazonaws.com *.whisbi.com *.adnxs.com *.twimg.com *.google.co.uk https://csi.gstatic.com *.google.com *.gstatic.com *.googleapis.com *.google-analytics.com stats.g.doubleclick.net *.hotjar.com https://t.co/; style-src 'self' 'unsafe-inline' *.google.com *.whisbi.com *.googleapis.com hello.myfonts.net *.hotjar.com; font-src 'self' data: *.gstatic.com *.hotjar.com; form-action 'self'; object-src 'self'; media-src 'self'; frame-src 'self' https://cdn.flipsnack.com/ https://servedby.flashtalking.com/ https://vars.hotjar.com/ https://static.hotjar.com *.hotjar.com *.whisbi.com https://www.google.com/recaptcha/ https://player.vimeo.com https://www.youtube.com https://secure.flife.de https://irs.tools.investis.com https://otp.tools.investis.com https://metrobankonline.marketing.dynamics.com/ https://www.appdemostore.com https://metrobankdigital.invisionapp.com https://widget.trustpilot.com 1
default-src 'self' cdn.speedcurve.com lux.speedcurve.com; script-src 'self' 'unsafe-inline' cdn.speedcurve.com lux.speedcurve.com unpkg.com; style-src 'unsafe-inline'; img-src 'self' data: res.cloudinary.com; connect-src 'self' cdn.speedcurve.com lux.speedcurve.com unpkg.com api.github.com; upgrade-insecure-requests; report-uri https://timkadlec.report-uri.com/r/d/csp/enforce 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' i.ytimg.com *.jbnu.ac.kr www.googletagmanager.com *.googleapis.com wcs.naver.net dapi.kakao.com *.daum.net *.daumcdn.net *.kakao.com *.youtube.com; 1
default-src 'self' www.youtube-nocookie.com i.ytimg.com s.ytimg.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.altospam.eu; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com data:; report-uri https://altospam.uriports.com/reports/report; report-to default; base-uri 'self'; 1
upgrade-insecure-requests; frame-ancestors 'self' http://*.stj.jus.br https://*.stj.jus.br https://stjjus.sharepoint.com 1
base-uri 'none'; child-src js.stripe.com www.youtube.com play.vidyard.com; connect-src 'self' blob: www.google-analytics.com sentry.io *.sentry.io services.mother.co s3.ca-central-1.amazonaws.com api.adbutler.com https://RM22375DTG-dsn.algolia.net www.googleapis.com servedbyadbutler.com wss://gns3.com; default-src 'self'; font-src 'self' dist.mcdn.co; frame-ancestors 'none'; img-src 'self' blob: data: media.mcdn.co *.media.mcdn.co maps.googleapis.com www.google-analytics.com maps.gstatic.com servedbyadbutler.com cdn.vidyard.com play.vidyard.com i.ytimg.com; media-src 'self' blob:; object-src 'none'; style-src 'self' dist.mcdn.co 'unsafe-inline'; script-src 'self' dist.mcdn.co js.stripe.com maps.googleapis.com www.google-analytics.com *.sentry.io play.vidyard.com 1
report-uri https://www.yelp.com/csp_block?id=ec6765fbb5f9e928&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609205834; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
font-src      data:     https://fonts.gstatic.com ; frame-src 'self' www.google.com www.youtube.com; script-src      'self'     https://www.google-analytics.com/analytics.js     https://www.gstatic.com/brandstudio/kato/cookie_choice_component/cookie_consent_bar.v2.js ; style-src      'self'     'unsafe-inline'     https://fonts.googleapis.com ; default-src 'self' *.gstatic.com; object-src      'none' ; img-src      'self'     https://* ; manifest-src      'self' ; connect-src      'self'     https://www.google-analytics.com     https://*.doubleclick.net ; report-uri https://csp.withgoogle.com/csp/s~gweb-womentechmakers/1-3-0-1604655227 1
script-src 'unsafe-inline' 'unsafe-eval' https:; object-src 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudfront.net bppmdmxgsg.execute-api.eu-west-1.amazonaws.com cdn.jsdelivr.net cdn.syndication.twimg.com cdn.vitality.co.uk cdnjs.cloudflare.com js.idio.co metrics.responsetap.com optimize.google.com platform.twitter.com s.idio.co s.ytimg.com s3.amazonaws.com script.crazyegg.com static-cdn.responsetap.com static-ssl.responsetap.com tagmanager.google.com *.qualaroo.com unpkg.com *.usabilla.com www.google-analytics.com www.googletagmanager.com www.google.com www.googleoptimize.com www.gstatic.com *.marketingautomation.services www.youtube.com player.vimeo.com quantcast.mgr.consensu.org cdn.siteimprove.net ws.sessioncam.com idoplayer.idomoo.com widget.trustpilot.com sjs.bizographics.com *.kampyle.com *.medallia.eu *.bing.com maps.googleapis.com *.co-buying.com *.vitality.co.uk;object-src 'self' cdn.vitality.co.uk *.co-buying.com *.vitality.co.uk;style-src 'self' 'unsafe-inline' cdn.jsdelivr.net cdn.vitality.co.uk cdnjs.cloudflare.com fonts.googleapis.com fonts.gstatic.com optimize.google.com platform.twitter.com s3.amazonaws.com tagmanager.google.com ton.twimg.com widget.trustpilot.com *.cloudfront.net *.kampyle.com *.medallia.eu *.co-buying.com *.vitality.co.uk;img-src 'self' a.idio.co abs.twimg.com adviser.vitality.co.uk bppmdmxgsg.execute-api.eu-west-1.amazonaws.com cdn.vitality.co.uk cm.g.doubleclick.net data: *.cloudfront.net google.com gtrk.s3.amazonaws.com optimize.google.com pbs.twimg.com platform.twitter.com s3.amazonaws.com stats.g.doubleclick.net syndication.twitter.com ton.twimg.com www.google-analytics.com www.google.co.uk www.google.com www.vitality.co.uk www.googletagmanager.com widget.trustpilot.com *.usabilla.com *.kampyle.com *.medallia.eu bat.bing.com *.co-buying.com www.google.ie maps.gstatic.com maps.googleapis.com *.vitality.co.uk;media-src 'self' cdn.vitality.co.uk;frame-src 'self' *.fls.doubleclick.net docs.google.com *.cloudfront.net https://www.youtube.com platform.twitter.com sdn.sitecore.net survey.vitalityreferral.co.uk syndication.twitter.com twitter.com vitality.co.uk www.youtube.com optimize.google.com player.vimeo.com my2.siteimprove.com *.qualaroo.com https://www.google.com idoplayer.idomoo.com/ widget.trustpilot.com *.kampyle.com *.medallia.eu *.co-buying.com *.vitality.co.uk;font-src 'self' cdn.vitality.co.uk data: fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com *.cloudfront.net *.kampyle.com *.medallia.eu;frame-ancestors 'self' https://vitality-portal.1stmd.com vitality.co.uk 1
default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self'; script-src 'self' blob: https://assets.dcube.cloud https://*.wogaa.sg https://assets.adobedtm.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://va.ecitizen.gov.sg https://*.cloudfront.net https://printjs-4de6.kxcdn.com https://unpkg.com https://wogadobeanalytics.sc.omtrdc.net https://connect.facebook.net https://www.googletagmanager.com https://*.licdn.com; object-src 'self'; style-src 'self' https://fonts.googleapis.com/ https://*.cloudfront.net https://va.ecitizen.gov.sg https://*.wogaa.sg https://cdnjs.cloudflare.com https://datagovsg.github.io 'unsafe-inline'; img-src *; media-src *; frame-src https://form.gov.sg/ https://wogaa.demdex.net/ https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://www.google.com; frame-ancestors 'none'; font-src * data:; connect-src 'self' https://dpm.demdex.net https://www.google-analytics.com https://stats.g.doubleclick.net https://*.wogaa.sg https://va.ecitizen.gov.sg https://ifaqs.flexanswer.com https://*.cloudfront.net https://fonts.googleapis.com https://cdnjs.cloudflare.com https://wogadobeanalytics.sc.omtrdc.net https://data.gov.sg https://api.isomer.gov.sg; 1
frame-ancestors 'self' https://rtc.instructure.com:*; 1
style-src 'self' 'unsafe-inline' https://capfriendly-wlb8ng5.stackpathdns.com https://ajax.googleapis.com https://fonts.googleapis.com https://platform.twitter.com https://ton.twimg.com;style-src-attr 'self' 'unsafe-inline';font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com;frame-ancestors 'self' *.capfriendly.com; 1
default-src * 'self' data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors https://*.prelivemail.de https://*.mail.de; 1
default-src 'self' 'unsafe-inline';frame-src *.google.com *.google.co.in *.googletagmanager.com *.woohoo.in *.valiramgifts.com *.branch.io *.giftbig.com *.youtube.com *.doubleclick.net *.adyen.com;img-src 'self' 'unsafe-inline' checkoutshopper-live.adyen.com ssl.gstatic.com *.gstatic.com *.zopim.com *.cloudfront.net *.google.com *.google.co.in *.facebook.com *.facebook.net *.googleadservices.com *.woohoo.in *.valiramgifts.com *.branch.io *.giftbig.com data: *.google-analytics.com *.amazonaws.com *.googletagmanager.com *.doubleclick.net;media-src 'self' 'unsafe-inline' *.amazonaws.com *.cloudfront.net *.zopim.com data: ;script-src 'self' 'unsafe-inline' checkoutshopper-live.adyen.com *.zdassets.com *.gstatic.com wzrkt.com *.wzrkt.com *.cloudfront.net *.google.com *.google.co.in *.facebook.net *.gstatic.com *.twemoji.maxcdn.com *.segment.com *.zopim.com *.platform.twitter.com *.youtube.com *.apis.google.com *.woohoo.in *.valiramgifts.com *.branch.io *.giftbig.com cdn.polyfill.io *.clevertap.com *.google-analytics.com app.link *.googletagmanager.com *.googleadservices.com *.doubleclick.net;style-src 'self' 'unsafe-inline' checkoutshopper-live.adyen.com *.cloudfront.net tagmanager.google.com *.youtube.com *.woohoo.in *.valiramgifts.com *.branch.io *.giftbig.com *.googleapis.com ;font-src 'self' 'unsafe-inline' *.cloudfront.net fonts.googleapis.com *.zopim.com *.woohoo.in *.valiramgifts.com *.branch.io *.giftbig.com *.gstatic.com *.googletagmanager.com data: ;connect-src 'self' wss://*.zopim.com *.woohoo.in *.zdassets.com *.zopim.com *.segment.com *.segment.io *.google-analytics.com *.branch.io *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.facebook.net checkoutshopper-live.adyen.com; 1
connect-src 'self' *.ocs.fr sample-api-v2.crazyegg.com/n/188974/all ajax.googleapis.com cdnjs.cloudflare.com *.ads-twitter.com connect.facebook.net *.google-analytics.com *.googletagmanager.com google-analytics.com/* *.qualifio.com/* platform.twitter.com cdn.syndication.twimg.com script.crazyegg.com/pages/scripts/0018/8974.js www.googleadservices.com/pagead/conversion_async.js analytics.twitter.com/i/adsct googleads.g.doubleclick.net/* googleads.g.doubleclick.net/pagead/viewthroughconversion/984127776/ www.google.com/pagead/conversion_async.js tagmanager.google.com *.doubleclick.net go.flx1.co *.flx1.co flx1.co; font-src 'self' https://github.com/google/fonts/blob/master/apache/opensans/* fonts.gstatic.com fonts.googleapis.com https://github.com/google/fonts/blob/master/apache/opensans/OpenSans-Light.ttf https://github.com/google/fonts/blob/master/apache/opensans/OpenSans-Semibold.ttf https://github.com/google/fonts/blob/master/apache/opensans/OpenSans-Bold.ttf https://github.com/google/fonts/blob/master/apache/opensans/OpenSans-LightItalic.ttf https://fonts.gstatic.com data:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com cdnjs.cloudflare.com *.ocs.fr *.ads-twitter.com connect.facebook.net *.google-analytics.com *.googletagmanager.com google-analytics.com/* *.qualifio.com/* platform.twitter.com cdn.syndication.twimg.com script.crazyegg.com/pages/scripts/0018/8974.js www.googleadservices.com/pagead/conversion_async.js analytics.twitter.com/i/adsct googleads.g.doubleclick.net/* googleads.g.doubleclick.net/pagead/viewthroughconversion/984127776/ www.google.com/pagead/conversion_async.js tagmanager.google.com *.doubleclick.net go.flx1.co *.flx1.co flx1.co; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com platform.twitter.com ajax.googleapis.com *.googletagmanager.com *.google-analytics.com *.qualifio.com/* cdn.syndication.twimg.com *.ocs.fr *.ads-twitter.com connect.facebook.net google-analytics.com/* tagmanager.google.com; report-uri https://www.ocs.fr/report-uri/enforce 1
frame-ancestors 'self' http://www.zoekboekverslag.nl https://www.benikgeslaagd.com 1
default-src * blob:; font-src * data:; img-src * data: blob:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; worker-src * blob:; report-uri https://cspreports.azurewebsites.net/api/PostReport 1
frame-ancestors 'self' http://emprotest:8080 http://emprolive:8080 http://emprodev:8080 http://ecm-live:8080 http://ecm-test:8080 1
frame-ancestors *.seniorweb.nl desktop.eu2.quandago.app desktop.eu2.vanadaloha.net chatapi.eu2.vanadaloha.net seniorweb.crm4.dynamics.com seniorwebtest.crm4.dynamics.com *.axshare.com 1
default-src https: 'unsafe-eval' 'unsafe-inline' wss:; object-src 'self'; img-src https: 'self' data:; font-src https: 'self' data:; frame-ancestors 'self' freeloadbalancer.com kempsdn.com *.freeloadbalancer.com *.kempsdn.com *.kemp.ax 1
frame-ancestors https://admin.fieldfisher.com https://www.fieldfisher.com https://fieldfisher.com 1
default-src 'self' data: https:; script-src 'self' data: https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' blob: data: https: http://www.cpc.ncep.noaa.gov/; style-src 'self' data: https: http://nyskiblog.com/ http://fonts.googleapis.com/ http://morriscountyhandwash.com/ 'unsafe-inline'; font-src 'self' data: https:; frame-src 'self' https://www.youtube.com/ https: http://forum.nyskiblog.com/; object-src 'self' 1
default-src 'self'; base-uri 'self'; child-src 'self'; connect-src wss: *.wishpond.com; font-src 'self' data: https:; frame-ancestors 'self'; frame-src 'self' cdn.wishpond.net; img-src 'self' blob: data: https:; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: d30itml3t0pwpf.cloudfront.net cdn.wishpond.net ajax.googleapis.com; style-src 'self' 'unsafe-inline' https:; worker-src 'self' 1
default-src 'self' c.aayulogic.com.np *.googlesyndication.com mjcdn.aayulogic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.statcounter.com cdnjs.cloudflare.com mjcdn.aayulogic.com c.aayulogic.com.np www.googletagmanager.com cdn.ampproject.org *.googlesyndication.com securepubads.g.doubleclick.net s7.addthis.com securepubads.g.doubleclick.net z.moatads.com v1.addthisedge.com m.addthis.com graph.facebook.com api-public.addthis.com ajax.googleapis.com d31qbv1cthcecs.cloudfront.net v2.zopim.com secure.statcounter.com www.google-analytics.com static.zdassets.com dn.ravenjs.com connect.facebook.net platform.twitter.com apis.google.com www.google.com onesignal.com cdn.onesignal.com adservice.google.com.np www.googletagservices.com adservice.google.com www.gstatic.com maps.googleapis.com; connect-src 'self' wss: sentry.io c.statcounter.com mjcdn.aayulogic.com m.addthis.com www.google-analytics.com *.googlesyndication.com csi.gstatic.com securepubads.g.doubleclick.net ekr.zdassets.com c.aayulogic.com.np; img-src 'self' data: cdnjs.cloudflare.com mjcdn.aayulogic.com c.aayulogic.com.np googleads.g.doubleclick.net securepubads.g.doubleclick.net static.doubleclick.net *.googlesyndication.com v2.zopim.com www.google.com.np img.youtube.com certify.alexametrics.com www.google.com d5nxst8fruw4z.cloudfront.net maps.googleapis.com maps.gstatic.com www.google-analytics.com c.statcounter.com stats.g.doubleclick.net ssl.gstatic.com csi.gstatic.com www.facebook.com syndication.twitter.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com mjcdn.aayulogic.com c.aayulogic.com.np onesignal.com fonts.googleapis.com www.google.com ajax.googleapis.com; font-src 'self' data: mjcdn.aayulogic.com c.aayulogic.com.np fonts.gstatic.com; frame-src googleads.g.doubleclick.net s7.addthis.com *.googlesyndication.com ff.doubleclick.net onesignal.com www.youtube.com youtu.be accounts.google.com content.googleapis.com www.facebook.com web.facebook.com www.google.com staticxx.facebook.com platform.twitter.com; manifest-src 'self' mjcdn.aayulogic.com c.aayulogic.com.np 1
default-src 'self' st.xsm.us allbookstores.com; script-src 'self' *.gstatic.com *.google.com stats.allbookstores.com ajax.cloudflare.com static.cloudflareinsights.com 'unsafe-eval' 'unsafe-inline' st.xsm.us connect.facebook.net; form-action 'self'; style-src-elem 'self' 'unsafe-inline' st.xsm.us *.google.com; style-src 'unsafe-eval' 'unsafe-inline' st.xsm.us; img-src 'self' data: stats.allbookstores.com *.googleapis.com *.gstatic.com *.google.com images-eu.ssl-images-amazon.com ecx.images-amazon.com images-na.ssl-images-amazon.com imagesbn.com images.textbooks.com  www.textbooks.com m.media-amazon.com st.xsm.us img.huffingtonpost.com cdn.theatlantic.com www.thecollegefix.com collegeinfogeek.com s.w.org; frame-src 'self' *.google.com *.facebook.com; font-src 'self' st.xsm.us; connect-src 'self' 1
default-src 'self' *.addthis.com *.googletagmanager.com *.episerver.net *.msecnd.net *.youtube.com *.google-analytics.com *.google.com *.quantserve.com *.crazyegg.com *.doubleclick.net siteimproveanalytics.com *.siteimproveanalytics.com *.siteimproveanalytics.io *.moatads.com *.quantcount.com *.ytimg.com *.gstatic.com *.taleo.net *.lever.co *.addthisedge.com *.visualstudio.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.addthis.com *.googletagmanager.com *.episerver.net *.msecnd.net *.youtube.com *.google.com *.google-analytics.com *.quantserve.com *.crazyegg.com *.doubleclick.net siteimproveanalytics.com *.siteimproveanalytics.com *.siteimproveanalytics.io *.moatads.com *.quantcount.com *.ytimg.com *.gstatic.com *.taleo.net *.addthisedge.com *.visualstudio.com;style-src 'self' 'unsafe-inline' *;font-src 'self' data: *;img-src 'self' data: * 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.kaptcha.com https://*.securedvisit.com https://www.adelixir.com/v2track/ne.js https://*.rfksrv.com https://d26opx5dl8t69i.cloudfront.net https://d10lpsik1i8c69.cloudfront.net https://ssl.gstatic.com https://s.ytimg.com https://vvsclicks.marketwide.online https://s.pinimg.com https://bat.bing.com https://*.comm100.com https://*.google.com https://www.googletagmanager.com https://www.googletagmanager.com/gtm.js https://*.google-analytics.com https://www.google.XYX/ads/user-list https://tpc.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://*.shopperapproved.com https://connect.facebook.net https://*.facebook.com https://www.paypalobjects.com https://www.paypal.com https://www.sandbox.paypal.com https://seal.networksolutions.com https://www.youtube.com https://i.ytimg.com https://*.valleyvet.com https://www.chasepaymentechhostedpay-var.com https://www.chasepaymentechhostedpay.com https://7231874.collect.igodigital.com https://acsbap.com https://*.acsbapp.com https://acsbapp.com https://www.glancecdn.net https://s3.amazonaws.com/glancecdn/;img-src 'self' data: https://*.kaptcha.com https://*.securedvisit.com https://www.adelixir.com https://*.gstatic.com https://stats.g.doubleclick.net https://bat.bing.com https://*.rfksrv.com https://d26opx5dl8t69i.cloudfront.net https://d10lpsik1i8c69.cloudfront.net https://click.s7.exacttarget.com https://vvsclicks.marketwide.online https://c683207.ssl.cf2.rackcdn.com/20842-r.gif https://*.comm100.com https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com https://www.google.XYX/ads/user-list https://www.googleadservices.com https://pagead2.googlesyndication.com/pagead/ https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://*.shopperapproved.com https://connect.facebook.net https://*.facebook.com https://www.paypalobjects.com https://*.paypal.com https://www.sandbox.paypal.com https://seal.networksolutions.com https://www.youtube.com https://*.ytimg.com https://*.valleyvet.com https://www.chasepaymentechhostedpay-var.com https://www.chasepaymentechhostedpay.com https://nova.collect.igodigital.com https://serve.uberads.com/convert/11235/0 https://acsbap.com https://accessibe.com https://*.acsbapp.com https://acsbapp.com https://www.glancecdn.net https://s3.amazonaws.com/glancecdn/;connect-src 'self' https://*.valleyvet.com https://*.kaptcha.com https://*.comm100.com https://www.paypalobjects.com https://www.paypal.com https://www.sandbox.paypal.com https://*.google.com https://www.google-analytics.com/ https://bat.bing.com https://acsbap.com https://*.acsbap.com https://*.acsbapp.com https://acsbapp.com https://stats.g.doubleclick.net https://www.facebook.com/tr/ https://track.securedvisit.com https://www.chasepaymentechhostedpay.com wss://*.glance.net https://*.glance.netframe-src 'self' https://*.valleyvet.com https://*.kaptcha.com https://prod-east-alweb-mt.rfksrv.com https://bid.g.doubleclick.net/ https://googleads.g.doubleclick.net https://www.youtube.com https://*.google.com https://tpc.googlesyndication.com https://www.chasepaymentechhostedpay-var.com https://www.chasepaymentechhostedpay.com https://www.paypal.com https://www.paypalobjects.com/ https://www.sandbox.paypal.com https://www.googletagmanager.com/ns.html https://connect.facebook.net https://*.facebook.com https://vvsclicks.marketwide.online https://acsbap.com https://accessibe.com;frame-ancestors 'self' https://*.valleyvet.com https://bid.g.doubleclick.net/ https://www.youtube.com https://*.google.com https://www.chasepaymentechhostedpay-var.com https://www.chasepaymentechhostedpay.com https://www.paypal.com https://www.sandbox.paypal.com https://www.googletagmanager.com/ns.html;object-src https://*.valleyvet.com;report-uri /csp-error/report.html; 1
upgrade-insecure-requests; default-src 'self' *.youtube-nocookie.com *.ytimg.com; 1
frame-ancestors www.portsideout.se *.msse.se nowinteract.com *.folksam.se *.vardforbundet.se *.akademssr.se *.transport.se *.ifmetall.se *.sapienspaas.com 1
default-src 'self'; media-src 'self' blob: *.dna.ip-only.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.google-analytics.com *.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' dev.virtualearth.net *.highcharts.com *.google-analytics.com *.googletagmanager.com *.qbrick.com *.googleapis.com blob:;  img-src 'self' data: http://mt1.google.com *.google-analytics.com *.googletagmanager.com *.google.com *.openstreetmap.org *.virtualearth.net *.dna.ip-only.net; font-src 'self' fonts.gstatic.com;  frame-src 'self' *.vimeo.com *.youtube.com;  connect-src 'self' opencache.statkart.no *.google-analytics.com *.googletagmanager.com *.highcharts.com *.qbrick.com *.dna.ip-only.net wss://notification.qbrick.com/ i.ytimg.com; 1
script-src 'self'  http://s.ytimg.com/yts/jsbin/www-widgetapi-vflBy1d5C/www-widgetapi.js http://s.ytmig.com https://s.ytimg.com https://s.ytimg.com/yts/jsbin/www-widgetapi-vflBy1d5C/www-widget.js https://www.youtube.com/iframe_api http://www.youtube.com/iframe_api https://www.gstatic.com/ https://www.google.com/recaptcha/api.js http://www.google.com/recaptcha/api.js https://www.google-analytics.com http://www.google-analytics.com https://www.googletagmanager.com http://www.googletagmanager.com https://maps.googleapis.com http://maps.googleapis.com https://ssl.google-analytics.com http://ssl.google-analytics.com https://connect.facebook.net http://tagmanager.google.com https://assets.adobedtm.com http://assets.adobedtm.com http://jscdn.appier.net http://track.adform.net https://track.adform.net http://track.omguk.com https://va.ecitizen.gov.sg http://va.ecitizen.gov.sg https://*.wogaa.sg https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/ snap.licdn.com *.hotjar.com *.adsrvr.org 'unsafe-inline' 'unsafe-eval'; object-src 'self'; default-src 'self' *.hotjar.com *.adsrvr.org https://*.wogaa.sg https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/ http://wogadobeanalytics.sc.omtrdc.net/ *.appier.net *.doubleclick.net www.youtube.com *.google.com *.google.com.sg; img-src 'self' data: https://wogadobeanalytics.sc.omtrdc.net/ http://wogadobeanalytics.sc.omtrdc.net/ https://cm.everesttech.net/ https://dpm.demdex.net/ connect.facebook.net *.linkedin.com *.google-analytics.com *.appier.net *.doubleclick.net ssl.socdm.com *.facebook.com *.google.com.sg *.google.com http://va.ecitizen.gov.sg https://va.ecitizen.gov.sg i.ytimg.com *.onemap.sg; connect-src 'self' http://va.ecitizen.gov.sg https://va.ecitizen.gov.sg developers.onemap.sg https://*.wogaa.sg http://*.wogaa.sg https://dpm.demdex.net/ http://dpm.demdex.net/ *.google-analytics.com *.doubleclick.net *.appier.net; style-src 'self' 'unsafe-inline' https://assets.wogaa.sg/fonts/ https://va.ecitizen.gov.sg http://va.ecitizen.gov.sg; font-src 'self' data: https://assets.wogaa.sg/fonts/ https://va.ecitizen.gov.sg http://va.ecitizen.gov.sg *.amazonaws.com; 1
frame-ancestors *.scwmw.cn *.kids21.cn sc.wenming.cn 1
frame-src 'none'; 1
frame-ancestors https://www.findmyshift.com 1
frame-ancestors 'self' *.edumoov.com *.educartable.com; 1
frame-ancestors 'self' http://www.magnumicecream.com unilever3.marketing.adobe.com unileverbrazil.marketing.adobe.com unilever2.marketing.adobe.com unilever.marketing.adobe.com unilever3.experiencecloud.adobe.com unileverbrazil.experiencecloud.adobe.com unilever2.experiencecloud.adobe.com unilever.experiencecloud.adobe.com emea1-proxy.adobemc.com us1-proxy.adobemc.com us1-proxy.adobemc.com apac-proxy.adobemc.com adobedemoemea131.marketing.adobe.com adobedemoemea131.experiencecloud.adobe.com 1
default-src https: 'self' 'unsafe-inline' 'unsafe-eval' http: http://w.usabilla.com/* data: 'self' https://*.lantmateriet.se https://wds.callguide.telia.com http://*.readspeaker.com blob: http://translate.google.com/ https://unpkg.com; img-src 'self' https://*.lantmateriet.se https://*.lm.se/ https://epitst.lantm.intra.local https://*.usabilla.com https://*.cloudfront.net http://translate.google.com/ http://*.readspeaker.com https://js.arcgis.com/ https://recruit.visma.com https://matomo.lantmateriet.se https://*.episerver.net https://ssl.webserviceaward.com data: https://wds.ace.teliacompany.com https://www.gstatic.com https://www.google.com https://translate.googleapis.com; frame-src 'self' http://*.lm.se https://*.lantmateriet.se https://*.lantm.intra.local https://wds.ace.teliacompany.com/ https://*.youtube.com https://*.quickchannel.com https://www.google.com/recaptcha/; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mstdn.io; img-src 'self' https: data: blob: https://mstdn.io; style-src 'self' https://mstdn.io 'nonce-OQkJ9JNskGuIk6w+JUlXww=='; media-src 'self' https: data: https://mstdn.io; frame-src 'self' https:; manifest-src 'self' https://mstdn.io; connect-src 'self' data: blob: https://mstdn.io https://media.mstdn.io wss://mstdn.io; script-src 'self' https://mstdn.io; child-src 'self' blob: https://mstdn.io; worker-src 'self' blob: https://mstdn.io 1
frame-ancestors 'self' https://www.bharatpetroleum.com https://*.bpcl.in 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com cdn.jsdelivr.net *.google.com widget.trustpilot.com *.cloudflare.com *.gstatic.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.hotjar.com *.googleadservices.com *.googleoptimize.com googleads.g.doubleclick.net *.cloudfront.net js-agent.newrelic.com sibforms.com bam.eu01.nr-data.net userlike-cdn-widgets.s3-eu-west-1.amazonaws.com snap.licdn.com *.userlike.com *.linkedin.com www.googleadservices.com googleads.g.doubleclick.net *.sendinblue.com; img-src * data:; frame-src *; connect-src *; font-src * data:; 1
frame-ancestors 'self' www.kamababa.com kamababa.com www.kamamela.com kamamela.com kamababa2.com www.kamababa2.com; 1
default-src 'self' *.getshogun.com *.bronto.com *.bigcommerce.com https://dev.visualwebsiteoptimizer.com https://fonts.googleapis.com https://fonts.gstatic.com https://i.shgcdn.com *.cdninstagram.com https://www.googletagmanager.com https://www.google-analytics.com  *.facebook.net email.gildan.com *.klaviyo.com *.kmail-lists.com *.doubleclick.net *.ubembed.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.getshogun.com *.bronto.com *.bigcommerce.com https://dev.visualwebsiteoptimizer.com https://fonts.googleapis.com https://fonts.gstatic.com https://i.shgcdn.com *.cdninstagram.com https://www.googletagmanager.com https://www.google-analytics.com *.facebook.net email.gildan.com *.klaviyo.com *.kmail-lists.com *.ubembed.com; style-src 'self' 'unsafe-inline' *.getshogun.com *.bronto.com *.bigcommerce.com https://dev.visualwebsiteoptimizer.com https://fonts.googleapis.com https://fonts.gstatic.com https://i.shgcdn.com *.cdninstagram.com https://www.googletagmanager.com *.klaviyo.com *.kmail-lists.com *.ubembed.com;img-src 'self' *.getshogun.com *.bronto.com *.bigcommerce.com https://dev.visualwebsiteoptimizer.com https://fonts.googleapis.com https://fonts.gstatic.com https://i.shgcdn.com *.cdninstagram.com https://www.googletagmanager.com https://www.google-analytics.com  *.facebook.net *.facebook.com https://stats.g.doubleclick.net email.gildan.com *.klaviyo.com *.kmail-lists.com data: *.ubembed.com 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://octodon.social; img-src 'self' https: data: blob: https://octodon.social; style-src 'self' https://octodon.social 'nonce-zvn/Q5EaQ/wU/MgZbGMSOA=='; media-src 'self' https: data: https://octodon.social; frame-src 'self' https:; manifest-src 'self' https://octodon.social; connect-src 'self' data: blob: https://octodon.social https://assets.octodon.social wss://octodon.social; script-src 'self' https://octodon.social; child-src 'self' blob: https://octodon.social; worker-src 'self' blob: https://octodon.social 1
default-src 'self'; connect-src *; img-src 'self' data: 1
script-src 'self' 'unsafe-eval' https://*.flixcart.com https://*.flixcart.net https://flipkart.d1.sc.omtrdc.net https://dpm.demdex.net https://sslwidget.criteo.com https://widget.as.criteo.com https://tnc.phonepe.com 'nonce-15750569639619224222'; style-src 'self' 'unsafe-inline' https://*.flixcart.com https://tnc.phonepe.com https://*.flixcart.net; img-src 'self' data: blob: https://*.flixcart.com https://*.flixcart.net https://images.ixigo.com https://flipkart.d1.sc.omtrdc.net https://www.facebook.com https://*.fkapi.net https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.in https://www.googleadservices.com https://sp.analytics.yahoo.com https://bat.bing.com https://bat.r.msn.com https://pay.payzippy.com https://1.pay.payzippy.com https://tnc.phonepe.com; font-src 'self' data: https://*.flixcart.com https://tnc.phonepe.com https://*.flixcart.net; frame-src 'self' https://*.flipkart.com http://*.flipkart.com https://*.youtube.com https://youtube.com https://*.vimeo.com https://dis.as.criteo.com https://gum.criteo.com https://pay.payzippy.com https://1.pay.payzippy.com https://tnc.phonepe.com https://cdemux.appspot.com 'nonce-15750569639619224222'; worker-src 'self' https://*.flipkart.com blob:; child-src 'self' https://*.flipkart.com 'nonce-15750569639619224222'; connect-src 'self' *; object-src 'none'; base-uri 'self'; report-uri https://sentry.flipkart.com/api/2/security/?sentry_key=b2fe488e344a47eda53b8d306edec9b7&sentry_release=3.71.0 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.anyline.com https://cdn.chatvisor.com/cdn/js/P09Qmb0Nox.js https://dev.visualwebsiteoptimizer.com https://verbundblog.disqus.com https://connect.facebook.net https://*.google.com https://*.googleapis.com https://s.ytimg.com https://www.google-analytics.com https://www.googletagmanager.com https://www.youtube.com https://platform.linkedin.com https://code.jquery.com https://platform.twitter.com https://c.disquscdn.com https://disqus.com https://*.disqus.com https://apps.verbund.at https://emea3.recruitmentplatform.com https://code.createjs.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.a1.net https://vjs.zencdn.net; font-src 'self' https://netdna.bootstrapcdn.com https://fonts.gstatic.com data:; frame-src 'self' https://cdn.chatvisor.com/ https://optimize.google.com https://*.disqus.com https://disqus.com https://www.facebook.com https://connect.facebook.net https://www.googletagmanager.com https://www.youtube.com https://staticxx.facebook.com https://*.doubleclick.net https://*.twitter.com https://accounts.google.com https://irs.tools.investis.com https://apps.verbund.at https://consentcdn.cookiebot.com; default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://www.google-analytics.com https://www.google.com https://www.google.at https://www.google.de https://*.gstatic.com https://stats.g.doubleclick.net https://*.googleapis.com https://dev.visualwebsiteoptimizer.com https://*.twitter.com https://www.foto-webcam.eu https://*.it-wms.com data: https://i.ytimg.com https://www.facebook.com https://c.disquscdn.com https://referrer.disqus.com https://maps.google.com https://cx.atdmt.com https://*.a1.net https://www.verbund.com; connect-src 'self' https://js.anyline.com https://anyline-reporting.herokuapp.com wss://app.chatvisor.com https://app.chatvisor.com https://*.doubleclick.net https://www.google-analytics.com https://www.googleapis.com https://links.services.disqus.com https://dev.visualwebsiteoptimizer.com https://emea3.recruitmentplatform.com https://*.a1.net; style-src 'self' 'unsafe-inline' https://optimize.google.com https://c.disquscdn.com https://fonts.googleapis.com https://tagmanager.google.com https://*.a1.net; worker-src blob: https://www.verbund.com https://*.verbund.com; media-src blob: https://*.a1.net 1
base-uri 'self' maps.google.com; 1
frame-ancestors 'self' https://auth.animax.co.jp 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://connect.facebook.net/en_US/fbevents.js http://connect.facebook.net/ http://tagmanager.google.com/ http://tagmanager.google.com/debug https: https://tagmanager.google.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: https://www.snowboard-banff.net https://pixel.morphio.info; font-src 'self' data: https:; connect-src 'self' https://*.fixer.io/ https://s.adroll.com https://tagmanager.google.com/debug https://maps.googleapis.com https://developer.livehelpnow.net wss://app.livehelpnow.net https://api.fixer.io https://brain.morphio.info https://graylog.hotjar.com:12443 wss://ws4.hotjar.com https://insights.hotjar.com https://www.reseze.net; media-src 'self' https:; object-src 'self'; frame-src 'self' https: http://skiron.intermaps.com; form-action 'self' https://www.pages03.net/sunshinevillage/NewsletterSignup/Newsletter_Signup https://www.reseze.net https://www.facebook.com/tr/; 1
base-uri 'self'; default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; 1
frame-ancestors 'self' http://webvisor.com; 1
default-src 'none' ;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.zortrax.com *.data.zortrax.com *.3dprint.zortrax.com *.wistia.net *.wistia.com googletagmanager.com *.googletagmanager.com  *.tagmanager.google.com *.google-analytics.com *.doubleclick.net *.google.com  *.googleadservices.com *.facebook.net *.cloudfront.net *.doubleclick.net *.livechatinc.com *.googleapis.com *.gstatic.com *.upviral.com *.redditstatic.com  static.ads-twitter.com analytics.twitter.com app.humdash.com analytics.zortrax.com cf.zortrax.com  ;style-src 'self' 'unsafe-inline' *.disquscdn.com *.zortrax.com *.googleapis.com *.tagmanager.google.com https://tagmanager.google.com/debug/css.css *.fonts.googleapis.com cf.zortrax.com ;img-src 'self' 'unsafe-inline' data: *.zortrax.com *.wistia.net data.zortrax.com *.gravatar.com *.ggpht.com *.ssl.gstatic.com *.wistia.com *.google.com *.google-analytics.com *.google.pl *.doubleclick.net *.facebook.com *.livechatinc.com *.gstatic.com *.googleapis.com *.tagmanager.google.com https://alb.reddit.com   t.co/i/adsct app.humdash.com cf.zortrax.com  ;font-src 'self' data: *.livechatinc.com *.googleusercontent.com *.googleusercontent.com *.googleapis.com *.gstatic.com *.zortrax.com *.fonts.googleapis.com *.tagmanager.google.com ;frame-src 'self' 'unsafe-inline' *.livechatinc.com *.wistia.net *.wistia.com *.youtube.com *.facebook.com *.tagmanager.google.com *.googletagmanager.google.com *.upviral.com ;connect-src 'self' data.zortrax.com http://3dprint.zortrax.com *.wistia.com *.litix.io 3dprint.zortrax.com 3dprinting.local *.luckyorange.net ws://localhost:3000 *.google-analytics.com *.tagmanager.google.com app.humdash.com  ;media-src 'self' *.zortrax.com zortrax.com *.youtube.com *.livechatinc.com *.youtube-nocookie.com *.wistia.com cdn.zortrax.com cdn1.zortrax.com cdn2.zortrax.com cdn3.zortrax.com *.tagmanager.google.com cf.zortrax.com ;object-src 'self' *.youtube.com *.youtube-nocookie.com *.tagmanager.google.com ;child-src 'self' *.youtube.com *.youtube-nocookie.com *.tagmanager.google.com 1
default-src  'self'  https://*.myligue.fr     https://*.lfp.fr     https://*.ligue1.fr     https://*.ligue2.fr  https://*.googlesyndication.com/  https://www.tntv.pf     https://opt-out.ferank.eu;  media-src *  'self'     https://ooyalaeuwest.streaming.mediaservices.windows.net  blob:  https://www.tntv.pf     https://www.youtube.com     https://www.dailymotion.com;  font-src  'self'  data:  https://use.fontawesome.com  https://fonts.gstatic.com  https://player.ooyala.com  ;  script-src  'self'  'unsafe-inline'  'unsafe-eval'  https://az416426.vo.msecnd.net  https://acdn.adnxs.com  https://cdn.ampproject.org  https://cdn.syndication.twimg.com  https://ssl.google-analytics.com  https://player.ooyala.com  https://www.googletagmanager.com  https://www.google.com  https://www.gstatic.com  https://www.google-analytics.com     http://www.google-analytics.com  https://www.googletagservices.com  https://adservice.google.fr  https://adservice.google.com  https://*.googlesyndication.com  https://securepubads.g.doubleclick.net  https://connect.facebook.net  https://platform.twitter.com  https://analytics.ooyala.com  https://imasdk.googleapis.com  http://imasdk.googleapis.com  https://s0.2mdn.net     https://www.youtube.com     https://www.dailymotion.com     https://opt-out.ferank.eu     http://opt-out.ferank.eu     https://story.tl     https://widget.ausha.co     https://taghcountdown.909c.fr  http://player.ooyala.com  http://players.brightcove.net     https://players.brightcove.net  https://vjs.zencdn.net  https://analytics.ooyala.com/     https://www.instagram.com     http://*.opta.net     https://*.opta.net;  style-src  'self'  'unsafe-inline'  https://cdnjs.cloudflare.com  https://use.fontawesome.com  https://fonts.googleapis.com  https://player.ooyala.com/     https://platform.twitter.com     https://www.youtube.com     https://www.dailymotion.com     https://opt-out.ferank.eu     http://opt-out.ferank.eu     http://players.brightcove.net     https://players.brightcove.net     https://story.tl     https://widget.ausha.co     https://taghcountdown.909c.fr     https://www.instagram.com     http://*.opta.net     https://*.opta.net;  child-src  'self'  blob:     https://*.myligue.fr  https://www.google.com/  https://*.googlesyndication.com  https://player.ooyala.com/  https://platform.twitter.com/  https://staticxx.facebook.com/  https://syndication.twitter.com/  https://widgets.lfp.stats.com  https://l.ooyala.com/  https://imasdk.googleapis.com/     https://www.youtube.com     https://www.dailymotion.com     https://cartemercatoligue1.com     https://11type.lfp.fr     https://story.tl     https://widget.ausha.co     https://taghcountdown.909c.fr     https://snapshots.playingsurface.net  http://player.ooyala.com     http://players.brightcove.net     http://players.brightcove.net  http://l.ooyala.com     https://twitter.com     https://www.facebook.com     https://m.facebook.com     https://www.instagram.com     https://imasdk.googleapis.com  http://imasdk.googleapis.com     https://www.google-analytics.com     http://www.google-analytics.com     https://www.sporcle.com     ;  img-src  'self'     data:  https://www.google.com   https://ib.adnxs.com  https://*.doubleclick.net  https://lspprdglcdn.azureedge.net https://*.googlesyndication.com  https://lspcridevglcdn.azureedge.net  https://lspemeintglcdn.azureedge.net  https://lspsapuatglcdn.azureedge.net  https://lsprubpreglcdn.azureedge.net  https://lspisphereglcdn.azureedge.net  https://ssl.google-analytics.com  https://stats.g.doubleclick.net  https://lfpimageproxy.azureedge.net  https://secure-cf-c.ooyala.com  https://player.ooyala.com     https://www.blogduparieur.com     https://publish.lfpstg.ooflex.net      https://syndication.twitter.com/     https://abs.twimg.com     https://platform.twitter.com     https://pbs.twimg.com     https://www.youtube.com     https://www.dailymotion.com     https://www.google-analytics.com     http://www.google-analytics.com     https://story.tl     https://widget.ausha.co     https://taghcountdown.909c.fr  https://metrics.brightcove.com     http://metrics.brightcove.com  https://cf-images.us-east-1.prod.boltdns.net     https://www.instagram.com     https://cf-images.eu-west-1.prod.boltdns.net     http://cf-images.eu-west-1.prod.boltdns.net     https://tarteaucitron.io     http://*.opta.net     https://*.opta.net;  connect-src  'self'  https://*.doubleclick.net     https://www.google-analytics.com  https://dc.services.visualstudio.com  https://metrics-api.librato.com  https://player.ooyala.com  https://licensing.bitmovin.com  https://*.mediaservices.windows.net     https://csi.gstatic.com  https://edge.api.brightcove.com  http://edge.api.brightcove.com  http://player.ooyala.com  http://manifest.prod.boltdns.net  http://house-fastly-signed-us-east-1-prod.brightcovecdn.com     https://house-fastly-signed-us-east-1-prod.brightcovecdn.com     https://house-fastly-signed-eu-west-1-prod.brightcovecdn.com     http://house-fastly-signed-eu-west-1-prod.brightcovecdn.com     https://bcbolt446c5271-a.akamaihd.net     https://*.googlesyndication.com     ;  frame-ancestors  'self'  ; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' www.followupthen.com www.datadoghq-browser-agent.com js.stripe.com s.adroll.com static.ads.twitter.com www.google-analytics.com www.google.com fonts.googleapis.com www.googleadservices.com js.intercomcdn.com bid.g.doubleclick.net googleads.g.doubleclick.net static.ads-twitter.com ajax.googleapis.com d.adroll.mgr.consensu.org analytics.twitter.com fonts.google.apis.com connect.facebook.net checkout.stripe.com widget.intercom.io www.googletagmanager.com localhost a.adroll.com cdn.jsdelivr.net code.jquery.com cdnjs.cloudflare.com cdn.rawgit.com *.bootstrapcdn.com fut-cdn.s3.amazonaws.com; connect-src 'self' checkout.stripe.com api-iam.intercom.io browser-http-intake.logs.datadoghq.com wss://nexus-websocket-a.intercom.io; img-src * data:; font-src * data:; 1
connect-src * 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.segment.io https://cdn.segment.com https://d13he6skx5qn9f.cloudfront.net https://sessions.bugsnag.com http://d2wy8f7a9ursnm.cloudfront.net https://notify.bugsnag.com https://app.pendo.io https://cdn.pendo.io https://pendo-io-static.storage.googleapis.com https://pendo-static-6189065625403392.storage.googleapis.com https://bam.nr-data.net https://js-agent.newrelic.com https://tinymce.cachefly.net https://maxcdn.bootstrapcdn.com https://oss.maxcdn.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://d2zz4thflisoea.cloudfront.net https://dnu7uhq6qumrf.cloudfront.net https://*.namely.com https://s3.amazonaws.com https://sbs-assets.namely.com https://player.vimeo.com; font-src 'self' data: https://f.namely.com https://maxcdn.bootstrapcdn.com https://dzmqh46i6l1ir.cloudfront.net; img-src 'self' data: https://app.pendo.io https://pendo-static-6189065625403392.storage.googleapis.com https://d2zz4thflisoea.cloudfront.net https://dnu7uhq6qumrf.cloudfront.net; report-uri /CSP_Report.aspx; 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://edge.fullstory.com https://*.hotjar.com https://maps.googleapis.com https://ssl.google-analytics.com https://tagmanager.google.com https://www.dwin1.com https://googleads.g.doubleclick.net https://fullstory.com https://cdn.syndication.twimg.com https://connect.facebook.net https://platform.twitter.com https://www.googleadservices.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://*.adform.net https://panel.hostalia.com https://cse.google.com; connect-src 'self' https://cdn.cookielaw.org https://stats.g.doubleclick.net https://in.hotjar.com https://www.facebook.com/tr https://www.google-analytics.com https://rs.fullstory.com; img-src 'self' data: https://cdn.cookielaw.org *.hostalia.com https://stats.sec.telefonica.com https://img.youtube.com *.googleapis.com/ *.ggpht.com/ https://maps.gstatic.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://svr6602.entelgystats.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.es https://ton.twimg.com https://syndication.twitter.com https://cdn.syndication.twimg.com https://abs.twimg.com https://pbs.twimg.com https://platform.twitter.com https://ajax.googleapis.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://static.hostalia.com https://tagmanager.google.com https://ton.twimg.com https://platform.twitter.com https://fonts.googleapis.com https://www.google.com https://ajax.googleapis.com; font-src 'self' https://static.hostalia.com https://tagmanager.google.com https://fonts.gstatic.com data: https://static.acens.com; manifest-src 'self'; frame-src 'self' https://vars.hotjar.com https://bid.g.doubleclick.net https://staticxx.facebook.com https://www.facebook.com https://track.adform.net https://syndication.twitter.com https://platform.twitter.com https://www.google.com https://www.youtube.com 1
default-src https:; style-src https: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval' 'report-sample'; img-src https: data:; form-action https:; connect-src https: wss:; upgrade-insecure-requests; report-uri https://api.billiger-mietwagen.de/v1/csp-report 1
frame-ancestors 'self' http://webvisor.com ; 1
default-src 'self' wss://*.hotjar.com *.learningtree.com *.learningtree.ca *.learningtree.co.uk *.learningtree.se js.calltrk.com *.hotjar.com www.facebook.com prezi.com www.youtube.com *.reembed.com privacyportal.onetrust.com www.google-analytics.com www.google.com www.google.se api.opmnstr.com youtu.be api.omappapi.com stats.g.doubleclick.net app.five9.com;  font-src 'self' fonts.googleapis.com fonts.gstatic.com cdn.reembed.com;    frame-ancestors 'none';    img-src 'self' data: ltre-web.azureedge.net www.googletagmanager.com www.facebook.com www.google-analytics.com stats.g.doubleclick.net www.google.com ltre-web-img.azureedge.net img.youtube.com i.ytimg.com cdn.cookielaw.org bat.bing.com app.five9.com;   script-src 'self' 'unsafe-inline' 'unsafe-eval' *.calltrk.com *.hotjar.com *.incontact.com s.reembed.com www.googletagmanager.com www.google-analytics.com connect.facebook.net s.ytimg.com *.reembed.com cdn.cookielaw.org www.googleadservices.com googleads.g.doubleclick.net ajax.googleapis.com bat.bing.com sjs.bizographics.com a.optnmstr.com optimize.google.com tagmanager.google.com a.opmnstr.com px.ads.linkedin.com optanon.blob.core.windows.net www.youtube.com *.omappapi.com snap.licdn.com stats.g.doubleclick.net s3-us-west-2.amazonaws.com app.five9.com;   style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.reembed.com cdn.cookielaw.org  optanon.blob.core.windows.net app.five9.com;  frame-src 'self' prezi.com www.youtube.com tbs.tradedoubler.com app.five9.com www.google.com; 1
default-src https: http://archives.york.ca/ 'unsafe-eval' 'unsafe-inline'; object-src 'self' ; img-src * 'self' data: m.addthisedge.com ;style-src 'self' 'unsafe-eval' 'unsafe-inline' *; frame-src: 'self' * http://archives.york.ca ; 1
default-src none; connect-src 'self' https: data:; child-src 'self' https: blob:; font-src 'self' data: https:; frame-ancestors 'self' https://admin.big4.com.au/; frame-src 'self' https:; form-action 'self' https:; img-src 'self' data: https: blob: www.googletagmanager.com; prefetch-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-eval' 'unsafe-inline' https:; 1
child-src *.covercraft.net *.coverking.com *.custhelp.com *.diffwizard.com *.facebook.com *.google.com *.oraclecloud.com *.powersportsplace.com *.saddleman.com *.twitter.com *.sandbox.paypal.com *.paypal.com *.paypalobjects.com;                                                   connect-src 'self' *.accmats.com *.bronto.com *.certcapture.com ctiapi.com *.doubleclick.net *.facebook.com *.google-analytics.com *.rollbar.com *.twitter.com *.paypal.com *.paypalobjects.com *.smartystreets.com *.riskified.com;                                                   font-src 'self' data: *.accmats.com *.certcapture.com *.gstatic.com *.paypalobjects.com;               frame-src *.cardinalcommerce.com *.covercraft.net *.coverking.com *.custhelp.com *.diffwizard.com *.doubleclick.net *.dxengineering.com *.facebook.com *.facebook.net funcaptcha.com *.google.com *.googleadservices.com *.oraclecloud.com *.powersportsplace.com *.saddleman.com *.twitter.com *.sandbox.paypal.com *.paypal.com *.paypalobjects.com *.riskified.com;                                                   img-src 'self' data: *.accmats.com *.amazonaws.com *.atechmotorsports.com *.bazaarvoice.com *.bbb.org *.bing.com *.caltrend.com *.certcapture.com *.cloudfront.net *.coremetrics.com ctiapi.com *.custhelp.com *.doubleclick.net *.dxengineering.com dxengineering.com *.facebook.com *.genuinehotrod.com *.google-analytics.com *.google.com *.googleads.g.doubleclick.net *.gstatic.com jwpltx.com *.micpn.com *.narvar.com *.oraclecloud.com *.paypal.com *.paypalobjects.com *.pinterest.com *.powersportsplace.com *.rnengage.com *.summitracing.com *.trickflow.com *.twitter.com *.youtube.com *.riskified.com;                                                   script-src 'self' 'unsafe-inline' 'unsafe-eval' *.accmats.com *.adtag.where.com *.bing.com *.bronto.com *.caltrend.com *.certcapture.com *.certona.net *.channeladvisor.com *.cloudflare.com *.cloudfront.net *.coremetrics.com ctiapi.com *.custhelp.com *.facebook.net funcaptcha.com *.funcaptcha.com *.google.com *.googleadservices.com *.googleapis.com *.google-analytics.com googleads.g.doubleclick.net *.gstatic.com *.googletagmanager.com *.iesnare.com *.jquery.com *.jwpcdn.com *.livelook.com *.micpn.com *.oraclecloud.com *.paypal.com *.paypalobjects.com *.pinterest.com *.res-x.com *.rightnowtech.com *.rnengage.com *.rollbar.com *.smartystreets.com  *.summit.network *.twitter.com *.riskified.com *.vantivprelive.com *.vantivcnp.com;                                                   style-src 'self' 'unsafe-inline' *.accmats.com *.certcapture.com ctiapi.com *.custhelp.com *.caltrend.com *.googleapis.com *.oraclecloud.com; 1
default-src https: data: 'self' 'unsafe-inline' 'unsafe-eval' http://cdnjs.cloudflare.com/ http://t.co/ http://www.googletagmanager.com http://www.google-analytics.com http://www.googleadservices.com 1
frame-ancestors 'self' https://www.nowanimes.com/ https://nowanimes.com/ http://trueliketop.org/ https://tecnoatual.com/ https://www.legiaotec.club/ https://tectecno.com/; 1
frame-ancestors 'self' http://www.grajteraz.pl 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: wss://*.hotjar.com wss://*.inbenta.chat:* wss://*.inbenta.io:* wss://*.inbenta.com:* http://*.hotjar.com:* http://*.hotjar.io http://*.googletagmanager.com http://*.google-analytics.com http://*.google.com http://*.google.com.mx http://*.gstatic.com http://*.googleapis.com http://*.youtube.com http://youtu.be http://*.facebook.com http://*.facebook.net http://*.ads-twitter.com http://*.twitter.com http://t.co http://*.doubleclick.net http://*.adform.net http://*.inbenta.chat:* http://*.inbenta.io:* http://*.inbenta.com:* http://*.go-mpulse.net http://*.akstat.io http://*.akamaihd.net http://cdn-akamai.mookie1.com http://*.userway.org http://claro.speedtestcustom.com http://*.clarovideo.net http://*.claromusica.com https://*.hotjar.com:* https://*.hotjar.io https://tags.tiqcdn.com/* https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.google.com.mx https://*.gstatic.com https://*.googleapis.com https://*.youtube.com https://youtu.be https://*.facebook.com https://*.facebook.net https://*.ads-twitter.com https://*.twitter.com https://t.co https://*.doubleclick.net https://*.adform.net https://*.inbenta.chat:* https://*.inbenta.io:* https://*.inbenta.com:* https://*.go-mpulse.net https://*.akstat.io https://*.akamaihd.net https://cdn-akamai.mookie1.com https://*.userway.org https://claro.speedtestcustom.com https://*.clarovideo.net https://*.claromusica.com; media-src mediastream:; 1
script-src 'self' 'unsafe-inline' 'nonce-df01b023c58223e06dd33b6b795ff527' www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; object-src 'none'; base-uri 'none' 1
default-src 'self' *.firebaseapp.com *.cloudflare.com *.coinhako.com *.google-analytics.com *.googleapis.com www.facebook.com *.firebaseio.com *.google.com *.lon.netverify.com lon.netverify.com uptime.com *.zendesk.com *.newrelic.com *.zdassets.com *.nr-data.net *.g.doubleclick.net *.gstatic.com *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: ws: ;img-src *; 1
frame-ancestors 'self' https://uat.m.sgcarmart.com/ https://m.sgcarmart.com/ 1
frame-ancestors 'self' http://www.hellmanns.com unilever3.marketing.adobe.com unileverbrazil.marketing.adobe.com unilever2.marketing.adobe.com unilever.marketing.adobe.com unilever3.experiencecloud.adobe.com unileverbrazil.experiencecloud.adobe.com unilever2.experiencecloud.adobe.com unilever.experiencecloud.adobe.com emea1-proxy.adobemc.com us1-proxy.adobemc.com us1-proxy.adobemc.com apac-proxy.adobemc.com adobedemoemea131.marketing.adobe.com adobedemoemea131.experiencecloud.adobe.com 1
default-src 'self' data:; img-src 'self' data: www.google.co.uk www.gstatic.com ssl.gstatic.com t.co www.google.com www.google.ie www.facebook.com t.paypal.com assets.braintreegateway.com *.cloudfront.net stats.g.doubleclick.net  maps.gstatic.com  maps.googleapis.com *.s3-eu-west-2.amazonaws.com s3.eu-west-2.amazonaws.com 'self' csi.gstatic.com  www.google-analytics.com; script-src 'unsafe-eval' 'self' www.googletagmanager.com tagmanager.google.com analytics.twitter.com connect.facebook.net static.ads-twitter.com secure.adnxs.com songbirdstag.cardinalcommerce.com www.paypal.com www.paypalobjects.com www.googletagmanager.com/gtm.js 'unsafe-inline' platform.twitter.com/widgets.js  www.google-analytics.com www.gstatic.com maps.googleapis.com maps.gstatic.com; object-src 'self'; style-src 'unsafe-inline' fonts.googleapis.com tagmanager.google.com *.braintreegateway.com fonts.googleapis.com/css 'self'; media-src 'self' greggs-prod-cms.s3.eu-west-2.amazonaws.com s3.eu-west-2.amazonaws.com; frame-src 1697160.fls.doubleclick.net *.paypal.com geostag.cardinalcommerce.com assets.braintreegateway.com www.youtube.com syndication.twitter.com  platform.twitter.com 'self'; font-src fonts.googleapis.com/css fonts.googleapis.com fonts.gstatic.com 'self' data:; connect-src *.greggs.co.uk *.braintree-api.com *.braintreegateway.com www.paypal.com centinelapistag.cardinalcommerce.com writer.cardinalcommerce.com kg668dbov0.execute-api.us-east-1.amazonaws.com www.facebook.com 'self' 1
default-src 'self' 'unsafe-inline' https://piwik.bzga.de/ https://service.bzga.de/ https://www.etracker.de/ https://static.etracker.com/ https://code.etracker.com/; img-src 'self' data: https://piwik.bzga.de https://service.bzga.de https://www.etracker.de https://static.etracker.com https://code.etracker.com; script-src 'self' 'unsafe-inline' https://piwik.bzga.de https://service.bzga.de https://www.etracker.de https://static.etracker.com https://code.etracker.com 1
default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' *; img-src 'self' 'unsafe-inline' * data:; media-src 'self' 'unsafe-inline' blob: data: gap:; frame-src 'self' 'unsafe-inline' *; frame-ancestors 'self' 'unsafe-inline' *; child-src 'self' 'unsafe-inline' *; font-src 'self' 'unsafe-inline'  blob: data: gap:; connect-src 'self' 'unsafe-inline' *; report-uri /report-csp-violation 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' data:  *.akamaihd.net cdnjs.cloudflare.com *.chromogenix.com code.jquery.com maps.googleapis.com *.jquery.com *.bootstrapcdn.com *.googleapis.com *.typekit.com *.gstatic.com *.typekit.net *.werfen.com *.icims.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.mapbox.com *.openstreetmap.org *.brightcove.net *.brightcove.com *.zencdn.net *.google.com *.google.es *.boltdns.net cdn.datatables.net momentjs.com *.allibo.com; style-src 'self' 'unsafe-inline' data:  cdn.datatables.net *.akamaihd.net *.chromogenix.com code.jquery.com *.bootstrapcdn.com *.googleapis.com *.typekit.com *.gstatic.com *.typekit.net *.werfen.com *.icims.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.mapbox.com *.openstreetmap.org *.brightcove.net *.brightcove.com *.zencdn.net *.google.com *.google.es *.boltdns.net; img-src 'self' 'unsafe-inline' blob: data:  cdn.datatables.net *.akamaihd.net *.chromogenix.com *.bootstrapcdn.com *.googleapis.com *.typekit.com *.gstatic.com *.typekit.net *.werfen.com *.icims.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.mapbox.com *.openstreetmap.org *.brightcove.net *.brightcove.com *.zencdn.net *.google.com *.google.es *.boltdns.net *.allibo.com; font-src 'self' 'unsafe-inline' data:  *.akamaihd.net *.chromogenix.com *.bootstrapcdn.com *.typekit.com *.googleapis.com *.gstatic.com *.typekit.net *.werfen.com *.icims.com *.googletagmanager.com *.doubleclick.net *.mapbox.com *.openstreetmap.org *.brightcove.net *.brightcove.com *.zencdn.net *.google.com *.google.es *.boltdns.net; object-src 'self' 'unsafe-inline' data:  *.akamaihd.net *.chromogenix.com *.bootstrapcdn.com *.googleapis.com *.typekit.com *.gstatic.com *.typekit.net *.werfen.com *.icims.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.mapbox.com *.openstreetmap.org *.brightcove.net *.brightcove.com *.zencdn.net *.google.com *.google.es *.boltdns.net; default-src 'self' 'unsafe-inline' data:  *.akamaihd.net *.chromogenix.com *.bootstrapcdn.com *.googleapis.com *.typekit.com *.gstatic.com *.typekit.net *.werfen.com *.icims.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.mapbox.com *.openstreetmap.org *.brightcove.net *.brightcove.com *.zencdn.net *.google.com *.google.es *.boltdns.net; connect-src 'self' 'unsafe-inline' data:  *.akamaihd.net *.chromogenix.com *.bootstrapcdn.com *.googleapis.com *.typekit.com *.gstatic.com *.typekit.net *.werfen.com *.icims.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.mapbox.com *.openstreetmap.org *.brightcove.net *.brightcove.com *.zencdn.net *.google.com *.google.es *.boltdns.net; child-src 'self' 'unsafe-inline' blob: data:  *.akamaihd.net *.chromogenix.com *.bootstrapcdn.com *.googleapis.com *.typekit.com *.gstatic.com *.typekit.net *.werfen.com *.icims.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.mapbox.com *.openstreetmap.org *.brightcove.net *.brightcove.com *.zencdn.net *.google.com *.google.es *.boltdns.net; form-action 'self' 'unsafe-inline' data:  *.akamaihd.net *.chromogenix.com *.bootstrapcdn.com *.googleapis.com *.typekit.com *.gstatic.com *.typekit.net *.werfen.com *.icims.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.mapbox.com *.openstreetmap.org *.brightcove.net *.brightcove.com *.zencdn.net *.google.com *.google.es *.boltdns.net; plugin-types application/pdf; media-src 'self' 'unsafe-inline' blob: data:  *.akamaihd.net *.chromogenix.com *.bootstrapcdn.com *.googleapis.com *.typekit.com *.gstatic.com *.typekit.net *.werfen.com *.icims.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.mapbox.com *.openstreetmap.org *.brightcove.net *.brightcove.com *.zencdn.net *.google.com *.google.es *.boltdns.net; 1
default-src https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com gcontent.robertsonmarketing.com https:; connect-src 'self' www.google-analytics.com stats.g.doubleclick.net; img-src 'self' data: optimize.google.com recommendationengine.googleapis.com www.googletagmanager.com storage.googleapis.com www.google-analytics.com rmcontent.avetti.ca ssl.google-analytics.com *.doubleclick.net www.google.com www.google.ca gcontent.robertsonmarketing.com csi.gstatic.com www.gstatic.com; style-src  'unsafe-inline' 'unsafe-eval' gcontent.robertsonmarketing.com https:; 1
default-src *; media-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; frame-src 'self' 'unsafe-inline' *; img-src 'self' 'unsafe-inline' * data:; style-src 'self' 'unsafe-inline' *; connect-src 'self' *; font-src 'self' 'unsafe-inline' *; 1
frame-ancestors https://*.optimizely.com; upgrade-insecure-requests; default-src data: https: 'unsafe-inline' 'unsafe-eval' 1
font-src 'self' www.alertlogic.com *.youtube.com *.fontawesome.com  *.intercomcdn.com *.google.com fonts.gstatic.com data: 'unsafe-inline' 'unsafe-eval' data:; 1
script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://tagmanager.google.com; child-src 'none'; font-src 'self' data: https://fonts.gstatic.com; object-src 'none'; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com; media-src 'none'; style-src 'self' 'unsafe-inline' data: https://tagmanager.google.com https://fonts.googleapis.com; connect-src 'self' https://www.google-analytics.com; 1
default-src 'self'; script-src 'self' 'unsafe-eval' about:  'nonce-1997222295' 'nonce-206974825' 'nonce-1270841496' https://omahaproxy.appspot.com https://*.google.com https://*.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.googlesyndication.com https://www.googletagmanager.com https://www.googletagservices.com https://adservice.google.com https://adservice.google.com.au https://adservice.google.com.af https://adservice.google.com.br https://adservice.google.com.eg https://adservice.google.com.hk https://adservice.google.com.kh https://adservice.google.com.kw https://adservice.google.com.mx https://adservice.google.com.my https://adservice.google.com.pe https://adservice.google.com.ph https://adservice.google.com.tw https://adservice.google.com.vn https://adservice.google.com.ua https://adservice.google.ca https://adservice.google.cl https://adservice.google.de https://adservice.google.es https://adservice.google.fr https://adservice.google.it https://adservice.google.md https://adservice.google.nl https://adservice.google.no https://adservice.google.pt https://adservice.google.ro https://adservice.google.ru https://adservice.google.se https://adservice.google.so https://adservice.google.tt https://adservice.google.co.id https://adservice.google.co.in https://adservice.google.co.jp https://adservice.google.co.ko https://adservice.google.co.nz https://adservice.google.co.th https://adservice.google.co.uk https://*.googleadservices.com https://www.youtube.com https://s.ytimg.com https://*.stripe.com https://connect.facebook.net https://widget.twnmm.com https://api.microsofttranslator.com; img-src 'self' data: https://*.google.com https://*.googleapis.com https://*.gstatic.com https://www.google-analytics.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://*.doubleclick.net https://*.ytimg.com https://secure.gravatar.com https://www.facebook.com https://api.qrserver.com https://widget.twnmm.com http://www.birdviewing.com https://*.googleusercontent.com https://*.bp.blogspot.com https://apod.nasa.gov https://i.imgur.com https://*.unsplash.com https://ps.w.org; style-src 'self' 'unsafe-inline' https://*.google.com https://*.googleapis.com https://widget.twnmm.com; frame-src 'self' https://www.google.com https://www.youtube.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://cse.google.com https://js.stripe.com; frame-ancestors 'self'; connect-src 'self'  https://*.jasonsavard.com https://*.uc.r.appspot.com https://omahaproxy.appspot.com https://api.ipdata.co https://*.googlesyndication.com https://*.gstatic.com https://www.google-analytics.com https://widget.twnmm.com https://www.theweathernetwork.com; font-src 'self' 'unsafe-inline' data: https://*.gstatic.com; object-src 'none'; base-uri 'none'; report-uri /tools/cspErrors.php 1
frame-ancestors 'self' *.flocktory.com http://webvisor.com *.google-analytics.com 1
default-src 'self'; script-src 'self' https://alert.bankid.com; report-uri https://install.bankid.com/api/securitypolicyviolationreport 1
default-src 'self';               style-src 'self' 'unsafe-inline';               script-src-elem 'self' https://www.google-analytics.com/analytics.js  https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js 'unsafe-inline';              script-src 'self' https://www.google-analytics.com/analytics.js 'unsafe-eval' 'unsafe-inline';              connect-src 'self' https://www.google-analytics.com/r/collect https://www.google-analytics.com/collect;               img-src 'self' data:;              report-uri https://telemetry.consumersentinel.gov/api/contentsecuritypolicy; 1
frame-ancestors 'self' *.business.qld.gov.au 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-OTliZmZiNmUtYzkzZC00MjhmLWExN2QtMzE5M2ZjMzczNzdm'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
frame-ancestors 'self' http://localhost:8080 https://*.birds.cornell.edu https://*.ornith.cornell.edu 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com http://youtube.com/iframe_api https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://player.vimeo.com/api/player.js https://sopra-steria.career-inspiration.com/js/fbapppromobox.js https://cdnjs.cloudflare.com/ajax/libs/iframe-resizer/3.6.1/iframeResizer.min.js https://www.googletagmanager.com/gtm.js https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js https://static.ads-twitter.com/uwt.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://connect.facebook.net/en_US/fbevents.js https://snap.licdn.com/li.lms-analytics/insight.beta.min.js https://analytics.twitter.com/i/adsct https://tagmanager.google.com/debug https://sjs.bizographics.com/insight.min.js https://secure.quantserve.com/quant.js https://tagmanager.google.com/debug/debuguiApp-bundle.js https://rules.quantcount.com/rules-p-U-rxjfyRkAJ0Y.js https://tagmanager.google.com https://maxcdn.bootstrapcdn.com/bootstrap/3.3.4/js/bootstrap.min.js https://cdnjs.cloudflare.com/ajax/libs/bootstrap-multiselect/0.9.15/js/bootstrap-multiselect.js https://static.pathmotion.io/initjs/init.min.js https://rules.quantcount.com/rules-p-5eXwvumSeTF0n.js https://cdn1.readspeaker.com/script/9190/webReader/webReader.js https://cdn1.readspeaker.com/script/9190/webReader/ReadSpeaker.pub.Config.js https://cdn1.readspeaker.com/script/9190/webReader/r/r974/ReadSpeaker.Core.js https://cdn1.readspeaker.com/ *.lfeeder.com *.leadfeeder.com https://code.jquery.com/jquery-3.4.1.min.js https://www.googletagmanager.com/gtag/js https://twitter.com/ https://pi.pardot.com/pd.js https://cdnjs.cloudflare.com/ajax/libs/xlsx/0.16.6/xlsx.full.min.js https://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.9.3/Chart.min.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js http://cdn1.readspeaker.com/script/11546/webReader/ https://pi.pardot.com/ https://go.soprasteria.de/ https://www.clarity.ms/ https://walls.io/js/ https://cdn.goldenbees.fr/ https://tag.goldenbees.fr/ https://cdn.goldenbees.mgr.consensu.org/ https://www.youtube.com/; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://tagmanager.google.com/debug/css.css https://pixel.quantserve.com/pixel https://maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap.min.css https://cdnjs.cloudflare.com/ajax/libs/bootstrap-multiselect/0.9.15/css/bootstrap-multiselect.css https://maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap.min.css https://cdn1.readspeaker.com/script/9190/webReader/r/r974/ReadSpeaker.Styles-Button.css https://cdn1.readspeaker.com/script/9190/webReader/r/r974/ReadSpeaker.Styles.css https://cdn1.readspeaker.com/script/9190/webReader/r/ https://cdn1.readspeaker.com http://cdn1.readspeaker.com/script/11546/webReader/r/r1099/ReadSpeaker.Styles.css http://cdn1.readspeaker.com/script/11546/webReader/r/r1099/ReadSpeaker.Styles-Button.css; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com *.eloqua.com track.hubspot.com https://dc.ads.linkedin.com/collect/ https://px.ads.linkedin.com/ https://t.co/i/adsct https://counter.adcourier.com https://stats.g.doubleclick.net/r/collect https://pixel.quantserve.com/ data: blob: *.cdninstagram.com *.lfeeder.com *.leadfeeder.com *.google.fr/ads/ *.google.com/ads/ https://cdn.recman.no/ https://i.ytimg.com/; media-src 'self' data: blob: https://lesjoiesducode.fr/; frame-src 'self' https://platform.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://karriere.soprasteria.de/ https://candidate.hr-manager.net/ https://my.walls.io/; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://charts.symex.be/ https://sopra.symex.be/ https://sopra-steria.career-inspiration.com/ https://www.google.com/ https://candidate.hr-manager.net/ https://karriere.soprasteria.de/ https://app-eu.readspeaker.com/ https://maps.google.com/; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://maps.googleapis.com/ https://vimeo.com/ https://app-eu.readspeaker.com/ https://rstts-eu.readspeaker.com/ https://media-eu.readspeaker.com/ https://www.digitale-exzellenz.de/feed/ https://www.digitale-exzellenz.de/category/branchen/ https://www.digitale-exzellenz.de/tag/ https://www.instagram.com/ https://www.instagram.com/soprasteria_fr/ https://www.instagram.com/instagram/ *.lfeeder.com *.leadfeeder.com https://vttts-eu.readspeaker.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/; 1
default-src 'self' 'unsafe-inline' nominatim.openstreetmap.org service.bzga.de piwik.bzga.de; style-src 'self' 'unsafe-inline' fast.fonts.net;img-src 'self' data: piwik.bzga.de a.tile.openstreetmap.de b.tile.openstreetmap.de c.tile.openstreetmap.de service.bzga.de; 1
default-src * data: blob: https://cdn.onesignal.com 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' https://arenabg.com https://arenabg.ch 1
default-src https: 'unsafe-inline' 'unsafe-eval' https://tools.inviteeducation.com 1
frame-ancestors 'self' http://vodafone.lookbookhq.com https://vodafone.lookbookhq.com http://vodafone.pathfactory.com https://vodafone.pathfactory.com 1
report-uri https://www.118000.fr/contact.html; base-uri 'self' https://apis.google.com https://sle.pagesjaunes.fr/ 1
frame-ancestors https://microapps.google.com 1
default-src https: 'unsafe-inline' 'unsafe-eval'; base-uri 'self'; img-src * data:; worker-src 'self' blob:; 1
default-src 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' webto.salesforce.com ; style-src 'self' 'unsafe-inline' fonts.googleapis.com p.typekit.net use.typekit.net; font-src 'self' fonts.gstatic.com use.typekit.net sha256-67279bcc33ee9bd4c0e541609dbcb9355274b86e7502eb6f0d2adf63bde02695; media-src 'self' *.podbean.com; script-src 'self' 'unsafe-inline' www.gstatic.com www.google.com google-analytics.com cdnjs.cloudflare.com s3-us-west-2.amazonaws.com static.addtoany.com buttons-config.sharethis.com platform-api.sharethis.com; frame-src 'self' www.youtube.com www.google.com www.gstatic.com player.vimeo.com c.sharethis.mgr.consensu.org; connect-src 'self' www.google-analytics.com l.sharethis.com; img-src 'self' i3.ytimg.com l.sharethis.com www.google-analytics.com; 1
frame-ancestors https://*.mdsol.com 1
frame-ancestors 'self' *.valassis.com; 1
default-src 'self' cdn.alltherooms.com; font-src 'self' data: cdn.alltherooms.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.alltherooms.com www.google-analytics.com maps.googleapis.com apis.google.com smartlock.google.com s3-eu-west-1.amazonaws.com/share.typeform.com/embed.js www.googleadservices.com maps.gstatic.com stats.g.doubleclick.net stats.g.doubleclick.net cdn.logrocket.io d8myem934l1zi.cloudfront.net disutgh7q0ncc.cloudfront.net connect.facebook.net; img-src * data: blob:; media-src 'self' cdn.alltherooms.com; frame-src www.facebook.com smartlock.google.com *.userreport.com; style-src 'self' 'unsafe-inline' cdn.alltherooms.com fonts.googleapis.com; child-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' data: telemetry.alltherooms.com 1kapguurg3.execute-api.us-east-1.amazonaws.com cdn.alltherooms.com analytics.alltherooms.com sockets.alltherooms.com sockets.alltherooms.es ws://sockets.alltherooms.com ws://sockets.alltherooms.es wss://sockets.alltherooms.com wss://sockets.alltherooms.es stats.g.doubleclick.net *.logrocket.io www.google-analytics.com d8myem934l1zi.cloudfront.net wootric-eligibility.herokuapp.com eligibility.wootric.com disutgh7q0ncc.cloudfront.net production.wootric.com api.mapbox.com *.tiles.mapbox.com events.mapbox.com 1
upgrade-insecure-requests;default-src 'self' www.google.co.uk assets.nhs.uk *.ajax.googleapis.com *.assets.adobedtm.com *.nhsdigital.d3.sc.omtrdc.net *.digitalcampaignsstorage.blob.core.windows.net *.statse.webtrendslive.com www.googletagmanager.com *.api-bridge.azurewebsites.net www.chrysalisfinance.com *.r1.dmtrk.net *.dmtrk.net;connect-src 'self' *.google.co.uk *.google-analytics.com *.googlesyndication.com *.crazyegg.com www.googleadservices.com *.doubleclick.net *.smartlook.com *.apester.com *.facebook.com *.google.com *.mare.io assets.nhs.uk *.ajax.googleapis.com *.assets.adobedtm.com *.nhsdigital.d3.sc.omtrdc.net *.digitalcampaignsstorage.blob.core.windows.net *.statse.webtrendslive.com www.googletagmanager.com *.api-bridge.azurewebsites.net www.chrysalisfinance.com *.r1.dmtrk.net *.dmtrk.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' email-bmihealthcare.co.uk *.google-analytics.com *.googlesyndication.com *.responsetap.com https://cdnjs.cloudflare.com *.doubleclick.net *.facebook.net *.googleapis.com *.crazyegg.com *.click4assistance.co.uk www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com *.smartlook.com mare.io *.apester.com www.cqc.org.uk *.google.co.uk *.google.com *.amazonaws.com assets.nhs.uk *.ajax.googleapis.com *.assets.adobedtm.com *.nhsdigital.d3.sc.omtrdc.net *.digitalcampaignsstorage.blob.core.windows.net *.statse.webtrendslive.com *.api-bridge.azurewebsites.net www.chrysalisfinance.com *.r1.dmtrk.net *.dmtrk.net;style-src 'self' 'unsafe-inline' *.apester.com *.googleapis.com *.google.com www.cqc.org.uk;img-src 'self' data: www.bmihealthcare.co.uk *.google.com *.google.co.uk *.googletagmanager.com www.facebook.com *.click4assistance.co.uk *.doubleclick.net www.google-analytics.com maps.gstatic.com i.ytimg.com maps.googleapis.com www.cqc.org.uk bppmdmxgsg.execute-api.eu-west-1.amazonaws.com *.apester.com *.googleapis.com *.ggpht.com *.2mdn.net placehold.it *.crazyegg.com;media-src 'self';font-src 'self' fonts.gstatic.com;worker-src 'self' *.doubleclick.net www.facebook.com;frame-src 'self' email-bmihealthcare.co.uk *.doubleclick.net www.youtube.com *.apester.com *.facebook.com *.sitecore.net sitecoreboost.azurewebsites.net *.click4assistance.co.uk *.google.com assets.nhs.uk *.ajax.googleapis.com *.assets.adobedtm.com *.nhsdigital.d3.sc.omtrdc.net *.digitalcampaignsstorage.blob.core.windows.net *.statse.webtrendslive.com www.googletagmanager.com *.api-bridge.azurewebsites.net www.chrysalisfinance.com *.r1.dmtrk.net *.dmtrk.net;form-action 'self' *.facebook.com *.facebook.net *.epdq.co.uk assets.nhs.uk *.ajax.googleapis.com *.assets.adobedtm.com *.nhsdigital.d3.sc.omtrdc.net *.digitalcampaignsstorage.blob.core.windows.net *.statse.webtrendslive.com www.googletagmanager.com *.api-bridge.azurewebsites.net www.chrysalisfinance.com *.r1.dmtrk.net *.dmtrk.net; 1
default-src 'self'; frame-ancestors 'self'; font-src 'self' data: fonts.gstatic.com cloud.typography.com *.companies.gov.nu *.cwp.govt.nz *.companiesoffice.govt.nz; form-action 'self' *.facebook.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; frame-src 'self' d3f5l8ze0o4j2m.cloudfront.net *.google.com *.youtube.com *.youtube-nocookie.com *.fls.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu *.societies.govt.nz *.vimeo.com *.facebook.com; child-src 'self' d3f5l8ze0o4j2m.cloudfront.net *.google.com *.youtube.com *.youtube-nocookie.com *.fls.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu *.societies.govt.nz *.vimeo.com *.facebook.com; img-src 'self' data: *.ytimg.com *.google.com *.gstatic.com *.google.co.nz *.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu d3f5l8ze0o4j2m.cloudfront.net; media-src 'self' *.youtube.com *.youtube-nocookie.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: d3f5l8ze0o4j2m.cloudfront.net *.gstatic.com *.google.com *.google.co.nz *.google-analytics.com *.googletagmanager.com *.youtube.com *.youtube-nocookie.com *.ytimg.com stats.g.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; style-src 'self' 'unsafe-inline' *.googleapis.com *.typography.com *.google.com *.google.co.nz *.youtube.com *.youtube-nocookie.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; base-uri 'self'; object-src 'none'; connect-src 'self' *.google-analytics.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu *.ext.wd.govt.nz:8380; manifest-src 'self'; 1
default-src 'self' 'unsafe-inline' *.cookiefirst.com www.etracker.de *.googleapis.com www.youtube.com *.googlevideo.com cdn.plyr.io www.dtvp.de *.gstatic.com *.ggpht.com nbank.myaudience.de data:; 		script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiefirst.com siteimproveanalytics.com nbank.myaudience.de *.etracker.com www.etracker.de *.googleapis.com www.youtube.com *.googlevideo.com cdn.plyr.io *.ggpht.com www.dtvp.de; 	 1
default-src 'self'; base-uri 'self'; script-src 'self' 'nonce-pr5yerbj3towypmprlzi9' https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://connect.facebook.net https://static.cloudflareinsights.com/beacon.min.js; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://btc-alpha.com https://www.google.com https://www.google.ru https://www.gstatic.com https://fonts.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://rtb.adx1.com https://rtb.adp3.net; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://btc-alpha.com wss://btc-alpha.com https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com/tr https://api.mercuryo.io; frame-src 'self' https://www.google.com https://www.youtube.com; frame-ancestors 'self'; report-uri /csp/report/ 1
default-src 'self' data: https: connect.facebook.net *.doubleclick.net em.allianz.com.my *.googleadservices.com *.facebook.com *.youtube.com *.googletagmanager.com *.google-analytics.com *.google.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: connect.facebook.net *.doubleclick.net em.allianz.com.my *.googleadservices.com *.facebook.com *.youtube.com *.googletagmanager.com *.google-analytics.com *.google.com; object-src 'self' data: https: connect.facebook.net *.doubleclick.net em.allianz.com.my *.googleadservices.com *.facebook.com *.youtube.com *.googletagmanager.com *.google-analytics.com *.google.com; style-src 'self' data: 'unsafe-inline' https: connect.facebook.net *.doubleclick.net em.allianz.com.my *.googleadservices.com *.facebook.com *.youtube.com *.googletagmanager.com *.google-analytics.com *.google.com; img-src 'self' data: https: connect.facebook.net *.doubleclick.net em.allianz.com.my *.googleadservices.com *.facebook.com *.youtube.com *.googletagmanager.com *.google-analytics.com *.google.com; media-src 'self' data: https: connect.facebook.net *.doubleclick.net em.allianz.com.my *.googleadservices.com *.facebook.com *.youtube.com *.googletagmanager.com *.google-analytics.com *.google.com; frame-src 'self' data: https: connect.facebook.net *.doubleclick.net em.allianz.com.my *.googleadservices.com *.facebook.com *.youtube.com *.googletagmanager.com *.google-analytics.com *.google.com; font-src 'self' data: https: connect.facebook.net *.doubleclick.net em.allianz.com.my *.googleadservices.com *.facebook.com *.youtube.com *.googletagmanager.com *.google-analytics.com *.google.com; connect-src 'self' data: https: connect.facebook.net *.doubleclick.net em.allianz.com.my *.googleadservices.com *.facebook.com *.youtube.com *.googletagmanager.com *.google-analytics.com *.google.com 1
frame-ancestors *.ssww.com *.surveymonkey.com *.google.com teacherplanet.com 1
default-src *; object-src *; script-src 'unsafe-eval' * 'unsafe-inline' *; connect-src *; img-src * data:; style-src 'unsafe-inline' *; font-src * data:; frame-src * 1
frame-ancestors 'self' https://www.mturk.com/ https://worker.mturk.com/ 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.tweepsmap.com https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com; img-src 'self' data: blob: *.tweepsmap.com https://*.google-analytics.com https://stats.g.doubleclick.net https://*.twimg.com https://*.gstatic.com https://maps.googleapis.com https://*.google.com https://*.cdninstagram.com https://*.fbcdn.net https://*.facebook.com  https://*.fbsbx.com https://*.licdn.com; media-src 'self' data: blob: *.tweepsmap.com https://*.twimg.com;font-src 'self' data: https://*.googleusercontent.com https://*.gstatic.com;frame-src 'self' https://www.youtube.com https://*.facebook.com https://*.google.com https://*.linkedin.com; report-uri https://tweepsmap.com/health/csp; 1
default-src 'self'; child-src 'self' share.intercom.io connect.facebook.net fast.wistia.com fast.wistia.net googleads.g.doubleclick.net *.hotjar.com bid.g.doubleclick.net 10317493.fls.doubleclick.net 10366747.fls.doubleclick.net youtube.com www.youtube.com js.stripe.com www.facebook.com staticxx.facebook.com *.soundcloud.com ti.to *.tito.io *.cdn.optimizely.com tpc.googlesyndication.com www.google.com ethn.io *.quora.com intercom-sheets.com app-ab27.marketo.com www.intercom-reporting.com d2c7xlmseob604.cloudfront.net js.intercomcdn.com insight.adsrvr.org; connect-src 'self'   www.intercom.com app.intercom.io app.intercom.com api.intercom.io api-visitor-analytics.intercom.com api-iam.intercom.io api-ping.intercom.io api.smartling.com js.intercomcdn.com nexus-websocket-a.intercom.io nexus-websocket-test.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-test.intercom.io store.intercomassets.com widget.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-test.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com abrtp1.marketo.com abrtp1-cdn.marketo.com app.getsentry.com stats.g.doubleclick.net www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com sentry.io www.facebook.com *.akamaihd.net *.optimizely.com *.wistia.com *.wistia.net *.quora.com *.soundcloud.com *.sndcdn.com *.clearbit.com 258-clw-344.mktoresp.com bat.bing.com cdn.bizible.com d2c7xlmseob604.cloudfront.net rum-collector-2.pingdom.net rum-http-intake.logs.datadoghq.com public-trace-http-intake.logs.datadoghq.com heapanalytics.com; font-src data: https: ; img-src data: blob: https: ; media-src data: blob: https: ; object-src 'none'; script-src 'self' 'unsafe-eval' app.intercom.io app.intercom.com js.intercomcdn.com store.intercomassets.com marketing.intercomassets.com widget.intercom.io ajax.googleapis.com analytics.twitter.com abrtp1.marketo.com abrtp1-cdn.marketo.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com bat.bing.com cdn-assets-prod.s3.amazonaws.com cdn.optimizely.com cdn3.optimizely.com cdn.ravenjs.com browser.sentry-cdn.com connect.facebook.net distillery.wistia.com distillery-main.wistia.com ethn.io fast.wistia.com fast.wistia.net ga.clearbit.com googleads.g.doubleclick.net sjs.bizographics.com js.stripe.com munchkin.marketo.net platform.twitter.com reveal.clearbit.com rtp-static.marketo.com script.hotjar.com secure.adnxs.com snap.licdn.com static.ads-twitter.com static.hotjar.com stats.g.doubleclick.net store.intercom.io ti.to tpc.googlesyndication.com www.datadoghq-browser-agent.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com *.jquery.com *.tito.io *.linkedin.com *.quora.com *.soundcloud.com *.sndcdn.com *.widerfunnel.com 'strict-dynamic' 'nonce-YzVlZGZmZDctMmNiZS00ODRjLTlhNjctMmZlOGI2MjE4YTQz'; style-src 'self' 'unsafe-inline' *.tito.io app-ab27.marketo.com marketing.intercomassets.com maxcdn.bootstrapcdn.com rtp-static.marketo.com fonts.googleapis.com tagmanager.google.com heapanalytics.com; worker-src data: blob: 1
frame-ancestors 'self' http://*.eu.umicore.com 212.113.67.182; base-uri 'self' 1
default-src 'self'; script-src 'self' https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' https://www.google-analytics.com;font-src 'self';frame-src https://www.google.com/recaptcha/; connect-src 'self' https://www.google-analytics.com 1
default-src; script-src * 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src-elem * 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src-attr * 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; style-src * 'self' data: 'unsafe-inline' 'unsafe-hashes'; style-src-elem * 'self' data: 'unsafe-inline' 'unsafe-hashes'; style-src-attr * 'self' data: 'unsafe-inline' 'unsafe-hashes'; img-src * 'self' data:; font-src * 'self' data:; connect-src * 'self'; media-src * 'self'; object-src * 'self'; prefetch-src * 'self'; child-src * 'self'; frame-src * 'self'; worker-src * 'self'; frame-ancestors *.uaionline.edu.ar uaionline.edu.ar *.uai.edu.ar uai.edu.ar *.uai.edu.ar:8084 uai.edu.ar:8084 *.vaneduc.edu.ar vaneduc.edu.ar; form-action * 'self'; base-uri * 'self'; manifest-src * 'self'; plugin-types */*; report-uri; report-to 1
frame-ancestors 'self' http://localhost http://dev-elementaldiets.pantheonsite.io http://elementaldiets.com https://elementaldiets.com 1
default-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.brighttalk.com https://*.paypal.com https://*.paypalobjects.com https://www.youtube-nocookie.com https://www.xoom.com https://www.wootag.com https://*.qualtrics.com; script-src 'nonce-Cdhc0fwxbLsYH3VedZbFibWIDc/Qt0FmGVosVQf/mK09RvdZ' 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://nominatim.openstreetmap.org https://*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com https://*.salesforce.com https://*.force.com https://*.eloqua.com https://nexus.ensighten.com https://api.paypal-retaillocator.com https://*.brighttalk.com https://*.dialogtech.com https://*.qualtrics.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com data:; img-src 'self' https: data:; form-action 'self' https://*.paypal.com https://*.salesforce.com https://*.eloqua.com https://secure.opinionlab.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-ancestors 'self' https://*.paypal.com; block-all-mixed-content;; report-uri https://www.paypal.com/csplog/api/log/csp 1
frame-ancestors *.multiplan.us; object-src 'none'; img-src 'self' maps.google.com maps.googleapis.com www.google-analytics.com csi.gstatic.com cdn.appdynamics.com multiplan.us www.multiplan.us https: http:; script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.google.com maps.googleapis.com www.google-analytics.com csi.gstatic.com docasap.com cdn.appdynamics.com multiplan.us www.multiplan.us https: http: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://snap.licdn.com https://stats.g.doubleclick.net assets.adobedtm.com www.googletagmanager.com app-script.monsido.com forms.cwp.gov.sg cse.google.com clients1.google.com *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com cdn.ampproject.org va.ecitizen.gov.sg assets.wogaa.sg https://*.dcube.cloud; style-src 'self' 'unsafe-inline' assets.wogaa.sg https://assets.dcube.cloud/fonts/ *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com va.ecitizen.gov.sg; img-src 'self' https://px.ads.linkedin.com https://tracking.monsido.com wogadobeanalytics.sc.omtrdc.net https://cm.everesttech.net/ https://dpm.demdex.net/ forms.cwp.gov.sg data: www.google.com clients1.google.com va.ecitizen.gov.sg *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com blob: *.eloqua.com; font-src 'self' data: assets.wogaa.sg https://assets.dcube.cloud/fonts/ va.ecitizen.gov.sg s3-us-west-2.amazonaws.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com; connect-src 'self' https://stats.g.doubleclick.net snowplow-sentiments.wogaa.sg api.sentiments.wogaa.sg dpm.demdex.net snowplow-web.wogaa.sg https://*.dcube.cloud va.ecitizen.gov.sg accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com *.google-analytics.com; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://forms.cwp.gov.sg; frame-src https://*.demdex.net/ forms.cwp.gov.sg www.youtube.com *.onemap.sg cse.google.com *.doubleclick.net 'self'; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *;style-src 'self' 'unsafe-inline' *;img-src 'self' * data:;media-src 'self' blob:;frame-src 'self' *;font-src 'self' * data:;connect-src 'self' *;worker-src 'self' blob: 1
frame-ancestors *.adda52.com 1
default-src https: data: wss: blob: 'self' 'unsafe-inline' 'unsafe-eval'; report-uri /report-csp-violation; upgrade-insecure-requests 1
default-src https: https://*.fh-swf.de;  script-src 'self' https://*.fh-swf.de https://static.b-ite.com https://www.evergabe.nrw.de 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data: blob: 1
frame-ancestors https://*.simplemobile.com 1
default-src 'self' https: data: https://static.zdassets.com https://ekr.zdassets.com https://emedvertise.zendesk.com https://*.zopim.com wss://emedvertise.zendesk.com wss://*.zopim.com; script-src https: data: 'unsafe-inline' 'unsafe-eval' https://platform.twitter.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://static.zdassets.com https://ekr.zdassets.com https://emedvertise.zendesk.com https://*.zopim.com wss://emedvertise.zendesk.com wss://*.zopim.com; style-src https: data: 'unsafe-inline'; font-src https: data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; frame-src https: data: https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; connect-src https: data: http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://static.zdassets.com https://ekr.zdassets.com https://emedvertise.zendesk.com https://*.zopim.com wss://emedvertise.zendesk.com wss://*.zopim.com; img-src 'self' https: data: https://secure.gravatar.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://v2assets.zopim.io https://static.zdassets.com 1
default-src 'none'; connect-src 'self' https://www.snapengage.com https://maps.googleapis.com https://col.eum-appdynamics.com *.datatree.com https://cesium.com https://dev.virtualearth.net https://api.cesium.com https://assets.cesium.com https://ecn.t0.tiles.virtualearth.net https://ecn.t1.tiles.virtualearth.net https://ecn.t2.tiles.virtualearth.net https://ecn.t3.tiles.virtualearth.net https://t0.ssl.ak.dynamic.tiles.virtualearth.net https://t1.ssl.ak.dynamic.tiles.virtualearth.net https://t2.ssl.ak.dynamic.tiles.virtualearth.net https://t3.ssl.ak.dynamic.tiles.virtualearth.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.pendo.io https://app.pendo.io https://pendo-io-static.storage.googleapis.com https://www.snapengage.com https://storage.googleapis.com https://maps.googleapis.com https://csi.gstatic.com https://cdn.appdynamics.com https://www.google.com https://www.gstatic.com https://support.google.com https://developers.google.com https://pendo-static-6585511024263168.storage.googleapis.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cesium.com https://dev.virtualearth.net https://api.cesium.com https://assets.cesium.com https://ecn.t0.tiles.virtualearth.net https://ecn.t1.tiles.virtualearth.net https://ecn.t2.tiles.virtualearth.net https://ecn.t3.tiles.virtualearth.net https://t0.ssl.ak.dynamic.tiles.virtualearth.net https://t1.ssl.ak.dynamic.tiles.virtualearth.net https://t2.ssl.ak.dynamic.tiles.virtualearth.net https://t3.ssl.ak.dynamic.tiles.virtualearth.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.pendo.io https://pendo-static-6585511024263168.storage.googleapis.com https://maxcdn.bootstrapcdn.com https://cesium.com https://dev.virtualearth.net https://api.cesium.com https://assets.cesium.com https://ecn.t0.tiles.virtualearth.net https://ecn.t1.tiles.virtualearth.net https://ecn.t2.tiles.virtualearth.net https://ecn.t3.tiles.virtualearth.net https://t0.ssl.ak.dynamic.tiles.virtualearth.net https://t1.ssl.ak.dynamic.tiles.virtualearth.net https://t2.ssl.ak.dynamic.tiles.virtualearth.net https://t3.ssl.ak.dynamic.tiles.virtualearth.net; img-src blob: data: 'self' *; font-src blob: data: 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; media-src 'self' https://vod-progressive.akamaized.net https://player.vimeo.com https://gcs-vimeo.akamaized.net http://www.datatree.com https://www.snapengage.com https://cesium.com https://dev.virtualearth.net https://api.cesium.com https://assets.cesium.com https://ecn.t0.tiles.virtualearth.net https://ecn.t1.tiles.virtualearth.net https://ecn.t2.tiles.virtualearth.net https://ecn.t3.tiles.virtualearth.net https://t0.ssl.ak.dynamic.tiles.virtualearth.net https://t1.ssl.ak.dynamic.tiles.virtualearth.net https://t2.ssl.ak.dynamic.tiles.virtualearth.net https://t3.ssl.ak.dynamic.tiles.virtualearth.net; form-action 'self' *.datatree.com; object-src 'self'; frame-src 'self' https://www.research.net/ https://www.google.com https://support.google.com https://developers.google.com https://www.chasepaymentechhostedpay.com https://www.chasepaymentechhostedpay-var.com https://cesium.com https://dev.virtualearth.net https://api.cesium.com https://assets.cesium.com https://ecn.t0.tiles.virtualearth.net https://ecn.t1.tiles.virtualearth.net https://ecn.t2.tiles.virtualearth.net https://ecn.t3.tiles.virtualearth.net https://t0.ssl.ak.dynamic.tiles.virtualearth.net https://t1.ssl.ak.dynamic.tiles.virtualearth.net https://t2.ssl.ak.dynamic.tiles.virtualearth.net https://t3.ssl.ak.dynamic.tiles.virtualearth.net; frame-ancestors 'self' https://www.chasepaymentechhostedpay.com/hpf/1_1/ https://www.chasepaymentechhostedpay.com https://www.chasepaymentechhostedpay-var.com https://webuat.datatree.com/Payment/PaymentContextCallback https://webuat.datatree.com/Payment/ProcessPaymentResponse https://webuat.datatree.com/Content/Variant/PaymentForm.css https://webstage.datatree.com/Payment/PaymentContextCallback https://webstage.datatree.com/Payment/ProcessPaymentResponse https://webstage.datatree.com/Content/Variant/PaymentForm.css https://web.datatree.com/Payment/PaymentContextCallback https://web.datatree.com/Payment/ProcessPaymentResponse https://web.datatree.com/Content/Variant/PaymentForm.css; child-src 'self' https://cesium.com https://dev.virtualearth.net https://api.cesium.com https://assets.cesium.com https://ecn.t0.tiles.virtualearth.net https://ecn.t1.tiles.virtualearth.net https://ecn.t2.tiles.virtualearth.net https://ecn.t3.tiles.virtualearth.net https://t0.ssl.ak.dynamic.tiles.virtualearth.net https://t1.ssl.ak.dynamic.tiles.virtualearth.net https://t2.ssl.ak.dynamic.tiles.virtualearth.net https://t3.ssl.ak.dynamic.tiles.virtualearth.net;  worker-src 'self' blob: https://cesium.com https://dev.virtualearth.net https://api.cesium.com https://assets.cesium.com https://ecn.t0.tiles.virtualearth.net https://ecn.t1.tiles.virtualearth.net https://ecn.t2.tiles.virtualearth.net https://ecn.t3.tiles.virtualearth.net https://t0.ssl.ak.dynamic.tiles.virtualearth.net https://t1.ssl.ak.dynamic.tiles.virtualearth.net https://t2.ssl.ak.dynamic.tiles.virtualearth.net https://t3.ssl.ak.dynamic.tiles.virtualearth.net; plugin-types application/pdf; report-uri csp/report/; 1
default-src 'self' https: http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; connect-src 'self' https: wss://*.intercom.io http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; font-src 'self' https: data:; img-src 'self' https: data: res.cloudinary.com; object-src 'none'; script-src 'self' data: https: http://*.hsforms.net:* https://*.hsforms.net:* 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline' cloud.typography.com 1
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; 1
default-src 'self' *.driftqa.com *.driftt.com *.okta.com *.kinsta.cloud *.mktoresp.com *.google-analytics.com *.calamp.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.driftt.com *.oktacdn.com *.okta.com *.youtube.com youtube.com *.ytimg.com ytimg.com *.kinsta.cloud *.calamp.com *.twimg.com *.googletagmanager.com *.marketo.com *.cloudflare.com *.gstatic.com *.oktopost.com *.adroll.com *.jquery.com *.googleapis.com *.google.com *.twitter.com *.marketo.net *.facebook.net *.adroll.mgr.consensu.org *.adform.net https://okt.to *.doubleclick.net *.google-analytics.com; img-src 'self' data: *.gravatar.com https://twitter.com *.twitter.com *.twimg.com *.linkedin.com *.facebook.com *.oktacdn.com *.google.com *.adroll.com *.marketo.com *.doubleclick.net *.google-analytics.com *.advertising.com *.calamp.com *.kinsta.cloud data: *.okta.com; style-src 'self' 'unsafe-inline' *.oktacdn.com *.marketo.com *.twimg.com *.twitter.com *.googleapis.com *.zendesk.com; font-src 'self' data: *.typekit.net *.oktacdn.com *.twimg.com *.gstatic.com; frame-src *.vimeo.com *.driftt.com *.facebook.com *.cloudfront.net *.calamp.com *.kinsta.cloud *.adform.net *.oktacdn.com *.youtube.com *.lojack.com *.twitter.com *.twimg.com *.marketo.com http://www.calamp-ion.com.s3-website-us-east-1.amazonaws.com https://www.googletagmanager.com *.google.com; connect-src *.okta.com *.google-analytics.com *.marketo.com *.mktoresp.com *.doubleclick.net *.marketo.com *.calamp.com *.kinsta.cloud *.youtube.com youtube.com; 1
frame-ancestors admin.avbuyer.com 'self' 1
script-src 'self' 'unsafe-inline' browser-update.org platform.twitter.com www.googletagmanager.com www.google-analytics.com rum-static.pingdom.net https://tagmanager.google.com/debug assets.zendesk.com static.zdassets.com ekr.zdassets.com browser.sentry-cdn.com sentry.cloud.gov.au; object-src 'none'; report-uri https://sentry.cloud.gov.au/api/3/security/?sentry_key=af6f917c068e4756837fca7c2f5adf17e; worker-src 'self' blob: 1
frame-ancestors 'self' https://catalogue.joueclub.fr 1
frame-ancestors 'self' helioshi.medixmob.com medix-portal.com 1
frame-ancestors https://*.schoolprints.com 1
default-src 'self' https://assets.getmyboat.com; connect-src 'self' sentry.io https://assets.getmyboat.com ws://*.getmyboat.com wss://*.getmyboat.com www.google-analytics.com stats.g.doubleclick.net www.google.com translate.googleapis.com getmyboat-user-images1.imgix.net getmyboat-user-images2.imgix.net graph.facebook.com www.facebook.com api.mapbox.com *.tiles.mapbox.com events.mapbox.com getmyboat-uploads.s3.amazonaws.com api.stripe.com; script-src 'self' 'nonce-+0beeQBtVZ6LCe6LTGHUKQ==' www.getmyboat.com https://assets.getmyboat.com maps.googleapis.com maps.gstatic.com www.google-analytics.com stats.g.doubleclick.net www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net www.google.com www.gstatic.com translate.googleapis.com connect.facebook.net cdn.siftscience.com js.stripe.com; style-src 'self' 'unsafe-inline' https://assets.getmyboat.com fonts.googleapis.com fonts.gstatic.com translate.googleapis.com; img-src 'self' data: https://assets.getmyboat.com www.google-analytics.com maps.googleapis.com stats.g.doubleclick.net www.google.com www.gstatic.com www.googletagmanager.com googleads.g.doubleclick.net translate.googleapis.com getmyboat-user-images1.imgix.net getmyboat-user-images2.imgix.net www.facebook.com web.facebook.com hexagon-analytics.com blob: api.mapbox.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com; worker-src 'self' https://assets.getmyboat.com blob:; child-src 'self' https://assets.getmyboat.com graph.facebook.com blob:; frame-src 'self' https://assets.getmyboat.com bid.g.doubleclick.net tpc.googlesyndication.com www.google.com *.facebook.com js.stripe.com hooks.stripe.com; base-uri 'none'; object-src 'none'; block-all-mixed-content; 1
script-src blob: 'self' 'unsafe-inline' 'unsafe-eval'  *  https: data data: safari-extension:; default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: * https: data: gsa: *.factorydirectcraft.com *; style-src 'self' 'unsafe-inline' *; frame-ancestors https://*.facebook.com 'self' 1
script-src 'nonce-foAbK56WGgKI9f4ias7xLw==' 'strict-dynamic' 'unsafe-eval' ; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' https: blob: data: http://www.googleadservices.com http://*.googletagmanager.com http://static.ads-twitter.com http://t.co http://browser-update.org http://localhost:* ws://localhost:* ws://127.0.0.1:* wss://*.hotjar.com; 1
default-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://stackpath.bootstrapcdn.com https://fonts.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://stackpath.bootstrapcdn.com; script-src 'self' https://maps.googleapis.com; img-src 'self' https://www.youtube.com https://maps.gstatic.com https://maps.googleapis.com data: https://*.esportal.live https://analytics.esportal.live https://misralrakamia.gov.eg https://misrelraqumia.gov.eg https://meserelrakamia.gov.eg https://misrelrakamia.gov.eg https://www.misralrakamia.gov.eg https://www.misrelraqumia.gov.eg https://www.meserelrakamia.gov.eg https://www.misrelrakamia.gov.eg https://*.digital.gov.eg; frame-src data: https://www.youtube.com https://api.digital.gov.eg; connect-src 'self' https://*.esportal.live https://analytics.esportal.live https://bugs.fslabs.net https://*.digital.gov.eg https://misralrakamia.gov.eg https://misrelraqumia.gov.eg https://meserelrakamia.gov.eg https://misrelrakamia.gov.eg https://www.misralrakamia.gov.eg https://www.misrelraqumia.gov.eg https://www.meserelrakamia.gov.eg https://www.misrelrakamia.gov.eg; media-src 'self' https://misralrakamia.gov.eg https://misrelraqumia.gov.eg https://meserelrakamia.gov.eg https://misrelrakamia.gov.eg https://www.misralrakamia.gov.eg https://www.misrelraqumia.gov.eg https://www.meserelrakamia.gov.eg https://www.misrelrakamia.gov.eg https://digital.gov.eg; object-src 'self' data:; 1
frame-ancestors 'self' http://www.philips.co.jp *.philips.com *.philips.co.jp 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://extranewsfeed.com https://*.extranewsfeed.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self' https://www.google.com/analytics https://cdn.mxpnl.com http://* https://*; script-src 'self' 'unsafe-inline' https://www.google.com/analytics https://cdn.mxpnl.com http://* https://* 'unsafe-eval'; connect-src * 'self' https://www.google.com/analytics https://cdn.mxpnl.com http://* https://*; img-src data: 'self' https://www.google.com/analytics https://cdn.mxpnl.com http://* https://*; style-src 'self' 'unsafe-inline' https://www.google.com/analytics https://cdn.mxpnl.com http://* https://*; font-src 'self' https://www.google.com/analytics https://cdn.mxpnl.com data: http://* https://*; 1
default-src https: unsafe-inline; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: http: 'unsafe-inline'; img-src 'self' https: data:; connect-src 'self' https:; font-src 'self' https:; 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: wss: blob:; img-src 'self' https: data:; frame-ancestors 'none' 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com; img-src 'self' data: https://www.google-analytics.com https://img.youtube.com https://stats.g.doubleclick.net https://syndication.twitter.com https://pbs.twimg.com https://abs.twimg.com https://platform.twitter.com https://ton.twimg.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://platform.twitter.com https://ton.twimg.com; child-src 'self' blob: https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://syndication.twitter.com; manifest-src 'self'; connect-src 'self' https://www.google-analytics.com; font-src 'self' data:; object-src 'self'; media-src 'self'; frame-ancestors 'self'; form-action 'self' 'unsafe-inline' 'unsafe-eval' data: https://easac.us5.list-manage.com https://syndication.twitter.com https://platform.twitter.com; base-uri 'self' 1
default-src https:; script-src 'unsafe-inline' https: 'unsafe-eval' https://crossway.my.salesforce.com; style-src 'unsafe-inline' https:; font-src https: data:; media-src http: https:; img-src http: https: data: 1
default-src https: 'unsafe-inline'; font-src https: data: 'unsafe-inline'; img-src https: data: 'unsafe-inline'; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline'; 1
frame-ancestors 'self' apply.v12finance.com 1
media-src 'self'; object-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tags.tiqcdn.com https://cdn-akamai.mookie1.com https://js.stripe.com/v3/ https://checkout.stripe.com/checkout.js https://v1.addthisedge.com https://m.addthisedge.com https://cdn.knightlab.com  https://www.gstatic.com https://www.google.com https://tagmanager.google.com https://www.googletagmanager.com https://www.onemap.sg https://www.google-analytics.com https://s7.addthis.com https://m.addthis.com https://t1.onemap.sg https://connect.facebook.net https://graph.facebook.com https://ajax.cloudflare.com https://api-ssl.bitly.com https://cdnjs.cloudflare.com https://cara.taiger.com/ui/; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://t1.onemap.sg https://cdnjs.cloudflare.com https://cara.taiger.com/ui/; font-src 'self' data: https://fonts.gstatic.com https://t1.onemap.sg https://fonts.googleapis.com; img-src 'self' https://www.volunteer.sg https://gstatic.com https://www.google.com.sg https://www.google.com data: https://q.stripe.com/ https://www.volunteergowhere.sg https://www.google-analytics.com https://stats.g.doubleclick.net https://www.onemap.sg https://www.facebook.com https://web.facebook.com https://test.wirecard.com.sg; frame-src 'self' https://tags.tiqcdn.com https://cdn-akamai.mookie1.com https://8848908.fls.doubleclick.net https://checkout.stripe.com https://js.stripe.com https://www.google.com https://s7.addthis.com https://www.facebook.com https://staticxx.facebook.com https://www.youtube.com https://youtube.com https://cara.taiger.com/; connect-src 'self' https://www.facebook.com https://checkout.stripe.com https://m.addthis.com https://www.onemap.sg https://developers.onemap.sg; media-src 'self' https://maintenance.giving.sg; frame-ancestors https://givingweek.sg/ 'self' 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' always http://log.datarize.ai http://img.youtube.com https://img.youtube.com https://graph.facebook.com http://connect.facebook.net https://connect.facebook.net https://tagmanager.google.com http://tagmanager.google.com https://www.googletagmanager.com http://www.googletagmanager.com http://tag.manager.google.com https://tag.manager.google.com https://www.google-analytics.com https://ssl.google-analytics.com http://ssl.daumcdn.net https://ssl.daumcdn.net http://t1.daumcdn.net https://t1.daumcdn.net http://yangju.seoulstore.com https://yangju.seoulstore.com https://yongsan.seoulstore.com https://service.iamport.kr https://cdn.iamport.kr https://nsp.pay.naver.com https://openapi.naver.com https://code.jquery.com http://static.criteo.net https://static.criteo.net http://widget.criteo.com https://widget.criteo.com https://sslwidget.criteo.com http://wcs.naver.net https://wcs.naver.net https://xpay.uplus.co.kr https://xpay.uplus.co.kr:7443 https://assets.recobell.io http://assets.recobell.io https://rblogger-receiver-apne1.recobell.io https://rblogger-issuer-apne1.recobell.io https://kapi.kakao.com http://pg-web.kakao.com https://pg-web.kakao.com https://cts.keyword.daumdn.com https://cts.keyword.ad.daum.net https://cts.analytics.daumdn.com https://cts.ad.daum.net https://cts.shopping.daumdn.com https://cts.ad.daum.net https://cts.vcr.daum.net http://t1.daumcdn.net https://t1.daumcdn.net http://bc.ad.daum.net https://bc.ad.daum.net; font-src https://yongsan.seoulstore.com https://fonts.gstatic.com data:; 1
frame-ancestors 'self' meritpages.com; 1
default-src 'none'; 	script-src 'self' 'unsafe-inline' 'unsafe-eval' 		code.jquery.com 		maxcdn.bootstrapcdn.com 		netdna.bootstrapcdn.com 		ssl.google-analytics.com 		https://cse.google.com 		www.googleapis.com 		www.google-analytics.com 		www.google.com 		www.gstatic.com 		www.googletagmanager.com 		translate.google.com 		ajax.googleapis.com 		maps.googleapis.com 		translate.googleapis.com 		cdn.jsdelivr.net 		cdnjs.cloudflare.com 		polyfill.io 		pi.pardot.com; 	connect-src 'self' freegeoip.net; 	img-src 'self' blob: data: 		code.jquery.com 		www.google.com 		www.googleapis.com 		www.google-analytics.com 		www.gstatic.com 		images-na.ssl-images-amazon.com 		csi.gstatic.com 		clients1.google.com 		*.gstatic.com/images 		stats.g.doubleclick.net 		maps.gstatic.com 		maps.googleapis.com; 	style-src 'self' 'unsafe-inline' 		maxcdn.bootstrapcdn.com 		netdna.bootstrapcdn.com 		www.google.com 		translate.googleapis.com 		fonts.googleapis.com 		cdnjs.cloudflare.com 		code.jquery.com; 	font-src 'self' 		maxcdn.bootstrapcdn.com 		netdna.bootstrapcdn.com 		fonts.googleapis.com 		fonts.gstatic.com; 	object-src 'self'; 	frame-src 'self' www.google.com https://cse.google.com www.youtube.com 1
script-src * 'unsafe-eval' 'unsafe-inline'; worker-src blob: *;frame-ancestors 'self' https://webs.testjustenergy.com https://webs.justenergy.com; 1
default-src 'self'; font-src 'self' https://fonts.gstatic.com; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.gstatic.com; style-src https: 'self' 'unsafe-inline' https://www.google.com; img-src 'self' data: https: https://www.googletagmanager.com; frame-src 'self' https://www.google.com; connect-src https: 'self';object-src 'none'; report-uri /csp_report; 1
default-src 'unsafe-inline' 'unsafe-eval' museumofthebible.org museumofthebible.cdn.prismic.io info.museumofthebible.org www.museumofthebible.org phpstack-448274-1403762.cloudwaysapps.com player.vimeo.com api.vimeo.com www.youtube.com museumofthebible.prismic.io www.google-analytics.com adservice.google.com 8092262.fls.doubleclick.net stats.g.doubleclick.net static.doubleclick.net googleads.g.doubleclick.net bid.g.doubleclick.net prismic.io wroom.io code.jquery.com googleapis.com cdnjs.cloudflare.com static.hotjar.com script.hotjar.com vars.hotjar.com in.hotjar.com wss://ws9.hotjar.com cs.yieldoptimizer.com tag.yieldoptimizer.com pixel.mathtag.com iceim01.iceuc.com s7.addthis.com m.addthis.com www.cognitoforms.com api.idonate.com embed.idonate.com widget.spreaker.com a36748.actonsoftware.com connect.facebook.net; script-src-elem 'unsafe-inline' data: www.google.com www.gstatic.com embed.idonate.com z.moatads.com v1.addthisedge.com www.google-analytics.com static.hotjar.com script.hotjar.com wss://ws9.hotjar.com www.googleadservices.com bat.bing.com 8092262.fls.doubleclick.net stats.g.doubleclick.net static.doubleclick.net googleads.g.doubleclick.net s.adroll.com info.museumofthebible.org www.museumofthebible.org prismic.io wroom.io www.googletagmanager.com unpkg.com www.cognitoforms.com s.ytimg.com d.adroll.com player.vimeo.com api.vimeo.com www.youtube.com static.ads-twitter.com analytics.twitter.com d.adroll.mgr.consensu.org connect.facebook.net cdnjs.cloudflare.com phpstack-448274-1403762.cloudwaysapps.com static.cdn.prismic.io iceim01.iceuc.com s7.addthis.com m.addthis.com code.jquery.com googleapis.com; font-src data: *; img-src data: *; style-src-elem 'unsafe-inline' *; 1
script-src 'unsafe-inline' 'unsafe-eval' rrpproxy.net *.rrpproxy.net *.hotjar.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com www.google.de www.google.com www.gstatic.com data: ; style-src 'unsafe-inline' *.rrpproxy.net *.googleapis.com; upgrade-insecure-requests 1
connect-src 'self' https://*.clicktale.net https://*.demdex.net https://*.doubleclick.net https://*.everesttech.net https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.mktoresp.com https://*.optimizely.com https://*.pingdom.net https://*.reddit.com https://*.securelist.com https://*.securelist.ru https://*.youtube.com https://cdn.securelist.ru https://e.infogram.com https://hn.algolia.com https://kaspersky.d3.sc.omtrdc.net https://kasperskycontenthub.com https://securelist.ru https://tagmanager.google.com https://tpc.googlesyndication.com https://www.google-analytics.com; default-src 'self' https://*.securelist.ru https://cdn.securelist.ru https://kasperskycontenthub.com https://securelist.ru https://tpc.googlesyndication.com; font-src 'self' data: https://*.gstatic.com https://*.securelist.com https://*.securelist.ru https://*.wp.com https://assets.kasperskycontenthub.com https://assets.threatpost.com https://cdn.securelist.ru https://fonts.googleapis.com https://fonts.gstatic.com https://kasperskycontenthub.com https://s0.wp.com https://securelist.ru https://tpc.googlesyndication.com; frame-src 'self' http://*.slideshare.net https://*.addthis.com https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.infogram.com https://*.instagram.com https://*.libsyn.com https://*.marketo.com https://*.securelist.com https://*.securelist.ru https://*.sekindo.com https://*.sharethis.com https://*.slideshare.net https://*.twitter.com https://*.wp.com https://*.youtube.com https://cdn.securelist.ru https://infogram.com https://kasperskycontenthub.com https://player.vimeo.com https://s-static.ak.facebook.com https://securelist.ru https://tagmanager.google.com https://tpc.googlesyndication.com https://w.securelist.com https://widgets.wp.com https://www.brighttalk.com https://www.facebook.com https://www.google.com https://www.youtube.com; img-src 'self' data: http://*.netdna-cdn.com http://*.wordpress.com http://*.wp.com http://assets.kasperskycontenthub.com http://assets.kasperskydaily.com http://assets.threatpost.com http://d2538mqrb7brka.cloudfront.net http://forum.kasperskyclub.ru http://i0.poll.fm http://media.kasperskycontenthub.com http://media.kasperskydaily.com http://media.threatpost.com https://*.addthis.com https://*.cdninstagram.com https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.gravatar.com https://*.gstatic.com https://*.infogram.com https://*.instagram.com https://*.netdna-cdn.com https://*.netdna-ssl.com https://*.securelist.ru https://*.sekindo.com https://*.sharethis.com https://*.staticflickr.com https://*.twimg.com https://*.twitter.com https://*.wordpress.com https://*.wp.com https://*.ytimg.com https://addevent.com https://assets.kasperskycontenthub.com https://assets.kasperskydaily.com https://assets.threatpost.com https://blog.kaspersky.ru https://cdn.securelist.com https://cdn.securelist.ru https://csi.gstatic.com https://d1srlirzdlmpew.cloudfront.net https://d2538mqrb7brka.cloudfront.net https://geo.yahoo.com https://images.telechargement.fr https://instagramimages-a.akamaihd.net https://kaspersky.d2.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://maps.googleapis.com https://media.kasperskycontenthub.com https://media.kasperskydaily.com https://media.threatpost.com https://pbs.twimg.com https://pixel.wp.com https://player.vimeo.com https://polldaddy.com https://rum-collector.pingdom.net https://s.w.org https://s3-eu-west-1.amazonaws.com https://scontent.cdninstagram.com https://securelist.com https://securelist.ru https://stats.g.doubleclick.net https://t.co https://tagmanager.google.com https://threatpost.ru https://tpc.googlesyndication.com https://track.addevent.com https://www.facebook.com https://www.google-analytics.com; object-src 'self' https://*.securelist.ru https://kasperskycontenthub.com https://player.vimeo.com https://polldaddy.com https://securelist.ru https://tpc.googlesyndication.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' http://assets.kasperskycontenthub.com http://assets.threatpost.com https://*.addevent.com https://*.addthis.com https://*.cloudfront.net https://*.crazyegg.com https://*.demdex.net https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.flickr.com https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.googlesyndication.com https://*.gravatar.com https://*.gstatic.com https://*.instagram.com https://*.kaspersky.com https://*.marketo.com https://*.marketo.net https://*.optimizely.com https://*.polldaddy.com https://*.securelist.ru https://*.sekindo.com https://*.sharethis.com https://*.twimg.com https://*.twitter.com https://*.woopra.com https://*.wp.com https://addthisevent.com https://adservice.google.com https://adservice.google.hr https://adservice.google.ru https://apis.google.com https://assets.adobedtm.com https://assets.kasperskycontenthub.com https://assets.threatpost.com https://cdn.api.twitter.com https://cdn.securelist.ru https://connect.facebook.net https://connect.mail.ru https://e.infogram.com https://graph.facebook.com https://kaspersky.d2.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://m.addthisedge.com https://munchkin.marketo.net https://platform.twitter.com https://player.vimeo.com https://polldaddy.com https://rum-static.pingdom.net https://script.crazyegg.com https://secure.gravatar.com https://securelist.ru https://share.yandex.ru/ https://static.ads-twitter.com https://tagmanager.google.com https://tpc.googlesyndication.com https://vk.com https://www.addevent.com https://www.brighttalk.com https://www.flickr.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.googletagservices.com https://www.gstatic.com https://www.linkedin.com; style-src 'self' 'unsafe-inline' http://*.googleapis.com http://assets.kasperskycontenthub.com http://assets.threatpost.com https://*.googleapis.com https://*.gravatar.com https://*.kaspersky.com https://*.marketo.com https://*.securelist.com https://*.securelist.ru https://*.sekindo.com https://*.sharethis.com https://*.twimg.com https://*.twitter.com https://*.wp.com https://assets.kasperskycontenthub.com https://assets.threatpost.com https://cdn.securelist.ru https://fonts.googleapis.com https://kasperskycontenthub.com https://s0.wp.com https://secure.gravatar.com https://securelist.ru https://tagmanager.google.com https://tpc.googlesyndication.com 1
upgrade-insecure-requests; default-src 'self' *.google-analytics.com *.doubleclick.net *.smartrecruiters.com *.spotify.com; img-src 'self' *.google-analytics.com  *.smartrecruiters.com *.spotify.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.pardot.com *.dentsuaegisnetwork.com  *.smartrecruiters.com *.spotify.com; font-src 'self' data: *.gstatic.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.smartrecruiters.com *.spotify.com; frame-src *.spotify.com *.vimeo.com; object-src 'none' 1
default-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; style-src-elem * 'unsafe-inline'; script-src-elem * 'unsafe-inline'; img-src * data:; font-src * data: 1
frame-ancestors 'self' https://*.thesmartlocal.com https://zula.sg https://mustsharenews.com; 1
frame-ancestors app.seidat.com 1
default-src 'self' data: gap: https://*.zscalertwo.net https://*.maersk.com https://*.sealandmaersk.com https://*.sealandmaersk.com.cn https://*.sealand.com https://*.seagoline.com https://*.mcc.com.sg https://*.maerskline.com https://*.apmoller.net https://*.go-mpulse.net https://*.salesforceliveagent.com https://*.force.com *.mpstat.us *.akstat.io https://*.akamaihd.net https://*.igodigital.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://100qrcey9nsltilmpwezagts.blob.core.windows.net https://rum-http-intake.logs.datadoghq.eu https://*.visualforce.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zscalertwo.net https://*.maersk.com https://*.sealandmaersk.com https://*.sealandmaersk.com.cn https://*.sealand.com https://*.seagoline.com https://*.mcc.com.sg https://*.maerskline.com https://*.apmoller.net https://*.akamaihd.net https://*.salesforceliveagent.com https://*.force.com https://*.salesforce.com https://*.steelcentral.net *.mpstat.us *.akstat.io https://*.igodigital.com https://pub.s1.exacttarget.com https://*.gstatic.com https://*.google.com  https://*.googleapis.com https://www.googletagmanager.com https://*.google-analytics.com https://scai.maerskline.com https://api.massrelevance.com https://img.en25.com https://*.bizographics.com https://*.doubleclick.net https://*.linkedin.com https://*.adobedtm.com https://www.datadoghq-browser-agent.com/datadog-rum-eu.js https://www.rumiview.com https://twin-iq.kickfire.com https://tag.simpli.fi https://connect.facebook.net https://snap.licdn.com/li.lms-analytics/insight.min.js https://*.cookieinformation.com; img-src 'self' data: https://*.zscalertwo.net https://*.maersk.com https://*.sealandmaersk.com https://*.sealandmaersk.com.cn https://*.sealand.com https://*.seagoline.com https://*.mcc.com.sg https://*.maerskline.com https://*.apmoller.net https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.gstatic.com https://lh3.googleusercontent.com https://*.steelcentral.net https://*.vimeocdn.com https://*.youtube.com https://*.igodigital.com https://*.akamaihd.net https://www.google.co.uk https://*.linkedin.com https://*.facebook.com https://*.twitter.com https://*.doubleclick.net https://*.google.dk https://scai.maerskline.com https://www.google.com/ads/ga-audiences* https://*.bizographics.com https://twin-iq.kickfire.com https://www.rumiview.com; object-src 'self'; style-src 'self' 'unsafe-inline' https://*.zscalertwo.net https://*.maersk.com https://*.sealandmaersk.com https://*.sealandmaersk.com.cn https://*.sealand.com https://*.seagoline.com https://*.mcc.com.sg https://*.apmoller.net https://*.gstatic.com https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.maerskline.com https://*.force.com; frame-src https://*.zscalertwo.net https://*.maersk.com https://*.sealandmaersk.com https://*.sealandmaersk.com.cn https://*.sealand.com https://*.seagoline.com https://*.mcc.com.sg https://*.maerskline.com https://*.apmoller.net https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.google.com https://www.youtube.com/embed/ https://player.vimeo.com/video/ https://service.force.com https://www.google.com/recaptcha/ https://*.cookieinformation.com https://*.youku.com/ https://*.force.com/ https://*.salesforce.com https://*.doubleclick.net; font-src 'self' data: https://*.zscalertwo.net https://*.maersk.com https://*.sealandmaersk.com https://*.sealandmaersk.com.cn https://*.sealand.com https://*.seagoline.com https://*.mcc.com.sg https://*.maerskline.com https://*.apmoller.net https://*.gstatic.com https://*.googleapis.com; 1
default-src 'none'; base-uri 'self' matomo.sletat.ru; object-src 'none'; block-all-mixed-content; connect-src 'self' sentry.io *.sletat.ru *.sletat.travel *.google.com *.google-analytics.com *.g.doubleclick.net *.yandex.ru *.tildacdn.com app.comagic.ru *.maptiler.com *.sletat.net maker.ifttt.com *.amocrm.ru; font-src 'self' data: *.sletat.ru *.gstatic.com *.tildacdn.com *.tophotels.ru; form-action 'self' data: sletat.ru; frame-ancestors 'self' https://webvisor.com http://webvisor.com; frame-src *.sletat.ru sletat.ostrovok.ru *.google.com *.youtube.com *.fls.doubleclick.net *.g.doubleclick.net *.yandex.ru landing1.vipcruise.ru search.vcruiz.ru *.googletagmanager.com forms.tildacdn.com amosletat.ru *.amocrm.ru  rtb.com.ru blob: tag.rutarget.ru tp.media; child-src blob: https://mc.yandex.ru; img-src 'self' data: *.sletat.ru sletat.ru click.topturizm.ru sletat.ru *.gstatic.com *.googleapis.com *.google.com *.google.ru *.googletagmanager.com *.yandex.ru counter.yadro.ru *.g.doubleclick.net *.maps.yandex.net *.google-analytics.com *.gstatic.com yandex.ru yandex.st www.bontour.ru partner.tophotels.ru *.amocrm.ru blob:; manifest-src 'self'; media-src 'none'; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' *.sletat.ru *.calltouch.ru *.google.com *.google.ru *.googletagservices.com *.gstatic.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.googlesyndication.com *.yandex.ru *.maps.yandex.net *.fls.doubleclick.net *.g.doubleclick.net code.jquery.com cdn.ravenjs.com stat.tildacdn.com app.comagic.ru yastatic.net *.recaptcha.net partner.tophotels.ru *.rutarget.ru amosletat.ru *.amocrm.ru *.youtube.com data:; style-src 'self' data: 'unsafe-inline' *.sletat.ru *.google.com *.googleapis.com *.g.doubleclick.net *.yandex.ru *.maps.yandex.net counter.yadro.ru static.tildacdn.com partner.tophotels.ru *.amocrm.ru; worker-src blob: ; 1
default-src https: 'unsafe-eval' 'unsafe-inline';object-src 'self'; 1
default-src 'self' https://www.google.com; img-src 'self'  *.tinymce.com *.tiny.cloud https://cochinshipyard.com data: blob:; style-src 'self' *.tinymce.com *.tiny.cloud 'unsafe-inline' https://fonts.googleapis.com ; font-src 'self'  https://fonts.gstatic.com  *.tinymce.com *.tiny.cloud data: ; script-src 'self'   'unsafe-inline' 'unsafe-eval' *.tinymce.com *.tiny.cloud; connect-src 'self' *.tinymce.com *.tiny.cloud; 1
default-src 'self' 'report-sample' *.google-analytics.com; script-src *; connect-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src *; frame-src 'self' *.youtube.com www.google.com bid.g.doubleclick.net mangomap.com; font-src 'self' fonts.gstatic.com data:; form-action 'self' https://checkout.globalgatewaye4.firstdata.com; upgrade-insecure-requests; report-uri /errors/cspreport.php; 1
default-src 'unsafe-eval' 'unsafe-inline' 'self' https:; img-src 'self' data: https:; 1
frame-ancestors http://*.nip.io/ 'self' www.miclaroapp.com.co miclaroapp.com.co www.claroaparatiprimero.co claroparatiprimero.co www.apiselfservice.co apiselfservice.co https://servidorclaro-cristianfuentes.c9users.io/ https://www.claro.com.co/ https://miclaroweb-fabricadigital.codeanyapp.com/ sscoqa.tmx-internacional.net www.miclaro.com.co http://aplicaciones.claro.com.co/ http://52.73.130.145/ http://54.82.32.88/; 1
default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors 'none'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://aff.bstatic.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://use.fontawesome.com https://unpkg.com https://api4.windy.com https://api.windy.com https://windy.com https://www.yr.no https://www.windy.com https://pagead2.googlesyndication.com https://adservice.google.cz https://www.googletagservices.com https://tpc.googlesyndication.com https://tagmanager.google.com https://adservice.google.com https://ajax.googleapis.com https://www.google.com https://www.gstatic.com https://booking.previo.cz https://partner.googleadservices.com; frame-ancestors * https://booking.previo.cz; frame-src * https://stats.g.doubleclick.net https://booking.previo.cz/; form-action 'self'; object-src 'none'; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://www.windy.com https://tagmanager.google.com https://www.google.com; base-uri 'none'; 1
default-src 				'self' 'unsafe-eval' 'unsafe-inline' data: https:			;img-src 				* data:			;media-src 				'self' blob: data: 		 	;script-src 				'self' 'unsafe-eval' 'unsafe-inline' 			 	https://www.google-analytics.com 			 	https://app.giveforms.com 				https://www.google.com/recaptcha/api.js 				https://www.gstatic.com 				https://fast.wistia.com 				https://*.googleapis.com 				https://player.vimeo.com 				https://www.youtube.com 				https://platform.twitter.com 				https://s.ytimg.com/yts/jsbin/www-widgetapi-vfle7xYY2/www-widgetapi.js 				https://cdn.syndication.twimg.com/timeline/profile 				https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5.13.0/css/all.min.css 				https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5.13.0/css/v4-shims.min.css 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/lib/codemirror.min.css 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/lib/codemirror.min.js 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/addon/mode/loadmode.min.js 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/mode/htmlmixed/htmlmixed.min.js 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/mode/xml/xml.min.js 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/mode/javascript/javascript.min.js 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/mode/css/css.min.js 			;script-src-elem 				'self' 'unsafe-eval' 'unsafe-inline' 			 	https://www.google-analytics.com 			 	https://app.giveforms.com 				https://www.google.com/recaptcha/api.js 				https://www.gstatic.com 				https://fast.wistia.com 				https://*.googleapis.com 				https://player.vimeo.com 				https://www.youtube.com 				https://platform.twitter.com 				https://s.ytimg.com/yts/jsbin/www-widgetapi-vfle7xYY2/www-widgetapi.js 				https://cdn.syndication.twimg.com/timeline/profile 				https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5.13.0/css/all.min.css 				https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5.13.0/css/v4-shims.min.css 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/lib/codemirror.min.css 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/lib/codemirror.min.js 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/addon/mode/loadmode.min.js 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/mode/htmlmixed/htmlmixed.min.js 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/mode/xml/xml.min.js 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/mode/javascript/javascript.min.js 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/mode/css/css.min.js 			;style-src 				'self' 'unsafe-eval' 'unsafe-inline' 				https://*.googleapis.com 				https://platform.twitter.com 				https://ton.twimg.com/tfw/css/syndication_bundle_v1_73385286cca9d2256f6bf3993470820d4827b058.css 				https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5.13.0/css/all.min.css 				https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5.13.0/css/v4-shims.min.css 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/lib/codemirror.min.css 			;style-src-elem 				'self' 'unsafe-inline' 				https://*.googleapis.com 				https://platform.twitter.com 				https://ton.twimg.com/tfw/css/syndication_bundle_v1_73385286cca9d2256f6bf3993470820d4827b058.css 				https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5.13.0/css/all.min.css 				https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5.13.0/css/v4-shims.min.css 				https://cdn.jsdelivr.net/npm/codemirror@5.41.0/lib/codemirror.min.css 			;style-src-attr 				'self' 'unsafe-inline'			; 1
frame-ancestors 'self' https://neo.finance.si https://akademija-finance.si https://www.ntk.si/ https://next.brella.io/ 1
form-action 'self' https://joomlacontenteditor.us14.list-manage.com/subscribe/post; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://checkout.paddle.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://code.jquery.com https://www.paypal.com https://www.paypalobjects.com https://checkout.stripe.com https://cdn.paddle.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdn.paddle.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; object-src 'self' 1
4 1
default-src 'self';      object-src http://*.neulion.net https://*.neulion.net;      connect-src 'self' *.doubleclick.net www.google-analytics.com https://*.twitter.com https://*.instagram.com http://*.twitter.com http://*.instagram.com https://*.visualstudio.com http://*.visualstudio.com;     script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tiktok.com http://*.tiktok.com https://*.tiktokcdn.com http://*.tiktokcdn.com https://*.unpkg.com http://unpkg.com https://unpkg.com http://*.unpkg.com https://*.google.com http://*.google.com https://*.gstatic.com http://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.visualstudio.com https://*.jquery.com https://*.msecnd.net https://*.bootstrapcdn.com https://cdnjs.cloudflare.com https://*.instagram.com https://*.twitter.com https://*.twimg.com https://cdn.iframe.ly http://*.bootstrapcdn.com http://cdnjs.cloudflare.com http://*.instagram.com http://*.twitter.com http://*.twimg.com http://cdn.iframe.ly http://*.msecnd.net http://*.visualstudio.com http://*.jquery.com http://*.googletagmanager.com http://*.google-analytics.com;     frame-src 'self' https://*.tiktok.com http://*.tiktok.com https://*.msgnetworks.com https://*.msgnetworks.com https://cdn.iframe.ly https://twitter.com https://vimeo.com https://*.vimeo.com https://*.nhl.com https://*.sportsnet.ca https://*.tsn.ca https://*.espn.com https://*.google.com https://*.instagram.com https://*.youtube.com https://*.twitter.com http://cdn.iframe.ly http://*.google.com http://*.instagram.com http://*.youtube.com http://*.twitter.com http://*.nhl.com http://*.sportsnet.ca http://*.tsn.ca http://*.espn.com http://twitter.com http://vimeo.com http://*.vimeo.com;     style-src 'self' 'unsafe-inline' https://*.twimg.com http://*.twimg.com https://*.googleapis.com https://*.twitter.com https://*.instagram.com https://*.bootstrapcdn.com https://cdnjs.cloudflare.com http://*.googleapis.com http://*.twitter.com http://*.instagram.com http://*.bootstrapcdn.com https://cdnjs.cloudflare.com;     font-src 'self' https://cdnjs.cloudflare.com https://*.bootstrapcdn.com https://cdn.ckeditor.com https://fonts.gstatic.com http://cdnjs.cloudflare.com http://*.bootstrapcdn.com http://cdn.ckeditor.com http://fonts.gstatic.com;     img-src 'self' https://*.doubleclick.net http://*.doubleclick.net https://*.google-analytics.com https://i.ytimg.com https://media.nhlpa.com https://cdn.nhlpa.com https://cdnorigin.nhlpa.com https://twitter.com https://cdn.agilitycms.com https://*.twitter.com https://*.instagram.com  https://*.twimg.com http://i.ytimg.com http://media.nhlpa.com http://cdn.nhlpa.com http://cdnorigin.nhlpa.com http://twitter.com http://cdn.agilitycms.com http://*.twitter.com http://*.instagram.com http://*.twimg.com data: blob: http://*.google-analytics.com 1
default-src https: data: 'unsafe-inline' 'unsafe-eval 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: https://domeneoppslag.lab.norid.no https://domeneoppslag.norid.no https://use.fontawesome.com https://fonts.gstatic.com 1
default-src 'self'; frame-src 'self' data: blob: www.nbcnews.com www.smart911.com www.youtube.com; frame-ancestors 'self' smart911.com *.smart911.com *.raveu.com *.getrave.com getrave.com *.zendesk.com; font-src 'self' data: *.gstatic.com; connect-src 'self' *.twiliocdn.com wss://*.twilio.com *.twilio.com *.mapbox.com wss://smart911.com wss://www.smart911.com translate.googleapis.com; child-src 'self' www.nbcnews.com www.youtube.com wss://smart911.com wss://www.smart911.com; object-src 'self' 'unsafe-inline' blob: data: smart911.com; style-src 'self' 'unsafe-inline' *.googleapis.com; img-src * 'self' blob: data: *.mapbox.com *.getrave.com *.smart911.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.twiliocdn.com *.twilio.com *.google.com *.google-analytics.com *.googleapis.com *.hscta.net *.hubspot.com *.mapbox.com *.nbcnews.com www.sc.pages05.net 1
default-src https: data: 'unsafe-inline' 'unsafe-eval' ; 1
frame-ancestors 'self' https://my.stcu.org https://spokanestaging.orb.alkamitech.com https://developer.dev.alkamitech.com 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' code.jquery.com www.googletagmanager.com d3rxaij56vjege.cloudfront.net viewer.cylindo.com maps.google.com maps.googleapis.com www.google-analytics.com www.flexsteel-kiosk.com; img-src * data: 1
default-src 'self' *.iauctb.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com ; frame-ancestors 'self' https://trustseal.enamad.ir 1
default-src * 'unsafe-eval' 'unsafe-inline';block-all-mixed-content;upgrade-insecure-requests 1
default-src 'self' https://*.guidehouse.com https://*.navigant.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.guidehouse.com https://*.navigant.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://ajax.googleapis.com https://optimize.google.com https://code.jquery.com https://img.en25.com https://s2090192166.t.eloqua.com https://www.youtube.com https://s.ytimg.com https://*.linkedin.com https://*.licdn.com https://siteimproveanalytics.com https://*.ceros.com https://*.mouseflow.com https://geolocation.onetrust.com https://optanon.blob.core.windows.net https://cdn.cookielaw.org; img-src 'self' data: https://*.guidehouse.com https://*.navigant.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://optimize.google.com https://www.google.com https://s2090192166.t.eloqua.com https://i.ytimg.com https://static.licdn.com https://optanon.blob.core.windows.net https://cdn.cookielaw.org https://*.doubleclick.net https://*.siteimproveanalytics.io; style-src 'self' 'unsafe-inline' https://*.guidehouse.com https://*.navigant.com https://tagmanager.google.com https://fonts.googleapis.com https://optimize.google.com https://www.youtube.com https://cdn.jsdelivr.net https://*.typekit.net https://cloud.typography.com https://optanon.blob.core.windows.net https://cdn.cookielaw.org; font-src 'self' data: https://*.guidehouse.com https://*.navigant.com https://fonts.gstatic.com https://*.typekit.net; frame-src 'self' mailto: https://*.guidehouse.com https://*.navigant.com http://sdn.sitecore.net https://www.youtube.com https://navigant.postclickmarketing.com https://www.slideshare.net https://w.soundcloud.com https://platform.linkedin.com https://*.ceros.com https://optimize.google.com; child-src 'self' https://*.guidehouse.com https://*.navigant.com http://sdn.sitecore.net https://www.youtube.com https://navigant.postclickmarketing.com https://www.slideshare.net https://w.soundcloud.com; connect-src 'self' https://*.guidehouse.com https://*.navigant.com https://www.google-analytics.com https://*.cookielaw.org https://*.mouseflow.com; 1
script-src 'unsafe-inline' https: http: 'unsafe-eval'; object-src 'none'; base-uri 'self'; 1
default-src 'self' *.shannons.com.au; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.shannons.com.au *.typekit.net *.youtube.com *.ytimg.com *.ensighten.com *.googletagmanager.com *.plavxml.com *.bugherd.com *.facebook.net *.clicktale.net *.google.com *.google.com.au *.googleapis.com *.google-analytics.com *.googleadservices.com *.g.doubleclick.net *.moatads.com *.addthis.com *.addthisedge.com *.cloudfront.net *.siteintercept.qualtrics.com blob:; connect-src 'self' *.shannons.com.au *.demdex.net suncorpmetwayltd.tt.omtrdc.net *.vimeo.com *.clicktale.net *.addthis.com *.suncorp.com.au *.qualtrics.com *.typekit.net sessions.bugsnag.com *.bugherd.com *.cloudfront.net *.pusher.com *.google-analytics.com *.g.doubleclick.net frankmooreadvertising.createsend.com; img-src 'self' *.shannons.com.au *.ytimg.com *.vimeocdn.com *.clicktale.net *.g.doubleclick.net *.ensighten.com *.google.com *.google.com.au *.facebook.com *.google-analytics.com *.googletagmanager.com *.plavxml.com *.typekit.net *.cloudfront.net bugherd-attachments.s3.amazonaws.com data:; style-src 'self' 'unsafe-inline' *.shannons.com.au *.typekit.net *.googleapis.com *.bootstrapcdn.com *.cloudfront.net; font-src 'self' *.shannons.com.au *.typekit.net *.gstatic.com *.bootstrapcdn.com *.cloudfront.net *.bugherd.com data:; frame-src 'self' *.shannons.com.au *.youtube.com *.vimeo.com *.demdex.net *.g.doubleclick.net *.fls.doubleclick.net *.addthis.com *.nextlot.com *.google.com; media-src 'self' *.shannons.com.au *.vimeo.com *.youtube.com *.facebook.com *.akamaized.net *.cloudfront.net 1
default-src 'none'; script-src 'self' 'unsafe-inline' dk91kmsnfr6kg.cloudfront.net *.fugle.tw:* call.chatra.io apis.google.com www.googletagmanager.com d.line-scdn.net www.google-analytics.com graph.facebook.com connect.facebook.net cdn.mxpnl.com/libs/mixpanel-2-latest.min.js cdn.polyfill.io/v2/polyfill.min.js; font-src 'self' data: dk91kmsnfr6kg.cloudfront.net fonts.gstatic.com; connect-src 'self' dk91kmsnfr6kg.cloudfront.net wss://*.fugle.tw:* *.fugle.tw:* www.facebook.com www.google-analytics.com api.mixpanel.com api-js.mixpanel.com stats.g.doubleclick.net; img-src 'self' data: dk91kmsnfr6kg.cloudfront.net *.fugle.tw:* www.facebook.com platform-lookaside.fbsbx.com lookaside.facebook.com profile.line-scdn.net scontent.xx.fbcdn.net www.google.com/ads/ www.google.com.tw/ads/ www.google-analytics.com graph.facebook.com fbcdn-profile-a.akamaihd.net *.googleusercontent.com csi.gstatic.com s3-ap-northeast-1.amazonaws.com i.imgur.com www.wearn.com *.medium.com i.ytimg.com; style-src 'self' 'unsafe-inline' dk91kmsnfr6kg.cloudfront.net fonts.googleapis.com; child-src chat.chatra.io content.googleapis.com social-plugins.line.me s-static.ak.facebook.com staticxx.facebook.com www.youtube.com accounts.google.com static.ak.facebook.com www.facebook.com *.fugle.tw *.esunsec.com.tw; media-src 'self'; frame-ancestors 'self' *.fugle.tw *.esunsec.com.tw; base-uri 'none';object-src 'none'; form-action 'self' www.facebook.com/tr/; manifest-src 'self'; 1
frame-ancestors 'self' https://*.bigbrotherawards.nl 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data:  1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline'  'unsafe-eval' https://* http://*; style-src 'self' 'unsafe-inline' blob: https://* ; img-src 'self' data: https://* http://*; frame-src 'self' https://* http://*; connect-src 'self' https://*; report-uri /report-csp-violation 1
frame-ancestors 'self' https://www.hvfcuonline.org 1
default-src 'self'; img-src * 'unsafe-inline' data:; style-src * 'unsafe-inline'; font-src * 'unsafe-inline'; script-src * 'unsafe-inline'; frame-src * 'unsafe-inline'; connect-src * 'unsafe-inline' 1
font-src *.fontawesome.com *.bootstrapcdn.com *.photoslurp.com *.googleapis.com *.gstatic.com *.sia.eu 3ds.sia.eu 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net *.cardinalcommerce.com *.authorize.net *.facebook.com *.adyen.com 3ds.sia.eu * 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.authorize.net *.paypal.com *.iubenda.com *.facebook.com *.google.com https://player.vimeo.com *.test.adyen.com *.adyen.com *.photoslurp.com *.danieledallabona.com *.sia.eu 3ds.sia.eu *.arcot.com *.youtube.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.magentocommerce.com *.www.google-analytics.com *.paypal.com *.ytimg.com *.doubleclick.net *.photoslurp.com *.facebook.com *.google.co.in *.google.com 'self' data: *.fizik.com https://www.google.it *.livestory.io *.test.adyen.com *.adyen.com *.zoorate.com *.feedaty.com https://black.bird.eu *.omtrdc.net *.placeholder.com dqwcrm8p9oclf.cloudfront.net *.cloudfront.net *.verifiedbyvisa.com * *.sia.eu 3ds.sia.eu *.amcglobal.sc.omtrdc.net 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com *.vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.paypal.com *.ytimg.com *.google.com *.authorize.net *.braintreegateway.com *.signifyd.com *.livestory.io *.photoslurp.com *.youtube.com *.google-analytics.com *.iubenda.com *.googletagmanager.com *.facebook.net *.gstatic.com *.test.adyen.com *.adyen.com https://chimpstatic.com *.zoorate.com *.clerk.io *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.getfirebug.com *.bootstrapcdn.com *.photoslurp.com *.livestory.io *.googleapis.com *.zoorate.com dqwcrm8p9oclf.cloudfront.net *.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.livestory.io *.getfirebug.com *.photoslurp.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cardinalcommerce.com *.photoslurp.com *.iubenda.com *.livestory.io *.dpm.demdex.net *.google.com *.googleusercontent.com *.google-analytics.com *.avada.io *.facebook.com *.doubleclick.net *.adyen.com *.amcglobal.sc.omtrdc.net 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data: 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline'; worker-src https: 1
connect-src 'self' *.adtraction.com *.akamaihd.net *.altruistictask.com *.areyouahuman.com *.bing.com *.ciuvo.com *.cloudflare.com *.davebestdeals.com *.delti.com *.deltipartners-scheduler.com *.jquery.com *.mxpnl.net *.optimizely.com *.paypal.com *.paypalobjects.com *.reifendirekt.de *.sovendus.com *.srvtrck.com *.uc.cn *.veinteractive.com *.webmasterplan.com *.windows.net ajax.googleapis.com d3g3bgnlkdwk4h.cloudfront.net data jsctool.com razorsql.com tdsrmbl.net translate.googleapis.com wss://*.promote.ro:9091 wss://*.promote.ro:9400 wss://*.reifendirekt.de; default-src 'self' *.bootstrapcdn.com *.delti.com *.jfnet.de *.optimizely.com *.reifendirekt.de *.trustpilot.com fonts.googleapis.com; font-src 'self' *.bootstrapcdn.com *.davebestdeals.com *.delti.com *.googleusercontent.com *.gstatic.com *.paypalobjects.com *.trustedshops.com data data:; frame-ancestors *; frame-src 'self' *.ad-srv.net *.adform.net *.adrtx.net *.akamaihd.net *.aklamio.com *.amazonaws.com *.areyouahuman.com *.awin1.com *.azureedge.net *.billiger.de *.blackfridaysale.de *.cashbackjournal.de *.check24.de *.cmptch.com *.comprigo.com *.cptrack.de *.criteo.com *.criteo.net *.davebestdeals.com *.delti.com *.deltipartners-scheduler.com *.donation-tools.org *.doubleclick.net *.dtscout.com *.everestjs.net *.everesttech.net *.facebook.com *.foxydeal.com *.gecirtnotification.com *.go.com *.google.com *.google.de *.googlesyndication.com *.haix.de *.hwcdn.net *.kpcustomer.de *.kweriee.com *.lenua.de *.mslinktrack.com *.optimizely.com *.partner-versicherung.de *.paypal.com *.q-sis.de *.reifendirekt.de *.rollapp.com *.safer-shopping.de *.sandbox.paypal.com *.seadform.net *.securesrv12.com *.sovendus.com *.srvtrck.com *.surveymonkey.com *.theadex.com *.tradedoubler.com *.trustpilot.com *.veinteractive.com *.webmasterplan.com *.yadore.com *.yahoo.com *.youtube-nocookie.com *.youtube.com *.zanox.com *.zscloud.net bispadisch.de bonusdirekt.de ciuvo.com d2p5uuu8vyzvbv.cloudfront.net data found.de jo.de preisvergleich123.com s3.eu-central-1.amazonaws.com trolliger.de; img-src 'self' *.adform.net *.adition.com *.adnxs.com *.adsrvr.org *.akamaihd.net *.alcar-wheels.com *.amazonaws.com *.amung.us *.andasa.de *.awin1.com *.billiger.com *.billiger.de *.bing.com *.bluekai.com *.cnnx.io *.criteo.com *.criteo.net *.crwdcntrl.net *.davebestdeals.com *.delti.com *.digitaloptout.com *.doubleclick.net *.ebayimg.com *.everesttech.net *.facebook.com *.fagms.net *.google-analytics.com *.google.ae *.google.al *.google.at *.google.az *.google.ba *.google.be *.google.bg *.google.bs *.google.by *.google.ca *.google.ch *.google.cl *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.kr *.google.co.ma *.google.co.nz *.google.co.th *.google.co.uk *.google.co.za *.google.com *.google.com.au *.google.com.br *.google.com.cu *.google.com.cy *.google.com.do *.google.com.eg *.google.com.mx *.google.com.na *.google.com.om *.google.com.pe *.google.com.ph *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.vn *.google.cz *.google.de *.google.dk *.google.ee *.google.es *.google.fi *.google.fr *.google.ge *.google.gr *.google.hr *.google.hu *.google.ie *.google.is *.google.it *.google.jo *.google.kg *.google.kz *.google.li *.google.lt *.google.lu *.google.lv *.google.md *.google.mk *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.rs *.google.ru *.google.sc *.google.se *.google.si *.google.sk *.google.tn *.googleapis.com *.gstatic.com *.hklmm.com *.igstatic.com *.jfnet.de *.mse-berg.int *.optimizely.com *.payback.de *.paypal.com *.paypalobjects.com *.pirelli.com *.pmddby.com *.pricerunner.com *.prudsys-rde.de *.reifendirekt.de *.reifentest.com *.sandbox.paypal.com *.sdccdn.com *.shopmania.org *.shopping.com *.sovendus.com *.srvtrck.com *.stathat.com *.surveymonkey.com *.t-online.de *.theadex.com *.trustpilot.com *.tyre-pictures.com *.veinteractive.com *.visualwebsiteoptimizer.com *.wt-eu02.net *.yandex.ru *.ytimg.com *.zscalertwo.net *.zscloud.net cdnlvry.xyz cdnnetwok.xyz ciuvo.com data data: glganltcs.space gzhls.at icontent.us khms0.googleapis.com khms1.googleapis.com maps.googleapis.com mts.googleapis.com mtst.io netanalitics.space netanalytics.xyz netanalyzer.space netcheckcdn.xyz spedcheck.space worldnaturenet.xyz; object-src 'self' *.delti.com data jsctool.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.acestream.net *.adform.net *.adrtx.net *.akamaihd.net *.akamoihd.net *.amazonaws.com *.awin1.com *.bing.com *.bizrate.com *.bootstrapcdn.com *.cdn77.org *.cheklaby.com *.cloudflare.com *.cloudfront.net *.cmptch.com *.criteo.com *.criteo.net *.davebestdeals.com *.dcbap.com *.delti.com *.deltipartners-scheduler.com *.demdex.net *.digitaloptout.com *.donation-tools.org *.doubleclick.net *.dtscout.com *.dwin1.com *.eshopcomp.com *.eurosty.com *.everestjs.net *.everesttech.net *.eyeota.net *.facebook.net *.fagms.net *.foxydeal.com *.gocloudly.com *.google-analytics.com *.google.com *.google.de *.google.es *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.gutscheinconnection.de *.histats.com *.image2play.com *.linkuryjs.info *.mein-bmi.com *.miazuz.com *.microsofttranslator.com *.mondo.chat *.mouse3k.com *.mse-berg.int *.onclasrv.com *.open-dog.com *.opendns.com *.optimizely.com *.orange81safe.com *.paypal.com *.pmddby.com *.pomrolo.com *.q-divisioncdn.de *.q-sis.de *.reifendirekt.de *.routenplaner-karten.com *.scopich.com *.securesrv12.com *.shopello.net *.similardeals.net *.sovendus.com *.surveymonkey.com *.theadex.com *.tiekinetix.net *.trustpilot.com *.twitter.com *.ubersetzung-app.com *.veinteractive.com *.visualwebsiteoptimizer.com *.walkme.com *.webmasterplan.com *.windows.net *.wirkaufendeinauto.de *.wkda.de *.xcetkbl.com *.yandex.ru *.zanox.com *.zargu.com *.zscaler.net *.zscalertwo.net *.zscloud.net 4ddons.com adtr.io d31bfnnwekbny6.cloudfront.net data data: dnn506yrbagrg.cloudfront.net eluxer.net entrypoints-production.herokuapp.com glganltcs.space icontent.us imgsrv.io jsctool.com loadingpagesos.win loadingpaqes.info maps.googleapis.com mtst.io natproxy.ws netanalitics.space netanalytics.xyz netanalyzer.space netcheckcdn.xyz nprixy.net quick-searcher-world.biz rs.clic2buy.com s3-us-west-2.amazonaws.com s3.amazonaws.com spedcheck.space urlvalidation.com worldnaturenet.xyz; style-src 'self' 'unsafe-inline' *.boost-project.com *.bootstrapcdn.com *.davebestdeals.com *.delti.com *.googleapis.com *.mein-grundeinkommen.de *.reifendirekt.de *.sovendus.com *.trustedshops.com *.veinteractive.com *.zscaler.net *.zscalertwo.net *.zscloud.net data fonts.googleapis.com; 1
base-uri 'none'; object-src 'none'; script-src https://elixirforum.com/logs/ https://elixirforum.com/sidekiq/ https://elixirforum.com/mini-profiler-resources/ https://elixirforum.com/assets/ https://elixirforum.com/brotli_asset/ https://elixirforum.com/extra-locales/ https://elixirforum.com/highlight-js/ https://elixirforum.com/javascripts/ https://elixirforum.com/plugins/ https://elixirforum.com/theme-javascripts/ https://elixirforum.com/svg-sprite/; worker-src 'self' https://elixirforum.com/assets/ https://elixirforum.com/brotli_asset/ https://elixirforum.com/javascripts/ https://elixirforum.com/plugins/ 1
default-src 'self'; connect-src 'self' data: 'unsafe-inline' https://bat.bing.com https://assets.adobedtm.com https://*.adobedtm.com http://*.amegybank.com https://*.amegybank.com https://*.omtrdc.net https://*.demdex.net https://*.cludo.com https://sumo.com https://*.sumo.com https://*.sumome.com https://sumo.b-cdn.net https://*.visualwebsiteoptimizer.com https://app.vwo.com https://zionsbancorp.sc.omtrdc.net 'unsafe-eval'; script-src 'self' data: 'unsafe-inline' https://www.google-analytics.com https://bat.bing.com https://assets.adobedtm.com https://*.adobedtm.com https://*.doubleclick.net https://connect.facebook.net https://*.googletagmanager.com https://*.googleadservices.com https://*.googleapis.com https://*.gstatic.com https://*.google.com http://*.amegybank.com https://*.amegybank.com https://*.zionsbank.com https://*.cludo.com https://sumo.com https://*.sumo.com https://*.sumome.com https://sumo.b-cdn.net https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.youtube.com https://*.ytimg.com https://*.vimeo.com 'unsafe-eval'; object-src 'self' data: http://*.amegybank.com https://*.amegybank.com; style-src 'self' data: 'unsafe-inline' https://*.googleapis.com https://*.google.com https://*.cludo.com https://sumo.com https://*.sumo.com https://*.sumome.com https://sumo.b-cdn.net; img-src 'self' data: 'unsafe-inline' https://www.google-analytics.com https://p.adsymptotic.com https://px.ads.linkedin.com https://bat.bing.com https://www.facebook.com https://*.doubleclick.net https://*.gstatic.com http://*.amegybank.com https://*.amegybank.com https://*.online-metrix.net https://*.omtrdc.net https://*.demdex.net https://*.everesttech.net https://*.googleapis.com https://*.google.com https://*.cludo.com https://sumo.com https://*.sumo.com https://*.sumome.com https://sumo.b-cdn.net https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.youtube.com https://*.ytimg.com https://*.vimeo.com 'unsafe-eval'; media-src 'self' data:; frame-src 'self' data: 'unsafe-inline' http://*.amegybank.com https://*.amegybank.com https://rise.articulate.com https://*.online-metrix.net https://*.issuu.com https://*.doubleclick.net https://*.demdex.net https://secure.checkout.visa.com https://assets.secure.checkout.visa.com https://*.youtube.com https://*.ytimg.com https://*.vimeo.com https://*.pages05.net https://*.brightcove.net https://*.visualwebsiteoptimizer.com https://app.vwo.com https://outlook.office365.com; frame-ancestors 'self' https://banking.amegybank.com 'unsafe-eval'; font-src 'self' data: 'unsafe-inline' https://fonts.gstatic.com https://*.visualwebsiteoptimizer.com https://app.vwo.com; upgrade-insecure-requests; block-all-mixed-content 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*; style-src 'unsafe-inline' fonts.googleapis.com 'unsafe-inline' https://*; form-action 'self'; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com data:; worker-src https://* https://www.decorist.com https://www.dspdev.decorist.com https://www.dev.decorist.com https://stage.decorist.com *.decorist.com; img-src 'self' http://media.decorist.com http://cdn.decorist.com data: https://*; frame-ancestors 'self'; connect-src 'self' https://*; base-uri *.decorist.com *.localhost; object-src 'none'; frame-src https://*; media-src 'self' https://* http://media.decorist.com http://cdn.decorist.com; default-src 'none' 1
frame-ancestors 'self' *.sitebuilder.com; 1
default-src * 'unsafe-eval' 'unsafe-inline' blob: data: ; 1
frame-ancestors *.styleshare.kr happytalk.io 1
frame-ancestors 'self' https://app.adrianflux.co.uk https://www.bikesure.co.uk 1
default-src 'self';script-src 'self' 'nonce-2PQ6DxNwdCXbCbNP8gcnukC3u'; style-src 'self' 'nonce-2PQ6DxNwdCXbCbNP8gcnukC3u'; object-src 'none';base-uri 'self';img-src 'self' https:;connect-src 'self' https://pagure.io:8088;frame-src https://docs.pagure.org;frame-ancestors https://pagure.io; 1
frame-ancestors 'self' *.facebook.com facebook.com info.feversocial.com info.feversocial.com feversocial.com *.feversocial.com 1
frame-ancestors https://*.omantel.om 1
default-src 'self' https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; img-src 'self' data: https: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.wpmucdn.com https://www.googletagmanager.com https://munchkin.marketo.net https://www.googleadservices.com https://snap.licdn.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://app-e.marketo.com https://*.wistia.com; style-src 'self' 'unsafe-inline' https://*.wpmucdn.com https://use.typekit.net https://fonts.googleapis.com https://p.typekit.net https://munchkin.marketo.net https://app-e.marketo.com; img-src 'self' data: https://*.smushcdn.com https://secure.gravatar.com https://www.googletagmanager.com https://px.ads.linkedin.com https://www.google-analytics.com https://www.google.com https://www.linkedin.com/px https://www.google.cz https://googleads.g.doubleclick.net https://*.wistia.com https://*.satmetrix.com; connect-src 'self' https://338-ejp-431.mktoresp.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.wistia.com https://*.litix.io; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://use.typekit.net; media-src 'self' blob:; child-src 'self' blob:; form-action 'self'; object-src 'none'; frame-src 'self' https://app-e.marketo.com https://*.wistia.com https://*.wistia.net https://*.satmetrix.com 1
img-src 'self' https://*.902.gr data: https://www.google-analytics.com; 1
frame-ancestors 'self' https://*.zolostays.com https://ameyo.zolostays.in:8443 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data:; media-src blob: data: https:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests; frame-ancestors 'self'; 1
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' frame-ancestors 'self'  *.bigcommerce.com 1
default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval'; style-src * 'self' data: 'unsafe-inline' 'unsafe-hashes'; 1
default-src 'self' f1.media.brightcove.com bam.nr-data.net www.google-analytics.com *.hotjar.io *.hotjar.com www.youtube.com viz.tools.investis.com edge.api.brightcove.com; img-src 'self' *.lfeeder.com metrics.brightcove.com f1.media.brightcove.com www.google.co.in www.google.com stats.g.doubleclick.net viz.tools.investis.com *.gstatic.com tagmanager.google.com www.googletagmanager.com i.ytimg.com www.google-analytics.com; frame-src 'self' indd.adobe.com e.issuu.com www.google.com player.vimeo.com otp.tools.investis.com irs.tools.investis.com www.youtube.com *.hotjar.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' tagmanager.google.com fonts.googleapis.com viz.tools.investis.com; font-src 'self' tagmanager.google.com viz.tools.investis.com fonts.gstatic.com fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.lfeeder.com viz.tools.investis.com www.gstatic.com www.google.com bam.nr-data.net js-agent.newrelic.com tagmanager.google.com *.googleapis.com cdn.jsdelivr.net www.google-analytics.com viz.tools.investis.com *.hotjar.com www.googletagmanager.com www.youtube.com s.ytimg.com  s.go-mpulse.net; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com wss://*.hotjar.com *.go-mpulse.net *.brightcove.com *.akstat.io *.google-analytics.com *.doubleclick.net *.akamaihd.net; 1
default-src 'self' https://stats.g.doubleclick.net https://*.rackcdn.com https://*.googlesyndication.com/ https://googleads.g.doubleclick.net/ https://ourworldindata.org/grapher/ https://edweek.carto.com/builder/ https://estatic.languagecourse.net https://widget.getyourguide.com/ https://mc.yandex.ru/watch/ *.twitter.com https://www.google.com/ *.googleapis.com https://www.google-analytics.com/ https://www.youtube.com/ https://youtube.com/ *.addthis.com https://staticxx.facebook.com https://g.jwpsrv.com https://www.paypal.com/ https://sis.redsys.es/ https://tunein.com/ *.youtube.com/subscribe_embed accounts.google.com bid.g.doubleclick.net https://secure.languagecourse.net https://pay.skrill.com *.moneybookers.com https://vt-api.com.es/ www.facebook.com; img-src 'self' data: *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.youtube.com/ https://securepubads.g.doubleclick.net/ https://kit.fontawesome.com/ https://www.googletagservices.com/ https://*.googlesyndication.com/ https://estatic.languagecourse.net/ https://instant.page/ https://*.getyourguide.com/ https://bat.bing.com/ https://mc.yandex.ru/metrika/tag.js *.twimg.com *.addthisedge.com *.addthis.com *.gstatic.com *.google.com *.twitter.com https://code.jquery.com https://www.googletagmanager.com https://s.ytimg.com/ https://www.youtube.com/iframe_api https://ssl.p.jwpcdn.com https://content.jwplatform.com *.googleapis.com google-analytics.com connect.facebook.net https://unpkg.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.googletagmanager.com maxcdn.bootstrapcdn.com *.cloudflare.com apis.google.com; font-src 'self' https://cdnjs.cloudflare.com https://kit-free.fontawesome.com/ ssl.p.jwpcdn.com fonts.googleapis.com fonts.gstatic.com *.bootstrapcdn.com https://estatic.languagecourse.net; style-src 'self' 'unsafe-inline' *.twimg.com *.twitter.com https://kit-free.fontawesome.com https://unpkg.com/ https://ssl.p.jwpcdn.com fonts.googleapis.com code.jquery.com *.bootstrapcdn.com https://estatic.languagecourse.net/ 1
default-src https://optimize.google.com 'self'; font-src https://fonts.google.com https://fonts.gstatic.com https://optimize.google.com https://fonts.googleapis.com 'self' data:; style-src https://fonts.google.com https://fonts.gstatic.com https://optimize.google.com https://fonts.googleapis.com 'self' 'unsafe-inline'; img-src https://static3.santander.pl https://rt.inistrack.net https://stats.g.doubleclick.net https://www.facebook.com https://pixel.wp.pl https://my.tealiumiq.com https://*.googleapis.com static.yourcx.io https://www.google.pl https://maps.gstatic.com https://maps.google.com https://user-event-tracker.crazyegg.com https://static3.bzwbk.pl https://bankmozliwosci.santander.pl https://www.googletagmanager.com www.google.com http://www.webankieta.pl www.google-analytics.com 'self' data:; frame-src http://bank.santander.pl https://invis.io https://optimize.google.com https://ent.activeforms.com http://ent.activeforms.com opinia.santander.pl http://formularze.santander.pl https://www.webankieta.pl https://cloud.webankieta.pl http://datacloud.tealiumiq.com https://santandertfi.pl https://formularze.santander.pl https://projects.invisionapp.com http://santanderleasing.pl https://tutajdoladuj.blue.pl https://datacloud.tealiumiq.com *.doubleclick.net https://bank.santander.pl https://partner-it.com.pl https://www.youtube.com 'self'; script-src https://www.script.crazyegg.com https://santanderleasing.pl https://optimize.google.com https://www.googleadservices.com https://stats.g.doubleclick.net https://pixel.wp.pl https://maps.googleapis.com http://www.script.crazyegg.com https://googleads.g.doubleclick.net https://maps.google.com https://user-event-tracker.crazyegg.com https://code.jquery.com www.google.com https://visitor-service-eu-central-1.tealiumiq.com https://www.youtube.com www.google-analytics.com https://www.google.com https://connect.facebook.net https://tags.tiqcdn.com https://s.ytimg.com https://script.crazyegg.com https://cloud.webankieta.pl static.yourcx.io https://omnibot.santander.pl https://maps.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com http://script.crazyegg.com https://files.webankieta.pl 'self' 'unsafe-eval' 'unsafe-inline'; object-src 'self'; connect-src https://omnibot.santander.pl https://www.google-analytics.com https://my.tealiumiq.com https://stats.g.doubleclick.net https://collect.tealiumiq.com 'self' 1
base-uri 'self' default-src 'self' script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* https://yubinbango.github.io/yubinbango-data/data/162.js https://f.vimeocdn.com/js/froogaloop2.min.js https://www.taglog.jp/taglog.js https://www.taglog.jp/paidy.com/taglog-x.js adon.co.jp *.hs-banner.com *.hs-analytics.net *.hscollectedforms.net *.hs-scripts.com www.googletagmanager.com www.google-analytics.com www.google.com s.yimg.jp statics.a8.net *.ebis.ne.jp style-src 'self' data: 'unsafe-inline' adon.co.jp paidy-staging.com paidy.com paidy.dev fonts.googleapis.com object-src 'none' form-action 'self' font-src 'self' localhost:* data: *.ctfassets.net *.gstatic.com connect-src localhost:* *.paidy.com *.paidy-staging.com *.execute-api.ap-northeast-1.amazonaws.com api.hubapi.com adon.co.jp *.hubspot.com *.uat.paidy.io *.mixpanel.com *.contentful.com *.g.doubleclick.net paidy-staging.com paidy.com paidy.dev *.google-analytics.com img-src 'self' localhost:* data: adon.co.jp *.g.doubleclick.net *.contentful.com *.ctfassets.net www.google-analytics.com https://www.google.com/ads/ https://www.google.co.jp/ads/ https://www.google.com/pagead/ https://www.google.co.jp/pagead/ *.hubspot.com *.hsforms.com px.a8.net *.yahoo.co.jp frame-src 'self' https://www.youtube.com 1
default-src 'self' data: blob: *.marketo.net *.marketo.com *.googletagmanager.com *.google-analytics.com *.crazyegg.com *.bizographics.com *.engagio.com *.listenloop.com *.doubleclick.net  *.bugsnag.com *.linkedin.com *.addthis.com *.addthisedge.com *.bidr.io *.googleadservices.com *.google.com *.gstatic.com *.fonts.googleapis.com *.mktoresp.com *.brightcove.net *.brightcove.com *.api.brightcove.com *.bcovlive.io *.sep.bcovlive.io *.zencdn.net *.boltdns.net *.truste.com *.llnw.net *.akafms.net *.akamaihd.net *.llnwd.net *.cloudfront.net *.media.brightcove.com *.adsymptotic.com bat.bing.com  connect.facebook.net stats.g.doubleclick.net www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.marketo.net *.marketo.com *.googletagmanager.com *.google-analytics.com *.crazyegg.com *.bizographics.com *.engagio.com *.listenloop.com *.doubleclick.net  *.bugsnag.com *.linkedin.com *.addthis.com *.addthisedge.com *.bidr.io *.googleadservices.com *.google.com *.gstatic.com *.fonts.googleapis.com *.mktoresp.com *.brightcove.net *.brightcove.com *.zencdn.net *.boltdns.net *.truste.com *.webspellchecker.net *.cetrk.com s3.amazonaws.com snap.licdn.com z.moatads.com dn1f1hmdujj40.cloudfront.net du4pg90j806ok.cloudfront.net browser-update.org connect.facebook.net; style-src 'self' 'unsafe-inline' *.googleapis.com *.marketo.net *.marketo.com *.google.com *.webspellchecker.net *.typekit.net; frame-src 'self' blob: *.guidewire.com *.brightcove.net *.marketo.net *.marketo.com *.google.com *.addthis.com *.addthisedge.com *.youtube.com *.wistia.net *.podbean.com; frame-ancestors 'self' *.guidewire.com *.pathfactory.com; child-src 'self' blob: *.guidewire.com *.brightcove.net *.marketo.net *.marketo.com *.google.com *.addthis.com *.addthisedge.com; font-src * data:; connect-src 'self' *.mktoresp.com *.listenloop.com *.bugsnag.com *.googletagmanager.com *.google-analytics.com *.google.com *.googleadservices.com *.addthis.com *.brightcove.net *.brightcove.com *.boltdns.net *.brightcovecdn.com *.crazyegg.com *.webspellchecker.net *.llnwd.net *.akamaihd.net *.doubleclick.net; report-uri /report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'report-sample' https://www.google-analytics.com https://storage.googleapis.com https://api.xrpscan.com; img-src 'self' 'report-sample' https://www.google-analytics.com https://www.gstatic.com https://avatars.io https://www.gravatar.com; style-src 'self' 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; frame-src 'self'; object-src 'none'; worker-src 'self'; connect-src 'self' https://api.xrpscan.com wss://api.xrpscan.com wss://xrpl.ws https://www.google-analytics.com; report-uri https://report-uri.xrpscan.workers.dev/r/d/csp/enforce 1
frame-ancestors 'self' bibliocms.com *.bibliocms.com bibliocommons.com *.bibliocommons.com libanswers.com *.libanswers.com cincinnatilibrary.bibliocms.com *.cincinnatilibrary.bibliocms.com https://cincinnatilibrary.org cincinnatilibrary.org *.cincinnatilibrary.org; 1
frame-ancestors 'self' planar.com *.planar.com http://www.ravepubs.com https://www.ravepubs.com g.adspeed.net; 1
default-src * data: blob:;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com https://static.hotjar.com;frame-src 'self' https://*.mhcache.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://vars.hotjar.com https://*.facebook.com https://*.googleapis.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://www.zenaps.com;script-src *.myheritage.es https://www.myheritage.es  'unsafe-inline' blob: data: 'self' https://*.myheritage.com https://*.mhcache.com https://cdn.trackjs.com https://tpc.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.googletagmanager.com https://connect.facebook.net https://bat.bing.com https://www.googleadservices.com https://*.google-analytics.com https://www.gstatic.com https://*.googleapis.com https://js-agent.newrelic.com https://*.nr-data.net https://*.mk-sense.com https://code.jquery.com https://*.hotjar.com https://www.dwin1.com https://www.zenaps.com https://ad.zanox.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://tagmanager.google.com https://optanon.blob.core.windows.net;connect-src data: 'self' https://*.myheritage.com https://*.mhcache.com https://www.google-analytics.com https://adservice.google.com https://*.nr-data.net https://sentry.io https://capture.trackjs.com https://*.bing.com https://*.facebook.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io:* https://*.doubleclick.net https://*.mk-sense.com https://privacyportal-eu.onetrust.com *.myheritage.es;media-src 'self' https://*.myheritage.com https://*.mhcache.com 1
frame-ancestors 'self' *.nike.com *.nikedev.com *.nikecloud.com 1
img-src 'self' static.abhibus.com uiresource.blob.core.windows.net www.google-analytics.com pagead2.googlesyndication.com tpc.googlesyndication.com securepubads.g.doubleclick.net googleads.g.doubleclick.net corover.mobi corover.ai www.amazon.in www.flipkart.com http:thebestdealsoftheday.in; 1
default-src 'self'  http://*.google-analytics.com https://*.google-analytics.com;style-src 'unsafe-inline' *;frame-src 'self' http://youtube.com http://*.youtube.com https://youtube.com https://*.youtube.com http://vimeo.com http://*.vimeo.com https://vimeo.com https://*.vimeo.com http://*.google.ru https://*.google.ru;img-src * data:;media-src *;font-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ebay.com http://*.google-analytics.com https://*.google-analytics.com http://*.yandex.ru http://yandex.ru  http://*.googlesyndication.com  http://*.gstatic.com http://gstatic.com https://*.yandex.ru https://yandex.ru https://*.googlesyndication.com https://*.gstatic.com https://gstatic.com https://*.googleapis.com https://googleapis.com http://youtube.com http://*.youtube.com https://youtube.com https://*.youtube.com http://google.ru http://*.google.ru https://google.ru https://*.google.ru http://google.com http://*.google.com https://google.com https://*.google.com; report-uri /csp2.php 1
base-uri 'self' https://optimize.google.com http://optimize.google.com optimize.google.com; default-src 'self'; child-src 'self' https://www.facebook.com http://www.facebook.com www.facebook.com https://vars.hotjar.com http://vars.hotjar.com vars.hotjar.com; connect-src 'self' https://eshop.martinus.sk http://eshop.martinus.sk eshop.martinus.sk https://www.google-analytics.com http://www.google-analytics.com www.google-analytics.com https://www.facebook.com/tr/ http://www.facebook.com/tr/ www.facebook.com/tr/ https://stats.g.doubleclick.net http://stats.g.doubleclick.net stats.g.doubleclick.net https://*.luigisbox.com http://*.luigisbox.com *.luigisbox.com https://api.infinario.com http://api.infinario.com api.infinario.com https://api.usersnap.com http://api.usersnap.com api.usersnap.com https://bam.nr-data.net http://bam.nr-data.net bam.nr-data.net https://bam-cell.nr-data.net http://bam-cell.nr-data.net bam-cell.nr-data.net https://mrecs.algopine.com http://mrecs.algopine.com mrecs.algopine.com https://optimize.google.com http://optimize.google.com optimize.google.com https://sentry.io http://sentry.io sentry.io https://*.hotjar.com http://*.hotjar.com *.hotjar.com https://vc.hotjar.io http://vc.hotjar.io vc.hotjar.io wss://*.hotjar.com; font-src https://mrtns.eu http://mrtns.eu mrtns.eu data:; form-action 'self' https://www.facebook.com/tr/ http://www.facebook.com/tr/ www.facebook.com/tr/ https://connect.facebook.net http://connect.facebook.net connect.facebook.net https://dva.martinus.sk http://dva.martinus.sk dva.martinus.sk https://ja.martinus.sk http://ja.martinus.sk ja.martinus.sk https://www.martinus.sk/my/profile http://www.martinus.sk/my/profile www.martinus.sk/my/profile; frame-src 'self' https://www.youtube.com http://www.youtube.com www.youtube.com https://www.googletagmanager.com http://www.googletagmanager.com www.googletagmanager.com https://www.facebook.com http://www.facebook.com www.facebook.com https://staticxx.facebook.com http://staticxx.facebook.com staticxx.facebook.com https://connect.facebook.net http://connect.facebook.net connect.facebook.net https://vars.hotjar.com http://vars.hotjar.com vars.hotjar.com https://bid.g.doubleclick.net http://bid.g.doubleclick.net bid.g.doubleclick.net https://www.google.com http://www.google.com www.google.com https://api.infinario.com http://api.infinario.com api.infinario.com https://creativecdn.com http://creativecdn.com creativecdn.com https://helpdesk.martinus.sk http://helpdesk.martinus.sk helpdesk.martinus.sk https://*.ladesk.com http://*.ladesk.com *.ladesk.com https://docs.google.com http://docs.google.com docs.google.com https://inres.uspech.sk http://inres.uspech.sk inres.uspech.sk https://ams.creativecdn.com http://ams.creativecdn.com ams.creativecdn.com https://player.vimeo.com http://player.vimeo.com player.vimeo.com https://martinus.us17.list-manage.com http://martinus.us17.list-manage.com martinus.us17.list-manage.com https://optimize.google.com http://optimize.google.com optimize.google.com; img-src * data:; media-src https://download.dibuk.eu http://download.dibuk.eu download.dibuk.eu; object-src 'none'; manifest-src 'self' https://www.martinus.sk/manifest.json http://www.martinus.sk/manifest.json www.martinus.sk/manifest.json https://www.martinus.cz/manifest.json http://www.martinus.cz/manifest.json www.martinus.cz/manifest.json; script-src * 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://mrtns.eu http://mrtns.eu mrtns.eu https://tagmanager.google.com http://tagmanager.google.com tagmanager.google.com https://cdn.luigisbox.com http://cdn.luigisbox.com cdn.luigisbox.com https://optimize.google.com http://optimize.google.com optimize.google.com https://fonts.googleapis.com http://fonts.googleapis.com fonts.googleapis.com 'unsafe-inline'; worker-src 'self' https://api.infinario.com http://api.infinario.com api.infinario.com; 1
default-src 'self'; img-src https: data:; media-src https: data:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; font-src https: data:; frame-src https: 1
report-uri https://www.yelp.com/csp_block?id=66b6d21deb51c1fb&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609211517; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
default-src 'self'; base-uri 'none'; img-src 'self' data:; worker-src 'none'; frame-src 'none'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' 1
script-src 'self' *.wlresources.com *.my.cam *.google.com *.googleapis.com *.gstatic.com *.facebook.net *.google-analytics.com *.googlesyndication.com https://www.googletagservices.com https://www.googletagmanager.com *.doubleclick.net 'unsafe-inline' 'unsafe-eval'; connect-src 'self' *.wlresources.com *.my.cam wss://api.my.cam https://www.googletagmanager.com *.google-analytics.com *.doubleclick.net; worker-src 'self'; report-uri /err0r/js?ts=1609214707 1
default-src 'self' https://maps.gstatic.com https://*.epayments.com; worker-src 'self' https://maps.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://googleads.g.doubleclick.net https://cdn.taboola.com https://maps.gstatic.com https://maps.googleapis.com https://js.hscollectedforms.net https://js.hs-analytics.net https://js.usemessages.com https://js.hs-scripts.com https://*.google.com https://www.googletagmanager.com https://connect.facebook.net https://*.facebook.com https://*.mail.ru https://widget.intercom.io https://mc.yandex.ru https://www.gstatic.com https://www.google-analytics.com https://js.intercomcdn.com https://api.survicate.com https://services.cognitoforms.com https://www.googleadservices.com https://trc.taboola.com https://www.cognitoforms.com; style-src 'self' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com https://tagmanager.google.com https://services.cognitoforms.com https://www.cognitoforms.com; img-src 'self' data: https://www.google.co.uk https://*.gstatic.com https://maps.googleapis.com https://www.google.com https://www.google.ru https://track.hubspot.com https://stats.g.doubleclick.net http://*.mzstatic.com https://www.google-analytics.com https://mc.yandex.ru https://*.intercomcdn.com https://*.facebook.com https://static.intercomassets.com https://*.mail.ru https://services.cognitoforms.com https://www.google.de; font-src 'self' https://*.intercomcdn.com https://fonts.gstatic.com https://services.cognitoforms.com https://www.cognitoforms.com; connect-src 'self' https://cdn.taboola.com https://trc.taboola.com https://mc.yandex.ru https://stats.g.doubleclick.net https://www.google-analytics.com https://*.gstatic.com https://api.exchangeratesapi.io https://api.hubspot.com https://forms.hubspot.com https://freegeoip.net https://*.epayments.com https://*.intercom.io wss://*.intercom.io https://mc.yandex.ru https://api.survicate.com https://api.ratesapi.io https://services.cognitoforms.com https://www.facebook.com https://www.cognitoforms.com; child-src 'self' https://optimize.google.com https://mc.yandex.ru https://connect.facebook.net https://www.facebook.com https://*.epayments.com https://www.google.com https://*.gstatic.com https://app.hubspot.com https://bid.g.doubleclick.net 1
frame-ancestors 'self' *.qfc.cn *.tnc.com.cn www.zhidaoai.com *.aliyuncs.com *.aliyun.com *.ctcn.com.cn 1
default-src 'self' data: https://www.eventbrite.com https://www.google.com https://*.youtube.com https://*.vimeo.com https://*.nyc.gov https://ww2.green-wood.com https://*.fontawesome.com https://www.green-wood.com https://www.google-analytics.com https://cloud.typography.com https://fonts.googleapis.com https://gwc-14060.kxcdn.com https://fareharbor.com https://eventbrite.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https://fareharbor.com https://www.eventbrite.com https://www.googletagmanager.com https://*.fontawesome.com https://www.green-wood.com https://www.google-analytics.com https://cloud.typography.com https://fonts.googleapis.com https://gwc-14060.kxcdn.com; style-src 'self' 'unsafe-inline' data: https://*.fontawesome.com https://*.mailchimp.com https://www.green-wood.com https://www.google-analytics.com https://cloud.typography.com https://fonts.googleapis.com https://gwc-14060.kxcdn.com; img-src blob: data: https://*.fbcdn.net https://www.green-wood.com *.cdninstagram.com *.gravatar.com https://*.fontawesome.com https://www.google-analytics.com https://www.green-wood.com https://gwc-14060.kxcdn.com; font-src 'self' data: https://*.gstatic.com https://*.fontawesome.com https://www.green-wood.com https://cloud.typography.com https://fonts.googleapis.com https://gwc-14060.kxcdn.com; connect-src 'self' data: https://www.google-analytics.com https://*.fontawesome.com https://instagram.com https://*.instagram.com; media-src 'self' data: https://gwc-14060.kxcdn.com https://www.green-wood.com; 1
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self' *.siliconvalleywatcher.com; connect-src 'self' *.presspage.com https://*.addthis.com *.nr-data.net *.siliconvalleywatcher.com https://*.hotjar.com https://*.hotjar.io; font-src 'self' https://presspage-production-content.s3.amazonaws.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.typekit.net *.presspage.com *.siliconvalleywatcher.com data:; frame-src 'self' *.hotjar.com https://cdn.embedly.com https://*.twitter.com https://syndication.twitter.com https://*.facebook.com https://*.google.com https://*.youtube.com https://*.addthis.com https://*.pinterest.com https://*.doubleclick.net *.siliconvalleywatcher.com; img-src 'self' *.presspage.com https://presspage-production-content.s3.amazonaws.com https://*.url2png.com *.twimg.com https://*.vimeocdn.com *.ytimg.com https://i.embed.ly https://static.licdn.com https://*.linkedin.com https://*.twitter.com https://*.addthis.com https://*.pinterest.com https://t.co https://bat.bing.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.google.com https://*.google.nl *.siliconvalleywatcher.com *.rlcdn.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.presspage.com *.moatads.com https://presspage-production-content.s3.amazonaws.com *.hotjar.com https://*.addthis.com https://*.twitter.com https://cdn.syndication.twimg.com https://js-agent.newrelic.com https://*.facebook.net https://*.linkedin.com https://*.google.com https://bam.nr-data.net https://hello.myfonts.net https://*.addthisedge.com https://*.pinterest.com https://*.google-analytics.com https://*.googleadservices.com https://*.bing.com https://*.ads-twitter.com https://*.demandbase.com https://*.pulseinsights.com https://*.googletagmanager.com https://googleads.g.doubleclick.net *.siliconvalleywatcher.com; media-src 'self' *.presspage.com; style-src 'self' 'unsafe-inline' *.presspage.com https://fonts.googleapis.com https://*.twitter.com https://maxcdn.bootstrapcdn.com https://*.typekit.net https://presspage-production-content.s3.amazonaws.com https://*.twimg.com *.siliconvalleywatcher.com 1
child-src threatplaybook.fortiguard.com fortiguard.com fortinet.com fgstaging.corp.fortinet.com w.soundcloud.com www.google.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' 'frame-src' data: *.healthfirst.org healthfirst.org analytics.convertlanguage.com *.google-analytics.com *.googleapis.com *.typekit.net fonts.gstatic.com *.google.com *.google.com.ua tags.tiqcdn.com braintrack.industrybrains.com *.tealiumiq.com zn8kzxzjqwauybcuh-healthfirst.siteintercept.qualtrics.com siteintercept.qualtrics.com *.cloudfront.net us1.siteimprove.com www.googleadservices.com *.steelhousemedia.com www.googletagmanager.com *.facebook.com *.facebook.net s3.amazonaws.com *.youtube.com ws.sessioncam.com  jelly.mdhv.io  at.amgdgt.com p.adsymptotic.com match.adsrvr.org  *.doubleclick.net  http://*.doubleclick.net *.gstatic.com *.insight.adsrvr.org *.google.com juliencayzac.me cdn.jsdelivr.net cdnjs.cloudflare.com healthfirstorg.mpeasylink.com s.ytimg.com healthyliving.healthfirst.org *.gravatar.com pixel.mathtag.com sc-static.net static.ads-twitter.com *.taboola.com *.marchex.io *.segment.com *.segment.io *.vimeo.com 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=XE&lang=en-AE&device=desktop&yrid=e2c3u11fulbft&partner=; 1
frame-ancestors https://*.woman.at http://*.woman.at; upgrade-insecure-requests; block-all-mixed-content 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://img.galaxymacau.com https://image.galaxymacau.com https://*.aliyuncs.com https://tagmanager.google.com https://fonts.googleapis.com https://*.bokecc.com https://*.galaxymacau.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://qr.workbuys.cn https://*.doubleclick.net https://www.google-analytics.com https://maps.googleapis.com https://api.map.baidu.com https://*.bokecc.com https://www.googletagmanager.com https://tagmanager.google.com https://*.galaxymacau.com https://bat.bing.com https://hm.baidu.com https://cdn.grata.cn https://*.scarabresearch.com http://*.scarabresearch.com https://www.facebook.com https://*.facebook.net https://*.aliyuncs.com https://*.crazyegg.com https://*.googleadservices.com https://*.smg.gov.mo https://img.galaxymacau.com https://image.galaxymacau.com https://*.aliyuncs.com; font-src 'self' https://img.galaxymacau.com https://image.galaxymacau.com https://*.aliyuncs.com; connect-src *; img-src data: *; media-src *; object-src 'none'; frame-ancestors 'self'; frame-src *; base-uri 'none'; form-action * 1
default-src https: http:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; object-src 'self'; style-src http: https: 'unsafe-inline'; img src 'self' data: https:; connect-src http: https: ws: 1
frame-ancestors 'self' https://*.shopify.com https://*.myshopify.com 1
media-src 'self'; manifest-src 'self'; frame-ancestors 'self'; form-action 'self' *.twitter.com; default-src 'none'; object-src 'self'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com/ https://www.googletagmanager.com/ https://tagmanager.google.com/ *.leadlab.click *.doubleclick.net *.typekit.net *.googleapis.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.twitter.com cdn.syndication.twimg.com ; style-src 'self' 'unsafe-inline' *.myfonts.net https://tagmanager.google.com/ *.typekit.net *.googleapis.com *.twitter.com; img-src 'self' data: https://www.google-analytics.com/ *.twimg.com *.gstatic.com *.googleapis.com img.youtube.com *.ytimg.com *.wistia.com *.twitter.com; font-src 'self' *.typekit.net *.gstatic.com; connect-src 'self' https://www.google-analytics.com/ *.leadlab.click *.youtube.com *.youtube-nocookie.com; frame-src 'self' https://v.qq.com https://www.googletagmanager.com/ns.html brandsonspeed.pageflow.io *.youtube.com *.youtube-nocookie.com fast.wistia.net *.twitter.com twitter.com; 1
default-src 'self' kpc.webmail.kpnmail.nl kpc.webmail.telfort.nl; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; 1
report-uri https://lorman.report-uri.com/r/d/csp/wizard; frame-ancestors 'self' 1
default-src https:  wss://*.hotjar.com; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src data: https: 'unsafe-inline'; font-src data: https: 'unsafe-inline';frame-ancestors 'self'; object-src 'none'; 1
frame-ancestors 'self' *.axonify.com *.marketo.com *.seismic.com; 1
default-src https: 'self'; style-src https: 'self' 'unsafe-inline'; img-src 'self' data: https:; script-src 'unsafe-eval' 'unsafe-inline' 'self' https: m.addthis.com www.google-analytics.com www.gstatic.com www.googletagmanager.com assets.pinterest.com connect.facebook.net cdn.jsdelivr.net www.google.com s7.addthis.com platform.twitter.com log.pinterest.com; 1
default-src 'self'; frame-ancestors 'self' https://www.iil.slackandcompany.com/ https://iil.slackandcompany.com/ http://www.iil.slackandcompany.com/ http://iil.slackandcompany.com/ https://www.insideidealabs.com/ https://insideidealabs.com/ http://www.insideidealabs.com/ http://insideidealabs.com/ https://www.insideidealabs.com.ar https://insideidealabs.com.ar http://www.insideidealabs.com.ar http://insideidealabs.com.ar https://www.insideidealabs.de https://insideidealabs.de http://www.insideidealabs.de http://insideidealabs.de https://www.insideidealabs.pe https://insideidealabs.pe http://www.insideidealabs.pe http://insideidealabs.pe https://www.insideidealabs.com.br https://insideidealabs.com.br http://www.insideidealabs.com.br http://insideidealabs.com.br https://www.insideidealabs.jp https://insideidealabs.jp http://www.insideidealabs.jp http://insideidealabs.jp https://www.insideidealabs.eu https://insideidealabs.eu http://www.insideidealabs.eu http://insideidealabs.eu https://www.insideidealabs.co.kr https://insideidealabs.co.kr http://www.insideidealabs.co.kr http://insideidealabs.co.kr https://www.insideidealabs.kr https://insideidealabs.kr http://www.insideidealabs.kr http://insideidealabs.kr https://www.insideidealabs.cn https://insideidealabs.cn http://www.insideidealabs.cn http://insideidealabs.cn https://www.insideidealabs.com.cn https://insideidealabs.com.cn http://www.insideidealabs.com.cn http://insideidealabs.com.cn https://www.insideidealabs.mx https://insideidealabs.mx http://www.insideidealabs.mx http://insideidealabs.mx https://www.insideidealabs.sg https://insideidealabs.sg http://www.insideidealabs.sg http://insideidealabs.sg https://www.insideidealabs.asia https://insideidealabs.asia http://www.insideidealabs.asia http://insideidealabs.asia https://www.insideidealabs.co https://insideidealabs.co http://www.insideidealabs.co http://insideidealabs.co https://www.insideidealabs.co.uk https://insideidealabs.co.uk http://www.insideidealabs.co.uk http://insideidealabs.co.uk https://www.insideidealabs.uk https://insideidealabs.uk http://www.insideidealabs.uk http://insideidealabs.uk http://iildev.rivetagency.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; font-src 'self' data: *; img-src 'self' data: *; media-src 'self' *; connect-src 'self' *; frame-src  'self' *; style-src 'self' 'unsafe-inline' * 1
frame-ancestors 'self' *.morpher.com 1
default-src * 'unsafe-eval' 'unsafe-inline' data:; frame-ancestors 'self' adresowa.pl apps.facebook.com 1
frame-ancestors 'self' https://vk.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *; frame-ancestors www.envestnet.com envestnet.com ir.envestnet.com investor.envestnet.com www.investpmc.com; report-uri /report-csp-violation 1
default-src 'none'; script-src 'self' 'nonce-NzQyMjIxNzAyNDIyNDc3OTIyNjg4MjEzOQ==' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; object-src 'none'; connect-src www.google-analytics.com https://*.algolia.net https://*.algolianet.com; frame-src https://www.google.com/recaptcha/; frame-ancestors 'none'; base-uri 'none' 1
frame-ancestors *.putnam.com *.seismic.com *.fundvisualizer.com; worker-src 'self' 'unsafe-inline' 'unsafe-eval' *.zencdn.net *.brightcove.net *.brightcove.com *.putnam.com blob: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.adnxs.com *.ytimg.com *.googleapis.com *.putnam.com *.typekit.net *.rackcdn.com *.ensighten.com *.brightcove.net *.brightcove.com *.google-analytics.com *.liveperson.net *.bing.com *.bizographics.com *.gigya.com *.googlecode.com *.morningstar.com *.linkedin.com *.putnaminv.com *.highcharts.com *.jQuery.com *.jquery.org *.adobe.com *.jqueryui.com *.cloudflare.com *.livelook.com *.livelook.net *.facebook.net *.licdn.com *.zencdn.net *.lpsnmedia.net *.googletagmanager.com tagmanager.google.com *.ads-twitter.com *.twitter.com *.yimg.com sp.analytics.yahoo.com www.youtube.com www.instagram.com shop.pe shopper.shop.pe *.cloudfront.net addshoppers.s3.amazonaws.com bcbolt446c5271-a.akamaihd.net www.google.com www.gstatic.com cdn.jsdelivr.net; 1
default-src * data: blob:;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com https://static.hotjar.com;frame-src 'self' https://*.mhcache.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://vars.hotjar.com https://*.facebook.com https://*.googleapis.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://www.zenaps.com;script-src *.myheritage.fr https://www.myheritage.fr  'unsafe-eval' 'unsafe-inline' blob: data: 'self' https://*.myheritage.com https://*.mhcache.com https://cdn.trackjs.com https://tpc.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.googletagmanager.com https://connect.facebook.net https://bat.bing.com https://www.googleadservices.com https://*.google-analytics.com https://www.gstatic.com https://*.googleapis.com https://js-agent.newrelic.com https://*.nr-data.net https://*.mk-sense.com https://code.jquery.com https://*.hotjar.com https://www.dwin1.com https://www.zenaps.com https://ad.zanox.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://tagmanager.google.com https://optanon.blob.core.windows.net;connect-src data: 'self' https://*.myheritage.com https://*.mhcache.com https://www.google-analytics.com https://adservice.google.com https://*.nr-data.net https://sentry.io https://capture.trackjs.com https://*.bing.com https://*.facebook.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io:* https://*.doubleclick.net https://*.mk-sense.com https://privacyportal-eu.onetrust.com *.myheritage.fr;media-src 'self' https://*.myheritage.com https://*.mhcache.com 1
default-src * 'unsafe-inline' 'unsafe-eval';frame-ancestors *; 1
frame-ancestors https://*.geartrade.com; 1
object-src 'none'; img-src 'self' https://media.titanbooks.com https: data: dyn.media.titanbooks.com www.googletagmanager.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.cdninstagram.com *.instagram.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.cloudfront.net *.akamaihd.net; font-src 'self' https://media.titanbooks.com data: fonts.googleapis.com storage.googleapis.com fonts.gstatic.com themes.googleusercontent.com; connect-src *.cdninstagram.com *.googleapis.com *.twitter.com *.youtu.be fonts.googleapis.com fonts.gstatic.com themes.googleusercontent.com *.google.com *.facebook.com *.gstatic.com *.akamaihd.net https: dyn.media.titanbooks.com data: *.instagram.com www.googletagmanager.com *.youtube.com https://media.titanbooks.com *.twimg.com www.google-analytics.com *.facebook.net *.cloudfront.net 'self' storage.googleapis.com; frame-src 'self' https://media.titanbooks.com www.googletagmanager.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.cdninstagram.com *.instagram.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.cloudfront.net *.akamaihd.net data:; frame-ancestors 'self'; style-src *.cdninstagram.com *.googleapis.com *.twitter.com *.youtu.be fonts.googleapis.com fonts.gstatic.com themes.googleusercontent.com *.google.com *.facebook.com *.gstatic.com *.akamaihd.net data: *.instagram.com 'unsafe-inline' www.googletagmanager.com *.youtube.com https://media.titanbooks.com *.twimg.com www.google-analytics.com *.facebook.net *.cloudfront.net 'self' storage.googleapis.com; child-src 'self' https://media.titanbooks.com www.googletagmanager.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.cdninstagram.com *.instagram.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.cloudfront.net *.akamaihd.net data:; default-src 'self' https://media.titanbooks.com 'unsafe-inline' data:; script-src 'self' https://media.titanbooks.com 'unsafe-inline' data: www.googletagmanager.com www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.cdninstagram.com *.instagram.com *.twitter.com *.twimg.com *.youtube.com *.youtu.be *.cloudfront.net *.akamaihd.net; report-uri /@csp-report 1
default-src 'self' 139.162.244.250 *.myfonts.net *.myfonts.com *.google-analytics.com *.google.com fonts.googleapis.com *.gstatic.com storage.googleapis.com *.bootstrapcdn.com *.youtube.com *.vimeo.com *.last.fm *.googlevideo.com *.instagram.com *.ytimg.com *.googlevideo.com *.ytimg.com *.dailymotion.com *.ttvnw.net *.twitch.tv *.twimg.com *.twitter.com *.lolrus.mediamolecule.com *.mediamolecule.com *.cloudfront.net mediamolecule.disqus.com disqus.com *.soundcloud.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' 139.162.244.250 *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com code.jquery.com *.instagram.com platform.twitter.com *.twimg.com *.cloudfront.net mediamolecule.disqus.com *.disquscdn.com disqus.com; style-src 'self' 'unsafe-inline' *.myfonts.net *.myfonts.com *.googleapis.com *.gstatic.com *.google.com *.bootstrapcdn.com *.twitter.com *.twimg.com *.disquscdn.com; img-src * data:;font-src * data:;object-src 'self' cdn.last.fm *.last.fm  dailymotion.com *.dailymotion.com youtube.com *.youtube.com www.gametrailers.com *.twitch.tv *.ttvnw.net www.flickr.com viddler.com *.viddler.com blip.tv vimeo.com backend.deviantart.com *.bbc.co.uk platform.twitter.com; 1
default-src 'self' https://www.google-analytics.com; script-src 'self' 'unsafe-inline'  https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com https://www.google-analytics.com; img-src 'self'  https://q.stripe.com/ https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; frame-src 'self' https://js.stripe.com/ https://www.google.com/recaptcha/ https://www.gstatic.com; font-src 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' googleads.g.doubleclick.net go.arena.im e.infogram.com e.infogr.am script.hotjar.com static.hotjar.com consentcdn.cookiebot.com view.publitas.com data: connect.facebook.net www.googleadservices.com www.google-analytics.com ajax.googleapis.com *.google.com www.googletagmanager.com vluchtelingenwerk.ternair.com services.crmservice.eu consent.cookiebot.com translate.googleapis.com; font-src 'self' data: themes.googleusercontent.com fonts.gstatic.com script.hotjar.com; img-src 'self' data: googleads.g.doubleclick.net www.facebook.com www.vluchtelingenwerk.nl *.gstatic.com www.google.com www.google-analytics.com www.google.nl stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' translate.googleapis.com vluchtelingenwerk.ternair.com tagmanager.google.com fonts.googleapis.com; 1
default-src *; script-src data: 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com https://*.motability.co.uk https://*.motability.org.uk https://*.motabilityoperations.co.uk https://*.google-analytics.com https://ssl.google-analytics.com https://*.googletagmanager.com https://apis.google.com https://*.doubleclick.net https://*.liveperson.net https://*.lpsnmedia.net https://*.liveengage.net https://*.liveengage.com https://*.liveper.sn https://*.jwplatform.com https://*.jwpcdn.com https://*.jwplayer.com https://*.jwpsrv.com *.amazonaws.com https://*.googleapis.com https://*.newscred.com https://*.googleadservices.com https://connect.facebook.net https://bat.bing.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://*.googleapis.com https://*.newscred.com https://*.googleadservices.com https://*.jwpcdn.com https://*.jwplayer.com https://*.motability.co.uk; img-src 'self' data: * https://ssl.google-analytics.com; font-src data: 'self' fonts.gstatic.com https://*.jwpcdn.com https://*.jwplayer.com; media-src blob: 'self' https://*.lpsnmedia.net *.speechstream.net https://*.jwplatform.com https://*.jwpcdn.com https://*.jwplayer.com https://*.jwpsrv.com https://jwpsrv-vh.akamaihd.net; child-src blob: 'self' https://*.liveperson.net https://*.lpsnmedia.net https://*.jwplatform.com https://*.jwpcdn.com https://*.jwplayer.com https://*.jwpsrv.com https://*.doubleclick.net; frame-src blob: 'self' https://*.liveperson.net https://*.lpsnmedia.net https://*.jwplatform.com https://*.jwpcdn.com https://*.jwplayer.com https://*.jwpsrv.com https://*.doubleclick.net https://www.google.com https://accounts.google.com https://*.googleapis.com https://www.facebook.com https://*.googletagmanager.com; report-uri https://motability.report-uri.io/r/default/csp/enforce 1
default-src code.jquery.com wichita.gov www.wichita.gov www.youtube.com youtube.com; script-src unpkg.com ajax.googleapis.com www.buzzsprout.com https://translate.googleapis.com 'unsafe-inline' 'unsafe-eval' data: web2.vermontsystems.com www.gstatic.com www.google.com static.ctctcdn.com stackpath.bootstrapcdn.com cdnjs.cloudflare.com public.earthcam.net translate.googleapis.com translate.google.com portal.gpsinsight.com www.google-analytics.com www.googletagmanager.com tagmanager.google.com code.jquery.com wichita.gov www.wichita.gov gps.wextelematics.com maps.googleapis.com api.gpsinsight.com connect.facebook.net platform.twitter.com cdn.syndication.twimg.com; style-src 'unsafe-inline' p.typekit.net cdnjs.cloudflare.com unpkg.com use.typekit.net web2.vermontsystems.com static.ctctcdn.com use.fontawesome.com stackpath.bootstrapcdn.com translate.googleapis.com tagmanager.google.com wichita.gov www.wichita.gov fonts.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com ton.twimg.com; img-src data: static.ctctcdn.com http://placehold.it http://wichita.gov http://www.wichita.gov www.google.com translate.googleapis.com portal.gpsinsight.com ssl.gstatic.com www.gstatic.com stats.g.doubleclick.net www.google-analytics.com wichita.gov www.wichita.gov gps.wextelematics.com maps.gstatic.com maps.googleapis.com csi.gstatic.com api.gpsinsight.com www.facebook.com facebook.com pbs.twimg.com platform.twitter.com ton.twimg.com; font-src use.typekit.net wichita.gov www.wichita.gov fonts.gstatic.com maxcdn.bootstrapcdn.com; child-src arcg.is wichitagis.maps.arcgis.com wichitaks.granicus.com media-10.granicus.com:443 media-10.granicus.com staticxx.facebook.com www.facebook.com facebook.com syndication.twitter.com platform.twitter.com youtube.com www.youtube.com www.google.com google.com calendar.google.com docs.google.com www.kizoa.com kizoa.com; connect-src http: https:; frame-src http: https: lfforms.wichita.gov; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.antillephone.com vk.com onesignal.com *.onesignal.com *.cloudflare.com/ajax/libs/webcomponentsjs/ *.hybrid.ai *.ravenjs.com mc.yandex.ru yastatic.net *.gstatic.com glem.io *.google.com *.adroll.com *.adroll.mgr.consensu.org *.googletagmanager.com *.google-analytics.com *.bing.com *.facebook.net js.gleam.io *.gleamjs.io *.youtube.com mc.yandex.ua mc.yandex.by mc.yandex.fr mc.yandex.kz mc.yandex.ru;img-src 'self' data: blob: static.wax.io *.googleusercontent.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.google.com.mx *.google.com.ua *.google.com.bd *.google.com.ph *.google.com.ua *.google.com.au *.google.com.ph *.google.com.tw *.google.com.ar *.google.com.pk *.google.com.tr *.google.com.eg *.google.com.co *.google.com.sg *.google.com.vn *.google.com.kh *.google.com.ec *.google.com.hk *.google.com.uy *.google.com.br *.google.co.kr *.google.co.in *.google.co.il *.google.co.ma *.google.co.ve *.google.co.th *.google.co.jp *.google.co.uk *.google.co.id *.google.co.za *.google.com *.google.ru *.google.dz *.google.ae *.google.rs *.google.cl *.google.ee *.google.be *.google.at *.google.gr *.google.sk *.google.fr *.google.am *.google.dk *.google.cz *.google.nl *.google.it *.google.ps *.google.fi *.google.cm *.google.mn *.google.az *.google.is *.google.iq *.google.de *.google.ch *.google.hr *.google.by *.google.ro *.google.kz *.google.pt *.google.no *.google.ge *.google.bg *.google.es *.google.lv *.google.hu *.google.se *.google.pl *.google.lt *.google.ca *.csgofast.com *.yandex.ru *.yandex.by crossmetrix.com *.linksynergy.com *.digitru.st *.targetix.net *.ytimg.com *.gleam.io *.gleamjs.io *.adform.net *.rubiconproject.com *.advertising.com *.3lift.com *.surfe.be surfe.pro *.pubmatic.com *.casalemedia.com *.outbrain.com *.yahoo.com *.rlcdn.com makesource.cool *.adroll.mgr.consensu.org *.adroll.com *.angsrvr.com pippio.com *.onesignal.com *.antillephone.com *.taboola.com mc.admetrica.ru *.teads.tv countmake.cool *.userapi.com *.opskins.media *.openx.net *.adnxs.com *.adriver.ru *.smartadserver.com *.siliconanalytics.com *.hybrid.ai *.weborama.fr *.1dmp.io *.aidata.io ad.mail.ru *.gravatar.com cardinaldata.net *.betweendigital.com *.bestssp.com *.admixer.net *.doubleclick.net *.facebook.com x.bidswitch.net i.btcoon.com a.23b4.ru *.yadro.ru promclickapp.biz *.capitaller.ru *.vk.com vk.com *.akamaihd.net *.steamstatic.com *.adorable.io d2lomvz2jrw9ac.cloudfront.net de4khei8i4ut2.cloudfront.net din8r827idtuo.cloudfront.net tjh8gngtzf.execute-api.us-east-1.amazonaws.com d1zi9q96rsh4iw.cloudfront.net;font-src 'self' data: *.googleapis.com *.gstatic.com;style-src 'self' 'unsafe-inline' onesignal.com *.google.com *.googleapis.com;media-src 'self' de4khei8i4ut2.cloudfront.net din8r827idtuo.cloudfront.net d2lomvz2jrw9ac.cloudfront.net;connect-src 'self' s3.amazonaws.com onesignal.com *.yandex.ru *.devfast.io *.webvisor.com *.webvisor.org *.mxpnl.net sentry.io google-analytics.com vk.com *.api4load.com *.adroll.com *.adroll.mgr.consensu.org *.googleapis.com *.doubleclick.net *.google-analytics.com *.demofast.ru *.csgofastbackend.com *.ajdfbkjab.ru wss://m.ajdfbkjab.ru wss://*.demofast.ru wss://*.csgofastbackend.com wss://*.devfast.io *.csgofast.com wss://*.csgofast.com *.csgofast123.com wss://*.csgofast123.com *.csgofast.tl wss://*.csgofast.tl *.csgocasino.ru wss://*.csgocasino.ru *.csgofast.ru wss://*.csgofast.ru *.dapubg.net wss://*.dapubg.net *.gojackpod.com wss://*.gojackpod.com *.rusgofast.ru wss://*.rusgofast.ru *.dapubg.com wss://*.dapubg.com *.csgofast4.com wss://*.csgofast4.com *.rucsgofast.ru wss://*.rucsgofast.ru *.pubgfast.com wss://*.pubgfast.com *.csgofastbackend.com wss://*.csgofastbackend.com *.cs2gofast.com wss://*.cs2gofast.com *.opdota2.com wss://*.opdota2.com *.demofast.ru wss://*.demofast.ru *.demogofast.com wss://*.demogofast.com *.csgetfast.com wss://*.csgetfast.com *.gainskins.com wss://*.gainskins.com *.casecsgo.com wss://*.casecsgo.com wss://*.xcsgofast.ru *.xcsgofast.ru wss://*.xcsgofast.com *.xcsgofast.com wss://*.csgofastx.com *.csgofastx.com wss://*.csgofastx.ru *.csgofastx.ru wss://*.csgfst.org *.csgfst.org;frame-ancestors 'self' webvisor.com http://webvisor.com;frame-src blob: *.poggiplay.com *.yandex.ru *.webvisor.com *.webvisor.org skytraf.xyz *.facebook.com gleam.io *.gleamjs.io *.1dmp.io onesignal.com *.google.com *.youtube.com *.csgofastbackend.com *.gainskins.com slots-prod.csgofastbackend.com d1phhoo4f618zo.cloudfront.net *.csgofast.com *.csgofast123.com *.csgofast.tl *.csgocasino.ru *.csgofast.ru *.dapubg.net *.gojackpod.com *.rusgofast.ru *.dapubg.com *.csgofast4.com *.rucsgofast.ru *.pubgfast.com *.csgofastbackend.com *.cs2gofast.com *.opdota2.com *.demofast.ru *.demogofast.com *.csgetfast.com *.gainskins.com *.casecsgo.com *.xcsgofast.ru *.csgofastx.com *.csgofastx.com *.xcsgofast.com *.csgfst.org;object-src 'none';report-uri //in.csgofast.com/csp; 1
default-src 'self' *  www.googletagmanager.com  *   e-telebe.edu.az data: 'unsafe-inline' 1
default-src https: data:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline' 1
frame-ancestors 'self'; default-src 'self'  'unsafe-eval' 'unsafe-inline' maps.gstatic.com *.googleapis.com *.ggpht.com dbsgsmc.tt.omtrdc.net www.dbs.com tracking.alphaloan.co graph.facebook.com dbs.sc.omtrdc.net *.addthis.com v1.addthisedge.com dbs.demdex.net dpm.demdex.net s7.addthis.com assets.adobedtm.com t.tenmax.io js.mtburn.com code.jquery.com http://lh3.googleusercontent.com www.twbusiness-genie.com pixel.tapad.com ssl.gstatic.com tr.line.me tagmanager.google.com d.line-scdn.net translate.googleapis.com code.highcharts.com staticxx.facebook.com s3-ap-northeast-1.amazonaws.com http://www.dbs.com.tw *.akstat.io www.googletagmanager.com www.google-analytics.com secure-ds.serving-sys.com sp.analytics.yahoo.com anylist.c.appier.net img.scupio.com px.ads.linkedin.com ajax.googleapis.com rec.scupio.com bs.serving-sys.com connect.facebook.net www.gstatic.com googleads.g.doubleclick.net ds-aksb-a.akamaihd.net cnt.fout.jp bcp.crwdcntrl.net fonts.gstatic.com www.google.com tags.crwdcntrl.net maps.googleapis.com maps.gstatic.com fonts.googleapis.com bat.bing.com d31qbv1cthcecs.cloudfront.net sjs.bizographics.com www.googleadservices.com frl.c.appier.net www.facebook.com jp-u.openx.net stats.g.doubleclick.net s.yimg.com cm.g.doubleclick.net js.fout.jp s.c.appier.net cn.bridgewell.com s.go-mpulse.net c.go-mpulse.net  az700343.vo.msecnd.net www.dbs.com.sg adm.shinobi.jp www.google.com.tw u.scupio.com cdn.doublemax.net clg.doublemax.net lg.doublemax.net cdn.jsdelivr.net dmp.eland-tech.com dbsweb-u01-www.dbs.com.tw a.c.appier.net gocm.c.appier.net jscdn.appier.net snap.licdn.com dsp.fout.jp www.google.com.sg www.linkedin.com d17m68fovwmgxj.cloudfront.net c.c.appier.net ads.yahoo.com pixel.rubiconproject.com t0.c.appier.net adgen.socdm.com cs.gssprt.jp image2.pubmatic.com sync.aralego.com cms.tanx.com certify.alexametrics.com sync.ad-stir.com ssl.socdm.com rcp.c.appier.net d.c.appier.net ssp-sync.i-mobile.co.jp g.c.appier.net us-u.openx.net x.bidswitch.net ssp.adskom.com sync.adap.tv sync.adaptv.advertising.com ib.adnxs.com sync.search.spotxchange.com au.ants.vn t.funp.com track.tamedia.com.tw dbswebuatak-www.dbs.com.tw bid.g.doubleclick.net www.youtube.com s.ytimg.com iwov-resources d3js.org r.turn.com presentation-hkg1.turn.com storage.googleapis.com chart.googleapis.com extcuptool.com loadsource.org urlvalidation.com cx.atdmt.com www.media-server.com p1-news.hfcdn.com pixel-api.bridgewell.com edge.media-server.com pic.hfcdn.com fps.hfcdn.com analytics.twitter.com *.akamaihd.net dbs.112.2o7.net track.tamedia.com.tw js.rfp.fout.jp http://r.turn.com http://tags.crwdcntrl.net https://usedcar-image-v2.azurewebsites.net https://usedcar-img.azureedge.net p.adsymptotic.com *.fls.doubleclick.net data:; 1
report-uri https://your-domain.report-uri.com/r/d/csp/reportOnly 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ampproject.org *.ytimg.com *.youtube.com *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com *.googleadservices.com googleads.g.doubleclick.net cdnjs.cloudflare.com assets.zendesk.com connect.facebook.net *.googletagmanager.com certify-js.alexametrics.com cdn.appdynamics.com; frame-src 'self' *.google.com bid.g.doubleclick.net *.youtube.com assets.zendesk.com *.facebook.com s-static.ak.facebook.com tautt.zendesk.com cdn.appdynamics.com www.webuycars.co.za; object-src 'self'; worker-src 'self' blob:; 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; connect-src https: wss:; 1
base-uri 'self'; default-src https: data:; script-src blob: https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; connect-src https://*.crisp.chat https://*.zapier.com https://www.googletagmanager.com https://*.trackjs.com https://*.abtasty.com *.intercom.io *.facebook.net *.facebook.com www.google-analytics.com *.google.com *.vimeo.com *.bugsnag.com https://sentry.io https://*.sendinblue.com https://*.mixpanel.com https://*.imagify.io https://yoast.com https://links.services.disqus.com wss://*.crisp.chat wss://*.intercom.io wss://realtime.services.disqus.com https://ampcid.google.fr https://amp-error-reporting.appspot.com https://cdn.ampproject.org https://*.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://*.bing.com https://*.g.doubleclick.net https://*.legalplace.fr; object-src 'self'; upgrade-insecure-requests 1
default-src 'self'; style-src 'self' 'unsafe-inline' *.typekit.net fonts.googleapis.com tagmanager.google.com/ www.googletagmanager.com/ script.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' * tagmanager.google.com/ www.googletagmanager.com/; img-src 'self' data: * ssl.gstatic.com/; frame-src 'self' *.addthis.com *.youtube.com *.vimeo.com *.wistia.com *.wistia.net *.hotjar.com *.doubleclick.net *.ceros.com *.guardiananytime.com *.cloudfront.net *.adsrvr.org *.visme.co *.ipipeline.com *.guardianlife.com guardianlife.uat.aws.glic.com *.getsmartcontent.com *.bound360.com tagmanager.google.com *.podbean.com d.agkn.com cloud.alert.guardiandirect.com cloud.connect.guardian pixel.mathtag.com/; connect-src 'self' collectorprod.glic.com *.google-analytics.com *.addthis.com *.hotjar.com *.hotjar.io wss://*.hotjar.com ws://*.hotjar.com *.doubleclick.net *.g.doubleclick.net *.wistia.com *.wistia.net *.litix.io embed-fastly.wistia.com embedwistia-a.akamaihd.net *.getsmartcontent.com *.bound360.com tagmanager.google.com *.podbean.com d.agkn.com cloud.alert.guardiandirect.com cloud.connect.guardian; font-src 'self' *.typekit.net fonts.gstatic.com *.hotjar.com data:; media-src 'self' data: blob: embedwistia-a.akamaihd.net embed-fastly.wistia.com *.podbean.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s3-ap-southeast-1.amazonaws.com  *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com cdn.ampproject.org https://assets.wogaa.sg https://assets.adobedtm.com data: application/javascript; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://assets.wogaa.sg/fonts; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://assets.wogaa.sg/fonts; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com https://wogadobeanalytics.sc.omtrdc.net https://cm.everesttech.net https://dpm.demdex.net; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://wogaa.demdex.net https://tools.onemap.sg https://www.onemap.sg; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://stg-api.sgsmil.es https://dpm.demdex.net https://snowplow-web.wogaa.sg; 1
default-src 'self' *.azad.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com ; frame-ancestors 'self' https://trustseal.enamad.ir 1
frame-ancestors https://www.brioni.com/ https://www.brioni.com/ ; 1
default-src 'self' https:; media-src 'self' https: blob:; style-src 'self' https: 'unsafe-inline' data:; connect-src 'self' https: wss:; img-src * data: android-webview-video-poster:; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.retrip.jp retrip.jp *.rtrp.jp rtrp.jp *.gstatic.com *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googletagservices.com *.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.google-analytics.com *.pinterest.com *.twitter.com *.youtube.com *.googlesyndication.com *.cloudflare.com *.doubleclick.net *.caprofitx.com *.googleadservices.com *.popin.cc *.treasuredata.com *.amoad.com *.criteo.com *.i-mobile.co.jp *.impact-ad.jp *.yimg.jp *.gmossp-sp.jp *.oct-pass.net *.nend.net *.mtburn.com *.ad-stir.com *.triver.jp *.criteo.net *.adtdp.com *.ca-conv.jp *.rakuten.co.jp *.adjust-net.jp *.gunosy.com *.softbank.jp *.yahoo.co.jp *.openx.net *.socdm.com *.uliza.jp *.genieesspv.jp *.advg.jp *.microad.jp *.rubiconproject.com *.mbww.com *.ampproject.org *.advertising.com *.adroll.com *.mathtag.com *.ladsp.com *.2mdn.net *.gssprt.jp *.zimg.jp *.logly.co.jp *.tapone.jp *.proparm.jp asset: *.appspot.com *.adingo.jp *.zucks.net *.fluct.me *.skyscanner.net *.goldspotmedia.com a248.e.akamai.net *.speee-ad.jp *.adplan-enquete.com *.google.co.jp *.docomo.ne.jp *.cinarra.com *.flashtalking.com *.apvdr.com *.x-lift.jp *.adsafeprotected.com *.ads-twitter.com *.amazon-adsystem.com bs.serving-sys.com *.bs.serving-sys.com *.akamaized.net *.adnxs.com span-smt.jp *.span-smt.jp *.onesdata.com *.report-uri.com *.surveymonkey.com *.form.run sdk.form.run *.typeform.com *.formzu.net tayori.com *.instagram.com/ *.ad-v.jp *.cci.co.jp *.openxmarket.jp *.servedby-openxmarket.jp *.adtechjp.com *.pubmatic.com *.teads.tv *.ad-generation.jp *.zucks.net.zimg.jp *.fluct.jp *.href.asia *.yieldmanager.com *.seesaa.net *.kau.li *.shinobi.jp *.yahoo.com *.adlantis.jp *.gsspcln.jp *.ampproject.net *.cmertv.com flux-cdn.com *.ssl-images-amazon.com *.bidswitch.net cdn.jsdelivr.net trippiece-d.openx.net rtbcdn.doubleverify.com z.moatads.com sin3-ib.adnxs.com cdn.adnxs.com impact-ad.jp webdemo.dac.co.jp cmertv.com tsukiji.iponweb.net ad-generation.jp as.amanad.adtdp.com pubmatic.com aja.vision adingo.jp appnexus.com openx.com rubiconproject.com publishers.logicad.jp microad.co.jp genieesspv.jp adtech.com ads.pubmatic.com 3ppa.jp.cinarra.com uni-corn.net nobid.io indexexchange.com acesovrn.com lijit.com gumgum.com across.com csonobi.com revcontent.com; worker-src 'self' https: blob:; frame-src 'self' https: gsa://onpageload command://event webpagecontroller://complete callback://https webviewprogress:; report-uri https://trippiece.report-uri.io/r/default/csp/enforce; 1
default-src 'self'; child-src 'self' https://* http://* *; connect-src 'self' wss://*.zopim.com https://*.zdassets.com https://analytics.netdirector.co.uk; font-src 'self' https://assets.netdirector.co.uk http://assets.netdirector.co.uk assets.netdirector.co.uk https://*.googleapis.com http://*.googleapis.com *.googleapis.com https://*.gstatic.com http://*.gstatic.com *.gstatic.com https://*.zopim.com http://*.zopim.com *.zopim.com https://use.fontawesome.com http://use.fontawesome.com use.fontawesome.com data:; frame-ancestors 'self'; frame-src 'self' https://* http://* *; img-src 'self' https://blog.gforces.co.uk http://blog.gforces.co.uk blog.gforces.co.uk https://*.google-analytics.com http://*.google-analytics.com *.google-analytics.com https://assets.netdirector.co.uk http://assets.netdirector.co.uk assets.netdirector.co.uk https://d3rjkbj0efme5v.cloudfront.net http://d3rjkbj0efme5v.cloudfront.net d3rjkbj0efme5v.cloudfront.net https://*.googleapis.com http://*.googleapis.com *.googleapis.com https://*.gstatic.com http://*.gstatic.com *.gstatic.com https://*.google.com http://*.google.com *.google.com https://*.zopim.com http://*.zopim.com *.zopim.com https://*.zopim.io http://*.zopim.io *.zopim.io https://*.netdirector.auto http://*.netdirector.auto *.netdirector.auto data:; media-src 'self' https://*.zopim.com http://*.zopim.com *.zopim.com; script-src 'self' https://*.google-analytics.com http://*.google-analytics.com *.google-analytics.com https://assets.netdirector.co.uk http://assets.netdirector.co.uk assets.netdirector.co.uk https://*.googleapis.com http://*.googleapis.com *.googleapis.com https://*.zopim.com http://*.zopim.com *.zopim.com https://*.zdassets.com http://*.zdassets.com *.zdassets.com https://stackpath.bootstrapcdn.com http://stackpath.bootstrapcdn.com stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com http://cdnjs.cloudflare.com cdnjs.cloudflare.com https://code.jquery.com http://code.jquery.com code.jquery.com https://static.analytics.netdirector.auto http://static.analytics.netdirector.auto static.analytics.netdirector.auto https://*.netdirector.auto http://*.netdirector.auto *.netdirector.auto https://cdn.jsdelivr.net http://cdn.jsdelivr.net cdn.jsdelivr.net https://unpkg.com/graphiql/ https://unpkg.com/react/ https://unpkg.com/react-dom/ 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://assets.netdirector.co.uk http://assets.netdirector.co.uk assets.netdirector.co.uk https://*.googleapis.com http://*.googleapis.com *.googleapis.com https://*.gstatic.com http://*.gstatic.com *.gstatic.com https://stackpath.bootstrapcdn.com http://stackpath.bootstrapcdn.com stackpath.bootstrapcdn.com https://use.fontawesome.com http://use.fontawesome.com use.fontawesome.com https://*.netdirector.auto http://*.netdirector.auto *.netdirector.auto https://unpkg.com/graphiql/ https://unpkg.com/react/ https://unpkg.com/react-dom/ 'unsafe-inline'; worker-src 'self' blob:; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: http://*.amazonaws.com *.britishcouncil.org/ http://englishagendad7.bcdev.org.uk https://*.ckeditor.com https://*.cloudflare.com https://*.consensu.org https://*.doubleclick.net http://connect.facebook.net https://*.facebook.com *.google-analytics.com *.google.com http://www.googleadservices.com https://*.googleusercontent.com *.googletagmanager.com https://www.gstatic.com https://bam.nr-data.net https://js-agent.newrelic.com http://*.qualaroo.com *.rackcdn.com https://www.recaptcha.net http://*.sharethis.com http://static.cdn-ec.viddler.com http://*.viddler.com https://www.youtube.com *.zdassets.com *.zendesk.com *.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 1
frame-ancestors 'self' https://*.google.com 1
default-src 'self' https: blob: data: wss://widget-mediator.zopim.com; base-uri 'self'; block-all-mixed-content; font-src 'self' data: d2zk4u3pjs0oai.cloudfront.net d1li5og345f2kj.cloudfront.net letote-assets-staging.s3.amazonaws.com; form-action 'self' www.facebook.com; frame-ancestors 'none'; manifest-src 'none'; media-src 'self' static.zdassets.com d2zk4u3pjs0oai.cloudfront.net d1li5og345f2kj.cloudfront.net letote-assets-staging.s3.amazonaws.com; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' 'sha256-1rTNIoD+KfkWaRo0s9l8KtmC4yVenZS4d4Vh1Qjybko=' 'nonce-ucAxFBNfmWAGt29nmmn9+nwBWXbpnsAFAq+YjpC8o1A='; style-src 'self' 'unsafe-inline' d2zk4u3pjs0oai.cloudfront.net d1li5og345f2kj.cloudfront.net letote-assets-staging.s3.amazonaws.com; upgrade-insecure-requests; report-uri https://letote.report-uri.com/r/d/csp/enforce 1
default-src https: 'unsafe-eval' 'unsafe-inline' wss://*.hotjar.com *.hotjar.com data:; img-src * data: blob:, connect-src 'self' wss://*.hotjar.com *.hotjar.com *.hotjar.io *.addthis.com  lydia-app.com *.lydia-app.com *.algolianet.com *.algolia.net *.analytics.google.com *.google-analytics.com  , object-src 'self', frame-ancestors 'self', base-uri https://www.upp.photo/, form-action 'self' https://netanswer.rpxnow.com https://systempay.cyberpluspaiement.com https://www.paristech-alumni.org https://www.wats4u.com http://manageurs.mjb.lan https://manageurs.mjr1108.com https://www.xmp-consult.org   1
default-src 'self';script-src 'self' 'nonce-s3/vEGCKtg79MNVcHMfq' *.googleapis.com *.googletagmanager.com *.sharethis.com *.google.com *.youtube.com *.ytimg.com *.jquery.com maxcdn.bootstrapcdn.com;object-src 'none';style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com;img-src 'self' products.isitan.com *.google-analytics.com *.sharethis.com data: *.youtube.com;media-src 'none';frame-src 'self' c.sharethis.mgr.consensu.org buttons-config.sharethis.com *.youtube.com *.youtube-nocookie.com;font-src 'self' data: maxcdn.bootstrapcdn.com;connect-src 'self' *.sharethis.com *.localhost:5001 *.localhost:* *.performans.com *.google-analytics.com *.doubleclick.net;frame-ancestors 'self';report-uri /WebResource.axd?cspReport=true 1
upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://static.woopra.com https://s.ytimg.com https://webintercept.bellomyonline.com https://www.woopra.com https://fonts.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js-agent.newrelic.com/ https://bam.nr-data.net https://cdn.rawgit.com https://d2oh4tlt9mrke9.cloudfront.net https://ws.sessioncam.com https://bam-cell.nr-data.net/ https://livechat.lge-ku.com/  https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://polyfill.io https://youtube.com www.googletagmanager.com www.youtube.com; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://static.woopra.com https://s.ytimg.com https://webintercept.bellomyonline.com https://www.woopra.com https://fonts.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js-agent.newrelic.com/ https://bam.nr-data.net https://cdn.rawgit.com https://d2oh4tlt9mrke9.cloudfront.net https://ws.sessioncam.com https://bam-cell.nr-data.net/ https://livechat.lge-ku.com/  https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://polyfill.io https://youtube.com www.googletagmanager.com www.youtube.com; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://static.woopra.com https://s.ytimg.com https://webintercept.bellomyonline.com https://www.woopra.com https://fonts.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/  fonts.googleapis.com https://cdnjs.cloudflare.com; base-uri 'self'; form-action 'self' https://my.lge-ku.com https://lge-ku.us4.list-manage.com; frame-ancestors 'self' 1
default-src http: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; img-src http: data: blob:; connect-src http: wss://*.madpaws.com.au https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com 'unsafe-eval' 1
object-src 'self'; worker-src 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.googlecommerce.com *.googleadservices.com *.braintreegateway.com *.googleapis.com *.cloudflare.com *.planetart.com *.newrelic.com *.twitter.com *.ads-twitter.com *.facebook.net *.adroll.com *.livechatinc.com cdn.brcdn.com www.paypalobjects.com *.brsrvr.com *.optimizely.com *.nr-data.net *.pcrl.co *.picreel.com *.bing.com *.extole.com *.yimg.com *.yahoo.com *.sharethis.com *.amazonaws.com *.rubiconproject.com *.doubleclick.net *.ups-mi.net *.pinterest.com *.paypal.com *.tellapal.com *.momsaffiliate.com *.emjcd.com *.shareasale.com t.co *.locker2.com *.adxcel-ec2.com *.gstatic.com *.steelhousemedia.com www.googletagmanager.com pixel.cdnwidget.com snap.licdn.com px.ads.linkedin.com *.tvsquared.com unpkg.com d39517acq78dhc.cloudfront.net js.braintreegateway.com *.cardinalcommerce.com *.dca0.com d.adroll.mgr.consensu.org *.ccdc02.com *.openx.net *.rlcdn.com *.adnxs.com *.bidswitch.net *.3lift.com *.taboola.com *.pubmatic.com *.outbrain.com *.casalemedia.com *.advertising.com www.clickcease.com *.mail.simplytoimpress.com track.cordial.io *.personalcreations.com tags.tiqcdn.com use.typekit.net dpm.demdex.net www.lightboxcdn.com t.channeladvisor.com tag.bounceexchange.com s.pinimg.com assets.bounceexchange.com api.bounceexchange.com cdn.staticfile.org cdn.photoaffections.com;frame-ancestors 'self' https://www.photoaffections.com ;upgrade-insecure-requests 1
default-src 'none';connect-src 'self' https://daemonclicks.com https://static.daemonclicks.com https://www.google-analytics.com;img-src 'self' data: https://static.porngameshub.com https://static.daemonclicks.com https://www.googletagmanager.com https://www.google-analytics.com;media-src https://static.porngameshub.com https://static.daemonclicks.com;style-src 'self' 'unsafe-inline';font-src 'self' https://static.porngameshub.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' https://static.daemonclicks.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://web.webpushs.com;form-action 'self';frame-src *;child-src *.porngameshub.com;manifest-src 'self'; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://*.criteo.com https://static.criteo.net https://www.zenaps.com https://isitetv.com https://ln-rules.rewardstyle.com https://e.issuu.com https://*.recaptcha.net https://*.hotjar.com https://*.akamaihd.net https://*.translate.naver.net https://www.shoplooks.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.hotjar.com wss://*.hotjar.com https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://checkout.mankind.co.uk https://m.mankind.co.uk https://www.mankind.co.uk https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://*.criteo.com https://static.criteo.net https://ln-rules.rewardstyle.com https://*.baidu.com https://*.recaptcha.net https://*.akamaihd.net https://*.sciencebehindecommerce.com https://www.gstatic.cn https://*.shoplooks.com https://slooks.top https://slooks.me https://*.hotjar.com https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://*.google-analytics.com https://sc-static.net https://*.google.co.uk https://google.co.uk; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://www.shoplooks.com https://static.shoplooks.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mastodon.art; img-src 'self' https: data: blob: https://mastodon.art; style-src 'self' https://mastodon.art 'nonce-BsmAqmWl3CMwVGyCOhSD9w=='; media-src 'self' https: data: https://mastodon.art; frame-src 'self' https:; manifest-src 'self' https://mastodon.art; connect-src 'self' data: blob: https://mastodon.art https://cdn.masto.host wss://mastodon.art; script-src 'self' https://mastodon.art; child-src 'self' blob: https://mastodon.art; worker-src 'self' blob: https://mastodon.art 1
frame-ancestors 'self' *.sc.com *.standardchartered.com.tw *.standardchartered.com 1
frame-ancestors 'self' securian.marketing.adobe.com securian.experiencecloud.adobe.com experience.adobe.com 1
frame-ancestors 'self' http://*.brose.net http://brose.net https://*.brose.net https://brose.net https://*.ariba.com https://*.zkw.at http://*.zkw.at https://*.mycatalogcloud.com  http://*.mycatalogcloud.com http://*.valeo.determine.com https://*.valeo.determine.com http://valeo.determine.com https://valeo.determine.com https://www.elwitec.ch/ 1
frame-ancestors https://*.ionos.it https://ionos.it; 1
default-src 'self' https://connect.facebook.net/en_US/fbevents.js https://www.google.com/recaptcha/api.js https://fonts.gstatic.com/  https://fonts.googleapis.com https://www.googletagmanager.com ;script-src 'self'  'sha256-ZFgEXkseyEt3CFGjUxYUE6rV3zJeeINABgKRBELxcrM=' 'sha256-eHvlfSp4WdmxVEF62vHFKGeY5BrXBPmZer3n9XNFfyU=' 'sha256-7Ia7ivoj7HI/U+5g2XG9hbQ69AbUohgkE2T1pl/AAjE=' https://www.grupoanaya.es/js/btn_compra.js https://www.gstatic.com/ https://connect.facebook.net/en_US/fbevents.js https://www.gstatic.com/recaptcha/releases/66WEle60vY1w2WveBS-1ZMFs/recaptcha__es.js https://www.gstatic.com/recaptcha/api2/v1566858990656/recaptcha__es.js https://connect.facebook.net/signals/config/1610730305895192  https://www.googletagmanager.com https://rec.smartlook.com/ https://track.oniad.com/ https://track.adform.net/  https://scontent.cdninstagram.com/  https://platform.oniad.com  https://track.adform.net/serving/scripts/trackpoint/async/  https://www.google-analytics.com/  https://www.googletagmanager.com https://api.instagram.com https://ajax.googleapis.com/* https://www.google.com/recaptcha/api.js ;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://hello.myfonts.net/count/36c8c0  ;img-src * data: 'unsafe-inline';connect-src * 'unsafe-inline';frame-src *;base-uri 'self'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.adremover.org  https://www.google.com https://www.gstatic.com https://cdnjs.cloudflare.com https://d24n15hnbwhuhn.cloudfront.net https://*.google-analytics.com https://ajax.googleapis.com https://rum-static.pingdom.net https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://js.recurly.com https://*.amazon.com https://*.payments-amazon.com https://cdn.trackjs.com https://nsg.symantec.com https://www.youtube.com https://extreme-ip-lookup.com https://*.intercom.io https://*.intercomcdn.com https://*.fomo.com https://geocode.usefomo.com https://*.braintreegateway.com https://www.paypalobjects.com https://c.paypal.com; child-src 'self' https://*.adremover.org  https://*.google.com https://6837053.fls.doubleclick.net https://*.recurly.com https://api-cdn.amazon.com https://*.g.doubleclick.net https://*.amazon.com https://*.payments-amazon.com https://nsg.symantec.com https://*.paypal.com https://www.youtube.com https://*.braintreegateway.com https://*.kaptcha.com; img-src 'self' data: https://*.adremover.org  https://www.google.com https://www.google-analytics.com https://*.pingdom.net https://usage.trackjs.com https://*.g.doubleclick.net https://www.googletagmanager.com https://www.gstatic.com https://d2ldlvi1yef00y.cloudfront.net https://*.ssl-images-amazon.com https://maps.googleapis.com https://nsg.symantec.com https://*.intercomassets.com https://*.intercomcdn.com https://s3-us-west-1.amazonaws.com https://assets.adremover.org https://*.braintreegateway.com https://*.paypal.com; connect-src 'self' https://*.adremover.org https://www.google.com https://api.recurly.com https://api.amplitude.com https://*.pingdom.net https://capture.trackjs.com https://payments.amazon.com https://www.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.amazon.com https://*.googlevideo.com https://*.amazonpay.com https://*.intercom.io wss://*.intercom.io https://*.fomo.com https://*.googleapis.com https://*.braintreegateway.com https://*.braintree-api.com; style-src 'self' 'unsafe-inline' *; upgrade-insecure-requests; report-uri https://api.incrd.com/v1/log/wwwadremover_block_v52; 1
default-src 'none'; script-src https: 'unsafe-inline' 'unsafe-eval' 'self' uniklinikum-dresden.de youtube.com; connect-src 'self'; img-src https: 'self' uniklinikum-dresden.de; style-src 'unsafe-inline' 'self' uniklinikum-dresden.de; font-src 'unsafe-inline' 'self' https://www.uniklinikum-dresden.de data: uniklinikum-dresden.de; frame-src 'self' www.youtube.com cgcweb.med.tu-dresden.de ukd-navigator.de em.altruja.de altruja.de ukdd.de www.ukdd.de; media-src 'self' data: uniklinikum-dresden.de; object-src 'self'; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://plugin.monotote.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tpc.googlesyndication.com https://tr.snapchat.com https://www.shoplooks.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.glossybox.com https://m.glossybox.com https://checkout.glossybox.com https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://plugin.monotote.com https://static.ads-twitter.com https://*.twitter.com https://*.recaptcha.net https://*.tribalfusion.com https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://twitter.com https://tpc.googlesyndication.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://static.criteo.net https://*.shoplooks.com https://slooks.top https://slooks.me; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://www.shoplooks.com https://static.shoplooks.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
script-src 'self' http: 'unsafe-eval' 'unsafe-inline' blob: 1
default-src https:; connect-src https:; font-src https: data:; frame-src https:; frame-ancestors https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; upgrade-insecure-requests 1
frame-ancestors https://microapps.google.com https://www.coke2home.com 1
frame-ancestors https://*.totalwireless.com 1
default-src blob: https: data: 'unsafe-inline' 'unsafe-eval'; script-src https: assets.zendesk.com 'unsafe-inline' 'unsafe-eval'; connect-src https: wss: *.zopim.com; upgrade-insecure-requests 1
default-src 'self' *.mobistar.be *.cloudfront.net *.emsecure.net *.customersaas.com *.orange.be *.netdna-ssl.com; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' * *.customersaas.com t.contentsquare.net contentsquare.com *.emsecure.net *.customersaas.com  *.orange.be *.netdna-ssl.com blob: *.abtasty.com *.googleapis.com; object-src 'self' *.mobistar.be  *.orange.be *.netdna-ssl.com; style-src 'unsafe-inline' 'self' *.mobistar.be *.cloudfront.net *.customersaas.com  *.orange.be *.netdna-ssl.com cdnjs.cloudflare.com *.gstatic.com *.abtasty.com *.googleapis.com messaging-khoros.app.khoros.com; img-src * blob: data: *.abtasty.com *.amazonaws.com *.cloudfront.net *.contentsquare.net; media-src 'self' *.mobistar.be  *.orange.be *.netdna-ssl.com; frame-src 'self' * emsecure.net  *.orange.be; font-src 'self' *.mobistar.be *.customersaas.com  *.orange.be cdn.livechatinc.com themes.googleusercontent.com *.netdna-ssl.com blob: data: *.googleapis.com *.gstatic.com *.abtasty.com brand-messenger.app.khoros.com messaging-khoros.app.khoros.com; connect-src 'self'  *.tealiumiq.com *.usabilla.com *.emsecure.net *.customersaas.com  *.orange.be *.mousestats.com secure.comparecycle.com c.contentsquare.net *.abtasty.com *.contentsquare.net *.app.khoros.com *.smooch.io; report-uri /fr/report-csp-violation 1
default-src 'none'; child-src 'self' https://127.0.0.1:3496/https-security-layer-request https://api.a-trust.at https://www.a-trust.at https://testbox.a-trust.at https://onlinebku.a-trust.at/BKUOnline/https-security-layer-request https://www.handy-signatur.at https://www.help.gv.at https://www.qenta.com https://checkout.wirecard.com https://www.youtube.com https://test1.a-trust.at/mobile/https-security-layer-request/; connect-src https://127.0.0.1:3496/https-security-layer-request https://www.handy-signatur.at/mobile/https-security-layer-request https://test1.a-trust.at/mobile/https-security-layer-request https://www.handy-signatur.at/hs2/modules/core/ajax/bklogin/start.aspx https://www.handy-signatur.at/hs2/modules/core/ajax/upload.aspx https://www.handy-signatur.at/hs2/modules/account/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/account_hs/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/core/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/folders/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/groups/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/infos/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/mails/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/partner/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/passwordTresor/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/pdf/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/qpay/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/scan/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/shares/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/showbox/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/sign/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/sms/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/store/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/sync/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/_admin/scripts/module.min-637447803665625011.js https://www.handy-signatur.at/hs2/modules/core/ajax/accounts.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/archive.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/clientConfig.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/deloitte.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/documents.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/download.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/fields.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/image.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/infos.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/journal.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/languages.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/logins.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/notificationcontacts.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/ping.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/printerSettings.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/profilePicture.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/quickreceipt.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/receiptLogo.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/receiptPrints.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/receipts.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/reminders.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/report.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/rkapp.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/supportedBrowsers.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/syncDownload.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/syncUpload.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/template.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/upload.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/zip.aspx/ https://www.handy-signatur.at/hs2/modules/account/ajax/account.aspx/ https://www.handy-signatur.at/hs2/modules/account_hs/ajax/account_hs.aspx/ https://www.handy-signatur.at/hs2/modules/core/ajax/core.aspx/ https://www.handy-signatur.at/hs2/modules/folders/ajax/folders.aspx/ https://www.handy-signatur.at/hs2/modules/groups/ajax/groups.aspx/ https://www.handy-signatur.at/hs2/modules/infos/ajax/infos.aspx/ https://www.handy-signatur.at/hs2/modules/mails/ajax/mails.aspx/ https://www.handy-signatur.at/hs2/modules/partner/ajax/partner.aspx/ https://www.handy-signatur.at/hs2/modules/passwordTresor/ajax/passwordTresor.aspx/ https://www.handy-signatur.at/hs2/modules/pdf/ajax/pdf.aspx/ https://www.handy-signatur.at/hs2/modules/qpay/ajax/qpay.aspx/ https://www.handy-signatur.at/hs2/modules/scan/ajax/scan.aspx/ https://www.handy-signatur.at/hs2/modules/shares/ajax/shares.aspx/ https://www.handy-signatur.at/hs2/modules/showbox/ajax/showbox.aspx/ https://www.handy-signatur.at/hs2/modules/sign/ajax/sign.aspx/ https://www.handy-signatur.at/hs2/modules/sms/ajax/sms.aspx/ https://www.handy-signatur.at/hs2/modules/store/ajax/store.aspx/ https://www.handy-signatur.at/hs2/modules/sync/ajax/sync.aspx/ https://www.handy-signatur.at/hs2/modules/_admin/ajax/_admin.aspx/; font-src 'self' data:; frame-ancestors 'self' https://www.a-trust.at; frame-src 'self' https://127.0.0.1:3496/https-security-layer-request https://api.a-trust.at https://www.a-trust.at https://testbox.a-trust.at https://onlinebku.a-trust.at/BKUOnline/https-security-layer-request https://www.handy-signatur.at https://www.help.gv.at https://www.qenta.com https://checkout.wirecard.com https://www.youtube.com https://test1.a-trust.at/mobile/https-security-layer-request/; img-src 'self' data: https://*.wirecard.com; script-src 'unsafe-eval' https://www.handy-signatur.at/hs2/modules/core/ajax/clientConfig.aspx https://www.handy-signatur.at/hs2/static/complete.assets-637447803665625011.js https://www.handy-signatur.at/hs2/static/complete.etresor-637447803665625011.js https://www.handy-signatur.at/hs2/static/complete.min-637447803665625011.js; style-src 'self' 'unsafe-inline'; upgrade-insecure-requests; report-uri https://www.handy-signatur.at/hs2/modules/core/ajax/report.aspx 1
object-src '*' 1
script-src 'self' https: 'nonce-0017dyuHP09nyrAZ4ITOvw==' 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' https://maxcdn.bootstrapcdn.com  https://stackpath.bootstrapcdn.com https://www.google-analytics.com https://stats.g.doubleclick.net blob: data: https://fonts.googleapis.com/css;font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; 1
default-src 'self' www: fonts.googleapis.com fonts.gstatic.com js.mtnpaygw.mtnnigeria.net/mtn/v2 mtn-ui.mtnpaygw.mtnnigeria.net js.mtnpaygw.mtnnigeria.net js-proxy.mtnpaygw.mtnnigeria.net customui.mtnpaygw.mtnnigeria.net mtn-nga.dimelochat.com mtn-nga.ws.dimelo.com mtn-nga.messaging.dimelo.com js.mtnpay.mtnnigeria.net ui.mtnpay.mtnnigeria.net maps.googleapis.com data: vincentcabrera.fr www.google-analytics.com www.mymtn.com.ng mtnng-prod.voiceweb.eu; script-src 'self' 'unsafe-inline' 'unsafe-eval' mtn-nga.dimelochat.com js.mtnpaygw.mtnnigeria.net/mtn/v2 mtn-ui.mtnpaygw.mtnnigeria.net js.mtnpaygw.mtnnigeria.net mtn-nga.ws.dimelo.com js-proxy.mtnpaygw.mtnnigeria.net customui.mtnpaygw.mtnnigeria.net mtn-nga.messaging.dimelo.com js.mtnpay.mtnnigeria.net maps.googleapis.com ui.mtnpay.mtnnigeria.net www.mymtn.com.ng mtnng-prod.voiceweb.eu; style-src 'self' 'unsafe-inline' 'unsafe-eval' https:; font-src 'self' https: data:; img-src 'self' https: data: http: vincentcabrera.fr www.google-analytics.com; connect-src 'self' ws: wss: blob: https: http: mtn-nga.dimelochat.com mtn-nga.messaging.dimelo.com www.google-analytics.com mtnng-prod.voiceweb.eu 1
default-src 'self' 'unsafe-inline' https: data: wss: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: *; report-uri /report-csp-violation 1
frame-src 'self' *.hotjar.com *.equallevel.com *.unimarket.com *.coupahost.com https://apps.mypurecloud.com *.youtube.com *.schoolfundingcenter.net *.wistia.net *.bazaarvoice.com *.facebook.com *.demco.com http://punchout.demco.com https://punchout.demco.com http://suppliers.equallevel.com https://suppliers.equallevel.com *.google.com *.google-analytics.com *.k12.in.us *.sciquest.com *.ocps.net; frame-ancestors 'self' *.equallevel.com *.unimarket.com *.coupahost.com http://punchout.demco.com https://punchout.demco.com http://suppliers.equallevel.com https://suppliers.equallevel.com *.k12.in.us *.sciquest.com *.ocps.net 1
default-src 'self'; script-src 'self' 'unsafe-inline' www.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net ssl.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.horacemann.com localhost:3238 home-c11.incontact.com www.retirementaccountlogin.com maxcdn.bootstrapcdn.com code.jquery.com recruiting.adp.com www.youtube.com cdn.bootstrapcdn.com www.facebook.com horacemann.actonservice.com connect.facebook.net cdnjs.cloudflare.com www.facebook.com app.kiddom.co cloud.e.horacemann.com woobox.com www.clearsurance.com clearsurance.com Facebook.net Business.facebook.com Twitter.com Twitter.net Linkedin.com Linkedin.net Pinterest.com Pinterest.net Instagram.com Instagram.net Youtube.com Youtube.net Siteimprove.com Dynomapper.com cdn.finra.org staticxx.facebook.com fonts.google.com platform.twitter.com *.twimg.com syndication.twitter.com 'unsafe-eval'; style-src 'self' www.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net ssl.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.horacemann.com localhost:3238 home-c11.incontact.com www.retirementaccountlogin.com maxcdn.bootstrapcdn.com code.jquery.com recruiting.adp.com www.youtube.com cdn.bootstrapcdn.com www.facebook.com horacemann.actonservice.com connect.facebook.net cdnjs.cloudflare.com www.facebook.com app.kiddom.co cloud.e.horacemann.com woobox.com www.clearsurance.com clearsurance.com Facebook.net Business.facebook.com Twitter.com Twitter.net Linkedin.com Linkedin.net Pinterest.com Pinterest.net Instagram.com Instagram.net Youtube.com Youtube.net Siteimprove.com Dynomapper.com cdn.finra.org staticxx.facebook.com fonts.google.com platform.twitter.com *.twimg.com syndication.twitter.com 'unsafe-inline'; child-src 'self' www.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net ssl.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.horacemann.com localhost:3238 home-c11.incontact.com www.retirementaccountlogin.com maxcdn.bootstrapcdn.com code.jquery.com recruiting.adp.com www.youtube.com cdn.bootstrapcdn.com www.facebook.com horacemann.actonservice.com connect.facebook.net cdnjs.cloudflare.com www.facebook.com app.kiddom.co cloud.e.horacemann.com woobox.com www.clearsurance.com clearsurance.com Facebook.net Business.facebook.com Twitter.com Twitter.net Linkedin.com Linkedin.net Pinterest.com Pinterest.net Instagram.com Instagram.net Youtube.com Youtube.net Siteimprove.com Dynomapper.com cdn.finra.org staticxx.facebook.com fonts.google.com platform.twitter.com *.twimg.com syndication.twitter.com; font-src 'self' www.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net ssl.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.horacemann.com localhost:3238 home-c11.incontact.com www.retirementaccountlogin.com maxcdn.bootstrapcdn.com code.jquery.com recruiting.adp.com www.youtube.com cdn.bootstrapcdn.com www.facebook.com horacemann.actonservice.com connect.facebook.net cdnjs.cloudflare.com www.facebook.com app.kiddom.co cloud.e.horacemann.com woobox.com www.clearsurance.com clearsurance.com Facebook.net Business.facebook.com Twitter.com Twitter.net Linkedin.com Linkedin.net Pinterest.com Pinterest.net Instagram.com Instagram.net Youtube.com Youtube.net Siteimprove.com Dynomapper.com cdn.finra.org staticxx.facebook.com fonts.google.com platform.twitter.com *.twimg.com syndication.twitter.com data:; img-src 'self' www.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net ssl.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.horacemann.com localhost:3238 home-c11.incontact.com www.retirementaccountlogin.com maxcdn.bootstrapcdn.com code.jquery.com recruiting.adp.com www.youtube.com cdn.bootstrapcdn.com www.facebook.com horacemann.actonservice.com connect.facebook.net cdnjs.cloudflare.com www.facebook.com app.kiddom.co cloud.e.horacemann.com woobox.com www.clearsurance.com clearsurance.com Facebook.net Business.facebook.com Twitter.com Twitter.net Linkedin.com Linkedin.net Pinterest.com Pinterest.net Instagram.com Instagram.net Youtube.com Youtube.net Siteimprove.com Dynomapper.com cdn.finra.org staticxx.facebook.com fonts.google.com platform.twitter.com *.twimg.com syndication.twitter.com data:; connect-src 'self' *.horacemann.com; 1
default-src https: 'unsafe-inline' data: 'unsafe-eval' 1
default-src 'self' http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://cdn.datatables.net https://static.zdassets.com https://v2.zopim.com https://unpkg.com https://unpkg.com/ionicons@5.1.2/dist/ionicons/p-4372c4bc.js https://static.customersaas.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://www.google.com/ https://www.gstatic.com/  https://widget-mediator.zopim.com/ https://static.hotjar.com/ https://script.hotjar.com/; connect-src 'self' https://ekr.zdassets.com https://tracker.customersaas.com/ https://api.customersaas.com https://www.google-analytics.com/ https://widget-mediator.zopim.com wss://widget-mediator.zopim.com https://in.hotjar.com/ http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://vc.hotjar.io/ https://stats.g.doubleclick.net/ ; img-src 'self' 'unsafe-inline' https://www.viva.com.bo https://viva.com.bo https://www.google.com https://www.google.com.bo https://www.google-analytics.com https://secure.gravatar.com https://v2assets.zopim.io/ https://v2.zopim.com/ https://maps.gstatic.com https://maps.googleapis.com https://d35v9wsdymy32b.cloudfront.net https://static.customersaas.com https://d3mwk3f7r8fv9u.cloudfront.net data:; style-src 'self' 'unsafe-inline'  https://fonts.googleapis.com https://cdn.datatables.net https://d1r5etm691cejh.cloudfront.net https://static.customersaas.com; font-src 'self' https://fonts.gstatic.com https://v2.zopim.com/ https://static.customersaas.com data:; frame-src https://www.google.com/ https://vars.hotjar.com/; 1
default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src * blob:; worker-src * blob: 1
default-src 'none'; connect-src 'self' https://api.edq.com/ https://bat.bing.com/ https://bam.nr-data.net/ https://stats.g.doubleclick.net/j/collect https://www.facebook.com/tr/ https://hello.zonos.com https://us1.api.edq.com/ https://www.google-analytics.com/; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/; img-src 'self' data: https://seal.networksolutions.com https://sealserver.trustkeeper.net https://bat.bing.com https://media.lmctruck.com/images/ https://d1vyngmisxigjx.cloudfront.net/images/flags/ https://www.facebook.com/tr/ https://stats.g.doubleclick.net/r/collect https://www.google-analytics.com/ https://www.googletagmanager.com/ https://i.ytimg.com/ https://www.google.com/ https://ssl.gstatic.com/ https://www.gstatic.com/images/ https://lh3.googleusercontent.com/ https://hello.zonos.com/images/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://bam.nr-data.net/ https://js-agent.newrelic.com/ https://seal.networksolutions.com/siteseal/javascript/siteseal.js https://www.googletagmanager.com/gtm.js https://bat.bing.com/bat.js https://www.google-analytics.com/plugins/ua/ec.js https://www.google-analytics.com/analytics.js https://connect.facebook.net https://cdn.bronto.com/coupon/js/ https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/ https://tagmanager.google.com/debug https://hello.zonos.com/ https://tagmanager.google.com/debug/ https://www.googletagmanager.com/debug/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://ajax.cloudflare.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://tagmanager.google.com/debug/; frame-ancestors 'self'; frame-src 'self' https://www.facebook.com/ https://checkout.iglobalstores.com/ https://www.google.com/ https://www.youtube.com/; form-action 'self' https://www.facebook.com/tr/; 1
default-src 'self'; connect-src 'self'; img-src *; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; 1
default-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.ocbcnisp.com/ https://chatbot.ocbcnisp.com/ https://www.google.com/recaptcha/ https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://websdk.appflyer.com/ https://wa.appflyer.com/ https://cdn.krdx.net/ https://consumer.krdx.net/ https://beacon.krxd.net/ https://connect.facebook.net/ https://www.googleadservices.com/; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.ocbcnisp.com/; img-src *; object-src https://www.ocbcnisp.com/; font-src data: https://www.ocbcnisp.com/; form-action 'self' 'none' 'unsafe-eval' 'unsafe-inline' https://www.ocbcnisp.com/; frame-src 'self' 'unsafe-inline' https://www.ocbcnisp.com/ https://www.google.com/recaptcha/ https://chatbot.ocbcnisp.com/ https://cdn.krdx.net/; frame-ancestors 'self' 'unsafe-inline' https://www.ocbcnisp.com/ https://chatbot.ocbcnisp.com/; connect-src 'self' 'unsafe-inline' https://www.ocbcnisp.com/ https://chatbot.ocbcnisp.com/; script-src-elem 'self' 'unsafe-inline' https://www.ocbcnisp.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/api.js https://chatbot.ocbcnisp.com/ https://www.googletagmanager.com/; 1
default-src 'self' stats.g.doubleclick.net *.google-analytics.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' maps.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com connect.facebook.net; frame-src *.youtube.com *.google.com; img-src data: 'self'  maps.gstatic.com *.googleapis.com *.google.com *.ggpht *.google-analytics.com *.facebook.com stats.g.doubleclick.net; object-src 'self' 'unsafe-inline'; frame-ancestors none; 1
connect-src *; default-src 'self'; font-src 'self' data: fonts.gstatic.com pro.fontawesome.com *.typekit.net *.cloudflare.com; frame-src 'self' www.google.com *.youtube.com *.vimeo.com; img-src 'self' data: *.google-analytics.com *.cloudflare.com *.gravatar.com *.googleapis.com *.gstatic.com *.doubleclick.net; media-src *; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.googleapis.com *.google.com *.gstatic.com *.google-analytics.com ajax.googleapis.com *.cloudflare.com *.jsdelivr.net *.cdn.civiccomputing.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com pro.fontawesome.com *.cloudflare.com *.jsdelivr.net *.typekit.net; 1
default-src 'self' bongacams.com *.bongacams.com ymetrica1.com mc.yandex.ru cam.bet *.cam.bet cdn.fluidplayer.com movcpm.com *.movcpm.com greedseed.world xmjvf.com *.xmjvf.com 9v5.ru *.9v5.ru *.adtng.com adtng.com http://151.80.33.131 http://176.9.86.142 http://176.9.142.103 http://144.76.24.149 http://136.243.73.233 http://148.251.0.18 http://144.76.218.27 http://148.251.136.187; style-src cdn.fluidplayer.com fonts.googleapis.com 'self' 'unsafe-inline'; script-src bongacams.com *.bongacams.com cdn.jsdelivr.net cdn.fluidplayer.com 'self' 'unsafe-eval' 'unsafe-inline'; font-src 'self' fonts.gstatic.com data:; img-src 'self' bongacams.com *.bongacams.com counter.yadro.ru mc.yandex.ru ymetrica1.com mc.webvisor.org cdn.fluidplayer.com movcpm.com *.movcpm.com xmjvf.com *.xmjvf.com 9v5.ru *.9v5.ru *.adtng.com adtng.com data:; 1
default-src 'self' https://*.gstatic.com https://*.billwerk.com https://*.google.com https://*.google.de https://*.google.co.uk https://*.google.co.in https://*.google.ac https://*.google.com.af https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.com.bd https://*.google.com.br https://*.google.co.bw https://*.google.by https://*.google.ca https://*.google.cl https://*.google.cn https://*.google.com.co https://*.google.dk https://*.google.dz https://*.google.es https://*.google.fr https://*.google.co.il https://*.google.it https://*.google.co.jp https://*.google.lu https://*.google.com.mx https://*.google.nl https://*.google.com.ph https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.com.sa https://*.google.tk https://*.google.tn https://*.google.com.tr https://*.google.co.ve https://*.google.com.vn https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://*.vimeo.com https://*.facebook.com https://*.vimeocdn.com https://*.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.gstatic.com https://*.billwerk.com https://*.google.com https://*.google.de https://*.google.co.uk https://*.google.co.in https://*.google.ac https://*.google.com.af https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.com.bd https://*.google.com.br https://*.google.co.bw https://*.google.by https://*.google.ca https://*.google.cl https://*.google.cn https://*.google.com.co https://*.google.dk https://*.google.dz https://*.google.es https://*.google.fr https://*.google.co.il https://*.google.it https://*.google.co.jp https://*.google.lu https://*.google.com.mx https://*.google.nl https://*.google.com.ph https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.com.sa https://*.google.tk https://*.google.tn https://*.google.com.tr https://*.google.co.ve https://*.google.com.vn https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://*.vimeo.com https://*.facebook.com https://*.vimeocdn.com https://*.amazonaws.com; connect-src * 'self' https://*.gstatic.com https://*.billwerk.com https://*.google.com https://*.google.de https://*.google.co.uk https://*.google.co.in https://*.google.ac https://*.google.com.af https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.com.bd https://*.google.com.br https://*.google.co.bw https://*.google.by https://*.google.ca https://*.google.cl https://*.google.cn https://*.google.com.co https://*.google.dk https://*.google.dz https://*.google.es https://*.google.fr https://*.google.co.il https://*.google.it https://*.google.co.jp https://*.google.lu https://*.google.com.mx https://*.google.nl https://*.google.com.ph https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.com.sa https://*.google.tk https://*.google.tn https://*.google.com.tr https://*.google.co.ve https://*.google.com.vn https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://*.vimeo.com https://*.facebook.com https://*.vimeocdn.com https://*.amazonaws.com; img-src data: 'self' https://*.gstatic.com https://*.billwerk.com https://*.google.com https://*.google.de https://*.google.co.uk https://*.google.co.in https://*.google.ac https://*.google.com.af https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.com.bd https://*.google.com.br https://*.google.co.bw https://*.google.by https://*.google.ca https://*.google.cl https://*.google.cn https://*.google.com.co https://*.google.dk https://*.google.dz https://*.google.es https://*.google.fr https://*.google.co.il https://*.google.it https://*.google.co.jp https://*.google.lu https://*.google.com.mx https://*.google.nl https://*.google.com.ph https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.com.sa https://*.google.tk https://*.google.tn https://*.google.com.tr https://*.google.co.ve https://*.google.com.vn https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://*.vimeo.com https://*.facebook.com https://*.vimeocdn.com https://*.amazonaws.com; style-src 'self' 'unsafe-inline' https://*.gstatic.com https://*.billwerk.com https://*.google.com https://*.google.de https://*.google.co.uk https://*.google.co.in https://*.google.ac https://*.google.com.af https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.com.bd https://*.google.com.br https://*.google.co.bw https://*.google.by https://*.google.ca https://*.google.cl https://*.google.cn https://*.google.com.co https://*.google.dk https://*.google.dz https://*.google.es https://*.google.fr https://*.google.co.il https://*.google.it https://*.google.co.jp https://*.google.lu https://*.google.com.mx https://*.google.nl https://*.google.com.ph https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.com.sa https://*.google.tk https://*.google.tn https://*.google.com.tr https://*.google.co.ve https://*.google.com.vn https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://*.vimeo.com https://*.facebook.com https://*.vimeocdn.com https://*.amazonaws.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: https://ssl.google-analytics.com https://seal.networksolutions.com https://ajax.googleapis.com https://s7.addthis.com https://connect.facebook.net; 1
default-src 'self'; style-src * 'unsafe-inline'; frame-ancestors 'self' https://cp.apply.creditkarma.com/ https://*.facebook.com; frame-src 'self' https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com  https://cdn.trustev.com; font-src 'self' * data:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com https://mpsnare.iesnare.com https://googlesyndication.com https://www.mercurycards.com https://workforcenow.adp.com https://adservice.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googletagservices.com https://aa.agkn.com/adscores http://www.macromedia.com https://aa.agkn.com https://pagead2.googlesyndication.com https://www.google-analytics.com  https://api.cybersource.com https://apitest.cybersource.com https://cdnjs.cloudflare.com/ https://d10lpsik1i8c69.cloudfront.net https://connect.facebook.net https://cdn.inspectlet.com https://app.trustev.com https://cdn-us.trustev.com https://tpc.googlesyndication.com; connect-src  'self' https://www.google-analytics.com  https://api.cybersource.com https://apitest.cybersource.com https://pagead2.googlesyndication.com https://settings.luckyorange.net https://hn.inspectlet.com wss://ws.inspectlet.com https://app.trustev.com https://cdn-us.trustev.com https://cdn.trustev.com 1
default-src 'none'; img-src 'self' data: https://chart.apis.google.com https://www.mycryptoheroes.net https://www.gstatic.com https://www.google-analytics.com https://asp.crypto-click.com https://www.mycryptoheroes.net; script-src 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://cdn.rawgit.com https://aframe.io https://www.mycryptoheroes.net https://cdn.jsdelivr.net/ https://towani.info https://adservice.google.co.jp https://adservice.google.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://ajax.googleapis.com https://www.google-analytics.com ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com ;font-src 'self' https://fonts.gstatic.com ;form-action 'self' ; connect-src 'self' https://jeromeetienne.github.io https://jeromeetienne.github.io https://www.mycryptoheroes.net; base-uri 'none'; frame-ancestors 'self'; frame-src 'self' https://www.mycryptoheroes.net https://www.youtube.com https://googleads.g.doubleclick.net ; 1
frame-ancestors 'self' https://*.ekhn.de https://www.zgv.info https://rpa-ekhn.de 1
frame-ancestors 'self' *.movieparkgermany.de 1
frame-ancestors 'self' http://newfront.benepia.co.kr 1
default-src *; img-src * data: https://*; style-src * https://* 'unsafe-inline'; script-src * https://* 'unsafe-inline' 'unsafe-eval'; font-src * data:; 1
frame-ancestors 'self' https://s1.ariba.com https://service.ariba.com https://*.punchout2go.com http://*.punchout2go.com http://portal.punchout2go.com https://portal.punchout2go.com https://danafarber.edirx.com https://go.stemcell.com http://translate.google.com https://translate.google.com https://s1-2.ariba.com https://*.labcloudinc.com https://*.optimizely.com https://*.sciquest.com http://bchtest.edirx.com https://bchtest.edirx.com https://qa-connect.punchout2go.com http://*.edirx.com https://*.edirx.com http://finpiadev4.tch.harvard.edu:8220 http://finprd.tch.harvard.edu http://bch.edirx.com https://bch.edirx.com http://s1-2.ariba.com http://*.ariba.com https://onlinexperiences.com https://calendar.time.ly https://assets.calendly.com https://meeting.grooveapp.com https://*.6connex.com https://*.epmxweb.com; frame-src *.optimizely.com 'self' *.doubleclick.net *.cloudfront.net *.stemcell.com *.youtube.com *.brightcove.com docs.google.com *.brightcove.net *.soundcloud.com *.jotformpro.com *.jotform.com *.jotform2.com *.jotform.net cdn.jotfor.ms vars.hotjar.com disqus.com *.disquscdn.com *.disqus.com *.jotform.io *.livechatinc.com *.jotform.ca *.google.com *.paymetric.com *.xipaynet.com *.xisecurenet.com *.shortstack.com platform.twitter.com *.onlineexperiences.com *.time.ly *.calendly.com *.grooveapp.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com; frame-src 'self' webchat.esper.net https://hcaptcha.com https://*.hcaptcha.com; img-src 'self' api.modarchive.org; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com 1
default-src 'self' https://tn.fromoldbooks.org https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://www.google-analytics.com https://tpc.googlesyndication.com https://stats.g.doubleclick.net https://csi.gstatic.com ; img-src 'self' https://tn.fromoldbooks.org https://www.google-analytics.com https://pagead2.googlesyndication.com https://csi.gstatic.com; style-src 'self' 'unsafe-inline'; font-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.google.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://www.google-analytics.com *.doubleclick.net https://www.googletagervices.com https://ssl.google-analytics.com https://cdn.ampproject.org https://cdn.taboola.com https://adservice.google.com https://adservice.google.ca https://partner.googleadservices.com  https://www.googletagservices.com https://tpc.googlesyndication.com; base-uri 'self'; frame-src 'self' https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net; 1
default-src 'none'; font-src 'self' data:; img-src 'self' data:; media-src data:; script-src 'self' 'unsafe-inline' https://analytics.frontlinedefenders.org; style-src 'self' 'unsafe-inline' 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com https://data.caat.org.uk https://s.ytimg.com https://www.youtube.com https://cc.cdn.civiccomputing.com https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://cse.google.com https://ajax.googleapis.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://data.caat.org.uk https://p.typekit.net https://www.google.com https://fonts.googleapis.com https://unpkg.com https://cdnjs.cloudflare.com https://use.typekit.net; object-src 'none'; frame-src https://cse.google.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://caat.eaction.org.uk; img-src https: data:; font-src 'self' data: https://use.typekit.net https://fonts.gstatic.com; frame-ancestors 'none'; connect-src 'self' https://data.caat.org.uk https://apikeys.civiccomputing.com https://www.google-analytics.com https://stats.g.doubleclick.net 1
default-src 'self' 'unsafe-inline' https://www.gic.com.sg; base-uri 'self' 'unsafe-inline' https://www.gic.com.sg; connect-src 'self' 'unsafe-inline' www.juicer.io https://www.google-analytics.com https://www.gic.com.sg; font-src 'self' 'unsafe-inline' data: assets.juicer.io fonts.gstatic.com wordpress.com s0.wp.com s1.wp.com https://www.gic.com.sg; form-action 'self' 'unsafe-inline' https://www.gic.com.sg; frame-ancestors 'self' 'unsafe-inline' https://www.gic.com.sg; frame-src 'self' data: widgets.wp.com www.google.com www.youtube.com gicpublicsite.azurewebsites.net https://gic.botbot.ai/ https://www.gic.com.sg; worker-src 'self' data: widgets.wp.com www.google.com https://www.gic.com.sg; img-src 'self' data: *.ggpht.com *.licdn.com i.ytimg.com *.instagram.com *.fbcdn.net *.cdninstagram.com image-store.slidesharecdn.com stats.g.doubleclick.net pixel.wp.com secure.gravatar.com 2.gravatar.com www.google-analytics.com assets.juicer.io s.w.org https://www.gic.com.sg *.wp.com; manifest-src 'self' https://www.gic.com.sg; media-src 'self' scontent.cdninstagram.com https://www.gic.com.sg; object-src 'self' https://www.gic.com.sg; script-src 'self' 'unsafe-eval' 'unsafe-inline' gateway.zscaler.net bam.nr-data.net js-agent.newrelic.com s0.wp.com s1.wp.com secure.gravatar.com stats.wp.com *.google-analytics.com www.googletagmanager.com www.google.com www.gstatic.com cdn.jsdelivr.net s3.amazonaws.com https://www.gic.com.sg *.list-manage.com; style-src 'self' 'unsafe-inline' ajax.googleapis.com fonts.googleapis.com s0.wp.com secure.gravatar.com https://www.gic.com.sg; block-all-mixed-content; 1
default-src 'self' https://www.youtube.com https://geoportal.trier.de https://jobs.b-ite.com http://jobs.b-ite.com https://www.stadtradeln.de https://static.b-ite.com https://www.vrt-info.de http://www.heute-in-trier.de http://www.facebook.com http://platform.twitter.com https://fonts.googleapis.com https://fonts.gstatic.com https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.facebook.com https://platform.twitter.com https://accounts.google.com https://www.bing.com http://www.wetterkontor.de http://94.130.59.28 https://www.trier-info.de https://www.youtube-nocookie.com https://app.docu4d.com https://dienste.wetterkontor.de https://www.pegelonline.wsv.de https://cdn.jsdelivr.net https://cdnjs.cloudflare.com/ajax/libs/lightslider/1.1.6/js/lightslider.js https://www.dw.com 'unsafe-inline' 'unsafe-eval' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'  maps.gstatic.com *.googleapis.com  *.google.com *.gstatic.com  *.facebook.com https://www.googletagmanager.com  https://code.jquery.com https://cdnjs.cloudflare.com https://gitcdn.github.io  *.jsdelivr.net  *.facebook.net *.freshchat.com https://onesignal.com/ https://cdn.onesignal.com/   *.google-analytics.com ; frame-src 'self' assets.zendesk.com tautt.zendesk.com  *.facebook.com s-static.ak.facebook.com https://www.youtube.com *.freshchat.com; object-src 'self'; connect-src 'self' https://*.facebook.net https://*.facebook.com https://*.onesignal.com https://onesignal.com/api/ https://*.doubleclick.net  https://*.google-analytics.com https://*.google.com  https://www.googletagmanager.com:* https://www.google-analytics.com:*   1
default-src * data: ; script-src * data: 'unsafe-inline' 'unsafe-eval' ; style-src * 'unsafe-inline' data: ; frame-ancestors 'none' ; base-uri 'none' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.archives.gov.ua stackpath.bootstrapcdn.com *.google.com *.gstatic.com xhr.spec.whatwg.org fonts.gstatic.com secure.gravatar.com *.cloudflare.com *.googleapis.com *.fontawesome.com www.youtube.com facebook.com *.googletagmanager.com *.google-analytics.com addtocalendar.com stats.g.doubleclick.net data:; font-src 'self' use.fontawesome.com *.tawk.to *.cloudflare.com *.gstatic.com *.googleapis.com themes.googleusercontent.com fonts.gstatic.com data:; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: www.google-analytics.com www.googletagmanager.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://cdnjs.cloudflare.com/ajax/libs/select2/ https://cdn.rawgit.com/ckeditor/ckeditor-dev/ https://cdn.rawgit.com/w8tcha/CKEditor-CodeMirror-Plugin/ platform.twitter.com platform.twitter.co syndication.twitter.com cdn.syndication.twimg.com https://cdn.rawgit.com/ractoon/jQuery-Text-Counter/ https://js-agent.newrelic.com/nr-1071.min.js bam.nr-data.net tagmanager.google.com https://js-agent.newrelic.com/nr-1099.min.js https://sjs.bizographics.com/insight.min.js px.ads.linkedin.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://js-agent.newrelic.com https://www.google.com/recaptcha/api.js https://www.recaptcha.net/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://cdnjs.cloudflare.com/ajax/libs/select2/ platform.twitter.com tagmanager.google.com; img-src 'self' data: www.google-analytics.com https://cdn.rawgit.com/ckeditor/ckeditor-dev/ https://raw.githubusercontent.com/ckeditor/ckeditor-dev/ www.googletagmanager.com www.bureauveritas.com syndication.twitter.com platform.twitter.com *.twimg.com ssl.gstatic.com www.gstatic.com https://stats.g.doubleclick.net; media-src 'self'; frame-src 'self' www.youtube.com tools.eurolandir.com cws.huginonline.com www.googletagmanager.com platform.twitter.com syndication.twitter.com player.youku.com gl.hostcg.com/js/genlead.js https://www.google.com; child-src 'self' blob:; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com; connect-src 'self' www.google-analytics.com https://bam.nr-data.net https://stats.g.doubleclick.net; report-uri https://csp-report-uri.bureauveritas.com 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: https://tag.simpli.fi https://tr.snapchat.com https://pixel.mathtag.com https://sync.mathtag.com https://pixel.mathtag.com https://rtd-tm.everesttech.net https://cm.everesttech.net https://r.turn.com https://secure.adnxs.com https://amplifypixel.outbrain.com https://pixel.tapad.com https://pixel.rubiconproject.com https://pe.intentiq.com https://simage2.pubmatic.com https://www.facebook.com https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://cx.atdmt.com https://www.google.com https://www.google.com.au https://www.google-analytics.com https://www.googletagmanager.com https://www.googletagmanager.com https://cm.g.doubleclick.net https://sync.go.sonobi.com https://sync.search.spotxchange.com https://ce.lijit.com https://dpm.demdex.net https://x.bidswitch.net https://cs.adingo.jp https://uipglob.semasio.net https://ads.stickyadstv.com https://loadm.exelator.com https://beacon.krxd.net https://su.addthis.com https://i.liadm.com https://sync.crwdcntrl.net https://sync.navdmp.com https://aa.agkn.com https://global.ib-ibi.com https://mwzeom.zeotap.com https://match.sharethrough.com https://eb2.3lift.com https://thrtle.com https://id5-sync.com https://dmp.truoptik.com https://r.turn.com https://*.id.amgdgt.com https://dsum-sec.casalemedia.com https://stags.bluekai.com https://onetag-sys.com; media-src 'self'; script-src 'self'; script-src-elem 'self' 'sha256-H57PtLxDIziYOZ8ENJoTfEleBTY+kyyk/6SZJGIFqdI=' 'sha256-tDXyaG459OlicmowNua8U3NhU0OuKmIpDFPqcGB4f8Q=' 'sha256-Od/LgBmZOzrfP4F7+UTopBlCL2tiEOjS2o2Op2liLIg=' 'sha256-pzwjiDDHf8t/x6T+9V9JoFTBrFdVlSqsDlKow3v79Hg=' 'sha256-oen+5JdDqbyCmiLetlWyPFBvzImd2o3vqLuLIsamYw8=' https://www.googletagmanager.com https://www.google-analytics.com https://www.everestjs.net https://assets.adobedtm.com https://vgwholdingslimited.sc.omtrdc.net https://vgwholdingslimited.sc.omtrdc.net https://connect.facebook.net https://s.yimg.com https://sp.analytics.yahoo.com; frame-src 'self' https://vgw.demdex.net/; connect-src 'self' https://dpm.demdex.net https://www.google-analytics.com https://s.yimg.com https://stats.g.doubleclick.net https://vgwholdingslimited.sc.omtrdc.net https://lasteventf-tm.everesttech.net/; frame-ancestors 'self'; base-uri 'none'; form-action 'none'; upgrade-insecure-requests; 1
frame-ancestors https://furniture.jordans.com https://www.jordans.com http://main.planningwiz.com http://apps.jnet.biz http://iis-dev.jnet.biz https://apps.jnet.biz https://iis-dev.jnet.biz https://162.209.18.9 https://*.vee24.com https://*.turnto.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com https://analytics.paste.ee; img-src 'self' https://secure.gravatar.com https://analytics.paste.ee data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com; frame-src https://www.google.com; object-src 'none' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.skoda-storyboard.com skoda-storyboard.s3.amazonaws.com d37wqhjyfq7840.cloudfront.net *.cdninstagram.com *.facebook.com *.facebook.net *.google.com *.google-analytics.com *.googletagmanager.com *.googlevideo.com *.youtube.com *.ytimg.com *.vimeo.com *.doubleclick.net *.gomexlive.com *.hotjar.com *.googleapis.com cdnjs.cloudflare.com www.googletagmanager.com static.hotjar.com *.mailguide.cz *.twitter.com twitter.com platform.twitter.com twitter.com *.twimg.com www.instagram.com *.instagram.com *.ads-twitter.com *.cookies.skoda-auto.com geolocation.onetrust.com sdrive.skoda-auto.com 1
default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval' http://cdn.segmentify.com:* 1
default-src 'self' *.brightcove.net *.tiqcdn.com *.everesttech.net *.demdex.net *.omtrdc.net 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data: https:; font-src 'self' data:; form-action 'self'; frame-ancestors 'self' 1
default-src 'self' https://static.zdassets.com https://ekr.zdassets.com https://elasticpress.zendesk.com https://*.zopim.com wss://elasticpress.zendesk.com wss://*.zopim.com data: https://www.10up.com https://10up.com https://revenueaccelerator.10up.com https://elasticpress.io https://www.elasticpress.io https://tenup.teamwork.com; connect-src 'self' data: https://www.10up.com https://10up.com https://revenueaccelerator.10up.com https://elasticpress.io https://www.elasticpress.io https://tenup.teamwork.com https://elasticpress.zendesk.com https://ekr.zdassets.com https://performance.typekit.net https://yoast.com  https://www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.10up.com https://10up.com https://revenueaccelerator.10up.com https://elasticpress.io https://www.elasticpress.io https://tenup.teamwork.com https://static.zdassets.com https://ajax.googleapis.com/ https://js.stripe.com/ https://analytics.twitter.com https://static.ads-twitter.com https://cdnjs.cloudflare.com https://use.typekit.net https://www.googletagmanager.com https://www.youtube.com https://www.google-analytics.com; img-src 'self' https://res.cloudinary.com/ https://v2assets.zopim.io https://static.zdassets.com data: https://www.10up.com https://10up.com https://revenueaccelerator.10up.com https://elasticpress.io https://www.elasticpress.io https://tenup.teamwork.com https://p.typekit.net https://lh3.googleusercontent.com/ https://t.co https://www.google.com https://stats.g.doubleclick.net https://secure.gravatar.com https://www.google-analytics.com https://platform.twitter.com; style-src 'self' 'unsafe-inline' https://www.10up.com https://10up.com https://revenueaccelerator.10up.com https://elasticpress.io https://www.elasticpress.io https://tenup.teamwork.com https://cdnjs.cloudflare.com https://platform.twitter.com https://ton.twimg.com/tfw/css/ https://fonts.googleapis.com https://tagmanager.google.com; font-src 'self' data: https://www.10up.com https://10up.com https://revenueaccelerator.10up.com https://elasticpress.io https://www.elasticpress.io https://tenup.teamwork.com https://use.typekit.net https://fonts.gstatic.com https://themes.googleusercontent.com; frame-src 'self' https://js.stripe.com https://tenup.teamwork.com https://www.youtube.com https://youtube.com https://player.vimeo.com https://platform.twitter.com https://www.instagram.com https://fast.wistia.net https://ssl.google-analytics.com https://connect.facebook.net https://www.facebook.com https://s-static.ak.facebook.com; object-src 'self' 1
default-src 'self' https://c.disquscdn.com https://disqus.com https://securionpay.com; base-uri 'self' https://securionpay.com; connect-src 'self' https://api.hubapi.com https://careers.securionpay.com https://in.hotjar.com https://stats.g.doubleclick.net https://vc.hotjar.io https://www.facebook.com https://www.google-analytics.com https://securionpay.com; font-src 'self' data: https://fonts.gstatic.com https://securionpay.com; frame-src 'self' https://api.securionpay.com https://app.stitcher.com https://bid.g.doubleclick.net https://disqus.com https://html5-player.libsyn.com https://securionpay.helpjuice.com https://static.hotjar.com https://vars.hotjar.com https://www.facebook.com https://www.google.com https://www.slideshare.net https://www.youtube.com https://securionpay.com; child-src 'self' https://api.securionpay.com https://app.stitcher.com https://bid.g.doubleclick.net https://disqus.com https://html5-player.libsyn.com https://securionpay.helpjuice.com https://static.hotjar.com https://vars.hotjar.com https://www.facebook.com https://www.google.com https://www.slideshare.net https://www.youtube.com https://securionpay.com; img-src 'self' data: https://assets.capterra.com https://c.disquscdn.com https://careers.securionpay.com https://googleads.g.doubleclick.net https://i.ytimg.com https://p.adsymptotic.com https://px.ads.linkedin.com https://referrer.disqus.com https://secure.gravatar.com https://securionpay.com https://track.hubspot.com https://translate.google.com https://www.facebook.com https://www.google-analytics.com https://www.google.ad https://www.google.ae https://www.google.al https://www.google.am https://www.google.as https://www.google.at https://www.google.az https://www.google.ba https://www.google.be https://www.google.bf https://www.google.bg https://www.google.bi https://www.google.bj https://www.google.bs https://www.google.bt https://www.google.by https://www.google.ca https://www.google.cat https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.co.ao https://www.google.co.bw https://www.google.co.ck https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.co.ls https://www.google.co.ma https://www.google.co.mz https://www.google.co.nz https://www.google.co.th https://www.google.co.tz https://www.google.co.ug https://www.google.co.uk https://www.google.co.uz https://www.google.co.ve https://www.google.co.vi https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.com https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.bh https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.com.bz https://www.google.com.co https://www.google.com.cu https://www.google.com.cy https://www.google.com.do https://www.google.com.ec https://www.google.com.eg https://www.google.com.et https://www.google.com.fj https://www.google.com.gh https://www.google.com.gi https://www.google.com.gt https://www.google.com.hk https://www.google.com.jm https://www.google.com.kh https://www.google.com.kw https://www.google.com.lb https://www.google.com.ly https://www.google.com.mm https://www.google.com.mt https://www.google.com.mx https://www.google.com.my https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.com.np https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.com.pr https://www.google.com.py https://www.google.com.qa https://www.google.com.sa https://www.google.com.sb https://www.google.com.sg https://www.google.com.sl https://www.google.com.sv https://www.google.com.tj https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.uy https://www.google.com.vc https://www.google.com.vn https://www.google.cv https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.dz https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.gy https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.ie https://www.google.im https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.jo https://www.google.kg https://www.google.ki https://www.google.kz https://www.google.la https://www.google.li https://www.google.lk https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.mn https://www.google.ms https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.ne https://www.google.nl https://www.google.no https://www.google.nr https://www.google.nu https://www.google.pl https://www.google.pn https://www.google.ps https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.rw https://www.google.sc https://www.google.se https://www.google.sh https://www.google.si https://www.google.sk https://www.google.sm https://www.google.sn https://www.google.so https://www.google.sr https://www.google.st https://www.google.td https://www.google.tg https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.tt https://www.google.vg https://www.google.vu https://www.google.ws https://www.googletagmanager.com https://www.gstatic.com https://www.linkedin.com; manifest-src 'self' https://securionpay.com; media-src 'self' https://securionpay.com; object-src 'none'; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' https://careers.securionpay.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com/ajax/libs/ https://code.jquery.com https://connect.facebook.net https://disqus.com https://googleads.g.doubleclick.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net/fb.js https://s3.amazonaws.com/assets.helpjuice.com/helpjuice.min.js https://script.hotjar.com https://securionpay.com https://securionpay.disqus.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://static.addtoany.com https://static.hotjar.com https://www.google-analytics.com/analytics.js https://www.google.com https://www.google.pl https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'report-sample' 'self' 'unsafe-inline' https://ajax.googleapis.com https://c.disquscdn.com https://careers.securionpay.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://securionpay.com; report-uri https://securionpay.report-uri.com/r/d/csp/enforce 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.google-analytics.com; script-src-elem 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://platform.twitter.com https://cdn.syndication.twimg.com https://tagmanager.google.com https://player.vimeo.com https://www.youtube.com https://www.google-analytics.com https://s.ytimg.com https://js-agent.newrelic.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://platform.twitter.com https://tagmanager.google.com; report-uri https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct 1
default-src 'self';block-all-mixed-content ; base-uri 'self'; object-src 'none'; script-src  'nonce-d40007321d76451fa3b8fd1afc8423b0' 'self' 'unsafe-eval' 'unsafe-inline' https://script.hotjar.com https://static.hotjar.com https://engage.grantthornton.global https://dl.episerver.net https://maps.googleapis.com  https://www.gstatic.com https://www.google.com https://st.getsitecontrol.com/ https://widgets.getsitecontrol.com https://c.evidon.com https://tagmanager.google.com/ https://www.googletagmanager.com/ https://polyfill.io https://optimize.google.com https://www.google-analytics.com https://az416426.vo.msecnd.net https://ajax.googleapis.com/; img-src 'self' data: https://l.evidon.com/ https://c.evidon.com https://l3.evidon.com https://ws.sessioncam.com https://px.ads.linkedin.com https://www.facebook.com https://b.ws.sessioncam.com https://ssl.gstatic.com/ https://syndication.twitter.com https://optimize.google.com https://platform.twitter.com https://pbs.twimg.com https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com https://img.youtube.com https://cdn.jotfor.ms/ https://integration-emea.gtil-dxc.com/; style-src 'self' 'unsafe-inline' https://tagmanager.google.com/ https://fonts.googleapis.com/ https://optimize.google.com https://platform.twitter.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://app-lon07.marketo.com/ https://engage.grantthornton.global/ ; font-src 'self' data: https://fonts.gstatic.com; frame-src https://l3.evidon.com https://www.paperturn-view.com https://vars.hotjar.com https://a10084069166.cdn.optimizely.com/ https://www.google.com/ https://platform.twitter.com https://www.youtube.com https://optimize.google.com https://w.soundcloud.com https://player.vimeo.com https://www.gstatic.com https://cdn.optimizely.com https://player.cnbc.com/ https://onlinerecruitment.exelsyslive.com/ https://view.ceros.com/ https://flo.uri.sh/ https://app-lon07.marketo.com/ https://engage.grantthornton.global/; connect-src 'self' https://l3.evidon.com https://optoutapi.evidon.com https://extreme-ip-lookup.com https://stats.g.doubleclick.net https://logx.optimizely.com https://dc.services.visualstudio.com https://az416426.vo.msecnd.net https://rum.optimizely.com/ https://www.google-analytics.com/ https://b.ws.sessioncam.com https://vars.hotjar.com https://errors.client.optimizely.com https://642-sde-924.mktoresp.com https://in.hotjar.com https://ws.sessioncam.com; 1
default-src 'self'; script-src 'self' cookie.wieni.be www.google.com www.gstatic.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com 'sha256-n4MwUTyKKCBlMIFkvcS3dkmlRFEcqSm/V0IOhZelzA0=' polyfill.io assets.uzleuven.be 'unsafe-eval' api.usersnap.com cdn.usersnap.com cdn.plot.ly 'sha256-LqyHWDQet6lD+1YGzhIeaJcY5ClHsaVB5AENidSlj7w=' 'sha256-ZL4w2vHnmTs5tQHHXrJmvcpXT2gN//lhyaxomdq9JiM=' 'sha256-V7ipTCadss7ptE+3y1BOGG+60Q0O9NR5Y6f7ppRW0a4=' ; style-src 'self' 'unsafe-inline' fonts.googleapis.com cookie.wieni.be tagmanager.google.com use.fontawesome.com use.typekit.net p.typekit.net blob: assets.uzleuven.be; img-src 'self' data: www.google-analytics.com images.uzleuven.be cdn.usernap.com; font-src 'self' use.fontawesome.com use.typekit.net fonts.gstatic.com; frame-src 'self' www.google.com maps.google.com www.youtube.com player.vimeo.com materniteit.uz-leuven.virtualtour.poppr.be e.issuu.com uzleuven.wufoo.be use.mazemap.com uzleuven.wufoo.com uzleuven.wufoo.eu embed.deburen.tv; connect-src 'self' cookie.wieni.be use.typekit.net assets.uzleuven.be files.uzleuven.be api.usersnap.com 1
frame-ancestors 'self' https://www.chasepaymentechhostedpay.com/ https://www.chasepaymentechhostedpay-var.com; 1
default-src 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.google.com https://code.jquery.com https://www.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://static.addtoany.com https://maps.google.com https://cdn.jsdelivr.net https://platform.twitter.com https://platform.linkedin.com https://cdn.ckeditor.com https://www.google-analytics.com https://cdn.datatables.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://cdn.ckeditor.com https://cdn.datatables.net https://www.google-analytics.com https://www.linkedin.com; img-src 'self' data: https://chart.googleapis.com https://cdn.ckeditor.com https://www.google-analytics.com https://stats.g.doubleclick.net https://platform.linkedin.com https://www.linkedin.com https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://www.google.com; frame-src 'self' https://platform.twitter.com https://www.gstatic.com https://www.google.com https://notfound-static.fwebservices.be; font-src 'self' https://themes.googleusercontent.com https://cdn.jsdelivr.net https://fonts.gstatic.com; connect-src 'self' https://www.linkedin.com https://www.google-analytics.com https://stats.g.doubleclick.net; report-uri /en/report-csp-violation 1
frame-ancestors *.nordangliaeducation.com *.tfaforms.net 'self' 1
frame-ancestors 'self' *.fizy.com; 1
default-src 'self'; frame-src 'self' www.youtube.com player.vimeo.com www.google.com www.janatzedevries.nl provincieoverijssel.easycruit.com issuu.com *.twitter.com entypo.com www.sallandseheuvelrug.nl gisopenbaar.overijssel.nl in.coosto.com e.issuu.com www.facebook.com; img-src 'self' data: https://www.overijssel.nl/favicon.ico http://www.overijssel.nl/favicon.ico http://www-nieuw.overijssel.nl/favicon.ico https://www.toverijs7.nl/favicon.ico www.overijssel.nl www-nieuw.overijssel.nl www.toverijs7.nl siteimprove.com ssl.siteimprove.com www.google-analytics.com stats.g.doubleclick.net dc.ads.linkedin.com www.google.com www.google.nl gstatic.com tableau.com *.twimg.com *.twitter.com https://www.facebook.com/tr/; style-src 'self' 'unsafe-inline' hello.myfonts.net/count/2baf08 fonts.googleapis.com/css *.twitter.com *.twimg.com; font-src www.overijssel.nl www-nieuw.overijssel.nl mijn.overijssel.nl www.toverijs7.nl mijn.toverijs7.nl www.werkenbijoverijssel.nl *.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' about: www.googletagmanager.com www.google-analytics.com/analytics.js connect.facebook.net/en_US/fbevents.js connect.facebook.net/signals/config/139788249995308 *.twitter.com *.twimg.com sjs.bizographics.com px.ads.linkedin.com siteimproveanalytics.com/js/siteanalyze_6011273.js https://*.spidex.nl; 1
default-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' https://cdn.useproof.com https://airswap.io https://*.airswap.io https://api.mixpanel.com https://*.googletagmanager.com https://ethgasstation.info https://*.google-analytics.com https://storage.googleapis https://widget.intercom.io https://*.sendwyre.com https://js.intercomcdn.com https://*.hotjar.com https://*.walletlink.org https://dexindex.io; style-src 'self' 'unsafe-inline' data: https://airswap.io https://*.airswap.io https://fonts.googleapis.com blob: https://widget.intercom.io https://*.typekit.net; img-src * data:; font-src * data:; connect-src *; object-src *; frame-src https://cdn.useproof.com https://verify.testwyre.com https://verify.sendwyre.com https://vars.hotjar.com https://widget.portis.io https://*.datadoghq.com https://dexindex.io https://*.walletlink.org https://*.fortmatic.com; manifest-src 'self' https://airswap.io https://*.airswap.io; report-uri https://ciso.report-uri.com/r/d/csp/enforce; report-to csp-enforce; 1
frame-ancestors 'self' https://www.viajanet.com.br 1
default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://analytics.twitter.com https://static.ads-twitter.com https://*.disquscdn.com https://*.disqus.com https://ssl.google-analytics.com https://static.addtoany.com https://www.youtube.com https://s.ytimg.com https://www.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://platform.twitter.com https://*.newrelic.com https://*.nr-data.net https://tarion.nanorep.co https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ app.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io pendo-static-5713592751095808.storage.googleapis.com data.pendo.io https://kit.fontawesome.com; style-src 'unsafe-inline' 'self' https://*.disquscdn.com https://facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://fonts.googleapis.com app.pendo.io cdn.pendo.io pendo-static-5713592751095808.storage.googleapis.com https://kit-free.fontawesome.com; frame-src 'self' disqus.com www.youtube.com static.addtoany.com staticxx.facebook.com www.facebook.com platform.twitter.com syndication.twitter.com www.docdroid.net www.openstreetmap.org https://www.google.com/recaptcha/ app.pendo.io; font-src 'self' data: https://fonts.gstatic.com https://kit-free.fontawesome.com; img-src 'self' data: https://t.co https://cdn.viglink.com https://www.facebook.com https://www.google-analytics.com https://www.google-analytics.com https://stats.g.doubleclick.net https://syndication.twitter.com https://*.disqus.com https://*.disquscdn.com http://jqueryui.com https://*.tarion.com cdn.pendo.io app.pendo.io pendo-static-5713592751095808.storage.googleapis.com data.pendo.io;; media-src 'self' http://traffic.libsyn.com http://hwcdn.libsyn.com http://*.libsyn.com https://*.libsyn.com; connect-src 'self' https://links.services.disqus.com https://www.google-analytics.com https://stats.g.doubleclick.net https://tarion.nanorep.co app.pendo.io data.pendo.io pendo-static-5713592751095808.storage.googleapis.com bam.nr-data.net; plugin-types application/x-shockwave-flash application/pdf; form-action 'self' 'unsafe-inline' 'unsafe-eval' https://*.tarion.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.olark.com js.stripe.com *.visualwebsiteoptimizer.com *.vwo.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 1
upgrade-insecure-requests; frame-ancestors 'self' https://ramp.com https://*.ramp.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://player.vimeo.com/ https://webstatistics.apps.cssf.lu/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; img-src 'self' https://webstatistics.apps.cssf.lu/ https://*.tile.openstreetmap.org data: ; style-src 'self' 'unsafe-inline'; frame-src https://player.vimeo.com/ https://www.google.com/recaptcha/ https://*.soundcloud.com; connect-src 'self'; font-src 'self' data:; frame-ancestors 'self'; 1
default-src http://*.amerimark.com https://*.amerimark.com http://*.anthonyrichards.com https://*.anthonyrichards.com http://*.anthonyrichardsplus.com https://*.anthonyrichardsplus.com 'unsafe-inline' 'unsafe-eval' data: blob: *.2mdn.net *.bizrate.com *.bizrateinsights.com *.brightcove.com *.brightcove.net *.coremetrics.com *.doubleclick.net *.facebook.com *.facebook.net *.fonts.net *.googleadservices.com *.google-analytics.com *.googleapis.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hawksearch.com *.hawksearch.info *.hawksearch.net *.mcafeesecure.com *.monetate.net *.moovweb.net *.offeredby.net *.powerreviews.com *.ywxi.net *.2mdn.net *.newbenefits.com *.anthonyrichards.com *.passtohealth.com *.cloudfront.net *.zencdn.net *.cloudinary.com *.iesnare.com *.cmcore.com *.paymentech.com *.kaptcha.com chat.amerimark.com *.hotjar.com wss://*.hotjar.com *.hotjar.io *.linksynergy.com *.rakuten.com *.bing.com *.akstat.io *.googletagservices.com *.monetate.org *.paypalobjects.com *.braintreegateway.com *.paypal.com *.braintree-api.com *.trustedsite.com s3-us-west-2.amazonaws.com/mfesecure-public/ *.go-mpulse.net *.beautyboutiqueperks.com *.harrietcarterperks.com *.amerimarkperks.com *.feelgoodstoreperks.com *.timeformeperks.com *.attn.tv *.attentivemobile.com *.noibu.com wss://vf.noibu.com *.bluecore.com *.rlcdn.com *.alocdn.com *.gonift.com *.tags.wdsvc.net *.wdsvc.net *.adsrvr.org *.emmonemo.com 1
default-src https: *.atncorp.com atncorp.app *.thor-scope.com; img-src http: https: data: *.atncorp.com *.atncorp.app *.thor-scope.com *.crazyegg.com *.facebook.net *.facebook.com *.googletagmanager.com *.ytimg.com; font-src https: data: *.atncorp.com *.atncorp.app *.thor-scope.com; style-src https 'unsafe-inline' *.atncorp.com *.atncorp.app *.thor-scope.com *.yotpo.com *.driftt.com *.bootstrapcdn.com *.googleapis.com www.google.com; connect-src *.atncorp.com *.atncorp.app *.thor-scope.com *.taboola.com *.yotpo.com wss://*.yotpo.com *.google-analytics.com *.yandex.ru *.doubleclick.net *.crazyegg.com shop.pe *.shop.pe api.ipify.org; script-src 'unsafe-inline' 'unsafe-eval' *.atncorp.com *.atncorp.app *.thor-scope.com *.bing.com *.rfihub.net *.rfihub.com *.mgid.com *.taboola.com *.yotpo.com *.cetrk.com *.amazonaws.com *.crazyegg.com *.driftt.com *.googleapis.com *.googleadservices.com *.vantivprelive.com *.vantivcnp.com *.online-metrix.net *.yandex.ru *.google-analytics.com *.criteo.net *.criteo.com *.facebook.net *.facebook.com *.crazyegg.com *.googletagmanager.com *.zendesk.com *.avmws.com *.gstatic.com *.youtube.com *.ytimg.com *.cloudfront.net shop.pe *.shop.pe www.google.com;  1
default-src * 'unsafe-eval' 'unsafe-inline' data: about: 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://assets.adobedtm.com https://*.google-analytics.com https://*.serving-sys.com https://player.vimeo.com https://www.googletagmanager.com https://*.g.doubleclick.net https://dc.ads.linkedin.com https://connect.facebook.net https://www.facebook.com  https://www.google.it https://www.google.com https://luxottica.122.2o7.net https://*.linkedin.com https://explore.eyemed.com https://p.adsymptotic.com https://s3-us-west-2.amazonaws.com  https://ajax.googleapis.com https://preview.luxotticaeyecare.luxottica.com https://www.youtube.com ; 1
default-src 'none';    script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.acsbapp.com https://acsbapp.com https://*.ytimg.com https://www.youtube.com https://*.doubleclick.net https://www.googleadservices.com https://googleadservices.com https://*.nicolas-hoffmann.net https://canvasjs.com https://unpkg.com https://*.cloudflare.com https://*.cloudfront.net https://*.yahooapis.com https://*.googleapis.com https://momentjs.com https://*.uniongas.com https://*.cloudfront.com https://*.getsitecontrol.com https://*.googlecode.com https://*.google.com https://www.googletagmanager.com https://*.facebook.net https://*.facebook.com https://google-analytics.ca https://www.google-analytics.com https://*.google.com;    connect-src 'self' https://*.acsbapp.com https://acsbapp.com https://*.facebook.com https://*.parachutesoftware.com https://*.azurewebsites.net https://*.doubleclick.net https://www.google-analytics.com https://www.googleapis.com https://google.analytics.com https://*.getsitecontrol.com https://*.jquery-plugins.net;    frame-src 'self' https://accessibe.com https://*.acsbapp.com https://acsbapp.com https://*.doubleclick.net https://*.soundcloud.com https://*.vimeo.com https://*.facebook.com https://www.facebook.com https://www.youtube.com https://www.google.com https://www.google.ca;    img-src 'self' data: https://acsbapp.com http://www.uniongas.com https://*.openstreetmap.org https://www.googletagmanager.com https://enbridgesmartsavings.com https://*.enbridge.com https://*.ytimg.com https://*.vimeocdn.com http://*.youtube.com https://*.youtube.com https://*.getsitecontrol.com https://www.google.com https://www.google.ca https://www.google-analytics.com https://www.facebook.com https://enbridgegas.com https://www.enbridgegas.com https://www.uniongas.com https://*.uniongas.com https://*.g.doubleclick.net; manifest-src 'self';    font-src 'self' data: https://*.acsbapp.com https://acsbapp.com https://*.bootstrapcdn.com https://www.uniongas.com https://*.cloudflare.com https://*.fontawesome.com https://*.gstatic.com;    style-src 'self' 'unsafe-inline' https://*.bootstrapcdn.com https://unpkg.com https://www.uniongas.com https://*.cloudflare.com https://*.fontawesome.com https://*.googleapis.com https://www.googletagmanager.com https://*.facebook.net https://*.getsitecontrol.com https://google-analytics.com; 1
frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com; report-uri http://www.the3day.org/site/XFrameViolation 1
default-src 'self' cdnjs.cloudflare.com static.cloudflareinsights.com use.fontawesome.com fonts.gstatic.com fonts.googleapis.com ajax.googleapis.com googletagmanager.com 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-FR+2VkKQ474Ze3GMKmSMgnTvfAB5nLwm6lEmIe5QJt4=' 'sha256-+KXd5BPlq9D77NhnQXaucRVrfwca7Tmi/WIsJkDNhmc=' 'sha256-nX9Pwp3eGKTtk8JisUM2/ElXOGz1pbFFAg0mDUpk67c=';object-src 'none';base-uri 'none';form-action 'none';report-uri https://eric.report-uri.com/r/d/csp/enforce 1
base-uri https://*.avo.app; default-src 'self'; script-src 'self' 'nonce-Sy9yLGb1fNWt69DIYw9dFEc63v9RAka3' 'strict-dynamic' https://cdn.avo.app https://www.googletagmanager.com https://cdn.segment.com https://cdn4.mxpnl.com https://fullstory.com https://cdn.amplitude.com https://cdn.iubenda.com https://edge.fullstory.com https://widget.intercom.io https://cdn.jsdelivr.net https://canny.io https://js.intercomcdn.com https://www.iubenda.com https://www.youtube.com https://s.ytimg.com https://ajax.googleapis.com https://www.google-analytics.com https://optimize.google.com; style-src 'self' 'unsafe-inline' https://cdn.avo.app https://assets.website-files.com https://cdn.jsdelivr.net https://www.iubenda.com https://fonts.googleapis.com https://optimize.google.com; img-src 'self' data: blob: https://jitpack.io/v/avohq/android-avo-inspector.svg https://badge.fury.io/js/avo-inspector.svg https://img.shields.io https://px.ads.linkedin.com https://www.linkedin.com https://assets.website-files.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://heapanalytics.com https://www.google.com https://www.google.co.uk https://www.google.is https://static.intercomassets.com https://lh3.googleusercontent.com https://js.intercomcdn.com https://downloads.intercomcdn.com https://api.producthunt.com https://www.facebook.com https://www.google.com https://optimize.google.com; font-src 'self' data: https://assets.website-files.com https://fonts.gstatic.com https://js.intercomcdn.com; connect-src 'self' https://*.mixpanel.com https://consent.iubenda.com https://avo-web-app.appspot.com https://api.avo.app https://api.amplitude.com https://*.algolia.net https://api.segment.io https://*.fullstory.com https://www.googleapis.com https://firestore.googleapis.com https://firebaselogging.googleapis.com https://firebaseremoteconfig.googleapis.com https://firebaseinstallations.googleapis.com https://sentry.io https://api-iam.intercom.io https://uploads.intercomcdn.com wss://*.intercom.io https://*.intercom.io https://*.intercomcdn.com https://securetoken.googleapis.com https://api.mixpanel.com https://heapanalytics.com https://firebasestorage.googleapis.com https://www.google-analytics.com https://hits-i.iubenda.com https://canny.io/api/users/identify https://webflow.com; media-src https://js.intercomcdn.com; object-src 'none'; frame-src https://www.avo.app https://cdn.iubenda.com https://js.stripe.com https://www.youtube.com https://canny.io https://changelog-widget.canny.io https://optimize.google.com https://share.transistor.fm; report-uri https://o75921.ingest.sentry.io/api/366278/security/?sentry_key=faf4b96d85eb4cf497b00fe27230c723 1
report-to webscaleCspEndpoint; report-uri https://xdymhcopnh.execute-api.us-east-1.amazonaws.com/default/cspReportingMonitor default-src 'self' 'unsafe-inline' ampcid.google.com.au *.extremerestraints.com  share.tmz.com *.gpgway.com  *.cloudmaestro.com; media-src 'self' blob: *.elfsight.com *.extremerestraints.com *.cloudmaestro.com; img-src * data: *.yotpo.com *.ladesk.com *.extremerestraints.com *.cloudmaestro.com; script-src 'self' data: blob: *.elfsight.com *.bronto.com maw.bronto.com *.icpage.net *.icpbounce.com *.app.icontact.com *.icontact.com *.staticapp.icpsc.com *.searchspring.net *.api.globallypaid.com *.klaviyo.com *.gleam.io *.polyfill.io *.womp.me cdnapisec.kaltura.com wompme.blob.core.windows.net *.gpgway.com *.pingdom.net *.connect.facebook.net *.extremerestraints.com widget-mediator.zopim.com *.cloudmaestro.com *.googleapis.com *.ladesk.com *.wompmobile.com *.bing.com *.cloudfront.net 'unsafe-eval' 'unsafe-inline' *.google.ac *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.com.kh *.google.cc *.google.cd *.google.cf *.google.cat *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gf *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.iq *.google.ie *.google.co.il *.google.im *.google.co.in *.google.io *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.com.lc *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn  *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.ne *.google.com.nf *.google.com.ng *.google.com.ni *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pk *.google.com.pa *.google.com.pe *.google.com.ph *.google.pl *.google.com.pg *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.rs *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.sm *.google.so *.google.st *.google.sr *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.to *.google.tn *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.co.za *.google.co.zm *.google.co.zw *.ampproject.org *.googletagmanager.com toftools.com ajax.googleapis.com *.google-analytics.com *.googleadservices.com *.gstatic.com t3066075.icpro.co t.omkt.co js-agent.newrelic.com d9jmv9u00p0mv.cloudfront.net bam.nr-data.net *.msecnd.net *.googleadservices.com *.authorize.net trustlogo.comodo.com *.shopzilla.com *.bizrate.com *.atdmt.com *.paypal.com *.yotpo.com wompmobile.com wompmobile.net wpc.gammacdn.net extremerestraintsamp.azureedge.net extremerestraintsamp.ec.azureedge.net scdn1.wpc.88b85.gammacdn.net cs9.wpc.v0cdn.net amp.beta.extremerestraints.com betaextremerestraintsamp.azureedge.net ampcid.google.com.sg betaextremerestraintsamp.ec.azureedge.net; style-src 'self' 'unsafe-inline' *.searchspring.net *.bootstrapcdn.com *.xrllc.com *.yotpo.com *.toftools.com *.extremerestraints.com *.cloudmaestro.com *.msecnd.net optimize.google.com fonts.googleapis.com; frame-src 'self' *.extremerestraints.com *.icpage.net *.icpbounce.com *.app.icontact.com *.icontact.com *.staticapp.icpsc.com gleam.io ssl.kaptcha.com *.gpgway.com *.ladesk.com view.vzaar.com player.vimeo.com pages.icpro.co *.google.com *.google.co.uk *.google.ca *.msecnd.net *.googleadservices.com *.doubleclick.net *.youtube.com *.gstatic.com *.yotpo.com; connect-src 'self' bat.bing.com platform.elfsight.com *.bronto.com maw.bronto.com *.searchspring.io *.searchspring.net *.klaviyo.com *.gpgway.com *.pingdom.net *.ladesk.com *.yotpo.com *.ampproject.org *.googletagmanager.com *.azureedge.net *.authorize.net *.msecnd.net *.google.com *.google.ca *.google.co.uk *.google.com.br *.google.com.mx trustlogo.comodo.com *.doubleclick.net *.google-analytics.com *.googleadservices.com *.paypal.com *.extremerestraints.com apps.elfsight.com; font-src 'self' *.extremerestraints.com *.cloudmaestro.com *.msecnd.net *.yotpo.com fonts.gstatic.com data: *.bootstrapcdn.com; child-src blob: *.extremerestraints.com; 1
base-uri 'none'; object-src 'none'; default-src 'self' 'unsafe-inline' data: https: wss: blob:; report-uri https://ulcm.report-uri.com/r/d/csp/enforce 1
block-all-mixed-content; upgrade-insecure-requests; base-uri 'self' *.cube-net.pub *.decathlon.nl blob:; default-src  *.baqend.com 'self' 'unsafe-eval' 'unsafe-inline' *.abtasty.com *.akstat.io *.awin1.com *.bing.com *.brightcove.com *.brightcove.net *.buckaroo.nl *.cloudfront.net *.commandersact.com *.creativecdn.com *.crisp.chat *.criteo.com *.cube-net.org *.cube-net.pub *.datadoghq.eu *.decathlon.com *.decathlon.net *.decathlon.nl *.dktdev.nl *.doubleclick.net *.dwin1.com *.execute-api.eu-west-1.amazonaws.com *.getflowbox.com *.go-mpulse.net *.google.nl *.googleapis.com *.igodigital.com *.insocial.nl *.instagram.com *.kelkoogroup.net *.kiyoh.com *.kk-resources.com *.luckyorange.com  *.luckyorange.net *.mediadecathlon.com *.mopinion.com *.mydecathlon.com *.obi4wan.com *.ojrq.net *.oppwa.com *.pusher.com *.retailrocket.net *.retailrocket.ru *.rex.ai *.sociomantic.com *.tagcommander.com *.thuiswinkel-cdn.org *.thuiswinkel.org *.tradedoubler.com *.tradetracker.net *.trbo.com *.woosmap.com *.y-track.com *.ytimg.com *.zenaps.com about: adservice.google.be adservice.google.com adservice.google.fr app.beampulse.com blob: bp-1c51.kxcdn.com browser-update.org cdn.flbx.io cdn.postcodeapi.nu cdnjs.cloudflare.com checkout.paypal.com connect.facebook.net content.decathlon.de creativecdn.com cumulus-cloud.com d.impactradius-event.com d10lpsik1i8c69.cloudfront.net data: decathlon-nl-nl--tst2.custhelp.com decathlon-nl-nl--tst2.widget.custhelp.com decathlon-nl-nl.custhelp.com decathlon-nl-nl.widget.custhelp.com decathlon-nl.sjv.io decathlon-nl.x8nb.net device9.com docs.google.com  ec2-3-10-120-155.eu-west-2.compute.amazonaws.com engage.commander1.com googleads.g.doubleclick.net googletagmanager.com http://players.brightcove.net https://*.booxi.eu https://*.decathlon.io https://*.decathlon.nl https://*.pinimg.com https://*.pinterest.com https://*.swogo.net https://*.zdassets.com https://*.zendesk.com https://appmobile-bridge-js.s3-eu-west-1.amazonaws.com https://bf97725pbp.bf.dynatrace.com https://brightcove.hs.llnwd.net https://brightcove.vo.llnwd.net https://capture.trackjs.com https://cdn.trustcommander.net https://cdn.trylive.com https://d10lpsik1i8c69.cloudfront.net https://datastudio.google.com/ https://emersya.com https://js-cdn.dynatrace.com https://privacy.trustcommander.net https://saas.trylive.com https://sdk.privacy-center.org https://usage.trackjs.com https://www.booxi.eu https://www.google.fr keepyeyes.cube-net.org logs-01.loggly.com maps.googleapis.com maps.gstatic.com maxcdn.bootstrapcdn.com onepay-ui.decathlon.net oppwa.com pagead2.googlesyndication.com privacy.commander1.com recommendation-js.woosmap.com s3-eu-west-1.amazonaws.com sportenmetdecathlon.nl spreadsheets.google.com static.criteo.net stats.g.doubleclick.net view.publitas.com vjs.zencdn.net ws: www.facebook.com www.google-analytics.com www.google.be www.google.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.kiyoh.nl www.rnengage.com www.youtube.com; font-src  *.baqend.com 'self' *.abtasty.com *.awin1.com *.crisp.chat *.cube-net.pub *.decathlon.nl *.dwin1.com *.mopinion.com blob: data: fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com vjs.zencdn.net www.google.fr; media-src 'self' *.brightcove.com *.brightcove.net *.cube-net.pub *.decathlon.nl *.googleapis.com *.pusher.com blob: http://players.brightcove.net https://*.pinimg.com https://*.pinterest.com https://*.zdassets.com https://brightcove.hs.llnwd.net https://brightcove.vo.llnwd.net https://d10lpsik1i8c69.cloudfront.net; object-src 'self' *.cube-net.pub *.decathlon.nl blob:; worker-src 'self' 'unsafe-eval' 'unsafe-inline' *.cube-net.pub *.decathlon.nl blob:; 1
frame-ancestors 'self'; script-src 'report-sample' https://ajax.googleapis.com/ https://tileproxy.cloud.mapquest.com/ 'self' https://ajax.aspnetcdn.com/ https://www.yextstatic.com/ https://www.googleapis.com/ https://edge.fullstory.com/ https://yexttest.atlassian.net/ https://www.googletagmanager.com/ https://cdnjs.cloudflare.com/ https://www.yext-static.com/ https://maps.googleapis.com/ https://www.mapquestapi.com/ 'unsafe-eval' https://assets.sitescdn.net/ https://apis.google.com/ https://www.google-analytics.com/; report-uri /cspreports/error?slug=users 1
report-to webscaleCspEndpoint;  report-uri https://xdymhcopnh.execute-api.us-east-1.amazonaws.com/default/cspReportingMonitor; script-src 'self' 'unsafe-eval' 'unsafe-inline'  data: 'self' blob: *.dynamicyield.com *.cloudmaestro.com *.searchspring.net *.googletagmanager.com *.cookiebot.com  *.helpscout.net *.google-analytics.com *.facebook.net *.fbcdn.net *.yimg.com *.bing.com *.criteo.net *.criteo.com  *.bronto.com *.providentmetals.com *.yahoo.com *.googleapis.com *.shopperapproved.com *.nr-data.net *.newrelic.com *.inspectlet.com *.intellisuggest.com *.paypalobjects.com *.paypal.com *.online-metrix.net *.twimg.com *.twitter.com *.instagram.com *.youtube.com *.doubleclick.net *.cloudfront.net bitpay.com *.bitpay.com *.nfusionsolutions.biz *.cdn77.org *.plaid.com *.routingnumbers.info *.tradingview.com *.smartystreets.com wsonline.seisint.com *.googleadservices.com *.bootstrapcdn.com *.nfusionsolutions.com *.google.com *.nameapi.org *.taxjar.com raw.githubusercontent.com cdn.ampproject.org *.wompmobile.com cdnjs.cloudflare.com az690879.vo.msecnd.net api-cache.searchspring.io tpc.googlesyndication.com 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-ZThlN2IwYTItMjkxMy00ZjIxLWJkZTMtMGExYzkxYzdlZGNj'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://artplusmarketing.com https://*.artplusmarketing.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
upgrade-insecure-requests; default-src 'self' blob: data: https://europa.eu/webtools/ https://*.openstreetmap.org https://analytics.enisa.europa.eu https://ec.europa.eu https://europa.eu/webtools/ https://ssl.google-analytics.com/ https://csi.gstatic.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com/ https://maps.gstatic.com https://fonts.gstatic.com https://*.twitter.com https://cdn.syndication.twimg.com/ https://*.twimg.com/ https://www.youtube.com/embed/ https://webtools.ec.europa.eu/captcha/ https://ecsm.testing.eaudeweb.ro/ https://resilience.enisa.europa.eu/ https://cybersecuritymonth.eu/ https://www.cybersecuritymonth.eu/ ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.enisa.europa.eu/piwik.js https://ec.europa.eu https://europa.eu/webtools/ https://ssl.google-analytics.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com https://*.twitter.com/ https://cdn.syndication.twimg.com https://*.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js https://*.list-manage.com/subscribe/post-json https://webtools.ec.europa.eu/captcha/ https://ecsm.testing.eaudeweb.ro/ https://resilience.enisa.europa.eu/ https://cybersecuritymonth.eu/ https://www.cybersecuritymonth.eu/ ; style-src 'self' 'unsafe-inline' https://ec.europa.eu https://europa.eu/webtools/ https://fonts.googleapis.com/ https://*.twitter.com/ https://*.twimg.com/ https://*.mailchimp.com https://webtools.ec.europa.eu/captcha/ https://ecsm.testing.eaudeweb.ro https://resilience.enisa.europa.eu/ https://cybersecuritymonth.eu/ https://www.cybersecuritymonth.eu/ ; frame-ancestors 'self' http://csirt.eaudeweb.ro/ https://csirtsnetwork.eu/ https://ecsm.testing.eaudeweb.ro/ https://resilience.enisa.europa.eu/ https://cybersecuritymonth.eu/ https://www.cybersecuritymonth.eu/ 1
default-src 'self' http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.googleapis.com https://*.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.google.com https://*.google.com http://*.google.ca https://*.google.ca http://*.google.ru https://*.google.ru http://*.googletagmanager.com https://*.googletagmanager.com http://*.hotjar.com https://*.hotjar.com http://*.gstatic.com https://*.gstatic.com http://*.autoauctionmall.com https://*.autoauctionmall.com http://*.autoauctionmall.io https://*.autoauctionmall.io http://acsbap.com https://acsbap.com http://acsbapp.com https://acsbapp.com http://accessibe.com https://accessibe.com http://diffuser-cdn.app-us1.com https://diffuser-cdn.app-us1.com http://prism.app-us1.com https://prism.app-us1.com http://trackcmp.net https://trackcmp.net http://stats.g.doubleclick.net https://stats.g.doubleclick.net http://*.amazonaws.com https://*.amazonaws.com http://*.cloudfront.net https://*.cloudfront.net http://*.userlike.com https://*.userlike.com http://*.algolia.net https://*.algolia.net http://*.squareup.com https://*.squareup.com http://*.squareupsandbox.com https://*.squareupsandbox.com http://*.squarecdn.com https://*.squarecdn.com data:; script-src 'self' 'unsafe-inline' http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.googleapis.com https://*.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.google.com https://*.google.com http://*.google.ca https://*.google.ca http://*.google.ru https://*.google.ru http://*.googletagmanager.com https://*.googletagmanager.com http://*.hotjar.com https://*.hotjar.com http://*.gstatic.com https://*.gstatic.com http://*.autoauctionmall.com https://*.autoauctionmall.com http://*.autoauctionmall.io https://*.autoauctionmall.io http://acsbap.com https://acsbap.com http://acsbapp.com https://acsbapp.com http://accessibe.com https://accessibe.com http://diffuser-cdn.app-us1.com https://diffuser-cdn.app-us1.com http://prism.app-us1.com https://prism.app-us1.com http://trackcmp.net https://trackcmp.net http://stats.g.doubleclick.net https://stats.g.doubleclick.net http://*.amazonaws.com https://*.amazonaws.com http://*.cloudfront.net https://*.cloudfront.net http://*.userlike.com https://*.userlike.com http://*.algolia.net https://*.algolia.net http://*.squareup.com https://*.squareup.com http://*.squareupsandbox.com https://*.squareupsandbox.com http://*.squarecdn.com https://*.squarecdn.com data: 'unsafe-eval'; connect-src * 'self' http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.googleapis.com https://*.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.google.com https://*.google.com http://*.google.ca https://*.google.ca http://*.google.ru https://*.google.ru http://*.googletagmanager.com https://*.googletagmanager.com http://*.hotjar.com https://*.hotjar.com http://*.gstatic.com https://*.gstatic.com http://*.autoauctionmall.com https://*.autoauctionmall.com http://*.autoauctionmall.io https://*.autoauctionmall.io http://acsbap.com https://acsbap.com http://acsbapp.com https://acsbapp.com http://accessibe.com https://accessibe.com http://diffuser-cdn.app-us1.com https://diffuser-cdn.app-us1.com http://prism.app-us1.com https://prism.app-us1.com http://trackcmp.net https://trackcmp.net http://stats.g.doubleclick.net https://stats.g.doubleclick.net http://*.amazonaws.com https://*.amazonaws.com http://*.cloudfront.net https://*.cloudfront.net http://*.userlike.com https://*.userlike.com http://*.algolia.net https://*.algolia.net http://*.squareup.com https://*.squareup.com http://*.squareupsandbox.com https://*.squareupsandbox.com http://*.squarecdn.com https://*.squarecdn.com data:; img-src data: 'self' http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.googleapis.com https://*.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.google.com https://*.google.com http://*.google.ca https://*.google.ca http://*.google.ru https://*.google.ru http://*.googletagmanager.com https://*.googletagmanager.com http://*.hotjar.com https://*.hotjar.com http://*.gstatic.com https://*.gstatic.com http://*.autoauctionmall.com https://*.autoauctionmall.com http://*.autoauctionmall.io https://*.autoauctionmall.io http://acsbap.com https://acsbap.com http://acsbapp.com https://acsbapp.com http://accessibe.com https://accessibe.com http://diffuser-cdn.app-us1.com https://diffuser-cdn.app-us1.com http://prism.app-us1.com https://prism.app-us1.com http://trackcmp.net https://trackcmp.net http://stats.g.doubleclick.net https://stats.g.doubleclick.net http://*.amazonaws.com https://*.amazonaws.com http://*.cloudfront.net https://*.cloudfront.net http://*.userlike.com https://*.userlike.com http://*.algolia.net https://*.algolia.net http://*.squareup.com https://*.squareup.com http://*.squareupsandbox.com https://*.squareupsandbox.com http://*.squarecdn.com https://*.squarecdn.com; style-src 'self' 'unsafe-inline' http://*.facebook.net https://*.facebook.net http://*.facebook.com https://*.facebook.com http://*.googleapis.com https://*.googleapis.com http://*.google-analytics.com https://*.google-analytics.com http://*.google.com https://*.google.com http://*.google.ca https://*.google.ca http://*.google.ru https://*.google.ru http://*.googletagmanager.com https://*.googletagmanager.com http://*.hotjar.com https://*.hotjar.com http://*.gstatic.com https://*.gstatic.com http://*.autoauctionmall.com https://*.autoauctionmall.com http://*.autoauctionmall.io https://*.autoauctionmall.io http://acsbap.com https://acsbap.com http://acsbapp.com https://acsbapp.com http://accessibe.com https://accessibe.com http://diffuser-cdn.app-us1.com https://diffuser-cdn.app-us1.com http://prism.app-us1.com https://prism.app-us1.com http://trackcmp.net https://trackcmp.net http://stats.g.doubleclick.net https://stats.g.doubleclick.net http://*.amazonaws.com https://*.amazonaws.com http://*.cloudfront.net https://*.cloudfront.net http://*.userlike.com https://*.userlike.com http://*.algolia.net https://*.algolia.net http://*.squareup.com https://*.squareup.com http://*.squareupsandbox.com https://*.squareupsandbox.com http://*.squarecdn.com https://*.squarecdn.com data:; 1
default-src https: data: wss: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; frame-ancestors 'self' 10.30.10.103 https://engage.talkative.uk 1
frame-ancestors https://www.slipcase.com/ https://marketplace.marsh.com/ 1
report-uri https://www.yelp.com/csp_block?id=414b3691617caa50&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609208007; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-RAZ9ojy9hBfKCnjvdHLXjw' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src * 'unsafe-inline';connect-src * 'unsafe-inline';style-src * 'unsafe-inline';script-src * 'unsafe-inline' 'unsafe-eval';frame-src * 'unsafe-inline';font-src * 'unsafe-inline' 1
frame-ancestors *.carkeys.co.uk *.motorists-club.co.uk *.motoristsclub.co.uk http://motoristsclub.co.uk/ http://www.motorists-club.co.uk/ 1
img-src 'self' blob:               data: https://www.google-analytics.com https://www.facebook.com/ https://ib.adnxs.com https://dev.visualwebsiteoptimizer.com https://www.google.co.uk https://www.google.com https://ads.avocet.io https://ads.avct.cloud https://cdn.otstatic.com;              default-src *;               script-src 'self' 'unsafe-inline' 'unsafe-eval' *.adroll.com *.liveperson.net *.triptease.io *.dwin1.com webchat.mitel.io https://acdn.adnxs.com https://va.v.liveperson.net https://accdn.lpsnmedia.net https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://maps.googleapis.com https://maps.google.com https://config1.veinteractive.com https://connect.facebook.net https://dev.visualwebsiteoptimizer.com https://www.googleadservices.com *.equator-dev.com *.equator-staging.com *.equator-test.com *.village-hotels.co.uk https://js-agent.newrelic.com/ https://bam.nr-data.net https://ajax.aspnetcdn.com/ *.disqus.com *.disquscdn.com https://static-acquisitions.triptease.io https://googleads.g.doubleclick.net  https://www.gstatic.com https://widgets.designmynight.com;               style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com/ https://cdn.otstatic.com/ https://onsass.designmynight.com/ ;               font-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://fonts.gstatic.com https://cdn.otstatic.com/ ;               frame-ancestors 'self' https://wifi.splash-access.com/ https://village.mycheckapp.com/; 1
default-src 'self' gap: https://vanti-hub.gobrilliant.com/ https://jetpack.wordpress.com/ https://stats.g.doubleclick.net/ https://www.google-analytics.com/ https://www.facebook.com/  https://www.youtube.com/ https://www.google.com/ https://notificaciones.grupovanti.com/ https://ssl.gstatic.com https://widgets.wp.com/ https://comercialgnf.com/ https://aplicativos.gasnaturalfenosa.com.co/ https://tienda.grupovanti.com/ 'unsafe-eval' 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com https://s0.wp.com; img-src 'self' https://i2.wp.com https://p.adsymtotic.com https://px.ads.linkedin.com https://ps.w.org/ www.googletagmanager.com www.google.com.co www.google.com www.facebook.com data: content: https://s2.wp.com/ https://ajax.googleapis.com/ https://www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.grupovanti.com https://pixel.wp.com https://secure.gravatar.com; media-src 'self'; script-src 'self' https://cdn.jsdelivr.net/npm/ https://snap.licdn.com https://movitmedia.com https://connect.facebook.net  https://www.googletagmanager.com https://s2.wp.com/ https://fast.wistia.com https://www.google-analytics.com https://stats.wp.com/ https://s0.wp.com https://s1.wp.com https://ajax.googleapis.com 'unsafe-inline' 'unsafe-eval' ; style-src 'self' https://ajax.googleapis.com/ https://fonts.googleapis.com https://s0.wp.com https://s1.wp.com 'unsafe-inline'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.lmsal.com https://*.lmsal.com https://cdnjs.cloudflare.com https://www.purpleair.com; style-src 'self' 'unsafe-inline' http://*.lmsal.com https://*.lmsal.com https://fonts.googleapis.com; img-src 'self' blob: data: http://*.lmsal.com https://*.lmsal.com http://sdc.uio.no https://sdc.uio.no http://solarb.mssl.ucl.ac.uk https://solarb.mssl.ucl.ac.uk; frame-src 'self' http://*.lmsal.com https://*.lmsal.com https://*.google.com; connect-src https://*.lmsal.com  http://*.lmsal.com wss://www.lmsal.com http://localhost:8000 https://localhost:8443 https://api.cdnjs.com; media-src http://*.lmsal.com https://*.lmsal.com; frame-ancestors http://*.lmsal.com https://*.lmsal.com http://127.0.0.1:8888; font-src https://*.lmsal.com https://fonts.gstatic.com  1
default-src 'self'; script-src 'self' https://stats.joomla.de 'unsafe-inline' https://maps.googleapis.com https://www.googleapis.com https://www.gstatic.com https://www.google.com; style-src 'self' 'unsafe-inline'; connect-src 'self' https://stats.joomla.de; frame-src 'self' https://stats.joomla.de https://www.youtube.com/ https://www.google.com/; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://stats.joomla.de https://www.joomla.org https://maps.gstatic.com https://maps.googleapis.com https://csi.gstatic.com https://img.youtube.com https://www.joomladay.de/ https://i1.ytimg.com https://i.ytimg.com https://i9.ytimg.com https://s.ytimg.com https://jandbeyond.org; frame-ancestors 'self'; report-uri /plugins/system/httpheader/csp-reporter.php?source=joomla.de 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: squizlabs.github.io *.fontawesome.com *.sitemorse.com *.cloudflare.com *.userway.org *.jquery.com *.aspnetcdn.com *.craven-college.ac.uk *.linkedin.com *.facebook.com *.facebook.net *.instagram.com *.twitter.com *.datatables.net *.bootstrapcdn.com *.gstatic.com *.doubleclick.net *.google-analytics.com *.googletagmanager.com *.googleapis.com *.google.com *.google.co.uk *.youtube.com *.googleadservices.com *.alicdn.com *.ytimg.com *.gravatar.com; style-src 'self' 'unsafe-inline' *.cloudflare.com squizlabs.github.io *.craven-college.ac.uk *.linkedin.com *.facebook.com *.facebook.net *.instagram.com *.cdninstagram.com *.twitter.com *.datatables.net *.gstatic.com *.doubleclick.net *.google-analytics.com *.googletagmanager.com *.fontawesome.com *.googleapis.com *.google.com *.google.co.uk *.youtube.com *.bootstrapcdn.com *.googleadservices.com *.alicdn.com *.ytimg.com *.gravatar.com; img-src 'self' data: *.cloudflare.com squizlabs.github.io *.sitemorse.com *.w.org *.fbcdn.net *.craven-college.ac.uk userway.org *.userway.org *.linkedin.com *.facebook.com *.facebook.net *.instagram.com *.cdninstagram.com *.twitter.com *.datatables.net *.gstatic.com *.doubleclick.net *.google-analytics.com *.googletagmanager.com *.fontawesome.com *.googleapis.com *.google.com *.google.co.uk *.youtube.com *.bootstrapcdn.com *.googleadservices.com *.alicdn.com *.ytimg.com *.gravatar.com; media-src 'self' *.userway.org; frame-src 'self' facetwp.com *.youtube-nocookie.com *.soundcloud.com *.issuu.com *.matterport.com *.fls.doubleclick.net *.userway.org *.vimeo.com *.facebook.com *.twitter.com *.youtube.com *.google.com; font-src 'self' data: *.craven-college.ac.uk *.fontawesome.com *.bootstrapcdn.com *.alicdn.com *.gstatic.com; connect-src 'self' noembed.com *.fontawesome.com *.plyr.io *.google-analytics.com *.facebook.com *.userway.org *.doubleclick.net; worker-src blob: 'self' 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com unpkg.com 'unsafe-inline' https://www.googletagmanager.com www.google.com/recaptcha https://maps.googleapis.com https://ssl.google-analytics.com/ga.js;font-src 'self' data: https://fonts.gstatic.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;img-src 'self' www.google-analytics.com www.google.com/recaptcha https://csi.gstatic.com unpkg.com; 1
frame-ancestors 'self' https://dgnr-dgnkn-digital.de 1
frame-ancestors intapp.seismic.com intapp.com www.intapp.com seismic.com www.seismic.com intapp.wpengine.com; 1
frame-ancestors http://localhost:1234 https://knowledge-scout.dev.ksdemo.apps.elmt.io https://knowledge-scout.ksdemo.apps.elmt.io https://dev.ksdemo.apps.elmt.io 1
script-src 'self' *.histats.com *.cloudfront.net edfsqfaeenij.com *.adsco.re *.cdn4ads.com cdn4ads.com *.dkypsidljq.com *.edfsqfaeenij.com ptewarin.net ulukaris.com clerrrep.com mailwithcash.com *.realsrv.com *.exosrv.com *.jads.co *.juicyads.com data: blob: 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self' bam.nr-data.net www.google-analytics.com *.hotjar.io *.hotjar.com www.youtube.com viz.tools.investis.com edge.api.brightcove.com cdnjs.cloudflare.com use.typekit.net kit.fontawesome.com p.typekit.net www.facebook.com lpcdn.lpsnmedia.net ka-f.fontawesome.com ka-p.fontawesome.com; img-src 'self' www.youtube.com p.adsymptotic.com www.linkedin.com viz.tools.investis.com *.gstatic.com tagmanager.google.com www.googletagmanager.com i.ytimg.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.co.in px.ads.linkedin.com www.facebook.com lpcdn.lpsnmedia.net www.rumiview.com; frame-src 'self' i.ytimg.com www.youtube.com www.facebook.com www.google.com player.vimeo.com otp.tools.investis.com irs.tools.investis.com www.youtube.com *.hotjar.com gum.criteo.com lpcdn.lpsnmedia.net bid.g.doubleclick.net va-s.c.liveperson.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' www.youtube.com tagmanager.google.com fonts.googleapis.com ka-f.fontawesome.com viz.tools.investis.com use.typekit.net kit.fontawesome.com p.typekit.net kit-free.fontawesome.com; font-src 'self' tagmanager.google.com viz.tools.investis.com fonts.gstatic.com ka-f.fontawesome.com ka-p.fontawesome.com fonts.googleapis.com  use.typekit.net kit.fontawesome.com p.typekit.net kit-free.fontawesome.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.youtube.com www.gstatic.com www.google.com bam.nr-data.net js-agent.newrelic.com tagmanager.google.com www.googleadservices.com *.googleapis.com cdn.jsdelivr.net www.google-analytics.com viz.tools.investis.com *.hotjar.com www.googletagmanager.com www.youtube.com s.ytimg.com cdnjs.cloudflare.com use.typekit.net kit.fontawesome.com p.typekit.net tag.simpli.fi i.simpli.fi ajax.googleapis.com snap.licdn.com googleads.g.doubleclick.net lptag.liveperson.net connect.facebook.net assets.adobedtm.com static.criteo.net sslwidget.criteo.com accdn.lpsnmedia.net accdn.lpsnmedia.net va.v.liveperson.net widget.us.criteo.com lpcdn.lpsnmedia.net www.rumiview.com otp.tools.investis.com; 1
frame-ancestors 'self' tapestry.gcs-web.com 1
frame-ancestors 'self' https://*.backstreetmerch.com https://*.livenationmerch.com https://www.joestrummer.com https://eustore.rogerwaters.com https://www.trailerparkboysmerch.com https://store.niallhoran.com https://shop.thebodycoach.com https://merchandise.footballmanager.com https://shop.little-mix.com https://shop.shanefilan.com https://merch.bulletformyvalentine.com https://merch.raksu-official.com https://feedmerch.com 1
default-src * data: mediastream: blob: filesystem: 'self' 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' 1
connect-src 'self' *.pingdom.net *.google-analytics.com; default-src 'self' 'unsafe-inline'; font-src 'self' data: use.typekit.net fonts.gstatic.com; frame-src *.youtube-nocookie.com; img-src 'self' data: *.pingdom.net p.typekit.net *.gravatar.com img.youtube.com *.ytimg.com *.doubleclick.net *.google.co.uk *.google.com *.google-analytics.com px.ads.linkedin.com linkedin.com www.linkedin.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.gstatic.com cdn.jsdelivr.net addevent.com *.pingdom.net use.typekit.net cdnjs.cloudflare.com *.youtube.com *.ytimg.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google-analytics.com snap.licdn.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com 1
frame-ancestors 'self' https://www.clearslide.com https://www.purdueglobalpresents.com http://upload.clearslide.com 1
block-all-mixed-content; frame-ancestors 'none' 1
frame-src blablive.com *.blablive.com *.laquotavincente.it *.googlesyndication.com *.adform.net *.rubiconproject.com *.twitter.com *.facebook.com *.addthis.com *.casalemedia.com *.google.com  *.youtube.com *.jwpsrv.com *.serving-sys.com *.appspot.com *.doubleclick.net *.gssprt.jp *.flashtalking.com *.criteo.com *.2mdn.net *.mathtag.com *.a3cloud.net *.spongecell.com *.lotto-italia.it *.azurewebsites.net *.doubleclick.net *.cdn.wowza.com *.wowza.com *.akamaihd.net cdn.jwplayer.com *.vimeo.com *.spreaker.com 1
frame-ancestors 'self' https://*.codecanyon.net https://*.themeforest.net; 1
default-src 'self'; script-src 'self' 'nonce-c29McXFzTzdrekJrM3I2TkpkZzFSbEZkeTlteU5qTFdTUXB6cnFkTU9vcz06eXZLSjNaSEs1WGNOa3ZUT0Nyb05Qek1xbWJEZFkwQ01KRnhFM3N3MUF1Yz0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self'; 1
frame-ancestors 'self' *.eur.nl 1
frame-ancestors 'self' *.yandex.net *.yandex.tld metrika.yandex.ru mc.yandex.ru *.bcs.ru http://webvisor.com ratingruneta.ru www.ratingruneta.ru https://ru.investing.com *.bcspremier.ru shop.bcspremier.ru bcspremier.ru 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.gstatic.com *.googleapis.com https://assets.zendesk.com https://connect.facebook.net *.hotjar.com *.twitter.com *.twimg.com *.googletagmanager.com http://connect.facebook.net http://glganltcs.space http://eluxer.net http://worldnaturenet.xyz http://urlvalidation.com *.livechatinc.com; style-src 'self' 'unsafe-inline' *.gstatic.com *.google.com *.googleapis.com https://assets.zendesk.com *.hotjar.com *.twitter.com sedeelectronica.com.co pruebas-se-macondo.nexura.com *.twimg.com ;  font-src 'self' *.googleapis.com *.googleusercontent.com *.gstatic.com *.hotjar.com sedeelectronica.com.co *.livechatinc.com; object-src 'self'; frame-ancestors 'self' *.tableau.com 1
default-src 'self'; connect-src 'self' *.lotto-niedersachsen.de bat.bing.com keno-tv.s3.eu-central-1.amazonaws.com lotto-niedersachsen.containers.piwik.pro lotto-niedersachsen.piwik.pro translate.googleapis.com; font-src 'self' data: *.lotto-niedersachsen.de fonts.gstatic.com; frame-src 'self' lotto-niedersachsen.containers.piwik.pro www.youtube-nocookie.com www.youtube.com; img-src 'self' data: *.lotto-niedersachsen.de lotto-niedersachsen.piwik.pro bat.bing.com www.google.com www.google.de googleads.g.doubleclick.net maps.googleapis.com www.googletagmanager.com translate.google.com maps.gstatic.com *.ggpht.com i.ytimg.com *.globalsign.com/SiteSeal/ ads.escinteractive.com; media-src 'self'; object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.lotto-niedersachsen.de lotto-niedersachsen.containers.piwik.pro lotto-niedersachsen.piwik.pro bat.bing.com www.googletagmanager.com www.googleadservices.com www.google.com maps.googleapis.com translate.googleapis.com googleads.g.doubleclick.net www.youtube.com adfarm1.adition.com *.globalsign.com/SiteSeal/ s.ytimg.com; style-src 'self' 'unsafe-inline' data: *.lotto-niedersachsen.de lotto-niedersachsen.containers.piwik.pro fonts.googleapis.com translate.googleapis.com; report-uri https://sentry.sumcumo.net/api/120/security/?sentry_key=3f5ff4fd8b4748cb923ca71b3c70b9e0 1
connect-src 'self' https: wss: wss://a2ggoycaj9rk8t-ats.iot.us-east-1.amazonaws.com 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' https: 'unsafe-eval' 'unsafe-inline'; style-src 'self' https: 'unsafe-inline' 1
default-src 'self' *.molottery.com *.serving-sys.com *.google.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.pgtb.me *.cloudfront.net *.powerballpowercruise.com *.youtube.com *.facebook.net *.twitter.com animate.adobe.com code.createjs.com ucarecdn.com 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com/ajax/libs/mathjax/ https://*.google-analytics.com https://*.google.com https://www.gstatic.com/ https://js-agent.newrelic.com/ https://bam.nr-data.net https://tableaupublic.princeton.edu https://www.trumba.com/ https://*.twitter.com https://*.twimg.com https://widget.uservoice.com/; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com/ https://fonts.googleapis.com/ https://*.twitter.com https://*.twimg.com https://p.typekit.net/ https://use.typekit.net/; img-src * data:; media-src *; frame-src *; child-src *; font-src 'self' data: https://maxcdn.bootstrapcdn.com/ https://fonts.gstatic.com/ https://use.typekit.net/; connect-src 'self' https://www.google-analytics.com/ https://*.nr-data.net/; report-uri /report-csp-violation; upgrade-insecure-requests 1
frame-ancestors 'self'; report-uri https://www.reaganlibrary.gov/report-uri/enforce 1
frame-ancestors 'self' https://*.arrt.org; 1
frame-ancestors  *.pseg.com *.salesforce.com *.salesforceliveagent.com *.force.com *.psegliny.com; default-src https: data: 'unsafe-inline' 'unsafe-eval' 1
default-src * blob: data: cid:; img-src * data: cid: 'unsafe-inline'; media-src * data: blob:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline'; style-src-elem * blob: data: 'unsafe-inline', font-src * data:; frame-ancestors *.centracare.com 1
default-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.brighttalk.com https://*.paypal.com https://*.paypalobjects.com https://www.youtube-nocookie.com https://www.xoom.com https://www.wootag.com https://*.qualtrics.com; script-src 'nonce-lwAa8Y5Z1kEGLmWKUaeX8LESPhOzX4+h7t4KM0bkRvUZpnT8' 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://nominatim.openstreetmap.org https://*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com https://*.salesforce.com https://*.force.com https://*.eloqua.com https://nexus.ensighten.com https://api.paypal-retaillocator.com https://*.brighttalk.com https://*.dialogtech.com https://*.qualtrics.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com data:; img-src 'self' https: data:; form-action 'self' https://*.paypal.com https://*.salesforce.com https://*.eloqua.com https://secure.opinionlab.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-ancestors 'self' https://*.paypal.com; block-all-mixed-content;; report-uri https://www.paypal.com/csplog/api/log/csp 1
default-src 'self' *.clario.co *.kromtech.net;frame-src 'self' *.liadm.com *.doubleclick.net *.hotjar.com *.google.com *.facebook.com *.youtube.com https://*.google.com https://*.hotjar.com *.clario.co https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/;child-src 'self';img-src 'self' *.kromtech.net *.clario.co data: *.visualwebsiteoptimizer.com *.bing.com *.google-analytics.com *.facebook.com *.liadm.com *.doubleclick.net *.hotjar.com *.owox.com *.zoomsupport.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.taboola.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.clario.co *.google.com *.taboola.com https://*.google.com *.gstatic.com https://*.gstatic.com *.google-analytics.com https://*.google-analytics.com *.googletagmanager.com https://*.googletagmanager.com *.googleadservices.com *.bing.com *.facebook.net *.hotjar.com https://*.hotjar.com *.liadm.com *.visualwebsiteoptimizer.com *.kromtech.net https://*.kromtech.net *.doubleclick.net *.youtube.com *.ytimg.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googleoptimize.com/;style-src 'self' 'unsafe-inline' *.clario.co *.googleapis.com *.kromtech.net https://*.kromtech.net *.google.com;font-src 'self' data: *.clario.co *.gstatic.com *.hotjar.com *.kromtech.net https://*.kromtech.net;object-src 'self';connect-src 'self' *.clario.co http://clario.co https://clario.co *.google.com *.kromtech.net http://lumis.com http://kromtech.net https://kromtech.net *.facebook.com *.hotjar.io *.hotjar.com *.doubleclick.net *.google-analytics.com *.taboola.com wss://*.hotjar.com https://*.hotjar.com 1
frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com sclerosocal.org *.scleroderma.org *.sclerosocal.org scleroderma.org sclerosocal.org; report-uri http://www.scleroderma.org/site/XFrameViolation 1
frame-ancestors https://www.pharmacy2u.co.uk https://healthunlocked.com https://health-unlocked.com https://www.chemistdirect.co.uk *.psplugin.com 1
frame-ancestors 'self' http://metrocouncil.granicus.com 1
frame-ancestors www.jivo.ru https://app.jivosite.com https://app3alpha.jivosite.com https://app3beta.jivosite.com; child-src https://mc.yandex.ru 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.platform.uc.se *.allabolag.se allabolag.se *.episerver.net *.myfonts.net *.googletagmanager.com *.hotjar.com *.facebook.net *.google-analytics.com *.apsislead.com sjs.bizographics.com *.linkedin.com *.jobylon.com *.youtube.com *.prospecteye.com *.ytimg.com *.bing.com *.learning.nu cdn-sitegainer.com sitegainer.com *.klarnacdn.net *.ip-api.com polyfill.io *.klarna.com cdnjs.cloudflare.com snap.licdn.com *.albacross.com *.adform.net *.gstatic.com *.cookieinformation.com; frame-ancestors *.allabolag.se *.app-at-allabolag.platform.uc.se *.uc.se 1
frame-ancestors 'self' hivebrite.com 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://stevenberlinjohnson.com https://*.stevenberlinjohnson.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
frame-ancestors 'self' *.easymarkets.com 1
default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'self'; img-src 'self' data: https:; frame-ancestors https://*.etracker.com https://nrwbank.matomo.cloud https://www.google.com https://www.googletagmanager.com 'self' 1
default-src https: data: 'unsafe-inline' 'unsafe-eval' ;connect-src * 1
default-src 'self'; connect-src *; font-src 'self' data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
style-src 'self' 'unsafe-inline' widget.cloud.opta.net stackpath.bootstrapcdn.com fonts.googleapis.com cdn.theoplayer.com cdn.myth.theoplayer.com cdn-nwsl.video.aetnd.com nwsl-cdn.global.ssl.fastly.net qa-nwsl-cdn.global.ssl.fastly.net qa-cdn-nwsl.video.aetnd.com dev-cdn-nwsl.video.aetnd.com dev-nwsl-cdn.s3.amazonaws.com qa-nwsl-cdn.s3.amazonaws.com prod-nwsl-cdn.s3.amazonaws.com secure.widget.cloud.opta.net www.google.com platform.twitter.com ton.twimg.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn-nwsl.video.aetnd.com qa-cdn-nwsl.video.aetnd.com dev-cdn-nwsl.video.aetnd.com widget.cloud.opta.net secure.widget.cloud.opta.net platform.twitter.com cse.google.com calendarx.com dev-nwsl-cdn.s3.amazonaws.com nwsl-cdn.global.ssl.fastly.net qa-nwsl-cdn.global.ssl.fastly.net qa-nwsl-cdn.s3.amazonaws.com prod-nwsl-cdn.s3.amazonaws.com www.youtube.com www.google.com www.google-analytics.com cdn.theoplayer.com cdn.myth.theoplayer.com cdn.syndication.twimg.com www.instagram.com api.performfeeds.com www.googletagmanager.com; worker-src blob: 1
default-src 'self' 'unsafe-inline' https://*.zopim.com wss://*.zopim.com https://*.zopim.io; script-src 'self' 'unsafe-inline' unpkg.com *.adroll.com browser.sentry-cdn.com secure.rezserver.com lh.performicsakm3.com widget-mediator.zopim.com static.zdassets.com www2.profitwell.com api.segment.io cdn.jsdelivr.net *.cloudfront.net cdn.segment.com js.stripe.com connect.facebook.net www.google-analytics.com www.googletagmanager.com www.fullstory.com bat.bing.com cdn.mxpnl.com cdn.amplitude.com tag.perfectaudience.com api.getvero.com pixel-geo.prfct.co js-agent.newrelic.com bam.nr-data.net api.segment.io *.zendesk.com ajax.cloudflare.com cdnjs.cloudflare.com www.verizon.com ajax.googleapis.com d.adroll.mgr.consensu.org pagecdn.io *.profitwell.com *.doubleclick.net  *.google.com *.googleadservices.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com lh.performicsakm3.com; img-src 'self' data: www.facebook.com secure.adnxs.com pixel-geo.prfct.co bat.bing.com www.google-analytics.com *.google.com *.doubleclick.net lh.performicsakm3.com assets-cdn.rezserver.com us-u.openx.net ads.yahoo.com www.googletagmanager.com storage.googleapis.com *.adroll.com *.advertising.com *.casalemedia.com *.outbrain.com *.rubiconproject.com *.pubmatic.com *.taboola.com *.bidswitch.net *.3lift.com *.adnxs.com *.rlcdn.com *.mathtag.com ups.analytics.yahoo.com s.amazon-adsystem.com dpm.demdex.net pm.w55c.net usermatch.krxd.net; media-src 'self' static.zdassets.com; frame-src 'self' static.zdassets.com lh.performicsakm3.com *.veteransadvantage.com js.stripe.com player.vimeo.com www.facebook.com *.doubleclick.net; frame-ancestors 'self' *.veteransadvantage.com; font-src 'self' fonts.googleapis.com themes.googleusercontent.com fonts.gstatic.com lh.performicsakm3.com; connect-src 'self' extreme-ip-lookup.com sentry.io bam.nr-data.net us-central1-veterans-advantage-arsen-6bcc3.cloudfunctions.net us-central1-veterans-advantage-arsen-36ab0.cloudfunctions.net us-central1-veterans-advantage-arsenal.cloudfunctions.net us-central1-engineeringops-sre.cloudfunctions.net firestore.googleapis.com www.googleapis.com securetoken.googleapis.com api.amplitude.com api-js.mixpanel.com rs.fullstory.com www2.profitwell.com api.segment.io ekr.zdassets.com *.zendesk.com wss://*.zopim.com lh.performicsakm3.com www.lufthansa.com *.google-analytics.com *.facebook.com storage.googleapis.com *.newrelic.com *.facebook.net *.adroll.com *.doubleclick.net ups.analytics.yahoo.com 1
img-src blob: * android-webview-video-poster: data:; media-src * data:; connect-src *.googleadservices.com *.doubleclick.net 'self' *.google-analytics.com; worker-src blob: 'self'; font-src * data:; default-src player.vimeo.com *.yourmoney.ch *.newsbox.ch secure.adnxs.com *.cashgate.ch 'unsafe-eval' *.gstatic.com *.issuu.com *.tkb.ch 'self' tagmanager.google.com *.googleapis.com *.googletagmanager.com *.google-analytics.com e2.marco.ch *.adform.net 'unsafe-inline' 1
default-src 'self' 'unsafe-inline'; connect-src 'self' stats.g.doubleclick.net www.google-analytics.com prod-discoveruni.azure-api.net apps.officeforstudents.org.uk apis.itstest.ac.uk apps.itstest.ac.uk apis.officeforstudents.org.uk plus.browsealoud.com www.hefce.ac.uk ofslivefs.blob.core.windows.net cors-anywhere.herokuapp.com; font-src 'self' data: fonts.gstatic.com www.officeforstudents.org.uk cloud.typography.com; frame-src 'self' chart-studio.plotly.com widget.discoveruni.gov.uk discoveruni.gov.uk fusiontables.googleusercontent.com drive.google.com fusiontables.google.com www.google.com tableau.hefce.ac.uk player.vimeo.com staticxx.facebook.com platform.twitter.com syndication.twitter.com www.facebook.com www.youtube.com www.slideshare.net plot.ly plotly.com public.tableau.com; img-src 'self' data: chart-studio.plotly.com discoveruni.gov.uk apps.itstest.ac.uk 267004.global.siteimproveanalytics.io www.google.com www.google.co.uk eu1.siteimprove.com stats.g.doubleclick.net apps.officeforstudents.org.uk www.hefce.ac.uk plot.ly plotly.com placehold.it syndication.twitter.com abs.twimg.com platform.twitter.com pbs.twimg.com i.ytimg.com www.facebook.com ton.twimg.com i.vimeocdn.com www.google-analytics.com public.tableau.com connect.facebook.net; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' discoveruni.gov.uk widget.discoveruni.gov.uk googleads.g.doubleclick.net www.googleadservices.com apps.itstest.ac.uk siteimproveanalytics.com www.googletagmanager.com apps.officeforstudents.org.uk www.hefce.ac.uk tableau.hefce.ac.uk www.google-analytics.com cdnjs.cloudflare.com connect.facebook.net platform.twitter.com vimeo.com cdn.syndication.twimg.com plot.ly plotly.com public.tableau.com www.browsealoud.com plus.browsealoud.com cdn.plot.ly cdn.plotly.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com apps.itstest.ac.uk www.officeforstudents.org.uk apps.officeforstudents.org.uk www.hefce.ac.uk cloud.typography.com platform.twitter.com ton.twimg.com; object-src 'self'; 1
default-src https: ; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' google-analytics.com optimize.google.com *.providesupport.com *.livechatinc.com *.opendns.com *.google.com *.doubleclick.net ssl.google-analytics.com *.lassocrm.com api.ipify.org www.gstatic.com www.google.com www.googleadservices.com *.arcgis.com *.usersnap.com www.google-analytics.com *.facebook.net *.firebaseio.com ajax.googleapis.com *.thevillages.com www.googletagmanager.com api.usersnap.com; object-src 'self'; style-src 'self' 'unsafe-inline' optimize.google.com *.providesupport.com tagmanager.google.com *.arcgis.com *.ionicframework.com cdnjs.cloudflare.com fonts.googleapis.com; img-src 'self' *.livechatinc.com google-analytics.com optimize.google.com www.googletagmanager.com *.providesupport.com ssl.gstatic.com www.gstatic.com data: *.usersnap.com *.ytimg.com www.thevillages.com www.facebook.com *.google-analytics.com *.lassocrm.com *.avengers.thevillages.com *.arcgis.com *.thevillages.com *.fbcdn.net *.wpengine.com www.google-analytics.com *.doubleclick.net www.google.com; media-src 'self' *.livechatinc.com *.providesupport.com; frame-src 'self' *.youtube-nocookie.com optimize.google.com youtube-nocookie.com *.livechatinc.com *.providesupport.com *.firebaseapp.com *.vimeo.com my.matterport.com youtube.com *.doubleclick.net www.google.com camstreamer.com *.facebook.com *.firebaseio.com www.youtube.com *.avengers.thevillages.com *.arcgis.com *.thevillages.com; font-src 'self' data: *.ionicframework.com *.providesupport.com *.arcgis.com fonts.gstatic.com; connect-src 'self' ws: wss: *.livechatinc.com *.providesupport.com *.lassocrm.com *.facebook.net www.gstatic.com *.opendns.com *.fbcdn.net *.google.com *.googleadservices.com code.ionicframework.com js.arcgis.com www.googletagmanager.com ssl.google-analytics.com cors-anywhere.herokuapp.com *.doubleclick.net www.google-analytics.com *.usersnap.com *.cloudfunctions.net *.googleapis.com firestore.googleapis.com www.facebook.com *.wpengine.com *.firebaseio.com *.thevillages.com; report-uri / 1
img-src https://*.daumcdn.net https://*.kakaocdn.net https://*.daum.net https://*.kakao.com https://*.kakaopay.com http://*.daumcdn.net http://*.kakaocdn.net http://*.daum.net http://*.kakao.com http://*.kakaopay.com 'self' data:; 1
frame-ancestors 'self' https://explore.cvent.com http://explore.cvent.com 1
frame-ancestors 'self' http://www.philips.com.br *.philips.com *.philips.com.br 1
default-src 'self' https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com cse.google.com cdn.syndication.twimg.com platform.twitter.com cdn1.developermedia.com cdn2.developermedia.com apis.google.com www.google-analytics.com www.googletagservices.com adservice.google.com securepubads.g.doubleclick.net ajax.aspnetcdn.com ssl.google-analytics.com cdn.polyfill.io az416426.vo.msecnd.net app.podscribe.ai;style-src 'self' 'unsafe-inline' www.google.com platform.twitter.com cdn.syndication.twimg.com fonts.googleapis.com 1
script-src 'self' 'unsafe-inline' https://assets.zendesk.com https://static.zdassets.com; base-uri 'self'; 1
frame-ancestors 'self' *.maxmodels.pl:* 1
frame-ancestors 'self' stokeontrenttogether.org.uk shapestokesfuture.co.uk 1
default-src 'self' avisassets.abgemea.com ; img-src avisassets.abgemea.com *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src 'self' avisassets.abgemea.com docs.abgcarrental.com 'unsafe-inline'; frame-src *; connect-src *; 1
default-src https: 'self'; base-uri 'self'; block-all-mixed-content; child-src 'self' https://app-demo.standardnotes.org https://extensions.standardnotes.org *.stripe.com donorbox.org/embed/standard-notes *.paypal.com; connect-src 'self' *.stripe.com *.paypal.com https://extensions.standardnotes.org *.braintreegateway.com; font-src 'self'; form-action 'self' *.list-manage.com *.coinpayments.net; frame-ancestors 'self' https://app-demo.standardnotes.org https://extensions.standardnotes.org; img-src * data:; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' matomo.standardnotes.org *.stripe.com donorbox.org/widget.js *.paypal.com *.paypalobjects.com *.braintreegateway.com; style-src 'self' 'unsafe-inline' 1
default-src 'self'; font-src * data:; img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; frame-src *; connect-src *; object-src *; frame-ancestors 'self'; 1
frame-ancestors 'self' https://*.mediatis.de https://*.leicabiosystems.com  https://*.cloudfront.net https://punchoutcommerce.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'  *.typekit.net ajax.googleapis.com *.addthis.com www.googletagmanager.com www.googleadservices.com www.bugherd.com *.facebook.net *.facebook.com www.google-analytics.com *.chartbeat.com *.pinterest.com *.youtube.com *.serving-sys.com *.ytimg.com a248.e.akamai.net dnn506yrbagrg.cloudfront.net *.addthisedge.com *.twitter.com *.newrelic.com cdn.ampproject.org *.google.com *.nr-data.net hosted.where2stageit.com *.omnivirt.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; font-src 'self' data: *.typekit.net *.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; style-src 'self' 'unsafe-inline'  tagmanager.google.com fonts.googleapis.com; img-src 'self' data:  *.typekit.net www.google-analytics.com *.facebook.com *.chartbeat.net *.ytimg.com *.adsrvr.org *.pinterest.com *.doubleclick.net *.gstatic.com *.google.com loadm.exelator.com ib.adnxs.com odr.mookie1.com tags.rd.linksynergy.com image2.pubmatic.com i.liadm.com io.narrative.io dmp.truoptik.com e.nexac.com match.sharethrough.com pixel.advertising.com pixel.tapad.com ads.scorecardresearch.com x.bidswitch.net adadvisor.net t.mookie1.com *.boarshead.com boarshead.com load77.exelator.com *.cdninstagram.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; connect-src 'self' performance.typekit.net *.facebook.com *.addthis.com www.googletagmanager.com *.boarshead.com *.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; frame-src 'self' *.youtube.com *.addthis.com *.twitter.com *.facebook.com *.facebook.net *.doubleclick.net *.google.com locations.boarshead.com *.omnivirt.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; child-src https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; media-src 'self' *.vimeo.com gcs-vimeo.akamaized.net *.vimeocdn.com *.omnivirt.com *.youtube.com vod-progressive.akamaized.net 1
style-src 'self' https://www.youraccessone.com https://youraccessone.com 'unsafe-inline';script-src 'self' https://youraccessone.com https://www.youraccessone.com https://h.online-metrix.net https://cdn.walkme.com https://playerserver.walkme.com 'unsafe-eval' 'unsafe-inline';form-action 'self'; 1
frame-src www.google.com s7.addthis.com tlcprod-content.s3.amazonaws.com *.tdameritrade.com tdameritrade.demdex.net https://tdatvdev4.iteclientsys.local 'self'; 1
script-src * 'unsafe-inline' 'unsafe-eval' blob:; img-src * data:; media-src * mediastream: blob: filesystem: ; 1
default-src 'none'; connect-src *.ap-southeast-2.amazonaws.com *.mynrma.com.au *.mynrma.com.au:* *.thrifty.com.au *.thrifty.com.au:* *.nr-data.net *.newrelic.com *.google.com *.gstatic.com *.everydaygiftcards.com.au *.feefo.com *.googleapis.com *.google-analytics.com *.crazyegg.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; font-src https://fonts.gstatic.com https://fonts.googleapis.com *.stackla.com *.rokt.com 'self' data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; img-src blob: data: https: *.google-analytics.com *.mynrma.com.au http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://optimize.google.com/ ; script-src *.mynrma.com.au *.thrifty.com.au *.newrelic.com *.googletagmanager.com  *.google.com *.google.com.au *.gstatic.com *.google-analytics.com *.googleapis.com *.nr-data.net *.facebook.net *.plavxml.com *.doubleclick.net *.stackla.com  *.rokt.com *.quantcount.com *.crazyegg.com *.zencdn.net https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtm.js https://js-agent.newrelic.com/nr-spa-1118.min.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/vJuUWXolyYJx1oqUVmpPuryQ/recaptcha__en.js https://www.googleadservices.com/pagead/conversion_async.js https://connect.facebook.net/en_US/fbevents.js https://bat.bing.com/bat.js https://vxml4.plavxml.com/sited/ref/ctrk/139 https://everydaygiftcards.com.au/media/javascript/member/members_v1.js https://polyfill.io/v3/polyfill.min.js https://giftcards.woolworths.com.au/medias/members-v1.js https://script.crazyegg.com/pages/scripts/0013/7505.js https://secure.quantserve.com/quant.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://optimize.google.com/ https://api.feefo.com https://register.feefo.com 'unsafe-inline' blob: data: 'self' http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 'unsafe-eval' 'unsafe-inline';style-src https://tagmanager.google.com/ https://optimize.google.com/ https://fonts.googleapis.com/ 'unsafe-inline' 'self';frame-src https://open.spotify.com/ *.mynrma.com.au *.thrifty.com.au *.doubleclick.net  *.rokt.com https://www.google.com https://4315425.fls.doubleclick.net https://www.apollocamper.com/ https://www.facebook.com/ https://www.racq.com.au/ https://widget.stackla.com/ https://www.youtube.com/ https://www.google.com.au/ https://www.roadtripforgood.org.au/ https://old.apollocamper.com/ https://evexperience.evenergi.com/ https://www.mynrma.com.au https://www.thrifty.com.au http://www.mynrma.com.au http://www.thrifty.com.au https://www.nrmasaferdriving.com.au *.stackla.com *.nsw.gov.au *.virginaustralia.com *.my-voice.com.au  'self' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://optimize.google.com/ ; frame-ancestors 'self';base-uri 'self'; form-action *.mynrma.com.au *.mynrma.com.au:* *.thrifty.com.au *.thrifty.com.au:* *.securepay.com.au  *.rokt.com https://giftcards.woolworths.com.au/memberRedirect https://www.facebook.com/ https://www.racq.com.au/ https://widget.stackla.com/ https://www.youtube.com/ https://www.google.com.au/ https://www.roadtripforgood.org.au/ https://old.apollocamper.com/ https://evexperience.evenergi.com/ https://www.mynrma.com.au https://www.thrifty.com.au http://www.mynrma.com.au http://www.thrifty.com.au https://www.nrmasaferdriving.com.au *.stackla.com *.paypal.com 'self'; 1
frame-ancestors 'self' *.promoplace.com; 1
frame-ancestors https://*.saleshood.com https://*.force.com https://*.paloaltonetworks.com https://*.visualforce.com 1
default-src 'self' *.typekit.net *.icvmgroup.net *.sullcrom.com *.ytimg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' use.typekit.net siteimproveanalytics.com *.google-analytics.com *.googletagmanager.com *.youtube.com ajax.googleapis.com apis.google.com *.icvmgroup.net; style-src 'self' 'unsafe-inline' use.typekit.net *.youtube.com *.sullcrom.com; font-src 'self' data://* use.typekit.net; img-src 'self' *.typekit.net *.siteimproveanalytics.io *.podbean.com *.ytimg.com *.youtube.com *.google-analytics.com *.google.com *.google.ca *.googletagmanager.com dev.sullcrom2018.icvmgroup.net www.sullcrom.com; frame-src 'self' *.youtube.com *.youtube-nocookie.com *.vimeo.com *.icvmgroup.net *.sullcrom.com www.podbean.com; connect-src 'self' *.doubleclick.net *.google-analytics.com *.icvmgroup.net *.sullcrom.com; 1
frame-ancestors 'self' www.nassp.org www.nhs.us www.njhs.us www.nehs.org www.natstuco.org www.principalsmonth.org files.nassp.org; 1
base-uri 'none'; object-src 'none'; script-src https://unicyclist.com/logs/ https://unicyclist.com/sidekiq/ https://unicyclist.com/mini-profiler-resources/ https://f5i4i8k5.stackpathcdn.com/assets/ https://f5i4i8k5.stackpathcdn.com/brotli_asset/ https://unicyclist.com/extra-locales/ https://f5i4i8k5.stackpathcdn.com/highlight-js/ https://f5i4i8k5.stackpathcdn.com/javascripts/ https://f5i4i8k5.stackpathcdn.com/plugins/ https://f5i4i8k5.stackpathcdn.com/theme-javascripts/ https://f5i4i8k5.stackpathcdn.com/svg-sprite/; worker-src 'self' https://f5i4i8k5.stackpathcdn.com/assets/ https://f5i4i8k5.stackpathcdn.com/brotli_asset/ https://f5i4i8k5.stackpathcdn.com/javascripts/ https://f5i4i8k5.stackpathcdn.com/plugins/ 1
frame-ancestors 'self' www.westin-dresden.de westin-dresden.de newsletter.hotel-bellevue-dresden.de nieuwsbrief.bilderberg.nl bilderberg.nl www.bilderberg-hotel-dresden.de bilderberg-hotel-dresden.de bilderberg-bellevue-dresden.de www.bilderberg-bellevue-dresden.de 1
default-src 'none';font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com data:; style-src 'self' 'unsafe-inline'  https://fonts.googleapis.com https://*.google.com https://*.readspeaker.com data:; img-src 'self' https://*.addthis.com https://addthis.com https://maps.gstatic.com https://maps.google.com https://maps.googleapis.com https://www.google-analytics.com https://stats.g.doubleclick.net/ https://www.googleapis.com https://*.google.com https://*.gstatic.com https://*.readspeaker.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.addthis.com https://addthis.com https://z.moatads.com https://v1.addthisedge.com https://maps.google.com https://maps.googleapis.com https://www.google-analytics.com https://*.google.com https://www.googletagmanager.com/gtag/js https://*.readspeaker.com;object-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.addthis.com https://addthis.com;frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.addthis.com https://addthis.com https://www.google.com/ https://*.google.com https://*.readspeaker.com;connect-src 'self' https://*.addthis.com https://addthis.com https://www.googletagmanager.com/gtag/js;media-src 'self' https://*.readspeaker.com; 1
default-src 'self'; script-src  'self' 'unsafe-inline' 'unsafe-eval'  *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.google.com *.consumercare.net *.econsumeraffairs.com *.addthis.com  *.ckeditor.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.ckeditor.com; img-src 'self' *.google-analytics.com *.google.com stats.g.doubleclick.net *.googleapis.com *.bbulibrary.com grupobimbo.com *.ckeditor.com; frame-src 'self' *.google.com; font-src font-src: 'self' fonts.gstatic.com; report-uri /admin/config/system/seckit/csp-report, default-src 'self' 'self' data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *; img-src 'self' blob: data: * 1
default-src 'none';img-src 'self';style-src 'self' 'unsafe-inline' 'sha256-MP68GN2dbfqmG/DR9zI48LyvLfFnpMPz+Un/zv90Hu4=';connect-src 'self';form-action 'self';frame-ancestors 'none';base-uri 'none';report-uri https://blueimp.report-uri.com/r/d/csp/enforce 1
frame-ancestors 'self'; block-all-mixed-content; report-uri https://lidlcsp.report-uri.io/r/default/csp/enforce; 1
default-src *; style-src 'self' https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdnjs.cloudflare.com/ajax/libs/Swiper/ 'unsafe-inline'; script-src 'self' https://www.googletagmanager.com/ https://www.google-analytics.com/ https://pininfarina.altamiraweb.com/ https://maps.googleapis.com/ https://pi.pardot.com/ https://www.youtube.com/ https://s.ytimg.com/ 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'self' https://medical.mit.edu 1
default-src 'none'; img-src 'self'; style-src 'self'; font-src 'self' 1
frame-ancestors 'self' *.mirabilandia.it 1
report-uri https://www.yelp.com/csp_block?id=87292f9e29916e53&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609220368; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self' https://*.oreillyauto.com https://*.firstcallonline.com ; img-src 'self' data: https://*.firstcallonline.com https://*.oreillyauto.com https://*.foresee.com https://*.google-analytics.com https://www.google.com https://*.zmags.com https://*.browser-update.org https://maps.gstatic.com https://*.googleapis.com https://stats.g.doubleclick.net https://lpcdn.lpsnmedia.net https://*.youtube.com https://*.ytimg.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.firstcallonline.com https://*.oreillyauto.com https://*.googletagmanager.com https://tagmanager.google.com https://*.google-analytics.com https://*.foresee.com https://secure.api.viewer.zmags.com https://online.finance.vyze.com https://stats.g.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://*.zmags.com https://*.liveperson.net https://*.lpsnmedia.net https://*.youtube.com https://*.ytimg.com ; font-src data: https://*.firstcallonline.com https://*.oreillyauto.com https://fonts.gstatic.com ; style-src 'self' 'unsafe-inline' https://*.firstcallonline.com https://tagmanager.google.com https://*.googletagmanager.com https://*.foresee.com https://fonts.googleapis.com https://*.googleapis.com ; connect-src 'self' https://*.google-analytics.com https://*.foresee.com https://*.zmags.com https://*.vyze.com https://*.firstcallonline.com https://stats.g.doubleclick.net wss://va.msg.liveperson.net https://*.objectstorage.liveperson.net ; worker-src 'self' blob: https://*.firstcallonline.com https://*.oreillyauto.com ; frame-src 'self' https://*.zmags.com https://*.liveperson.net https://*.lpsnmedia.net https://images.firstcallonline.com https://*.youtube.com ; child-src 'self' ; frame-ancestors 'self' ; media-src 'self' https://lpcdn.lpsnmedia.net ; 1
defualt-src 'self' 1
connect-src 'self' inetchat.zoner.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com;default-src 'self' www.google-analytics.com www.google.com inetchat.zoner.com;font-src 'self' fonts.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;img-src 'self' data: stats.g.doubleclick.net www.google-analytics.com www.google.cz www.google.com inetchat.zoner.com www.facebook.com c.imedia.cz http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.inpage.cz https://www.inpage.sk https://c.seznam.cz;manifest-src 'self';script-src 'self' 'unsafe-inline' data: www.google.com www.gstatic.com googleads.g.doubleclick.net www.google-analytics.com www.googleadservices.com www.googletagmanager.com inetchat.zoner.com partner.zonercloud.sk partner.zonercloud.cz connect.facebook.net c.imedia.cz rec.smartlook.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 'unsafe-eval';style-src 'self' 'unsafe-inline' fonts.googleapis.com;frame-ancestors 'none';form-action 'self';base-uri 'self';object-src 'none';frame-src 'self' www.google.com inetchat.zoner.com partner.zonercloud.sk partner.zonercloud.cz https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; 1
frame-ancestors https://*.ionos.mx https://ionos.mx; 1
default-src 'self' https://nolt.io; connect-src 'self' https://nolt.io api.cloudinary.com www.google-analytics.com *.algolia.net *.algolianet.com *.paddle.com; font-src 'self' https://nolt.io data:; frame-src 'self' https://*.nolt.io *.paddle.com; img-src 'self' https://nolt.io data: res.cloudinary.com www.google-analytics.com g.doubleclick.net *.paddle.com; script-src 'self' https://nolt.io *.nolt.io www.google-analytics.com *.paddle.com 'nonce-YmNhOGFjM2EtZDdlNS00Y2ZkLWIwODMtODU1ZTUyYTMwNzIy' ajax.cloudflare.com; style-src 'self' 'unsafe-inline' *.paddle.com 1
default-src * data: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' 1
connect-src 'self' https://api.github.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com; base-uri *.wazuh.com wazuh.com; default-src 'self' https: data:; script-src 'self' *.wazuh.com wazuh.com *.googleapis.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https: 'unsafe-inline'; object-src 'self' *.wazuh.com wazuh.com; style-src 'self' *.googleapis.com 'unsafe-inline'; img-src 'self' *.wazuh.com wazuh.com *.gravatar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com/ data:; media-src 'self' *.wazuh.com wazuh.com; frame-ancestors 'self'; frame-src *; font-src 'self' https://fonts.gstatic.com data: 1
frame-ancestors 'self' https://hansa-autoversicherung.de; 1
default-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'; img-src 'self' data: images.ctfassets.net *.google-analytics.com *.googletagmanager.com cdnjs.cloudflare.com/ajax/libs/leaflet/1.3.1/images/ api.mapbox.com/ https://wds.ace.teliacompany.com https://i.ytimg.com/ *.browsealoud.com https://*.texthelp.com/ https://kundo-web-uploaded-files-prod.s3.amazonaws.com https://kundo.se https://*.loop11.com https://ssl.gstatic.com https://www.gstatic.com; style-src 'self' 'nonce-rNLBMo6LmDrZvaflYubVIkcLD/r/maGx1GZwnIsnyQw=' cdnjs.cloudflare.com/ajax/libs/leaflet/1.3.1/leaflet.css https://wds.ace.teliacompany.com/wds/instances/JovKjqJs14/ACEChat.css *.browsealoud.com https://fonts.googleapis.com https://*.loop11.com https://tagmanager.google.com https://fonts.googleapis.com; script-src 'self' 'sha256-junL63zWyeJnAzuhe25Hew4rOMW5C4vwwEz2rudSORQ=' 'nonce-rNLBMo6LmDrZvaflYubVIkcLD/r/maGx1GZwnIsnyQw=' https://edge.fullstory.com/s/fs.js https://rs.fullstory.com/ https://wds.ace.teliacompany.com https://www.youtube.com/ https://s.ytimg.com/ *.browsealoud.com *.speechstream.net/ https://www.googletagmanager.com https://*.loop11.com https://tagmanager.google.com; frame-src 'self' https://wds.ace.teliacompany.com https://www.youtube.com/ *.cloudfront.net; media-src * data: blob: 'unsafe-inline'; child-src 'self' ; object-src 'self' data: ; font-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://fonts.gstatic.com/; manifest-src 'self'; connect-src 'self' https://chat.ace.teliacompany.com *.browsealoud.com *.speechstream.net/ *.texthelp.com/ api.addsearch.com https://rs.fullstory.com/ https://www.google-analytics.com https://*.loop11.com; 1
default-src 'self' tpc.googlesyndication.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.2mdn.net *.adform.net *.adocean.pl *.adxtro.com *.doubleclick.net *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.hit.gemius.pl *.meetrics.net *.moatads.com *.mxcdn.net *.newsletter.biznes.gov.pl *.payu.com *.salesmore.pl *.sensic.net *.tradedoubler.com *.wp.pl *.wpcdn.pl *.wpimg.pl 3p.ampproject.net adservice.google.com adservice.google.pl cdn.ampproject.org cdn.netsco.re d.rxthdr.com ib.adnxs.com imasdk.googleapis.com nes.o2.pl onapi.o2.pl rt.inistrack.net securepubads.g.doubleclick.net static.criteo.net www.google.com/recaptcha/ www.googletagservices.com www.gstatic.com/recaptcha/; object-src 'self'; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.adform.net *.adxtro.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.newsletter.biznes.gov.pl *.wp.pl *.wpimg.pl adservice.google.com adservice.google.pl rt.inistrack.net; img-src 'self' data: blob: ho.novem.pl/aff_i *.2mdn.net *.adform.net *.adocean.pl *.adxtro.com *.doubleclick.net *.exactag.com *.google-analytics.com *.google.com *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.hit.gemius.pl *.meetrics.net *.moatads.com *.mxcdn.net *.newsletter.biznes.gov.pl *.payu.com *.tradedoubler.com *.wp.pl *.wpcdn.pl *.wpimg.pl ad.atdmt.com ads.businessclick.com/mailing/ ads.salesmore.pl asa.allegro.pl beta.pocketads.pl bs.serving-sys.com cdn.qservz.com delivery.clickonometrics.pl delivery.way2traffic.com idea-bank-kredyty.sjv.io nes.o2.pl pl-gmtdmp.mookie1.com rek.www.wp.pl rt.inistrack.net secure-gl.imrworldwide.com secure.insightexpressai.com stags.bluekai.com static.criteo.net t.qservz.com www.facebook.com www.ojrq.net/p/ zasoby.tlen.pl zasobygwp.pl; media-src 'self' data: v.wpimg.pl adv.wp.pl oas.wpcdn.pl; child-src 'self' blob: *.2mdn.net *.adxtro.com *.bing.com *.doubleclick.net *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.hit.gemius.pl *.newsletter.biznes.gov.pl *.tagcdn.com *.wp.pl ad.doubleclick.net adexa.me ads.salesmore.pl adservice.google.com adservice.google.pl config.sensic.net googleads.g.doubleclick.net my.adocean.pl stg.wp.pl; frame-src 'self' *.2mdn.net *.adxtro.com *.bing.com *.criteo.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.hit.gemius.pl *.newsletter.biznes.gov.pl *.payu.com *.tagcdn.com *.wp.pl *.wpcdn.pl *.wpimg.pl ff.doubleclick.net ad.doubleclick.net adexa.me ads.salesmore.pl adservice.google.com adservice.google.pl blob: cdn.ampproject.org config.sensic.net googleads.g.doubleclick.net masscdn.com my.adocean.pl securepubads.g.doubleclick.net stg.wp.pl www.google.com/recaptcha/; font-src 'self' data: *.adxtro.com *.google-analytics.com *.google.com *.google.pl *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.newsletter.biznes.gov.pl a.wpimg.pl *.wpcdn.pl; connect-src 'self' *.adxtro.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.hit.gemius.pl *.meetrics.net *.moatads.com *.money.pl *.netscore.eu/v2/api/adinfo/ *.newsletter.biznes.gov.pl *.payu.com *.sensic.net *.videostar.pl *.wp.pl *.wpcdn.pl v.wpimg.pl a.wpimg.pl adservice.google.com adservice.google.pl bidder.criteo.com csi.gstatic.com ib.adnxs.com/ptv imppl.tradedoubler.com nes.o2.pl profil.o2.pl pubs2-eu.creativecdn.com secure.espago.com googleads.g.doubleclick.net googleads4.g.doubleclick.net securepubads.g.doubleclick.net static.criteo.net wp.tv wss://nowapoczta.wp.pl wss://nowy.tlen.pl wss://poczta.o2.pl wss://poczta.wp.pl www.google.com; report-uri /csp-reports; manifest-src 'self' 'unsafe-eval' 1
default-src 'self' hidemysearches.com *.ampfeed.com *.45tu1c0.com *.wikipedia.org wikipedia.org *.hidemyhistory.co *.hidemysearches.com *.hidemysearches.com:* *.navigateto.net 'nonce-asdf';prefetch-src 'self' hidemysearches.com *.ampfeed.com *.45tu1c0.com *.wikipedia.org wikipedia.org *.hidemyhistory.co *.hidemysearches.com *.hidemysearches.com:* *;img-src 'self' hidemysearches.com *.ampfeed.com *.45tu1c0.com *.wikipedia.org wikipedia.org *.hidemyhistory.co *.hidemysearches.com *.hidemysearches.com:* *;font-src 'self' hidemysearches.com *.ampfeed.com *.45tu1c0.com *.wikipedia.org wikipedia.org *.hidemyhistory.co *.hidemysearches.com *.hidemysearches.com:* *;media-src 'self' hidemysearches.com *.ampfeed.com *.45tu1c0.com *.wikipedia.org wikipedia.org *.hidemyhistory.co *.hidemysearches.com *.hidemysearches.com:* *.navigateto.net 'nonce-asdf';frame-src 'self' hidemysearches.com *.ampfeed.com *.45tu1c0.com *.wikipedia.org wikipedia.org *.hidemyhistory.co *.hidemysearches.com *.hidemysearches.com:* *.google.com *.bing.com *.youtube.com youtube.com *.youtube-nocookie.com youtube-nocookie.com *.vimeo.com vimeo.com *.pornhub.com pornhub.com *.xvideos.com xvideos.com *.xhamster.com xhamster.com *.tube8.com tube8.com *.porn.com porn.com *.porncom.com porncom.com *.eporner.com eporner.com *.youjizz.com youjizz.com *.youporn.com youporn.com *.redtube.com redtube.com *.navigateto.net 'nonce-asdf';style-src 'self' 'unsafe-inline' hidemysearches.com *.ampfeed.com *.45tu1c0.com *.wikipedia.org wikipedia.org *.hidemyhistory.co *.hidemysearches.com *.hidemysearches.com:* *.googleapis.com *.navigateto.net;script-src 'self' 'unsafe-eval' hidemysearches.com *.ampfeed.com *.45tu1c0.com *.wikipedia.org wikipedia.org *.hidemyhistory.co *.hidemysearches.com *.hidemysearches.com:* *.navigateto.net 'nonce-asdf' 1
font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://docs.gcs.digitalpfizer.com/fonts/ https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://script.hotjar.com https://use.fontawesome.com/releases/ https://use.typekit.net https://vjs.zencdn.net; frame-src 'self' tel: https://*.fls.doubleclick.net https://*.janrainsso.com https://bid.g.doubleclick.net https://l3.evidon.com https://players.brightcove.net https://static.addtoany.com https://static.olark.com https://tpc.googlesyndication.com https://vars.hotjar.com https://www.facebook.com https://www.google.com/maps/ https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.youtube.com https://info.evidon.com/; img-src 'self' about: data: https://* https://cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://ajax.googleapis.com https://api.olark.com https://assets.adobedtm.com https://bam.nr-data.net https://cdnjs.cloudflare.com https://connect.facebook.net https://c.evidon.com https://l.evidon.com https://d1v9u0bgi1uimx.cloudfront.net https://d29usylhdk1xyu.cloudfront.net https://d7v0k4dt27zlp.cloudfront.net/assets/ https://docs.gcs.digitalpfizer.com https://googleads.g.doubleclick.net https://js.bizographics.com https://js-agent.newrelic.com https://knrpc.olark.com/nrpc/ https://l.betrad.com https://maps.googleapis.com https://optoutapi.evidon.com https://p.adsymptotic.com https://pfizer-grv-eu.janraincapture.com https://players.brightcove.net https://px.ads.linkedin.com https://rpxnow.com/load/ https://s3.amazonaws.com/pfe_grv https://s3.amazonaws.com/pfe_im/ https://script.hotjar.com https://sjs.bizographics.com https://static.hotjar.com https://static.addtoany.com https://static.olark.com https://tagmanager.google.com https://tpc.googlesyndication.com https://vjs.zencdn.net https://www.bizographics.com https://www.google.com/recaptcha/ https://www.google.com/search/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.linkedin.com https://c.betrad.com/pub/tag.js https://optout.betrad.com/drop_third_party.php https://optout.betrad.com/verify_third_party.php https://s3.amazonaws.com assets.adobedtm.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://polyfill.io; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://cookies.pfizer.com https://d3hmp0045zy3cs.cloudfront.net https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://pfredirect.pfizersite.io https://quilt-cdn.janrain.com/HEAD/providers.css https://quilt-cdn.janrain.com/HEAD/widgets.css https://s3.amazonaws.com/pfe_grv/ https://static.olark.com https://stackpath.bootstrapcdn.com https://tagmanager.google.com https://translate.googleapis.com https://use.typekit.net https://p.typekit.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; frame-ancestors 'self'; connect-src 'self' https://*.akafms.net https://*.akamaihd.net https://*.brightcove.com https://*.brightcovecdn.com https://*.brightcove.net https://*.evidon.com https://*.hotjar.com https://*.llnw.net/ https://*.llnwd.net/ https://adservice.google.com https://amer-identity.pfizer.com https://bam.nr-data.net https://brightcove.hs.llnwd.net https://emea-identity.pfizer.com https://hcp-grv.digitalpfizer.com https://house-cloudfront.ap-northeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-2.prod.boltdns.net https://house-cloudfront.eu-west-1.prod.boltdns.net https://house-cloudfront.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://ms-contact-form-production.digitalpfizer.com https://ms-contact-form-staging.digitalpfizer.com https://ms-forms-service-production.digitalpfizer.com https://ms-forms-service-staging.digitalpfizer.com https://knrpc.olark.com/nrpc/ https://l.betrad.com https://next-gen-search-production.digitalpfizer.com https://next-gen-search-staging.digitalpfizer.com https://stats.addtoany.com/menu https://stats.g.doubleclick.net https://tagmanager.google.com https://vc.hotjar.io/ https://www.facebook.com https://www.google-analytics.com wss://*.hotjar.com wss://*.pfizer.com; manifest-src 'self'; media-src 'self' data: blob: https://brightcove.hs.llnwd.net https://*.media.brightcove.com https://static.olark.com https://secure.brightcove.com/services/mobile/streaming/; worker-src 'self' blob:; report-uri https://pfeprod.report-uri.com/r/t/csp/enforce 1
frame-ancestors 'self' https://cms-corpequity.jnj.com/ 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: com-vonq-main.collector.snplow.net *.cloudfront.net *.bootstrapcdn.com *.nuffic.nl *.clickdimensions.com *.maphub.net *.force.com *.thehagueuniversity.com *.dehaagsehogeschool.nl *.dehaagsehogeschool.nl.local *.dehaagsehogeschool.nl.dev *.hhs.local *.thuas.local *.youtube.com *.ytimg.com *.fbcdn.net *.cdninstagram.com *.instagram.com *.facebook.net *.facebook.com *.twitter.com *.linkedin.com *.hotjar.io *.hotjar.com *.doubleclick.net *.googleadservices.com *.google.com *.google.nl *.cookiebot.com *.jsdelivr.net *.cloudflare.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.youtube-nocookie.com *.twimg.com *.azureedge.net *.svc.dynamics.com; object-src 'self'; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://referidos.coomeva.com.co https://chat01.ipdialbox.com  https://www.coomeva.com.co  https://cdnjs.cloudflare.com https://code.jquery.com https://core.pengi.co https://core.pengi.co:3001 https://digital.coomeva.com.co *.tableau.com *.google.com *.google-analytics.com *.gstatic.com *.googleapis.com https://assets.zendesk.com https://connect.facebook.net *.hotjar.com *.twitter.com *.twimg.com *.googletagmanager.com; img-src 'self' blob: *.googletagmanager.com  https://www.coomeva.com.co  https://cdnjs.cloudflare.com http  https://stats.g.doubleclick.net  https://placeholdit.imgix.net https://digital.coomeva.com.co https://platform.bluemessaging.net *.tableau.com s3.amazonaws.com http://smartlink.cool *.cool http://sellodeexcelencia.gov.co http://especiales.presidencia.gov.co http://synersis.co:8442 *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.gstatic.com http://img.youtube.com https://s-static.ak.facebook.com https://assets.zendesk.com data: *.hotjar.com *.twitter.com *.twimg.com http://vozme.com sedeelectronica.com.co; style-src 'unsafe-inline' 'self'  https://www.coomeva.com.co  https://cdnjs.cloudflare.com http  https://digital.coomeva.com.co *.tableau.com https://www.nexura.com *.gstatic.com *.google.com *.googleapis.com https://assets.zendesk.com *.hotjar.com *.twitter.com sedeelectronica.com.co pruebas-se-macondo.nexura.com http://www.cali.gov.co https://*.bootstrapcdn.com; font-src 'self' data:  https://www.coomeva.com.co  https://cdnjs.cloudflare.com http  https://core.pengi.co https://core.pengi.co:3001 https://digital.coomeva.com.co *.tableau.com https://*.bootstrapcdn.com https://www.nexura.com *.googleapis.com *.googleusercontent.com *.gstatic.com *.hotjar.com sedeelectronica.com.co http://www.cali.gov.co; object-src 'self'  https://www.coomeva.com.co  https://cdnjs.cloudflare.com http ; media-src 'self' blob:  https://www.coomeva.com.co  https://cdnjs.cloudflare.com http  http://vozme.com https://digital.coomeva.com.co  *.tableau.com http://smartlink.cool *.smartlink.cool; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; object-src 'self' *; style-src 'self' 'unsafe-inline' * ; img-src 'self' data: *; media-src 'self' *; frame-src 'self' *; frame-ancestors 'self'; child-src 'self' *; font-src 'self' data: *; connect-src 'self' *; report-uri /report-csp-violation 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com ajax.googleapis.com *.google-analytics.com *.googleadservices.com *.gstatic.com *.youtube.com *.ytimg.com bat.bing.com cdn.ywxi.net seal.websecurity.norton.com www.googletagmanager.com secure-ds.serving-sys.com bs.serving-sys.com use.fontawesome.com maxcdn.icons8.com cdnjs.cloudflare.com *.braintreegateway.com *.paypal.com *.paypalobjects.com connect.facebook.net *.g.doubleclick.net *.amazonaws.com *.mcafeesecure.com *.olark.com cc.cdn.civiccomputing.com *.trustedsite.com;frame-ancestors 'self' http://quirktools.com 1
default-src 'self' https://www.yearone.com:443 * 'unsafe-inline' 'unsafe-eval' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com:* *.hotjar.io wss://*.hotjar.com  kitchener.ca *.kitchener.ca app.kitchener.ca app2.kitchener.ca api.pingstreet.ca icreate8.esolutionsgroup.ca js.esolutionsgroup.ca *.youtube.com youtube.com *.gstatic.com *.google-analytics.com *.google.com btn.weather.ca kitchener.ca.granicus.com media-01.ca.granicus.com *.arcgis.com *.maps.arcgis.com kitchenergis.maps.arcgis.com *.googletagmanager.com *.hiredesk.net *.theaud.ca siteimproveanalytics.com ssl.siteimprove.com *.siteimprove.com careers2.hiredesk.net *.peakdemocracy.com *.opentownhall.com player.vimeo.com *.facebook.net *.facebook.com *.twitter.com *.googleapis.com pbs.twimg.com *.cdninstagram.com *.fbcdn.net *.communityremarks.com *.cludo.com *.canadahelps.org *.jobvite.com 1
report-to webscaleCspEndpoint; report-uri https://xdymhcopnh.execute-api.us-east-1.amazonaws.com/default/cspReportingMonitor; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.searchspring.net seoab.io  *.cloudmaestro.com *.bluecore.com *.googleapis.com *.nr-data.net *.pcapredict.com carlsgolf.resultspage.com carlsgolf.resultsdemo.com *.bronto.com *.userway.org *.cloudflare.com container.pepperjam.com *.newrelic.com *.carlsgolfland.com sealserver.trustwave.com *.yotpo.com usrwy.com *.google.com www.googleoptimize.com www.gstatic.com *.rackcdn.com bat.bing.com *.sli-spark.com *.facebook.net *.doubleclick.net *.hotjar.com *.appspot.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com *.signifyd.com *.paypal.com www.paypalobjects.com js.authorize.net js.braintreegateway.com services.postcodeanywhere.co.uk *.resultspage.com secure.wufoo.com widget.modernretail.com 1
frame-ancestors 'self' logotypemaker.com *.logotypemaker.com weebly.com *.weebly.com 1
default-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.brighttalk.com https://*.paypal.com https://*.paypalobjects.com https://www.youtube-nocookie.com https://www.xoom.com https://www.wootag.com https://*.qualtrics.com; script-src 'nonce-vSVXeg+sLjsN5p6d6ykfp7LBIPWDeBdpGdrJ6zytB86Hwrbk' 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://nominatim.openstreetmap.org https://*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com https://*.salesforce.com https://*.force.com https://*.eloqua.com https://nexus.ensighten.com https://api.paypal-retaillocator.com https://*.brighttalk.com https://*.dialogtech.com https://*.qualtrics.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com data:; img-src 'self' https: data:; form-action 'self' https://*.paypal.com https://*.salesforce.com https://*.eloqua.com https://secure.opinionlab.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-ancestors 'self' https://*.paypal.com; block-all-mixed-content;; report-uri https://www.paypal.com/csplog/api/log/csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.etracker.de *.etracker.com *.googletagmanager.com www.dwin1.com *.intelliad.de *.usercentrics.eu *.novomind.com *.bing.com *.google.com *.google-analytics.com *.kasko.io *.kaskojs.com *.ekomiapps.de *.doubleclick.net *.googleadservices.com *.trbo.com; connect-src 'self' *.etracker.de *.etracker.com *.usercentrics.eu *.novomind.com *.ekomiapps.de *.google-analytics.com *.doubleclick.net; style-src 'self' 'unsafe-inline' www.etracker.de fonts.googleapis.com tagmanager.google.com *.novomind.com; font-src 'self' data: *.novomind.com; img-src 'self' data: *.hmrv.de *.hansemerkur.de *.etracker.de *.etracker.com *.gstatic.com *.google-analytics.com *.novomind.com tile.geofabrik.de *.bing.com *.doubleclick.net *.intelliad.de *.usercentrics.eu *.google.com *.google.de; frame-src 'self' *.usercentrics.eu *.youtube.com *.youtube-nocookie.com *.novomind.com *.kasko.io *.kaskocloud.com *.google.com *.trbo.com; media-src 'self' *.hansemerkur-video.de; 1
default-src https: 'unsafe-inline' 'unsafe-eval' wss:; img-src * data:; 1
frame-ancestors 'self' test.sonlight.com tp1.sonlight.com www.sonlight.com; 1
default-src 'none'; img-src 'self' *; font-src 'self' data: fonts.gstatic.com; style-src 'self' *.mailchimp.com 'unsafe-inline'; form-action 'none'; connect-src 'self' eeqj.matomo.cloud; script-src 'self' t.sneak.cloud ajax.cloudflare.com downloads.mailchimp.com *.list-manage.com 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; report-uri https://sneakdotberlin.report-uri.com/r/d/csp/enforce ; report-to https://sneakdotberlin.report-uri.com/r/d/csp/enforce ; 1
default-src 'self' https: 'unsafe-inline' 'unsafe-eval' ;frame-ancestors 'self' https://manager.agilitycms.com http://manager.agilitycms.com *.scotiabank.com *.scotiabank.fi.cr;script-src 'self' 'unsafe-inline'  *.agilitycms.com *.google.com *.google.ca *.google.co.cr *.google.com.br www.googletagmanager.com  *.google-analytics.com  *.googleadservices.com  googleads.g.doubleclick.net  *.gstatic.com assets.adobedtm.com  *.clicktale.net *.contentsquare.net  *.contentsquare.com  *.scotiabank.fi.cr  *.scotiabank.com  chat02.emg-livechat.com  site02.emg-livechat.com:8443   www.beneficiosenlinea.com  sbcrbienesalaventa.com  www.elempleo.com  code.jquery.com www.scotiabankcr.com;worker-src blob:;img-src 'self'  *.agilitycms.com  *.google.com  *.google.ca  *.google.co.cr  *.google.com.br  www.googletagmanager.com  *.google-analytics.com   *.googleadservices.com   googleads.g.doubleclick.net   *.gstatic.com  assets.adobedtm.com  *.clicktale.net  *.contentsquare.net   *.contentsquare.com   *.scotiabank.fi.cr  *.scotiabank.com  scotiabankfiles.azureedge.net  chat02.emg-livechat.com  site02.emg-livechat.com:8443  www.beneficiosenlinea.com  sbcrbienesalaventa.com  dpm.demdex.net  www.elempleo.com;connect-src 'self' 'unsafe-inline'  *.agilitycms.com *.google.com *.google.ca *.google.co.cr *.google.com.br www.googletagmanager.com *.google-analytics.com  *.googleadservices.com  *.g.doubleclick.net  *.gstatic.com assets.adobedtm.com *.clicktale.net *.contentsquare.net  *.contentsquare.com  *.scotiabank.fi.cr *.scotiabank.com scotiabankfiles.azureedge.net chat02.emg-livechat.com www.beneficiosenlinea.com sbcrbienesalaventa.com dpm.demdex.net www.elempleo.com www.scotiabankcr.com; 1
frame-ancestors geocaching.hu turistautak.hu *.geocaching.hu *turistautak.hu 'self' 1
frame-ancestors 'self' https://*.ilusia.com/ 1
frame-ancestors https://www.bdli.de/ https://staging.bdli.de *.ila-berlin.de localhost ila.lndo.site http://ila.lndo.site:8000; report-uri //report-csp-violation 1
frame-ancestors http://*.viewlift.com 1
style-src 'self' 'unsafe-inline' s3.us-east-2.amazonaws.com https://optimize.google.com https://fonts.googleapis.com; object-src 'none'; connect-src *; img-src * https://www.google-analytics.com https://optimize.google.com; frame-ancestors 'self' SAMEORIGIN https://www.youtube.com/ https://bid.g.doubleclick.net/ https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com/ https://disqus.com/; frame-src 'self' https://vars.hotjar.com/ https://www.qzzr.com/ https://www.youtube.com/ https://optimize.google.com https://bid.g.doubleclick.net/ https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com/ https://disqus.com/ http://fast.kanetixlimited.demdex.net/ https://kanetixlimited.demdex.net/ https://view.ceros.com/ https://e.infogram.com https://quiz.tryinteract.com/; script-src * 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://optimize.google.com; font-src 'self' s3.us-east-2.amazonaws.com https://fonts.gstatic.com; default-src * 1
default-src https:;script-src https: 'unsafe-inline' 'unsafe-eval';style-src https: 'unsafe-inline';font-src https: data:;img-src https: data: 1
script-src 'self' matomo-test.open-e.com 'unsafe-eval' 'unsafe-inline' www.google.com www.google-analytics.com www.googletagmanager.com *.livechatinc.com www.gstatic.com *.addthis.com m.addthisedge.com www.linkedin.com *.facebook.com connect.facebook.net cdnjs.cloudflare.com maps.google.com maps.googleapis.com v1.addthisedge.com use.edgefonts.net ssl.google-analytics.com static.hotjar.com script.hotjar.com snap.licdn.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:; img-src 'self' 'unsafe-inline' https: data:;frame-ancestors 'self'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googlesyndication.com https://suggestqueries.google.com https://pagead2.googlesyndication.com www.google-analytics.com yastatic.net https://relap.io https://ad.mail.ru stat.adlabs.ru mc.yandex.ru *.criteo.com *.googleapis.com luxadv.com *.luxadv.com psma02.com *.betweendigital.com *.doubleclick.net share.pluso.ru w.uptolike.com *.am15.net am15.net psma03.com *.onedmp.com *.eboundservices.com eboundservices.com uk-ads.openx.net *.openx.net *.metabar.ru *.orange81safe.com *.creativecdn.com *.googletagservices.com *.googleadservices.com psma01.com *.atemda.com *.nativeroll.tv *.criteo.net fycapi.ru ijquery5.com acvatic.ru mycpm.ru igithab.com *.yandex.ru franecki.net v.kost.tv *.g.doubleclick.net bnstero.com *.google.ru cdn.onesignal.com *.yakutia.io yakutia.io *.onesignal.com static.amgmedia.net onesignal.com *.sendpulse.com sendpulse.com bnster.com myhappy-news.com *.republer.com 1
font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com; style-src 'self' b4g.baydin.com code.jquery.com ajax.googleapis.com fonts.googleapis.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com 'unsafe-inline'; default-src 'self' 'nonce-KkejCBmSyUAjYiknNPxGpg=='; connect-src 'self' api.recurly.com www.google-analytics.com; frame-src 'self' www.youtube.com api.recurly.com apis.google.com accounts.google.com platform.twitter.com; script-src 'self' www.boomeranggmail.com js.recurly.com code.jquery.com ajax.googleapis.com fonts.googleapis.com apis.google.com ssl.google-analytics.com maxcdn.bootstrapcdn.com maps.googleapis.com www.google-analytics.com commondatastorage.googleapis.com www.youtube.com b4g.baydin.com https://appsforoffice.microsoft.com https://platform.twitter.com www.googletagmanager.com cdnjs.cloudflare.com d3js.org cdn.optimizely.com 'nonce-KkejCBmSyUAjYiknNPxGpg=='; img-src * data: 1
frame-ancestors 'self' http://accuity.lookbookhq.com https://accuity.lookbookhq.com *.adobe.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apps.elfsight.com *.triptease.io *.sojern.com *.adsrvr.org *.adform.net *.denomatic.com *.veinteractive.com *.simplifiedinventory.com *.affilired.com *.doubleclick.net *.googleadservices.com *.golfscape.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.google.com *.google.ae *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com https://js.stripe.com/v3/ stackpath.bootstrapcdn.com https://www.facebook.com https://tables.hostmeapp.com https://service.hostmeapp.com http://revahost.app https://revahost.app https://reservations.jaresortshost.com https://znwgxqy8me.execute-api.us-west-2.amazonaws.com https://static.elfsight.com https://embed.acuityscheduling.com; style-src 'self' 'unsafe-inline' *.triptease.io *.denomatic.com *.veinteractive.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com *.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://tables.hostmeapp.com https://service.hostmeapp.com http://revahost.app https://revahost.app https://reservations.jaresortshost.com https://embed.acuityscheduling.com; font-src 'self' *.triptease.io fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://fonts.googleapis.com; img-src 'self' *.googletagmanager.com *.cdninstagram.com *.adnxs.com *.google.com.au *.google.com *.triptease.io *.sojern.com https://x.bidswitch.net https://a.volvelle.tech https://server.seadform.net *.denomatic.com *.veinteractive.com https://jaweb2019cdn.azureedge.net *.blob.core.windows.net *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com *.simplifiedinventory.com *.doubleclick.net *.golfscape.com *.google.com *.google.ae https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com https://tables.hostmeapp.com https://service.hostmeapp.com http://revahost.app https://revahost.app https://reservations.jaresortshost.com https://embed.acuityscheduling.com *.adsrvr.org *.youtube.com *.fbcdn.net; media-src 'self' data: blob: *.triptease.io https://jaweb2019cdn.azureedge.net *.blob.core.windows.net; frame-src 'self' * jaresortshotels.com *.jaresortshotels.com app.acuityscheduling.com; child-src 'self' *.jaresortshotels.com *.triptease.io https://c1.adform.net https://insight.adsrvr.org *.google.com *.denomatic.com *.veinteractive.com *.golfscape.com *.doubleclick.net https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.simplifiedinventory.com https://tables.hostmeapp.com https://service.hostmeapp.com http://revahost.app https://revahost.app https://embed.acuityscheduling.com; connect-src 'self' jaweb2019cdn.azureedge.net hostme-webguest.azurewebsites.net api.instacloud.io eapps-analytics.elfsight.com *.stathat.com messages-publisher-dot-triptease-onboard.appspot.com *.triptease.io *.denomatic.com *.veinteractive.com accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://tables.hostmeapp.com https://service.hostmeapp.com http://revahost.app https://revahost.app https://embed.acuityscheduling.com https://znwgxqy8me.execute-api.us-west-2.amazonaws.com *.elfsight.com *.google-analytics.com stats.g.doubleclick.net; 1
default-src 'self' https://*.appreciatehub.com *.google-analytics.com *.cloudflare.com https://*.googleapis.com https://*.pendo.io https://*.alamoapp.octanner.io https://*.api.octanner.net https://*.salesforce.com *.cloudinary.com https://s3.amazonaws.com/oc-images-api/* *.doubleclick.net *.octanner.net *.gstatic.com *.jwpcdn.com *.recaptcha.net https://www.gstatic.com/recaptcha/releases/*  wss://*.fathomvoice.com *.fathomvoice.com *.fonticons.com *.fortawesome.com 'unsafe-inline' 'unsafe-eval' data:; frame-src 'self' www.google.com; 1
frame-ancestors 'self'; object-src 'none'; base-uri 'none' 1
frame-ancestors 'self' https://www.rafi.com/ 1
frame-ancestors 'self' shankswakefieldepermits.co.uk renewiwakefieldpermits.co.uk 1
frame-ancestors self *.allovoisins.com 1
default-src 'self' 'unsafe-inline' cdnjs.cloudflare.com cdn.rawgit.com raw.githubusercontent.com www.googletagmanager.com googlemaps.github.io maps.googleapis.com maps.gstatic.com fonts.gstatic.com fonts.googleapis.com developers.google.com tagmanager.google.com ssl.gstatic.com www.gstatic.com *.civiccomputing.com *.ggpht.com *.googleapis.com www.google-analytics.com cdn-images.mailchimp.com www.facebook.com script.hotjar.com in.hotjar.com data:;; script-src 'self' 'unsafe-inline' www.google-analytics.com www.googletagmanager.com googlemaps.github.io cdnjs.cloudflare.com maps.googleapis.com cdn.jsdelivr.net cdn.rawgit.com tagmanager.google.com *.civiccomputing.com connect.facebook.net static.hotjar.com script.hotjar.com; frame-src 'self' www.youtube.com player.vimeo.com vars.hotjar.com alzscot-vrc-guestbook.s3-eu-west-1.amazonaws.com alzscot-vrc-donor-images.s3-eu-west-1.amazonaws.com; child-src 'self' www.youtube.com player.vimeo.com vars.hotjar.com alzscot-vrc-guestbook.s3-eu-west-1.amazonaws.com alzscot-vrc-donor-images.s3-eu-west-1.amazonaws.com 1
default-src *;style-src 'self' 'unsafe-inline';script-src https://api.map.baidu.com https://maponline1.bdimg.com https://maponline0.bdimg.com https://maponline2.bdimg.com 'self' 'unsafe-inline' 'unsafe-eval';connect-src 'self' 'unsafe-inline' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net/npm/vue/dist/vue.js  https://unpkg.com/  https://widgets.coingecko.com/ https://polyfill.io/  https://www.googletagmanager.com/  *.google-analytics.com; img-src 'self'  https://assets.coingecko.com/  https://www.google.com   https://www.google-analytics.com/  https://stats.g.doubleclick.net/  data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self'; connect-src 'self' https://api.coingecko.com/  wss://cable.coingecko.com/  https://apis.google.com; object-src 'none' 1
frame-ancestors 'self'; http://www.takasbank.com.tr 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data:     http://10.147.47.79:15871     https://demandconnect.s3.amazonaws.com     https://www.googletagmanager.com        http://www.googletagmanager.com        https://www.google-analytics.com     http://www.google-analytics.com     http://siteimproveanalytics.com    https://siteimproveanalytics.com    https://uhs-portal.com    https://oxblue.com    *.addthis.com     *.adsrvr.org    *.adsymptotic.com    *.ensighten.com    *.addthisedge.com     *.bootstrapcdn.com     *.brandcdn.com    *.crazyegg.com    *.cloudflare.com     *.cloudfront.net    *.mookie1.com    *.cdc.gov     *.docscores.com    *.doubleclick.net       *.facebook.com    *.facebook.net    *.google.com    *.googleapis.com     *.gstatic.com       *.licdn.com    *.linkedin.com    *.moatads.com        *.nrchealth.com    *.simpli.fi    *.siteimproveanalytics.com        *.siteimproveanalytics.io      *.swarminteractive.com       *.tinypic.com    *.youtube.com    *.semasio.net    *.tremorhub.com    *.agkn.com    *.advertising.com    *.intentiq.com    *.pubmatic.com    *.stickyadstv.com    *.exelator.com    *.yahoo.com    *.bfmio.com    *.bluekai.com    *.crwdcntrl.net    *.lijit.com    *.rlcdn.com    *.googleadservices.com    *.spotxchange.com    *.contextweb.com    *.rubiconproject.com    *.openx.net    *.pro-market.net    *.fwmrm.net    *.company-target.com    *.adnxs.com    *.rkdms.com    https://pippio.com    *.undertone.com    *.bidswitch.net    *.acuityplatform.com    *.survata.com    *.prfct.com    *.admission.net    *.dotomi.com    *.choozle.com    *.ml314.com    *.sharethis.com    *.vindicosuite.com    *.domdex.com    *.alcmpn.com    *.placelocal.com    *.demdex.net    *.apxlv.com    *.trueleadid.com    *.cogocast.net    *.mathtag.com    *.mdhv.io    *.jumptap.com    *.tapad.com    *.krxd.com    *.everesttech.net    *.adform.net    *.ipredictive.com    *.xspadvertising.com    *.truoptik.com    *.bidr.io    *.linksynergy.com       *.turn.com    *.amazon-adsystem.com    *.3lift.com    *.ml314.com    *.sitescout.com    *.w55c.net    *.adotmob.com    *.krxd.net    *.acuityplatform.com    *.quantserve.com    *.fg8dgt.com    *.betweendigital.com    *.imrworldwide.com    *.admixer.net    *.sundaysky.com    *.amazonaws.com    *.rundsp.com    *.insightexpressai.com    *.tribalfusion.com    *.scorecardresearch.com    *.tidaltv.com    *.adgrx.com    *.adadvisor.net    *.rfihub.com    *.walmart.com     *.spotify.com    *.liadm.com    *.universityhealthsystem.com     *.emailsrvr.com    *.medtouch.com    *.healthgrades.com    *.en25.com    *.entitytag.co.uk    *.eloqua.com    *.reson8.com    *.force.com    *.salesforce.com    https://thrtle.com    *.thrtle.com    *viewmedica.com    https://viewmedica.com;     1
default-src 'self' *.zdassests.com *.cloudinary.com; connect-src https://*.devacurl.com https://*.devatech.us https://*.devatechpro.us https://*.myshopify.com https://*.openshiftapps.com localhost:* https://sentry.io *.yotpo.com www.google-analytics.com likeshop.me https://*.zdassets.com https://*.zendesk.com https://*.zopim.com https://*.hotjar.io https://*.hotjar.com https://devacurl.2m8f.net wss://widget-mediator.zopim.com https://*.doubleclick.net https://*.facebook.com https://*.trackedweb.net https://*.cookielaw.org https://*.onetrust.com/ *.amplitude.com https://s3-us-west-2.amazonaws.com/afterpayus-integrations/javascript/modal/us_modal.html https://*.pinterest.com https://*.bing.com https://*.google.com; font-src 'self' *.yotpo.com *.gstatic.com fonts.gstatic.com data: likeshop.me; frame-src *.doubleclick.net optimize.google.com *.phorest.me phorest.me phorest.com *.dotmailer-surveys.com *.dotdigital-pages.com *.hotjar.com *.youtube.com *.googletagmanager.com *.facebook.com *.afterpay.com; img-src * data: blob: www.google-analytics.com optimize.google.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com www.googletagmanager.com www.googleadservices.com *.yotpo.com *.doubleclick.net *.google.com *.dashhudson.com *.google.com *.bing.com *.hotjar.com *.facebook.net *.zdassets.com https://widget-mediator.zopim.com *.dotmailer-surveys.com *.dotdigital-pages.com https://*.impactradius-event.com *.cookielaw.org https://*.trackedweb.net https://*.onetrust.com https://*.afterpay.com https://*.pinimg.com https://*.pinterest.com https://static.zdassets.com https://s.pinimg.com; worker-src blob:; style-src 'self' 'unsafe-inline' https://*.yotpo.com https://*.google.com https://*.googleapis.com https://*.mapbox.com; report-uri https://sentry.io/api/1474106/security/?sentry_key=71495ca5d2814cc995ebaa6fa5461d8f&sentry_environment=prod; media-src 'self' *.zdassets.com *.cloudinary.com dashhudson-static.s3.amazonaws.com https://*.dashhudson.com 1
default-src http: https: 'self' data: 'unsafe-inline' 'unsafe-eval' 1
default-src https://creatives.cdnland.com *.pubnub.com *.cloudfront.net *.googleapis.com *.freshdesk.com *.gstatic.com wss://chat.freshdesk.com *.bootstrapcdn.com *.yandex.ru 'self'; script-src https://ajax.cloudflare.com https://creatives.cdnland.com *.datatables.net https://freegeoip.net *.freshdesk.com *.cloudfront.net *.google-analytics.com *.googletagmanager.com *.googleadservices.com https://googleads.g.doubleclick.net *.yandex.ru *.comodo.com http://app.partnerlottery.com http://static.partnerlottery.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'; style-src https://creatives.cdnland.com *.datatables.net *.googleapis.com *.cloudfront.net *.bootstrapcdn.com 'self' 'unsafe-inline'; img-src * data:; child-src *.google.com *.freshdesk.com 'self' 1
default-src 'self' 'unsafe-inline' *.report-uri.com *.cookielaw.org *.googleapis.com *.instagram.com *.cdninstagram.com *.amazonaws.com *.google.com *.youtube.com *.megaphone.fm *.vimeo.com vimeo.com *.gstatic.com *.oniqa.com *.onistaged.com *.onenorth.com *.velaw.com *.vuturevx.com *.googletagmanager.com *.google-analytics.com *.yoshki.com; object-src 'self'; img-src 'self' *.cookielaw.org *.googleapis.com *.instagram.com *.cdninstagram.com *.amazonaws.com *.google.com *.youtube.com *.megaphone.fm *.vimeo.com vimeo.com *.gstatic.com *.oniqa.com *.onistaged.com *.onenorth.com *.vuturevx.com *.velaw.com *.googletagmanager.com *.google-analytics.com *.yoshki.com data:; font-src 'self' https://fonts.gstatic.com data:; report-uri https://233122823c47f119af0143cbea7853d6.report-uri.com/r/d/csp/reportOnly 1
frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.sharepoint.com *.live.com *.office.net app.datadoghq.com 1
default-src http: https: data: blob: mediastream: wss:; script-src http: https: data: blob: mediastream: 'unsafe-inline' 'unsafe-eval'; style-src http: https: data: blob: mediastream: 'unsafe-inline'; 1
script-src 'unsafe-inline' 'unsafe-eval' *.museumofthehome.org.uk *.cloudflare.com *.aspnetcdn.com *.ajax.googleapis.com maps.googleapis.com *.google.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.youtube.com *.addthis.com *.addthisedge.com *.ytimg.com; style-src 'self' 'unsafe-inline' *.fonts.net; 1
upgrade-insecure-requests;object-src 'none'; 1
font-src *.bootstrapcdn.com data: d1v72txp4rf8db.cloudfront.net *.klevu.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net *.facebook.com http://t.lt02.net *.sarus.io *.tombowusa.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com *.braintreegateway.com *.facebook.com *.google.com ssl.kaptcha.com lightwidget.com *.youtube.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com data: www.apptrian.com www.facebook.com store.paradoxlabs.com *.amazonaws.com d1v72txp4rf8db.cloudfront.net *.edgecastcdn.net *.espssl.com *.google.com *.gstatic.com *.klevu.com *.listrakbi.com *.pinterest.com shareasale.com *.ytimg.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com *.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com www.apptrian.com www.facebook.com connect.facebook.net graph.facebook.com *.crazyegg.com *.dwin1.com d1v72txp4rf8db.cloudfront.net *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.klevu.com *.lexity.com lightwidget.com cdn.lightwidget.com *.listrakbi.com *.pinimg.com *.pinterest.com *.turnto.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.bootstrapcdn.com d1v72txp4rf8db.cloudfront.net *.klevu.com *.listrakbi.com *.turnto.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com www.facebook.com 'self' 'unsafe-inline'; manifest-src d1v72txp4rf8db.cloudfront.net 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com connect.facebook.net graph.facebook.com js.authorize.net jstest.authorize.net *.braintreegateway.com *.braintree-api.com d1v72txp4rf8db.cloudfront.net *.crazyegg.com *.doubleclick.net *.google-analytics.com *.klevu.com *.ksearchnet.com *.paypal.com *.pinterest.com *.turnto.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
img-src * data: 'unsafe-inline' 'unsafe-eval' https://*.twitter.com https://*.webtype.com https://*.cookiefirst.com https://*.infogram.com https://*.googleapis.com https://googleapis.com https://*.google.com https://*.doubleclick.net https://*.google-analytics.com https://*.googletagmanager.com https://*.youtube.com/ https://*.gstatic.com https://google.com https://doubleclick.net https://google-analytics.com https://googletagmanager.com https://youtube.com/ https://*.webtype.com https://*.aufruhr-magazin.de https://*.facebook.net https://*.facebook.com https://*.stiftung-mercator.de;default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://*.twitter.com https://*.webtype.com https://*.cookiefirst.com https://*.infogram.com https://*.googleapis.com https://googleapis.com https://*.google.com https://*.doubleclick.net https://*.google-analytics.com https://*.googletagmanager.com https://*.youtube.com/ https://*.gstatic.com https://google.com https://doubleclick.net https://google-analytics.com https://googletagmanager.com https://youtube.com/ https://*.webtype.com https://*.aufruhr-magazin.de https://*.facebook.net https://*.facebook.com https://*.stiftung-mercator.de; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.inphota.com kit.fontawesome.com www.googletagmanager.com consent-manager.metomic.io platform.twitter.com syndication.twitter.com static.ads-twitter.com cdn.syndication.twimg.com analytics.twitter.com www.google-analytics.com stats.g.doubleclick.net ssl.google-analytics.com www.googleadservices.com www.google.com www.google.ae https://www.gstatic.com/recaptcha/ connect.facebook.net aff.bstatic.com *.algolianet.com *.algolia.net ; report-uri https://gulfmultisport.inphota.com/en/security/csp-report; style-src 'self' 'unsafe-inline' *.inphota.com fonts.googleapis.com kit.fontawesome.com ka-f.fontawesome.com kit-free.fontawesome.com translate.googleapis.com fast.fonts.net ; img-src data: blob: *; font-src fonts.gstatic.com ka-f.fontawesome.com kit-free.fontawesome.com fast.fonts.net; connect-src wss: *.inphota.com kit.fontawesome.com ka-f.fontawesome.com www.google-analytics.com stats.g.doubleclick.net api.rollbar.com *.inphota.com www.facebook.com *.algolia.net *.algolianet.com apipub.metomic.io cdn.plot.ly translate.googleapis.com t.co ; frame-src *.inphota.com www.facebook.com www.booking.com https://www.google.com/recaptcha/ www.youtube.com veloviewer.com translate.google.com www.googletagmanager.com ; frame-ancestors 'self' *.inphota.com adsc.ae www.adsc.ae therakhalfmarathon.com www.therakhalfmarathon.com 1
default-src 'self' * data:; font-src 'self' * data:; frame-src *; img-src * data: android-webview-video-poster:; media-src * data: blob:; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src 'self' * 'unsafe-inline'; worker-src * blob:; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleadservices.com *.googletagservices.com *.connatix.com connatix.com secure.adnxs.com pixel.adsafeprotected.com static.adsafeprotected.com connatix-d.openx.net *.pixel-sync.sitescout.com pixel-sync.sitescout.com sync.search.spotxchange.com *.gstatic.com *.visualwebsiteoptimizer.com *.vwo.com analytics.twitter.com app.optimizely.com assets.crowdpac.com assets.staging.crowdpac.com bam.nr-data.net cdn.optimizely.com securepubads.g.doubleclick.net *.googlesyndication.com cdn.segment.com code.jquery.com connect.facebook.net fullstory.com googleads.g.doubleclick.net html5shim.googlecode.com js-agent.newrelic.com js.stripe.com maps.googleapis.com optimizely.s3.amazonaws.com platform.twitter.com s3-eu-west-1.amazonaws.com static.ads-twitter.com use.typekit.net www.google-analytics.com www.googletagmanager.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com bucket1.mm-syringe.com www.googletagmanager.com imasdk.googleapis.com www.oo-syringe.com cdn.jsdelivr.net s0.2mdn.net query.fqtag.com adservice.google.com adservice.google.com.ar edge.fullstory.com cdn.ampproject.org *.infolinks.com *.casalemedia.com match.prod.bidr.io match.adsrvr.org *.prod.bidr.io *.adsrvr.org blob: 1
child-src 'self' https//*.avtogermes.ru https://*.google.com http://*.google.com http://person.ctrl.lc http://*.webvisor.com https://*.webvisor.com http://*.yandex.ru https://*.yandex.ru https://*.youtube.com http://*.youtube.com https://web.redhelper.ru https://*.doubleclick.net https://www.google.com https://www.google.ru http://*.adriver.ru http://*.hyundai.ru http://*.doubleclick.net https://www.facebook.com https://cdn.avtogermes.ru http://genesis-motors.ru http://genesis.com http://www.genesis.com https://www.genesis.com https://tag.rutarget.ru https://connect.facebook.net http://www.hyundai.ru https://widget.calltovisit.com/ https://sonar.semantiqo.com/ https://mc.admetrica.ru https://yandex.ru/ https://*.livetex.ru https://*.livetex.me http://yandex.ru/ https://player.vimeo.com/ https://i.vimeocdn.com/ https://t.omnidsp.com/ 1
default-src 'self' data: wss: *.tile.openstreetmap.org *.gstatic.com *.googleapis.com geocode.arcgis.com nominatim.openstreetmap.org sp-dir.uwn.com web.delighted.com; style-src 'self' 'unsafe-inline' *.googleapis.com; img-src 'self' *.tile.openstreetmap.org maps.gstatic.com *.googleapis.com blog.ui.com *.svc.ui.com data:; script-src 'self' data: wss: *.tile.openstreetmap.org *.gstatic.com *.googleapis.com geocode.arcgis.com nominatim.openstreetmap.org d2yyd1h5u9mauk.cloudfront.net sp-dir.uwn.com 'sha256-vHPdDd1XiX8MoRZA440ghWkFcly/rVw9GwywCYO6zk0=' 1
default-src https: data: wss: 'unsafe-inline' 1
frame-ancestors 'self' https://www.salesforce.com https://www.force.com https://recgroup.my.salesforce.com; 1
frame-ancestors 'self' https://dvbag.sharepoint.com 1
img-src * data:; script-src 'unsafe-eval' 'unsafe-inline' *; worker-src 'unsafe-inline' * blob:; 1
default-src 'self' blob: https: data: 'unsafe-inline' 'unsafe-eval' https://*.sap.com https://*.sapstore.com *.demandbase.com *.adobedtm.com *.company-target.com *.omtrdc.net *.w55c.net platform.twitter.com *.siteintercept.qualtrics.com *.doubleclick.net cdnjs.cloudflare.com charts3.equitystory.com http://*.akamai.net ust-servlet.dataxu.net https://*.cdn.sap.com *.2mdn.net *.2o7.net *.qualtrics.com https://*.akamaihd.net http://*.akamaihd.net *.lpsnmedia.net *.truste.com *.nr-data.net https://*.youtube.com https://*.youtu.be https://*.ytimg.com *.twitter.com http://*.twimg.com https://*.twimg.com *.adobe.com *.demdex.net *.liveengage.net *.liveengage.com http://livefyre.com *.liveper.sn *.licdn.com https://bcmcps.enter.sap *.d41.co https://*.p1.store.net.sap https://consent.trustarc.com https://s.go-mpulse.net https://maps.googleapis.com https://use.fontawesome.com ;  frame-ancestors 'self' https://*.sap.com https://*.p1.store.net.sap; 1
default-src 'self' https://www.usd.de data:; script-src 'self' https://www.usd.de 'unsafe-inline' 'unsafe-eval' https://stats.usd.de; style-src 'self' https://www.usd.de 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://www.usd.de data: https://pci.usd.de https://stats.usd.de https://www.usd.de ; frame-src 'self' data: *.usd.de *.youtube.com *.youtube-nocookie.com; font-src 'self' data: https://fonts.gstatic.com; object-src 'self' 1
default-src 'self' http: https:  cdnjs.cloudflare.com use.typekit.net www.google-analytics.com fonts.googleapis.com s.w.org;; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://code.jquery.com https://cdnjs.cloudflare.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:; img-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; font-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: https://fonts.googleapis.com; object-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; frame-src 'self' http: https: polaris.brighterir.com sirius.brighterir.com www.youtube-nocookie.com youtube-nocookie.com youtube.com vimeo.com; 1
default-src * blob: data: 'unsafe-inline' 'unsafe-eval'; script-src * blob: data: 'unsafe-inline' 'unsafe-eval'; connect-src * data: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; child-src * blob: data: ; style-src * 'unsafe-inline'; 1
frame-ancestors 'self' *.fondationorange.com *.orange.com *.goodeed.com; base-uri 'self'; 1
script-src 'nonce-86d01872cacdb4484285a980d61df1ca' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=4864057889646484; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.googletagmanager.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://answers.silvercloudinc.com https://js.locatorsearch.com https://ci-mpsnare.iovation.com https://integration.silvercloudinc.com https://siteimproveanalytics.com https://code.jquery.com https://cportal.lendingqb.com https://secure.pricemyloan.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://tagmanager.google.com https://web.baconpay.com https://api.salemove.com https://assets.salemove.com https://libs.salemove.com https://cdn.segmint.net https://static.hotjar.com https://script.hotjar.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com use.typekit.net p.typekit.net https://integration.silvercloudinc.com https://tagmanager.google.com https://libs.salemove.com wss://pubsub.salemove.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: use.typekit.net https://assets.salemove.com; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com https://answers.silvercloudinc.com https://images.locatorsearch.com https://us2.siteimprove.com https://integration.silvercloudinc.com https://assets.salemove.com https://www.google.com https://cdn.segmint.net https://86400.global.siteimproveanalytics.io; media-src 'self' data: blob: https://libs.salemove.com; frame-src https://nasafcu.locatorsearch.com https://www.googletagmanager.com/ https://wwwbeta.nasafcu.com https://www.nasafcu.com https://ebranch.nasafcu.com/ https://www.stickleyonsecurity.com/ https://player.vimeo.com/ https://accountguardian.nasafcu.com https://balancetransfer.nasafcu.com https://checkingdecision.nasafcu.com https://electronicprocessingnumber.nasafcu.com https://fraudalerts.nasafcu.com https://openchecking.nasafcu.com https://opencertificate.nasafcu.com https://remotedeposit.nasafcu.com https://cportal.lendingqb.com https://secure.pricemyloan.com https://estatementenrollment.nasafcu.com/ https://web.baconpay.com https://creditlimitpromo.nasafcu.com https://connect.segmint.net/ https://bid.g.doubleclick.net/ https://vars.hotjar.com/; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com www.googletagmanager.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://litho.silvercloudinc.com https://integration.silvercloudinc.com https://api.salemove.com wss://pubsub.salemove.com https://libs.salemove.com https://client-logger.salemove.com https://io.salemove.com wss://io.salemove.com https://kluster.salemove.com wss://kluster.salemove.com https://cdn.segmint.net https://connect.segmint.net https://s3.amazonaws.com/cdn.segmint.net https://api.segmint.net https://stats.g.doubleclick.net https://in.hotjar.com; 1
default-src 'self' https: *.becn.digital *.becn.com https://*.wistia.com https://*.wistia.net;  script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com *.jst.ai *.cloudfront.net https://fonts.googleapis.com fast.wistia.com https://pi.pardot.com https://a.optmnstr.com https://ajax.googleapis.com https://www.googletagmanager.com https://pippio.com https://a.omappapi.com https://ws.audioeye.com https://wsv3cdn.audioeye.com https://analytics.audioeye.com https://go.becn.com https://tools.justuno.com;  img-src 'self' data: https: *.becn.digital *.becn.digital beaconproplus.com *.beaconproplus.com https://*.wistia.com https://*.wistia.net;  frame-src 'self' *.youtube.com *.jst.ai cms.becn.com https://becn.stormersite.com https://wsv3cdn.audioeye.com https://fast.wistia.com https://fast.wistia.net https://www.google.com *.becn.digital;  object-src 'self';  worker-src 'self' *.becn.digital *.becn.com *.cloudfront.net blob:;  style-src 'self' 'unsafe-inline' *.becn.digital *.cloudfront.net https://fonts.googleapis.com https://wsv3cdn.audioeye.com https://fast.wistia.com https://cdnjs.cloudflare.com https://cdn.jst.ai;  media-src 'self' blob: *.becn.digital *.becn.com https://*.wistia.com https://*.wistia.net;  connect-src 'self' *.becn.com *.becn.digital wss://visitors.live wss://in.visitors.live *.visitors.live *.luckyorange.net *.jst.ai *.omappapi.com *.cloudfront.net *.google-analytics.com https://analytics.audioeye.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://*.litix.io;  font-src 'self' data: https://fonts.gstatic.com https://wsv3cdn.audioeye.com https://*.wistia.com https://cdnjs.cloudflare.com 1
report-uri https://www.yelp.com/csp_block?id=338df79ebfc881b0&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609218481; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
font-src 'self' https://fonts.gstatic.com https://fonts.gstatic.com;                   style-src 'self' 'unsafe-inline' 'unsafe-eval'                                                                     https://www.urbanthreads.com https://www.urbanthreads.com urbanthreads.com                                   https://fonts.googleapis.com https://www.fonts.googleapis.com fonts.googleapis.com *.fonts.googleapis.com;                                    script-src 'self' 'unsafe-eval' 'unsafe-inline'                                                                     https://www.urbanthreads.com https://www.urbanthreads.com urbanthreads.com                                   https://www.google-analytics.com https://www.google-analytics.com google-analytics.com *.google-analytics.com                                   https://ajax.googleapis.com https://www.ajax.googleapis.com ajax.googleapis.com *.ajax.googleapis.com                                   https://www.seal.verisign.com/getseal seal.verisign.com/getseal *.seal.verisign.com/getseal                                   https://www.googleadservices.com/pagead/conversion.js' https://www.googleadservices.com/pagead/conversion.js' www.googleadservices.com/pagead/conversion.js                                   https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ googleads.g.doubleclick.net/pagead/viewthroughconversion/                                   https://www.googletagmanager.com/ https://www.googletagmanager.com/ googletagmanager.com/                                   https://bat.bing.com/bat.js https://bat.bing.com/bat.js bat.bing.com/bat.js                                   https://s.yimg.com/wi/ https://s.yimg.com/wi/ s.yimg.com/wi/                                   https://sp.analytics.yahoo.com/sp.pl https://sp.analytics.yahoo.com/sp.pl sp.analytics.yahoo.com/sp.pl https://connect.facebook.net/en_US/fbevents.js https://www.facebook.com/signals/iwl.js           https://connect.facebook.net/signals/config/ https://app.termly.io/embed.min.js;                   img-src 'self'                                    https://www.urbanthreads.com https://www.urbanthreads.com urbanthreads.com                                    privacy-policy.truste.com                                    https://www.google-analytics.com https://www.google-analytics.com google-analytics.com *.google-analytics.com                                      https://stats.g.doubleclick.net https://www.stats.g.doubleclick.net stats.g.doubleclick.net *.stats.g.doubleclick.net                                   https://www.google.com https://www.google.com google.com *.google.com                                   https://seal.websecurity.norton.com/getseal https://seal.websecurity.norton.com/getseal seal.websecurity.norton.com/getseal                                   https://www.googletagmanager.com/ https://www.googletagmanager.com/ googletagmanager.com/                                   https://bat.bing.com/action/ https://bat.bing.com/action/ bat.bing.com/action/ https://www.facebook.com/tr/;                   frame-ancestors 'self';                   upgrade-insecure-requests; 1
frame-ancestors 'self' http://epicor.lookbookhq.com https://epicor.lookbookhq.com; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://static.criteo.net https://*.criteo.com https://wb.messengerpeople.com https://ln-rules.rewardstyle.com https://player.vimeo.com https://*.hotjar.com https://*.akamaihd.net https://*.attn.tv https://*.recaptcha.net https://isitetv.com https://*.translate.naver.net https://tr.snapchat.com https://www.shoplooks.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://services.postcodeanywhere.co.uk https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.googleapis.com https://*.hotjar.com wss://*.hotjar.com https://*.trustpilot.com https://*.pinterest.com https://*.bing.com https://*.doubleclick.net https://events.attentivemobile.com https://connect.facebook.net https://*.baidu.com https://lookfantastic.attn.tv https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://us.lookfantastic.com https://m.us.lookfantastic.com https://checkout.us.lookfantastic.com https://www.glossybox.com https://connect.facebook.net https://www.glossybox.at https://www.glossybox.ch https://www.glossybox.co.uk https://www.glossybox.de https://www.glossybox.fi https://www.glossybox.fr https://www.glossybox.ie https://www.glossybox.no https://www.glossybox.se https://www.glossybox.dk https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://*.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://static.criteo.net https://*.criteo.com https://ln-rules.rewardstyle.com https://*.akamaihd.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.microsofttranslator.com https://*.hotjar.com https://*.attn.tv https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://*.google-analytics.com https://static.ads-twitter.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://*.shoplooks.com https://slooks.top https://slooks.me https://lantern.roeyecdn.com https://lantern.roeye.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://www.shoplooks.com https://static.shoplooks.com https://cdn.parcellab.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self'; img-src *; style-src 'self' www.checkfree.com 'unsafe-inline'; script-src 'self' www.checkfree.com maps.googleapis.com ajax.googleapis.com ssl.google-analytics.com adserver.adtechus.com vn.ft1.cashedge.com fundstransfer.cashedge.com 'unsafe-eval' 'unsafe-inline' ; connect-src 'self' eg2145prl.egain.net; frame-src vn.ft1.cashedge.com fundstransfer.cashedge.com matchyourlender.com hv.getbills.com; 1
default-src 'self' fonts.googleapis.com fonts.gstatic.com  maps.googleapis.com maps.gstatic.com; font-src 'self' data: fonts.gstatic.com; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: www.google.de www.google.com stats.g.doubleclick.net www.google-analytics.com maps.gstatic.com maps.googleapis.com c-live3a.pcon.eu; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com consentcdn.cookiebot.com  googletagmanager.com consent.cookiebot.com maps.googleapis.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' hello.myfonts.net fonts.googleapis.com; connect-src 'self' maps.googleapis.com www.google-analytics.com stats.g.doubleclick.net; frame-src 'self' *.pcon.eu c-live1b.pcon.eu consentcdn.cookiebot.com ui.pcon-solutions.com c-live3a.pcon.eu; manifest-src 'self'; media-src 'self'; 1
default-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' highwaysagency.disqus.com emea3.recruitmentplatform.com s.ytimg.com www.youtube.com maps.googleapis.com unpkg.com apis.google.com www.google-analytics.com widgets.flickr.com www.gstatic.com cdn.syndication.twimg.com platform.twitter.com embedr.flickr.com www.google.com www.googletagmanager.com ajax.aspnetcdn.com cc.cdn.civiccomputing.com cdnjs.cloudflare.com code.jquery.com connect.facebook.net hitcounter.govmetric.com stackpath.bootstrapcdn.com websurveys2.govmetric.com websurveys2.servmetric.com www.browsealoud.com; style-src 'unsafe-inline' 'report-sample' 'self' emea3.recruitmentplatform.com fonts.googleapis.com unpkg.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com ton.twimg.com platform.twitter.com p.typekit.net use.typekit.net websurveys2.govmetric.com websurveys2.servmetric.com; object-src 'none'; base-uri 'self'; connect-src 'self' stats.g.doubleclick.net www.google-analytics.com emea3.recruitmentplatform.com plusqa.browsealoud.com www.browsealoud.com speech.speechstream.net embedr.flickr.com apikeys.civiccomputing.com plus.browsealoud.com; font-src 'self' emea3.recruitmentplatform.com fonts.gstatic.com cdnjs.cloudflare.com use.typekit.net; frame-src 'self' websurveys2.govmetric.com w.soundcloud.com www.google.com syndication.twitter.com platform.twitter.com www.facebook.com www.youtube.com; img-src data: 'self' www.googletagmanager.com emea3.recruitmentplatform.com maps.gstatic.com maps.googleapis.com websurveys2.servmetric.com www.browsealoud.com stats.g.doubleclick.net abs.twimg.com www.google-analytics.com ton.twimg.com pbs.twimg.com platform.twitter.com syndication.twitter.com live.staticflickr.com i.ytimg.com websurveys2.govmetric.com; manifest-src 'self'; media-src 'self' blob: ; worker-src 'none'; 1
default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval';  connect-src * data: blob: 'unsafe-inline';  img-src * data: blob: 'unsafe-inline';  frame-src * data: blob: ;  style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 1
default-src 'self' data: https://*.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com http://www.googleadservices.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat  https://*.usercentrics.eu https://*.lfeeder.com https://*.netdna-ssl.com https://*.wpengine.netdna-ssl.com http://*.wpengine.netdna-ssl.com https://*.wpengine.netdna-cdn.com http://*.wpengine.netdna-cdn.com https://*.twimg.com https://*.twitter.com/ https://*.youtube.com/ https://*.youtube-nocookie.com http://*.ytimg.com 'unsafe-inline'; 1
default-src 'self' data: ws: 'unsafe-inline' 'unsafe-eval' fonts.gstatic.com *.fontawesome.com *.kit-free.fontawesome.com *.gstatic.com *.googleapis.com *.fonts.googleapis.com *.ytimg.com *.s.ytimg.com *.youtube.com *.googletagmanager.com www.facebook.com *.omappapi.com onesignal.com bid.g.doubleclick.net *.g.doubleclick.net thebig5egypt.os.tc *.tawk.to *.onesignal.com *.sharethis.com *.sharethis.mgr.consensu.org player.vimeo.com www.youtube-nocookie.com *.plyr.io noembed.com www.google-analytics.com www.google.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.brainyquote.com *.omappapi.com *.addevent.com *.adservice.google.co.in  *.securepubads.g.doubleclick.net *.doubleclick.net *.google.co.in *.google.com *.fontawesome.com *.kit-free.fontawesome.com *.googleapis.com *.fonts.googleapis.com *.youtube.com *.ytimg.com *.s.ytimg.com *.cloudflare.com www.googletagmanager.com www.googleadservices.com www.google-analytics.com www.gstatic.com connect.facebook.net *.onesignal.com *.opmnstr.com onesignal.com en25.com *.en25.com thelivechatsoftware.com *.licdn.com *.thelivechatsoftware.com *.tawk.to *.bing.com *.ads-twitter.com cdn.jsdelivr.net *.twitter.com *.sharethis.com *.crazyegg.com *.heatmap.it cdn.plyr.io *.leadforensics.com; img-src 'self' data: http: https: *.gravatar.com www.thebig5constructnigeria.com; style-src 'self' data: 'unsafe-inline' *.fonts.net cdn.plyr.io *.plyr.io *.unpkg.com *.fonts.googleapis.com *.googleapis.com *.fontawesome.com *.kit-free.fontawesome.com cdnjs.cloudflare.com *.typekit.net *.thelivechatsoftware.com *.bootstrapcdn.com onesignal.com cdn.jsdelivr.net *.tawk.to; font-src 'self' data: *.googleapis.com *.adservice.google.co.in *.addevent.com *.fontawesome.com *.kit-free.fontawesome.com *.s.ytimg.com *.fonts.googleapis.com *.gstatic.com *.fonts.net *.maxcdn.bootstrapcdn.com *.bootstrapcdn.com use.typekit.net cdnjs.cloudflare.com *.tawk.to; 1
default-src 'self' https://www.engie.ro;  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com  https://snap.licdn.com  https://cookie-cdn.cookiepro.com https://gateway.zscloud.net https://s.ytimg.com  https://tagmanager.google.com https://www.google-analytics.com/analytics.js https://www.googletagmanager.com https://s.ytimg.com/yts/jsbin/www-widgetapi-vflj3RSGk/www-widgetapi.js https://www.youtube.com/player_api https://*.facebook.net https://*.facebook.com https://*.hotjar.com   https://www.google.com/ https://www.gstatic.com/ https://ajax.googleapis.com/ https://ssl.google-analytics.com https://maps.google.com https://maps.googleapis.com https://cdn.jsdelivr.net https://www.googleadservices.com/ https://googleads.g.doubleclick.net;  style-src 'self' 'unsafe-inline' https://s.ytimg.com/yts/jsbin/www-widgetapi-vflQSvpsZ/www-widgetapi.js https://tagmanager.google.com https://fonts.googleapis.com/ https://ajax.googleapis.com;  img-src 'self' data: blob: https://www.googletagmanager.com https://www.linkedin.com https://px.ads.linkedin.com https://cookie-cdn.cookiepro.com https://www.engie.ro https://gateway.zscloud.net https://www.google.ro https://www.google.com https://agentia.gdfsuez.ro/proc/img/get/85f1002bf139bebdb7f0d07b31fa14155aea9dfc_200_200_0.PNG https://ssl.gstatic.com https://www.gstatic.com  https://www.google-analytics.com  https://*.facebook.net https://*.facebook.com https://*.ytimg.com https://secure.gravatar.com https://csi.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://ajax.googleapis.com https://ssl.google-analytics.com https://*.hotjar.com https://*.doubleclick.net;  font-src 'self' data:  https://fonts.gstatic.com;  frame-src 'self' data: https://www.youtube-nocookie.com  https://www.facebook.com https://www.google.com/ https://www.youtube.com https://player.vimeo.com https://*.hotjar.com https://engie-romania.force.com; child-src 'self' data: https://www.google.com/ https://www.youtube.com https://player.vimeo.com https://*.hotjar.com; connect-src 'self' data: https://www.facebook.com https://cookie-cdn.cookiepro.com  https://gwss.engie.ro https://*.hotjar.com https://*.hotjar.com:* wss://*.hotjar.com https://vc.hotjar.io/; media-src 'self' https://www.youtube.com; 1
frame-ancestors 'self' https://www.bodas.com.mx https://comunidad.bodas.com.mx 1
script-src 'self' *.youtube.com *.googletagmanager.com *.cookielaw.org *.facebook.net *.google-analytics.com *.jsdelivr.net 'unsafe-inline' *.cloudflare.com *.newrelic.com *.rawgit.com *.googleapis.com *.onetrust.com *.nr-data.net; frame-src 'self' *.edp.pt *.edp.com *.edpr.com *.dig.corp.edp.com *.youtube.com *.youtube-nocookie.com *.eurolandir.com *.mailjet.com *.media-server.com *.wufoo.com edp.teto.pt *.spotify.com ir2.flife.de ir.tools.investis.com sdk.companywebcast.com *.edpon.livextend.cloud; child-src 'self' *.edp.pt *.edp.com *.edpr.com *.dig.corp.edp.com *.youtube.com *.youtube-nocookie.com *.eurolandir.com *.mailjet.com *.media-server.com *.wufoo.com edp.teto.pt *.spotify.com ir2.flife.de ir.tools.investis.com sdk.companywebcast.com *.edpon.livextend.cloud; report-uri /report-csp-violation; upgrade-insecure-requests 1
frame-src checkout.stripe.com s7.addthis.com downloads.orangelogic.com view.officeapps.live.com 'self'; frame-ancestors 'self'; 1
default-src 'self' https://www.google-analytics.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.energystar.gov/ https://www.googletagmanager.com https://www.google-analytics.com https://www.youtube.com https://s.ytimg.com/yts/jsbin/ https://platform.twitter.com; img-src 'self' https://www.energystar.gov/ https://secure.gravatar.com/ https://secure.gravatar.com/avatar data: https://ps.w.org/ https://www.google-analytics.com https://i.ytimg.com data: https://www.intgas.com https://syndication.twitter.com; style-src 'self' 'unsafe-inline' https://www.energystar.gov/ https://fonts.googleapis.com/css; font-src 'self' https://fonts.gstatic.com data:; frame-src https://www.intgas.com/wp-admin/ https://www.google.com https://www.youtube.com https://www.energystar.gov https://energystar.gov https://platform.twitter.com https://www.facebook.com; 1
frame-ancestors 'self' *.webvisor.com 1
default-src https://gbe-bund.de https://www.gbe-bund.de 'self' 'unsafe-inline'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com b.scorecardresearch.com po.st *.po.st www.googletagmanager.com www.google-analytics.com *.google.com google.com *.googleapis.com googleapis.com assets.adobedtm.com *.youtube.com s.ytimg.com *.tt.omtrdc.net code.highcharts.com www.thinglink.com cdn.thinglink.me https://cdn.livefyre.com *.demdex.net *.clicktale.net *.liveperson.com *.liveperson.net *.lpsnmedia.net *.liveengage.net *.liveengage.com *.liveper.sn *.lprnd.net liveperson.com liveperson.net lpsnmedia.net iveengage.net liveengage.com liveper.sn lprnd.net cdn.cookielaw.org *.coutts.com connect.facebook.net snap.licdn.com https://www.googleadservices.com https://googleads.g.doubleclick.net 1
default-src 'self' https:; style-src 'self' 'unsafe-inline' https: blob:; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:; 1
default-src 'self' http: https: w1.stiebel-eltron.de w2.stiebel-eltron.de www.stiebel-eltron.de www0.stiebel-eltron.de; img-src 'self' data: http: https: w1.stiebel-eltron.de w2.stiebel-eltron.de www.stiebel-eltron.de www0.stiebel-eltron.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' http: https: w1.stiebel-eltron.de w2.stiebel-eltron.de www.stiebel-eltron.de www0.stiebel-eltron.de; style-src 'self' 'unsafe-inline' http: https: w1.stiebel-eltron.de w2.stiebel-eltron.de www.stiebel-eltron.de www0.stiebel-eltron.de; font-src 'self' data: http: https: w1.stiebel-eltron.de w2.stiebel-eltron.de www.stiebel-eltron.de www0.stiebel-eltron.de; 1
default-src 'self';script-src 'self' 'unsafe-inline' https://young.scot https://*.playbuzz.com http://*.playbuzz.com http://cdn.thinglink.me https://www.thinglink.com http://www.googleadservices.com https://ajax.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://maps.googleapis.com https://www.google.co.uk https://googleads.g.doubleclick.net https://www.google.com https://*.vo.msecnd.net https://www.instagram.com http://www.instagram.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.tiktok.com https://s16.tiktokcdn.com https://sf16-scmcdn-sg.ibytedtos.com;style-src 'self' 'unsafe-inline' https://young.scot https://ysprodportal.blob.core.windows.net https://*.playbuzz.com http://*.playbuzz.com http://cdn.thinglink.me https://www.thinglink.com https://tagmanager.google.com https://fonts.googleapis.com https://fast.fonts.net https://platform.twitter.com https://s16.tiktokcdn.com;img-src 'self' https://young.scot https://ysprodportal.blob.core.windows.net https://*.playbuzz.com http://*.playbuzz.com http://cdn.thinglink.me https://www.thinglink.com https://www.google-analytics.com https://maps.googleapis.com https://www.google.com https://www.google.co.uk https://stats.g.doubleclick.net https://*.cdninstagram.com http://*.cdninstagram.com https://*.twitter.com https://*.twimg.com https://sf-tb-sg.ibytedtos.com data:;media-src 'self' https://young.scot https://ysprodportal.blob.core.windows.net https://*.playbuzz.com http://*.playbuzz.com http://cdn.thinglink.me https://www.thinglink.com;font-src 'self' https://young.scot https://*.playbuzz.com http://*.playbuzz.com http://cdn.thinglink.me https://www.thinglink.com https://s16.tiktokcdn.com;connect-src 'self' https://dc.services.visualstudio.com https://*.playbuzz.com http://*.playbuzz.com http://cdn.thinglink.me https://www.thinglink.com https://sf-hs-sg.ibytedtos.com;child-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.playbuzz.com http://*.playbuzz.com https://www.surveygizmo.eu http://cdn.thinglink.me https://www.thinglink.com https://www.google.com https://www.instagram.com http://www.instagram.com https://*.twitter.com https://prezi.com https://soundcloud.com https://w.soundcloud.com https://open.spotify.com https://www.tiktok.com https://www.facebook.com;report-uri https://stormid.report-uri.com/r/d/csp/enforce 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' https: data: blob: https://baraag.net; style-src 'self' https://baraag.net 'nonce-1SOaudHcfgHvmKf+hIb3jA=='; media-src 'self' https: data: https://baraag.net; frame-src 'self' https:; manifest-src 'self' https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://baraag.net wss://baraag.net; script-src 'self' https://baraag.net; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net 1
default-src ; script-src https://www.google-analytics.com https://www.google.com/recaptcha/api.js https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src ; style-src 'self' https://fonts.googleapis.com https://*.entrecode.de 'unsafe-inline'; img-src 'self' * *.dealbunny.de data:; media-src *; child-src *.youtube.com *.vimeo.com https://www.google.com; font-src 'self' https://fonts.gstatic.com https://*.entrecode.de data:; connect-src 'self' *.cachena.entrecode.de entrecode.de *.entrecode.de localhost:* dev.dealbunny.de:* *.dealbunny.de https://www.google-analytics.com https://stats.g.doubleclick.net; manifest-src 'self' 1
default-src 'self' https: 'unsafe-inline'; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https: blob:; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.gstatic.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://www.mappila.com https://*.tutorhunt.com https://*.googleapis.com www.google-analytics.com https://maps.google.com  s3.amazonaws.com https://*.cardinalcommerce.com https://*.us-east-1.amazonaws.com; object-src 'self' s3.amazonaws.com; style-src 'unsafe-inline' 'self' s3.amazonaws.com https://*.googleapis.com https://www.mappila.com; img-src 'self' data: https://optimize.google.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.googletagmanager.com www.google-analytics.com maps.google.com openlayers.org https://openlayers.org https://www.mappila.com data: https://*.tile.openstreetmap.org https://*.google.com https://*.googleapis.com; media-src https://*.tutorhunt.com 'self'; frame-src 'self' https://www.youtube.com https://*.cardinalcommerce.com; font-src 'self' https://*.tutorhunt.com https://fonts.gstatic.com; connect-src 'self' https://*.cardinalcommerce.com https://*.us-east-1.amazonaws.com; 1
frame-ancestors 'self' http://www.kongregate.com https://*.crazygames.com https://www.speelspelletjes.nl/ https://www.1001juegos.com/ https://www.gioca.re/ https://www.onlinegame.co.id/ 1
frame-ancestors 'self' *.bbb.org bbb.org *.bluebbb.org bluebbb.org *.myfloridacfo.com myfloridacfo.com jsfiddle.net fiddle.jshell.net 1
default-src 'self' 'unsafe-eval'; frame-src 'self' https://s7.addthis.com/ *.youtube.com *.euroland.com *.jquery.com *.hotjar.com https://tools.eurolandir.com https://tools.eurolandir.com https://vars.hotjar.com https://www.google-analytics.com/analytics.js https://www.google.com/; script-src 'self' https://z.moatads.com https://m.addthis.com https://v1.addthisedge.com https://s7.addthis.com https://s7.addthis.com/js/300/addthis_widget.js https://script.hotjar.com https://static.hotjar.com https://dl.episerver.net https://cookie-cdn.cookiepro.com/ https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://www.google-analytics.com/analytics.js https://img03.en25.com/i/elqCfg.min.js http://img03.en25.com/i/elqCfg.min.js https://tagmanager.google.com https://www.googletagmanager.com/ https://secure.leadforensics.com/ http://siteimproveanalytics.com/ *.jquery.com *.euroland.com  http://maps.google.com/maps/api/ http://maps.googleapis.com/maps/ https://maps.googleapis.com/maps/api/ https://maps.googleapis.com/maps-api-v3/api/ http://maps.google.com/maps-api-v3/api/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://dl.episerver.net https://fonts.googleapis.com 'unsafe-inline'; img-src * data:; media-src 'self'; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com; connect-src 'self' ws: https://cookie-cdn.cookiepro.com/ https://dc.services.visualstudio.com/ https://www.google-analytics.com 1
frame-ancestors 'self' *.ci360.sas.com; 1
frame-ancestors 'self' https://woobox.com https://www.youtube.com https://optimize.google.com https://www.googletagmanager.com https://www.facebook.com https://www.facebook.net https://bid.g.doubleclick.net/ https://connect.facebook.net; 1
IE=EmulateIE11 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.insureio.com *.siteimproveanalytics.io siteimproveanalytics.com googletagmanager.com *.googletagmanager.com googleapis.com *.googleapis.com google-analytics.com *.google-analytics.com adservice.google.com wesbanco.learnbanzai.com teachbanzai.com bat.bing.com *.facebook.net *.facebook.com *.adsymptotic.com linkedin.com *.linkedin.com snap.licdn.com; child-src *.insureio.com *.doubleclick.net *.fundsxpress.com wesbanco.locatorsearch.com youtu.be youtube.com player.vimeo.com vimeo.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.jsdelivr.net https://code.highcharts.com https://cdnjs.cloudflare.com https://*.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://unpkg.com; img-src 'self' data: https: https://*.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com http://www.w3.org; style-src 'self' 'unsafe-inline' https://unpkg.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://assets.zendesk.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com ; frame-src https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com; object-src 'none' 1
script-src 'self' 'unsafe-inline' www.google-analytics.com quadia.webtvframework.com code.createjs.com ssl.p.jwpcdn.com www.youtube.com s.ytimg.com;style-src 'self' 'unsafe-inline';img-src 'self' www.google-analytics.com data:;media-src 'self';frame-src 'self' g.jwpsrv.com www.youtube.com tools.eurolandir.com quadia.webtvframework.com ahold.hostedby.quadia.com aholddelhaize.projects.quadia.net streams.nfgd.nl;font-src 'self' ssl.p.jwpcdn.com;form-action 'self';report-uri /WebResource.axd?cspReport=true 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' blob: https://*.driftt.com https://*.facebook.net https://*.twitter.com https://js.hscta.net https://*.hubspot.com https://www.googletagmanager.com https://js.hs-scripts.com https://*.hsforms.net https://*.hsforms.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hsleadflows.net https://code.jquery.com https://www.google-analytics.com https://*.googleapis.com https://*.linkedin.com https://js.hs-banner.com https://snap.licdn.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://js.hsadspixel.net https://*.greenhouse.io https://*.jsdelivr.net https://d10lpsik1i8c69.cloudfront.net https://ssl.gstatic.com;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://cdnjs.cloudflare.com https://cdn2.hubspot.net https://static.hsappstatic.net https://d10lpsik1i8c69.cloudfront.net;img-src 'self' data: https:;connect-src 'self' https://*.hubspot.com https://cdn.contentful.com https://*.daml.com https://www.google-analytics.com https://api.sitesearch360.com https://api.hubapi.com https://cdn2.hubspot.net https://p.adsymptotic.com https://*.hsforms.com https://*.daml.com https://daml.com https://*.luckyorange.net wss://*.visitors.live wss://visitors.live https://*.digitalasset.com https://*.doubleclick.net;font-src 'self' data: https://*.digitalasset.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn2.hubspot.net;object-src 'self';media-src https://d10lpsik1i8c69.cloudfront.net;frame-src 'self' https://*.driftt.com/ https://*.hsforms.com https://player.vimeo.com https://*.daml.com https://platform.twitter.com https://*.doubleclick.net https://*.jsdelivr.net https://*.greenhouse.io https://fireside.fm https://player.fireside.fm https://www.youtube.com;manifest-src 'self';report-uri https://report-uri.digitalasset.com/report-uri;upgrade-insecure-requests 1
default-src * blob: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.emmezeta.hr emmezeta.hr *.emmezeta.rs emmezeta.rs; 1
: policy 1
script-src 'self' 'unsafe-inline' *.flockler.com fl-1.cdn.flockler.com www.gstatic.com www.google.com ajax.googleapis.com stats.g.doubleclick.net www.dwin2.com pixel.mathtag.com rum-static.pingdom.net assets.adobedtm.com analytics.twitter.com platform.twitter.com static.ads-twitter.com connect.facebook.net static.hotjar.com script.hotjar.com assets.pinterest.com *.addthis.com s.pinimg.com 1
frame-ancestors 'self' https://esirket.com https://app.mukellef.co https://app-beta.mukellef.co https://app.bizimsiparis.com https://bizimsiparis.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.archives.gov www.googletagmanager.com www.google-analytics.com dap.digitalgov.gov script.crazyegg.com cdnjs.cloudflare.com mdbootstrap.com stackpath.bootstrapcdn.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' www.archives.gov  fonts.googleapis.com https://use.fontawesome.com mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com; frame-ancestors 'self'; report-uri https://www.clintonlibrary.gov/report-uri/enforce 1
default-src 'self' http://www.youtube.com;style-src 'unsafe-inline' *;frame-src *;img-src * data:;media-src *;font-src *;connect-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://google.ru http://google.ru https://google.com http://google.com https://*.google.ru http://*.google.ru https://*.google.com http://*.google.com https://*.googletagservices.com http://*.googletagservices.com http://*.googleadservices.com https://*.googleadservices.com http://*.googlesyndication.com https://*.googlesyndication.com https://googleapis.com http://googleapis.com https://*.googleapis.com http://*.googleapis.com http://google-analytics.com https://google-analytics.com http://*.google-analytics.com https://*.google-analytics.com http://yandex.st/ https://yandex.ru https://yandex.net http://yandex.ru http://yandex.net https://*.yandex.ru https://*.yandex.net http://*.yandex.ru http://*.yandex.net https://yastatic.net http://yastatic.net https://*.yastatic.net http://*.yastatic.net http://rambler.ru https://rambler.ru http://*.rambler.ru https://*.rambler.ru https://vk.com http://vk.com http://*.zozoter.ru http://*.astro7.ru https://*.zozoter.ru https://*.astro7.ru https://*.vk.com http://*.vk.com https://*.facebook.com http://lc2ads.ru http://ladycash.ru http://faggrim.com http://*.lc2ads.ru http://*.ladycash.ru http://*.faggrim.com http://*.m2corp.ru http://*.pluso.ru http://*.kitbit.net http://*.insigit.com http://*.openstat.net http://*.zatexta.com http://*.addthis.com https://www.googletagmanager.com http://*.yandex.st http://*.facebook.net http://*.twitter.com http://*.userapi.com https://*.yandex.st https://*.facebook.net https://*.twitter.com https://*.userapi.com https://*.github.com https://*.githubusercontent.com http://*.disqus.com/ https://*.gstatic.com http://*.disquscdn.com https://*.lcads.ru http://*.teaser.cc http://*.lcads.ru http://*.teaser.cc http://*.goroskop.ru https://*.syndication.twimg.com http://*.syndication.twimg.com https://*.goroskop.ru http://goroskop.ru/ http://*.yandex.st/jquery/1.7.1/jquery.min.js http://sync.users-api.com http://*.lcads.ru https://*.lcads.ru http://*.ladycoin.ru http://*.poketall.ru http://*.cashandfavor.ru http://*.purecash.ru http://*.busyprice.ru http://*.servemoney.ru http://*.levelpay.ru http://*.goodkind.ru http://*.purecapital.ru http://*.cashheaven.ru http://*.payandpray.ru http://*.moneytrap.ru http://*.pandre10.ru http://*.leadiacloud.com https://*.leadiacloud.com http://*.odnoklassniki.ru http://vkontakte.ru http://static.ak.fbcdn.net http://*.criteo.com/ http://*.mycdn.me http://sync2.adsniper.ru http://api.cloudleadia.com http://st.ad.smaclick.com http://*.ads1-adnow.com/ http://*.user-api.com https://*.user-api.com  http://*.vn-chk777.com https://*.users-api.com https://xlog.info https://*.vn-chk123.com http://*.users-api.com  http://xlog.info http://*.vn-chk123.com http://*.cdn1now.com https://*.cdn1now.com http://cdn1now.com https://cdn1now.com http://*.cdn2now.com https://*.cdn2now.com http://cdn2now.com https://cdn2now.com http://*.cdn3now.com https://*.cdn3now.com http://cdn3now.com https://cdn3now.com http://*.cdn4now.com https://*.cdn4now.com http://cdn4now.com https://cdn45now.com http://*.cdn5now.com https://*.cdn5now.com http://cdn5now.com https://cdn5now.com http://*.cdn6now.com https://*.cdn6now.com http://cdn6now.com https://cdn6now.com http://*.cdn7now.com https://*.cdn7now.com http://cdn7now.com https://cdn7now.com http://*.cdn8now.com https://*.cdn8now.com http://cdn8now.com https://cdn8now.com http://*.cdn9now.com https://*.cdn9now.com http://cdn9now.com https://cdn9now.com http://*.cdn10now.com https://*.cdn10now.com http://cdn10now.com https://cdn10now.com http://*.videonow.ru https://*.videonow.ru http://static.videonow.ru https://static.videonow.ru http://*.moevideo.biz https://*.moevideo.biz http://moevideo.biz https://moevideo.biz ;report-uri /csp/log.php 1
default-src 'none'; child-src 'self' vars.hotjar.com www.google.com js.stripe.com www.youtube.com www.dailymotion.com share.intercom.io cdn.iframe.ly w.soundcloud.com intercom-sheets.com player.vimeo.com fast.wistia.net soundsgood.co play.soundsgood.co app.soundsgood.co playlist.soundsgood.co app.getbeamer.com wttj.typeform.com cdn.welcomekit.co; connect-src https: wss: 'self' api.intercom.io api-iam.intercom.io api-ping.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com app.getsentry.com autocomplete.geocoder.ls.hereapi.com geocoder.ls.hereapi.com reverse.geocoder.ls.hereapi.com cdn.welcomekit.co; font-src 'self' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com js.intercomcdn.com cdn.welcometothejungle.co fonts.gstatic.com cdn.welcometothejungle.com cdn.welcomekit.co; img-src https: data: blob: js.intercomcdn.com static.intercomassets.com downloads.intercomcdn.com uploads.intercomusercontent.com gifs.intercomcdn.com cdn.welcomekit.co; media-src js.intercomcdn.com cdn.welcomekit.co; script-src 'self' app.intercom.io widget.intercom.io js.intercomcdn.com static.hotjar.com script.hotjar.com connect.facebook.net www.google.com www.gstatic.com www.google-analytics.com maps.googleapis.com js.stripe.com www.youtube.com app.getbeamer.com realtime.getbeamer.com embed.typeform.com app.salesmachine.io cdnjs.salesmachine.io api.salesmachine.io cdn.welcomekit.co; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com maxcdn.bootstrapcdn.com fonts.googleapis.com cdn.welcometothejungle.co app.getbeamer.com cdn.welcomekit.co 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'none' 'unsafe-inline' https: data:; img-src 'self' https: data:; connect-src 'self'; font-src 'self' https: data:; media-src *; report-uri *; child-src *; form-action *; frame-ancestors *; object-src *; frame-src *; worker-src *; manifest-src *; base-uri * 1
default-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com cdn.jsdelivr.net *.tools.investis.com *.google-analytics.com stats.g.doubleclick.net staticcontents.investisdigital.com ipapi.connectid.cloud; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edge.api.brightcove.com *.googleapis.com www.youtube.com youtube.com s.ytimg.com unpkg.com *.highcharts.com *.tools.investis.com www.google-analytics.com staticcontents.investisdigital.com ipapi.connectid.cloud; style-src 'self' 'unsafe-inline' 'unsafe-eval' viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net; img-src 'self' 'unsafe-inline' * data:; media-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com brightcove.hs.llnwd.net; frame-src 'self' *.investis.com www.google.com ir.tools.investis.com staticxx.facebook.com www.youtube.com maps.google.com; font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com; report-uri /report-csp-violation 1
frame-ancestors 'self' *.scottishpower.co.uk uk-cms-prod.eu-gb.mybluemix.net 1
default-src https:; connect-src https: wss:; font-src https: data:; frame-src https: twitter:; frame-ancestors http: https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval'  https:; worker-src 'self' blob:; child-src 'self' blob:;  style-src 'unsafe-inline' https:; 1
default-src 'self' * 'unsafe-eval' 'unsafe-inline';img-src data: *; 1
default-src 'none'; font-src 'self'; form-action 'self'; img-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self'; object-src 'self' 1
default-src *;     frame-src 'self' *.google.com *.youtube.com https://staticxx.facebook.com https://dw408jcu6cqwk.cloudfront.net https://accounts.livechatinc.com https://secure.livechatinc.com http://4511566.fls.doubleclick.net/ http://tags.tiqcdn.com/ https://bid.g.doubleclick.net/;     font-src * 'self' data: fwd-chatbot-tools.s3-ap-southeast-1.amazonaws.com cdn.livechatinc.com livechat.s3.amazonaws.com fonts.gstatic.com fonts.googleapis.com;     img-src * 'self' data: chatbot-ph.s3-ap-southeast-1.amazonaws.com cdn.livechatinc.com livechat.s3.amazonaws.com;     style-src * 'self' 'unsafe-inline' cdnjs.cloudflare.com;     script-src 'self' 'unsafe-inline' 'unsafe-eval' *.fwd.com.hk cdnjs.cloudflare.com execution-apn.ci360.sas.com browser-update.org cdn.mouseflow.com https://api.fwd.co.th https://kkbv2.api.sociaplus.com https://fwd.api.useinsider.com *.useinsider.com https://search.fwd.com.hk http://search.fwd.com.hk https://search.fwd.com.ph http://search.fwd.com.ph https://connect.fwd.co.th https://line.fwd.co.th https://www.gstatic.com https://www.google.com https://maps.googleapis.com www.google-analytics.com tagmanager.google.com *.googleapis.com www.googletagmanager.com *.livechatinc.com connect.facebook.net *.turn.com *.zopim.com *.zopim.io cdn-akamai.mookie1.com tags.tiqcdn.com t.mookie1.com b3.mookie1.com *.zopim.com api.map.baidu.com *.maxmind.com *.map.bdimg.com *.bdstatic.com wss://*.zopim.com https://*.zopim.io *.googleadservices.com *.adnxs.com *.doubleclick.net *.cloudfront.net *.mimecast.com *.adsrvr.org *.facebook.com *.youtube.com *.bing.com *.ytimg.com *.visualwebsiteoptimizer.com *.yahoo.com bs.serving-sys.com https://*.analytics.yahoo.com *.yimg.com *.taboola.com *.innity.net *.innity.com *.zdassets.com wss://chatbot.fwd.com.hk https://portal.fwd.com.vn https://dw408jcu6cqwk.cloudfront.net;     connect-src 'self' *.fwd.com.hk geoip-js.com execution-apn.ci360.sas.com https://api.fwd.co.th https://kkbv2.api.sociaplus.com https://api.useinsider.com https://location.api.useinsider.com https://hit.api.useinsider.com https://fwd.api.useinsider.com https://category-collector.api.useinsider.com http://dev.surfer.seasonalife.com https://surfer.seasonalife.com *.surfer.seasonalife.com *.seasonalife.com https://image.useinsider.com https://*.api.useinsider.com wss://directline.botframework.com https://search.fwd.com.hk https://search.fwd.com.ph http://search.fwd.com.ph http://search.fwd.com.hk https://connect.fwd.co.th https://line.fwd.co.th https://portal.fwd.com.vn wss://*.zopim.com *.maxmind.com api.map.baidu.com *.adnxs.com *.turn.com *.adsrvr.org *.botframework.com *.facebook.com *.vimeo.com *.youtube.com *.taboola.com *.yimg.com *.innity.net *.innity.com wss://*.fwd.com.hk *.yahoo.com *.mouseflow.com wss://chatbot.fwd.com.hk trc.taboola.com cdn.taboola.com *.zdassets.com *.doubleclick.net *.tigcdn.com www.google-analytics.com wss://api.livechatinc.com https://api.livechatinc.com https://h49u5ppoz9.execute-api.ap-southeast-1.amazonaws.com https://1z4ebxptw1.execute-api.ap-southeast-1.amazonaws.com https://hooks.slack.com;     object-src 'none';     form-action 'self' *.fwd.com.hk;  1
frame-ancestors 'self' https://www.getinvolvednanaimo.ca/;  1
default-src 'self' https: data: blob: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://oss.maxcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https: data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; img-src 'self' 'unsafe-inline' https: data: blob: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; connect-src 'self' 'unsafe-inline' https: data: blob: cdnjs.cloudflare.com cdn.jsdelivr.net; font-src 'self' 'unsafe-inline' https: data:; media-src 'self' 'unsafe-inline' https: data: blob: cdnjs.cloudflare.com cdn.jsdelivr.net; frame-ancestors 'self' 'unsafe-inline' https: data:; upgrade-insecure-requests 1
default-src 'self' https://prod-web-plugins.s3.amazonaws.com https://cdn01.sura.net.pe; img-src 'self' data: https://prod-web-plugins.s3.amazonaws.com https://www.google.com.pe https://liveness-web.toc.ai https://www.googletagmanager.com https://cdn01.sura.net.pe https://www.facebook.com https://www.google-analytics.com https://www.google.com; script-src 'self' https://prod-web-plugins.s3.amazonaws.com https://prod-liveness.tocws.com https://cdnjs.cloudflare.com https://script.hotjar.com https://liveness-web.toc.ai https://cdn.jsdelivr.net https://static.hotjar.com https://tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn01.sura.net.pe https://a2.adform.net http://a2.adform.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://liveness-web.toc.ai https://prod-web-plugins.s3.amazonaws.com https://cdnjs.cloudflare.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn01.sura.net.pe; font-src https://cdnjs.cloudflare.com https://script.hotjar.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn01.sura.net.pe; connect-src 'self' https://prod-web-plugins.s3.amazonaws.com https://prod-liveness.tocws.com wss://ws8.hotjar.com wss://prod-liveness.toc.ai wss://prod-liveness.tocws.com wss://ws2.hotjar.com https://prod-liveness.toc.ai https://in.hotjar.com https://vc.hotjar.io https://liveness-web.toc.ai https://prod-api.7oc.cl https://www.afpintegra.pe https://www.google-analytics.com https://cognito-idp.us-west-2.amazonaws.com https://api.cercania.afpintegra.pe https://afiliacion.api.cercania.afpintegra.pe https://cdn01.sura.net.pe https://sura-integra-webapps.s3.us-west-2.amazonaws.com; frame-src data: 'unsafe-inline' 'self' blob: https://bid.g.doubleclick.net https://vars.hotjar.com https://cdn01.sura.net.pe https://www.youtube.com https://www.afpintegra.pe https://www2.sbs.gob.pe https://cognito-idp.us-west-2.amazonaws.com https://api.cercania.afpintegra.pe https://afiliacion.api.cercania.afpintegra.pe https://www.google.com https://irene-chatbot.sura.net.pe https://sura-integra-webapps.s3.us-west-2.amazonaws.com; object-src * blob: https://www.afpintegra.pe; 1
default-src 'self' *.quantummetric.com 'unsafe-inline' 'unsafe-eval';frame-src * 'unsafe-inline';connect-src * 'unsafe-inline'; font-src * 'unsafe-inline'; style-src * 'unsafe-inline';  media-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * 'unsafe-inline' data:; worker-src blob:; child-src blob:;  1
default-src *;   img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *;   style-src  'self' 'unsafe-inline' *; font-src https://fonts.gstatic.com   https://cdnjs.cloudflare.com https://script.hotjar.com 'self'  data:;  1
frame-ancestors 'none'; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob:; img-src 'self' *.mojeek.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
child-src * 1
default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; 1
default-src * 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bhuntr.com *.bhuntr.com *.bountyhunter.co *.cloudfront.net *.google.com https://adservice.google.com.tw https://adservice.google.com https://*.googleadservices.com *.googleapis.com *.googletagservices.com *.googletagmanager.com *.googlevideo.com *.twitter.com *.intercom.io *.intercomcdn.com *.amplitude.com *.fullstory.com https://www.gstatic.com https://connect.facebook.net https://*.facebook.com https://securepubads.g.doubleclick.net https://www.youtube.com https://s.ytimg.com http://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.google.com https://static.doubleclick.net https://www.google-analytics.com https://publisherconsole.appspot.com https://scdn.line-app.com https://googleads.g.doubleclick.net cdn.ampproject.org *.sentry-cdn.com fullstory.com optimize.google.com d.line-scdn.net;img-src * data: 'self';font-src * data: 'self';connect-src * data: 'self' 1
frame-ancestors 'self' http://customer-skicircus.loop21.net https://customer-skicircus.loop21.net http://public-location-skicircus.loop21.net https://public-location-skicircus.loop21.net 1
frame-ancestors https://www.openapply.com 1
frame-ancestors 'self' https://smartnutri-stag.firebaseapp.com/ https://smartfitnutri.app/ 1
child-src 'self' *.prodpad.com prodpad2017.staging.wpengine.com app.livestorm.co calendly.com *.twitter.com www.youtube.com player.vimeo.com www.slideshare.net widget.intercom.io downloads.mailchimp.com s3.amazonaws.com;; connect-src 'self' api.segment.io api.amplitude.com *.fullstory.com prodpad2017.wpengine.com wss://*.intercom.io api-iam.intercom.io api-widget.prodpad.com https://api.hubapi.com *.hubspot.com https://www.facebook.com https://hubspot-forms-static-embed.s3.amazonaws.com *.doubleclick.net *.google-analytics.com *.fontawesome.com *.cloudfront.net *.helpscout.net *.pusher.com wss://*.pusher.com *.sumologic.com;; default-src 'self' api.segment.io api.amplitude.com *.fullstory.com api-iam.intercom.io prodpad2017.wpengine.com;; font-src 'self' *.prodpad.com fonts.gstatic.com fonts.googleapis.com data: js.intercomcdn.com *.fontawesome.com;;; frame-src *.twitter.com *.prodpad.com *.vimeo.com *.youtube.com calendly.com www.slideshare.net www.instagram.com intercom-sheets.com https://optimize.google.com *.hubspot.com https://cards.producthunt.com https://www.facebook.com https://forms.hsforms.com https://venngage.net *.venngage.com;; img-src 'self' *.prodpad.com *.twitter.com *.prodpad2017.staging.wpengine.com *.intercomcdn.com *.gravatar.com data: *.google.com *.google.co.uk *.doubleclick.net *.googleadservices.net *.google-analytics.com *.twimg.com *.intercomassets.com data: *.intercom.help cdn-images.mailchimp.com tagmanager.google.com https://optimize.google.com https://i.ytimg.com https://track.hubspot.com https://px.ads.linkedin.com https://www.facebook.com https://forms.hsforms.com https://forms.hubspot.com https://cdn2.hubspot.net *.w.org https://q.quora.com *.hubspot.com *.cloudfront.net; media-src 'self' *.prodpad.com prodpad2017.staging.wpengine.com *.twimg.com fonts.gstatic.com www.google-analytics.com js.intercomcdn.com *.helpscout.net;; object-src 'self' *.prodpad.com prodpad2017.staging.wpengine.com app.livestorm.co calendly.com ext.prodpad.com platform.twitter.com www.youtube.com player.vimeo.com www.slideshare.net widget.intercom.io downloads.mailchimp.com s3.amazonaws.com;; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.prodpad.com prodpad2017.staging.wpengine.com tag.getdrip.com cdn.segment.com www.googletagmanager.com cdn.amplitude.com www.googleadservices.com d2wy8f7a9ursnm.cloudfront.net *.fullstory.com www.google-analytics.com widget.intercom.io googleads.g.doubleclick.net *.twitter.com downloads.mailchimp.com s3.amazonaws.com www.google-analytics.com api.getdrip.com js.intercomcdn.com *.twimg.com mc.us5.list-manage.com assets.calendly.com platform.instagram.com www.instagram.com tagmanager.google.com https://optimize.google.com https://static.hsappstatic.net https://www.youtube.com https://s.ytimg.com https://js.hs-analytics.net https://js.hs-scripts.com https://js.hsadspixel.net https://js.hscollectedforms.net https://connect.facebook.net https://snap.licdn.com https://js.hsforms.net https://forms.hsforms.com https://js.hsleadflows.net https://api.hubapi.com *.venngage.com *.usemessages.com *.fontawesome.com *.hs-banner.com *.hscta.net *.hubspot.com *.helpscout.net *.cloudflare.com;; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.twitter.com downloads.mailchimp.com *.prodpad.com tagmanager.google.com https://optimize.google.com *.fontawesome.com;; form-action 'self' *.prodpad.com prodpad.us5.list-manage.com *.twitter.com calendly.com https://www.facebook.com https://forms.hsforms.com *.hubspot.com;; 1
default-src 'none'; object-src 'none'; script-src 'self'; manifest-src 'self'; style-src 'self'; img-src 'self' https://www.gravatar.com https://xumm.app; connect-src wss://xrpl.ws wss://xrpl.link wss://s2.ripple.com https://data.ripple.com https://xumm.xrptoolkit.com wss://xumm.app https://lookup.xrptoolkit.com   https://api.rollbar.com; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; block-all-mixed-content; report-uri https://xrptoolkit.report-uri.com/r/d/csp/enforce; report-to csp 1
frame-ancestors https://*.guide-piscine.fr; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://floobits.com wss://floobits.com https://*.floobits.com wss://*.floobits.com https://www.google-analytics.com https://*.olark.com https://*.stripe.com; img-src * data: blob:; media-src * blob:; 1
default-src 'self' blob: data: *.knorr-bremse.com 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://*.gstatic.com https://*.googleapis.com https://www.youtube.com https://www.youtube-nocookie.com https://*.ytimg.com https://*.googletagmanager.com https://*.google-analytics.com 1
default-src 'self'; script-src 'self' https://*.apple-cloudkit.com; connect-src 'self' https://junecloud.zendesk.com https://*.apple-cloudkit.com; img-src 'self' data: https://www.gravatar.com *.wp.com https://share.pingdom.com https://*.junecode.com; frame-src 'self' deliveries:; object-src 'self'; plugin-types application/pdf; form-action 'self' https://*.paypal.com; frame-ancestors 'self'; block-all-mixed-content; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bam.nr-data.net https://cdn.syndication.twimg.com https://cdn.tradelab.fr https://connect.facebook.net https://d2hya7iqhf5w3h.cloudfront.net https://dfc.inovestor.com https://fo-api.omnitagjs.com https://fonts.googleapis.com https://ib.adnxs.com https://js-agent.newrelic.com https://js.hs-scripts.com https://pixels.omnitagjs.com https://platform.twitter.com https://script.crazyegg.com https://snap.licdn.com https://tm.vendemore.com https://track.adform.net https://www.google-analytics.com https://www.googletagmanager.com https://s.go-mpulse.net https://its.tradelab.fr https://js.hsadspixel.net/fb.js https://js.hs-analytics.net https://js.hsleadflows.net https://www.googleadservices.com https://static.hotjar.com https://a.optnmstr.com https://www.youtube.com https://js.hsforms.net https://forms.hsforms.com https://script.hotjar.com https://s.ytimg.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://app.interactiveads.ai https://maps.googleapis.com https://cdn.rawgit.com http://cdn.siteimprove.net https://tagmanager.google.com https://js.hs-banner.com https://s2.adform.net https://c.go-mpulse.net https://173c5b0c.akstat.io https://bam-cell.nr-data.net https://bot.leadoo.com https://files.cdn.leadfamly.com dfc.inovestor.com https://cdn.jsdelivr.net https://cdn.siteimprove.net https://cdnjs.cloudflare.com https://polyfill.io https://static.addtoany.com https://unpkg.com; style-src * 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'  www.spellzone.com googleads.g.doubleclick.net www.google-analytics.com app-eu.readspeaker.com f1-eu.readspeaker.com rstts-eu.readspeaker.com media-eu.readspeaker.com https://r3.talklets-secure.com r3.talklets-secure.com spellzone.youcanbook.me spellzone-us.youcanbook.me www.youtube.com player.vimeo.com https://cdn.livechatinc.com/ https://secure.livechatinc.com/;  script-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.google-analytics.com   ssl.google-analytics.com pagead2.googlesyndication.com storage.googleapis.com googleads.g.doubleclick.net www.googletagmanager.com www.googletagservices.com ajax.googleapis.com adservice.google.com adservice.google.co.uk f1-eu.readspeaker.com app-eu.readspeaker.com rstts-eu.readspeaker.com media-eu.readspeaker.com https://r3.talklets-secure.com www.googleapis.com player.vimeo.com cloudflare.com/cdn-cgi/ https://cdn.livechatinc.com/ https://secure.livechatinc.com/ cdn.ampproject.org;   img-src 'self' data: storage.googleapis.com pagead2.googlesyndication.com www.google-analytics.com ssl.google-analytics.com f1-eu.readspeaker.com app-eu.readspeaker.com rstts-eu.readspeaker.com media-eu.readspeaker.com chart.googleapis.com/chart https://cdn.livechatinc.com/ https://secure.livechatinc.com/ ;  style-src 'self' 'unsafe-inline' app-eu.readspeaker.com f1-eu.readspeaker.com;   font-src 'self' fonts.googleapis.com; frame-ancestors 'self'; object-src 'self' 1
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com https://tagmanager.google.com https://www.youtube.com https://connect.facebook.net; frame-src 'self' https://w.soundcloud.com https://www.google.com https://vars.hotjar.com https://www.youtube.com https://player.vimeo.com https://www.facebook.com https://transaction.hostedpayments.com https://certtransaction.hostedpayments.com https://*.afterdigital.uk https://skyway.honolulumuseum.org; connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com https://services.postcodeanywhere.co.uk https://api.addressy.com https://skyway.honolulumuseum.org https://*.afterdigital.uk https://vc.hotjar.io wss://*.hotjar.com https://*.hotjar.com; img-src 'self' https://skyway.honolulumuseum.org https://*.cdninstagram.com https://*.afterdigital.uk https://art.honolulumuseum.org https://t-bridge.s3.eu-west-1.amazonaws.com https://skyway-us-cms-assets.s3.us-east-2.amazonaws.com https://www.google-analytics.com https://www.instagram.com https://*.doubleclick.net; font-src 'self' 'unsafe-inline' data: 1
default-src 'self' *.nrw.de;    script-src  'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net;    style-src   'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net;    font-src data: *;    img-src  data: *;    frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com;    worker-src  'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de;    frame-src   'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de;    object-src  'self';    connect-src 'self' *.nrw.de svc.webspellchecker.net;    media-src *; upgrade-insecure-requests; 1
base-uri 'self' 'report-sample'; block-all-mixed-content; form-action 'self' 'report-sample'; frame-ancestors 'self'; default-src 'none'; connect-src 'self' 'report-sample'; frame-src 'self' 'report-sample'; img-src 'self' data: 'report-sample'; font-src 'self' 'report-sample'; media-src 'self' 'report-sample'; manifest-src 'self' 'report-sample'; script-src 'self' 'report-sample'; style-src 'self' 'report-sample'; report-uri /auktion/clients/csp_violation.php 1
frame-ancestors https://www.emcali.com.co 'self'; 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https: 'nonce-tgUO8JKNzb58H65W9ZtEdTwn9FLFJW2J' 'strict-dynamic' https://www.google-analytics.com https://www.googletagmanager.com; 1
default-src 'self' 'sha256-EE2P6EnF5LyhuHD1GXvcAyp0VMA+ELbkbSFlR4akzKI=' 'sha256-6F7C0E903A7D577847AE427BCB66FECB5692E6D55355D2B6986552A783B892A9' 'sha256-ekEC0FEv8t+Q88qseT1uVB/azdF0VZjnwSKhwlY+9wc=' 'sha256-76L2z81IsyivXOW8b8CsEk7m32YfJBqYCKQLmvatdCQ=' 'unsafe-inline' SearchIncognito.com https://www.searchincognito.com *.navigateto.net *.searchemoji.global;img-src *;frame-src 'self' SearchIncognito.com https://www.searchincognito.com *.navigateto.net www.youtube.com www.youtube-nocookie.com player.vimeo.com 'nonce-MzY5MmY5Y2MxZmY4NDdkNzg3OTY0ZjJhZjA3ZjU0MGY=';media-src *;style-src 'self' 'unsafe-inline' SearchIncognito.com https://www.searchincognito.com *.navigateto.net;script-src 'self' 'unsafe-eval' SearchIncognito.com https://www.searchincognito.com *.navigateto.net 'nonce-MzY5MmY5Y2MxZmY4NDdkNzg3OTY0ZjJhZjA3ZjU0MGY=' 'sha256-ekEC0FEv8t+Q88qseT1uVB/azdF0VZjnwSKhwlY+9wc=' 'sha256-76L2z81IsyivXOW8b8CsEk7m32YfJBqYCKQLmvatdCQ=' 1
base-uri self 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; object-src 'self' blob: 1
frame-ancestors 'self';default-src https: data: 'unsafe-eval' 'unsafe-inline'; img-src * data:; 1
connect-src sync.datamind.ru dpm.demdex.net tinkoffcreditsystems.d3.sc.omtrdc.net assets.adobedtm.com *.omniture.com *.g.doubleclick.net geocode-maps.yandex.ru/1.x/ *.google-analytics.com *.datamind.ru www.cdn-tinkoff.ru www.google.com www.google.ru www.facebook.com google-analytics.bi.owox.com api.advcake.com 'self' *.tinkoff.ru *.tcsbank.ru wss://*.tinkoff.ru platform-sentry.tcsbank.ru sentry.tinkoff.ru www.tinkoff.ru cfg.tinkoff.ru acdn.tinkoff.ru business.tinkoff.ru; script-src sync.datamind.ru www.google-analytics.com www.googletagmanager.com www.googleadservices.com *.g.doubleclick.net assets.adobedtm.com dpm.demdex.net tinkoffcreditsystems.d3.sc.omtrdc.net *.omniture.com *.google-analytics.com googleads.g.doubleclick.net www.google.com www.google.ru connect.ok.ru vk.com *.datamind.ru s.ytimg.com connect.facebook.net *.tinkoff.ru *.tcsbank.ru www.cdn-tinkoff.ru ad.doubleclick.net 'self' 'unsafe-eval' 'unsafe-inline'; img-src *.datamind.ru dpm.demdex.net www.google-analytics.com tinkoffcreditsystems.d3.sc.omtrdc.net cm.everesttech.net dp.adsdata.ru www.google.com www.google.ru vk.com login.vk.com mc.yandex.ru ad.mail.ru adfocus.ru www.facebook.com ad.doubleclick.net *.google.com *.yandex.ru *.yandex.net *.2o7.net *.demdex.net cx.atdmt.com analytics.twitter.com t.co eu-sonar.sociomantic.com *.sravni.ru www.banki.ru *.pool.datamind.ru statad.ru googletagmanager.com www.facebook.com/tr/ *.g.doubleclick.net www.googleadservices.com www.cdn-tinkoff.ru *.tinkoff.ru manalyticshub.com p.formobil.net rupertino.ru adservice.google.com adservice.google.ru google-analytics.bi.owox.com dc.ads.linkedin.com *.mail.ru hit.acstat.com 'self' data: *.tcsbank.ru *.cdn-tinkoff.ru; frame-src *.tinkoff.demdex.net *.omniture.com bid.g.doubleclick.net www.facebook.com *.demdex.net vk.com static.datamind.ru platform.twitter.com connect.ok.ru *.datamind.ru www.cdn-tinkoff.ru 'self' blob: *.tinkoff.ru *.tcsbank.ru; report-uri https://www.tinkoff.ru/api/front/log/csp-error?appName=pfphome&sentryDsnKey=b7cae0fa7dd74b4489cd05596a20df38&sentryApiId=142; default-src 'self' www.cdn-tinkoff.ru *.tinkoff.ru data:; style-src 'unsafe-inline' 'self' *.tinkoff.ru *.tcsbank.ru www.cdn-tinkoff.ru 1
default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; connect-src *; img-src * data: 1
default-src 'self'; font-src 'self' https://use.typekit.net https://fonts.googleapis.com https://fonts.gstatic.com data:; img-src 'self' https://mynet.occhio.de/ https://tkr.ade25.de https://p.typekit.net https://syndication.twitter.com https://platform.twitter.com/ https://pbs.twimg.com https://ton.twimg.com https://referrer.disqus.com https://c.disquscdn.com *.google-analytics.com data:; style-src 'self' 'unsafe-inline' https://p.typekit.net https://use.typekit.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://cdn-images.mailchimp.com https://platform.twitter.com https://ton.twimg.com www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vsr.architonic.com/ https://cdnjs.cloudflare.com https://tkr.ade25.de https://ajax.googleapis.com https://apis.google.com *.google-analytics.com https://use.typekit.net https://platform.twitter.com https://s3.amazonaws.com https://cdn.syndication.twimg.com https://meetshaus.disqus.com platform.instagram.com; child-src 'self' https://www.br.de/ https://www.youtube-nocookie.com http://wordpress.p395476.webspaceconfig.de https://vsr.architonic.com/ https://piwik.ade25.de https://lightwidget.com https://tools.emailsys.net https://player.vimeo.com https://w.soundcloud.com https://www.youtube.com/ https://www.google.com https://syndication.twitter.com https://platform.twitter.com https://maps.google.de https://disqus.com https://giphy.com https://www.google-analytics.com https://tf2be91b5.emailsys1a.net; 1
child-src 'self'; connect-src * ws: swapi.co; default-src 'self'; img-src 'self' 'unsafe-inline' data: *.facebook.com *.google-analytics.com t.co *.amazonaws.com *.wp.com *.vimeocdn.com *.youtube.com trueventures.com *.trueventures.com http://trueventures.com http://*.trueventures.com slideshare.net *.slideshare.net *.go-vip.co *.simplecast.com; font-src 'self' data: fonts.googleapis.com/css fonts.gstatic.com player.simplecast.com; object-src 'self'; media-src 'self' *.amazonaws.com *.go-vip.co api.trueventures.com *.trueventures.com; manifest-src 'self'; script-src 'self' cdn.polyfill.io *.google-analytics.com connect.facebook.net static.ads-twitter.com analytics.twitter.com *.list-manage.com slideshare.net *.slideshare.net player.simplecast.com 'sha256-1gIG1EI7ABKBfq8rVwk7j2MeEOIlut5+TbLxyAnCYTA=' 'sha256-yJhjrwvbmp4dYj8Lp/KdgVxUwBtFH7I61f0yhQyiR54=' 'sha256-XaE2QzXZd0ekkC2m+W7Pn5HiN/62ckRv8XjIjzsIU64=' 'sha256-gtKFj0yNetpIDkA36Pz+kl6/tx8y2XsLtD/uFt4lUYk=' 'sha256-+Fc3pp6OsBLpjbY72/2VQSzXH8wv4TSnVBDPRlMv8mo=' 'sha256-U/KzxYK7zgRoDtwIL+hYqlvZULWmHvxcG0b+K73wyss=' 'sha256-p5hSz8c4/+mempwXpdDMKirPerFxlAwyC5ORHClPyiU='; style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com player.simplecast.com; frame-src vimeo.com *.vimeo.com youtube.com *.youtube.com slideshare.net *.slideshare.net player.simplecast.com 1
report-uri https://www.yelp.com/csp_block?id=bd05f857c3c40855&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609215268; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
frame-ancestors https://eu1-ifwe.3dexperience.3ds.com https://eu1-215dsi0708-ifwe.3dexperience.3ds.com http://sw.local:81 http://sw2.local:81 https://solidworks.com https://www-dev.itvpc.solidworks.com https://www-qal.itvpc.solidworks.com https://www-ppd.itvpc.solidworks.com https://www-contrib.itvpc.solidworks.com http://edrawings.sw6.local:81 https://www.w3schools.com http://edrawings.solidworks.com edrawings.solidworks.com www.weather.com.org https://www-edrawings-ppd.itvpc.solidworks.com https://www-edrawings-contrib-ppd.itvpc.solidworks.com https://www-edrawings-prd.itvpc.solidworks.com https://www.edrawingsviewer.com https://www-contrib-edrawings.itvpc.solidworks.com https://www-edrawings-qal.itvpc.solidworks.com 1
default-src 'self'; block-all-mixed-content; connect-src 'self' www.google-analytics.com https://api.recurly.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploadsintercomusercontent.coms-websocket-b.intercom.io https://cdn.jsdelivr.net; font-src 'self' fonts.gstatic.com https://js.intercomcdn.com data:; frame-src api.recurly.com https://www.google.com/; img-src data: *; media-src https://js.intercomcdn.com; script-src 'self' www.google-analytics.com js.recurly.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://unpkg.com/swagger-ui-dist@3.29.0/swagger-ui-bundle.js https://cdn.jsdelivr.net/npm/d3@3.5.17/d3.min.js https://cdn.jsdelivr.net/npm/nvd3@1.8.6/build/nv.d3.min.js https://www.google.com/recaptcha/api.js https://www.gstatic.com 'unsafe-inline' 'sha256-lWqs1p92yS+Ym1QyqatK6geFegJdlpxgUeFU6t72SGw=' 'sha256-1gcjkQmF3vDBHqTK/GCaJKMg/UjNNomsjObGfUSd8GU=' 'sha256-DcokebrOSmWciSX1qQC5mQVZVTuYP7rxG1GdCn4I4Ls='; style-src 'self' fonts.googleapis.com https://unpkg.com/swagger-ui-dist@3.29.0/swagger-ui.css https://cdn.jsdelivr.net/npm/nvd3@1.8.6/build/nv.d3.min.css https://api.recurly.com 'unsafe-inline' 1
frame-ancestors 'self' https://login.collector.se/ https://secure.collector.se/ 1
report-uri https://www.yelp.com/csp_block?id=ead3d8bcabec8e92&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609219139; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
frame-ancestors 'self' *.departement06.fr 1
default-src 'self' 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline' *.bing.com; script-src 'self' 'unsafe-inline'  'unsafe-eval' hub.firestonecompleteautocare.com *.doubleclick.net *.adobedtm.com *.google-analytics.com *.everestjs.net *.pinimg.com *.hotjar.com *.bing.com *.googleadservices.com *.xg4ken.com *.facebook.net *.doubleclick.com *.googletagmanager.com *.akamaihd.net *.marchex.io *.everesttech.net *.iperceptions.com *.powerreviews.com *.iovation.com *.iesnare.com *.googleapis.com *.virtualearth.net *.recaptcha.net *.gstatic.com; img-src * data: blob: ; connect-src *; frame-src *; font-src 'self' data: 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob: filesystem:;  report-uri https://67b7f90cf630d6304a07b795f01b5de9.report-uri.com/r/d/csp/enforce; 1
default-src 'self' 'unsafe-inline' https://super-monitoring.com https://cdnjs.cloudflare.com https://www.facebook.com https://connect.facebook.net https://*.twitter.com https://*.ads-twitter.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://*.doubleclick.net https://*.onboardflow.com https://*.tawk.to wss://*.tawk.to https://cdn.jsdelivr.net https://api-js.mixpanel.com https://*.mxpnl.com https://*.hotjar.com;font-src 'self' https://super-monitoring.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com https://*.tawk.to;img-src 'self' https://super-monitoring.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com https://www.google.pl https://www.facebook.com https://connect.facebook.net https://*.twitter.com https://*.capterra.com https://*.onboardflow.com https://*.tawk.to https://cdn.jsdelivr.net https://tawk.link data:;style-src 'self' 'unsafe-inline' https://super-monitoring.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.facebook.com https://connect.facebook.net https://*.onboardflow.com https://*.tawk.to https://cdn.jsdelivr.net;frame-src * 1
default-src 'self';connect-src 'self' https://widgets.coinmarketcap.com; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://bam.eu01.nr-data.net https://files.coinmarketcap.com https://ajax.googleapis.com https://js-agent.newrelic.com https://s3.amazonaws.com https://www.google.com https://www.gstatic.com https://stackpath.bootstrapcdn.com https://use.fontawesome.com https://www.googletagmanager.com https://www.google-analytics.com; img-src 'self' data: https://s3.amazonaws.com https://cdn.freshdesk.com https://s2.coinmarketcap.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://use.fontawesome.com https://fonts.googleapis.com https://s3.amazonaws.com; font-src 'self' https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://fonts.gstatic.com; frame-src 'self' https://www.google.com https://youtube.com https://www.youtube.com https://files.coinmarketcap.com https://vitaehelp.freshdesk.com https://www.google-analytics.com https://www.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://bam.eu01.nr-data.net https://files.coinmarketcap.com https://ajax.googleapis.com https://js-agent.newrelic.com https://s3.amazonaws.com https://www.google.com https://www.gstatic.com https://stackpath.bootstrapcdn.com https://use.fontawesome.com https://www.googletagmanager.com https://www.google-analytics.com 1
default-src * data: blob:;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com https://static.hotjar.com;frame-src 'self' https://*.mhcache.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://vars.hotjar.com https://*.facebook.com https://*.googleapis.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://www.zenaps.com;script-src *.myheritage.pl https://www.myheritage.pl  'unsafe-inline' blob: data: 'self' https://*.myheritage.com https://*.mhcache.com https://cdn.trackjs.com https://tpc.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.googletagmanager.com https://connect.facebook.net https://bat.bing.com https://www.googleadservices.com https://*.google-analytics.com https://www.gstatic.com https://*.googleapis.com https://js-agent.newrelic.com https://*.nr-data.net https://*.mk-sense.com https://code.jquery.com https://*.hotjar.com https://www.dwin1.com https://www.zenaps.com https://ad.zanox.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://tagmanager.google.com https://optanon.blob.core.windows.net;connect-src data: 'self' https://*.myheritage.com https://*.mhcache.com https://www.google-analytics.com https://adservice.google.com https://*.nr-data.net https://sentry.io https://capture.trackjs.com https://*.bing.com https://*.facebook.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io:* https://*.doubleclick.net https://*.mk-sense.com https://privacyportal-eu.onetrust.com *.myheritage.pl;media-src 'self' https://*.myheritage.com https://*.mhcache.com 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://hostux.social; img-src 'self' https: data: blob: https://hostux.social; style-src 'self' https://hostux.social 'nonce-6fcJOQ4C7iuWBY5W4KHiww=='; media-src 'self' https: data: https://hostux.social; frame-src 'self' https:; manifest-src 'self' https://hostux.social; connect-src 'self' data: blob: https://hostux.social https://hostux.social wss://hostux.social; script-src 'self' https://hostux.social; child-src 'self' blob: https://hostux.social; worker-src 'self' blob: https://hostux.social 1
default-src https: http: blob: javascript: data: 'unsafe-inline' 'unsafe-eval' 'self'; 1
default-src 'self' https: 'unsafe-inline';base-uri 'self';block-all-mixed-content;connect-src 'self' https: wss://*.hotjar.com/;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' https: data:;object-src 'none';script-src 'self' https: 'unsafe-inline' 'unsafe-eval';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 1
default-src 'self' blob:; connect-src 'self' https://*.vcm.com https://sessions.bugsnag.com https://www.bugherd.com https://sockjs.pusher.com wss://ws.pusherapp.com https://fonts.googleapis.com https://vcm.onlineprospectus.net https://www.juicer.io https://smetrics.vcm.com  https://dpm.demdex.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vcm.onlineprospectus.net https://assets.juicer.io https://cdnjs.cloudflare.com https://www.youtube.com https://apps.usw2.pure.cloud https://www.bugherd.com https://use.typekit.net https://dinkytown.net https://code.jquery.com  https://assets.adobedtm.com https://s.ytimg.com https://d2wy8f7a9ursnm.cloudfront.net https://d2iiunr5ws5ch1.cloudfront.net; style-src-elem 'self' 'unsafe-inline' https://d2iiunr5ws5ch1.cloudfront.net https://assets.juicer.io https://vcm.onlineprospectus.net https://fonts.googleapis.com https://stackpath.bootstrapcdn.com https://use.typekit.net https://p.typekit.net https://www.dinkytown.net;  style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://use.typekit.net https://dinkytown.net; img-src 'self' data: https://d2iiunr5ws5ch1.cloudfront.net https://dpm.demdex.net https://media-exp1.licdn.com https://*.id.opendns.com https://pbs.twimg.com https://assets.juicer.io https://smetrics.vcm.com https://cm.everesttech.net https://p.typekit.net; font-src 'self' https://www.bugherd.com  https://d2iiunr5ws5ch1.cloudfront.net https://fonts.gstatic.com https://static.juicer.io https://stackpath.bootstrapcdn.com data://* use.typekit.net; worker-src blob: ; frame-src https://vcm.demdex.net https://www.youtube.com https://vcm-mkt-stage1-m.adobe-campaign.com https://t.mail.vcm.com 1
frame-ancestors https://www.constructionspecifier.com/ https://kenilworth.com/ https://www.csiresources.org 1
default-src * 'unsafe-eval' 'unsafe-inline' blob: data: ; frame-ancestors 'self' forums.flyfisherman.com; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.kerio.com; img-src 'self' data:; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google-analytics.com *.googletagmanager.com https://static.addtoany.com https://graph.facebook.com; style-src 'self' 'unsafe-inline' ; 1
frame-ancestors https://eu1-ifwe.3dexperience.3ds.com https://eu1-215dsi0708-ifwe.3dexperience.3ds.com http://sw.local:81 http://sw2.local:81 http://draftsight.sw2.local:81 https://solidworks.com http://draftsight.ms.local:81 https://www-dev.itvpc.solidworks.com https://www-qal.itvpc.solidworks.com https://www-ppd.itvpc.solidworks.com https://www-contrib.itvpc.solidworks.com http://draftsight.sw6.local:81 https://www-draftsight-qal.itvpc.solidworks.com https://www-draftsight-ppd.itvpc.solidworks.com https://www-draftsight-contrib-ppd.itvpc.solidworks.com https://www-draftsight-prd.itvpc.solidworks.com https://www-contrib-draftsight.itvpc.solidworks.com https://www.draftsight.com draftsight.sw6.local https://www.3ds.com 1
default-src 'self'; connect-src 'self' www.google-analytics.com https://*.addthis.com; frame-src 'self' *.eurolandir.com *.euroland.com www.youtube.com https://*.addthis.com www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: use.fontawesome.com www.google-analytics.com https://addthisevent.com https://*.addthisevent.com https://*.addevent.com www.gstatic.com www.google.com graph.facebook.com www.linkedin.com https://*.addthis.com https://*.addthisedge.com; font-src 'self' https://fast.fonts.net https://use.fontawesome.com data:; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://fast.fonts.net; img-src 'self' https://*.cdninstagram.com external.xx.fbcdn.net http://pbs.twimg.com media.licdn.com i.ytimg.com scontent.xx.fbcdn.net image-store.slidesharecdn.com www.google-analytics.com https://addevent.com https://*.addevent.com data:; 1
default-src https: wss:; connect-src 'self' https: wss:; script-src https: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' *.betlive.com; object-src 'self'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri /csp-report 1
default-src *; img-src * 'self' data: https:; font-src * data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' * 1
frame-ancestors *.kuaidihelp.com; 1
default-src 'self' *.basc.org.uk; connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.google-analytics.com *.google.com *.twitter.com https://*.gunstar.co.uk https://*.vimeo.com https://scd.blazefuture.wpengine.com https://www.bushwear.co.uk/ https://yoast.com https://www.googletagmanager.com/ https://www.googleadservices.com https://stats.g.doubleclick.net https://api.mapbox.com/ https://*.tiles.mapbox.com https://my.yoast.com https://events.mapbox.com/; font-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.basc.org.uk *.bootstrapcdn.com *.google-analytics.com *.google.com *.gstatic.com *.gunstar.co.uk *.paypalobjects.com *.twitter.com *.wpmudev.org *.youtube.com data https://use.fontawesome.com; form-action 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.google-analytics.com *.google.com *.twitter.com https://basc.us13.list-manage.com https://www.bushwear.co.uk/ https://www.facebook.com https://www.paypal.com https://www.sional.co.uk; frame-ancestors 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.twitter.com *.youtube.com https://www.googletagmanager.com/ https://www.googleadservices.com; frame-src 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.cloudfront.net *.google-analytics.com *.google.com *.gunstar.co.uk *.twitter.com *.wpmudev.org *.youtube.com https://*.vimeo.com https://staticxx.facebook.com https://www.bushwear.co.uk/ https://www.facebook.com http://www.gunstar.co.uk https://www.media.volvocars.com https://www.sional.co.uk https://twitter.com/ https://www.buzzsprout.com https://www.googletagmanager.com/ https://www.googleadservices.com https://s3.amazonaws.com/ https://www.canva.com/; img-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: *.basc.org.uk *.facebook.com *.google-analytics.com *.google.com *.googleapis.com/ *.gstatic.com *.gunstar.co.uk *.openstreetmap.org *.paypalobjects.com *.twimg.com *.twitter.com *.wpmudev.org *.youtube.com *.ytimg.com data: https://badges.instagram.com https://s.w.org https://stats.g.doubleclick.net https://basc.org.uk https://secure.gravatar.com https://api.mapbox.com/; media-src https://www.google.co.uk/ 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.google-analytics.com *.google.com *.twitter.com *.wpmudev.org *.youtube.com https://*.vimeo.com https://www.sional.co.uk; object-src 'self'  'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.cloudfront.net *.google-analytics.com *.google.com *.gunstar.co.uk *.twitter.com *.wpmudev.org *.youtube.com https://*.vimeo.com https://www.bushwear.co.uk/ https://www.sional.co.uk; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.angularjs.org/ https://www.googletagmanager.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net *.basc.org.uk *.cloudfront.net *.facebook.net *.google-analytics.com *.google.com *.gstatic.com *.jquery.com *.twitter.com *.wpmudev.org *.youtube.com ajax.googleapis.com apis.google.com maps.googleapis.com https://*.gunstar.co.uk https://*.vimeo.com https://basc.us13.list-manage.com https://cdn.syndication.twimg.com https://cdnjs.cloudflare.com https://onesignal.com https://s3.amazonaws.com https://scd.blazefuture.wpengine.com/ https://secure.comodo.com https://sucuri.net https://www.bushwear.co.uk/ https://www.googleapis.com https://www.jqueryscript.net https://www.moonmodule.com https://www.paypal.com https://www.sional.co.uk https://cdn.jsdelivr.net https://www.googletagmanager.com https://basc.org.uk https://www.buzzsprout.com/ https://api.mapbox.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.basc.org.uk *.bootstrapcdn.com *.cloudfront.net *.google.com *.googleapis.com *.gunstar.co.uk *.paypalobjects.com *.twimg.com/ *.twitter.com *.wpmudev.org *.youtube.com https://*.vimeo.com https://cdn-images.mailchimp.com https://sucuri.net https://www.sional.co.uk https://use.fontawesome.com https://api.mapbox.com https://api.tiles.mapbox.com https://unpkg.com; child-src 'self' blob: ; worker-src blob: https://basc.org.uk https://*.basc.org.uk; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: mediastream: blob: https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.googleadservices.com https://www.google.com www.googleadservices.com www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com www.googleadservices.com googleads.g.doubleclick.net www.google.com https://pagead2.googlesyndication.com https://vars.hotjar.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' http: https: data: mediastream: blob: filesystem: https://tagmanager.google.com https://fonts.googleapis.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' http: https: data: mediastream: blob: filesystem: https://ssl.gstatic.com https://www.gstatic.com  https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com www.google.com https://www.google.com; connect-src * https://www.google-analytics.com; font-src * https://fonts.gstatic.com data:; frame-src 'unsafe-inline' 'unsafe-eval' https://datastudio.google.com datastudio.google.com https://bid.g.doubleclick.net bid.g.doubleclick.net fls.doubleclick.net https://10006851.fls.doubleclick.net https://www.youtube.com youtube.com https://player.vimeo.com  https://vimeo.com https://vars.hotjar.com https://go.pardot.com https://info.cardinalpath.com 1
default-src blob: https: http: wss: accopshysecureclient: data: 'unsafe-inline' 'unsafe-eval' 1
font-src 'self' data: www-thedubaiaquarium-com.azureedge.net cdn.thedubaiaquarium.com; default-src 'self' www-thedubaiaquarium-com.azureedge.net cdn.thedubaiaquarium.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' http: https: ajax.googleapis.com googletagmanager.com www-thedubaiaquarium-com.azureedge.net cdn.thedubaiaquarium.com; connect-src 'self' 'unsafe-inline' https: aucollector.tealeaf.ibmcloud.com www-thedubaiaquarium-com.azureedge.net cdn.thedubaiaquarium.com; img-src 'self' data: 'unsafe-inline' http: https: ergsnappstaging.emaar.ae www-thedubaiaquarium-com.azureedge.net cdn.thedubaiaquarium.com; style-src 'self' 'unsafe-inline' https: fonts.googleapis.com www-thedubaiaquarium-com.azureedge.net cdn.thedubaiaquarium.com; frame-src * www-thedubaiaquarium-com.azureedge.net cdn.thedubaiaquarium.com; 1
default-src 'none'; connect-src wss://webminer.moneroocean.stream:443/ https://api.moneroocean.stream/; font-src 'self' https://fonts.gstatic.com/; img-src 'self' https://www.google-analytics.com/ https://public.tableau.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com/ https://cdnjs.cloudflare.com/ https://ajax.googleapis.com/ https://public.tableau.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; child-src 'self' https://public.tableau.com/; frame-ancestors 'none'; base-uri 'none'; form-action 'none' 1
frame-ancestors 'self' *.hexia.io *.zigtools.nl 1
upgrade-insecure-requests; frame-ancestors 'self' *.magenta.at *.t-mobile.at https://www.youtube.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.advancedfundsolutions.com *.atlcap.com *.calvert.com *.custombeta.com *.eatonvance.at *.eatonvance.ch *.eatonvance.co.kr *.eatonvance.co.uk *.eatonvance.com *.eatonvance.com.au *.eatonvance.de *.eatonvance.dk *.eatonvance.fi *.eatonvance.ie *.eatonvance.jp *.eatonvance.nl *.eatonvance.no *.eatonvance.se *.eatonvance.sg *.eatonvancecounsel.com *.eatonvancerealestate.com *.evmanagement.com *.nextshares.com *.uscharitablegifttrust.org *.uslegacyincometrusts.org *.evwateroak.com http://api.company-target.com http://assets.adobedtm.com http://code.jquery.com http://corporate.eatonvance.com http://dev-drwebsite http://dpm.demdex.net http://eatonvance.d1.sc.omtrdc.net http://eatonvanceinvestment.tt.omtrdc.net http://ejohn.org http://fast.eatonvance.demdex.net *.doubleclick.net http://fluidproject.org http://getbootstrap.com http://global.eatonvance.com http://javascript.nwbox.com http://scripts.demandbase.com http://seekingalpha.com http://static.knowledgevision.com http://tags.bluekai.com http://weblogs.java.net http://www.googleadservices.com http://www.joostdevalk.nl http://www.kryogenix.org http://www.math.ubc.ca http://www.w3.org http://www.xbrl.org http://xbrl.fasb.org http://xbrl.org http://xbrl.sec.gov https://api.company-target.com https://b.6sc.co https://bat.bing.com https://bid.g.doubleclick.net https://c.6sc.co https://cdn.polyfill.io https://cdn.polyfill.io/v2/polyfill.js https://cdnjs.cloudflare.com https://cloud.typography.com https://cm.everesttech.net https://corporate.eatonvance.com https://fonts.googleapis.com https://fonts.gstatic.com https://googleads.g.doubleclick.net https://insight.adsrvr.org https://j.6sc.co https://js.adsrvr.org https://match.adsrvr.org https://match.prod.bidr.io https://mwc-cdn.morningstar.com https://onlinexperiences.com https://p.adsymptotic.com https://platform.asset.tv https://players.brightcove.net https://px.ads.linkedin.com https://scripts.demandbase.com https://secure.adnxs.com https://segments.company-target.com https://snap.licdn.com https://stats.g.doubleclick.net https://tag.demandbase.com https://vds.issgovernance.com https://www.giftcalcs.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://www.riddle.com https://xbrl.sec.gov https://pi.pardot.com https://marketing.evwateroak.com https://vjs.zencdn.net *.brightcove.com https://eatonvance.demdex.net https://youtube.com https://servedby.flashtalking.com https://proxy-bedford.eatonvance.com:8443 https://www.us-uat-api.morningstar.com/EC-config https://brightcove.hs.llnwd.net https://js-agent.newrelic.com https://www.us-uat-api.morningstar.com https://bam.nr-data.net https://mwc-cdn-uat.morningstar.com https://ajax.googleapis.com https://quotespeed.morningstar.com https://www.linkedin.com https://platform.twitter.com https://www.dianomi.com https://static.ads-twitter.com https://analytics.twitter.com https://t.co https://hello.myfonts.net https://t.sf14g.com https://tracking.leadlander.com https://id.rlcdn.com https://www.us-api.morningstar.com blob: data: 1
default-src 'self' *.patriabank.ro *.youtube.com *.youtube-nocookie.com *.youtube.ro; frame-src *.patriabank.ro *.doubleclick.net *.youtube.com *.youtube-nocookie.com *.vimeo.com vimeo.com *.patriabank.ro *.qds.ninja *.hotjar.com *.hotjar.io *.google.com *.youtube-nocookie.com *.facebook.com *.adnxs.com *.mookie1.com; worker-src *.patriabank.ro *.doubleclick.net *.youtube.com *.youtube-nocookie.com *.vimeo.com vimeo.com *.patriabank.ro *.qds.ninja *.hotjar.com *.hotjar.io *.google.com *.youtube-nocookie.com *.facebook.com; font-src 'self' data: *.patriabank.ro fonts.googleapis.com fonts.gstatic.com static.hotjar.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.patriabank.ro www.googletagmanager.com www.google-analytics.com ajax.googleapis.com maps.googleapis.com www.googleadservices.com connect.facebook.net *.inspectlet.com *.doubleclick.net tagmanager.google.com cdnjs.cloudflare.com *.youtube.com *.youtube-nocookie.com *.vimeo.com vimeo.com *.ytimg.com www.google.com www.google.ro *.qds.ninja d2wy8f7a9ursnm.cloudfront.net *.hotjar.com *.hotjar.io *.gstatic.com *.google.com *.adnxs.com *.mookie1.com; connect-src 'self' *.inspectlet.com *.hotjar.com *.hotjar.io *.doubleclick.net *.mookie1.com; img-src 'self' data: *.patriabank.ro *.google-analytics.com *.gstatic.com *.googleapis.com *.doubleclick.net *.facebook.com *.google.com *.google.ro *.youtube.com *.youtube-nocookie.com *.youtube.ro *.ggpht.com *.inspectlet.com tagmanager.google.com www.googletagmanager.com *.adnxs.com *.mookie1.com *.ytimg.com; style-src 'self' 'unsafe-inline' *.patriabank.ro fonts.googleapis.com tagmanager.google.com www.googletagmanager.com; 1
frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com pwna4hope.org; report-uri http://www.nativepartnership.org/site/XFrameViolation 1
base-uri 'none'; script-src 'self' 'nonce-ce63599815c4467d8971d42e21bb2b5e' https://www.google-analytics.com/ https://maps.googleapis.com/ https://static.getclicky.com/ https://in.getclicky.com/ https://cdn.carbonads.com/ http://srv.carbonads.net/ https://adn.fusionads.net/ https://m.servedby-buysellads.com/ https://srv.buysellads.com/ https://platform.twitter.com/ https://static.ads-twitter.com/ https://analytics.twitter.com/ https://codepen.io/ https://assets.codepen.io/ https://cdn.syndication.twimg.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://platform.twitter.com/ https://ton.twimg.com/; font-src 'self' https://fonts.gstatic.com/; child-src 'self' https://www.youtube.com/ https://speakerdeck.com/ https://player.vimeo.com/ https://syndication.twitter.com/ https://platform.twitter.com/ https://codepen.io/ https://glitch.com/embed/; connect-src 'self' https://www.gravatar.com/ https://i.imgur.com/ https://api.github.com/ https://maps.googleapis.com/ https://www.google-analytics.com/; img-src 'self' http://assets.servedby-buysellads.com/ http://abs.twimg.com/ http://platform.twitter.com/ http://t.co/i/ https: data:; upgrade-insecure-requests; report-uri /api/csp/report; report-to /api/csp/report 1
frame-ancestors https://*.udacity.com 1
frame-ancestors 'self' http://www.isladejuegos.es 1
block-all-mixed-content; 'self' www.google-analytics.com 1
frame-ancestors 'self' https://*.blueconic.net 1
script-src *.ldscdn.org *.lds.org *.churchofjesuschrist.org *.googleapis.com *.gstatic.com *.facebook.net *.justserve.org *.servir.org *.facebook.com *.youtube.com *.ytimg.com cdnjs.cloudflare.com data: placehold.it placeholdit.imgix.net 'self' ws://localhost:3000 ws://10.0.2.2:3000 ws://localhost:8080 assets.adobedtm.com dpm.demdex.net cdn.tt.omtrdc.net ldschurch.tt.omtrdc.net *.tintup.com *.hypermoarks.com *.cloudfront.net players.brightcove.net vjs.zencdn.net edge.api.brightcove.com blob: * metrics.brightcove.com consent.truste.com consent-pref.truste.com 'unsafe-inline' 'unsafe-eval'; style-src *.fonts.net *.opendns.com *.googleapis.com *.justserve.org *.servir.org *.lds.org *.ldscdn.org *.churchofjesuschrist.org 'self' 'unsafe-inline' 1
default-src https: wss: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://*.eon-hungaria.com 1
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; connect-src https: wss:; font-src https: data:; media-src https: blob: data:; worker-src https: blob:; object-src 'none'; 1
default-src https: ws: wss: v2.zopim.com widget-mediator.zopim.com ekr.zdassets.com v2assets.zopim.io data: blob: 'unsafe-inline' 'unsafe-eval' 1
base-uri 'self'; block-all-mixed-content; child-src 'nonce-14cad56e-8564-46f5-a175-70a5e2f9cb54' 'self'; connect-src 'self' https://www.google-analytics.com wss://neotracker.io https://neotracker.io/rpc; default-src 'self'; font-src 'self' https://fonts.gstatic.com/; form-action 'self'; frame-ancestors 'none'; frame-src *; img-src 'self' data: https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'nonce-14cad56e-8564-46f5-a175-70a5e2f9cb54' 'self' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; upgrade-insecure-requests; worker-src 'self' 1
default-src 'self' ;  style-src https://fonts.googleapis.com/* https://fonts.gstatic.com/* https://*.stefanini.com  'unsafe-inline'  https://*; script-src 'unsafe-inline'  https://www.googletagmanager.com https://*; style-src-elem 'unsafe-inline'  https://* ; font-src 'unsafe-inline'  https://*; frame-src https://consentcdn.cookiebot.com https://www.google.com https://*.stefanini.com https://*; img-src https://www.googletagmanager.com data: https://*; connect-src https://*.rdstation.com.br/* https://www.dataunion.com.br/* wss://*.hotjar.com/api/v2/client/ws https://*; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.youtube.com *.ytimg.com *.facebook.com *.twitter.com *.twimg.com *.instagram.com *.cdninstagram.com data: blob: filesystem: https://maxcdn.bootstrapcdn.com/ https://s7.addthis.com/ https://indd.adobe.com/ https://www.youtube.com; 1
script-src 'self' 'unsafe-inline'  'unsafe-eval' mc.yandex.ru *.livetex.ru *.livetex.me finevision.ru maps.googleapis.com my.ppfinsurance.ru newmy.ppfinsurance.ru; object-src 'self' 1
default-src 'self'; block-all-mixed-content ; base-uri 'self'; object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googleadservices.com https://js.adsrvr.org https://cdnjs.cloudflare.com https://sdk.passle.net https://s.ytimg.com https://tagmanager.google.com https://www.google.com https://www.youtube.com https://st.getsitecontrol.com https://script.hotjar.com https://widgets.getsitecontrol.com https://static.hotjar.com https://connect.facebook.net https://www.googletagmanager.com https://dl.episerver.net https://maps.googleapis.com/ https://analytics.clickdimensions.com https://polyfill.io https://optimize.google.com https://www.google-analytics.com https://az416426.vo.msecnd.net https://az124611.vo.msecnd.net/ https://docs.grantthornton.ca/ https://www.gstatic.com; img-src 'self' data: https://googleads.g.doubleclick.net https://pixel.mediaiqdigital.com https://secure.adnxs.com https://insight.adsrvr.org https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.vg https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://ssl.gstatic.com https://syndication.twitter.com https://optimize.google.com https://www.google.com https://www.facebook.com https://platform.twitter.com https://pbs.twimg.com https://images.passle.net https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com https://img.youtube.com https://stats.g.doubleclick.net https://docs.grantthornton.ca/; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://optimize.google.com https://code.jquery.com https://docs.grantthornton.ca https://maxcdn.bootstrapcdn.com https://platform.twitter.com https://cdnjs.cloudflare.com https://sdk.passle.net https://fonts.googleapis.com https://clientapi.passle.net https://az124611.vo.msecnd.net/; font-src 'self' data: https://fonts.gstatic.com https://script.hotjar.com https://cdnjs.cloudflare.com https://docs.grantthornton.ca https://maxcdn.bootstrapcdn.com; frame-src https://www.facebook.com/ https://insight.adsrvr.org https://platform.twitter.com https://vars.hotjar.com https://www.passle.net https://www.youtube.com https://optimize.google.com https://w.soundcloud.com https://player.vimeo.com https://www.gstatic.com https://cdn.optimizely.com https://www.google.com; connect-src 'self' https://dc.services.visualstudio.com https://www.passle.net https://clientapi.passle.net https://az416426.vo.msecnd.net https://docs.grantthornton.ca https://www.google-analytics.com https://extreme-ip-lookup.com https://www.facebook.com https://stats.g.doubleclick.net https://in.hotjar.com https://vc.hotjar.io wss://ws4.hotjar.com/ wss://ws2.hotjar.com wss://ws5.hotjar.com wss://ws1.hotjar.com; 1
default-src 'self' 'unsafe-inline' *.googleapis.com *.namestudio.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.googleads.g.doubleclick.net *.google.com *.youtube.com https://*.youtube-nocookie.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com *.google.co.in *.mathtag.com *.onetrust.com *.verisign.com *.ytimg.com;img-src * 'self' data: https:; 1
default-src 'none'; font-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'none' 1
default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://api.amplitude.com https://webvisor.com https://top-fwz1.mail.ru https://sentry.io https://api.coinmarketcap.com https://mc.yandex.ru https://*.zdassets.com https://kickico.zendesk.com https://widget-mediator.zopim.com wss://widget-mediator.zopim.com wss://notify.kickex.com wss://gate.kickex.com/ws https://gate.kickex.com https://www.facebook.com https://www.tradingview.com blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://yastatic.net https://tagmanager.google.com https://cdn.amplitude.com https://vk.com https://top-fwz1.mail.ru https://optimize.google.com https://connect.facebook.net https://*.google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru https://cdn.jsdelivr.net https://static.zdassets.com https://widget-mediator.zopim.com blob:; img-src 'self' https://* data: blob:; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://optimize.google.com https://fonts.googleapis.com https://assets.zendesk.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://themes.googleusercontent.com https://cdn.jsdelivr.net; frame-src https://optimize.google.com https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://mc.yandex.ru https://*.kickex.com https://kickex.com; object-src 'none' 1
default-src 'self' data: *.issuu.com *.quantserve.com 'unsafe-inline' 'unsafe-eval'; script-src 'self' connect.facebook.net *.hotjar.com www.gstatic.com www.google.com *.buybox.click *.doubleclick.net *.issuu.com data: ssl.google-analytics.com developers.google.com *.googleapis.com *.cloudfront.net opineo.pl  www.opineo.pl *.edrone.me browser-update.org js-agent.newrelic.com *.google-analytics.com www.googleadservices.com bam.nr-data.net *.nr-data.net ssl.ceneo.pl *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; frame-src 'self' www.facebook.com *.hotjar.com data: *.google.pl e.issuu.com www.opineo.pl www.youtube.com ssl.ceneo.pl www.googleadservices.com googleads.g.doubleclick.net www.google.com www.google.pl 'unsafe-inline' 'unsafe-eval'; object-src 'self' data: e.issuu.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' stats.g.doubleclick.net www.google-analytics.com *.eu01.nr-data.net *.hotjar.com *.hotjar.io wss://ws2.hotjar.com wss://*.hotjar.com  data: *.buybox.click *.issuu.com *.edrone.me 'unsafe-inline' 'unsafe-eval'; style-src 'self' data: opineo.pl www.opineo.pl fonts.googleapis.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: *.google.pl www.facebook.com www.googletagmanager.com *.doubleclick.net ssl.google-analytics.com *.google.com *.isu.pub *.googleapis.com *.gstatic.com *.opineo.pl *.google-analytics.com http://*.wydawnictworebel.pl http://wydawnictwo.rebel.pl ssl.ceneo.pl http://analytics.ceneo.pl https://d3vhsxl1pwzf0p.cloudfront.net https://dgk28ckagqims.cloudfront.net https://d3bo67muzbfgtl.cloudfront.net 1
img-src * data: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://yastatic.net/ https://*.webvisor.com/ https://*.yandex.ru/  https://*.yandex.com/ https://*.tile.openstreetmap.org/ https://*.adroll.com/  https://*.gartner.com/ https://*.consensu.org/  https://*.google.com/ https://google.com/  https://www.youtube.com/ https://www.gstatic.com/ https://*.facebook.net/ https://*.gstatic.com/ https://*.googleapis.com/  https://www.htbridge.com/ https://portal.htbridge.com/ https://portal.immuniweb.com/ https://www.google-analytics.com/ https://certify-js.alexametrics.com/ https://certify.alexametrics.com/ https://stats.g.doubleclick.net/ https://snap.licdn.com/ https://*.facebook.com/ https://*.linkedin.com/ https://secure.adnxs.com/ https://*.sharethis.com/ https://*.addthis.com/ https://*.addthisedge.com/; block-all-mixed-content; report-uri https://www.immuniweb.com/csp/ 1
script-src 'self' 'sha256-VWY8CMqPn65CVz0iNM9Dr0YiOBkr5gjQXk3Cwp57D6E=' 'sha256-LR5XzSRtZYBSoocc2iufIRqZnGkVF56pgpCTA56nrFg=' 'sha256-5gyJHECkm/JgYwitsBz3dGo320nNHR/NB+SWKAgJs2I='   *.googleapis.com *.google-analytics.com;  object-src 'self'; frame-ancestors 'self'; 1
frame-ancestors https://ecommercdev.tatasteel.online  https://ecommerctst.tatasteel.online  https://ecmc01qa.tatasteel.online  https://ecmc01dev.tatasteel.online https://www.tatasteeleurope.com https://www.tatasteel.online https://ecmc01.tatasteel.online https://ecmc03-p.tatasteel.online https://ecmc03-d.tatasteel.online https://ecmc03-acc.tatasteel.online/ https://ecmc03-t.tatasteel.online/ https://tsedev.prod.acquia-sites.com https://tsestg.prod.acquia-sites.com https://www.beta-tatasteeleurope.com https://cpws01-d.tatasteel.online https://dev.tatasteeleurope.com preprod.tatasteeleurope.com test.tatasteeleurope.com ecmc03-pp.tatasteel.online; report-uri /ts/report-csp-violation 1
base-uri 'none'; object-src 'none'; frame-ancestors 'none'; script-src 'nonce-YzM1YmQ2ODYtMjYzYy00ZTkyLThjZjItYTdlNjAwMjgyMjU0' 'self' 'strict-dynamic' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; connect-src 'self' blob: https://www.googleapis.com https://*.auth0.com https://*.appspot.com https://*.firebaseio.com https://*.firebaseapp.com https://*.sentry.io https://*.nbatopshot.com https://us-central1-cheeze-wizards.cloudfunctions.net https://*.meetdapper.com https://*.nba.dapperlabs.com https://cdn.optimizely.com https://*.launchdarkly.com https://api-js.mixpanel.com https://api.segment.io https://us-central1-topshot-marketplace.cloudfunctions.net https://us-east1-topshot-marketplace.cloudfunctions.net https://*.contentful.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://intercom.io wss://*.intercom.io https://*.intercom.io https://*.intercomcdn.com https://*.intercomusercontent.com https://docs.google.com https://cdn.onesignal.com https://onesignal.com https://stats.g.doubleclick.net https://embed.twitch.tv https://platform.twitter.com http://www.instagram.com; media-src * blob:; img-src * blob: data:; upgrade-insecure-requests 1
frame-ancestors 'self' bullis.org bullis.finalsite.com bullis.redesign.finalsite.com; 1
frame-ancestors 'self' cse.google.com; 1
default-src 'self' https: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://*.hubspot.com https://*.hubspot.net https://*.paymongocdn.com https://cdn.heapanalytics.com https://heapanalytics.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://js.hs-scripts.com https://*.paymongocorp.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsadspixel.net https://js.hscollectedforms.net https://js.hsforms.net https://forms.hsforms.com https://connect.facebook.net https://*.g.doubleclick.net https://code.jquery.com https://public.tableau.com https://snap.licdn.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://*.hubspot.net https://fonts.googleapis.com; img-src 'self' data: https://*.hubspotusercontent10.net https://*.paymongocdn.com https://heapanalytics.com https://track.hubspot.com https://www.facebook.com https://www.google-analytics.com https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://*.paymongocorp.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-9.com https://*.g.doubleclick.net https://www.google-analytics.com https://*.hubspot.net https://forms.hsforms.com https://*.hubspot.com https://public.tableau.com https://www.googletagmanager.com; media-src 'self' https://js.intercomcdn.com; frame-src 'self' https://forms.hsforms.com https://public.tableau.com  https://*.slideshare.net https://www.facebook.com; font-src 'self' data: https://public.slidesharecdn.com https://*.paymongocdn.com https://js.intercomcdn.com https://fonts.gstatic.com; connect-src 'self' https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://api.hubapi.com https://forms.hubspot.com https://hubspot-forms-static-embed.s3.amazonaws.com https://heapanalytics.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.facebook.com; upgrade-insecure-requests; block-all-mixed-content; report-uri https://paymongo.uriports.com/reports/report; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com *.google.com connect.facebook.net *.cloudfront.net stats.g.doubleclick.net www.googleadservices.com *.olark.com bat.bing.com googleads.g.doubleclick.net s7.addthis.com www.googlecommerce.com www.gstatic.com flex.atdmt.com; style-src 'self' 'unsafe-inline' ajax.googleapis.com s7.addthis.com  static.olark.com; img-src * data:; media-src 'self' video-kingschools-com.akamaized.net static.olark.com; object-src 'self'; frame-src 'self' www.google.com www.facebook.com static.olark.com; frame-ancestors 'none'; base-uri 'self'; connect-src 'self' *.olark.com; 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.addthis.com:* *.addthisedge.com:* *.addtoany.com:* *.elafent.com:* *.facebook.com:* *.facebook.net:* *.google-analytics.com:* *.google.com:* *.googleanalytics.com:* *.googleapis.com:* *.googletagmanager.com:* *.gstatic.com:* *.hotjar.com:* *.instagram.com:* *.licdn.com:* *.melbournewater.com.au:* *.moatads.com:* *.newrelic.com:* *.stats.g.doubleclick.net:* *.twimg.com:* *.twitter.com:* *.vars.hotjar.com:* *.youtube.com:* *.ytimg.com:* bam.nr-data.net:* cdnjs.cloudflare.com:* static.cloudflareinsights.com:* unpkg.com:* js.arcgis.com:* az298774.vo.msecnd.net careers.pageuppeople.com www.recaptcha.net *.qualtrics.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: fonts.gstatic.com:* fonts.google.com:* *.elafent.com:* *.melbournewater.com.au:* js.arcgis.com:*; connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.addthis.com:* *.cloudflare.com:* *.elafent.com:* *.facebook.com:* *.googleapis.com:* *.hotjar.com:* *.hotjar.io:* *.icanhazip.com:* *.ipify.org:* *.melbournewater.com.au:* *.stats.g.doubleclick.net:* *.vars.hotjar.com:* bam.nr-data.net:* mw-api-catalogue-alpha.s3.ap-southeast-2.amazonaws.com:* mw-api-catalogue-beta.s3.ap-southeast-2.amazonaws.com:* mw-api-catalogue-dev.s3.ap-southeast-2.amazonaws.com:* mw-api-catalogue-prod.s3.ap-southeast-2.amazonaws.com:* mw-api-catalogue-uat.s3.ap-southeast-2.amazonaws.com:* wss://*.hotjar.com:* *.arcgisonline.com:* *.arcgis.com:* api.amplitude.com api-js.mixpanel.com www.google-analytics.com stats.g.doubleclick.net siteintercept.qualtrics.com; report-uri /report-csp-violation 1
default-src 'self' * 'unsafe-inline'; script-src 'self' * 'unsafe-eval' 'unsafe-inline' data:; 1
base-uri 'self' about:;block-all-mixed-content;child-src fallsviewer.ca 'self';connect-src 'self' data: *.youtube.com fonts.gstatic.com stats.g.doubleclick.net *.googleapis.com *.google-analytics.com *.readspeaker.com img.niagarafalls.ca cdn.monsido.com https://*.smartlook.com https://*.smartlook.cloud;default-src https: 'unsafe-inline' 'unsafe-eval' 'self';font-src 'self' null cdnjs.cloudflare.com fonts.gstatic.com niagarafalls.ca;form-action 'self' *.paypal.com *.readspeaker.com niagarafalls.ca;frame-ancestors 'self' fallsviewer.ca map.niagarafalls.ca niagarafalls.ca *.us.monsido.com; frame-src fallsviewer.ca niagarafalls.maps.arcgis.com viewer.mapme.com *.niagarafalls.ca *.readspeaker.com www.google.com www.youtube.com youtube.com player.vimeo.com niagarafalls.ca *.transitapp.com ;img-src data: 'self' img.niagarafalls.ca *.readspeaker.com res.cloudinary.com https://www.google-analytics.com *.gstatic.com stats.g.doubleclick.net www.youtube.com *.monsido.com *.googleapis.com https://*.google.com https://*.google.ca;media-src *.readspeaker.com youtu.be *.youtube.com;object-src *.youtube.com 'self'; report-uri https://niagarafalls.ca/webservices/csp-enforce;script-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com static.cloudflareinsights.com ajax.cloudflare.com cdnjs.cloudflare.com www.google-analytics.com connect.facebook.net extend.vimeocdn.com player.vimeo.com *.readspeaker.com cdn.monsido.com www.youtube.com api.transitapp.com *.ytimg.com https://*.smartlook.com https://*.smartlook.cloud 'unsafe-inline' 'unsafe-eval';style-src 'self' stackpath.bootstrapcdn.com *.googleapis.com *.google.com *.readspeaker.com 'unsafe-inline';upgrade-insecure-requests;worker-src 'self' blob: 1
default-src 'none' ;script-src * data: 'unsafe-inline' 'unsafe-eval' ;style-src * data: 'unsafe-inline' ;img-src * data: ;font-src * data: ;connect-src * ;media-src * ;object-src * ;child-src * ;frame-ancestors * ;form-action * ;manifest-src * ; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://keywordseverywhere.com http://archive.org https://raw.githubusercontent.com https://trends.google.com https://fonts.googleapis.com/css https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://stats.g.doubleclick.net https://ssl.gstatic.com https://api.autodns.com https://www.googletagmanager.com https://localhost:8080 https://trends.google.com https://pc.domains blob: data:; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://pcd.benjamin.autodns-lab.com; 1
frame-ancestors 'self' *.example.net; 1
frame-ancestors 'self' *.proteccion.com *.proteccion.com.co *.proteccion.com:* *.proteccion.com.co:*; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.stripe.com api.mixpanel.com mc.yandex.ru *.intercom.io *.intercomcdn.com *.hotjar.com icm.aexp-static.com stripensrq.global.ssl.fastly.net *.googleadservices.com accounts.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com googleads.g.doubleclick.net yastatic.net mcheckout-qa.americanexpress.com cdn.jsdelivr.net uinames.com *.youtube.com *.ytimg.com *.licdn.com; object-src 'self'; font-src 'self' data: blob: 'unsafe-inline' js.intercomcdn.com fonts.gstatic.com *.hotjar.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; object-src 'self'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://d3pkntwtp2ukl5.cloudfront.net https://*.paysafe.com https://*.iubenda.com https://cdnjs.cloudflare.com https://www.google.com https://go.smartvalor.com https://www.gstatic.com https://www.googletagmanager.com https://ssl.google-analytics.com https://www.google-analytics.com https://*.zopim.com https://admin.typeform.com https://sjs.bizographics.com https://px.ads.linkedin.com https://www.linkedin.com https://cdn.mouseflow.com https://pi.pardot.com https://connect.facebook.net https://w.chatlio.com https://includestest.ccdc02.com https://*.cardinalcommerce.com https://ajax.cloudflare.com https://static.cloudflareinsights.com https://*.abtasty.com https://coinzillatag.com https://browser-update.org https://*.quora.com https://*.adroll.com https://us-u.openx.net https://idsync.rlcdn.com https://ib.adnxs.com https://x.bidswitch.net https://ads.yahoo.com https://eb2.3lift.com https://trc.taboola.com https://simage2.pubmatic.com https://sync.outbrain.com https://pixel.rubiconproject.com https://dsum-sec.casalemedia.com https://pixel.advertising.com; style-src 'self' 'unsafe-inline' data: https://tagmanager.google.com https://fonts.googleapis.com https://w.chatlio.com https://*.abtasty.com; font-src 'self' data: https://fonts.gstatic.com https://*.zopim.com https://w.chatlio.com https://*.abtasty.com; connect-src 'self' wss: ws: https://version.smartvalor.com https://news.smartvalor.com https://v2.zopim.com https://www.google-analytics.com https://hits-i.iubenda.com https://*.paysafe.com https://*.mouseflow.com https://api.rollbar.com https://stats.g.doubleclick.net https://api.chatlio.com https://api-cdn.chatlio.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com https://*.cardinalcommerce.com https://*.abtasty.com https://request-global.czilladx.com; img-src 'self' data: https://news.smartvalor.com https://s3-eu-west-1.amazonaws.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com https://*.gstatic.com https://*.zopim.com https://cdn.iubenda.com https://www.google-analytics.com https://px.ads.linkedin.com https://www.facebook.com https://w.chatlio.com https://avatars.slack-edge.com https://cdn.jsdelivr.net https://uploads-cdn.chatlio.com https://*.abtasty.com https://*.quora.com https://*.adroll.com https://us-u.openx.net https://idsync.rlcdn.com https://ib.adnxs.com https://x.bidswitch.net https://ads.yahoo.com https://eb2.3lift.com https://trc.taboola.com https://simage2.pubmatic.com https://sync.outbrain.com https://pixel.rubiconproject.com https://dsum-sec.casalemedia.com https://pixel.advertising.com http://pixel.advertising.com http://browser-update.org https://browser-update.org; frame-src 'self' * data: blob: https://shuftipro.com https://cdn.iubenda.com https://*.smartvalor.com https://hosted.paysafe.com; object-src 'none'; frame-ancestors 'self' https://smartvalor.com; media-src 'self' https://w.chatlio.com https://*.abtasty.com; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://todon.nl; img-src 'self' https: data: blob: https://todon.nl; style-src 'self' https://todon.nl 'nonce-bDe/n1iN3b/wZBX+WUg0bg=='; media-src 'self' https: data: https://todon.nl; frame-src 'self' https:; manifest-src 'self' https://todon.nl; connect-src 'self' data: blob: https://todon.nl https://todon.nl wss://todon.nl; script-src 'self' https://todon.nl; child-src 'self' blob: https://todon.nl; worker-src 'self' blob: https://todon.nl 1
media-src * 1
default-src 'self' 'unsafe-inline' data: https://piwik.bzga.de/ https://service.bzga.de/ https://a.tile.openstreetmap.org/ https://b.tile.openstreetmap.org/ https://c.tile.openstreetmap.org/ https://translate.google.com/ https://translate.googleapis.com/ https://www.gstatic.com/ https://www.google.com/ 1
default-src 'self' http://www.iepf.gov.in/; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.iepf.gov.in/ seal.entrust.net; img-src 'self' http://www.iepf.gov.in/ seal.entrust.net  data: blob: filesystem:;style-src 'self' 'unsafe-inline' http://www.iepf.gov.in/; font-src 'self' http://www.iepf.gov.in/; child-src 'self' http://www.iepf.gov.in/; object-src 'self' http://www.iepf.gov.in/; media-src 'self' blob: mediastream http://www.iepf.gov.in/; connect-src 'self' 1
default-src 'self' data: blob:;script-src blob: data: 'self' *.facebook.com *.facebook.net *.fbcdn.net 'unsafe-inline' 'unsafe-eval';style-src 'unsafe-inline' *.facebook.com *.fbcdn.net;connect-src *.facebook.com *.oversightboard.com oversightboard.com wss://*.facebook.com:*;font-src *.facebook.com *.fbcdn.net data:;img-src data: *.facebook.com *.fbcdn.net *.cdninstagram.com;frame-src *.facebook.com;block-all-mixed-content;upgrade-insecure-requests; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' fontplus.jp *.fontplus.jp www.google-analytics.com www.googletagmanager.com *.sibulla.com www.w3.org web.facebook.com connect.facebook.net platform.twitter.com *.google.com www.facebook.com www.youtube.com stats.g.doubleclick.net https://s3-ap-northeast-1.amazonaws.com/fontplus-wa/; font-src 'self' https://* blob: data:; img-src https://* blob: data:; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'                               ;                img-src 'self' data:                  *.fbcdn.net *.ytimg.com *.gstatic.com *.google.com *.placeholder.com *.googleapis.com *.google-analytics.com placehold.it                 *.cdninstagram.com i.ytimg.com *.facebook.com *.doubleclick.net *.windows.net *.googletagmanager.com                 *.live2support.com *.yotpo.com *.networksolutions.com *.listrakbi.com                 *.viglink.com                 *.bing.com                 ;                style-src 'self' 'unsafe-inline'                 *.googleapis.com                 *.yotpo.com *.live2support.com                 *.disqus.com *.disquscdn.com                 *.listrakbi.com                 ;                script-src 'self' 'unsafe-inline' 'unsafe-eval'                 *.google.com *.googleapis.com *.google-analytics.com *.youtube.com *.ytimg.com *.instagram.com *.googletagmanager.com *.jquery.com *.gstatic.com                 *.facebook.net *.twitter.com *.googleadservices.com *.doubleclick.net                 *.yotpo.com *.live2support.com *.listrakbi.com *.networksolutions.com                 disqus.com *.disqus.com *.disquscdn.com                                 *.zscalertwo.net                 *.bing.com                 *.digitalthrottle.com                 ;                font-src 'self' data:                 *.gstatic.com                 *.live2support.com *.yotpo.com                 ;                frame-src 'self'                 *.youtube.com *.google.com *.twitter.com *.facebook.com *.doubleclick.net                 disqus.com                                 *.zscalertwo.net                 ;                connect-src 'self'                  *.windows.net *.google.com                 *.live2support.com *.yotpo.com                 *.disqus.com                      *.google-analytics.com 1
frame-ancestors 'self' http://www.clearhaircare.com unilever3.experiencecloud.adobe.com unileverbrazil.experiencecloud.adobe.com unilever2.experiencecloud.adobe.com unilever.experiencecloud.adobe.com emea1-proxy.adobemc.com us1-proxy.adobemc.com us1-proxy.adobemc.com apac-proxy.adobemc.com adobedemoemea131.marketing.adobe.com adobedemoemea131.experiencecloud.adobe.com 1
default-src * data:; script-src * 'unsafe-inline' 'unsafe-eval' data:; style-src * 'unsafe-inline' 1
default-src 'none'; img-src data: https: 'self' https://qa-corporate-fe-assets https://qa-corporate-fe-wp https://prod-corporate-fe-assets https://prod-corporate-fe-wp; style-src https: 'self' 'unsafe-inline' https://qa-corporate-fe-assets https://qa-corporate-fe-wp https://prod-corporate-fe-assets https://prod-corporate-fe-wp; script-src https: 'self' 'unsafe-inline' 'unsafe-eval'; font-src https: data: 'self' https://fonts.googleapis.com; manifest-src https: 'self'; base-uri 'self'; connect-src https: wss://*.intercom.io https://*.smartlook.com https://*.smartlook.cloud; frame-src https:; worker-src https: 'self' blob: 1
default-src 'self'; connect-src *; font-src *; child-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
frame-src 'self' https://www.youtube.com  https://comments.mozillafoundation.org/ https://airtable.com https://docs.google.com/ https://platform.twitter.com https://public.zenkit.com https://calendar.google.com https://www.youtube-nocookie.com https://devopstypeform.typeform.com; media-src 'self' https://s3.amazonaws.com/mofo-assets/foundation/video/; script-src 'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js http://*.shpg.org/ https://comments.mozillafoundation.org/ https://airtable.com https://platform.twitter.com https://cdn.syndication.twimg.com https://assets.mofoprod.net/static/ https://embed.typeform.com https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/debug/bootstrap; img-src * data:; frame-ancestors 'none'; style-src 'self' 'unsafe-inline' https://code.cdn.mozilla.net https://fonts.googleapis.com  https://platform.twitter.com https://assets.mofoprod.net/static/; default-src 'none'; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://code.cdn.mozilla.net https://assets.mofoprod.net/static/; connect-src *; child-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; worker-src 'self' 1
default-src 'self' *.bossa.pl www.google.com; script-src 'self' 'unsafe-eval' *.bossa.pl www.salesmanago.pl www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net www.google-analytics.com www.gstatic.com maps.googleapis.com www.google.com 'unsafe-inline'; style-src 'self' *.bossa.pl www.gstatic.com fonts.googleapis.com 'unsafe-inline'; img-src 'self' bossa.pl *.bossa.pl bossafx.pl *.bossafx.pl www.salesmanago.pl www.google-analytics.com stats.g.doubleclick.net google.com www.google.com google.pl www.google.pl maps.gstatic.com maps.googleapis.com 'unsafe-inline' 'unsafe-eval' data:; media-src 'self' *.bossa.pl 'unsafe-inline'; font-src 'self' *.bossa.pl themes.googleusercontent.com fonts.googleapis.com fonts.gstatic.com 'unsafe-inline'; connect-src ws://websocket.bossa.pl wss://websocket.bossa.pl http://websocket.bossa.pl https://websocket.bossa.pl 'self' *.bossa.pl *.bossafx.pl bossafx.pl www.salesmanago.pl www.google-analytics.com stats.g.doubleclick.net; report-uri /report-csp-violation 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com/ https://policy.privacyandcookies.eu/ https://players.brightcove.net https: blob:; object-src 'none'; base-uri 'none'; frame-src 'self' https://*.facebook.com/ https://*.exct.net/ https://www.youtube-nocookie.com https://player.quadia.net https://players.brightcove.net https://pages.emailca.merck-animal-health-usa.com https://cloud.emailca.merck-animal-health-usa.com; frame-ancestors 'self'; img-src 'self' https://www.msd-animal-health.com https://cdn.cookielaw.org https://secure.gravatar.com https://www.google-analytics.com/ https://*.deepintent.com/ https://*.brightcove.com https://brightcove.hs.llnwd.net https://*.brightcove.hs https://policy.privacyandcookies.eu data: https://www.google.com/ https://*.bing.com/ https://*.facebook.com/ https://*.pricespider.com/ https://*.turn.com https://*.googletagmanager.com/ https://www.google.pl/; media-src 'self' blob:; style-src 'self' 'unsafe-inline' https://*.mapbox.com/ https://*.pricespider.com/; upgrade-insecure-requests; default-src https: data: 'self'; trusted-types goog#html default; 1
frame-ancestors 'self' *.inversis.com *.bancamarch.es *.rsi.bankoaonline.risa *.arquiaonline.risa 1
default-src 'none'; connect-src 'self'; font-src https://fonts.gstatic.com; img-src 'self' data: blob:; script-src 'self' 'sha256-4qKuKHlhZHVtOHkzV6IoRxvJyftFsU9Bzug8piLac2s=' 'sha256-wFlxiON/IU9ZZ5PD6RqOAhUMQtTTYSO6Fh/5V470Tdo='; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'; manifest-src 'self'; prefetch-src 'self' 1
default-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-ancestors https://test.visit.at.wa-test.rc3.cccv.de https://rc3.world https://play.at.rc3.world https://play.digitalcourage.at.rc3.world https://visit.at.rc3.world; 1
default-src 'none'; img-src 'self'; style-src 'self'; form-action 'none'; frame-ancestors 'none'; base-uri 'none'; sandbox allow-same-origin allow-scripts; connect-src 'self' https://o15192.ingest.sentry.io; script-src 'self' 1
base-uri 'none'; object-src 'none'; script-src https://forospyware.com/logs/ https://forospyware.com/sidekiq/ https://forospyware.com/mini-profiler-resources/ https://forospyware.com/assets/ https://forospyware.com/brotli_asset/ https://forospyware.com/extra-locales/ https://forospyware.com/highlight-js/ https://forospyware.com/javascripts/ https://forospyware.com/plugins/ https://forospyware.com/theme-javascripts/ https://forospyware.com/svg-sprite/ https://www.google-analytics.com/analytics.js; worker-src 'self' https://forospyware.com/assets/ https://forospyware.com/brotli_asset/ https://forospyware.com/javascripts/ https://forospyware.com/plugins/ 1
frame-ancestors 'self' https://deloitte-api.myarecruiter.com; 1
script-src 'self' 'unsafe-inline' connect.facebook.net platform.twitter.com ssl.google-analytics.com cdn.syndication.twimg.com static.xx.fbcdn.net s7.addthis.com; 1
default-src www.stpi.in 'unsafe-inline' 1
frame-ancestors https://www.cupraofficial.co.uk https://author-seat-stage63.adobecqms.net https://seat-stage63.adobecqms.net https://author-seat-prod63.adobecqms.net https://seat-prod63.adobecqms.net 'self' 1
default-src 'self' https://www.google-analytics.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.googletagmanager.com/ https://www.google-analytics.com/ https://optimize.google.com/ https://tagmanager.google.com/debug/debuguiApp-bundle.js https://tagmanager.google.com/debug https://tagmanager.g/; style-src 'self' 'unsafe-inline' https://optimize.google.com/ https://fonts.googleapis.com/; img-src data: 'self' https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://optimize.google.com/ https://ssl.gstatic.com/analytics-suite/header/suite/v2/ic_tag_manager.svg/; font-src 'self' https://fonts.gstatic.com/; child-src 'self' https://*.readspeaker.com/; media-src 'self' https://*.readspeaker.com/; frame-src 'self' https://optimize.google.com/; 1
default-src 'self' www.thundercore.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.thundercore.com ajax.googleapis.com www.google-analytics.com connect.facebook.net maps.googleapis.com; style-src 'self' 'unsafe-inline' www.thundercore.com fonts.googleapis.com; img-src 'self' data: www.thundercore.com www.google-analytics.com; connect-src 'self' www.thundercore.com stats.g.doubleclick.net; font-src 'self' https: data:; child-src https:; object-src 'none' 1
object-src 'self' http: https: data: blob: 'unsafe-inline' 1
default-src 'self'; connect-src blob: 'self' *.ablo.live ablo.live code.jquery.com privacyportal-de.onetrust.com cdn.cookielaw.org bam.nr-data.net bam-cell.nr-data.net wss://ablo.live *.giphy.com *.akamaihd.net www.google-analytics.com *.googleapis.com *.agora.io *.agoraio.cn *.agoraio.cn:* loppy.ablo.live 'self' sentry.netnoc.eu *.agora.io:* wss://loppy.ablo.live wss://*.agoraio.cn:* wss://*.agora.io:* *.googleapis.com www.paypal.com; font-src * 'self' data: fonts.gstatic.com use.fontawesome.com; frame-src 'self' ablo-live.firebaseapp.com www.mtch.com www.youtube.com www.paypal.com *.google.com www.twoo.com; img-src data: blob: 'self' android-webview-video-poster: *.ablo.live ablo.live cdn.cookielaw.org *.scdn.co *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googleusercontent.com *.google-analytics.com *.akamaihd.net *.giphy.com *.paypal.com *.google.com; worker-src blob:; media-src 'self' blob: *.ablo.live vod.ablo.live ablo.live; script-src 'self' cdn.cookielaw.org *.gstatic.com www.googletagmanager.com *.googleapis.com www.google-analytics.com ds-aksb-a.akamaihd.net *.nr-data.net *.newrelic.com apis.google.com cdn.ravenjs.com www.google.com www.gstatic.com www.paypal.com www.paypalobjects.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' use.fontawesome.com stackpath.bootstrapcdn.com fonts.googleapis.com 'unsafe-inline'; report-uri https://sentry.netnoc.eu/api/26/security/?sentry_key=fc35af7353ce4b0f83e879bdf05cefe8 1
frame-ancestors 'self';         style-src 'self' https://*.chase.com https://www.google-analytics.com https://*.f9client.com https://*.f9dev.com;         script-src 'nonce-YxbNCx6Fg4wT9PdEx+UqzQ==' 'self' 'strict-dynamic' https://*.f9client.com https://*.chase.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://*.f9dev.com https://*.chasebonus.com https://*.liquidhost2.com;         img-src 'self' https://*.chase.com https://*.facebook.com https://*.outbrain.com https://*.amazon-adsystem.com https://*.doubleclick.net https://jpmcbankna.demdex.net https://*.adsymptotic.com https://*.linkedin.com https://s3.amazonaws.com https://*.gravatar.com https://*.umbraco.tv https://*.mbraco.org https://*.mbraco.com https://*.google-analytics.com https://*.google.com https://*.doubleclick.net https://*.boltdns.net https://*.sp.analytics.yahoo.com https://secure.adnxs.com https://*.f9dev.com https://*.liquidhost2.com https://*.chasecreditcards.com https://*.googleadservices.com https://tr.snapchat.com https://ct.pinterest.com https://t.acxiom-online.com https://insight.adsrvr.org https://pixel.mathtag.com https://bat.bing.com https://tags.mediaforge.com https://i.simpli.f https://a.amxdt.com https://*.outpace.com https://analytics.twitter.com https://*.t.co https://dc.ads.linkedin.com data: blob: *;         font-src data: 'self' https://*.f9client.com https://*.f9dev.com;         media-src 'self' https://*.f9client.com;         connect-src 'self' https://*.f9client.com https://*.liquidhost2.com https://*.chasecreditcards.com https://www.google-analytics.com https://analytics.chase.com https://dpm.demdex.net;         frame-src https://*.f9dev.com https://www.knotch.it;         default-src 'self' 1
frame-ancestors https://*.salesforce.com 1
frame-ancestors 'self'; report-uri /csp-log.php 1
default-src 'self'; connect-src 'self' wss://127.0.0.1:* ws://127.0.0.1:*; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; 1
default-src 'self'; img-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; script-src 'self' 'unsafe-inline'; connect-src 'self'; 1
default-src 'self' *.vistana.com; script-src 'sha256-J35SNjHB0eJFAeRo//MffeovbqE3hcpSmId1Wiqbv4o=' 'sha256-EFh9mLMatnXdKe4pe1KyyXETS9zBDgWgXqzR/dNiRO8=' 'sha256-VxDr5nmy5hEHJH91C39Aqqif1YU+Y2zxi56e+2DNyOg=' 'sha256-aaU31i13SwttsySJ0wCH6Mk+y5Nafanj2U4VHdwsv54=' 'sha256-5goJJIY+DR6V2D6k85DInYTP5lZYB0djP9QhqiLjtbk=' 'sha256-8AD5icVKiYWC8MscX0D+ZcmhbLFkB1ppsaHohjXoGtc=' 'sha256-aoBx9QVgQ9mizDxN6OENJXoY2oAhaEMvIwAkS8Sjl40=' 'sha256-7KT1puOpqLnhw+s5u8OvUmJVFYhfLepxs70VXqLWu3o=' 'sha256-sVKX08+SqOmnWhiySYk3xC7RDUgKyAkmbXV2GWts4fo=' 'sha256-9NSGme9qh634INef0P+zYlLLFUuxa9rNT6IpPnbFQF0=' 'sha256-3adg9GsrZS3QI0Jqk0xBwG9W97uJh7VbjzB2z/qdkEU=' 'sha256-SDawdzGRIAlgIXrHK/rh9HqPbuNxhHbUexYSTVzsoM8=' 'sha256-pilTtt5/7F8DLkAeXxHQlFQ1Nwnzky3RrKjiSaLFgf8=' 'sha256-hlbpNdVYywlC0ikzbFEuaIpb/r28bYa800DufUAPhI0=' 'sha256-TN/0gM8wxSiszVdeXwkxZi7zjzA7LA7BuZbqHeH12iM=' 'sha256-g5tVbJUz9HwNiqnqFM5QDL+LHq7OclkdzqzxTe+dIpE=' 'sha256-T6F7x7DXXz5z1OLbxnzTiDKQyspSIpPNIKgBRc45+t8=' 'sha256-fF+MtfZcvLNKyWEBk+8hJ2DjNdaW/AfU/jX5wjqyhsA=' 'sha256-lF2/l2IByTMGgwxAN41U9dqqMvR8635icPKiApo92s0=' 'self' 'unsafe-eval' blob: *.vistana.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com *.google.com *.facebook.com *.facebook.net *.addthis.com *.addthisedge.com *.vimeo.com *.youtube.com cdnjs.cloudflare.com *.truste.com preferences.truste.com s.w.org aa.agkn.com *.salesforceliveagent.com *.formstack.com s3.amazonaws.com *.s3.amazonaws.com bat.bing.com ajax.cloudflare.com tag.retargeter.com *.threatpulse.net:* https://cloudflarestream.com https://www.google-analytics.com/ https://maps.googleapis.com/maps/api/ https://www.googletagmanager.com/ https://googleads.g.doubleclick.net https://www.google.com/ads/user-list https://www.google.XYX/ads/user-list https://bid.g.doubleclick.net https://www.googleadservices.com https://tagmanager.google.com/ https://*.salesforceliveagent.com https://*.formstack.com https://vistana-web-static.s3.amazonaws.com https://tag.retargeter.com https://bat.bing.com https://connect.facebook.net *.kampyle.com https://ajax.cloudflare.com/* *.polyfill.io; style-src 'sha256-6l4LC6rLFnBhHsv9xToUDOOy83k5CxnjyHfwvTT1sIs=' 'sha256-/55b+NjWuBZtrpp4Iwc+iWktKCpiQKco2dKsdq7sn9E=' 'sha256-QxZh80eyNmsO8aBWFjNnrBKTrldtChUXn/LkerrDHHw=' 'sha256-CwE3Bg0VYQOIdNAkbB/Btdkhul49qZuwgNCMPgNY5zw=' 'sha256-MZKTI0Eg1N13tshpFaVW65co/LeICXq4hyVx6GWVlK0=' 'sha256-LpfmXS+4ZtL2uPRZgkoR29Ghbxcfime/CsD/4w5VujE=' 'sha256-YJO/M9OgDKEBRKGqp4Zd07dzlagbB+qmKgThG52u/Mk=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-PLhQ1IguHjjEeFz1rcHAp1G0kdXEviAPtpMGhKEoxLw=' 'sha256-GAi+Ldn91z47rA1xHn5FobkYa4/KDRa32atszLdYEOg=' 'sha256-R5Xn4FecL0VHeCqaMPR1eWy6vnuGTSBNMaZGq3dBJ1U=' 'sha256-8CZtFiIroZ7nLtGtdwp4KLw02o9/A9VDdqTFlYN6RQM=' 'sha256-WMm2rxgrdLbPiNOT3khywmfmX3KBQRnomQ+oL369Sik=' 'sha256-tlYV9rIQkzQad+VWl0ddhiXyybENF2Z2O7O95p40wyw=' 'sha256-biLFinpqYMtWHmXfkA1BPeCY0/fNt46SAZ+BBk5YUog=' 'sha256-J35SNjHB0eJFAeRo//MffeovbqE3hcpSmId1Wiqbv4o=' 'sha256-+4NPbcxRH10+oJ4iiQI7F5k0N2Sa7yOcd0Ml/g720oU=' 'sha256-ZLjZaRfcYelvFE+8S7ynGAe0XPN7SLX6dirEzdvD5Mk=' 'sha256-I/4Jcdrg5KNFrU0X4p2nNmjeGh9aI+9ac0cUllI5SwY=' 'sha256-/BjzuLRaOSSBDrhP2PyM6se2m4tyOR5PjUUjb0IbeL0=' 'sha256-pAu+o66HeAnzKmnvYOLYjZzSEJtVdabOP2A/n/PY9jQ=' 'sha256-QQCn1wu3+T1DlRBKJA+kCEPMyF1QxVHOSgZdo4unRSY=' 'sha256-aqNNdDLnnrDOnTNdkJpYlAxKVJtLt9CtFLklmInuUAE=' 'sha256-I/4Jcdrg5KNFrU0X4p2nNmjeGh9aI+9ac0cUllI5SwY=' 'sha256-ZLjZaRfcYelvFE+8S7ynGAe0XPN7SLX6dirEzdvD5Mk=' 'sha256-mtIqwmTeiH91x6ZX4SoYdFd43UohmbVZTs2yy5Jf9yw=' 'sha256-6l4LC6rLFnBhHsv9xToUDOOy83k5CxnjyHfwvTT1sIs=' 'sha256-BmqktUaIV2rntu/pXVdo1Is/25l6ZBscQCW+GKbk9+s=' 'self' *.vistana.com *.googleapis.com *.gstatic.com *.google.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com s3.amazonaws.com *.s3.amazonaws.com *.formstack.com vistana-web-static.s3.amazonaws.com https://*.formstack.com *.kampyle.com; img-src 'self' data: *.trustarc.com *.vistana.com *.cloudflarestream.com *.cloudfront.net *.googletagmanager.com *.googleapis.com *.gstatic.com *.google.com *.facebook.com *.facebook.net *.yimg.com *.ytimg.com *.vistana.com *.pinterest.com cdnjs.cloudflare.com *.formstack.com *.bing.com *.truste.com geo-um.btrll.com *.googleusercontent.com *.adnxs.com *.sellpoints.com *.doubleclick.net stats.g.doubleclick.net https://t.sellpoints.com https://scontent.xx.fbcdn.net http://scontent.xx.fbcdn.net s3.amazonaws.com *.s3.amazonaws.com https://cloudflarestream.com http://*.s3.amazonaws.com https://www.google-analytics.com/ https://csi.gstatic.com/csi https://maps.googleapis.com https://*.cloudfront.net https://svo-svn-socialuploads.s3.amazonaws.com http://vistana-web-static.s3.amazonaws.com https://vistana-web-static.s3.amazonaws.com http://vistana-user-profile.s3.amazonaws.com https://vistana-user-profile.s3.amazonaws.com https://scontent.xx.fbcdn.net https://*.formstack.com https://s3.amazonaws.com https://googleads.g.doubleclick.net https://bat.bing.com https://preferences.truste.com https://secure.adnxs.com https://geo-um.btrll.com https://cm.g.doubleclick.net https://*.googleusercontent.com https://*.adnxs.com https://connect.facebook.net https://www.facebook.com https://saml.threatpulse.net:8443 *.kampyle.com https://vistana-web-static.s3.us-east-1.amazonaws.com; font-src 'self' data: *.vistana.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com s3.amazonaws.com *.s3.amazonaws.com vistana-web-static.s3.amazonaws.com *.kampyle.com; connect-src 'self' *.vistana.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.addthis.com *.addthisedge.com tag.retargeter.com aa.agkn.com s3.amazonaws.com *.s3.amazonaws.com *.adnxs.com *.threatpulse.net:* *.cloudflarestream.com https://cloudflarestream.com https://fonts.googleapis.com cdnjs.cloudflare.com https://vistana-web-static.s3.amazonaws.com https://www.google-analytics.com/ https://stats.g.doubleclick.net https://videodelivery.net https://svo-svn-socialuploads.s3.amazonaws.com https://secure.adnxs.com https://connect.facebook.net *.kampyle.com; media-src 'self' blob: *.vistana.com *.google.com *.youtube.com *.vimeo.com *.vimeocdn.com cdnjs.cloudflare.com s3.amazonaws.com *.s3.amazonaws.com *.cloudflarestream.com https://cloudflarestream.com https://videodelivery.net https://*.vimeocdn.com https://s3.amazonaws.com https://gcs-vimeo.akamaized.net https://videodelivery.net *.pcdn.co; object-src 'self' *.vistana.com; frame-src 'self' *.vistana.com *.trustarc.com *.googletagmanager.com *.google.com *.youtube.com *.vimeo.com *.addthis.com *.facebook.com *.truste.com https://www.googletagmanager.com/ns.html https://www.facebook.com https://preferences-mgr.truste.com https://connect.facebook.net *.kampyle.com; frame-ancestors 'self' *.vistana.com *.facebook.com https://connect.facebook.net; form-action 'self' *.vistana.com *.facebook.com *.facebook.net *.formstack.com *.starwoodhotels.com *.vistana.com *.salesforceliveagent.com *.salesforce.com http://*.vistana.com https://*.vistana.com https://www.facebook.com https://starwoodvo.formstack.com https://*.starwoodhotels.com; manifest-src 'self' *.vistana.com;, 1
default-src 'self' https:; frame-ancestors 'self'; img-src https: data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://api.mapbox.com https://tagmanager.google.com https://api.mazemap.com; font-src 'self' https://fonts.gstatic.com https://api.mapbox.com https://script.hotjar.com https://api.mazemap.com; worker-src blob:; object-src 'none' 1
default-src * data: blob:; script-src script.crazyegg.com forms.hsforms.com js.hsforms.net cdn.popt.in static1.twitcount.com js.hs-banner.com js.hs-analytics.net  js.hsadspixel.net platform.twitter.com js.hs-scripts.com www.googletagmanager.com googleads.g.doubleclick.net a.quora.com platform.linkedin.com s7.addthis.com  px.ads.linkedin.com snap.licdn.com d3e54v103j8qbb.cloudfront.net d1tdp7z6w94jbb.cloudfront.net static.hsappstatic.net ajax.googleapis.com code.jquery.com use.typekit.net www.googleadservices.com www.fullstory.com testfairy.com *.testfairy.com *.intercom.io *.intercomcdn.com *.facebook.net tracking.leadlander.com *.google-analytics.com *.google.com *.googleapis 'unsafe-inline'; style-src data: blob: 'unsafe-inline' *; 1
default-src https: http: 'unsafe-eval' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.naturstrom.de http://www.naturstrom.net https://daten.naturstrom.de https://consent.cookiebot.com  https://consentcdn.cookiebot.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.de https://www.google.com https://www.googletagmanager.com https://tagmanager.google.com https://bat.bing.com https://www1.belboon.de https://www.belboon.de https://static.zanox.com https://api.zanox.com https://ad.zanox.com https://cdnjs.cloudflare.com https://atlas.r.akipam.com https://www.awin1.com https://connect.facebook.net https://js.adsrvr.org https://www.dwin1.com;  object-src 'self' https://www1.belboon.de https://atlas.r.akipam.com https://www.awin1.com https://www.dwin1.com; img-src 'self' data: https://daten.naturstrom.de https://www.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.google.de https://bat.bing.com https://www.naturstrom.de http://www.naturstrom.net https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://stats.g.doubleclick.net https://www1.belboon.de https://www.belboon.de https://static.zanox.com https://api.zanox.com https://ad.zanox.com https://cdnjs.cloudflare.com https://atlas.r.akipam.com https://www.awin1.com https://www.dwin1.com https://insight.adsrvr.org https://www.facebook.com; 1
script-src 'report-sample' 'nonce-PBUVnfOR0PpSuYjX7MmjAQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self',script-src 'nonce-PBUVnfOR0PpSuYjX7MmjAQ' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport 1
default-src 'unsafe-inline' 'unsafe-eval' 'self' chrome-extension https: wss:; img-src https: data: blob:; object-src 'none'; frame-ancestors *.zurich.ch *.autosense.ch  'self'; 1
frame-ancestors 'self'; block-all-mixed-content 1
frame-ancestors http: https: filesystem:; object-src 'none'; base-uri www.redblobgames.com 1
default-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval' * 1
default-src  'self' ; img-src      'self' 'unsafe-inline' 'unsafe-eval' data: agilecrm.s3.amazonaws.com *.amazonaws.com *.social9.com *.g.doubleclick.net *.googlesyndication.com *.google.co.cr *.google-analytics.com *.gstatic.com *.google.com *.google.ca;  script-src   'self' 'unsafe-inline' 'unsafe-eval' *.googletagservices.com *.googleadservices.com *.googlesyndication.com *.trustpilot.com *.jsdelivr.net *.bitrix24.com *.cloudflare.com *.social9.com *.facebook.net *.calq.io *.amazonaws.com *.agilecrm.com *.google.com *.google.ca costarica.agilecrm.com *.google.co.cr *.googleapis.com *.google-analytics.com *.googlesyndication.com *.gstatic.com;  style-src    'self' 'unsafe-inline' *.jsdelivr.net *.amazonaws.com *.cloudfront.net *.google.com *.googleapis.com *.social9.com *.gstatic.com *.maxcdn.com;  font-src     'self' data: *.youtube.com *.googleapis.com *.google.com *.s3.amazonaws.com *.maxcdn.com *.gstatic.com;  frame-src    'self' *.googlesyndication.com *.trustpilot.com *.youtube.com *.bitrix24.com *.amazonaws.com *.facebook.com *.g.doubleclick.net *.youtube.com *.maxcdn.com *.google.com *.google.ca;  child-src    'self' *.amazonaws.com *.facebook.com *.g.doubleclick.net *.youtube.com *.maxcdn.com *.google.com *.google.ca;  connect-src  'self' *.googlesyndication.com costarica.agilecrm.com *.gstatic.com *.calq.io *.google-analytics.com *.g.doubleclick.net *.youtube.com;  object-src   'self' ;  report-uri https://costarica.report-uri.com/r/d/csp/enforce;  1
default-src 'self'; img-src 'self' *.adsafeprotected.com *.amazon.com *.buysellads.net creativecommons.org *.doubleclick.net *.eyeem.com *.met.vgwort.de *.tumblr.com d3rdtowr0c5lpf.cloudfront.net haikuhaikulove.com images-na.ssl-images-amazon.com junkcharts.typepad.com mirrors.meiert.org moma-teams-photos.corp.google.com stevesouders.com tps.doubleverify.com upload.wikimedia.org web.archive.org www.google.com www.w3.org; script-src 'self' 'unsafe-inline' cdn.carbonads.com d3rdtowr0c5lpf.cloudfront.net srv.carbonads.net; style-src 'self' 'unsafe-inline' d3rdtowr0c5lpf.cloudfront.net www.w3.org 1
frame-ancestors *.frenchlick.com *.facebook.com 1
default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-TUYzK0hOR1FxOVAzTnRTZ291N2ZNc1Bxck8wbnl4UlpuWFdKcExXZDhEND06YVNtVlRiS2prNktiZXVYank0YXRTS3liM1pWTHNpQVcxQy9vd05IMmdBMD0=' 'self' skynetcloud.site;style-src 'self' 'unsafe-inline';img-src 'self' data: blob: *;font-src 'self' data:;connect-src 'self' coturn.skynetcloud.site:3478;media-src 'self';frame-src 'self';child-src 'self' skynetcloud.site;frame-ancestors 'self';worker-src 'self' blob:;form-action 'self' 1
default-src 'self' data: blob: *.bailliegifford.com https://d2yo5j8385mod6.cloudfront.net http://video.bailliegifford.com https://video.bailliegifford.com https://diny04oi6alqe.cloudfront.net https://d1jbu16z788zgx.cloudfront.net https://*.gstatic.com https://*.googleapis.com https://www.google.com https://js.maxmind.com https://geoip-js.maxmind.com https://*.typekit.net *.mktoresp.com https://*.cookiebot.com/ https://www.google-analytics.com  https://*.hotjar.com                      https://*.doubleclick.net                     https://geoip-js.com/                     wss://*.hotjar.com                     https://app-lon09.marketo.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.bailliegifford.com data: blob: *.typekit.net https://*.typekit.net https://snap.licdn.com/li.lms-analytics/insight.min.js munchkin.marketo.net http://app-lon09.marketo.com/ https://d1jbu16z788zgx.cloudfront.net https://diny04oi6alqe.cloudfront.net www.googletagmanager.com www.google-analytics.com https://*.google.com https://www.gstatic.com https://maps.googleapis.com https://*.googleapis.com http://4a3dbfdd6470b7f43a03-1ec0805dd88c137a7d9b221342ef4c8b.r63.cf1.rackcdn.com http://rules.quantcount.com ssl.p.jwpcdn.com p.jwpcdn.com https://js.maxmind.com https://geoip-js.maxmind.com https://js.hs-scripts.com/5368402.js https://js.hs-analytics.net/analytics/ https://*.cookiebot.com/ http://tagmanager.google.com https://static.cloudflareinsights.com/beacon.min.js https://snap.licdn.com/li.lms-analytics/insight.beta.min.js                            https://www.googleadservices.com/                     http://www.googleadservices.com/                     https://*.hotjar.com/; style-src 'self' *.bailliegifford.com 'unsafe-inline' https://d1jbu16z788zgx.cloudfront.net https://diny04oi6alqe.cloudfront.net https://*.typekit.net http://app-lon09.marketo.com/js/forms2/css/forms2-theme-simple.css http://app-lon09.marketo.com/js/forms2/css/forms2.css https://*.googleapis.com https://tagmanager.google.com; img-src 'self' *.bailliegifford.com data: https://*.typekit.net https://d2yo5j8385mod6.cloudfront.net https://diny04oi6alqe.cloudfront.net https://d1jbu16z788zgx.cloudfront.net https://stats.g.doubleclick.net https://px.ads.linkedin.com/ https://www.linkedin.com/px/ https://*.gstatic.com https://*.googleapis.com *.bailliegifford.com *.jwpltx.com www.google-analytics.com https://bglivemedia.blob.core.windows.net https://geo0.ggpht.com/cbk https://track.hubspot.com/__ptq.gif https://www.google.com https://www.googletagmanager.com https://www.google.co.uk https://p.adsymptotic.com                     https://www.google.pl/                     https://googleads.g.doubleclick.net; frame-ancestors 'self'; media-src 'self' *.bailliegifford.com https://www.bailliegifford.com http://video.bailliegifford.com https://video.bailliegifford.com https://bglivemedia.blob.core.windows.net https://d1jbu16z788zgx.cloudfront.net https://d2yo5j8385mod6.cloudfront.net https://diny04oi6alqe.cloudfront.net blob: *.bailliegifford.com;  font-src 'self' *.bailliegifford.com data: https://*.typekit.net http://*.typekit.net https://diny04oi6alqe.cloudfront.net https://fonts.gstatic.com ssl.p.jwpcdn.com; object-src 'self' ssl.p.jwpcdn.com; frame-src https://*.bailliegifford.com http://www.googletagmanager.com https://www.google.com/recaptcha/ https://5358203.fls.doubleclick.net https://9001729.fls.doubleclick.net/ https://d14ed0t47z3981.cloudfront.net https://d1jbu16z788zgx.cloudfront.net https://*.cookiebot.com/ https://vars.hotjar.com/ http://*.doubleclick.net/; report-uri https://bailliegifford.report-uri.com/r/d/csp/enforce; 1
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' ; style-src https: 'unsafe-inline'; img-src 'self' https: data: 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.bootstrapcdn.com *.paradox.ai *.cloudfront.net p.adsymptotic.com px.ads.linkedin.com cdn.ampproject.org *.googletagmanager.com www.googleadservices.com *.doubleclick.net *.pardot.com snap.licdn.com dc.ads.linkedin.com *.google.com *.youtube.com fonts.googleapis.com *.crownpeak.com *.nthrive.com *.gstatic.com *.google-analytics.com *.ytimg.com *.crownpeak.net 1
frame-ancestors 'self' www.grilld.force.com grilld.force.com 1
default-src 'self' https:; connect-src 'self' https: wss:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-eval' 'unsafe-inline'; img-src 'self' https: data:; 1
default-src https: wss: data: 'unsafe-inline' 'unsafe-eval' 1
default-src http://*; connect-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-src 'self' survey.akhtaboot.com s3.amazonaws.com www.facebook.com googleads.g.doubleclick.net t.effectivemeasure.net tpc.googlesyndication.com docs.google.com view.officeapps.live.com www.google.com optimize.google.com www.youtube.com akhtaboot.s3.amazonaws.com akhtaboot-staging.s3.amazonaws.com; img-src * data: blob: 'unsafe-inline'; media-src http://*; object-src http://*; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com cdn.proctorauth.com *.olark.com; img-src 'self' data: www.google-analytics.com cdn.proctorauth.com *.olark.com; style-src 'self' 'unsafe-inline' cdn.proctorauth.com *.olark.com; font-src 'self' data: cdn.proctorauth.com; media-src 'self' cdn.proctorauth.com *.olark.com; frame-src 'self' www.youtube-nocookie.com docs.google.com *.olark.com; connect-src 'self' www.google-analytics.com cdn.proctorauth.com *.olark.com script.google.com; object-src 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-LTIwMDAzNzkwNg==' 'sha256-YIcnw6VDmkQeuf0hy5QfLlJbvGP96DQNVgosfHbi01M=' 'sha256-SoQ0LJwo7K3jMsR1rZDsNPEt4ivVTTuebhDSNUtLAyU=' 'sha256-NRXZgJwnaKw6vW83hYxBb8PWrnV+c++MOUaHN0iXJsc=' 'sha256-2jp77QuQ5Ka4f4S8r0X0FQfQVRnoOk9aVwSJKlllDrE=' 'sha256-w86G0ZY0SPRiN6UcARYkUZNDMvKpoLN8VbvN++2bkG8='; font-src 'self' data: fonts.gstatic.com; img-src 'self'; style-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self' *.hs-mannheim.de *.b-ite.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hs-mannheim.de *.b-ite.com; img-src 'self' data: *.hs-mannheim.de; style-src 'self' 'unsafe-inline' *.hs-mannheim.de; frame-src 'self' https://webstat.hs-mannheim.de *.hs-mannheim.de https://www.youtube.com/ https://www.youtube-nocookie.com/ https://player.vimeo.com/; 1
object-src 'none'; script-src 'nonce-1f0786766198bb5b6fe75e591bcecb0e' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: ; base-uri 'none'; frame-ancestors 'none' ; report-uri https://homewisedocs.report-uri.com/r/d/csp/enforce ; 1
default-src 'self'; script-src 'self'; object-src 'none'; frame-ancestors 'self'; object-src 'self'; base-uri 'self'; require-trusted-types-for 'script'; 1
default-src  'none'; object-src   'self'; style-src    'self' 'unsafe-inline' blob:; script-src   'self'; connect-src  'self' api.usp.gv.at; child-src    'self' www.handy-signatur.at www.a-trust.at www.youtube.com www.youtube-nocookie.com; img-src      * 'self' data:; font-src     'self'; block-all-mixed-content; 1
default-src https: ; script-src 'report-sample' 'unsafe-inline' 'strict-dynamic' https://monorail-prod-default-v101-dot-monorail-prod.appspot.com/static/dist/ 'self' 'nonce-obXw7wscMurfzYZnlN0FigE10YjK6k8n'; child-src 'none'; frame-src accounts.google.com content-issuetracker.corp.googleapis.com login.corp.google.com up.corp.googleapis.com feedback.googleusercontent.com www.google.com; img-src https: data: blob: ; style-src https: 'unsafe-inline'; object-src 'none'; base-uri 'self'; report-uri /csp.do 1
script-src 'self' https://*.savana.cz 'unsafe-inline' 'unsafe-eval' https:; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https:; frame-src https:; object-src 'none' 1
default-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* localtest:* ajax.googleapis.com ajax.aspnetcdn.com fonts.googleapis.com fonts.gstatic.com www.youtube.com s.ytimg.com www.googletagmanager.com vortex.data.microsoft.com *.hubspot.com *.hscta.net *.google-analytics.com iowa.gov *.jquery.com *.addthis.com *.googleapis.com *.addthisedge.com *.google.com *.gstatic.com *.fontawesome.com *.crowdriff.com *.sa-as.com *.licdn.com *.facebook.net *.googleadservices.com siteimproveanalytics.com *.doubleclick.net;object-src *.spindustry.com;style-src 'self' 'unsafe-inline' iowa.gov *.jquery.com maxcdn.bootstrapcdn.com fonts.googleapis.com *.typekit.net *.fontawesome.com *.crowdriff.com;img-src 'self' localhost:* localtest.com:* *.jquery.com *.google-analytics.com *.hubspot.com iowa.gov *.goodblogscdn.com *.gstatic.com *.crowdriff.com *.cloudfront.net *.doubleclick.net *.arrivalist.com *.google.com *.sa-as.com *.adnxs.com *.siteimproveanalytics.io *.linkedin.com *.facebook.com *.adsymptotic.com *.ytimg.com *.google.ca *.googletagmanager.com;media-src *.spindustry.com;frame-src *.spindustry.com *.google.com *.youtube.com *.facebook.com *.doubleclick.net *.moz.com;font-src 'self' maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com *.typekit.net *.fontawesome.com;connect-src 'self' *.spindustry.com *.crowdriff.com *.fontawesome.com *.doubleclick.net *.google-analytics.com *.facebook.com;child-src *.youtube.com *.hubspot.com *.addthis.com *.google.com;form-action 'self' *.spindustry.com *.facebook.net *.facebook.com;frame-ancestors *.spindustry.com;manifest-src 'self';report-uri /WebResource.axd?cspReport=true 1
frame-ancestors 'self' http://www.1001jogos.com.br 1
script-src 'self' 'unsafe-eval' 'unsafe-inline'  http://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js https://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js http://www.google-analytics.com/cx/api.js https://www.google-analytics.com/cx/api.js http://ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js https://ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js http://www.googletagmanager.com https://www.googletagmanager.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js http://www.google.com https://www.google.com http://cse.google.com https://cse.google.com http://www.google-analytics.com/gtm/js https://www.google-analytics.com/gtm/js http://portal.generali.pl/axjACCch/chat/gwtpublic/pl.com.altar.chat.gwtmodule.clientchat.ClientChat/chat-starter.js https://portal.generali.pl/axjACCch/chat/gwtpublic/pl.com.altar.chat.gwtmodule.clientchat.ClientChat/chat-starter.js http://portal.generali.pl/axjACCch/chat/gwtpublic/getConfig.js https://portal.generali.pl/axjACCch/chat/gwtpublic/getConfig.js http://www.googleadservices.com https://www.googleadservices.com http://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/en_US/fbevents.js http://googleads.g.doubleclick.net/pagead/viewthroughconversion/AW-810351429/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/AW-810351429/ http://connect.facebook.net/signals/config/2367184230274864 https://connect.facebook.net/signals/config/2367184230274864 http://code.jquery.com/ui/1.12.1/jquery-ui.min.js https://code.jquery.com/ui/1.12.1/jquery-ui.min.js http://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js http://code.jquery.com/jquery-2.2.4.min.js https://code.jquery.com/jquery-2.2.4.min.js http://seal.thawte.com/getthawteseal https://seal.thawte.com/getthawteseal http://www.gstatic.com/recaptcha/releases/ https://www.gstatic.com/recaptcha/releases/ http://maps.googleapis.com https://maps.googleapis.com http://swrap.tradedoubler.com https://swrap.tradedoubler.com http://tagmanager.google.com https://tagmanager.google.com http://skk.erecruiter.pl https://skk.erecruiter.pl http://optimize.google.com https://optimize.google.com http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com http://static.criteo.net https://static.criteo.net http://connect.facebook.net https://connect.facebook.net http://sslwidget.criteo.com https://sslwidget.criteo.com http://generali-proxy.eu-de.mybluemix.net/webclient/actionbot.js https://generali-proxy.eu-de.mybluemix.net/webclient/actionbot.js; 1
frame-ancestors 'self' https://customerfinancing.directcapital-sit.com https://customerfinancing.directcapital2.com https://www.customerfinancing.com https://customerfinancing.directcapital-test1.com https://customerfinancing.directcapital-test2.com https://customerfinancing.directcapital-test3.com https://customerfinancing.directcapital-test4.com 1
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 'unsafe-eval'; font-src https: 'unsafe-inline' 'unsafe-eval' 'self' data: blob: *; 1
default-src 'self' gap: 'unsafe-inline';     script-src 'self'         data: https://cdn.amcharts.com         data: https://c.mql5.com/         data: https://cdn.ampproject.org/         data: https://content.mql5.com/         data: https://connect.facebook.net/         data: https://ifccd.net         data: https://apis.google.com         data: www.google-analytics.com         data: www.googletagmanager.com         data: trade.mql5.com         data: https://ipinfo.io         data: https://ajax.cloudflare.com         data: https://yastatic.net/share2/share.js         data: https://mc.yandex.ru/metrika/tag.js         'unsafe-eval' 'unsafe-inline';     frame-src 'self'         data: https://component.autochartist.com         data: https://www.tradays.com/         data: https://www.mql5.com         data: https://www.facebook.com         data: https://www.youtube.com/         data: https://chat.irifcm.asia/         data: https://chat.trifcm.asia/         data: https://chat.ifcmarkets.com         data: https://trade.mql5.com         data: *.googletagmanager.com;     object-src *;     style-src 'self'         data: https://ifccd.net         data: https://pr.ifccd.net         data: https://fonts.googleapis.com         'unsafe-inline';     img-src *         data: http://www.w3.org/;     font-src 'self'         data: https://ifccd.net         data: https://fonts.gstatic.com         data: https://fonts.googleapis.com         data: https://pr.ifccd.net;     connect-src *;  manifest-src 'self' data: https://ifccd.net 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://public.tableau.com https://cdn.ckeditor.com https://use.fontawesome.com/ https://www.google-analytics.com/ https://ajax.googleapis.com/ https://maps.googleapis.com/ https://cdnjs.cloudflare.com/ https://cdn.jsdelivr.net/; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://cdn.ckeditor.com https://*.googleapis.com/ https://cdn.jsdelivr.net/; img-src 'self' https://www.valuescentre.com https://s.ytimg.com https://newprod.cttools.com https://public.tableau.com https://cdn.ckeditor.com https://www.google-analytics.com/ https://*.googleapis.com/ https://*.gstatic.com/ data:; font-src 'self' https://use.fontawesome.com https://fonts.gstatic.com/ data:; frame-src 'self' https://cdn.embedly.com/ https://public.tableau.com https://player.vimeo.com https://www.youtube.com https://www.slideshare.net https://www.surveymonkey.com; child-src 'self' https://valuescentre.com https://www.youtube.com https://www.slideshare.net blob:; connect-src 'self' https://www.google-analytics.com; object-src 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: 1
default-src 'self' https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' data: https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' ; 1
upgrade-insecure-requests;script-src 'self';connect-src 'self' blob: https://fedi.app wss://fedi.app;media-src 'self' https:;img-src 'self' data: blob: https:;default-src 'none';base-uri 'self';frame-ancestors 'none';style-src 'self' 'unsafe-inline';font-src 'self';manifest-src 'self'; 1
frame-ancestors 'none'; default-src 'self' https://*.onesearch.com; script-src 'self' 'unsafe-inline' 'nonce-PcIEVcYN3ygliXNnlSP1zw==' 'unsafe-eval' https://*.onesearch.com; style-src 'self' 'unsafe-inline' https://*.onesearch.com; img-src 'self' data: https://*.onesearch.com; frame-src 'self'; media-src 'self' https://*.onesearch.com; object-src *; connect-src https://*.onesearch.com; font-src * data:; child-src blob:; report-uri https://www.onesearch.com/notracking/beacon/csp?src=privatesearch; 1
frame-src 'self' www.rolamentosrs.com.br *.facebook.com *.fbcdn.net *.twitter.com *.cdninstagram.com *.youtube.com *.whatscompany.com.br *.pagseguro.uol.com.br https://pagseguro.uol.com.br https://www.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.com.br *.tawk.to *.sizebay.com *.sizebay.technology *.tolvnow.com *.addthis.com ; frame-ancestors 'self' *.jetsolution.com.br  *.minhalojanouol.com.br 1
connect-src 'self' wss://*.blockscout.com wss://blockscout.com https://o170146.ingest.sentry.io; default-src 'self' *.google-analytics.com *.googleapis.com *.gstatic.com *.googletagmanager.com; script-src 'self' https://cdn.jsdelivr.net https://www.google-analytics.com https://ajax.cloudflare.com https://www.googletagmanager.com 'unsafe-inline' 'unsafe-eval' ; style-src 'self' 'unsafe-inline' 'unsafe-eval' * https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' * data:; media-src 'self' * data:; font-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://fonts.gstatic.com data:; 1
report-uri https://o52514.ingest.sentry.io/api/5256715/security/?sentry_key=039cc5d9186849878c44ba5804f61696;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ampproject.org cdn.mouseflow.com *.dialogtech.com *.googleapis.com ws1.postescanada-canadapost.ca *.bing.com *.cloudfront.net *.cloudflare.com *.cloudflareinsights.com *.fontawesome.com *.facebook.net *.google-analytics.com *.googleoptimize.com *.googletagmanager.com www.googletagmanager.com *.ada.support *.typekit.net 1
default-src 'self';script-src 'self' 'unsafe-inline' https://analytics-eu.clickdimensions.com https://stats.g.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://www.youtube.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://tagmanager.google.com;img-src 'self' https://seafishprodcorp.blob.core.windows.net https://www.google.co.uk https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com;media-src 'self';frame-src 'self' https://analytics-eu.clickdimensions.com https://e.issuu.com https://youtu.be https://m.youtube.com https://www.youtube.com;font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com;connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com;child-src 'self';worker-src 'self';upgrade-insecure-requests;block-all-mixed-content;report-uri https://www.seafish.org/Umbraco/Api/BrowserReporting/Csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://*.googletagmanager.com https://snap.licdn.com https://code.jquery.com/ui/ https://*.purechat.com https://*.purechatcdn.com https://*.vzaar.com https://*.pinpoll.com https://*.jobtarget.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com https://px.ads.linkedin.com https://stats.g.doubleclick.net https://*.google.com https://*.google.co.uk https://*.vzaar.com; media-src 'self' data: blob: https://*.vzaar.com; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://*.googletagmanager.com https://*.google.com https://*.vzaar.com https://*.pinpoll.com https://*.doubleclick.net https://*.dacast.com https://dacastmmd.mmdlive.lldns.net https://*.cbox.ws; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://telize-v1.p.rapidapi.com/geoip https://*.purechat.com https://*.pinpoll.com https://*.doubleclick.net https://*.google-analytics.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: wss://*.hotjar.com wss://*.zopim.com http://*.hotjar.com:* http://*.hotjar.io http://*.googletagmanager.com http://*.google-analytics.com http://*.gstatic.com http://*.googleapis.com http://*.youtube.com http://*.facebook.com http://*.facebook.net http://*.ads-twitter.com http://*.twitter.com http://t.co http://*.doubleclick.net http://*.adform.net http://*.clarovideo.net http://*.claromusica.com http://*.claro.com.sv http://tiendaenlinea.claro.com.gt http://turbonett.claro.com.gt http://ajax.aspnetcdn.com https://*.hotjar.com:* https://*.hotjar.io https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://*.youtube.com https://*.facebook.com https://*.facebook.net https://*.ads-twitter.com https://*.twitter.com https://t.co https://*.doubleclick.net https://*.adform.net https://*.clarovideo.net https://*.claromusica.com https://*.claro.com.sv https://tiendaenlinea.claro.com.gt https://www.google.com https://pixel.mathtag.com https://turbonett.claro.com.gt https://maps.google.com https://ajax.aspnetcdn.com https://stackpath.bootstrapcdn.com https://cx.atdmt.com; media-src mediastream:; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com fonts.googleapis.com http://api.geonames.org https://ssl.google-analytics.com https://secure.geonames.net http://js-agent.newrelic.com/nr-536.min.js;style-src 'self' 'unsafe-inline' fonts.googleapis.com;connect-src 'self' https://rwforg.speechstream.net http://api.geonames.org https://secure.geonames.net *.accuplacer.org 1
default-src data: https: 'unsafe-inline' 'unsafe-eval'; report-uri https://gamingph.report-uri.com/r/d/csp/enforce 1
anyimage.io/storage/cards/11/62/116294/facebook.jpg?1536066534 js.driftt.com/include/1536137100000/xcr5hn44kanz.js 1
default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://optimize.google.com; style-src * data: blob: 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com; img-src * data: blob: 'unsafe-inline' https://www.google-analytics.com https://optimize.google.com; frame-src * data: blob: https://optimize.google.com; font-src * data: blob: 'unsafe-inline' https://fonts.gstatic.com; connect-src * data: blob: 'unsafe-inline'; report-uri /report-csp-violation 1
default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com piwik.itzbund.de; script-src 'self' 'unsafe-eval' *.googleapis.com piwik.itzbund.de;object-src 'self' multimedia.gsb.bund.de piwik.itzbund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com www.quirksmode.org *.googleapis.com piwik.itzbund.de; child-src *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; font-src 'self' data: *.googleapis.com *.gstatic.com piwik.itzbund.de; frame-ancestors gba-editor-kkn.prod.gsb.gba.in.bund.de piwik.itzbund.de *.facebook.com 1
frame-ancestors 'self' https://home.gio.com.au *.home.gio.com.au; 1
script-src 'self' * 'unsafe-inline' 'unsafe-eval'; worker-src blob:; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: js.hs-scripts.com calendly.com assets.calendly.com *.flipsnack.com online.fliphtml5.com cliq.zoho.com chat.zoho.com appeuds2cfb.blob.core.cloudapi.de embed.polleverywhere.com shibboleth.columbia.edu cas.columbia.edu eacct-columbiauniversity-sp.blackboard.com app.acuityscheduling.com nudining.com *.nudining.com dineoncampus.com *.dineoncampus.com google.com *.google.com google-analytics.com *.google-analytics.com myfonts.net *.myfonts.net gstatic.com *.gstatic.com googleapis.com *.googleapis.com sentry.io *.sentry.io ytimg.com *.ytimg.com ggpht.com *.ggpht.com twimg.com *.twimg.com twitter.com *.twitter.com facebook.com *.facebook.com facebook.net *.facebook.net gethealthie.com *.gethealthie.com youtube.com *.youtube.com fbcdn.net *.fbcdn.net vimeo.com *.vimeo.com; img-src * data: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' adservice.google.ad adservice.google.ae adservice.google.al adservice.google.am adservice.google.as adservice.google.at adservice.google.az adservice.google.be adservice.google.bf adservice.google.bg adservice.google.bj adservice.google.bs adservice.google.bt adservice.google.ca adservice.google.cd adservice.google.ch adservice.google.ci adservice.google.cl adservice.google.cm adservice.google.co.ao adservice.google.co.bw adservice.google.co.cr adservice.google.co.id adservice.google.co.il adservice.google.co.in adservice.google.co.jp adservice.google.co.ke adservice.google.co.kr adservice.google.co.ls adservice.google.co.mz adservice.google.co.nz adservice.google.co.th adservice.google.co.tz adservice.google.co.ug adservice.google.co.uk adservice.google.co.uz adservice.google.co.ve adservice.google.co.za adservice.google.co.zm adservice.google.co.zw adservice.google.com adservice.google.com.af adservice.google.com.ag adservice.google.com.ar adservice.google.com.au adservice.google.com.bd adservice.google.com.bh adservice.google.com.bn adservice.google.com.bo adservice.google.com.br adservice.google.com.bz adservice.google.com.co adservice.google.com.cu adservice.google.com.cy adservice.google.com.ec adservice.google.com.eg adservice.google.com.et adservice.google.com.et adservice.google.com.fj adservice.google.com.gh adservice.google.com.gi adservice.google.com.gt adservice.google.com.hk adservice.google.com.jm adservice.google.com.kh adservice.google.com.kw adservice.google.com.lb adservice.google.com.ly adservice.google.com.mm adservice.google.com.mt adservice.google.com.mx adservice.google.com.my adservice.google.com.na adservice.google.com.ng adservice.google.com.ni adservice.google.com.np adservice.google.com.om adservice.google.com.pa adservice.google.com.pe adservice.google.com.pg adservice.google.com.ph adservice.google.com.pk adservice.google.com.pr adservice.google.com.py adservice.google.com.qa adservice.google.com.sa adservice.google.com.sg adservice.google.com.sv adservice.google.com.tr adservice.google.com.tw adservice.google.com.ua adservice.google.com.uy adservice.google.com.vc adservice.google.com.vn adservice.google.cv adservice.google.cz adservice.google.de adservice.google.dk adservice.google.dz adservice.google.ee adservice.google.ee adservice.google.es adservice.google.fi adservice.google.fm adservice.google.fr adservice.google.ge adservice.google.gg adservice.google.gl adservice.google.gm adservice.google.gp adservice.google.gr adservice.google.gy adservice.google.hn adservice.google.hn adservice.google.hr adservice.google.ht adservice.google.hu adservice.google.ie adservice.google.im adservice.google.iq adservice.google.is adservice.google.it adservice.google.je adservice.google.je adservice.google.jo adservice.google.kg adservice.google.kg adservice.google.ki adservice.google.kz adservice.google.la adservice.google.lk adservice.google.lt adservice.google.lu adservice.google.lv adservice.google.md adservice.google.me adservice.google.mg adservice.google.mk adservice.google.mn adservice.google.ms adservice.google.mu adservice.google.mv adservice.google.mw adservice.google.nl adservice.google.no adservice.google.pl adservice.google.ps adservice.google.pt adservice.google.ro adservice.google.rs adservice.google.ru adservice.google.rw adservice.google.se adservice.google.si adservice.google.sk adservice.google.sm adservice.google.so adservice.google.sr adservice.google.tg adservice.google.tm adservice.google.tn adservice.google.tt adservice.google.vg adservice.google.vu assets.pinterest.com cdnjs.cloudflare.com js.stripe.com log.pinterest.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagservices.com www.gstatic.cn www.gstatic.com www.recaptcha.net; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com; frame-src 'self' googleads.g.doubleclick.net hooks.stripe.com js.stripe.com tpc.googlesyndication.com www.google.com www.recaptcha.net; font-src 'self' data: fonts.gstatic.cn fonts.gstatic.com; connect-src 'self' adservice.google.com api.stripe.com csi.gstatic.com pagead2.googlesyndication.com sentry.io www.google-analytics.com; img-src 'self' data: www.google.ad www.google.ae www.google.at www.google.be www.google.ca www.google.ch www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.kr www.google.co.mz www.google.co.nz www.google.co.th www.google.co.uk www.google.co.za www.google.co.zm www.google.com.ar www.google.com.au www.google.com.bh www.google.com.br www.google.com.co www.google.com.cy www.google.com.eg www.google.com.hk www.google.com.kw www.google.com.lb www.google.com.mx www.google.com.my www.google.com.om www.google.com.pa www.google.com.ph www.google.com.qa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.com www.google.cz www.google.de www.google.dk www.google.es www.google.fi www.google.fr www.google.gp www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.kz www.google.lu www.google.lv www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.sm www.google.tl www.google.tt cdnjs.cloudflare.com csi.gstatic.com googleads.g.doubleclick.net pagead2.googlesyndication.com www.google-analytics.com www.gstatic.com; manifest-src 'self'; media-src 'self'; form-action 'self' secure.worldpay.com www.paypal.com; frame-ancestors 'none'; upgrade-insecure-requests; report-uri https://shockwavesound.report-uri.com/r/d/csp/enforce 1
frame-ancestors 'self' http://webvisor.com https://www.youtube.com/ 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.vimeo.com *.vimeocdn.com *.google.com *.googleapis.com *.google-analytics.com *.gstatic.com *.ytimg.com *.doubleclick.net *.placeholder.com *.facebook.net *.licdn.com *.baufragen.de ; style-src 'unsafe-inline' 'self' *.googleapis.com *.youtube.com *.vimeo.com *.vimeocdn.com ; img-src 'self' data: blob: *.youtube.com *.vimeo.com *.vimeocdn.com *.google.com *.googleapis.com *.google-analytics.com *.gstatic.com *.ytimg.com *.doubleclick.net *.placeholder.com *.facebook.com *.linkedin.com ; frame-src 'self' *.youtube.com *.vimeo.com *.google.com *.facebook.com *.treedom.net *.baufragen.de ; connect-src 'self' *.youtube.com *.vimeo.com *.vimeocdn.com *.google-analytics.com *.facebook.com *.doubleclick.net ; worker-src 'self' *.vimeo.com *.vimeocdn.com *.youtube.com; font-src 'self' fonts.gstatic.com ; 1
default-src 'self'; frame-ancestors 'self' https://www.idicore.com; frame-src 'self' https://www.idicore.com https://admin.idicore.com https://account.idicore.com; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://munchkin.marketo.net https://scripts.demandbase.com https://geolocation.onetrust.com https://connect.facebook.net https://snap.licdn.com https://js.adsrvr.org https://*.linkedin.com https://*.windows.net https://*.fullstory.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.windows.net; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://api.qlikdataengineering.com https://*.amazonaws.com https://*.launchdarkly.com https://api.rollbar.com https://*.zuora.com https://*.mktoresp.com https://api.company-target.com https://*.onetrust.com https://*.fullstory.com blob: https://login.qlik.com; frame-src 'self' https://*.zuora.com https://www.googletagmanager.com https://insight.adsrvr.org https://login.qlik.com; img-src 'self' https://*.gravatar.com https://*.wp.com https://*.zuora.com https://*.company-target.com https://match.prod.bidr.io https://www.google-analytics.com https://*.doubleclick.net https://*.facebook.com 1
font-src 'self' fonts.gstatic.com code.ionicframework.com mirvac-cdn-staging.azureedge.net mirvac-cdn-dev.azureedge.net cdn.curator.io mirvac-cdn-auth.azureedge.net mirvac-cdn-prd.azureedge.net google.com google.com.au google-analytics.com instagram.com www.bugherd.comt d2iiunr5ws5ch1.cloudfront.net *.cloudfront.net;img-src 'self' data: *.fbcdn.net  www.instagram.com mirvac-cdn-staging.azureedge.net www.google.com www.google.com.au www.google-analytics.com scontent-syd2-1.cdninstagram.com instagram.fsyd8-1.fna.fbcdn.net scontent.xx.fbcdn.net www.instagram.com maps.gstatic.com maps.googleapis.com mirvac-cdn-dev.azureedge.net mirvac-cdn-auth.azureedge.net mirvac-cdn-prd.azureedge.net d2iiunr5ws5ch1.cloudfront.net *.cloudfront.net *.ytimg.com cdn.curator.io curatorio.s3.amazonaws.com *.cdninstagram.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com cdn.curator.io mirvac-cdn-staging.azureedge.net www.bugherd.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com ajax.googleapis.com maxcdn.bootstrapcdn.com www.gstatic.com mirvac-cdn-dev.azureedge.net mirvac-cdn-auth.azureedge.net mirvac-cdn-prd.azureedge.net  www.gstatic.com static.zdassets.com *.cloudfront.net www.youtube.com s.ytimg.com www.google.com 'self' 'unsafe-inline' 'unsafe-eval' snap.licdn.com clicktime.symantec.com lcmagentportal.appspot.com cdn.curator.io ds.serving-sys.com secure-ds.serving-sys.com bs.serving-sys.com www.googleadservices.com maps.googleapis.com tagmanager.google.com www.google-analytics.com ssl.google-analytics.com ajax.googleapis.com maxcdn.bootstrapcdn.com www.gstatic.com mirvac-cdn-auth.azureedge.net mirvac-cdn-prd.azureedge.net static.zdassets.com cdnjs.cloudflare.com acdn.adnxs.com js.adsrvr.org  widget-mediator.zopim.com connect.facebook.net storage.googleapis.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.curator.io mirvac-cdn-dev.azureedge.net mirvac-cdn-staging.azureedge.net mirvac-cdn-auth.azureedge.net mirvac-cdn-prd.azureedge.net d2iiunr5ws5ch1.cloudfront.net *.cloudfront.net tagmanager.google.com cdnjs.cloudflare.com; 1
frame-ancestors 'self' http://claro.com.ec http://www.claro.com.ec http://m.miclaro.com.ec https://m.miclaro.com.ec http://miclaro.com.ec https://miclaro.com.ec http://www.miclaro.com.ec https://www.miclaro.com.ec https://miclaro.ec.clarodigital.net http://miclaro.ec.clarodigital.net http://miclaro.ec https://miclaro.ec https://miclaro-ec.amx-dev.amxdigital.nethttp://miclaro-ec.amx-dev.amxdigital.net https://amxdigital.net http://amxdigital.net https://miclaro-ec.amx-dev.amxdigital.net/ http://miclaro-ec.amx-dev.amxdigital.net/  1
frame-ancestors 'self' https://dc.winmate-service.com/ https://www.winmate.com/ https://na.winmate.com/  https://na.winmate-rugged.com/ http://na.winmate-rugged.com/ https://localhost:8081/ https://winmate-rugged.com/ http://www3.winmate/ https://partner.winmate.com/ https://website.winmate-service.com/;  1
frame-ancestors 'self' https://*.photoreading.com; 1
default-src 'self' static.mycity.travel static.www.region-du-leman.ch * 'unsafe-inline' 'unsafe-eval' data: blob:; upgrade-insecure-requests; frame-ancestors: 'self' https://static.mycity.travel *; 1
frame-ancestors *.firsthorizon.com 1
default-src 'unsafe-inline' 'self' *.toytoy.ir ajax.aspnetcdn.com cdn.sendpulse.com cdnjs.cloudflare.com *.kxcdn.com trustseal.enamad.ir www.google-analytics.com www.searchanise.com *.doubleclick.net *.yandex.ru yastatic.net *.yandex.net; img-src 'unsafe-inline' 'self' *.toytoy.ir trustseal.enamad.ir data: www.google-analytics.com *.yandex.ru yastatic.net *.yandex.net; frame-src *.toytoy.ir toytoy.ir  *.aparat.com;font-src 'unsafe-inline' 'self' *.googleusercontent.com *.searchanise.com *.toytoy.ir data: 1
default-src 'self' data: *.cloudflare.com *.google-analytics.com www.googletagmanager.com *.googleoptimize.com tagmanager.google.com *.doubleclick.net *.googleapis.com *.google.com *.google.co.nz *.facebook.net *.facebook.com api.mapbox.com s3.amazonaws.com *.qualaroo.com *.newrelic.com *.nr-data.net *.youtube.com *.ytimg.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com app.redpepperdigital.net publications.redpepperdigital.net *.typeform.com www.surveygizmo.com 'unsafe-inline' 'unsafe-eval' shielded.co.nz staticcdn.co.nz ; 1
default-src 'self' www.google-analytics.com; script-src 'self' cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com florenceva.blob.core.windows.net 'unsafe-inline' 'unsafe-eval'; style-src 'self' www.epic.com maxcdn.bootstrapcdn.com fonts.googleapis.com 'unsafe-inline'; font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com; img-src www.google-analytics.com i.ytimg.com www.epic.com www-dev.epic.com ehrn.org ehrnprd.blob.core.windows.net 'self' data:; frame-src 'self' https://www.youtube.com 1
default-src 'self' 'unsafe-eval' blob: *.googleapis.com *.google.com *.mapbox.com *.cloudfront.net http://*.cloudfront.net *.google-analytics.com *.doubleclick.net *.google.co.uk *.intercomassets.com *.gstatic.com *.intercom.io *.intercomcdn.com *.cloudflare.com wss://*.intercom.io *.receptive.io receptive.io *.facebook.com *.fbsbx.com unpkg.com *.twimg.com connect.facebook.net https://feedback.eu.pendo.io *.purpleportal.net *.fbcdn.net https://*.amazonaws.com *.youtube.com *.pendo.io *.a3cloud.net https://*.purple.ai *.ggpht.com https://*.delighted.com *.googletagmanager.com https://*.blackfire.io https://*.venuewifi.net https://*.venuewifi.com https://collection.wifi4eu.ec.europa.eu https://purplewifi.cloud.looker.com https://wifi4eucollectorprod.azurewebsites.net data: 'unsafe-inline'; 1
default-src 'unsafe-inline' 'unsafe-eval' https:;img-src * data:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.www.google-analytics.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://pi.pardot.com/pd.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.pi.pardot.com *.cdn-images.mailchimp.com *.maxcdn.bootstrapcdn.com *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org; style-src 'self' 'unsafe-inline' *.cdn-images.mailchimp.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css https://cdn-images.mailchimp.com/embedcode/slim-10_7.css *.twimg.com; img-src 'self' https://acaraweb.blob.core.windows.net *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com; font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; connect-src 'self' accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com; media-src 'self' data: blob:; child-src 'self' https://app.powerbi.com/ https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; 1
default-src https: wss: data: mediastream: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; frame-ancestors 'self' 1
policy-uri /'unsafe-inline' 1
default-src 'self' https:;                                                   style-src 'self' 'unsafe-inline' *.ensemblevideo.com *.marketo.net *.marketo.com *.typekit.net *.bootstrapcdn.com *.googleapis.com *.twitter.com *.twimg.com;                                                    script-src 'self' 'unsafe-inline' *.marketo.net *.marketo.com *.mktoresp.com *.bugherd.com *.liveperson.net *.lpsnmedia.net *.terminus.services *.jwpcdn.com *.jquery.com *.googletagmanager.com *.google-analytics.com *.googleapis.com  *.adsrvr.org *.twitter.com *.twimg.com *.oktopost.com okt.to *.adroll.com *.adroll.mgr.consensu.org *.sounder.fm *.facebook.net *.licdn.com *.ramblechat.com;                                                    object-src 'self';                                                   connect-src 'self' *.mktoresp.com *.google-analytics.com *.googleapis.com *.gstatic.com wss://*.ramblechat.com data:;                                                    font-src 'self' *.bootstrapcdn.com *.typekit.net *.gstatic.com data:;                                                    img-src * *.jwpltx.com data:;                                                   frame-ancestors 'self' *.ensemblevideo.com *.marketo.com *.marketo.net netsmart.highspot.com; 1
script-src: https://www.google-analytics.com 1
default-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' cdn.polyfill.io maps.googleapis.com cdn.emailjs.com cdn.optimizely.com cdn.mxpnl.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net bat.bing.com static.ads-twitter.com analytics.twitter.com platform.twitter.com www.google-analytics.com ssl.google-analytics.com js.hs-scripts.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com www.linkedin.com sjs.bizographics.com; img-src 'self' https: data:; object-src 'self'; base-uri 'self'; upgrade-insecure-requests;report-uri https://console.snips.ai/report-csp-violation 1
frame-ancestors 'self' https://*.monuta.nl https://*.monutanet.nl https://*.heilbron.nl https://*.finly.nl https://*.kralwesten.nl 1
default-src 'self' allxpsoft.com;style-src 'self' 'unsafe-inline' http://vk.com https://vk.com http://fonts.googleapis.com https://fonts.googleapis.com;frame-src 'self' http://vk.com https://vk.com http://*.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com http://*.googlesyndication.com;media-src 'self';connect-src 'self' https://*.googlesyndication.com http://*.googlesyndication.com;font-src 'self' http://fonts.gstatic.com https://fonts.gstatic.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' http://ajax.googleapis.com https://ajax.googleapis.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.googleadservices.com https://*.googleadservices.com http://*.google.hr https://*.google.hr http://*.google.co.id https://*.google.co.id http://*.google.dz https://*.google.dz http://*.google.com.eg https://*.google.com.eg http://*.google.com.pe https://*.google.com.pe http://*.google.co.ve https://*.google.co.ve http://*.google.fr https://*.google.fr http://*.google.ca https://*.google.ca http://*.google.com.bo https://*.google.com.bo http://*.google.com.br https://*.google.com.br http://*.google.es https://*.google.es http://*.google.com.mt https://*.google.com.mt http://*.google.co.tz https://*.google.co.tz http://*.google.it https://*.google.it http://*.google.com.mx https://*.google.com.mx http://*.google.pl https://*.google.pl http://*.google.rs https://*.google.rs http://*.google.com.ar https://*.google.com.ar http://*.google.com.gh https://*.google.com.gh http://*.google.cz https://*.google.cz http://*.google.bg https://*.google.bg http://*.google.com.tr https://*.google.com.tr http://*.google.co.kr https://*.google.co.kr http://*.google.co.bw https://*.google.co.bw http://*.google.cl https://*.google.cl http://*.google.gr https://*.google.gr http://*.google.com.tw https://*.google.com.tw http://*.google.ne https://*.google.ne http://*.google.tg https://*.google.tg http://*.google.com.ec https://*.google.com.ec http://*.google.ie https://*.google.ie http://*.google.com.cy https://*.google.com.cy http://*.google.ro https://*.google.ro http://*.google.co.za https://*.google.co.za http://*.google.co.uk https://*.google.co.uk http://*.google.hu https://*.google.hu http://*.google.com.au https://*.google.com.au http://*.google.co.ug https://*.google.co.ug http://*.google.co.ke https://*.google.co.ke http://*.google.co.th https://*.google.co.th http://*.google.co.in https://*.google.co.in http://*.google.ci https://*.google.ci http://*.google.co.nz https://*.google.co.nz http://*.google.com.ng https://*.google.com.ng http://*.google.lk https://*.google.lk http://*.google.com.my https://*.google.com.my http://*.google.com.ph https://*.google.com.ph http://*.google.com.hk https://*.google.com.hk http://*.google.me https://*.google.me http://*.google.nl https://*.google.nl http://*.google.co.jp https://*.google.co.jp http://*.google.com.sa https://*.google.com.sa http://*.google.com.pk https://*.google.com.pk http://*.google.com.vn https://*.google.com.vn http://*.google.com.ni https://*.google.com.ni http://*.google.com.bd https://*.google.com.bd http://*.google.com.co https://*.google.com.co http://*.google.sk https://*.google.sk http://*.google.md https://*.google.md http://*.google.com.sg https://*.google.com.sg http://*.google.jo https://*.google.jo http://*.google.cm https://*.google.cm http://*.google.so https://*.google.so http://*.google.tn https://*.google.tn http://*.google.al https://*.google.al http://*.google.com.om https://*.google.com.om http://*.google.mk https://*.google.mk http://*.google.com.kw https://*.google.com.kw http://*.google.com.cu https://*.google.com.cu http://*.google.com.uy https://*.google.com.uy http://*.google.ae https://*.google.ae http://*.google.mu https://*.google.mu http://*.google.tt https://*.google.tt http://*.google.ch https://*.google.ch http://*.google.sm https://*.google.sm http://*.google.iq https://*.google.iq http://*.google.lt https://*.google.lt http://*.google.pt https://*.google.pt http://*.google.com.bh https://*.google.com.bh http://*.google.sn https://*.google.sn http://*.google.com.sv https://*.google.com.sv http://*.google.se https://*.google.se http://*.google.co.cr https://*.google.co.cr http://*.google.com.np https://*.google.com.np http://*.google.co.zm https://*.google.co.zm http://*.google.ee https://*.google.ee http://*.google.si https://*.google.si http://*.google.co.il https://*.google.co.il http://*.google.be https://*.google.be http://*.google.com.kh https://*.google.com.kh http://*.google.mn https://*.google.mn http://*.google.mg https://*.google.mg http://*.google.com.lb https://*.google.com.lb http://*.google.com.qa https://*.google.com.qa http://*.google.com.et https://*.google.com.et http://*.google.td https://*.google.td http://*.google.az https://*.google.az http://*.google.co.uz https://*.google.co.uz http://*.google.co.ao https://*.google.co.ao http://*.google.dk https://*.google.dk http://*.google.sr https://*.google.sr http://*.google.bj https://*.google.bj http://*.google.cg https://*.google.cg http://*.google.com.gt https://*.google.com.gt http://*.google.ad https://*.google.ad http://*.google.lv https://*.google.lv http://*.google.kz https://*.google.kz http://*.google.at https://*.google.at http://*.google.ge https://*.google.ge http://*.google.com.pa https://*.google.com.pa http://*.google.com.pr https://*.google.com.pr http://*.google.no https://*.google.no http://*.google.com.ly https://*.google.com.ly http://*.google.com.bn https://*.google.com.bn http://*.google.com.mm https://*.google.com.mm http://*.google.cd https://*.google.cd http://*.google.bi https://*.google.bi http://*.google.kg https://*.google.kg http://*.google.co.zw https://*.google.co.zw http://*.google.co.mz https://*.google.co.mz http://*.google.gm https://*.google.gm http://*.google.ga https://*.google.ga http://*.google.com.af https://*.google.com.af http://*.google.ps https://*.google.ps http://*.google.hn https://*.google.hn http://*.google.ml https://*.google.ml http://*.google.com.py https://*.google.com.py http://*.google.fi https://*.google.fi http://*.google.rw https://*.google.rw http://*.google.la https://*.google.la http://*.google.mw https://*.google.mw http://*.google.com.jm https://*.google.com.jm http://*.google.ht https://*.google.ht http://*.google.com.bz https://*.google.com.bz http://*.google.bf https://*.google.bf http://*.google.com.tj https://*.google.com.tj http://*.google.com.fj https://*.google.com.fj http://*.google.com.sb https://*.google.com.sb http://*.google.co.ls https://*.google.co.ls http://*.google.com.na https://*.google.com.na http://*.google.gy https://*.google.gy http://*.google.mv https://*.google.mv http://*.google.cv https://*.google.cv http://*.google.cf https://*.google.cf http://*.google.bt https://*.google.bt http://*.google.bs https://*.google.bs http://*.google.com.pg https://*.google.com.pg http://*.google.tm https://*.google.tm http://*.google.je https://*.google.je http://*.google.sc https://*.google.sc http://*.google.lu https://*.google.lu http://vk.com https://vk.com http://*.google.de https://*.google.de http://*.google.ru https://*.google.ru http://*.google.com https://*.google.com http://*.google.com.ua https://*.google.com.ua https://*.googletagservices.com http://*.googletagservices.com;img-src 'self' http://vk.com https://vk.com http://counter.yadro.ru https://counter.yadro.ru http://*.googlesyndication.com https://*.googlesyndication.com http://*.googleadservices.com https://*.googleadservices.com data: blob: filesystem:;report-uri https://allxpsoft.com/31d81706659151e8da5b3cf131/; 1
default-src * blob:; connect-src https: wss:; font-src https: data:; frame-src https: data: qa-freeconferencecall: freeconferencecall: qa-startmeeting: startmeeting:; img-src https: data:; media-src https: blob:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: data:; style-src https: 'unsafe-inline'; worker-src https: blob:; report-uri https://csp-bin.freeconferencecall.com/bins/b56a1d03/ 1
default-src 'self' https://maps.googleapis.com http://maps.googleapis.com https://mapa.targeo.pl http://mapa.targeo.pl; font-src 'self' https://maps.googleapis.com http://maps.googleapis.com https://mapa.targeo.pl https://fonts.gstatic.com http://mapa.targeo.pl; style-src 'self' 'unsafe-inline' clients1.google.com https://cse.google.com https://tagmanager.google.com https://*.hit.api.useinsider.com https://*.api.sociaplus.com https://*.api.useinsider.com https://maps.googleapis.com www.googleapis.com https://*.google.com http://maps.googleapis.com http://mapa.targeo.pl https://api.useinsider.com www.google.com https://mapa.targeo.pl http://cse.google.com https://fonts.googleapis.com; img-src 'self' data: http://img.targeo.pl https://*.targeo.pl https://stats.g.doubleclick.net https://m40.targeo.pl https://www.facebook.com https://maps.googleapis.com https://tl.tradetracker.net https://ssl.google-analytics.com http://mapa.targeo.pl https://ssl.bankier.pl http://google.com www.google.com https://direct.money.pl https://mapa.targeo.pl https://public.tableau.com www.google-analytics.com clients1.google.com https://cse.google.com https://ssl.hit.stat24.com https://image.useinsider.com https://m50.targeo.pl https://csi.gstatic.com www.googleapis.com https://st.hit.gemius.pl https://www.google.pl https://maps.gstatic.com http://maps.googleapis.com https://px.ads.linkedin.com https://www.googletagmanager.com https://www.google-analytics.com http://*.googleusercontent.com https://www.google.com.tr http://maps.gstatic.com; frame-src 'self' https://vars.hotjar.com https://www.linkedin.com https://fls.doubleclick.net https://optimize.google.com https://*.hit.api.useinsider.com https://*.api.useinsider.com http://formularzzapisu.webankieta.pl https://www.facebook.com https://maps.googleapis.com http://formularzzapisu2.webankieta.pl https://8331881.fls.doubleclick.net https://formularzzapisu.webankieta.pl http://mapa.targeo.pl cse.google.com https://mapa.targeo.pl https://www.bik.pl https://public.tableau.com https://www.youtube.com https://ad.doubleclick.net https://formularzzapisu2.webankieta.pl https://*.api.sociaplus.com https://www.webankieta.pl https://webinariumzapis.webankieta.pl https://konto.bik.pl https://scorehunter.pl http://maps.googleapis.com https://www.googletagmanager.com https://scorehunter.edu.pl https://*.webankieta.pl http://www.webankieta.pl http://webinariumzapis.webankieta.pl staticxx.facebook.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://vars.hotjar.com https://optimize.google.com https://*.hit.api.useinsider.com https://script.hotjar.com https://m40.targeo.pl https://static.hotjar.com https://*.api.useinsider.com https://www.facebook.com https://*.googleapis.com https://ssl.google-analytics.com https://*.google.com http://mapa.targeo.pl https://api.useinsider.com https://api.sociaplus.com https://mapa.targeo.pl https://public.tableau.com www.google-analytics.com https://connect.facebook.net https://*.api.sociaplus.com https://m20.targeo.pl https://m50.targeo.pl https://www.webankieta.pl https://snap.licdn.com https://www.googletagmanager.com https://googleapis.com https://www.google-analytics.com; object-src 'self' https://maps.googleapis.com http://maps.googleapis.com https://mapa.targeo.pl http://mapa.targeo.pl; connect-src 'self' https://insights.hotjar.com https://ssl.google-analytics.com https://connect.facebook.net https://hit.api.useinsider.com http://mapa.targeo.pl https://*.hotjar.com https://stats.g.doubleclick.net https://static.hotjar.com https://www.google-analytics.com https://mapa.targeo.pl https://snap.licdn.com www.google-analytics.com;  1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-yxnCpSh9HvzI2tBqL2Jyyg' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
script-src 'self' 'unsafe-inline' https: 1
default-src 'self' *.moneta.ru *.moneta.com *.payanyway.ru *.payanyway.com ; script-src * 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.moneta.ru *.moneta.com *.payanyway.ru *.payanyway.com 'unsafe-inline'; img-src * data:; font-src 'self' data: *.moneta.ru *.moneta.com *.payanyway.ru *.payanyway.com https://fonts.gstatic.com https://sxt.cdn.skype.com ; connect-src 'self' *.moneta.ru *.moneta.com *.payanyway.ru *.payanyway.com https://www.google-analytics.com https://mc.yandex.ru ; frame-src https: ; report-uri /cspreport.htm 1
default-src 'self' *.citybbq.com citybbq.staging.wpengine.com citybbq.wpengine.com http://citybbqstage.wpengine.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net unpkg.com *.tiles.mapbox.com api.mapbox.com tracedseals.starfieldtech.com imagesak.secureserver.net maps.googleapis.com *.gstatic.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.g.doubleclick.net tagmanager.google.com connect.facebook.net citybbq.disqus.com disqus.com *.disquscdn.com;style-src 'self' 'unsafe-inline' *.tiles.mapbox.com api.mapbox.com fonts.googleapis.com hello.myfonts.net *.disquscdn.com;font-src 'self' fonts.googleapis.com fonts.gstatic.com;img-src 'self' data: blob: *.facebook.com *.google-analytics.com *.google.com *.g.doubleclick.net csi.gstatic.com maps.googleapis.com *.disqus.com *.disquscdn.com *.gstatic.com tracedseals.starfieldtech.com https://i3.ytimg.com http://citybbqstage.wpengine.com;frame-src 'self' *.g.doubleclick.net *.google.com *.googletagmanager.com iframe.punchh.com disqus.com *.youtube.com https://www.facebook.com;connect-src 'self' *.tiles.mapbox.com api.mapbox.com events.mapbox.com https://www.googleadservices.com https://www.google.com;worker-src 'self' blob:;child-src 'self' blob:; 1
default-src *; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://*; style-src 'self' data: 'unsafe-inline' https://*; img-src https://* 'self' data:; font-src 'self' data: https://* 1
img-src * data: blob:* 1
default-src 'self' https://*.bootstrapcdn.com; connect-src 'self' wss://onlinezakladki.ru https://*.yandex.ru wss://*.yandex.net https://*.bing.com; script-src  'self' 'unsafe-inline' 'unsafe-eval' data: about: https://*.yandex.ru https://*.yandex.net https://*.wikipedia.org https://*.mail.ru https://*.google.ru https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.adguard.com https://*.bootstrapcdn.com https://*.jquery.com https://*.jsdelivr.net https://duckduckgo.com https://*.yahoo.com https://*.bing.com; img-src  'self' data: http://*.onlinezakladki.ru https://*.yandex.ru https://*.yandex.ua https://*.yandex.com https://*.webvisor.org https://*.webvisor.com https://yastatic.net https://*.gstatic.com https://*.google-analytics.com; style-src 'self' 'unsafe-inline' data: https://*.bootstrapcdn.com/ https://*.googleapis.com; font-src 'self' https://*.bootstrapcdn.com https://fonts.gstatic.com https://*.skype.com; child-src 'self' blob: data: https://*.youtube.com; 1
default-src 'self' fonts.googleapis.com fonts.gstatic.com www.google-analytics.com www.google.com stats.g.doubleclick.net www.google.ie www.google.co.uk; script-src 'self' https://www.googletagmanager.com https://trk.hostingireland.ie 'unsafe-inline' https://c.microsoft.com www.google-analytics.com https://www.googleadservices.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' www.google.com www.google.ie www.google-analytics.com www.gstatic.com stats.g.doubleclick.net www.google.co.uk https://trk.hostingireland.ie; font-src 'self' data: fonts.gstatic.com themes.googleusercontent.com; connect-src 'self' www.google-analytics.com stats.g.doubleclick.net; child-src https://www.microsoft.com; form-action clients.hostingireland.ie; upgrade-insecure-requests; report-uri https://hostingireland.report-uri.com/r/d/csp/enforce; 1
default-src  'self' 'unsafe-inline'; font-src https://fonts.gstatic.com https://*.typekit.net 'self'; child-src  'self'; connect-src https://collector.leadinfo.net/ https://*.doubleclick.net/ https://www.google-analytics.com/ https://*.convio.us wss://*.convio.us https://nec.blueconic.net 'self'; frame-src https://form.typeform.com/ https://www.sporcle.com/ https://www.googletagmanager.com https://www.instagram.com/ https://content.streamone.net/ https://twitter.com https://*.twitter.com/ https://*.facebook.com/ https://www.youtube.com/ https://stanza.co/ https://*.gxcloud.local https://*.gxcloud.net https://*.convio.us https://*.typekit.net https://*.amazonaws.com https://player.streampunt.nl/ 'self'; frame-ancestors  'self'; img-src https://*.gxcloud.net/ http://*.gxcloud.net/ https://*.nec-nijmegen.nl/ https://*.doubleclick.net/ https://nec.blueconic.net https://*.convio.us https://*.typekit.net https://*.amazonaws.com https://*.twimg.com/ https://www.google-analytics.com https://*.twitter.com/ https://www.google.com/ https://plugins.blueconic.net https://www.google.nl/ 'self' data:; media-src  'self'; object-src  'self'; script-src  'self' 'unsafe-inline' 'unsafe-eval' data: https: wss:; style-src https://*.google.com/ https://*.twitter.com/ https://ton.twimg.com/ https://plugins.blueconic.net/ 'self' 'unsafe-inline';  worker-src  'self' blob: 1
frame-ancestors *.theclearinghouse.org 1
style-src 'self' 'unsafe-inline' www2.triodos.com; img-src 'self' p-pan.triodos.com api.triodos.com maps.triodos.com www2.triodos.com video.triodos.com ad.doubleclick.net adservice.google.com www.facebook.com data: android-webview-video-poster:; font-src 'self' data:; script-src 'self' 'nonce-c859a4ce-ac32-4e37-85ef-d62503830b9e' t-pan.triodos.com p-pan.triodos.com www2.triodos.com video.triodos.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com; child-src https://www.youtube.com https://www.youtube-nocookie.com; default-src 'self' video.triodos.com; 1
frame-ancestors https://*.okanagan.bc.ca; report-uri /report-csp-violation 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.rta.ae *.salik.gov.ae *.salik.rta.ae *.salik.ae *.readspeaker.com/ *.google-analytics.com *.botframework.com/ wss://directline.botframework.com *.dubai.gov.ae/ *.google.ae *.googleapis.com *.gstatic.com data: 1
default-src 'self' circl.lu www.circl.lu www.gstatic.com; 1
default-src 'self' http: https: data: google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: code.jquery.com google-analytics.com google.com; style-src 'self' 'unsafe-inline' http: https: fonts.googleapis.com; img-src 'self' http: https: data: *.gravatar.com; font-src 'self' http: https: data: fonts.googleapis.com themes.googleusercontent.com; block-all-mixed-content 1
default-src https://insights.hotjar.com app2.salesmanago.pl https://syndication.twitter.com https://graylog.hotjar.com 'self'; font-src 'self'; style-src https://bitly.com www.google.com https://cse.google.com https://tagmanager.google.com platform.twitter.com https://ton.twimg.com 'self' 'unsafe-inline'; img-src clients1.google.com https://static.hotjar.com https://abs.twimg.com www.googleapis.com https://rpm.mennica.com.pl https://facebook.com https://pbs.twimg.com syndication.twitter.com http://user-mrp-ow.ext.e-point.pl stats.g.doubleclick.net https://www.google.pl https://app2.salesmanago.pl https://user-mrp-ow.ext.e-point.pl https://o.twimg.com facebook.com www.google.com platform.twitter.com http://rpm.mennica.com.pl www.google-analytics.com https://ton.twimg.com 'self' data:; frame-src https://bitly.com https://*.google.com https://vars.hotjar.com https://www.googletagmanager.com www.google.com www.youtube.com platform.twitter.com https://facebook.com https://www.youtube.com syndication.twitter.com 'self'; script-src http://*.google.com https://script.hotjar.com https://static.hotjar.com https://www.facebook.com www.googleapis.com https://facebook.com connect.facebook.net *.twitter.com https://bitly.com app2.emlgrid.com https://*.google.com http://www.google.com https://app2.salesmanago.pl static.hotjar.com www.googletagmanager.com https://www.gstatic.com https://www.googletagmanager.com facebook.com https://www.google-analytics.com https://app2.emlgrid.com app2.salesmanago.pl https://cdn.syndication.twimg.com https://cdn.jsdelivr.net www.google-analytics.com 'self' 'unsafe-eval' 'unsafe-inline'; object-src 'self'; connect-src http://app2.salesmango.pl https://app2.salesmanago.pl https://in.hotjar.com 'self' 1
frame-src 'self' https://promericagt.custhelp.com https://promericaopa.custhelp.com https://wstasacambio.bancopromerica.com.gt https://stags.bluekai.com https://tags.bkrtx.com https://vars.hotjar.com/ https://promericagt--tst1.custhelp.com https://enlz-prod1-apps6.builder.ocp.oraclecloud.com https://ventus.enalog.se  1
default-src 'self' * 'unsafe-inline' 'unsafe-eval'; font-src 'self' * data:; img-src 'self' * data:; 1
default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src https: blob:; object-src https:; child-src https: data: blob:; form-action https:; block-all-mixed-content; frame-ancestors 'self' builder.io; 1
connect-src 'self' https://www.paypal.com https://fastmail.innocraft.cloud; default-src 'none'; img-src 'self' data: https://fastmail.innocraft.cloud https://*.twimg.com https://*.twitter.com https://www.gravatar.com https://icgroup.helpspot.com https://www.paypalobjects.com http://www.pobox.com https://*.gstatic.com https://www.fastmail.com; font-src 'self' data: http://fonts.gstatic.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.twitter.com https://*.twimg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.gstatic.com https://*.twitter.com https://*.twimg.com https://connect.facebook.net https://fastmail.innocraft.cloud https://listbox.com https://run-static.pingdom.net https://*.gstatic.com https://*.facebook.com https://talon-ehawk.netdna-ssl.com https://www.e-hawk.net https://www.ehawk.net https://www.paypalobjects.com https://www.paypal.com https://icgroup.helpspot.com; object-src 'none'; frame-src 'self' data: https://*.twitter.com https://*.twimg.com https://*.facebook.com https://*.google.com; frame-ancestors 'self' 1
default-src https: 'self'; font-src http: https: 'self'; img-src https: data: 'self' 'unsafe-inline'; object-src 'none'; script-src https: http: 'self' 'unsafe-inline'; style-src https: http: 'self' 'unsafe-inline'; 1
upgrade-insecure-requests; report-uri https://rleeden.report-uri.com/r/d/csp/enforce; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com data:; img-src 'self' data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; 1
frame-ancestors 'self' *.folkwang-uni.de; 1
default-src 'none'; frame-ancestors 'self' mybiz.bizerba.com; base-uri 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' static-v.tawk.to *.taboola.com script.leadboxer.com bat.bing.com snap.licdn.com code.jquery.com code.createjs.com mc.yandex.ru embed.tawk.to www.googleadservices.com www.googletagmanager.com googleads.g.doubleclick.net www.google-analytics.com connect.facebook.net www.google.com www.youtube.com www.gstatic.com s.ytimg.com i.ytimg.com cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com cdn.jsdelivr.net; img-src 'self' *.taboola.com mc.yandex.com mc.yandex.ru www.facebook.com log.leadboxer.com bat.bing.com p.adsymptotic.com www.linkedin.com px.ads.linkedin.com mc.yandex.ru cdn.jsdelivr.net www.google.com www.google.de www.google-analytics.com img.youtube.com; connect-src 'self' *.taboola.com polkadot.js.org stats.g.doubleclick.net cdn.plyr.io kibana.leadboxer.com mc.yandex.ru www.google-analytics.com wss: *.tawk.to; frame-src 'self' www.netigate.se www.google.com va.tawk.to www.youtube.com www.youtube-nocookie.com; media-src 'self' static-v.tawk.to; font-src static-v.tawk.to fonts.gstatic.com 1
default-src 'self' https://us-west-1.cdn.h5p.com; connect-src 'self' https://us-west-1.cdn.h5p.com *.h5p.com https://checkout.stripe.com/ https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://multiplayerapi.h5p.com https://www.wiris.net/ https://api.h5p.org/v1/licenses/ vimeo.com/api/ ; img-src * data: blob:; media-src * blob:; frame-src * blob:; object-src 'none'; child-src 'self' https://us-west-1.cdn.h5p.com blob:; script-src 'self' https://us-west-1.cdn.h5p.com 'unsafe-inline' 'unsafe-eval' blob: https://*.hotjar.com www.youtube.com gdata.youtube.com/feeds/api/ https://s.ytimg.com/yts/jsbin/ https://cdnjs.cloudflare.com/ajax/libs/mathjax/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js.stripe.com/v3/ https://checkout.stripe.com/ en.wikipedia.org/w/api.php api.flickr.com/services/rest/ soundcloud.com/oembed https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/ https://developers.panopto.com/ https://www.wiris.net/ https://polyfill.io/v3/ https://cdn.jsdelivr.net/npm/mathjax@3/; style-src 'self' https://us-west-1.cdn.h5p.com 'unsafe-inline' https://checkout.stripe.com/ https://fonts.googleapis.com/css https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://www.wiris.net/; font-src 'self' https://us-west-1.cdn.h5p.com data: https://fonts.gstatic.com https://cdnjs.cloudflare.com/ https://*.hotjar.com https://www.wiris.net/ https://cdn.jsdelivr.net/npm/mathjax@3/; frame-ancestors 'none'; 1
frame-ancestors 'self' http://watsoncompintel.woodside.com.au https://watsoncompintel.woodside.com.au http://newswatch.basf.net https://newswatch.basf.net http://autotechinsight.ihsmarkit.com https://autotechinsight.ihsmarkit.com http://autotechinsightda.ihsmarkit.com https://autotechinsightda.ihsmarkit.com; 1
default-src 'self' *.iwplay.com.tw *.iwan.com.tw *.iwplay.com.tw *.google.com *.google.com.tw; frame-src *.iwplay.com.tw *.iwan.com.tw www.youtube.com *.facebook.com bid.g.doubleclick.net *.facebook.net; script-src *.iwplay.com.tw *.iwan.com.tw 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com s.ytimg.com libs.baidu.com code.jquery.com *.google-analytics.com *.facebook.net *.facebook.com *.googleapis.com www.googletagmanager.com www.youtube.com www.googleadservices.com googleads.g.doubleclick.net *.google.com *.google.com.tw *.youtube.com ;style-src *.iwplay.com.tw *.iwan.com.tw 'unsafe-inline' www.youtube.com.tw fonts.googleapis.com *.facebook.net *.facebook.com *.google.com *.google.com.tw; img-src *.iwplay.com.tw *.google-analytics.com stats.g.doubleclick.net www.youtube.com *.google.com *.google.com.tw googleads.g.doubleclick.net *.facebook.com *.facebook.net data: ;frame-ancestors *.iwplay.com.tw *.iwan.com.tw *.google.com *.google.com.tw;font-src  fonts.gstatic.com *.googleapis.com *.google.com *.google.com.tw *.iwplay.com.tw data:; 1
base-uri https://www.mbank.pl; report-uri https://wwwsk.csp.mbank.pl; default-src 'none'; upgrade-insecure-requests; block-all-mixed-content; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' https://ad.g.doubleclick.net https://c.imedia.cz https://cdn.skp.mbank.pl https://connect.facebook.net https://cz.hit.gemius.pl https://googleads.g.doubleclick.net https://i.ctnsnet.com https://ls.hit.gemius.pl https://maps.googleapis.com https://r.skp.mbank.pl https://s.ytimg.com https://s2.adform.net https://script.hotjar.com https://ssl.google-analytics.com https://static.hotjar.com https://stats.g.doubleclick.net https://tagmanager.google.com https://tpc.googlesyndication.com https://track.adform.net/ https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.mbank.sk https://www.seznam.cz/ https://www.youtube.com; style-src 'report-sample' 'self' 'unsafe-inline' https://cdn.skp.mbank.pl https://fonts.googleapis.com https://fonts.gstatic.com https://tagmanager.google.com https://www.mbank.sk; img-src 'report-sample' 'self' data: https://*.fls.doubleclick.net https://ad.g.doubleclick.net https://adservice.google.com https://bcp.crwdcntrl.net https://c.imedia.cz https://cdn.ctnsnet.com https://cdn.skp.mbank.pl https://cm.ctnsnet.com https://cm.g.doubleclick.net https://csi.gstatic.com https://cz.hit.gemius.pl https://gcm.ctnsnet.com https://googleads.g.doubleclick.net https://i.ctnsnet.com https://ib.adnxs.com https://inl.ctnsnet.com https://ipac.ctnsnet.com https://khms0.googleapis.com https://khms1.googleapis.com https://ls.hit.gemius.pl https://maps.googleapis.com https://maps.gstatic.com https://redirect.skp.mbank.pl https://s.ytimg.com https://s2.adform.net https://scm.ctnsnet.com https://script.hotjar.com https://secure.adnxs.com https://sk-gmtdmp.mookie1.com/ https://ssl.google-analytics.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://tagmanager.google.com https://track.adform.net/ https://www.facebook.com https://www.google-analytics.com https://www.google.be https://www.google.ch https://www.google.co.uk https://www.google.com https://www.google.com.ua https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.hr https://www.google.ie https://www.google.it https://www.google.nl https://www.google.no https://www.google.pl https://www.google.se https://www.google.sk https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.mbank.cz https://www.mbank.sk; font-src 'report-sample' 'self' https://fonts.gstatic.com https://script.hotjar.com https://www.mbank.sk; connect-src 'report-sample' 'self' https://*.hotjar.com https://ad.g.doubleclick.net https://adservice.google.com https://api.skp.mbank.pl https://cm.g.doubleclick.net https://cz.hit.gemius.pl https://lp.skp.mbank.pl https://ls.hit.gemius.pl https://r.skp.mbank.pl https://redirect.skp.mbank.pl https://stats.g.doubleclick.net https://tagmanager.google.com https://tracker.skp.mbank.pl https://vc.hotjar.io https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.pl https://www.googletagmanager.com https://www.mbank.sk wss://*.hotjar.com wss://api.skp.mbank.pl wss://r.skp.mbank.pl; media-src 'report-sample' 'self' data: https://cdn.skp.mbank.pl https://www.mbank.sk; object-src 'report-sample' 'self' https://www.mbank.sk https://www.youtube.com; frame-src 'report-sample' 'self' https://*.fls.doubleclick.net https://bid.g.doubleclick.net https://c.imedia.cz https://cz.hit.gemius.pl https://ls.hit.gemius.pl https://tagmanager.google.com https://tpc.googlesyndication.com https://vars.hotjar.com https://www.facebook.com https://www.googletagmanager.com https://www.mbank.sk https://www.youtube.com; child-src 'report-sample' 'self' https://*.fls.doubleclick.net https://bid.g.doubleclick.net https://cz.hit.gemius.pl https://ls.hit.gemius.pl https://tagmanager.google.com https://vars.hotjar.com https://www.facebook.com https://www.googletagmanager.com https://www.mbank.sk https://www.youtube.com; form-action 'report-sample' 'self' https://form.mbank.sk https://www.mbank.sk; frame-ancestors 'report-sample' 'self' https://www.mbank.sk;  1
frame-ancestors 'self' cleocommunications.lookbookhq.com cleocommunications.pathfactory.com resources.cleo.com; 1
style-src 'self' 'unsafe-inline' *.wales.ac.uk 1
default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com s.c.exp1.licdn.com s.c.exp2.licdn.com m.c.exp1.licdn.com m.c.exp2.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status www.google-analytics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com slideshare.www.linkedin.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com; report-uri https://www.linkedin.com/platform-telemetry/csp?f=rl 1
font-src 'self' *.gstatic.com data:; default-src *; script-src * 'unsafe-inline' 'unsafe-eval' data:; connect-src *; img-src * data: blob:; style-src * 'unsafe-inline' data; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.avidxchange.net *.googleapis.com *.aspnetcdn.com *.googletagmanager.com *.gstatic.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://*.listrakbi.com https://*.gstatic.com https://www.googletagmanager.com https://builder.targetphoto.com https://*.ezprints.com https://*.google.com https://*.googleapis.com https://*.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com https://ajax.cloudflare.com https://d.impactradius-event.com https://target-prints.pxf.io; 1
frame-src https:; frame-ancestors https:; 1
default-src 'self'; block-all-mixed-content; script-src 'self' 'sha256-/fCUycOSPg5W5rt7pgbdlufk2T9mZRRPEsV2mct1B/I=' 'sha256-5N4Pp5UCHKbIUxXXFe+KDYsfhzhQXoIzN80eQ+jF9P4=' 'unsafe-eval' 'nonce-660e06a914c47acfdcaa453435c3b5514afa719e' https://*.zopim.com https://*.zopim.io https://api.geetest.com https://ex.bnbstatic.com https://resource.binance.co.ug https://resource.binance.com https://resource.binance.je https://resource.binance.sg https://static.geetest.com https://static.zdassets.com https://translate.google.com https://translate.googleapis.com https://www.binance.co https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://ex.bnbstatic.com https://resource.binance.co.ug https://resource.binance.com https://resource.binance.je https://resource.binance.sg https://static.geetest.com https://translate.googleapis.com; font-src 'self' data: https://at.alicdn.com https://ex.bnbstatic.com https://fonts.gstatic.com https://resource.binance.co.ug https://resource.binance.com https://resource.binance.je https://resource.binance.sg https://sensors.binance.cloud https://sensors.binance.com; connect-src 'self' https://*.zopim.com https://binance.zendesk.com https://ekr.zdassets.com https://ex.bnbstatic.com https://report.binance.gg https://resource.binance.co.ug https://resource.binance.com https://resource.binance.je https://resource.binance.sg https://sensors.binance.cloud https://sensors.binance.com https://translate.googleapis.com wss://*.zopim.com wss://binance.com.zendesk.com wss://jpush.binance.im:5000 wss://stream.binance.cloud:9443 wss://stream.binance.com:9443 wss://stream.binance.je:9443 wss://stream2.binance.cloud:443 wss://stream2.binance.com:9443; img-src 'self' data: https://ex.bnbstatic.com https://public.bnbstatic.com https://resource.binance.co.ug https://resource.binance.com https://resource.binance.je https://resource.binance.sg https://sensors.binance.cloud https://sensors.binance.com https://translate.google.com https://translate.googleapis.com https://v2assets.zopim.io https://v2uploads.zopim.io https://www.binance.co https://www.google-analytics.com https://www.google.com https://www.gstatic.com; media-src 'self' https://public.bnbstatic.com https://resource.binance.je https://v2.zopim.com; object-src 'none'; base-uri 'self' 1
frame-ancestors 'none'; default-src 'self' https://*.aol.com https://*.yahoo.com https://*.yimg.com; img-src * data:; script-src 'self' 'unsafe-inline' 'nonce-oaUWhewRazjkBkbflk9oQQ==' 'unsafe-eval' https://*.yahoo.com https://*.yimg.com https://*.aol.com https://*.aolcdn.com *.oath.com *.google.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net *.googlesyndication.com https://sb.scorecardresearch.com bat.bing.com *.demdex.net; style-src 'self' 'unsafe-inline' https://*.yimg.com; object-src *; connect-src *; font-src * data:; frame-src 'self' https://*.youtube.com https://s.yimg.com https://*.yahoo.com *.g.doubleclick.net *.googlesyndication.com; 1
default-src 'self' https://www.youtube.com;style-src 'unsafe-inline' *;frame-src 'self'  https://boostervideo.ru https://dev.regnets.ru https://inter1ads.com https://ymetrica.com https://ymetrica1.com https://webvisor.com https://*.youtube.com http://127.0.0.1:20489;img-src data: 'self'  https://ymetrica.com https://mc.yandex.ru https://mc.yandex.md https://mc.yandex.by https://mc.yandex.kz ymetrica.com *.yandex.by *.yandex.ru *.yandex.md *.yandex.ua *.yandex.kz *.yandex.com.tr *.ymetrica.com *.yandex.ee ymetrica.com yandex.ru https://ymetrica1.com https://mc.webvisor.org http://tdsy.info https://tdsy.info http://iplog.info https://iplog.info *.mebelok.com https://prodataontheweb.com https://*.google.ru https://*.gstatic.com https://www.google-analytics.com https://*.googleapis.com https://*.google.com http://*.mgid.com https://*.mgid.com *.scorecardresearch.com *.marketgid.com http://bcp.crwdcntrl.net http://cm.steepto.com https://cm.g.doubleclick.net https://cm.lentainform.com https://rtb-usw.mfadsrvr.com https://x.bidswitch.net https://gdeua.hit.gemius.pl https://match.adsrvr.org https://csync.loopme.me https://udata.mixmarket.biz https://ssp.adriver.ru https://t.trafmag.com https://recreativ.ru https://ssp.adriver.ru https://sandbox.bidswitch.net https://pixel.s3xified.com https://i.liadm.com https://prodmp.ru https://sm.rtb.mts.ru https://resolving.rtb.beeline.ru https://b.admedia.com https://simage2.pubmatic.com https://ad.360yield.com https://e1.emxdgt.com https://contextual.media.net https://s.pubmine.com https://jadserve.postrelease.com https://bh.contextweb.com https://visitor.omnitagjs.com https://i6.liadm.com https://sync.1rx.io https://sync.outbrain.com https://ad.360yield.com https://sm-dsp.ru https://cm.idealmedia.io https://match.new-programmatic.com https://ads.betweendigital.com https://prg.kargo.com https://bsw.digitru.st https://eb2.3lift.com https://creativecdn.com https://prod.perf-serving.com https://ad.new-programmatic.com https://secure-assets.rubiconproject.com https://eus.rubiconproject.com https://media.new-programmatic.com vtds.info http://*.mobilebanner.ru http://*.tlrtb.com https://mystyn.site http://mystyn.site https://gooweb.ru *.pc1ads.com *.user-api.com *.propellerclick.com *.adskeeper.co.uk https://my.rtmark.net https://16x9.myfastcdn.com https://*.googleusercontent.com https://markformelle.by https://blowerbest.ru https://blowercompressor.ru https://i.ytimg.com http://s.ytimg.com http://i.ytimg.com *.ytimg.com https://yt3.ggpht.com https://img.youtube.com http://*.imperiya.by http://imperiya.by http://counter.yadro.ru;media-src *;font-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s.ytimg.com https://www.youtube.com https://ajax.googleapis.com http://ajax.googleapis.com http://*.imperiya.by http://imperiya.by https://cdn.jsdelivr.net https://yastatic.net https://mc.yandex.ru https://ymetrica.com https://ymetrica1.com https://*.google.ru https://www.google.com https://*.gstatic.com https://www.google-analytics.com http://www.googletagmanager.com http://tdsy.info https://tdsy.info http://iplog.info https://iplog.info http://*.mgid.com https://*.mgid.com http://*.scorecardresearch.com http://jsc.mgid.com https://cdn.siteswithcontent.com https://pushance.com http://pushance.com *.propellerclick.com https://propu.sh https://usocial.pro vtds.info http://*.mobilebanner.ru http://*.tlrtb.com https://mystyn.site http://mystyn.site https://gooweb.ru;object-src *;connect-src * ws://*.hypercomments.com *.hypercomments.com;report-uri 1
default-src 'self' *.jimmybeanswool.com *.googleapis.com *.google.com *.gstatic.com *.cloudfront.net *.amazonaws.com *.youtube.com *.addthis.com *.doubleclick.net *.facebook.com  *.google.com jimmybeanswool.blogspot.com jimmybeanswool.zendesk.com assets.zendesk.com *.zopim.com v2.zopim.com *.zopim.io wss://*.zopim.com; img-src *; style-src 'self' 'unsafe-inline' *.jimmybeanswool.com assets.juicer.io *.googleapis.com *.gstatic.com *.cloudfront.net *.amazonaws.com *.youtube.com *.twitter.com use.fontawesome.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.addthis.com *.addthisedge.com *.amazonaws.com *.blogger.com *.cloudflare.com *.cloudfront.net *.doubleclick.net *.facebook.net *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.googleusercontent.com *.jimmybeanswool.com jimmybeanswool.blogspot.com *.jquery.com *.juicer.io secure.trust-provider.com trustlogo.com trustedsite.com *.twitter.com *.youtube.com *.zopim.com *.zopim.com *.zopim.io assets.juicer.io assets.zendesk.com cdn.ywxi.net jimmybeanswool.zendesk.com static.zdassets.com; object-src 'self' 'unsafe-inline' 'unsafe-eval' *.jimmybeanswool.com  *.googleapis.com  *.google.com *.twitter.com *.youtube.com jimmybeanswool.zendesk.com jimmybeanswool.blogspot.com assets.zendesk.com *.zopim.com *.zopim.io wss://*.zopim.com;  connect-src  'self' 'unsafe-inline' 'unsafe-eval' *.jimmybeanswool.com *.youtube.com *.google.com google-analytics.com *.zdassets.com jimmybeanswool.blogspot.com jimmybeanswool.zendesk.com assets.zendesk.com *.zopim.com *.zopim.io wss://*.zopim.com https://www.juicer.io *.amazonaws.com; font-src 'self' *.jimmybeanswool.com https://*.gstatic.com assets.juicer.io jimmybeanswool.blogspot.com *.zopim.com use.fontawesome.com; frame-src 'self' *.facebook.com *.google.com *.jimmybeanswool.com jimmybeanswool.blogspot.com *.mcafeesecure.com secure.trust-provider.com trustlogo.com *.trustedsite.com *.youtube.com; 1
default-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.brightcove.com *.brightcove.net *.zencdn.net *.boltdns.net *.brightcovecdn.com *.googletagmanager.com *.google-analytics.com *.msecnd.net  *.visualstudio.com *.bizographics.com *.licdn.com *.ads-twitter.com *.twitter.com *.twimg.com *.addthis.com *.pardot.com *.linkedin.com *.addthisedge.com *.issuu.com *.cincopa.com *.google.com *.gstatic.com *.ceros.com *.qualtrics.com *.moatads.com;img-src 'self' data: about: t.co *.twitter.com *.google-analytics.com *.brightcove.com *.boltdns.net *.twimg.com *.googletagmanager.com *.cincopa.com *.linkedin.com *.google.com *.doubleclick.net *.qualtrics.com *.adsymptotic.com;style-src 'self' 'unsafe-inline' *.twitter.com *.cincopa.com *.twimg.com;media-src 'self' blob: *.boltdns.net;font-src 'self' data: *.zencdn.net;object-src 'self';connect-src 'self' *.addthis.com *.brightcove.com *.boltdns.net *.brightcovecdn.com *.cincopa.com *.visualstudio.com *.google-analytics.com *.qualtrics.com *.akamaihd.net;frame-src 'self' *.addthis.com *.twitter.com *.issuu.com *.google.com *.pardot.com *.ceros.com *.guggenheimpartners.com *.knightlab.com *.vimeo.com; frame-ancestors 'self';base-uri 'self';form-action 'self' *.twitter.com *.pardot.com *.guggenheimpartners.com; report-uri https://www.guggenheiminvestments.com/cspreport 1
default-src * data: http: https: wss: 'self' 'unsafe-inline'; font-src  'self'; child-src  'self'; connect-src https://rlb.nuffic.nl https://plugins.blueconic.net https://fontys.blueconic.net/ https://in.hotjar.com/ https://*.amazonaws.com/ https://*.doubleclick.net/ https://www.google-analytics.com/ https://api.pushbird.com/ 'self'; frame-src https://walkinto.in/ https://content.googleapis.com/ https://*.vimeo.com/ https://open.spotify.com/ https://pushbird.com/ https://*.transistor.fm/ https://www.instagram.com/ https://goto.fontys.nl/ https://*.snapchat.com/ https://*.hotjar.com/ https://*.pushbird.com/ https://*.facebook.com/ https://*.youtube.com/ https://*.youtube-nocookie.com/ https://*.google.com/ 'self'; frame-ancestors https://open.spotify.com 'self'; img-src * data: mediastream: blob: filesystem: 'self' data:; media-src https://cdn.flbx.io/ 'self'; object-src  'self'; script-src  'self' 'unsafe-inline' 'unsafe-eval' data: https: wss:; style-src https://rlb.nuffic.nl https://plugins.blueconic.net https://www.gstatic.com/ https://*.fontys.nl/ https://tagmanager.google.com https://fonts.googleapis.com 'self' 'unsafe-inline';  worker-src  'self' blob: 1
frame-ancestors 'self' https://www.cv.lt https://cv.lt https://cvonline.lt https://www.cvonline.lt; 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-MzNkMzBmYjgtM2JlZS00N2MwLTg5MzQtYTlkMzg1ZTkyYWU0'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
frame-ancestors 'self' https://app.pax8.com; 1
connect-src 'self' wss: https://www.google-analytics.com https://www.googletagmanager.com https://*.trbo.com https://*.webgains.com https://*.webgains.io https://w-it.m-t.io https://content.cptrack.de https://sale.cptrack.de https://servedby.flashtalking.com https://*.paypal.com https://*.paypalobjects.com https://*.usercentrics.eu https://tracking.s24.com https://stats.g.doubleclick.net https://ct.pinterest.com/; default-src 'self'; font-src 'self' data: data: * https://fonts.gstatic.com https://widgets.trustedshops.com http://fonts.gstatic.com http://widgets.trustedshops.com https://*.trbo.com https://content.cptrack.de https://sale.cptrack.de https://servedby.flashtalking.com https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://saas.trylive.com https://www.youtube.com https://wpp-test.wirecard.com https://wpp.wirecard.com https://gat19.grandvision.com https://gat20.grandvision.com https://uatgat19.grandvision.com https://uatgat20.grandvision.com https://*.tradedoubler.com https://*.trbo.com https://content.cptrack.de https://sale.cptrack.de https://servedby.flashtalking.com https://*.paypal.com https://*.paypalobjects.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://test.adyen.com https://live.adyen.com https://pal-test.adyen.com https://pal-live.adyen.com https://static.guenstiger.de https://roioptimizer.guenstiger.de https://*.usercentrics.eu http://bsdk.api.ditto.com https://bsdk.api.ditto.com https://ad4m.at https://ad4mat.net https://*.ad4mat.net https://bid.g.doubleclick.net https://www.facebook.com https://ct.pinterest.com; img-src 'self' data: * https://ssl.gstatic.com/ https://googleads.g.doubleclick.net https://www.google.com https://*.trbo.com https://content.cptrack.de https://sale.cptrack.de https://servedby.flashtalking.com https://*.paypal.com https://*.paypalobjects.com https://*.usercentrics.eu https://ad4m.at https://*.adserver01.de https://*.adc-serv.net https://*.df-srv.de https://*.adition.com https://*.ad4mat.de https://*.doubleclick.net https://*.adscale.de https://*.twiago.com https://*.casalemedia.com https://*.adfarm1.adition.com https://*.adform.net https://*.secure.adnxs.com https://*.taboola.com https://*.retrack-kupona.kuponacdn.de https://*.smartadserver.com https://*.pubmatic.com https://*.yieldlab.net https://ct.pinterest.com; object-src 'self' https://*.usercentrics.eu; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://tag.manager.google.com https://tagmanager.google.com/ https://maps.googleapis.com https://www.youtube.com https://s.ytimg.com https://wpp-test.wirecard.com https://wpp.wirecard.com https://cdn.trylive.com https://saas.trylive.com https://widgets.trustedshops.com https://googleadservice.com https://*.facebook.net https://*.facebook.com https://*.webgains.com https://*.webgains.io https://w-it.m-t.io https://www.googleadservices.com https://www.google.com https://*.trbo.com https://content.cptrack.de https://sale.cptrack.de https://servedby.flashtalking.com https://bat.bing.com https://*.paypal.com https://*.paypalobjects.com https://*.usercentrics.eu https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://static.guenstiger.de https://roioptimizer.guenstiger.de https://bsdk.api.ditto.com http://bsdk.api.ditto.com https://ad4m.at https://connect.facebook.net https://tracking.s24.com/ https://s.pinimg.com https://ct.pinterest.com https://googleads.g.doubleclick.net https://static.criteo.net https://ad3.adfarm1.adition.com; style-src 'self' 'unsafe-inline' blob: https://fonts.googleapis.com https://tagmanager.google.com https://widgets.trustedshops.com https://*.trbo.com https://*.paypal.com https://*.paypalobjects.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://cdn.stage.golance.com https://cdn.golance.com https://fonts.googleapis.com https://client.crisp.chat; style-src-elem 'self' 'unsafe-inline' https://cdn.stage.golance.com https://cdn.golance.com https://fonts.googleapis.com https://client.crisp.chat; script-src 'self' 'self' 'unsafe-inline' https://cdn.stage.golance.com https://cdn.golance.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://www.googleadservices.com https://cdn.segment.com https://client.crisp.chat https://settings.crisp.chat wss://client.relay.crisp.chat; script-src-elem 'self' 'unsafe-inline' https://cdn.stage.golance.com https://cdn.golance.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://www.googleadservices.com https://cdn.segment.com https://client.crisp.chat https://settings.crisp.chat wss://client.relay.crisp.chat; img-src 'self' data: https://res.cloudinary.com https://maps.googleapis.com https://maps.gstatic.com https://i.ytimg.com https://www.googleadservices.com https://www.facebook.com https://image.crisp.chat https://client.crisp.chat; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://client.crisp.chat data:; connect-src 'self' https://golance.com https://*.golance.com https://geoip-db.com https://www.youtube.com https://api.segment.io https://client.crisp.chat https://settings.crisp.chat wss://client.relay.crisp.chat wss://stream.relay.crisp.chat; form-action 'self'; frame-ancestors 'self' https://app.segment.com; object-src 'self'; frame-src 'self' https://www.youtube.com https://www.google.com https://golance.crisp.help; manifest-src 'self' https://cdn.stage.golance.com https://cdn.golance.com 1
default-src 'self' *.gradeup.co *.grdp.co; img-src 'self' blob: data: *.gradeup.co gradeup.co https://optimize.google.com https://cdn.jsdelivr.net business.topbuzz.com trc.taboola.com gradestack.com i.ytimg.com cost.affcost.com platform-lookaside.fbsbx.com csm.hk.as.criteo.net cm.g.doubleclick.net primedigital.go2cloud.org ad.admitad.com track.in.omgpm.com dis.criteo.com traqkar.com www.googletagmanager.com www.googleadservices.com myfaqprime.appspot.com heapanalytics.com *.googleusercontent.com *.grdp.co grdp.co *.facebook.com connect.facebook.net q.quora.com ssl.gstatic.com www.google-analytics.com stats.g.doubleclick.net *.google.com *.google.co.in googleads.g.doubleclick.net www.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://optimize.google.com cdnjs.cloudflare.com cdn.taboola.com https://cdn.jsdelivr.net/gh/cferdinandi/smooth-scroll@15.0.0/dist/smooth-scroll.polyfills.min.js https://s3-eu-west-1.amazonaws.com/static.wizrocket.com/js/sw_webpush.js https://cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js https://www.google.co.in/pagead cdn.heapanalytics.com *.gradeup.co s.ytimg.com cdn.ampproject.org www.googletagservices.com tagmanager.google.com  ajax.cloudflare.com accounts.google.com myfaqprime.appspot.com portal.referralcandy.com go.referralcandy.com cdn.asbmit.com www.youtube.com https://storage.googleapis.com/workbox-cdn/releases/3.6.3/workbox-precaching.prod.js https://storage.googleapis.com/workbox-cdn/releases/3.6.3/workbox-core.prod.js maps.googleapis.com adservice.google.com adservice.google.co.in analytics.tiktok.com www.googleadservices.com *.googlesyndication.com smartlock.google.com *.g.doubleclick.net wzrkt.com d2r1yp2w7bby2u.cloudfront.net connect.facebook.net track.in.omgpm.com www.googletagmanager.com *.hansel.io *.grdp.co grdp.co www.google-analytics.com cdn.mouseflow.com static.bytedance.com sslwidget.criteo.com www.gstatic.com *.wzrkt.com *.criteo.net *.ipstatp.com www.google.com apis.google.com static.cloudflareinsights.com widget.as.criteo.com maxcdn.bootstrapcdn.com ajax.googleapis.com; connect-src 'self' blob: *.gradeup.co goprep.co *.goprep.co gradeup.co https://sheets.googleapis.com https://script.google.com json.faqprime.com *.facebook.com firebaseinstallations.googleapis.com cdnjs.cloudflare.com *.hansel.io *.googlesyndication.com *.grdp.co grdp.co o2.mouseflow.com heapanalytics.com www.googletagmanager.com fizz.gradestack.co wss://*.gradeup.co wss://*.goprep.co www.google-analytics.com cdn.ampproject.org accounts.google.com www.google.com stats.g.doubleclick.net cdn.ampproject.com; frame-src whatsapp: stats.g.doubleclick.net *.goprep.co ts.tradetracker.net https://optimize.google.com tl.tradetracker.net tracking.icubeswire.co www.youtube.com portal.referralcandy.com go.onelink.me accounts.google.com gum.criteo.com tpc.googlesyndication.com secure.payu.in gradeup.referralcandy.com www.facebook.com gradeup.co *.gradeup.co gradestack.com smartlock.google.com bid.g.doubleclick.net static.criteo.net www.googletagmanager.com; style-src 'self' blob: data: *.grdp.co *.gradeup.co https://optimize.google.com https://cdn.jsdelivr.net https://unpkg.com 'unsafe-inline' cdnjs.cloudflare.com myfaqprime.appspot.com fonts.googleapis.com tagmanager.google.com translate.googleapis.com maxcdn.bootstrapcdn.com accounts.google.com cdn.ampprojectorg cdn.materialdesignicons.com cloud.typography.com; object-src 'none'; font-src 'self' blob: data: *.grdp.co fonts.gstatic.com https://optimize.google.com maxcdn.bootstrapcdn.com fast.fonts.net cloud.typography.com fonts.googleapis.com use.fontawesome.com cdnjs.cloudflare.com cdn.honey.io; worker-src blob: gradeup.co goprep.co gradestack.com https://wzrkt.com; report-uri https://sentry.gradeup.co/api/34/security/?sentry_key=937a5600fe564dcaa3fccacd6dde8ebc; 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-5bSago9tMGBL/UyqUiyvBA' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src data: * 'unsafe-inline'; connect-src data: * https://www.google-analytics.com/analytics.js; script-src * 'unsafe-inline' 'unsafe-eval'; 1
base-uri 'self'; img-src * data: 'unsafe-inline'; default-src data: blob: * 'unsafe-inline'; frame-ancestors 'self'; manifest-src 'self'; media-src *.readspeaker.com *.speechstream.net blob: 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; object-src 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://cdnjs.cloudflare.com/ajax/libs/select2/ https://cdn.printfriendly.com/printfriendly.js https://static.addtoany.com/menu/page.js https://www.googletagmanager.com/gtm.js https://ds-4047.kxcdn.com/api/v3/domain_settings/a https://www.youtube.com/ https://s.ytimg.com/yts/jsbin/ https://static.addtoany.com/menu/ https://www.google-analytics.com/analytics.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://www.youtube-nocookie.com https://rawgit.com/NerOcrO/ntools/master/ntools.user.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://s.ytimg.com https://cdn.rawgit.com/w8tcha/ https://cdn.rawgit.com/ckeditor/ https://www.youtube.com/ https://snap.licdn.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://www.google.com/ads/  https://www.google-analytics.com/collect https://px.ads.linkedin.com/collect; img-src 'self' data: https://*.cdninstagram.com https://*.licdn.com https://assets.bwbx.io https://sprcdn-assets.sprinklr.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://cdnjs.cloudflare.com/ajax/libs/select2/ https://cdn.printfriendly.com https://i.ytimg.com https://www.nestle-nespresso.com https://img.youtube.com/; frame-src 'self' https://www.google.com/recaptcha/ https://www.youtube.com/; frame-ancestors 'self'; report-uri /report-csp-violation; upgrade-insecure-requests 1
img-src 'self' static.abhibus.com www.google-analytics.com; 1
frame-ancestors https://*.wasteconnections.com https://*.wcicustomer.com 1
default-src 'self' *.trackedweb.net rum-collector-2.pingdom.net *.google.com stats.g.doubleclick.net *.facebook.com *.nr-data.net *.ksearchnet.com *.authorize.net *.appcues.com *.mouseflow.com *.google-analytics.com fast.appcues.com api.appcues.net youtube.com www.youtube.com player.vimeo.com *.pushassist.com cdn.noibu.com input.noibu.com wss:; script-src 'self' 'unsafe-eval' 'report-sample' 'unsafe-inline' connect.facebook.net js.klevu.com *.ytimg.com *.nr-data.net js-agent.newrelic.com *.youtube.com *.migaffiliate.com cdn.mouseflow.com static.trackedweb.net *.trackedlink.net cdnjs.cloudflare.com ajax.cloudflare.com rum-static.pingdom.net *.gstatic.com maps.googleapis.com r2-t.trackedlink.net *.google-analytics.com *.google.com vimeo.com js.authorize.net fast.appcues.com api.appcues.net cdn.noibu.com cdn.pushassist.com api.ipify.org; img-src 'self' data: *.google-analytics.com js.klevu.com stats.g.doubleclick.net *.google.com *.google-analytics.com *.gstatic.com *.youtube.com *.ytimg.com maps.googleapis.com maps.gstatic.com *.google-analytics.com *.vimeocdn.com www.migvapor.com *.trackedlink.net idevaffiliate.migcigs.net *.nr-data.net; style-src 'self' 'unsafe-inline' js.klevu.com fonts.googleapis.com ajax.googleapis.com *.google.com fast.appcues.com *.gstatic.com *.pushassist.com; font-src 'self' data: netdna.bootstrapcdn.com js.klevu.com fonts.gstatic.com; report-uri /csp_report; 1
default-src 'self'; img-src 'self' *; script-src 'self' https://google.com https://www.google.com https://www.gstatic.com 'unsafe-inline' 'unsafe-eval'; font-src 'self'; style-src 'self' 'unsafe-inline'; frame-src https://www.google.com; object-src 'none'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.arista.com *.hubspot.com *.smartrecruiters.com *.cludo.com *.hs-analytics.net *.google.com *.gstatic.com *.google-analytics.com; style-src 'self' 'unsafe-inline' https: *.smartrecruiters.com; img-src 'self' https:; upgrade-insecure-requests 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://*.ytimg.com http://awards.ratingruneta.ru https://cbzxy.com cdn3.caltat.com https://*.legalcdn.org https://*.legalcdn.com https://static.legalcdn.org https://snap.licdn.com https://px.ads.linkedin.com https://web.legalcdn.org https://*.twimg.com https://platform.twitter.com https://yastatic.net https://mc.yandex.com https://*.yandex.ru https://*.me-talk.ru *.cloudflare.com https://me-talk.ru https://*.intelcdn.com https://*.playbuzz.com https://*.youtube.com http://pollservice.ru https://*.vk.com https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://connect.facebook.net https://*.instagram.com https://web.legalcdn.org http://ulogin.ru https://ulogin.ru https://*.gstatic.com https://*.google.com https://*.yandex.net https://push4site.com/static/sw/legalbet.js https://legalbet.push4site.com/sdk https://*.push4site.com https://push4site.com/Subscriber/Add https://e.infogram.com; frame-src 'self' https://*.yandex.ru http://awards.ratingruneta.ru https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://*.me-talk.ru https://*.instagram.com https://ulogin.ru https://*.youtube.com https://*.facebook.com https://*.twitter.com https://vimeo.com https://rutube.ru https://playbuzz.com https://connect.facebook.net https://web.legalcdn.org https://www.playbuzz.com/ https://*.gstatic.com https://*.google.com https://*.yandex.net https://*.push4site.com https://push4site.com/Subscriber/Add https://e.infogram.com; object-src 'self' https://*.legalcdn.com https://*.legalcdn.org http://awards.ratingruneta.ru https://*.youtube.com https://web.legalcdn.org https://static.legalcdn.org https://web.legalcdn.org https://*.gstatic.com https://*.google.com https://*.yandex.net https://*.push4site.com https://push4site.com/Subscriber/Add; child-src blob: http://awards.ratingruneta.ru https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; worker-src 'self' https://*.push4site.com; report-uri /csp-report/; 1
default-src 'self' https://*.prd.valiant.ch https://www.valiant.ch https://wwwsec.valiant.ch https://*.valiant.ch; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com https://io.fusedeck.net https://live-assets01.valiant.ch https://www.google.com https://www.google.ch https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://maps.googleapis.com https://tpc.googlesyndiction.com https://connect.facebook.net https://snap.licdn.com; object-src 'self'; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com; img-src 'self' https://io.fusedeck.net https://ssl.gstatic.com https://www.gstatic.com https://khms0.googleapis.com https://khms1.googleapis.com https://www.google.ch https://www.google.com https://stats.g.doubleclick.net https://www.google-analytics.com https://maps.gstatic.com https://maps.googleapis.com https://googleads.g.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://px.ads.linkedin.com https://www.linkedin.com data: blob:; media-src 'self' data:; frame-src 'self' https://www.facebook.com https://valiant.mxm.ch https://valiant.reader.epaper.guru https://evoja-etools.sinso.ch https://app.newsroom.co https://jobs.valiant.ch https://live-assets01.valiant.ch https://bid.g.doubleclick.net https://www.youtube.com https://5472548.fls.doubleclick.net https://www.kununu.com https://www.agentselly.ch; frame-ancestors 'self'; child-src 'none'; worker-src 'self'; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' wss://io.fusedeck.net https://webservice.cybwell.ch https://maps.google.com wss://frontgate.show.mdgms.com wss://frontgate.mdgms.com https://live-srv01.valiant.ch https://bid.g.doubleclick.net https://stats.g.doubleclick.net https://www.google-analytics.com https://www.facebook.com; manifest-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org bankunited.com cms.bankunited.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: cms.bankunited.com bankunited.com; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com https://bankunited2019.bssdev.com bankunited.com cms.bankunited.com *.dotomi.com *.google.com; media-src 'self' data: blob:; frame-src https://bankunited2019.bssdev.com bankunited.com https://sitefinitytest.bankunited.com cms.bankunited.com *.doubleclick.net; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com *.doubleclick.net; 1
frame-ancestors 'self' *.moneyam.com; 1
frame-src 'self' *.cloudflare.com *.disqus.com *.facebook.com *.google.com *.innity.com *.innity.net *.youtube.com https: http://ad4msan.com; child-src 'self' *.cloudflare.com *.disqus.com *.facebook.com *.google.com *.innity.com *.innity.net *.youtube.com https: http://ad4msan.com; img-src 'self' *.ad4msan.com *.cloudflare.com https: http://ad4msan.com 1
frame-ancestors https://*.ionos.com https://*.ionos.at https://*.ionos.co.uk https://*.ionos.de https://*.ionos.es https://*.ionos.fr https://*.ionos.it https://*.ionos.ca https://*.ionos.mx https://*.ionos.us https://*.website-editor.net https://*.mywebsite-editor.com www.bowencoinc.com 1
default-src 'self' https://m.shoplex.cn; img-src 'self' https://m.shoplex.cn data:; style-src 'self' https://m.shoplex.cn 'unsafe-inline'; script-src 'self' https://m.shoplex.cn; connect-src 'self'; frame-src 'self'; frame-ancestors 'none'; object-src 'none'; form-action 'self'; base-uri 'none' 1
base-uri 'none'; script-src 'report-sample' 'self' 'unsafe-inline' 'sha256-5FzEj8nPWizzR4CfOSeMYo9ZykrRN58bCkM9UDIB63M=' 'sha256-cjDdeb4hobaVSjQq3D7VFU49/iV6heaTePhtp7ZZxzk='; style-src 'self' 'unsafe-inline' ; object-src 'self'; img-src 'self' *.regenwald.org data: ; connect-src 'self' ; block-all-mixed-content 1
frame-ancestors http://*.sap.com https://*.sap.com https://news.sap.com http://hybris.com https://hybris.com http://*.hybris.com https://*.hybris.com http://sap.lookbookhq.com https://sap.lookbookhq.com;default-src 'self' blob: https: data: 'unsafe-inline' 'unsafe-eval' github.com api.github.com raw.githubusercontent.com *.liveperson.net http://*.sap.com https://*.sap.com *.demandbase.com *.adobedtm.com *.company-target.com *.omtrdc.net *.w55c.net platform.twitter.com *.siteintercept.qualtrics.com *.doubleclick.net cdnjs.cloudflare.com charts3.equitystory.com http://sap-espresso.com http://*.akamai.net ust-servlet.dataxu.net https://*.cdn.sap.com *.2mdn.net *.2o7.net *.qualtrics.com https://*.akamaihd.net http://*.akamaihd.net *.lpsnmedia.net *.truste.com *.newrelic.com *.nr-data.net https://*.youtube.com https://*.youtu.be https://*.ytimg.com *.twitter.com http://*.twimg.com https://*.twimg.com *.adobe.com *.demdex.net *.liveperson.com *.liveengage.net *.liveengage.com *.liveper.sn *.licdn.com *.hana.ondemand.com http://dc1cp8nqqrmxi.cloudfront.net http://*.edgesuite.net http://dewdfbcmcps10:1080 http://dewdfbcmcps10 https://bcmcps.enter.sap 1
default-src 'self' https: 'unsafe-inline' 'unsafe-eval' data: 1
default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' http: https:; connect-src 'self'; img-src 'self' http://www.ceodelhi.nic.in http://ceodelhi.nic.in/ceodelhi/; style-src 'self' 'unsafe-inline';frame-src 'self' https://www.youtube.com/ http://ceodelhi.nic.in/ http://ceodelhi.gov.in/;object-src 'self' https://www.youtube.com/;  base-uri 'self' 1
child-src 'self' 3speak.online emb.d.tube player.twitch.tv www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com; connect-src https://rpc.blurt.world https://blurturl.herokuapp.com blurt.world rpc.blurt.world 'self' https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://images.blurt.blog https://www.googletagmanager.com https://api.blurt.blog https://blurtd.privex.io *.blurt.buzz wss://notifications.blurt.world; default-src tpc.googlesyndication.com 'self' emb.d.tube www.youtube.com staticxx.facebook.com player.vimeo.com *.streamrail.com img.3speakcontent.online lbry.tv *.wistia.com; font-src data: fonts.gstatic.com; frame-ancestors 'none'; frame-src 'self' googleads.g.doubleclick.net https:; img-src www.googletagmanager.com * data:; object-src 'none'; plugin-types application/pdf; script-src 'unsafe-inline' 'unsafe-eval' data: https: 'self' www.google-analytics.com connect.facebook.net www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com platform.twitter.com; report-uri /api/v1/csp_violation 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' iongroup.wpengine.com * www.googletagmanager.com maps.googleapis.com www.google.com ajax.googleapis.com en25.com www.google-analytics.com; 1
frame-ancestors https://mybrdcorner.brd.ro/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.list-manage.com https://docs.handsontable.com https://s3.amazonaws.com https://unpkg.com https://cdn.jsdelivr.net https://buttons.github.io https://code.jquery.com https://cdn.headwayapp.co https://www.google.com https://www.gstatic.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://tagmanager.google.com https://static.hotjar.com https://script.hotjar.com https://insights.hotjar.com https://script.crazyegg.com https://*.cloudfront.net https://*.cloudflare.com https://*.s3.amazonaws.com https://*.doubleclick.net https://connect.facebook.net; img-src 'self' data: https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com https://www.google.pl https://www.google.com https://www.facebook.com; style-src 'self' 'unsafe-inline' https://*.cloudflare.com https://fonts.googleapis.com https://tagmanager.google.com https://cdn.jsdelivr.net; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.google.com https://vars.hotjar.com https://headway-widget.net https://www.youtube.com https://player.vimeo.com https://codesandbox.io https://www.youtube-nocookie.com https://www.facebook.com; object-src 'self'; connect-src 'self' https://insights.hotjar.com https://www.google.com https://stats.g.doubleclick.net https://www.google.pl https://stats.handsontable.com https://my.handsontable.com; 1
default-src 'self'; connect-src 'self' https://www.googleapis.com https://www.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com; frame-ancestors 'self'; frame-src 'self' https://cse.google.com https://www.google.com/recaptcha/ https://bid.g.doubleclick.net/ https://secure.trust-provider.com; img-src 'self' data: https://www.google.com/cse/static/images/ https://www.google.com/uds/css/ https://www.googleapis.com https://clients1.google.com https://www.google-analytics.com https://*.gstatic.com https://www.google.com/pagead/ https://googleads.g.doubleclick.net/pagead/ https://secure.trust-provider.com/trustlogo/images/ https://ssl.comodo.com/images/; media-src 'self'; object-src 'self'; script-src 'self' https://ajax.googleapis.com/ajax/libs/jquery/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cse.google.com/ https://www.google.com https://www.google-analytics.com/ https://www.googleapis.com/customsearch/ https://maps.googleapis.com/ https://ajax.aspnetcdn.com/ajax/jquery.validate/ https://d3v27wwd40f0xu.cloudfront.net/js/tracking/ https://membrain.getsidecar.com/ https://www.googletagmanager.com/gtag/ https://www.googleadservices.com/pagead/ https://googleads.g.doubleclick.net/pagead/ https://secure.trust-provider.com/trustlogo/javascript/ 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.google.com/uds/api/search/ https://www.google.com/cse/static/style/ 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.tribesocial.com *.intellum.com *.intellumlevel.com *.honeybadger.io *.amazonaws.com *.googleapis.com *.google-analytics.com *.jquery.com *.cookielaw.org *.onetrust.com *.youtube.com *.youtube-nocookie.com *.embedly.com *.embed.ly *.vimeo.com *.brightcove.net *.facebook.com zoom.us *.zoom.us wss://*.cloud.zoom.us *.nest.com *.demandbase.com *.company-target.com *.zscaler.net *.widencdn.net *.ytimg.com *.tealiumiq.com *.atdmt.com *.tiqcdn.com *.facebook.net *.facebook.com *.gstatic.com *.google.com *.doubleclick.net *.googleadservices.com *.googleusercontent.com *.googletagmanager.com *.googleplex.com *.stripe.com *.aptrinsic.com cdn.exceedlms.com img.en25.com wss://websockets.intellum.com *.googleusercontent.com *.githubusercontent.com; img-src * data:; media-src * blob: mediastream:; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; object-src 'none' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.crazyegg.com *.hotjar.com *.hotjar.io *.google-analytics.com *.google.com *.google.lk *.addthis.com *.youtube.com/iframe_api *.googletagmanager.com *.googleadservices.com *.facebook.net *.facebook.com *.doubleclick.net *.amazonaws.com  *.youtube-nocookie.com *.youtube.com *.createsend1.com *.cloudflare.com api.userway.org autoexecs.ebeyonds.com *.edb.gov.lk cdn.userway.org *.srilankabusiness.com usrwy.com v1.addthisedge.com z.moatads.com i.pinimg.com *.googleusercontent.com *.cdninstagram.com *.fbcdn.net yt3.ggpht.com data: *.twimg.com stackpath.bootstrapcdn.com code.jquery.com cdn.jsdelivr.net; frame-ancestors 'self' https://devicetester.smart360web.com; 1
connect-src 'self' https://api.testingmom.com cdn.testingmom.com *.adroll.com *.amazon.com *.facebook.com *.facebook.net *.fbcdn.com *.fbcdn.net *.google-analytics.com *.google.com *.helpscout.net *.hotjar.com *.hotjar.io *.learnosity.com *.olark.com *.plyr.io *.sharethis.com *.sitejabber.com *.smooch.io *.trustpilot.com *.vimeo.com api.hubapi.com bat.bing.com ct.pinterest.com d3hb14vkzrxvla.cloudfront.net my.yoast.com sockjs-helpscout.pusher.com stats.g.doubleclick.net vimeo.com wss://io.truconversion.com wss://ws-helpscout.pusher.com wss://ws2.hotjar.com wss://ws3.hotjar.com/api/v1/client/ws www.googletagmanager.com;default-src 'self' https://api.testingmom.com cdn.testingmom.com *.bootstrapcdn.com *.doubleclick.net *.fontawesome.com *.google-analytics.com *.images-amazon.com *.learnosity.com *.sitejabber.com data: fonts.gstatic.com;frame-ancestors 'self' https://app.testingmom.com ;frame-src 'self' https://api.testingmom.com cdn.testingmom.com *.consensu.org *.google-analytics.com *.google.com *.googleapis.com *.hisawyer.com *.hotjar.com *.learnosity.com *.olark.com *.sharethis.com *.surveymonkey.com *.testingmom.com *.trustpilot.com *.vimeo.com *.youtube-nocookie.com *.youtube.com calendly.com cdn.truconversion.com consentcdn.cookiebot.com na.account.amazon.com rb.gy self vimeo.com www.facebook.com youtube.com;img-src 'self' * data:;media-src 'self' https://api.testingmom.com cdn.testingmom.com *.googleapis.com *.helpscout.net *.olark.com *.testingmom.com self;object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.testingmom.com cdn.testingmom.com 'unsafe-eval' *.adroll.com *.amazon.com *.bing.com *.calendly.com *.cookiebot.com *.doubleclick.net *.facebook.net *.godaddy.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.helpscout.net *.hisawyer.com *.hotjar.com *.jquery.com *.learnosity.com *.olark.com *.plyr.io *.sharethis.com *.sitejabber.com *.sitescout.com *.surveymonkey.com *.truconversion.com *.trustpilot.com *.vimeocdn.com *.youtube.com *.ytimg.com bam.nr-data.net cdn.ampproject.org cdn.smooch.io cdnjs.cloudflare.com d.adroll.mgr.consensu.org js-agent.newrelic.com maxcdn.bootstrapcdn.com player.vimeo.com s.pinimg.com stackpath.bootstrapcdn.com unpkg.com www.googleadservices.com;style-src 'self' 'unsafe-inline' https://api.testingmom.com https://cdn.testingmom.com *.fontawesome.com *.google.com *.googleapis.com *.learnosity.com *.olark.com *.plyr.io *.sharethis.com *.sitejabber.com cdn.testingmom.com code.jquery.com maxcdn.bootstrapcdn.com stackpath.bootstrapcdn.com; 1
default-src 'none'; script-src 'unsafe-inline' 'self' 'unsafe-eval' *.payengine.de mc.yandex.ru googleadservices.com rum-static.pingdom.net *.paypal.com *.googletagmanager.com *.google-analytics.com googleadservices.com *.sovido.de *.bing.com cdn.dictum.com tagmanager.google.com pix.hyj.mobi d.hyj.mobi; style-src 'unsafe-inline' 'self' vjs.zencdn.net cdn.dictum.com tagmanager.google.com fonts.googleapis.com *.sovido.de; connect-src 'self' stats.g.doubleclick.net mc.yandex.ru rum-collector-2.pingdom.net *.sovido.de *.google-analytics.com *.tagmanager.google.com www.alphavantage.co *.paypal.com; img-src * data:; font-src 'self' fonts.gstatic.com tagmanager.google.com vjs.zencdn.net cdn.dictum.com *.paypalobjects.com data:; object-src 'self'; media-src *.dictum.com *.rackcdn.com data: audio/mpeg; frame-src 'self' *.payengine.de mc.yandex.md *.paypal.com *.youtube.com *.google.com *.youtube-nocookie.com *.vimeo.com *.dailymotion.com *.googletagmanager.com; frame-ancestors 'self' *.youtube.com *.sovido.de; 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-jS3nWeJiTWMlVMrNxd8zHg' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src * 'unsafe-inline' 'unsafe-eval'; frame-ancestors *; font-src * 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://* data:; img-src 'self' 'unsafe-inline' https://* data:; frame-ancestors 'self' https://* http://* data: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src https:; form-action 'self'; frame-ancestors 'self' https://*.hdsb.ca https://*.myhdsb.ca; object-src 'none';base-uri 'none' 1
frame-ancestors *.annthegran.com; 1
frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com; report-uri http://www.swimacrossamerica.org/site/XFrameViolation 1
frame-ancestors 'self' *.vertafore.com 1
script-src 'self' *.scvotes.gov *.scvotes.org www.google-analytics.com www.googletagmanager.com 'unsafe-eval' 'unsafe-inline'; object-src 'self' *.scvotes.gov *.scvotes.org 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: https:; connect-src 'self' https: http://www.jimdo.com/; report-uri https://o378271.ingest.sentry.io/api/5201427/security/?sentry_key=b97b30d6fd6244419f1e761e6f6f319a 1
frame-ancestors 'self' live.sagepay.com www1.collectif.co.uk 1
frame-ancestors 'self' *.classcreator.com *.classconnection.com *.facebook.net *.facebook.com 1
default-src 'self' *.foresee.com *.humana.com *.humanapharmacy.com *.ensighten.com *.omtrdc.net *.tealiumiq.com *.coremetrics.com *.cmcore.com *.answerscloud.com *.mpeasylink.com *.zscaler.net *.gigya.com *.googleadservices.com *.yimg.com *.facebook.net *.yahoo.com *.google.com *.gstatic.com *.salesforceliveagent.com *.googleapis.com *.4seeresults.com *.youtube.com *.azureedge.net *.cloudfront.net *.dialogtech.com *.linkedin.com *.longtailvideo.com *.truste.com *.prescribeitrx.com *.amazonaws.com *.glancecdn.net *.humana-government.com *.careplushealthplans.com *.ytimg.com *.facebook.com *.healthwise.net *.humanavitality.com *.go365.com *.requirejs.org *.cdc.gov *.outbrain.com *.eloqua.com *.4see.mobi *.foreseeresults.com *.bing.com *.doubleclick.net *.licdn.com *.twitter.com *.360yield.com *.casalemedia.com *.kargo.com *.bidswitch.net *.ad-stir.com humananews.com *.humananews.com *.tealium.com *.force.com *.salesforce.com *.tiqcdn.com *.usw2.pure.cloud *.en25.com; connect-src 'self' ws: cobrowse.usw2.pure.cloud *.humana.com *.humanapharmacy.com *.foresee.com *.ensighten.com *.omtrdc.net *.tealiumiq.com *.coremetrics.com *.cmcore.com *.answerscloud.com *.mpeasylink.com *.zscaler.net *.gigya.com *.googleadservices.com *.yimg.com *.facebook.net *.yahoo.com *.google.com *.gstatic.com *.salesforceliveagent.com *.googleapis.com *.4seeresults.com *.youtube.com *.azureedge.net *.cloudfront.net *.dialogtech.com *.linkedin.com *.longtailvideo.com *.truste.com *.prescribeitrx.com *.amazonaws.com *.glancecdn.net *.humana-government.com *.careplushealthplans.com *.ytimg.com *.facebook.com *.healthwise.net *.humanavitality.com *.go365.com *.requirejs.org *.cdc.gov *.outbrain.com *.eloqua.com *.4see.mobi *.foreseeresults.com *.bing.com *.doubleclick.net *.licdn.com *.twitter.com *.360yield.com *.casalemedia.com *.kargo.com *.bidswitch.net *.ad-stir.com humananews.com *.humananews.com *.tealium.com *.force.com *.salesforce.com *.tiqcdn.com *.en25.com;font-src https: data:; frame-src https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.essl.optimost.com *.foresee.com *.humana.com *.tiqcdn.com *.force.com *.salesforce.com *.humanapharmacy.com *.ensighten.com *.omtrdc.net *.coremetrics.com *.cmcore.com *.answerscloud.com *.mpeasylink.com *.zscaler.net *.gigya.com *.googleadservices.com *.yimg.com *.facebook.net *.yahoo.com *.google.com *.gstatic.com *.salesforceliveagent.com *.googleapis.com *.4seeresults.com *.youtube.com *.azureedge.net *.cloudfront.net *.dialogtech.com *.linkedin.com *.longtailvideo.com *.truste.com *.prescribeitrx.com *.amazonaws.com *.glancecdn.net *.humana-government.com *.careplushealthplans.com *.ytimg.com *.facebook.com *.healthwise.net *.humanavitality.com *.go365.com *.cdc.gov *.outbrain.com *.eloqua.com *.4see.mobi *.foreseeresults.com *.bing.com *.doubleclick.net *.licdn.com *.twitter.com *.360yield.com *.casalemedia.com *.kargo.com *.bidswitch.net *.ad-stir.com humananews.com *.humananews.com *.tealium.com *.tealiumiq.com *.cloudflare.com *.jquery.com *.usw2.pure.cloud *.en25.com;style-src 'self' 'unsafe-inline' *.foresee.com *.humana.com *.humanapharmacy.com *.force.com *.ensighten.com *.omtrdc.net *.coremetrics.com *.cmcore.com *.answerscloud.com *.mpeasylink.com *.zscaler.net *.gigya.com *.googleadservices.com *.yimg.com *.facebook.net *.yahoo.com *.google.com *.gstatic.com *.salesforceliveagent.com *.googleapis.com *.4seeresults.com *.youtube.com *.azureedge.net *.cloudfront.net *.dialogtech.com *.linkedin.com *.longtailvideo.com *.truste.com *.prescribeitrx.com *.amazonaws.com *.glancecdn.net *.humana-government.com *.careplushealthplans.com *.ytimg.com *.facebook.com *.healthwise.net *.humanavitality.com *.go365.com *.requirejs.org *.cdc.gov *.outbrain.com *.eloqua.com *.4see.mobi *.foreseeresults.com *.bing.com *.doubleclick.net *.licdn.com *.twitter.com *.360yield.com *.casalemedia.com *.kargo.com *.bidswitch.net *.ad-stir.com humananews.com *.humananews.com *.salesforce.com *.en25.com;img-src 'self' *.foresee.com *.humana.com *.humanapharmacy.com *.ensighten.com *.omtrdc.net *.coremetrics.com *.cmcore.com *.answerscloud.com *.mpeasylink.com *.zscaler.net *.gigya.com *.googleadservices.com *.yimg.com *.facebook.net *.yahoo.com *.google.com *.gstatic.com *.salesforceliveagent.com *.googleapis.com *.4seeresults.com *.youtube.com *.azureedge.net *.cloudfront.net *.dialogtech.com *.linkedin.com *.longtailvideo.com *.truste.com *.prescribeitrx.com *.amazonaws.com *.glancecdn.net *.humana-government.com *.careplushealthplans.com *.ytimg.com *.facebook.com *.healthwise.net *.humanavitality.com *.go365.com *.requirejs.org data: *.cdc.gov *.outbrain.com *.eloqua.com *.4see.mobi *.foreseeresults.com *.bing.com *.doubleclick.net *.licdn.com *.twitter.com *.360yield.com *.casalemedia.com *.kargo.com *.bidswitch.net *.ad-stir.com humananews.com *.humananews.com *.fdbcloudconnector.com *.force.com *.salesforce.com *.intelliresponse.com *.en25.com; frame-ancestors 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com *.cloudfront.net s3.amazonaws.com *.facebook.com *.facebook.net *.googleapis.com *.jquery.com *.polyfill.io *.twitter.com unpkg.com *.unpkg.com *.vimeo.com *.vimeocdn.com *.google-analytics.com *.newrelic.com *.nr-data.net ssgsales.com ssgecom.com *.ssgecom.com *.bsnsports.com *.art.bsnsports.com fonts.gstatic.com *.googletagmanager.com settings.luckyorange.net www.google.com www.gstatic.com code.highcharts.com maxcdn.bootstrapcdn.com *.typekit.net use.fontawesome.com *.fancloth.com *.squarespace.com www.googleadservices.com stats.g.doubleclick.net *.hotjar.com *.hotjar.io *.xisecurenet.com *.paymetric.com *.zopim.com *.zdassets.com; connect-src 'self' *.cloudflare.com *.cloudfront.net s3.amazonaws.com *.facebook.com *.facebook.net *.googleapis.com *.jquery.com *.polyfill.io *.twitter.com unpkg.com *.unpkg.com *.vimeo.com *.vimeocdn.com *.google-analytics.com *.newrelic.com *.nr-data.net ssgsales.com ssgecom.com *.ssgecom.com *.bsnsports.com *.art.bsnsports.com fonts.gstatic.com *.googletagmanager.com settings.luckyorange.net www.google.com www.gstatic.com code.highcharts.com maxcdn.bootstrapcdn.com *.typekit.net use.fontawesome.com *.fancloth.com *.squarespace.com www.googleadservices.com stats.g.doubleclick.net *.hotjar.com *.hotjar.io *.xisecurenet.com *.paymetric.com *.zopim.com *.zdassets.com wss://in.visitors.live wss://visitors.live wss://*.hotjar.com wss://widget-mediator.zopim.com; report-uri /v3/csp_report 1
default-src 'none'; script-src 'unsafe-eval' 'nonce-mtTBUFwaIKpAJs1shWjS' https://enjinx.io https://enjinx.cn https://www.googletagmanager.com; style-src 'unsafe-inline' https://enjinx.io https://enjinx.cn; img-src 'self' data: https://enjinx.io https://kovan.enjinx.io https://ropsten.enjinx.io https://goerli.enjinx.io https://enjinx.cn https://kovan.enjinx.cn https://ropsten.enjinx.cn https://goerli.enjinx.cn https://cdn.enjinx.io https://cdn.enjinx.cn https://www.google-analytics.com https://stats.g.doubleclick.net; font-src https://enjinx.io https://enjinx.cn; connect-src 'self' wss://*.pusher.com https://*.pusher.com https://www.google-analytics.com https://stats.g.doubleclick.net; form-action 'self'; media-src https://cdn.enjinx.io https://cdn.enjinx.cn; block-all-mixed-content; report-uri https://enjinx.io/report/csp; 1
frame-ancestors *.hss.com *.hsstraining.com 1
img-src * data:; form-action 'self'; font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com; media-src 'self' blob: https://*.cloudinary.com; style-src 'self' 'unsafe-inline' http://crowdin.com http://cdn.crowdin.com https://fonts.googleapis.com https://*.stripe.com https://djtflbt20bdde.cloudfront.net https://use.fontawesome.com https://cdnjs.cloudflare.com; connect-src 'self' https://*.cloudinary.com https://*.stripe.com *.helpscoutdocs.com *.helpscout.net *.amplitude.com *.facebook.com api.unsplash.com api.typeform.com images.unsplash.com https://www.google-analytics.com *.algolia.net *.algolianet.com https://maps.googleapis.com; child-src 'self' http://crowdin.com http://cdn.crowdin.com https://*.facebook.com https://www.google.com/recaptcha/ https://*.youtube.com https://*.youtu.be https://*.vimeo.com https://*.stripe.com https://djtflbt20bdde.cloudfront.net https://connect.facebook.net https://bid.g.doubleclick.net; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://crowdin.com http://cdn.crowdin.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.googletagmanager.com https://*.google-analytics.com https://*.stripe.com https://*.cloudflare.com connect.facebook.net https://djtflbt20bdde.cloudfront.net *.amplitude.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://analytics.tiktok.com; base-uri 'self'; default-src 'self' https://djtflbt20bdde.cloudfront.net 1
default-src https: data: 'unsafe-eval' 'unsafe-inline'; frame-ancestors https://lit.zestydev.com https://lit.ie https://localhost; 1
default-src 'self' https://cdn.onesignal.com https://c.disquscdn.com https://disqus.com https://maxprog.onfastspring.com; frame-src 'self' https://www.youtube.com https://onesignal.com https://c.sharethis.mgr.consensu.org https://t.sharethis.com https://disqus.com https://platform.twitter.com https://maxprog.onfastspring.com https://js.stripe.com/ https://checkout.stripe.com/ https://widget.trustpilot.com/ https://secure.livechatinc.com https://vm.providesupport.com https://www.google.com https://cse.google.es https://app.mailjet.com https://www.crowdcast.io https://embed.restream.io https://maxprog.repuso.com https://event.webinarjam.com https://cdn.forms-content.sg-form.com https://player.vimeo.com https://vimeo.com https://add.eventable.com https://w2.countingdownto.com https://accounts.google.com https://maxbulk.featureupvote.com https://maxprog.featureupvote.com https://emailsoftware.featureupvote.com https://financesoftware.featureupvote.com https://internettools.featureupvote.com https://www.videoask.com https://a39a7b1b.sibforms.com https://zoom.us https://tokbox.com https://success.zoom.us https://frn6tt1te6.execute-api.eu-west-1.amazonaws.com https://www.facebook.com https://form.typeform.com https://vimeo.com https://www.loom.com https://jmp.sh https://jumpshare.com https://sibautomation.com https://maxprog.thereviewsplace.com https://headway-widget.net https://www.semrush.com https://publer.io https://status.maxprog.com https://www.surveymonkey.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://widget-mediator.zopim.com https://static.zdassets.com https://onesignal.com https://cdn.onesignal.com https://cdn.onesignal.com https://cdn.onesignal.com/sdks/OneSignalSDKWorker.js https://platform-api.sharethis.com https://maxprog.disqus.com https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.js https://www.googletagmanager.com https://www.google-analytics.com https://cse.google.com https://www.google.com https://translate.google.com https://translate.googleapis.com https://buttons-config.sharethis.com https://count-server.sharethis.com https://t.sharethis.com https://platform.twitter.com https://c.disquscdn.com https://d1f8f9xcsvx3ha.cloudfront.net https://api.repuso.com https://repuso.com https://repuso.com/widgets/floating.js https://repuso.com/widgets/jquery-2.1.4.min.js https://js.stripe.com/v3 https://checkout.stripe.com/v2/checkout.js https://widget.trustpilot.com https://cdn.livechatinc.com https://secure.livechatinc.com https://client.crisp.chat https://settings.crisp.chat https://image.providesupport.com https://vm.providesupport.com https://cdn.sitesearch360.com https://www.gstatic.com https://clients1.google.com https://app.mailjet.com https://certify-js.alexametrics.com https://xslt.alexa.com https://event.webinarjam.com https://cdnjs.cloudflare.com https://www.bigmarker.com https://ajax.googleapis.com https://a.omappapi.com https://a.trstplse.com https://extend.vimeocdn.com https://plugins.eventable.com https://add.eventable.com https://js.boxcast.com http://ajax.googleapis.com https://maxprog.qhub.com https://app.purechat.com https://prod.purechatcdn.com https://apis.google.com https://accounts.google.com https://cdn.pubble.io https://www.pubble.io https://js.pusher.com https://media.pubble.io https://cdn.mxpnl.com https://appstates.pubble.io https://www.videoask.com https://tokbox.com https://static.opentok.com https://apis.google.com https://bufonidae.boxcast.com https://productquestions-clientstaticfiles.trustpilot.com https://connect.facebook.net https://embed.typeform.com https://vimeo.com https://*.github.io https://cdn.provesrc.com https://apps.elfsight.com https://static.elfsight.com https://sibautomation.com https://chat.sendinblue.com https://www.youtube.com https://*.ytimg.com https://storage.elfsight.com https://sibautomation.com/ https://cdn.headwayapp.co/ https://links.services.disqus.com https://widget.surveymonkey.com; connect-src 'self' https://maxprog.zendesk.com https://static.zdassets.com https://ekr.zdassets.com wss://widget-mediator.zopim.com https://onesignal.com https://l.sharethis.com https://links.services.disqus.com https://maxprog.onfastspring.com https://www.google-analytics.com https://stats.g.doubleclick.net https://checkout.stripe.com https://yoast.com wss://client.relay.crisp.chat https://client.crisp.chat https://chatapi.providesupport.com https://insights.sitesearch360.com https://global.sitesearch360.com https://translate.googleapis.com https://event.webinarjam.com https://www.bigmarker.com https://api.omappapi.com https://*.omappapi.com https://rdp.rhombusads.com https://api.trstplse.com https://app.optmnstr.com https://api.boxcast.com https://metrics.boxcast.com https://play.boxcast.com https://felidae.boxcast.com https://widgetapi.purechat.com https://api-cdn.purechat.com https://api.purechat.com https://checkin.purechat.com https://api-js.mixpanel.com https://api.videoask.com https://hlg.tokbox.com https://config.opentok.com https://anvil.opentok.com https://api-standard.opentok.com wss://mantis021-dub.tokbox.com https://bufonidae.boxcast.com https://canidae.boxcast.com https://*.boxcast.com https://app.omappapi.com https://client-api.provesrc.com https://apps.elfsight.com https://data.elfsight.com https://in-automate.sendinblue.com   https://*.elfsight.com https://chat-operating-back.sendinblue.com wss://chat-messaging.sendinblue.com; img-src 'self' https://repuso.com https://rc.rlcdn.com https://platform-cdn.sharethis.com https://l.sharethis.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://checkout.stripe.com https://www.gstatic.com https://syndication.twitter.com https://www.google.es https://www.googleapis.com https://clients1.google.com https://d1f8f9xcsvx3ha.cloudfront.net https://secure.gravatar.com https://q.stripe.com https://www.gstatic.com https://cdn.viglink.com https://links.services.disqus.com https://cdn.livechatinc.com data: https://image.crisp.chat https://client.crisp.chat https://image.providesupport.com https://insights.sitesearch360.com https://translate.googleapis.com https://translate.google.com https://encrypted-tbn3.gstatic.com https://encrypted-tbn0.gstatic.com https://encrypted-tbn2.gstatic.com https://ssl.gstatic.com https://img.onesignal.com https://img.youtube.com https://referrer.disqus.com https://c.disquscdn.com https://certify.alexametrics.com https://www.googletagmanager.com https://d5ln38p3754yc.cloudfront.net https://optin-monster.s3.amazonaws.com https://a.omappapi.com https://trustpulse.s3.amazonaws.com https://a.trstplse.com https://lh3.googleusercontent.com https://www.gravatar.com https://plugins.eventable.com https://add.eventable.com https://recordings.boxcast.com https://uploads.boxcast.com https://maxprog.qhub.com https://i.ytimg.com https://cdn.pubble.io https://uploads.pubble.io https://media.pubble.io https://www.videoask.com https://assets.tokbox.com https://www.facebook.com https://*.trustpilot.com https://*.vimeocdn.com https://*.digitaloceanspaces.com https://*.provesrc.com https://*.amazonaws.com https://*.googleusercontent.com  https://t.co https://chat-public.sendinblue.com https://*.gstatic.com https://*.ggpht.com https://maxprog.thereviewsplace.com https://secure.surveymonkey.com; style-src 'self' 'unsafe-inline' https://onesignal.com https://c.disquscdn.com https://www.google.com https://translate.googleapis.com https://repuso.com https://repuso.com/widgets/modal.css https://repuso.com/widgets/floating.css https://fonts.googleapis.com/ https://client.crisp.chat https://event.webinarjam.com https://www.bigmarker.com https://maxprog.qhub.com https://cdn.pubble.io; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://repuso.com https://stage.repuso.com data: https://client.crisp.chat https://event.webinarjam.com https://www.bigmarker.com https://js.boxcast.com https://cdn.pubble.io https://*.github.io https://assets.sendinblue.com; media-src 'self' blob: https://static.zdassets.com https://cdn.livechatinc.com https://res.cloudinary.com https://media.videoask.com; object-src 'self' blob: ; 1
script-src 'self' https: http://www.google-analytics.com http://www.googleadservices.com http://platform.linkedin.com http://cdn.pardot.com http://pi.pardot.com http://go.i4cp.com http://ajax.googleapis.com http://widget.surveymonkey.com 'unsafe-eval' 'unsafe-inline' 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com 'strict-dynamic' 'nonce-MTI3NTM3MTIyLDEyOTE2ODk4Mg=='; report-uri https://exceptions.hubspot.com/csp/report; 1
default-src 'self'  http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io https://www.aparat.com https://player.arvancloud.com; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com https://www.aparat.com https://player.arvancloud.com; frame-ancestors 'self' https://trustseal.enamad.ir 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com blob: data: https://z.moatads.com/* https://v1.addthisedge.com https://v1.addthis.com https://ajax.googleapis.com  https://*.cloudfront.net https://*.google.com https://www.googleadservices.com/  https://js.stripe.com https://checkout.stripe.com https://api.addressy.com https://v2.zopim.com https://maxcdn.bootstrapcdn.com https://static.zdassets.com https://www.instagram.com/ https://graph.facebook.com https://graph.facebook.com http://player.vimeo.com https://vimeo.com https://*.wistia.com https://rules.quantcount.com https://analytics.twitter.com https://script.hotjar.com https://m.addthisedge.com https://m.addthis.com  https://secure.quantserve.com https://s.pinimg.com https://script.crazyegg.com https://www.facebook.com https://static.hotjar.com https://ds.reson8.com https://static.ads-twitter.com https://www.google-analytics.com https://s7.addthis.com https://fonts.gstatic.com https://www.googletagmanager.com https://*.wistia.net https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net; img-src * 'self' data: https://t.co https://www.facebook.com https://www.google-analytics.com https://ds.reson8.com  https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com; style-src 'self' 'unsafe-inline'  https://*.wistia.com https://*.cloudfront.net https://*.google.com https://api.addressy.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://assets.zendesk.com; font-src 'self' data: https://v2.zopim.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://themes.googleusercontent.com; frame-src 'self' https://skytraf.xyz/ https://edge.addthis.com/ https://*.cloudfront.net *.doubleclick.net  https://checkout.stripe.com https://www.instagram.com https://js.stripe.com http://player.vimeo.com https://vimeo.com https://*.wistia.com https://vars.hotjar.com https://s7.addthis.com/ https://staticxx.facebook.com https://6811616.fls.doubleclick.net/ https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com; object-src https://*.cloudfront.net; connect-src 'self' data: wss: wss://br08.zopim.com https://*.ukp.io http://*.ukp.io  https://*.cloudfront.net https://m.addthis.com https://checkout.stripe.com https://unicefkidpowerhome.zendesk.com https://ekr.zdassets.com https://*.wistia.com https://*.litix.io https://embedwistia-a.akamaihd.net https://in.hotjar.com https://ct.pinterest.com; media-src * blob: 1
default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; font-src  'self'  https://use.fontawesome.com ;img-src 'self' https://www.google.com https://www.google.co.in https://www.google-analytics.com ;frame-ancestors 'self' https://cms.ocwen.com;frame-src 'self' https://cms.ocwen.com https://bid.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://use.fontawesome.com;base-uri 'self' https://cms.ocwen.com; 1
upgrade-insecure-requests; form-action 'self' citizentruth.us15.list-manage.com; frame-ancestors 'self' 1
frame-ancestors 'self' imalc.mycrowdwisdom.com sabacloud.deloitteresources.com kpmgllp.sabacloud.com cnhindustrial-pilot.csod.com jamesrivergroup.csod.com activities.calcpa.org educationfoundation.enfixlp.com 1
child-src blob:;connect-src 'self' https://*.yimg.com https://*.yahoo.com https://s.yimg.com/nq/ads/mb/native/* https://service.cmp.oath.com https://www.yahoo.com/p.gif https://smetrics.att.com/id https://dpm.demdex.net/id https://video-api.yql.yahoo.com/ https://edgecast-vod.yahoo.net/ https://*.vpg.cdn.yimg.com/ https://media.zenfs.com/ https://assets.video.yahoo.net/ https://ads.adaptv.advertising.com/ https://video.adaptv.advertising.com/ https://edgecast-cf-prod.yahoo.net/;default-src 'self';font-src https: data:;frame-src https://*.yahoo.com https://*.yimg.com https://*.ymail.com https://6518610.fls.doubleclick.net/ https://6589630.fls.doubleclick.net/ https://8523621.fls.doubleclick.net/ https://delivery.vidible.tv/ https://secure.bannerfarm.ace.advertising.com https://cmp.advertising.com https://assets.video.yahoo.net/ https://cdn-ssl.vidible.tv/prod/ https://safeframes-mbst-pub-uw1.s3-us-west-1.amazonaws.com/darla/ https://www.googletagmanager.com/ns.html;img-src data: blob: http: https:;media-src blob: https://*.yahoo.com https://*.yimg.com;report-uri https://csp.yahoo.com/beacon/csp?src=mail-norrin;script-src 'self' https://s.yimg.com/nq/nr/ https://s.yimg.com/os/yaft/ https://s.yimg.com/ss/ https://s.yimg.com/aaq/yc/ https://s.yimg.com/rq/darla/ https://fc.yahoo.com/sdarla/ https://e2e.fc.yahoo.com/sdarla/ https://safeframes-mbst-pub-uw1.s3-us-west-1.amazonaws.com/darla/ https://s.yimg.com/ds/scripts/ https://www.yahoo.com/polyfill.min.js https://yep.video.yahoo.com/js/ https://www.gstatic.com/cv/js/sender/v1/cast_sender.js https://s.yimg.com/aaq/vzm/ https://cdn-ssl.vidible.tv/prod/player/js/ https://yep.video.yahoo.com/ https://s.yimg.com/rx/ https://assets.video.yahoo.net/ https://jsapi.login.yahoo.com/w/ https://s.yimg.com/cv/apiv2/partner-portals/att/adobe_analytics/ https://consent.cmp.oath.com/ https://s.yimg.com/oa/ https://s.yimg.com/uc/sf/ https://s.yimg.com/aaq/ 'sha256-lRMQ2lQozgbWLOqNJOrnclJXX6G77pQVIlF8SAI3++I=' 'unsafe-inline' 'unsafe-eval' 'report-sample' 'nonce-pLyl1PUEwI2OaLfkchYEjiViCjEB13xWFeDLY78xff+oGdNM' ;style-src 'self' https://s.yimg.com/nq/nr/ https://s.yimg.com/rx/ https://assets.video.yahoo.net/ https://s.yimg.com/aaq/fp/ 'unsafe-inline';worker-src 'self' blob:;manifest-src https://s.yimg.com/nq/nr/json/ 1
default-src 'self' https://www.sciencetimes.co.kr https://stats.g.doubleclick.net/ https://www.google-analytics.com/ https://cache.addthiscdn.com https://trk.kissmetrics.com/ https://www.addthis.com https://static.addtoany.com https://kapi.kakao.com  http://m.addthis.com  http://postcode.map.daum.net  https://log.cizion.com http://sciencelevelup.kofac.re.kr http://opencontents.kofac.re.kr  http://www.youtube.com http://cdn.pobbang.com http://s7.addthis.com http://www.facebook.com; media-src 'self' http://cdn.podbbang.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com/ https://www.gstatic.com/ https://www.reddit.com https://graph.facebook.com/ https://widgets.pinterest.com/ https://api-public.addthis.com https://i.kissmetrics.com/ https://doug1izaerwt3.cloudfront.net https://z.moatads.com https://v1.addthisedge.com  http://static.addtoany.com http://www.google-analytics.com  http://t1.daumcdn.net http://dmaps.daum.net http://dev.livere.co.kr  http://101.livere.co.kr  http://s0.wp.com http://developers.kakao.com http://m.addthisedge.com http://m.addthis.com http://s7.addthis.com  https://ssl.google-analytics.com https://connect.facebook.net http://s7.addthis.com http://wp.com; img-src 'self' data: https://www.sciencetimes.co.kr https://static.addtoany.com  https://stats.g.doubleclick.net http://www.google-analytics.com  http://101.livere.co.kr https://ssl.google-analytics.com https://s-static.ak.facebook.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com/ https://static.addtoany.com  http://fonts.googleapis.com https://fonts.googleapis.com http://101.livere.co.kr; font-src 'self' data: http://fonts.gstatic.com https://themes.googleusercontent.com; object-src 'none' 1
upgrade-insecure-requests; frame-ancestors 'self'; default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.googleapis.com *.google.com *.google.com.au *.google.ca *.gstatic.com *.google-analytics.com *.googleadservices.com *.pingdom.net js.hs-analytics.net *.cloudfront.net js-agent.newrelic.com *.doubleclick.net *.nr-data.net *.mastersoftgroup.com *.quantserve.com *.idmanagedsolutions.com *.addthis.com *.xg4ken.com *.lightboxcdn.com *.brightcove.net *.youtube.com player.vimeo.com *.cloudflare.com *.onmodulus.net *.bootstrapcdn.com *.tradingroom.com.au *.services.visualstudio.com *.azurewebsites.net *.windows.net *.msecnd.net *.bing.com  is-ff-cdn-www.azureedge.net is-gb-cdn-www.azureedge.net is-rs-cdn-www.azureedge.net is-pz-cdn-www.azureedge.net is-ct-cdn-www.azureedge.net is-jw-cdn-www.azureedge.net is-develop-cdn-www.azureedge.net is-uat-cdn-www.azureedge.net is-master-stg-cdn-www.azureedge.net  *.investsmart.com.au *.intelligentinvestor.com.au *.eurekareport.com.au *.yourshare.com.au image.mail.eurekareport.com.au ii-uploads.s3.amazonaws.com *.intercom.io wss://*.intercom.io *.intercom.com *.intercomcdn.com *.intercomassets.com dnn506yrbagrg.cloudfront.net/pages/scripts/0018/4016.js *.crazyegg.com s3.amazonaws.com/trk.cetrk.com/ gtrk.s3.amazonaws.com *.disqus.com disqus.com *.disquscdn *.disquscdn.com *.typekit.net pub.s7.exacttarget.com cl.s7.exct.net *.coveritlive.com *.segment.com *.segment.io *.kissmetrics.com https://pixel.tapad.com  *.adsrvr.org *.quantcount.com *.dianomi.com *.jquery.com cdn.jsdelivr.net *.highcharts.com *.mypropertytools.com.au *.static.omnilife.com.au static.omnilife.com.au outlook.office365.com  placehold.it placeholdit.imgix.net fakeimg.pl fullstory.com *.fullstory.com *.facebook.net *.facebook.com http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com *.hotjar.io *.mixpanel.com *.mxpnl.com *.bugherd.com *.bugsnag.com https://omny.fm/ marketo.net *.marketo.net *.mktoresp.com app-sn04.marketo.com *.dacast.com *.viglink.com *.pusher.com ws://*.pusherapp.com wss://*.pusherapp.com *.bloomberg.com *.afr.com *.2gb.com *.forbes.com *.smh.com.au *.economist.com *.asx.com.au *.abc.net.au *.skynews.com.au *.theaustralian.com.au *.seniorsnews.com.au *.appcues.com *.firebaseio.com *.firebase.com appcues-quickstart.s3-us-west-2.amazonaws.com *.cloudinary.com *.appcues.net appcues-content-api-prod.herokuapp.com nh436jpc4i.execute-api.us-west-2.amazonaws.com 104cl9psz3.execute-api.us-west-2.amazonaws.com wss://api.appcues.net wss://*.firebaseio.com cdn.jsdelivr.net calendly.com *.calendly.com https://portal.ttds.com.au/ http://thetermdepositshop.com.au/ *.inspectlet.com https://*.buzzsprout.com www.buzzsprout.com *.imgix.net vimeocdn.com *.vimeocdn.com vimeo.com *.vimeo.com *.zoho.com abr.business.gov.au https://www.googleoptimize.com 1
frame-ancestors http://docplanner-front-test.docplanner.com https://docplanner-front-test.docplanner.com *.miodottore.it doctoraliaone-it2-candidate.azurewebsites.net 1
default-src 'self' https: 'unsafe-inline';object-src 'none';base-uri https://localizejs.com;frame-ancestors https://editor.localizejs.com;report-uri https://app.localizejs.com/api/csp/violation-report 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://*.ivideon.com https://yastatic.net https://*.yandex.ru https://mc.yandex.ru yandex.ru https://*.yandex.net https://*.gstatic.com http://fonts.gstatic.com https://*.googleapis.com *.i-exam.ru i-exam.ru http://i-exam.ru http://*.i-exam.ru https://mypage.i-exam.ru http://*.reformal.ru reformal.ru www.slideshare.net www.youtube.com; report-uri https://test.i-exam.ru/collector.php 1
frame-src 'self' blob: https://www.google.com/ https://checkout.stripe.com https://platform.twitter.com https://syndication.twitter.com https://www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://checkout.stripe.com https://analytics.freedom.press https://platform.twitter.com https://cdn.syndication.twimg.com https://cdn.jsdelivr.net https://api.observablehq.com https://bundle.run; img-src 'self' https://*.stripe.com https://analytics.freedom.press blob: https://platform.twitter.com https://syndication.twitter.com https://pbs.twimg.com https://ton.twimg.com data: https://pressfreedomtracker.us; connect-src 'self' https://checkout.stripe.com https://cdn.jsdelivr.net https://pressfreedomtracker.us; style-src 'self' 'unsafe-inline' https://platform.twitter.com https://ton.twimg.com; default-src 'self'; object-src 'self'; report-uri https://freedomofpress.report-uri.com/r/d/csp/enforce 1
frame-ancestors https://www.moex.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' stats.hft-stuttgart.de app.usercentrics.eu *.b-ite.com; font-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: stats.hft-stuttgart.de; connect-src 'self' *.usercentrics.eu *.b-ite.com; frame-src 'self' app.usercentrics.eu *.youtube-nocookie.com *.vimeo.com *.hft-stuttgart.de 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://static.criteo.net https://*.criteo.com https://wb.messengerpeople.com https://isitetv.com https://*.hotjar.com https://*.akamaihd.net https://*.attn.tv https://*.recaptcha.net https://*.translate.naver.net https://ln-rules.rewardstyle.com https://tr.snapchat.com https://www.shoplooks.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://services.postcodeanywhere.co.uk https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.googleapis.com https://translate.yandex.net https://*.hotjar.com wss://*.hotjar.com https://*.trustpilot.com https://*.pinterest.com https://*.bing.com https://*.doubleclick.net https://connect.facebook.net https://*.baidu.com https://ampcid.google.com.hk; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://m.lookfantastic.com.hk https://www.lookfantastic.com.hk https://checkout.lookfantastic.com.hk https://connect.facebook.net https://www.glossybox.at https://www.glossybox.ch https://www.glossybox.co.uk https://www.glossybox.com https://www.glossybox.de https://www.glossybox.fi https://www.glossybox.fr https://www.glossybox.ie https://www.glossybox.no https://www.glossybox.se https://www.glossybox.dk https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://remote.captcha.com https://seal.digicert.com https://static.criteo.net https://*.criteo.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.microsofttranslator.com https://*.hotjar.com https://*.akamaihd.net https://*.attn.tv https://*.trustpilot.com https://*.translate.naver.net https://*.bing.com https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://static.ads-twitter.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://*.shoplooks.com https://slooks.top https://slooks.me https://lantern.roeyecdn.com https://lantern.roeye.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://www.shoplooks.com https://static.shoplooks.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
script-src 'self' 'unsafe-inline' https://js.stripe.com; img-src 'self' data: https://www.gravatar.com https://secure.gravatar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self'; frame-src https://player.vimeo.com https://www.youtube-nocookie.com https://js.stripe.com; object-src 'none' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com https://connect.facebook.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googletagservices.com https://adservice.google.com https://adservice.google.es https://ws.nperf.com/partner/ https://unpkg.com/ https://tagmanager.google.com/debug https://tagmanager.google.com/debug/debuguiApp-bundle.js https://embed.typeform.com/embed.js https://js-agent.newrelic.com https://aiforce.com.br/mid.js bam-cell.nr-data.net https://js-agent.newrelic.com/nr-1184.min.js https://s3-eu-west-1.amazonaws.com; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com https://connect.facebook.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googletagservices.com https://adservice.google.com https://adservice.google.es https://ws.nperf.com/partner/ https://unpkg.com/ https://tagmanager.google.com/debug https://tagmanager.google.com/debug/debuguiApp-bundle.js https://embed.typeform.com/embed.js https://js-agent.newrelic.com https://aiforce.com.br/mid.js https://automatuslab.blob.core.windows.net/ https://bam.nr-data.net bam-cell.nr-data.net https://js-agent.newrelic.com/nr-1184.min.js https://s3-eu-west-1.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://fonts.googleapis.com https://tagmanager.google.com/debug/ https://hublab.com.br/; base-uri 'self'; report-uri https://selectra.report-uri.com/r/d/csp/enforce 1
default-src *.netdna-ssl.com static.nucleus.eu www.nucleus.be *.cloudfront.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.nucleus.be *.polyfill.io *.bizographics.com *.disqus.com *.cloudfront.net *.netdna-ssl.com static.nucleus.eu *.googletagmanager.com trackcmp.net *.adnxs.com *.google-analytics.com *.hotjar.com *.newrelic.com *.nr-data.net *.googleapis.com *.facebook.net *.licdn.com *.linkedin.com *.hs-scripts.com *.hs-analytics.net *.usemessages.com *.google.com *.gstatic.com; frame-src *; font-src *.cloudfront.net *.netdna-ssl.com fonts.gstatic.com static.nucleus.eu *.nucleus.be use.fontawesome.com data:; connect-src *; img-src https: data: *.cloudfront.net *.netdna-ssl.com *.google-analytics.com trackcmp.net *.gravatar.com; style-src 'self' 'unsafe-inline' www.nucleus.be *.cloudfront.net *.netdna-ssl.com static.nucleus.eu fonts.googleapis.com use.fontawesome.com *.google.com; object-src 'none'; 1
frame-ancestors 'self' https://psr-www.bayard-jeunesse.com https://www.bayard-jeunesse.com; 1
connect-src 'self' ws://127.0.0.1:35729 *.trustedshops.com *.google-analytics.com w-it.m-t.io *.webgains.io *.dc-test.de *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.doubleclick.net;default-src  https://www.jako.de *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net  *.dc-test.de *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com;frame-ancestors 'self'  *.dc-test.de *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com;child-src 'self' https://www.computop-paygate.com  https://*.amazon.de  https://*.amazon.com  https://*.payments-amazon.com *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net  *.dc-test.de *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com;font-src 'self' data: *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.trustedshops.com  *.dc-test.de *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com;media-src 'self' https://www.jako.de *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net  *.dc-test.de *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com;img-src 'self' data: https://*.amazon.com https://*.amazon.de  *.trustedshops.com *.ssl-images-amazon.com https://*.payments-amazon.com  https://*.google-analytics.com https://d23yuld0pofhhw.cloudfront.net *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net  *.dc-test.de *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com bat.bing.com;frame-src 'self' https://www.computop-paygate.com  https://*.amazon.de  https://*.amazon.com  https://*.payments-amazon.com *.youtube.com *.google.com *.facebook.com  *.dc-test.de *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.container.webgains.link;manifest-src 'self';object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.jako.de *.ssl-images-amazon.com *.amazon.com *.amazon.de  *.payments-amazon.com *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.trustedshops.com  *.dc-test.de *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com *.jquery.com *.googleadservices.com bat.bing.com googleads.g.doubleclick.net analytics.webgains.io w-it.m-t.io *.container.webgains.link track.webgains.com *.webgains.io;style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.youtube.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.typekit.net *.google.com *.google.de stats.g.doubleclick.net *.trustedshops.com  *.dc-test.de *.jako.de *.jako.be *.jako.ch *.jako.fr *.jakosport.nl *.amazon.de *.amazon.com *.amazonpay.com *.etracker.de *.etracker.com *.signalize.com *.kameleoon.eu *.kameleoon.com payment.unzer.com *.etrusted.com; 1
default-src 'self';     base-uri 'self';     script-src 'nonce-103fccab3ee04594a55e411c303f1569' 'strict-dynamic' 'self' *.zxcdn.com *.casinorewards.com cdn.jsdelivr.net https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js ;     connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net;     frame-src 'self' *.gameassists.co.uk *.gameassists.dk *.gameassists.se *.gameassists.co.za *.valueactive.eu *.valueactive.dk  ;     style-src 'self' *.zxcdn.com cdn.jsdelivr.net https://fonts.googleapis.com 'unsafe-inline';     font-src 'self' cdn.jsdelivr.net *.zxcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com;     img-src * data:;     object-src 'none';     frame-ancestors 'self';     media-src 'self' *.zxcdn.com s3.amazonaws.com/casinorewards/; 1
frame-src https://*.cathay-ins.com.tw https://dmp.eland-tech.com https://bid.g.doubleclick.net https://www.youtube.com 1
frame-ancestors 'self' preferred411.com *.preferred411.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.remotemeeting.com *.google.com *.google-analytics.com *.hotjar.com *.gstatic.com *.googletagmanager.com *.youtube.com highlightjs.org s.ytimg.com blob:; style-src 'self' 'unsafe-inline' *.remotemeeting.com; object-src 'self' *.remotemeeting.com *.youtube.com blob:; img-src * data:; media-src * blob:; report-uri /csp/report; frame-ancestors 'self' *.remotemeeting.com *.youtube.com; form-action 'self' *.rsupport.com *.worksmobile.com; base-uri 'self' *.remotemeeting.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://www.google.com https://www.google-analytics.com https://www.gstatic.com https://www.googletagmanager.com https://ajax.googleapis.com *.stripe.com *.stripe.net code.jquery.com 1
default-src 'self' blob:  data: *.instana.io *.googleadservices.com *.marketo.com *.kapturall.com *.survicate.com unpkg.com *.unpkg.com *.segurosbolivar.com *.qualtrics.com *.datatables.net *.youtube.com *.acuityplatform.com *.bing.com *.speedcurve.com *.matterport.com *.jsdelivr.net *.mlstatic.com *.solucionesbolivarsites.com *.mktoresp.com *.marketo.net *.fontawesome.com *.bootstrapcdn.com *.ipify.org *.indigitall.com *.ciencuadras.com  *.jquery.com *.hotjar.io *.amazonaws.com *.cloudfront.net *.cloudflare.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.google.com *.google-analytics.com *.hotjar.com *.crazyegg.com maxcdn.bootstrapcdn.com *.g.doubleclick.net *.facebook.net *.googleapis.com *.google.com.co *.facebook.com *.requestcatcher.com *.code-labs.com 'unsafe-inline' 'unsafe-eval';frame-src 'self' * data: *.youtube.com ; img-src https: blob: data:; 1
default-src 'self' *.youtube.com youtube.com fonts.googleapis.com *.gstatic.com nd.neufund.org *.cloudflare.com *.crazyegg.com tagmanager.google.com *.google-analytics.com platform.neufund.org *.fonts.gstatic.com *.script.crazyegg.com *.trk.cetrk.com s3.amazonaws.com/trk.cetrk.com/e/t.js s3.amazonaws.com/trk.cetrk.com/4/t.js www.googletagmanager.com *.ytimg.com data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; base-uri 'none'; form-action 'self' 1
default-src 'self'; child-src 'self' https://www.youtube.com https://youtu.be; connect-src 'self' https:; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://svc.webspellchecker.net; frame-src 'self' https:; img-src 'self' https: data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://svc.webspellchecker.net 1
base-uri 'self' ; default-src 'self' https://range.co https://*.range.co ; object-src 'none' ; media-src https://js.intercomcdn.com ; font-src 'self' data: https://range.co https://*.range.co https://fonts.gstatic.com https://js.intercomcdn.com ; connect-src 'self' https://range.co https://*.range.co https://www.google-analytics.com https://stats.g.doubleclick.net https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://app.getsentry.com https://sentry.io https://api.stripe.com https://www.facebook.com https://connect.facebook.net https://www.googletagmanager.com https://tagmanager.google.com https://*.quantcount.com https://*.quantserve.com ; child-src 'self' https://range.co https://*.range.co https://share.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net ; frame-src 'self' https://range.co https://*.range.co https://accounts.google.com https://bid.g.doubleclick.net https://share.intercom.io https://intercom-sheets.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://js.stripe.com https://hooks.stripe.com ; worker-src 'self' https://range.co https://*.range.co ; style-src 'self' 'unsafe-inline' https://range.co https://*.range.co https://fonts.googleapis.com https://tagmanager.google.com ; script-src 'self' 'unsafe-inline' range.co *.range.co https://*.googleadservices.com https://*.licdn.com https://*.quantcount.com https://*.quantserve.com https://apis.google.com https://app.intercom.io https://cdn.ravenjs.com https://connect.facebook.net https://diffuser-cdn.app-us1.com https://googleads.g.doubleclick.net https://js.intercomcdn.com https://js.stripe.com https://s.ytimg.com https://tagmanager.google.com https://widget.intercom.io https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.youtube.com ; img-src 'self' data: https://range.co https://*.range.co https://*.gstatic.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-9.com https://*.linkedin.com https://*.quantserve.com https://cdn.sanity.io https://csi.gstatic.com https://downloads.intercomcdn.com https://gifs.intercomcdn.com  https://googleads.g.doubleclick.net https://habitat-team.imgix.net https://i.ytimg.com https://js.intercomcdn.com https://messenger-apps.intercom.io https://range.imgix.net https://rangeweb-staging.imgix.net https://rangeweb.imgix.net https://static.intercomassets.com https://stats.g.doubleclick.net https://uploads.intercomusercontent.com https://video-messages.intercomcdn.com https://www.facebook.com https://www.google-analytics.com https://www.google.com ; form-action https://intercom.help https://api-iam.intercom.io https://*.list-manage.com ; frame-ancestors 'self' https://range.co https://*.range.co ; report-uri https://in.range.co/csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.googletagmanager.com https://ssl.google-analytics.com https://www.google-analytics.com https://connect.facebook.net https://www.bluechipartbrokerage.com https://assets.pinterest.com https://cdnjs.cloudflare.com; img-src 'self' data: https://ssl.google-analytics.com  https://www.google-analytics.com https://s-static.ak.facebook.com https://www.bluechipartbrokerage.com https://assets.pinterest.com https://cdnjs.cloudflare.com https://via.placeholder.com https://seal.digicert.com https://images.artbrokerage.com https://cdn.artbrokerage.com https://art.artbrokerage.com https://s3.amazonaws.com https://artbrokerage.s3.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.bluechipartbrokerage.com https://assets.pinterest.com https://cdnjs.cloudflare.com; font-src 'self' https://themes.googleusercontent.com https://cdnjs.cloudflare.com; frame-src 'self' https://www.facebook.com https://s-static.ak.facebook.com https://www.bluechipartbrokerage.com https://assets.pinterest.com https://cdnjs.cloudflare.com; object-src 'self'; base-uri 'self' 1
object-src 'self'; worker-src 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.googlecommerce.com *.googleadservices.com *.braintreegateway.com *.googleapis.com *.cloudflare.com *.planetart.com *.newrelic.com *.twitter.com *.ads-twitter.com *.facebook.net *.adroll.com *.livechatinc.com cdn.brcdn.com www.paypalobjects.com *.brsrvr.com *.optimizely.com *.nr-data.net *.pcrl.co *.picreel.com *.bing.com *.extole.com *.yimg.com *.yahoo.com *.sharethis.com *.amazonaws.com *.rubiconproject.com *.doubleclick.net *.ups-mi.net *.pinterest.com *.paypal.com *.tellapal.com *.momsaffiliate.com *.emjcd.com *.shareasale.com t.co *.locker2.com *.adxcel-ec2.com *.gstatic.com *.steelhousemedia.com www.googletagmanager.com pixel.cdnwidget.com snap.licdn.com px.ads.linkedin.com *.tvsquared.com unpkg.com d39517acq78dhc.cloudfront.net js.braintreegateway.com *.cardinalcommerce.com *.dca0.com d.adroll.mgr.consensu.org *.ccdc02.com *.openx.net *.rlcdn.com *.adnxs.com *.bidswitch.net *.3lift.com *.taboola.com *.pubmatic.com *.outbrain.com *.casalemedia.com *.advertising.com www.clickcease.com *.mail.simplytoimpress.com track.cordial.io *.personalcreations.com tags.tiqcdn.com use.typekit.net dpm.demdex.net www.lightboxcdn.com t.channeladvisor.com tag.bounceexchange.com s.pinimg.com assets.bounceexchange.com api.bounceexchange.com cdn.staticfile.org cdn.canvasworld.com;frame-ancestors 'self' https://www.canvasworld.com ;upgrade-insecure-requests 1
default-src 'self' https:;base-uri 'self';img-src 'self' https: data: www.googletagmanager.com;font-src 'self' https: data:;script-src 'self' https: 'unsafe-inline' 'unsafe-eval';frame-src 'self' https:;media-src 'self' https: data:;style-src 'self' https: 'unsafe-inline';object-src 'none';connect-src 'self' https: wss: 1
default-src 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' https://*.cloudflare.com https://*.force.com https://*.hotjar.com https://secure.trust-provider.com https://*.sharethis.com https://platform.twitter.com https://connect.facebook.net https://static1.twitcount.com https://*.codero.com https://*.salesforceliveagent.com https://*.salesforce.com https://*.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://pi.pardot.com https://*.google.com; script-src 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' https://*.cloudflare.com https://*.force.com https://*.hotjar.com https://secure.trust-provider.com https://*.sharethis.com https://platform.twitter.com https://connect.facebook.net https://static1.twitcount.com https://codero.com https://*.codero.com https://codero.com https://*.salesforceliveagent.com https://*.salesforce.com https://*.googleapis.com https://google.com https://www.googletagmanager.com https://www.google-analytics.com https://pi.pardot.com https://*.google.com https://*.gstatic.com; style-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' https://*.cloudflare.com https://*.force.com https://*.hotjar.com https://secure.trust-provider.com https://*.sharethis.com https://platform.twitter.com https://connect.facebook.net https://static1.twitcount.com https://*.codero.com https://*.salesforceliveagent.com https://*.salesforce.com https://*.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://pi.pardot.com https://*.google.com; img-src * 'self' data: https://*.cloudflare.com https://*.force.com https://*.hotjar.com https://secure.trust-provider.com https://*.sharethis.com https://platform.twitter.com https://connect.facebook.net https://static1.twitcount.com https://*.codero.com https://*.salesforceliveagent.com https://*.salesforce.com https://*.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://pi.pardot.com https://*.google.com; font-src * 'self' data:; media-src * 'self' https://*.cloudflare.com https://*.force.com https://*.hotjar.com https://secure.trust-provider.com https://*.sharethis.com https://platform.twitter.com https://connect.facebook.net https://static1.twitcount.com https://*.codero.com https://*.salesforceliveagent.com https://*.salesforce.com https://*.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://pi.pardot.com https://*.google.com; object-src 'self' data:; prefetch-src 'self'; frame-src * data:; frame-ancestors 'self'; form-action * 1
frame-ancestors 'self' *.planet-cards.co.uk *.planet-photo.co.uk *.planet-cards.com *.planet-photo.com *.planet-cards.de *.planet-photo.de *.planet-cards.es *.planet-photo.es *.planet-cards.it *.planet-photo.it *.planet-cards.nl 1
default-src 'unsafe-eval' 'unsafe-inline' * blob:; script-src 'unsafe-inline' 'unsafe-eval' * blob:; img-src * data:; connect-src *; font-src * data:; style-src 'unsafe-inline' * 1
default-src 'self' *.zipmoney.com.au *.gstatic.com *.bazaarvoice.com *.vimeo.com vod-progressive.akamaized.net *.hotjar.com *.hotjar.io *.crazyegg.com; img-src 'self' data: https:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; frame-src 'self' *.google.com *.zip.co *.doubleclick.net player.vimeo.com www.youtube.com vod-progressive.akamaized.net *.exacttarget.com *.vudoo.io *.bazaarvoice.com *.criteo.com vars.hotjar.com; connect-src 'self' https: wss:; font-src 'self' data: https:; frame-ancestors 'self' https://*.sheridan.com.au; 1
block-all-mixed-content; frame-ancestors 'self' fantasticservices.com cdn.fantasticservices.com api.fantasticservices.com wss://*.hotjar.com cobrowsing.freshchat.com; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval';connect-src https: wss: 1
script-src 'self' 'unsafe-inline' www.gstatic.com www.google-analytics.com www.googletagmanager.com bam.nr-data.net js-agent.newrelic.com www.bol.pt cdn.rawgit.com cdnjs.cloudflare.com www.recaptcha.net www.google.com; frame-src www.google.com maat.bol.pt 1
default-src *     ;report-uri /xp/CSPReport.ashx     ;script-src * 'unsafe-inline' 'unsafe-eval' data: about:     ;style-src * 'unsafe-inline'     ;connect-src * blob: data:    ;font-src * data:     ;object-src *     ;img-src * data: blob:     ;media-src * blob:     ;frame-src * data: gsa: ajaxhandler:     ;child-src * blob:     ;worker-src * blob:     ;form-action * javascript:     ;frame-ancestors 'self' 1
default-src 'none'; frame-ancestors 'none'; script-src 'self' 'nonce-somethingrandom' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' wss://rustchance.com/feed; img-src 'self' *.akamaihd.net https://static-cdn.jtvnw.net/emoticons/ https://cdn.frankerfacez.com/emoticon/ data:; style-src 'self' 'sha256-yUOnKCENzSdKikR9gEEAu8IogIBNlifamnNNH1E31SE=' fonts.googleapis.com;base-uri 'self';form-action 'self';font-src fonts.gstatic.com; frame-src 'self' https://www.google.com/recaptcha/ https://hcaptcha.com https://*.hcaptcha.com 1
media-src data: blob: filesystem:; default-src * data: 'unsafe-eval' 'unsafe-inline' 1
default-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' 'self'; connect-src 'self'; img-src 'self'; style-src 'unsafe-inline' 'self'; font-src 'self'; frame-src 'self'; object-src 'self'; 1
default-src 'self'; script-src 'self' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self'; frame-src 'self' https://www.youtube.com https://www.google.com/recaptcha/; img-src 'self' data: https://secure.gravatar.com/avatar/; 1
default-src 'self' mailto: https://www.youtube.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ play.vidyard.com *.vimeo.com *.moneris.com phf.tbe.taleo.net https://rpt.cedexis.com https://chm.tbe.taleo.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' analytics.twitter.com siteimproveanalytics.com connect.facebook.net static.ads-twitter.com www.google-analytics.com px.ads.linkedin.com snap.licdn.com netdna.bootstrapcdn.com vitalets.github.com vitalets.github.io play.vidyard.com cdn.jsdelivr.net code.jquery.com connect.facebook.net siteimproveanalytics.com play.vidyard.com https://px.ads.linkedin.com https://analytics.twitter.com https://www.linkedin.com https://snap.licdn.com https://static.ads-twitter.com http://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://maps.googleapis.com https://ajax.googleapis.com http://ajax.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://angular-ui.github.io stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' vitalets.github.com vitalets.github.io https://fonts.googleapis.com https://tagmanager.google.com; img-src 'self' data: www.economical.com www.economicalgroup.com www.groupeeconomical.com vitalets.github.io netdna.bootstrapcdn.com cx.atdmt.com *.global.siteimproveanalytics.io www.facebook.com us2.siteimprove.com p.adsymptotic.com *.google.com px.ads.linkedin.com https://t.co https://www.google.ca/ https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://csi.gstatic.com https://ssl.gstatic.com https://www.gstatic.com stats.g.doubleclick.net; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' data: www.economical.com; connect-src 'self' https://*.moneris.com https://www.google-analytics.com https://stats.g.doubleclick.net; report-uri /WebResource.axd?cspReport=true 1
script-src 'self' data: da.beethoven.de ajax.googleapis.com www.google.com www.gstatic.com 'unsafe-eval' 'unsafe-inline' www.google-analytics.com *.google.com www.googleadservices.com www.googletagmanager.com code.jquery.com *.twitter.com walls.io cdn.syndication.twimg.com cdn.jsdelivr.net; img-src 'self' *.ggpht.com *.googleusercontent.com www.google-analytics.com www.googleadservices.com *.gstatic.com *.googleapis.com *.google.com data: 'unsafe-inline' *.twitter.com *.twimg.com *.paypal.com *.paypalobjects.com; default-src 'self' www.google-analytics.com; frame-src 'self' www.google.com drive.google.com accounts.google.com maps.google.de www.youtube.com www.youtube-nocookie.com da.beethoven.de *.appspot.com katalog.beethoven.de *.twitter.com panorama.beethoven.de data: *.google.com walls.io my.walls.io; style-src 'self' 'unsafe-inline' fonts.googleapis.com platform.twitter.com *.twitter.com *.twimg.com *.google.com; media-src 'self' internet.beethoven.de; connect-src 'self' www.google-analytics.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.efdss.org embedsocial.com *.patronbase.com *.google-analytics.com *.instagram.com pbs.twimg.com *.cloudflare.com *.cloudflareinsights.com *.civiccomputing.com *.pardot.com *.facebook.net *.facebook.com *.myfonts.net *.pcapredict.com *.googletagmanager.com *.postcodeanywhere.co.uk *.facebook.com *.doubleclick.net *.google.com *.google.co.uk *.googleapis.com fonts.gstatic.com *.youtube.com *.youtu.be *.vimeo.com *.spotify.com *.soundcloud.com *.staticflickr.com *.addthis.com *.twimg.com *.twitter.com twitter.com *twimg.com *.embedsocial.com; data:; img-src *; font-src fonts.gstatic.com 'self' data: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ctctcdn.com *.cloudflare.com *.gstatic.com maps.googleapis.com ajax.googleapis.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com; style-src 'self' 'unsafe-inline' *.ctctcdn.com *.fontawesome.com fonts.googleapis.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; img-src 'self' *.ctctcdn.com maps.gstatic.com maps.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com; font-src 'self' *.fontawesome.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; connect-src 'self' *.constantcontact.com *.ctctcdn.com accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ www.google.com apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; 1
frame-ancestors 'self' https://*.superoffice.com 1
default-src 'self'; script-src 'self' 'unsafe-eval' https://js-agent.newrelic.com https://in.hotjar.com https://vvars.hotjar.com https://script.hotjar.com https://static.hotjar.com https://bam.nr-data.net https://www.google.it https://www.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.googletagmanager.com https://s.ytimg.com https://cdnjs.cloudflare.com https://www.youtube.com 'unsafe-inline'; object-src 'none'; frame-ancestors 'self'; frame-src 'self' https://vars.hotjar.com https://www.youtube.com https://www.youtube-nocookie.com; form-action 'self'; style-src 'self' https://fonts.googleapis.com https://use.fontawesome.com https://cdnjs.cloudflare.com 'unsafe-inline'; font-src 'self' https://use.fontawesome.com https://fonts.gstatic.com; img-src 'self' data: https://ssl.google-analytics.com https://www.google-analytics.com https://www.google.it https://www.google.com https://www.googletagmanager.com https://i.ytimg.com https://d3ckdismoppnvt.cloudfront.net; connect-src 'self' https://stats.g.doubleclick.net https://in.hotjar.com https://www.google-analytics.com https://ljucv4r4qc.execute-api.eu-west-1.amazonaws.com https://vc.hotjar.io https://casa.engie.it https://d70ggs2qfh.execute-api.eu-west-1.amazonaws.com *.algolia.net *.algolianet.com; media-src 'self' https://www.youtube.com 1
frame-ancestors 'self' https://www.ourlounge.at/; block-all-mixed-content 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *; object-src 'unsafe-inline' 'unsafe-eval' * 1
script-src 'self' 'nonce-Swc4jmHvJfQbJA0G' 'sha256-pfTt8m73Oh4Gpr9VfOZ0ZqbmfZiXSNCD85pKAtvArQo=' 'sha256-d3UU0CacB0kz+aOWDyb+F4KusdGhs2LBt49owseE9ow=' https://code.jquery.com https://static.doubleclick.net https://googleads.g.doubleclick.net https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com/ https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://shareowneronline.com; connect-src 'self' https://devadfs.usatest.eqtest.internal/; child-src 'self'; frame-src 'self' https://player.vimeo.com https://www.youtube.com https://www.googletagmanager.com https://devadfs.usatest.eqtest.internal/ https://www.google.com/ https://sso-us.equiniti.com https://djcs.factsetdigitalsolutions.com https://custom.factsetdigitalsolutions.com;  1
frame-ancestors 'self'; object-src 'none'; 1
default-src 'self'; connect-src 'self' wss://ws7.hotjar.com *.onetrust.com *.hubspot.com *.hubapi.com hubspot-forms-static-embed.s3.amazonaws.com *.facebook.com *.fbcdn.net *.licdn.com *.juicer.io *.hotjar.io *.ipify.org *.hotjar.com *.arcgis.com *.jsdelivr.net www.rpsgroup.com rps.wrcdn.net www.googletagmanager.com www.google-analytics.com vimeo.com *.vimeo.com player.vimeo.com vimeocdn.com livechatinc.com *.doubleclick.net *.dynamics.com *.livestorm.co; script-src data: 'self' 'unsafe-eval' 'unsafe-inline' *.onetrust.com *.aspnetcdn.com www.rpsgroup.com rps.wrcdn.net *.hs-scripts.com *.dynamics.com *.azureedge.net *.hs-banner.com *.youtube.com *.ytimg.com *.hsadspixel.net *.hs-analytics.net *.hscollectedforms.net *.hsforms.net *.google.com vimeo.com *.vimeo.com *.vimeocdn.com *.googletagmanager.com https://sjs.bizographics.com *.arcgis.com *.ipify.org *.licdn.com *.juicer.io *.hotjar.com *.hotjar.io *.jsdelivr.net *.livechatinc.com *.googleapis.com *.gstatic.com *.google.com *.googletagmanager.com *.vimeo.com player.vimeo.com *.vimeocdn.com www.google-analytics.com; img-src 'unsafe-inline' 'self' *.onetrust.com *.dynamics.com *.livestorm.co  www.rpsgroup.com rps.wrcdn.net *.hubspot.com *.hsforms.com *.imgur.com *.fbcdn.net *.cdninstagram.com *.vimeo.com *.vimeocdn.com *.juicer.io https://px.ads.linkedin.com https://p.adsymptotic.com https://stats.g.doubleclick.net https://ssl.gstatic.com data: *.licdn.com *.vimeocdn.com *.gravatar.com *.livechatinc.com *.googleapis.com *.gstatic.com d1xjcvwisvzlv2.cloudfront.net d14q14v8iebcb9.cloudfront.net *.google.com *.google.ie www.google-analytics.com *.googletagmanager.com; style-src 'self' 'unsafe-inline' *.onetrust.com www.rpsgroup.com rps.wrcdn.net https://tagmanager.google.com/ https://fonts.googleapis.com/ *.licdn.com *.juicer.io *.googleapis.com *.googletagmanager.com pro.fontawesome.com p.typekit.net use.typekit.net; media-src 'self'  www.rpsgroup.com *.fbcdn.net *.licdn.com *.jsdelivr.net *.livechatinc.com rps.wrcdn.net d1xjcvwisvzlv2.cloudfront.net d14q14v8iebcb9.cloudfront.net; font-src 'self' 'unsafe-inline' *.hotjar.com www.rpsgroup.com rps.wrcdn.net data: *.licdn.com *.juicer.io *.jsdelivr.net *.livechatinc.com *.gstatic.com *.googletagmanager.com use.typekit.net; frame-ancestors www.rpsgroup.com rps.wrcdn.net; frame-src 'self' *.surveygizmo.eu *.onetrust.com *.dynamics.com *.livestorm.co *.hsforms.com *.hubspot.com *.facebook.com *.instagram.com *.linkedin.com *.youtube.com *.arcgis.com rps.wrcdn.net www.rpsgroup.com *.hotjar.com *.google.com *.vimeo.com player.vimeo.com *.jsdelivr.net *.livechatinc.com *.vimeocdn.com; object-src 'self'; 1
default-src 'self' blob: data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com cdnjs.com ajax.googleapis.com fast.fonts.net *.google-analytics.com *.googletagmanager.com *.google.com *.gstatic.com stats.wp.com pixel.wp.com bam.nr-data.net js-agent.newrelic.com s0.wp.com s1.wp.com *.facebook.net cdnjs.cloudflare.com; style-src blob: 'self' 'unsafe-inline' cdnjs.cloudflare.com cdnjs.com fast.fonts.net tagmanager.google.com fonts.googleapis.com s0.wp.com s1.wp.com; img-src 'self' blob: data: https: *.google-analytics.com s0.wp.com s1.wp.com; media-src 'self' blob: data: https: s0.wp.com s1.wp.com; frame-src 'self' *.facebook.com *.google.com *.youtube.com player.vimeo.com; font-src blob: 'self' 'unsafe-inline' cdnjs.cloudflare.com fast.fonts.net fonts.gstatic.com 1
script-src 'self' 'unsafe-eval' 'nonce-mie2d4gQHjGm0Hobk050G51i' 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;style-src 'unsafe-inline' 'self' https: blob:;font-src 'self' data: https:;img-src https: 'self' data:;media-src https: 'self';connect-src 'unsafe-inline' 'self' https: wss:;frame-src 'self' https:; 1
default-src * ; script-src * 'unsafe-inline' 'unsafe-eval'; object-src *; style-src * 'unsafe-inline'; img-src * data:; media-src *; frame-src *; frame-ancestors *; child-src *; font-src * https://themes.googleusercontent.com http://themes.googleusercontent.com; connect-src *; report-uri /en/report-csp-violation 1
default-src 'self' * 'unsafe-inline' 'unsafe-eval' data:; font-src 'self' * data:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com https://stats.g.doubleclick.net https://*.gstatic.com https://www.googletagmanager.com https://www.google.com https://tagmanager.google.com https://cdn.cookielaw.org https://code.jquery.com https://cdn.krxd.net https://connect.facebook.net https://beacon.krxd.net https://consumer.krxd.net https://*.youtube.com https://s.ytimg.com ; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://*.gstatic.com https://stats.g.doubleclick.net https://adservice.google.com https://lh3.googleusercontent.com https://cdn.cookielaw.org https://beacon.krxd.net https://usermatch.krxd.net https://cm.g.doubleclick.net https://stags.bluekai.com https://ib.adnxs.com https://sync.mathtag.com https://analytics.twitter.com https://cms.analytics.yahoo.com https://sync.navdmp.com https://global.ib-ibi.com https://www.facebook.com https://i.ytimg.com https://www.google.com https://www.google.com.br https://googleads.g.doubleclick.net ; style-src 'self' 'unsafe-inline' blob: https://*.gstatic.com https://tagmanager.google.com https://fonts.googleapis.com https://*.gstatic.com https://cdn.cookielaw.org https://code.jquery.com ; child-src 'self' blob:; object-src 'none'; frame-src 'self' https://*.doubleclick.net https://www.googletagmanager.com https://www.google.com https://cdn.krxd.net https://*.youtube.com https://www.facebook.com ; connect-src 'self' data: https://www.google-analytics.com https://la.ces.coke.com https://stage-latam-cds-us-west-2-s3-config.s3.amazonaws.com https://prod-latam-cds-us-west-2-s3-config.s3.amazonaws.com https://hub-xmas-invoice-homolog.s3.amazonaws.com https://hub-xmas-invoice-production.s3.amazonaws.com ; form-action 'self' https://www.facebook.com ; font-src 'self' data: https://fonts.gstatic.com ; 1
script-src https://inteli.bamboohr.com https://forms.hsforms.com https://js.hsforms.net https://js.hs-analytics.net/ https://www.google-analytics.com https://js.hs-scripts.com/ https://www.gstatic.com https://lh3.googleusercontent.com https://apis.google.com https://*.intelichart.com https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://ssl.google-analytics.com https://*.cloudflare.com https://use.fontawesome.com https://cloud.tinymce.com https://www.google.com/jsapi https://ajax.googleapis.com/ajax https://www.google.com/uds https://code.jquery.com/ https://js.hsleadflows.net/ 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'self' https://*.vmarts.com https://www.google.com https://www.google.co.in https://*.ampproject.org 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: wss://*.hotjar.com wss://*.hotjar.co *.iotone.com *.hotjar.com *.baidu.com *.hotjar.io *.gstatic.com *.freshchat.com www.google-analytics.com *.google.com *.doubleclick.net *.googleapis.com *.stripe.com *.libsyn.com *.iubenda.com; img-src * data: blob:; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.stwebc.in *.zopim.com *.zdassets.com *.google-analytics.com *.bing.com *.mediatrackr.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.google.com smartslider3.com *.youtube.com *.google.co.in *.mathtag.com *.sharethis.com *.savethechildren.in *.wpforms.com ipapi.co ipinfo.io c.sharethis.mgr.consensu.org wss://*.zopim.com *.facebook.net *.facebook.com mediatrackr.com cdn.izooto.com *.razorpay.com; img-src 'self' *.stwebc.in *.mediatrackr.com *.bing.com *.facebook.com *.zopim.com *.zdassets.com *.google.com *.savethechildren.in *.zopim.io *.google.co.in *.stwebc.in *.sharethis.com data:; font-src 'self' *.gstatic.com *.zopim.com *.facebook.net *.facebook.com data:; 1
frame-ancestors *.telmate.com *.telmate.cc *.intelmate.com *.intelmate.net intelmate.net *.telmate.ca secure-synergybc.ca *.ericom-command.com.au *.gtlcommand.com 1
frame-ancestors https://www.wavemaker.com/ https://wavemaker.com/ https://next.wavemaker.com/ https://apps.wavemakeronline.com/ https://www.wavemakeronline.com/ 1
script-src 'self' 'unsafe-inline' https://*.ksplice.com https://*.oracle.com https://ssl.google-analytics.com;    style-src 'self' 'unsafe-inline' https://*.ksplice.com https://*.oracle.com; object-src 'self';    default-src 'self' https://secure.quantumgateway.com; 1
script-src 'unsafe-inline' 'self' 1
frame-ancestors 'self' *.workfusion.com http://ideas.workfusion.com http://webvisor.com *.hotjar.com *.vidyard.com https://workfusion.seismic.com *.markup.io 1
base-uri 'none'; connect-src 'self' https://*.cbc.be https://*.clicktale.com https://*.clicktale.net https://*.kbc.be https://*.kbc.com https://*.kbcbrussels.be https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://*.omtrdc.net https://*.vee24.com https://dpm.demdex.net https://kbc.symex.be https://uat.serversidegraphics.com https://uk.personalcard.net https://www.facebook.com wss://*.vee24.com https://*.contentsquare.net https://admp-tc-mediahuis.adtlgc.com; child-src blob:; default-src 'none'; font-src 'self' data: https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://fonts.googleapis.com https://fonts.gstatic.com https://static.vee24.com; frame-ancestors 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbcgroup.com https://*.kbcgroup.eu https://*.vee24.com https://*.adobe.com; frame-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc-group.com https://*.omniture.com https://*.vee24.com https://assets.adobedtm.com https://kbcgroup.demdex.net https://uat.serversidegraphics.com https://uk.personalcard.net https://www.google.com/recaptcha/ https://www.youtube-nocookie.com https://*.instagram.com https://kbc.symex.be https://*.trustarc.com https://code3.adtlgc.com/ https://scdn.cxense.com/; img-src 'self' data: https://*.cbc.be https://*.clicktale.com https://*.clicktale.net https://*.contentsquare.net https://*.doubleclick.net https://*.facebook.com https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://*.omtrdc.net https://*.adobemc.com https://action.metaffiliation.com https://*.instagram.com https://scontent.cdninstagram.com https://cbc.azureedge.net https://cm.everesttech.net https://csi.gstatic.com https://dc.ads.linkedin.com https://dpm.demdex.net https://edash.azureedge.net https://invest.azureedge.net https://kbc.azureedge.net https://maps.googleapis.com https://maps.gstatic.com https://mba.azureedge.net https://mbj.azureedge.net https://pixel.everesttech.net https://scomcluster.cxense.com https://secure.adnxs.com https://static.vee24.com https://t.co https://touch.azureedge.net https://uat.serversidegraphics.com https://uk.personalcard.net https://www.google.be https://www.google.com https://www.googleadservices.com https://img.youtube.com https://*.truste.com https://*.trustarc.com https://cdn.publish.macrobond.net; media-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://cbc.azureedge.net https://edash.azureedge.net https://invest.azureedge.net https://kbc.azureedge.net https://mba.azureedge.net https://mbj.azureedge.net https://touch.azureedge.net; object-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be; script-src 'nonce-X+rNegqgMgwAAAndFewAAAA3' 'strict-dynamic' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://cdn.tt.omtrdc.net https://fonts.googleapis.com https://static.vee24.com; manifest-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://cdn.tt.omtrdc.net https://fonts.googleapis.com https://static.vee24.com; worker-src blob:;  1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.yandex.ru  *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com assets.zendesk.com connect.facebook.net vk.com *.vk.com orelireshka-tv.disqus.com *.disqus.com *.disquscdn.com staticxx.facebook.com; frame-src 'self' *.youtube.com assets.zendesk.com *.facebook.com vk.com *.vk.com orelireshka-tv.disqus.com disqus.com *.disqus.com s-static.ak.facebook.com staticxx.facebook.com tautt.zendesk.com; object-src 'self' 1
frame-ancestors 'self';upgrade-insecure-requests 1
frame-ancestors 'self' *.ariba.com *.theinstitutes.org https://www.suppliersolutions.com/ 1
frame-ancestors 'self' rock.newspring.cc beta-rock.newspring.cc alpha-rock.newspring.cc rich-rock.newspring.cc brian-rock.newspring.cc newspring.cc alpha.newspring.cc beta.newspring.cc rich.newspring.cc brian.newspring.cc newspringnetwork.com beta.newspringnetwork.com alpha.newspringnetwork.com rich.newspringnetwork.cc brian.newspringnetwork.cc rockapi.newspring.cc rc.newspring.cc 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' https://matomo.mkk.de https://piwik.mkk.de *.readspeaker.com; frame-src 'self' *.mkk.de *.ekom21.de *.ehrenamtssuche-hessen.de *.krz.de *.unitylivestream.com www.google.com *.readspeaker.com *.youtube.com *.mitkindundkegel.de mitkindundkegel.de netappoint.de app1.edoobox.com; frame-ancestors 'self' http://*.mitkindundkegel.de http://mitkindundkegel.de  1
default-src 'self' https: 'unsafe-inline' 'unsafe-eval' ;frame-ancestors 'self' https://manager.agilitycms.com https://www.scotiawealthmanagement.com;script-src 'self' 'unsafe-inline'  *.google.com *.google.ca *.google.com.co *.google.com.br *.gstatic.com *.contentsquare.net *.contentsquare.com www.google.com/maps/d/embed www.youtube.com/embed scotiabankfiles.azureedge.net www.facebook.com/ScotiabankColpatria twitter.com/scotiacolpatria www.instagram.com/banco_colpatria www.youtube.com/ScotiabankColpatriaOficial apps.scotiabank.com somniture.scotiabank.com www.googletagmanager.com tags.bluekai.com service.maxymiser.net www.banco.colpatria.com.co cdn.branch.io assets.adobedtm.com cm.everesttech.net somniture.scotiabank.com tags.bkrtx.com  app.link  www.google-analytics.com  connect.facebook.net cdnssl.clicktale.net www.espn.com.co  cdn.ampproject.org  www.scotiawealthmanagement.com www.scotiabankcolpatria.com;worker-src blob:;img-src 'self' *.clicktale.net  *.agilitycms.com  *.azureedge.net  *.google.com  *.google.ca  *.google.com.co  *.google.com.br  *.contentsquare.net  *.contentsquare.com  assets.adobedtm.com  cm.everesttech.net  somniture.scotiabank.com  dpm.demdex.net  www.google-analytics.com  www.facebook.com  stats.g.doubleclick.net  www.scotiawealthmanagement.com;connect-src 'self' https: wss: 'unsafe-inline' 'unsafe-eval'  google.com/maps/d/embed *.contentsquare.net *.contentsquare.com youtube.com/embed iabankfiles.azureedge.net facebook.com/ScotiabankColpatria ter.com/scotiacolpatria instagram.com/banco_colpatria youtube.com/ScotiabankColpatriaOficial scotiabankfiles.azureedge.net apps.scotiabank.com somniture.scotiabank.com googletagmanager.com tags.bluekai.com service.maxymiser.net www.banco.colpatria.com.co cdn.branch.io tags.bkrtx.com  www.scotiawealthmanagement.com www.scotiabankcolpatria.com; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; img-src * data:; 1
frame-ancestors 'self'; report-uri https://www.recetasnestle.com.mx/report-uri/enforce 1
base-uri 'none'; block-all-mixed-content; connect-src 'self' *.google-analytics.com smallbusinesssaturdayuk.com *.stripe.com videodelivery.net; default-src 'none'; font-src 'self' data: fonts.gstatic.com; form-action 'self' *.facebook.com *.twitter.com; frame-ancestors none; frame-src 'self' accounts.google.com *.facebook.com *.stripe.com *.travelsmarter.net *.twitter.com; img-src 'self' data: small-business-saturday.s3-eu-west-1.amazonaws.com *.blogspot.com *.etsystatic.com *.facebook.com *.google-analytics.com *.googleapis.com *.googleusercontent.com *.gstatic.com *.stripe.com *.tripadvisor.com *.twimg.com *.twitter.com videodelivery.net *.videodelivery.net *.ytimg.com; manifest-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' blob: *.addthis.com apis.google.com *.facebook.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.jscache.com *.stripe.com *.tacdn.com *.tripadvisor.com *.twitter.com *.twimg.com *.videodelivery.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.myfonts.net *.tacdn.com *.twimg.com *.twitter.com; upgrade-insecure-requests 1
font-src 'self' *.smartkarma.com smartkarma.com cdn.embedly.com fonts.gstatic.com js.intercomcdn.com data:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.smartkarma.com smartkarma.com *.youtube.com *.gstatic.com *.ytimg.com js.hs-scripts.com js.hs-analytics.net *.adroll.com *.pusher.com *.google-analytics.com www.googletagmanager.com widget.intercom.io js.intercomcdn.com js.hsforms.net forms.hubspot.com *.hsforms.com cdn.embedly.com connect.facebook.net *.google.com *.symphony.com symphony.com *.stripe.com *.facebook.com *.pinterest.com *.hsadspixel.net *.hsleadflows.net *.googleadservices.com *.licdn.com *.doubleclick.net ajax.googleapis.com blob:; style-src 'self' 'unsafe-inline' *.smartkarma.com smartkarma.com *.googleapis.com cdn.embedly.com *.stripe.com; frame-ancestors 'self' *.symphony.com symphony.com https://*; 1
frame-ancestors 'self' https://*.thesmartlocal.com https://eatbook.sg https://mustsharenews.com; 1
object-src 'none'; block-all-mixed-content 1
frame-ancestors 'self' porta.de *.porta.de; 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://netbasal.com https://*.netbasal.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src data: fonts.googleapis.com fonts.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; script-src www.gstatic.com www.google.com data: s0.2mdn.net 'unsafe-inline' 'unsafe-eval' 'self'; frame-src www.google.com www.youtube.com www.facebook.com 'self'; 1
report-uri https://www.yelp.com/csp_block?id=5039816632531089&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609222434; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
frame-ancestors 'self'; default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://translate.google.com https://translate.googleapis.com https://cdnjs.cloudflare.com https://v1.addthisedge.com https://s7.addthis.com https://z.moatads.com https://www.google-analytics.com https://az416426.vo.msecnd.net https://m.addthisedge.com https://m.addthis.com https://api-public.addthis.com https://pagead2.googlesyndication.com https://adservice.google.co.uk https://adservice.google.com https://www.google.com https://www.gstatic.com https://platform.twitter.com https://www.googletagservices.com https://tpc.googlesyndication.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://translate.googleapis.com https://html5shim.googlecode.com https://v1.addthisedge.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https://www.fotosizer.com https://www.google-analytics.com https://stats.g.doubleclick.net https://cdnjs.cloudflare.com https://m.addthisedge.com https://pagead2.googlesyndication.com https://v1.addthisedge.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; frame-src 'self' https://www.youtube.com https://www.facebook.com https://s7.addthis.com https://googleads.g.doubleclick.net https://www.google.com https://platform.twitter.com/ https://tpc.googlesyndication.com; connect-src 'self' https://dc.services.visualstudio.com https://m.addthis.com https://csi.gstatic.com https://pagead2.googlesyndication.com https://www.google-analytics.com 1
base-uri 'none';default-src 'none';frame-ancestors 'self'; frame-src 'self' *.cognitive.microsoft.com *.cognitiveServices.azure.com login.windows.net login.microsoftonline.com;form-action 'none';report-uri https://teams.microsoft.com/r/c;upgrade-insecure-requests;style-src 'self' 'unsafe-inline' 'nonce-4dee2c0d-3eb4-4d68-be1f-ba952d09f7e3' 'report-sample';script-src 'self' 'nonce-4dee2c0d-3eb4-4d68-be1f-ba952d09f7e3' 'report-sample';font-src 'self';img-src 'self';connect-src *.cognitive.microsoft.com *.cognitiveServices.azure.com *.luis.ai language.azure.com management.azure.com dc.services.visualstudio.com consentreceiverfd-prod.azurefd.net *.blob.core.windows.net 1
default-src 'self' *.algolianet.com *.algolia.net *.zavasrv.com *.zavamed.com *.segment.io *.segment.com *.nr-data.net *.hotjar.com; connect-src 'self' *.algolianet.com *.algolia.net *.zavasrv.com *.zavamed.com *.segment.io *.segment.com *.nr-data.net logx.optimizely.com *.optimizely.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.pstmn.io www.google-analytics.com bat.bing.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.algolianet.com *.algolia.net *.zavasrv.com *.zavamed.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.googleapis.com connect.facebook.net *.trustpilot.com *.dred.com *.websecurity.norton.com *.segment.com *.optimizely.com optimizely.s3.amazonaws.com www.cqc.org.uk *.newrelic.com *.nr-data.net *.hotjar.com *.qualaroo.com *.bing.com *.amazonaws.com *.surveymonkey.com *.youtube-nocookie.com *.youtube.com *.ytimg.com browser-update.org assets.customer.io; style-src 'self' 'unsafe-inline' *.zavasrv.com *.zavamed.com *.amazonaws.com www.cqc.org.uk fonts.googleapis.com; img-src 'self' data: *.zavasrv.com *.zavamed.com *.google-analytics.com *.hotjar.com maps.gstatic.com maps.googleapis.com res.cloudinary.com *.dred.com *.websecurity.norton.com *.scdn5.secure.raxcdn.com a74971132.cdn-pci.optimizely.com cdn.optimizely.com www.cqc.org.uk *.amazonaws.com bat.bing.com *.doubleclick.net www.google.com www.google.co.uk *.surveymonkey.com browser-update.org www.facebook.com googleads.g.doubleclick.net www.gstatic.com *.googletagmanager.com; font-src 'self' data: *.zavasrv.com *.zavamed.com *.cloudfront.net *.hotjar.com fonts.gstatic.com; frame-src 'self' *.zavasrv.com *.zavamed.com *.doubleclick.net *.youtube-nocookie.com vars.hotjar.com *.surveymonkey.com a74971132.cdn-pci.optimizely.com app.optimizely.com a74971132.cdn.optimizely.com *.trustpilot.com *.qualaroo.com www.facebook.com; report-uri /csp-report 1
frame-ancestors 'self' *.chromacam.me *.personifyinc.com 1
default-src 'self' https://www.action1.com;                                     frame-ancestors https://analytics.google.com https://www.facebook.com https://*.fbcdn.net;                                     font-src 'self' data:;                                     connect-src 'self' http://localhost:8888 https://app.action1.com https://app-dev.action1.com https://www.action1.com https://graph.facebook.com https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net;                                     style-src 'self' 'unsafe-inline' https://*.google.com https://www.action1.com;                                     frame-src 'self' https://player.vimeo.com https://*.google.com https://www.googletagmanager.com https://www.action1.com https://www.facebook.com;                                     script-src 'self' 'unsafe-eval' https://*.google.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.facebook.com https://www.action1.com https://snap.licdn.com                                                'sha256-n3qH1zzzTNXXbWAKXOMmrBzjKgIQZ7G7UFh/pIixNEQ='                                                'sha256-KoZvlNi6WIlva5SMPsgkZKuz3pwSCUhpugmi7saPqak='                                                'sha256-WuoHX9ZCgrhOnY/0OO7uJGBafUFuPZR6j/QB6oY+RI8='                                                'sha256-Uw9cDxbFemSiXLxUkledgh5vHIhZ2k16Kwtd82ZCEqU='                                                'sha256-fK/jVpp02mUFfI785+GqngKoHLshYacl3SJYKdumMR8=' 											   'sha256-8uFQsNHZO+sM5YSN3cZIuk2jSlaHY68oD1mrZ4+rhto=' 										       'sha256-50LqlSh8k92MRbH17P954HItmFaBWamtmiNSiBdufIw=' 											   'sha256-sVSzyj4Lrm3XMqPGtDcCGrUH9jvkJWbHWC6j6PbMHzc=';                                     img-src 'self' data: https://www.googletagmanager.com https://*.google.com https://www.googleapis.com  https://*.gstatic.com https://www.google-analytics.com https://*.doubleclick.net https://www.action1.com https://secure.gravatar.com/avatar/a3a6754f31076e7e56fc4c3ca86804c6 https://www.facebook.com https://*.fbcdn.net https://*.linkedin.com https://*.adsymptotic.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' wempe-media.com paypalobjects.com *.paypal.com cdn.shopware.de *.rolex.com assets.adobedtm.com cdnjs.cloudflare.com cdn.jsdelivr.net unpkg.com *.google.de *.google.fr *.google.ch *.google.com *.googletagmanager.com *.googleapis.com *.google-analytics.com *.gstatic.com *.crazyegg.com *.doubleclick.net *.payengine.de *.paypalobjects.com *.sellxed.com *.youtube.com script.crazyegg.com *.facebook.net *.facebook.com *.pingdom.net cdn.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org delivery.consentmanager.mgr.consensu.org api.userlike.com chat.userlike.com wss://chat.userlike.com s3-eu-west-1.amazonaws.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com dq4irj27fs462.cloudfront.net data: 1
frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com; report-uri http://www.fortefoundation.org/site/XFrameViolation 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.cbbd.be www.stripmuseum.be www.comicscenter.net csi.gstatic.com ssl.google-analytics.com code.jquery.com ajax.googleapis.com img.youtube.com www.youtube.com api-public.addthis.com s7.addthis.com m.addthis.com m.addthisedge.com www.google-analytics.com maps.googleapis.com www.google.com reservation.elloha.com 1
frame-ancestors 'self' indianpornvideos.vip indianpornvideos2.com www.indianpornvideos2.com www.indianpornvideos.vip; 1
frame-ancestors 'self' https://apps.mypurecloud.de https://login.mypurecloud.de 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-OWQ1NzhmNDktYjE0OS00MWExLWE3YWMtMDcwM2NjNjIzN2E2'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.googletagmanager.com *.google.gr *.wikimedia.org *.discogs.com *.youtube.com youtube.com *.ytimg.com *.gstatic.com *.googleapis.com; 1
script-src 'self' 'unsafe-inline' *.ellaskitchen.co.uk *.googletagmanager.com tagmanager.google.com *.google-analytics.com *.googleadservices.com googleads.g.doubleclick.net *.fls.doubleclick.net *.youtube.com s.ytimg.com *.livechatinc.com *.zendesk.com *.facebook.net sc-static.net data:; img-src 'self' www.google.com www.google.co.uk *.google-analytics.com *.gstatic.com *.googleusercontent.com stats.g.doubleclick.net *.facebook.com s-static.ak.facebook.com *.zendesk.com *.livechatinc.com *.livechat-static.com fonts.gstatic.com tr.snapchat.com *.prismic.io cdn.shopify.com data:; media-src 'self' *.livechatinc.com; object-src 'none'; default-src 'self'; font-src 'self' *.ellaskitchen.co.uk *.livechatinc.com *.livechat-static.com fonts.gstatic.com themes.googleusercontent.com; frame-src *.ellaskitchen.co.uk *.livechatinc.com *.youtube.com *.zendesk.com *.facebook.com s-static.ak.facebook.com www.google.com *.fls.doubleclick.net tr.snapchat.com *.platformsh.site; style-src 'self' 'unsafe-inline' tagmanager.google.com *.googleapis.com *.zendesk.com 1
default-src blob: https: data: 'unsafe-inline' 'unsafe-eval' *.cdn.ampproject.org; 1
frame-ancestors http://ecomdisplay.int/ 1
default-src 'self'; connect-src 'self' https://www.google-analytics.com; font-src 'self'; frame-src 'self' https://www.youtube.com http://www.gstb-rlp.de https://www.kosdirekt.de https://kommunalradkongress-modules.xing-events.com; img-src 'self' data: https://img.youtube.com https://www.google-analytics.com https://vat.db-app.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://de.ioam.de https://s.ytimg.com https://script.ioam.de https://www.google-analytics.com https://www.youtube.com https://vat.db-app.de; style-src 'self' 'unsafe-inline' 1
frame-ancestors 'self' http://www.elkspel.nl 1
default-src 'self' https://m.stripe.network https://js.stripe.com https://*.trackingmore.com https://*.baidu.com http://*.baidu.com https://*.bdimg.com https://*.zoho.com https://*.zoho.in https://*.zohopublic.com https://*.zohopublic.in https://*.zohocdn.com https://*.zohocdn.in https://*.zohostatic.com https://*.zohostatic.in https://*.gstatic.com  https://*.cloudfront.net 'unsafe-inline' 'unsafe-eval';connect-src 'self' https://salesiq.zohopublic.com https://salesiq.zoho.com wss://vts.zohopublic.com https://ulogin.globaletrade.services 1
default-src 'self' *.botsociety.io unpkg.com *.googleadservices.com *.googleapis.com *.doubleclick.net *.jsdelivr.net *.intercom.io *.intercomcdn.com *.hotjar.com *.ads-twitter.com *.twitter.com snap.licdn.com *.googletagmanager.com *.google-analytics.com *.mxpnl.com d2d9a1sv0xqzzt.cloudfront.net *.vimeo.com vimeo.com *.youtube.com youtube.com *.facebook.com *.facebook.net *.mixpanel.com *.google.com t.co *.linkedin.com *.gstatic.com *.algolia.net *.algolianet.com; style-src 'self' d2d9a1sv0xqzzt.cloudfront.net *.gstatic.com *.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com 'unsafe-inline'; frame-ancestors 'self' *.botsociety.io; img-src 'self' *.botsociety.io unpkg.com *.googleadservices.com *.googleapis.com *.doubleclick.net *.jsdelivr.net *.intercom.io *.intercomcdn.com *.hotjar.com *.ads-twitter.com *.twitter.com snap.licdn.com *.googletagmanager.com *.google-analytics.com *.mxpnl.com d2d9a1sv0xqzzt.cloudfront.net *.vimeo.com vimeo.com *.youtube.com youtube.com *.facebook.com *.facebook.net *.mixpanel.com *.google.com t.co *.linkedin.com *.gstatic.com *.algolia.net *.algolianet.com; script-src 'self' *.botsociety.io unpkg.com *.googleadservices.com *.googleapis.com *.doubleclick.net *.jsdelivr.net *.intercom.io *.intercomcdn.com *.hotjar.com *.ads-twitter.com *.twitter.com snap.licdn.com *.googletagmanager.com *.google-analytics.com *.mxpnl.com d2d9a1sv0xqzzt.cloudfront.net *.vimeo.com vimeo.com *.youtube.com youtube.com *.facebook.com *.facebook.net *.mixpanel.com *.google.com t.co *.linkedin.com *.gstatic.com *.algolia.net *.algolianet.com 'nonce-15548858-eea5-4669-b679-ec8b6c15823e' 1
default-src 'none'; script-src 'self' 'unsafe-inline' https://www.myfritz.net https://sso.myfritz.net https://static.myfritz.net https://piwik.avm.de https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://www.myfritz.net https://sso.myfritz.net https://static.myfritz.net; img-src 'self' https://www.myfritz.net https://sso.myfritz.net https://static.myfritz.net https://piwik.avm.de data: ; font-src 'self' https://www.myfritz.net https://sso.myfritz.net https://static.myfritz.net; connect-src 'self' https://sso.myfritz.net https://gateway.myfritz.net; frame-src 'self' https://sso.myfritz.net https://www.google.com/recaptcha/; media-src 'none'; object-src 'none'; worker-src 'none'; manifest-src https://www.myfritz.net/static/manifest.json https://sso.myfritz.net/static/manifest.json; frame-ancestors https://sso.myfritz.net https://www.myfritz.net; form-action 'self' https://www.myfritz.net 1
default-src 'self' edge.api.brightcove.com viz.tools.investis.com  *.media.brightcove.com *.tagmanager.google.com *.mouseflow.com cdn.jsdelivr.net www.edisoninvestmentresearch.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net sjp.getmediamanager.com *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edge.api.brightcove.com *.googleapis.com www.youtube.com youtube.com s.ytimg.com unpkg.com nr-data.net *.mouseflow.com www.edisoninvestmentresearch.com *.bam.eu01.nr-data.net googletagmanager.com tagmanager.google.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net typekit.net www.edisoninvestmentresearch.com p.typekit.net tagmanager.google.com; img-src 'self' 'unsafe-inline' * data:; media-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com; frame-src om careers.sjp.co.uk irs.tools.investis.com otp.tools.investis.com digital.feprecisionplus.com sjp.hireserve-test.com ir.tools.investis.com staticxx.facebook.com www.youtube.com www.edisoninvestmentresearch.com; frame-ancestors 'self' staticcontents.investis.com www.google.com sjp.getmediamanager.com www.edisoninvestmentresearch.com ; child-src 'self' www.edisoninvestmentresearch.com; font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com *.typekit.net p.typekit.net nr-data.net; report-uri /report-csp-violation 1
frame-ancestors https://*.socialnature.com 1
default-src 'self' oktajs: blob: https:; connect-src 'self' about: *.algolia.net *.amazonaws.com *.algolianet.com *.bing.com *.cloudflare.com *.cloudfront.net *.giphy.com *.filestackapi.com api.appcues.net api.box.com api.keen.io api.lever.co api.segment.io apm.scoutapp.com bam.nr-data.net api.amplitude.com/ cr-input.mxpnl.net fast.appcues.com ipinfo.io notify.bugsnag.com sentry.io stats.g.doubleclick.net translate.googleapis.com www.facebook.com www.google.com wss://api.appcues.net localhost:* ws://localhost:* *.scienceexchange.com *.up.scienceexchange.com www.google.ac www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.com.kh www.google.cc www.google.cd www.google.cf www.google.cat www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gf www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gp www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.iq www.google.ie www.google.co.il www.google.im www.google.co.in www.google.io www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.com.lc www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.ne www.google.com.nf www.google.com.ng www.google.com.ni www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pk www.google.com.pa www.google.com.pe www.google.com.ph www.google.pl www.google.com.pg www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.rs www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.sm www.google.so www.google.st www.google.sr www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tk www.google.tl www.google.tm www.google.to www.google.tn www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.co.za www.google.co.zm www.google.co.zw; font-src 'self' data: fonts.gstatic.com *.boxcdn.net *.cloudflare.com *.cloudfront.net *.googleapis.com *.scienceexchange.com cdn.joinhoney.com use.typekit.net apm.scoutapp.com; img-src 'self' data: blob: *.adsymptotic.com *.appcues.com *.cloudflare.com *.cloudfront.net *.filestackapi.com *.giphy.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.imgix.net *.scienceexchange.com *.youtube.com bam.nr-data.net bat.bing.com gateway.zscaler.net googleads.g.doubleclick.net info.transcriptic.com px.ads.linkedin.com online.swagger.io pixel.quantserve.com q.stripe.com res.cloudinary.com *.s3.amazonaws.com s3.amazonaws.com scoutapm.com secure.gravatar.com stats.g.doubleclick.net www.facebook.com www.google.com www.google-analytics.com www.googletagmanager.com www.linkedin.com cdn.filestackcontent.com validator.swagger.io via.placeholder.com apm.scoutapp.com localhost:* www.google.ac www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.com.kh www.google.cc www.google.cd www.google.cf www.google.cat www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gf www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gp www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.iq www.google.ie www.google.co.il www.google.im www.google.co.in www.google.io www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.com.lc www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.ne www.google.com.nf www.google.com.ng www.google.com.ni www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pk www.google.com.pa www.google.com.pe www.google.com.ph www.google.pl www.google.com.pg www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.rs www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.sm www.google.so www.google.st www.google.sr www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tk www.google.tl www.google.tm www.google.to www.google.tn www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.co.za www.google.co.zm www.google.co.zw; script-src 'self' 'unsafe-inline' 'unsafe-eval' about: blob: data: unpkg.com *.algolia.net *.algolianet.com *.cloudflare.com *.cloudfront.net *.google.com *.googleapis.com *.googlesyndication.com *.opendns.com *.scienceexchange.com *.filestackapi.com *.sentry-cdn.com api.getvero.com api.ipstack.com api.keen.io api.segment.io apm.scoutapp.com assets.customer.io bam.nr-data.net bat.bing.com cdn.jsdelivr.net cdn.mxpnl.com cdn.ravenjs.com cdn.segment.com cdn.walkme.com cdn.amplitude.com connect.facebook.net fast.appcues.com gateway.zscaler.net googleads.g.doubleclick.net ipinfo.io js-agent.newrelic.com js.stripe.com notify.bugsnag.com px.ads.linkedin.com rules.quantcount.com scoutapm.com secure.quantserve.com sjs.bizographics.com snap.licdn.com use.fontawesome.com use.typekit.net www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.linkedin.com www.gstatic.com localhost:* *.up.scienceexchange.com; style-src 'self' 'unsafe-inline' *.cloudflare.com *.cloudfront.net *.googleapis.com *.scienceexchange.com apm.scoutapp.com cdn.jsdelivr.net fast.appcues.com p.typekit.net static.filestackapi.com scoutapm.com use.typekit.net www.google.com www.gstatic.com; report-uri /csp-report 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-bhaRN+m40cUsy93k7RKyQg' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
frame-ancestors 'self' wunderino.de https://*.wunderino.com https://casilla.jp *.regily.com http://wunderino-online.de jp.casil.la http://wunderino-bonus.com http://wunderino-bonusgeld.de http://wunderino-freispiele.com http://wunderinocasino.com http://wunderino-test.de http://wunderino.best http://wunderino.info http://wunderino.mobi http://wunderino.me 1
frame-ancestors https://www.dodo.it/ https://www.dodo.it/ ; 1
report-uri https://www.yelp.com/csp_block?id=7b0bb994d599d320&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609219696; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
base-uri 'self'; form-action 'self'; frame-ancestors 'self'; img-src 'self' https://www.google-analytics.com; script-src 'self' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.buzzsprout.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' https://fonts.gstatic.com; frame-src https://www.google.com/recaptcha/ https://www.buzzsprout.com https://www.youtube.com https://player.vimeo.com; media-src 'self' https://www.youtube.com; default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com https://www.buzzsprout.com; style-src 'self' https://fonts.googleapis.com ; object-src 'none'; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://niu.moe; img-src 'self' https: data: blob: https://niu.moe; style-src 'self' https://niu.moe 'nonce-/XI0arqOHRhmzapoDh7y/g=='; media-src 'self' https: data: https://niu.moe; frame-src 'self' https:; manifest-src 'self' https://niu.moe; connect-src 'self' data: blob: https://niu.moe https://cdn.niu.moe wss://niu.moe; script-src 'self' https://niu.moe; child-src 'self' blob: https://niu.moe; worker-src 'self' blob: https://niu.moe 1
upgrade-insecure-requests; default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' 1
frame-ancestors 'self' *.svd.se; default-src https: data: blob: wss: react-js-navigation: android-webview: android-webview-video-poster: 'unsafe-inline' 'unsafe-eval'; report-uri https://svd.report-uri.com/r/d/csp/enforce 1
default-src 'self' blob: https://cdn.tinymce.com https://freeglecdn.azureedge.net https://users.ilovefreegle.org:555 wss://users.ilovefreegle.org:555 wss://*.inspectlet.com data: https: 'unsafe-inline' 'unsafe-eval' 1
default-src 'self' https://*.wogaa.sg https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.wogaa.sg https://assets.adobedtm.com/ https://va.ecitizen.gov.sg/; img-src 'self' data: https://wogadobeanalytics.sc.omtrdc.net/ https://cm.everesttech.net/ https://dpm.demdex.net/ https://va.ecitizen.gov.sg/; connect-src 'self' https://*.wogaa.sg https://dpm.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/ https://va.ecitizen.gov.sg; style-src 'self' 'unsafe-inline' https://assets.wogaa.sg/fonts/ https://fonts.googleapis.com/ https://va.ecitizen.gov.sg/; font-src 'self' data: https://assets.wogaa.sg/fonts/ https://fonts.gstatic.com/ https://s3-us-west-2.amazonaws.com/ https://va.ecitizen.gov.sg/; frame-src 'self' https://www.youtube.com/ https://www.onemap.sg/; 1
script-src:self; img-src: self; 1
frame-ancestors https://*.dev.local https://*.sunweb.nl https://*.sunweb.be; 1
frame-ancestors *.qdxin.cn 1
frame-ancestors 'self' *.myshopify.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.intersport.si cdnjs.cloudflare.com www.google-analytics.com www.google.com www.google.si omara.cdn-cnj.si img.cdn-cnj.si www.google.de stats.g.doubleclick.net fonts.googleapis.com cpx.smind.si cpx.smind.hr fonts.gstatic.com www.gstatic.com www.googletagmanager.com chimpstatic.com connect.facebook.net stats.g.doubleclick.net www.facebook.com *.creativecdn.com creativecdn.com www.googleadservices.com *.paypal.com www.paypal.com ajax.googleapis.com platform.linkedin.com *.twitter.com *.pinterest.com www.youtube.com googleads.g.doubleclick.net www.intersport.hr *.mercator.si maps.googleapis.com maps.gstatic.com maxcdn.bootstrapcdn.com secure.gravatar.com dts.cld.bz edge.fullstory.com fullstory.com rs.fullstory.com www.pimcore.org yoast.com tagmanager.google.com *.braintreegateway.com *.braintree-api.com www.paypalobjects.com 1
default-src 'self' *.nestbank.pl *.doubleclick.net https://www.maptiler.com https://api.maptiler.com https://maps.tilehosting.com https://api.mapbox.com https://www.youtube.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.livecall.io; img-src 'self' data: blob: *.googletagmanager.com *.google-analytics.com *.google.com *.google.pl *.gstatic.com *.doubleclick.net *.livecall.io; font-src 'self' data: *.googleapis.com *.gstatic.com *.livecall.io; style-src 'self' 'unsafe-inline' *.livecall.io *.google.com *.gstatic.com *.googleapis.com *.livecall.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.nestbank.pl *.googlesyndication.com *.googletagmanager.com *.google-analytics.com *.google.com *.googleadservices.com *.doubleclick.net *.hotjar.com *.livecall.io; child-src 'self' blob: *.nestbank.pl https://api.maptiler.com https://maps.tilehosting.com https://api.mapbox.com https://www.youtube.com *.hotjar.com *.hotjar.io *.livecall.io https://optimize.google.com; 1
default-src 'self' *.fluvius.be cdn-fluvius.azureedge.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.ckeditor.com ajax.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com www.google-analytics.com cdnjs.cloudflare.com maps.googleapis.com cdn.rawgit.com https://www.google.com https://www.gstatic.com www.googleadservices.com connect.facebook.net googleads.g.doubleclick.net https://amp.cloudflare.com cdn.sparkcentral.com *.smooch.io *.hotjar.com https://*.geopunt.be static.ads-twitter.com analytics.twitter.com *.bizographics.com translate.google.com translate.googleapis.com  cdn-o-fluvius.azureedge.net cdn-fluvius.azureedge.net; object-src 'self' *.fluvius.be; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com *.google.com cdnjs.cloudflare.com  https://amp.cloudflare.com cdn.sparkcentral.com translate.googleapis.com cdn-o-fluvius.azureedge.net cdn-fluvius.azureedge.net; img-src 'self' data: www.google-analytics.com *.gstatic.com maps.googleapis.com www.eandis.be stats.g.doubleclick.net www.facebook.com www.google.be www.google.com  https://amp.cloudflare.com https://www.google-analytics.com https://www.googletagmanager.com www.gravatar.com media.eu-1.smooch.io *.fluvius.be https://s3.eu-central-1.amazonaws.com blob: t.co *.linkedin.com translate.googleapis.com cdn-fluvius.azureedge.net  cdn-o-fluvius.azureedge.net https://cdn-eu.sparkcentral.com cdn.sparkcentral.com fluvius-appwise.s3-eu-west-1.amazonaws.com; media-src 'self' https://cdn.sparkcentral.com; frame-src 'self' *.fluvius.be player.vimeo.com www.youtube-nocookie.com https://www.google.com https://www.flexmail.eu https://s.chkmkt.com https://amp.cloudflare.com https://www.googletagmanager.com https://www.facebook.com *.hotjar.com datastudio.google.com; frame-ancestors 'self' *.destroomlijn.be *.fluvius.be; child-src 'self' *.fluvius.be; font-src 'self' fonts.googleapis.com fonts.gstatic.com cdn.sparkcentral.com data:; connect-src 'self' www.google-analytics.com https://discovery.amp.cloudflare.com https://stats.g.doubleclick.net https://amp.cloudflare.com https://www.facebook.com cdn.sparkcentral.com *.eu-1.smooch.io wss://*.smooch.io *.geopunt.be *.hotjar.com *.hotjar.io translate.googleapis.com 79znwy2ew9.execute-api.eu-central-1.amazonaws.com https://apihub.fluvius.be/opleidingaannemers; report-uri /report-csp-violation 1
default-src 'self'; block-all-mixed-content; connect-src 'self' syndication.twitter.com www.google-analytics.com assets.pinterest.com; font-src 'self' cdnjs.cloudflare.com; frame-ancestors 'none'; frame-src *; img-src 'self' s3-eu-west-1.amazonaws.com platform.twitter.com www.facebook.com data: web.facebook.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.co.uk www.paypalobjects.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.pinterest.com log.pinterest.com connect.facebook.net platform.twitter.com syndication.twitter.com tfw-current.s3.amazonaws.com www.google.com www.gstatic.com cdnjs.cloudflare.com stevenlevithan.com www.googletagmanager.com www.google-analytics.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com 1
default-src 'self' *.googletagmanager.com cdn.bma.bm *.vimeo.com; script-src 'self' *.googletagmanager.com ckeditor.iframe.ly maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.bma.bm theweather.com *.gstatic.com static.addtoany.com *.vimeo.com *.vimeocdn.com *.nr-data.net 'nonce-5J7u987qjYp25XVh29388B2P8q8Jc445RyFR' 'sha256-qEftYzJkik6f2adAHjEOE/NwtbFFj8BA7z+5iOM/ivk='; style-src 'self' 'unsafe-inline' cdn.bma.bm maxcdn.bootstrapcdn.com fonts.gstatic.com cdnjs.cloudflare.com fonts.googleapis.com *.vimeocdn.com *.gstatic.com; img-src * data: cdn.bma.bm www.googletagmanager.com *.gstatic.com static.addtoany.com; font-src 'self' fonts.gstatic.com fonts.google.com cdn.bma.bm; connect-src 'self' *.vimeo.com cdn.bma.bm static.addtoany.com; media-src 'self' cdn.bma.bm; object-src 'self'; child-src 'self' www.youtube.com *.vimeo.com *.vimeocdn.com; frame-src 'self' cdn.bma.bm *.youtube.com *.vimeo.com cw.na1.hgncloud.com jobs.jobvite.com *.jobvite.com www.google.com free.timeanddate.com static.addtoany.com *.theweather.com; frame-ancestors 'self' cdn.bma.bm *.youtube.com *.vimeo.com cw.na1.hgncloud.com *.jobvite.com; base-uri 'self' 1
frame-ancestors 'self' https://www.golfofbf.org https://*.instapage.com http://*.instapage.com https://cloud.scorm.com https://360.articulate.com https://university.fb.org 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.ch *.gstatic.com *.launchdarkly.com *.instavid360.com *.hotjar.com *.intercom.io *.intercomcdn.com secure.adnxs.com acdn.adnxs.com *.googleadservices.com *.criteo.net *.criteo.com cdn.cookielaw.org geolocation.onetrust.com bat.bing.com connect.facebook.net securepubads.g.doubleclick.net *.googletagservices.com adservice.google.ch tpc.googlesyndication.com *.da-services.ch *.adsafeprotected.com bs.serving-sys.com secure-ds.serving-sys.com tagger.opecloud.com beagle.dev.tda.link beagle.prod.tda.link https://assets.carforyou.ch https://emotional-takeover.carforyou.ch ad.doubleclick.net 1
img-src 'self' *.slushe.com data: *.affect3d.com affect3dstore.com *.imgur.com www.google-analytics.com 1
default-src 'self' ads.rudolf-mueller.de;script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ads.rudolf-mueller.de https://www.googletagmanager.com https://www.google-analytics.com https://app.usercentrics.eu https://privacy-proxy.usercentrics.eu https://app.usercentrics.eu https://vgrm.atlassian.net https://www.baufachmedien.de;connect-src *;img-src 'self' data: https://www.google-analytics.com  https://ads.rudolf-mueller.de https://www.baufachmedien.de https://stats.g.doubleclick.net https://www.google.com https://www.google.de https://app.usercentrics.eu https://www.google.com.ua https://www.googletagmanager.com https://privacy-proxy-server.usercentrics.eu;style-src 'self' 'unsafe-inline' https://www.baufachmedien.de;frame-src 'self' https://www.baufachmedien.de https://ads.rudolf-mueller.de https://www.eventmanager-online.com https://www.youtube-nocookie.com https://vgrm.atlassian.net;font-src 'self' data:;media-src 'self' 1
script-src * 'self' blob: 'unsafe-inline' 'unsafe-eval' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://*.google.com https://www.gstatic.com https://*.googleapis.com https://maps.gstatic.com https://oss.maxcdn.com/; object-src 'self'; media-src 'self' https://www.youtube.com; font-src 'self' https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://*.google.com; child-src https://www.youtube.com https://www.google.com; 1
object-src 'none'; script-src 'self' https://cdn.syndication.twimg.com https://platform.twitter.com https://www.gstatic.com https://www.google.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://use.fontawesome.com https://www.google-analytics.com maxcdn.bootstrapcdn.com; script-src-attr 'self'; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://platform.twitter.com code.cdn.mozilla.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com; style-src-attr 'self' 'unsafe-inline' https://use.fontawesome.com; frame-ancestors 'self'; report-uri https://mpac.report-uri.com/r/d/csp/enforce 1
default-src 'self' https://www.bmbf.de https://*.bmbfcluster.de https://cdn1.readspeaker.com https://app-eu.readspeaker.com https://media-eu.readspeaker.com https://rstts-eu.readspeaker.com https://f1-eu.readspeaker.com https://monitoring.echobot.de https://event.beyondwork2020.com https://walls.io https://www.unesco.de/ 'unsafe-inline' blob:; img-src 'self' https://www.bmbf.de https://*.bmbfcluster.de https://*.tile.openstreetmap.org/ https://api.mapbox.com/ 'unsafe-inline' data:;font-src 'self' data:; 1
default-src 'self' 'unsafe-inline' data: blob: https:; style-src 'self' 'unsafe-inline' data: blob: https: cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: cdnjs.cloudflare.com e.issuu.com players.brightcove.net vjs.zencdn.net www.google.com www.gstatic.com www.google-analytics.com; frame-src e.issuu.com www.google.com; object-src 'none' 1
default-src https: http:;script-src https: http: 'unsafe-eval' 'unsafe-inline';style-src https: http: 'unsafe-inline';img-src https: http: data: blob:;child-src https: http:;object-src https: data:; 1
default-src 'self'; style-src 'self' 'unsafe-inline' 1
default-src 'self' https://*.pantheonsite.io/ https://*.pantheon.io/ https://people.ai https://*.people.ai https://*.quora.com https://*.wistia.com  https://*.wistia.net https://api.lever.co https://anchor.fm https://*.spotify.com  https://*.spotify.net *.mouseflow.com; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.pantheonsite.io/ https://*.pantheon.io/ https://people.ai https://*.people.ai https://www.googletagmanager.com https://tagmanager.google.com https://www.google.com  https://www.googleadservices.com  https://*.doubleclick.net  https://www.google-analytics.com https://ssl.google-analytics.com https://ajax.googleapis.com https://translate.google.com https://people.ai https://app-sj19.marketo.com https://munchkin.marketo.net *.iubenda.com https://*.adroll.com https://adpxl.co  https://ddpdnsirsodw8.cloudfront.net  https://d.adroll.mgr.consensu.org https://snap.licdn.com https://*.linkedin.com https://connect.facebook.net https://tracking.g2crowd.com https://*.quora.com https://*.6sc.co https://bam.nr-data.net  https://*.nr-data.net https://js-agent.newrelic.com  https://bam-cell.nr-data.net https://app.intercom.io  https://widget.intercom.io  https://js.intercomcdn.com https://*.wistia.com  https://*.wistia.net  https://src.litix.io https://fast.wistia.com https://bugcrowd.com https://assets.bugcrowdusercontent.com https://api.lever.co https://anchor.fm *.mouseflow.com; style-src 'report-sample' 'self' 'unsafe-inline' https://*.pantheonsite.io/ https://*.pantheon.io/ https://people.ai https://*.people.ai https://tagmanager.google.com https://fonts.googleapis.com https://app-sj19.marketo.com *.iubenda.com https://api.lever.co https://anchor.fm; img-src 'report-sample' 'self' blob: data: https://*.pantheonsite.io/ https://*.pantheon.io/ https://people.ai https://*.people.ai https://www.googletagmanager.com https://ssl.gstatic.com  https://accounts.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://www.google.com  https://*.doubleclick.net  https://stats.g.doubleclick.net  https://www.google-analytics.com  https://ssl.google-analytics.com https://translate.google.com https://app-sj19.marketo.com *.iubenda.com https://*.adroll.com https://d.adroll.com  https://pixel.advertising.com  https://dsum-sec.casalemedia.com  https://pixel.rubiconproject.com  https://sync.outbrain.com  https://simage2.pubmatic.com  https://ads.yahoo.com  https://sync.taboola.com  https://eb2.3lift.com  https://x.bidswitch.net  https://ib.adnxs.com  https://idsync.rlcdn.com  https://us-u.openx.net  https://lrpush.apxlv.com  https://ups.analytics.yahoo.com  https://p.rfihub.com  https://bcp.crwdcntrl.net  https://beacon.walmart.com  https://pixel.spotify.com  https://cms.analytics.yahoo.com  https://segments.company-target.com  https://pixel.tapad.com  https://image2.pubmatic.com  https://lrp.mxptint.net  https://d.xp1.ru4.com  https://epiv.cardlytics.com  https://c.bing.com  https://match.prod.bidr.io  https://tags.rd.linksynergy.com  https://cw.addthis.com  https://um.simpli.fi  https://idsync.rlcdn.com  https://idsync.reson8.com  https://sync.tidaltv.com  https://pixel.sitescout.com  https://rtb.adentifi.com  https://dmp.truoptik.com  https://dmp.adform.net  https://aa.agkn.com https://p.adsymptotic.com https://*.linkedin.com https://*.facebook.com https://*.quora.com https://*.6sc.co https://js.intercomcdn.com  https://static.intercomassets.com  https://downloads.intercomcdn.com  https://uploads.intercomusercontent.com  https://gifs.intercomcdn.com https://video-messages.intercomcdn.com  https://messenger-apps.intercom.io  https://*.intercom-attachments-5.com  https://*.intercom-attachments-6.com  https://*.intercom-attachments-9.com https://*.wistia.com  https://*.wistia.net  https://embedwistia-a.akamaihd.net https://api.lever.co https://anchor.fm *.mouseflow.com; font-src data: https://*.pantheonsite.io/ https://*.pantheon.io/ https://people.ai https://*.people.ai https://fonts.gstatic.com https://js.intercomcdn.com https://*.wistia.com https://api.lever.co https://anchor.fm *.mouseflow.com; media-src 'self' blob: data: https://*.pantheonsite.io/ https://*.pantheon.io/ https://people.ai https://*.people.ai https://*.adroll.com https://p.adsymptotic.com https://*.linkedin.com https://*.facebook.com https://*.6sc.co https://js.intercomcdn.com https://*.wistia.com  https://*.wistia.net  https://embedwistia-a.akamaihd.net https://api.lever.co https://anchor.fm; connect-src https://*.pantheonsite.io/ https://*.pantheon.io/ https://people.ai https://*.people.ai https://www.google-analytics.com https://*.doubleclick.net https://ssl.google-analytics.com https://www.google.com https://009-wsr-714.mktoresp.com https://009-wsr-714.mktoutil.com *.mktoutil.com *.iubenda.com https://fl.adpxl.co  https://s.adroll.com  https://*.adroll.com https://*.facebook.com https://www.facebook.com https://*.6sc.co https://secure.adnxs.com https://bam.nr-data.net  https://*.nr-data.net https://api.intercom.io  https://api-iam.intercom.io  https://api-ping.intercom.io  https://nexus-websocket-a.intercom.io  https://nexus-websocket-b.intercom.io  https://nexus-long-poller-a.intercom.io  https://nexus-long-poller-b.intercom.io  wss://nexus-websocket-a.intercom.io  wss://nexus-websocket-b.intercom.io  https://uploads.intercomcdn.com  https://uploads.intercomusercontent.com  https://js.intercomcdn.com https://*.litix.io  https://*.wistia.com  https://embedwistia-a.akamaihd.net https://api.lever.co https://api.lever.co https://anchor.fm *.mouseflow.com; child-src blob: https://*.pantheonsite.io/ https://*.pantheon.io/ https://people.ai https://*.people.ai https://share.intercom.io  https://intercom-sheets.com  https://www.intercom-reporting.com https://www.youtube.com  https://player.vimeo.com  https://fast.wistia.net https://api.lever.co https://anchor.fm *.mouseflow.com; frame-src https://*.doubleclick.net https://www.google.com https://app-sj19.marketo.com *.iubenda.com *.consensu.org https://*.facebook.com https://fast.wistia.com  https://fast.wistia.net https://bugcrowd.com https://api.lever.co https://anchor.fm https://*.spotify.com  https://*.spotify.net *.mouseflow.com; form-action https://*.pantheonsite.io/ https://*.pantheon.io/ https://people.ai https://*.people.ai https://*.facebook.com https://intercom.help  https://api-iam.intercom.io; worker-src 'self' blob: https://*.pantheonsite.io/ https://*.pantheon.io/ https://people.ai https://*.people.ai https://api.lever.co https://anchor.fm 1
default-src 'self' *.stancer.com *.iliad78.net; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src https://*.stancer.com https://*.iliad78.net; frame-ancestors 'none';  1
frame-src 'self' https://*.adyen.com https://*.criteo.com https://*.criteo.net https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.ftrace.com https://*.lidl-info.com https://*.lidl-onlinenewsletter.de https://*.lidl.com https://consentcdn.cookiebot.com https://facebook.com https://h.online-metrix.net https://www.awin1.com https://www.edge-cdn.net https://www.google.com https://www.lidl-shop.nl https://www.youtube-nocookie.com https://www.youtube.com https://*.reisebank.de https://*.targobank.de https://3d-secure.pluscard.de https://3ds-secure.cardcomplete.com https://3ds.borica.bg https://3ds.sia.eu https://3dsecure-vrp.de https://acs.touch.tech https://acs2.gpesecure.com https://acspa.petafuel.net https://acsv2.centrum24.pl https://german-3ds.wlp-acs.com https://mc-id-check.firstdata.de https://ps4acs.netcetera-payment.ch https://securesuite.co.uk https://ssl-prd-u5g-fo-acs-areq.wlp-acs.com:9743 https://tsys.arcot.com https://visa-secure.ing.de ; object-src data: https://*.facebook.com https://*.facebook.net https://*.lidl-flyer.com https://facebook.com https://h.online-metrix.net https://www.google.com https://www.lidl-shop.nl ; img-src 'self' data: moz-extension: https://*.360yield.com https://*.addthis.com https://*.adnxs.com https://*.advertising.com https://*.adyen.com https://*.casalemedia.com https://*.criteo.com https://*.criteo.net https://*.demdex.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-flyer.com https://*.lidl-onlinenewsletter.de https://*.lidl-shop.com https://*.online-metrix.net https://*.openx.net https://*.parcellab.com https://*.pubmatic.com https://*.stickyadstv.com https://*.taboola.com https://*.tradetracker.net https://*.twiago.com https://*.yahoo.com https://*.yieldlab.net https://awin1.com https://contextual.media.net https://event.yoochoose.net https://facebook.com https://h.online-metrix.net https://match.sharethrough.com https://media.lidl-flyer.com https://sync.outbrain.com https://translate.google.com https://translate.google.com https://visitor.omnitagjs.com https://www.adobe.com https://www.bing.com https://www.google-analytics.com https://www.google.at https://www.google.ba https://www.google.be https://www.google.bg https://www.google.ch https://www.google.co.uk https://www.google.com https://www.google.com.bd https://www.google.com.tr https://www.google.com.ua https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.is https://www.google.it https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.sk https://www.googletagmanager.com https://www.gstatic.com https://www.lidl-shop.be https://www.lidl-shop.nl https://www.lidl.de https://www.youtube.com https://x.bidswitch.net ; report-uri https://lidl1csp.report-uri.com/r/t/csp/enforce ; frame-ancestors 'self' https://*.lidl.com https://beeem.co https://www.lidl-shop.nl ; style-src 'self' 'unsafe-inline' https://*.lidl-flyer.com https://*.parcellab.com https://facebook.com https://www.bing.com https://www.google.com https://www.lidl-shop.nl ; default-src 'self' blob: data: https://lidl1csp.report-uri.com https://*.adyen.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.kameleoon.com https://*.lidl-flyer.com https://*.lidl-shop.com https://*.online-metrix.net https://*.parcellab.com https://event.yoochoose.net https://facebook.com https://fonts.gstatic.com https://h.online-metrix.net https://lidl.media01.eu https://www.bing.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.lidl-shop.nl ; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://*.adyen.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-flyer.com https://*.lidl.com https://*.parcellab.com https://*.semtrack.de https://*.tradetracker.net https://ajax.googleapis.com https://cdn.ravenjs.com https://code.etracker.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://facebook.com https://h.online-metrix.net https://lidl.media01.eu https://s.ytimg.com https://www.bing.com https://www.dwin1.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.lidl-shop.nl https://www.youtube.com ; 1
frame-ancestors 'self' *.oktawave.com 1
frame-ancestors https://www.messenger.com/ https://www.facebook.com/ 1
frame-ancestors *; report-uri https://www.rackspace.com/en-gb/report-uri/enforce 1
default-src https:; script-src http: https: 'unsafe-inline' 'unsafe-eval'; frame-src http: https: data:; style-src http: https: 'unsafe-inline'; img-src http: https: data: blob:; media-src http: https: data: blob:; font-src http: https: data:; connect-src http: https: wss:; child-src http: https: blob:; frame-ancestors 'self' https://dialpad.highspot.com/ https://view.highspot.com/ 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://ressources.sesamath.net https://instrumenpoche.sesamath.net https://j3p.sesamath.net https://www.mathgraph32.org https://bibliotheque.sesamath.net ; style-src 'self' 'unsafe-inline' https://ressources.sesamath.net https://instrumenpoche.sesamath.net https://j3p.sesamath.net https://www.mathgraph32.org https://bibliotheque.sesamath.net ; img-src 'self' 'unsafe-inline' data: https://ressources.sesamath.net https://instrumenpoche.sesamath.net https://j3p.sesamath.net https://www.mathgraph32.org https://bibliotheque.sesamath.net https://zoneur.sesamath.net ; connect-src 'self' *.bugsnag.com https://bibliotheque.sesamath.net ; frame-src 'self' https://bibliotheque.sesamath.net https://ressources.sesamath.net https://instrumenpoche.sesamath.net https://j3p.sesamath.net https://www.mathgraph32.org https://bibliotheque.sesamath.net ; media-src 'none' ; object-src 'self' https://ressources.sesamath.net https://instrumenpoche.sesamath.net https://j3p.sesamath.net https://www.mathgraph32.org https://bibliotheque.sesamath.net https://mep-col.sesamath.net ; font-src data: https://cdn.jsdelivr.net https://bibliotheque.sesamath.net ; report-uri https://www.sesamath.net/csp-alert.php 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://snap.licdn.com https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com https://www.youtube.com https://s.ytimg.com https://cdn.cookielaw.org https://www.google.com https://www.gstatic.com; object-src 'self'; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://tagmanager.google.com; img-src 'self' data: https://www.google-analytics.com https://ssl.gstatic.com https://*.linkedin.com https://stats.g.doubleclick.net https://www.gstatic.com https://www.googletagmanager.com https://www.google.com; media-src 'self'; frame-src 'self' https://hire.withgoogle.com https://www.youtube.com https://www.youtube-nocookie.com https://www.youtu.be https://www.googletagmanager.com https://www.google.com; frame-ancestors 'self' https://*.jobcloud.ch https://*.jobs.ch https://*.jobup.ch https://ingjobs.ch https://ictcareer.ch https://jobs4sales.ch https://financejobs.ch https://medtalents.ch https://jobwinner.ch https://alpha.ch https://topjobs.ch https://*.jobscout24.ch https://*.impieghi.ch https://*.stellenmarkt.ch; child-src 'self' https://hire.withgoogle.com; font-src 'self' data: https://themes.googleusercontent.com https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://sentry.io https://cdn.cookielaw.org https://privacyportal-eu.onetrust.com https://*.g.doubleclick.net https://*.uc.r.appspot.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://stats.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.gravatar.com https://img.shields.io https://www.google-analytics.com https://stats.g.doubleclick.net; object-src 'none'; connect-src 'self' https://storage.googleapis.com; font-src 'self'; media-src 'self'; manifest-src 'self'; frame-src https://www.youtube.com; report-uri https://lgtm.com/browser_report/; report-to https://lgtm.com/browser_report/ 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' code.jquery.com www.googletagmanager.com www.googleadservices.com *.googleapis.com marketing.gbgplc.com js.hs-banner.com js.hs-scripts.com www.google-analytics.com optimize.google.com static.hotjar.com bizographics.com static.ads-twitter.com *.pcapredict.com snap.licdn.com *.facebook.net googleads.g.doubleclick.net js.hs-analytics.net js.hsleadflows.net js.hsadspixel.net sjs.bizographics.com script.hotjar.com px.ads.linkedin.com analytics.twitter.com www.google.com *.gstatic.com platform.linkedin.com js.usemessages.com addtocalendar.com *.sharethis.com *.loqate.com *.addressy.com amplify.outbrain.com js.hsforms.net forms.hsforms.com *.onetrust.com snid.snitcher.com secure.perk0mean.com ruler.nyltx.com analytics.nyltx.com tagmanager.google.com tag.demandbase.com *.opmnstr.com a.omappapi.com cdnjs.cloudflare.com *.buzzsprout.com *.wistia.net *.litix.io *.wistia.com; default-src 'self' data:; style-src 'self' 'unsafe-inline' blob: *.googleapis.com addtocalendar.com api.addressy.com *.loqate.com cloudflare.com cdnjs.cloudflare.com tagmanager.google.com use.typekit.net p.typekit.net fast.wistia.com optimize.google.com fonts.googleapis.com; connect-src 'self' *.google-analytics.com api.hubapi.com *.hubspot.com *.hotjar.com vc.hotjar.io *.sharethis.com services.postcodeanywhere.co.uk *.addressy.com *.loqate.com decollector.tealeaf.ibmcloud.com gbg-global.azureedge.net www.facebook.com *.vimeo.com *.vimeocdn.com *.onetrust.com snid.snitcher.com analytics.nyltx.com api.company-target.com *.omappapi.com api.opmnstr.com docs.idscan.com wss: stats.g.doubleclick.net *.litix.io *.wistia.com embedwistia-a.akamaihd.net; font-src 'self' *.gstatic.com *.wistia.com use.typekit.net fonts.gstatic.com data:; media-src 'self' blob: data: *.wistia.com *.wistia.net embedwistia-a.akamaihd.net; worker-src 'self' blob:; img-src 'self' 'unsafe-inline' *.gravatar.com data: gbg-global.azureedge.net *.loqate.com t.co/i/adsct *.google.com www.glassdoor.co.uk *.google.co.uk *.google-analytics.com optimize.google.com lh3.googleusercontent.com *.facebook.com *.hubspot.com cdnjs.cloudflare.com stats.g.doubleclick.net glassdoor.co.uk maps.gstatic.com maps.googleapis.com www.googletagmanager.com *.sharethis.com dashboard.umbraco.org px.ads.linkedin.com www.linkedin.com tr.outbrain.com amplifypixel.outbrain.com *.vimeo.com *.onetrust.com connect.facebook.net ssl.gstatic.com www.gstatic.com match.prod.bidr.io segments.company-target.com gbgstorage01.blob.core.windows.net a.opmnstr.com p.adsymptotic.com *.omappapi.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net; frame-src 'self' www2.gbgplc.com *.vimeo.com vimeo.com *.youtube.com *.vimeocdn.com platform.twitter.com syndication.twitter.com *.fls.doubleclick.net vars.hotjar.com www.facebook.com stats.g.doubleclick.net fast.wistia.net www.glassdoor.co.uk www.google.com optimize.google.com www.linkedin.com ir.q4europe.com c.sharethis.mgr.consensu.org *.hsforms.com *.onetrust.com *.loqate.com *.hubspot.com *.buzzsprout.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: file: blob: *.bugherd.com *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.cloudflare.com *.doubleclick.net *.demdex.net *.everestjs.net *.everesttech.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google.co.uk *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.gravatar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.serving-sys.com *.stripe.com *.tiqcdn.com *.typekit.net *.youtube.com *.zencdn.net ;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: file: blob: *.bugherd.com *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.cloudflare.com *.doubleclick.net *.demdex.net *.everestjs.net *.everesttech.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google.co.uk *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.gravatar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.serving-sys.com *.stripe.com *.tiqcdn.com *.typekit.net *.youtube.com *.zencdn.net ;img-src 'self' 'unsafe-inline' 'unsafe-eval' data: file: blob: *.bugherd.com *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.cloudflare.com *.doubleclick.net *.demdex.net *.everestjs.net *.everesttech.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google.co.uk *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.gravatar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.serving-sys.com *.stripe.com *.tiqcdn.com *.typekit.net *.youtube.com *.zencdn.net ;media-src 'self' 'unsafe-inline' 'unsafe-eval' data: file: blob: *.bugherd.com *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.cloudflare.com *.doubleclick.net *.demdex.net *.everestjs.net *.everesttech.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google.co.uk *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.gravatar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.serving-sys.com *.stripe.com *.tiqcdn.com *.typekit.net *.youtube.com *.zencdn.net ;frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: file: blob: *.bugherd.com *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.cloudflare.com *.doubleclick.net *.demdex.net *.everestjs.net *.everesttech.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google.co.uk *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.gravatar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.serving-sys.com *.stripe.com *.tiqcdn.com *.typekit.net *.youtube.com *.zencdn.net ; 1
connect-src 'self' blob: https://yandexmetrica.com:* https://ads.adfox.ru https://ads6.adfox.ru api.youla.io https://mc.admetrica.ru https://thequestion.ru wss://comments.yandex.net wss://comments-alpha.yandex.net https://turbopages.org https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://yandex.net https://*.yandex.net https://an.yandex.ru https://yastat.net https://*.yastat.net https://*.yandex-team.ru https://*.calltouch.ru https://*.comagic.ru taxi.taxi.tst.yandex.%tld% aflt.market.yandex.ru sentry.iddqd.yandex.net backend.messenger.yandex.ru yandex.st matchid.adfox.yandex.ru ads.adfox.ru ads6.adfox.ru yastat.net *.yandex-team.ru yandex.ru *.yandex.ru *.yandex.com *.yandex.com.tr *.yandex.by *.yandex.kz *.yandex.ua *.yandex.uz *.yandex.net; default-src 'none'; font-src 'self' data: https://yastatic.net https://yandex.ru an.yandex.ru yastat.net *.s3.yandex.net yastatic.net *.yandex.ru; frame-src 'self' data: yabrowser: https://yandexadexchange.net https://*.yandexadexchange.net https://turbopages.org https://*.turbopages.org banners.adfox.ru https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://yandex.net https://*.yandex.net https://an.yandex.ru https://yastat.net https://*.yastat.net https://*.yandex-team.ru *.video.yandex.ru *.market.yandex.ru yastatic.net www.youtube.com *.vimeo.com embed.megogo.net coub.com awaps.yandex.net yandexadexchange.net *.yandexadexchange.net yastat.net meyou.ru broadcast.comdi.com *.yandex-team.ru yandex.ru yandex.com yandex.com.tr yandex.by yandex.kz yandex.ua yandex.uz yandex.net *.yandex.ru *.yandex.com *.yandex.com.tr *.yandex.by *.yandex.kz *.yandex.ua *.yandex.uz *.yandex.net; form-action https://*; img-src * 'self' blob: data: android-webview-video-poster: *.yandex.net *.s3.yandex.net yastatic.net http://lpc.s3.mds.yandex.net http://yastatic.net mc.admetrica.ru avatars-fast.yandex.net favicon.yandex.net *.verify.yandex.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net avatars.mds.yandex.net *.yandex.ru *.yandex.com *.yandex.com.tr *.yandex.by *.yandex.kz *.yandex.ua *.yandex.uz; media-src * 'self' data: blob: *.video.yandex.ru *.storage.yandex.net *.s3.yandex.net *.cdn.yandex.net yastatic.net *.yandex.net *.strm.yandex.ru yandex.st banners.adfox.ru content.adfox.ru yastat.net yandex.ru *.yandex.ru; script-src 'self' blob: 'nonce-6343' 'unsafe-inline' 'unsafe-eval' https://ads.adfox.ru https://ads6.adfox.ru https://banners.adfox.ru mc.yandex.ru https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://yandex.net https://*.yandex.net https://an.yandex.ru https://yastat.net https://*.yastat.net https://*.yandex-team.ru yastatic.net aflt.market.yandex.ru www.youtube.com *.vimeo.com s.ytimg.com lpc.s3.mdst.yandex.net chat.s3.yandex.net *.api-maps.yandex.ru yandex.st banners.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net yandex.ru *.yandex.ru *.yandex.com *.yandex.com.tr *.yandex.by *.yandex.kz *.yandex.ua *.yandex.uz *.yandex.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' banners.adfox.ru content.adfox.ru https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://yandex.net https://*.yandex.net https://an.yandex.ru https://yastat.net https://*.yastat.net *.yandex.net *.s3.yandex.net yastatic.net lpc.s3.mdst.yandex.net yandex.st yastat.net *.yandex.ru; worker-src blob: https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://yandex.net https://*.yandex.net https://an.yandex.ru https://yastat.net https://*.yastat.net https://*.yandex-team.ru; report-uri https://csp.yandex.net/csp?from=turbo%3aphone&reqid=e1647ccfb00604eea5f7b9c8b0d1386800275-production-app-host-sas-web-yp-109&yandexuid=3890325131609211361&yandex_login=&project=turbo; object-src  yastatic.net; child-src  'self'; frame-ancestors  'self' webvisor.com http://webvisor.com *.mtproxy.yandex.net www.kinopoisk.ru *.yandex-team.ru n.maps.yandex.ru yandex.ru yandex.com yandex.com.tr yandex.by yandex.kz yandex.ua yandex.uz yandex.net *.yandex.ru *.yandex.com *.yandex.com.tr *.yandex.by *.yandex.kz *.yandex.ua *.yandex.uz *.yandex.net; 1
frame-ancestors https://baselang.com https://*.clickfunnels.com https://*.baselang.com https://shortcuttoconversational.com 1
default-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com *.google.com *.google-analytics.com www.gstatic.com *.facebook.com *.facebook.net https://www.youtube.com *.twimg.com *.twitter.com www.google-analytics.com www.googletagmanager.com us.bbcollab.com ; 1
frame-ancestors 'self' *.wildberries.kg 1
default-src * 'unsafe-inline' 'unsafe-eval';img-src * data:; child-src * 'self' blob: http:;font-src * data: 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tr.snapchat.com https://www.shoplooks.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.ry.com.au https://m.ry.com.au https://checkout.ry.com.au https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.cn https://*.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://*.shoplooks.com https://slooks.top https://slooks.me; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://www.shoplooks.com https://static.shoplooks.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
frame-ancestors 'self' *.surveycto.com 1
default-src https://*.akb.ch http://domtracd.main.agkb.ch/; img-src data: https://www.facebook.com/tr/ https://*.akb.ch https://*.gstatic.com https://*.googleapis.com https://www.google-analytics.com https://*.doubleclick.net https://*.google.com; script-src 'unsafe-inline' 'unsafe-eval' https://*.akb.ch https://*.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://*.ticketpark.ch https://*.google.com https://*.gstatic.com https://www.contovista.com https://www.newhome.ch https://www.facebook.com/tr/ https://connect.facebook.net; frame-src https://*.akb.ch https://*.cashgate.ch https://www.newhome.ch https://www.companymarket.ch https://b2c-stage.extranet.netcetera.biz/ https://b2c-prod.netcetera.ch https://www.youtube.com https://*.ticketpark.ch https://*.google.com https://*.gstatic.com https://mw.weaver.ch https://my.matterport.com/show/ https://static.matterport.com/showcase; style-src 'unsafe-inline' 'unsafe-eval' https://*.akb.ch https://fonts.googleapis.com https://tagmanager.google.com/debug/css.css; font-src https://*.akb.ch https://fonts.gstatic.com; connect-src https://*.akb.ch https://*.google.com https://www.contovista.com https://akb.abacuscity.ch; child-src blob: https://*.akb.ch; media-src blob: https://*.akb.ch; frame-ancestors https://www.jobs.ch https://*.akb.ch; form-action https://*.akb.ch https://www.facebook.com/tr/; 1
child-src 'self' www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com acceptable.a-ads.com ad.a-ads.com page.ludorum.dev; connect-src 'self' steemit.com api.steemit.com dist.one wss://rpc.dist.one api.blocktrades.us https://steemitimages.com https://translate.googleapis.com; default-src 'self' www.youtube.com staticxx.facebook.com player.vimeo.com acceptable.a-ads.com ad.a-ads.com page.ludorum.dev; font-src data: fonts.gstatic.com 'self'; frame-ancestors 'none'; img-src * data:; object-src 'none'; plugin-types application/pdf; script-src 'self' www.google-analytics.com pagead2.googlesyndication.com adservice.google.com connect.facebook.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; report-uri /api/v1/csp_violation 1
default-src 'none'; style-src 'self' 'unsafe-inline'; img-src *; form-action 'self'; 1
default-src 'self' 'unsafe-inline' * https://api.foreverliving.fr https://nestor.foreverliving.fr https://flpmobil.foreverliving.fr https://ppflpmobil.foreverliving.fr https://devflpmobil.foreverliving.fr https://foreversmart.foreverliving.fr https://flpmobil.foreverliving.fr/check-maj.ajax https://ppflpmobil.foreverliving.fr/check-maj.ajax https://devflpmobil.foreverliving.fr/check-maj.ajax https://foreversmart.foreverliving.fr/check-maj.ajax https://www-dev.foreverliving.fr/flpmobil.html https://www.foreverliving.fr/flpmobil.html https://www.foreverliving.fr/foreversmart.html http://flpmobil.foreverliving.fr/foreversmartpc.html http://ppflpmobil.foreverliving.fr/foreversmartpc.html http://devflpmobil.foreverliving.fr/foreversmartpc.html http://foreversmart.foreverliving.fr/flpmobil http://foreversmart.foreverliving.fr/foreversmartpc.html https://www.instagram.com https://cdn.jsdelivr.net https://connect.facebook.net http://platform.instagram.com https://www.facebook.com https://scontent-cdt1-1.cdninstagram.com ; style-src 'self' 'unsafe-inline' https://api.foreverliving.fr https://nestor.foreverliving.fr http://yui.yahooapis.com https://storage.googleapis.com/code.getmdl.io/ https://fonts.googleapis.com/ https://code.getmdl.io/ https://flpmobil.foreverliving.fr https://ppflpmobil.foreverliving.fr https://devflpmobil.foreverliving.fr https://foreversmart.foreverliving.fr https://flpmobil.foreverliving.fr/check-maj.ajax https://ppflpmobil.foreverliving.fr/check-maj.ajax https://devflpmobil.foreverliving.fr/check-maj.ajax https://foreversmart.foreverliving.fr/check-maj.ajax https://www-dev.foreverliving.fr/foreversmart.html https://www.foreverliving.fr/foreversmart.html http://flpmobil.foreverliving.fr/foreversmartpc.html http://ppflpmobil.foreverliving.fr/foreversmartpc.html http://devflpmobil.foreverliving.fr/foreversmartpc.html http://foreversmart.foreverliving.fr/foreversmartpc.html https://platform.instagram.com https://www.instagram.com https://cdn.jsdelivr.net https://connect.facebook.net http://platform.instagram.com https://www.facebook.com https://scontent-cdt1-1.cdninstagram.com ; script-src 'self' 'unsafe-inline' https://api.foreverliving.fr https://nestor.foreverliving.fr http://yui.yahooapis.com http://code.jquery.com http://code.getmdl.io http://storage.googleapis.com https://maps.googleapis.com https://www.google-analytics.com http://www.google-analytics.com https://raw.githubusercontent.com https://www.instagram.com https://cdn.jsdelivr.net https://connect.facebook.net http://platform.instagram.com https://www.facebook.com https://flpmobil.foreverliving.fr https://ppflpmobil.foreverliving.fr https://devflpmobil.foreverliving.fr https://foreversmart.foreverliving.fr https://flpmobil.foreverliving.fr/check-maj.ajax https://ppflpmobil.foreverliving.fr/check-maj.ajax https://devflpmobil.foreverliving.fr/check-maj.ajax https://foreversmart.foreverliving.fr/check-maj.ajax https://www-dev.foreverliving.fr/foreversmart.html https://www.foreverliving.fr/foreversmart.html http://foreversmart.foreverliving.fr/flpmobil.html http://foreversmart.foreverliving.fr/foreversmartpc.html https://code.getmdl.io/1.1.3/material.min.js https://code.jquery.com/jquery-1.12.3.min.js https://www.gstatic.com/recaptcha/api2/v1523860362251/recaptcha__fr.js https://www.gstatic.com/recaptcha/api2/v1524685466525/recaptcha__fr.js https://www.gstatic.com https://www.google.com/recaptcha/api.js https://platform.instagram.com https://scontent-cdt1-1.cdninstagram.com ; img-src 'self' 'unsafe-inline' https://api.foreverliving.fr https://nestor.foreverliving.fr http://yui.yahooapis.com http://code.jquery.com http://storage.googleapis.com https://maps.googleapis.com https://csi.gstatic.com https://maps.gstatic.com https://www.google-analytics.com http://www.google-analytics.com https://pbs.twimg.com http://pbs.twimg.com https://scontent.cdninstagram.com https://scontent.xx.fbcdn.net http://ppdistrib.foreverliving.fr http://distrib.foreverliving.fr http://ppwww.foreverliving.fr http://www.foreverliving.fr http://www-dev.foreverliving.fr https://scontent-yyz1-1.cdninstagram.com https://scontent-yyz1-1.xx.fbcdn.net https://*.fbcdn.net/ https://*.cdninstagram.com https://foreversmart.foreverliving.fr https://foreversmart.foreverliving.fr/check-maj.ajax https://www.foreverliving.fr/foreversmart.html https://www-dev.foreverliving.fr/foreversmart.html http://foreversmart.foreverliving.fr/foreversmartpc.html https://www.instagram.com https://devwww.foreverliving.fr https://devwww.foreverliving.com https://ppvwww.foreverliving.com https://ppvwww.foreverliving.fr https://graph.facebook.com https://platform.instagram.com https://cdn.jsdelivr.net https://connect.facebook.net http://platform.instagram.com https://www.facebook.com ; child-src 'self' 'unsafe-inline' *.youtube.com https://api.foreverliving.fr https://nestor.foreverliving.fr https://flpmobil.foreverliving.fr https://ppflpmobil.foreverliving.fr https://devflpmobil.foreverliving.fr https://foreversmart.foreverliving.fr https://flpmobil.foreverliving.fr/check-maj.ajax https://ppflpmobil.foreverliving.fr/check-maj.ajax https://devflpmobil.foreverliving.fr/check-maj.ajax https://foreversmart.foreverliving.fr/check-maj.ajax https://www.foreverliving.fr/flpmobil.html https://www.foreverliving.fr/foreversmart.html https://www-dev.foreverliving.fr/flpmobil.html https://www-dev.foreverliving.fr/foreversmart.html http://flpmobil.foreverliving.fr/foreversmartpc.html http://ppflpmobil.foreverliving.fr/foreversmartpc.html http://devflpmobil.foreverliving.fr/foreversmartpc.html http://foreversmart.foreverliving.fr/foreversmartpc.html https://www.google.com/ https://platform.instagram.com https://www.instagram.com https://cdn.jsdelivr.net https://connect.facebook.net http://platform.instagram.com https://www.facebook.com https://scontent-cdt1-1.cdninstagram.com ; 1
frame-ancestors https://*.betano.pt:* 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; connect-src ws: https: 'self'; frame-ancestors 'self'; 1
default-src 'self'; img-src 'self' data: *.doubleclick.net *.google.com *.google-analytics.com *.facebook.com *.gstatic.com *.googleapis.com http://img.constantcontact.com *.addthis.com *.cellcom.com  *.staticflickr.com flickrembed.com placehold.it blob: *.gravatar.com; style-src 'self' 'unsafe-inline' *.gstatic.com *.flowplayer.org *.googleapis.com flickrembed.com *.bootstrapcdn.com *.ionicframework.com tagmanager.google.com static.ctctcdn.com; frame-src 'self' *.addthis.com *.google.com *.shift4test.com *.youtube.com *.cellmaps.com *.i4go.com *.twitter.com *.linkedin.com *.facebook.com *.woobox.com *.trustev.com *.iesnare.com; connect-src 'self' *.addthis.com *.cellcom.com  *.constantcontact.com listgrowth.ctctcdn.com *.nsight.com *.trustev.com *.iesnare.com; font-src 'self' *.gstatic.com *.bootstrapcdn.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net cdnjs.cloudflare.com *.facebook.com *.facebook.net *.addthis.com *.addthisedge.com *.i4go.com *.googleapis.com *.ctctcdn.com flickrembed.com *.jquery.com *.simpli.fi *.linkedin.com *.twitter.com *.woobox.com widgets.priceyourdevice.com *.polyfill.io *.trustev.com *.iesnare.com; frame-ancestors 'self' *.muntzav.com *.gosoundcheck.com *.ocontoelectric.com *.essoconto.com *.pcncell.net *.c-us-4wireless.com *.c-tcomputers.com *.trophiesandtreasures.com *.doorcountycoop.com *.jtcrivitz.com *.wittenbergnet.net *.lakewoodcellular.com *.northerndoorcommunications.com *.totally-cellular.com *.arlenstvandappliance.com *.happymac.org *.getmobilelink.com *.i4go; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.googleapis.com *.ads-twitter.com *.twitter.com *.twimg.com *.google-analytics.com *.typekit.net  *.gstatic.com *.facebook.net sc-static.net *.googleadservices.com *.google.com *.g.doubleclick.net *.hotjar.com *.hotjar.io; style-src 'self' 'unsafe-inline' *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com ; img-src 'self' *.google-analytics.com *.typekit.net *.twitter.com *.twimg.com *.g.doubleclick.net t.co *.facebook.com *.googletagmanager.com *.ytimg.com *.google.co.nz *.google.co.id *.google.com *.google.co.uk *.google.pl *.google.de *.google.ie *.google.pt *.google.dk *.google.ru *.google.gr *.google.no *.google.be *.google.cz *.google.at *.google.ae *.google.gg *.google.co.jp *.google.it *.google.ch *.google.fr *.google.es *.google.je *.google.ca *.google.se *.google.nl *.google.co.in *.google.co.za *.google.co.kr *.google.co.ug *.google.ro *.google.lk *.google.im *.google.bs *.google.lt *.google.hu *.google.bg *.google.com.jm *.google.com.kh *.google.com.mx *.google.com.eg *.google.com.ph *.google.com.ec *.google.com.pe *.google.com.hk *.google.com.sg *.google.com.au *.google.com.sa *.google.com.qa *.google.com.cy *.google.com.ng *.google.com.ua *.google.com.my *.google.co.th *.google.com.br *.google.com.co *.gstatic.com *.hotjar.com *.hotjar.io data:;; frame-src 'self' *.youtube.com *.google.com *.twitter.com *.snapchat.com *.facebook.com *.googletagmanager.com *.googleadservices.com *.g.doubleclick.net *.hotjar.com *.hotjar.io data:;; child-src *.hotjar.com *.hotjar.io; font-src 'self' *.gstatic.com *.typekit.net *.hotjar.com *.hotjar.io data:;; connect-src 'self' *.google-analytics.com *.typekit.net *.g.doubleclick.net *.facebook.net *.facebook.com *.hotjar.io *.hotjar.com; report-uri /mute-csp-violation 1
frame-ancestors *.ansarada.com 1
default-src 'self';frame-ancestors 'self';frame-src 'self' *.google-analytics.com *.marketo.net *.googletagmanager.com *.googleapis.com *.vimeo.com *.googleadservices.com *.bing.com *.facebook.net *.facebook.com *.mktoresp.com *.doubleclick.net *.google.com *.cloudfront.net *.gstatic.com *.licdn.com *.linkedin.com *.youtube.com *.vidyard.com reltio.com *.reltio.com *.driftt.com *.quora.com *.adsymptotic.com *.neverbounce.com ionfiles.scribblecdn.net reltio.postclickmarketing.com *.ssl.cf1.rackcdn.com *.vidyard.com pbs.twimg.com *.truste.com *.6sc.co *.terminus.services secure.adnxs.com match.adsrvr.org *.linkedin.com *.demandbase.com match.prod.bidr.io api.company-target.com segments.company-target.com id.rlcdn.com ;media-src 'self' *.google-analytics.com *.marketo.net *.googletagmanager.com *.googleapis.com *.vimeo.com *.googleadservices.com *.bing.com *.facebook.net *.facebook.com *.mktoresp.com *.doubleclick.net *.google.com *.cloudfront.net *.gstatic.com *.licdn.com *.linkedin.com *.youtube.com *.vidyard.com reltio.com *.reltio.com *.driftt.com *.quora.com *.adsymptotic.com *.neverbounce.com ionfiles.scribblecdn.net reltio.postclickmarketing.com *.ssl.cf1.rackcdn.com *.vidyard.com pbs.twimg.com *.truste.com *.6sc.co *.terminus.services secure.adnxs.com match.adsrvr.org *.linkedin.com *.demandbase.com match.prod.bidr.io api.company-target.com segments.company-target.com id.rlcdn.com ;object-src 'none'; connect-src 'self' *.google-analytics.com *.marketo.net *.googletagmanager.com *.googleapis.com *.vimeo.com *.googleadservices.com *.bing.com *.facebook.net *.facebook.com *.mktoresp.com *.doubleclick.net *.google.com *.cloudfront.net *.gstatic.com *.licdn.com *.linkedin.com *.youtube.com *.vidyard.com reltio.com *.reltio.com *.driftt.com *.quora.com *.adsymptotic.com *.neverbounce.com ionfiles.scribblecdn.net reltio.postclickmarketing.com *.ssl.cf1.rackcdn.com *.vidyard.com pbs.twimg.com *.truste.com *.6sc.co *.terminus.services secure.adnxs.com match.adsrvr.org *.linkedin.com *.demandbase.com match.prod.bidr.io api.company-target.com segments.company-target.com id.rlcdn.com ;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.marketo.net *.googletagmanager.com *.googleapis.com *.vimeo.com *.googleadservices.com *.bing.com *.facebook.net *.facebook.com *.mktoresp.com *.doubleclick.net *.google.com *.cloudfront.net *.gstatic.com *.licdn.com *.linkedin.com *.youtube.com *.vidyard.com reltio.com *.reltio.com *.driftt.com *.quora.com *.adsymptotic.com *.neverbounce.com ionfiles.scribblecdn.net reltio.postclickmarketing.com *.ssl.cf1.rackcdn.com *.vidyard.com pbs.twimg.com *.truste.com *.6sc.co *.terminus.services secure.adnxs.com match.adsrvr.org *.linkedin.com *.demandbase.com match.prod.bidr.io api.company-target.com segments.company-target.com id.rlcdn.com ;style-src 'self' 'unsafe-inline' *.google-analytics.com *.marketo.net *.googletagmanager.com *.googleapis.com *.vimeo.com *.googleadservices.com *.bing.com *.facebook.net *.facebook.com *.mktoresp.com *.doubleclick.net *.google.com *.cloudfront.net *.gstatic.com *.licdn.com *.linkedin.com *.youtube.com *.vidyard.com reltio.com *.reltio.com *.driftt.com *.quora.com *.adsymptotic.com *.neverbounce.com ionfiles.scribblecdn.net reltio.postclickmarketing.com *.ssl.cf1.rackcdn.com *.vidyard.com pbs.twimg.com *.truste.com *.6sc.co *.terminus.services secure.adnxs.com match.adsrvr.org *.linkedin.com *.demandbase.com match.prod.bidr.io api.company-target.com segments.company-target.com id.rlcdn.com ;font-src 'self' data: *.google-analytics.com *.marketo.net *.googletagmanager.com *.googleapis.com *.vimeo.com *.googleadservices.com *.bing.com *.facebook.net *.facebook.com *.mktoresp.com *.doubleclick.net *.google.com *.cloudfront.net *.gstatic.com *.licdn.com *.linkedin.com *.youtube.com *.vidyard.com reltio.com *.reltio.com *.driftt.com *.quora.com *.adsymptotic.com *.neverbounce.com ionfiles.scribblecdn.net reltio.postclickmarketing.com *.ssl.cf1.rackcdn.com *.vidyard.com pbs.twimg.com *.truste.com *.6sc.co *.terminus.services secure.adnxs.com match.adsrvr.org *.linkedin.com *.demandbase.com match.prod.bidr.io api.company-target.com segments.company-target.com id.rlcdn.com ;img-src 'self' data: *.google-analytics.com *.marketo.net *.googletagmanager.com *.googleapis.com *.vimeo.com *.googleadservices.com *.bing.com *.facebook.net *.facebook.com *.mktoresp.com *.doubleclick.net *.google.com *.cloudfront.net *.gstatic.com *.licdn.com *.linkedin.com *.youtube.com *.vidyard.com reltio.com *.reltio.com *.driftt.com *.quora.com *.adsymptotic.com *.neverbounce.com ionfiles.scribblecdn.net reltio.postclickmarketing.com *.ssl.cf1.rackcdn.com *.vidyard.com pbs.twimg.com *.truste.com *.6sc.co *.terminus.services secure.adnxs.com match.adsrvr.org *.linkedin.com *.demandbase.com match.prod.bidr.io api.company-target.com segments.company-target.com id.rlcdn.com ; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.ua https://mc.yandex.uz https://yastatic.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.ua https://mc.yandex.uz; connect-src 'self' https://my.inanomo.com https://trust.inanomo.com https://wallet.inanomo.com/api/v1/payment-systems/commissions https://market.inanomo.com/api/v1/commissions https://www.google-analytics.com https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.ua https://mc.yandex.uz wss://inanomo.com; font-src 'self' data:; object-src 'none'; frame-src 'self' https://www.youtube.com https://youtube.com www.youtube-nocookie.com youtube-nocookie.com https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.ua https://mc.yandex.uz; form-action 'self'; frame-ancestors 'none'; report-uri /api/ua-csp-reports; block-all-mixed-content 1
base-uri 'self' *.clearesult.io *.clearesult.com; default-src 'self' *.clearesult.io *.clearesult.com https://dc.services.visualstudio.com https://www.google-analytics.com https://analytics.google.com analytics.google.com; script-src 'self' 'unsafe-inline' *.clearesult.io *.clearesult.com *.vimeocdn.com https://az416426.vo.msecnd.net https://www.googletagmanager.com cdn.jsdelivr.net static.cloudflareinsights.com ajax.cloudflare.com ajax.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com; img-src 'self' data: *.clearesult.io *.clearesult.com *.vimeocdn.com www.googletagmanager.com images.ctfassets.net https://www.google-analytics.com https://clearesult5.sharepoint.com clearesult5.sharepoint.com https://login.windows.net login.windows.net https://login.microsoftonline.com login.microsoftonline.com; font-src 'self' data: *.clearesult.io *.clearesult.com fonts.googleapis.com fonts.gstatic.com; style-src 'self' 'unsafe-inline' *.clearesult.io *.clearesult.com *.vimeocdn.com fonts.googleapis.com fonts.gstatic.com; frame-src https://player.vimeo.com; object-src 'none'; form-action 'self' *.clearesult.io *.clearesult.com https://cl.s10.exct.net; frame-ancestors 'none'; report-to https://clrcsp.report-uri.com/r/d/csp/enforce; 1
default-src https: data: wss: blob: 'unsafe-eval' 'unsafe-inline'; 1
default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com www.google.com www.google-analytics.com www.googletagmanager.com https://storage.googleapis.com; frame-src 'self' www.google.com; upgrade-insecure-requests; report-uri https://linfi.report-uri.com/r/d/csp/enforce; img-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; 1
style-src 'unsafe-inline' *.bsr.de *.fonts.net *.doubleclick.net *.get-innovation.de *.typekit.net; 1
default-src *  data: blob: 'unsafe-inline' 'unsafe-eval'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' hm.baidu.com www.indeci.cn res.wx.qq.com api.map.baidu.com api.tianditu.gov.cn static.bshare.cn bshare.optimix.cn; object-src 'self'; child-src https: 1
https: 1
default-src 'self';child-src 'self' *.youtube.com *.google.com *.vimeo.com *.dailymotion.com *.soundcloud.com static.addtoany.com *.twitter.com *.issuu.com *.infogram.com infogram-download-eu.s3.eu-west-1.amazonaws.com;font-src 'self' fonts.gstatic.com cdn.eurelectric.org;form-action 'self' login.windows.net login.microsoftonline.com syndication.twitter.com;frame-ancestors portal.eurelectric.org www2.eurelectric.org;img-src 'self' data: csi.gstatic.com maps.googleapis.com fonts.googleapis.com maps.gstatic.com docshare.eurelectric.org cdn.eurelectric.org *.google-analytics.com cbks0.googleapis.com *.ggpht.com *.linkedin.com *.twitter.com *.twimg.com;media-src 'self' *.eurelectric.org;script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com *.google.com *.gstatic.com cdn.eurelectric.org *.google-analytics.com snap.licdn.com px.ads.linkedin.com *.googletagmanager.com static.addtoany.com platform.twitter.com *.twimg.com *.infogram.com infogram-download-eu.s3.eu-west-1.amazonaws.com;style-src 'self' 'unsafe-inline' hello.myfonts.net fonts.googleapis.com cdn.eurelectric.org platform.twitter.com; 1
frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.byrdie.com 1
frame-ancestors 'self' *.3sharecorp.com 1
default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; frame-ancestors 'none'; font-src * 'self' https://fonts.gstatic.com; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'self' 'unsafe-inline' https://fonts.googleapis.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vjs.zencdn.net https://cdnjs.cloudflare.com https://view.ceros.com https://ad.doubleclick.net *.addthis.com *.addthisedge.com *.cloudfront.net https://www.googletagservices.com *.yieldify.com *.affiliatefuture.com https://connect.facebook.net *.hotjar.com https://ad.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com https://www.jazzhr.com http://app.jazz.co http://assetscdn.stackla.com https://lpcdn.lpsnmedia.net https://lptag.liveperson.net https://accdn.lpsnmedia.net https://va.v.liveperson.net http://s7.addthis.com *.knack.com *.cloud-database.co https://www.youtube.com/player_api http://www.youtube.com/player_api *.ytimg.com *.moatads.com *.google.com; object-src 'self'; style-src 'self' 'unsafe-inline' *.cloudfront.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://assetscdn.stackla.com https://vjs.zencdn.net *.cloud-database.co *.google.com; img-src * 'self' data: https: https://www.google-analytics.com; media-src *; frame-src 'self' https://www.jazzhr.com *.applytojob.com http://app.jazz.co https://lpcdn.lpsnmedia.net https://widget.stackla.com *.yieldify.com *.fls.doubleclick.net *.hotjar.com https://view.ceros.com https://www.facebook.com *.addthis.com *.affiliatefuture.com *.liveperson.net *.youtube.com *.knack.com *.newrelic.com *.google.com; child-src 'self' https://www.jazzhr.com *.applytojob.com http://app.jazz.co https://lpcdn.lpsnmedia.net https://widget.stackla.com *.yieldify.com *.fls.doubleclick.net *.hotjar.com https://view.ceros.com https://www.facebook.com *.addthis.com *.affiliatefuture.com *.youtube.com *.knack.com *.newrelic.com; font-src 'self' data: https://assetscdn.stackla.com https://fonts.gstatic.com https://fonts.googleapis.com *.hotjar.com *.cloud-database.co; connect-src 'self' *.yieldify.com *.hotjar.com *.hotjar.io *.addthis.com https://www.google-analytics.com https://www.googletagmanager.com *.doubleclick.net *.facebook.com *.google.com; report-uri /report-csp-violation 1
default-src 'self' template.serwer22.silnet.pl; script-src 'self' 'unsafe-inline' 'unsafe-eval' template.serwer22.silnet.pl ssl.silnet.pl *.googletagmanager.com www.google-analytics.com *.facebook.net *.profiauto.silnet.pl profiauto.silnet.pl *.jsdelivr.net *.google.com *.googleapis.com cdnjs.cloudflare.com *.googleadservices.com *.doubleclick.net; style-src 'self' 'unsafe-inline' template.serwer22.silnet.pl profiauto.silnet.pl fonts.googleapis.com ssl.silnet.pl; img-src 'self' template.serwer22.silnet.pl silnet.pl data: ssl.silnet.pl www.google-analytics.com *.profiauto.silnet.pl profiauto.silnet.pl *.doubleclick.net profiauto.pl *.profiauto.pl *.googletagmanager.com *.google.com *.google.pl; media-src 'self' template.serwer22.silnet.pl *.profiauto.silnet.pl profiauto.silnet.pl; font-src 'self'  fonts.googleapis.com template.serwer22.silnet.pl fonts.gstatic.com *.profiauto.silnet.pl profiauto.silnet.pl; object-src 'self' template.serwer22.silnet.pl; frame-src 'self' template.serwer22.silnet.pl *.facebook.com *.google.com *.youtube.com; connect-src 'self' template.serwer22.silnet.pl profiauto.silnet.pl *.profiauto.silnet.pl 1
default-src 'self' https: data: 'unsafe-inline'; 1
frame-ancestors 'self' *.totalmerchandise.co.uk:* 1
default-src 'self'; style-src 'self' 'unsafe-inline' use.typekit.net p.typekit.net use.fontawesome.com fonts.googleapis.com dl.episerver.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cenhud.com dl.episerver.net cdn.appdynamics.com d2oh4tlt9mrke9.cloudfront.net www.gstatic.com www.google.com www.google-analytics.com www.googletagmanager.com static.dialogflow.com www.paypal.com; connect-src 'self' *.cenhud.com *.sessioncam.com www.google-analytics.com pdx-col.eum-appdynamics.com dialogflow.cloud.google.com www.paypal.com; img-src 'self' www.googletagmanager.com www.google-analytics.com *.sessioncam.com dl.episerver.net; font-src 'self' data: use.typekit.net use.fontawesome.com fonts.gstatic.com; frame-src 'self' www.google.com *.ifactornotifi.com *.appdynamics.com player.vimeo.com www.youtube.com 1
frame-ancestors 'self' garajsepeti.com tasit.com *.garajsepeti.com *.tasit.com 1
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors *.pressrelease.com 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://assets.calendly.com https://*.doorbell.io; font-src 'self' fonts.gstatic.com; frame-src 'self' https://accounts.google.com https://calendly.com; img-src 'self' data: blob: https://*.s3.amazonaws.com track.customer.io https://*.s3-accelerate.amazonaws.com https://*.s3.us-east-2.amazonaws.com https://*.googleusercontent.com https://www.google-analytics.com https://assets.calendly.com https://d3m1fwcc59lqhy.cloudfront.net; script-src 'self' 'unsafe-inline'  apis.google.com assets.customer.io code.tidio.co https://assets.calendly.com www.google-analytics.com www.googletagmanager.com https://*.tidiochat.com https://www.google-analytics.com https://*.doorbell.io; connect-src 'self'  https://cursive-scribe-api-staging.herokuapp.com https://scribe-api.cursive.io https://www.google-analytics.com https://*.tidio.co wss://socket.tidio.co https://*.tidiochat.com https://*.customer.io https://api-js.mixpanel.com/ https://*.calendly.com https://doorbell.io https://zoc90raie5.execute-api.us-east-2.amazonaws.com https://*.s3-accelerate.amazonaws.com; media-src 'self' https://*.tidiochat.com 1
default-src 'none'; style-src 'self'; script-src 'self'; img-src 'self'; font-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' 1
default-src 'self';  style-src 'self' 'unsafe-inline' *.staging.hreyahs.gov.in; script-src 'self' 'unsafe-inline' *.staging.hreyahs.gov.in 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://info.manz.at https://www.google.com https://www.gstatic.com https://tagmanager.google.com  https://googletagmanager.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com; style-src 'self' 'unsafe-inline' https://info.manz.at https://tagmanager.google.com https://fonts.googleapis.com; img-src 'self' data: https://info.manz.at https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://trs.manz.at/ https://assets.manz.at https://shop.manz.at https://trs-api.manz.at/ https://shop-api.manz.at/ https://www.google-analytics.com https://stats.g.doubleclick.net; frame-src 'self' https://www.google.com https://maps.google.com https://eu42.spreed.com/ https://issuu.com/ http://issuu.com/ http://e.issuu.com https://e.issuu.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net 1
frame-ancestors 'self' https://print.hitched.co.uk 1
upgrade-insecure-requests; frame-ancestors 'self' https://www.technospot.net/blogs 1
script-src 'unsafe-inline' 'unsafe-eval' *.vehicle-certification-agency.gov.uk *.google.com *.gstatic.com *.googleapis.com *.googletagmanager.com *.google-analytics.com 1
frame-ancestors 'self' blog.naturalpartners.com shop.naturalpartners.com; 1
default-src https:; font-src https: data:; img-src https: data:; base-uri 'self'; object-src 'self'; media-src https: blob:; frame-ancestors 'self' https://*.blackrock.com https://*.ishares.com; style-src https: 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline' 'nonce-ShPPSpswmnW5+nysR06Qug=='; 1
default-src 'self' 'unsafe-inline' visitor2.constantcontact.com listgrowth.ctctcdn.com *.amazonaws.com *.marketingautomation.services cdn.jsdelivr.net *.gstatic.com *.doubleclick.net *.google.com *.googleadservices.com d3kit5re4lr421.cloudfront.net;              script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com static.ctctcdn.com *.marketingautomation.services cdn.jsdelivr.net *.gstatic.com *.googleapis.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.godaddy.com *.googletagmanager.com *.paypal.com *.google.com code.jquery.com;              style-src 'self' 'unsafe-inline' static.ctctcdn.com *.doubleclick.net;              img-src 'self' *.doubleclick.net *.google-analytics.com *.gstatic.com *.godaddy.com *.google.com  data:; frame-ancestors 'self' 1
frame-ancestors https://*.iow.gov.uk 1
script-src 'nonce-e906efb1bcb3ddc01e6a346b2fdff801' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=7029783089332979; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* *.google.com *.gstatic.com www.google-analytics.com *.jquery.com *.addtoany.com use.fontawesome.com *.cloudflare.com *.youtube.com *.ytimg.com *.googleapis.com *.googletagmanager.com connect.facebook.net cdnjs.cloudflare.com cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com *.cloudflare.com *.addtoany.com cloud.typography.com www.groningerforum.nl; font-src 'self' *.gstatic.com data:; img-src 'self' data: www.google-analytics.com *.gstatic.com *.googleapis.com *.google.com www.facebook.com www.googletagmanager.com *.doubleclick.net *.google.nl *.googleusercontent.com; frame-src 'self' *.google.com *.addtoany.com *.youtube.com *.vimeo.com youtu.be *.activetickets.com activetickets.groningerforum.nl www.facebook.com *.ticketworks.nl *.afasonline.com groningerforum.podiumnederland.nl forum.podiumnederland.nl open.spotify.com;media-src 'self' *.youtube.com *.vimeo.com *.vimeocdn.com *.akamaized.net;connect-src 'self' localhost:* wss://localhost:* *.projectguide.nl www.google-analytics.com stats.g.doubleclick.net; 1
default-src 'self' http://222.143.254.175:8080 https://www.xyhn.gov.cn http://www.xyhn.gov.cn:* 'unsafe-inline' 'unsafe-eval';font-src 'self';img-src 'self' http://www.xyhn.gov.cn https://www.hazw.gov.cn http://222.143.254.175:* https://maps.google.com data: blob: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com fonts.googleapis.com ajax.googleapis.com www.google.com view.copyright.or.kr voc.copyright.or.kr piwik.copyright.or.kr www.juso.go.kr www.eprivacy.or.kr:40018 connect.facebook.net static.nid.naver.com developers.kakao.com jsgetip.appspot.com cr.acecounter.com 1
script-src 'report-sample' 'nonce-5EwRhclHSd3dtePT7JYr5w' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri /webstore/cspreport 1
default-src 'self' https://*.cognitoforms.com https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.healthy.org.nz https://*.hotjar.com https://*.livestream.com https://*.sharethis.com https://*.twitter.com https://maps.google.co.nz https://ministryofhealthnewzealand.createsend.com https://twitter.com https://www.youtube.com; connect-src 'self' https://*.cognitoforms.com/ https://*.hotjar.com:* https://www.google-analytics.com wss://*.hotjar.com; frame-src 'self' https://*.arcgis.com https://*.facebook.com https://*.google.com https://*.healthy.org.nz https://*.hotjar.com https://*.livestream.com https://app.sli.do/ https://www.healthpoint.co.nz https://livestream.com https://ministryofhealthnewzealand.createsend.com https://my.matterport.com https://platform.twitter.com https://player.vimeo.com https://syndication.twitter.com https://twitter.com https://www.youtube.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.healthy.org.nz https://*.hotjar.com https://*.livestream.com https://*.sharethis.com https://*.twimg.com https://livestream.com https://ministryofhealthnewzealand.createsend.com https://platform.twitter.com https://syndication.twitter.com data:; media-src 'self' https://*.healthy.org.nz https://*.livestream.com https://livestream.com https://player.vimeo.com; script-src 'self' https://*.cognitoforms.com https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.gstatic.com https://*.healthy.org.nz https://*.hotjar.com https://*.livestream.com https://*.sharethis.com https://*.twimg.com https://*.twitter.com https://livestream.com https://ministryofhealthnewzealand.createsend.com https://www.healthpoint.co.nz 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://*.cognitoforms.com https://*.healthy.org.nz https://*.sharethis.com https://*.twitter.com https://ton.twimg.com 'unsafe-inline' 1
frame-ancestors https://www.hotjar.com https://local.hotjar.com http://local.hotjar.com https://insights-staging.hotjar.com http://insights-staging.hotjar.com 'self' 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://service.force.com/embeddedservice/ import: blob: https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com/gtag/js; object-src 'self' www.google.com; style-src 'self' 'unsafe-inline' blob: https://vars.hotjar.com https://vc.hotjar.io https://in.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com s3-ap-southeast-2.amazonaws.com; img-src 'self' data: blob: https://apsc.my.salesforce.com https://apsc--c.documentforce.com https://img.youtube.com https://i.ytimg.com https://i.vimeocdn.com https://login.salesforce.com/icons/ https://ap28.salesforce.com/icons/ https://vars.hotjar.com https://vc.hotjar.io https://in.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com s3-ap-southeast-2.amazonaws.com; media-src 'self' blob: https://vars.hotjar.com https://vc.hotjar.io https://in.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com s3-ap-southeast-2.amazonaws.com; frame-ancestors 'self'; frame-src 'self' https://service.force.com/embeddedservice/ https://ap28.salesforce.com https://sfdc-link-preview-staging.sfdc.sh https://sfdc-link-preview.hk.salesforce.com https://cdn.embedly.com https://www.youtube.com https://player.vimeo.com https://play.vidyard.com https://player.cloudinary.com https://fast.wistia.net https://players.brightcove.net https://s1.adis.ws https://scormanywhere.secure.force.com https://appiniummastertrial.secure.force.com https://*.a.forceusercontent.com/lightningmaps/ https://vars.hotjar.com https://vc.hotjar.io https://in.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com s3-ap-southeast-2.amazonaws.com; font-src 'self' data: https://vars.hotjar.com https://vc.hotjar.io https://in.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com s3-ap-southeast-2.amazonaws.com; connect-src 'self' https://vars.hotjar.com https://vc.hotjar.io https://in.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com s3-ap-southeast-2.amazonaws.com 1
frame-ancestors 'self' http://pudtoday 1
default-src 'self' www.youtube.com https://www.google-analytics.com https://stats.g.doubleclick.net;            child-src 'self' www.youtube.com www.youtube-nocookie.com www.google.com cse.google.com player.vimeo.com;            script-src 'self' 'unsafe-inline' 'unsafe-eval' s.ytimg.com www.google-analytics.com cse.google.com cse.google.nl www.google.nl www.google.com www.youtube.com www.gstatic.com www.googleapis.com www.perplex.nl maps.google.com maps.googleapis.com;            style-src 'self' 'unsafe-inline' www.google.com cse.google.com fonts.googleapis.com;            img-src 'self' data: services.perplex.eu www.google-analytics.com www.google.com www.googleapis.com clients1.google.com encrypted-tbn0.gstatic.com encrypted-tbn1.gstatic.com encrypted-tbn2.gstatic.com encrypted-tbn3.gstatic.com www.perplex.nl www.isala.nl maps.gstatic.com mt.googleapis.com maps.google.com maps.googleapis.com *.g.doubleclick.net;            font-src 'self' data: fonts.gstatic.com;            form-action 'self' secure.ogone.com;            report-uri https://perplex.report-uri.io/r/default/csp/enforce;  1
default-src http: https: 'unsafe-inline' 'unsafe-eval' data: blob: ; 1
default-src 'none' ;report-to csp; report-uri https://report-uri.simplyadmire.com/ ; frame-ancestors 'self';script-src 'self' 'unsafe-inline' data: 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://siteimproveanalytics.com https://*.readspeaker.com ; style-src 'self' data: 'unsafe-inline' https://*.readspeaker.com ; img-src 'self' data: https://6006010.global.siteimproveanalytics.io/ https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google-analytics.com https://eu2.siteimprove.com/ ; font-src 'self' data: ; object-src 'self' ; media-src 'self' https://*.readspeaker.com ; frame-src 'self' https://*.readspeaker.com ; connect-src 'self' https://6006010.global.siteimproveanalytics.io;  1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://pbs.122.2o7.net https://ssl.siteimprove.com; font-src 'self' data: 1
block-all-mixed-content; report-uri https://us.sttropeztan.com/cspReport.txt; 1
frame-ancestors 'self' webvisor.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' js-agent.newrelic.com maps.googleapis.com use.typekit.net cdnjs.cloudflare.com www.google-analytics.com bam.nr-data.net connect.facebook.net platform.twitter.com gmc.lingotek.com pixel.mathtag.com platform.linkedin.com static.flockler.com fl-cdn.scdn1.secure.raxcdn.com flockler.com embed-cdn.flockler.com polyfill.io/v3/polyfill.min.js unpkg.com; object-src 'none'; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fast.fonts.net gmc.lingotek.com static.flockler.com; frame-src 'self' youtu.be youtube.com www.youtube.com *.facebook.com *.twitter.com spark.adobe.com; child-src 'self' youtu.be youtube.com www.youtube.com *.facebook.com *.twitter.com spark.adobe.com; report-uri /report-csp-violation 1
default-src data: 'self' https: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline' 1
connect-src 'self'; img-src 'self' https://*.iso-ne.com http://*.iso-ne.com https://ssl.google-analytics.com data: ; font-src 'self' data: ; 1
frame-ancestors everlaw.highspot.com 1
default-src 'self' *.nrw.de;    script-src  'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net;    style-src   'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net;    font-src data: *;    img-src  data: *;    frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com;    worker-src  'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de;    frame-src   'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de;    object-src  'self';    connect-src 'self' *.nrw.de svc.webspellchecker.net;    media-src *; upgrade-insecure-requests; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://toot.wales; img-src 'self' https: data: blob: https://toot.wales; style-src 'self' https://toot.wales 'nonce-wPxraXGf0Y4fWtcBMYaM6w=='; media-src 'self' https: data: https://toot.wales; frame-src 'self' https:; manifest-src 'self' https://toot.wales; connect-src 'self' data: blob: https://toot.wales https://cdn.masto.host wss://toot.wales; script-src 'self' https://toot.wales; child-src 'self' blob: https://toot.wales; worker-src 'self' blob: https://toot.wales 1
base-uri 'self';connect-src 'self' *.nr-data.net https://sponge.creditkarma.co.uk https://www.google-analytics.com https://creditkarmacdn-a.akamaihd.net https://stats.g.doubleclick.net;default-src *.creditkarma.co.uk https://creditkarmacdn-a.akamaihd.net;font-src https://creditkarmacdn-a.akamaihd.net;img-src 'self' 'unsafe-inline' https://creditkarmacdn-a.akamaihd.net https://intlck.imgix.net https://ck-content.imgix.net https://ckpoc.imgix.net https://ck-uk-offers.imgix.net https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com;script-src 'strict-dynamic' *.creditkarma.co.uk *.creditkarma.com https://creditkarmacdn-a.akamaihd.net https://api-ckuk.nd.nudatasecurity.com https://sierra.kilo.ckapis.co.uk https://js-agent.newrelic.com https://bam.nr-data.net https://www.google-analytics.com 'nonce-30279e29e919023ffa13c206a626ce9b';style-src 'self' 'unsafe-inline' https://creditkarmacdn-a.akamaihd.net;worker-src 'self';report-uri https://sponge.creditkarma.co.uk/csp-report 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com/ https://ssl.google-analytics.com/ https://platform.twitter.com/ https://www.youtube.com/ https://cdn.syndication.twimg.com/ https://s.ytimg.com/ https://boards.greenhouse.io/ https://hackerone.com/ https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ 1
report-uri https://www.yelp.com/csp_block?id=d2ce078d57928441&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609224844; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
frame-ancestors 'self' *.chasepaymentechhostedpay.com; 1
default-src 'self' https://static.zdassets.com https://web-cdn.gamban.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://web-cdn.gamban.com https://use.typekit.net https://www.google-analytics.com https://ssl.google-analytics.com https://js.braintreegateway.com https://assets.braintreegateway.com https://www.paypalobjects.com https://c.paypal.com https://www.paypal.com https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://static.zdassets.com https://v2.zopim.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://*.cardinalcommerce.com; style-src 'self' 'unsafe-inline' https://web-cdn.gamban.com https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com; img-src 'self' https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.vg https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://www.facebook.com https://p.typekit.net https://v2assets.zopim.io https://static.zdassets.com https://www.google-analytics.com https://assets.braintreegateway.com https://checkout.paypal.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://v2.zopim.com https://t.paypal.com https://web-cdn.gamban.com https://www.paypal.com data:; child-src 'self' https://assets.braintreegateway.com https://c.paypal.com; frame-src 'self' https://assets.braintreegateway.com https://c.paypal.com https://www.paypal.com https://www.sandbox.paypal.com https://*.cardinalcommerce.com https://accounts.google.com https://bid.g.doubleclick.net https://staticxx.facebook.com https://www.youtube-nocookie.com https://www.youtube.com https://api.sandbox.braintreegateway.com/ https://api.braintreegateway.com/ https://www.google.com/recaptcha/; connect-src 'self' https://web-cdn.gamban.com https://id.zopim.com https://www.google-analytics.com https://api.sandbox.braintreegateway.com https://*.cardinalcommerce.com https://client-analytics.sandbox.braintreegateway.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://*.braintree-api.com https://ekr.zdassets.com https://gamban.zendesk.com wss://gamban.zendesk.com wss://*.zopim.com https://www.paypal.com https://api.pwnedpasswords.com https://www.facebook.com https://sentry.gamban.com; font-src 'self' https://web-cdn.gamban.com https://fonts.gstatic.com https://use.typekit.net https://v2.zopim.com data:; 1
object-src 'self'; script-src 'self' https://bbox.blackbaudhosting.com https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.youtube.com https://connect.facebook.net https://www.timevaluecalculators.com https://s.ytimg.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://radiomd.com 'unsafe-inline' 'unsafe-eval' https://woobox.com cdn.calltrk.com *.moatads.com code.jquery.com tags.srv.stackadapt.com *.googleadservices.com *.google-analytics.com *.addthis.com *.addthisedge.com googleads.g.doubleclick.net *.google.com *.clockwisemd.com *.callrail.com *.facebook.com *.bootstrapcdn.com *.tagmanager.google.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://webplus.info https://www.googletagmanager.com https://www.googletagservices.com https://www.google-analytics.com https://*.google.com https://*.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://*.googleadservices.com https://ukrbuy.com https://*.mixmarket.biz https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://vk.com https://connect.ok.ru https://connect.mail.ru https://*.facebook.com https://*.facebook.net https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.mgid.com https://www.chromestatus.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline' https://webplus.info https://www.googletagmanager.com https://www.googletagservices.com https://www.google-analytics.com https://*.google.com https://*.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://*.googleadservices.com https://ukrbuy.com https://*.mixmarket.biz https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://vk.com https://connect.ok.ru https://connect.mail.ru https://*.facebook.com https://*.facebook.net https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.mgid.com https://www.chromestatus.com https://*.doubleclick.net; img-src 'self' https://webplus.info https://www.googletagmanager.com https://www.googletagservices.com https://www.google-analytics.com https://*.google.com https://*.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://*.googleadservices.com https://ukrbuy.com https://*.mixmarket.biz https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://vk.com https://connect.ok.ru https://connect.mail.ru https://*.facebook.com https://*.facebook.net https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.mgid.com https://www.chromestatus.com https://*.doubleclick.net; object-src  'self' https://webplus.info https://www.googletagmanager.com https://www.googletagservices.com https://www.google-analytics.com https://*.google.com https://*.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://*.googleadservices.com https://ukrbuy.com https://*.mixmarket.biz https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://vk.com https://connect.ok.ru https://connect.mail.ru https://*.facebook.com https://*.facebook.net https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.mgid.com https://www.chromestatus.com https://*.doubleclick.net 1
default-src https://www.artandeducation.net; img-src 'self' data: https://images.e-flux-systems.com https://www.artandeducation.net http://interspire.e-flux.com https://www.google-analytics.com; connect-src 'self' data: https://editor.e-flux-systems.com/subscribe; style-src 'self' 'unsafe-inline'; font-src 'self'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com; frame-src https://www.youtube.com https://player.vimeo.com https://players.brightcove.net 1
frame-ancestors https://www.usgacardshop.com http://www.usgacardshop.com http://www.123print.com http://www.brookhollowcards.com http://www.cardsdirect.com https://www.123print.com https://www.brookhollowcards.com https://www.cardsdirect.com http://*.cardsdirect.com https://*.123print.com http://*.123print.com https://*.brookhollowcards.com http://*.brookhollowcards.com; 1
frame-ancestors 'self' https://*.atrapalo.com.co; report-uri /csp/report; 1
default-src 'self' *.googletagmanager.com cdn.centralbankbahamas.com *.vimeo.com; script-src 'self' ajax.googleapis.com ckeditor.iframe.ly maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.centralbankbahamas.com *.gstatic.com *.vimeo.com *.vimeocdn.com *.nr-data.net *.googletagmanager.com 'nonce-5J7u987qjYp25XVh29388B2P8q8Jc445RyFR' 'sha256-qEftYzJkik6f2adAHjEOE/NwtbFFj8BA7z+5iOM/ivk='; style-src 'self' 'unsafe-inline' cdn.centralbankbahamas.com maxcdn.bootstrapcdn.com fonts.gstatic.com cdnjs.cloudflare.com fonts.googleapis.com *.vimeocdn.com *.gstatic.com; img-src 'self' cdn.centralbankbahamas.com www.googletagmanager.com *.gstatic.com www.google-analytics.com; font-src 'self' fonts.gstatic.com fonts.google.com cdn.centralbankbahamas.com; connect-src 'self' *.vimeo.com cdn.centralbankbahamas.com; media-src 'self' *.centralbankbahamas.com; object-src 'self' *.centralbankbahamas.com; child-src 'self' www.youtube.com *.vimeo.com *.vimeocdn.com; frame-src 'self' curawebservices.mindscope.com cdn.centralbankbahamas.com *.youtube.com *.vimeo.com cw.na1.hgncloud.com www.google.com; frame-ancestors 'self' cdn.centralbankbahamas.com *.youtube.com *.vimeo.com cw.na1.hgncloud.com; base-uri 'self' 1
default-src 'self' 'unsafe-inline' https://mc.yandex.ru/ https://*.freshchat.com https://optimize.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.visualwebsiteoptimizer.com https://lighthouse.tezify.com https://userndot.com https://tagmanager.google.com  https://checkout.citruspay.com/ https://checkout-static.citruspay.com https://sboxcheckout-static.citruspay.com/ https://sboxcheckout.citruspay.com/ https://connect.facebook.net https://*.facebook.com https://sentry.io https://*.hotjar.com https://*.zopim.com wss://www.myadvo.in wss://*.zopim.com https://myadvobuck.s3-accelerate.amazonaws.com/ https://d32b5joreyushd.cloudfront.net https://s3.amazonaws.com/myadvobuck/ https://*.googleapis.com https://cdn.datatables.net https://maxcdn.bootstrapcdn.com https://*.gstatic.com https://pushify.com https://*.jquery.com https://*.cloudflare.com https://*.fontawesome.com https://*.facebook.net https://*.ampproject.net blob: ; font-src 'self' 'unsafe-inline' https://*.hotjar.com https://maxcdn.bootstrapcdn.com https://s3.amazonaws.com/myadvobuck/ https://d32b5joreyushd.cloudfront.net https://myadvobuck.s3-accelerate.amazonaws.com https://*.fontawesome.com https://*.zopim.com https://*.gstatic.com https://*.cloudflare.com https://*.alicdn.com data:;img-src 'self' 'unsafe-inline' https://checkout.citruspay.com/ https://*.visualwebsiteoptimizer.com https://checkout-static.citruspay.com https://sboxcheckout.citruspay.com/ https://cdn.datatables.net https://*.ytimg.com https://*.gstatic.com/ https://*.zopim.com https://*.fontawesome.com https://myadvobuck.s3-accelerate.amazonaws.com https://d32b5joreyushd.cloudfront.net https://s3.amazonaws.com/myadvobuck/ https://*.quora.com https://www.google.com https://www.google.co.in https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com/ https://pushify.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.freshchat.com https://*.vwo.com https://*.visualwebsiteoptimizer.com https://cdn.tezify.com https://userndot.com https://checkout.citruspay.com/ https://checkout-static.citruspay.com https://sboxcheckout-static.citruspay.com/ https://sboxcheckout.citruspay.com/ https://cdn.datatables.net https://*.sentry.io https://myadvo.pushify.com https://code.jquery.com https://*.linkedin.com https://pushify.com https://*.gstatic.com https://*.google.com https://ipinfo.io https://*.zopim.com https://*.quora.com https://snap.licdn.com https://*.bootstrapcdn.com https://cdn.ampproject.org https://*.doubleclick.net https://*.fontawesome.com  https://www.youtube.com https://maps.gstatic.com https://*.googleapis.com https://*.google-analytics.com https://s3.amazonaws.com/myadvobuck/ https://d32b5joreyushd.cloudfront.net https://myadvobuck.s3-accelerate.amazonaws.com/ https://connect.facebook.net https://static.hotjar.com https://script.hotjar.com https://www.googletagmanager.com https://www.googleadservices.com https://*.cloudflare.com blob:;frame-src 'self' https://*.freshchat.com https://checkout.citruspay.com/ https://checkout-static.citruspay.com https://sboxcheckout.citruspay.com/ https://*.ampproject.net https://vars.hotjar.com https://*.google.com https://www.youtube.com https://www.googletagmanager.com https://*.facebook.com https://*.doubleclick.net s-static.ak.facebook.com; object-src 'self' 1
frame-ancestors self https://brand.influencity.com 1
default-src 'self' https://www.gstatic.com *.enova.no *.enova.no/* api.enova.no localhost:* localhost:*/* www.youtube.com ssl.google-analytics.com https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net gstatic.com www.gstatic.com https://search.atom.no https://siteimproveanalytics.com https://*.googletagmanager.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.enova.no *.enova.no/* https://www.google-analytics.com localhost:* csi.gstatic.com https://www.gstatic.com gstatic.com www.gstatic.com https://*.adform.net:* https://connect.facebook.net http://www.googletagmanager.com https://www.googletagmanager.com https://tagmanager.google.com https://code.highcharts.com http://siteimproveanalytics.com https://siteimproveanalytics.com http://track.adform.net http://www.google-analytics.com https://*.edialog24.com https://login.edialog24.com https://cdn.polyfill.io https://www.google.com www.youtube.com/ s.ytimg.com https://sjs.bizographics.com https://snap.licdn.com https://js.hs-scripts.com http://js.hs-scripts.com https://js.hs-banner.com https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hsforms.net http://js.hsforms.net http://forms.hsforms.com;object-src 'self' *;style-src 'self' 'unsafe-inline' https://www.gstatic.com fonts.googleapis.com https://*.adform.net:* https://tagmanager.google.com;img-src 'self' * data: https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com www.googletagmanager.com https://ssl.gstatic.com;media-src 'self' *;frame-src 'self' *.doubleclick.net https://app.powerbi.com https://www.youtube.com https://www.facebook.com https://www.googletagmanager.com https://issuu.com https://code.highcharts.com https://js.hscollectedforms.net https://forms.hsforms.com;font-src * data:;connect-src 'self' https://www.google-analytics.com *.enova.no localhost:* http://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.facebook.com https://api.ducky.eco https://forms.hubspot.com https://hubspot-forms-static-embed.s3.amazonaws.com https://forms.hsforms.com;base-uri 'self';child-src 'self' *;form-action 'self' *.enova.no localhost:* www.facebook.com www.anpdm.com https://forms.hsforms.com;frame-ancestors 'self' www.enova.no *.enova.no localhost:* *.doubleclick.net/;plugin-types application/pdf;block-all-mixed-content;report-uri /WebResource.axd?cspReport=true 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.eloqua.com *.en25.com *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.hsforms.net *.timevaluecalculators.com *.twimg.com ajax.aspnetcdn.com apis.google.com cdn.ampproject.org connect.facebook.net hello.myfonts.net https://*.hsforms.com https://*.hsleadflows.net https://*.hubspot.com https://dec.azureedge.net/ https://publish.twitter.com https://s.ytimg.com https://syndication.twitter.com/ https://www.youtube.com/iframe_api js.hs-analytics.net js.hs-scripts.com munchkin.marketo.net platform.linkedin.com platform.twitter.com www.google.com www.googletagmanager.com cdn.userway.org https://*.hotjar.com https://usrwy.com/widget.js https://js.hs-banner.com/3599095.js https://player.vimeo.com/api/player.js https://tags.srv.stackadapt.com/events.js https://js.hscollectedforms.net/collectedforms.js; style-src 'self' 'unsafe-inline' *.timevaluecalculators.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://tags.srv.stackadapt.com/sa.css *.hotjar.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.timevaluecalculators.com *.gstatic.com *.googleapis.com *.google.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com https://*.hubspot.com https://*.hsforms.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com pages.mycfe.com pages.additionfi.com cdn.userway.org/ https://rqfi3tmw.cdn.imgeng.in; media-src 'self' data: blob:; frame-src 'self' https://*.doubleclick.net https://*.hsforms.com https://app.hubspot.com https://vars.hotjar.com/ cdn.userway.org/ https://www.youtube.com/ https://forms.hubspot.com/ https://player.vimeo.com/; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://*.hubspot.com https://*.hsforms.com https://maps.googleapis.com https://api.userway.org/api/tunings/1fJAlvpd8l in.hotjar.com vc.hotjar.io wss://ws2.hotjar.com/ wss://ws6.hotjar.com/api/v1/client/ws https://tags.srv.stackadapt.com/saq_pxl https://tags.srv.stackadapt.com/js_tracking https://tags.srv.stackadapt.com/sa.jpeg https://www.google-analytics.com/j/collect https://stats.g.doubleclick.net/j/collect; object-src 'self'; 1
frame-ancestors https://*.srfax.com/ https://srfax.com 1
frame-ancestors 'self'; base-uri 'self'; default-src https:; font-src https: data:; img-src https: data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 'unsafe-eval'; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.zenaps.com https://www.youtube.com https://wb.messengerpeople.com https://static.criteo.net https://*.criteo.com https://tpc.googlesyndication.com https://*.hotjar.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://ampcid.google.com.tw https://*.sciencebehindecommerce.com https://*.hotjar.com wss://*.hotjar.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://www.myprotein.tw https://m.myprotein.tw https://checkout.myprotein.tw https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.cn https://*.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://*.criteo.com https://static.criteo.net https://s.pinimg.com https://tpc.googlesyndication.com https://remote.captcha.com https://platform.twitter.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.hotjar.com https://*.akamaihd.net https://*.microsofttranslator.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://twitter.com https://*.baidu.com https://sc-static.net https://www.google.com https://*.google.co.uk https://google.co.uk https://static.ads-twitter.com https://analytics.twitter.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
default-src https://www.nic.ir https://static.nic.ir 'unsafe-inline'; img-src *.nic.ir https://webchat.nic.ir:8080 https://trustseal.enamad.ir/ http://trustseal.enamad.ir/; font-src *.nic.ir 1
default-src 'self'; script-src 'self'; connect-src 'self' https://api.deathwing.me https://*.ecency.com https://*.esteem.app https://anyx.io https://api.hive.blog https://api.openhive.network https://api.pharesim.me; img-src 'self' data: https://*.ecency.com; style-src 'self' 'unsafe-inline' ; font-src 'self' data:; frame-src 'self'; object-src 'none' 1
frame-ancestors 'self' https://vk.com https://*.vk.com https://ok.ru https://*.ok.ru 1
default-src 'none'; base-uri 'self' https://*.transloadit.com; img-src 'self' blob:     http://* https://*; style-src 'self' 'unsafe-inline' blob:  https://fonts.googleapis.com  https://unpkg.com  http://maxcdn.bootstrapcdn.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com  https://cdn.ravenjs.com  https://maps.googleapis.com  btn.createsend1.com  https://www.googletagmanager.com  https://dpgnvl2ge5zqm.cloudfront.net  https://code.jquery.com  https://www.opendesk.cc  http://maps.googleapis.com  http://cdn.segment.com https://js.driftt.com https://secure.leadforensics.com http://*.hotjar.com https://*.hotjar.com http://*.adroll.com http://www.googleadservices.com https://googleads.g.doubleclick.net http://www.google-analytics.com http://cdn.mxpnl.com http://connect.facebook.net  https://s.pinimg.com; frame-src 'self' https://www.youtube.com https://btn.createsend1.com https://vars.hotjar.com https://js.driftt.com https://player.vimeo.com; font-src 'self' https://fonts.gstatic.com http://netdna.bootstrapcdn.com http://maxcdn.bootstrapcdn.com; connect-src 'self' http://localhost:9000 https://staging-api.opendesk.cc https://api.opendesk.cc https://www.opendesk.cc  https://*.transloadit.com wss://*.transloadit.com  https://api.segment.io https://api.mixpanel.com https://insights.hotjar.com https://in.hotjar.com  https://www.googleapis.com https://maps.googleapis.com ; object-src 'self' https://staging-api.opendesk.cc https://api.opendesk.cc https://staging-www.opendesk.cc https://www.opendesk.cc; report-uri /__cspreport 1
frame-ancestors 'self' http://search.roccommerce.com http://dev-search.roccommerce.net 1
frame-ancestors https://*.myfamilymobile.com 1
script-src: self 1
default-src https: 'unsafe-inline' 'unsafe-eval', object-src: 'none' 1
frame-ancestors patriotvoices.nationbuilder.com 1
base-uri 'none'; object-src 'none'; script-src https://ubuntu-mate.community/logs/ https://ubuntu-mate.community/sidekiq/ https://ubuntu-mate.community/mini-profiler-resources/ https://ubuntu-mate.community/assets/ https://ubuntu-mate.community/brotli_asset/ https://ubuntu-mate.community/extra-locales/ https://ubuntu-mate.community/highlight-js/ https://ubuntu-mate.community/javascripts/ https://ubuntu-mate.community/plugins/ https://ubuntu-mate.community/theme-javascripts/ https://ubuntu-mate.community/svg-sprite/; worker-src 'self' https://ubuntu-mate.community/assets/ https://ubuntu-mate.community/brotli_asset/ https://ubuntu-mate.community/javascripts/ https://ubuntu-mate.community/plugins/ 1
default-src 'self' *.google-analytics.com *.google.com api.openweathermap.org worldtimeapi.org; 1
default-src 'none'; script-src 'self' http://gis.bmlrt.gv.at.test https://gis.bmlrt.gv.at siteimproveanalytics.com connect.facebook.net graph.facebook.com *.google.com *.gstatic.com 'unsafe-inline' 'unsafe-eval' https://s.ytimg.com https://www.youtube.com; connect-src 'self' *; img-src 'self' blob: data: *.facebook.com *.youtube.com *.twimg.com *.twitter.com *; style-src 'self' http://gis.bmlrt.gv.at.test https://gis.bmlrt.gv.at 'unsafe-inline'; media-src 'self' *.youtube.com; font-src 'self'; object-src 'none'; frame-src 'self' *.bmlfuw.gv.at *.bmnt.gv.at *.bmlrt.gv.at https://app.genial.ly https://tawk.to https://*.youtube.com *.facebook.com https://*.umweltbundesamt.at https://*.laola1.tv https://*.europa.eu https://*.facebook.com https://www.google.com 1
default-src * 'unsafe-inline' 'unsafe-eval' data:; img-src 'self' https://stats.g.doubleclick.net/ https://www.facebook.com/ http://www.google-analytics.com/ https://www.google.ca/ https://www.google.com/ http://www.googletagmanger.com/ https://px.ads.linkedin.com/ https://www.linkedin.com/ https://p.adsymptotic.com/ https://maps.gstatic.com/ https://maps.googleapis.com/ https://camso.co/ https://stage.camso.co/ https://preprod.camso.co/ https://partstreamstg.arinet.com/ https://partstreams.arinet.com/ http://partstreamstg.arinet.com/ https://partstream.arinet.com/ https://cdn.datamanager.arinet.com/ data:; frame-ancestors https://camso.co/ https://preprod.camso.co/ https://stage.camso.co/ http://localhost:4200 https://stage.off-the-road.selector.michelingroup.com/ https://off-the-road.selector.michelingroup.com/ 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com cdn.omise.co *.treasuredata.com *.truck2hand.com *.cloudflare.com *.cloudflareinsights.com *.facebook.net *.google.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.google.co.th *.googlesyndication.com *.g.doubleclick.net *.googleadservices.com *.googletagservices.com *.omise.co;img-src * data: blob: 'unsafe-inline';media-src * data: blob: 'unsafe-inline';block-all-mixed-content;font-src 'self' https: data:;frame-src 'self' cdn.omise.co *.google.com *.facebook.net *.facebook.com *.g.doubleclick.net *.googlesyndication.com *.omise.co;object-src 'none';script-src-attr 'unsafe-inline';style-src 'self' https: 'unsafe-inline';connect-src 'self' data: blob: ws: 'unsafe-inline' *.google-analytics.com *.g.doubleclick.net *.treasuredata.com *.facebook.com *.facebook.net *.truck2hand.com *.cloudflare.com *.cloudflareinsights.com *.google.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.google.co.th *.googlesyndication.com *.g.doubleclick.net *.googleadservices.com *.googletagservices.com *.omise.co;upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://stats.bitonic.nl; style-src 'self' 'unsafe-inline'; img-src data: * blob:; connect-src 'self'; font-src data: 'self'; media-src 'self'; child-src 'self' https://youtube.com https://www.youtube.com; object-src 'self' blob:; report-uri /csp-failure-report 1
style-src * blob: 'unsafe-inline'; img-src * data: 'unsafe-inline'; font-src * data: 'unsafe-inline'; media-src * data: 'unsafe-inline';connect-src * ws: wss:; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://script.hotjar.com https://static.hotjar.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com https://kit.fontawesome.com https://tagmanager.google.com https://www.google.com/recaptcha/api.js https://portalapi.noodlefactory.ai https://widget.noodlefactory.ai; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data: https://ka-f.fontawesome.com https://fonts.googleapis.com; media-src 'self' https: 1
default-src 'self' *.ridgid.com *.ridgid.cn https://*.ridgidapps.com https://*.maxmind.com https://*.cybersource.com wss://mpsnare.iesnare.com https://mpsnare.iesnare.com https://*.bazaarvoice.com https://in.hotjar.com https://vc.hotjar.io www.google-analytics.com bat.bing.com www.facebook.com https://mc.yandex.ru s.union.360.cn hm.baidu.com www.google.com stats.g.doubleclick.net data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ridgid.com *.ridgid.cn *.youku.com http://static.bshare.cn/b/bshareC0.js http://static.bshare.cn/b/buttonLite.js http://static.bshare.cn/b/components/bsStatic.js https://seal.websecurity.norton.com maps.google.com *.googleapis.com www.googletagmanager.com *.pricespider.com https://mpsnare.iesnare.com cdnjs.cloudflare.com www.googleadservices.com https://*.bootstrapcdn.com https://*.bazaarvoice.com connect.facebook.net www.google-analytics.com https://googleads.g.doubleclick.net https://ridgidhqchat.custhelp.com https://www.rnengage.com www.youtube.com https://s.ytimg.com bat.bing.com js.adsrvr.org *.hotjar.com https://*.ridgidapps.com https://*.coremetrics.com www.google.com 360fenxi.mediav.com static.bshare.cn s.union.360.cn hm.baidu.com bshare.optimix.cn e.so.com https://www.gstatic.com https://s.yimg.jp https://b92.yahoo.co.jp https://mc.yandex.ru https://vk.com https://ridgidhqchat.widget.custhelp.com https://tagmanager.google.com https://tpc.googlesyndication.com https://img.en25.com blob:;style-src 'self' 'unsafe-inline' *.ridgid.com *.ridgid.cn *.googleapis.com *.youku.com https://cloud.typography.com https://ridgidhqchat.widget.custhelp.com https://*.bazaarvoice.com https://*.bootstrapcdn.com https://*.pricespider.com https://tagmanager.google.com;img-src 'self' *.ridgid.com *.ridgid.cn www.google-analytics.com *.youtube.com www.googletagmanager.com static.bshare.cn s.union.360.cn pixel-a.basis.net https: data: blob:;frame-src 'self' *.ridgid.com *.ridgid.cn *.youku.com pixel-a.basis.net www.youtube.com https://bid.g.doubleclick.net https://pixel.sitescout.com https://*.bazaarvoice.com https://www.facebook.com https://orchardproject.net https://www.orchardproject.net https://www.orchardcore.net https://*.cybersource.com insight.adsrvr.org match.adsrvr.org https://vars.hotjar.com 360fenxi.mediav.com s.union.360.cn static.bshare.cn www.google.com www.googletagmanager.com https://*.fls.doubleclick.net https://tpc.googlesyndication.com data:;font-src 'self' *.ridgid.com *.ridgid.cn fonts.gstatic.com https://cloud.typography.com https://fonts.googleapis.com https://*.bootstrapcdn.com greenlee.com data: 1
default-src *  ;report-uri /xp/CSPReport.ashx  ;script-src * 'unsafe-inline' 'unsafe-eval' data: about:  ;style-src * 'unsafe-inline'  ;connect-src * blob:  ;font-src * data:  ;object-src *  ;img-src * data: blob:  ;media-src * blob:  ;frame-src * data: gsa: ajaxhandler:  ;child-src * blob:  ;worker-src * blob:  ;form-action * javascript:  ;frame-ancestors 'self' 1
frame-ancestors 'self' *.amstelveen.nl 1
frame-ancestors 'self' *.iuk.edu *.iu.edu *.indiana.edu; 1
report-uri https://fargond.gov/csp-report ; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.fargond.gov *.cityoffargo.com translate.googleapis.com ajax.googleapis.com *.googleapis.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com translate.google.com www.google-analytics.com www.google.com *.gstatic.com www.youtube.com i.ytimg.com *.ggpht.com js.arcgis.com static.arcgis.com server.arcgisonline.com services.arcgisonline.com connect.facebook.net *.facebook.com platform.twitter.com syndication.twitter.com *.fbcdn.net *.twimg.com api.cablecast.tv data: blob: 1
font-src 'self' data: *.typekit.net *.gstatic.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googletagmanager.com *.licdn.com *.leadexpress.nl *.hsforms.net *.hsforms.com *.googleadservices.com *.hs-scripts.com *.hs-analytics.net *.hsleadflows.net *.usemessages.com *.doubleclick.net *.hscollectedforms.net *.linkedin.com *.google-analytics.com *.typekit.net *.cloudfront.net blob: *.bizographics.com *.googleapis.com *.hsadspixel.net *.elfsight.com *.hs-banner.com *.google.com *.gstatic.com *.cloudflare.com; style-src 'self' 'unsafe-inline' *.cloudfront.net *.googleapis.com; img-src 'self' data: *.hsforms.com *.leadexpress.nl *.google.com *.google.nl *.hubspot.com *.google-analytics.com *.doubleclick.net *.typekit.net *.w.org *.friss.com *.cloudfront.net *.gstatic.com *.googleapis.com *.cdninstagram.com *.linkedin.com *.fbcdn.net; default-src 'self' chatroulette.com 'self' vimeo.com *.vimeo.com *.hubspot.com *.hs-banner.com *.youtube.com *.typekit.net *.yoast.com *.cloudfront.net *.luckyorange.net wss://visitors.live wss://*.visitors.live *.googleapis.com *.recruitee.com *.youtube-nocookie.com *.hsforms.com *.hubapi.com *.instacloud.io *.google-analytics.com *.elfsight.com *.spotify.com *.doubleclick.net elfsight.ticksy.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.market.yandex.ru cdnjs.cloudflare.com https://mc.yandex.ru an.yandex.ru https://use.fontawesome.com *.googlesyndication.com *.hypercomments.com code.jquery.com https://yastatic.net cdn.ckeditor.com https://adservice.google.ru https://adservice.google.com https://*.googleadservices.com https://www.googletagservices.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://code.highcharts.com; font-src 'self' https://yastatic.net data: https://use.fontawesome.com cdnjs.cloudflare.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://use.fontawesome.com *.hypercomments.com cdnjs.cloudflare.com https://yastatic.net https://cdn.datatables.net cdn.ckeditor.com; img-src 'self' https://ysa-static.passport.yandex.ru data: https://*.yandex.ru https://*.yandex.net https://*.googlesyndication.com https://mzimg.com https://www.google-analytics.com https://stats.g.doubleclick.net https://info.price.nadavi.ru cdn.ckeditor.com www.gstatic.com https://info.price.nadavi.com.ua https://ad.doubleclick.net https://tns-counter.ru https://yastatic.net https://mc.admetrica.ru https://www.googletagmanager.com; connect-src 'self' https://mc.yandex.ru an.yandex.ru https://yandex.ru/clck/click https://*.googlesyndication.com https://*.google-analytics.com https://*.market.yandex.ru https://stats.g.doubleclick.net https://csi.gstatic.com; object-src 'self' *.youtube.com; frame-src 'self' *.youtube.com https://googleads.g.doubleclick.net https://mc.yandex.md https://*.googlesyndication.com https://*.market.yandex.ru https://yastatic.net https://www.google.com https://mc.yandex.ru https://pagead2.googlesyndication.com 1
default-src 'self'; script-src 'self' *.agreementexpress.net *.globalmpos.ca *.globalmpos.co.uk *.recombo.com *.gstatic.com 'unsafe-inline' 'unsafe-eval'; style-src 'self'  *.agreementexpress.net *.globalmpos.ca *.globalmpos.co.uk *.recombo.com *.googleapis.com *.gstatic.com 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss: ; report-uri /csprep.jsp 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.kalibrr.com *.getlinks.com *.zendesk.com https://static.zdassets.com https://ekr.zdassets.com *.zopim.com appleid.cdn-apple.com connect.facebook.net *.facebook.com www.googleadservices.com www.google-analytics.com ssl.google-analytics.com d36lvucg9kzous.cloudfront.net s1.webspellchecker.net js.stripe.com www.googletagmanager.com *.inspectlet.com *.googleapis.com *.newrelic.com *.nr-data.net platform.twitter.com static.ads-twitter.com apis.google.com ajax.cloudflare.com tagmanager.google.com analytics.twitter.com analytics.trovit.com *.effectivemeasure.net jscdn.appier.net track.adform.net cdn.ckeditor.com https://optimize.google.com; form-action 'self'; frame-src 'self' https://staticxx.facebook.com https://web.facebook.com https://accounts.google.com https://www.facebook.com https://docs.google.com https://www.youtube.com https://www.google.com https://optimize.google.com; frame-ancestors http://careers.aboitiz.com https://careers.aboitiz.com https://careers-uat.aboitiz.com http://citysavings.com.ph https://citysavings.com.ph; 1
default-src https:; font-src 'self' https: data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; 1
default-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' https://distributor.51degrees.com/ https://devicedatasubmissions.azurewebsites.net/api/Submit;font-src 'self';img-src 'self' data: http://images.51degrees.mobi https://51degrees.cachefly.net;frame-src 'self' 1
default-src https: 'unsafe-inline' 'unsafe-eval' blob:; img-src https: data:; connect-src https: wss:; font-src https: data:; 1
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=index&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=1d5958bc-9ee5-4387-aada-af0dbdda4dcf 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn-ru.bitrix24.ru collector.roistat.com cloud.roistat.com cdn.paddle.com www.gstatic.com static.filestackapi.com  webchat.missiveapp.com  ct.capterra.com vk.com  connect.facebook.net wchat.freshchat.com serve.albacross.com passwork.bitrix24.ru stats.g.doubleclick.net www.google.com checkout.stripe.com js.stripe.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com mc.yandex.ru integrations.missiveapp.com code.jquery.com; connect-src 'self' 'unsafe-inline' stats.g.doubleclick.net google-analytics.com www.google-analytics.com s3.amazonaws.com *.s3.amazonaws.com *.filestackapi.com mc.yandex.ru collect.albacross.com passwork.bitrix24.ru checkout.stripe.com blob:; img-src * data: blob:; style-src 'self' 'unsafe-inline' cloud.roistat.com cdn.paddle.com static.filestackapi.com fonts.googleapis.com wchat.freshchat.com integrations.missiveapp.com; font-src 'self' fonts.gstatic.com passwork.bitrix24.ru data:; frame-src 'self' cloud.roistat.com checkout.paddle.com create-checkout.paddle.com *.paddle.com webchat.missiveapp.com staticxx.facebook.com  www.facebook.com  wchat.freshchat.com passwork.webpush.freshchat.com passwork.bitrix24.ru checkout.stripe.com js.stripe.com www.google.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.kohler.com.cn *.jiathis.com http://assets.adobedtm.com  https://assets.adobedtm.com *.baidu.com solution.comm100.cn survey.122.2o7.net *.scene7.com *.bdimg.com  *.bdimg.com *.jiathis.com https://*.kohler.com.cn http://*.kohler.com.cn https://*.kohler.com http://*.kohler.com *.adobedtm.com www.google-analytics.com *.fugetech.com *.gridsumdissector.com *.webdissector.com *.allyes.com.cn *.aiodt.com 114.80.179.250 *.polyv.net  data: *.videocc.net  blob: ai.glor.cn *.cnzz.com cnzz.mmstat.com *.iperceptions.com *.glor.cn *.kohler.com consent.trustarc.com *.googletagmanager.com https://kohlermetricssecure.kohler.com *.scene7.com https://www.kohler.com/corporate/include-consent-banner.js https://www.google-analytics.com/analytics.js https://1.aiodt.com/ainsight.js; 1
script-src 'report-sample' 'nonce-xS3/VcDkzUGLVYT5RjtUzg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri https://csp.withgoogle.com/csp/corplogin/1 1
report-uri https://company.softing.com; base-uri https://company.softing.com; object-src 'none'; frame-ancestors 'self'; 1
object-src 'none'; frame-ancestors 'self' 1
default-src 'self'; connect-src 'self' piwik.micropayment.de wss://*.zopim.com *.zdassets.com; img-src 'self' 'unsafe-inline' data: pci.usd.de piwik.micropayment.de resources.micropayment.de *.zopim.com; style-src 'self' 'unsafe-inline' https://netdna.bootstrapcdn.com; script-src 'self' 'unsafe-inline' ajax.googleapis.com oss.maxcdn.com piwik.micropayment.de 'unsafe-eval' *.zopim.com *.zdassets.com; font-src 'self' data: *.zopim.com; child-src 'self' piwik.micropayment.de *.micropayment.de *.youtube.com micropayment.softgarden.io; frame-src 'self' piwik.micropayment.de *.micropayment.de *.youtube.com micropayment.softgarden.io; frame-ancestors 'self' https://www.facebook.com/micropayment.GmbH 1
default-src 'self'; script-src 'self' * 'unsafe-inline' 'unsafe-eval'; style-src 'self' * 'unsafe-inline'; img-src 'self' * data: ; font-src 'self' *; frame-src 'self' *; connect-src *; media-src * 1
frame-src blob: *.vimeo.com *.turecibo.com *.turecibo.com.ar *.youtube.com *.google.com *.hotjar.com *.helphero.co ; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://dap.digitalgov.gov https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.google-analytics.com *.tile.openstreetmap.org https://maps.gstatic.com https://maps.googleapis.com; frame-ancestors 'none'; frame-src https://www.youtube.com https://www.google.com/; 1
frame-ancestors https://explore.particle.io 1
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' media-src blob: https://fast.wistia.net/ 1
default-src 'self'; child-src 'self' *.youtube.com *.issuu.com https://*.genkgo.com; connect-src 'self' https://*.genkgo.com; font-src 'self' *.myfonts.net https://*.genkgo.com 'unsafe-inline'; img-src 'self' https://* https://*.genkgo.com data:; media-src 'self' https://*.genkgo.com; script-src 'self' *.googletagmanager.com *.google-analytics.com *.facebook.net https://*.genkgo.com 'unsafe-inline'; style-src 'self' *.myfonts.net https://*.genkgo.com 'unsafe-inline'; report-uri https://faector.nl/f/error-report/report/csp; upgrade-insecure-requests 1
script-src 'self' *.zhaoliying.org discuz.gtimg.cn *.cnzz.com *.comsenz.com *.discuz.net *.qq.com *.baidu.com *.bdstatic.com *.google.com apps.bdimg.com *.sogou.com  *.so.com 'unsafe-eval' 'unsafe-inline' 1
default-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' https://www.google-analytics.com data:; connect-src 'self' https://www.google-analytics.com; img-src 'self' https://www.google-analytics.com data:; report-uri https://hpbn.report-uri.io/r/default/csp/enforce 1
default-src https: data:;script-src https: 'unsafe-eval' 'unsafe-inline';style-src https: 'unsafe-eval' 'unsafe-inline'; 1
default-src 'unsafe-inline' https:; connect-src https: wss:; frame-ancestors 'self' http://webvisor.com; img-src data: https:; frame-src 'self' http://webvisor.com https://fortesza-live.s3.amazonaws.com https://fortesza-private.s3.amazonaws.com https://docs.google.com https://www.facebook.com https://player.vimeo.com; font-src https: data:; 1
default-src 'self' *.videoglaz.ru data: ws: https: http: 'unsafe-inline' yandex.ru mc.yandex.ru yastatic.net 'unsafe-eval' *.comagic.ru *.reenter.ru *.mneniya.pro *.gravatar.com *.retailrocket.ru *.retailrocket.net *.wp.com *.google-analytics.com *.googleapis.com reformal.ru *.reformal.ru *.googleadservices.com *.gstatic.com *.callbackhunter.com *.jquery.com *.yadro.ru www.youtube.com *.youtube.com *.wep.wf 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://staticxx.facebook.com https://www.facebook.com https://checkout.stripe.com https://js.stripe.com https://www.youtube.com https://www.google.com https://www.google-analytics.com https://web.facebook.com https://static-v.tawk.to https://*.tawk.to wss://*.tawk.to https://s3.amazonaws.com/cdn.outfy.com/ https://videos.outfy.com/ https://*.canva.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com/ https://connect.facebook.net https://code.jquery.com https://embed.tawk.to https://static-v.tawk.to https://html5shiv.googlecode.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://checkout.stripe.com https://js.stripe.com https://www.google.com https://maxcdn.bootstrapcdn.com https://www.gstatic.com https://static.ads-twitter.com https://cdn.jsdelivr.net https://analytics.twitter.com https://vjs.zencdn.net https://www.paypal.com https://sdk.canva.com/designbutton/v2/api.js; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://code.jquery.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://vjs.zencdn.net https://sdk.canva.com/designbutton/v2/api.css; img-src * 'self' data:; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://static-v.tawk.to; worker-src blob:; frame-ancestors * 'self' https://*.mybigcommerce.com https://*.jumpseller.com https://www.canva.com; 1
default-src 'self';      frame-src 'self' https://bid.g.doubleclick.net;      connect-src 'self' stats.g.doubleclick.net www.google-analytics.com;      script-src 'self' 'sha256-O6ZRmgRweXzrX64yEnpzFNH/xGKDlQaBzZC8QqmpqB4=' 'sha256-/GOtgN+5End4eDdNnhZK0eAdjbGxWndgGTQxYU41Eb4=' 'sha256-QIPOrinXzql7QQDm4EI96vDWlprbtMCglofEzpwx57A=' 'sha256-Y1WWZF4Z7/0/NtqKO8BZZIxvrCdqtLS14dAcwFUk2nI=' 'sha256-3xSNS0unVv7UgzQS9GfGz5rVN9SikgPFNwdnFU2ng/c=' 'sha256-hIr0RAz09ipK/DTyz5bzz2sF3oOgIZzn4N8Zs0KoeyY=' 'sha256-N/mnhCCRTp69zcVi6tyFkiK1jMR3SyVbAKIBZhqYqLM=' 'sha256-t6oewASd7J1vBg5mQtX4hl8bg8FeegYFM3scKLIhYUc=' 'sha256-+Ll0mal9Cox7xfaCkou+Hgr8C2XDHCT8cxz1Rje1cGU=' 'sha256-OExLqgZWEu/+39cK0JsSdwX5b/mtTYaRJHqtBYXiUmU=' 'sha256-QK/9S4bj+jMBDUXDwkGX8q8RpzccZfCvoWTyZTTwldU=' 'sha256-9MIdnUjUYl7UgKovj4JCHXxHQtClDq3y6QuTwr7Ubpk=' 'sha256-RS4rShTjz7L+edZOpaPg9k08SIx/xJGhOodWAnbwj5Q=' 'sha256-lvIZYGqfa7z5TQKvGTdPlXxGLpsGn7B0rNlIGlht/XU=' 'sha256-zV1BqS8I7/V+3awnGMJfL80lnHhnh3dxSS9hDMsUYag=' 'sha256-EaoK0FWDIOmcjODbDMptOrg/Sf5eHCiw3+HqryHliUo=' 'sha256-/IfAvllvI5MsDuo5mBsAwLWIJbvA5KUqldi+AnZdzi0=' 'sha256-mix5S7Ch10I0q1QYqwrJK7tXv5tkn1bzz7xk3SALKs0=' 'sha256-ELKW0GB2Mmq5yuDRmJbOq4g0NT4en07oEJbN3NexMDs=' 'sha256-zkl5Svk58/b2TZd8wzUHxsMUETZ5TEcBf3nF0/D9gV8=' 'sha256-hYntB00y92pBsYtA6+kCdTcypFzZN8DVaxvKgeti6iE=' 'sha256-OgNTrctQcaMEAd8IEWKlirdo7Dpq3jttjoG+gjESukM=' 'sha256-M6QXUF7x9UrVwMVGvoVkCgmABquHWM5g7byudY2dcKU=' 'sha256-w7O01Kb2uZQacdlHAauWofLLptfhBf0HOy8rv4m7Jl8=' 'sha256-PUS1L35+AfcTIzXbg2Ei9eT9yRrU9ftgo5n7y0HsUcg=' connect.facebook.net www.google-analytics.com https://www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net;      style-src 'self' 'unsafe-hashes' 'sha256-+gmaXNO6wJokBTzsLcfDGGcBiF1B06FAdO7hs7bei70=' 'sha256-2+dS+n9Pah47gYjmchfaYD5g/iEbiyoAg7SGmiJtn0Y=' 'sha256-MMkTse23qF9JXmrpSSBnRFDAqCW6r8/mZAqodWgkO1s=' 'sha256-41fwFd4zc4wPj/WiAzytE4iCAwAI8MGsK7ET4x5fpAM=' 'sha256-MMkTse23qF9JXmrpSSBnRFDAqCW6r8/mZAqodWgkO1s=' 'sha256-P5csyJIkJv6jzAPy6DiSRLL8o5IjkZmAa7th9nFojIc=' 'sha256-nXUIEXlGHvH0KljAMoaDJ0htRZuy5qCHpjtdd65DBQE=' 'sha256-WYj58VV+0SGJfLN6Gd6NtRmy91ZjMdArGJkrKnQ51HM=' 'sha256-2+dS+n9Pah47gYjmchfaYD5g/iEbiyoAg7SGmiJtn0Y=' 'sha256-MMkTse23qF9JXmrpSSBnRFDAqCW6r8/mZAqodWgkO1s=' 'sha256-2+dS+n9Pah47gYjmchfaYD5g/iEbiyoAg7SGmiJtn0Y=' 'sha256-biLFinpqYMtWHmXfkA1BPeCY0/fNt46SAZ+BBk5YUog=' 'sha256-0EZqoz+oBhx7gF4nvY2bSqoGyy4zLjNF+SDQXGp/ZrY=' 'sha256-eIUqgPTKhr3+WsA7FtEp+r8ITeTom+YQ/XO6GMvUtjc=' 'sha256-H4KmcEhN9yg750sh4MD/fEXwKxXtI/rcN5V7DqLY1Mk=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-t6oewASd7J1vBg5mQtX4hl8bg8FeegYFM3scKLIhYUc=' fonts.googleapis.com fonts.gstatic.com;      img-src 'self' stats.g.doubleclick.net www.google-analytics.com www.facebook.com www.google.com www.google.com.br;     font-src 'self' fonts.gstatic.com use.typekit.net; object-src 'none'; form-action 'self' 1
frame-ancestors teams.microsoft.com *.teams.microsoft.com *.skype.com 1
img-src 'self' data: https: http: *.w3.org *.trustedshops.com cdnjs.cloudflare.com s3-eu-west-1.amazonaws.com track.adform.net *.google.com *.gstatic.com *.googleapis.com *.gstatic.com;font-src 'self' data: https: http: *.w3.org fonts.evn.at netdna.bootstrapcdn.com *.trustedshops.com *.google.com *.gstatic.com *.googleapis.com *.gstatic.com 1
frame-ancestors *.bexplus.com *.google.com *.baidu.com 1
frame-ancestors 'self'; frame-src cdn.dhakalive.tv  *.youtube-nocookie.com  youtube-nocookie.com youtu.be  youtube.com  *.youtube.com *.cloudfront.net chat-frontend.dw2020.sugerpuff.com; 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://howwegettonext.com https://*.howwegettonext.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self' *.hsforms.net *.hsforms.com js.hs-scripts.com js.hscollectedforms.net js.hs-analytics.net forms.hubspot.com js.hs-banner.com *.braintree-api.com *.braintreegateway.com *.surveygizmo.com *.zopim.com *.zendesk.com *.zdassets.com *.nexuspublications.com.au nexuspublications.com.au *.barilliance.com *.barilliance.net *.data-dynamic.net fonts.gstatic.com *.google-analytics.com *.googleadservices.com *.youtube.com *.doubleclick.net *.googlevideo.com *.googleapis.com maps.google.com www.google.com *.go-mpulse.net *.hana.ondemand.com *.akstat.io *.surveysandforms.com *.dotmailer-surveys.com *.smartsheet.com *.googletagmanager.com *.bigredsky.com *.fxdms.net assets.adobedtm.com dpm.demdex.net blackwoods.demdex.net *.tt.omtrdc.net; style-src *.hsforms.net *.hsforms.com js.hs-scripts.com js.hscollectedforms.net js.hs-analytics.net forms.hubspot.com js.hs-banner.com *.braintree-api.com *.braintreegateway.com *.surveygizmo.com *.zopim.com *.zendesk.com *.zdassets.com *.nexuspublications.com.au nexuspublications.com.au *.barilliance.com *.barilliance.net *.data-dynamic.net *.amazonaws.com *.cloudflare.com *.googleapis.com *.gstatic.com *.google.com 'self' 'unsafe-inline' assets.adobedtm.com dpm.demdex.net blackwoods.demdex.net *.tt.omtrdc.net; script-src 'self' *.hsforms.net *.hsforms.com js.hs-scripts.com js.hscollectedforms.net js.hs-analytics.net forms.hubspot.com js.hs-banner.com *.braintree-api.com *.braintreegateway.com *.surveygizmo.com *.zopim.com *.zendesk.com *.zdassets.com *.nexuspublications.com.au nexuspublications.com.au *.zdassets.com *.barilliance.com *.barilliance.net *.data-dynamic.net www.google.com *.googletagmanager.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.gstatic.com *.go-mpulse.net *.hana.ondemand.com *.akstat.io *.dotmailer-surveys.com *.cloudflare.com *.bigredsky.com *.fxdms.net *.dotdigital.com *.hotjar.com *.google.com *.bing.com *.doubleclick.net *.google.com 'unsafe-inline' 'unsafe-eval' assets.adobedtm.com dpm.demdex.net blackwoods.demdex.net *.tt.omtrdc.net;img-src *.hsforms.net *.hsforms.com js.hs-scripts.com js.hscollectedforms.net js.hs-analytics.net forms.hubspot.com js.hs-banner.com *.braintree-api.com *.braintreegateway.com *.surveygizmo.com *.zopim.com *.zendesk.com *.zdassets.com *.nexuspublications.com.au nexuspublications.com.au *.smartsheet.com *.google.com *.google-analytics.com * data: 'unsafe-inline' assets.adobedtm.com dpm.demdex.net blackwoods.demdex.net *.tt.omtrdc.net; media-src *.hsforms.net *.hsforms.com js.hs-scripts.com js.hscollectedforms.net js.hs-analytics.net forms.hubspot.com js.hs-banner.com *.braintree-api.com *.braintreegateway.com *.surveygizmo.com *.zopim.com *.zendesk.com *.zdassets.com *.nexuspublications.com.au nexuspublications.com.au *.barilliance.com *.barilliance.net *.data-dynamic.net *.blob: assets.adobedtm.com dpm.demdex.net blackwoods.demdex.net *.tt.omtrdc.net ; frame-src 'self' *.hsforms.net *.hsforms.com js.hs-scripts.com js.hscollectedforms.net js.hs-analytics.net forms.hubspot.com js.hs-banner.com *.braintree-api.com *.braintreegateway.com  *.surveygizmo.com *.zopim.com *.zendesk.com *.zdassets.com *.nexuspublications.com.au nexuspublications.com.au *.barilliance.com *.barilliance.net *.data-dynamic.net *.hana.ondemand.com wss://*.hotjar.com *.hotjar.com *.google.com *.youtube.com *.dotmailer-surveys.com *.surveysandforms.com *.smartsheet.com *.googletagmanager.com *.bigredsky.com *.fxdms.net assets.adobedtm.com dpm.demdex.net blackwoods.demdex.net *.tt.omtrdc.net; connect-src 'self' *.hsforms.net *.hsforms.com js.hs-scripts.com js.hscollectedforms.net js.hs-analytics.net forms.hubspot.com js.hs-banner.com *.braintree-api.com *.braintreegateway.com *.surveygizmo.com *.zopim.com *.zendesk.com *.zdassets.com *.nexuspublications.com.au nexuspublications.com.au *.zendesk.com *.zdassets.com *.barilliance.com *.barilliance.net *.data-dynamic.net wss://*.hotjar.com *.hotjar.com *.hotjar.io *.go-mpulse.net *.akstat.io *.google-analytics.com *.googleadservices.com *.akamaihd.net *.googlevideo.com *.doubleclick.net *.hana.ondemand.com assets.adobedtm.com dpm.demdex.net blackwoods.demdex.net *.tt.omtrdc.net ; font-src 'self' *.hsforms.net *.hsforms.com js.hs-scripts.com js.hscollectedforms.net js.hs-analytics.net forms.hubspot.com js.hs-banner.com *.braintree-api.com *.braintreegateway.com *.surveygizmo.com *.zopim.com *.zendesk.com *.zdassets.com *.nexuspublications.com.au nexuspublications.com.au *.barilliance.com *.barilliance.net *.data-dynamic.net *.gstatic.com assets.adobedtm.com dpm.demdex.net blackwoods.demdex.net *.tt.omtrdc.net ;  child-src 'self' *.hsforms.net *.hsforms.com js.hs-scripts.com js.hscollectedforms.net js.hs-analytics.net forms.hubspot.com js.hs-banner.com *.braintree-api.com *.braintreegateway.com *.surveygizmo.com *.zopim.com *.zendesk.com *.zdassets.com *.nexuspublications.com.au nexuspublications.com.au assets.adobedtm.com dpm.demdex.net blackwoods.demdex.net *.tt.omtrdc.net; 1
default-src 'self' https://*.paypal.com https://*.paypalobjects.com; script-src 'nonce-S1kkIMA8M6OG+EJ6Wko/MB4XUYi0UACJXLF5wb+vdjXo9wCI' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; img-src 'self' https:; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; object-src 'none'; block-all-mixed-content;; report-uri https://www.paypal.com/csplog/api/log/csp 1
default-src 'self'; frame-ancestors 'self'; connect-src https://*;frame-src https://*; img-src https://*; style-src 'self' 'unsafe-inline' ajax.googleapis.com code.jquery.com https://*; font-src 'self' data: fonts.gstatic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com https://*;form-action 'self' 1
default-src 'self' wogadobeanalytics.sc.omtrdc.net dpm.demdex.net *.cwp-stg.sg *.cwp.sg; script-src 'self' https://assets.dcube.cloud/datalayer.min.js https://assets.dcube.cloud/sentiments/sentiments.esm.js https://assets.dcube.cloud/snowplow/2.10.2/sp.js https://d24s38jd6z1bka.cloudfront.net https://assets.dcube.cloud/scripts/wogaa.js https://www.google-analytics.com 'unsafe-inline' https://optimize.google.com 'unsafe-inline' https://ssl.google-analytics.com https://www.googletagmanager.com https://optimize.google.com https://staticxx.facebook.com https://static.xx.fbcdn.net https://connect.facebook.net https://cse.google.com https://*.wogaa.sg https://s7.addthis.com https://assets.adobedtm.com https://www.google.com https://platform.twitter.com https://api.instagram.com https://cdn.syndication.twimg.com http://ajax.googleapis.com https://www.gstatic.com 'unsafe-inline' 'unsafe-eval'; object-src 'self'; style-src 'self' https://optimize.google.com https://fonts.googleapis.com 'unsafe-inline' https://ton.twimg.com https://fonts.googleapis.com/ https://*.cloudfront.net https://*.wogaa.sg https://cdnjs.cloudflare.com https://www.google.com https://platform.twitter.com *.cwp-stg.sg *.cwp.sg 'unsafe-inline'; img-src 'self'  https://optimize.google.com https://*.google-analytics.com https://*.google.com https://wogadobeanalytics.sc.omtrdc.net https://*.xx.fbcdn.net https://*.fbcdn.net https://www.facebook.com https://*.youtube.com data:; media-src *; frame-src 'self' https://forms.cwp.gov.sg https://www.onemap.sg https://www.onlineexambuilder.com https://optimize.google.com https://wogaa.demdex.net/ https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://staticxx.facebook.com https://web.facebook.com https://syndication.twitter.com https://platform.twitter.com https://www.facebook.com https://online.fliphtml5.com/ *.cwp-stg.sg *.cwp.sg; font-src * https://fonts.gstatic.com  data:; connect-src 'self' https://www.google-analytics.com https://s7.addthis.com https://*.wogaa.sg https://wogadobeanalytics.sc.omtrdc.net https://dpm.demdex.net/ https://snowplow.dcube.cloud/com.snowplowanalytics.snowplow/tp2 https://stats.g.doubleclick.net/ *.cwp-stg.sg *.cwp.sg; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: http://c.statcounter.com 1
frame-ancestors 'self' http://www.philips.com.my *.philips.com *.philips.com.my 1
frame-ancestors http://www.Social27.com https://www.Social27.com 'self'; 1
frame-ancestors 'self' www.google.com; 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-NGI3NjVjZjctODIwYi00ZTk1LTk4MDUtZWI5MTFlMGFjNmE5'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://fonts.gstatic.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://ajax.googleapis.com https://ifsc.razorpay.com; 1
img-src * blob: data:;              media-src 'self' blob:;              worker-src 'self' 'unsafe-eval' blob:;              object-src 'none';         script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com *.facebook.net *.hotjar.com polyfill.io *.viostream.com ssl.p.jwpcdn.com www.googletagmanager.com https://tagmanager.google.com cdnjs.cloudflare.com www.google-analytics.com https://www.google.com  https://www.gstatic.com https://maxcdn.bootstrapcdn.com blob:;             default-src 'unsafe-inline' 'unsafe-eval' 'self' uat-sso.esa.edu.au sso.esa.edu.au https://www.google.com www.google-analytics.com *.hotjar.com vc.hotjar.io static.cloudflareinsights.com *.viostream.com www.youtube.com fonts.gstatic.com *.fontawesome.com https://maxcdn.bootstrapcdn.com https://tagmanager.google.com https://g.jwpsrv.com cdnjs.cloudflare.com fonts.googleapis.com  ajax.googleapis.com *.facebook.net www.googletagmanager.com www.gstatic.com http://ssl.p.jwpcdn.com https://stats.g.doubleclick.net blob: data:; 1
default-src * 'unsafe-inline' ; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src *; img-src * 'unsafe-inline' data: blob: https:; style-src * 'unsafe-inline'; font-src * 'unsafe-inline' 'unsafe-eval' 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://*.idsdoc.com https://idsdoc.com https://localhost:*;connect-src 'self' https://*.idsdoc.com:* https://idsdoc.com:* wss://*.idsdoc.com:* wss://idsdoc.com:* wss://localhost:* https://localhost:*;style-src 'self' 'unsafe-inline';img-src 'self' https://www.google-analytics.com; 1
script-src 'unsafe-inline' 'unsafe-eval' https: http: 1
default-src 'self' maps.googleapis.com maps.gstatic.com www.handy-signatur.at; child-src 'self' labs.a-trust.at www.e-tresor.at www.youtube.com www.handy-signatur.at www.google.com; connect-src 'self' www.e-tresor.at www.handy-signatur.at; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.handy-signatur.at maps.googleapis.com; font-src 'self'; 1
default-src https:;media-src 'self' www.wellsfargomedia.com www.wellsfargo.com;font-src 'self' data: stm-connect.secure.evetest.wellsfargo.com:23621;frame-src 'self' ciaanalytics.wellsfargo.com connect.secure.wellsfargo.com www.bing.com wifp.wellsfargo.com wifp.ceo.wellsfargo.com;style-src 'unsafe-inline' 'self' wca.sec.wellsfargo.com www.bing.com www.wellsfargo.com ceomedia.wf.com;base-uri 'self';report-uri /reporting/csp;frame-ancestors 'none';script-src 'self' 'nonce-3fcfa4aaca84ef64' www.wellsfargo.com www.bing.com dev.virtualearth.net t0.ssl.ak.dynamic.tiles.virtualearth.net t0.ssl.ak.dynamic.tiles.virtualearth.net t1.ssl.ak.dynamic.tiles.virtualearth.net connect.secure.staging.wellsfargo.com connect.secure.wellsfargo.com ssl.google-analytics.com www.google-analytics.com ajax.googleapis.com wca.wellsfargo.com wca.sec.wellsfargo.com wcafs.sec.wellsfargo.com ceomedia.wf.com wifp.wellsfargo.com wifp.ceo.wellsfargo.com six.cdn-net.com wcafs.wellsfargo.com;connect-src 'self' www.bing.com t0.ssl.ak.dynamic.tiles.virtualearth.net connect.secure.staging.wellsfargo.com connect.secure.wellsfargo.com wca.wellsfargo.com wcafs.wellsfargo.com wca.sec.wellsfargo.com wcafs.sec.wellsfargo.com;img-src 'self' stats.g.doubleclick.net data: blob: t0.ssl.ak.dynamic.tiles.virtualearth.net t1.ssl.ak.dynamic.tiles.virtualearth.net www.adobe.com www.wellsfargo.com www.google-analytics.com ssl.google-analytics.com ceomedia.wf.com www.bing.com wca.wellsfargo.com wca.sec.wellsfargo.com wcafs.sec.wellsfargo.com;object-src 'self' wifp.wellsfargo.com wifp.ceo.wellsfargo.com; 1
base-uri               'self'; default-src     https: 'self'; frame-ancestors        'self'; frame-src       https: 'self'                                                               analytics.manitu.de www.google.com www.gstatic.com www.google-analytics.com www.googleadservices.com www.openstreetmap.org siegel.ausgezeichnet.org anbieter-auszeichnungen.webhostlist.de; img-src         https: 'self' data:                                                         analytics.manitu.de www.google.com www.gstatic.com www.google-analytics.com www.googleadservices.com www.openstreetmap.org siegel.ausgezeichnet.org anbieter-auszeichnungen.webhostlist.de; script-src             'self'                         'nonce-1EjsBctKQ0vm7hwLUHSvMg==' analytics.manitu.de www.google.com www.gstatic.com www.google-analytics.com www.googleadservices.com www.openstreetmap.org siegel.ausgezeichnet.org anbieter-auszeichnungen.webhostlist.de; style-src       https: 'self' data: 'unsafe-inline'                                       analytics.manitu.de www.google.com www.gstatic.com www.google-analytics.com www.googleadservices.com www.openstreetmap.org siegel.ausgezeichnet.org anbieter-auszeichnungen.webhostlist.de; object-src             'self'; 1
frame-ancestors https://*.peloton.com 1
default-src 'none'; script-src 'unsafe-inline' 'self' 'unsafe-eval' translate.google.com www.nitrokey.com; object-src 'self'; style-src 'unsafe-inline' 'self'; img-src 'unsafe-inline' 'self' safari-extension www.nitrokey.com embetty.nitrokey.com data:; media-src 'self'; frame-src 'self' https://www.youtube-nocookie.com; frame-ancestors 'self'; font-src 'unsafe-inline' 'self' data:; connect-src 'self' https://api.github.com; report-uri /report-csp-violation 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' sita.missingx.com; script-src 'self'  'unsafe-inline' 'unsafe-eval' sita.missingx.com;style-src 'self'  'unsafe-inline' 'unsafe-eval' ;connect-src 'self' 'unsafe-inline' 'unsafe-eval' sita.missingx.com;object-src 'self' 'unsafe-inline' 'unsafe-eval'; 1
upgrade-insecure-requests; default-src * data: 'unsafe-eval' 'unsafe-inline' 1
upgrade-insecure-requests; report-uri https://pcc.report-uri.io/r/default/csp/enforce 1
script-src 'self' https://d3js.org https://datamaps.github.io https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' https://www.google-analytics.com; font-src 'self' https://fonts.gstatic.com; 1
frame-ancestors 'self' *.iconsumer.com; 1
media-src 'self' *.youtube.com; 1
frame-ancestors *.nha.nl *.nha.be *.nhad.de 1
script-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://unpkg.com https://www.googletagservices.com https://app.launchdarkly.com https://maps.googleapis.com http://www.google-analytics.com http://pagead2.googlesyndication.com 1
frame-ancestors imu.nl 1
default-src http: data: blob: 'unsafe-inline' 'unsafe-eval' base-uri lechuguinos.com www.lechuguinos.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* loyalty.us10.list-manage.com s3.amazonaws.com/downloads.mailchimp.com/ *.google.com *.gstatic.com www.google-analytics.com *.youtube.com *.googleapis.com *.googletagmanager.com *.sharethis.com *.eyereturn.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.facebook.net *.licdn.com *.ads.linkedin.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com *.googletagmanager.com *.fontawesome.com *.myfonts.net; font-src 'self' *.gstatic.com *.fontawesome.com *.myfonts.net data:; img-src 'self' data: www.google-analytics.com *.gstatic.com *.googleapis.com *.google.com *.google.ca *.eyereturn.com *.g.doubleclick.net *.adsrvr.org *.facebook.com; frame-src 'self' localhost:* *.google.com *.youtube.com go.loyalty.com *.sharethis.com c.sharethis.mgr.consensu.org; connect-src 'self' *.loyalty.com *.sharethis.com http://ipinfo.io; 1
frame-ancestors 'self' www.energia.ee www.elektrilevi.ee elektrilevi.ee id.elektrilevi.ee app.vwo.com www.citynet.ee www.elisa.ee fiber.ee fiberman.ee levikom.ee homenet.ee www.prodigi.ee www.sinditelekom.ee stv.ee tele2.ee www.telia.ee telset.ee m.energia.ee energia.ee id.energia.ee alpha.enefit.com; form-action 'self' login.swedbank.ee www.swedbank.ee elektrilevi.ee www.elektrilevi.ee e.seb.ee www.seb.ee netbank.nordea.com i-pank.krediidipank.ee i.cooppank.ee www.lhv.ee banklink.luminor.ee; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' ; connect-src 'self' 1
default-src 'none'; object-src 'self'; media-src 'self' https://unblu.cloud; connect-src 'self' https://unblu.cloud wss://unblu.cloud https://hlg.tokbox.com https://anvil.opentok.com https://config.opentok.com https://api-enterprise.opentok.com wss://*.tokbox.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://maps.googleapis.com https://www.google-analytics.com https://tagmanager.google.com https://www.googletagmanager.com https://optimize.google.com https://connect.facebook.net/en_US/fbevents.js https://unblu.cloud https://static.opentok.com; frame-src 'self' https://bid.g.doubleclick.net https://www.wuestpartner.com https://nubes.simplex.tv https://mw.weaver.ch https://optimize.google.com; style-src 'self' 'unsafe-inline' blob: https://fonts.googleapis.com https://tagmanager.google.com https://www.googletagmanager.com https://optimize.google.com https://unblu.cloud; img-src 'self' data: https://www.google.com https://www.google.com/ads/ga-audiences https://www.google.ch/ads/ga-audiences https://stats.g.doubleclick.net https://www.google-analytics.com https://khms0.googleapis.com https://khms1.googleapis.com https://www.yourmoney.ch https://tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://optimize.google.com https://googleads.g.doubleclick.net https://unblu.cloud; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://unblu.cloud; 1
default-src 'self';   script-src 'self' 'unsafe-inline' https://servermanager.adns.de;   style-src 'self' 'unsafe-inline' https://secure.hostweb.de https://servermanager.adns.de;   img-src 'self' https://secure.hostweb.de https://servermanager.adns.de 1
default-src 'self' blob: https://vc.hotjar.io https://in.hotjar.com wss://ws2.hotjar.com https://insights.hotjar.com https://vars.hotjar.com https://bid.g.doubleclick.net https://certify.alexametrics.com wss://ws.pusherapp.com https://gpndatacom.freshdesk.com wss://chat.freshdesk.com https://*.pusher.com https://sockjs.pusher.com https://js.pusher.com https://maps.googleapis.com https://d36mpcpuzc4ztk.cloudfront.net https://chat.freshdesk.com https://www.google.pl https://www.facebook.com https://connect.facebook.net https://www.google.com https://www.youtube.com https://fonts.gstatic.com https://checkout.txpmnts.com https://checkout.gpnpay.com  https://www.gstatic.cn https://recaptcha.net https://www.recaptcha.net https://stats.g.doubleclick.net http://docs.guzzlephp.org https://www.google-analytics.com https://gallery.mailchimp.com https://*.freshchat.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.gstatic.cn https://recaptcha.net https://www.recaptcha.net https://www.google.com https://ga.clearbit.com https://script.hotjar.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://static.hotjar.com https://certify-js.alexametrics.com https://stats.pusher.com https://chat.freshdesk.com https://js.pusher.com https://freegeoip.net https://connect.facebook.net https://d36mpcpuzc4ztk.cloudfront.net https://connect.facebook.net https://checkout.txpmnts.com https://checkout.gpnpay.com  https://www.googletagmanager.com https://www.google-analytics.com https://*.freshchat.com https://ajax.googleapis.com ; style-src 'self' 'unsafe-inline' https://d36mpcpuzc4ztk.cloudfront.net https://fonts.googleapis.com http://docs.guzzlephp.org https://*.freshchat.com 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.gerresheimer.com *.gerresheimer.de *.google-analytics.com *.googleapis.com caretaker.sunzity.de *.wowza.com *.amazonaws.com *.cookiebot.com 1
default-src 'self' *.coronawarn.app; img-src 'self' *.coronawarn.app data: 1
block-all-mixed-content; base-uri 'self'; frame-ancestors 'self' *.stoneshot.com; form-action 'self'; object-src 'none'; 1
default-src 'self'; font-src 'self' script.hotjar.com; img-src 'self' www.linkedin.com px.ads.linkedin.com dc.ads.linkedin.com www.facebook.com www.google.nl www.google.com googleads.g.doubleclick.net script.hotjar.com maps.googleapis.com maps.gstatic.com www.google-analytics.com www.googletagmanager.com *.ytimg.com *.indeed.com data:; script-src 'unsafe-eval' 'unsafe-inline' 'self' snap.licdn.com googleads.g.doubleclick.net www.googleadservices.com connect.facebook.net static.hotjar.com script.hotjar.com resourcemanager-14b2c04f2d9-14c46413f6d.secure.force.com *.cookiebot.com maps.googleapis.com tagmanager.google.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com *.youtube.com *.ytimg.com; style-src 'self' 'unsafe-inline' tagmanager.google.com; connect-src 'self' www.google.com googleads.g.doubleclick.net stats.g.doubleclick.net wss://*.hotjar.com *.hotjar.com:* vc.hotjar.io:* www.google-analytics.com https://noembed.com cdn.plyr.io resourcemanager-14b2c04f2d9-14c46413f6d.secure.force.com; frame-src 'self' vars.hotjar.com resourcemanager-14b2c04f2d9-14c46413f6d.secure.force.com *.cookiebot.com *.youtube-nocookie.com 1
default-src 'self' https://*.crisp.chat https://*.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.locationiq.com https://*.saleshub.ai https://*.unwiredmaps.com https://*.mapbox.com https://*.amazonaws.com https://*.googleadservices.com https://*.ampproject.org https://*.freshworks.com https://www.google-analytics.com https://*.facebook.net https://*.googleapis.com https://*.newrelic.com https://*.nr-data.net https://*.agilecrm.com  https://*.googlesyndication.com https://*.zoho.com https://*.cloudfront.net https://*.google.com https://*.google.co.in https://www.gstatic.com https://js.zohostatic.com https://s3.amazonaws.com https://*.sharethis.com https://*.sharethis.com https://*.cloudflare.com https://*.sharethis.com https://*.facebook.com https://*.crisp.chat blob: https://www.googletagmanager.com https://googleads.g.doubleclick.net https://*.googleapis.com https://*.bootstrapcdn.com https://*.crisp.chat https://*.jquery.com https://*.fontawesome.com https://*.hotjar.com https://*.websites.co.in https://*.tawk.to https://*.jsdelivr.net https://*.bootstrapcdn.com https://*.razorpay.com https://*.paddle.com https://unpkg.com/ https://www.googletagservices.com https://*.onfastspring.com/ https://chimpstatic.com; connect-src 'self' https://*.locationiq.com https://*.freshdesk.com https://*.freshworks.com https://*.ampproject.net https://*.googlesyndication.com https://*.googletagmanager.com https://*.google.co.in https://*.google.com https://*.doubleclick.net https://www.google-analytics.com https://*.ampproject.org https://*.amplitude.com https://www.facebook.com  wss://*.zohopublic.com https://l.sharethis.com wss://*.relay.crisp.chat https://c.sharethis.mgr.consensu.org https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.websites.co.in https://*.jsdelivr.net https://*.tawk.to wss://*.tawk.to https://*.razorpay.com https://*.paddle.com https://unpkg.com/ https://*.cloudfront.net/ https://*.onfastspring.com/ https://*.exchangeratesapi.io/latest https://*.googleapis.com; img-src * data: https://www.facebook.com https://*.gstatic.com https://www.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://stats.g.doubleclick.net https://*.zohostatic.com https://*.youtube.com https://www.youtube.com https://*.crisp.chat https://www.google.co.in https://www.google.com https://websites.co.in https://*.cloudflare.com https://*.xx.fbcdn.net https://m.youtube.com https://*.websites.co.in https://*.razorpay.com https://*.paddle.com https://unpkg.com/ https://*.cloudfront.net/; style-src 'self' 'unsafe-inline' https://*.locationiq.com https://*.mapbox.com https://*.amazonaws.com https://*.freshworks.com http://*.googleapis.com https://*.googleapis.com https://*.zohostatic.com https://*.cloudflare.com https://*.crisp.chat https://*.bootstrapcdn.com https://*.bootstrapcdn.com https://*.fontawesome.com https://*.websites.co.in https://*.jsdelivr.net https://*.bootstrapcdn.com https://*.razorpay.com https://*.paddle.com https://unpkg.com/ https://*.cloudfront.net/ https://*.google.com; font-src 'self' data: https://fonts.gstatic.com http://*.googleapis.com https://*.crisp.chat https://*.cloudflare.com https://*.bootstrapcdn.com https://*.fontawesome.com https://*.websites.co.in https://*.tawk.to https://*.razorpay.com https://*.paddle.com https://unpkg.com/ https://*.cloudfront.net/; frame-src 'self' https://www.facebook.com https://*.saleshub.ai https://*.googlesyndication.com https://*.facebook.com https://*.twitter.com https://www.linkedin.com https://linkedin.com https://*.googleapis.com https://csi.gstatic.com https://googleads.g.doubleclick.net https://www.google.com https://*.gstatic.com https://www.google.co.in https://*.doubleclick.net https://www.google.ae https://*.zohopublic.com https://www.youtube.com https://c.sharethis.mgr.consensu.org https://*.hotjar.com https://*.websites.co.in https://*.tawk.to/ https://*.facebook.com/ https://*.razorpay.com/ https://*.paddle.com https://*.facebook.net/ https://*.cloudfront.net/ https://*.onfastspring.com/; object-src 'self' 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://az416426.vo.msecnd.net/scripts/a/ai.0.js www.googletagmanager.com googletagmanager.com tagmanager.google.com www.google-analytics.com maps.googleapis.com optimize.google.com translate.google.com translate.googleapis.com ajax.googleapis.com *.hotjar.com web2.questback.com *.cookiebot.com https://s3.eu-central-1.amazonaws.com *.facebook.com *.facebook.net extreme-ip-lookup.com https://enxp-rg104-cdn-end.azureedge.net;object-src 'self';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com optimize.google.com translate.googleapis.com https://enxp-rg104-cdn-end.azureedge.net;img-src 'self' * data: https://enxp-rg104-cdn-end.azureedge.net;media-src 'self' data:;frame-src 'self' *.hotjar.com maps.gstatic.com optimize.google.com www.googletagmanager.com www.youtube.com enexis.pti.nl enexisgsa.pti.nl tel: servicemodule-gv.enexis.nl *.app.enexis.nl *.cookiebot.com *.facebook.com;font-src 'self' data: *.hotjar.com https://fonts.gstatic.com themes.googleusercontent.comm https://enxp-rg104-cdn-end.azureedge.net;connect-src 'self' *.hotjar.com *.hotjar.io wss://*.hotjar.com code.jquery.com www.google-analytics.com dc.services.visualstudio.com stats.g.doubleclick.net translate.googleapis.com api.postcodeapi.nu https://chatbots.obilytics.com https://bots.obi4wan.com *.facebook.com *.extreme-ip-lookup.com https://enxp-rg104-cdn-end.azureedge.net;frame-ancestors 'self' 1
frame-ancestors asset.sehataqua.co.id www.sehataqua.co.id youtube.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://fonts.gstatic.com https://eager-noether-1aa517.netlify.app/ https://downloads.mailchimp.com https://u.heatmap.it; script-src 'unsafe-inline' 'unsafe-eval' https://www.instagram.com/ https://u.heatmap.it/ https://heatmap.it/api/ https://*.heatmap.it/api/ https://www.gstatic.com https://www.googletagmanager.com https://s.ytimg.com https://www.youtube.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.co.in https://downloads.mailchimp.com https://mc.us8.list-manage.com 'self'; img-src 'self' data: https://heatmap.it/api/log/ https://u.heatmap.it/img/ https://www.google.com https://www.google-analytics.com https://www.google.co.in https://stats.g.doubleclick.net https://img.youtube.com https://www.instagram.com https://gallery.mailchimp.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://layerup.singaporeartmuseum.sg/ https://embed.culturalspot.org/ https://*.heatmap.it/ https://www.google.com https://www.gstatic.com https://www.facebook.com/ https://www.youtube.com https://w.soundcloud.com/ https://cdn.knightlab.com/ https://www.instagram.com https://my.matterport.com/ https://eager-noether-1aa517.netlify.app/ 1
default-src 'self' https: 'unsafe-eval' 'unsafe-inline'; object-src 'self' blob:; img-src 'self' data: https:; font-src 'self' data: https:; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.episerver.com *.episerver.net/ *.webtraxs.com https://www.google-analytics.com/ *.mouseflow.com *.liveperson.net *.gstatic.com *.lpsnmedia.net *.googleapis.com *.visualstudio.com https://www.googletagmanager.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://dl.episerver.net/ *.bing.com/bat.js https://www.googleadservices.com/pagead/ https://tcp.googlesyndication/ https://ajax.cloudflare.com/ *.idio.co/ https://az416426.vo.msecnd.net; style-src 'self' 'unsafe-inline' *.ellsworth.com/ https://*.episerver.net/ https://fonts.googleapis.com/ https://dl.episerver.net/ https://lptag.liveperson.net/ https://lptag.liveperson.net/ ; img-src 'self' data: https://www.google.com/ads/ https://www.google-analytics.com/ *.lpsnmedia.net *.webtraxs.com/ https://maps.gstatic.com/ https://csi.gstatic.com/ https://maps.googleapis.com/ https://i.ytimg.com/ https://n2.mouseflow.com/ https://stats.g.doubleclick.net/ https://strack.where-to-buy.co/ https://where-to-buy.co/ https://dl.episerver.net/ https://bat.bing.com/action/ https://googleads.g.doubleclick.net/pagead/ https://tcp.googlesyndication/ https://img.youtube.com/ *.idio.co/ *.ellsworth.com https://www.googletagmanager.com/ https://lpcdn.lpsnmedia.net/ https://www.commerce-connector.com/; media-src 'self' https://lpcdn.lpsnmedia.net/; font-src 'self' https://fonts.gstatic.com/ https://fonts.googleapis.com/ https://themes.googleusercontent.com/static/fonts/muli/ https://fonts.gstatic.com/s/muli/v6/; child-src 'self' *.ellsworth.com/ https://*.episerver.net/ *.liveperson.net https://www.youtube.com/embed/ https://lpcdn.lpsnmedia.net/ https://player.vimeo.com/ https://vimeo.com/ https://4262392.va.cobrowse.liveperson.net/ https://www.google.com/recaptcha/ https://ellsworth.us18.list-manage.com/ https://editor.ne16.com/; frame-src 'self' *.ellsworth.com/ https://*.episerver.net/ *.liveperson.net https://www.youtube.com/embed/ https://lpcdn.lpsnmedia.net/ https://player.vimeo.com/ https://vimeo.com/ https://4262392.va.cobrowse.liveperson.net/ https://www.google.com/recaptcha/ https://ellsworth.us18.list-manage.com/ https://ellsworth-dev.adagetech.net/ https://editor.ne16.com/; connect-src 'self' ws://*.ellsworth.com/ *.ellsworth.com *.visualstudio.com  https://*.episerver.net/ wss://*.ellsworth.com/ http://*.episerver.com/ https://n2.mouseflow.com/ https://www.google-analytics.com/ *.liveperson.net https://bat.bing.com/actionp/ https://stats.g.doubleclick.net/ https://www.googleapis.com/; 1
default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src *; connect-src *; media-src *; object-src *; child-src *; frame-ancestors 'self'; form-action *; reflected-xss block; upgrade-insecure-requests; 1
frame-ancestors https://*.growthinstitute.com; 1
default-src 'none'; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' https:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ 1
default-src 'self' blob: https://*.cnn.com:* http://*.cnn.com:* *.cnn.io:* *.cnn.net:* *.turner.com:* *.turner.io:* *.ugdturner.com:* courageousstudio.com *.vgtf.net:*; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' blob: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; img-src 'self' data: blob: *; media-src 'self' data: blob: *; font-src 'self' data: *; connect-src 'self' *; frame-ancestors 'self' https://*.cnn.com:* http://*.cnn.com:* https://*.cnn.io:* http://*.cnn.io:* *.turner.com:* courageousstudio.com; 1
default-src https: blob:; img-src data: https:; connect-src wss: https: 'unsafe-inline'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; frame-src frameio-transfer: https: data: blob: 'unsafe-inline' 'unsafe-eval' 1
upgrade-insecure-requests;default-src 'self';media-src 'self' android-webview-video-poster js.intercomcdn.com;child-src 'self' data: *.nodecraft.com piwik.nodecraft.com www.youtube.com youtube.com platform.twitter.com syndication.twitter.com staticxx.facebook.com www.facebook.com web.facebook.com js.stripe.com hooks.stripe.com www.google.com disqus.com/embed/comments/ disqus.com/home/ share.intercom.io intercom-sheets.com intercom-reporting.com;frame-ancestors 'self';script-src 'self' 'nonce-tracking' *.nodecraft.com:* app.nodecraft.com piwik.nodecraft.com ajax.cloudflare.com apis.google.com www.google-analytics.com ajax.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ platform.twitter.com cdn.syndication.twimg.com js.stripe.com connect.facebook.net *.sentry.io nodecraft.disqus.com c.disquscdn.com disqus.com/next/ cdn.ringcaptcha.com app.intercom.io widget.intercom.io js.intercomcdn.com nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io cdn.ampproject.org static.cloudflareinsights.com;style-src 'self' data: 'unsafe-inline' fonts.googleapis.com www.gstatic.com platform.twitter.com ton.twimg.com cdn.ringcaptcha.com a.disquscdn.com c.disquscdn.com;font-src 'self' data: themes.googleusercontent.com fonts.googleapis.com fonts.gstatic.com cdn.ringcaptcha.com js.intercomcdn.com;connect-src 'self' blob: wss://nodecraft.com wss://*.nodecraft.com:* *.nodecraft.com:* app.nodecraft.com piwik.nodecraft.com www.google-analytics.com stats.g.doubleclick.net syndication.twitter.com api.stripe.com *.sentry.io sentry.io app.getsentry.com nodecraft.report-uri.com cdn.ringcaptcha.com api.ringcaptcha.com api.intercom.io api-iam.intercom.io api-ping.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com js.intercomcdn.com cdn.ampproject.org wss://realtime.services.disqus.com;img-src 'self' data: blob: data: blob: filesystem android-webview-video-poster www.google.com www.google-analytics.com ssl.google-analytics.com app.nodecraft.com s3.nodecraft.com filepicker.nodecraft.com s3.amazonaws.com/filepicker.nodecraft.com/* piwik.nodecraft.com csi.gstatic.com maps.gstatic.com www.gstatic.com stats.g.doubleclick.net www.paypalobjects.com syndication.twitter.com platform.twitter.com pbs.twimg.com ton.twimg.com abs.twimg.com www.facebook.com web.facebook.com/ *.sentry.io sentry.io a.disquscdn.com c.disquscdn.com referrer.disqus.com i.ytimg.com js.intercomcdn.com static.intercomassets.com downloads.intercomcdn.com uploads.intercomusercontent.com gifs.intercomcdn.com uploads.intercom-mail-200.com cdn.ringcaptcha.com;prefetch-src 'self' c.disquscdn.com disqus.com;object-src 'none';base-uri 'self';report-uri https://nodecraft.report-uri.com/r/d/csp/enforce 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;; report-uri /en-us/report-csp-violation 1
frame-ancestors 'self' https://*.olvg.nl https://*.caresharing.eu 1
default-src https:; script-src 'self' 'nonce-zemv30Tb3CVJR/XA2rrCCU/CqHah6Yf1' https://hcaptcha.com https://*.hcaptcha.com; object-src 'self'; style-src 'self' 'nonce-6fX/wIgvpxXFvJVgUqTywifbIRM7zrJ3' https://hcaptcha.com https://*.hcaptcha.com; img-src 'self' images.gog-statics.com; media-src 'self'; child-src 'none'; font-src 'self'; connect-src 'self' https://api.gog.com; frame-src https://www.google.com/recaptcha/ https://hcaptcha.com https://*.hcaptcha.com 1
default-src 'self' secure.test.bs.ch secure.bs.ch www.staatskalender.bs.ch www.tiefbauamt.test.bs.ch www.tiefbauamt.bs.ch egov-by-zid.ch www.leastyger-photography.ch www.regierungsrat.bs.ch *.showare.ch *.solique.ch de.wikipedia.org *.youtube.com map.geo.test.bs.ch map.geo.bs.ch *.abel-systems.ch www.eventdb.bs.ch www.rechtsprechung.gerichte-bs.ch *.basleratlas.ch *.google.com staticweb.bs.ch statabs.github.io statabs-test.github.io public.tableau.com cdn.knightlab.com service.buschviper.ch hit.uptrendsdata.com draeggwaegg.ch www.ub.basleratlas.ch eepurl.com www.tageskarte-gemeinde.ch blog.staatsarchiv-bs.ch data.bs.ch muenzwurf.statabs.ch marketing.us8.list-manage.com basleratlas.ch 1270.appointmind.net avenue.argusdatainsights.ch seu2.cleverreach.com;script-src 'self' standortmarketing.prog.online s.ytimg.com *.youtube.com *.piwikpro.com *.siteimproveanalytics.com siteimproveanalytics.com 'unsafe-inline' multimedia-bs.ch hit.uptrendsdata.com baselstadt.containers.piwik.pro baselstadt.piwik.pro bot.bs-kt.prod.byerley.ch 'unsafe-eval';connect-src 'self' standortmarketing.prog.online hit.uptrendsdata.com;img-src 'self' *.prog.online multimedia-bs.ch *.piwikpro.com *.siteimproveanalytics.io *.abel-systems.ch www.test.bs.ch www.bs.ch hit.uptrendsdata.com *.piwik.pro data: 'unsafe-eval' bot.bs-kt.prod.byerley.ch;style-src 'self' 'unsafe-inline' bot.bs-kt.prod.byerley.ch;frame-src *; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.social9.com https://maps.googleapis.com https://snap.licdn.com https://cdnjs.cloudflare.com https://cdn.social9.com https://api.braintreegateway.com https://js.braintreegateway.com https://d.adroll.com https://d.adroll.mgr.consensu.org https://analytics.twitter.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.linkedin.com https://www.gstatic.com https://a.quora.com https://api.amplitude.com https://api-iam.intercom.io https://secure.hims1nice.com https://seal.godaddy.com https://www.google-analytics.com https://certify-js.alexametrics.com https://www.google.com https://graph.facebook.com https://s.adroll.com https://js.intercomcdn.com  https://z.moatads.com  https://static.ads-twitter.com https://connect.facebook.net https://sjs.bizographics.com https://static.ads-twitter.com https://widget.intercom.io https://www.googletagmanager.com https://apis.google.com https://ssl.google-analytics.com https://cdn.amplitude.com https://ajax.googleapis.com https://cdn.wpcc.io; frame-src 'self' https://apis.google.com https://ssl.google-analytics.com *.facebook.com s-static.ak.facebook.com https://api-iam.intercom.io  https://s.adroll.com https://www.google.com https://cdnjs.cloudflare.com https://cdn.social9.com https://www.youtube.com; connect-src 'self' wss://nexus-websocket-a.intercom.io https://apis.google.com https://www.google.com https://www.chromestatus.com https://api.amplitude.com https://api-iam.intercom.io https://maps.googleapis.com https://snap.licdn.com https://api.social9.com https://www.facebook.com https://stats.g.doubleclick.net https://www.google-analytics.com; object-src 'self'; script-src 'self' 'unsafe-eval' 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data: 1
default-src * 'unsafe-inline'; script-src 'unsafe-eval' 'unsafe-inline' 'self' *.timetrex.com *.facebook.net *.facebook.com *.twitter.com *.gstatic.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.hotjar.com; img-src 'self' *.timetrex.com *.facebook.net *.facebook.com *.twitter.com *.gstatic.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.hotjar.com *.capterra.com data: 1
upgrade-insecure-requests; default-src 'self' 'report-sample'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' *.opendns.com https://cdnjs.cloudflare.com/ajax/libs/select2/ *.jwpcdn.com *.olark.com *.google.com *.ckeditor.com *.scorm.com *.google-analytics.com *.bing.com *.marchex.io https://stats.g.doubleclick.net *.doubleclick.net *.gstatic.com https://seal-alaskaoregonwesternwashington.bbb.org *.youtube-nocookie.com *.youtube.com *.youtu.be *.ytimg.com data:; object-src 'self'; style-src 'self' 'unsafe-inline' 'report-sample' *.olark.com *.onlineed.com *.onlineed.net *.googleapis.com *.ckeditor.com *.scorm.com https://cdnjs.cloudflare.com/ajax/libs/select2/; img-src * data: blob: android-webview-video-poster:; media-src 'self' 'report-sample' *.cloudfront.com *.onlineed.com *.onlineed.net *.google.com *.olark.com *.gstatic.com *.youtube-nocookie.com *.youtube.com *.youtu.be *.ytimg.com; frame-src 'self' 'report-sample' *.scorm.com *.ckeditor.com *.youtube-nocookie.com *.youtube.com *.youtu.be *.vimeo.com *.olark.com *.google.com; font-src 'self' 'report-sample' *.gstatic.com http://fonts.gstatic.com *.google.com *.ckeditor.com *.jwpcdn.com data: blob: *.googleapis.com *.fontawesome.com; connect-src 'self' https://s3.amazonaws.com/www.onlineed.com/ *.opendns.com *.olark.com *.google.com *.onlineed.com *.googleapis.com *.onlineed.net *.trustwave.com *.bbb.org *.google-analytics.com https://stats.g.doubleclick.net *.doubleclick.net *.bing.com; 1
frame-src 'self' *.youtube.com *.youtube-nocookie.com *.vimeo.com vimeo.com *.youtu.be *.issuu.com *.google.com *.google.nl *.googleapis.com *.gstatic.com consentcdn.cookiebot.com;              default-src 'self';              script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.aspnetcdn.com *.googleapis.com *.google.nl *.google.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.cookiebot.com *.mailplus.nl;              style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.mailplus.nl;              connect-src 'self' *.google-analytics.com;              img-src 'self' data: *.gstatic.com *.google-analytics.com;              font-src 'self' data: *.googleapis.com *.gstatic.com; 1
frame-ancestors 'self' *.plentymarkets-cloud-ie.com 1
frame-ancestors 'self' *.parquedeatracciones.es 1
default-src 'self'; script-src 'self' 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://www.broadviewnet.com https://flex.msn.com https://ssl.google-analytics.com https://snapabug.appspot.com https://www.snapengage.com; style-src 'self' 'unsafe-inline' ; img-src *; font-src 'self' data:;frame-src 'self' 'self' https://www.youtube.com; report-uri https://identity.broadviewnet.com/IdentityProvider/csp/report 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://wb.messengerpeople.com https://static.criteo.net https://*.criteo.com https://tpc.googlesyndication.com https://*.translate.naver.net https://ct.pinterest.com https://*.zenaps.com https://*.hotjar.com https://*.akamaihd.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://ampcid.google.co.kr https://ampcid.google.co.jp https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.hotjar.com wss://*.hotjar.com https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://appdown.pstatic.net https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://www.myprotein.co.kr https://m.myprotein.co.kr https://checkout.myprotein.co.kr https://connect.facebook.net https://ct.pinterest.com https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.cn https://*.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://*.criteo.com https://static.criteo.net https://s.pinimg.com https://tpc.googlesyndication.com https://remote.captcha.com https://platform.twitter.com https://*.akamaihd.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.translate.naver.net https://*.hotjar.com https://*.microsofttranslator.com https://*.trustpilot.com https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://twitter.com https://*.baidu.com https://sc-static.net https://www.google.com https://*.google.co.uk https://google.co.uk https://static.ads-twitter.com https://analytics.twitter.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.translate.naver.net https://*.googleapis.com https://*.microsofttranslator.com https://cdn.parcellab.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self'; frame-ancestors 'none'; form-action 'none'; 1
default-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval'; img-src data: https:; report-uri https://kilian.report-uri.io/r/default/csp/enforce 1
default-src 'self' https://s7.addthis.com/ https://static.klaviyo.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com/ajax/ https://apis.google.com/ https://bat.bing.com/bat.js https://cdn.callrail.com/companies/504958315/6e2ab2eb34b2dd3de222/12/swap.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/ https://dx.steelhousemedia.com/spx https://fast.a.klaviyo.com/media/js/analytics/klaviyo_analytics.js https://fullstory.com/s/fs.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://js.callrail.com/companies/ https://js.callrail.com/group/ https://m.addthis.com/live/red_lojson/300lo.json https://px.steelhousemedia.com/st https://s7.addthis.com/js/300/addthis_widget.js https://script.hotjar.com/modules.645b95b4ba9c698fbc60.js https://seal.godaddy.com/getSeal https://sealserver.trustwave.com/seal.js https://ssl.google-analytics.com/ga.js https://static.hotjar.com/c/hotjar-91173.js https://static.klaviyo.com/onsite/js/klaviyo.js https://v1.addthisedge.com/live/boost/ra-54ad4437257dc3da/_ate.track.config_resp https://ww.steelhousemedia.com/gs https://www.google-analytics.com/analytics.js https://www.google-analytics.com/gtm/js https://www.google-analytics.com/plugins/ua/ec.js https://www.google.com/pagead/conversion_async.js https://www.google.com/recaptcha/api.js https://www.googletagmanager.com/gtm.js https://www.youtube.com/iframe_api https://z.moatads.com/addthismoatframe568911941483/moatframe.js cdn.salesfire.co.uk www.final-aws-01.com https://www.gstatic.com/recaptcha/releases/ https://edge.fullstory.com/s/fs.js https://connect.facebook.net/signals/ https://s.ytimg.com/yts/ https://script.hotjar.com/ https://apis.google.com/ https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://display.ugc.bazaarvoice.com/common/ https://display.ugc.bazaarvoice.com/static/ https://apps.nexus.bazaarvoice.com/firebird/ https://api.bazaarvoice.com/data/ https://analytics-static.ugc.bazaarvoice.com/ https://network.bazaarvoice.com/id.json https://mpsnare.iesnare.com/snare.js https://mpsnare.iesnare.com/script/logo.js https://display.ugc.bazaarvoice.com/bvstaging/static/jpw_industries/baileigh/en_US/bvapi.js https://apps-stg.nexus.bazaarvoice.com/firebird/default/bv.js https://network-stg.bazaarvoice.com/id.json https://edge.fullstory.com/s/fs.js https://stg.api.bazaarvoice.com/data/ https://network.bazaarvoice.com/ https://apps.bazaarvoice.com/ https://cdn2.windroseglobalecommerce.com/js/wge_baileigh_3.0.min.js https://www.googletagmanager.com/gtag/js http://www.final-aws-01.com/js/53115.js https://survey.g.doubleclick.net/async_survey https://secure.leadforensics.com/js/53115.js https://maps.google.com/maps/api/js https://vms.boldchat.com/aid/ https://vmss.boldchat.com/aid/ https://vmp.boldchat.com/aid/ https://ci.boldchat.com/aid/ https://adservice.google.com.ua/adsid/integrator.js https://survey.g.doubleclick.net/ https://adservice.google.com https://maps.google.com/maps-api-v3/api/ https://maps.googleapis.com/maps/api/js/ https://www.gstatic.com/ https://www.google-analytics.com https://optimize.google.com https://static.klaviyo.com/ https://api-barracuda.zoovu.com/ https://assets-barracuda-runner.azureedge.net/; style-src 'self' 'unsafe-inline' https://ajax.googleapis.com/ https://optimize.google.com/ https://fonts.googleapis.com/ https://display.ugc.bazaarvoice.com/ https://cdn2.windroseglobalecommerce.com/ https://static.klaviyo.com/ https://assets-barracuda-runner.azureedge.net/; font-src 'self' https://fonts.gstatic.com https://script.hotjar.com https://assets-barracuda-runner.azureedge.net/ data:; object-src 'self'; form-action 'self' https://stg.api.bazaarvoice.com/ https://api.bazaarvoice.com/data/submitreview.json https://www.facebook.com/tr/; connect-src 'self' https://app.callrail.com/ https://bat.bing.com/ https://fast.a.klaviyo.com/ https://in.hotjar.com/ https://js.callrail.com/ https://m.addthis.com/ https://rs.fullstory.com/ https://telemetrics.klaviyo.com/ https://vc.hotjar.io/ https://www.facebook.com/ https://s7.addthis.com/ https://vms.boldchat.com/ https://visitor-services.boldchat.com/ https://a.klaviyo.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://assets-barracuda-runner.azureedge.net/ https://api-barracuda.zoovu.com/ https://sentry.smartassistant.com/ https://ev-barracuda.zoovu.com/ https://barracuda-runner.zoovu.com/ https://mdb.yappn.com/; frame-src 'self' https://bid.g.doubleclick.net https://s7.addthis.com https://vars.hotjar.com https://www.google.com https://www.youtube.com https://display.ugc.bazaarvoice.com/ https://api.bazaarvoice.com/ https://stg.api.bazaarvoice.com/ https://www.facebook.com/ https://optimize.google.com; img-src 'self' https://ssl.google-analytics.com/ https://bat.bing.com/ https://sealserver.trustwave.com/ https://a.klaviyo.com/ https://insight.adsrvr.org/ https://www.facebook.com/ https://www.google.com/ https://www.google.ca/ https://scontent.cdninstagram.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://ajax.googleapis.com/ https://match.adsrvr.org/ https://match.prod.bidr.io/ https://dpm.demdex.net/ https://pixel.advertising.com/ https://ib.adnxs.com/ https://tags.bluekai.com/ https://pixel.rubiconproject.com/ https://ads.yahoo.com/ https://pixel.tapad.com/ https://su.addthis.com/ https://aa.agkn.com/ https://match.sharethrough.com/ https://s.thebrighttag.com/ https://uipglob.semasio.net/ https://ups.analytics.yahoo.com/ https://ads.scorecardresearch.com/ https://cw.addthis.com/ https://dsum-sec.casalemedia.com/ https://x.bidswitch.net/ https://usermatch.krxd.net/ https://t.mookie1.com/ https://cookie-sync-service-prod.steelhousemedia.com/ https://px.steelhousemedia.com/ https://www.googletagmanager.com/ https://network-stg-a.bazaarvoice.com/ https://network-stg.bazaarvoice.com/ https://display.ugc.bazaarvoice.com/ https://i.ytimg.com/ https://www.google.com.ua/ https://googleads.g.doubleclick.net/ https://global.ib-ibi.com/ https://csi.gstatic.com/ https://baileigh-stage-aws.gemshelp.com/ https://images.boldchat.com/ https://connect.facebook.net/ https://seal.godaddy.com/ https://network.bazaarvoice.com/ https://optimize.google.com/ https://d3k81ch9hvuctc.cloudfront.net/ https://assets-barracuda-zoovu.azureedge.net/ https://assets-barracuda-runner.azureedge.net/ data: ;; media-src 'self'; frame-ancestors 'self' https://www.youtube.com https://youtube.com;; 1
default-src 'self' 'unsafe-inline' https: data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https: blob:; img-src 'self' data: https:; 1
default-src https://www.gmp.de; img-src 'self' data: https://matomo.gmp.de; connect-src 'self' data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; font-src 'self' https://fonts.gstatic.com/; script-src 'self' 'unsafe-inline'; frame-src data: https://player.vimeo.com https://www.youtube.com https://www.google.com; script-src-elem data: https://ajax.googleapis.com 'self' 'unsafe-inline' https://matomo.gmp.de; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://www.kbs.gov.tr 1
default-src 'none'; form-action 'self' mailform.ntppool.org; frame-ancestors 'none'; connect-src 'self' 8ll7xvh0qt1p.statuspage.io; font-src fonts.gstatic.com; img-src 'self' st.ntppool.org st.pimg.net news.ntppool.org *.mapper.ntppool.org; script-src 'self' 'unsafe-inline' cdn.statuspage.io st.ntppool.org st.pimg.net news.ntppool.org www.mapper.ntppool.org; style-src 'self' fonts.googleapis.com st.ntppool.org st.pimg.net news.ntppool.org; report-uri https://ntp.report-uri.com/r/d/csp/wizard 1
default-src 'self' data:; script-src 'self' data: 'unsafe-inline' https://*.google-analytics.com; child-src https://*.youtube.com; style-src 'self' data: 'unsafe-inline'; 1
default-src 'none'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net 'nonce-0a54b19a13b6712dc04d1b49215423d8' https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://www.googletagmanager.com http://connect.facebook.net https://connect.facebook.net https://graph.facebook.com; style-src  'self' 'unsafe-inline'; img-src 'self' data: www.googletagmanager.com  https://www.google-analytics.com/ https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.google.ru https://www.google-analytics.com www.googletagmanager.com https://www.facebook.com; frame-src http://www.youtube.com https://www.youtube.com https://www.google.com https://bid.g.doubleclick.net https://www.google.com/recaptcha/ https://www.facebook.com https://web.facebook.com https://staticxx.facebook.com http://staticxx.facebook.com; child-src http://www.youtube.com https://www.youtube.com https://www.google.com https://bid.g.doubleclick.net https://www.google.com/recaptcha/ https://www.facebook.com https://web.facebook.com https://staticxx.facebook.com http://staticxx.facebook.com http://www.youtube.com https://www.youtube.com https://www.google.com https://bid.g.doubleclick.net https://www.google.com/recaptcha/ https://www.facebook.com https://web.facebook.com https://staticxx.facebook.com http://staticxx.facebook.com; media-src *.youtube.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.facebook.com/x/oauth/status https://graph.facebook.com 1
frame-ancestors 'self' *.etracker.com *.mainova.de *.abtasty.com; 1
script-src 'unsafe-inline' 'unsafe-eval' filesystem: *.addthis.com *.js.ubembed.com a.omappapi.com ajax.googleapis.com assets.ubembed.com bat.bing.com cdn.funnelytics.io cdn.jsdelivr.net cdnjs.cloudflare.com connect.facebook.net content.resolver.com googleads.g.doubleclick.net i.tryinteract.com munchkin.marketo.net play.vidyard.com snap.licdn.com ws.zoominfo.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.resolver.com z.moatads.com; style-src 'unsafe-inline' https: filesystem: cdn.jsdelivr.net cdnjs.cloudflare.com content.resolver.com fonts.googleapis.com i.tryinteract.com www.resolver.com; img-src https: data: filesystem: bat.bing.com www.googletagmanager.com www.resolver.com; font-src https: data: filesystem: fonts.gstatic.com content.resolver.com; media-src https:; form-action https:; frame-ancestors 'self'; object-src 'none'; frame-src 'self' https: 1
upgrade-insecure-requests; frame-ancestors 'self' https://*.charteroak.edu http://*.omniupdate.com; 1
default-src 'self'; frame-src 'self' *.google.com/maps *.youtube-nocookie.com; style-src 'self' *.googleapis.com 'unsafe-inline'; font-src 'self' *.gstatic.com 'unsafe-inline'; script-src 'self' *.googletagmanager.com *.google-analytics.com *.googleapis.com 'unsafe-inline'; img-src 'self' *.google-analytics.com *.ytimg.com *.ucb.com.bd 1
frame-ancestors www.jivochat.com.tr https://app.jivosite.com https://app3alpha.jivosite.com https://app3beta.jivosite.com; child-src https://mc.yandex.ru 1
default-src 'none'; base-uri 'self'; block-all-mixed-content; connect-src 'self' https://tapi.tazz.ro https://geo-coding.tazz.ro https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://fcmregistrations.googleapis.com; font-src 'self' https://tazzcdn.akamaized.net; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://vars.hotjar.com https://r3.minicrm.ro; img-src 'self' https://tiles.tazz.ro https://tazzcdn.akamaized.net https://staging.tazz.ro https://tazz-static-prod.s3.eu-central-1.amazonaws.com https://s12emagst.akamaized.net/ https://s13emagst.akamaized.net data: https://www.google-analytics.com https://www.google.com https://www.google.ro https://www.facebook.com https://cx.atdmt.com; manifest-src 'self'; script-src 'self' https://tazzcdn.akamaized.net https://r3.minicrm.ro https://connect.facebook.net 'unsafe-eval' https://script.hotjar.com 'nonce-nASnK7EcigZ7MBoSmqWMBA=='; style-src 'self' https://tazzcdn.akamaized.net http://cdnjs.cloudflare.com 'unsafe-inline' 1
default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: 'unsafe-inline'; connect-src * data: 'unsafe-inline'; frame-src *; 1
object-src 'self'; report-uri /report-csp-violation 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: wss: *.eastwood.com *.bronto.com *.resultspage.com *.bazaarvoice.com *.google.com *.affirm.com *.facebook.net *.bing.com *.hotjar.com *.kaptcha.com *.bootstrapcdn.com *.google-analytics.com *.googletagmanager.com *.cloudflare.com *.murdoog.com *.pingdom.net *.googleapis.com *.googleadservices.com *.bootstrapcdn.com *.bronto.com *.klevu.com *.gstatic.com *.ytimg.com *.doubleclick.net *.ksearchnet.com *.kustomerapp.com *.facebook.com *.hotjar.io *.zdassets.com *.materialdesignicons.com *.youtube.com *.liadm.com *.abtasty.com *.zendesk.com *.zopim.com *.noibu.com *.bm23.com *.criteo.net *.criteo.com *.newrelic.com *.nr-data.com *.nr-data.net *.googletagservices.com *.googleadservices.com *.googlesyndication.com *.paymentech.com *.acsbapp.com *.acsbap.com acsbapp.com acsbap.com *.paypal.com *.paypalobjects.com secure-ecommerce-services.com *.casalemedia.com *.stickyadstv.com *.ivitrack.com *.taboola.com *.e-planning.net *.yieldmo.com *.smaato.net *.adnxs.com *.pubmatic.com *.rlcdn.com *.advertising.com *.yahoo.com *.rubiconproject.com *.postrelease.com *.outbrain.com *.teads.tv *.tremorhub.com *.aralego.com *.360yield.com *.bluekai.com *.online-metrix.net *.emjcd.com *.smartadserver.com *.mediawallahscript.com *.3lift.com *.addthis.com *.clmbtech.com *.revcontent.com *.meba.kr *.tapad.com *.openx.net *.media.net *.turn.com *.krxd.net *.aralego.net *.pusher.com *.pusherapp.com *.cloudinary.com *.mxpnl.com *.mixpanel.com *.countryflags.io *.s3.amazonaws.com *.chatio-static.com *.googleusercontent.com *.maxcdn.com *.launchdarkly.com *.statuspage.io *.bron.to *.bidswitch.net *.agkn.com *.melissadata.net *.pinimg.com *.apptrian.com *.pinterest.com *.screencast.com *.iesnare.com 1
default-src 'self' https://*.zdassets.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.authorize.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zopim.com https://*.zdassets.com https://*.paypal.com https://*.authorize.net https://*.google.com https://*.beanstream.com https://*.paypalobjects.com https://*.googleapis.com https://*.gstatic.com https://*.convergepay.com; style-src 'self' 'unsafe-inline' https://*.fontawesome.com https://*.googleapis.com https://*.gstatic.com; font-src 'self' https://*.gstatic.com data:; img-src 'self' https://*.zopim.io https://*.authorize.net https://*.gstatic.com https://*.googleapis.com data:; frame-src 'self' https://cas.missouristate.edu https://auth.slcc.edu:9443 https://gluu.mclennan.edu https://*.paypal.com https://*.smarterproctoring.com https://*.google.com https://player.vimeo.com/; frame-ancestors 'self' https://csccsaasstage.blackboard.com https://courses.cscc.edu https://*.instructure.com https://unr.canvaslms.com/; connect-src 'self' wss://*.zopim.com https://*.zopim.com https://*.zendesk.com https://*.zdassets.com https://*.paypal.com https://*.authorize.net https://*.convergepay.com; report-uri /demo/admin/reportcsp 1
default-src 'self'; connect-src data: 'self' https://retail.api.rightcapital.com https://api.rightcapital.com https://sentry.io https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com https://uploads.intercomusercontent.com https://upload.uploadcare.com https://uploadcare.s3-accelerate.amazonaws.com https://www.google-analytics.com https://stats.g.doubleclick.net; font-src 'self' data: https://cdnjs.cloudflare.com https://fast.fonts.net https://js.intercomcdn.com https://fonts.gstatic.com; form-action https://intercom.help https://api-iam.intercom.io https://hitweb.schwab.com https://advhypo.morningstar.com https://awsws.morningstar.com; child-src 'self' https://retail.api.rightcapital.com https://api.rightcapital.com https://share.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://js.stripe.com https://calendly.com https://social.uploadcare.com https://bid.g.doubleclick.net https://headway-widget.net; img-src 'self' data: https://cdnjs.cloudflare.com https://chart.googleapis.com https://*.intercomcdn.com https://static.intercomassets.com https://uploads.intercomusercontent.com https://messenger-apps.intercom.io https://*.intercom-attachments.com https://uploadcare.rightcapital.com https://q.stripe.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://*.g.doubleclick.net https://bat.bing.com; media-src https://js.intercomcdn.com; script-src 'self' 'unsafe-inline' https://*.rightcapital.com https://cdnjs.cloudflare.com https://*.intercom.io https://js.intercomcdn.com https://js.stripe.com https://calendly.com https://cdn.headwayapp.co https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://pi.pardot.com https://bat.bing.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fast.fonts.net https://calendly.com; report-uri https://right.report-uri.com/r/default/csp/enforce 1
default-src 'self' https: macroplant.com *.macroplant.com getsharepod.com *.getsharepod.com ibrowseapp.com *.ibrowseapp.com; frame-src 'self' https: macroplant.com *.macroplant.com getsharepod.com *.getsharepod.com ibrowseapp.com *.ibrowseapp.com youtube.com *.youtube.com; font-src 'self' https: data: macroplant.com *.macroplant.com getsharepod.com *.getsharepod.com ibrowseapp.com *.ibrowseapp.com; img-src 'self' https: data: macroplant.com *.macroplant.com getsharepod.com *.getsharepod.com ibrowseapp.com *.ibrowseapp.com; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' macroplant.com *.macroplant.com getsharepod.com *.getsharepod.com ibrowseapp.com *.ibrowseapp.com www.google-analytics.com www.googletagmanager.com; style-src 'self' https: 'unsafe-inline' macroplant.com *.macroplant.com getsharepod.com *.getsharepod.com ibrowseapp.com *.ibrowseapp.com; connect-src 'self' https: macroplant.com *.macroplant.com getsharepod.com *.getsharepod.com ibrowseapp.com *.ibrowseapp.com www.google.com; report-uri https://sentry.io/api/1438092/security/?sentry_key=c4f9287549384b1ebab3ca38ac17a0d3 1
frame-ancestors 'self' https://optimize.google.com/ https://forum.dvor.com 1
child-src 'http://*.erieinsurance.com' 'https://*.erieinsurance.com' 1
default-src 'self'; style-src 'self' 'unsafe-inline' http://*.sportunion.at http://sportunion.at https://*.sportunion.at https://sportunion.at https://static.flockler.com https://*.mailchimp.com https://*.gstatic.com https://*.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.sportunion.at http://sportunion.at https://*.sportunion.at https://sportunion.at https://static.flockler.com  https://fl-cdn.scdn1.secure.raxcdn.com  https://embed-cdn.flockler.com https://flockler.embed.codes https://plugins.flockler.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://*.gstatic.com https://*.googleapis.com; font-src 'self' data: http://*.sportunion.at http://sportunion.at https://*.sportunion.at https://sportunion.at https://fonts.gstatic.com; img-src 'self' 'unsafe-inline' https://* http://*.sportunion.at http://sportunion.at https://*.sportunion.at https://sportunion.at https://flockler.com https://*.rackcdn.com https://stats.g.doubleclick.net https://www.google-analytics.com https://*.googleapis.com data: https://*.gstatic.com https://*.google.com https://secure.gravatar.com; frame-src 'self' http://*.sportunion.at http://sportunion.at https://*.sportunion.at https://sportunion.at https://www.yumpu.com https://www.fitsportaustria.at https://board.fitsportaustria.at https://player.vimeo.com https://www.youtube.com https://www.google.com https://www.youtube-nocookie.com; connect-src 'self' http://*.sportunion.at http://sportunion.at https://*.sportunion.at https://sportunion.at https://yoast.com; media-src https://* 1
default-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google-analytics.com https://www.google-analytics.com http://mc.yandex.ru https://mc.yandex.ru http://www.googletagmanager.com https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com http://connect.facebook.net https://connect.facebook.net https://web.facebook.net http://cdn.mxpnl.com https://cdn.mxpnl.com http://cdn.optimizely.com https://cdn.optimizely.com http://platform.twitter.com https://platform.twitter.com http://cdn.ckeditor.com https://cdn.ckeditor.com http://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/api.js http://www.gstatic.com https://www.gstatic.com http://www.googleadservices.com https://www.googleadservices.com https://assets.zendesk.com https://static.zdassets.com https://kickico.zendesk.com https://*.zopim.com http://top-fwz1.mail.ru https://googleads.g.doubleclick.net http://static.ads-twitter.com https://static.ads-twitter.com https://analytics.twitter.com http://analytics.twitter.com https://test-api.sumsub.com https://api.sumsub.com https://connect.trezor.io/4/connect.js http://apis.google.com https://apis.google.com;object-src 'self' https://api.coinmarketcap.com https://test-api.sumsub.com https://api.sumsub.com;style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://fonts.googleapis.com http://cdn.ckeditor.com https://cdn.ckeditor.com http://www.gstatic.com https://www.gstatic.com https://ssl.gstatic.com https://tagmanager.google.com https://assets.zendesk.com https://static.zdassets.com https://kickico.zendesk.com https://*.zopim.com https://*.zopim.io https://test-api.sumsub.com https://api.sumsub.com;img-src * 'self' 'unsafe-inline' data: https://kickico.azureedge.net http://www.google-analytics.com https://www.google-analytics.com http://www.google.com/ads/ga-audience https://www.google.com/ads/ga-audience http://www.google.ru/ads/ga-audiences https://www.google.ru/ads/ga-audiences https://www.google.com.ua/ads/ga-audiences http://www.google.com.ua/ads/ga-audiences https://www.gstatic.com https://ssl.gstatic.com https://tagmanager.google.com http://stats.g.doubleclick.net https://stats.g.doubleclick.net http://googleads.g.doubleclick.net https://googleads.g.doubleclick.net http://www.facebook.com https://www.facebook.com https://web.facebook.com http://mc.yandex.ru https://mc.yandex.ru http://cdn.ckeditor.com https://cdn.ckeditor.com https://*.googleusercontent.com https://syndication.twitter.com https://googleads.g.doubleclick.net https://assets.zendesk.com https://static.zdassets.com https://kickico.zendesk.com https://*.zopim.com https://*.zopim.io http://top-fwz1.mail.ru https://api.coinmarketcap.com http://t.co https://test-api.sumsub.com https://api.sumsub.com;media-src 'self' https://test-api.sumsub.com https://api.sumsub.com https://static.zdassets.com;frame-src 'self' http://www.facebook.com https://www.facebook.com https://web.facebook.com http://staticxx.facebook.com https://staticxx.facebook.com http://www.youtube.com https://www.youtube.com https://player.vimeo.com http://player.vimeo.com http://www.google.com https://www.google.com https://*.doubleclick.net https://assets.zendesk.com https://static.zdassets.com https://kickico.zendesk.com https://*.zopim.com https://*.zopim.io https://platform.twitter.com http://syndication.twitter.com https://syndication.twitter.com https://test-api.sumsub.com https://api.sumsub.com tg: https://accounts.google.com/;font-src 'self' data: https://fonts.gstatic.com https://*.zopim.com https://*.zopim.io;connect-src * 'self' 'unsafe-inline' http://www.youtube.com https://www.youtube.com http://mc.yandex.ru https://mc.yandex.ru http://logx.optimizely.com https://logx.optimizely.com http://api.mixpanel.com https://api.mixpanel.com http://www.google-analytics.com https://www.google-analytics.com http://www.facebook.com https://www.facebook.com https://web.facebook.com http://staticxx.facebook.com https://staticxx.facebook.com https://assets.zendesk.com https://static.zdassets.com https://kickico.zendesk.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io https://api.coinmarketcap.com https://syndication.twitter.com https://test-api.sumsub.com https://api.sumsub.com; 1
frame-ancestors  'self' https://library.mulesoft.com; 1
default-src 'none'; script-src blob: 'unsafe-eval' 'nonce-N3RXbW5Wdjc1NjNlSEpoeVRZWDRYN0lN' *.teknik.io teknik.io; style-src 'unsafe-inline' *.teknik.io teknik.io; img-src data: *; font-src data: *.teknik.io teknik.io; connect-src wss: blob: data: *.teknik.io teknik.io; media-src *; worker-src blob: mediastream: *.teknik.io teknik.io; form-action *.teknik.io teknik.io; base-uri *.teknik.io teknik.io; frame-ancestors *.teknik.io teknik.io; object-src *.teknik.io teknik.io; 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://papelenblanco.com https://*.papelenblanco.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self' https: 'unsafe-inline'; style-src https: 'self' 'unsafe-inline'; script-src https: 'self' 'unsafe-eval' 'unsafe-inline'; font-src 'self' data: https:; img-src 'self' https: data: 1
frame-ancestors self googletagmanager.com cerebro.alibaba.ir 1
base-uri 'none'; object-src 'none'; script-src https://boti.ru/logs/ https://boti.ru/sidekiq/ https://boti.ru/mini-profiler-resources/ https://boti.ru/assets/ https://boti.ru/brotli_asset/ https://boti.ru/extra-locales/ https://boti.ru/highlight-js/ https://boti.ru/javascripts/ https://boti.ru/plugins/ https://boti.ru/theme-javascripts/ https://boti.ru/svg-sprite/ https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtm.js; worker-src 'self' https://boti.ru/assets/ https://boti.ru/brotli_asset/ https://boti.ru/javascripts/ https://boti.ru/plugins/ 1
frame-ancestors https://*.pcon-solutions.com http://*.pcon-solutions.com; block-all-mixed-content 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; connect-src 'self' https:; font-src 'self' https: data:; media-src 'self' https:; report-uri 'self' https:; child-src 'self' https:; form-action 'self' https:; frame-ancestors 'self' https:; object-src 'self' https:; frame-src 'self' https:; worker-src 'self' https:; manifest-src 'self' https:; base-uri 'self' https: 1
frame-ancestors 'self' *.commercevision.biz *.commercevision.com.au  *.officemax.co.nz punchoutcommerce.com *.seismic.com  */punchout.aspx *.ariba.com *.pacifictechsol.com 1
default-src 'none' ;         script-src 'self' 'unsafe-inline' 'unsafe-eval'  ajax.googleapis.com  code.jquery.com  maps.googleapis.com www.youtube.com s.ytimg.com code.highcharts.com cdn.jsdelivr.net edge-cdn.net dl.videos.metrosystems.net *.twimg.com *.twitter.com ssl.siteimprove.com siteimproveanalytics.com  www.gstatic.com dl.edge-cdn.net mfpembedcdnweu.azureedge.net app.mailjet.com *.qualtrics.com www.openpetition.de www.google-analytics.com;          style-src 'self' 'unsafe-inline' fonts.googleapis.com *.twitter.com www.gstatic.com d1azc1qln24ryf.cloudfront.net cloud.typography.com *.twimg.com www.metroag.de;          img-src 'self' csi.gstatic.com dl.edge-cdn.net data: maps.googleapis.com maps.gstatic.com *.twimg.com *.twitter.com ssl.siteimprove.com www.gstatic.com app.miag.com                  maintenance.metroag.de 1634.global.siteimproveanalytics.io mfpembedcdnweu.azureedge.net *.qualtrics.com *.metroag.de *.metroag.eu *.metrogroup.de *.miag.com                  *.metro-cc.com *.metronom.com *.metro-wholesale.de *.metro-wholesale.com *.metro-properties.de *.metro-gruenderstudie.de *.metro-startupstudy.com *.metrosystems.ro                 *.metro-advertising.de *.metro-advertising.com *.metro-advertising.pl *.handel-erklaert.de *.metro-sourcing.hk *.metro-logistics.de *.metro-campus.de                 *.metro-services.in *.metro-services.pl *.mpulse.de *.metro-unboxed.de *.metro-unboxed.com *.metro-potentials.com *.arbeitgeber-ahd.de                 *.metro-competencies.com *.metro-trainingcenter.de www.openpetition.de *.wirsindgekommenumzubleiben.de *.google-analytics.com;         frame-src 'self' www.youtube.com irs.tools.investis.com player.admiralcloud.com *.twitter.com www.google.com dev.dieproduktion.de *.own-business-day.com forms.office.com login.microsoftonline.com app.mailjet.com feedback.metro-cc.com;         font-src 'self' data: fonts.googleapis.com fonts.gstatic.com d1azc1qln24ryf.cloudfront.net www.openpetition.de;          object-src 'self'  ;         base-uri 'none';         connect-src 'self' dl.edge-cdn.net *.twitter.com www.3dzeitschrift.de *.qualtrics.com;         media-src 'self' jpn.videos.metrosystems.net edge-cdn.net ;         report-uri MagReport.csp?cspReport=true 1
default-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' *.zhengjie.com *.cnzz.com hm.baidu.com https://res.wx.qq.com *.google-analytics.com *.baidustatic.com https://pos.baidu.com cpu.baidu.com tudouui.com *.alicdn.com *.googlesyndication.com *.googletagservices.com *.googleadservices.com adservice.google.com adservice.google.com.hk adservice.google.co.jp adservice.google.co.kr *.google.com.tw adservice.google.gr *.micro-bee.com *.cxfzw.cn *.gng5.cn *.126.net *.czxhpt.cn *.weikefanli.com:5526 cdnjs.cloudflare.com;style-src 'self' 'unsafe-inline' cdn1.zhengjie.com tudouui.com *.googleapis.com *.googlesyndication.com;img-src * data: hm.baidu.com;connect-src 'self' wss://www.zhengjie.com *.googlesyndication.com *.google-analytics.com *.doubleclick.net adservice.google.com csi.gstatic.com hm.baidu.com;font-src *.gstatic.com;object-src 'self' img1.zhengjie.com;media-src 'self';frame-src 'self' *.qq.com *.tudou.com tudouui.com *.youku.com weixin: *.alicdn.com *.tanx.com *.baidu.com *.doubleclick.net *.gstatic.com *.googlesyndication.com *.cxfzw.cn *.gng5.cn *.yjst.cn; 1
default-src 'self' packages.umbraco.org our.umbraco.org; connect-src 'self' prdag.buzzeasy.com directline.botframework.com wss://directline.botframework.com; frame-ancestors 'self' www.rslcontent.co.uk rslcontent.co.uk wymetro.azurewebsites.net wymetro-staging.azurewebsites.net wymetro-auth.azurewebsites.net wymetro-auth-staging.azurewebsites.net wymetro-uat.azurewebsites.net wymetro-dev.azurewebsites.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com wymetro.widget.custhelp.com wymetroforms.firmstep.com westyorks-ca.firmstep.com platform.twitter.com; font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' buzzeasychatfiles.azureedge.net www.google-analytics.com wymetro.widget.custhelp.com wymetro.custhelp.com www.rnengage.com wymetroforms.firmstep.com www.google.com www.gstatic.com ssl.google-analytics.com westyorks-ca.firmstep.com platform.twitter.com cdn.syndication.twimg.com ajax.aspnetcdn.com;img-src * data: blob:;frame-src 'self' r1.dotmailer-surveys.com yorkshire.acisconnect.com www.youtube.com wymetro.acisconnect.com www.youtube-nocookie.com www.communicatoremail.com planner.wymetro.com www.google.com testcheckout.sagepay.com checkout.sagepay.com; object-src 'self' www.youtube.com www.youtube-nocookie.com 1
default-src * https:; frame-ancestors 'self'; img-src * data:; font-src * data:; style-src * 'unsafe-inline'; script-src 'self' https://*.jquery.com https://*.bootstrapcdn.com https://*.wp.com https://debugme.eu https://*.facebook.com *.fbcdn.net https://*.twitter.com https://*.youtube.com  *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' https:; frame-src 'self' https://*.youtube.com *.youtube.com *.youtube-nocookie.com *.google.com 127.0.0.1:* https:; media-src 'self' *.youtube.com *.youtube-nocookie.com *.google.com 127.0.0.1:* https:; object-src 'self' *.googlevideo.com *.ytimg.com *.youtube.com *.youtube-nocookie.com *.google.com 127.0.0.1:* https:; 1
frame-ancestors 'self' wpseo.awoo.com.tw www.awoo.com.tw; 1
default-src 'self'; font-src data: https://assets.dm.de https://cdn.kali.services.dmtech.com; child-src 'self' blob:; script-src https://*.mm.dm.cz 'self' 'unsafe-eval' https://d2pqvatijh75rn.cloudfront.net https://a0.modiface.com https://assets.dm.de https://cdn.kali.services.dmtech.com https://*.mm.dm.de https://ssl.hurra.com https://*.bazaarvoice.com https://mpsnare.iesnare.com; worker-src 'self' blob:; connect-src https://*.mm.dm.cz 'self' https://d2pqvatijh75rn.cloudfront.net https://a0.modiface.com https://coupon-aktionen.dm.de https://services.dm.de https://products.dm.de https://*.services.dmtech.com https://assets.dm.de https://cdn.kali.services.dmtech.com https://cart.services.dmtech.com https://*.mm.dm.de https://*.services.dmtech.com https://api.mapbox.com https://events.mapbox.com https://ssl.hurra.com https://*.bazaarvoice.com https://browser-http-intake.logs.datadoghq.eu https://login.dm.cz https://mpsnare.iesnare.com https://staedtetour.dm-fb2.de; style-src 'self' 'unsafe-inline' https://assets.dm.de https://cdn.kali.services.dmtech.com https://*.bazaarvoice.com https://api.tiles.mapbox.com; img-src https://*.mm.dm.cz 'self' data: blob: https://assets.dm.de https://cdn.kali.services.dmtech.com https://cdn02.dm-static.com https://media.dm-static.com https://*.services.dmtech.com https://ssl.hurra.com  https://*.mm.dm.de https://*.bazaarvoice.com https://i.ytimg.com https://img.youtube.com https://play.google.com https://linkmaker.itunes.apple.com https://d2pqvatijh75rn.cloudfront.net https://a0.modiface.com https://d3s22jwy77sx9i.cloudfront.net; frame-ancestors 'self' https://*.dm.cz https://app.datadoghq.eu https://*.lxprod.ka.de.dm-drogeriemarkt.com; frame-src 'self' https://ssl.hurra.com https://*.dm.cz https://*.services.dmtech.com https://sandbox.om.dm.de https://*.bazaarvoice.com https://www.youtube-nocookie.com https://configurator.nuk.de/ https://hey-familie.podigee.io https://cdn.podigee.com; base-uri 'self' https://*.mm.dm.de https://*.services.dmtech.com https://events.mapbox.com; form-action 'self' https://login.dm.cz https://checkout.dm.cz https://*.bazaarvoice.com; manifest-src 'self'; report-uri /__csp-reports__ 1
default-src 'self' www.hyd.gov.hk; style-src 'self' 'unsafe-inline';script-src 'self' 'unsafe-inline'; 1
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; object-src 'self'; report-uri https://b4k.co/report-csp.php; 1
default-src 'none'; base-uri 'none'; font-src 'https://fonts.googleapis.com'; img-src 'self' https://i.imgur.com; object-src 'none'; script-src 'self' https://*.tunapop.io; style-src 'self' https://*.tunapop.io 1
default-src 'self' data: blob: shopify.com *.streamshark.io *.myshopify.io *.wistia.com embedwistia-a.akamaihd.net *.litix.io *.wistia.net *.shopify.com *.shopifysvc.com notify.bugsnag.com *.mode.com fonts.gstatic.com *.youtube.com monorail-edge-staging.shopifycloud.com *.doubleclick.net alb.reddit.com bat.bing.com cdn.bizible.com collect.tealiumiq.com ct.pinterest.com datacloud.tealiumiq.com my.tealiumiq.com p.adsymptotic.com px.ads.linkedin.com t.co tr.snapchat.com www.facebook.com www.google.com www.google.ca www.google-analytics.com shopify-assets.shopifycdn.com; style-src 'self' 'unsafe-inline' data: blob: cdn.shopify.com cdn.shopifycloud.com; script-src 'self' 'nonce-2f053175-48a7-4917-bc9a-a6c7312b083a' 'nonce-c4192fb0-4ce0-413b-a7d0-698b62713b13' www.googletagmanager.com www.google-analytics.com tags.tiqcdn.com cdn.bizible.com deploytealium.com snap.licdn.com static.ads-twitter.com analytics.twitter.com www.redditstatic.com s.yimg.com s.pinimg.com sc-static.net bat.bing.com connect.facebook.net sp.analytics.yahoo.com cdn.shopify.com cdn.shopifycloud.com fast.wistia.com app.wistia.com blob:; block-all-mixed-content; upgrade-insecure-requests 1
block-all-mixed-content;default-src 'none';img-src 'self';style-src 'self'; 1
default-src 'self' data: chatbot.mycler.ch *.cler.ch maps.googleapis.com; font-src 'self' *.cler.ch *.gstatic.com; img-src 'self' data: *.cler.ch ad.doubleclick.net maps.googleapis.com *.gstatic.com ad.doubleclick.net google.com google.ch raw.githubusercontent.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cler.ch assets.adobedtm.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net chat.cler.ch *.googleapis.com *.youtube.com *.doubleclick.net; style-src 'self' 'unsafe-inline' *.cler.ch *.googleapis.com; frame-ancestors 'self' www.jobs.ch *.cler.ch *.mycler.ch; frame-src 'self'  'unsafe-inline' *.cler.ch *.mycler.ch *.doubleclick.net https://irs.tools.investis.com *.youtube.com https://insight.adsrvr.org *.doubleclick.net *.google.com *.google.ch https://sitecatalyst.omniture.com https://authorize.omniture.com https://sc3.omniture.com *.swissmusicawards.ch https://match.adsrvr.org  https://api.raisenow.com/ https://payment.datatrans.biz/ https://acs1.viseca.ch/ https://epayment.postfinance.ch/ https://edge.capturemedia.network https://activitymap.adobe.com 1
default-src 'self' https://www.youtube.com http://www.youtube.com https://cdnjs.cloudflare.com/ https://use.fontawesome.com/ https://viacep.com.br/; script-src 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net consulplan.net www.consulplan.net consulplan.com www.consulplan.com www.google-analytics.com ajax.googleapis.com cdnjs.cloudflare.com code.jquery.com www.google.com/recaptcha viacep.com.br; img-src 'self' consulplan.net/images/ http://consulplan.net/images/ www.google-analytics.com https://d3du0p87blxrg0.cloudfront.net https://facebook.com/; style-src 'unsafe-inline' http://www.consulplan.net/ use.fontawesome.com code.jquery.com cdnjs.cloudflare.com consulplan.net www.consulplan.net www.consulplan.net/ consulplan.net/ consulplan.com www.consulplan.com; 1
default-src * data: https: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests 1
default-src 'self' *.googleapis.com *.mailchimp.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.amazon.com *.amazonaws.com *.cloudflare.com *.callrail.com *.googleadservices.com *.hotjar.com *.facebook.net *.trackcmp.net *.bing.net *.google.com *.facebook.com *.bing.com *.doubleclick.net 'unsafe-inline'; script-src 'self' *.googleapis.com *.mailchimp.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.amazon.com *.amazonaws.com *.cloudflare.com *.callrail.com *.list-manage.com *.googleadservices.com *.hotjar.com *.facebook.net *.facebook.com *.trackcmp.net trackcmp.net *.bing.net *.bing.com *.doubleclick.net 'unsafe-inline'; style-src 'self' *.googleapis.com *.mailchimp.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.amazon.com *.amazonaws.com *.cloudflare.com *.callrail.com 'unsafe-inline' 1
default-src * 'unsafe-inline' 'unsafe-eval' data:; 1
base-uri 'self'; connect-src 'self' https://epfykmaw.opencagedata.com; font-src 'self' https://assets.opencagedata.com; object-src 'none'; frame-ancestors 'none'; frame-src https://blog.opencagedata.com https://js.stripe.com  https://hcaptcha.com https://*.hcaptcha.com; script-src 'self' 'unsafe-inline' https://assets.opencagedata.com https://js.stripe.com https://cdnjs.cloudflare.com https://epfykmaw.opencagedata.com   https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' 'unsafe-inline' https://assets.opencagedata.com https://hcaptcha.com https://*.hcaptcha.com 1
default-src 'self'; frame-src 'self' https://va.tawk.to https://bid.g.doubleclick.net https://static-v.tawk.to https://www.youtube.com https://player.vimeo.com; connect-src 'self' https://script.crazyegg.com https://static-v.tawk.to https://va.tawk.to https://www.google-analytics.com https://tracking.crazyegg.com https://api.company-target.com https://stats.g.doubleclick.net; script-src 'self' data: * 'unsafe-inline' 'unsafe-eval' https://static-v.tawk.to https://ajax.googleapis.com https://code.jquery.com https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://use.fontawesome.com  https://cdn.jsdelivr.net; img-src 'self' data: * https://static-v.tawk.to https://ssl.google-analytics.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://use.fontawesome.com https://static-v.tawk.to https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://static-v.tawk.to https://use.fontawesome.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com; media-src 'self' https://static-v.tawk.to https://d2z6n7frhx0hun.cloudfront.net https://cdn.xoriant.com https://cdn1.xoriant.com; 1
default-src 'none'; connect-src 'self' https://fg8vvsvnieiv3ej16jby.litix.io/ https://d3hb14vkzrxvla.cloudfront.net/ https://*.wistia.com/ https://www.google-analytics.com/ https://yoast.com https://api.hubspot.com/ https://forms.hubspot.com/ https://exceptions.hubspot.com/ https://forms.hsforms.com/ https://stats.g.doubleclick.net/ https://ipinfo.io/; font-src 'self' https://fonts.gstatic.com https://stackpath.bootstrapcdn.com/ data: https://*.googleapis.com/ https://forms.hubspot.com/; frame-src 'self' https://wp-rocket.me/ https://forms.hsforms.com/ https://www.youtube.com https://player.vimeo.com/ https://app.hubspot.com/; img-src 'self' https://*.wistia.com/ https://embedwistia-a.akamaihd.net https://www.google.co.in/ https://wp-rocket.me/ https://secure.gravatar.com/ data: https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://layouts.siteorigin.com/ https://www.googletagmanager.com/ https://demo.siteorigin.com/ https://ts.w.org/ https://s.w.org/ https://maps.googleapis.com/ https://maps.gstatic.com/ https://ps.w.org/ https://*.gravatar.com/ https://track.hubspot.com/ https://forms.hsforms.com/ https://ssl.gstatic.com/ https://www.google.com/; media-src 'self' https://vod-progressive.akamaized.net/ https://fast.wistia.net/ https://www.youtube.com/ data: https://player.vimeo.com/; object-src 'self' https://www.youtube.com https://player.vimeo.com/; script-src 'self' 'unsafe-inline' https://cdn.mxpnl.com https://beacon-v2.helpscout.net/ https://fast.wistia.com/ https://www.youtube.com/ https://s.ytimg.com/ https://js.hsforms.net https://forms.hsforms.com/ https://player.vimeo.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://emailoctopus.com/ 'unsafe-eval' https://maps.googleapis.com/ https://s3.amazonaws.com/ https://js.hs-scripts.com/ https://js.usemessages.com/ https://js.hs-analytics.net/ https://js.hscollectedforms.net/ https://js.hsleadflows.net/ https://tagmanager.google.com/ https://js.hs-banner.com/ https://cdnjs.cloudflare.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://stackpath.bootstrapcdn.com/ https://cdn-images.mailchimp.com/ https://tagmanager.google.com/ https://cdnjs.cloudflare.com/ https://emailoctopus.com/; 1
frame-ancestors 'none'; frame-src https://*.papyrus.com https://*.google.com *.youtube.com *.youtube-nocookie.com youtu.be; base-uri 'none'; default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.papyrus.com *.procurator.com *.scaldia.com *.velimark.com *.pacudo.com *.walkimedical.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.errorception.com https://*.dibspayment.eu data: blob:; style-src 'self' 'unsafe-inline' https://*.dibspayment.eu; img-src 'self' *.papyrus.com *.procurator.com *.scaldia.com *.velimark.com *.pacudo.com *.walkimedical.com https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://*.dibspayment.eu *.ytimg.com data:; connect-src 'self' *.papyrus.com *.procurator.com *.scaldia.com *.velimark.com *.pacudo.com *.walkimedical.com https://www.google-analytics.com https://www.googletagmanager.com https://*.errorception.com https://*.dibspayment.eu; font-src 'self' https://fonts.gstatic.com data:; media-src 'self' *.papyrus.com *.procurator.com *.scaldia.com *.velimark.com *.pacudo.com *.walkimedical.com *.youtube.com *.youtube-nocookie.com youtu.be; object-src 'self' *.googlevideo.com *.ytimg.com *.youtube.com *.youtube-nocookie.com *.youtu.be; form-action 'self' *.papyrus.com *.procurator.com *.scaldia.com *.velimark.com *.pacudo.com *.walkimedical.com https://www.procurator.net http://velimark-pv.mail-eur.net https://*.gpwebpay.com https://*.sia.eu https://*.architrade.com https://*.dibspayment.eu; child-src 'self' *.papyrus.com *.procurator.com *.scaldia.com *.velimark.com *.pacudo.com *.walkimedical.com https://www.google.com/recaptcha/ https://*.dibspayment.eu; manifest-src 'self' 1
default-src 'self' data: https:; object-src 'self'; script-src * data: 'unsafe-inline' https:; style-src 'self' data: 'unsafe-inline' https:; img-src * data: https:; 1
report-uri /api/csp-violation; report-to csp-violation 1
default-src 'self'; font-src 'self' data: https://fonts.gstatic.com/; img-src 'self' https: data:; object-src 'none'; script-src 'self' 'unsafe-inline' https://bam.nr-data.net https://cdn.polyfill.io https://js.stripe.com https://www.paypal.com https://www.paypalobjects.com https://www.googletagmanager.com https://www.googleadservices.com https://tagmanager.google.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://js.honeybadger.io https://static.hotjar.com https://script.hotjar.com https://vars.hotjar.com https://www.youtube.com https://s.ytimg.com; connect-src 'self' https://www.paypal.com https://www.sandbox.paypal.com https://www.google-analytics.com https://stats.g.doubleclick.net https://storage.googleapis.com https://api.honeybadger.io https://*.hotjar.com https://*.hotjar.io wss: ws:; style-src 'self' https: 'unsafe-inline' blob:; frame-src 'self' https://js.stripe.com https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://vars.hotjar.com https://www.google.com https://www.youtube-nocookie.com 1
default-src 'self' http: https: data: *.google.com *.googleapis.com *.googlecode.com *.googleusercontent.com *.gstatic.com *.scrivito.com *.scrvt.com *.svlfg.de scrivito-public-cdn.s3.eu-west-1.amazonaws.com scrivito-upload.s3-eu-west-1.amazonaws.com scrivito-upload.s3-accelerate.amazonaws.com img.youtube.com localhost:3000 *.intra.pinuts.de *.intra.pinuts.de:3000 *.intra.pinuts.de:9000; base-uri 'self' *.google.com *.googleapis.com *.googlecode.com *.googleusercontent.com *.gstatic.com *.scrivito.com *.scrvt.com *.svlfg.de scrivito-public-cdn.s3.eu-west-1.amazonaws.com scrivito-upload.s3-eu-west-1.amazonaws.com scrivito-upload.s3-accelerate.amazonaws.com img.youtube.com localhost:3000 *.intra.pinuts.de *.intra.pinuts.de:3000 *.intra.pinuts.de:9000; font-src 'self' data: *.google.com *.googleapis.com *.googlecode.com *.googleusercontent.com *.gstatic.com *.scrivito.com *.scrvt.com *.svlfg.de scrivito-public-cdn.s3.eu-west-1.amazonaws.com scrivito-upload.s3-eu-west-1.amazonaws.com scrivito-upload.s3-accelerate.amazonaws.com img.youtube.com localhost:3000 *.intra.pinuts.de *.intra.pinuts.de:3000 *.intra.pinuts.de:9000; frame-ancestors 'self' *.google.com *.googleapis.com *.googlecode.com *.googleusercontent.com *.gstatic.com *.scrivito.com *.scrvt.com *.svlfg.de scrivito-public-cdn.s3.eu-west-1.amazonaws.com scrivito-upload.s3-eu-west-1.amazonaws.com scrivito-upload.s3-accelerate.amazonaws.com img.youtube.com localhost:3000 *.intra.pinuts.de *.intra.pinuts.de:3000 *.intra.pinuts.de:9000; media-src 'self' data: *.google.com *.googleapis.com *.googlecode.com *.googleusercontent.com *.gstatic.com *.scrivito.com *.scrvt.com *.svlfg.de scrivito-public-cdn.s3.eu-west-1.amazonaws.com scrivito-upload.s3-eu-west-1.amazonaws.com scrivito-upload.s3-accelerate.amazonaws.com img.youtube.com localhost:3000 *.intra.pinuts.de *.intra.pinuts.de:3000 *.intra.pinuts.de:9000; object-src 'self' blob: data: *.google.com *.googleapis.com *.googlecode.com *.googleusercontent.com *.gstatic.com *.scrivito.com *.scrvt.com *.svlfg.de scrivito-public-cdn.s3.eu-west-1.amazonaws.com scrivito-upload.s3-eu-west-1.amazonaws.com scrivito-upload.s3-accelerate.amazonaws.com img.youtube.com localhost:3000 *.intra.pinuts.de *.intra.pinuts.de:3000 *.intra.pinuts.de:9000; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: *.google.com *.googleapis.com *.googlecode.com *.googleusercontent.com *.gstatic.com *.scrivito.com *.scrvt.com *.svlfg.de scrivito-public-cdn.s3.eu-west-1.amazonaws.com scrivito-upload.s3-eu-west-1.amazonaws.com scrivito-upload.s3-accelerate.amazonaws.com img.youtube.com localhost:3000 *.intra.pinuts.de *.intra.pinuts.de:3000 *.intra.pinuts.de:9000; style-src 'self' 'unsafe-inline' http: *.google.com *.googleapis.com *.googlecode.com *.googleusercontent.com *.gstatic.com *.scrivito.com *.scrvt.com *.svlfg.de scrivito-public-cdn.s3.eu-west-1.amazonaws.com scrivito-upload.s3-eu-west-1.amazonaws.com scrivito-upload.s3-accelerate.amazonaws.com img.youtube.com localhost:3000 *.intra.pinuts.de *.intra.pinuts.de:3000 *.intra.pinuts.de:9000 1
connect-src 'self';default-src 'self';font-src 'self' maxcdn.bootstrapcdn.com fisheye.openacs.org data:;form-action 'self';frame-ancestors 'self';img-src ipv6-test.com www.gravatar.com 'self';object-src 'none';report-uri /SYSTEM/csp-collector.tcl;script-src maxcdn.bootstrapcdn.com 'unsafe-inline' 'self' 'nonce-780A487F0DBC21BBA68E2694BE12AA2F4A915A94';style-src maxcdn.bootstrapcdn.com 'self' 'unsafe-inline';base-uri 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com/ https://www.googletagmanager.com/ *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org cba.informz.net cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com cdnjs.cloudflare.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com cdnjs.cloudflare.com data:; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com cba.informz.net https://stats.g.doubleclick.net prod.ctbar.org; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com; 1
font-src 'self' data: *.bookatable.com *.googleapis.com *.tenkites.com *.bing.com *.microsoft.com *.designmynight.com *.gstatic.com *.cloudfront.net; style-src 'self' data: *.googleapis.com *.bing.com *.bookatable.com *.microsoft.com *.designmynight.com *.tenkites.com *.cloudfront.net 'unsafe-inline'; frame-ancestors 'self' *.tenkites.com 1
default-src 'self' *.staticflickr.com *.flickr.com maps.google.com uninfo.org ims.undg.org bam.nr-data.net; script-src www.youtube.com *.ytimg.com 'self' d3js.org cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com js-agent.newrelic.com *.twitter.com *.twimg.com bam.nr-data.net *.fontawesome.com maps.google.com maps.googleapis.com www.gstatic.com uninfo-production-mon-docs.s3.amazonaws.com *.twitter.com *.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' *.flickr.com *.staticflickr.com fonts.googleapis.com use.fontawesome.com *.twitter.com *.twimg.com *.fontawesome.com www.gstatic.com 'unsafe-inline'; img-src 'self' www.un.org.vn *.un.org gallery.mailchimp.com *.staticflickr.com *.gstatic.com maps.google.com https: data:; media-src 'self' www.un.org.vn *.un.org; frame-src 'self' maps.google.com www.google.com www.youtube.com player.vimeo.com *.twitter.com; font-src 'self' fonts.googleapis.com *.fontawesome.com fonts.gstatic.com *.twitter.com *.twimg.com; connect-src 'self' bam.nr-data.net *.facebook.net www.gstatic.com uninfo.org ims.undg.org uninfo-production-mon-docs.s3.amazonaws.com *.fontawesome.com; report-uri /report-csp-violation 1
media-src 'self' olark.com p.adsymptotic.com *.cloudfront.net static.olark.com; worker-src 'self'; block-all-mixed-content; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' olark.com p.adsymptotic.com static.olark.com *.cloudfront.net info.rescale.com cdn2.hubspot.net platform.twitter.com ton.twimg.com; form-action 'self' forms.hsforms.com syndication.twitter.com platform.twitter.com; connect-src 'self' *.cloudfront.net performance.typekit.net nrpc.olark.com https://platform.rescale.com eu.rescale.com platform.rescale.jp kr.rescale.com itar.rescale.com api.hubapi.com www.google-analytics.com bam.nr-data.net stats.g.doubleclick.net 285-wfd-495.mktoresp.com c.6sc.co ib.adnxs.com secure.adnxs.com; plugin-types application/pdf; upgrade-insecure-requests; default-src 'none'; font-src 'self' *.cloudfront.net use.typekit.net static.hsappstatic.net; frame-src 'self' forms.hsforms.com www.youtube.com static.olark.com info.rescale.com app.hubspot.com https://platform.rescale.com platform.twitter.com syndication.twitter.com www.facebook.com bid.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' olark.com p.adsymptotic.com www.google-analytics.com js-agent.newrelic.com js.hs-analytics.net cdn.heapanalytics.com www.googletagmanager.com bam.nr-data.net *.cloudfront.net use.typekit.net js.hsforms.net js.hs-scripts.com forms.hsforms.com static.olark.com api.olark.com nrpc.olark.com info.rescale.com static.hsappstatic.net apis.google.com snap.licdn.com px.ads.linkedin.com ajax.googleapis.com js.hsadspixel.net https://platform.rescale.com platform.twitter.com static.ads-twitter.com analytics.twitter.com connect.facebook.net js.hs-banner.com cdn.syndication.twimg.com www.googleadservices.com googleads.g.doubleclick.net munchkin.marketo.net j.6sc.co trk.techtarget.com; manifest-src 'self'; object-src 'self'; img-src 'self' data: *.cloudfront.net https://resources.rescale.com/ boomsupersonic.com p.typekit.net www.google-analytics.com heapanalytics.com forms.hsforms.com stats.g.doubleclick.net img.youtube.com log.olark.com hubspot-avatars.s3.amazonaws.com track.hubspot.com px.ads.linkedin.com platform.twitter.com static.ads-twitter.com analytics.twitter.com syndication.twitter.com www.facebook.com js.hs-banner.com p.adsymptotic.com pbs.twimg.com ton.twimg.com t.co www.google.com b.6sc.co apt.techtarget.com; base-uri 'self' 1
default-src 'unsafe-inline' 'self' blob: *.bloominsuranceagency.com *.bloominsurance.com *.hrmdirect.com *.googletagmanager.com *.googleapis.com *.gstatic.com; script-src 'self' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com *.hrmdirect.com 1
default-src https: data: 'unsafe-inline' 'unsafe-eval' https://www.dogweb.no/ 1
default-src 'self' 'unsafe-inline' data: 'unsafe-inline' 'unsafe-eval' *.googleapis.com fonts.gstatic.com *.etonshirts.com d2shcsax0c1rkw.cloudfront.net ct.pinterest.com www.dwin1.com *.awin1.com www.zenaps.com browser-update.org www.googletagmanager.com www.googleoptimize.com *.hotjar.com s.pinimg.com *.veinteractive.com *.volvelle.tech connect.nosto.com g.alicdn.com www.google-analytics.com www.googleadservices.com snap.licdn.com 7281062.collect.igodigital.com nova.collect.igodigital.com *.fitanalytics.com connect.facebook.net *.freshchat.com *.webpush.freshchat.com 6143873.fls.doubleclick.net googleads.g.doubleclick.net px.ads.linkedin.com stats.g.doubleclick.net stats.g.doubleclick.net *.google.com *.google.se *.facebook.com *.adyen.com images.ctfassets.net videos.ctfassets.net eton.centraqa.com eton.centra.com *.linkedin.com *.newrelic.com *.hotjar.io bam.nr-data.net *.vimeo.com *.youtube.com *.contentful.com eton.centracdn.net etonshirts-fa060.firebaseapp.com us-central1-etonshirts-fa060.cloudfunctions.net assets.voyado.com ws: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.facebook.com *.linkedin.com *.google.com *.google.no *.spyber.com *.googleapis.com *.addthis.com *.pinterest.com *.addthisedge.com *.apis.google.com *.googlesyndication.com; style-src 'self' *.googleapis.com 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:; script-src 'unsafe-inline' 'unsafe-eval' http: https:; style-src 'unsafe-inline' 'unsafe-eval' http: https:; img-src http: https: data: mediastream: blob:; connect-src 'self' http: https: data: mediastream: blob:; font-src http: https: data: mediastream: blob:; media-src http: https:; report-uri 'self'; child-src 'self'; form-action 'self'; frame-ancestors http: https: data: mediastream: blob:; object-src http: https: data: mediastream: blob:; frame-src http: https: data: mediastream: blob:; worker-src 'self'; manifest-src 'self'; base-uri 'self' http: https: data: mediastream: blob: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com/  http://fast.fonts.net https://www.kendoui.com https://www.googletagmanager.com https://snap.licdn.com https://connect.facebook.net https://ssl.google-analytics.com https://www.google-analytics.com https://static.ads-twitter.com https://analytics.twitter.com https://w.usabilla.com https://www.workable.com/ https://script.crazyegg.com/ https://tagmanager.google.com https://apply.workable.com/ https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net www.googleadservices.com googleads.g.doubleclick.net www.google.com https://api.usabilla.com/ https://cookie-cdn.cookiepro.com/ 1
default-src 'none'; script-src 'strict-dynamic' 'nonce-BthuU7mhBLkYPmAXjpOrItJ6iWIeDeig'; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: blob: a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org cdn.jsdelivr.net img.youtube.com log.pinterest.com maps.googleapis.com maps.gstatic.com static-v.tawk.to stats.g.doubleclick.net tawk.link widget.kominfo.go.id www.google-analytics.com www.gstatic.com; font-src 'self' data: cdnjs.cloudflare.com fonts.googleapis.com fonts.gstatic.com static-v.tawk.to; connect-src 'self' stats.addtoany.com widget.kominfo.go.id www.google-analytics.com https://*.tawk.to wss://*.tawk.to; media-src 'self' www.youtube.com; object-src 'self'; frame-src 'self' assets.pinterest.com public.tableau.com static.addtoany.com www.google.com www.youtube.com; worker-src 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content; base-uri 'self'; manifest-src 'self';report-to CSP 1
connect-src 'self' https://*.hotjar.com https://*.evidon.com https://*.brightcove.com https://adservice.google.com https://bam.nr-data.net https://brightcove.hs.llnwd.net https://knrpc.olark.com/nrpc/ https://l.betrad.com https://stats.addtoany.com/menu https://stats.g.doubleclick.net https://tagmanager.google.com https://vc.hotjar.io/ https://www.facebook.com https://www.google-analytics.com wss://*.hotjar.com https://chatterbox16.pfizer.com https://chatterbox32.pfizer.com; img-src 'self' about: data: https://* https://paco.pfizer.com; media-src 'self' data: blob: https://brightcove.hs.llnwd.net https://f1.media.brightcove.com https://static.olark.com https://secure.brightcove.com/services/mobile/streaming/ https://paco.pfizer.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://ajax.googleapis.com https://api.olark.com https://assets.adobedtm.com https://bam.nr-data.net https://cdnjs.cloudflare.com https://connect.facebook.net https://c.evidon.com https://d1v9u0bgi1uimx.cloudfront.net https://d29usylhdk1xyu.cloudfront.net https://d7v0k4dt27zlp.cloudfront.net/assets/ https://docs.gcs.digitalpfizer.com https://googleads.g.doubleclick.net https://js.bizographics.com https://js-agent.newrelic.com https://knrpc.olark.com/nrpc/ https://l.betrad.com https://maps.googleapis.com https://optoutapi.evidon.com https://p.adsymptotic.com https://pfizer-grv-eu.janraincapture.com https://players.brightcove.net https://px.ads.linkedin.com https://rpxnow.com/load/ https://s3.amazonaws.com/pfe_grv https://s3.amazonaws.com/pfe_im/ https://script.hotjar.com https://sjs.bizographics.com https://static.hotjar.com https://static.addtoany.com https://static.olark.com https://tagmanager.google.com https://tpc.googlesyndication.com https://vjs.zencdn.net https://www.bizographics.com https://www.google.com/recaptcha/ https://www.google.com/search/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.linkedin.com https://cdn.ampproject.org mdbootstrap.com pagecdn.io; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://cookies.pfizer.com https://d3hmp0045zy3cs.cloudfront.net https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://pfredirect.pfizersite.io https://s3.amazonaws.com/pfe_grv/ https://static.olark.com https://stackpath.bootstrapcdn.com https://tagmanager.google.com https://translate.googleapis.com https://use.typekit.net https://hello.myfonts.net fonts.googleapis.com https://use.fontawesome.com maxcdn.bootstrapcdn.com mdbootstrap.com; font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://docs.gcs.digitalpfizer.com/fonts/ https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://script.hotjar.com https://use.fontawesome.com/releases/ https://use.typekit.net https://vjs.zencdn.net; frame-src 'self' https://*.fls.doubleclick.net https://*.janrainsso.com https://bid.g.doubleclick.net https://l3.evidon.com https://players.brightcove.net https://static.addtoany.com https://static.olark.com https://tpc.googlesyndication.com https://vars.hotjar.com https://www.facebook.com https://www.google.com/maps/ https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.youtube.com; manifest-src 'self'; worker-src 'self' blob:; report-uri https://pfeprod.report-uri.com/r/t/csp/enforce 1
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' base-uri acn.com.ve www.acn.com.ve; 1
frame-ancestors 'none'; report-uri https://us.browser.tcell.insight.rapid7.com/csp/adf4f40ed58ded5cfe0592e186f50f0451c75d090b826c54c1b412cebfe13cf6 1
default-src 'self'  http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io https://www.aparat.com; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com https://www.aparat.com; frame-ancestors 'self' https://trustseal.enamad.ir 1
frame-src 'self' mailgun.org *.mailgun.org google.lt *.google.lt google.com *.google.com facebook.com *.facebook.com cookiebot.com *.awsapps.com awsapps.com *.cookiebot.com youtube.com *.youtube.com doubleclick.net *.doubleclick.net *.stripe.com rrr.lt *.rrr.lt *.cdnrrr.com *.hotjar.com ovoko.pl *.ovoko.pl 1
default-src https: wws: data: 'unsafe-inline' 'unsafe-eval'; font-src 'self' use.fortawesome.com use.typekit.net data: fonts.gstatic.com 1
script-src * https://vast.bespotful.com https://imasdk.googleapis.com https://ssl.google-analytics.com https://pxlssl.ibpxl.com  https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com 'unsafe-inline' 'unsafe-eval'; object-src * 1
default-src 'self'; font-src 'self' 'unsafe-inline' *.unity.com *.unitychina.cn *.unity3d.com *.cloudfront.net fonts.gstatic.com heapanalytics.com *.hotjar.com storage.googleapis.com gen-as-admin-int.storage.googleapis.com gen-as-admin-stg.storage.googleapis.com gen-as-admin-prd.storage.googleapis.com unity-assetstorev2-stg.storage.googleapis.com unity-assetstorev2-prd.storage.googleapis.com data:; connect-src 'self' tools.conversion.com *.doubleclick.net cdn.cookielaw.org privacyportal-eu.onetrust.com *.google-analytics.com *.s3.amazonaws.com *.sleeknote.com *.unity3d.com *.unitychina.cn *.cdp.internal.unity3d.com *.optimizely.com *.airbrake.io heapanalytics.com *.adroll.com *.hotjar.com ws://*.hotjar.com wss://*.hotjar.com *.resonai.com *.qualtrics.com *.kameleoon.com; object-src 'self'; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.sleeknote.com *.unity.com *.unitychina.cn *.unity3d.com *.cloudfront.net optimize.google.com cdnjs.cloudflare.com heapanalytics.com fonts.googleapis.com storage.googleapis.com gen-as-admin-int.storage.googleapis.com gen-as-admin-stg.storage.googleapis.com gen-as-admin-prd.storage.googleapis.com unity-assetstorev2-stg.storage.googleapis.com unity-assetstorev2-prd.storage.googleapis.com *.resonai.com; img-src * data:; media-src * data:; script-src 'self' 'nonce-EvzlSUXijM4Xmcdv' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' *.ads-twitter.com *.unity.com *.unitychina.cn *.unity3d.com *.cloudfront.net *.google-analytics.com geolocation.onetrust.com cdn.cookielaw.org www.googletagmanager.com www.google.com tagmanager.google.com optimize.google.com cdnjs.cloudflare.com d6tizftlrpuof.cloudfront.net *.optimizely.com cdn.heapanalytics.com heapanalytics.com *.adroll.com *.hotjar.com www.googleadservices.com connect.facebook.net *.doubleclick.net *.resonai.com storage.googleapis.com gen-as-admin-int.storage.googleapis.com gen-as-admin-stg.storage.googleapis.com gen-as-admin-prd.storage.googleapis.com unity-assetstorev2-stg.storage.googleapis.com unity-assetstorev2-prd.storage.googleapis.com *.naver.net *.bizographics.com prf.hn *.qualtrics.com; child-src 'self' *.unity.com *.unitychina.cn www.youtube.com youtu.be *.soundcloud.com sketchfab.com player.vimeo.com *.mixcloud.com v.qq.com *.hotjar.com www.facebook.com *.doubleclick.net; frame-src 'self' *.qualtrics.com *.adsrvr.org unity-assetstorev2-prd.storage.googleapis.com *.unity.com *.unitychina.cn www.youtube.com youtu.be *.soundcloud.com subscribe.sleeknote.com optimize.google.com sketchfab.com player.vimeo.com *.mixcloud.com v.qq.com *.cdn.optimizely.com *.hotjar.com www.facebook.com *.doubleclick.net *.assetstore.unity3d.com docs.google.com; manifest-src 'self' unity-assetstorev2-prd.storage.googleapis.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https:; frame-src 'self' webcampub.multivista.com https:; frame-ancestors 'self' data: blob:; 1
default-src 'none'; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; worker-src 'none'; manifest-src 'none'; form-action 'self'; connect-src 'self' https://www.rottentomatoes.com; media-src 'self'; base-uri 'self'; img-src 'self' 'unsafe-inline' data: https: http:; style-src 'self' 'unsafe-inline' https: http:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/jsapi https://www.google.com/uds/?file=visualization&v=1&packages=corechart 1
default-src 'none';                script-src 'self' 'unsafe-eval' d2wy8f7a9ursnm.cloudfront.net *.addthis.com *.addthisedge.com *.google.com *.google-analytics.com code.jquery.com 'sha256-J1uCbYkBbRY8Erp1Q2+/BLFPMimnS0czwmuf7yQqK6g=' 'sha256-4Txay7ZsbqSvcjGQRdXLSVe0F98k6hjorTSIwW4UnSk=' 'nonce-4baemGb0xJptoIGFP3Nd';                connect-src 'self' *.addthis.com *.bugsnag.com;                img-src * data:; style-src 'self' 'unsafe-inline' *.google.com;                font-src 'self' data:; frame-src 'self' *.libsyn.com *.youtube.com *.vimeo.com *.addthis.com *.google.com;                object-src * 1
default-src 'none'; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'strict-dynamic' 'nonce-FJDH5IFZ1OGI3vRcF0IgOa3WMkV22ay2'; img-src 'self' data: blob: a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org i.ytimg.com maps.googleapis.com maps.gstatic.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net widget.kominfo.go.id s3.eu-west-1.amazonaws.com twemoji.maxcdn.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' www.google-analytics.com stats.addtoany.com widget.kominfo.go.id wss://socket.tidio.co; media-src 'self' widget-v4.tidiochat.com; object-src 'none'; frame-src 'self' static.addtoany.com www.google.com www.youtube.com public.tableau.com; frame-ancestors 'self'; form-action 'self'; manifest-src 'self'; worker-src 'self'; block-all-mixed-content; upgrade-insecure-requests; base-uri 'self'; report-to CSP 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: wss://*.hotjar.com wss://*.zopim.com http://*.hotjar.com:* http://*.hotjar.io http://*.googletagmanager.com http://*.google-analytics.com http://*.gstatic.com http://*.googleapis.com http://*.youtube.com http://*.facebook.com http://*.facebook.net http://*.ads-twitter.com http://*.twitter.com http://t.co http://*.doubleclick.net http://*.adform.net http://*.clarovideo.net http://*.claromusica.com http://*.adsrvr.org http://*.claropr.com https://*.hotjar.com:* https://*.hotjar.io https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://*.youtube.com https://*.facebook.com https://*.facebook.net https://*.ads-twitter.com https://*.twitter.com https://t.co https://www.google.com https://*.doubleclick.net https://*.adform.net https://*.clarovideo.net https://*.claromusica.com https://*.adsrvr.org https://*.claropr.com; https://fonts.gstatic.com https://empresas.claropr.com media-src mediastream:; 1
frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.videopress.com *.google.com *.wp.com *.youtu.be *.googleapis.com *.google-analytics.com *.fontawesome.com *.gstatic.com *.donorperfect.net *.youtube.com *.vimeo.com; 1
default-src 'none'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net 'nonce-ab7314887865c4265e896c6e209d1cd6' https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google-analytics.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://www.googletagmanager.com; style-src  'self' 'unsafe-inline'; img-src 'self' data: www.googletagmanager.com  https://www.google-analytics.com/ https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.google.ru https://www.google-analytics.com www.googletagmanager.com https://vk.com; frame-src http://www.youtube.com https://www.youtube.com https://www.google.com https://bid.g.doubleclick.net https://www.google.com/recaptcha/; child-src http://www.youtube.com https://www.youtube.com https://www.google.com https://bid.g.doubleclick.net https://www.google.com/recaptcha/ http://www.youtube.com https://www.youtube.com https://www.google.com https://bid.g.doubleclick.net https://www.google.com/recaptcha/; media-src *.youtube.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net 1
block-all-mixed-content; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; object-src 'none' 1
default-src https: wss:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://wfolio.ru https://*.wfolio.ru https://*.fontawesome.com https://vk.com https://*.facebook.net https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.yandex.ru https://*.mail.ru https://*.announcekit.app https://*.carrotquest.io https://*.carrotquest.app https://*.carrottrack.io; style-src 'self' 'unsafe-inline' https:; img-src https: data:; font-src https: data:; media-src https:; object-src https:; child-src *; 1
default-src 'self' wizikey.com *.wizikey.com:*; style-src 'self' wizikey.com 'unsafe-inline' fonts.googleapis.com *.cloudfront.net; script-src 'self' wizikey.com *.hotstar.io *.razorpay.com *.typeform.com 'sha256-+Xq0Tqw53vxGrC37hrlwshK2TezAERBaaKOxUIoZin4=' 'nonce-gtm-inline' 'nonce-intercom-inline' *.intercom.io www.google.com www.gstatic.com apis.google.com www.google-analytics.com www.googletagmanager.com www.google-analytics.com *.cloudfront.net *.hotjar.com js.stripe.com js.intercomcdn.com js.usemessages.com js.hscollectedforms.net js.hs-analytics.net js.hs-banner.com 'nonce-hubspot-inline' js.hsforms.net 'sha256-+X35bZ8xR48ce/EA0x7HKauJSl8Q0mmD2o+TlaktFt4=' snap.licdn.com forms.hsforms.com; font-src 'self' fonts.gstatic.com js.intercomcdn.com; img-src * 'self' data: www.google.com img.youtube.com www.google-analytics.com stats.g.doubleclick.net www.google.co.in *.cloudfront.net orms.hsforms.com *.hubspot.com; media-src js.intercomcdn.com *.cloudfront.net; frame-src 'self' vars.hotjar.com js.stripe.com accounts.google.com www.google.com *.typeform.com www.youtube.com *.hubspot.com forms.hsforms.com; connect-src 'self' *.hotjar.com *.intercom.io *.wizikey.com wss://api.wizikey.com ws://api.wizikey.com wss://nexus-websocket-a.intercom.io wizikey-files.s3.amazonaws.com twitter.com *.luckyorange.net www.google-analytics.com stats.g.doubleclick.net wss://in.visitors.live wss://visitors.live *.hubspot.com wss://ws1.hotjar.com wss://ws5.hotjar.com hubspot-forms-static-embed.s3.amazonaws.com forms.hsforms.com 1
default-src 'self'; child-src 'self' share.intercom.io connect.facebook.net fast.wistia.com fast.wistia.net googleads.g.doubleclick.net *.hotjar.com bid.g.doubleclick.net 10317493.fls.doubleclick.net 10366747.fls.doubleclick.net youtube.com www.youtube.com js.stripe.com www.facebook.com staticxx.facebook.com *.soundcloud.com ti.to *.tito.io *.cdn.optimizely.com tpc.googlesyndication.com www.google.com ethn.io *.quora.com intercom-sheets.com app-ab27.marketo.com www.intercom-reporting.com d2c7xlmseob604.cloudfront.net js.intercomcdn.com insight.adsrvr.org; connect-src 'self'   www.intercom.com app.intercom.io app.intercom.com api.intercom.io api-visitor-analytics.intercom.com api-iam.intercom.io api-ping.intercom.io api.smartling.com js.intercomcdn.com nexus-websocket-a.intercom.io nexus-websocket-test.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-test.intercom.io store.intercomassets.com widget.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-test.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com abrtp1.marketo.com abrtp1-cdn.marketo.com app.getsentry.com stats.g.doubleclick.net www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com sentry.io www.facebook.com *.akamaihd.net *.optimizely.com *.wistia.com *.wistia.net *.quora.com *.soundcloud.com *.sndcdn.com *.clearbit.com 258-clw-344.mktoresp.com bat.bing.com cdn.bizible.com d2c7xlmseob604.cloudfront.net rum-collector-2.pingdom.net rum-http-intake.logs.datadoghq.com public-trace-http-intake.logs.datadoghq.com heapanalytics.com; font-src data: https: ; img-src data: blob: https: ; media-src data: blob: https: ; object-src 'none'; script-src 'self' 'unsafe-eval' app.intercom.io app.intercom.com js.intercomcdn.com store.intercomassets.com marketing.intercomassets.com widget.intercom.io ajax.googleapis.com analytics.twitter.com abrtp1.marketo.com abrtp1-cdn.marketo.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com bat.bing.com cdn-assets-prod.s3.amazonaws.com cdn.optimizely.com cdn3.optimizely.com cdn.ravenjs.com browser.sentry-cdn.com connect.facebook.net distillery.wistia.com distillery-main.wistia.com ethn.io fast.wistia.com fast.wistia.net ga.clearbit.com googleads.g.doubleclick.net sjs.bizographics.com js.stripe.com munchkin.marketo.net platform.twitter.com reveal.clearbit.com rtp-static.marketo.com script.hotjar.com secure.adnxs.com snap.licdn.com static.ads-twitter.com static.hotjar.com stats.g.doubleclick.net store.intercom.io ti.to tpc.googlesyndication.com www.datadoghq-browser-agent.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com *.jquery.com *.tito.io *.linkedin.com *.quora.com *.soundcloud.com *.sndcdn.com *.widerfunnel.com 'strict-dynamic' 'nonce-ZDIyOTAzZjYtNjUzYy00ZjNhLWIzNTQtZWRjOWMyN2NkZWM4'; style-src 'self' 'unsafe-inline' *.tito.io app-ab27.marketo.com marketing.intercomassets.com maxcdn.bootstrapcdn.com rtp-static.marketo.com fonts.googleapis.com tagmanager.google.com heapanalytics.com; worker-src data: blob: 1
default-src 'self' data:; script-src 'self' https://www.gstatic.com https://ajax.googleapis.com https://cdn.inspectlet.com https://*.pendo.io https://*.storage.googleapis.com https://browser.sentry-cdn.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://www.gstatic.com https://ajax.googleapis.com https://*.pendo.io https://*.storage.googleapis.com https://fonts.googleapis.com 'unsafe-inline' blob:; connect-src 'self' http://hn.inspectlet.com wss://ws.inspectlet.com https://mailsentinel.net https://sentry.io; img-src 'self' http://hn.inspectlet.com https://*.pendo.io https://*.storage.googleapis.com data:; font-src 'self' https://fonts.gstatic.com; 1
default-src 'self'; frame-src https://www.google.com https://optimize.google.com https://www.youtube.com; media-src 'self' https://videos.ctfassets.net https://storage.googleapis.com; style-src 'self' 'unsafe-inline' blob: https://tagmanager.google.com https://fonts.googleapis.com https://optimize.google.com; img-src 'self' https://downloads.ctfassets.net https://assets.ctfassets.net https://images.ctfassets.net https://ssl.gstatic.com https://www.google-analytics.com https://storage.googleapis.com https://www.snapchat.com data:; script-src 'self' 'nonce-NjA1NzQzMDUtZDBhMS00MzhmLThlYjctNGJmYzQ2NGZiMzg0' https://optimize.google.com https://snap.licdn.com https://tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com; connect-src 'self' https://graphql.contentful.com https://cdn.contentful.com https://preview.contentful.com https://www.snap.com https://www.snapchat.com https://www.google-analytics.com https://gcp.api.snapchat.com https://workday-dot-it-services-prod.appspot.com; font-src 'self' https://fonts.gstatic.com https://storage.googleapis.com; report-uri https://csp-central.appspot.com/report_csp 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.dilovamova.com https://webplus.info https://www.googletagmanager.com https://www.googletagservices.com https://www.chromestatus.com https://www.google-analytics.com https://*.google.com https://adservice.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://*.googleadservices.com https://ukrbuy.com https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://graph.facebook.com https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.doubleclick.net https://*.mgid.com https://*.yottos.com https://misto.travel https://*.ampproject.org; style-src 'self' 'unsafe-inline' https://www.dilovamova.com https://webplus.info https://www.googletagmanager.com https://www.googletagservices.com https://www.chromestatus.com https://www.google-analytics.com https://*.google.com https://adservice.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://*.googleadservices.com https://ukrbuy.com https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://graph.facebook.com https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.doubleclick.net https://*.mgid.com https://*.yottos.com https://misto.travel https://*.ampproject.org; img-src 'self' https://www.dilovamova.com https://webplus.info https://www.googletagmanager.com https://www.googletagservices.com https://www.chromestatus.com https://www.google-analytics.com https://*.google.com https://adservice.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://*.googleadservices.com https://ukrbuy.com https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://graph.facebook.com https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.doubleclick.net https://*.mgid.com https://*.yottos.com https://misto.travel https://*.ampproject.org; object-src  'self' https://www.dilovamova.com https://webplus.info https://www.googletagmanager.com https://www.googletagservices.com https://www.chromestatus.com https://www.google-analytics.com https://*.google.com https://adservice.google.com.ua https://*.googlesyndication.com https://*.googleapis.com https://*.googleadservices.com https://ukrbuy.com https://*.acint.net https://*.marketgid.com https://*.herokuapp.com https://graph.facebook.com https://www.linkedin.com https://api.pinterest.com https://*.tovarro.com https://*.doubleclick.net https://*.mgid.com https://*.yottos.com https://misto.travel https://*.ampproject.org 1
default-src 'self' https://*.hostingmanual.net  https://*.jsdelivr.net https://wp-themes.com https://*.cloudflare.com https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.gravatar.com https://*.facebook.net https://*.w.org data: 'unsafe-inline' 'unsafe-eval'; img-src * data:; frame-src  'self' *.youtube.com assets.zendesk.com *.facebook.com s-static.ak.facebook.com tautt.zendesk.com; object-src 'self'  1
default-src 'self' *.nrw.de;    script-src  'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net *.instagram.com instagram.com *.cdninstagram.com connect.facebook.net *.mhkbg.nrw mhkbg.nrw;    style-src   'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net *.mhkbg.nrw mhkbg.nrw;    font-src data: *;    img-src  data: *;    frame-ancestors 'self' *.mhkbg.nrw *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.mhkbg.nrw mhkbg.nrw;    worker-src  'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de *.mhkbg.nrw mhkbg.nrw;    frame-src   'self' *.mhkbg.nrw *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de *.mhkbg.nrw mhkbg.nrw;    object-src  'self';    connect-src 'self' *.nrw.de svc.webspellchecker.net *.mhkbg.nrw mhkbg.nrw;    media-src *; upgrade-insecure-requests; 1
default-src 'self'; connect-src 'self' *.googlesyndication.com *.addthis.com *.doubleclick.net *.google.com *.google-analytics.com; child-src 'self' *.amazon.co.uk *.assoc-amazon.com *.facebook.com *.doubleclick.net *.youtube.com *.youtube-nocookie.com *.googlesyndication.com *.google.com *.addthis.com; style-src 'self' *.googleapis.com *.cloudflare.com *.google.com 'unsafe-inline'; script-src 'self' *.google.co.uk *.googletagservices.com *.googlesyndication.com *.cloudflare.com *.addthis.com *.google.com *.facebook.net *.google-analytics.com *.gstatic.com *.doubleclick.net *.googleadservices.com *.googletagmanager.com *.googleapis.com *.moatads.com *.addthisedge.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' *.gstatic.com; img-src 'self' *.googlesyndication.com *.google-analytics.com; object-src 'self' *.youtube.com *.youtube-nocookie.com 1
default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval' 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' www.google-analytics.com blob:;               style-src 'unsafe-inline' 'unsafe-eval' 'self';                       frame-ancestors https://practicebilling.cchaxcess.com/ 'self'; 1
default-src 'unsafe-eval' 'unsafe-inline' * blob:; script-src 'unsafe-inline' 'unsafe-eval' * blob:; img-src * data: blob:;  connect-src *; font-src * data:; 1
frame-ancestors 'self' *.fontstand.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.sharethis.com *.sharethis.mgr.consensu.org geoip-db.com *.facebook.com connect.facebook.net *.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net *.googleusercontent.com *.gravatar.com *.soundcloud.com 01.org *.youtube.com asciinema.org *.addtoany.com; report-uri /admin/config/system/seckit/csp-report 1
frame-src wordpress-376037-1244439.cloudwaysapps.com *.brooklynchamber.com *.codebuddy.review *.stripe.com *.youtube.com 1
script-src www.instagram.com js.stripe.com code.jquery.com *.qrd.by *.qr1.at maps.googleapis.com maps.google.com maps.gstatic.com *.facebook.net *.twitter.com embed.tawk.to static-v.tawk.to cdnjs.cloudflare.com cdn.datatables.net data: blob: 'unsafe-inline' 'unsafe-eval' 'self'; connect-src *.facebook.com *.tawk.to wss://*.tawk.to 'self'; img-src app.statuscake.com *.qrd.by *.qr1.at s3.amazonaws.com maps.gstatic.com maps.googleapis.com maps.google.com secure.gravatar.com s.w.org static-v.tawk.to cdn.jsdelivr.net media.licdn.com *.fbcdn.net *.fbsbx.com *.twitter.com *.facebook.com *.google.com data: 'self'; style-src cdnjs.cloudflare.com cdn.datatables.net 'unsafe-inline' 'self'; font-src data: * 'self'; default-src * data: blob:; 1
default-src 'self' https://oss.maxcdn.com;script-src 'self' 'sha256-r/8tukW9mXK5MHuoJveCBOsp2Z3TW6MImkmqOS2iP+g=' 'sha256-ipG413CtoO06Wir4uO/p+MV95RHH+zeTgO6LFo38LqE=' https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com;style-src 'self' 'sha256-GN8M1KaTV96KOMRiw/mWyi9gO98mFCFFBHxFDPtY5NU=' 'sha256-9di+kN60ySJLlDqWLB1kZA+O+oOe0bKYsBuZ0R0KYCs=' 'sha256-ikUNTtISn9gcy9sp8j9u7toL9HasItnaovxEoR+Lhnc=' 'sha256-4Su6mBWzEIFnH4pAGMOuaeBrstwJN4Z3pq/s1Kn4/KQ=' 'sha256-fawQ/dJRwnpSmubYg9o+S8lAVU/nr2DjykS6iktlESg=' https://fonts.googleapis.com;img-src 'self' data: https://oss.maxcdn.com https://www.google-analytics.com https://www.googletagmanager.com;font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com;frame-src https://www.youtube.com; 1
frame-ancestors 'self' http://www.convertpdftoword.net http://convertpdftoword.net http://www.biggine.com http://biggine.com http://localhost/ 1
default-src 'self' 'unsafe-inline'; img-src * 'self' ;style-src 'self' 'unsafe-inline' 1
default-src *; img-src * data: mediastream: blob:; media-src * data: mediastream: blob:; font-src * data:; worker-src * data: blob:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'none'; 1
connect-src 'self' wss://www.genisysonlinebanking.org https://cognito-identity.us-east-1.amazonaws.com https://api.botcopy.com https://*.velaro.com https://*.orpheusdev.net https://*.mfmnow.com https://*.financialhost.org https://*.livetest-financialhost.org https://*.test-financialhost.org https://*.dev-financialhost.org 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.ubembed.com https://tagmanager.google.com https://static.hotjar.com https://script.hotjar.com https://maps.googleapis.com http://s7.addthis.com http://m.addthisedge.com http://m.addthis.com http://graph.facebook.com/ http://api-public.addthis.com http://assets.pinterest.com/ https://log.pinterest.com/ https://www.googletagmanager.com https://code.jquery.com https://ui.powerreviews.com https://mpsnare.iesnare.com https://ajax.googleapis.com https://netdna.bootstrapcdn.com *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com cdn.ampproject.org https://code.jquery.com https://dec.azureedge.net *.googleadservices.com *.doubleclick.net; style-src 'self' 'unsafe-inline' https://tagmanager.google.com http://cdn-images.mailchimp.com https://ui.powerreviews.com https://use.fontawesome.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com *.twimg.com https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://script.hotjar.com; img-src * 'self' data: blob:; media-src 'self' data: blob:; frame-src 'self' *.ubembed.com https://vars.hotjar.com https://payflowlink.paypal.com https://pilot-payflowlink.paypal.com https://www.youtube-nocookie.com https://www.youtube.com https://www.facebook.com; child-src 'self' http://s7.addthis.com https://assets.pinterest.com https://www.sandbox.paypal.com https://pilot-payflowlink.paypal.com https://payflowlink.paypal.com https://www.paypal.com https://platform.twitter.com https://syndication.twitter.com https://www.youtube.com https://player.vimeo.com https://w.soundcloud.com apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://www.youtube-nocookie.com; connect-src 'self' *.ubemded.com https://*.events.ubembed.com wss://*.hotjar.com https://in.hotjar.com https://vc.hotjar.io http://m.addthis.com https://www.google-analytics.com https://ui.powerreviews.com https://readservices-b2c.powerreviews.com accounts.google.com https://*.dec.sitefinity.com https://www.facebook.com *.mktoresp.com https://stats.g.doubleclick.net; 1
upgrade-insecure-requests; default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.stalbert.ca https://stalbert.ca https://arcgis.com https://*.arcgis.com https://*.arcgisonline.com https://*.ctctcdn.com https://*.echosign.com https://*.na1.echosign.com https://*.googleapis.com https://*.google.com https://*.google-analytics.com https://*.googlecode.com https://*.gstatic.com https://*.googletagmanager.com https://assets.ca.recollect.net https://*.recollect.net https://recollect.net https://*.typekit.net https://widget.twnmm.com; style-src 'self' 'unsafe-inline' https://*.stalbert.ca https://stalbert.ca https://arcgis.com https://*.arcgis.com https://*.arcgisonline.com https://*.ctctcdn.com https://*.google.com https://*.googleapis.com https://cdn-images.mailchimp.com https://assets.ca.recollect.net https://recollect.a.ssl.fastly.net https://recollect.net https://widget.twnmm.com https://*.typekit.net; img-src 'self' data: https://*.stalbert.ca https://stalbert.ca https://arcgis.com https://*.arcgis.com https://*.arcgisonline.com https://*.google.ca https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.gstatic.com https://www.paypal.com https://www.paypalobjects.com https://assets.ca.recollect.net https://api.recollect.net https://recollect.net https://recollect.a.ssl.fastly.net https://recollect-images.global.ssl.fastly.net https://widget.twnmm.com https://*.typekit.net; font-src 'self' data: https://*.stalbert.ca https://stalbert.ca https://arcgis.com https://*.arcgis.com https://*.gstatic.com https://recollect.a.ssl.fastly.net https://assets.ca.recollect.net https://recollect.net https://*.typekit.net; frame-src 'self' https://*.stalbert.ca https://stalbert.ca https://arcgis.com https://*.arcgis.com https://environment.alberta.ca https://embed.clearpointstrategy.com https://*.echosign.com https://*.na1.echosign.com https://*.google.ca https://*.google.com https://*.granicus.com https://*.legistar.com https://stalbert.ca.legistar.com/ https://pbtech.org https://assets.ca.recollect.net https://api.recollect.net https://recollect.net https://seeclickfix.com https://live.tourdash.com https://monitoringpublic.solaredge.com https://live.tourdash.com https://*.vimeo.com https://*.youtube.com https://*.youtube-nocookie.com; report-uri https://stalbert.report-uri.io/r/default/csp/enforce 1
frame-ancestors https://www.redvalentino.com/ https://www.redvalentino.com/ ; 1
script-src 'self' *.tinymce.com *.tiny.cloud ajax.googleapis.com *.rpgwatch.com 'unsafe-inline';style-src 'self' *.tinymce.com *.tiny.cloud *.rpgwatch.com 'unsafe-inline'; connect-src 'self' *.tinymce.com *.tiny.cloud blob:; img-src * data: blob:; font-src 'self' *.tinymce.com *.tiny.cloud; default-src 'self' www.youtube.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://www.youtube.com https://s.ytimg.com http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com https://static.zdassets.com https://ekr.zdassets.com https://syfe.zendesk.com wss://syfe.zendesk.com wss://*.zopim.com https://stats.g.doubleclick.net https://connect.facebook.net https://fast.wistia.com https://optimize.google.com https://sjs.bizographics.com https://px.ads.linkedin.com https://tagmanager.google.com https://snap.licdn.com https://amplify.outbrain.com https://cdn.taboola.com https://trc.taboola.com https://googleads.g.doubleclick.net https://www.datadoghq-browser-agent.com https://rum-http-intake.logs.datadoghq.eu; img-src 'self' data: https://badge.seedly.sg https://googleads.g.doubleclick.net https://www.google.com https://www.googletagmanager.com https://optimize.google.com https://www.google-analytics.com https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://insights.hotjar.com http://static.hotjar.com https://static.hotjar.com https://ekr.zdassets.com https://syfe.zendesk.com https://v2assets.zopim.io https://static.zdassets.com https://www.facebook.com https://stats.g.doubleclick.net https://embedwistia-a.akamaihd.net https://fast.wistia.com https://www.google.com https://www.google.com.sg https://www.google.co.in https://ssl.gstatic.com https://www.gstatic.com https://px.ads.linkedin.com https://tr.outbrain.com https://amplifypixel.outbrain.com https://p.adsymptotic.com https://www.dianomi.com https://cds.taboola.com; style-src 'self' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com https://tagmanager.google.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://js.intercomcdn.com http://static.hotjar.com https://static.hotjar.com; child-src 'self' blob: https://share.intercom.io https://intercom-sheets.com https://www.youtube.com https://vars.hotjar.com https://fast.wistia.net; media-src 'self' data: blob: https://js.intercomcdn.com https://static.zdassets.com https://embedwistia-a.akamaihd.net; object-src 'self' blob:; connect-src 'self' data: *; frame-src 'self' https://optimize.google.com https://fast.wistia.com/ https://www.youtube.com/ https://vars.hotjar.com https://www.facebook.com/; 1
font-src *.qualtrics.com *.gstatic.com *.cardinalcommerce.com 'self' data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.funexpress.com *.qualtrics.com *.punchout2go.com *.vertexsmb.com 'self' data: 'self' 'unsafe-inline'; frame-ancestors *.qualtrics.com *.punchout2go.com *.vertexsmb.com 'self' data: 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.youtube.com *.qualtrics.com *.punchout2go.com *.google.com *.demdex.net *.vertexsmb.com 'self' data: 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.google.com *.google.co.in *.qualtrics.com *.edgecastcdn.net *.punchout2go.com *.paypal.com *.orientaltrading.com *.funexpress.com *.rfksrv.com *.omtrdc.net *.fun-express.com *.everesttech.net *.googletagmanager.com *.amazonaws.com *.turnto.com 'self' data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com js.authorize.net jstest.authorize.net www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com js.braintreegateway.com s.ytimg.com video.google.com vimeo.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com *.go-mpulse.net *.punchout2go.com *.cloudflare.com www.googletagmanager.com *.google.com *.googleapis.com *.gstatic.com *.vertexsmb.com *.rfksrv.com *.tiqcdn.com *.cloudfront.net *.qualtrics.com *.newrelic.com *.nr-data.net *.turnto.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.qualtrics.com *.punchout2go.com *.cloudflare.com www.google-analytics.com *.googleapis.com *.cloudfront.net *.turnto.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.orientaltrading.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.akstat.io *.go-mpulse.net *.punchout2go.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.g.doubleclick.net *.qualtrics.com *.demdex.net *.nr-data.net *.turnto.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'none'; object-src 'none'; script-src https://almohandes.org/logs/ https://almohandes.org/sidekiq/ https://almohandes.org/mini-profiler-resources/ https://almohandes.org/assets/ https://almohandes.org/brotli_asset/ https://almohandes.org/extra-locales/ https://almohandes.org/highlight-js/ https://almohandes.org/javascripts/ https://almohandes.org/plugins/ https://almohandes.org/theme-javascripts/ https://almohandes.org/svg-sprite/ https://www.google-analytics.com/analytics.js pagead2.googlesyndication.com/pagead/js/adsbygoogle.js https: 'unsafe-inline'; worker-src 'self' https://almohandes.org/assets/ https://almohandes.org/brotli_asset/ https://almohandes.org/javascripts/ https://almohandes.org/plugins/ 1
frame-ancestors http://docplanner-front-test.docplanner.com https://docplanner-front-test.docplanner.com *.doctoralia.co doctoraliaone-co2-candidate.azurewebsites.net 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.dev4press.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.dev4press.com mailster.github.io cdnjs.cloudflare.com www.google.com www.gstatic.com dev4press.b-cdn.net d2bl2ba2iq9qpr.cloudfront.net widget.gleamjs.io www.googletagservices.com *.googlesyndication.com *.googleadservices.com googleads.g.doubleclick.net adservice.google.com adservice.google.ae adservice.google.al adservice.google.at adservice.google.be adservice.google.bg adservice.google.bs adservice.google.ca adservice.google.ch adservice.google.ci adservice.google.cl adservice.google.co.bw adservice.google.co.cr adservice.google.co.id adservice.google.co.il adservice.google.co.in adservice.google.co.jp adservice.google.co.ke adservice.google.co.kr adservice.google.co.mz adservice.google.co.nz adservice.google.co.th adservice.google.co.tz adservice.google.co.uk adservice.google.co.uz adservice.google.co.ve adservice.google.co.za adservice.google.co.zm adservice.google.co.zw adservice.google.com.ai adservice.google.com.ar adservice.google.com.au adservice.google.com.bd adservice.google.com.bh adservice.google.com.bn adservice.google.com.bo adservice.google.com.br adservice.google.com.co adservice.google.com.cy adservice.google.com.ec adservice.google.com.eg adservice.google.com.et adservice.google.com.fj adservice.google.com.gh adservice.google.com.gi adservice.google.com.gt adservice.google.com.hk adservice.google.com.jm adservice.google.com.kh adservice.google.com.kw adservice.google.com.lb adservice.google.com.mm adservice.google.com.mt adservice.google.com.mx adservice.google.com.my adservice.google.com.ng adservice.google.com.ni adservice.google.com.np adservice.google.com.om adservice.google.com.pa adservice.google.com.pe adservice.google.com.ph adservice.google.com.pk adservice.google.com.pr adservice.google.com.py adservice.google.com.qa adservice.google.com.sa adservice.google.com.sg adservice.google.com.sv adservice.google.com.tr adservice.google.com.tw adservice.google.com.ua adservice.google.com.uy adservice.google.com.vn adservice.google.cz adservice.google.de adservice.google.dk adservice.google.dz adservice.google.ee adservice.google.es adservice.google.fi adservice.google.fr adservice.google.ge adservice.google.gr adservice.google.gy adservice.google.hn adservice.google.hr adservice.google.hu adservice.google.ie adservice.google.im adservice.google.iq adservice.google.is adservice.google.it adservice.google.jo adservice.google.kz adservice.google.li adservice.google.lk adservice.google.lt adservice.google.lu adservice.google.lv adservice.google.md adservice.google.mk adservice.google.mu adservice.google.nl adservice.google.no adservice.google.pl adservice.google.pt adservice.google.ro adservice.google.rs adservice.google.ru adservice.google.se adservice.google.si adservice.google.sk adservice.google.so adservice.google.sr adservice.google.tl adservice.google.tn adservice.google.tt www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net ajax.googleapis.com translate.googleapis.com translate.google.com; style-src 'self' 'unsafe-inline' data: *.dev4press.com netdna.bootstrapcdn.com maxcdn.bootstrapcdn.com www.gstatic.com dev4press.b-cdn.net d2bl2ba2iq9qpr.cloudfront.net fonts.googleapis.com translate.googleapis.com; img-src 'self' data: *.dev4press.com s3.amazonaws.com *.s3.amazonaws.com *.envato.com xscape.info placehold.it blob: *.gdratingsystem.review via.placeholder.com d182gg8psn5boc.cloudfront.net dev4press.b-cdn.net d2bl2ba2iq9qpr.cloudfront.net s.w.org ps.w.org ts.w.org secure.gravatar.com www.gravatar.com *.gleam.io *.googlesyndication.com stats.g.doubleclick.net www.google-analytics.com translate.googleapis.com translate.google.com www.google.com www.gstatic.com i.ytimg.com; connect-src 'self' csi.gstatic.com *.googlesyndication.com googleads.g.doubleclick.net stats.g.doubleclick.net www.google-analytics.com translate.googleapis.com; font-src 'self' data: netdna.bootstrapcdn.com maxcdn.bootstrapcdn.com *.dev4press.com dev4press.b-cdn.net d2bl2ba2iq9qpr.cloudfront.net fonts.gstatic.com; media-src 'self' dev4press.b-cdn.net d2bl2ba2iq9qpr.cloudfront.net; frame-src 'self' data: www.dev4press.com *.dev4press.com gleam.io *.googlesyndication.com googleads.g.doubleclick.net www.youtube.com; child-src 'self' data: *.dev4press.com youtu.be *.youtube.com www.dev4press.com www.youtube.com; frame-ancestors 'self' www.dev4press.com *.dev4press.com; upgrade-insecure-requests; block-all-mixed-content; report-uri https://www.dev4press.com/?gdsec-csp-report; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://static.keiser.com https://d1qhf9137peimx.cloudfront.net https://www.googletagmanager.com https://*.quantserve.com https://public.tockify.com https://script.hotjar.com https://static.hotjar.com https://fe.sitedataprocessing.com https://keiser.ladesk.com https://www.youtube.com https://s.ytimg.com https://consent.cookiebot.com https://www.googletagmanager.com https://ajax.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://checkout.stripe.com https://cdn1-sandbox.affirm.com https://sandbox.affirm.com https://cdn1.affirm.com https://cdn.curator.io https://assets.juicer.io https://www.google-analytics.com; style-src 'self' data: 'unsafe-inline' https: https://static.keiser.com https://d1qhf9137peimx.cloudfront.net https://cdn.curator.io https://assets.juicer.io https://cloud.webtype.com; img-src 'self' data: blob: https: https://static.keiser.com https://d1qhf9137peimx.cloudfront.net https://www.google-analytics.com https://pls.webtype.com; font-src 'self' data: https: https://static.keiser.com https://d1qhf9137peimx.cloudfront.net https://*.googleusercontent.com https://cloud.webtype.com; connect-src 'self' https: https://tracker.affirm.com https://api-cf.affirm.com https://www.affirm.com https://rtosxmj4ji-3.algolianet.com https://8143g4pk99.execute-api.us-west-2.amazonaws.com https://www.google-analytics.com https://q.stripe.com https://checkout.stripe.com https://*.affirm.com https://affirm.com https://*.hotjar.com https://hotjar.com wss://*.hotjar.com; media-src 'self' https: https://static.keiser.com https://d1qhf9137peimx.cloudfront.net; object-src 'none'; frame-src 'self' https: https://m.stripe.com https://vars.hotjar.com https://*.ladesk.com https://www.affirm.com https://*.fls.doubleclick.net https://www.youtube.com; worker-src 'self' https: ; frame-ancestors https://www.keiser.com; upgrade-insecure-requests; report-uri https://bf0c2b94be02a099f594b34b70949254.report-uri.com/r/d/csp/enforce 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' tagmanager.google.com app.storyblok.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com maps.googleapis.com atlas-aws.s3.amazonaws.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com app.storyblok.com atlas-aws.s3.amazonaws.com; media-src 'self' a.storyblok.com; frame-src 'self' player.youku.com www.youtube.com; img-src 'self' lh3.googleusercontent.com www.gstatic.com ssl.gstatic.com jobs.keba.com maps.googleapis.com img.youtube.com www.google.com googleads.g.doubleclick.net keba.com www.keba.com img2.storyblok.com a.storyblok.com www.google-analytics.com stats.g.doubleclick.net data:; font-src 'self' fonts.gstatic.com jobs.keba.com data:; connect-src 'self' stats.g.doubleclick.net www.google-analytics.com 1
default-src * data: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; report-uri https://miraclemethod.report-uri.io/r/default/csp/reportOnly 1
default-src 'self'; block-all-mixed-content ; base-uri 'self'; object-src 'self'; script-src  'nonce-17b68091732d43158a879f1af3bd300a' 'self' 'unsafe-eval' 'unsafe-inline' https://www.youtube.com https://st.getsitecontrol.com https://c.evidon.com https://www.gstatic.com https://www.google.com/ https://widgets.getsitecontrol.com https://snap.licdn.com https://dl.episerver.net https://munchkin.marketo.net  https://connect.facebook.net https://www.googletagmanager.com/ https://tagmanager.google.com https://app-sn01.marketo.com https://polyfill.io https://optimize.google.com https://www.google-analytics.com https://az416426.vo.msecnd.net https://static.oktopost.com; img-src 'self' data: https://ton.twimg.com/ https://www.google.com/ https://app-sn01.marketo.com https://p.adsymptotic.com/ https://ssl.gstatic.com https://www.linkedin.com https://stats.g.doubleclick.net https://www.facebook.com/ https://syndication.twitter.com https://optimize.google.com https://platform.twitter.com https://pbs.twimg.com https://images.passle.net https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com https://img.youtube.com https://px.ads.linkedin.com https://go.grantthornton.com.au  https://www.grantthornton.global; style-src 'self' 'unsafe-inline' https://ton.twimg.com/ https://tagmanager.google.com https://app-sn01.marketo.com/ https://optimize.google.com https://platform.twitter.com https://cdnjs.cloudflare.com https://sdk.passle.net https://fonts.googleapis.com https://clientapi.passle.net; font-src 'self' data: https://fonts.gstatic.com; frame-src https://bid.g.doubleclick.net/ https://syndication.twitter.com/ https://app-sn01.marketo.com/ https://www.facebook.com/ https://www.google.com/ https://platform.twitter.com https://www.passle.net https://www.youtube.com https://optimize.google.com https://w.soundcloud.com https://webplayer.whooshkaa.com https://player.vimeo.com https://www.gstatic.com https://cdn.optimizely.com; connect-src 'self' https://dc.services.visualstudio.com https://www.passle.net https://clientapi.passle.net https://az416426.vo.msecnd.net https://www.google-analytics.com/ https://www.facebook.com/ https://extreme-ip-lookup.com https://584-mfv-920.mktoresp.com/ https://stats.g.doubleclick.net; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: about: https://www.youtube.com/ static.issuu.com e.issuu.com docs.google.com www.google-analytics.com fonts.googleapis.com *.disquscdn.com www.votervoice.net www.googletagmanager.com ims.informz.net connect.facebook.net www.google.com https://syndication.twitter.com https://cdn.syndication.twimg.com https://ton.twimg.com https://pbs.twimg.com platform.twitter.com www.facebook.com staticxx.facebook.com disqus.com fonts.gstatic.com stats.g.doubleclick.net referrer.disqus.com https://services.texmed.org/45/Tma.CspReportApi/api/csp *.blubrry.com *.feathr.co servedbyadbutler.com *.fontawesome.com *.vimeo.com p2a.co *.jotform.com *.sharethis.com *.cognitoforms.com https://cognitoforms.com/ *.blogspot.com; 1
default-src 'self'; font-src data: https:; img-src https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://polyfill.io https://static.addtoany.com https://graph.facebook.com https://www.google.com https://maps.googleapis.com https://commerce.adobedtm.com https://magento-recs-sdk.adobe.net https://assets.adobedtm.com https://commerce.adobe.net https://use.typekit.net https://*.algolianet.com https://*.algolia.net https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://skk.erecruiter.pl https://*.webeyez.com https://widget.intercom.io https://js.intercomcdn.com https://tagmanager.google.com https://www.googleadservices.com https://*.criteo.com https://*.criteo.net https://*.intercom.io https://js.intercomcdn.com https://www.gstatic.com; style-src 'unsafe-inline' 'self' https://*.googleapis.com https://secure.przelewy24.pl https://skk.erecruiter.pl https://tagmanager.google.com; frame-src 'self' https://static.addtoany.com https://www.facebook.com https://bid.g.doubleclick.net https://gum.criteo.com https://record.webeyez.com; connect-src 'self' https://api.magento.com https://performance.typekit.net https://www.googletagmanager.com/ https://commerce.adobedc.net/ https://*.algolianet.com https://*.algolia.net https://connect.facebook.net https://stats.g.doubleclick.net https://*.webeyez.com/ https://www.google-analytics.com https://analytics.google.com https://*.intercom.io wss://*.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://www.google.pl https://www.facebook.com https://commerce.adobe.io; 1
script-src mc.yandex.lt mc.yandex.ru yastatic.net yandex.lt 'nonce-KT1FPTn/rHFQH+VwV5NoIQ==';connect-src yandex.lt mc.admetrica.ru yastat.net mc.yandex.lt mc.yandex.ru yastatic.net;font-src yastatic.net;child-src yandex.ru yandex.lt mc.yandex.lt mc.yandex.md mc.yandex.ru;report-uri https://csp.yandex.net/csp?project=morda&from=morda.spok.lt&showid=1609221501.33678.97918.152199&h=prestable-morda-vla-yp-118&csp=new&date=20201229&yandexuid=2132782501609221501;style-src 'unsafe-inline' yastatic.net;default-src yastatic.net yastat.net;img-src data: avatars.mds.yandex.net mc.admetrica.ru yandex.ru *.verify.yandex.ru 'self' mc.yandex.lt mc.yandex.com favicon.yandex.net yastatic.net mc.yandex.ru yandex.lt 1
frame-ancestors 'self'; report-uri https://sentry.io/api/117329/security/?sentry_key=474a4252f48648649d7a97b86890eed3 1
frame-src https://portal.exoscale.com/ https://cdn.pagesense.io/ https://platform.twitter.com/ https://push.getbeamer.com/ https://app.getbeamer.com/ 1
default-src 'self' wss: https://static.zdassets.com https://ekr.zdassets.com https://*.contentful.com https://*.zendesk.com https://*.kampyle.com https://*.tigocloud.net http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; frame-src 'self' https://bid.g.doubleclick.net https://*.tigocloud.net https://*.tigo.com.bo https://*.tigo.com.py https://www.youtube.com https://*.kampyle.com https://khipu.com/ https://*.hotjar.com https://*.hotjar.com:* https://*.hotjar.io https://www.reportv.com.ar https://*.crwdcntrl.net https://6493920.fls.doubleclick.net https://*.google.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://optimize.google.com https://www.google.com.ar https://*.tigocloud.net https://static.zdassets.com https://connect.facebook.net https://s.ytimg.com https://www.youtube.com/iframe_api https://widget-mediator.zopim.com https://*.kampyle.com https://js-agent.newrelic.com https://bam.nr-data.net http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.reportv.com.ar https://*.crwdcntrl.net https://tigo.us7.list-manage.com https://web.webpushs.com https://tigo.us18.list-manage.com https://static.ads-twitter.com https://www.gstatic.com https://cdn.epica.ai https://*.inbenta.chat https://*.inbenta.io https://*.googleoptimize.com; font-src 'self' data: blob: https://fonts.gstatic.com https://*.kampyle.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.tigocloud.net https://*.inbenta.io; img-src 'self' data: blob: https://www.google-analytics.com https://googleads.g.doubleclick.net https://*.tigocloud.net https://*.contentful.com https://www.facebook.com https://*.kampyle.com https://static.zdassets.com https://www.googletagmanager.com https://images.ctfassets.net https://stats.g.doubleclick.net https://*.zopim.io https://lh3.googleusercontent.com https://platform-lookaside.fbsbx.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.tigo.com.bo https://ssl.gstatic.com https://www.gstatic.com https://cdn.sendpulse.com https://www.google.com https://www.google.com.ar https://www.google.com.bo https://www.google.com.co https://www.google.com.sv https://www.google.com.gt https://www.google.hn https://www.google.com.ni https://www.google.com.pa https://www.google.com.py https://t.co https://analytics.twitter.com https://svr.mic.edge.com.py http://openweathermap.org https://openweathermap.org https://bcp.crwdcntrl.net https://cx.atdmt.com https://ad.doubleclick.net https://*.inbenta.com https://*.inbenta.io;  style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.kampyle.com https://tagmanager.google.com https://cdn.sendpulse.com https://*.tigocloud.net https://*.inbenta.io https://*.google.com; connect-src *; 1
frame-ancestors 'self' http://www.philips.ch *.philips.com *.philips.ch 1
upgrade-insecure-requests;script-src 'self' 'unsafe-eval';connect-src 'self' blob: https://shitposter.club wss://shitposter.club http://localhost:3035/;media-src 'self' https:;img-src 'self' data: blob: https:;default-src 'none';base-uri 'self';frame-ancestors 'none';style-src 'self' 'unsafe-inline';font-src 'self';manifest-src 'self'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cegos.fr *.cegos.com https://www.gstatic.com/ https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://tagmanager.google.com/ https://www.googleadservices.com/pagead/conversion/ https://www.google.fr/pagead/attribution/ https://www.gstatic.com/wcm/ https://www.gstatic.com/recaptcha/api2/ https://www.google-analytics.com/analytics.js https://www.google-analytics.com/plugins/ua/ec.js https://www.linkedin.com/px/ https://px.ads.linkedin.com/collect/ https://platform.linkedin.com/ https://static.ads-twitter.com/uwt.js https://analytics.twitter.com/ https://platform.twitter.com/ https://cdn.syndication.twimg.com/timeline/ https://sjs.bizographics.com/insight.min.js https://www.googleadservices.com/pagead/conversion_async.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://static.hotjar.com/ https://script.hotjar.com/ https://munchkin.marketo.net/ https://*.marketo.com/ https://connect.facebook.net/ https://www.youtube.com/iframe_api https://s.ytimg.com/ https://js-agent.newrelic.com/ https://bam.nr-data.net/ https://*.kameleoon.com/ https://*.kameleoon.net https://*.kameleoon.eu https://kick-my-bot.s3-eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com/kick-my-bot/KMBotUI/ https://d134jvmqfdbkyi.cloudfront.net/script/embed.min.js https://d24s38jd6z1bka.cloudfront.net/script/embed.min.js https://bat.bing.com/bat.js https://*.abtasty.com https://flagship.com https://cdn.segment.com; object-src 'self'; base-uri 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://maps.googleapis.com https://maps.google.com https://maps.gstatic.com 'unsafe-eval' https://analytics.rubensteintech.com https://www.google-analytics.com https://www.googletagmanager.com https://maps.gstatic.com https://www.youtube.com https://s.ytimg.com https://player.vimeo.com https://siteimproveanalytics.com/; style-src 'self' 'unsafe-inline' https://maps.googleapis.com https://www.google.com https://cloud.typography.com https://fonts.googleapis.com https://fast.fonts.net; connect-src 'self' https://maps.googleapis.com https://maps.gstatic.com https://cdn.plyr.io https://vimeo.com; font-src 'self' https://maps.gstatic.com https://fast.fonts.net https://fonts.gstatic.com https://use.typekit.net data:; img-src 'self' https://www.facebook.com https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://img.youtube.com https://i.vimeocdn.com https://*.global.siteimproveanalytics.io data:; object-src 'self'; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; frame-ancestors 'self' http://home.cravath.com https://home.cravath.com https://www.mymeetingroom.com http://www.mymeetingroom.com; 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-MzNhN2I2MmQtOGVjZC00ZTdkLWI3OTItZDUyN2YwNWI4NGQw'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data:; font-src 'self' https://fonts.googleapis.com:* https://fonts.gstatic.com:*; connect-src *; media-src *; object-src *; prefetch-src *; child-src *; frame-src *; worker-src *; frame-ancestors 'self' https://slimwoner.dev.gohike.nl:* https://www.slimwoner.nl:* https://energieloketflevoland.nl:* https://www.drentsenergieloket.nl:* https://watlaatjeliggen.nl:*; upgrade-insecure-requests 1
block-all-mixed-content; upgrade-insecure-requests; report-uri /nelmio/csp/report 1
script-src 'unsafe-inline' *; img-src * data: 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.fonts.net *.secure.force.com *.googletagmanager.com *.googleapis.com https://tagmanager.google.com https://ssl.gstatic.com https://www.gstatic.com https://ssl.google-analytics.com https://www.google-analytics.com https://fonts.gstatic.com https://api.ipify.org https://stats.g.doubleclick.net *.youtube.com *.ytimg.com *.youtube-nocookie.com https://vimeo.com https://player.vimeo.com https://www.google.com 1
frame-ancestors 'self' http://www.philips.ae *.philips.com *.philips.ae 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;worker-src 'self' blob:;default-src 'self';object-src 'self';img-src data: https: 'self' *.better.com images.ctfassets.net heapanalytics.com 'unsafe-inline';style-src 'self' 'unsafe-inline' data: blob: fonts.googleapis.com assets.braintreegateway.com *.better.com;font-src 'self' fonts.googleapis.com fonts.gstatic.com media.better.com data:;media-src media.better.com 'self' chat-assets.frontapp.com https://player.vimeo.com https:;connect-src wss://*.pusher.com *.pusherapp.com https: 'self';frame-ancestors 'self' https://mobile2.accountchek.net https://borrower.accountchek.com https://web.pointserv.com https://flex.twilio.com;frame-src https://*.hellosign.com https://accounts.google.com https://assets.braintreegateway.com https://cdn.plaid.com https://useast1.pcipal.cloud/ bid.g.doubleclick.net dntcl.qualaroo.com insight.adsrvr.org match.adsrvr.org player.vimeo.com www.google.com 'self' https:;report-uri https://bettermg.report-uri.com/r/d/csp/enforce; 1
default-src 'unsafe-inline' 'unsafe-eval' * blob:; img-src * blob: data:; 1
block-all-mixed-content;frame-ancestors *.web.de web.de http://images.google.de 1
upgrade-insecure-requests; default-src 'self'; connect-src 'self' https://*.siteimprove.com https://*.readspeaker.com https://www.google-analytics.com https://*.gemeentemaastricht.eu; font-src 'self' https://fonts.gstatic.com https://*.readspeaker.com data:; frame-src https://my2.siteimprove.com https://*.readspeaker.com; img-src 'self' data: https://www.google-analytics.com https://*.global.siteimproveanalytics.io; manifest-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://siteimproveanalytics.com https://cdn.siteimprove.net https://polyfill.io https://sf1-eu.readspeaker.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://siteimproveanalytics.com https://cdn.siteimprove.net https://polyfill.io https://sf1-eu.readspeaker.com; style-src 'self' 'unsafe-inline' https://*.readspeaker.com https://fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; worker-src 'none'; base-uri 'self'; report-uri https://www.gemeentemaastricht.nl/report-uri/enforce 1
default-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; script-src 'self' 'unsafe-inline' https://piwik.bzga.de https://maps.google.com https://maps.googleapis.com; img-src 'self' https://piwik.bzga.de https://www.bzga.de https://maps.gstatic.com https://csi.gstatic.com https://maps.google.com https://maps.googleapis.com https://a.tile.osm.org https://b.tile.osm.org https://c.tile.osm.org data:; frame-src 'self' mailto: https://piwik.bzga.de https://www.youtube-nocookie.com; 1
frame-ancestors https://www.cartier.com/ https://www.cartier.com/ https://lb.studio.cms02.int2.ewe1.aws.dev.e-comm; 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; base-uri 'self'; 1
frame-ancestors https://*.dsw.nl https://*.d1.dsw.lan 1
font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; style-src 'self' https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://js.stripe.com; default-src 'self' https: 1
connect-src 'self' https://www.google-analytics.com https://resourcemanagerplatinum-163a52f6a73.secure.force.com https://*.siteimprove.com https://connect.facebook.net; default-src 'self'; font-src *; frame-ancestors 'self' https://conv.indeed.com *.salesforce.com *.force.com *.visualforce.com *.documentforce.com; frame-src 'self' https://www.facebook.com https://conv.indeed.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.maglr.com https://*.maglr.nl https://view.publitas.com https://resourcemanagerplatinum-163a52f6a73.secure.force.com https://my2.siteimprove.com; img-src 'self' data: https://cx.atdmt.com https://conv.indeed.com https://*.azureedge.net https://ssl.siteimprove.com https://*.global.siteimproveanalytics.io https://www.google.nl https://www.google.com https://px.ads.linkedin.com https://*.gstatic.com https://www.google-analytics.com https://www.linkedin.com https://www.facebook.com; media-src 'self' https://*.azureedge.net; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google-analytics.com https://connect.facebook.net *.facebook.net https://googleads.g.doubleclick.net https://*.googleadservices.com https://px.ads.linkedin.com https://*.facebook.com https://linkedin.com https://snap.licdn.com https://*.linkedin.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://resourcemanagerplatinum-163a52f6a73.secure.force.com https://*.siteimprove.net https://view.publitas.com https://siteimproveanalytics.com https://www.googletagmanager.com https://tagmanager.google.com; script-src-elem 'self' 'unsafe-inline' https://www.google-analytics.com *.facebook.net https://connect.facebook.net https://googleads.g.doubleclick.net https://*.googleadservices.com https://px.ads.linkedin.com https://*.facebook.com https://linkedin.com https://snap.licdn.com https://*.linkedin.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://resourcemanagerplatinum-163a52f6a73.secure.force.com https://*.siteimprove.net https://view.publitas.com https://siteimproveanalytics.com https://www.googletagmanager.com https://tagmanager.google.com; style-src 'self' 'unsafe-inline' https://hello.myfonts.net https://*.siteimprove.net https://tagmanager.google.com https://resourcemanagerplatinum-163a52f6a73.secure.force.com; style-src-elem 'self' 'unsafe-inline' https://hello.myfonts.net https://*.siteimprove.net https://tagmanager.google.com https://resourcemanagerplatinum-163a52f6a73.secure.force.com; 1
default-src 'self'; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; worker-src 'self' blob: 1
frame-ancestors 'self' https://*.jurispro.com http://*.jurispro.com 1
frame-ancestors 'self' *.images4us.com *.onlinepersonalmessages.com *.888sport.com *.888sport.es *.888sport.it *.888sport.dk *.888sport.ro *.888sport.se *.888sport.us *.888sport.de *.777.com *.personalinfoonline.com *.888.de *.888casino.com *.888poker.com *.888casino.dk *.888poker.dk *.888.de *.888casino.ro *.888poker.ro *.888casino.se *.888poker.se *.888casino.es *.888poker.es *.888casino.it *.888poker.it *.888casino.us *.888poker.us cmsp; report-uri https://888protech.report-uri.com/r/d/csp/reportOnly 1
default-src 'self' 'unsafe-inline' data: *.localphone.com *.localphone.co.uk *; 1
frame-ancestors https://*.dondominio.com https://*.mrdomain.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' ;style-src 'self' 'unsafe-inline' http://fonts.googleapis.com w.sharethis.com tagmanager.google.com rtcdn.cincopa.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://w.sharethis.com www.google-analytics.com ajax.googleapis.com dnn506yrbagrg.cloudfront.net i.kissmetrics.com doug1izaerwt3.cloudfront.net www.googleadservice.com t.sharethis.com ssl.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com ipinfo.io www.cincopa.com rtcdn.cincopa.com 6c756ba5bf2c437b92a0d9a10bb9c6ba.js.ubembed.com 6c756ba5bf2c437b92a0d9a10bb9c6ba.pages.ubembed.com assets.ubembed.com;font-src data:  'self' 'unsafe-inline' fonts.gstatic.com sxt.cdn.skype.com; img-src * 'self' data: https:;connect-src 'self' l.sharethis.com trk.kissmetrics.com trc.kissmetrics.com ipinfo.io rtcdn.cincopa.com 6c756ba5bf2c437b92a0d9a10bb9c6ba.pages.ubembed.com 6c756ba5bf2c437b92a0d9a10bb9c6ba.events.ubembed.com;frame-src 'self' edge.sharethis.com www.youtube.com t.sharethis.com vimeo.com player.vimeo.com 6c756ba5bf2c437b92a0d9a10bb9c6ba.pages.ubembed.com;object-src 'self' www.youtube.com; 1
default-src * 'unsafe-eval' 'unsafe-inline' blob: data: ; frame-ancestors forums.floridasportsman.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: www.google-analytics.com www.googletagmanager.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://cdnjs.cloudflare.com/ajax/libs/select2/ https://cdn.rawgit.com/ckeditor/ckeditor-dev/ https://cdn.rawgit.com/w8tcha/CKEditor-CodeMirror-Plugin/ platform.twitter.com platform.twitter.co syndication.twitter.com cdn.syndication.twimg.com https://cdn.rawgit.com/ractoon/jQuery-Text-Counter/ https://js-agent.newrelic.com/nr-1071.min.js bam.nr-data.net tagmanager.google.com; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://cdnjs.cloudflare.com/ajax/libs/select2/ platform.twitter.com tagmanager.google.com; img-src 'self' data: www.google-analytics.com https://cdn.rawgit.com/ckeditor/ckeditor-dev/ https://raw.githubusercontent.com/ckeditor/ckeditor-dev/ www.googletagmanager.com www.bureauveritas.com syndication.twitter.com platform.twitter.com *.twimg.com ssl.gstatic.com www.gstatic.com; media-src 'self'; frame-src 'self' www.youtube.com tools.eurolandir.com cws.huginonline.com www.googletagmanager.com platform.twitter.com syndication.twitter.com inpublic.globenewswire.com https://sdk.companywebcast.com/sdk/player/ player.youku.com; child-src 'self' blob:; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com; connect-src 'self' www.google-analytics.com https://tools.eurolandir.com/tools/pricefeed/RequestStockDataBundleXML.aspx; report-uri https://csp-report-uri.bureauveritas.com 1
default-src 'self' blob:;script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://localhost:8732 https://localhost:9732 http://localhost:8732 http://localhost:9732 http://www.uhaul.com http://pwctag.uhaul.com http://pwc.uhaul.com https://showroom.uhaul.net https://www.bing.com https://dev.virtualearth.net https://t0.ssl.ak.dynamic.tiles.virtualearth.net https://t1.ssl.ak.dynamic.tiles.virtualearth.net https://t.ssl.ak.dynamic.tiles.virtualearth.net https://tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com;object-src 'self' blob:;style-src 'self' 'unsafe-inline' http://pos.uhaul.net https://pos.uhaul.net http://posq.uhaul.net https://posq.uhaul.net http://posd.uhaul.net https://posd.uhaul.net http://posp.uhaul.net https://posp.uhaul.net http://pos.uhi.amerco https://pos.uhi.amerco http://posq.uhi.amerco https://posq.uhi.amerco http://posd.uhi.amerco https://posd.uhi.amerco http://posp.uhi.amerco https://posp.uhi.amerco http://posdev.uhi.amerco https://posdev.uhi.amerco http://fonts.googleapis.com https://www.bing.com https://www.google-analytics.com;img-src 'self' data: blob: http://pwc.uhaul.com https://www.bing.com https://t0.ssl.ak.dynamic.tiles.virtualearth.net https://t1.ssl.ak.dynamic.tiles.virtualearth.net https://t.ssl.ak.dynamic.tiles.virtualearth.net https://rewriteq.webselfstorage.com https://rewrited.webselfstorage.com https://www.googletagmanager.com https://rewrites.webselfstorage.com https://www.webselfstorage.com https://www.google-analytics.com https://selfstorageinsider.com https://i.ytimg.com;media-src 'self' blob:;frame-src 'self' https://media.uhaul.net https://www.youtube.com https://www.youtube-nocookie.com;font-src data: http://fonts.gstatic.com http://fonts.googleapis.com https://webselfstorage.com https://www.webselfstorage.com https://rewrite.webselfstorage.com https://rewrites.webselfstorage.com https://rewriteqa.webselfstorage.com https://rewritebeta.webselfstorage.com https://rewriteq.webselfstorage.com https://rewrited.webselfstorage.com http://tempstage http://wss.local;connect-src 'self' blob: ws: https://www.bing.com;frame-ancestors 'self';report-uri /WebResource.axd?cspReport=true 1
upgrade-insecure-requests; default-src 'self' *.myklovr.com fonts.gstatic.com *.stripe.com ; report-uri https://n1dy5b1rrvsxxokkkyxg3nkr.httpschecker.net/report ; connect-src 'self' maxcdn.bootstrapcdn.com d3hb14vkzrxvla.cloudfront.net *.doubleclick.net *.facebook.com *.google.com *.google-analytics.com *.googleapis.com *.googlesyndication.com *.hotjar.com *.hotjar.io *.opinionstage.com *.rdtk.io *.sharethis.com checkout.stripe.com cdn.traitify.com youtube.com ; font-src 'self' data: maxcdn.bootstrapcdn.com fonts.gstatic.com *.hotjar.com use.fontawesome.com *.wp.com ; object-src 'self' ; frame-src 'self' myklovr.com *.consensu.org *.doubleclick.net *.facebook.com *.google.com *.googlesyndication.com *.hotjar.com *.opinionstage.com checkout.stripe.com *.twitter.com *.youtube.com ; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com use.fontawesome.com *.google.com fonts.googleapis.com *.twimg.com *.twitter.com *.wp.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.rdtk.io *.spotlightr.com djtflbt20bdde.cloudfront.net *.doubleclick.net *.facebook.net *.google.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.helpscout.net *.hotjar.com snap.licdn.com *.opinionstage.com *.sharethis.com *.twimg.com *.twitter.com *.wp.com ; img-src 'self' data: *.axaxl.com *.thrivethemes.com *.adsymptotic.com *.cdninstagram.com stats.g.doubleclick.net *.facebook.com *.facebook.net *.google.com *.google-analytics.com *.googleadservices.com storage.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com lh3.googleusercontent.com *.gravatar.com *.helpscout.net *.hotjar.com *.instagram.com *.linkedin.com *.ads.linkedin.com *.myklovr.com *.rdtk.io *.sharethis.com *.stripe.com syndication.twitter.com cdn.traitify.com *.twimg.com *.twitter.com s.w.org *.wp.com w3.org img.youtube.com ; 1
default-src 'self' wms.nic.in player.mycast.in pmindiawebcast.nic.in rathjatra.nic.in independenceday.nic.in republicday.nic.in budgetlive.nic.in pmonradio.nic.in yogaday.nic.in *.media.nic.in; script-src-elem 'self' 'unsafe-inline' *.analytics.edgekey.net wms.nic.in; script-src 'self' 'unsafe-inline' 'unsafe-eval' wms.nic.in; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; connect-src 'self' *.analytics.edgekey.net *.akamaihd.net *.media.nic.in wms.nic.in; media-src *.akamaihd.net *.media.nic.in wms.nic.in 'self' blob:; worker-src wms.nic.in 'self' blob:; img-src wms.nic.in 'self' pmindiawebcast.nic.in rathjatra.nic.in independenceday.nic.in republicday.nic.in budgetlive.nic.in pmonradio.nic.in yogaday.nic.in *.media.nic.in; frame-src wms.nic.in 'self' *.media.nic.in player.mycast.in; 1
style-src 'self' 'unsafe-inline' *; img-src 'self' data: *; frame-ancestors 'self' http://webvisor.com/; font-src 'self' *.bobruisk.ru fonts.gstatic.com; default-src 'self' *.bobruisk.ru *.aservicecdn.com *.googlesyndication.com; connect-src 'self' *; frame-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' * 1
base-uri 'self';connect-src 'self' studiekeuze123nl.prismic.io *.google-analytics.com *.hotjar.io *.hotjar.com connect.facebook.net;default-src 'self';form-action 'self' ymlp.com;img-src 'self' * data: https:;media-src 'self';object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cdn.prismic.io fonts.googleapis.com *.google-analytics.com *.googletagmanager.com *.ytimg.com *.youtube.com *.hotjar.com *.adroll.com *.adroll.mgr.consensu.org connect.facebook.net public.tableau.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com use.fontawesome.com;worker-src 'self' blob:;frame-src studiekeuze123nl.prismic.io datastudio.google.com *.youtube.com vars.hotjar.com public.tableau.com;font-src fonts.gstatic.com use.fontawesome.com script.hotjar.com 1
default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://apis.google.com https://maps.googleapis.com https://maps.gstatic.com  https://maps.google.com/ https://*.gstatic.com https://*.googleapis.com https://maxcdn.bootstrapcdn.com/ https://stats.spdns.de https://secure.aha.io/ https://status.securepoint.de https://www.googleadservices.com https://googleads.g.doubleclick.net; object-src 'self' ; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/metisMenu/ https://cdn.datatables.net/ https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/ ; img-src 'self' data: https://www.google-analytics.com https://www.medical-it-services.de/ https://www.securepoint.de/ https://*.googleapis.com https://*.gstatic.com/ https://stats.spdns.de https://maps.google.com/ https://api.tiles.mapbox.com/ https://status.securepoint.de www.googletagmanager.com https://www.google.com https://www.google.de; media-src 'none' ; frame-src 'self' https://securepoint.uservoice.com https://www.google.com/recaptcha/ https://www.youtube.com/embed/ https://support.securepoint.de/ https://wunschbox.ideas.aha.io/ https://stats.spdns.de/; connect-src 'self' https://www.google-analytics.com ; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.doubleclick.net https://*.googleapis.com https://*.healthwise.net https://*.gstatic.com https://cdnjs.cloudflare.com https://*.wpmucdn.com https://apps.healthgrades.com; style-src 'self' 'unsafe-inline' https://assetpool.healthwise.net https://hello.myfonts.net https://*.googleapis.com https://unpkg.com https://cdnjs.cloudflare.com https://*.wpmucdn.com https://apps.healthgrades.com; img-src 'self' data: https://*.google-analytics.com https://*.doubleclick.net https://*.gstatic.com https://*.google.com https://*.healthwise.net https://*.googleapis.com https://premium.wpmudev.org https://www.google.cz https://secure.gravatar.com https://*.metrohealth.net; connect-src 'self' https://*.google-analytics.com https://*.doubleclick.net https://my.yoast.com; font-src 'self' data: https://assetpool.healthwise.net https://fonts.gstatic.com; media-src 'self' https://*.healthwise.net; child-src 'self' https://*.youtube.com https://*.vimeo.com https://*.google.com; form-action 'self'; object-src 'none' 1
default-src *   ;report-uri /xp/CSPReport.ashx   ;script-src * 'unsafe-inline' 'unsafe-eval' data: about:   ;style-src * 'unsafe-inline'   ;connect-src * blob:   ;font-src * data:   ;object-src *   ;img-src * data: blob:   ;media-src * blob:   ;frame-src * data: gsa: ajaxhandler:   ;child-src * blob:   ;worker-src * blob:   ;form-action * javascript:   ;frame-ancestors 'self' 1
img-src https://* data: 'self' https://px.ads.linkedin.com https://www.linkedin.com https://p.adsymptotic.com https://bat.bing.com https://freewill.wpengine.com https://wordpress.freewill.com https://s3-us-west-2.amazonaws.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.google.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://track.hubspot.com https://www.facebook.com https://cx.atdmt.com https://script.hotjar.com https://optimize.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com https://optimize.google.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://script.hotjar.com; connect-src 'self' https://cloud.iexapis.com https://www.facebook.com https://bat.bing.com https://www.google-analytics.com https://www.google.com https://*.g.doubleclick.net https://adservice.google.com https://*.execute-api.us-west-2.amazonaws.com https://wordpress.freewill.com https://freewill.wpengine.com https://sentry.io https://forms.hubspot.com https://*.hsforms.net https://*.hsforms.com https://rs.fullstory.com wss://*.hotjar.com https://*.hotjar.io https://*.hotjar.com; form-action 'self' https://*.hsforms.net https://*.hsforms.com https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googleadservices.com https://tpc.googlesyndication.com https://www.google.com https://www.googletagmanager.com https://tagmanager.google.com https://bat.bing.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hsforms.net https://forms.hsforms.com https://js.hsleadflows.net https://js.hs-analytics.net https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com https://snap.licdn.com https://px.ads.linkedin.com https://connect.facebook.net https://tags.nationwide.com https://nexus.ensighten.com https://edge.fullstory.com https://www.fullstory.com https://fullstory.com https://*.plaid.com https://optimize.google.com; report-uri https://o265527.ingest.sentry.io/api/1469028/security/?sentry_key=33fa91fe485947c295175da2d676f91e; 1
default-src https: wss: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; img-src * data: blob: filesystem:; report-uri https://klekt.report-uri.com/r/d/csp/wizard 1
default-src https: 'unsafe-inline' 'unsafe-eval'; frame-ancestors https://*.creditreporting.co.uk https://*.checkmyfile.com 1
default-src 'self' *.butik.ru blob: ;frame-ancestors 'self' flocktory.com *.flocktory.com; media-src 'self' * blob: ; style-src 'self' 'unsafe-inline' *.butik.ru *.flocktory.com *.googleapis.com *.gstatic.com *.witheyezon.com blob: 'self' font.googleapis.com http://*.flocktory.com tagmanager.google.com witheyezon.com; img-src 'self' 'unsafe-inline' data: *.bid.run *.butik.ru *.cdninstagram.com *.convertiblestate.com *.doubleclick.net *.facebook.com *.fbcdn.net *.flocktory.com *.frisbuy.com *.frisbuy.ru *.googleapis.com *.google-analytics.com *.google.com *.google.ru *.gstatic.com *.mail.ru *.medianation-tools.ru *.owox.com *.yandex.net *.yandex.ru *.witheyezon.com am15.net http://*.butik.ru http://*.flocktory.com mainadv.com picsum.photos server.witheyezon.com statad.ru vk.com witheyezon.com; font-src 'self' *.butik.ru *.flocktory.com *.gstatic.com *.witheyezon.com data: 'self' witheyezon.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.adhigh.net *.adriver.ru *.butik.ru:* ws://*.butik.ru:* *.criteo.com *.criteo.net *.doubleclick.net *.emarsys.net *.facebook.net *.flocktory.com *.frisbuy.ru *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.lenmit.com *.mail.ru *.medianation-tools.ru *.owox.com *.rutarget.ru *.scarabresearch.com *.yandex.ru *.witheyezon.com aprtn.com aprtx.com creativecdn.com eyezon.herokuapp.com picsum.photos statad.ru tagmanager.google.com vk.com yastatic.net witheyezon.com wss://server.witheyezon.com:8443 wss://eyezon.herokuapp.com blob: ; connect-src 'self' *.adhigh.net *.adriver.ru *.butik.ru:* ws://*.butik.ru:* *.criteo.com *.criteo.net *.doubleclick.net *.emarsys.net *.facebook.net *.flocktory.com *.frisbuy.ru *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.lenmit.com *.mail.ru *.medianation-tools.ru *.owox.com *.rutarget.ru *.scarabresearch.com *.yandex.ru *.witheyezon.com aprtn.com aprtx.com creativecdn.com eyezon.herokuapp.com picsum.photos statad.ru tagmanager.google.com vk.com yastatic.net witheyezon.com wss://server.witheyezon.com:8443 wss://eyezon.herokuapp.com; frame-src 'self' *.adriver.ru *.butik.ru *.creativecdn.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.flocktory.com *.rutarget.ru *.static.emarsys.net *.yandex.ru *.witheyezon.com witheyezon.com; 1
base-uri 'none'; connect-src https: wss:; form-action https:; frame-ancestors 'self' https://*.spotify.com https://*.spotify.net; object-src 'none' 1
base-uri 'self';
		object-src 'none';
		frame-src 'self' https:;
		frame-ancestors 'self';
		form-action 'self';
		script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:;
	 1
default-src data: https: 'unsafe-eval' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' graphhopper.com *.graphhopper.com vimeo.com; frame-src 'self' graphhopper.com *.graphhopper.com player.vimeo.com; font-src 'self' data:; object-src 'none' 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://merveilles.town; img-src 'self' https: data: blob: https://merveilles.town; style-src 'self' https://merveilles.town 'nonce-LszJ9zSOloY6QvovXEFw9Q=='; media-src 'self' https: data: https://merveilles.town; frame-src 'self' https:; manifest-src 'self' https://merveilles.town; connect-src 'self' data: blob: https://merveilles.town https://assets.merveilles.town wss://merveilles.town; script-src 'self' https://merveilles.town; child-src 'self' blob: https://merveilles.town; worker-src 'self' blob: https://merveilles.town 1
frame-ancestors 'self' *.volusion.com 1
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval' ws: blob:    ;script-src      'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.sageworksanalyst.com https://*.sageworks.com https://*.abrigo.com https://*.newrelic.com https://*.pendo.io https://*.nr-data.net https://hello.myfonts.net https://*.google-analytics.com https://*.googleapis.com https://*.form.io         ;script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.sageworksanalyst.com https://*.sageworks.com https://*.abrigo.com https://*.newrelic.com https://*.pendo.io https://*.nr-data.net https://hello.myfonts.net https://*.google-analytics.com https://*.googleapis.com https://*.form.io         ;script-src-attr 'self' 'unsafe-inline' 'unsafe-eval' https://*.sageworksanalyst.com https://*.sageworks.com https://*.abrigo.com https://*.newrelic.com https://*.pendo.io https://*.nr-data.net https://hello.myfonts.net https://*.google-analytics.com https://*.googleapis.com https://*.form.io 1
default-src 'self'; frame-src 'self' platform.twitter.com www.virginaustralia.com www.youtube.com virginaustralia.com syndication.twitter.com videos.sproutvideo.com; script-src 'self' www.google-analytics.com www.facebook.com platform.twitter.com syndication.twitter.com cdn.syndication.twimg.com pbs.twimg.com ton.twimg.com 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com www.googletagmanager.com connect.facebook.net snap.licdn.com ajax.googleapis.com; img-src * 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com platform.twitter.com ton.twimg.com; font-src 'self'; object-src 'self' 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: http://old.pomorie.ru data:; font-src https: data:; child-src https: http:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://maps.google.com https://maps.google.com https://ajax.googleapis.com https://www.google-analytics.com https://www.google.com https://cdn.rawgit.com https://maps.googleapis.com https://maps.gstatic.com https://ssl.google-analytics.com http://www.gstatic.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://fonts.googleapis.com https://fast.fonts.com https://www.google.com http://www.gstatic.com https://www.gstatic.com; img-src 'self' data: https://maps.google.com https://maps.googleapis.com http://maps.googleapis.com https://cdn.rawgit.com https://raw.githubusercontent.com https://ssl.google-analytics.com https://csi.gstatic.com https://maps.gstatic.com; font-src 'self' https://fonts.gstatic.com https://fast.fonts.com; frame-src 'self' https://charts3.equitystory.com 1
script-src *.hotjar.com *.hotjar.io *.skype.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google.com *.googletagmanager.com *.google-analytics.com *.pingdom.net *.msecnd.net code.jquery.com *.cookiebot.com 'unsafe-eval' 'unsafe-inline' 'self'; style-src *.hotjar.com *.hotjar.io *.google.com fonts.googleapis.com cdn-images.mailchimp.com *.bootstrapcdn.com code.jquery.com 'unsafe-inline' 'self'; font-src *.hotjar.com *.hotjar.io *.gstatic.com *.bootstrapcdn.com *.cookiebot.com 'self' 1
default-src 'self'; script-src 'self' https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://sjs.bizographics.com https://px.ads.linkedin.com https://static.ads-twitter.com https://analytics.twitter.com https://wt.adctrl.com 'unsafe-inline'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src https:; base-uri 'self'; font-src 'self' https://use.typekit.net 'unsafe-inline'; style-src 'self' https://code.jquery.com https://use.typekit.net https://p.typekit.net; connect-src 'self' https://onboarding.api-st.sygnum.com https://onboarding.api.sygnum.com https://marketing-sygnum-tst.azure-api.net https://marketing-sygnum.azure-api.net 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; child-src 'self' vxnsm:; frame-src 'self' vxnsm:;connect-src 'self'; frame-ancestors 'self' http://www.tuckersystems.biz; report-uri /CSPReports.aspx 1
upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.googletagmanager.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com www.google.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://maps.googleapis.com *.google-analytics.com; 1
frame-ancestor 'none'; 1
frame-ancestors 'self' *.facebook.com; form-action 'self' *.redsys.es *.linkedin.com 1
default-src 'self' https://*.adsafeprotected.com https://*.doubleclick.net https://*.googlesyndication.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.adform.net https://*.euromoney.com https://pi.pardot.com https://*.calendly.com https://*.doubleclick.net https://*.adsafeprotected.com https://*.google.co.uk https://code.jquery.com https://www.google.com https://optimize.google.com https://cdn.ampproject.org https://www.googletagmanager.com https://tagmanager.google.com https://securepubads.g.doubleclick.net https://cdn.euromoneyapi.com https://js.revsci.net https://www.gstatic.com https://adservice.google.com https://adservice.google.rs https://www.google-analytics.com https://*.wisepops.com https://sjs.bizographics.com https://cdn.subscribers.com https://www.googletagservices.com https://*.mouseflow.com https://*.ubembed.com https://z.moatads.com https://*.googlesyndication.com https://*.serving-sys.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.2mdn.net https://*.doubleverify.com https://snap.licdn.com/ https://*.trychameleon.com https://*.elfsight.com; font-src 'self' data: https://*.cloudflare.com https://*.google.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.subscribers.com/ https://*.chmln-cdn.com; style-src 'self' 'unsafe-inline' https://assets.calendly.com https://optimize.google.com https://fonts.googleapis.com https://cdn.euromoneyapi.com https://tagmanager.google.com; connect-src 'self' https://*.gstatic.com https://*.doubleclick.net https://*.mouseflow.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.google-analytics.com https://*.wisepops.com https://cdn.subscribers.com https://googleads4.g.doubleclick.net https://*.serving-sys.com https://pro.ip-api.com/ https://*.trychameleon.com wss://*.trychameleon.com https://*.elfsight.com; img-src * data: https://www.google-analytics.com https://optimize.google.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://googleads.g.doubleclick.net https://*.chmln-cdn.com blob:; frame-src https://*.safeframe.googlesyndication.com https://*.doubleclick.net https://*.2mdn.net https://calendly.com https://www.linkedin.com https://ff.doubleclick.net https://www.youtube.com/ https://www.google.com https://optimize.google.com https://bid.g.doubleclick.net https://www.googletagservices.com/ https://tpc.googlesyndication.com/ https://*.trychameleon.com https://*.chmln-cdn.com; object-src 'none'; frame-ancestors https://www.slipcase.com/ https://marketplace.marsh.com/ 1
default-src 'self'; script-src 'self' https://buttons.github.io/ https://js.usemessages.com/ https://js.hscollectedforms.net/ https://js.hs-analytics.net/analytics/ https://js.hs-scripts.com/ https://core.spreedly.com/iframe/ https://js.chargebee.com/v2/ https://js.hsforms.net/forms/ https://forms.hsforms.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com/gtag/ 'nonce-2726c7f26c' 'nonce-4AEemGb0xJptoIGFP3Nd' 'nonce-5AEemGb0xJptoIGFP3Nd' 'sha256-tlYV9rIQkzQad+VWl0ddhiXyybENF2Z2O7O95p40wyw=' https://www.google-analytics.com/ https://www.googletagmanager.com/ https://passbolt.piwikpro.com https://js.stripe.com/ https://checkout.stripe.com 'sha256-oJk3eY/YzGuL68WOmxSg7qbJGDrXlz1LYP4TxFQsCDs=' 'sha256-rnjZ2aiWm7NrAoqG/BVc4uo1GtkT3yNhByQjSt60yls=' 'sha256-8IW5650tphUmbkm4wO701q19quJZpBfLiSgn33dGHg0=' 'sha256-uYWughyd+EkkWsTp515rAyFUMvvn5WiuaA81Wc5qo3Y=' 'sha256-ZDThMLIZuETTGtOWrq4zkiZdny16kWWEHb90fJdek8A=' 'sha256-mflOBuLu00/xgefaM2xOfbN6OJfLKz5owGgB0Z+KeA0=' 'sha256-ETrl0OdM1PgANs8J4LCtxJ8jL4sZvg9l9etOsAdp5Eo=' 'sha256-bD25/2Cos7IVGUs2zNVEWcCqr2uIHEinHNK/DWP5L+k=' 'sha256-gzhYex6tSvGYbcFaLo8cYpz0khBtfqeLV65l4dTdd3k=' 'sha256-bP2eBx9M2Xbe0EdkrXU8DVjfIjyzMvSz9GFImz13Hn4=' 'sha256-yE2dSkhWQ9VR77R//KY6Wa1MxLI89BGRht5iaqn60v0='; img-src 'self' data: https://s3.amazonaws.com/ https://forms.hsforms.com/embed/v3/ https://track.hubspot.com/ https://*.stripe.com https://www.google-analytics.com/; style-src 'self' https://passbolt-test.chargebee.com/assets/ https://fonts.googleapis.com/ 'nonce-4AEemGb0xJptoIGFP3Nd' 'nonce-5AEemGb0xJptoIGFP3Nd' 'sha256-ZlKrV4l7+FEqK6MLE9/by6VkzUMyZsFi9lRmaK6EeIA=' 'sha256-C50yt+bZklvIWu1PBOLqt4KPBSTCnv0vDk1zSCp5laY=' 'sha256-0EZqoz+oBhx7gF4nvY2bSqoGyy4zLjNF+SDQXGp/ZrY=' 'sha256-bO+01UR4yZoieMhUNcInR7ESFxzAOhZ+2VgJmtxSqtU=' 'sha256-Yynboq3/3iKxk2D2SLJbB7AoRe3z50hG/EPTGxjD6BI=' 'sha256-iOcemGW/NKLcwUC+2x7vQCDtBIdOCWhK2//GrEvZOx4=' 'sha256-K9flzbVzWnVGoln6FNPgUlW32/n8CUJbkheAQ60Mu9s=' 'sha256-MammJ3J+TGIHdHxYsGLjD6DzRU0ZmxXKZ2DvTePAF0o=' 'sha256-RJmtrsIjnZL5T3+sCifODzHq5KR/o6naoNFj6zOk/+0=' 'sha256-SC6M+rkB+psTTuObL3HyIMyeGnBO36UAD3WonXMu5Wo=' 'sha256-svrIoruF58JmDPIYeiGgkvcqYxZRUfkwa99g9hLlVTA=' 'sha256-1kcPi54DjW5KnVpSic90SBIlpyYSkUo4iqRxfy23adY=' 'sha256-2s10bCcdRlMiClbYtWsv2w/yK9puG0G/bjt/veKv55c=' 'sha256-aupUapUrFZyF8qkVmC6t9P9qfE37JX3GIcQ/cEA9QZI=' 'sha256-rnjZ2aiWm7NrAoqG/BVc4uo1GtkT3yNhByQjSt60yls=' 'sha256-onM5lQTTaLLA6r1PkR8v3fM0l9y658Fpj39ggIoAStA=' 'sha256-+AqDO/Gix1IvndFA5cc6ZqUP3dIXbnoE5FyLchFkwp0=' 'sha256-biLFinpqYMtWHmXfkA1BPeCY0/fNt46SAZ+BBk5YUog=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-0cZTqF0NhLQphMh/ZceebY3ae9T+T4uR5rkir48tEBc=' 'sha256-SsHUcmQSuQNJ2SspMn2mQ8/ySB8kDAfrjNTlnIO9EII='; frame-src 'self' https://app.hubspot.com/ https://passbolt.chargebee.com/ https://passbolt-test.chargebee.com/ https://www.google.com/recaptcha/ https://www.googletagmanager.com/ns.html https://checkout.stripe.com https://js.stripe.com; connect-src 'self'  https://api.github.com/repos/passbolt/ https://api.hubspot.com/livechat-public/v1/message/public https://forms.hubspot.com/collected-forms/v1/config/ https://checkout.stripe.com https://api.stripe.com https://www.google-analytics.com/; font-src 'self' https://fonts.gstatic.com/; 1
default-src * 'unsafe-inline' data: blob: ;frame-ancestors 'self'; report-uri https://16f5f5ea60e86cd63289a2976fd4845c.report-uri.com/r/d/csp/enforce 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://kaman.gcs-web.com https://www.google.com https://www.gstatic.com https://developers.google.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://js-agent.newrelic.com https://ds-aksb-a.akamaihd.net https://www.adobetag.com https://cdn.jsdelivr.net https://bam.nr-data.net https://script.crazyegg.com *.sharethis.com 1
base-uri 'none'; object-src 'none'; script-src https://ethereum-magicians.org/logs/ https://ethereum-magicians.org/sidekiq/ https://ethereum-magicians.org/mini-profiler-resources/ https://ethereum-magicians.org/assets/ https://ethereum-magicians.org/brotli_asset/ https://ethereum-magicians.org/extra-locales/ https://ethereum-magicians.org/highlight-js/ https://ethereum-magicians.org/javascripts/ https://ethereum-magicians.org/plugins/ https://ethereum-magicians.org/theme-javascripts/ https://ethereum-magicians.org/svg-sprite/; worker-src 'self' https://ethereum-magicians.org/assets/ https://ethereum-magicians.org/brotli_asset/ https://ethereum-magicians.org/javascripts/ https://ethereum-magicians.org/plugins/ 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://infosec.exchange; img-src 'self' https: data: blob: https://infosec.exchange; style-src 'self' https://infosec.exchange 'nonce-YFIzB9yrYXldS/WWg3ZXJQ=='; media-src 'self' https: data: https://infosec.exchange; frame-src 'self' https:; manifest-src 'self' https://infosec.exchange; connect-src 'self' data: blob: https://infosec.exchange https://infosec.exchange wss://infosec.exchange; script-src 'self' https://infosec.exchange; child-src 'self' blob: https://infosec.exchange; worker-src 'self' blob: https://infosec.exchange 1
frame-ancestors 'self' https://*.arvato-systems-media.net https://*.bic-media.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com *.unicef.org *.sharethis.com rules.quantcount.com connect.facebook.net secure.quantserve.com www.google-analytics.com www.googletagmanager.com cdn.poll-maker.com embeds.tagboard.com maps.googleapis.com e.infogram.com *.hscampaigns.com *.getchute.com ssl.mousestats.com tagmanager.google.com js-agent.newrelic.com bam.nr-data.net js-agent.newrelic.com/* www.youtube.com s.ytimg.com *.instagram.com platform.twitter.com cdn.syndication.twimg.com syndication.twitter.com cdn.nativemsg.com hm.baidu.com optimize.google.com siteimproveanalytics.com downloads.mailchimp.com mc.us2.list-manage.com sjs.bizographics.com unicef.us2.list-manage.com s3.amazonaws.com www.googleadservices.com *.doubleclick.net cdn.curator.io eisi-ext.azurewebsites.net *.aparat.com *.tableau.com *.wufoo.com s.pinimg.com ct.pinterest.com analytics.tiktok.com; object-src 'self' *.youtube.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.sharethis.com cdn.poll-maker.com stories.getchute.com cdn-images.mailchimp.com downloads.mailchimp.com l.sharethis.com platform.twitter.com optimize.google.com *.unicef.org cdn.curator.io *.twimg.com; img-src 'self' data: *.unicef.org www.google-analytics.com ssl.gstatic.com sb.scorecardresearch.com  *.sharethis.com www.facebook.com pixel.quantserve.com stats.g.doubleclick.net www.gstatic.com cdn.poll-maker.com csi.gstatic.com maps.gstatic.com maps.googleapis.com www.google.com *.cdninstagram.com pixel.getchute.com media.chute.io static.getchute.com avatars.io syndication.twitter.com *.twimg.com platform.twitter.com dynamite-images.appspot.com hm.baidu.com www.googletagmanager.com unicef-images.appspot.com 88988.global.siteimproveanalytics.io cdn-images.mailchimp.com gallery.mailchimp.com downloads.mailchimp.com *.tableau.com; media-src 'self' *.cdninstagram.com video.twimg.com; frame-src 'self' *.facebook.com www.google.com *.twitter.com e.infogram.com infogram-download-us2.s3.eu-west-1.amazonaws.com infogram-download-eu.s3.eu-west-1.amazonaws.com *.sharethis.com *.hscampaigns.com embeds.tagboard.com www.youtube.com infogram.com connect.facebook.net *.unicef.org api.getchute.com static.getchute.com giphy.com *.wufoo.com www.instagram.com cdn.nativemsg.com twitter.com *.ustream.tv *.youku.com c.sharethis.mgr.consensu.org optimize.google.com embed.ted.com *.doubleclick.net player.vimeo.com forms.office.com *.aparat.com *.tableau.com oms.gameloft.com *.soundcloud.com app.powerbi.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com data: maxcdn.bootstrapcdn.com stories.getchute.com *.unicef.org cdn.curator.io; connect-src 'self' *.sharethis.com www.quiz-maker.com ssl.mousestats.com www.google-analytics.com s3.amazonaws.com getchute.com *.getchute.com c.sharethis.mgr.consensu.org stats.g.doubleclick.net unicefhq.cp.bsd.net script.google.com script.googleusercontent.com *.unicef.org api.curator.io bam.nr-data.net rpapigatewaytest.azurewebsites.net i2e.azurewebsites.net; report-uri /india/report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; frame-src https:; font-src 'self' data: https:; connect-src 'self' https: 1
default-src * 'unsafe-eval' 'unsafe-inline' data: blob: 1
child-src 'self' https://tongji.baidu.com https://passport.szlcsc.com 1
frame-ancestors 'self' https://theanglo.mx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'nonce-MjMwLDM4LDUxLDM5LDE1OSwxMjIsMTksMTMx' https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://ssl.google-analytics.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://hcaptcha.com https://*.hcaptcha.com https://s.ytimg.com/yts/jsbin/ https://www.youtube.com/iframe_api; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hcaptcha.com https://hcaptcha.com; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://cdn.discordapp.com https://hackerone-api.discord.workers.dev/user-avatars/ https://safety.discord.com https://discordmoderatoracademy.zendesk.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://discordapp.com https://discord.com https://connect.facebook.net https://api.greenhouse.io https://api.github.com https://sentry.io https://www.google-analytics.com https://hackerone-api.discord.workers.dev https://*.hcaptcha.com https://hcaptcha.com ws://127.0.0.1:* http://127.0.0.1:*; media-src 'self' https://cdn.discordapp.com/assets/; frame-src https://discordapp.com/domain-migration https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://www.youtube.com/embed/ https://hackerone.com/631fba12-9388-43c3-8b48-348f11a883c0/; 1
connect-src https://*.canarie.ca; frame-ancestors 'self' science.canarie.ca test.canarie.ca; 1
default-src 'self' hawaiianairlinesinc.marketing.adobe.com data: blob:; script-src * data: 'unsafe-inline' 'unsafe-eval'; style-src * data: 'unsafe-inline'; img-src * data:; connect-src * data:; font-src * data:; frame-src *; frame-ancestors 'self' hawaiianairlinesinc.marketing.adobe.com 1
frame-ancestors 'self' *.ecoproductsstore.com; frame-src 'self' find.storesnear.me *.ecoproducts.com squadblog.ecoproducts.com brandfolder.com *.brandfolder.com https://brandfolder.com https://*.brandfolder.com *.amazonaws.com ads.p.veruta.com t.p.mybuys.com s7.addthis.com https://www.youtube.com/ http://blog.ecoproducts.com/ http://squadblog.ecoproducts.com/ *.ecoproductsstore.com 1
default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: 'self' https:; frame-ancestors *; 1
frame-ancestors 'self'; object-src 'none'; script-src 'self' https 'unsafe-eval' 'unsafe-inline'; 1
default-src 'none'; img-src 'self' https://* data:; script-src 'self' https://* 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; object-src 'none'; font-src 'self' https://*; manifest-src 'self'; style-src-elem 'self' https://* 'unsafe-inline'; connect-src 'self' https://* 'unsafe-inline'; frame-src 'self' https://vars.hotjar.com https://www.google.com https://www.youtube.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'nonce-NDksNzUsMTIsNiwyMDgsMjMyLDE4NCwxMTE=' https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://ssl.google-analytics.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://hcaptcha.com https://*.hcaptcha.com https://s.ytimg.com/yts/jsbin/ https://www.youtube.com/iframe_api; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hcaptcha.com https://hcaptcha.com; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://cdn.discordapp.com https://hackerone-api.discord.workers.dev/user-avatars/ https://safety.discord.com https://discordmoderatoracademy.zendesk.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://discordapp.com https://discord.com https://connect.facebook.net https://api.greenhouse.io https://api.github.com https://sentry.io https://www.google-analytics.com https://hackerone-api.discord.workers.dev https://*.hcaptcha.com https://hcaptcha.com ws://127.0.0.1:* http://127.0.0.1:*; media-src 'self' https://cdn.discordapp.com/assets/; frame-src https://discordapp.com/domain-migration https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://www.youtube.com/embed/ https://hackerone.com/631fba12-9388-43c3-8b48-348f11a883c0/; 1
CSP 1
default-src 'self' heyfiesta.com eu1.heyfiesta.com us1.heyfiesta.com am1.heyfiesta.com *.heyfiesta.com *.eu1.heyfiesta.com *.us1.heyfiesta.com *.am1.heyfiesta.com fstcdn.net *.fstcdn.net pd1us.fstcdn.net *.pd1us.fstcdn.net  *.badoo.com *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' fstcdn.net *.fstcdn.net pd1us.fstcdn.net *.pd1us.fstcdn.net *.googleapis.com *.gstatic.com *.google.com vk.com *.vk.me cdn.syndication.twitter.com *.facebook.net *.facebook.com *.paypal.com www.paypalobjects.com *.youtube.com *.ytimg.com api.ok.ru *.google-analytics.com *.googletagmanager.com *.api.here.com *.instagram.com *.digicert.com *.mapbox.com *.googlesyndication.com *.googletagservices.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com *.ampproject.org *.amazon-adsystem.com adservice.google.com https://cdn.ampproject.org; style-src 'self' 'unsafe-inline' fstcdn.net *.fstcdn.net pd1us.fstcdn.net *.pd1us.fstcdn.net vk.com *.vk.me *.googleapis.com; font-src 'self' data: fstcdn.net *.fstcdn.net pd1us.fstcdn.net *.pd1us.fstcdn.net fonts.googleapis.com fonts.gstatic.com; img-src * data: blob:; child-src 'self' heyfiesta.com eu1.heyfiesta.com us1.heyfiesta.com am1.heyfiesta.com *.heyfiesta.com *.eu1.heyfiesta.com *.us1.heyfiesta.com *.am1.heyfiesta.com fstcdn.net *.fstcdn.net pd1us.fstcdn.net *.pd1us.fstcdn.net  *.badoo.com *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com blob:; worker-src 'self' heyfiesta.com eu1.heyfiesta.com us1.heyfiesta.com am1.heyfiesta.com *.heyfiesta.com *.eu1.heyfiesta.com *.us1.heyfiesta.com *.am1.heyfiesta.com fstcdn.net *.fstcdn.net pd1us.fstcdn.net *.pd1us.fstcdn.net  *.badoo.com *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com blob:; media-src * data: blob:; frame-src * fiesta:; prefetch-src 'self' *.googlesyndication.com *.googletagservices.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com *.ampproject.org *.amazon-adsystem.com adservice.google.com; frame-ancestors 'self' apps.facebook.com; report-uri /jss/csp_report.phtml 1
frame-ancestors 'self' *.authorize.net 1
frame-ancestors 'self' stc.marketing.adobe.com *.decibelinsight.net *.decibelinsight.com 1
frame-ancestors 'self' *.freenas.org *.ixsystems.com *.truenas.org; upgrade-insecure-requests; default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; object-src 'self' https:; img-src 'self' data: https: blob:; font-src 'self' data: https:; 1
default-src 'none'; child-src blob:; font-src 'self' data:; img-src 'self' data: blob: https://www.google-analytics.com; object-src 'none'; script-src 'self' blob: https://js-agent.newrelic.com/ https://bam.nr-data.net/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.pusher.com/ https://s.tradingview.com/ https://s3.tradingview.com/tv.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js; style-src 'self' blob: 'unsafe-inline'; frame-src 'self' https://s.tradingview.com/ https://www.google.com/; frame-ancestors 'none'; connect-src 'self' https://bam.nr-data.net/ https://www.google-analytics.com/ https://stats.g.doubleclick.net wss://ws-eu.pusher.com/ 1
frame-ancestors 'self' admin.hanglung.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' hcaptcha.com assets.hcaptcha.com addthis.com s7.addthis.com;script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com hcaptcha.com assets.hcaptcha.com addthis.com s7.addthis.com hm.baidu.com;style-src 'self' 'unsafe-inline';style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com;style-src-attr 'self' 'unsafe-inline';img-src 'self' data: img.youtube.com hm.baidu.com;connect-src 'self' m.addthis.com hm.baidu.com;frame-src 'self' assets.hcaptcha.com s7.addthis.com players.brightcove.net;font-src 'self' fonts.gstatic.com data:;media-src 'self';object-src 'self';manifest-src 'self';worker-src 'self' www.hanglung.com blob:;prefetch-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cookie-cdn.cookiepro.com https://maps.googleapis.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; object-src 'self'; base-uri 'self'; connect-src 'self' https://privacyportal.cookiepro.com https://cookie-cdn.cookiepro.com https://journeyplanner.transportforireland.ie https://stats.g.doubleclick.net https://www.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://wavregisterprod.nationaltransport.ie https://wavregisterpreprod.nationaltransport.ie https://complimentscomplaintsprod.nationaltransport.ie https://complimentscomplaintspreprod.nationaltransport.ie https://publicregisterprod.nationaltransport.ie https://publicregisterpreprod.nationaltransport.ie https://publicregister.nationaltransport.ie https://wavregister.nationaltransport.ie https://complimentscomplaints.nationaltransport.ie https://journeyplanner.transportforireland.ie https://www.google.com https://www.journeyplanner.transportforireland.ie; img-src 'self' data: https://ps.w.org https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://secure.gravatar.com https://www.google-analytics.com; manifest-src 'self'; media-src 'self'; worker-src 'none'; 1
frame-ancestors 'self' martinsfoods.com *.martinsfoods.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.visualwebsiteoptimizer.com *.sitesearch360.com *.google.com *.googleadservices.com *.google-analytics.com *.googleusercontent.com *.googletagmanager.com  *.googleapis.com *.gstatic.com *.doubleclick.net *.livechatinc.com *.authorize.net *.redditstatic.com *.reddit.com *.youtube.com *.capterra.com *.bing.com; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://app.kontent.ai/ 1
frame-ancestors 'self' http://www.philips.be *.philips.com *.philips.be 1
default-src data: wss: https: 'unsafe-inline' 'unsafe-eval'; script-src data: wss: https: 'unsafe-inline' 'unsafe-eval'; img-src data: wss: https: android-webview-video-poster:; report-uri https://coin.report-uri.io/r/default/csp/enforce 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-ODFjOGMzMmQtYTc2OC00ZDcxLTg4YmMtNjNmZTRjMWZmZTgy'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
frame-ancestors 'self' bibliocms.com *.bibliocms.com bibliocommons.com *.bibliocommons.com libanswers.com *.libanswers.com aclibrary.bibliocms.com *.aclibrary.bibliocms.com https://aclibrary.org aclibrary.org *.aclibrary.org; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data:; img-src * data: 1
default-src 'self' https://cdn.tipstrr.com https://api.tipstrr.com;connect-src 'self' https://cdn.tipstrr.com https://api.tipstrr.com https://*.naturaltracking.com https://*.px-cloud.net https://*.hotjar.com https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.freshdesk.com https://*.amazonaws.com;script-src 'self' 'unsafe-inline' https://cdn.tipstrr.com https://api.tipstrr.com https://*.naturaltracking.com https://*.px-cloud.net https://*.hotjar.com https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.freshdesk.com https://*.amazonaws.com;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.freshdesk.com https://*.amazonaws.com;img-src 'self' data: https://cdn.tipstrr.com https://*.google-analytics.com https://*.google.co.uk https://*.google.com https://*.googleusercontent.com;font-src 'self';frame-src 'self' https://*.naturaltracking.com https://*.hotjar.com https://*.freshdesk.com;worker-src 'self';manifest-src 'self';media-src 'self' https://cdn.tipstrr.com;object-src 'self';upgrade-insecure-requests 1
frame-ancestors http://www.discovertunisia.at http://www.discovertunisia.ch 'self'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: http://contentz.mkt81.net; font-src 'self' data: https:; connect-src 'self' https://*.google-analytics.com/ wss://ws1.hotjar.com/api/v1/client/ws wss://ws3.hotjar.com/api/v1/client/ws https://*.hotjar.com https://search-api.swiftype.com https://logx.optimizely.com https://s.swiftypecdn.com https://*.visualwebsiteoptimizer.com https://*.doubleclick.net https://maps.googleapis.com https://brain.morphio.info https://graylog.hotjar.com:12443 wss://ws4.hotjar.com https://insights.hotjar.com https://in.hotjar.com https://*.libro.ca/; media-src 'self' https:; object-src 'self'; frame-src 'self' https: http://www.financialcalculators.net; form-action 'self' http://www.pages08.net; 1
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data: https:; 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://qhnwj.com https://ueopf.com https://qhnwj.com https://dycej.com https://*.qhnwj.com https://*.ueopf.com https://*.qhnwj.com https://*.dycej.com http://qhnwj.com http://ueopf.com http://qhnwj.com http://dycej.com http://*.qhnwj.com http://*.ueopf.com http://*.qhnwj.com http://*.dycej.com; frame-src 'self' https://qhnwj.com https://ueopf.com https://qhnwj.com https://dycej.com https://*.qhnwj.com https://*.ueopf.com https://*.qhnwj.com https://*.dycej.com http://qhnwj.com http://ueopf.com http://qhnwj.com http://dycej.com http://*.qhnwj.com http://*.ueopf.com http://*.qhnwj.com http://*.dycej.com www.youtube.com *.youtube.com 1
script-src https: data: 'self' 'unsafe-inline' 'unsafe-eval' *.pardot.com *.googletagmanager.com *.googleadservices.com *.bizographics.com *.hotjar.com *.albacross.com *.ipinfo.io *.6sc.co *.bazo.io *.perfectgym.com *.survicate.com 1
default-src 'self' https://*.tigerchef.com https://assets-tigerchef.netdna-ssl.com https://*.klaviyo.com; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.tigerchef.com  https://assets-tigerchef.netdna-ssl.com http://assets.tigerchef.netdna-cdn.com https://*.intellimize.co https://*.google.com https://ajax.googleapis.com https://*.cloudfront.net https://*.tawk.to https://*.hotjar.com https://*.shopperapproved.com https://www.google-analytics.com https://*.facebook.net https://secure.trust-provider.com https://iprecon.iglobalstores.com https://bat.bing.com https://www.googleadservices.com https://*.g.doubleclick.net https://*.sessioncam.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://platform.twitter.com https://maps.googleapis.com https://*.googlesyndication.com https://cdn.cardknox.com https://apis.google.com https://acsbap.com https://acsbapp.com https://*.klaviyo.com; script-src-elem 'unsafe-inline' 'self' https://*.tigerchef.com https://assets-tigerchef.netdna-ssl.com http://assets.tigerchef.netdna-cdn.com https://connect.facebook.net https://secure.trust-provider.com https://bat.bing.com https://www.google-analytics.com https://www.googletagmanager.com https://*.shopperapproved.com https://apis.google.com https://iprecon.iglobalstores.com https://*.hotjar.com https://*.tawk.to https://*.cloudfront.net https://ajax.googleapis.com https://maps.googleapis.com https://*.intellimize.co https://www.googleadservices.com https://*.sessioncam.com https://cdn.jsdelivr.net https://googleads.g.doubleclick.net https://platform.twitter.com https://cdn.cardknox.com https://tpc.googlesyndication.com https://acsbap.com https://acsbapp.com https://*.klaviyo.com; style-src 'unsafe-inline' 'self' https://*.tigerchef.com  https://assets-tigerchef.netdna-ssl.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://use.fontawesome.com https://ajax.googleapis.com https://*.klaviyo.com; style-src-elem 'unsafe-inline' 'self' https://*.tigerchef.com https://assets-tigerchef.netdna-ssl.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://use.fontawesome.com https://ajax.googleapis.com https://*.klaviyo.com; connect-src 'self' https://*.tigerchef.com https://bat.bing.com https://*.tawk.to wss://*.tawk.to https://*.intellimize.co https://*.hotjar.com https://*.hotjar.io https://*.sessioncam.com https://*.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com https://*.google.com https://ajax.googleapis.com https://*.acsbap.com https://acsbap.com https://acsbapp.com https://*.acsbapp.com https://*.klaviyo.com; img-src 'self' data: https:; font-src 'self' data: https:; frame-src 'self' https://*.hotjar.com https://*.google.com https://secure.trust-provider.com https://www.youtube.com https://*.facebook.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.tawk.to https://platform.twitter.com https://www.googleadservices.com https://api.intellimize.co https://*.googlesyndication.com https://cdn.cardknox.com https://accessibe.com; media-src https://acsbap.com https://*.tawk.to; child-src 'self' https://*.hotjar.com https://*.google.com https://secure.trust-provider.com https://www.youtube.com https://*.facebook.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.tawk.to https://platform.twitter.com https://www.googleadservices.com https://api.intellimize.co https://*.googlesyndication.com https://cdn.cardknox.com https://accessibe.com;  report-uri /csp_reporting.php?type=enforce 1
script-src 'unsafe-inline' 'unsafe-eval' https: elmqal.com *.elmqal.com cdn.elmqal.com *.googlesyndication.com *.doubleclick.net *.google.com tpc.googlesyndication.com googleads.g.doubleclick.net g.doubleclick.net; img-src https: data:; font-src https: data: cdn.elmqal.com; worker-src 'unsafe-inline' 'unsafe-eval' http: https: blob: elmqal.com *.elmqal.com cdn.elmqal.com *.googlesyndication.com *.doubleclick.net *.google.com tpc.googlesyndication.com googleads.g.doubleclick.net g.doubleclick.net; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://*.google.com https://www.recaptcha.net https://hcaptcha.com https://*.hcaptcha.com https://platform.linkedin.com https://static.ads-twitter.com https://*.twitter.com https://*.olark.com https://code.jquery.com https://connect.facebook.net https://fast.wistia.com https://fast.wistia.net https://*.pardot.com https://www.facebook.com https://www.google-analytics.com https://adinstruments.bamboohr.com https://www.gstatic.com https://app.wistia.com https://ajax.googleapis.com https://*.adinstruments.com https://cdn.ckeditor.com https://src.litix.io https://assets.adobedtm.com https://i.simpli.fi https://optanon.blob.core.windows.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net http://localhost:1234 http://localhost:8083 https://lt-page.s3.amazonaws.com https://lt-page-staging.s3.amazonaws.com https://snap.licdn.com; style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com https://fonts.googleapis.com https://fast.fonts.net https://static.olark.com https://fast.wistia.com https://fast.wistia.net https://adinstruments.bamboohr.com https://cdn.adinstruments.com https://cdn.ckeditor.com https://optanon.blob.core.windows.net https://optimize.google.com https://lt-page.s3.amazonaws.com/ https://lt-page-staging.s3.amazonaws.com; font-src 'self' data: https://themes.googleusercontent.com https://fonts.gstatic.com https://fast.fonts.net https://fast.wistia.com; img-src 'self' data: *; connect-src 'self' https://*.kuracloud.com https://nrpc.olark.com https://*.wistia.com https://fast.wistia.net https://adinstruments.bamboohr.com https://embedwistia-a.akamaihd.net https://connect.facebook.net https://google-analytics.com https://*.litix.io https://www.google-analytics.com https://www.linkedin.com https://*.adinstruments.com https://webto.salesforce.com https://px.ads.linkedin.com http://localhost:8083; frame-src 'self' https://static.olark.com https://hcaptcha.com https://*.hcaptcha.com https://*.adinstruments.com https://oneadi-faces-embed.adinstruments.com https://static.olark.com https://*.salesforce.com https://fast.wistia.net https://fast.wistia.com https://platform.twitter.com https://*.facebook.com https://connect.facebook.net https://platform.linkedin.com https://*.google.com https://go.pardot.com https://labchart.com https://www.slideshare.net https://www.youtube.com https://www.youtube-nocookie.com https://syndication.twitter.com/ https://bid.g.doubleclick.net/ https://lt-page.s3.amazonaws.com/ https://lt-page-staging.s3.amazonaws.com https://trylt.kuracloud.com/; media-src 'self' data: blob: https://*.adinstruments.com https://static.olark.com https://embedwistia-a.akamaihd.net https://*.wistia.net https://*.wistia.com https://lt-page.s3.amazonaws.com/ https://lt-page-staging.s3.amazonaws.com; object-src 'self' https://*.adinstruments.com https://embedwistia-a.akamaihd.net https://embed-ssl.wistia.com; frame-ancestors 'self'; 1
default-src * 'unsafe-inline'; media-src * blob: 'unsafe-inline'; worker-src * blob: 'unsafe-inline'; font-src * 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' 'unsafe-eval' data: blob:  https://stage.jobcloud.ai https://qa.jobcloud.ai https://jobcloud.ai https://media.test.jobcloud.ai https://media.test.jobcloud.ai/media https://media.stage.jobcloud.ai https://media.stage.jobcloud.ai/media https://media.jobcloud.ai https://media.jobcloud.ai/media https://script.hotjar.com http://script.hotjar.com https://js.intercomcdn.com https://jobcloud-api-test.erecruiter.org https://jobcloud-api.erecruiter.org https://www.google-analytics.com https://stats.g.doubleclick.net https://gifs.intercomcdn.com https://static.intercomassets.com https://www.googletagmanager.com https://downloads.intercomcdn.com https://*.google.com https://*.google.be https://*.google.pt https://*.google.fr https://*.google.ch https://*.google.de https://*.google.rs; frame-src 'self' 'unsafe-eval' data: blob: https://stage.jobcloud.ai https://qa.jobcloud.ai https://jobcloud.ai https://vars.hotjar.com https://test-jobcloud-ai.eu.auth0.com https://jobcloud-ai.eu.auth0.com https://docs.google.com https://view.officeapps.live.com https://jobcloud-api.erecruiter.org https://jobcloud-api-test.erecruiter.org https://www.google.com https://www.google.ca https://auth.test.jobcloud.ai https://auth.stage.jobcloud.ai https://auth.jobcloud.ai; object-src 'self' data: blob:  https://stage.jobcloud.ai https://qa.jobcloud.ai https://jobcloud.ai; script-src 'self' https://ajax.googleapis.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com/gtm.js https://media.test.jobcloud.ai/media https://media.stage.jobcloud.ai/media https://media.jobcloud.ai/media https://js.cobrowse.io/CobrowseIO.js https://widget.intercom.io https://js.intercomcdn.com https://cdn.eu.auth0.com/client/OaLQYyvYQJilJ0oOT6T69EkSrYi4Zsen.js https://cdn.auth0.com/js/lock/11.22.4/fr.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com 'unsafe-inline' 'unsafe-eval'; font-src * data:; media-src 'self' https://js.intercomcdn.com; connect-src 'self' data: http://jobcloud.ai.local:3000 https://stage.jobcloud.ai https://qa.jobcloud.ai https://jobcloud.ai https://api.test.jobcloud.ai https://api.stage.jobcloud.ai https://api.jobcloud.ai http://jobcloud.ai.local:8000 https://metadata-api-stage.jobcloud.services/api/v1/meta/ https://metadata-api.jobcloud.services/api/v1/meta/ https://graphql.jobcloud.ai https://graphql.jobcloud.ai/graphql https://media.test.jobcloud.ai/media https://media.stage.jobcloud.ai/media https://media.jobcloud.ai/media https://middleware.test.jobcloud.ai https://middleware.stage.jobcloud.ai https://middleware.test.joblocloud.ai/graphql https://middleware.stage.joblocloud.ai/graphql https://middleware.jobcloud.ai https://middleware.jobcloud.ai/graphql https://ecommerce.test.jobcloud.ai https://ecommerce.stage.jobcloud.ai https://ecommerce.jobcloud.ai https://media.test.jobcloud.ai https://media.stage.jobcloud.ai https://media.jobcloud.ai https://test-jobcloud-ai.eu.auth0.com https://jobcloud-ai.eu.auth0.com https://api-iam.intercom.io http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com wss://nexus-websocket-a.intercom.io https://js.intercomcdn.com/ https://auth.test.jobcloud.ai https://auth.stage.jobcloud.ai https://auth.jobcloud.ai https://uploads.intercomcdn.com/ https://sentry.io https://widget.intercom.io/widget/o4xgdn6z https://www.google-analytics.com https://stats.g.doubleclick.net https://fonts.googleapis.com https://fonts.gstatic.com https://www.googletagmanager.com https://auth.jobcloud.ai/oauth/token 'unsafe-inline'; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; script-src 'self' https://elekk.xyz; font-src 'self' https://elekk.xyz; img-src 'self' data: blob: https://elekk.xyz; style-src 'self' https://elekk.xyz 'nonce-gXS9WKGj/eBXW+uADeB3pw=='; media-src 'self' data: https://elekk.xyz; frame-src 'self' https:; child-src 'self' blob: https://elekk.xyz; worker-src 'self' blob: https://elekk.xyz; connect-src 'self' blob: data: wss://elekk.xyz https://elekk.xyz; manifest-src 'self' https://elekk.xyz 1
default-src 'self'; media-src *.shortstackapp.com video.twimg.com *.cloudfront.net static.zdassets.com; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' blob:; img-src * data:; font-src * data:; frame-ancestors http://shortstackapp.com https://shortstackapp.com http://*.shortstackapp.com https://*.shortstackapp.com; frame-src blob: shortstackapp.com *.shortstackapp.com *.facebook.com *.google.com *.instagram.com *.tiktok.com *.youtube.com *.vimeo.com *.shortstack.com *.pgtb.me *.lndg.page *.googletagmanager.com *.hotjar.com *.hotjar.io; connect-src 'self' *.pndsn.com *.facebook.com s3.amazonaws.com https://*.zendesk.com https://*.zdassets.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io https://mbsy.co https://*.googleadservices.com https://*.instagram.com https://*.tiktok.com https://*.ibytedtos.com *.hotjar.com *.hotjar.io wss://*.hotjar.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.mouseflow.com cdnjs.cloudflare.com code.jquery.com ajax.googleapis.com stackpath.bootstrapcdn.com ajax.aspnetcdn.com www.google.com www.google-analytics.com www.gstatic.com www.eventbrite.co.uk http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; connect-src 'self' api.psauthority.org.uk http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; style-src 'self' 'unsafe-inline' code.jquery.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com fonts.googleapis.com; font-src 'self' stackpath.bootstrapcdn.com fonts.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; frame-src 'self' www.youtube.com www.youtube-nocookie.com www.google.com response.pure360.com www.eventbrite.co.uk https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; img-src *; object-src 'none' 1
default-src https: data: 'unsafe-inline' 'unsafe-eval' media-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com https://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://floridahousing.org/Scripts/js/jquery.resizer.min.js https://translate.googleapis.com https://translate.google.com https://ajax.googleapis.com https://*.googleapis.com https://www.googletagmanager.com https://cdn.raygun.io/raygun4js/raygun.min.js https://www.floridahousing.org/ https://cdn.userway.org/widget.js; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://cdn.userway.org/widget.js; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com https://translate.google.com https://www.google.com https://cdn.userway.org/widget.js; media-src 'self' data: blob:; frame-src 'self' https://apps.floridahousing.org/ https://floridahousing.sharefile.com/ https://www.youtube.com/embed/QVXAam3CHi8 https://www.youtube.com/embed/lI6PG4UCm6I https://player.vimeo.com/video/389876939 https://www.youtube.com/embed/70sD1sJXHnM https://cdn.userway.org/widget.js; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://cdn.userway.org/widget.js; connect-src 'self' accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com  https://floridahousing.org/Scripts/js/jquery.resizer.min.js https://translate.google.com https://ajax.googleapis.com https://*.googleapis.com *.google-analytics.com apis.google.com https://translate.googleapis.com https://stats.g.doubleclick.net https://cdn.userway.org/widget.js; 1
report-uri /scripts/sds/xss/?rev=4; default-src 'self' 'unsafe-inline' *.aspiresoft.com *.blueq.com 'report-sample'; script-src 'self' 'unsafe-inline' 'unsafe-eval' snapwidget.com *.googleapis.com *.aspiresoft.com *.blueq.com *.twitter.com *.addthis.com *.addthisedge.com instawidget.net *.google-analytics.com browser-update.org *.twimg.com *.authorize.net 'report-sample'; frame-src 'self' 'unsafe-inline' snapwidget.com *.youtube.com youtu.be youtube-nocookie.com *.aspiresoft.com *.blueq.com *.twitter.com *.addthis.com *.authorize.net data: 'report-sample'; connect-src 'self' 'unsafe-inline' *.aspiresoft.com *.blueq.com *.doubleclick.net *.google-analytics.com *.addthis.com 'report-sample'; font-src 'self' 'unsafe-inline' themes.googleusercontent.com *.aspiresoft.com *.blueq.com data: *.bootstrapcdn.com *.googleusercontent.com *.gstatic.com *.bootstrapcdn.com 'report-sample'; img-src 'self' https: data:; style-src 'self' 'unsafe-inline' *.aspiresoft.com *.blueq.com *.bootstrapcdn.com *.googleapis.com *.twitter.com 'report-sample' 1
default-src * gap: ws: https://ssl.gstatic.com;style-src * 'unsafe-inline' 'self' data: blob:;font-src 'self' data: fonts.gstatic.com;script-src * 'unsafe-inline' 'unsafe-eval' data: blob:;img-src * data: 'unsafe-inline' 'self' content:; 1
default-src * 'self' 'unsafe-inline' 'unsafe-eval' about: data: blob:; frame-ancestors https://*.bolsasuniversitarias.com https://*.krowdy.net https://*.laborum.pe https://*.informes.me https://*.krowdy.com https://*.krowdyspace.com https://*.laborum.me forms.gle docs.google.com https://*.krowdy.network 1
frame-ancestors 'self' https://www.mpigeneralionline.com https://www.mpigenerali.com; 1
default-src * data: 'unsafe-inline' 'unsafe-eval'; script-src * data: 'unsafe-inline' 'unsafe-eval'; object-src * data: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline' 'unsafe-eval'; img-src * data: 'unsafe-inline' 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://scholar.social; img-src 'self' https: data: blob: https://scholar.social; style-src 'self' https://scholar.social 'nonce-uJbAoPyquNfoybld7+tsxw=='; media-src 'self' https: data: https://scholar.social; frame-src 'self' https:; manifest-src 'self' https://scholar.social; connect-src 'self' data: blob: https://scholar.social https://cdn.masto.host wss://scholar.social; script-src 'self' https://scholar.social; child-src 'self' blob: https://scholar.social; worker-src 'self' blob: https://scholar.social 1
frame-ancestors https://www.channelsmanager.com https://channelsmanager.com https://portal.solidcommerce.com; 1
child-src *.facebook.com *.twitter.com *.google.com *.youtube.com *.vimeo.com *.jobvite.com *.linkedin.com *.trustarc.com; connect-src 'self' *.facebook.com *.jobvite.com *.github.com *.linkedin.com https://www.googleadservices.com https://www.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com *.jobvite.com; script-src 'self' https://apis.google.com https://platform.twitter.com https://code.jquery.com *.vimeo.com *.youtube.com *.ytimg.com *.googletagmanager.com *.google-analytics.com https://snap.licdn.com https://sjs.bizographics.com *.googleadservices.com *.gstatic.com https://connect.facebook.net *.doubleclick.net *.jobvite.com *.cloudfront.net https://platform.linkedin.com *.cloudflare.com *.trustarc.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.jobvite.com *.amazonaws.com; img-src 'self' *.gravatar.com *.imgix.net *.amazonaws.com *.google-analytics.com *.linkedin.com *.doubleclick.net *.google.com *.googletagmanager.com *.vimeocdn.com *.facebook.com *.jobvite.com *.adsymptotic.com https://i.ytimg.com *.trustarc.com; media-src *.youtube.com *.youtu.be *.vimeo.com *.amazonaws.com 'self'; object-src 'none'; frame-ancestors 'self' *.youtube.com; default-src 'self'; 1
default-src 'self' *.googlesyndication.com *.doubleclick.net *.googleadservices.com *.googletagservices.com *.cloudflare.com *.gstatic.com *.ampproject.org *.google-analytics.com *.youtube.com *.ytimg.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.yandex.ru *.yastatic.net 'unsafe-inline' 'unsafe-eval' data: https: blob:;img-src * data:; object-src 'self';font-src * data:;report-uri https://aktautorg.com/csp-report.php; 1
default-src 'self' https://*.tagvenue.com https://*.wp.com; connect-src 'self' https://www.google-analytics.com https://api.rollbar.com https://*.tagvenue.com https://*.hotjar.com https://*.hotjar.io  https://stats.g.doubleclick.net wss://*.hotjar.com https://*.wp.com https://calendly.datapipe.prodperfect.com https://calendly.com https://hooks.zapier.com https://www.facebook.com https://*.sendinblue.com https://docs.google.com https://*.jivosite.com https://*.olark.com https://olark-file-uploads.s3-us-west-1.amazonaws.com; script-src 'unsafe-inline' 'unsafe-eval' https://*.tagvenue.com https://connect.facebook.net https://*.googleapis.com https://www.google-analytics.com https://*.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://cdnjs.cloudflare.com https://*.hotjar.com https://ssl.gstatic.com https://*.wp.com https://*.twitter.com https://tagmanager.google.com https://www.googletagmanager.com https://assets.calendly.com https://sibautomation.com blob: https://*.jivosite.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://sjs.bizographics.com https://snap.licdn.com data: https://*.olark.com; img-src data: blob: https:; frame-src 'self' https://accounts.google.com https://staticxx.facebook.com https://*.hotjar.com https://www.googletagmanager.com https://www.youtube.com https://optimize.google.com https://*.wp.com https://*.twitter.com https://maps.google.com https://calendly.com https://sibautomation.com https://www.google.com https://bid.g.doubleclick.net https://www.facebook.com https://*.olark.com; style-src 'unsafe-inline' https://*.tagvenue.com https://ssl.gstatic.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://optimize.google.com https://tagmanager.google.com https://fonts.googleapis.com https://assets.calendly.com https://*.wp.com https://*.olark.com; font-src data: https://*.tagvenue.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://script.hotjar.com https://wordpress.com; media-src 'self' https://static.olark.com https://*.jivosite.com; report-uri /logging/csp-violation 1
base-uri 'self';script-src 'nonce-lfKCELSusIoj969oOwumL8AZqMqfN0nu' 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com www.google.com *.googleapis.com *.twimg.com www.googletagmanager.com platform.twitter.com;style-src 'self' 'unsafe-inline' *.googleapis.com platform.twitter.com;form-action 'self' platform.twitter.com syndication.twitter.com;img-src * 'unsafe-inline' data:;object-src 'self';frame-src www.gstatic.com www.google.com platform.twitter.com syndication.twitter.com *.googleapis.com *.twimg.com www.youtube.com www.vimeo.com *.facebook.com 1
media-src https://s3.amazonaws.com; font-src 'self' data: *.gruponutresa.com *.wpmucdn.com *.gstatic.com; default-src 'self' *.google.com *.gruponutresa.com *.netsaia.com *.w3.org *.youtube.com *.mathtag.com *.facebook.com *.bootstrapcdn.com *.gstatic.com *.consensu.org *.wpmucdn.com; script-src https: 'unsafe-inline' 'unsafe-eval' *.wpmucdn.com *.gruponutresa.com; connect-src https: *.gruponutresa.com; img-src https: 'unsafe-inline' data: *.gruponutresa.com; style-src https: 'unsafe-inline' *.gruponutresa.com; 1
worker-src 'http://test.datalex.org' 'http://www.lawnet.sg'; 1
frame-ancestors 'self' https://mycollection.stanleygibbons.com/ 1
script-src-elem 'self' 'unsafe-inline' *.cloudflare.com *.us5.list-manage.com *.justuno.com *.bing.com *.criteo.net *.criteo.com *.hotjar.com pixeleze.com *.pixeleze.com *.livechatinc.com acsbapp.com acsbap.com *.klaviyo.com *.sumome.com *.sumo.com *.google-analytics.com *.google.com *.gstatic.com maps.googleapis.com ajax.cloudflare.com *.afterpay.com *.magemail.co *.convertexperiments.com *.typekit.net *.digicert.com *.pinterest.com *.googletagmanager.com cdn.curalate.com *.yotpo.com edge.curalate.com *.readyreturns.com *.addthis.com *.facebook.com connect.facebook.net *.googleadservices.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com *.us5.list-manage.com *.justuno.com *.bing.com *.criteo.net *.criteo.com *.hotjar.com pixeleze.com *.pixeleze.com *.livechatinc.com acsbapp.com acsbap.com *.klaviyo.com *.sumome.com *.sumo.com *.google-analytics.com *.google.com *.gstatic.com maps.googleapis.com ajax.cloudflare.com *.afterpay.com *.magemail.co *.convertexperiments.com *.typekit.net *.digicert.com *.pinterest.com *.googletagmanager.com cdn.curalate.com *.yotpo.com edge.curalate.com *.readyreturns.com *.addthis.com *.facebook.com connect.facebook.net *.magemail.co *.cloudflare.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com;style-src 'self' 'unsafe-inline' *.klaviyo.com *.googleapis.com *.cloudflare.com *.yotpo.com;img-src 'self' data: about: connect.facebook.net www.googletagmanager.com *.google.com  *.google.co.in *.google-analytics.com *.convertexperiments.com *.optimizely.com acsbapp.com *.fbsbx.com *.ytimg.com accessibe.com *.accessibe.com *.klaviyo.com *.kxcdn.com *.facebook.com *.bing.com  *.sitescout.com static.afterpay.com p.typekit.net seal.digicert.com *.yotpo.com fonts.googleapis.com edge.curalate.com maps.gstatic.com maps.googleapis.com *.doubleclick.net *.advertising.com *.casalmedia.com *.tremorhub.com *.e-planning.net *.yieldmo.com *.stickyadstv.com *.criteo.com *.tapad.com *.clmbtech.com *.rubiconproject.com *.addthis.com *.teads.tv *.meba.kr *.adnxs.com *.aralego.com *.yahoo.com *.analytics.yahoo.com *.3lift.com *.outbrain.com *.smaato.net *.smartadserver.com *.pubmatic.com *.pubmatic.com *.openx.net;font-src 'self' use.typekit.net acsbapp.com acsbap.com fonts.googleapis.com fonts.gstatic.com staticw2.yotpo.com;style-src-elem 'self' 'unsafe-inline'  *.cloudflare.com *.klaviyo.com  fonts.googleapis.com staticw2.yotpo.com;connect-src 'self' *.hotjar.io *.google-analytics.com *.facebook.com *.doubleclick.net *.hotjar.com acsbapp.com *.justuno.com *.convertexperiments.com *.bing.com *.livechatinc.com *.klaviyo.com *.sumome.com sumo.com *.sumo.com *.acsbapp.com edge.curalate.com *.yotpo.com;frame-src 'self' player.vimeo.com *.readyreturns.com *.google.com *.facebook.com *.twitter.com *.sitescout.com *.criteo.com *.hotjar.com *.livechatinc.com *.justuno.com accessibe.com *.youtube.com *.pepperjamnetwork.com; report-uri https://lancerm1live.report-uri.com/r/d/csp/enforce 1
child-src 'self' 3speak.online emb.d.tube player.twitch.tv www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com; connect-src wss://ws.beechat.hive-engine.com https://beechat.hive-engine.com https://accounts.hive-engine.com https://history.steem-engine.com https://servedby.revive-adserver.net https://anyx.io https://steemd.minnowsupportproject.org https://cdn.snax.one https://api.hive-engine.com https://api.steem-engine.com https://scot-api.cryptoempirebot.com https://scot-api.steem-engine.com https://steemitimages.com https://images.hive.blog securepubads.g.doubleclick.net 'self' steemit.com https://api.steemit.com https://api.hive.blog api.blocktrades.us https://hivesigner.com https://pagead2.googlesyndication.com http://adservice.google.com https://www.google-analytics.com https://api.openhive.network; default-src tpc.googlesyndication.com 'self' img.3speakcontent.online emb.d.tube www.youtube.com staticxx.facebook.com player.vimeo.com *.streamrail.com; font-src data: fonts.gstatic.com; frame-ancestors 'none'; frame-src 'self' googleads.g.doubleclick.net https:; img-src * data:; object-src 'none'; plugin-types application/pdf; script-src 'unsafe-inline' 'unsafe-eval' data: https: 'self' www.google-analytics.com connect.facebook.net servedby.revive-adserver.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; report-uri /api/v1/csp_violation 1
default-src 'self' 'unsafe-inline';     connect-src https: https://www.google-analytics.com https://translate.googleapis.com;     script-src 'unsafe-inline' 'unsafe-eval' https: data:;     frame-src https: https://www.google.com;     font-src https: data: https://use.typekit.net;     img-src 'self' https://www.google-analytics.com https://www.gstatic.com https://www.google.com data: https://p.typekit.net about: https://translate.googleapis.com https://translate.google.com https://www.google-analytics.com/r/collect https://s.w.org;     style-src 'unsafe-inline' https:;     report-uri https://bpcpa.report-uri.com/r/d/csp/enforce;      1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://redliberal.com; img-src 'self' https: data: blob: https://redliberal.com; style-src 'self' https://redliberal.com 'nonce-jVtmUL0o2YPhfb19vXYmtw=='; media-src 'self' https: data: https://redliberal.com; frame-src 'self' https:; manifest-src 'self' https://redliberal.com; connect-src 'self' data: blob: https://redliberal.com https://cdn.masto.host wss://redliberal.com; script-src 'self' https://redliberal.com; child-src 'self' blob: https://redliberal.com; worker-src 'self' blob: https://redliberal.com 1
frame-ancestors 'self' http://www.1001hry.cz 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://yastatic.net https://yastatic.net *.yandex.ru *.webvisor.org https://metrika-informer.com https://cdn.jsdelivr.net https://www.google-analytics.com http://*.jivosite.com https://*.jivosite.com 1
default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm; 1
default-src 'unsafe-inline' 'self' data:;font-src 'self' cdn.faceworks.nl;img-src 'unsafe-inline' 'self' i.ytimg.com www.google-analytics.com data:;script-src 'self' 'unsafe-inline' scripts.zoomworks.nl www.youtube.com www.googletagmanager.com www.google-analytics.com connect.facebook.net s.ytimg.com;child-src www.youtube.com projects.ivorystudio.net; 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; object-src 'none' 1
frame-ancestors 'self' https://thecheat.co.kr 1
default-src https: data: http://*.hotjar.com:* https://*.hotjar.com:* wss://*.hotjar.com 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; connect-src 'self' cdn.esales.apptus.com *.api.esales.apptus.cloud *.sentry.io *.klarna.com *.klarnaevt.com www.google-analytics.com bat.bing.com stats.g.doubleclick.net at.odla.nu vitals.vercel-analytics.com vitals.vercel-insights.com; script-src-elem 'self' 'unsafe-inline' cdn.esales.apptus.com *.sentry-cdn.com www.googletagmanager.com *.klarna.com *.klarnaevt.com www.google-analytics.com ssl.google-analytics.com tagmanager.google.com at.odla.nu bat.bing.com www.googleadservices.com www.google.com googleads.g.doubleclick.net *.freshchat.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.klarna.com *.klarnaevt.com tagmanager.google.com *.freshchat.com; img-src 'self' odlanu.cdn.storm.io images.ctfassets.net *.klarna.com *.klarnaevt.com www.google-analytics.com ssl.gstatic.com www.gstatic.com odla.blob.core.windows.net www.nelsongarden.se googleads.g.doubleclick.net www.google.com www.google.se bat.bing.com www.googletagmanager.com; font-src fonts.gstatic.com *.klarna.com *.klarnaevt.com data:; object-src 'none'; frame-src *.klarna.com *.klarnaevt.com bid.g.doubleclick.net *.freshchat.com; script-src 'self' 'unsafe-inline' cdn.esales.apptus.com *.sentry-cdn.com www.googletagmanager.com *.klarna.com *.klarnaevt.com www.google-analytics.com ssl.google-analytics.com tagmanager.google.com at.odla.nu bat.bing.com www.googleadservices.com www.google.com googleads.g.doubleclick.net *.freshchat.com;  report-uri https://o468843.ingest.sentry.io/api/5497297/security/?sentry_key=3f12abc7066b4ddfb70b787e2a9e29d8 1
default-src * 'self' data: ; script-src * 'unsafe-inline' 'unsafe-eval' ; style-src * 'unsafe-inline' ; frame-ancestors 'none' ; 1
connect-src 'self' services.google.com www.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net; default-src 'none'; font-src 'self'; frame-src www.youtube.com content.googleapis.com accounts.google.com; img-src 'self' https://lh3.googleusercontent.com https://www.google.com data: https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google-analytics.com/collect https://www.google-analytics.com/r/collect; media-src https://kstatic.googleusercontent.com; script-src 'self' 'unsafe-inline' www.gstatic.com apis.google.com https://www.googletagmanager.com https://www.gstatic.com/brandstudio/kato/google_tag_manager_component/google_tag_manager_component.js https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js; style-src 'self' 'unsafe-inline' fonts.googleapis.com 1
default-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.pubnub.com https://cdnjs.cloudflare.com https://platform.twitter.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.syndication.twimg.com https://connect.facebook.net https://*.google.com https://*.google.co.uk https://www.gstatic.com https://*.googleadservices.com https://*.googlesyndication.com https://www.googletagservices.com  http://*.liveblogpro.com https://*.liveblogpro.com https://platform.vine.co  https://jsd-widget.atlassian.com;style-src 'unsafe-inline' 'self' https://*.twimg.com https://platform.twitter.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;font-src https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com;manifest-src 'self' https://*.nouse.co.uk;img-src 'self' data: blob: https://cdnjs.cloudflare.com https://*.nouse.co.uk https://nouse.ams3.digitaloceanspaces.com https://nouse.ams3.cdn.digitaloceanspaces.com https://*.twitter.com https://*.twimg.com https://www.google-analytics.com https://*.googlesyndication.com https://www.googletagmanager.com https://i2.wp.com             http://*.liveblogpro.com https://*.liveblogpro.com;connect-src 'self' https://*.nouse.co.uk https://*.backblazeb2.com https://ams3.digitaloceanspaces.com https://*.pndsn.com https://sentry.io https://www.google-analytics.com https://*.gstatic.com https://*.googlesyndication.com  https://*.atlassian.com;frame-src https://*.twitter.com https://staticxx.facebook.com https://www.google.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://e.issuu.com http://*.liveblogpro.com https://*.liveblogpro.com https://twitter.com https://*.nouse.co.uk https://nouse.ams3.cdn.digitaloceanspaces.com https://accounts.google.com;object-src 'self' blob:;worker-src 'self' blob:;frame-ancestors 'self'; 1
default-src https: wss: data: about: asset: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: wss: data: javascript: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; report-uri https://herringshoes.report-uri.com/r/d/csp/enforce 1
default-src https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.largo.com  https://*.revize.com https://cdnjs.cloudflare.com https://www.gstatic.com https://cdn.userway.org https://*.google.com https://siteimproveanalytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.google-analytics.com https://api.recollect.net/ https://assets.us.recollect.net ; style-src * 'unsafe-inline' 1
frame-src 'self' *.mrkortingscode.nl disqus.com vars.hotjar.com; 1
frame-ancestors self; upgrade-insecure-requests 1
require-sri-for script;frame-ancestors 'none';default-src * 'unsafe-inline';object-src 'self'; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.parcellab.com https://ct.pinterest.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://connect.facebook.net https://checkout.espaskincare.com https://www.espaskincare.com https://m.espaskincare.com https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://s.pinimg.com; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self' 'unsafe-inline' *.defensoria.gov.co *.google-analytics.com *.googleapis.com *.gstatic.com *.youtube.com *.microsoft.com  *.vimeo.com *.disqus.com disqus.com *.disquscdn.com 1
frame-ancestors 'self'; script-src 'unsafe-inline' 'self' blob: 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' www.catme.org catme.org www.google-analytics.com www.googletagmanager.com translate.googleapis.com translate.google.com www.youtube.com www.gstatic.com stats.g.doubleclick.net ; 1
script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; font-src 'self' data: https://static.scooter-system.fr https://fonts.gstatic.com; upgrade-insecure-requests; base-uri 'self'; 1
default-src *  'unsafe-eval' 'unsafe-inline' blob: data: www.google-analytics.com ajax.googleapis.com *.milanodavai.ru; 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-b+7tkUPEo8cVF0wut53deA' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src *; script-src * 'self' 'unsafe-inline'; style-src * 'self' 'unsafe-inline' blob:; img-src 'self' * data:; connect-src *; font-src * 'self'; frame-src *; object-src * 'self'; media-src *; child-src * 'self' 1
base-uri 'none'; object-src 'none'; script-src https://airhostsforum.com/logs/ https://airhostsforum.com/sidekiq/ https://airhostsforum.com/mini-profiler-resources/ https://airhostsforum.com/assets/ https://airhostsforum.com/brotli_asset/ https://airhostsforum.com/extra-locales/ https://airhostsforum.com/highlight-js/ https://airhostsforum.com/javascripts/ https://airhostsforum.com/plugins/ https://airhostsforum.com/theme-javascripts/ https://airhostsforum.com/svg-sprite/ https://www.google-analytics.com/analytics.js pagead2.googlesyndication.com/pagead/js/adsbygoogle.js z-na.amazon-adsystem.com/widgets/onejs?MarketPlace=US&adInstanceId=6b0a449e-2d2c-45cb-a5d5-91c2514b468d; worker-src 'self' blob: 1
frame-ancestors 'self' bibliocms.com *.bibliocms.com bibliocommons.com *.bibliocommons.com libanswers.com *.libanswers.com librarypoint.bibliocms.com *.librarypoint.bibliocms.com https://www.librarypoint.org www.librarypoint.org *.www.librarypoint.org; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval' gap://ready file://* 'self' 1
script-src 'nonce-/B359Ki0m/NXkFpm2KjdJg' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://www.google-analytics.com/analytics.js https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport 1
default-src 'self' iconic-assets.azureedge.net blob:; connect-src *; font-src *; frame-src *; img-src * blob: data:; media-src * blob:; object-src *; script-src * blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
frame-ancestors 'self' endurancecui.active.com; 1
style-src 'self' stackpath.bootstrapcdn.com api.userway.org 'unsafe-inline' maxcdn.bootstrapcdn.com use.fontawesome.com fonts.googleapis.com; font-src 'self' use.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' googletagmanager.com www.googletagmanager.com google-analytics.com www.google-analytics.com stackpath.bootstrapcdn.com code.jquery.com z.moatads.com v1.addthisedge.com m.addthis.com www.gstatic.com s7.addthis.com www.google.com maps.googleapis.com cdn.userway.org https://cdn.jsdelivr.net https://popper.js.org https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://cdn.userway.org https://ajax.aspnetcdn.com https://ajax.aspnetcdn.com https://unpkg.com http://tasacambioacapqa.azurewebsites.net; connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com api.userway.org www.google-analytics.com google-analytics.com; default-src 'self' google-analytics.com stats.g.doubleclick.net google-analytics.com use.fontawesome.com api.userway.org; img-src 'self' data: 'unsafe-inline' optic.gob.do https://*; child-src 'none'; frame-src  s7.addthis.com www.google.com cdn.userway.org docs.google.com www.youtube.com; media-src https://cdn.userway.org; 1
script-src 'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js http://*.shpg.org/ https://comments.mozillafoundation.org/ https://airtable.com https://platform.twitter.com https://cdn.syndication.twimg.com https://assets.mofoprod.net/static/ https://embed.typeform.com https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/debug/bootstrap; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://code.cdn.mozilla.net https://assets.mofoprod.net/static/; style-src 'self' 'unsafe-inline' https://code.cdn.mozilla.net https://fonts.googleapis.com  https://platform.twitter.com https://assets.mofoprod.net/static/; default-src 'none'; worker-src 'self'; media-src 'self' https://s3.amazonaws.com/mofo-assets/foundation/video/; frame-ancestors 'none'; connect-src *; child-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; frame-src 'self' https://www.youtube.com  https://comments.mozillafoundation.org/ https://airtable.com https://docs.google.com/ https://platform.twitter.com https://public.zenkit.com https://calendar.google.com https://www.youtube-nocookie.com https://devopstypeform.typeform.com; img-src * data: 1
frame-src 'self' *.fundinfo.com secure.mari4norm.com edge-cdn.net; font-src 'self' *.bootstrapcdn.com *.gstatic.com data:; img-src * data: ; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.fundinfo.com *.cloudflare.com tagmanager.google.com data:; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.lfeeder.com *.fundinfo.com *.gstatic.com *.bootstrapcdn.com *.cloudflare.com *.googletagmanager.com *.googleapis.com *.tinymce.com secure.mari4norm.com *.msecnd.net *.visualstudio.com tagmanager.google.com *.consensu.org *.quantserve.com *.quantcount.com; default-src 'self' *.fundinfo.com *.visualstudio.com *.consensu.org *.google-analytics.com; base-uri 'self'; report-uri 'self'/error/csp 1
frame-ancestors 'self' https://webchat.iris.ci 1
default-src self; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk apps.nestle.com apps.nestle.co.uk *.newrelic.com *.betrad.com bam.nr-data.net static.addtoany.com cdnjs.cloudflare.com *.youtube.com *.twitter.com *.ads-twitter.com *.evidon.com code.jquery.com connect.facebook.net *.krxd.net *.cloudfront.net assets.juicer.io s.ytimg.com *.pricespider.com api.tiles.mapbox.com; style-src 'self' 'unsafe-inline' *.acsitefactory.com fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com cloud.typography.com *.google.com *.nestlewaters.com assets.juicer.io *.pricespider.com api.tiles.mapbox.com; img-src 'self' data: *.googleapis.com *.gstatic.com *.cloudflare.com *.google-analytics.com www.google.com www.google.co.uk *.doubleclick.net brand-ecommerce-assets.fusepump.com *.evidon.com www.facebook.com connect.facebook.net *.krxd.net *.nestlewaters.com s.amazon-adsystem.com us-gmtdmp.mookie1.com t.co insight.adsrvr.org *.pricespider.com cx.atdmt.com blob:; media-src 'self'; frame-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com *.doubleclick.net *.krxd.net s.amazon-adsystem.com *.facebook.com; frame-ancestors 'self'; child-src 'self' static.addtoany.com *.youtube.com *.youtu.be info.evidon.com *.doubleclick.net *.krxd.net blob:; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com static.juicer.io; connect-src 'self' 'unsafe-inline' data: brand-ecommerce-api.fusepump.com *.google-analytics.com *.doubleclick.net api.mapbox.com cx.atdmt.com; report-uri /report-csp-violation 1
connect-src *; default-src 'none'; font-src 'self' fonts.gstatic.com cdn.tinymce.com foswiki-slackin.herokuapp.com; child-src *; frame-src *; img-src 'self' data: *; media-src *; object-src *; script-src 'self' disqus.com *.disqus.com *.disquscdn.com *.googleapis.com cdn.tinymce.com foswiki-slackin.herokuapp.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' disqus.com *.disqus.com *.disquscdn.com fonts.googleapis.com cdn.tinymce.com foswiki-slackin.herokuapp.com 'unsafe-inline' 1
'unsafe-inline'; 1
report-to default; default-src 'none'; img-src 'self'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; frame-ancestors 'self'; form-action 'none' 1
default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss:; base-uri 'self' optimize.google.com; 1
script-src 'self' 'strict-dynamic' 'nonce-88c929abcd7888a53bd2d13d980aa322658af1c0' https: http:; object-src 'none'; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://www.google.com http://www.google-analytics.com https://ssl.google-analytics.com https://www.google-analytics.com http://linkhelp.clients.google.com https://linkhelp.clients.google.com http://connect.facebook.net https://connect.facebook.net https://graph.facebook.com http://platform.twitter.com https://platform.twitter.com https://syndication.twitter.com http://syndication.twitter.com https://widgets.kimbia.com https://cdn.kimbia.com https://d2zah9y47r7bi2.cloudfront.net https://www.googletagmanager.com; connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com 1
frame-ancestors managestage.curaytor.com manage.curaytor.com base.curaytor.com base-staging.curaytor.io; 1
script-src 'self' *.clio-online.de *.paypal.com *.paypalobjects.com *.europa.clio-online.de *.clio-online.de *.geschichte.hu-berlin.de 'unsafe-inline' fonts.gstatic.com *.clio-online.net cdn.jsdelivr.net localhost *.hsozkult.de 'unsafe-eval' 1
default-src 'self' https:; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' static.hotjar.com script.hotjar.com *.ctctcdn.com *.consensu.org *.adroll.com prism.app-us1.com *.callrail.com adcsxamplifier.activehosted.com maps.googleapis.com d3rxaij56vjege.cloudfront.net home-c33.nice-incontact.com *.googleadservices.com *.googletagmanager.com *.google.com *.gstatic.com *.google-analytics.com connect.facebook.net *.doubleclick.net *.cloudflare.com *.cookiebot.com; style-src 'self' 'unsafe-inline' *.ctctcdn.com *.googleapis.com *.cloudflare.com *.google.com;font-src 'self' data: 'unsafe-inline' *.gstatic.com; img-src 'self' * data: *.googletagmanager.com; frame-src 'self' home-c33.nice-incontact.com vars.hotjar.com *.facebook.com *.doubleclick.net *.vimeo.com *.youtube.com *.cookiebot.com *.gstatic.com *.google.com; form-action 'self' *.facebook.com *.facebook.net; base-uri 'self'; connect-src 'self' *.constantcontact.com *.ctctcdn.com *.hotjar.com wss://*.hotjar.com *.hotjar.io *.adroll.com *.callrail.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.hubspot.com; frame-ancestors 'self'; object-src 'self' 1
script-src 'self' https: 'unsafe-inline' 1
frame-ancestors 'self' my.bethelcollege.edu my.betheluniversity.edu; 1
frame-ancestors 'self' https://*.sanook.com/ 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://static.criteo.net https://*.criteo.com https://wb.messengerpeople.com https://isitetv.com https://*.hotjar.com https://*.akamaihd.net https://*.attn.tv https://*.recaptcha.net https://*.translate.naver.net https://ln-rules.rewardstyle.com https://tr.snapchat.com https://www.shoplooks.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://services.postcodeanywhere.co.uk https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.googleapis.com https://translate.yandex.net https://*.hotjar.com wss://*.hotjar.com https://*.trustpilot.com https://*.pinterest.com https://*.bing.com https://*.doubleclick.net https://connect.facebook.net https://*.baidu.com https://ampcid.google.com.sg; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://www.lookfantastic.com.sg https://m.lookfantastic.com.sg https://checkout.lookfantastic.com.sg https://connect.facebook.net https://www.glossybox.at https://www.glossybox.ch https://www.glossybox.co.uk https://www.glossybox.com https://www.glossybox.de https://www.glossybox.fi https://www.glossybox.fr https://www.glossybox.ie https://www.glossybox.no https://www.glossybox.se https://www.glossybox.dk https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://static.criteo.net https://*.criteo.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.microsofttranslator.com https://*.hotjar.com https://*.akamaihd.net https://*.attn.tv https://*.trustpilot.com https://*.translate.naver.net https://*.bing.com https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://static.ads-twitter.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://*.shoplooks.com https://slooks.top https://slooks.me https://lantern.roeyecdn.com https://lantern.roeye.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://www.shoplooks.com https://static.shoplooks.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
script-src 'unsafe-inline' 'unsafe-eval' * data: 1
default-src 'self' 'unsafe-inline'; frame-ancestors 'none'; object-src 'none'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://localhost:8090 https://cdn.polyfill.io https://seal.verisign.com https://polyfill.io https://cdn.ravenjs.com; object-src 'self'; 1
frame-ancestors 'self' http://nanostring.pathfactory.com https://nanostring.pathfactory.com http://insight.nanostring.com https://insight.nanostring.com 1
img-src 'self' data: https://piwik.bzga.de https://blog.kenn-dein-limit.info 1
script-src https: localhost:8080 my.dev.com:8080 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; 1
default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; frame-ancestors 'self';, upgrade-insecure-requests; 1
frame-ancestors 'self' https://*.csaware.com 1
default-src https: 'unsafe-eval' 'unsafe-inline'; font-src https: data:; img-src https: data: 1
default-src 'self' data: 'unsafe-eval' 'unsafe-inline' blob: *.brightcove.com *.cloudfront.net *.doubleclick.net *.google.com *.facebook.com forms.hsforms.com app.hubspot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.convertexperiments.com *.hsforms.net *.jsdelivr.net *.googletagmanager.com *.connectid.cloud *.investis.com *.jquery.com *.cloudflare.com *.googleusercontent.com *.cloudfront.net *.hsforms.com *.facebook.net *.licdn.com *.google-analytics.com *.googleadservices.com *.investisdigital.com *.doubleclick.net *.lfeeder.com *.investis.com blob: data: *.hs-scripts.com *.google.com *.gstatic.com *.googleapis.com *.hsleadflows.net *.hsadspixel.net *.usemessages.com *.hs-analytics.net *.hs-banner.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.cloudflare.com *.googleusercontent.com *.investis.com *.cloudfront.net; img-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.investisdigital.com *.connectid.cloud *.investis.com *.facebook.com *.linkedin.com *.google.com *.google.co.in *.cloudfront.net *.brightcove.com *.lfeeder.com *.adsymptotic.com *.google-analytics.com *.hsforms.com *.gstatic.com *.googleapis.com *.googletagmanager.com *.hubspot.com; font-src 'self' *.cloudfront.net *.googleusercontent.com *.gstatic.com; connect-src 'self' *.amazonaws.com *.brightcove.com *.luckyorange.net *.linkedin.com *.google-analytics.com *.investis.com *.doubleclick.net *.googleapis.com wss://*.visitors.live wss://visitors.live *.investisdigital.com *.hubspot.com *.hubapi.com forms.hsforms.com www.facebook.com api.luckyorange.com; report-uri //report-csp-violation 1
frame-ancestors https://edmodo.net https://*.edmodo.net https://*.edmodo.com; 1
frame-ancestors westwallet.io fasttest.local 1
default-src https:; connect-src https: wss: wss://*.smartsupp.com https://*.smartsupp.com https://*.smartsuppchat.com https://*.smartsuppcdn.com https://smartsupp-widget-161959.c.cdn77.org; script-src 'unsafe-inline' 'unsafe-eval' yottlyscript.com https://*.smartsuppchat.com https://*.smartsuppcdn.com https://smartsupp-widget-161959.c.cdn77.org  https:; style-src 'self' fonts.googleapis.com *.google.com media.flixcar.com d10lpsik1i8c69.cloudfront.net app.foxentry.cz cdn.foxentry.cz cdn.luigisbox.com https://*.smartsuppcdn.com smartsupp-widget-161959.c.cdn77.org 'unsafe-inline'; object-src 'self'; img-src http://*.rajce.idnes.cz 'self' https: data: https://*.smartsuppcdn.com https://smartsupp-widget-161959.c.cdn77.org; font-src https: data: https://*.smartsuppcdn.com https://smartsupp-widget-161959.c.cdn77.org; worker-src blob: 'self';media-src https://*.smartsuppcdn.com https://smartsupp-widget-161959.c.cdn77.org 1
default-src *; script-src 'unsafe-inline' 'unsafe-eval'  https://*.anico.com https://*.americannational.com https://*.googleapis.com http://otf.msn.com https://*.lifeannuitydi.com  https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://americannational.com https://*.assistant.watson.appdomain.cloud https://www.gstatic.com https://www.google.com https://unpkg.com https://*.vtimg.com https://*.ytimg.com  http://*.angularjs.org https://*.youtube.com  https://*.dnanico1.aniconet.com https://*.anicoweb.com; style-src * 'unsafe-inline' ; img-src * data: ; child-src * data: blob: filesystem: ; 1
form-action 'self'; object-src 'self'; worker-src 'self' blob:; img-src dashboard.umbraco.org data: our.umbraco.com our.umbraco.org 'self' i.ytimg.com; script-src-elem siteimproveanalytics.com www.googletagmanager.com www.google.com www.gstatic.com cdn.cookielaw.org code.jquery.com 'unsafe-inline' 'self'; style-src-attr 'unsafe-inline'; style-src-elem 'unsafe-inline' 'self'; frame-src 'self' www.google.com cdn.yoshki.com www.youtube.com player.vimeo.com; connect-src our.umbraco.com cdn.cookielaw.org 'self'; script-src www.google.com 'unsafe-eval' 'unsafe-inline' 'self'; report-uri https://367bc1309b9121b00de27c5dbdfe8aa8.report-uri.com/r/d/csp/enforce 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-MzFjN2VhYTYtMTg5Ni00YTNlLTlkNjctMjE0ZmZhYWFjOTU0'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
script-src 'nonce-8c8f62f2e625d6607917e54d9725aa2a' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=9538952002776824; frame-ancestors 'self' 1
default-src https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/  ; base-uri https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/  ; frame-ancestors https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/  ; style-src 'unsafe-inline' https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/ https://api.addressfinder.io https://tagmanager.google.com https://optimize.google.com ; script-src https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/ 'unsafe-inline' https://api.addressfinder.io https://www.googletagmanager.com https://fonts.googleapis.com https://*.google-analytics.com https://tagmanager.google.com https://optimize.google.com https://code.jquery.com 'unsafe-eval' ; img-src https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/ http://www.govt.nz 'self' data: https://*.google-analytics.com https://*.swagger.io https://optimize.google.com ; font-src https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/ https://fonts.gstatic.com ; object-src https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/ 'none' ; frame-src https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/ http://www.govt.nz 'self' data: https://*.youtube-nocookie.com https://*.youtube.com https://optimize.google.com https://www.googletagmanager.com/ns.html ; child-src https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/ https://*.youtube-nocookie.com https://*.youtube.com  https://optimize.google.com https://www.googletagmanager.com/ns.html ; connect-src https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/ https://api.addressfinder.io https://www.google-analytics.com/ ; form-action https://www.govt.nz https://*.cwp.govt.nz https://www.govt.nz/ http://www.govt.nz 'self' ; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: http://y1.extreme-dm.com/i/ http://y1.extreme-dm.com/z/; 1
frame-ancestors https://www.healthinsurance.org 'self'; 1
frame-ancestors 'self';base-uri 'self'; 1
frame-ancestors 'self'  ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleadservices.com googleads.g.doubleclick.net *.google.com *.googleoptimize.com *.google-analytics.com *.youtube.com track.adform.net s2.adform.net *.facebook.net *.googleapis.com *.captcha.com *.google.com *.edp.pt *.facebook.com *.googletagmanager.com *.linkedin.com *.gstatic.com *.static.hotjar.com *.hotjar.com *.hotjar.io bywe2.byside.com bat.bing.com cdn.cookielaw.org *.onetrust.com *.glancecdn.net s3.amazonaws.com/glancecdn/*  1
report-uri https://sentry.io/api/1206618/security/?sentry_key=4b848061416d44a9bc925db5abadefe2; script-src 'sha256-+NIl5+Z2zUoqWjqbdloua4EnWE2HFnaaPCDoCOpAtbc=' 'self' 'sha256-xTttU22ux+e2s1k7dnG62CWVM9K270OfftF1tX6Fw+E=' 'sha256-yVF4iEmYJE+LtmecAOofFKtX2ljI9OGet2JS80I5ano=' 'sha256-TdISyo0aiglaPX7NF61YRTjwO7dS698zKvjMGFoxBUI=' 'sha256-OpSGCQua3cLCkrZIxxDsuDVf2TurIG8ZHekLDosMq2o=' 'sha256-LfbuW2GlEmUSyviun1qLrU3vH/s8LsYLZShWtrB4Bdo=' 'sha256-q8mC++zF0ZSybe5zeByUXCWiZKSpNhVPs9ZYmrWgiik=' 'sha256-/UdkvbG2wcgiRYq4uKTcp/UPI9f3iXENHVm+Mql5ijU=' 'sha256-mkB1UcMDzn5gyfb/4H1pqXIppcYU5l8m78GBFGmVA74=' 'sha256-rEhStng7KKh1wqWfJLy6UaOxJNdNe0CzUsRz3wGTZDc=' 'sha256-u3+yLZMuVhBQ7a+08l1y3+H+2O5DKtKv/iKixSLBWi0=' 'sha256-3vyW4GSDDWCZkqw5dNuvczVMJ6feLWiqoeDYY4DC45c=' 'sha256-XY6tLUuSJ9rmF1v37RhOOKLhL2pwJNLzDJTrFKdaHuI=' https://static.smartrecruiters.com https://cdn.materialdesignicons.com https://fonts.googleapis.com https://fonts.gstatic.com https://breadwallet.us14.list-manage.com; default-src 'self'; connect-src 'self' https://sentry.io https://storerocket.io https://api.mapbox.com; style-src 'self' blob: 'unsafe-inline' cdn.materialdesignicons.com fonts.googleapis.com api.tiles.mapbox.com; font-src 'self' cdn.materialdesignicons.com fonts.gstatic.com; worker-src 'self' blob:; child-src 'self' blob:; img-src 'self' data: blob: https://storage.googleapis.com/ https://brd.imgix.net/; frame-src 'self' blob: https://www.youtube.com/ 1
*;object-src 'none'; 1
default-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; child-src 'self' blob:; object-src 'self' data: https:; style-src 'self' data: 'unsafe-inline' https: blob:; img-src 'self' data: https: blob:; media-src 'self' data: https: blob:; frame-src 'self' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests; 1
script-src 'nonce-d816d5115c20dc696f93d0454f0420a3' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=6914279897935661; frame-ancestors 'self' 1
default-src 'self' *.gov.hk *.google-analytics.com *.googleapis.com; style-src 'self'  *.googleapis.com *.gov.hk www.chrt.org.hk www.comptribunal.hk www.coms-auth.hk www.e-c.edu.hk www.harbourfront.org.hk www.hfc.org.hk www.hkcfa.hk www.hongkongpost.hk www.judiciary.hk www.lasc.hk www.mpfa.org.hk www.ticf.org.hk *.tradesinglewindow.hk 'unsafe-inline'; script-src 'self' *.google-analytics.com *.googleapis.com *.gov.hk www.chrt.org.hk www.comptribunal.hk www.coms-auth.hk www.e-c.edu.hk www.harbourfront.org.hk www.hfc.org.hk www.hkcfa.hk www.hongkongpost.hk www.judiciary.hk www.lasc.hk www.mpfa.org.hk www.ticf.org.hk *.tradesinglewindow.hk 'unsafe-inline'; img-src 'self' *.google-analytics.com *.gov.hk www.chrt.org.hk www.comptribunal.hk www.coms-auth.hk www.e-c.edu.hk www.harbourfront.org.hk www.hfc.org.hk www.hkcfa.hk www.hongkongpost.hk www.judiciary.hk www.lasc.hk www.mpfa.org.hk www.ticf.org.hk *.tradesinglewindow.hk; frame-ancestors 'none'; font-src 'self' fonts.gstatic.com *.gov.hk www.chrt.org.hk www.comptribunal.hk www.coms-auth.hk www.e-c.edu.hk www.harbourfront.org.hk www.hfc.org.hk www.hkcfa.hk www.hongkongpost.hk www.judiciary.hk www.lasc.hk www.mpfa.org.hk www.ticf.org.hk *.tradesinglewindow.hk 'unsafe-inline' 1
frame-ancestors https://planet-imex.co.uk/ https://planet-imex.com/ https://planetimex.co.uk/ https://planetimex.com/ https://www.imexexhibitions.com/ https://www.imex-frankfurt.com/ https://de.imex-frankfurt.com/ https://www.imexamerica.com/ https://www.stage.imex.cti.digital/ http://america.stage.imex.cti.digital/ http://frankfurt.stage.imex.cti.digital/ http://de-frankfurt.stage.imex.cti.digital/ https://www.reactive.imex.cti.digital/ https://frankfurt.reactive.imex.cti.digital/ https://de-frankfurt.reactive.imex.cti.digital/ https://america.reactive.imex.cti.digital/ https://www.qa.imex.cti.digital/ http://america.qa.imex.cti.digital/ http://frankfurt.qa.imex.cti.digital/ http://de-frankfurt.qa.imex.cti.digital/ https://www.imex.ctidev/ https://frankfurt.imex.ctidev/ https://de.frankfurt.imex.ctidev/ https://america.imex.ctidev/; 1
frame-ancestors 'self' *.cybersource.com *.salesforce.com *.force.com ; form-action *.cybersource.com *.salesforce.com *.force.com 'self' 1
default-src 'self'; connect-src https://www.theexplorercard.com https://performance.typekit.net/ https://dpm.demdex.net/ https://secure-ds.serving-sys.com/ https://analytics.chase.com/ https://bam.nr-data.net/ 'self' https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://t.co/; font-src 'self' https://use.typekit.net; img-src 'self' https://ce.lijit.com/ data: https://insight.adsrvr.org/ https://match.sharethrough.com/ https://s.thebrighttag.com/ https://aa.agkn.com https://rc.rlcdn.com https://pixel.tapad.com https://pixel.advertising.com/ https://pippio.com https://ssl.gstatic.com https://ups.analytics.yahoo.com https://beacon.krxd.net https://odr.mookie1.com/ https://cw.addthis.com/ https://dpm.demdex.net https://sync.mathtag.com/ https://x.bidswitch.net/ https://ads.scorecardresearch.com/ https://www.linkedin.com https://i.liadm.com/ https://tapestry.tapad.com/ https://ib.adnxs.com https://magnetic.t.domdex.com/ https://dsum-sec.casalemedia.com/ https://su.addthis.com/ https://usermatch.krxd.net https://adadvisor.net/ https://analytics.twitter.com https://rtb.gumgum.com/ https://p.typekit.net https://ml314.com/ https://adservice.google.com/ https://tags.rd.linksynergy.com/ https://pixel.rubiconproject.com/ https://bh.contextweb.com/ https://us-u.openx.net/ https://ads.yahoo.com https://www.gstatic.com https://api.viglink.com/ https://match.adsrvr.org/ https://tags.bluekai.com/ https://p.typekit.net https://idsync.rlcdn.com/ https://io.narrative.io/ https://dmp.truoptik.com/ https://secure.adnxs.com https://*.chase.com https://tr.snapchat.com https://i.simpli.fi/ https://pixel.mathtag.com/ https://*.amazon-adsystem.com https://bat.bing.com https://sp.analytics.yahoo.com https://*.linkedin.com https://tags.mediaforge.com https://*.googleadservices.com https://*.boltdns.net https://jpmcbankna.demdex.net https://*.chasecreditcards.com https://*.google.com https://t.acxiom-online.com https://outpace.com https://a.amxdt.com https://*.outbrain.com https://*.doubleclick.net https://*.google-analytics.com https://*.facebook.com https://*.adsymptotic.com https://ct.pinterest.com https://t.co/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://code.jquery.com https://bs.serving-sys.com https://chaseonline.chase.com https://secure-ds.serving-sys.com https://rf15.chase.com https://www.googletagmanager.com https://tagmanager.google.com/ https://use.typekit.net https://www.chase.com https://*.newrelic.com bam.nr-data.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com/ https://use.typekit.net/ https://p.typekit.net https://t.co/; 1
default-src 'self' *.mncdn.com; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
frame-ancestors 'self'; report-uri /error/csp-violation 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-MDYxMTExOTctNWNjOC00ZmI2LWI4OWItOGVjNTRiOTI4YmEw'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
default-src 'self' data: https://www.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.google.com https://*.google.cz https://*.gstatic.com https://*.youtube.com https://*.googleadservices.com https://*.typekit.net https://*.doubleclick.net https://connect.facebook.net https://*.facebook.com https://*.seznam.cz https://c.imedia.cz https://*.smartlook.com https://*.smartlook.cloud 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob: 1
default-src https: data: 'unsafe-inline'; object-src 'self'; script-src  'self' https://*.meruscase.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://platform.twitter.com/ https://*.google-analytics.com/ https://*.googletagmanager.com/ https://cdn.syndication.twimg.com/ https://merus-assets.s3.amazonaws.com/ https://*.facebook.net/ https://*.googleapis.com/ https://*.aspnetcdn.com/ https://*.microsoft.com https://maxcdn.bootstrapcdn.com/ https://*.youtube.com/ https://s.ytimg.com/ https://js.recurly.com/ https://cdn.wootric.com/ 'unsafe-eval' 'unsafe-inline' https://code.jquery.com/ https://forms.hubspot.com/ https://forms.hsforms.com/ https://js.hs-analytics.net/ https://js.hs-scripts.com/ https://api.usemessages.com/ https://js.usemessages.com/ https://js.hsforms.net/ https://js.hsleadflows.net/; style-src 'self' 'unsafe-inline' https: 1
frame-ancestors https://admin.intermountainbillpay.com https://dfd.intermountainhealthcare.org https://myhealthplus.intermountainhealthcare.org https://myhealthplus-stage.intermountainhealthcare.org; 1
default-src 'self'; child-src 'self' www.facebook.com *.twitter.com platform.linkedin.com *.youtube.com *.vimeo.com *.spotify.com fotobelevenis.vbooth.me https://*.genkgo.com; connect-src 'self' *.typekit.net *.twitter.com platform.linkedin.com https://*.genkgo.com; font-src 'self' *.typekit.net https://*.genkgo.com 'unsafe-inline'; img-src 'self' https://* https://*.genkgo.com data:; media-src 'self' https://*.genkgo.com; script-src 'self' *.typekit.net *.twitter.com platform.linkedin.com https://*.genkgo.com 'unsafe-inline'; style-src 'self' *.typekit.net https://*.genkgo.com 'unsafe-inline'; report-uri https://bedrijfskring.nl/f/error-report/report/csp; upgrade-insecure-requests 1
frame-ancestors 'self' *.easyzic.com 1
frame-ancestors 'self' royaleapi.com royaleapi.com:* cdn.royaleapi.com *.royaleapi.com:* openfam.com fam.gg http://*.royaleapi.com:* http://royaleapi.com:* https://*.royaleapi.com:* https://royaleapi.com:*; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net *.facebook.net *.facebook.com *.google.com *.googletagmanager.com *.google.com.tr *.googleapis.com *.gstatic.com *.google-analytics.com *.doubleclick.net *.youtube.com *.ytimg.com *.soundcloud.com *.spotify.com *.deezer.com *.vimeo.com *.vimeocdn.com *.41-29.com *.akbanksanat.com *.apple.com; 1
; base-uri 'self'; 1
default-src 'self'; child-src 'self' blob: https://content.googleapis.com https://www.googletagmanager.com/ns.html; connect-src 'self' https://www.browsealoud.com https://siteintercept.qualtrics.com https://atlas.microsoft.com https://www.google-analytics.com https://events.glasgowlife.org.uk https://plus.browsealoud.com https://*.speechstream.net https://stats.g.doubleclick.net https://babm.texthelp.com https://dc.services.visualstudio.com; font-src 'self' 'unsafe-inline' data: https://www.browsealoud.com https://atlas.microsoft.com https://fonts.gstatic.com https://fonts.googleapis.com https://fast.fonts.net; frame-src 'self' https://player.vimeo.com https://www.youtube.com; img-src 'self' blob: data: https://www.browsealoud.com https://atlas.microsoft.com https://gl-events.s3.amazonaws.com https://qaglportal.azureedge.net https://prodglportal.azureedge.net https://qaglportalv2.azureedge.net https://prodglportalv2.azureedge.net https://gl-wip-portal-cache.azureedge.net https://gl-test-portal-cache.azureedge.net https://gl-prod-portal-cache.azureedge.net https://glwipportal.blob.core.windows.net https://gltestportal.blob.core.windows.net https://glwipportal.blob.core.windows.net https://glprodportal.blob.core.windows.net https://glportalprodblob.blob.core.windows.net https://glportalv2qablobfront.blob.core.windows.net https://glportalv2prodblob.blob.core.windows.net https://events.glasgowlife.org.uk https://csi.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://www.gravatar.com https://plus.browsealoud.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.facebook.com; media-src 'self' blob: https://gl-test-portal.azurewebsites.net https://qaglportal.azureedge.net https://prodglportal.azureedge.net https://qaglportalv2.azureedge.net https://prodglportalv2.azureedge.net https://*.speechstream.net; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com https://apis.google.com https://atlas.microsoft.com https://www.browsealoud.com https://plus.browsealoud.com https://connect.facebook.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://az416426.vo.msecnd.net https://dc.services.visualstudio.com https://fast.fonts.net https://ajax.googleapis.com https://fonts.googleapis.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://atlas.microsoft.com https://fonts.googleapis.com https://fast.fonts.net https://plus.browsealoud.com https://tagmanager.google.com; report-uri https://stormid.report-uri.com/r/d/csp/enforce; upgrade-insecure-requests; block-all-mixed-content; 1
form-action 'self' 1
default-src 'self' blob: storage.net-fs.com www.google.com *.google-analytics.com *.youtube.com *.googleapis.com *.gstatic.com jobs.comsoft.de tools.eurolandir.com asia.tools.euroland.com *.a1.net live.virtual-events.at; frame-src 'self' indd.adobe.com storage.net-fs.com www.google.com *.google-analytics.com *.youtube.com *.googleapis.com *.gstatic.com jobs.comsoft.de tools.eurolandir.com asia.tools.euroland.com webcast.a1.net live.virtual-events.at; style-src 'self' 'unsafe-inline' storage.net-fs.com *.googleapis.com *.gstatic.com tools.eurolandir.com asia.tools.euroland.com webcast.a1.net live.virtual-events.at; img-src 'self' data: storage.net-fs.com *.google-analytics.com *.googleapis.com *.gstatic.com tools.eurolandir.com asia.tools.euroland.com webcast.a1.net *.a1.group live.virtual-events.at; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: storage.net-fs.com *.googleapis.com *.gstatic.com *.google-analytics.com cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/ www.google.com jobs.comsoft.de tools.eurolandir.com asia.tools.euroland.com webcast.a1.net *.zencdn.net test.frequentis.com.xserv21032.hybridserver.at blob: live.virtual-events.at; font-src 'self' data: storage.net-fs.com *.gstatic.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com www.google-analytics.com www.googletagmanager.com tagmanager.google.com w.sharethis.com *.sharethis.com optanon.blob.core.windows.net cdn.cookielaw.org code.jquery.com geolocation.onetrust.com munchkin.marketo.net www.youtube.com s.ytimg.com 1
frame-ancestors 'self' emerson.com *.emerson.com https://*.it-motive.de https://*.epulse.cloud 1
img-src 'self' data: https://px.ads.linkedin.com/ https://www.facebook.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://staticbvdev.am4.com.br/ https://staticbvhmg.am4.com.br/ https://staticbv.am4.com.br/ https://staticbv.bvirtual.com.br/; style-src 'self' https://code.jquery.com/ https://use.fontawesome.com/ https://cdn.jsdelivr.net/ https://fonts.googleapis.com/ 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://connect.facebook.net/ https://snap.licdn.com/ https://cdn.jsdelivr.net/ https://www.google-analytics.com https://www.googletagmanager.com/ https://d335luupugsy2.cloudfront.net/ https://cdnjs.cloudflare.com/ https://ajax.googleapis.com/; 1
img-src https: data: ; base-uri 'none'; upgrade-insecure-requests; 1
frame-ancestors 'self' http://www.1001jogos.pt 1
default-src 'self'; font-src * data:;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; frame-src *; connect-src *; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' kaldewei-ass.secure.footprint.net kaldewei-tt.secure.footprint.net https://www.kaldewei.de *.kaldewei.de https://www.kaldewei.com http://test-lieferzeitenauskunft.kaldewei.de test-lieferzeitenauskunft.kaldewei.de lieferzeitenauskunft.kaldewei.de *.hotjar.com tagmanager.google.com www.googletagmanager.com www.google-analytics.com www.google.com www.gstatic.com jwpsrv.com www.polantis.com maps.googleapis.com maps.gstatic.com bat.bing.com https://interaktiv.contilla.de/15012d2d2e303369c8628723/0/webapp.js https://www.recaptcha.net/recaptcha/api.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/206776544034462 https://s.pinimg.com/ct/core.js https://s.pinimg.com/ct/lib/ privacy-proxy-server.usercentrics.eu privacy-proxy.usercentrics.eu app.usercentrics.eu https://ct.pinterest.com/user/; 1
frame-ancestors 'self' dbo3x9cwtwku1.cloudfront.net; 1
default-src 'self'; script-src 'self' https://connect.facebook.net/ https://platform.twitter.com/ https://www.google-analytics.com/ https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ *.wistia.com *.wistia.net https://www.kialo.com/ 'nonce-547e81b7f972918ea014b0a6e8d8ce02a969575442fd301f2b8db486d0a30fb8'; style-src 'self' 'unsafe-inline' https://www.kialo.com/; connect-src 'self' https://app.getsentry.com/ https://www.google-analytics.com/ https://syndication.twitter.com/ *.wistia.com *.wistia.net https://embedwistia-a.akamaihd.net/ wss://www.kialo.com/; img-src 'self' data: blob: https://syndication.twitter.com/ https://web.facebook.com/ https://www.facebook.com/ https://www.google-analytics.com/ *.wistia.com *.wistia.net https://embedwistia-a.akamaihd.net https://www.kialo.com/; font-src data: https://fonts.gstatic.com; child-src 'self' blob: https://www.recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://staticxx.facebook.com/ https://web.facebook.com/ https://www.facebook.com/ https://platform.twitter.com/ https://syndication.twitter.com/ *.wistia.com *.wistia.net; frame-src 'self' blob: https://www.recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://staticxx.facebook.com/ https://web.facebook.com/ https://www.facebook.com/ https://platform.twitter.com/ https://syndication.twitter.com/ *.wistia.com *.wistia.net; media-src 'self' data: blob: *.wistia.com *.wistia.net https://embedwistia-a.akamaihd.net; object-src https://embedwistia-a.akamaihd.net; manifest-src 'self' https://www.kialo.com/; frame-ancestors 'none'; report-uri /api/v1/cspreport 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://ajax.googleapis.com http://googleads.g.doubleclick.net https://googleads.g.doubleclick.net http://googleads.g.doubleclick.net http://www.googletagservices.com https://www.googletagservices.com https://www.google-analytics.com/ http://www.google-analytics.com https://ssl.google-analytics.com https://ssl.google-analytics.com https://pagead2.googlesyndication.com http://pagead2.googlesyndication.com https://pagead2.googlesyndication.com http://www.googletagmanager.com http://www.liveinternet.ru https://www.liveinternet.ru http://vk.com https://vk.com https://login.vk.com http://ok.ru https://connect.ok.ru http://graph.facebook.com http://share.yandex.ru https://share.yandex.ru http://connect.mail.ru http://urls.api.twitter.com http://site.yandex.net http://counter.rambler.ru https://yastatic.net https://mc.yandex.ru http://clck.yandex.ru http://mc.yandex.ru https://mc.yandex.ru https://yandex.ru https://yandex.ru/ https://site.yandex.net https://sitesearch-suggest.yandex.ru https://adservice.google.com.ua  https://adservice.google.com  https://adservice.google.com.ru  https://partner.googleadservices.com  https://tpc.googlesyndication.com  https://mc.yandex.ru https://adservice.google.ru  https://pagead2.googlesyndication.com ;child-src 'self' 'unsafe-inline' https://googleads.g.doubleclick.net  https://tpc.googlesyndication.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob:  *.weareone.fm *.technobase.fm *.housetime.fm *.hardbase.fm *.trancebase.fm *.coretime.fm *.teatime.fm *.clubtime.fm *.replay.fm *.tb-group.fm *.google.com/recaptcha/ *.gstatic.com/recaptcha/ maps.googleapis.com fonts.googleapis.com fonts.gstatic.com use.typekit.net *.google.com/maps/embed *.youtube-nocookie.com; img-src 'self' data: *.weareone.fm *.technobase.fm *.housetime.fm *.hardbase.fm *.trancebase.fm *.coretime.fm *.teatime.fm *.clubtime.fm *.replay.fm *.tb-group.fm *.google.com/recaptcha/ *.gstatic.com/recaptcha/ maps.googleapis.com fonts.googleapis.com fonts.gstatic.com use.typekit.net *.google.com/maps/embed *.youtube-nocookie.com 1
frame-ancestors 'self' *.delvaux.com 1
connect-src api.usabilla.com www.facebook.com payment.smartrefill.se 'self' teliase.smartrefill.se www.test.halebop.se halebop.humany.net www.beta.halebop.se www.google-analytics.com stats.g.doubleclick.net; font-src d6tizftlrpuof.cloudfront.net 'self' fonts.gstatic.com teliase.smartrefill.se halebop.humany.net data:; frame-src www.facebook.com bid.g.doubleclick.net 5109824.fls.doubleclick.net optimize.google.com open.spotify.com secure.smartrefill.se msdp-commonservices-prod.han.telia.se bandcamp.com d6tizftlrpuof.cloudfront.net teliase.smartrefill.se masterpass.com www.google.com www.youtube.com coverage.ddc.teliasonera.net; img-src images.ctfassets.net/gaubdlm5cst3/ www.facebook.com 'self' i.ytimg.com halebop.humany.net www.halebop.se online.adservicemedia.dk connect.facebook.net w.usabilla.com stats.g.doubleclick.net www.google.se googleads.g.doubleclick.net d6tizftlrpuof.cloudfront.net www.googletagmanager.com teliase.smartrefill.se www.google.com www.gstatic.com maps.gstatic.com data: www.google-analytics.com s.ytimg.com humany.blob.core.windows.net; report-uri /.api/csp-report/v1/report?teamId=7a7d9d3e-fb10325c-1924efc7; script-src www.googleadservices.com 'unsafe-inline' 'self' halebop.humany.net optimize.google.com connect.facebook.net w.usabilla.com tagmanager.google.com www.googleoptimize.com api.usabilla.com static.masterpass.com googleads.g.doubleclick.net d6tizftlrpuof.cloudfront.net www.googletagmanager.com teliase.smartrefill.se 'unsafe-eval' www.google-analytics.com; style-src fonts.googleapis.com 'unsafe-inline' d6tizftlrpuof.cloudfront.net 'self' teliase.smartrefill.se halebop.humany.net optimize.google.com tagmanager.google.com 1
default-src 'unsafe-inline' 'unsafe-eval' * 'self' data: blob: 1
default-src *.deutsche-wohnen.com 'self' *.taboola.com; object-src 'self'; frame-src *.deutsche-wohnen.com *.umantis.com *.youtube.com *.youtube-nocookie.com consentcdn.cookiebot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' stats.deutsche-wohnen.com www.google.com developers.google.com maps.google.com maps.googleapis.com consentcdn.cookiebot.com consent.cookiebot.com www.googletagmanager.com www.googleadservices.com *.taboola.com googleads.g.doubleclick.net; style-src 'self' data: 'unsafe-inline' fonts.googleapis.com; img-src *.deutsche-wohnen.com 'self' data: maps.gstatic.com maps.google.com maps.googleapis.com googleads.g.doubleclick.net www.google.com www.google.de www.googletagmanager.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com; manifest-src 'self' 1
style-src 'self' 'nonce-1175ddfa-05f7-496d-9e19-ae0c69ef1ea4' https://fonts.googleapis.com/icon https://fonts.googleapis.com/css; img-src 'self' https://discordapp.com https://cdn.discordapp.com https://cdn.discord.com https://discord.com https://www.google-analytics.com http://placehold.it/250x250 https://upload.wikimedia.org/wikipedia/commons/thumb/0/0c/Vector_Loading.svg/2000px-Vector_Loading.svg.png https://cdn.datatables.net/DataTables-1.10.18/images/ https://cdn.datatables.net/1.10.22/images/ https://donatebot.io/icon.png https://code.jquery.com/ui/1.12.1/themes/base/images/ data:; font-src https://fonts.gstatic.com; script-src https://donatebot.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js 'nonce-9751c512-e0cc-42ad-91f0-f5e06ea2c844' https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.6-rc.0/js/select2.min.js https://cdn.jsdelivr.net/npm/marked/marked.min.js https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js https://www.googletagmanager.com/gtag/js https://donatebot.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js https://www.google-analytics.com/analytics.js; connect-src 'self'; base-uri 'none'; form-action 'self' https://www.paypal.com/cgi-bin/webscr https://discordapp.com/ https://discord.com/; object-src 'none'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'  *.whocanfixmycar.com *.googletagmanager.com *.googletagservices.com *.google-analytics.com *.googleadservices.com *.google.com *.google.com.ua *.google.com.uk *.google.co.uk *.googlesyndication.com *.gstatic.com *.newrelic.com *.nr-data.net *.doubleclick.net *.twitter.com *.ads-twitter.com ads-twitter.com twitter.com  *.facebook.net *.hotjar.com *.zoho.eu *.zohostatic.eu *.zohocdn.com *.bing.com *.ubembed.com *.steelhousemedia.com *.cloudflare.com cloudflare.com *.cloudfront.net cloudfront.net *.pagesense.io *.olark.com; style-src 'self' 'unsafe-inline' *.zohostatic.eu *.zohocdn.com *.whocanfixmycar.com tagmanager.google.com fonts.googleapis.com https://optimize.google.com *.olark.com; img-src 'self' data: blob: *.whocanfixmycar.com *.whocanfixmycar.com *.hotjar.com *.bing.com *.ads-twitter.com http://t.co https://t.co *.nr-data.net *.googletagmanager.com *.google-analytics.com *.google.com *.google.com.ua *.google.com.uk *.google.co.uk *.gstatic.com *.doubleclick.net *.facebook.com *.cartocdn.com *.shell-livedocs.com https://cdn-eu.pagesense.io https://pagesense-collect.zoho.eu *.zohopublic.eu *.zohostatic.eu *.zohocdn.com *.whocanfixmycar.com https://cdn.wcfmc-sandbox.com https://optimize.google.com *.olark.com; connect-src 'self' https://*.doubleclick.net https://bat.bing.com www.google-analytics.com *.googlesyndication.com *.gstatic.com https://www.facebook.com *.whocanfixmycar.com wss://*.whocanfixmycar.com https://*.whocanfixmycar.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com *.zoho.eu ws://*.zohopublic.eu wss://*.zohopublic.eu *.zohopublic.eu https://vts.zohopublic.eu https://bam.nr-data.net https://static.ads-twitter.com https://shell-lmc-gb.phoenix.earlweb.net *.olark.com https://ws.whocanfixmycar.com https://api-core.whocanfixmycar.com https://www.whocanfixmycar.com; frame-src 'self' https://vars.hotjar.com *.facebook.com accounts.google.com https://optimize.google.com https://www.google.com/ *.googlesyndication.com *.doubleclick.net https://www.youtube.com https://cdn-eu.pagesense.io https://salesiq.zohopublic.eu https://vts.zohopublic.eu/ *.olark.com https://www.whocanfixmycar.com; child-src https://vars.hotjar.com; font-src 'self' data: http://static.hotjar.com https://static.hotjar.com *.zohostatic.eu *.zohocdn.com *.zohostatic.in https://fonts.gstatic.com; worker-src 'self' https://www.whocanfixmycar.com; report-uri https://api-core.whocanfixmycar.com/api/reports/csp-report-collector; prefetch-src https://tpc.googlesyndication.com; media-src *.olark.com; frame-ancestors 'self' 1
frame-ancestors 'self' https://buy.adesa.com https://ots.drivindealer.com https://*.iasmarketplace.com 1
default-src 'self' https:; img-src 'self' data: https://maps.googleapis.com https://maps.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.de https://ssl.hurra.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://ssl.hurra.com https://tagmanager.google.com 1
frame-ancestors 'self' *.seats3d.com *.evenue.net *.paciolan.com http://*.paciolan.com 192.168.0.228 cw2.production.ballenatech.com cw2; report-uri /csp/ 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://wb.messengerpeople.com https://static.criteo.net https://*.criteo.com https://tpc.googlesyndication.com https://*.zenaps.com https://*.hotjar.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://ampcid.google.gr https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.hotjar.com wss://*.hotjar.com https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://www.myprotein.gr https://m.myprotein.gr https://checkout.myprotein.gr https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.cn https://*.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://*.criteo.com https://static.criteo.net https://s.pinimg.com https://tpc.googlesyndication.com https://*.akamaihd.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.hotjar.com https://*.microsofttranslator.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://twitter.com https://*.baidu.com https://sc-static.net https://www.google.com https://*.google.co.uk https://google.co.uk https://static.ads-twitter.com https://analytics.twitter.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com piwik.itzbund.de; script-src 'self' 'unsafe-eval' *.googleapis.com piwik.itzbund.de;object-src 'self' multimedia.gsb.bund.de piwik.itzbund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com www.quirksmode.org *.googleapis.com piwik.itzbund.de; child-src *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.openstreetmap.org *.googleapis.com piwik.itzbund.de; font-src 'self' data: *.googleapis.com *.gstatic.com piwik.itzbund.de; frame-ancestors bvaweb-editor.preview.kkn.zd.intranet.bund.de piwik.itzbund.de bvaweb-zfa-editor.preview.kkn.zd.intranet.bund.de *.facebook.com 1
default-src 'self' data: https://www.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.google.com https://*.google.cz https://*.gstatic.com https://*.youtube.com https://*.googleadservices.com https://*.doubleclick.net https://connect.facebook.net https://*.facebook.com https://c.imedia.cz https://*.seznam.cz https://snap.licdn.com https://*.linkedin.com https://px.ads.linkedin.com https://*.pinterest.com https://cloud.typography.com 'unsafe-inline' 'unsafe-eval' 1
child-src 'self' blob:; connect-src * blob:; img-src 'self' 'unsafe-inline' data: *; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.jwpcdn.com; object-src 'self' *.googlesyndication.com; media-src 'self' blob: *; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'self' 'unsafe-inline' 'unsafe-eval' blob: *.2mdn.net static.ads-twitter.com *.adnxs.com *.adsafeprotected.com *.adsrvr.org *.amp.live *.ampproject.org app.link *.branch.io *.cloudfront.net *.combotag.com *.doubleclick.net *.doubleverify.com *.everesttech.net *.evidon.com *.extend.tv *.extremereach.io connect.facebook.net *.flashtalking.com adservice.google.com tagmanager.google.com *.google-analytics.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.iasds01.com *.imrworldwide.com *.innovid.com *.insightexpressai.com *.ipredictive.com *.jwplatform.com *.jwpcdn.com *.jwpsrv.com *.moatads.com *.outbrain.com cdn.polyfill.io *.scorecardresearch.com *.serving-sys.com *.spotxcdn.com *.spotxchange.com *.tremorhub.com analytics.twitter.com *.vindicosuite.com *.w55c.net *.yumenetworks.com; style-src 'self' 'unsafe-inline' blob: 'self' 'unsafe-inline' blob: fonts.googleapis.com *.gstatic.com tagmanager.google.com *.innovid.com; frame-src *.doubleverify.com *.dvtps.com *.facebook.com *.facebook.net *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.imrworldwide.com *.outbrain.com *.serving-sys.com *.fbsbx.com 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://static.criteo.net https://*.criteo.com https://wb.messengerpeople.com https://player.vimeo.com https://isitetv.com https://ln-rules.rewardstyle.com https://*.hotjar.com https://*.akamaihd.net https://*.attn.tv https://*.recaptcha.net https://*.translate.naver.net https://tr.snapchat.com https://www.shoplooks.com https://lantern.roeyecdn.com https://lantern.roeye.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://services.postcodeanywhere.co.uk https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.googleapis.com https://translate.yandex.net https://*.hotjar.com wss://*.hotjar.com https://*.trustpilot.com https://*.pinterest.com https://*.bing.com https://*.doubleclick.net https://connect.facebook.net https://*.baidu.com https://*.parcellab.com https://ampcid.google.com.tw; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://www.lookfantastic.com.tw https://m.lookfantastic.com.tw https://checkout.lookfantastic.com.tw https://connect.facebook.net https://www.glossybox.at https://www.glossybox.ch https://www.glossybox.co.uk https://www.glossybox.com https://www.glossybox.de https://www.glossybox.fi https://www.glossybox.fr https://www.glossybox.ie https://www.glossybox.no https://www.glossybox.se https://www.glossybox.dk https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://static.criteo.net https://*.criteo.com https://ln-rules.rewardstyle.com https://*.recaptcha.net https://*.microsofttranslator.com https://*.hotjar.com https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.attn.tv https://*.trustpilot.com https://*.translate.naver.net https://*.bing.com https://*.doubleclick.net https://*.google-analytics.com https://static.ads-twitter.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://*.shoplooks.com https://slooks.top https://slooks.me https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://www.shoplooks.com https://static.shoplooks.com https://cdn.parcellab.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
frame-ancestors 'self' *.dja.com; 1
worker-src 'self' blob: ; base-uri 'self' ; frame-ancestors 'self' local.nickel.eu https://app.dev.lfpe.fr https://app.staging.lfpe.fr https://app.alpha.nickel.eu https://app.nickel.eu ; frame-src 'self' 'unsafe-eval' *.facebook.com api.payzen.eu krypton.purebilling.io go.test.idnow.de optimize.google.com monisnap.connective.eu monisnap-accept.connective.eu locations-dev.monisnap.com locations-staging.monisnap.com locations.monisnap.com pad-staging.api-ot.com pad.api-ot.com sibautomation.com *.firebaseapp.com widget.trustpilot.com fr.trustpilot.com www.youtube.com ; default-src 'self' 'unsafe-inline' *.netlify.app *.netlify.com api.payzen.eu krypton.purebilling.io cdn.jsdelivr.net go.test.idnow.de static.zdassets.com ; connect-src 'self' * *.api-mnsnp.com *.netlify.com api.payzen.eu krypton.purebilling.io securetoken.googleapis.com www.googleapis.com ; object-src *.netlify.com ; img-src 'self' www.googletagmanager.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.fr *.monisnap.com *.netlify.com *.ytimg.com api.payzen.eu krypton.purebilling.io bat.bing.com cdnjs.cloudflare.com cx.atdmt.com data: s3-eu-west-1.amazonaws.com data: itunes.apple.com *.googleusercontent.com linkmaker.itunes.apple.com monisnap-dev.imgix.net monisnapcontent.kinsta.cloud play.google.com secure.gravatar.com www.gstatic.com fonts.gstatic.com gstatic.com ssl.gstatic.com staging-monisnapcontent.kinsta.cloud staging-monisnapcontent.temp927.kinsta.cloud *.kinsta.cloud v2assets.zopim.io ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.facebook.net *.google-analytics.com *.googleadservices.com *.netlify.app *.netlify.com *.smartlook.com *.ytimg.com apis.google.com api.payzen.eu krypton.purebilling.io bat.bing.com cdn.jsdelivr.net optimize.google.com sibautomation.com static.affilae.com static.asayer.io static.zdassets.com tagmanager.google.com widget.trustpilot.com www.google-analytics.com www.googletagmanager.com www.youtube.com cdn.smooch.io ; style-src 'self' 'unsafe-inline' *.netlify.com api.payzen.eu krypton.purebilling.io cdn.jsdelivr.net fonts.googleapis.com optimize.google.com tagmanager.google.com ; manifest-src 'self' *.netlify.com ; font-src 'self' fonts.gstatic.com fonts.googleapis.com ; report-uri https://89aa77af61c678f714da9b5536ac2124.report-uri.com/r/d/csp/enforce ; 1
frame-ancestors 'self' brita360.fairflexx.de http://93.90.201.51:8090 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com *.ytimg.com *.youtube.com *.vimeo.com ; object-src 'self' 1
base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' tag.demandbase.com *.lpsnmedia.net www.googletagmanager.com *.liveperson.net www.google.com www.gstatic.com content.knowledgevision.com view.knowledgevision.com cdn.curator.io d31y97ze264gaa.cloudfront.net px.ads.linkedin.com st1.dialogtech.com www.linkedin.com www.google-analytics.com munchkin.marketo.net www.googletagmanager.com snap.licdn.com assets.adobedtm.com www.web-01-gbl.com maps.googleapis.com app-sj11.marketo.com cdnjs.cloudflare.com static.addtoany.com www.rumiview.com code.visitor-track.com sync.multiview.com hgs.lightinfosys.com *.kickfire.com *.pardot.com info.teamhgs.com go.pardot.com lpcdn.lpsnmedia.net assets.adobedtm.com ddg8iwqmw63mo.cloudfront.net 1
default-src: https: 'unsafe-inline'; frame-ancestors 'self' *.facebook.com 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://www.googleapis.com https://www.google-analytics.com/ https://code.highcharts.com/highcharts.js  *.wlresources.com xlovecam.com *.xlovecam.com acwm.biz *.acwm.biz xlovecash.com *.xlovecash.com traffic.acwebconnecting.com; connect-src 'self'  *.wlresources.com xlovecam.com *.xlovecam.com acwm.biz *.acwm.biz xlovecash.com *.xlovecash.com traffic.acwebconnecting.com; report-uri /err0r/js?ts=1609222630; frame-ancestors 'self' 1
default-src 'self' 'unsafe-inline' wss://*.linkhub.co.kr https://*.linkhub.co.kr https://stats.g.doubleclick.net https://www.google-analytics.com https://d17ecin4ilxxme.cloudfront.net https://127.0.0.1:17107;frame-ancestors 'none'; 1
frame-ancestors 'self' *.tombolaarcade.co.uk; 1
default-src 'self'; connect-src 'self' res.cloudinary.com/vtechnologies/ https://www.google-analytics.com/ https://www.google.com/m8/feeds/ *.cardinalcommerce.com *.amazonaws.com *.braintree-api.com *.braintreegateway.com *.paypal.com; font-src 'self' fonts.gstatic.com; style-src 'self' 'unsafe-inline' *.braintreegateway.com cdn.jsdelivr.net/emojione/ fonts.googleapis.com; script-src 'self' 'unsafe-inline' www.google.com www.gstatic.com www.googletagmanager.com code.jquery.com songbird.cardinalcommerce.com cdn.jsdelivr.net/npm/ www.paypalobjects.com www.paypal.com connect.facebook.net *.braintreegateway.com apis.google.com maps.googleapis.com www.google-analytics.com *.cloudflare.com *.cloudinary.com stackpath.bootstrapcdn.com; img-src 'self' data: blob: www.google-analytics.com www.googletagmanager.com *.cloudflare.com cdn.jsdelivr.net/emojione/ maps.gstatic.com res.cloudinary.com/vtechnologies/ xoyondo.com *.paypal.com; frame-src 'self'  *.braintreegateway.com *.cloudinary.com *.paypal.com staticxx.facebook.com *.cardinalcommerce.com https://accounts.google.com/ *.google.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: cdn.jsdelivr.net maps.googleapis.com www.googletagmanager.com www.google-analytics.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: fonts.googleapis.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: maps.googleapis.com maps.gstatic.com csi.googleapis.com csi.gstatic.com khms0.googleapis.com khms1.googleapis.com www.google-analytics.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: youtube.com www.youtube.com data: e.infogram.com www.e.infogram.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: themes.googleusercontent.com fonts.gstatic.com; report-uri /report-csp-violation 1
script-src 'self' https://www.annieskitclubs.com 'unsafe-inline' 'unsafe-eval' *.bbb.org use.typekit.net https://tagmanager.google.com/ www.googletagmanager.com www.google-analytics.com/ www.google.com/recaptcha/api.js www.gstatic.com/ www.shopperapproved.com/ direct.shopperapproved.com/ connect.facebook.net/ *.brightcove.net/ *.brightcove.com/ vjs.zencdn.net/vttjs/ blob: *.fomo.com www.googleadservices.com/ googleads.g.doubleclick.net/ ajax.googleapis.com/ajax/libs/webfont/ cdnjs.cloudflare.com/ajax/libs/mobile-detect/ *.opmnstr.com/ *.securedvisit.com www.googleadservices.com/pagead/conversion.js s.pinimg.com/ tags.wdsvc.net match.adsrvr.org bat.bing.com/bat.js a.omappapi.com synch.wdsvc.net www.dwin1.com;style-src 'self' https://www.annieskitclubs.com 'unsafe-inline' *.bbb.org use.typekit.net fonts.googleapis.com https://www.googletagmanager.com/ direct.shopperapproved.com/;img-src 'self' https://www.annieskitclubs.com 'unsafe-inline' about: *.bbb.org p.typekit.net https://www.google-analytics.com/ googletagmanager.com https://stats.g.doubleclick.net https://www.google.com data: https://secure.gravatar.com www.shopperapproved.com https://www.facebook.com *.brightcove.net/ *.brightcove.com/ *.boltdns.net/ blob: https://process.filestackapi.com *.securedvisit.com *.opmnstr.com/ a.omappapi.com ct.pinterest.com shareasale.com bat.bing.com 1
default-src 'self' *.jquery.com *.soundcloud.com player.vimeo.com *.google-analytics.com *.doubleclick.net *.googleapis.com *.gstatic.com; frame-ancestors 'self' *.vhb.com; script-src 'self' www.google-analytics.com ajax.googleapis.com cdnjs.cloudflare.com *.googletagmanager.com dl.episerver.net *.vo.msecnd.net dc.services.visualstudio.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' *.doubleclick.net dc.services.visualstudio.com www.google-analytics.com; img-src  * data: blob: 'self' www.google-analytics.com; style-src 'self' 'unsafe-inline' www.google-analytics.com ajax.googleapis.com cdnjs.cloudflare.com *.soundcloud.com *.googletagmanager.com dl.episerver.net *.googleapis.com;base-uri 'self'; form-action 'self'; 1
default-src 'self' 'unsafe-inline' *.mcam.com *.symalit.com *.youtube-nocookie.com *.google-analytics.com *.gstatic.com *.facebook.com *.livechatinc.com *.hotjar.com king.cdncontentdelivery.com hashtag.cdncontentdelivery.com stats.g.doubleclick.net press.cdncontentdelivery.com; style-src 'self' 'unsafe-inline' *.mcam.com *.symalit.com *.twitter.com *.twimg.com *.googleapis.com; script-src 'self' *.mcam.com *.symalit.com *.googletagmanager.com *.google-analytics.com *.livechatinc.com *.licdn.com *.ads-twitter.com *.twitter.com *.facebook.net *.twimg.com *.googleapis.com *.hotjar.com pipardot.com *.googleadservices.com  *.snoobi.eu googleads.g.doubleclick.net *.google.com 'unsafe-eval' 'unsafe-inline'; img-src 'self' data: *.mcam.com *.symalit.com *.google-analytics.com *.googletagmanager.com *.linkedin.com t.co *.facebook.com *.livechatinc.com *.twimg.com *.twitter.com *.gstatic.com *.googleapis.com *.google.com *.google.de; frame-src 'self' *.mcam.com *.symalit.com *.matweb.com *.bcvp0rtal.com *.youtube-nocookie.com *.youtube.com *.livechatinc.com *.twitter.com *.qplastv.com *.hotjar.com rfq.digital-quote.com; 1
default-src 'self'; script-src 'self' assets.juicer.io ajax.googleapis.com connect.facebook.net platform.twitter.com 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com www.google.com www.gstatic.com https://chat.consumercare.net https://h6.consumercare.net https://js-agent.newrelic.com https://bam.nr-data.net *.juicer.io woobox.com *.formstack.com assets.pinterest.com app.icontact.com *.googleapis.com; object-src 'self'; style-src 'self' maxcdn.bootstrapcdn.com fonts.googleapis.com assets.juicer.io 'unsafe-inline' *.formstack.com app.icontact.com; img-src 'self' *.cdninstagram.com *.xx.fbcdn.net *.facebook.com *.twitter.com *.google-analytics.com *.ytimg.com *.xx.fbcdn.net data: *.googleapis.com *.g.doubleclick.net *.googletagmanager.com *.juicer.io *.google.com *.imgur.com *.icontact.com *.formstack.com *.gstatic.com; frame-src 'self' * *.entenmanns.com rsmstanley.formstack.com; font-src 'self' maxcdn.bootstrapcdn.com fonts.googleapis.com assets.juicer.io fonts.gstatic.com woobox.com *.juicer.io  *.formstack.com app.icontact.com data:; connect-src 'self' www.juicer.io https://www.google-analytics.com https://stats.g.doubleclick.net *.facebook.com; report-uri /admin/config/system/seckit/csp-report, default-src 'self' 'self' data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *; img-src 'self' blob: data: * 1
default-src 'self' data: 'inline-script' 'unsafe-inline' 'unsafe-eval' /static http://data.планетажелезяка.рф http://data.xn--80aaaawdltkvth1aig1f.xn--p1ai http://data.* http://yandex.st http://*.yandex.ru https://*.yandex.ru http://yastatic.net http://*.maps.yandex.net http://*.mail.ru http://*.list.ru http://*.rambler.ru http://www.google-analytics.com http://www.skypeassets.com http://79.135.240.42:8008 https://www.youtube.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.gstatic.com https://snap.licdn.com https://px.ads.linkedin.com https://*.twitter.com https://chat.puzzel.com https://code.jquery.com https://www.google.com http://www.google-analytics.com https://www.googletagmanager.com https://s7.addthis.com http://s7.addthis.com http://m.addthis.com http://v1.addthis.com http://m.addthisedge.com http://v1.addthisedge.com https://www.google.com https://connect.facebook.net https://static.ads-twitter.com; style-src 'self' 'unsafe-inline' https://*.gstatic.com https://chat.puzzel.com https://code.jquery.com https://*.googleapis.com https://www.google.com; frame-src 'self' https://www.youtube.com http://s7.addthis.com http://player.vimeo.com https://player.vimeo.com https://www.facebook.com; font-src 'self' https://chat.puzzel.com https://fonts.gstatic.com; img-src 'self' data: https://www.linkedin.com https://snap.licdn.com https://px.ads.linkedin.com https://www.google.com http://www.google-analytics.com https://stats.g.doubleclick.net https://secure.adnxs.com http://www.addthis.com https://connect.facebook.net https://t.co https://*.facebook.com; connect-src 'self' https://chat.puzzel.com http://v1.addthis.com https://*.addthis.com https://www.google-analytics.com; media-src 'self' https://chat.puzzel.com; 1
frame-ancestors 'self' *.cms.foreninglet.dk 1
default-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.youtube.com s.ytimg.com www.googletagmanager.com www.google-analytics.com maps.googleapis.com ajax.aspnetcdn.com ng-multikanal-admin-cdn.azureedge.net *.reachmee.com kiwi-norge.mynewsdesk.com execution-ci360.kiwi.no *.ci360.sas.com; connect-src 'self' *.ngdata.no *.cloudinary.com *.screen9.com ngdapidev.azure-api.net ng-azure-rest-api-preprod.azurewebsites.net ng-azure-rest-api-prod.azurewebsites.net www.google-analytics.com execution-ci360.kiwi.no *.ci360.sas.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com ng-multikanal-admin-cdn.azureedge.net; img-src 'self' data: res.cloudinary.com maps.gstatic.com maps.googleapis.com www.google-analytics.com *.screen9.com delivery-ci360.kiwi.no *.reachmee.com s.ytimg.com content-ci360.kiwi.no; font-src 'self' data: fonts.gstatic.com ng-multikanal-admin-cdn.azureedge.net; media-src 'self' blob: *.screen9.com; worker-src 'self' blob:; frame-ancestors 'self' *.ci360.sas.com; frame-src 'self' *.screen9.com kiwi-norge.mynewsdesk.com *.reachmee.com www.youtube.com *.ci360.sas.com; 1
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob: 1
script-src 'self' 'nonce-5ed586a3-3bf7-42ef-bce6-14e8b47e97ce' 'strict-dynamic' 'unsafe-eval' ; object-src none; 1
default-src 'self' *.youtube-nocookie.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.tascam.eu *.google-analytics.com *.googletagmanager.com *.pardot.com; img-src data: blob: 'self' *.tascam.eu *.google-analytics.com; style-src 'self' 'unsafe-inline'; media-src 'self' *.youtube-nocookie.com; object-src 'self' *.youtube-nocookie.com *.ytimg.com; frame-src 'self' *.youtube-nocookie.com *.ytimg.com *.soundcloud.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://weirder.earth; img-src 'self' https: data: blob: https://weirder.earth; style-src 'self' 'unsafe-inline' https://weirder.earth; media-src 'self' https: data: https://weirder.earth; frame-src 'self' https:; manifest-src 'self' https://weirder.earth; connect-src 'self' data: blob: https://weirder.earth https://s3.amazonaws.com wss://weirder.earth; script-src 'self' https://weirder.earth; worker-src 'self' blob: https://weirder.earth 1
frame-ancestors https://*.edp.com https://*.edpdistribuicao.pt https://*.edp.pt; report-uri /report-csp-violation 1
script-src 'self'  'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com/ https://policy.privacyandcookies.eu/ https://players.brightcove.net https: blob:;    object-src 'none'; base-uri 'none'; frame-src 'self' https://www.youtube-nocookie.com https://player.quadia.net https://players.brightcove.net; frame-ancestors 'self';   img-src 'self' https://www.msd-animal-health.com https://secure.gravatar.com https://www.google-analytics.com/ https://*.brightcove.com https://policy.privacyandcookies.eu data: ;  media-src 'self' blob:;  style-src  'self' 'unsafe-inline';   upgrade-insecure-requests;  default-src https: data: 'self' ;  trusted-types default; 1
default-src 'self'; script-src 'self' 'unsafe-inline' www.google-analytics.com www.google.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com www.googletagmanager.com; frame-src 'self' www.google.com www.youtube.com; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: chart.googleapis.com stats.g.doubleclick.net www.google-analytics.com; font-src 'self' fonts.gstatic.com; connect-src 'self' stats.g.doubleclick.net www.google-analytics.com; report-uri https://d11632dd6707a646bb7b6aefa28dc1c9.report-uri.com/r/d/csp/reportOnly; 1
report-uri https://www.karawangkab.go.id; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://anticapitalist.party; img-src 'self' https: data: blob: https://anticapitalist.party; style-src 'self' https://anticapitalist.party 'nonce-cYmCRrcWDPJIKb5qHOJzZQ=='; media-src 'self' https: data: https://anticapitalist.party; frame-src 'self' https:; manifest-src 'self' https://anticapitalist.party; connect-src 'self' data: blob: https://anticapitalist.party https://cdn.masto.host wss://anticapitalist.party; script-src 'self' https://anticapitalist.party; child-src 'self' blob: https://anticapitalist.party; worker-src 'self' blob: https://anticapitalist.party 1
true; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' ajax.googleapis.com www.google-analytics.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' www.google-analytics.com; font-src 'self' fonts.gstatic.com 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://*.criteo.com https://static.criteo.net https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.popinabox.co.uk https://m.popinabox.co.uk https://checkout.popinabox.co.uk https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://*.criteo.com https://static.criteo.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://*.google-analytics.com https://sc-static.net https://*.google.co.uk https://google.co.uk; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
default-src blob: http: https: ws: wss: data: 'unsafe-inline' 'unsafe-eval'; worker-src blob: 1
default-src 'unsafe-inline' 'self'; img-src 'self' data:;  1
default-src 'self' fonts.googleapis.com cloud.typography.com www.imjp.co.jp fonts.googleapis.com cloud.typography.com; font-src fonts.gstatic.com data: ; style-src 'self' 'unsafe-inline' ton.twimg.com www.imjp.co.jp cloud.typography.com fonts.googleapis.com platform.twitter.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' mboxedge30.tt.omtrdc.net assets.adobedtm.com imjcorporationpartnersandbox.sc.omtrdc.net www.facebook.com stats.g.doubleclick.net dpm.demdex.net mboxedge22.tt.omtrdc.net imjcorporationpartne.tt.omtrdc.net; frame-src go.pardot.com web.facebook.com www.google.com twitter.com syndication.twitter.com cdn.krxd.net cf.im-apps.net www.facebook.com www.tiktok.com platform.twitter.com www.instagram.com bid.g.doubleclick.net imjcorporationpartnersandbox.demdex.net www.youtube.com staticxx.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com imj.sitesearch.jp analytics.twitter.com assets.adobedtm.com b.st-hatena.com b92.yahoo.co.jp beacon.krxd.net cdn.krxd.net cdn.ravenjs.com cdn.syndication.twimg.com cf.im-apps.net connect.facebook.net consumer.krxd.net dmp.im-apps.net fonts.googleapis.com go.pardot.com googleads.g.doubleclick.net img.ak.impact-ad.jp in.treasuredata.com maps.googleapis.com maps.gstatic.co mboxedge22.tt.omtrdc.net penta.a.one.impact-ad.jp pi.pardot.com platform.twitter.com s0.ipstatp.com s16.tiktokcdn.com static.ads-twitter.com static.doubleclick.net static.xx.fbcdn.net sync.im-apps.net tags.tiqcdn.com ton.twimg.com www.google.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.instagram.com www.tiktok.com www.youtube.com; img-src 'self' ton.twimg.com connect.facebook.net backyard.imjp.co.jp www.imjp.co.jp go.imjp.co.jp storage.pardot.com imjcorporationpartnersandbox.sc.omtrdc.net aw.dw.impact-ad.jp jslog.krxd.net beacon.krxd.net syndication.twitter.com abs.twimg.com platform.twitter.com pbs.twimg.com t.co www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com www.google.com www.google.co.jp data: ; 1
frame-ancestors 'self' https://avo.africa https://pwa-stage.wakago.net localhost:3000 http://ami.responsivedesign.is 1
default-src https: http: data: 'unsafe-inline' 'unsafe-eval' 1
default-src 'self';                                     connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com;                                     font-src https://fonts.gstatic.com data:;                                     img-src 'self' data: https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com;                                     media-src 'self';                                     script-src 'self' 'unsafe-inline' https://cdn.polyfill.io https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com;                                     style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com 1
default-src 'none'; connect-src 'self' an.yandex.ru strm.yandex.ru mc.yandex.ru yandex.st yastatic.net matchid.adfox.yandex.ru adfox.yandex.ru ads.adfox.ru ads6.adfox.ru jstracer.yandex.ru yastat.net yandex.ru; frame-src awaps.yandex.net yandexadexchange.net *.yandexadexchange.net yastatic.net *.yandex.ru banners.adfox.ru yastat.net blob: mc.yandex.ru youtube.com www.youtube.com; img-src 'self' www.honcode.ch counter.yadro.ru data: *.yandex.net an.yandex.ru verify.yandex.ru *.verify.yandex.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net mc.yandex.ru; media-src *.yandex.net strm.yandex.ru *.strm.yandex.ru yandex.ru yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' an.yandex.ru yandex.st yastatic.net mc.yandex.ru banners.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net yandex.ru; style-src 'self' 'unsafe-inline' 'unsafe-eval' yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net; font-src 'self' data: an.yandex.ru yastatic.net yastat.net; child-src blob: https://mc.yandex.ru; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.climatemaster.com https://cdnjs.cloudflare.com https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://locate.climatecontrolgroup.com https://maps.googleapis.com https://tagmanager.google.com/debug https://cdn.cookielaw.org/consent/cb623e34-e98d-4a52-b40b-5b2c398967c3.js https://tagmanager.google.com/debug/debuguiApp-bundle.js https://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js https://climatemaster.dealerlocate.com/WebResource.axd?d=Lk-1EukhIbkjOLVu5C6nCvCYYNOfIkxKi_51Cs-hiVm80JUEkVXedQZyomXEF5Myoc94Uh85cL3PbQllbkcgfxIoA0HCkowoUYc4yogVceo1&t=636354763360000000 https://climatemaster.dealerlocate.com/ScriptResource.axd?d=M99OnTomxPGNmLcjdjubpmA2iE4Y_z53yLsgDChy-NzcIauIilTuKIMn8S2jRfY4u88j85stQkz1ZprtHHeB_3E_Ud0r80WtLi2CIeFxZSw7mw9Usem5eRAZbwciX0JaCdYgcCxJ_6Gj_JUtbwEFjuVqiUOVCl3t403mDTkBhrw1&t=7484f5de https://climatemaster.dealerlocate.com/ScriptResource.axd?d=EO6wTwNLD-0PV_ZZUiYrOr4bIb4uEoE7TvLvkXxr3bjP_lVn5xOd94n2uy256xyW8CXhEc9lDVtru0grKq6-U1Yy_IbI066keP4ncw2X43rDt3rAEs4fEq6FjDee3a3aIlkDV9lFgRm4gp2g69Cazl6uvs2NNUlZ4T6rwrFdIJg1&t=3d6efc1f https://geolocation.onetrust.com/cookieconsentpub/v1/geo/countries/EU?callback=jQuery1112014472791234862803_1587696934377&_=1587696934378 https://climatemaster.dealerlocate.com/LitRequest_Geo4ALL.aspx https://climatemaster.dealerlocate.com/dealerlocate.aspx? https://koi-3qnnovztdo.marketingautomation.services https://tag.perfectaudience.com https://pixel-geo.prfct.co 1
default-src https: http: data: blob: 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://*.hotjar.com:*  https://*.hotjar.io wss://*.hotjar.com https://*.facebook.com https://*.fontawesome.com https://d3ry7pw8yqu11w.cloudfront.net https://www.googletagmanager.com https://tagmanager.google.com https://*.gstatic.com https://fonts.googleapis.com http://tagmanager.google.com https://www.google-analytics.com; object-src 'none'; 1
default-src https: wss: 'unsafe-eval' 'unsafe-inline'; img-src https: data:; object-src 'none' 1
frame-ancestors 'self' www.pro-agent.com www.google.com; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://s.ytimg.com https://www.gstatic.com https://conv.indeed.com https://script.hotjar.com https://static.hotjar.com http://static.hotjar.com https://botsrv.com https://static.quriobot.com https://static.botsrv.com;style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://static.botsrv.com;img-src 'self' data: https://img.youtube.com https://lh3.googleusercontent.com https://www.google.com https://www.google.nl https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://media.quriobot.com https://script.hotjar.com http://script.hotjar.com https://static.botsrv.com;media-src 'self' https://player.vimeo.com https://vod-progressive.akamaized.net;frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://botsrv.com https://quriobot.com https://vars.hotjar.com;font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com;connect-src 'self' https://botsrv.com https://quriobot.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com;frame-ancestors 'self' https://cms-deltion.kentico.local https://kentico-deltion-cms-test.azurewebsites.net https://kentico-deltion-cms-acc.azurewebsites.net https://kentico-deltion-cms-prod.azurewebsites.net 1
script-src 'unsafe-inline' 'unsafe-eval' 'self'               *.generalmobile.com *.jquery.com www.googletagmanager.com *.facebook.net mc.yandex.ru               www.google-analytics.com *.google.com *.googleapis.com *.useinsider.com *.gstatic.com stpmgo.com intelligenceretarget.com;      style-src 'unsafe-inline' 'self'      *.jquery.com *.googleapis.com *.useinsider.com; 1
frame-ancestors 'self' https://www.matrimonios.cl https://comunidad.matrimonios.cl 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline' www.googletagmanager.com cdn-images.mailchimp.com; style-src 'self' https: 'unsafe-inline' cdn-images.mailchimp.com 1
default-src 'self' *.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' z.moatads.com script.crazyegg.com *.zdassets.com *.jsdelivr.net *.rackcdn.com *.twimg.com *.addthis.com *.twitter.com *.tm00.com *.authorize.net *.thawte.com *.postescanada-canadapost.ca *.bambora.com *.zopim.com *.yotpo.com *.googleadservices.com *.litix.io *.wistia.net *.wistia.com *.adroll.com *.bing.com *.hotjar.com *.amazonaws.com *.klaviyo.com *.netdna-ssl.com *.filepicker.io *.getcandid.com *.doubleclick.net *.optimizely.com *.micpn.com *.boombox.com *.justuno.com *.commercecm.com *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.facebook.net *.addthis.com *.facebook.com *.youtube.com *.telerikstatic.com *.aspnetcdn.com *.cloudfront.net *.vimeo.com *.qzzr.com *.paypal.com; media-src 'self' *.zdassets.com *.zopim.com *.cloudfront.net; img-src 'self' data: https://www.fitnesstown.ca *.facebook.net *.atdmt.com *.googletagmanager.com *.googleapis.com *.amazonaws.com *.gstatic.com *.zopim.io *.zopim.com *.twimg.com *.addthis.com *.thawte.com *.cdninstagram.com *.fbcdn.net *.twitter.com *.postescanada-canadapost.ca *.google.ca *.facebook.com *.google.com *.doubleclick.net *.micpn.com *.cloudfront.net *.bambora.com *.google-analytics.com *.paypal.com; style-src 'self' 'unsafe-inline' *.twimg.com *.telerikstatic.com *.twitter.com fast.fonts.net *.postescanada-canadapost.ca *.cloudfront.net *.googleapis.com tagmanager.google.com; font-src 'self' data: cdn.joinhoney.com *.telerikstatic.com *.zopim.com *.cloudfront.net *.gstatic.com; child-src 'self' *.moneris.com *.list-manage.com *.youtube.com *.twitter.com *.google.com *.hotjar.com *.tm00.com *.vimeo.com *.doubleclick.net *.facebook.com *.filepicker.io *.boombox.com *.qzzr.com *.bambora.com *.commercecm.com *.paypal.com *.addthis.com *.googletagmanager.com; form-action 'self' * *.twitter.com *.list-manage.com *.facebook.com *.beanstream.com *.commercecm.com *.paypal.com; frame-ancestors 'self' http://ami.responsivedesign.is *.commercecm.com *.paypal.com; connect-src 'self' fitnesstownsupport.zendesk.com *.zdassets.com *.doubleclick.net *.google-analytics.com *.postescanada-canadapost.ca *.twitter.com wss://*.zopim.com *.facebook.com vimeo.com *.hotjar.com *.authorize.net *.justuno.com *.addthis.com; object-src 'self'; report-uri /sitecm3/csp.aspx; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://*.criteo.com https://static.criteo.net https://ln-rules.rewardstyle.com https://*.hotjar.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.sciencebehindecommerce.com https://*.hotjar.com wss://*.hotjar.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com https://ct.pinterest.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://checkout.myvitamins.com https://m.myvitamins.com https://www.myvitamins.com https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.cn https://*.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://*.criteo.com https://static.criteo.net https://ssl.trustpilot.com https://ln-rules.rewardstyle.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.hotjar.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://*.google-analytics.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://s.pinimg.com; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
frame-src 'self' https://www.youtube.com http://contre-le-diabete.rouge-le-fil.com/ https://formationdiabete.federationdesdiabetiques.org/ http://www.contrelediabete.fr/ https://don.federationdesdiabetiques.org/ https://www.dailymotion.com/ https://player.vimeo.com/ https://www.google.com/ 1
frame-ancestors 'self' https://www.securitylife.com 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.powr.io/ https://stp-track.inside-graph.com https://js-agent.newrelic.com https://s.go-mpulse.net https://cdns.brsrvr.com https://bam.nr-data.net https://stp2-tracker.inside-graph.com https://stp2-cdn.inside-graph.com https://widgets.turnto.com https://reseller.spexaccess.net https://tst.kaptcha.com https://content.etilize.com https://html5.dcatalog.com https://publications.eway.ca https://selectors.cnetcontentsolutions.com https://bam.nr-data.net https://cc.cnetcontent.com; connect-src 'self' https: wss://stp-live.inside-graph.com wss://stp2-live.inside-graph.com; img-src 'self' https://static.eway.ca https://stg-static.eway.ca https://www.staplesbusinessadvantage.ca https://staples.122.2o7.net https://p.brsrvr.com https://stp2-cdn.inside-graph.com https://esbisbt.staples.com https://content.etilize.com; style-src 'self' 'unsafe-inline' https://stp-live.inside-graph.com https://stp2-cdn.inside-graph.com https://widgets.turnto.com https://content.etilize.com https://selectors.cnetcontentsolutions.com https://cc.cnetcontent.com; font-src 'self' 'unsafe-inline' data:; 1
default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; img-src 'self' https://*.tcplusondemand.com https://*.namelytcp.com https://*.viventiumtcp.com http://maps.google.com maps.google.com data: 'self' maps.google.com maps.gstatic.com *.googleapis.com *.ggpht 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.addtoany.com https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com https://ssl.google-analytics.com https://www.youtube.com https://www.youtube-nocookie.com https://s.ytimg.com https://w.soundcloud.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.vimeo.com https://vimeo.com/api/oembed.json https://ajax.cloudflare.com https://player.vimeo.com https://static.oktopost.com/oktrk.js https://okt.to https://crmemails.ogilvy.com https://secure.link5view.com https://tag.demandbase.com; style-src 'self' 'unsafe-inline' https://static.addtoany.com https://tagmanager.google.com https://fonts.googleapis.com; img-src 'self' data: https://static.addtoany.com https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://okt.to https://stats.g.doubleclick.net https://www.google.com https://www.google.co.in https://secure.link5view.com https://crmemails.ogilvy.com https://match.prod.bidr.io https://segments.company-target.com; frame-src 'self' https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://w.soundcloud.com https://static.addtoany.com; frame-ancestors 'self'; font-src 'self' https://fonts.gstatic.com https://tagmanager.google.com data:; connect-src 'self' https://www.google-analytics.com https://bam.nr-data.net https://api.company-target.com https://stats.g.doubleclick.net; report-uri /uk/report-csp-violation 1
base-uri https://optimize.google.com https://www.fleetsmith.com; block-all-mixed-content; child-src 'none'; connect-src 'self' https://api.segment.io https://c.6sc.co https://cdn.segment.com https://track.segment.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com; form-action 'self' https://webto.salesforce.com/servlet/servlet.WebToLead; frame-ancestors 'none'; frame-src 'self' https://js.driftt.com https://optimize.google.com https://www.google.com/recaptcha/; img-src 'self' data: https://*.ads.linkedin.com https://*.g.doubleclick.net https://b.6sc.co https://optimize.google.com https://p.adsymptotic.com https://secure.adnxs.com https://static.fleetsmith.com/ https://t.co https://www.facebook.com https://www.google.com https://www.googleadservices.com https://www.linkedin.com; manifest-src 'self'; media-src https://static.fleetsmith.com; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.ads.linkedin.com https://ajax.cloudflare.com https://analytics.twitter.com https://api.segment.io https://api.usemessages.com https://bat.bing.com https://cdn.segment.com https://connect.facebook.net https://ct.capterra.com https://googleads.g.doubleclick.net/ https://j.6sc.co https://js.driftt.com https://optimize.google.com https://s3.amazonaws.com https://secure.adnxs.com https://sjs.bizographics.com https://snap.licdn.com https://static.ads-twitter.com https://tagmanager.google.com https://track.segment.com https://tracking.g2crowd.com https://www.bizographics.com https://www.google.com/recaptcha/ https://www.googleadservices.com https://www.googletagmanager.com/ https://www.gstatic.com/recaptcha/ https://www.linkedin.com/px/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://optimize.google.com; upgrade-insecure-requests; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://anarchism.space; img-src 'self' https: data: blob: https://anarchism.space; style-src 'self' https://anarchism.space 'nonce-j4l+SexKcfUwAEixPnwmew=='; media-src 'self' https: data: https://anarchism.space; frame-src 'self' https:; manifest-src 'self' https://anarchism.space; connect-src 'self' data: blob: https://anarchism.space https://anarchism.space wss://anarchism.space; script-src 'self' https://anarchism.space; child-src 'self' blob: https://anarchism.space; worker-src 'self' blob: https://anarchism.space 1
default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline' 1
report-uri https://www.yelp.com/csp_block?id=99c9d6565671cea4&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609210249; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
default-src 'self'; script-src 'self' https://*.google-analytics.com https://arkivverket.atlassian.net https://www.google.com https://www.gstatic.com; img-src 'self' data: https://*.google-analytics.com https://stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://*.digitalarkivet.no https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net; frame-ancestors 'self' https://*.digitalarkivet.no 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://freeradical.zone; img-src 'self' https: data: blob: https://freeradical.zone; style-src 'self' https://freeradical.zone 'nonce-pvaEnGbq37pzWlS3S08jwA=='; media-src 'self' https: data: https://freeradical.zone; frame-src 'self' https:; manifest-src 'self' https://freeradical.zone; connect-src 'self' data: blob: https://freeradical.zone https://s3-us-west-2.amazonaws.com wss://freeradical.zone; script-src 'self' https://freeradical.zone; child-src 'self' blob: https://freeradical.zone; worker-src 'self' blob: https://freeradical.zone 1
default-src 'none'; object-src 'self'; media-src blob: https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.podcast.co https://*.pod.co https://*.radio.co https://*.lpsnmedia.net https://*.google.ch https://*.ads-twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://*.hirslanden.ch https://*.infocentric.ch https://*.wistia.com https://*.medicosearch.ch https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com; font-src 'self' data: https://cdn.podigee.com https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.google.ch https://*.ads-twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://*.amazonaws.com https://*.medicosearch.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.podigee.com https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.typeform.com https://play.pod.co https://cdnjs.cloudflare.com https://siteimproveanalytics.com https://*.lpsnmedia.net https://*.licdn.com https://sc-static.net https://*.liveperson.net https://*.google.ch https://*.ads-twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.linkedin.com https://*.instagram.com https://*.mediclinic.com https://*.elfsight.com https://uberall.com https://static-prod.uberall.com https://api.instacloud.io https://mediclinic.mediaplatform.com https://api.doctena.ch https://*.createsend.com https://cdn.dotcy.com.cy https://script.crazyegg.com https://testmcmebot.azurewebsites.net https://*.medicosearch.ch https://*.infocentric.ch https://www.puls-berufe.ch https://*.gstatic.com https://*.google.com https://*.sprechzimmer.ch https://*.wistia.com https://fast.wistia.net https://src.litix.io https://s.ytimg.com https://www.youtube.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://connect.facebook.net https://*.twitter.com https://cdn.syndication.twimg.com https://csi.gstatic.com https://*.podcast.co https://*.pod.co https://*.radio.co https://code.jquery.com https://soundcloud.com/; connect-src 'self' https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://stats.g.doubleclick.net https://*.blueglass.io https://*.mediclinic.co.za https://*.podcast.co https://*.pod.co https://*.radio.co https://*.googleadservices.com https://*.elfsight.com https://uberall.com https://blog.hirslanden.ch https://er24.info https://*.typeform.com https://*.wistia.com https://*.litix.io https://www.facebook.com/ https://*.crazyegg.com https://*.akamaihd.net https://www.google-analytics.com https://s7.addthis.com https://m.addthis.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com; img-src * 'self' data:; style-src 'self' 'unsafe-inline' https://cdn.podigee.com https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.google.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://*.ads-twitter.com https://*.google.ch https://mediclinic.mediaplatform.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://cdn.dotcy.com.cy https://*.medicosearch.ch https://cloud.typography.com https://*.sprechzimmer.ch https://*.twitter.com https://www-prod.hirslanden.ch https://*.tagboard.com https://tagboard.com https://ton.twimg.com; frame-src 'self' https://*.tourmkr.com/ https://tourmkr.com/ https://*.tourextender.ch/ https://tourextender.ch/ https://cdn.podigee.com https://*.infomaniak.com https://*.business360.ch https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.typeform.com https://*.doubleclick.ne https://*.pinimg.com https://*.doubleclick.net https://*.yandex.ru https://play.pod.co https://*.onedoc.ch https://onedoc.ch https://vimeo.com/ https://*.vimeo.com/ https://*.brightcove.net/ https://mixlr.com/ https://*.mixlr.com/ https://*.liveperson.net https://*.lpsnmedia.net https://*.snapchat.com https://*.ads-twitter.com https://*.linkedin.com https://*.instagram.com https://*.mediclinic.com https://*.mediclinic.co.za https://mediclinic.mediaplatform.com http://mcairportrdauh.royalwebhosting.net https://*.google.ch https://*.twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://*.doctena.com https://*.createsend.com https://*.google.com https://*.googletagmanager.com https://w.soundcloud.com/ https://cdn.dotcy.com.cy https://testmcmebot.azurewebsites.net https://fast.wistia.com https://s7.addthis.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com https://www.youtube.com https://*.sprechzimmer.ch https://www.med-congress.info https://*.datahouse.ch/ https://*.detailnet.ch https://www2.hirslanden.ch https://vr.zaak.ch https://staticxx.facebook.com https://www.facebook.com https://tourmake.it https://tools.eurolandir.com https://twitter.com https://www.facebook.com; child-src 'self' blob: https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.ads-twitter.com https://*.google.ch http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://staticxx.facebook.com https://fast.wistia.com https://s7.addthis.com https://*.twitter.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com 1
frame-ancestors 'self' https://*.designcrowd.com.au; 1
frame-ancestors 'self' springchicken.co.uk 1
default-src https:; object-src https:; media-src https:; img-src https: data:; frame-ancestors https:; frame-src https:; font-src https: data:; connect-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; 1
default-src 'self' *.kampyle.com *.medallia.com *.google-analytics.com *.gstatic.com ;               script-src 'self' *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.medallia.com *.kampyle.com *.googletagmanager.com  *.google-analytics.com  *.jquery.com *.marketo.net 'unsafe-inline' 'unsafe-eval';                script-src-elem 'self' *.bootstrapcdn.com *.googleapis.com *.gstatic.com  *.medallia.com *.kampyle.com *.googletagmanager.com  *.google-analytics.com  *.jquery.com *.marketo.net 'unsafe-inline' 'unsafe-eval';    connect-src 'self' *.kampyle.com *.medallia.com *.mktoresp.com;                object-src 'self' *.kampyle.com *.medallia.com;                style-src 'self' *.kampyle.com *.medallia.com *.gstatic.com   *.bootstrapcdn.com *.googleapis.com *.jquery.com 'unsafe-inline' 'unsafe-eval';                 font-src 'self' *.kampyle.com *.medallia.com *.bootstrapcdn.com *.gstatic.com *.googleapis.com data:;                frame-src 'self' *.astfinancial.com *.exacttarget.com *.gstatic.com  *.googletagmanager.com *.kampyle.com *.medallia.com;            img-src 'self' *.gravatar.com *.kampyle.com  *.medallia.com *.umbraco.org *.google-analytics.com umbraco.tv *.googletagmanager.com; 1
frame-ancestors 'self' *.tibco.com http://thelab.lookbookhq.com https://thelab.lookbookhq.com http://tibco.lookbookhq.com https://tibco.lookbookhq.com http://library.tibco.com https://library.tibco.com http://help.jaspersoft.com https://tibco.seismic.com 1
default-src https:; connect-src https:; font-src 'self' https: data: https:; frame-src https:; frame-ancestors https:; img-src https: data:; media-src https: blob:; object-src https:; style-src 'unsafe-inline' https:; worker-src blob:; script-src 'unsafe-inline' 'unsafe-eval' https:; 1
default-src https://www.facebook.com https://www.google-analytics.com 'unsafe-inline' 'self'; frame-ancestors 'none'; child-src www.facebook.com event.webcaster.pl www.google.com www.youtube.com ; script-src https://www.gstatic.com https://maps.googleapis.com https://www.google.com https://connect.facebook.net https://www.google-analytics.com 'unsafe-inline' 'self'; style-src 'unsafe-inline' fonts.googleapis.com 'self'; img-src https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://csi.gstatic.com https://www.facebook.com https://i.ytimg.com 'self'; font-src 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com 'self';  1
frame-ancestors bfz.hu 1
default-src 'self'; media-src 'self' embedwistia-a.akamaihd.net blob: data:; frame-src 'self' *.facebook.com *.wistia.com *.wistia.net *.marketo.com googleads.g.doubleclick.net bid.g.doubleclick.net *.google.com; font-src 'self' data:; style-src 'self' 'unsafe-inline' *.marketo.com optimize.google.com tagmanager.google.com fonts.googleapis.com; img-src 'self' data: *.adsymptotic.com https://rs.fullstory.com *.facebook.com *.googletagmanager.com *.marketo.com *.cloudfront.net *.litix.io *.linkedin.com embedwistia-a.akamaihd.net *.wistia.com *.google-analytics.com *.google.com cdn.clearwater-analytics.com stats.g.doubleclick.net cdn.clearwateranalytics.com ssl.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.bizographics.com *.googletagmanager.com https://edge.fullstory.com https://www.fullstory.com https://fullstory.com *.google.com *.gstatic.com googleads.g.doubleclick.net *.facebook.net *.wistia.com *.wistia.net *.litix.io *.marketo.com *.marketo.net *.google-analytics.com *.googleadservices.com cdn.clearwateranalytics.com *.licdn.com *.linkedin.com *.clearwater-analytics.com https://clearwater-analytics.com; connect-src 'self' https://rs.fullstory.com *.wistia.com *.litix.io *.mktoresp.com embedwistia-a.akamaihd.net *.marketo.com stats.g.doubleclick.net www.google-analytics.com 1
connect-src 'self' wss:             *.maxict.nl            *.maxshop.test            *.doubleclick.net            *.google-analytics.com            *.hotjar.com            *.hotjar.io            *.pro6pp.nl            *.tawk.to            *.dwin1.com            unpkg.com            *.zenaps.com;        default-src 'none';        font-src 'self' data:            *.maxict.nl            *.maxshop.test             *.gstatic.com            *.tawk.to            *.dwin1.com            unpkg.com            *.zenaps.com            *.hotjar.com;        frame-src 'self' 'unsafe-inline' about:             *.maxict.nl            *.maxshop.test            *.criteo.com            *.google.com            *.dpd.de            *.eetgroup.com            *.facebook.com            *.hotjar.com            *.hotjar.io            *.kingston.com            *.newstar.eu            *.newstar.nl            *.startech.com            *.tawk.to            *.twindis.com            *.youtube.com            *.psaparts.co.uk            *.gls-info.nl            *.gls-netherlands.com            *.dwin1.com            unpkg.com            *.zenaps.com;        img-src 'self' data: https:             *.maxict.nl            *.maxshop.test            *.google.com;        manifest-src 'self' *.maxict.nl;        object-src 'self' *.maxict.nl;        script-src 'self' 'unsafe-inline' 'unsafe-eval' about:             *.maxict.nl            *.maxshop.test            *.bing.com            *.bizographics.com            *.cloudfront.net            *.criteo.com            *.criteo.net            *.doubleclick.net            *.facebook.net            *.flix360.com            *.flixcar.com            *.flixfacts.com            *.google-analytics.com            *.googleadservices.com            *.googletagmanager.com            *.google.com            *.hotjar.com            *.hotjar.io            *.iceleads.com            *.jsdelivr.net            *.licdn.com            *.linkedin.com            *.list-manage.com            *.mailchimp.com            *.tawk.to            *.vane3alga.com            *.dwin1.com            unpkg.com            *.zenaps.com;        style-src 'self' 'unsafe-inline'             *.maxict.nl            *.maxshop.test            *.cloudfront.net            *.googleapis.com            *.google.com            *.jsdelivr.net            *.mailchimp.com            *.dwin1.com            unpkg.com            *.zenaps.com;        upgrade-insecure-requests; 1
frame-ancestors 'self' scout.org www.scout.org; report-uri /report-csp-violation 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://www.googleadservices.com *.facebook.net *.facebook.com script.crazyegg.com *.doubleclick.net https://live.reka.ch https://media.busyrooms.co https://maps.googleapis.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com https://bat.bing.com https://f24.org https://az416281.vo.msecnd.net https://app-wallee.com https://api.permaleads.ch *.youtube.com https://s.ytimg.com https://ibe.reka.ch;style-src 'self' 'unsafe-inline'  https://fonts.googleapis.com https://cdn.jsdelivr.net https://use.fontawesome.com https://live.reka.ch https://media.busyrooms.co https://tagmanager.google.com https://az416281.vo.msecnd.net https://app-wallee.com https://bat.bing.com https://ibe.reka.ch;img-src 'self' data:  *.facebook.com *.doubleclick.net maps.googleapis.com maps.gstatic.com https://media.busyrooms.co https://live.reka.ch https://www.google-analytics.com https://www.google.com https://www.google.de https://www.google.ch https://www.google.fr https://www.google.it https://reka-cdn.busyrooms.co https://ssl.gstatic.com https://f24.org https://app-wallee.com https://bat.bing.com https://az416281.vo.msecnd.net https://khms0.googleapis.com https://khms1.googleapis.com https://ibe.reka.ch;font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com/ https://media.busyrooms.co https://fonts.googleapis.com https://app-wallee.com https://ibe.reka.ch;connect-src 'self'  https://busyrooms.azure-api.net https://www.youtube.com https://vimeo.com https://live.reka.ch https://stagingaddajetcoreapi.azurewebsites.net https://stagingcoreapi.addajet.com https://coreapi.addajet.com https://busyrooms-reka-ibev4.azurewebsites.net https://app-wallee.com https://bat.bing.com https://www.google-analytics.com/ https://ibe.reka.ch;frame-src 'self'  *.facebook.com *.google.com *.google.ch *.google.de *.google.fr *.google.it *.doubleclick.net *.reka.ch *.youtube.com https://www.yumpu.com https://app-wallee.com blob:;object-src 'self' blob: ;manifest-src 'self'  ; 1
frame-ancestors 'self' https://*.hypnosis.edu 1
default-src 'self' googleads.g.doubleclick.net polantis-com-data-dev.s3-eu-west-1.amazonaws.com polantis-com-data.s3-eu-west-1.amazonaws.com polantis-com-data.s3.eu-west-1.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com code.jquery.com c.statcounter.com secure.statcounter.com www.google-analytics.com code.highcharts.com pagead2.googlesyndication.com cdn.datatables.net use.fontawesome.com cdn.rawgit.com maps.googleapis.com connect.facebook.net www.polantis.info new.polantis.com www.google.com www.gstatic.com https://rawgithub.com/phpepe/highcharts-regression/master/highcharts-regression.js https://rawgit.com/phpepe/highcharts-regression/master/highcharts-regression.js www.googletagmanager.com; object-src 'self' s.ytimg.com i.ytimg.com s.youtube.com www.youtube.com *.googlevideo.com; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com fonts.googleapis.com cdn.datatables.net https://cdn.rawgit.com/morteza/bootstrap-rtl/v3.4.0/dist/css/bootstrap-rtl.min.css www.polantis.info use.fontawesome.com www.gstatic.com; img-src 'self' data: images.polantis.com data.polantis.com s3-eu-west-1.amazonaws.com www.google-analytics.com c.statcounter.com stats.g.doubleclick.net maps.gstatic.com maps.googleapis.com csi.gstatic.com www.facebook.com www.polantis.info www.google.com randomuser.me/api/ cdnjs.cloudflare.com polantiscomimages.s3-eu-west-1.amazonaws.com polantis-com-data.s3-eu-west-1.amazonaws.com polantis-com-data-dev.s3.eu-west-1.amazonaws.com data2.polantis.com http://bimobject-dev.ad.bimobject.com http://bimobject-staging.ad.bimobject.com www.bimobject.com www.mollie.com; frame-src 'self' googleads.g.doubleclick.net www.youtube.com www.google.com www.facebook.com staticxx.facebook.com polantis-com-data.s3-eu-west-1.amazonaws.com polantis-com-data-dev.s3-eu-west-1.amazonaws.com polantis-com-data.s3.eu-west-1.amazonaws.com; font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com use.fontawesome.com; connect-src 'self' www.polantis.info new.polantis.com maps.googleapis.com cdn.datatables.net www.facebook.com vicopo.selfbuild.fr analytics.google.com stats.g.doubleclick.net; report-uri /nelmio/csp/report 1
default-src 'self'; img-src 'self' data: 1
frame-ancestors https://engage.talkative.uk https://ignite.mitel.com https://srv-contactcent.theimi.org.uk https://eu.engage.app/ *.theimi.org.uk  https://www.youtube.com/; report-uri /report-csp-violation 1
default-src *; img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://d10lpsik1i8c69.cloudfront.net https://tagmanager.google.com https://checkout.stripe.com cdn.jsdelivr.net fonts.googleapis.com https://optimize.google.com https://www.gstatic.com https://www.facebook.com; font-src 'self' data: cdn.jsdelivr.net fonts.googleapis.com fonts.gstatic.com *.wp.com https://optimize.google.com https://v2.zopim.com; frame-src 'self' https://checkout.stripe.com/ https://meetings.hubspot.com/ https://optimize.google.com https://www.facebook.com https://app.hubspot.com https://www.youtube.com/ https://js.stripe.com/ https://www.google.com/ https://googleads.g.doubleclick.net/ https://forms.hsforms.com/ https://app.jazz.co https://shuup.applytojob.com https://go.pardot.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' ws: wss: data: http://127.0.0.1:* https://127.0.0.1:* http://bdimg.share.baidu.com http://nsclick.baidu.com http://at.alicdn.com/t/webfont_iwi36r79j88.woff2 http://at.alicdn.com/t/webfont_iwi36r79j88.woff http://at.alicdn.com/t/webfont_iwi36r79j88.ttf;img-src * data: blob: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' use.typekit.net www.google-analytics.com sc-static.net p.typekit.net connect.facebook.net snap.licdn.com www.googletagmanager.com tr.snapschat.com stats.g.doubleclick.net www.facebook.com px.ads.linkedin.com p.typekit.net use.typekit.net *.googleapis.com *.addthis.com *.linkedin.com *.addthisedge.com data:; 1
form-action 'self'; img-src 'self' static.cmcdn.net; font-src 'self' static.cmcdn.net; object-src 'none'; script-src 'self' static.cmcdn.net; style-src 'self' static.cmcdn.net; frame-ancestors 'none'; block-all-mixed-content 1
frame-ancestors 'self' https://whisk.com 1
default-src 'none'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' dev.visualwebsiteoptimizer.com https://am.freshrelevance.com https://cdnjs.cloudflare.com/ajax/libs/ouibounce/0.0.12/ouibounce.min.js https://img.cartcontents.com/h78d70n0/animated.min.js https://d1y9qtn9cuc3xw.cloudfront.net https://d81mfvml8p5ml.cloudfront.net https://dn1i8v75r669j.cloudfront.net https://d81mfvml8p5ml.cloudfront.net/bai5gj4f.js https://dn1i8v75r669j.cloudfront.net https://dkpklk99llpj0.cloudfront.net https://dkpklk99llpj0.cloudfront.net/bai5gj4f_1582636052288.js https://static.legitscript.com/seals/612156.js *.barclaycardsmartpay.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://tagmanager.google.com *.dmca.com *.craftyclicks.co.uk *.zenaps.com *.awin1.com *.dwin1.com *.olark.com *.mention-me.com connect.facebook.net https://widget.trustpilot.com http://widget.trustpilot.com https://www.googletagmanager.com https://cdn.optimizely.com https://www.google-analytics.com http://www.google-analytics.com http://*.hotjar.com https://*.hotjar.com; object-src 'self' data: 'unsafe-inline'; style-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com *.olark.com; img-src * 'self' data: https:; media-src 'self' *.olark.com; frame-src *; font-src 'self' data: https://fonts.gstatic.com/ http://*.hotjar.com https://*.hotjar.com *.zenaps.com; connect-src * 1
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' platform.twitter.com connect.facebook.com ssl.googleanalytics.com maps.googleapis.com cdn.syndication.twimg.com www.google.com static.doubleclick.net; style-src https: 'unsafe-inline' fonts.googleapis.com code.jquery.com; font-src https: fonts.gstatic.com; img-src https://maps.wembit.nl data: https: www.w3.org www.facebook.com 1
script-src 'self' *.rankedgaming.com *.stripe.com *.googleapis.com *.google.com *.gstatic.com *.jquery.com 'unsafe-inline' 'unsafe-eval'; object-src 'self' *.rankedgaming.com 1
default-src https: data: ws: wss: 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors https://*.betdaq.com 1
default-src 'self' www.googletagmanager.com www.google-analytics.com static.dvinci-easy.com player.vimeo.com jobs.phoenixgroup.eu; form-action 'self'; frame-ancestors 'self'; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: *.vimeocdn.com https://raw.githubusercontent.com/gmaps-marker-clusterer/gmaps-marker-clusterer/master/images/m1.png maps.googleapis.com *.gstatic.com translate.google.com www.googletagmanager.com www.google-analytics.com *.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.dvinci-easy.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com maps.googleapis.com; style-src 'self' 'unsafe-inline' maps.googleapis.com fonts.googleapis.com static.dvinci-easy.com; manifest-src 'self'; connect-src 'self' www.google-analytics.com static.dvinci-easy.com jobs.phoenixgroup.eu; frame-src 'self' blomann-design.1kcloud.com www.googletagmanager.com player.vimeo.com; report-uri https://21torr.report-uri.com/r/d/csp/enforce 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.sharethis.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.consumercare.net *.econsumeraffairs.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.sharethis.com; img-src 'self' *.google-analytics.com *.g.doubleclick.net *.facebook.com *.google.com *.sharethis.com https://www.google.com.au legal.bbulibrary.com; frame-src 'self' *.youtube.com *.googletagmanager.com *.sharethis.com *.facebook.com/; font-src 'self' *.gstatic.com; connect-src 'self' *.sharethis.com *.sharethis.mgr.consensu.org https://stats.g.doubleclick.net; report-uri /admin/config/system/seckit/csp-report, default-src 'self' 'self' data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *; img-src 'self' blob: data: * 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.nextconf.eu *.youtube.com *.vimeo.com *.twitter.com *.slideshare.net www.google-analytics.com cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com responder.wt-safetag.com cdnjs.cloudflare.com www.google-analytics.com; img-src 'self' data: sinnerschrader01.webtrekk.net www.google.de fbc.wcfbc.net www.google-analytics.com; connect-src 'self' *.doubleclick.net www.google-analytics.com; upgrade-insecure-requests; block-all-mixed-content; 1
default-src 'self' static.mycity.travel static.montreuxriviera.com * 'unsafe-inline' 'unsafe-eval' data: blob:; upgrade-insecure-requests; frame-ancestors: 'self' https://static.mycity.travel *; 1
default-src 'self'; block-all-mixed-content; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.google.de https://consent.jtl-software.de https://stats.jtl-software.de https://www.youtube.com https://maps.googleapis.com https://s.ytimg.com https://www.jtl-software.de https://jira.jtl-software.de https://*.paypal.com https://www.paypalobjects.com https://www.gstatic.com https://code.jquery.com https://www.googletagmanager.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://bat.bing.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net data:; img-src 'self' https://bilder.jtl-software.de https://stats.jtl-software.de https://img.youtube.com https://*.ytimg.com https://maps.gstatic.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://lh3.ggpht.com https://cbks0.googleapis.com https://khms0.googleapis.com https://khms1.googleapis.com https://www.facebook.com https://connect.facebook.net https://www.google.com https://www.google.ch https://www.google.de https://www.google.at https://www.google.pl https://www.google.com.ua https://www.google.com.pk https://www.google.hu https://www.google.co.uk https://www.google.dk https://www.google.br https://www.google.it https://www.google.ae https://www.google.ca https://www.google.hr https://www.google.com.au https://www.google.sk https://www.google.es https://www.googletagmanager.com https://www.google.com.tr https://www.google.cz https://www.google.be https://www.google.co.in https://www.google.ge https://www.google.nl https://www.google.lu https://www.google-analytics.com https://www.facebook.com https://bat.bing.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.de https://www.googletagmanager.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://cdn.jtl-software.com data:; frame-src 'self' https://stats.jtl-software.de https://consent.jtl-software.de https://www.youtube.com https://jira.jtl-software.de https://www.google.com https://stats.jtl-software.de https://www.facebook.com https://bid.g.doubleclick.net https://tpc.googlesyndication.com; form-action 'self' https://jtl-software.us9.list-manage.com https://www.paypal.com https://oauth2.api.jtl-software.com https://www.facebook.com https://checkout.jtl-software.com; base-uri 'self'; connect-src 'self' https://stats.jtl-software.de https://consent.jtl-software.de https://www.facebook.com https://www.google-analytics.com  https://stats.g.doubleclick.net https://bat.bing.com; manifest-src 'self'; media-src 'self'; frame-ancestors 'self'; report-uri https://report.api.jtl-software.com/csp/; 1
default-src 'self'; object-src 'self'; base-uri 'self'; form-action 'self' sandbox.flo2cash.com secure.flo2cash.co.nz; frame-ancestors 'self'; font-src 'self' fonts.gstatic.com; img-src 'self' maps.googleapis.com maps.gstatic.com www.google-analytics.com www.googletagmanager.com developers.google.com data: *.crazyegg.com; script-src 'self' maps.googleapis.com wt.engage.ubiquity.co.nz www.googleapis.com www.googletagmanager.com www.google-analytics.com www.google.com www.gstatic.com sandbox.flo2cash.com secure.flo2cash.co.nz *.crazyegg.com www.googleoptimize.com 'nonce-BhQeUxl42R0gYsyq6UjnLP1Sfi/XdHbMbHSafk9XNKU='; style-src 'self' 'unsafe-inline' fonts.googleapis.com; frame-src 'self' www.youtube.com www.youtube-nocookie.com www.googletagmanager.com www.google.com sandbox.flo2cash.com secure.flo2cash.co.nz; connect-src 'self' wt.engage.ubiquity.co.nz wt-production.servicebus.windows.net www.google-analytics.com ajax.googleapis.com sandbox.flo2cash.com secure.flo2cash.co.nz *.crazyegg.com stats.g.doubleclick.net; upgrade-insecure-requests ; report-uri https://gravitatenz.report-uri.com/r/d/csp/enforce; 1
default-src 'self' 'unsafe-eval'  'unsafe-inline' https: data:  *.gstatic.com *.cleversite.ru *.yandex.ru https://top-fwz1.mail.ru https://cdnjs.cloudflare.com *.google-analytics.com https://counter.yadro.ru *.google.ru *.google.com *.facebook.com  *.facebook.net *.doubleclick.net *.hotjar.com wss://*.cleversite.ru ; 1
default-src https://domainname.shop https://www.domeneshop.no https://domeneshop.no https://domainnameshop.com https://domene.shop https://xn--domn-noa.shop https://xn--domne-ura.shop https://chat.domeneshop.no/ 'unsafe-inline'; img-src https://domainname.shop https://www.domeneshop.no https://domeneshop.no https://domainnameshop.com https://domene.shop https://xn--domn-noa.shop https://xn--domne-ura.shop; frame-src https://domainname.shop https://www.domeneshop.no https://domeneshop.no https://domainnameshop.com https://domene.shop https://xn--domn-noa.shop https://xn--domne-ura.shop 1
default-src 'self' https://js.arcgis.com https://www.google.com https://www.qr.com.qa https://qrarcgis.qr.com.qa https://maps.google.com; font-src 'self' data:  'unsafe-inline' js.arcgis.com https://cdnjs.cloudflare.com; script-src 'self' https://www.gstatic.com/ https://www.qr.com.qa https://vclchat.qr.com.qa https://cwp.qr.com.qa https://www.google.com/  https://js.arcgis.com https://ajax.googleapis.com 'unsafe-eval' https://js.arcgis.com   'unsafe-inline' www.google-analytics.com ajax.googleapis.com https://www.googletagmanager.com; connect-src 'self' js.arcgis.com www.arcgis.com basemaps.arcgis.com https://cwp.qr.com.qa https://static.arcgis.com https://cdn.arcgis.com https://geocode.arcgis.com https://firebaseinstallations.googleapis.com https://www.google-analytics.com https://analytics.google.com; img-src 'self' https://cdn.arcgis.com data: https://vclchat.qr.com.qa https://www.qr.com.qa https://cwp.qr.com.qa https://cdn.shopify.com  'unsafe-inline'  www.google-analytics.com 'unsafe-inline'  js.arcgis.com; style-src 'self' 'unsafe-inline' https://vclchat.qr.com.qa https://cdnjs.cloudflare.com https://ajax.googleapis.com js.arcgis.com https://www.qr.com.qa ; 1
default-src 'none'; 
		base-uri 'self';
		script-src 'self' 'unsafe-inline' 'unsafe-eval' *.kbb.eu *.jsdelivr.net *.zencdn.net maps.googleapis.com *.vimeo.com; 
		style-src 'self' 'unsafe-inline' *.jsdelivr.net *.zencdn.net; 
		img-src 'self' *.kbb.eu data: maps.gstatic.com *.googleapis.com *.ggpht; 
		connect-src 'self' *.vimeo.com vimeo.com; 
		font-src 'self' data:; 
		object-src 'none'; 
		manifest-src 'self';
		media-src 'self' *.top-ix.org *.kbb.eu; 
		form-action 'self';
		frame-src 'self' *.vimeo.com *.kbb.eu; 
		frame-ancestors 'self' *.vimeo.com; 1
default-src 'self' *.acsbapp.com acsbapp.com *.google-analytics.com *.vergic.com www.trustmarkthai.com dc.services.visualstudio.com ipinfo.io www.google.com *.youtube.com *.firebaseio.com *.synergyworldwide.com *.nspnet.net *.googleapis.com *.typekit.net *.raygun.io wss://*.firebaseio.com *.firebaseapp.com freegeoip.net player.vimeo.com edge.addthis.com;                      img-src data: *;                      style-src 'self' 'unsafe-inline' acsbapp.com *.synergyworldwide.com *.vergic.com fonts.gstatic.com *.googleapis.com *.fontawesome.com *.bootstrapcdn.com;                      script-src 'self' 'unsafe-inline' 'unsafe-eval' acsbapp.com *.vergic.com az416426.vo.msecnd.net www.google.com www.google-analytics.com *.googleapis.com use.typekit.net *.bootstrapcdn.com cdnjs.cloudflare.com cdn.raygun.io *.firebaseio.com *.vimeo.com  apis.google.com  www.gstatic.com npg.tgcorp.com pg.mcash.co.kr m.addthis.com www.googletagmanager.com openapi.map.naver.com www.trustmarkthai.com;                      font-src 'self' *.acsbapp.com acsbapp.com *.synergyworldwide.com content.psplugin.com *.vergic.com fonts.gstatic.com use.fontawesome.com *.typekit.net *.bootstrapcdn.com 1
default-src https: 'self' *.yhlsoft.com *.advisorservices.com *.tdainstitutional.com; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src * data:; frame-ancestors 'self' *.yhlsoft.com *.advisorservices.com *.tdainstitutional.com investwithintegrity.com www.logicwealthmanagement.com; font-src * data:; connect-src wss: https:; media-src data:; 1
default-src 'self' http://harneys-dev.living-digital.com/  *.pingdom.net *.gstatic.com code.jquery.com *.googleapis.com www.gravatar.com cdnjs.cloudflare.com player.vimeo.com *.vimeocdn.com packages.umbraco.org our.umbraco.org google-analytics.com googletagmanager.com snap.licdn.com ey.com players.brightcove.net trends.com *.brightcove.com ajax.googleapis.com widgets.outbrain.com traffic.outbrain.com *.wirewax.com *.webtrends.com vjs.zencdn.net blob: data:;     script-src 'self' 'unsafe-eval'  players.brightcove.net *.gstatic.com  *.google.com *.google.bg *.brightcove.com *.pingdom.net code.jquery.com *.googleapis.com cdnjs.cloudflare.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com widgets.outbrain.com snap.licdn.com *.wirewax.com *.webtrends.com *.webtrendslive.com vjs.zencdn.net static.hotjar.com static.ads-twitter.com analytics.twitter.com script.hotjar.com px.ads.linkedin.com www.linkedin.com connect.facebook.net 'unsafe-inline';     style-src 'self' 'unsafe-inline' edge-player.wirewax.com cdnjs.cloudflare.com *.googleapis.com code.jquery.com;     img-src 'self' data: blob: www.gravatar.com harneys-fiduciary-dev.living-digital.com www.facebook.com t.co *.facebook.com *.google.com *.google.bg *.gstatic.com harneys-dev.living-digital.com umbraco.tv dc.ads.linkedin.com code.jquery.com *.googleapis.com  px.ads.linkedin.com cf-images.us-east-1.prod.boltdns.net edge-player.wirewax.com *.brightcove.com *.webtrendslive.com *.akamaihd.net *.outbrain.com www.google-analytics.com *.webtrends.com *.doubleclick.net;     font-src 'self' blob: data: vjs.zencdn.net *.googleapis.com code.jquery.com *.gstatic.com harneys-dev.living-digital.com;     object-src 'self' harneys-dev.living-digital.com;     base-uri 'self';     frame-src 'self' harneys-dev.living-digital.com *.pingdom.net vars.hotjar.com *.google.com  resources.harneys.com;     worker-src 'self' blob: data: filesystem:;     connect-src 'self' *.wirewax.com *.brightcove.com stats.g.doubleclick.net *.googleapis.com code.jquery.com *.google-analytics.com www.google-analytics.com *.pingdom.net *.akamaihd.net manifest.prod.boltdns.net rum-collector-2.pingdom.net blob: file: data: filesystem:; 1
default-src * data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 1
base-uri 'self' https://optimize.google.com; 			default-src 'none'; 			connect-src 'self' https://*.customusb.com https://cdn.customusb.com https://stats.g.doubleclick.net https://www.google-analytics.com https://api.rss2json.com https://*.facebook.com https://*.trustpilot.com https://*.tawk.to wss://*.tawk.to https://*.fullstory.com https://ct.pinterest.com  https://bat.bing.com https://s3.amazonaws.com/CustomUSB/; 			script-src 'self' 'unsafe-inline' https://*.customusb.com https://cdn.customusb.com https://*.google.com https://*.googleapis.com https://apis.google.com https://*.google-analytics.com https://*.googleadservices.com https://*.googlecommerce.com https://www.googletagmanager.com https://tpc.googlesyndication.com https://*.bing.com https://*.facebook.net https://sjs.bizographics.com https://*.trustpilot.com https://*.tawk.to https://cdn.jsdelivr.net https://googleads.g.doubleclick.net https://fullstory.com https://*.fullstory.com https://d2wy8f7a9ursnm.cloudfront.net https://s.pinimg.com https://static.ads-twitter.com https://analytics.twitter.com https://optimize.google.com https://snap.licdn.com https://px.ads.linkedin.com https://cdnjs.cloudflare.com https://polyfill.io https://unpkg.com/@ungap/; 			style-src 'self' 'unsafe-inline' https://*.customusb.com https://cdn.customusb.com https://optimize.google.com https://*.googleapis.com https://cdn.jsdelivr.net; 			img-src 'self' data: https://*.customusb.com https://cdn.customusb.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://apis.googl.com https://www.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.bing.com https://*.facebook.com https://ct.pinterest.com https://p.adsymptotic.com https://pinterest.adsymptotic.com https://t.co https://*.tawk.to https://cdn.jsdelivr.net https://*.adobe.com https://s3.amazonaws.com https://optimize.google.com https://px.ads.linkedin.com https://www.linkedin.com/px/ https://i.ytimg.com; 			font-src 'self' https://*.customusb.com https://cdn.customusb.com https://fonts.googleapis.com https://*.gstatic.com https://*.tawk.to https://optimize.google.com; 			frame-src 'self' data: https://*.customusb.com https://*.google.com https://*.g.doubleclick.net https://tpc.googlesyndication.com https://*.facebook.com https://connect.facebook.net https://*.youtube.com https://*.trustpilot.com https://va.tawk.to https://*.authorize.net https://ipayment.azurewebsites.net https://optimize.google.com; 			object-src 'self'; 			media-src 'self' https://static-v.tawk.to; 			form-action 'self' https://connect.facebook.net https://www.facebook.com/tr/ https://ipmedia.wufoo.com https://va.tawk.to; 			frame-ancestors 'self'; 			manifest-src 'self' https://*.customusb.com https://cdn.customusb.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: fonts.gstatic.com *.typekit.net www.google-analytics.com *.googleapis.com api.corporateshowcase.com code.jquery.com *.vzaar.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net cdnjs.cloudflare.com *.addthis.com *.addthisedge.com *.google.com *.googletagmanager.com *.irasia.com stats.g.doubleclick.net 1
frame-ancestors http://www.stumbleupon.com 1
script-src 'nonce-0fnsgWymZre0XefQisQ/2w' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.google-analytics.com/analytics.js https://www.googleadservices.com https://googleads.g.doubleclick.net http://www.gstatic.com/wcm/;report-uri /_/GeoMerchantPrestoSiteUi/cspreport 1
default-src https:; connect-src https: wss:; font-src https: data:; img-src https: data: blob:; frame-src https:; worker-src https: data: 'unsafe-inline' 'unsafe-eval'; form-action https:; script-src https: data: 'unsafe-inline' 'unsafe-eval';style-src https: data: 'unsafe-inline'; base-uri 'self'; 1
frame-ancestors vernaruto.tv 1
child-src 'self' blob: ;connect-src 'self' *.addthis.com *.addthisedge.com z.moatads.com s.ytimg.com s.pinimg.com connect.facebook.net static.ads-twitter.com analytics.twitter.com ct.pinterest.com *.bazaarvoice.com *.iesnare.com *.google-analytics.com *.pricespider.com *.visibleconsumerinsight.com *.mapbox.com *.braintreegateway.com *.braintree-api.com  *.cloudfront.net *.paypalobjects.com *.sandbox.paypal.com *.paypal.com tst.kaptcha.com *.omappapi.com a.omappapi.com api.omappapi.com *.facebook.com *.doubleclick.net cdn.optimizely.com logx.optimizely.com a18743582994.cdn.optimizely.com  *.boxcdn.net *.box.com ;default-src 'self' data: ;font-src 'self' fonts.gstatic.com *.bootstrapcdn.com 'unsafe-inline' data:  *.cloudfront.net  *.boxcdn.net *.box.com ;frame-ancestors 'self' *.addthis.com *.addthisedge.com z.moatads.com s.ytimg.com s.pinimg.com connect.facebook.net static.ads-twitter.com analytics.twitter.com ct.pinterest.com www.google.com *.youtube.com americanstandard.app.box.com *.bazaarvoice.com *.iesnare.com *.pinterest.com ;frame-src 'self' *.addthis.com *.addthisedge.com z.moatads.com s.ytimg.com s.pinimg.com connect.facebook.net static.ads-twitter.com analytics.twitter.com ct.pinterest.com www.google.com *.youtube.com americanstandard.app.box.com *.bazaarvoice.com *.iesnare.com *.pinterest.com *.braintreegateway.com *.braintree-api.com *.paypalobjects.com *.sandbox.paypal.com *.paypal.com tst.kaptcha.com *.facebook.com ssl.kaptcha.com/  *.boxcdn.net *.box.com cdn.optimizely.com logx.optimizely.com a18743582994.cdn.optimizely.com ;img-src 'self' data: https: blob: *.bazaarvoice.com *.iesnare.com *.youtube.com www.googletagmanager.com script.crazyegg.com a.optmnstr.com tagmanager.google.com *.pinterest.com *.doubleclick.net www.google.com s3.amazonaws.com www.gstatic.com ssl.gstatic.com 'unsafe-inline' ;media-src 'self' ;object-src 'self' ;script-src 'self' *.addthis.com *.addthisedge.com z.moatads.com s.ytimg.com s.pinimg.com connect.facebook.net static.ads-twitter.com analytics.twitter.com ct.pinterest.com *.bazaarvoice.com *.iesnare.com www.google.com www.gstatic.com ssl.gstatic.com www.googletagmanager.com script.crazyegg.com a.optmnstr.com tagmanager.google.com *.salesforceliveagent.com *.youtube.com *.pricespider.com *.visibleconsumerinsight.com *.mapbox.com *.pinterest.com *.facebook.com americanstandard.app.box.com *.google-analytics.com 'unsafe-eval' 'unsafe-inline' *.braintreegateway.com *.braintree-api.com s3.amazonaws.com  *.cloudfront.net *.paypalobjects.com *.sandbox.paypal.com *.paypal.com tst.kaptcha.com 100009658.collect.igodigital.com *.omappapi.com a.omappapi.com api.omappapi.com cdn.optimizely.com logx.optimizely.com a18743582994.cdn.optimizely.com www.googleadservices.com *.adroll.com d.adroll.mgr.consensu.org  *.boxcdn.net *.box.com ;style-src 'self' *.bootstrapcdn.com 'unsafe-inline' fonts.googleapis.com *.bazaarvoice.com *.iesnare.com *.pricespider.com *.visibleconsumerinsight.com *.mapbox.com *.braintreegateway.com *.braintree-api.com s3.amazonaws.com  *.cloudfront.net fonts.gstatic.com www.googletagmanager.com script.crazyegg.com a.optmnstr.com tagmanager.google.com  *.boxcdn.net *.box.com ; 1
frame-ancestors 'self' www.coopfirenze.it calendario.coopfirenze.it anagrafica.coopfirenze.it affittispazi.coopfirenze.it domandelocali.coopfirenze.it; 1
default-src 'self'  http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io http://www.aparat.com https://www.aparat.com http://shenoto.com/ https://youtube.com/; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com http://www.aparat.com https://www.aparat.com http://shenoto.com/ https://youtube.com/; frame-ancestors 'self' https://trustseal.enamad.ir 1
block-all-mixed-content; default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' https://*.clientis.ch https://clientis.ch https://assets.adobedtm.com https://maps.googleapis.com/maps/ https://maps.googleapis.com/maps-api-v3/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; frame-src 'self' https://www.google.com/ https://www.youtube.com; style-src 'unsafe-inline' https://*.clientis.ch https://clientis.ch https://fonts.googleapis.com/css; frame-ancestors   https://www.clientis.ch; img-src 'self' data: https://*.clientis.ch https://clientis.ch https://maps.gstatic.com/mapfiles/ https://*.googleapis.com; font-src 'self' https://fonts.gstatic.com 1
frame-ancestors 'self'  https://findadoctor.rsfh.com https://dev.px.roperstfrancis.connecthealthcare.com 1
default-src 'self' https://ethical.net; base-uri 'self' https://ethical.net; connect-src 'self' https://cdn.ethical.net https://mk0ethicalnetgpxgjkd.kinstacdn.com https://www.nwslettr.net/subscribe https://ethical.net; font-src 'self' data: https://cdn.ethical.net https://mk0ethicalnetgpxgjkd.kinstacdn.com https://ethical.net; form-action 'self' https://ethical.net; frame-ancestors 'self' https://ethical.net; frame-src 'self' https://assets.digitalclimatestrike.net https://cdn.ethical.net https://embed-ssl.ted.com https://embed.ted.com https://ethical.net https://mk0ethicalnetgpxgjkd.kinstacdn.com https://platform.twitter.com https://player.vimeo.com https://www.iubenda.com https://www.youtube-nocookie.com https://www.youtube.com; child-src 'self' https://assets.digitalclimatestrike.net https://cdn.ethical.net https://embed-ssl.ted.com https://embed.ted.com https://ethical.net https://mk0ethicalnetgpxgjkd.kinstacdn.com https://platform.twitter.com https://player.vimeo.com https://www.iubenda.com https://www.youtube-nocookie.com https://www.youtube.com; img-src data: https:; manifest-src 'self' https://cdn.ethical.net https://mk0ethicalnetgpxgjkd.kinstacdn.com https://ethical.net; media-src data: https://cdn.ethical.net https://cdn.iubenda.com https://ethical.net https://instant.page https://mk0ethicalnetgpxgjkd.kinstacdn.com https://stats.ethical.net; object-src 'self' https://cdn.ethical.net https://ethical.net https://mk0ethicalnetgpxgjkd.kinstacdn.com; script-src 'self' 'unsafe-inline' https://assets.digitalclimatestrike.net/widget.js https://cdn.ethical.net https://cdn.iubenda.com https://cdn.syndication.twimg.com https://ethical.net https://instant.page https://mk0ethicalnetgpxgjkd.kinstacdn.com https://platform.twitter.com https://s.ytimg.com https://stats.ethical.net https://www.youtube.com; style-src 'unsafe-inline' https://cdn.ethical.net https://cdn.iubenda.com https://ethical.net https://instant.page https://mk0ethicalnetgpxgjkd.kinstacdn.com https://platform.twitter.com; worker-src 'self' https://ethical.net; block-all-mixed-content; report-uri https://ethical.net/wp-json/wpcsp/v1/route/LogPolicyViolation?_wpnonce=c6b3f1c12d 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://shop.menunedeli.ru https://unpkg.com https://*.textback.io https://tbcdnwidgetsprod.azureedge.net https://dc.services.visualstudio.com http://e.issuu.com https://www.youtube.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google.ru https://www.google.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://yastatic.net https://*.yandex.ru https://*.googleapis.com https://*.vk.com https://vk.com https://*.facebook.net https://*.facebook.com https://maxcdn.bootstrapcdn.com https://cdn.thinglink.me https://*.thinglink.me https://*.thinglink.com https://ajax.googleapis.com https://dachernenko.justclick.ru https://*.bitrix24.ru https://senler.ru; style-src 'unsafe-inline' *; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://tbcdnwidgetsprod.azureedge.net; img-src 'self' data: https://menunedeli.ru https://shop.menunedeli.ru http://e.issuu.com https://tbcdnwidgetsprod.azureedge.net http://mn.ocharovanie-zhenstvennosti.ru https://mc.yandex.ru https://*.vk.me https://vk.com https://pp.userapi.com https://badges.instagram.com https://counter.yadro.ru https://secure.gravatar.com https://www.facebook.com https://www.google-analytics.com https://*.facebook.net https://connect.facebook.net https://*.facebook.com https://*.fbcdn.net https://cdn.thinglink.me https://*.thinglink.com https://stats.g.doubleclick.net https://www.google.ru https://www.google.com https://*.bitrix24.ru https://*.cdnvideo.ru; connect-src https://menunedeli.ru https://shop.menunedeli.ru https://unpkg.com https://*.textback.io https://tbcdnwidgetsprod.azureedge.net https://dc.services.visualstudio.com http://e.issuu.com https://*.facebook.net https://connect.facebook.net https://*.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net https://mc.yandex.ru https://vk.com https://cdn.thinglink.me https://*.thinglink.com https://ajax.googleapis.com https://dachernenko.justclick.ru  https://*.bitrix24.ru wss://*.bitrix24.com; frame-src https://unpkg.com https://*.textback.io https://tbcdnwidgetsprod.azureedge.net https://dc.services.visualstudio.com http://e.issuu.com https://*.yandex.ru https://*.vk.com https://vk.com https://*.facebook.net https://connect.facebook.net https://*.facebook.com https://www.youtube.com https://bid.g.doubleclick.net https://*.bitrix24.ru 1
default-src 'self' *.firstatlanticcommerce.com; img-src 'self' *.firstatlanticcommerce.com * data:; script-src 'self'  'unsafe-inline' 'unsafe-eval' blob:  *.firstatlanticcommerce.com https://ajax.googleapis.com/ https://z.moatads.com/ https://snap.licdn.com/ https://ssl.google-analytics.com/ https://m.addthis.com/ https://s7.addthis.com/ https://script.crazyegg.com/ https://www.google.com/ https://www.gstatic.com/; style-src 'self' data: 'unsafe-inline' *.firstatlanticcommerce.com http://fonts.googleapis.com https://s7.addthis.com/ https://m.addthis.com/ https://ssl.google-analytics.com/;font-src 'self' data: *.firstatlanticcommerce.com http://fonts.googleapis.com https://s7.addthis.com/; frame-src 'self' *.firstatlanticcommerce.com https://www.google.com/ https://www.youtube.com/ https://s7.addthis.com/ https://ajax.googleapis.com/; connect-src 'self' *.firstatlanticcommerce.com https://tracking.crazyegg.com/ 1
frame-ancestors 'self' ah4r.crm.dynamics.com 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-GfEufPtso1T1nA49ZiAT7Q' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
frame-ancestors https://hd.co.th/ https://www.honestdocs.co/ 'self' 1
report-uri https://www.yelp.com/csp_block?id=292c0f8ca30dc59b&page=enforced_by_default_directives&policy_hash=4a31667603ab2e38c60aeeb09daa5097&site=www&timestamp=1609208477; object-src 'self'; base-uri 'self' https://*.yelpcdn.com https://*.adsrvr.org https://6372968.fls.doubleclick.net; font-src 'self' data: https: 1
default-src 'self' https://www.googletagmanager.com; frame-ancestors 'self'; frame-src 'self' https://www.google.com/recaptcha/ https://www.youtube.com; base-uri 'self'; form-action 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com/; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.youtube.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://ajax.googleapis.com/; img-src 'self' 'unsafe-inline' data: https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://s.ytimg.com; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net; 1
default-src 'self' https:; connect-src 'self' https: wss: https://localhost:3035 wss://localhost:3035 ws://localhost:3000; font-src 'self' https: data:; img-src 'self' https: data:; frame-src 'self' https:; object-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline' data: blob: 1
default-src 'self' *.mytolino.com data: *.youtube-nocookie.com *.ytimg.com *.googleapis.com *.gstatic.com 'unsafe-inline' mytolino.de mytolino.at mytolino.ch mytolino.it mytolino.be mytolino.fr mytolino.nl mytolino.uk opensource.mytolino.com 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' cloudstatic.obi4wan.com geo.gegevenshuis.nl heerlen.nl m5.mailplus.nl static.mailplus.nl stats.pusher.com;frame-src 'self' www.youtube-nocookie.com www.youtube.com 0917.ro-viewer.nl *.readspeaker.com;style-src 'self' 'unsafe-inline' cloud.typography.com  geo.gegevenshuis.nl ;img-src 'self' data: s3-eu-west-1.amazonaws.com geo.gegevenshuis.nl helpdesk.kaartviewer.nl www.openbasiskaart.nl;font-src 'self' data: ;object-src 'self';media-src 'self' *.readspeaker.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; child-src 'self' https://www.youtube.com; frame-src 'self' https://www.youtube.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.amphia.nl *.amphia.local *.doubleclick.net *.bootstrapcdn.com *.google-analytics.com *.youtube-nocookie.com *.youtube.com *.readspeaker.com *.google.com *.gstatic.com *.cloudflare.com *.googleapis.com data: 1
default-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.googleapis.com http://fonts.googleapis.com http://s.gravatar.com https://stackpath.bootstrapcdn.com; font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com http://fonts.googleapis.com https://wordpress.com http://www.fcgo.gov.np; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://stats.wp.com http://s.gravatar.com https://s0.wp.com; img-src 'self' 'unsafe-inline' data: https://www.google-analytics.com http://www.fcgo.gov.np https://i1.wp.com https://i0.wp.com http://pixel.wp.com; frame-src 'self' 'unsafe-inline' https://www.google.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com *.unicef.org *.sharethis.com rules.quantcount.com connect.facebook.net secure.quantserve.com www.google-analytics.com www.googletagmanager.com cdn.poll-maker.com embeds.tagboard.com maps.googleapis.com e.infogram.com *.hscampaigns.com *.getchute.com ssl.mousestats.com tagmanager.google.com js-agent.newrelic.com bam.nr-data.net js-agent.newrelic.com/* www.youtube.com s.ytimg.com *.instagram.com platform.twitter.com cdn.syndication.twimg.com syndication.twitter.com cdn.nativemsg.com hm.baidu.com optimize.google.com siteimproveanalytics.com downloads.mailchimp.com mc.us2.list-manage.com sjs.bizographics.com unicef.us2.list-manage.com s3.amazonaws.com www.googleadservices.com *.doubleclick.net cdn.curator.io eisi-ext.azurewebsites.net *.aparat.com *.tableau.com *.wufoo.com s.pinimg.com ct.pinterest.com analytics.tiktok.com; object-src 'self' *.youtube.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.sharethis.com cdn.poll-maker.com stories.getchute.com cdn-images.mailchimp.com downloads.mailchimp.com l.sharethis.com platform.twitter.com optimize.google.com *.unicef.org cdn.curator.io *.twimg.com; img-src 'self' data: *.unicef.org www.google-analytics.com ssl.gstatic.com sb.scorecardresearch.com  *.sharethis.com www.facebook.com pixel.quantserve.com stats.g.doubleclick.net www.gstatic.com cdn.poll-maker.com csi.gstatic.com maps.gstatic.com maps.googleapis.com www.google.com *.cdninstagram.com pixel.getchute.com media.chute.io static.getchute.com avatars.io syndication.twitter.com *.twimg.com platform.twitter.com dynamite-images.appspot.com hm.baidu.com www.googletagmanager.com unicef-images.appspot.com 88988.global.siteimproveanalytics.io cdn-images.mailchimp.com gallery.mailchimp.com downloads.mailchimp.com *.tableau.com; media-src 'self' *.cdninstagram.com video.twimg.com; frame-src 'self' *.facebook.com www.google.com *.twitter.com e.infogram.com infogram-download-us2.s3.eu-west-1.amazonaws.com infogram-download-eu.s3.eu-west-1.amazonaws.com *.sharethis.com *.hscampaigns.com embeds.tagboard.com www.youtube.com infogram.com connect.facebook.net *.unicef.org api.getchute.com static.getchute.com giphy.com *.wufoo.com www.instagram.com cdn.nativemsg.com twitter.com *.ustream.tv *.youku.com c.sharethis.mgr.consensu.org optimize.google.com embed.ted.com *.doubleclick.net player.vimeo.com forms.office.com *.aparat.com *.tableau.com oms.gameloft.com *.soundcloud.com app.powerbi.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com data: maxcdn.bootstrapcdn.com stories.getchute.com *.unicef.org cdn.curator.io; connect-src 'self' *.sharethis.com www.quiz-maker.com ssl.mousestats.com www.google-analytics.com s3.amazonaws.com getchute.com *.getchute.com c.sharethis.mgr.consensu.org stats.g.doubleclick.net unicefhq.cp.bsd.net script.google.com script.googleusercontent.com *.unicef.org api.curator.io bam.nr-data.net rpapigatewaytest.azurewebsites.net i2e.azurewebsites.net; report-uri /innovation/report-csp-violation 1
frame-ancestors 'self' http://www.philips.ua *.philips.com *.philips.ua 1
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.siteimprove.net *.googleapis.com *.google.com *.google-analytics.com *.gstatic.com cdnjs.cloudflare.com *.curator.io *.addthis.com *.addthisedge.com *.facebook.com *.facebook.net  siteimproveanalytics.com *.twitter.com *.pingdom.net; style-src 'self' 'unsafe-inline' *.googleapis.com cdn.siteimprove.net *.curator.io; img-src 'self' data: *.gstatic.com *.googleapis.com *.ggpht.com developers.google.com *.google-analytics.com *.doubleclick.net *.fbcdn.net *.twimg.com *.instagram.com *.curator.io *.cdninstagram.com *.ytimg.com *.siteimproveanalytics.io curatorio.s3.amazonaws.com; media-src 'self' ssl.gstatic.com *.fbcdn.net *.twimg.com curatorio.s3.amazonaws.com; frame-src 'self' www.youtube.com *.addthis.com seqwater.mysocialpinpoint.com *.google.com youtu.be my2.siteimprove.com *.facebook.com; frame-ancestors 'self' unitywater.com *.unitywater.com urbanutilities.com.au *.redland.qld.gov.au *.goldcoast.qld.gov.au *.logan.qld.gov.au waternet.corporate.local; child-src 'self' www.youtube.com; font-src 'self' 'unsafe-inline' themes.googleusercontent.com fonts.gstatic.com cdn.curator.io; connect-src 'self' *.google-analytics.com *.doubleclick.net my2.siteimprove.com id.siteimprove.com api.curator.io *.addthis.com *.pingdom.net; report-uri /report-csp-violation 1
upgrade-insecure-requests; default-src 'none'; base-uri 'none'; form-action 'self' https://calmray-baltic-exchange.eu.auth0.com; connect-src 'self' https://m.addthis.com https://fonts.googleapis.com https://www.google-analytics.com https://*.typekit.net https://balticexchange-manifest-blacksun.clmry.co; font-src data: 'self' https://cloud.typenetwork.com https://fonts.gstatic.com https://use.typekit.net; img-src 'self' data: blob: https://www.addevent.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://www.google.co.uk https://www.google-analytics.com https://img.evbuc.com https://maps.googleapis.com https://maps.gstatic.com; media-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://addevent.com https://www.googletagmanager.com https://www.google-analytics.com https://graph.facebook.com https://www.gstatic.com https://v1.addthisedge.com https://www.google.com https://maps.googleapis.com https://s7.addthis.com https://m.addthis.com; style-src 'self' 'unsafe-inline' https://cloud.typenetwork.com https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net; frame-ancestors 'self'; frame-src 'self' https://www.google.com https://player.vimeo.com https://s7.addthis.com https://www.youtube.com; 1
frame-src 'self' https://*.audioeye.com https://lordabbett.demdex.net/ https://vds.issproxy.com https://www.googletagmanager.com https://pages.exacttarget.com https://players.brightcove.net https://*.go-mpulse.net https://html5-player.libsyn.com https://twitter.com https://*.twitter.com https://pbs.twimg.com https://*.financialtrans.com; 1
default-src 'self' studwork.org *.cloudfront.net *.studwork.org mc.yandex.ru *.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: d2wy8f7a9ursnm.cloudfront.net cdnjs.cloudflare.com connect.facebook.net vk.com *.playbuzz.com  yastatic.net studwork.org *.studwork.org ajax.googleapis.com www.google-analytics.com *.google.com *.gstatic.com *.yandex.ru *.chatra.io www.googletagmanager.com; style-src 'self' *.cloudflare.com studwork.org *.studwork.org *.googleapis.com *.google.com *.chatra.io 'unsafe-inline'; img-src 'self' data: *.cloudfront.net vk.com *.facebook.com img.playbuzz.com *.algebra24.ru studwork.org studwork.s3.eu-central-1.amazonaws.com s3.eu-central-1.amazonaws.com *.studwork.org *.google.com *.google.ru www.google-analytics.com *.yandex.ru *.yandex.net *.gstatic.com *.doubleclick.net *.chatra.io www.googletagmanager.com *.fbcdn.net *.cdninstagram.com; font-src 'self' *.cloudflare.com *.studwork.org *.gstatic.com data: *.yandex.ru; connect-src 'self' ws: wss: *.playbuzz.com studwork.org *.studwork.org *.yandex.ru *.chatra.io *.bugsnag.com *.googleapis.com *.google-analytics.com stats.g.doubleclick.net; frame-src 'self' www.youtube.com studwork.s3.eu-central-1.amazonaws.com d1uw69x4c2zrim.cloudfront.net d1he4a7838so59.cloudfront.net yastatic.net *.studwork.org *.chatra.io *.google.com *.facebook.com w.soundcloud.com; worker-src 'self' data: *.studwork.org; media-src 'self' data: *.yandex.ru *.yandex.net d1he4a7838so59.cloudfront.net 1
default-src 'none'; font-src 'self' https://fonts.gstatic.com https://cdn1.readspeaker.com/ data:; script-src 'unsafe-eval' 'self' 'sha256-ktOsxk05p1m2Zd+vfpvVHUYrF8Tgl1Pk78kHxJqGu0E=' https://www.google-analytics.com/ https://www.googletagmanager.com/ https://maps.google.com https://maps.gstatic.com https://maps.googleapis.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn1.readspeaker.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://cdn1.readspeaker.com/; img-src 'self' data: https://alrijne.4cloud.nl https://stats.g.doubleclick.net https://www.google-analytics.com/ https://maps.google.com/ https://maps.gstatic.com; form-action 'self'; base-uri 'self'; frame-ancestors 'self'; frame-src https://www.youtube-nocookie.com/ https://www.google.com/ https://app-eu.readspeaker.com/ https://rstts-eu.readspeaker.com/; manifest-src 'self'; connect-src 'self' https://www.google-analytics.com https://app-eu.readspeaker.com/ https://app-eu.readspeaker.com/ https://rstts-eu.readspeaker.com/ https://media-eu.readspeaker.com/; media-src https://app-eu.readspeaker.com/ https://app-eu.readspeaker.com/ https://rstts-eu.readspeaker.com/; object-src 'none' 1
frame-ancestors 'self' https://www.locatiekiezer.nl 1
script-src 'unsafe-inline' 'unsafe-eval' style-src 'self' 'unsafe-inline' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://diffuser-cdn.app-us1.com/diffuser/ https://www.googletagmanager.com/ https://npmcdn.com/isotope-layout@3/dist/ *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; img-src 'self' https://www.loymark.com/images/ *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com *.cloudflare.com *.youtube.com *.ytimg.com *.bootstrapcdn.com *.jsdelivr.net *.googletagmanager.com *.google-analytics.com *.unpkg.com unpkg.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.youtube.com *.bootstrapcdn.com *.jsdelivr.net *.cloudflare.com *.unpkg.com; font-src 'self' *.gstatic.com *.bootstrapcdn.com 1
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=index&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=09ee1875-5e06-4ab5-be54-c8c7f7129747 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://goiania.go.gov.br *.goiania.go.gov.br https://fast.wistia.com https://www.googletagmanager.com *.fontawesome.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com fast.wistia.com https://www.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline' *.fontawesome.com https://fonts.googleapis.com; object-src 'self' https://goiania.go.gov.br *.goiania.go.gov.br; base-uri 'self'; frame-ancestors 'self'; connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com https://www.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com; frame-src 'self' https://goiania.go.gov.br *.goiania.go.gov.br https://goiania.nucleogov.com.br https://www.google.com https://www.facebook.com https://s-static.ak.facebook.com https://www.youtube.com; img-src 'self' data: blob: *.gravatar.com https://*; manifest-src 'self'; media-src 'self'; worker-src 'none'; 1
default-src 'none'; connect-src 'self' https://api.livechatinc.com/ wss://ws3.hotjar.com/api/ https://analytics.jst.ai/api/analytics/ https://analytics.jst.ai/api/session/ https://bam.nr-data.net/events/1/239dd8d6a4 https://d.adroll.com/segment/KLHAGB4PQRDAZK2BRGDAY3/N6CLSWZXNVDYXMAGWZ7HLO https://forms.hubspot.com/collected-forms/v1/config/json https://my.jst.ai/ifm_4.1.html https://my.jst.ai/promocode/getcode_4.1.html https://settings.luckyorange.net https://stats.g.doubleclick.net/j/collect https://www.facebook.com/tr/ https://www.google-analytics.com/collect https://www.google-analytics.com/j/collect https://in.hotjar.com/api/v2/client/sites/1661351/visit-data https://watsons-app.quantummetric.com https://hubspot-forms-static-embed.s3.amazonaws.com/prod/5117171/968477ab-7ead-4482-a503-614d359cdde8.json.gz https://www.google.com/recaptcha/api.js https://forms.hsforms.com/emailcheck/ https://forms.hubspot.com/collected-forms/submit/form *.purechat.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://tools.justuno.com/ https://adservice.google.ca/ https://adservice.google.com/ https://adservices.brandcdn.com/ https://analytics.jst.ai/ https://api.braintreegateway.com/ https://bam.nr-data.net/ https://cdn.jsdelivr.net/ https://cdn.jst.ai/ https://cdn.livechatinc.com/ https://client-analytics.braintreegateway.com/ https://connect.facebook.net/ https://d.adroll.mgr.consensu.org/consent/iabcheck/KLHAGB4PQRDAZK2BRGDAY3 https://d10lpsik1i8c69.cloudfront.net/w.js https://forms.hsforms.com/ https://googleads.g.doubleclick.net/ https://js-agent.newrelic.com/ https://js.braintreegateway.com/ https://js.hs-analytics.net/ https://js.hs-banner.com/ https://js.hs-scripts.com/ https://js.hscollectedforms.net/ https://js.hsforms.net/ https://maps.google.com/ https://maps.googleapis.com/ https://my.jst.ai/ https://s.adroll.com/ https://script.hotjar.com/ https://secure.livechatinc.com/ https://static.hotjar.com/ https://survey.g.doubleclick.net/ https://tag.brandcdn.com/autoscript/ https://www.google-analytics.com/analytics.js https://www.google-analytics.com/gtm/js https://www.google-analytics.com/plugins/ua/ec.js https://www.google.com/pagead/conversion_async.js https://www.google.com/recaptcha/ https://www.googleadservices.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://www.paypalobjects.com/ https://apis.google.com/ https://www.google.com/ https://d.adroll.com/consent/check/ https://adservice.google.com.ua/ https://cdn.quantummetric.com/qscripts/quantum-watsons.js https://pippio.com/api/sync/ https://adservice.google.pl/ https://api.livechatinc.com/  *.purechat.com *.purechatcdn.com; style-src 'self' 'unsafe-inline' https://cdn.jst.ai/ https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://p.typekit.net/ https://use.typekit.net/; frame-ancestors 'self'; form-action 'self' https://survey.g.doubleclick.net/ https://www.facebook.com/tr/ https://forms.hsforms.com/; media-src 'self' https://cdn.livechatinc.com; img-src 'self' data: https://nextroll.com/ https://www.google.pl/ https://adservice.google.pl/ https://b.stats.paypal.com https://c.paypal.com https://checkout.paypal.com https://d.adroll.com https://forms.hsforms.com https://googleads.g.doubleclick.net https://graphics.jst.ai https://insight-event.brandcdn.com https://insight.adsrvr.org https://track.hubspot.com https://watsons-cincinnati.s3.us-east-2.amazonaws.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.paypalobjects.com https://www.magentocommerce.com https://www.xtento.com https://chd.stats.paypal.com/counter2.cgi https://perf.hsforms.com/embed/v3/counters.gif https://pixel.advertising.com/ups/55980/sync https://dsum-sec.casalemedia.com/rum https://pixel.rubiconproject.com/tap.php https://sync.outbrain.com/cookie-sync https://simage2.pubmatic.com/AdServer/Pug https://d.adroll.com/cm/r/in https://sync.taboola.com/sg/adroll-network/1/rtb-h https://eb2.3lift.com/xuid https://ups.analytics.yahoo.com/ups/55980/sync https://www.google.com.ua/pagead/1p-user-list/984698218/ https://www.google.com.ua/ads/ga-audiences https://ads.yahoo.com/cms/v1 https://www.google.com.ua/pagead/ https://forms.hubspot.com/collected-forms/submit/form mage https://dpm.demdex.net the image https://maps.gstatic.com/mapfiles/ https://maps.googleapis.com/maps/vt https://cbks0.googleapis.com/cbk https://lh3.ggpht.com/ https://geo0.ggpht.com/cbk https://geo1.ggpht.com/cbk https://geo2.ggpht.com/cbk https://geo3.ggpht.com/cbk; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://www.xtento.com; frame-src 'self' https://survey.g.doubleclick.net/ https://forms.hsforms.com/ https://adservices.brandcdn.com https://assets.braintreegateway.com https://bid.g.doubleclick.net https://c.paypal.com https://cdn.jst.ai https://d1eoo1tco6rr5e.cloudfront.net https://insight.adsrvr.org https://my.matterport.com https://secure.livechatinc.com https://vars.hotjar.com https://www.google.com https://www.xtento.com https://app.hubspot.com https://www.facebook.com/ https://cdn.flipsnack.com/; worker-src blob:; 1
frame-ancestors https://www.fundacionendesa.org https://www.endesaeduca.com 1
default-src 'self' 'unsafe-inline' https://piwik.bzga.de/ https://fonts.gstatic.com/ https://fonts.googleapis.com/ https://www.youtube-nocookie.com/ https://app.dialogfeed.com/; img-src 'self' data: https://piwik.bzga.de/ https://service.bzga.de/ https://www.bzga.de/ https://jwpltx.com/ https://maps.gstatic.com/ https://maps.googleapis.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.p.jwpcdn.com/ https://piwik.bzga.de/ https://maps.googleapis.com/ 1
default-src 'self' moiprogrammy.com;style-src 'self' 'unsafe-inline' https://vk.com http://vk.com https://ajax.googleapis.com http://ajax.googleapis.com;frame-src 'self' https://vk.com http://vk.com https://*.doubleclick.net http://*.doubleclick.net https://*.yastatic.net http://*.yastatic.net https://yastatic.net http://yastatic.net;media-src 'self';connect-src 'self' https://*.yandex.ru http://*.yandex.ru;font-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com http://ajax.googleapis.com https://vk.com http://vk.com http://*.googlesyndication.com https://*.googlesyndication.com https://*.yandex.ru http://*.yandex.ru https://*.google.de http://*.google.de https://*.google.ru http://*.google.ru https://*.google.com http://*.google.com https://*.google.com.ua http://*.google.com.ua https://*.yastatic.net http://*.yastatic.net https://yastatic.net http://yastatic.net https://*.googletagservices.com http://*.googletagservices.com;img-src 'self' http://counter.yadro.ru https://counter.yadro.ru https://vk.com http://vk.com https://*.yandex.net http://*.yandex.net https://*.yandex.ru http://*.yandex.ru data: blob: filesystem:; 1
frame-ancestors 'self' https://beebole-apps.com 1
frame-ancestors https://www.upsefulfillment.com https://upsprodportal.upsefulfillment.com; 1
frame-ancestors 'self' https://chat.mercury.co.nz https://www.mercury.co.nz 1
default-src 'unsafe-inline' *; img-src 'unsafe-inline' *; media-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://use.typekit.net *; font-src 'self' data:; form-action 'self' *; frame-ancestors 'self'; reflected-xss block; 1
default-src 'self'; font-src * 'unsafe-inline';img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval' https://webcomponents.spektrix.com https://tickets.aberdeenperformingarts.com; style-src * 'unsafe-inline'; frame-src * 'unsafe-inline'; connect-src * 'unsafe-inline'; script-src-elem * 'unsafe-inline' 'unsafe-eval' https://webcomponents.spektrix.com https://tickets.aberdeenperformingarts.com; 1
default-src *; connect-src  *; font-src 'self'; frame-src https://* http://* *; img-src https://* http://* * data:; object-src 'self'; script-src 'self' https://* http://* * 'unsafe-inline' 'report-sample'; style-src * https://* http://* * 'unsafe-inline'; 1
frame-ancestors teams.microsoft.com *.teams.microsoft.com https://*.atlassian.net/ dev.azure.com *.visualstudio.com wobo-mskrs-test.gallery.vsassets.io 1
default-src 'self' *.shariaty.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com ; frame-ancestors 'self' https://trustseal.enamad.ir 1
default-src 'unsafe-eval' 'unsafe-inline' 'self' data: blob: ws: wss: cones.conifer.rhizome.org supporter.conifer.rhizome.org *.sentry.io sentry.io *.twitter.com connect.facebook.net *.facebook.com rhizome.us1.list-manage.com; form-action 'self' rhizome.us1.list-manage.com data: 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://brightthemag.com https://*.brightthemag.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
script-src-elem 'self' 'unsafe-inline' https://*.googleapis.com https://bat.bing.com https://www.google-analytics.com https://maps.gstatic.com https://www.google.com/ https://www.googletagmanager.com https://www.gstatic.com/ 'unsafe-eval' 1
default-src 'none'; img-src 'self' https://*.leoninedistribution.com data:; font-src 'self' https: data:; script-src 'self' https: 'unsafe-eval' 'unsafe-inline' blob:; style-src 'self' https: 'unsafe-eval' 'unsafe-inline'; connect-src 'self' https:; frame-src 'self' https:; object-src 'self' https:; media-src 'self' https:; form-action 'self'; base-uri 'self' 1
default-src 'self' ; object-src 'self' ; style-src 'self' https://fonts.googleapis.com/css ; font-src 'self' https://fonts.gstatic.com/s/cookie/v12/ ; frame-src https://blog.c22.cc https://asciinema.org https://www.youtube.com ; script-src 'self' https://asciinema.org/a/wI21yxJc5xv42qvRa3cSExhgR.js https://www.google-analytics.com ; img-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.se/ads/ https://www.google.ae/ads/ https://www.google.at/ads/ https://www.google.be/ads/ https://www.google.ca/ads/ https://www.google.ch/ads/ https://www.google.cl/ads/ https://www.google.cn/ads/ https://www.google.co.id/ads/ https://www.google.co.il/ads/ https://www.google.co.in/ads/ https://www.google.co.jp/ads/ https://www.google.co.kr/ads/ https://www.google.co.ma/ads/ https://www.google.co.nz/ads/ https://www.google.co.uk/ads/ https://www.google.co.za/ads/ https://www.google.com.ar/ads/ https://www.google.com.au/ads/ https://www.google.com.br/ads/ https://www.google.com.co/ads/ https://www.google.com.gr/ads/ https://www.google.com.gt/ads/ https://www.google.com.hk/ads/ https://www.google.com.mm/ads/ https://www.google.com.mx/ads/ https://www.google.com.np/ads/ https://www.google.com.ph/ads/ https://www.google.com.pk/ads/ https://www.google.com.pt/ads/ https://www.google.com.sg/ads/ https://www.google.com.tr/ads/ https://www.google.com.tw/ads/ https://www.google.com.zw/ads/ https://www.google.com/ads/ https://www.google.cz/ads/ https://www.google.de/ads/ https://www.google.dk/ads/ https://www.google.ee/ads/ https://www.google.es/ads/ https://www.google.fr/ads/ https://www.google.iq/ads/ https://www.google.it/ads/ https://www.google.no/ads/ https://www.google.pl/ads/ https://www.google.ro/ads/ https://www.google.rs/ads/ https://www.google.ru/ads/ https://www.google.co.tz/ads/ https://www.google.co.th/ads/ https://www.google.com.eg/ads/ https://www.google.com.ng/ads/ https://www.google.fi/ads/ https://www.google.sk/ads/ https://www.google.com.pe/ads https://www.google.com.vn/ads https://www.google.lk/ads https://www.google.co.zw/ads https://www.google.nl/ads https://www.google.com.bh/ads https://www.gstatic.com/images/branding/product/2x/translate_24dp.png ; connect-src https://stats.g.doubleclick.net https://www.google-analytics.com/ ; report-uri  https://digininja.report-uri.io/r/default/csp/enforce ; 1
base-uri 'self'; connect-src 'self' https://framasoft.org; default-src 'none'; font-src 'self' data: https://framasoft.org; form-action 'self' data:; img-src 'self' data: https://old.framatube.org https://framasoft.org https://stats.framasoft.org https://framaclic.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://framasoft.org; style-src 'self' 'unsafe-inline' https://framasoft.org; media-src https://old.framatube.org; frame-src https://framasoft.org 1
default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data: 1
default-src blob: 'unsafe-inline' 'self'; worker-src 'self' blob:; connect-src *.smartweb.tw *.smartweb.migulu.com www.google-analytics.com *.google.com *.google.com.tw *.bing.com s.yimg.com *.doubleclick.net www.facebook.com www.googletagmanager.com www.google.com.hk www.google.com.sg fcm.googleapis.com 'self'; script-src *.smartweb.tw *.smartweb.migulu.com static.smartweb.tw *.googletagmanager.com *.facebook.net api.facebook.com apis.google.com tagmanager.google.com syndication.twitter.com www.googleadservices.com googleads.g.doubleclick.net https://unpkg.com/popper.js@1.12.6/dist/umd/popper.js *.google-analytics.com https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js *.yimg.com *.bing.com sp.analytics.yahoo.com ajax.googleapis.com www.youtube.com s.ytimg.com https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js cse.google.com www.google.com platform.twitter.com d.line-scdn.net/n/line_tag/public/release/v1/lt.js tpc.googlesyndication.com cdn.ampproject.org 'unsafe-inline' 'self'; style-src *.smartweb.tw *.smartweb.migulu.com use.fontawesome.com fonts.googleapis.com *.google.com static.smartweb.tw 'unsafe-inline' 'self'; font-src *.smartweb.tw *.smartweb.migulu.com use.fontawesome.com fonts.gstatic.com 'self'; child-src *.smartweb.tw *.smartweb.migulu.com *.twitter.com *.facebook.com *.google.com bid.g.doubleclick.net www.youtube.com  tpc.googlesyndication.com www.googletagmanager.com 'self'; img-src *.smartweb.tw *.smartweb.migulu.com *.google-analytics.com *.google.com *.google.com.tw google.pl googleads.g.doubleclick.net lh3.googleusercontent.com www.google.cn www.google.co.in www.google.co.jp www.google.co.nz www.google.com www.google.com.hk www.google.com.mx www.google.com.my www.google.com.pa www.google.com.ph www.google.com.sg www.google.com.vn www.google.fr www.googleadservices.com www.googleapis.com www.googletagmanager.com *.bing.com *.facebook.com *.g.doubleclick.net *.gstatic.com *.ytimg.com connect.facebook.net cx.atdmt.com img.smartweb.tw picture.smartweb.tw picture2.smartweb.tw scdn.line-apps.com static.smartweb.tw static.xx.fbcdn.net stats.g.doubleclick.net tr.line.me ups.analytics.yahoo.com 'self' data:; report-uri /?csp_report=1 1
default-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 1
script-src 'self' https: 'unsafe-eval' 'unsafe-inline'; font-src 'self' https: 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://cdn.x0r.be; img-src 'self' https: data: blob: https://cdn.x0r.be; style-src 'self' https://cdn.x0r.be 'nonce-5zAST5puNsME01PSK1Ze7A=='; media-src 'self' https: data: https://cdn.x0r.be; frame-src 'self' https:; manifest-src 'self' https://cdn.x0r.be; connect-src 'self' data: blob: https://cdn.x0r.be https://cdn.x0r.be wss://x0r.be; script-src 'self' https://cdn.x0r.be; child-src 'self' blob: https://cdn.x0r.be; worker-src 'self' blob: https://cdn.x0r.be 1
child-src 'self' blob: https://connect.facebook.net https://www.youtube.com sumo.com load.sumo.com fancy.com slashdot.org; connect-src 'self' https://rs.fullstory.com https://sentry.io https://api.mixpanel.com https://www.facebook.com https://*.logrocket.io sumo.com load.sumo.com *.google.com www.google-analytics.com stats.g.doubleclick.net www.google.com ws: wss: api.optmnstr.com a.mstrlytcs.com; font-src 'self' fonts.gstatic.com; img-src 'self' data: https://p.praymorenovenas.com sumo.b-cdn.net sumo.com load.sumo.com www.google-analytics.com www.facebook.com www.diigo.com www.houzz.com praymoreretreat.org slashdot.org a.optmnstr.com praymoreretreat.org; script-src blob: data: cdn.logrocket.io 'self' 'unsafe-inline' *.mxpnl.com https://fullstory.com https://ajax.cloudflare.com load.sumome.com load.sumo.com sumo.b-cdn.net https://api.bufferapp.com *.facebook.com https://www.linkedin.com widgets.pinterest.com buttons.reddit.com www.reddit.com https://reddit.com www.yummly.com www.googletagmanager.com www.google-analytics.com connect.facebook.net www.soup.io images.slashdot.org www.houzz.com www.diigo.com a.optmnstr.com ajax.googleapis.com; style-src 'self' 'unsafe-inline' cdn.quilljs.com sumo.b-cdn.net load.sumo.com fonts.googleapis.com www.houzz.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.co.za https://cdn.qumucloud.com http://www.w3.org/2000/svg https://ajax.cloudflare.com https://analytics.twitter.com https://cdn.cookielaw.org https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://cookiesstaging.blob.core.windows.net https://decibelinsight.net https://fast.fonts.net https://fonts.gstatic.com https://geolocation.onetrust.com https://googleads.g.doubleclick.net https://iam.investecassetmanagement.com https://investecam.kuluvalley.com https://ninetyone.qumucloud.com https://optanon.blob.core.windows.net https://pi.pardot.com https://rum-static.pingdom.net https://script.hotjar.com https://sjs.bizographics.com https://snap.licdn.com https://static.ads-twitter.com https://static.hotjar.com https://tagmanager.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://www.google.co.za https://cdn.qumucloud.com https://investecam.kuluvalley.com https://ninetyone.qumucloud.com https://tagmanager.google.com https://fonts.googleapis.com https://ssl.gstatic.com https://www.gstatic.com https://www.google.co.uk https://fast.fonts.net https://api2.fonts.com https://cdn.cookielaw.org https://optanon.blob.core.windows.net http://www.w3.org/2000/svg; img-src 'self' data: 'unsafe-inline' https://www.google.co.za https://www.googletagmanager.com https://www.gstatic.com https://t.co https://www.facebook.com https://www.google.co.uk https://ssl.gstatic.com https://google.co.uk https://tagmanager.google.com https://www.linkedin.com https://p.adsymptotic.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://www.google.com https://www.google.co.in https://stats.g.doubleclick.net https://www.google-analytics.com https://cdn.cookielaw.org https://cdn.qumucloud.com https://investecam.kuluvalley.com https://ninetyone.qumucloud.com https://investecam.kuluvalley.com/kulu https://www.w3.org/2000/svg; font-src 'unsafe-inline' 'self' https://cdn.qumucloud.com https://fonts.gstatic.com https://fast.fonts.net https://api2.fonts.com; worker-src 'self' 'unsafe-inline' blob: https://optanon.blob.core.windows.net 1
default-src 'self' fruux.com *.fruux.com www.google.com; script-src 'self' https://*.stripe.com www.google-analytics.com ssl.google-analytics.com cdn.heapanalytics.com en.gravatar.com cdn.ravenjs.com www.google.com www.gstatic.com; img-src 'self' data: https://*.stripe.com www.google-analytics.com ssl.google-analytics.com *.doubleclick.net heapanalytics.com secure.gravatar.com placehold.it s3.eu-central-1.amazonaws.com; style-src 'self' 'unsafe-inline' https://*.stripe.com fonts.googleapis.com; font-src 'self' fonts.gstatic.com; frame-src 'self' https://*.stripe.com www.google.com 1
frame-src 'self' https://www.youtube.com 1
default-src 'self' http://www.youtube.com;style-src 'unsafe-inline' *;frame-src *;img-src * data:;media-src *;font-src *;connect-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://google.ru http://google.ru https://google.com http://google.com https://*.google.ru http://*.google.ru https://*.google.com http://*.google.com https://*.googletagservices.com http://*.googletagservices.com http://*.googleadservices.com https://*.googleadservices.com http://*.googlesyndication.com https://*.googlesyndication.com https://googleapis.com http://googleapis.com https://*.googleapis.com http://*.googleapis.com http://google-analytics.com https://google-analytics.com http://*.google-analytics.com https://*.google-analytics.com https://yandex.ru https://yandex.net http://yandex.ru http://yandex.net https://*.yandex.ru https://*.yandex.net http://*.yandex.ru http://*.yandex.net https://yastatic.net http://yastatic.net https://*.yastatic.net http://*.yastatic.net http://rambler.ru https://rambler.ru http://*.rambler.ru https://*.rambler.ru https://vk.com http://vk.com https://*.vk.com http://*.vk.com https://*.facebook.com http://lc2ads.ru http://ladycash.ru http://faggrim.com http://*.lc2ads.ru http://*.ladycash.ru http://*.faggrim.com http://*.m2corp.ru http://*.pluso.ru http://*.kitbit.net http://*.insigit.com http://*.openstat.net http://*.zatexta.com http://*.addthis.com http://*.yandex.st http://*.facebook.net http://*.twitter.com http://*.userapi.com https://*.yandex.st https://*.facebook.net https://*.twitter.com https://*.userapi.com https://*.github.com https://*.githubusercontent.com http://*.disqus.com/ https://*.gstatic.com http://*.lcads.ru http://*.teaser.cc http://*.adsniper.ru http://*.disquscdn.com http://*.ladycoin.ru http://*.poketall.ru http://*.cashandfavor.ru http://*.purecash.ru http://*.busyprice.ru http://*.servemoney.ru http://*.levelpay.ru http://*.goodkind.ru http://*.purecapital.ru http://userapi.com/ http://*.cashheaven.ru http://*.payandpray.ru http://*.moneytrap.ru http://*.pandre10.ru http://zatexta.com http://yandex.st https://yandex.st http://*.criteo.com/ http://st.ad.smaclick.com http://*.vn-chk777.com/ http://*.ads1-adnow.com/ http://*.cdn1now.com https://*.cdn1now.com https://cdn1now.com http://cdn1now.com http://*.cdn2now.com https://*.cdn2now.com https://cdn2now.com http://cdn2now.com http://*.cdn3now.com https://*.cdn3now.com https://cdn3now.com http://cdn3now.com http://*.cdn4now.com https://*.cdn4now.com https://cdn4now.com http://cdn4now.com http://*.cdn5now.com https://*.cdn5now.com https://cdn5now.com http://cdn5now.com http://*.cdn6now.com https://*.cdn6now.com https://cdn6now.com http://cdn6now.com http://*.cdn7now.com https://*.cdn7now.com https://cdn7now.com http://cdn7now.com http://*.cdn8now.com https://*.cdn8now.com https://cdn8now.com http://cdn8now.com http://*.cdn9now.com https://*.cdn9now.com https://cdn9now.com http://cdn9now.com http://*.cdn10now.com https://*.cdn10now.com https://cdn10now.com http://cdn9now.com ;report-uri ../../csp/log.php 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.navexglobal.com *.ethicspoint.com *.ethicspoint.eu *.navexone.eu *.navexglobal.eu ethicspoint.eu cdn.pendo.io; connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.navexglobal.com *.ethicspoint.com *.ethicspoint.eu *.navexone.eu *.navexglobal.eu ethicspoint.eu *.truste.com *.newrelic.com *.nr-data.net *.pendo.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ethicspoint.com *.ethicspoint.eu *.navexone.eu *.navexglobal.eu ethicspoint.eu *.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5068799715311616.storage.googleapis.com *.truste.com *.newrelic.com *.nr-data.net ajax.googleapis.com ; img-src 'self' data: *.ethicspoint.com *.ethicspoint.eu *.navexone.eu *.navexglobal.eu ethicspoint.eu *.truste.com *.pendo.io pendo-static-5068799715311616.storage.googleapis.com *.navexglobal.com; frame-src 'self' 'unsafe-eval' *.navexglobal.com *.policytech.com *.ethicspoint.com *.ethicspoint.eu *.navexone.eu *.navexglobal.eu ethicspoint.eu player.vimeo.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.pendo.io pendo-static-5068799715311616.storage.googleapis.com fonts.googleapis.com; font-src 'self' fonts.gstatic.com ajax.googleapis.com; frame-ancestors 'self' *.pendo.io *.ethicspoint.eu; 1
default-src 'none'; script-src 'self' 'unsafe-inline' https://heinlein-support.de/piwik/ 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' data: 'unsafe-inline' https://www.heinlein-support.de/ https://secure.gravatar.com/; frame-ancestors 'self'; frame-src 'self' https://www.youtube.com/; connect-src 'self' https://yoast.com/; font-src 'self' data: https://fonts.gstatic.com/; object-src 'self'; form-action 'self' javascript:; base-uri 'none' 1
frame-ancestors 'self' http://webvisor.com https://webvisor.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.childrens-ministry-deals.com childrens-ministry-deals.com *.crazyegg.com *.gstatic.com lightboxapi1.azurewebsites.net lightboxapi2.azurewebsites.net lightboxapi3.azurewebsites.net *.googleadservices.com *.swncdn.com *.google.com *.bing.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.blueconic.net *.googleapis.com *.sitescout.com *.sermonspice.com ct.pinterest.com *.worshiphousemedia.com worshiphousemedia.com *.salemchurchproducts.com *.salemwebnetwork.com *.lightboxcdn.com *.ubembed.com *.bootstrapcdn.com *.jwpcdn.com fonts.gstatic.com *.s3.amazonaws.com salemmediagroup.blueconic.net *.g.doubleclick.net  *.kissmetrics.com *.googlesyndication.com *.livechatinc.com *.livechat.com livechat.com; 
	        script-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.childrens-ministry-deals.com childrens-ministry-deals.com *.sitescout.com *.sermonspice.com *.gstatic.com *.lightboxcdn.com *.googleapis.com bid.g.doubleclick.net *.google.com pubads.g.doubleclick.net *.s3.amazonaws.com worshiphousemedia.s3.amazonaws.com *.google-analytics.com *.salemwebnetwork.com *.facebook.com *.googlesyndication.com *; 
	        img-src 'unsafe-inline' 'unsafe-eval' data: *; 
	        frame-src 'unsafe-inline' 'unsafe-eval' data: www.childrens-ministry-deals.com childrens-ministry-deals.com *.sitescout.com ct.pinterest.com *.worshiphousemedia.com worshiphousemedia.com *.salemchurchproducts.com *.salemwebnetwork.com *.lightboxcdn.com *.ubembed.com *.bootstrapcdn.com *.jwpcdn.com fonts.gstatic.com *.s3.amazonaws.com salemmediagroup.blueconic.net  *.g.doubleclick.net *.lightboxcdn.com *.kissmetrics.com *.facebook.com *.googlesyndication.com *;
	        style-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.childrens-ministry-deals.com childrens-ministry-deals.com *.googleapis.com *; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' https://* 1
frame-ancestors 'self' test-ui.cyclos.org demo-ui.cyclos.org demo-ui-bar.cyclos.org ui.testcyclos.circuitnederland.nl 1
default-src westend61.de www.westend61.de piwik.westend61.de; connect-src 'self' westend61.de piwik.westend61.de https://monitor.westend61.de https://let.die-bildbeschaffer.de https://assetmanager.westend61.de https://www.google-analytics.com https://stats.g.doubleclick.net https://ct.pinterest.com; font-src 'self'; child-src https://monitor.westend61.de https://piwik.westend61.de https://player.vimeo.com https://www.paypal.com https://www.youtube.com https://www.youtube-nocookie.com https://let.die-bildbeschaffer.de; img-src 'self' data: https://images.westend61.de https://images0.westend61.de https://images1.westend61.de https://piwik.westend61.de https://www.google-analytics.com https://www.google.com https://www.google.de https://stats.g.doubleclick.net https://let.die-bildbeschaffer.de https://ct.pinterest.com https://px.ads.linkedin.com https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://piwik.westend61.de/piwik.js https://www.paypalobjects.com/ https://www.google-analytics.com https://www.googletagmanager.com https://s.pinimg.com https://snap.licdn.com https://px.ads.linkedin.com https://www.plant-for-the-planet.org https://let.die-bildbeschaffer.de https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://let.die-bildbeschaffer.de; manifest-src https://www.westend61.de; frame-src westend61.de https://www.paypal.com https://www.youtube-nocookie.com https://player.vimeo.com; object-src 'self' blob:; 1
default-src 'self' *.assmann.com uberall.com https://stats.g.doubleclick.net;                     script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com https://komsa.freischalt-portal.de *.mobile-order.de  http://media.mobile-order.de *.komsa.net komsa.com *.usercentrics.eu *.assmann.com https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com *.uberall.com uberall.com;                     style-src 'self' https://komsa.freischalt-portal.de *.komsa.net komsa.com 'unsafe-inline' *.gstatic.com fonts.googleapis.com *.assmann.com https://tagmanager.google.com;                     img-src 'self' data: *.karlo.de karlo.de *.komsa.com komsa.com *.usercentrics.eu *.smallbug.de *.mobile-order.de http://media.mobile-order.de https://komsa.freischalt-portal.de https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net *.komsa.net http://karlo.de http://www.karlo.de http://media.komsa.com https://media.komsa.com https://www.komsa-systems.com easyfilius.de http://www.easyfilius.de *.w-support.com *.assmann.com *.uberall.com https://s3.eu-central-1.amazonaws.com/uberall-userpics-prod/ http://s.mmgo.io https://tagmanager.google.com *.gstatic.com;                     font-src 'self' 'unsafe-inline' *.gstatic.com;                     frame-src 'self' usercentrics.mgr.consensu.org *.piceasoft.com https://shop.w-support.com *.komsa.com *.komsa.net *.youtube.com *.youtube-nocookie.com *.google.com https://www.googletagmanager.com *.mobile-order.de http://media.mobile-order.de;                     media-src http://media.komsa.com https://media.komsa.com https://mam.komsa.net *.mobile-order.de  http://media.mobile-order.de;                     object-src 'self' *.mobile-order.de http://media.mobile-order.de;                     connect-src 'self' *.usercentrics.eu *.assmann.com https://www.google-analytics.com https://stats.g.doubleclick.net https://uberall.com 1
default-src 'self';img-src 'self' data: https://*.tile.openstreetmap.fr/osmfr/;style-src 'self' 'unsafe-inline';frame-src 'self' https://static.addtoany.com/ https://www.google.com/recaptcha/; script-src 'self' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://static.addtoany.com/; font-src 'self' data:; 1
default-src * 'unsafe-inline' 'unsafe-eval';img-src data: blob: * ;frame-ancestors 'self' *.moneynet.com.tw *.money.com.tw *.cwmoney.net; 1
default-src https:;connect-src https:;font-src https: data:;frame-src https: twitter:;frame-ancestors https:;img-src https: data:;media-src https:;object-src https:;script-src 'unsafe-inline' 'unsafe-eval' https:;style-src 'unsafe-inline' https:; 1
default-src 'self'; 		script-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://static.proworkflow.com; 		style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://fonts.googleapis.com https://www.proworkflow.com https://static.proworkflow.com; 		font-src 'self' https://www.proworkflow.com https://static.proworkflow.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com;  		img-src 'self' https://ajax.googleapis.com https://www.proworkflow.com https://static.proworkflow.com; 1
default-src https:; img-src https: data:; style-src https: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval'; 1
frame-ancestors 'self' http://webvisor.com ardes.bg *.ardes.bg 1
connect-src 'self' *.100gadgets.kz *.100gadgets.by *.100gadgets.ru 100gadgets.ru mc.yandex.ru *.google-analytics.com yandex.ru *.jivosite.com wss://*.jivosite.com  *.rficb.ru; 1
upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval'; img-src https: 'self' blob: data:; report-uri https://e46468ffd14a954844abf8fe208613d8.report-uri.com/r/d/csp/enforce 1
frame-ancestors https://*.johansf.tech https://johansf.tech 1
block-all-mixed-content; frame-ancestors 'self' https://*.univision.com 1
default-src 'self' 'unsafe-inline'; img-src 'self' data:; script-src 'self' 'unsafe-inline'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; frame-src https://www.youtube.com 1
default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' blob:; frame-ancestors * 'self'; report-uri https://acfranchise.report-uri.com/r/d/csp/enforce 1
default-src 'self' https: *.transunion.com *.truecredit.com *.addthis.co *.amazon-adsystem.com *.youtube.com *.brightcove.com *.brightcove.net *.doubleclick.net *.company-target.com *.adsrvr.org dmtry.com *.dmtry.com *.quantserve.com *.bluekai.com *.facebook.com *.demandbase.com doubleclick.net app.trustev.com ads.yahoo.com adserve.atedra.com analytics.twitter.com bat.bing.com crwdcntrl.net c.rstg.io cdn.nextinsure.com code.jquery.com cloudfront.net fonts.googleapis.com ib.adnxs.com idsync.rlcdn.com investis.com adsrvr.org sharethrough.com adroll.com yimg.com amazonaws.com secure.fastclick.net secure.leadback.advertising.com google-analytics.com static.ads-twitter.com us-u.openx.net vjs.zencdn.net googleadservices.com gstatic.com bidswitch.net cspix.media6degrees.com googletagmanager.com; script-src 'self' *.transunion.com *.addthis.com *.quizgnome.com *.googletagmanager.com *.optimizely.com *.pingdom.com *.cloudflare.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.quantserve.com *.g.3gl.net *.eloqua.com *.crwdcntrl.net *.googleapis.com *.investis.com *.amazonaws.com *.cloudfront.net *.nextinsure.com *.lendingtree.com *.mediaplex.com *.demandbase.com *.jquery.com *.gstatic.com *.bing.com *.3gl.net *.yourscoreonline.com *.gofreecredit.com *.creditcheckingtoday.com *.naturaltracking.com *.credit.com *.facebook.com *.yimg.com *.ensighten.com *.d39se0h2uvfakd.cloudfront.net *.linkedin.com *.adsprotection.com *.brightcove.com *.hotjar.com *.adroll.com *.brightcove.net *.en25.com *.adsrvr.org *.abmr.net *.mathtag.com t2.rstg.io px.ads.linkedin.com vjs.zencdn.net analytics.twitter.com iad-login.dotomi.com snap.licdn.com sp.analytics.yahoo.com unpkg.com hello.myfonts.net img03.en25.com m.addthisedge.com vjs.zencdn.com optimizely.s3.amazonaws.com g.3gl.net cdn.ampproject.org b.company-target.com cspix.media6degrees.com static.ads-twitter.com cdn.mxpnl.com sjs.bizographics.com rum-static.pingdom.net tt.mbww.com seal.entrust.net app.trustev.com pixel.mathtag.com *.googlesyndication.com *.google.com amplify.outbrain.com o1.qnsr.com connect.facebook.net cas.cluep.com blob: 'unsafe-eval' 'unsafe-inline'; child-src *.transunion.com *.qnsr.com *.crwdcntrl.net *.cdn.optimizely.com *.addthis.com *.doubleclick.net *.lendingtree.com *.youtube.com *.hotjar.com vars.hotjar.com img.mediaplex.com app.optimizely.com *.brightcove.net s.amazon-adsystem.com app.trustev.com pixel.mathtag.com; connect-src 'self' *.transunion.com *.optimizely.com *.youtube.com *.brightcovecdn.com *.pingdom.net *.brightcove.com manifest.prod.boltdns.net airbrake.io api.company-target.com r.3gl.net s7.addthis.com popcornmetricsendpoint.herokuapp.com unity.cadreon.com app.trustev.com;media-src 'self' *.transunion.com blob: *.brightcove.com; img-src * data:; font-src 'self' data: *.transunion.com fonts.gstatic.com api.company-target.com *.brightcove.com r.3gl.net s7.addthis.com *.herokuapp.com; style-src * 'unsafe-eval' 'unsafe-inline'; 1
default-src https: 'unsafe-inline' 'unsafe-eval'; child-src https: blob:; img-src https: data: blob:; font-src https: data:; object-src 'self'; worker-src 'self' blob:; frame-ancestors sites.google.com hosting.gmodules.com *.googleusercontent.com; frame-src blob: https: 1
report-uri https://aeris.report-uri.io/r/default/csp/enforce; default-src 'none'; style-src 'self'; script-src 'self'; img-src 'self'; font-src 'self'; 1
default-src:'self'; 1
frame-ancestors https://osmose360.com https://osmose360test.com https://osmose360.dev.com https://osmose360dev.com https://osmose360cl.azurewebsites.net https://www.360psg.com  http://localhost:8080 1
default-src * 'unsafe-eval' 'unsafe-inline'; object-src 'none'; frame-ancestors 'self' Sameorigin 1
upgrade-insecure-requests;script-src 'self';connect-src 'self' blob: https://gorf.pub wss://gorf.pub;media-src 'self' https:;img-src 'self' data: blob: https:;default-src 'none';base-uri 'self';frame-ancestors 'none';style-src 'self' 'unsafe-inline';font-src 'self';manifest-src 'self'; 1
frame-ancestors 'self' https://jimmylion.com https://pwa.jimmylion.com; 1
frame-ancestors 'self' *.azdev.direct *.adobe.com 1
frame-ancestors https://*.fitplanapp.com 1
script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google-analytics.com securesurf.biz ads.exoclick.com main.exoclick.com syndication.exoclick.com; 1
default-src http: https: 'unsafe-inline' 'unsafe-eval'; img-src http: https: data:; object-src 'none'; 1
default-src 'self' tpc.googlesyndication.com;prefetch-src 'self' tpc.googlesyndication.com;connect-src 'self' securepubads.g.doubleclick.net csi.gstatic.com api.hubspot.com forms.hubspot.com pagead2.googlesyndication.com www.google-analytics.com www.facebook.com stats.g.doubleclick.net;font-src 'self' use.fontawesome.com fonts.googleapis.com fonts.gstatic.com use.typekit.net;img-src 'self' data: * s3.amazonaws.com *.aimmedia.com www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net *.cuisinelibrary.com images.contentful.com former.cuisineathome.com images.ctfassets.net tpc.googlesyndication.com www.google.com securepubads.g.doubleclick.net www.facebook.com pagead2.googlesyndication.com ad.doubleclick.net csi.gstatic.com *.amazon-adsystem.com images-na.ssl-images-amazon.com images.ahpc.us track.hubspot.com forms.hubspot.com pix.revjet.com cdn.revjet.com;manifest-src 'self';media-src 'self' data: videos.ctfassets.net s3.amazonaws.com;object-src 'self';script-src 'self' 'unsafe-inline' blob: www.google.com www.gstatic.com www.googletagmanager.com www.google-analytics.com code.jquery.com securepubads.g.doubleclick.net connect.facebook.net browser-update.org adservice.google.com cdn.ampproject.org www.googletagservices.com images.ahpc.us js.hs-scripts.com *.augusthome.com optimize.google.com tpc.googlesyndication.com pagead2.googlesyndication.com js.hs-analytics.net js.hsleadflows.net js.usemessages.com vjs.zencdn.net static.olark.com js.hs-banner.com assets.pinterest.com browser-update.org stackpath.bootstrapcdn.com;style-src 'self' 'unsafe-inline' use.fontawesome.com fonts.googleapis.com use.typekit.net p.typekit.net vjs.zencdn.net;base-uri 'self' optimize.google.com;form-action 'self' *;frame-ancestors 'self' optimize.google.com;frame-src 'self' www.youtube.com staticxx.facebook.com tpc.googlesyndication.com optimize.google.com www.googletagservices.com www.megaphone.fm www.google.com *.safeframe.googlesyndication.com assets.pinterest.com playlist.megaphone.fm www.facebook.com pagead2.googlesyndication.com;worker-src 'self'; 1
default-src 'self'; frame-ancestors 'self' alemana.cl *.alemana.cl portal.alemana.cl; frame-src portal.alemana.cl * 'self' *.clinicaalemana.cl *.lfi.cl *.alemana.cl https://optimize.google.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.auth0.com alemana-poc.auth0.com cdn.auth0.com *.clinicaalemana.cl *.cloudfront.net static.zdassets.com v2.zopim.com *.fontawesome.com *.doubleclick.net *.adnxs.com *.mathtag.com *.googleadservices.com *.hotjar.com *.googletagmanager.com www.alemana.cl *.alemana.cl *.lfi.cl *.jquery.com *.cloudflare.com *.jsdelivr.net *.bootstrapcdn.com *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com *.google.com platform.linkedin.com https://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org; style-src 'self' 'unsafe-inline' *.aspnetcdn.com *.fontawesome.com *.google.com *.google.com *.alemana.cl *.lfi.cl *.jquery.com use.fontawesome.com *.cloudfront.net *.cloudflare.com *.jsdelivr.net *.bootstrapcdn.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.google.com tagmanager.google.com *.twimg.com; img-src 'self' *.fontawesome.com * googleads.g.doubleclick.net *.google.cl *.alemana.cl *.clinicaalemana.cl stats.g.doubleclick.net *.google.com *.youtube.com *.google.com www.google.com s3alemana.s3.amazonaws.com *.s3.amazonaws.com lfi.lfi.cl *.lfi.cl alemana.cl www.alemana.cl *.alemana.cl i.stack.imgur.com *.cloudflare.com *.clinicaalemana.cl *.cloudflare.com *.jsdelivr.net *.bootstrapcdn.com *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com *.google.com data: blob: *.eloqua.com track.hubspot.com *.cloudfront.net; font-src 'self' *.hotjar.com v2.zopim.com *.fontawesome.com *.cloudflare.com *.jsdelivr.net *.bootstrapcdn.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; connect-src 'self' *.google-analytics.com *.cloudfunctions.net *.fontawesome.com *.auth0.com *.cloudfront.net *.alemana.cl *.clinicaalemana.cl wss://widget-mediator.zopim.com ekr.zdassets.com wss://ws1.hotjar.com ws1.hotjar.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net *.hotjar.io *.hotjar.com *.alemana.cl www.alemana.cl *.cloudflare.com *.jsdelivr.net *.bootstrapcdn.com accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com; media-src 'self' data: blob: *.cloudfront.net; child-src 'self' *.mathtag.com *.hotjar.com *.alemana.cl *.cloudflare.com *.jsdelivr.net *.bootstrapcdn.com https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.google.com; 1
connect-src 'self' *.mybkb.ch; default-src 'self'; form-action 'self'; frame-ancestors 'self' *.bkb.ch; frame-src 'self' *.doubleclick.net www.youtube.com; font-src 'self' data: *.bkb.ch; img-src 'self' data: *.bkb.ch ad.doubleclick.net www.google.com www.google.ch maps.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bkb.ch assets.adobedtm.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' *.bkb.ch 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.addthis.com *.addthisedge.com *.addtoany.com *.cloudflare.com  *.doubleclick.net  *.facebook.com  *.facebook.net   *.gravatar.com *.gstatic.com  *.google.ca  *.google.com  *.googleadservices.com *.googleapis.com  *.googletagmanager.com *.google-analytics.com *.moatads.com *.youtube.com *.youtube-nocookie.com 1
form-action https:; upgrade-insecure-requests; report-uri https://vaimo-domain.uriports.com/reports/enforce; report-to default 1
default-src 'none' ;report-to csp; report-uri https://report-uri.simplyadmire.com/ ; frame-ancestors 'self';script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://siteimproveanalytics.com https://*.readspeaker.com https://www.googletagmanager.com https://www.google-analytics.com ; style-src 'self' data: 'unsafe-inline' https://*.readspeaker.com ; img-src 'self' data: https://eu2.siteimprove.com https://6006038.global.siteimproveanalytics.io/ https://*.readspeaker.com https://www.google-analytics.com https://stats.g.doubleclick.net ; media-src 'self' https://*.readspeaker.com ;font-src 'self' data: ; object-src 'self';frame-src 'self' https://*.readspeaker.com; form-action 'self' https://*.readspeaker.com https://users.opengemeenten.nl ;connect-src 'self' https://6006038.global.siteimproveanalytics.io/; 1
base-uri 'none';block-all-mixed-content;child-src go.oncehub.com https://www.youtube.com;img-src 'self' data: https:;connect-src 'self' https: https://my.demio.com https://beaconapi.helpscout.net https://chatapi.helpscout.net https://d3hb14vkzrxvla.cloudfront.net https://www.google-analytics.com wss://*.pusher.com;font-src 'self' data: https://fonts.gstatic.com;form-action 'self' https://my.demio.com https://actionverb.applytojob.com;frame-src go.oncehub.com https://platform.twitter.com https://staticxx.facebook.com https://www.facebook.com https://www.youtube.com https://bid.g.doubleclick.net https://optimize.google.com;media-src 'self' data: https://beacon-v2.helpscout.net https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com;object-src 'none';script-src 'self' 'nonce-MTQyNjI5MjcxMjEyOTM3NzM0MDk' 'unsafe-inline' 'strict-dynamic' https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https:;style-src 'self' 'unsafe-inline' https://cdn.demio.com https://fonts.googleapis.com https://beacon-v2.helpscout.net https://djtflbt20bdde.cloudfront.net https://optimize.google.com;upgrade-insecure-requests;report-uri https://actionverb.report-uri.io/r/default/csp/enforce 1
default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' ; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline' 1
default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.aacpl.net *.googleapis.com *.gstatic.com *.libraryaware.com https://contentcafe2.btol.com *.blackbaudhosting.com *.libanswers.com *.google.com *.google-analytics.com *.ebscohost.com *.marmot.org *.youtube.com ecard.quipugroup.net; object-src *; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.aacpl.net *.googleapis.com *.gstatic.com *.libraryaware.com https://contentcafe2.btol.com *.blackbaudhosting.com *.libanswers.com *.google.com *.google-analytics.com *.ebscohost.com *.marmot.org *.youtube.com https://ecard.quipugroup.net; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.aacpl.net *.googleapis.com *.gstatic.com *.libraryaware.com https://contentcafe2.btol.com *.blackbaudhosting.com *.libanswers.com *.google.com *.google-analytics.com *.ebscohost.com *.marmot.org *.youtube.com ecard.quipugroup.net; media-src 'self' 'unsafe-inline' 'unsafe-eval' *.aacpl.net *.googleapis.com *.gstatic.com *.libraryaware.com https://contentcafe2.btol.com *.blackbaudhosting.com *.libanswers.com *.google.com *.google-analytics.com *.ebscohost.com *.marmot.org *.youtube.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.aacpl.net *.googleapis.com *.gstatic.com *.libraryaware.com https://contentcafe2.btol.com *.blackbaudhosting.com *.libanswers.com *.google.com *.google-analytics.com *.ebscohost.com *.marmot.org *.youtube.com *.yourcloudlibrary.com; frame-ancestors 'self' 'unsafe-inline' 'unsafe-eval' *.aacpl.net *.googleapis.com *.gstatic.com *.libraryaware.com https://contentcafe2.btol.com *.blackbaudhosting.com *.libanswers.com *.google.com *.google-analytics.com *.ebscohost.com *.marmot.org *.youtube.com; child-src 'self' 'unsafe-inline' 'unsafe-eval' *.aacpl.net *.googleapis.com *.gstatic.com *.libraryaware.com https://contentcafe2.btol.com *.blackbaudhosting.com *.libanswers.com *.google.com *.google-analytics.com *.ebscohost.com *.marmot.org *.youtube.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.aacpl.net *.googleapis.com *.gstatic.com *.libraryaware.com https://contentcafe2.btol.com *.blackbaudhosting.com *.libanswers.com *.google.com *.google-analytics.com *.ebscohost.com *.marmot.org *.youtube.com; connect-src *; report-uri /report-csp-violation; upgrade-insecure-requests 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; script-src 'self' https://assets.vulpine.club; font-src 'self' https://assets.vulpine.club; img-src 'self' data: blob: https://assets.vulpine.club https://pool.jortage.com https://blob.jortage.com https://direct.vulpine.club; style-src 'self' https://assets.vulpine.club 'nonce-6db8gvwIxble7KTtbDQx8Q=='; media-src 'self' data: https://assets.vulpine.club https://pool.jortage.com https://blob.jortage.com https://direct.vulpine.club; frame-src 'self' https:; child-src 'self' blob: https://assets.vulpine.club; worker-src 'self' blob: https://assets.vulpine.club; connect-src 'self' blob: data: wss://streaming.vulpine.club https://assets.vulpine.club https://pool.jortage.com https://blob.jortage.com https://direct.vulpine.club; manifest-src 'self' https://assets.vulpine.club 1
frame-ancestors 'self' *.cotabank.com.tw *.cotabank.com 1
default-src 'self';     base-uri 'self';     script-src 'nonce-30392a8677a14760a3ccee6a1b6b315e' 'strict-dynamic' 'self' *.zxcdn.com *.casinorewards.com cdn.jsdelivr.net https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js ;     connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net;     frame-src 'self' *.gameassists.co.uk *.gameassists.dk *.gameassists.se *.gameassists.co.za *.valueactive.eu *.valueactive.dk  ;     style-src 'self' *.zxcdn.com cdn.jsdelivr.net https://fonts.googleapis.com 'unsafe-inline';     font-src 'self' cdn.jsdelivr.net *.zxcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com;     img-src * data:;     object-src 'none';     frame-ancestors 'self';     media-src 'self' *.zxcdn.com s3.amazonaws.com/casinorewards/; 1
script-src 'self' data: 'unsafe-inline' 'unsafe-eval' * https://tt.mbww.com  https://www.googletagmanager.com  https://www.google-analytics.com  https://api.retargetly.com https://www.googleadservices.com  https://configusa.veinteractive.com  https://connect.facebook.net  https://*.serving-sys.com; 1
base-uri 'none'; default-src 'self' 'unsafe-inline' data: https: wss:; script-src 'self' https://api.scrivito.com https://app.intercom.io https://assets.scrivito.com https://js.intercomcdn.com https://widget.intercom.io https://www.google-analytics.com https://js.convertflow.co https://app.convertflow.co https://ajax.googleapis.com; object-src 'none'; block-all-mixed-content 1
default-src 'none';manifest-src 'self';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self';connect-src 'self';media-src 'self' data: 1
default-src 'self' data: https: *.gstatic.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: *.web2mobile.fr *.adnxs.com *.tradelab.fr *.twitter.com *.facebook.net *.twimg.com *.azame.net *.google-analytics.com *.infogreffe.nc *.infogreffe.fr *.facebook.com *.doubleclick.net; style-src 'self' 'unsafe-inline' *.amazonaws.com *.infogreffe.nc *.infogreffe.fr *.googleapis.com *.twitter.com *.regie.pro; img-src 'self' data: http: *.youtube.com https: *.web2mobile.fr *.adnxs.com *.tradelab.fr *.twitter.com *.facebook.net *.twimg.com *.azame.net *.google-analytics.com *.infogreffe.nc *.infogreffe.fr *.facebook.com *.doubleclick.net; frame-src 'self' data: https: *.web2mobile.fr *.adnxs.com *.tradelab.fr *.twitter.com *.facebook.net *.twimg.com *.azame.net *.google-analytics.com *.infogreffe.nc *.infogreffe.fr *.facebook.com *.doubleclick.net; connect-src 'self' https: *.regie.pro *.addthis.com *.web2mobile.fr 1
default-src 'self' dstatic.dev.ipc.us.aexp.com wss://*.americanexpress.com wss://*.aexp.com *.aexp.com *.americanexpress.com *.aexp-static.com nexus.ensighten.com omn.americanexpress.com assets.adobedtm.com aexp.demdex.net dpm.demdex.net stage.sp100500b5.guided.ss-omtrdc.net sp100500b5.guided.ss-omtrdc.net service.maxymiser.net api.maxymiser.net events.foreseeresults.com controller.4seeresults.com static.foresee.com health.foresee.com survey.foreseeresults.com cdn5.userzoom.com cdn4.userzoom.com s2.userzoom.com secure.opinionlab.com amexuat1-merchantgeo.cs42.force.com wss://*.liveperson.net *.liveperson.net *.liveperson.com *.lpsnmedia.net *.liveengage.net *.liveengage.com *.liveper.sn maps.googleapis.com maps.gstatic.com fonts.googleapis.com fonts.gstatic.com csi.gstatic.com *.yodlee.com js.maxmind.com geoip-js.maxmind.com ads.yahoo.com cdn.optimizely.com logx.optimizely.com aeopdevvip.acxiom.com aeopprodvip.acxiom.com *.amextravel.com apim.expedia.com zndhztugwqhlulqht-aexpfeedback.siteintercept.qualtrics.com siteintercept.qualtrics.com aexpfeedback.siteintercept.qualtrics.com aexpfeedback.com ca1.qualtrics.com uscollector.tealeaf.ibmcloud.com *.bf.dynatrace.com *.sundaysky.com auth.exacttargetapis.com mcf8lgnz926zb1d1klt05rckrpxy.rest.marketingcloudapis.com blob: events.bouncex.net api.edq.com wup-xavier.us.v2.customers.biocatch.com wup-bf672d0f.us.v2.we-stats.com; frame-ancestors *.aexp.com *.americanexpress.com *.ebates.com homechef-loyaltywallet.points.com homechef-staging.loyaltywallet.io homechef-rc.loyaltywallet.io *.memberopinions.com *.office.com *.rakuten.com *.realbuyer.com *.rbnrewards.com *.researchnow.com *.truecardev.com amexnetwork.truecar.com *.winc.com; img-src 'self' dstatic.dev.ipc.us.aexp.com wss://*.americanexpress.com wss://*.aexp.com *.aexp.com *.americanexpress.com *.aexp-static.com nexus.ensighten.com assets.adobedtm.com aexp.demdex.net dpm.demdex.net stage.sp100500b5.guided.ss-omtrdc.net sp100500b5.guided.ss-omtrdc.net service.maxymiser.net api.maxymiser.net events.foreseeresults.com controller.4seeresults.com static.foresee.com health.foresee.com survey.foreseeresults.com cdn5.userzoom.com cdn4.userzoom.com s2.userzoom.com secure.opinionlab.com wss://*.liveperson.net *.liveperson.net *.liveperson.com *.lpsnmedia.net *.liveengage.net *.liveengage.com *.liveper.sn maps.googleapis.com maps.gstatic.com fonts.googleapis.com fonts.gstatic.com csi.gstatic.com *.yodlee.com js.maxmind.com geoip-js.maxmind.com ads.yahoo.com cdn.optimizely.com logx.optimizely.com aeopdevvip.acxiom.com aeopprodvip.acxiom.com *.amextravel.com apim.expedia.com zndhztugwqhlulqht-aexpfeedback.siteintercept.qualtrics.com siteintercept.qualtrics.com aexpfeedback.siteintercept.qualtrics.com aexpfeedback.com ca1.qualtrics.com uscollector.tealeaf.ibmcloud.com *.bf.dynatrace.com *.sundaysky.com auth.exacttargetapis.com mcf8lgnz926zb1d1klt05rckrpxy.rest.marketingcloudapis.com data: omn.americanexpress.com amexuat1-merchantgeo.cs42.force.com res.cloudinary.com s1.ticketm.net ad2.adfarm1.adition.com ad4.adfarm1.adition.com p.adbrn.com secure.adnxs.com 20743471p.rfihub.com 20795861p.rfihub.com insight.adsrvr.org aax-eu.amazon-adsystem.com private-orm-open-receipt-match.s3.amazonaws.com s.amazon-adsystem.com tag.yieldoptimizer.com ads.avocet.io stags.bluekai.com sandbox.dev.clover.com/v2/image/ sslwidget.criteo.com widget.criteo.com www.facebook.com ad.atdmt.com cnt.fout.jp www.googleadservices.com/pagead/conversion/ googleads.g.doubleclick.net ad.doubleclick.net ad-emea.doubleclick.net media.iceportal.com dc.ads.linkedin.com px.ads.linkedin.com www.bizographics.com www.linkedin.com/px/ pixel.mathtag.com urldefense.proofpoint.com pubads.g.doubleclick.net s1933033461.t.eloqua.com prf.hn farm.plista.com *.switchfly.com www.tripadvisor.com analytics.twitter.com t.co b92.yahoo.co.jp sp.analytics.yahoo.com img.static-bookatable.com *.sevenrooms.com image.resy.com l.betrad.com cdn.cohesionapps.com adservice.google.com www.google.com/ads/user-lists/ www.google.com/pagead/1p-user-list/ www.gstatic.com/recaptcha/ www.google.com/recaptcha/ ct.pinterest.com/v3/ bat.bing.com/action/ *.flashtalking.com pt.ispot.tv rs.gwallet.com *.cloudfront.net/receipts/assets/ *.cloudfront.net/assets/sqmarket/ api.tiles.mapbox.com/ s.mzstatic.com/email/images_shared/ t.teads.tv afiliacion.net affleads.latamtracking.com *.finn.ai/images/product-recommender/ events.bouncex.net pixel.newscred.com www.google-analytics.com track.adform.net *.doublemax.net *.microsoft.com pixel.quantserve.com pixel.sojern.com jadserve.postrelease.com p.adsymptotic.com px.ladsp.com tg.socdm.com tr.line.me atm.im-apps.net; script-src 'self' dstatic.dev.ipc.us.aexp.com wss://*.americanexpress.com wss://*.aexp.com *.aexp.com *.americanexpress.com *.aexp-static.com nexus.ensighten.com omn.americanexpress.com assets.adobedtm.com aexp.demdex.net dpm.demdex.net stage.sp100500b5.guided.ss-omtrdc.net sp100500b5.guided.ss-omtrdc.net service.maxymiser.net api.maxymiser.net events.foreseeresults.com controller.4seeresults.com static.foresee.com health.foresee.com survey.foreseeresults.com cdn5.userzoom.com cdn4.userzoom.com s2.userzoom.com secure.opinionlab.com amexuat1-merchantgeo.cs42.force.com wss://*.liveperson.net *.liveperson.net *.liveperson.com *.lpsnmedia.net *.liveengage.net *.liveengage.com *.liveper.sn maps.googleapis.com maps.gstatic.com fonts.googleapis.com fonts.gstatic.com csi.gstatic.com *.yodlee.com js.maxmind.com geoip-js.maxmind.com ads.yahoo.com cdn.optimizely.com logx.optimizely.com aeopdevvip.acxiom.com aeopprodvip.acxiom.com *.amextravel.com apim.expedia.com zndhztugwqhlulqht-aexpfeedback.siteintercept.qualtrics.com siteintercept.qualtrics.com aexpfeedback.siteintercept.qualtrics.com aexpfeedback.com ca1.qualtrics.com uscollector.tealeaf.ibmcloud.com *.bf.dynatrace.com *.sundaysky.com auth.exacttargetapis.com mcf8lgnz926zb1d1klt05rckrpxy.rest.marketingcloudapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js-cdn.dynatrace.com *.bounceexchange.com *.microsoft.com analytics.newscred.com www.google-analytics.com www.googletagmanager.com s.ntv.io www.youtube.com/iframe_api s.ytimg.com 'unsafe-inline'; style-src 'self' dstatic.dev.ipc.us.aexp.com wss://*.americanexpress.com wss://*.aexp.com *.aexp.com *.americanexpress.com *.aexp-static.com nexus.ensighten.com omn.americanexpress.com assets.adobedtm.com aexp.demdex.net dpm.demdex.net stage.sp100500b5.guided.ss-omtrdc.net sp100500b5.guided.ss-omtrdc.net service.maxymiser.net api.maxymiser.net events.foreseeresults.com controller.4seeresults.com static.foresee.com health.foresee.com survey.foreseeresults.com cdn5.userzoom.com cdn4.userzoom.com s2.userzoom.com secure.opinionlab.com amexuat1-merchantgeo.cs42.force.com wss://*.liveperson.net *.liveperson.net *.liveperson.com *.lpsnmedia.net *.liveengage.net *.liveengage.com *.liveper.sn maps.googleapis.com maps.gstatic.com fonts.googleapis.com fonts.gstatic.com csi.gstatic.com *.yodlee.com js.maxmind.com geoip-js.maxmind.com ads.yahoo.com cdn.optimizely.com logx.optimizely.com aeopdevvip.acxiom.com aeopprodvip.acxiom.com *.amextravel.com apim.expedia.com zndhztugwqhlulqht-aexpfeedback.siteintercept.qualtrics.com siteintercept.qualtrics.com aexpfeedback.siteintercept.qualtrics.com aexpfeedback.com ca1.qualtrics.com uscollector.tealeaf.ibmcloud.com *.bf.dynatrace.com *.sundaysky.com auth.exacttargetapis.com mcf8lgnz926zb1d1klt05rckrpxy.rest.marketingcloudapis.com *.microsoft.com 'unsafe-inline'; frame-src 'self' dstatic.dev.ipc.us.aexp.com *.aexp.com *.americanexpress.com *.aexp-static.com nexus.ensighten.com omn.americanexpress.com assets.adobedtm.com aexp.demdex.net dpm.demdex.net stage.sp100500b5.guided.ss-omtrdc.net sp100500b5.guided.ss-omtrdc.net service.maxymiser.net api.maxymiser.net events.foreseeresults.com controller.4seeresults.com static.foresee.com health.foresee.com survey.foreseeresults.com cdn5.userzoom.com cdn4.userzoom.com s2.userzoom.com secure.opinionlab.com amexuat1-merchantgeo.cs42.force.com *.liveperson.net *.liveperson.com *.lpsnmedia.net *.liveengage.net *.liveengage.com *.liveper.sn maps.googleapis.com maps.gstatic.com fonts.googleapis.com fonts.gstatic.com csi.gstatic.com *.yodlee.com js.maxmind.com geoip-js.maxmind.com ads.yahoo.com cdn.optimizely.com logx.optimizely.com aeopdevvip.acxiom.com aeopprodvip.acxiom.com *.amextravel.com apim.expedia.com zndhztugwqhlulqht-aexpfeedback.siteintercept.qualtrics.com siteintercept.qualtrics.com aexpfeedback.siteintercept.qualtrics.com aexpfeedback.com ca1.qualtrics.com uscollector.tealeaf.ibmcloud.com *.bf.dynatrace.com *.sundaysky.com auth.exacttargetapis.com mcf8lgnz926zb1d1klt05rckrpxy.rest.marketingcloudapis.com *.idfy.io *.idfy.no reportaproblem.apple.com/receipts/ squareup.com/receipt/american-express-only/ androidpay.google.com pay.sandbox.google.com www.youtube.com www.google.com/recaptcha/ amex.qumucloud.com *.bounceexchange.com; report-uri https://client-logging.americanexpress.com/home/report/security/csp-violation; block-all-mixed-content 1
frame-ancestors *.facebook.com; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://societal.co; img-src 'self' https: data: blob: https://societal.co; style-src 'self' https://societal.co 'nonce-t7rwHrm1rkqdf0ZwlTZ4tg=='; media-src 'self' https: data: https://societal.co; frame-src 'self' https:; manifest-src 'self' https://societal.co; connect-src 'self' data: blob: https://societal.co https://cdn.masto.host wss://societal.co; script-src 'self' https://societal.co; child-src 'self' blob: https://societal.co; worker-src 'self' blob: https://societal.co 1
frame-ancestors 'self' webvisor.com *.webvisor.com; upgrade-insecure-requests; 1
font-src 'self' https:; base-uri 'self'; 1
default-src 'self';frame-ancestors 'none';frame-src 'self' *.liadm.com *.doubleclick.net *.hotjar.com *.google.com *.facebook.com *.youtube.com *.salesforce.com;child-src 'self';form-action 'self' *.facebook.com *.salesforce.com;img-src 'self' data: *.kromtech.net *.mackeeper.com *.visualwebsiteoptimizer.com *.bing.com *.google-analytics.com *.facebook.com *.liadm.com *.doubleclick.net *.hotjar.com *.owox.com *.zoomsupport.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.outbrain.com *.taboola.com *.googletagmanager.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googletagservices.com *.bing.com *.facebook.net *.hotjar.com *.liadm.com *.visualwebsiteoptimizer.com *.kromtech.net *.doubleclick.net *.outbrain.com *.taboola.com;style-src 'self' 'unsafe-inline' *.googleapis.com *.kromtech.net;font-src 'self' data: *.gstatic.com *.hotjar.com *.kromtech.net;object-src 'none';connect-src 'self' *.hotjar.io *.hotjar.com *.doubleclick.net support.mackeeper.com *.google-analytics.com *.google.com *.taboola.com wss://*.hotjar.com 1
frame-src 'self' www.youtube-nocookie.com platform.twitter.com jetpack.wordpress.com www.google.com www.google.nl; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.mediawijzer.net cdn.mediaukkies.nl cdn.weekvandemediawijsheid.nl cdn.mediawijsheid.nl cdnjs.cloudflare.com *.pinterest.com *.wp.com *.googletagmanager.com www.google-analytics.com *.googleapis.com platform.twitter.com static.addtoany.com cdn.rawgit.com *.google.com cdn.syndication.twimg.com connect.facebook.net widget.surveymonkey.com *.sogosurvey.com cdn.hoezomediawijs.nl cdn.weekvandemediawijsheid.nl cdn.mediaukkies.nl cdn.mediaukkiedagen.nl www.gstatic.com js-agent.newrelic.com www.instagram.com bam.nr-data.net www.aanmelder.nl cdn.aanmelder.nl 1
frame-ancestors 'self' http://www.1001spiele.at 1
frame-ancestors 'self' https://mtl-ex.com 1
frame-ancestors *.swissinfo.ch 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com https://culoansaver.com https://delivery.datatrac.net *.datatrac.net https://3riversfculocator.wave2.io https://*.msecnd.net apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://s.ytimg.com https://publish.twitter.com platform.linkedin.com https://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://www.googletagmanager.com *.msecnd.net https://stackpath.bootstrapcdn.com/ https://cdn.boomcdn.com/ https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js https://code.jquery.com/ https://www.google-analytics.com/analytics.js https://www.onlinebanktours.com/external/v5/BCM_Light_Box.js *.addthis.com *.addthisedge.com https://graph.facebook.com https://z.moatads.com https://api.alpharank.io *.simpli.fi; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com *.datatrac.net www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://stackpath.bootstrapcdn.com/bootstrap/4.1.2/css/bootstrap.min.css https://cdn.boomcdn.com/libs/owl-carousel/2.3.4/assets/owl.theme.default.min.css https://cdn.boomcdn.com/libs/owl-carousel/2.3.4/assets/owl.carousel.min.css https://use.fontawesome.com/ https://cdn.boomcdn.com/ https://www.onlinebanktours.com/external/v5/BCM_Ad_Styles.css; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://use.fontawesome.com/; img-src 'self' *.gstatic.com *.datatrac.net *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: *.datatrac.net blob: *.eloqua.com track.hubspot.com https://cdn.oectours.com/media/ https://www.onlinebanktours.com https://i.ytimg.com https://www.googletagmanager.com *.googleusercontent.com *.simpli.fi https://www.googleadservices.com *.doubleclick.net *.tremorhub.com *.yahoo.com *.bfmio.com *.rlcdn.com *.lijit.com *.tapad.com https://bcp.crwdcntrl.net *.agkn.com *.exelator.com *.bluekai.com *.pubmatic.com https://fei.pro-market.net *.advertising.com *.spotxchange.com *.rubiconproject.com *.openx.net https://ib.adnxs.com *.intentiq.com https://ads.stickyadstv.com *.google.com https://sync.mathtag.com https://secure.insightexpressai.com https://1f2e7.v.fwmrm.net https://pbid.pro-market.net https://match.adsrvr.org https://segments.company-target.com https://jelly.mdhv.io https://sync.tidaltv.com https://www.entitytag.co.uk https://www.totaljobs.com *.webmd.com https://pippio.com https://tag.apxlv.com; media-src 'self' data: blob:; child-src 'self' https://cdn.flipsnack.com https://culoansaver.com *.datatrac.net https://delivery.datatrac.net https://3riversfculocator.wave2.io https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://www.onlinebanktours.com *.datatrac.net *.addthis.com *.timetrade.com https://webchat.3riversfcu.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.datatrac.net *.mktoresp.com https://dc.services.visualstudio.com/v2/ https://pixel.alpharank.io https://www.google-analytics.com https://stats.g.doubleclick.net; object-src 'none'; 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com srvvtrk.com proxdevcool.com iamceege.github.io *.google.com www.gstatic.com w.sharethis.com  *.googleapis.com ajax.googleapis.com *.google-analytics.com; connect-src 'self' *.google-analytics.com stats.g.doubleclick.net; img-src 'self' data: www.google.fr proxdevcool.com www.google.com.mx www.google.com.ni www.google.pl *.gstatic.com *.googleapis.com *.google-analytics.com www.google.com.co ssl.google-analytics.com stats.g.doubleclick.net www.google.com www.google.es www.google.de www.google.pt www.google.co.uk www.google.it www.google.cl www.google.com.ar www.google.com.ec; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com; font-src 'self' data: maxcdn.bootstrapcdn.com fonts.gstatic.com; frame-src 'self' *.google.com *.youtube.com; object-src 'self'; plugin-types application/pdf; 1
default-src *; img-src 'self' data:; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; 1
frame-ancestors massbike.nationbuilder.com 1
form-action 'self';frame-ancestors 'self';block-all-mixed-content 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self' 1
frame-ancestors 'self'  ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleadservices.com googleads.g.doubleclick.net *.google.com *.googleoptimize.com *.google-analytics.com *.youtube.com track.adform.net s2.adform.net *.facebook.net *.googleapis.com *.captcha.com *.google.com *.edp.pt *.facebook.com *.googletagmanager.com *.linkedin.com *.gstatic.com *.static.hotjar.com *.hotjar.com *.hotjar.io bywe2.byside.com bat.bing.com cdn.cookielaw.org *.onetrust.com  1
frame-ancestors https://*.net10wireless.com 1
style-src 'self' 'unsafe-inline' fonts.googleapis.com; 1
default-src 'self' www.google-analytics.com www.youtube.com;                                                     connect-src 'self' filmimpact.onfastspring.com vimeo.com www.google-analytics.com stats.g.doubleclick.net;                                                     child-src 'self' filmimpact.onfastspring.com www.youtube.com player.vimeo.com www.google.com www.facebook.com;                                                     script-src 'self' 'unsafe-inline' 'unsafe-eval' d1f8f9xcsvx3ha.cloudfront.net s.ytimg.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com www.youtube.com connect.facebook.net  www.perplex.nl ajax.aspnetcdn.com vimeo.com www.vimeo.com;                                                     style-src 'self' 'unsafe-inline';                                                     img-src 'self' data: d1f8f9xcsvx3ha.cloudfront.net services.perplex.eu www.facebook.com www.google-analytics.com  www.perplex.nl i.vimeocdn.com www.google.com www.google.nl www.googletagmanager.com;                                                     font-src 'self' data:;                                                     form-action 'self' secure.ogone.com www.facebook.com; 1
default-src 'self'; img-src 'self' https://* data:; child-src https://www.youtube.com/ https://www.google.com/; style-src 'self' https://fonts.googleapis.com/ https://cdn.jsdelivr.net/npm/@duetds/date-picker@1.1.0/dist/duet/themes/default.css 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com/ https://business.senedd.wales; script-src 'self' blob: https://www.google-analytics.com/ https://cc.cdn.civiccomputing.com/ https://www.googletagmanager.com/ https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.0.0.min.js https://ajax.aspnetcdn.com/ajax/jquery.validate/1.16.0/jquery.validate.min.js https://ajax.aspnetcdn.com/ajax/mvc/5.2.3/jquery.validate.unobtrusive.min.js https://cdn.jsdelivr.net 'sha256-qTS4cC+BnlabE/doSj+MPbjtJWVdVNtQah7AzuFfjbE=' 'sha256-h4tI5yM0TF6GI9CZe5uWnJX7WqXL1kpLAJ13Idyytts=' 'sha256-byyDoONdqE08AIFI6uBk/n8GJDNnu4o8VE6qf+NETJs=' 'sha256-GG+mi50DV7jNq33JItnAeSGKu+DyOuVZM484bs4ioq4=' 'sha256-r3mDNAbdsnbtcqGzAwDXN/1Ln5hKyg8GDZlm46+kpKg=' 'sha256-GG+mi50DV7jNq33JItnAeSGKu+DyOuVZM484bs4ioq4=' 'sha256-IZgGOToFausimoy1Ehqf2azcfWd5NrdyLunVfExDBbE=' 'sha256-NGxJAeRnkyrA2OBRtnqvyQRY28RBBbWXd+45iwUuOUU=' 'sha256-F/cu6HUELqMYhkB6TZFkoZoPLA7wPQ+ImBdqTVxZPUc=' 'sha256-OH++59VDvU6yN74Q2UuMkDjXzMZbZYGxaTP1SrqUqJs='; connect-src 'self' https://www.google-analytics.com https://senedd.tv https://www.senedd.assembly.wales https://www.senedd.cynulliad.cymru https://apikeys.civiccomputing.com https://senedd.assembly.wales https://senedd.cynulliad.cymru; frame-src 'self' https://www.youtube.com/ https://www.google.com/ https://umap.openstreetmap.fr https://openstreetmap.cymru 1
default-src *.jam3.net *.jam3.com; manifest-src 'self';  base-uri 'self';  form-action 'self';  font-src 'self' data:;  frame-ancestors 'self';  object-src 'none'; media-src *.imgix.net 'self'; img-src *.imgix.net *.hsforms.com *.hubspot.com *.doubleclick.net *.trackjs.com 'self' blob: data: *.google-analytics.com; connect-src 'self' *.jam3.com *.doubleclick.net *.hubspot.com *.trackjs.com *.google-analytics.com;  script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.googletagmanager.com *.google-analytics.com; style-src 'self' 'unsafe-inline' tagmanager.google.com; 1
default-src 'unsafe-inline' 'unsafe-eval' https; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com ajax.googleapis.com s7.addthis.com *.nextopia.net *.doubleclick.net use.typekit.net www.google.com cdn.datatables.net www.googleadservices.com code.jquery.com www.googletagmanager.com vector.nextopiasoftware.com qssupplies.ecomm-nav.com www.google-analytics.com unpkg.com platform.twitter.com *.facebook.net *.qssupplies.co.uk api.mailgun.net files.qssupplies.co.uk; style-src 'self' 'unsafe-inline' cdn.nextopia.net *.googleapis.com unpkg.com *.typekit.net files.qssupplies.co.uk; img-src 'self' *.qssupplies.co.uk data: *.qssupplies.co.uk p.typekit.net www.google.com www.google.co.in stats.g.doubleclick.net files.qssupplies.co.uk www.google-analytics.com i.ytimg.com *.cloudfront.net *.nextopia.net; font-src 'self' data: use.typekit.net fonts.gstatic.com files.qssupplies.co.uk; connect-src * https://www.qssupplies.co.uk/ https://api.ideal-postcodes.co.uk/ https://api.mailgun.net/ performance.typekit.net; media-src 'self'; object-src 'none'; frame-src https://bid.g.doubleclick.net/ https://www.youtube.com/ https://www.qssupplies.co.uk/ *.facebook.com *.twitter.com *.google.com *.googletagmanager.com 1
frame-ancestors 'self' docs.google.com; frame-src 'self' *.youtube.com yastatic.net *.ofoct.com widget.getbutton.io docs.google.com; object-src 'self' docs.google.com 1
default-src https: 'unsafe-eval' 'unsafe-inline' 'self'; object-src 'none'; img-src https: data: blob:; connect-src blob: https:; 1
frame-ancestors self *.noqodi.com *.dubailand.gov.ae *.dubaistore.com *.emaratech.ae *.gdrfad.gov.ae https://www.mznboutique.com https://dashboard01.mznboutique.com  http://mzn-develop.tradinos.com *.crowdmarket.ae https://crowdmarket.ae https://cmsprime.com https://www.Elzit.com https://www.Elzit.net https://www.Smartgators.com https://www.Smartgators.pk https://www.Quanticco.com https://www.helpwithdebt.ae https://mobseva.com https://www.filpera.com https://www.zajel.com https://www.elzit.com http://staging.deliveritapp-apis.com http://deliveritapp-apis.com http://www.ifalcons.com https://pharmacourses.ae http://dairyondemand.com  https://www.scentube.ae https://www.focaltutor.com https://www.helpwithdebt.ae https://www.helpwithfinance.ae https://cjcmarketsglobal.com https://www.pallapay.com https://www.najmatalfa.com http://heattransfer.com https://www.tezkar.ae  1
frame-ancestors 'self' www.ninadesigns.com 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https:; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://fedibird.com https://maxcdn.bootstrapcdn.com; img-src 'self' https: data: blob: https://fedibird.com; style-src 'self' https://fedibird.com https://maxcdn.bootstrapcdn.com https://miy.pw 'nonce-TJDYhQmr4fWQ9tphWI/n8A=='; media-src 'self' https: data: https://fedibird.com; frame-src 'self' https:; manifest-src 'self' https://fedibird.com; connect-src 'self' data: blob: https://fedibird.com https://s3.fedibird.com wss://fedibird.com; script-src 'self' https://fedibird.com https://maxcdn.bootstrapcdn.com; child-src 'self' blob: https://fedibird.com; worker-src 'self' blob: https://fedibird.com 1
default-src 'self' *.addthis.com *.addthisedge.com s3.amazonaws.com *.qualaroo.com *.adnxs.com *.cloudflare.com *.crazyegg.com *.facebook.net *.facebook.com *.fsimg.co.nz *.google.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.gstatic.com *.google.co.nz www.googletagmanager.com *.googleoptimize.com tagmanager.google.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com maxcdn.icons8.com data: *.ishopnewworld.co.nz ishopnewworld.co.nz code.jquery.com api.mapbox.com ajax.aspnetcdn.com *.newrelic.com *.nr-data.net *.paymarkclick.co.nz app.redpepperdigital.net publications.redpepperdigital.net app.redpepperdigital.net getrockerbox.com *.getrockerbox.com my2.siteimprove.com www.surveygizmo.com static.ads-twitter.com *.typeform.com *.typekit.net *.3dsecurempi.com 'unsafe-eval' 'unsafe-inline' *.youtube.com *.ytimg.com shielded.co.nz staticcdn.co.nz *.salesforce.com *.salesforceliveagent.com *.force.com https://c.oracleinfinity.io https://dc.oracleinfinity.io blob: cl.qualaroo.com ;frame-ancestors 'self' *.newworld.co.nz ;style-src 'self' *.addthis.com *.addthisedge.com s3.amazonaws.com *.qualaroo.com *.adnxs.com *.cloudflare.com *.crazyegg.com *.facebook.net *.facebook.com *.fsimg.co.nz *.google.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.gstatic.com *.google.co.nz www.googletagmanager.com *.googleoptimize.com tagmanager.google.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com maxcdn.icons8.com data: *.ishopnewworld.co.nz ishopnewworld.co.nz code.jquery.com api.mapbox.com ajax.aspnetcdn.com *.newrelic.com *.nr-data.net *.paymarkclick.co.nz app.redpepperdigital.net publications.redpepperdigital.net app.redpepperdigital.net getrockerbox.com *.getrockerbox.com my2.siteimprove.com www.surveygizmo.com static.ads-twitter.com *.typeform.com *.typekit.net *.3dsecurempi.com 'unsafe-eval' 'unsafe-inline' *.youtube.com *.ytimg.com shielded.co.nz staticcdn.co.nz *.salesforce.com *.salesforceliveagent.com *.force.com https://c.oracleinfinity.io https://dc.oracleinfinity.io blob: cl.qualaroo.com ; 1
default-src 'self' vars.hotjar.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org static.cloud.coveo.com stats.g.doubleclick.net tdn.r42tag.com www.averoachmea.nl www.google-analytics.com connect.facebook.net *.usabilla.com www.googleadservices.com avero.speed-trap.nl googleads.g.doubleclick.net imp2.nowinteract.com api.usabilla.com cba-acct.svc.onmarc.nl static.hotjar.com script.hotjar.com d6tizftlrpuof.cloudfront.net ajax.googleapis.com bat.bing.com admin.relay42.com cse.google.com www.google.com a.svtrd.com  onmarc.nl snap.licdn.com px.ads.linkedin.com linkedin.com celebrus.avero.nl static.hotjar.com script.hotjar.com  js.hs-scripts.com js.hs-analytics.net js.hsadspixel.net js.hsleadflows.net collectie.avero.nl *.onmarc.nl js.hs-banner.com collectie.averoachmea.nl https://www.googletagmanager.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com d6tizftlrpuof.cloudfront.net www.google.com static.cloud.coveo.com;img-src data: 'self' img.youtube.com t.svtrd.com www.google-analytics.com www.facebook.com stats.g.doubleclick.net www.google.nl www.google.com d6tizftlrpuof.cloudfront.net avero.speed-trap.nl *.usabilla.com cm.g.doubleclick.net a.svtrd.com n01d05.cumulus-cloud.com tdn.r42tag.com admin.relay42.com bat.bing.com www.googleapis.com clients1.google.com avr.imgix.net px.ads.linkedin.com track.hubspot.com forms.hubspot.com celebrus.avero.nl *.onmarc.nl;font-src 'self' fonts.gstatic.com;connect-src 'self' wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.io *.hubapi.com api.hubspot.com forms.hubspot.com vc.hotjar.io cm.g.doubleclick.net connect.facebook.net googleads.g.doubleclick.net stats.g.doubleclick.net *.onmarc.nl https://www.google-analytics.com;media-src 'self' ;object-src 'self' ;child-src 'self' youtube.com 6162542.fls.doubleclick.net t.svtrd.com *.hotjar.com cba.nmrc.nl www.youtube-nocookie.com youtube-nocookie.com;frame-ancestors 'self' youtube.com www.youtube-nocookie.com youtube-nocookie.com;form-action 'self' t.svtrd.com *.averoachmeaonline.nl;block-all-mixed-content;report-uri https://c0918c210d42424be54e906e71357ca7.report-uri.io/r/default/csp/enforce; 1
default-src 'self' static.mycity.travel static.la-gruyere.ch * 'unsafe-inline' 'unsafe-eval' data: blob:; upgrade-insecure-requests; frame-ancestors: 'self' https://static.mycity.travel *; 1
img-src * data: blob:; connect-src 'self' wss://*.hotjar.com *.hotjar.com *.hotjar.io *.addthis.com  lydia-app.com *.lydia-app.com *.algolianet.com  , object-src 'self', frame-ancestors 'self', base-uri https://www.francealumni.fr/, form-action 'self' https://france-alumni-network.rpxnow.com https://france-alumni-network-preprod.rpxnow.com https://www.paristech-alumni.org https://www.wats4u.com https://www.xmp-consult.org 1
default-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com wow.zamimg.com; img-src 'self' *.worldofwarcraft.com; font-src 'self' fonts.gstatic.com; script-src 'self' 1
base-uri 'self'; block-all-mixed-content; child-src 'self' blob:; default-src 'none'; font-src * data:; form-action 'self' https://syndication.twitter.com; img-src * data: blob: 'unsafe-inline'; manifest-src 'none'; navigate-to *; object-src 'self'; prefetch-src *; script-src-attr 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; worker-src 'self' blob:; connect-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-src *; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; style-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'none'; media-src 'none' 1
default-src 'self';script-src 'unsafe-eval' 'unsafe-inline' 'self' *.facebook.com *.facebook.net *.fbcdn.net *.twitter.com *.google-analytics.com *.gstatic.com 'nonce-f0571c45-8482-4c90-a481-9789ad2966c6';font-src 'self' data:;style-src 'self' 'unsafe-inline';img-src 'self' grafana.trustroots.org https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com *.tile.openstreetmap.org *.earthdata.nasa.gov *.facebook.com *.fbcdn.net *.fbsbx.com *.twitter.com *.google-analytics.com *.gstatic.com *.googleusercontent.com *.g.doubleclick.net gravatar.com i0.wp.com i1.wp.com i2.wp.com data: blob:;connect-src 'self' https://api.mapbox.com https://events.mapbox.com https://tile.openstreetmap.org fcm.googleapis.com www.facebook.com https://sentry.io;object-src 'self';media-src 'self';form-action 'self';frame-ancestors 'none';child-src 'self' blob: *.twitter.com *.facebook.com;worker-src 'self' blob:;base-uri 'self';report-uri /api/report-csp-violation 1
script-src 'nonce-/YgV3ikfqDNxi0oH2wkIcw' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.google-analytics.com/analytics.js https://www.googleadservices.com https://googleads.g.doubleclick.net http://www.gstatic.com/wcm/;report-uri /_/GeoMerchantPrestoSiteUi/cspreport 1
default-src 'self' *.brightcove.com stats.g.doubleclick.net viz.tools.investis.com *.google-analytics.com *.google.com cdn.jsdelivr.net *.brewin.co.uk *.marketo.com *.googleapis.com *.hotjar.io *.facebook.com *.onetrust.com wss: *.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com *.google.com *.google.co.uk maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net *.googletagmanager.com *.google-analytics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edge.api.brightcove.com *.googleapis.com www.youtube.com s.ytimg.com unpkg.com *.brewin.co.uk *.marketo.com *.googleadservices.com *.licdn.com *.doubleclick.net player.vimeo.com https://www.google.co.in  optimize.google.com acdn.adnxs.com cdn-ukwest.onetrust.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' tagmanager.google.com p.typekit.net developers.google.com viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net *.brewin.co.uk *.marketo.com optimize.google.com; img-src 'self' 'unsafe-inline' * data:; media-src 'self' *.brightcove.com viz.tools.investis.com career5.successfactors.eu; frame-src 'self' staticcontents.investis.com www.google.com irs.tools.investis.com otp.tools.investis.com digital.feprecisionplus.com ir.tools.investis.com staticxx.facebook.com www.youtube.com maps.google.com player.vimeo.com *.brewin.co.uk *.marketo.com career5.successfactors.eu *.doubleclick.net *.hotjar.com *.facebook.com optimize.google.com; frame-ancestors 'self' *.career5.successfactors.eu; child-src 'self' *.career5.successfactors.eu; font-src 'self' 'unsafe-inline' use.typekit.net data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com *.hotjar.com; report-uri /report-csp-violation 1
default-src 'self' ; script-src 'self' http://az416426.vo.msecnd.net https://dc.services.visualstudio.com https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net data:; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com ; connect-src 'self' https://dc.services.visualstudio.com 'unsafe-inline'; frame-src 'self' https://www.youtube.com https://chat.nmgco.com; 1
frame-src https:; block-all-mixed-content; upgrade-insecure-requests 1
child-src 'self'; connect-src 'self' https://*.akamaihd.net https://*.cloudflare.com https://*.cloudfront.net https://*.g.doubleclick.net https://*.google-analytics.com https://*.googleapis.com https://*.helpscout.net https://*.helpscoutdocs.com https://*.ipify.org https://*.mifiel.co https://*.mxpnl.net https://*.nr-data.net https://*.volabit.com wss://*.volabit.com; default-src 'self'; font-src 'self' http://*.gstatic.com https://*.cloudflare.com https://*.gstatic.com https://*.mifiel.co https://*.s3-accelerate.amazonaws.com https://*.typekit.net https://*.volabit.com wss://*.volabit.com; frame-src 'self' http://*.facebook.com https://*.akamaihd.net https://*.cloudfront.net https://*.coincove.co https://*.facebook.com https://*.google.com https://*.vimeo.com https://*.youtube.com; img-src 'self' data: http://*.facebook.com http://*.gstatic.com http://*.twimg.com https://*.akamaihd.net https://*.cloudfront.net https://*.facebook.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.google.com.mx https://*.googleapis.com https://*.googletagmanager.com https://*.googleusercontent.com https://*.gstatic.com https://*.mxpnl.com https://*.nr-data.net https://*.openpay.mx https://*.s3-accelerate.amazonaws.com https://*.volabit.com https://*.xx.fbcdn.net wss://*.volabit.com; manifest-src 'self'; media-src 'self'; object-src 'self' https://*.cloudfront.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' http://*.gstatic.com https://*.akamaihd.net https://*.cloudfront.net https://*.coincove.co https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.gstatic.com https://*.helpscout.net https://*.mifiel.co https://*.newrelic.com https://*.nr-data.net https://*.s3-accelerate.amazonaws.com https://*.segment.com https://*.volabit.com wss://*.volabit.com; style-src 'self' 'unsafe-inline' https://*.cloudfront.net https://*.googleapis.com https://*.mifiel.co https://*.typekit.net https://*.volabit.com wss://*.volabit.com; worker-src 'self' blob:; prefetch-src 'self'; report-uri https://reports-api.sqreen.io/browser/v0/csp-violations/csp_18b82d5467804154a3e96d204ef1679a 1
base-uri 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tarteaucitron.io *.typekit.net *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com ;style-src 'self' 'unsafe-inline' https://tarteaucitron.io *.typekit.net *.googleapis.com *.google.com;font-src 'self' data: *.typekit.net *.gstatic.com *.googleapis.com ;connect-src 'self';media-src 'self' *.w.org *.youtube.com;worker-src 'self' *.google.com *.youtube.com;object-src 'self';form-action 'self'; 1
default-src * 'self' m5.msy.gov.ir:* *.m5.msy.gov.ir:* itpishkhan.ir:* *.itpishkhan.ir:* hooshco.com:* *.hooshco.com:* ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com:* *.bootstrapcdn.com:* *.gstatic.com:* http://*:* m5.msy.gov.ir:* *.m5.msy.gov.ir:* itpishkhan.ir:* *.itpishkhan.ir:* hooshco.com:* *.hooshco.com:* ; style-src 'self' 'unsafe-inline' *.google.com:* *.bootstrapcdn.com:* m5.msy.gov.ir:* *.m5.msy.gov.ir:* itpishkhan.ir:* *.itpishkhan.ir:* hooshco.com:* *.hooshco.com:* ; img-src data: blob: 'self' *.google.com:* *.bootstrapcdn.com:* http://*:* m5.msy.gov.ir:* *.m5.msy.gov.ir:* itpishkhan.ir:* *.itpishkhan.ir:* hooshco.com:* *.hooshco.com:* ; connect-src 'self' http://*:* ws://localhost:* m5.msy.gov.ir:* *.m5.msy.gov.ir:* itpishkhan.ir:* *.itpishkhan.ir:* hooshco.com:* *.hooshco.com:* ; child-src 'self' *.google.com:* *.bootstrapcdn.com:* *.gstatic.com:* m5.msy.gov.ir:* *.m5.msy.gov.ir:* itpishkhan.ir:* *.itpishkhan.ir:* hooshco.com:* *.hooshco.com:* ; frame-src 'self' *.google.com:* *.bootstrapcdn.com:* *.gstatic.com:* m5.msy.gov.ir:* *.m5.msy.gov.ir:* itpishkhan.ir:* *.itpishkhan.ir:* hooshco.com:* *.hooshco.com:* ; frame-ancestors 'self' *.google.com:*  *.bootstrapcdn.com:* *.gstatic.com:* m5.msy.gov.ir:* *.m5.msy.gov.ir:* itpishkhan.ir:* *.itpishkhan.ir:* hooshco.com:* *.hooshco.com:* ; reflected-xss filter; referrer no-referrer-when-downgrade;  1
font-src 'self' https://hello.myfonts.net https://www.lightboxcdn.com https://s3.lightboxcdn.com https://c1.rfihub.net https://fonts.googleapis.com https://fonts.gstatic.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://ajax.googleapis.com https://www.lightboxcdn.com https://lightboxapi.azurewebsites.net https://cdn.boomtrain.com https://lib.paymentjs.firstdata.com https://c1.rfihub.net https://www.googletagmanager.com https://connect.facebook.net https://a.rfihub.com https://maps.googleapis.com cdn.rawgit.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://docs.paymentjs.firstdata.com https://player.vimeo.com https://static.addtoany.com maps.google.com; style-src 'self' https://hello.myfonts.net https://www.lightboxcdn.com https://s3.lightboxcdn.com https://c1.rfihub.net https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com 'unsafe-inline'; frame-ancestors 'self'; report-uri https://www.balduccis.com/report-uri/enforce 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-MDI1ZjZjNWYtZmZiYi00ZWY5LTk3N2ItZGJjNGEyY2NjM2My'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.cloudflare.com ajax.googleapis.com assets.visme.co bat.bing.com cdn.omnicalculator.com live.r3engage.com my.visme.co rum-static.pingdom.net s.ytimg.com script.hotjar.com smartforms.ekomi.com static.cloudflareinsights.com static.hotjar.com widget.trustpilot.com www.google.co.uk www.google.com www.googleadservices.com www.googletagmanager.com www.youtube.com www.google-analytics.com googleads.g.doubleclick.net *.addthis.com *.infogram.com optimize.google.com accounts.google.com 1
frame-src 'self' *.google.com *.facebook.com *.it-plus.org *.youtube.com *.edulla.ai *.programmatictrader.com *.sitescout.com *.campaign-archive.com; frame-ancestors 'self' *.it-plus.org *.coxnext.com *.trainwithtcsg.com; 1
base-uri 'https://*.pchome.co.th'; 1
child-src https://*.bitstatement.net; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com 'strict-dynamic' 'nonce-MzE5MjYwMzI0NiwzMjg5NTUwMDUw'; report-uri https://exceptions.hubspot.com/csp/report; 1
upgrade-insecure-requests; default-src 'none'; frame-src https://wpower.typeform.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; font-src 'self'; img-src https: data:; object-src 'none'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://embed.typeform.com https://snap.licdn.com https://connect.facebook.net https://static.ads-twitter.com https://a.quora.com https://*.twitter.com/ 'sha256-OsY0ogz1cLhr5tz6P1rgSkpX6WO/2EEqBkm/hdkOXrI=' 'sha256-X7AoVSC5ydl8R8CLlhFK43/bUu2pEp5lNUd5ehDYKns=' 'sha256-THCBjpkpjlruCtGs6yEhjShSdvHeINtLMlqiBA4X7dE=' 'sha256-kEM/SiGiA7GZbnKudp+pf6hzp4a5mbgWJ/T87pHRpUQ=' 'sha256-aaKpaL6BsGrknhezcXXT3jMl0XJjay7M33x67Ql5i00=' 'sha256-SlR47P5OhpAwZ6nt+bCWB7V6mje3XwkceP6wwK2iEGo=' 'sha256-xwnDakAb2Gj3mzOl/BXY9gYUmKxyS3dIHmQDIayX/hc='; style-src 'self' https://embed.typeform.com 'unsafe-inline'; media-src 'self' 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'  *.googleapis.com *.google.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.jsdelivr.net *.fontawesome.com *.wistia.com *.redcalidad.com; connect-src 'self'  *.redcalidad.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.fontawesome.com ; img-src 'self' data:  *.openstreetmap.org placehold.it *.w.org *.google-analytics.com *.doubleclick.net *.google.com *.google.cl *.googletagmanager.com *.redcalidad.com; style-src 'self' 'unsafe-inline' *.redcalidad.com  fonts.googleapis.com *.fontawesome.com; frame-src 'self'  *.trencentral.cl *.youtube.com *.google.com *.redcalidad.com; 1
upgrade-insecure-requests; report-uri /cgi-bin/report-uri 1
img-src 'self'; script-src 'self' blob:; style-src 'self' 'unsafe-inline' https://hello.myfonts.net; font-src 'self'; worker-src blob:; connect-src 'self' https://*.zotero.org https://t0guvf0w17.execute-api.us-east-1.amazonaws.com https://v1snar4wu4.execute-api.us-east-1.amazonaws.com https://zbib-data.s3.amazonaws.com; object-src 'none' 1
frame-ancestors 'self' https://backend.diario26.com 1
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; form-action https:; frame-ancestors tweakers.net *.tweakers.net; report-uri https://tweakers.net/csp-report/?requestId=Twk-eun-web1_198.5.1_44171_5feab5ed1c0089.03683813 1
block-all-mixed-content;, block-all-mixed-content; 1
frame-ancestors 'self' https://www.kayak.fr 1
default-src *; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; 1
default-src 'self' https://www.sumida.com http://www.sumida.com *.sumida.com *.google.com *.onetrust.com; font-src 'self' fast.fonts.net fonts.gstatic.com; frame-src data: 'self' *.sumida.com; img-src data: 'self' https://www.sumida.com http://www.sumida.com *.sumida.com *.googleapis.com *.google.com www.google-analytics.com *.gstatic.com stats.g.doubleclick.net job.mynavi.jp *.onetrust.com; script-src data: 'self' 'unsafe-eval' 'unsafe-inline' *.sumida.com *.cloudfront.net code.jquery.com fast.fonts.net www.googletagmanager.com www.google-analytics.com *.google.com *.onetrust.com; style-src data: 'self' 'unsafe-inline' https://www.sumida.com *.sumida.com *.cloudfront.net fast.fonts.net *.googleapis.com *.google.com; object-src 'self' *.sumida.com; 1
default-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; 1
connect-src 'self' https://*.litix.io https://*.s3-accelerate.amazonaws.com https://*.s3.amazonaws.com https://*.stripe.com https://*.wistia.com https://api.segment.io https://app.getvero.com https://cdn.segment.com https://embedwistia-a.akamaihd.net https://heydovetail.myshopify.com https://sentry.io https://stats.g.doubleclick.net https://www.google-analytics.com wss://dovetailapp.com wss://dovetailappstg.com; default-src 'self' https://*.wistia.com https://*.wistia.net; font-src 'self' data: https://*.wistia.com https://fonts.gstatic.com; frame-src 'self' https://*.stripe.com https://fast.wistia.com https://fast.wistia.net https://webhook.frontapp.com/ https://www.google.com; img-src 'self' blob: data: https://*.dovetailapp.com https://*.dovetailappstg.com https://*.s3-accelerate.amazonaws.com https://*.s3.amazonaws.com https://*.stripe.com https://*.wistia.com https://*.wistia.net https://cdn.shopify.com https://cdn.zapier.com https://embed-ssl.wistia.com https://embedwistia-a.akamaihd.net https://images.ctfassets.net https://images.unsplash.com https://ssl.gstatic.com https://tagmanager.google.com https://www.google-analytics.com https://www.google.ae https://www.google.at https://www.google.be https://www.google.bs https://www.google.by https://www.google.ca https://www.google.ch https://www.google.ch https://www.google.co.cr https://www.google.co.hp https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.ke https://www.google.co.kr https://www.google.co.nz https://www.google.co.th https://www.google.co.tz https://www.google.co.uk https://www.google.co.za https://www.google.co.zw https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.br https://www.google.com.ec https://www.google.com.eg https://www.google.com.hk https://www.google.com.mx https://www.google.com.my https://www.google.com.ng https://www.google.com.pe https://www.google.com.ph https://www.google.com.pk https://www.google.com.sg https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.vn https://www.google.com https://www.google.cl https://www.google.cz https://www.google.de https://www.google.dk https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.gr https://www.google.hu https://www.google.hr https://www.google.ie https://www.google.iq https://www.google.it https://www.google.lk https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.sk https://www.google.tr https://www.googletagmanager.com https://www.gstatic.com https://zapier-images.imgix.net; media-src 'self' blob: data: https://*.s3-accelerate.amazonaws.com https://*.s3.amazonaws.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net; prefetch-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.sentry-cdn.com https://*.stripe.com https://*.wistia.com https://*.wistia.net https://api.segment.io https://cdn.segment.com https://src.litix.io https://ssl.google-analytics.com https://tagmanager.google.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' blob: https://fast.wistia.com https://fonts.googleapis.com https://tagmanager.google.com; worker-src 'self' blob:; report-uri https://o74703.ingest.sentry.io/api/1189595/security/?sentry_key=326d6efba0f941a1b9848ce52e78d761 1
script-src 'nonce-a1fc5ae72224e720694b76f36a26942c' 'nonce-hegSxinnl1hJcFBeneKgNxN1uyQkxLbCOoy3cbrEGrQ=' 'self' 'unsafe-eval' https: 'sha256-jTbbX7kA2AFEiHkjGYboK9ooUurX+Mc9th2/quUZwkI=' 'sha256-yntX1DMo3v8w5zK0Wt5LS96gm1dTl95wU0As+x8+vsU='; frame-ancestors 'none' 1
default-src 'none'; script-src 'self'; style-src 'self'; base-uri 'self'; object-src 'none'; connect-src 'self'; frame-ancestors 'none'; form-action 'none'; img-src 'none' 1
upgrade-insecure-requests; default-src 'none'; base-uri 'none'; form-action 'self' https://www2.inmarsataviation.com https://www2.inmarsat.com https://www.facebook.com; connect-src 'self' https://www.facebook.com https://develop-inmarsatweb.cs66.force.com https://inmarsatweb.force.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.addthis.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://inmarsatweb.force.com https://develop-inmarsatweb.cs66.force.com; img-src 'self' data: https://www.linkedin.com https://i.ytimg.com https://p.adsymptotic.com https://www.facebook.com https://px.ads.linkedin.com https://t.co https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://addevent.com https://*.addevent.com https://*.addthis.com; media-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://develop-inmarsatweb.cs66.force.com https://*.inmarsataviation.com https://*.inmarsat.com https://inmarsatweb.force.com https://pi.pardot.com https://z.moatads.com https://snap.licdn.com https://static.ads-twitter.com https://analytics.twitter.com https://connect.facebook.net https://graph.facebook.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://tagmanager.google.com https://www.youtube.com https://s.ytimg.com https://addthisevent.com https://*.addthisevent.com https://*.addevent.com https://*.addthis.com https://*.addthisedge.com; style-src 'self' 'unsafe-inline' https://develop-inmarsatweb.cs66.force.com https://inmarsatweb.force.com https://tagmanager.google.com https://fonts.googleapis.com; frame-ancestors 'self'; frame-src 'self' https://player.vimeo.com https://www.facebook.com https://www.google.com https://www.youtube.com https://*.addthis.com; 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.workbooks.com/ https://www.youtube.com/ https://*.calendly.com https://s.ytimg.com https://maps.googleapis.com https://maps.google.com https://*.liveperson.net https://*.lpsnmedia.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://load.sumome.com https://cdn.optimizely.com https://js.hs-analytics.net https://connect.facebook.net https://js.hsforms.net https://forms.hubspot.com https://js.hs-scripts.com https://communigator.co.uk https://*.communigator.co.uk https://*.gatorleads.co.uk https://t.wowanalytics.co.uk https://cgtforms.com https://sumome-140a.kxcdn.com https://api.bufferapp.com https://graph.facebook.com https://api.facebook.com https://www.linkedin.com https://widgets.pinterest.com https://buttons.reddit.com https://api.hubapi.com https://api.survicate.com https://*.adroll.com https://snap.licdn.com https://*.linkedin.com https://zapier.com https://api.usemessages.com https://www.bizographics.com https://sumo.b-cdn.net https://workbooks.bamboohr.com https://workbooks-dev.workbooks.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://wb.workbooks.com https://sjs.bizographics.com https://storage.googleapis.com https://uaadcodedsp.rontar.com; object-src 'self' 1
frame-ancestors 'self' http://swap.tendermeets.com 1
default-src 'none'; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://maps.gstatic.com https://maps.googleapis.com https://photo.staysafe.ph https://www.googletagmanager.com https://www.google.com https://www.google.com.ph https://www.google-analytics.com https://www.gstatic.com https://stats.g.doubleclick.net https://ucarecdn.com https://www.countryflags.io https://www.google.com.sg https://i.ytimg.com https://yt3.ggpht.com https://*.staysafe.ph https://*.facebook.com https://*.fbsbx.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://s.ytimg.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google.com https://www.google-analytics.com https://www.gstatic.com https://*.firebaseio.com https://static.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; object-src 'none'; base-uri 'self'; connect-src https://stats.g.doubleclick.net https://www.google-analytics.com https://www.facebook.com https://www.googleapis.com https://securetoken.googleapis.com https://*.staysafe.ph https://*.google.com https://upload.uploadcare.com https://ucarecdn.com wss://*.firebaseio.com https://googleads.g.doubleclick.net https://www.youtube.com; font-src 'self' data: https://fonts.googleapis.com https://www.gstatic.com https://fonts.gstatic.com; manifest-src 'self'; frame-src 'self' https://*.youtube.com https://www.youtube-nocookie.com https://www.google.com https://*.firebaseio.com; worker-src 'self' blob:; frame-ancestors 'self'; child-src 'self' blob: 1
frame-ancestors 'self' https://*.yandex.ru https://yastatic.net http://*.webvisor.com http://webvisor.com; 1
object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' stratis.fr matomo.blois.fr blois.fr dev.virtualearth.net; style-src 'self' 'unsafe-inline' stratis.fr matomo.blois.fr blois.fr; base-uri 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.mazobo.com *.gstatic.com *.google.com *.youtube.com *.ytimg.com *.firebaseio.com *.gravatar.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.accupass.com *.ecloudvalley.com wss://* data:; 1
child-src 'self'; connect-src * ws: swapi.co; img-src 'self' 'unsafe-inline' data: ctia.wpengine.com ctia-wp.herokuapp.com ctia.staging.wpengine.com ctiastage.wpengine.com ctiadev.wpengine.com www.ctia.org *.facebook.com *.google-analytics.com t.co *.amazonaws.com *.ctia.org maps.googleapis.com img.youtube.com newton.newtonsoftware.com recruitingbypaycor.com; font-src 'self' data: fonts.googleapis.com/css fonts.gstatic.com *.ctia.org; object-src 'self'; media-src 'self' ctia.wpengine.com ctia.staging.wpengine.com ctiastage.wpengine.com ctiadev.wpengine.com ctia-wp.herokuapp.com s3.amazonaws.com *.ctia.org *.youtube.com newton.newtonsoftware.com recruitingbypaycor.com; manifest-src 'self'; script-src 'self' 'unsafe-eval' *.ctia.org www.ctia.org ctia.wpengine.com ctia.staging.wpengine.com ctiastage.wpengine.com ctiadev.wpengine.com cdn.polyfill.io *.google-analytics.com connect.facebook.net static.ads-twitter.com analytics.twitter.com newton.newtonsoftware.com recruitingbypaycor.com *.ctia.org *.youtube.com *.ytimg.com 'sha256-1gIG1EI7ABKBfq8rVwk7j2MeEOIlut5+TbLxyAnCYTA=' 'sha256-lURjrzjvUlijq7DyYnY95P2Ioks8cTbCwA7GHc4nmOk=' 'sha256-X1VaHAtsVNw3rpnWZYc5sce9YXdXd8AKYdF3HA83kdU=' 'sha256-gtKFj0yNetpIDkA36Pz+kl6/tx8y2XsLtD/uFt4lUYk=' 'sha256-y6V60URtLC4XwmPXpXCf3YquJ+Cjbpnfm5AvxwkBPUM=' 'sha256-UP7FNT7cTTjYMBjLjUP0d5R8G+RhLEjv1s7FxIksck8=' 'sha256-pbnpgPqiBOz7hzoiMSGIC6tFh9u6/XYdxr8SaGCgv78='; style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com; frame-src *.vimeo.com *.youtube.com *.ctia.org flickrembed.com *.youtube.com youtu.be *.youtu.be *.boxwoodtech.com newton.newtonsoftware.com recruitingbypaycor.com 1
img-src blob: * android-webview-video-poster: data:; font-src * data:; child-src tel: *; default-src beta.idisign.ch *.cashgate.ch 'unsafe-eval' *.gstatic.com www.newhome.ch www.wuestpartner.com 'self' data: *.googleapis.com start.unblu.com wss://*.unblu.com dis.swisscom.ch *.sgkb.ch *.unblu.com 'unsafe-inline' recruitingapp-1154.umantis.com test.idisign.ch 1
default-src * 'unsafe-inline' 'unsafe-eval' data:; script-src 'self' https://*.yandex.ru https://zoogalaktika.ru https://www.google-analytics.com/analytics.js https://top-fwz1.mail.ru/js/code.js https://st.top100.ru/top100/top100.js 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; report-uri https://zoogalaktika.ru/csp 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://www.google-analytics.com https://*.googleapis.com https://apis.google.com https://maps.gstatic.com https://*.ggpht.com data: https://connect.facebook.net https://www.facebook.com http://staticxx.facebook.com https://staticxx.facebook.com https://cdnjs.cloudflare.com https://unpkg.com https://netdna.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.shopify.com https://geolocation-db.com; frame-ancestors 'self' 1
default-src https:;img-src https: data:;script-src https: 'unsafe-inline' 'unsafe-eval';style-src https: 'unsafe-inline' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net api.orangefootballclub.com 178.32.6.108 www.surveygizmo.eu help.dimelo.com cobrowsing.eu2.digital.ringcentral.com orange-ci.engagement.dimelo.com dimelo-chat.s3.amazonaws.com orange-ci.ws.dimelochat.com orange-ci.dimelochat.com orange-ci.ws.dimelo.com orange-ci.messaging.dimelo.com sfdc.dimelo.com engagement-connect.herokuapp.com sbdatrade.com www.google.com atlassian-companion optimize.google.com www.jeuneafrique.com sjs.bizographics.com s.ytimg.com www.youtube.com tagmanager.google.com w.usabilla.com appstatic.quanta.io completion.ke.orange.fr img.ke.woopic.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com ajax.googleapis.com graph.facebook.com urls.api.twitter.com api.pinterest.com www.linkedin.com script.crazyegg.com; style-src 'self' 'unsafe-inline' api.orangefootballclub.com 178.32.6.108 www.surveygizmo.eu help.dimelo.com cobrowsing.eu2.digital.ringcentral.com orange-ci.engagement.dimelo.com dimelo-chat.s3.amazonaws.com orange-ci.ws.dimelochat.com orange-ci.dimelochat.com orange-ci.ws.dimelo.com orange-ci.messaging.dimelo.com sfdc.dimelo.com engagement-connect.herokuapp.com sbdatrade.com www.google.com atlassian-companion optimize.google.com www.jeuneafrique.com img.ke.woopic.com; img-src data: 'self' 'unsafe-inline' api.orangefootballclub.com 178.32.6.108 www.surveygizmo.eu help.dimelo.com cobrowsing.eu2.digital.ringcentral.com orange-ci.engagement.dimelo.com dimelo-chat.s3.amazonaws.com orange-ci.ws.dimelochat.com orange-ci.dimelochat.com orange-ci.ws.dimelo.com orange-ci.messaging.dimelo.com sfdc.dimelo.com engagement-connect.herokuapp.com sbdatrade.com www.google.com atlassian-companion optimize.google.com www.jeuneafrique.com px.ads.linkedin.com i.ytimg.com fr.orangefootballclub.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.com.pk www.google.fr rum-metrics.quanta.io d212beldn0wvcm.cloudfront.net dimelo.s3.amazonaws.com; form-action 'self'; object-src 'self'; frame-src 'self' 'unsafe-inline' api.orangefootballclub.com 178.32.6.108 www.surveygizmo.eu help.dimelo.com cobrowsing.eu2.digital.ringcentral.com orange-ci.engagement.dimelo.com dimelo-chat.s3.amazonaws.com orange-ci.ws.dimelochat.com orange-ci.dimelochat.com orange-ci.ws.dimelo.com orange-ci.messaging.dimelo.com sfdc.dimelo.com engagement-connect.herokuapp.com sbdatrade.com www.google.com atlassian-companion optimize.google.com www.jeuneafrique.com www.youtube.com datastudio.google.com otapoci.gos.orange.com; 1
upgrade-insecure-requests; default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://*.npdcevents.co.nz https://*.npdcevents.nz https://*.npdcapps.co.nz https://*.npdc.govt.nz https://www.google-analytics.com https://www.googletagmanager.com https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.youtube.com https://*.addevent.com https://js.arcgis.com https://services.cognitoforms.com https://www.cognitoforms.com/ https://www.ustream.tv https://api.applicationinsights.io https://addevent.com https://app.powerbi.com https://*.mailchimp.com https://npdc.maps.arcgis.com https://app.surveygizmo.com https://www.surveygizmo.com https://*.blob.core.windows.net/ https://www.npdcevents.nz/ https://*.azurewebsites.net/ https://connect.facebook.net https://www.facebook.com https://www.googleadservices.com https://www.google.co.nz https://*.doubleclick.net https://sketchfab.com 1
default-src 'self'; script-src 'self' *.init-ag.de cdnjs.cloudflare.com *.twimg.com *.twitter.com api.energielabel-erklaert.de static.etracker.com code.etracker.com www.etracker.de www.energie-effizienz-experten.de customers.lmis.de 'unsafe-eval' 'unsafe-inline' *.jwpcdn.com *.jquery.com; connect-src 'self' *.init-ag.de *.streamfarm.net *.deutschland-machts-effizient.de *.etracker.de; img-src * data:; style-src 'self' *.twimg.com *.twitter.com api.energielabel-erklaert.de 'unsafe-inline' *.jwpcdn.com; font-src 'self' *.jwpcdn.com data:; frame-src *.twitter.com *.deutschland-machts-effizient.de *.energielabel-erklaert.de *.energie-effizienz-experten.de customers.lmis.de:443; media-src 'self' *.streamfarm.net; frame-ancestors 'self'  *.kfw.de *.bafa.de; object-src 'self'; 1
frame-ancestors 'self'; report-uri https://www.croquonslavie.fr/report-uri/enforce 1
default-src 'self' themes.googleusercontent.com www.google-analytics.com stats.g.doubleclick.net data: 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'self' http://hag-sappoh1.aoc.eu http://hag-sappop1.aoc.eu 1
default-src 'self' https://origin-www.appliedmaterials.com http://origin-www.appliedmaterials.com; script-src 'self' 'unsafe-eval' maps.googleapis.com http://www.google-analytics.com https://www.google-analytics.com www.googletagmanager.com www.eiseverywhere.com js-agent.newrelic.com *.nr-data.net www.recaptcha.net www.gstatic.com vjs.zencdn.net https://*.go-mpulse.net https://origin-www.appliedmaterials.com 'unsafe-inline'; object-src 'self' www.eiseverywhere.com; style-src 'self' fonts.googleapis.com www.gstatic.com vjs.zencdn.net https://origin-www.appliedmaterials.com http://origin-www.appliedmaterials.com https://origin-www.appliedmaterials.com 'unsafe-inline'; img-src 'self' *.googleapis.com www.google-analytics.com stats.g.doubleclick.net maps.gstatic.com maps.googleapis.com www.google.com www.google.com.sg www.google.com.tw www.google.co.il www.google.co.in www.google.co.kr www.google.co.uk www.googletagmanager.com ml.globenewswire.com www.globenewswire.com resource.globenewswire.com na.eventscloud.com www.eiseverywhere.com bam.nr-data.net  http://*.prod.acquia-sites.com https://*.prod.acquia-sites.com  http://*.appliedmaterials.com https://*.appliedmaterials.com data:; frame-src 'self' www.google.com www.youtube.com; font-src 'self' fonts.gstatic.com themes.googleusercontent.com vjs.zencdn.net http://origin-www.appliedmaterials.com https://origin-www.appliedmaterials.com data:; connect-src 'self' www.google-analytics.com *.nr-data.net stats.g.doubleclick.net https://*.akamaihd.net https://*.akstat.io https://*.go-mpulse.net; report-uri /admin/config/system/seckit/csp-report 1
default-src 'self'; style-src 'self' fonts.googleapis.com 'unsafe-inline'; img-src 'self' maps.gstatic.com maps.googleapis.com piwik.wdv.de data:; script-src 'self'  maps.googleapis.com *.google.com *.gstatic.com piwik.wdv.de 'unsafe-inline'; base-uri 'self'; form-action 'self' https://www.yellowmap.de; frame-ancestors 'self'; font-src 'self' fonts.googleapis.com fonts.gstatic.com; frame-src 'self' *.google.com *.youtube-nocookie.com piwik.wdv.de; report-uri /csp/csp-log.php 1
base-uri 'none'; default-src 'none'; style-src *.joinboulevard.com  *.joinboulevard.io  *.boulevard.com  *.boulevard.io *.optimand.com cdn.jsdelivr.net *.cloudflare.com fonts.googleapis.com 'unsafe-inline' 'self' blob: https://netdna.bootstrapcdn.com *.bootstrapcdn.com https://use.fontawesome.com cc-cdn.com ; frame-src 'self' *.joinboulevard.com  *.joinboulevard.io  *.boulevard.com  *.boulevard.io *.optimand.com player.vimeo.com *.youtube.com youtube.com *.firebaseio.com; manifest-src  'self'; script-src *.jquery.com connect.facebook.net d2ztzch1on49qv.cloudfront.net *.joinboulevard.com  *.joinboulevard.io  *.boulevard.com  *.boulevard.io *.optimand.com *.cloudflare.com *.bootstrapcdn.com https://www.gstatic.com cdn.jsdelivr.net 'unsafe-inline' 'self' *.firebaseio.com https://www.google-analytics.com cc-cdn.com 'unsafe-eval'   ; img-src *.joinboulevard.com  *.joinboulevard.io  *.boulevard.com  *.boulevard.io *.optimand.com 'self' https: data: blob: cc-cdn.com  ;font-src 'self' data: https:; connect-src 'self' blob: wss: googleapis.com *.googleapis.com https://hclub.com:8080 http://hclub.com:8080 https://api.craftyclicks.co.uk *.amazonaws.com ; frame-ancestors 'self' youtube.com *.youtube.com; media-src *.joinboulevard.com  *.joinboulevard.io  *.boulevard.com  *.boulevard.io *.optimand.com 'self'; object-src 'self'; 1
default-src 'self' *.mdm.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://gateway.answerscloud.com https://gateway.foresee.com https://www.googleadservices.com https://analytics.twitter.com https://rules.quantcount.com https://optimize.google.com www.google-analytics.com bam.nr-data.net *.mdm.ca *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com www.googletagmanager.com tagmanager.google.com static.ads-twitter.com sjs.bizographics.com secure.quantserve.com bat.bing.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api https://widget.intercom.io https://js.intercomcdn.com https://js-agent.newrelic.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://polyfill.io https://snap.licdn.com; style-src 'self' 'unsafe-inline' https://gateway.answerscloud.com https://gateway.foresee.com https://optimize.google.com https://fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com *.typekit.net *.mdm.ca; img-src 'self' *.mdm.ca www.google-analytics.com https://www.google.com/ads https://www.google.ca https://feedback-logo.foresee.com https://gateway.answerscloud.com https://gateway.foresee.com https://optimize.google.com https://i.ytimg.com https://content.cdntwrk.com/files/ ssl.gstatic.com *.gstatic.com *.googleapis.com *.google-analytics.com https://bat.bing.com https://*.g.doubleclick.net https://pixel.quantserve.com https://px.ads.linkedin.com https://p.adsymptotic.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com https://t.co/i/adsct; font-src 'self' https://gateway.answerscloud.com https://gateway.foresee.com https://optimize.google.com tagmanager.google.com fonts.googleapis.com *.mdm.ca js.intercomcdn.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com *.typekit.net data:; connect-src 'self' *.mdm.ca blob: https://hoover.foresee.com https://brain.foresee.com https://record.foresee.com https://analytics.foresee.com https://survey.foreseeresults.com bam.nr-data.net https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://www.google-analytics.com; media-src 'self' data: blob:; child-src 'self' blob: *.mdm.ca https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://www.google.com; frame-src 'self' 'unsafe-inline' *.mdm.ca *.doubleclick.net https://accounts.google.com https://content.googleapis.com https://optimize.google.com www.youtube.com www.google.com https://www.buzzsprout.com https://www.facebook.com; frame-ancestors 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: file: blob: *.aa.com *.bugherd.com *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.cloudflare.com *.doubleclick.net *.demdex.net *.everestjs.net *.everesttech.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google.co.uk *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.gravatar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.serving-sys.com *.tiqcdn.com *.typekit.net *.youtube.com *.zencdn.net ;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: file: blob: *.aa.com *.bugherd.com *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.cloudflare.com *.doubleclick.net *.demdex.net *.everestjs.net *.everesttech.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google.co.uk *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.gravatar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.serving-sys.com *.tiqcdn.com *.typekit.net *.youtube.com *.zencdn.net ;img-src 'self' 'unsafe-inline' 'unsafe-eval' data: file: blob: *.aa.com *.bugherd.com *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.cloudflare.com *.doubleclick.net *.demdex.net *.everestjs.net *.everesttech.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google.co.uk *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.gravatar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.serving-sys.com *.tiqcdn.com *.typekit.net *.youtube.com *.zencdn.net ;media-src 'self' 'unsafe-inline' 'unsafe-eval' data: file: blob: *.aa.com *.bugherd.com *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.cloudflare.com *.doubleclick.net *.demdex.net *.everestjs.net *.everesttech.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google.co.uk *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.gravatar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.serving-sys.com *.tiqcdn.com *.typekit.net *.youtube.com *.zencdn.net ;frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: file: blob: *.aa.com *.bugherd.com *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.boltdns.net *.cloudflare.com *.doubleclick.net *.demdex.net *.everestjs.net *.everesttech.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google.co.uk *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.gravatar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.serving-sys.com *.tiqcdn.com *.typekit.net *.youtube.com *.zencdn.net ; 1
upgrade-insecure-requests; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; form-action 'self'; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self'; img-src 'self' data:; object-src 'none'; 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://healthcareinamerica.us https://*.healthcareinamerica.us https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self'; script-src  'self' data: https: 'unsafe-inline' 'unsafe-eval'; style-src   'self' data: https: 'unsafe-inline'; img-src     'self' data: https: blob:; font-src    'self' data: https:; connect-src 'self' wss: https:; media-src   'self' wss: https: blob:; frame-src   'self' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://youtube.com/ https://www.youtube.com/; 1
base-uri 'self'; img-src * data: 'unsafe-inline'; default-src data: * 'unsafe-inline'; frame-ancestors 'self'; manifest-src 'self'; media-src *.readspeaker.com *.speechstream.net 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; object-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdnjs.cloudflare.com https://ajax.googleapis.com https://npmcdn.com https://static.zdassets.com https://ekr.zdassets.com https://www.google-analytics.com https://sdk.form.run; data:; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://ajax.googleapis.com https://fonts.googleapis.com https://npmcdn.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' blob: data: https://beauty.kanzashi.com https://kanzashi-beauty-stg.pp-dev.org https://ajax.googleapis.com https://s3.amazonaws.com https://s3-ap-northeast-1.amazonaws.com https://cdnjs.cloudflare.com https://chart.apis.google.com https://www.google-analytics.com https://www.google.com https://www.google.co.jp https://stats.g.doubleclick.net; frame-src 'self' https://form.run; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://ekr.zdassets.com; report-uri https://pacificporter.report-uri.com/r/d/csp/enforce 1
frame-ancestors 'self' *.printingforless.com mypfl.com *.eventbrite.com *.hrservicesinc.com *.stabletransit.com *.marketo.com *.youcanbook.me go.pfl.com 1
frame-ancestors entertainment.unitymedia.de 1
default-src 'self' p11.techlab-cdn.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cdw.com *.richrelevance.com *.bazaarvoice.com *.qualtrics.com *.optimizely.com *.hotjar.com *.needle.com nexus.ensighten.com px.spiceworks.com *.liadm.com scripts.demandbase.com triggeredmail.appspot.com connect.facebook.net *.bounceexchange.com *.googleadservices.com *.doubleclick.net *.google-analytics.com st1.dialogtech.com bat.bing.com *.googleapis.com nsg.symantec.com analytics.po.st po.st *.cnetcontent.com selectors.cnetcontentsolutions.com *.akamaihd.net *.google.com *.twitter.com *.justuno.com *.liveclicker.net *.netapp.com *.demdex.net *.d41.co *.cxense.com static.ads-twitter.com vault.pactsafe.io pactsafe.io *.webcollage.net *.ziftsolutions.com *.simpli.fi pixel.mathtag.com *.googletagmanager.com *.googlesyndication.com *.googletagservices.com *.ytimg.com t.sellpoints.com a.sellpoint.net media.flixfacts.com www.youtube.com media.flixcar.com *.flix360.com *.easy2.com *.go-mpulse.net *.linkedin.com *.cdnwidget.com *.rlcdn.com *.cloudfront.net *.bluecore.com p.adsymptotic.com *.adsrvr.org *.flixsyndication.net *.adobe.com *.hotjar.io *.eloqua.com *.gstatic.com *.ensighten.com app.leadsrx.com *.turnto.com snap.licdn.com *.teads.tv *.youvisit.com www.vmwarepartnerdemandcenter.com *.syndigo.com *.syndigo.cloud *.tiqcdn.com p11.techlab-cdn.com;style-src 'self' 'unsafe-inline' *.cdw.com *.bazaarvoice.com *.needle.com *.cnetcontent.com *.justuno.com *.webcollage.net *.ziftsolutions.com t.sellpoints.com a.sellpoint.net media.flixcar.com *.easy2.com *.amazonaws.com platform.twitter.com *.cloudfront.net blob: *.typekit.net *.adobe.com *.turnto.com *.syndigo.com *.syndigo.cloud;img-src 'self' *.cdw.com *.bazaarvoice.com *.qualtrics.com *.optimizely.com *.needle.com nexus.ensighten.com px.spiceworks.com *.liadm.com *.bounceexchange.com *.googleadservices.com *.doubleclick.net *.google-analytics.com bat.bing.com nsg.symantec.com *.cnetcontent.com selectors.cnetcontentsolutions.com *.akamaihd.net *.google.com *.justuno.com *.netapp.com *.demdex.net *.cxense.com vault.pactsafe.io pactsafe.io *.webcollage.net *.ziftsolutions.com *.googletagmanager.com *.googletagservices.com *.ytimg.com t.sellpoints.com a.sellpoint.net media.flixfacts.com media.flixcar.com *.flix360.com *.easy2.com *.amazonaws.com platform.twitter.com *.linkedin.com *.tribalfusion.com *.company-target.com www.facebook.com events.bouncex.net *.cdnwidget.com *.rlcdn.com *.cloudfront.net *.adobecqms.net *.turn.com st2.dialogtech.com secure.insightexpressai.com px.gumgum.com *.bluekai.com k.intellitxt.com *.everesttech.net *.adnxs.com sync.fastclick.net simage2.pubmatic.com us-u.openx.net ads.yahoo.com pixel.rubiconproject.com *.advertising.com magnetic.t.domdex.com *.rfihub.com *.mathtag.com *.mathtag.co *.amgdgt.com *.casalemedia.com *.bluecore.com *.prod.bidr.io cdn.optimizely.com syndication.twitter.com x.bidswitch.net pe.intentiq.com p.adsymptotic.com loadm.exelator.com *.adsrvr.org um.simpli.fi acuityplatform.com data: *.dotomi.com *.flixsyndication.net liveintent.com cbssports.com maxpreps.com wogo ce.lijit.com soma.smaato.net cs.admanmedia.com eb2.3lift.com live.sekindo.com *.adobe.com *.sc.omtrdc.net *.core.windows.net wac.edgecastcdn.net snap.licdn.com *.teads.tv *.ispot.tv *.youvisit.com *.syndigo.com *.syndigo.cloud *.tiqcdn.com;frame-src 'self' *.cdw.com *.bazaarvoice.com *.qualtrics.com *.hotjar.com *.liadm.com *.bounceexchange.com *.doubleclick.net nsg.symantec.com selectors.cnetcontentsolutions.com *.google.com *.twitter.com *.justuno.com *.liveclicker.net *.cxense.com *.webcollage.net *.ziftsolutions.com pixel.mathtag.com *.googletagmanager.com *.googletagservices.com a.sellpoint.net www.youtube.com media.flixcar.com *.easy2.com www.facebook.com *.rlcdn.com rs.gwallet.com *.liveclicker.com pages.cdwemail.com www.emjcd.com *.dotomi.com *.flixsyndication.net cdw.zuberance.com *.hotjar.io *.eloqua.com *.swcontentsyndication.com www.cisco.com cl.s4.exct.net *.youvisit.com www.vmwarepartnerdemandcenter.com *.syndigo.com *.syndigo.cloud;font-src 'self' 'unsafe-inline' *.cdw.com *.needle.com *.googleapis.com *.cnetcontent.com *.demdex.net *.webcollage.net a.sellpoint.net media.flixfacts.com media.flixcar.com *.easy2.com *.cloudfront.net data: *.flixsyndication.net *.typekit.net *.adobe.com *.syndigo.com *.syndigo.cloud;connect-src 'self' *.cdw.com *.richrelevance.com *.bazaarvoice.com *.qualtrics.com *.optimizely.com *.hotjar.com *.needle.com nexus.ensighten.com px.spiceworks.com *.liadm.com scripts.demandbase.com triggeredmail.appspot.com *.bounceexchange.com *.googleadservices.com *.doubleclick.net bat.bing.com *.googleapis.com nsg.symantec.com *.cnetcontent.com *.akamaihd.net *.google.com *.justuno.com *.netapp.com *.demdex.net *.d41.co *.cxense.com vault.pactsafe.io pactsafe.io *.webcollage.net *.googletagmanager.com *.googletagservices.com t.sellpoints.com a.sellpoint.net *.go-mpulse.net platform.twitter.com *.company-target.com www.facebook.com events.bouncex.net *.cdnwidget.com *.cloudfront.net *.bluecore.com p.adsymptotic.com wss://*.hotjar.com p.po.st *.cdnbasket.net *.akstat.io data.g2.com data.g2crowd.com *.adobe.com *.hotjar.io app.leadsrx.com *.turnto.com *.tiqcdn.com p11.techlab-cdn.com;object-src 'self' a.sellpoint.net;worker-src 'self' *.cloudfront.net blob:;media-src 'self' *.cdw.com *.cnetcontent.com *.webcollage.net media.flixfacts.com www.youtube.com blob: *.flixsyndication.net *.youvisit.com *.syndigo.com *.syndigo.cloud *.tiqcdn.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'              ; img-src 'self' data:                *.fbcdn.net *.ytimg.com *.gstatic.com *.google.com *.placeholder.com *.googleapis.com *.google-analytics.com placehold.it                *.cdninstagram.com i.ytimg.com *.facebook.com *.doubleclick.net *.windows.net *.youtube.com                live2support.com *.live2support.com              ; style-src 'self' 'unsafe-inline'                *.googleapis.com                               *.live2support.com              ; script-src 'self' 'unsafe-inline' 'unsafe-eval'                *.google.com *.googleapis.com *.google-analytics.com *.youtube.com *.ytimg.com *.instagram.com *.googletagmanager.com *.jquery.com *.gstatic.com                *.facebook.net *.twitter.com *.googleadservices.com *.doubleclick.net                               live2support.com                *.hirebridge.com *.zscalertwo.net                *.criteo.net *.criteo.com                *.live2support.com                *.jquery.com              ; font-src 'self' data:                *.gstatic.com                     *.live2support.com              ; frame-src 'self'                *.youtube.com *.google.com *.twitter.com *.facebook.com *.doubleclick.net                *.hirebridge.com *.zscalertwo.net                *.criteo.com                             ; connect-src 'self' *.windows.net *.google.com *.google-analytics.com                               *.live2support.com              ; media-src 'self' data:                               *.live2support.com 1
frame-ancestors 'self' www.sigmaasesores.es sigmaasesores.es www.rankia.com rankia.com segurossalud.elmundo.es kelisto-health-wl.herokuapp.com kelisto.es www.kelisto.es landing.quadisseguros.es; default-src * data: 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors https://*.sellmate.co.kr 1
frame-ancestors 'self' https://www.altra.org; frame-src https://*.altraonline.org https://*.connectfssonline.com https://*.cfssinternal.com https://6065303866.mortgage-application.net https://mortgage.altra.org https://www.slideshare.net https://tags.tiqcdn.com https://connect.segmint.net https://c.sharethis.mgr.consensu.org https://*.facebook.com https://*.facebook.net https://*.youtube.com https://www.youtube-nocookie.com https://*.duosecurity.com https://lpcdn.lpsnmedia.net https://www.elegantthemes.com https://www.altra.org https://www.google.com https://*.doubleclick.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://www.googleadservices.com https://*.liveperson.net https://dashboard.time.ly; object-src 'self'; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.connectfssonline.com https://*.cfssinternal.com https://cdn.segmint.net https://*.youtube.com https://www.youtube-nocookie.com https://*.ytimg.com https://tags.tiqcdn.com https://integration.silvercloudinc.com https://*.sharethis.com https://*.liveperson.net https://*.lpsnmedia.net https://connect.facebook.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googleadservices.com https://*.googleapis.com https://*.doubleclick.net https://cdn.jsdelivr.net https://teachbanzai.com; report-uri https://altra.report-uri.com/r/d/csp/enforce 1
frame-ancestors 'self' https://*.bullhornstaffing.com http://webvisor.com; 1
frame-ancestors *.bellmts.ca http://*.mts.ca https://*.mts.ca http://mts.yellowpages.ca http://mts.canada411.ca https://icmanitoba.com https://login.stingray.com https://webplayer.stingray.com; 1
script-src 'self' www.google.com www.googletagmanager.com www.google-analytics.com www.gstatic.com 'unsafe-inline' 'unsafe-eval'; 1
frame-ancestors 'self' iguidewebapp.next-uk.next.loc/ end-duws02.next-uk.next.loc/ end-dpws02.next-uk.next.loc/ studio.mgmt.qa.test/ studio.mgmt.next-uk.next.loc/ https://www.next.ae 1
img-src 'self' data: https:; default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com https://secure.insightexpressai.com http://www.millwardbrown.ru; style-src 'self' 'unsafe-inline'; base-uri 'unsafe-eval'; frame-src 'self' 'unsafe-inline' https://www.google.com/; 1
connect-src 'self' availapi.rps.inz.net.nz forms.hsforms.net forms.hsforms.com availapi.prod.inz.net.nz hubspot-forms-static-embed.s3.amazonaws.com www.google-analytics.com stats.g.doubleclick.net;default-src 'self' b484efe137a1ad68f22e15f4898b80e9.cloudflareworkers.com forms.hsforms.com *.youtube.com;font-src 'self' fonts.gstatic.com;frame-src 'self' www.google.com app.hubspot.com forms.hsforms.com www.youtube.com tagmanager.google.com fonts.googleapis.com plotly.com chart-studio.plotly.com/ plot.ly/;img-src 'self' www.google-analytics.com ssl.gstatic.com www.gstatic.com www.googletagmanager.com track.hubspot.com i.ytimg.com i.creativecommons.org stats.g.doubleclick.net www.google.com www.google.co.nz licensebuttons.net perf.hsforms.com;script-src 'self' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.google.com *.gstatic.com *.hsforms.net *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hsforms.com polyfill.io *.google.com *.youtube.com tagmanager.google.com *.ytimg.com 'sha256-hrt1pv8351AKSP+1HTlNANPseDOkHY4o2cpq/s2us4c=' 'sha256-+9MmOQ+cR2apzrAzz14zl2kHV1CbK9h4OEOeMDlNTC4='  'sha256-J7r7Vt3y1mf9puui6w7Dz6kLRy2hAAPh+d7DEyRBXoA=' 'sha256-A6YEW3xpV8eDAYURcGsCSrolIMpYSXHNWVmTcwuVSxo=' 'sha256-B10bAKf7WEXyaZnQr80DGzSLDayChB4C3QkFv9iTrPI=' 'sha256-RdevG8iMNhUcxA4GyHbdScalTs28h93ueWUS28IufFw=' 'sha256-C4OCmkSuiTlaHppaBrIPbsqkJ4TQtC6UbB01dG96OBM=' 'sha256-JroRDli+sdqacpb1DPIpZuvZ7OwMtSr8ELbUzIRLoxc=';style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com;report-uri https://internetnz.nz/csp/v1/report; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://assets.adobedtm.com http://assets.adobedtm.com https://api.tiles.mapbox.com https://static.hotjar.com https://script.hotjar.com;worker-src blob:;frame-src 'self' https://www.youtube-nocookie.com;frame-ancestors 'self'; 1
frame-ancestors 'self' https://www.facebook.com 1
child-src 'self' www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com; connect-src 'self' wss://main.weku.io:8190 https://dallas.weku.io:8190 https://dallas.weku.io wss://dallas.weku.io:8190 translate.google.com translate.googleapis.com wss://news.weku.io:8190 https://images2.weku.io https://images2.weku.io:8234 wss://chain.weku.io api.weku.io https://images.weku.io https://images.weku.io:8234; default-src 'self' translate.google.com translate.googleapis.com www.youtube.com weku.facebook.com player.vimeo.com; font-src data: fonts.gstatic.com; frame-ancestors 'none'; img-src * data:; object-src 'none'; plugin-types application/pdf; script-src 'self' 'unsafe-inline' translate.google.com translate.googleapis.com www.google-analytics.com connect.facebook.net; style-src 'self' 'unsafe-inline' translate.google.com translate.googleapis.com fonts.googleapis.com; report-uri /api/v1/csp_violation 1
frame-src 'unsafe-inline' *.tussam.es *.google.com *.youtube.com *.youtube.es *.youtu.be; frame-ancestors 'unsafe-inline' *.tussam.es *.google.com *.youtube.com *.youtube.es *.youtu.be; child-src 'unsafe-inline' *.tussam.es *.google.com *.youtube.com *.youtube.es *.youtu.be; report-uri //report-csp-violation 1
default-src 'self' *.valspar.com  *.youtube.com *.google-analytics.com *.doubleclick.net hosted.where2getit.com nexus.ensighten.com *.google.com ; script-src 'unsafe-inline' 'unsafe-eval' *.houseofkolor.com *.google.com www.gstatic.com *.cloudflare.com *.cloudfront.net *.bootstrapcdn.com nexus.ensighten.com code.jquery.com *.googleapis.com *.google-analytics.com *.adobedtm.com *.doubleclick.net *.fontawesome.com filesystem:; img-src * data:; font-src 'self' *.typekit.net *.bootstrapcdn.com *.fontawesome.com ; style-src 'self' 'unsafe-inline' *.typekit.net *.bootstrapcdn.com *.fontawesome.com *.googleapis.com ; report-uri 'www.houseofkolor.com'; 1
script-src https://* 'self' 'unsafe-inline' 'unsafe-eval' 1
default-src 'self' v2api.coinflex.com wss://v2api.coinflex.com/v2/websocket www.google-analytics.com tagmanager.google.com ssl.google-analytics.com www.googletagmanager.com; object-src 'none'; frame-src www.google.com www.youtube.com trading.coinflex.com; script-src 'self' 'unsafe-inline'  www.google.com/recaptcha/api.js www.gstatic.com/recaptcha/ v2api.coinflex.com tagmanager.google.com ssl.google-analytics.com www.google-analytics.com www.googletagmanager.com cdnjs.cloudflare.com/ajax/libs/gsap/2.1.3/TweenMax.min.js ajax.cloudflare.com static.cloudflareinsights.com; img-src * 'self' data: www.google-analytics.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com; base-uri 'self'; form-action 'self'; font-src 'self' fonts.gstatic.com data: 1
default-src 'self' ; connect-src 'self' https://s1259914507.t.eloqua.com https://www.google-analytics.com; font-src 'self' https://cdn.goglobalwithtwitter.com data:; frame-src 'self' ; img-src 'self' https://www.google-analytics.com https://cdn.goglobalwithtwitter.com https://*.g.doubleclick.net data:; media-src 'self' https://cdn.goglobalwithtwitter.com; object-src 'self' ; script-src 'self' 'sha256-ppW1Vv+qSVcs+/pIj1ZXvMiCLoyHyCdRqtDMeK9fQ9w=' https://www.gstatic.com https://static.ads-twitter.com https://cdn.goglobalwithtwitter.com 'nonce-888d37c6a5d9477f3be18e72278639c'; style-src 'self' 'unsafe-inline' https://cdn.goglobalwithtwitter.com; report-uri https://www.goglobalwithtwitter.com/i/csp_report; frame-ancestors 'self' 1
default-src  'self' 'unsafe-inline'; font-src  'self'; child-src  'self'; connect-src https://forms.hubspot.com/ https://api.hubapi.com  'self'; frame-src https://www.google.com/ https://snazzymaps.com/embed/119372 https://forms.hsforms.com 'self'; frame-ancestors  'self'; img-src https://stats.g.doubleclick.net/ https://forms.hsforms.com/ https://www.google.com/ https://www.google.nl/ https://track.hubspot.com/ https://*.linkedin.com/ https://www.google-analytics.com/ 'self' data:; media-src  'self'; object-src  'self'; script-src  'self' 'unsafe-inline' 'unsafe-eval' data: https: wss:; style-src  'self' 'unsafe-inline';  worker-src  'self' blob: 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; base-uri 'self'; frame-ancestors 'none'; 1
default-src 'self' 'unsafe-inline'; connect-src https://spending.gov.ua https://localhost:8083; font-src https: data:; frame-src https://spending.gov.ua https://www.google.com; frame-ancestors https://spending.gov.ua; img-src https://spending.gov.ua https://spending.gov.ua https://www.google-analytics.com https://stats.g.doubleclick.net data:; media-src https:; object-src https://spending.gov.ua; script-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://storage.googleapis.com https://www.gstatic.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https//spending.gov.ua https://fonts.googleapis.com 'unsafe-inline'; form-action 'self'; base-uri 'self'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com translate.google.com translate.googleapis.com ajax.googleapis.com code.jquery.com www.googletagmanager.com 1
default-src 'self' https://connect.facebook.net https://e.issuu.com; font-src 'self' 'unsafe-inline' data: www.ktph.com.sg www.whc.sg www.yishuncommunityhospital.com.sg www.geri.com.sg www.admiraltymedicalcentre.com.sg https://fonts.googleapis.com https://fonts.gstatic.com https://static.juicer.io; connect-src 'self' www.ktph.com.sg www.whc.sg www.yishuncommunityhospital.com.sg www.geri.com.sg www.admiraltymedicalcentre.com.sg www.juicer.io https://graph.facebook.com www.google-analytics.com https://v1.addthis.com m.addthis.com; frame-src 'self' www.ktph.com.sg www.whc.sg www.yishuncommunityhospital.com.sg www.geri.com.sg www.admiraltymedicalcentre.com.sg youtu.be www.youtube.com https://staticxx.facebook.com https://platform.twitter.com www.google.com s7.addthis.com https://e.issuu.com; frame-ancestors 'self'; img-src *; media-src 'self' data: https://images.pexels.com https://e.issuu.com; object-src 'self' www.ktph.com.sg www.whc.sg www.yishuncommunityhospital.com.sg www.geri.com.sg www.admiraltymedicalcentre.com.sg youtu.be www.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.ktph.com.sg www.whc.sg www.yishuncommunityhospital.com.sg www.geri.com.sg www.admiraltymedicalcentre.com.sg assets.juicer.io static.juicer.io www.juicer.io graph.facebook.com i.imgur.com scontent.xx.fbcdn.net www.google-analytics.com www.google.com www.addthis.com s7.addthis.com m.addthis.com m.addthisedge.com youtu.be www.youtube.com https://fonts.googleapis.com https://fonts.gstatic.com www.gstatic.com www.googletagmanager.com https://connect.facebook.net http://connect.facebook.net https://platform.twitter.com https://v1.addthisedge.com https://v1.addthis.com https://z.moatads.com https://e.issuu.com; style-src 'self' 'unsafe-inline' data: www.ktph.com.sg www.whc.sg www.yishuncommunityhospital.com.sg www.geri.com.sg www.admiraltymedicalcentre.com.sg  assets.juicer.io static.juicer.io www.juicer.io graph.facebook.com i.imgur.com scontent.xx.fbcdn.net www.google-analytics.com www.google.com www.addthis.com s7.addthis.com m.addthis.com m.addthisedge.com youtu.be www.youtube.com https://fonts.googleapis.com https://fonts.gstatic.com www.gstatic.com https://e.issuu.com; 1
object-src 'self'; script-src 'unsafe-inline' 'self' https://cdn.jsdelivr.net https://polyfill.io; 1
frame-ancestors self economictimes.indiatimes.com m.economictimes.com etdev8243.indiatimes.com *.tomorrowmakers.com 1
default-src *; base-uri *.google.com; child-src 'self'; connect-src 'self' *.jivosite.com wss://*.jivosite.com http://aprtx.com *.google-analytics.com https://www.google.com https://www.google.com.ua https://www.googleadservices.com https://google-analytics.bi.owox.com https://stats.g.doubleclick.net *.softcube.com https://mc.webvisor.org https://mc.yandex.ru *.facebook.com https://cdn.plyr.io *.esputnik.com *.google.com *.hotjar.com *.popmechanic.ru *.plerdy.com https://noembed.com; font-src 'self' https://fonts.gstatic.com *.webcollage.net *.hotjar.com *.plerdy.com; form-action 'self' *.facebook.com https://connect.facebook.net *.plerdy.com *.kastapay.ua; frame-ancestors 'self' http://*.pampik.com *.plerdy.com *.kastapay.ua; media-src *.jivosite.com *.plerdy.com; object-src 'self'; plugin-types ; manifest-src 'self' https://esputnik.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://tagmanager.google.com *.cloudflare.com *.facebook.net http://aprtx.com *.jivosite.com https://www.artfut.com *.dmpcloud.net *.criteo.net *.criteo.com *.softcube.com http://video.softcube.com *.youtube.com https://esputnik.com https://s.ytimg.com https://apypp.com https://cts-secure.channelintelligence.com https://cdn.yottos.com https://cdn.jsdelivr.net https://connect.facebook.net https://mc.webvisor.org https://mc.yandex.ru *.asbmit.com *.lenmit.com *.webcollage.net https://optimize.google.com *.hotjar.com *.popmechanic.ru *.plerdy.com *.kastapay.ua *.jivosite.com ws://*.jivosite.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.webcollage.net https://tagmanager.google.com https://optimize.google.com *.google.com *.popmechanic.ru *.google-analytics.com *.googleadservices.com *.cloudflare.com *.facebook.net *.facebook.com *.lenmit.com *.esputnik.com *.plerdy.com *.kastapay.ua *.jivosite.com; img-src 'self' *.pampik.com *.google-analytics.com https://www.facebook.com https://www.google.com https://www.google.com.ua https://google-analytics.bi.owox.com https://www.googletagmanager.com *.googleapis.com *.g.doubleclick.net *.softcube.com https://aprtx.com data: *.criteo.com https://sellaction.net *.ytimg.com https://artfut.com https://alphamrkt.com https://linkappdev.com *.youtube.com https://mc.webvisor.org https://mc.yandex.ru *.asbmit.com *.lenmit.com  https://ssl.gstatic.com https://lenkmio.com https://pafutos.com https://artfut.com *.admitad.com *.webcollage.net https://optimize.google.com *.google.com *.popmechanic.ru *.yandexcloud.net *.esputnik.com *.plerdy.com *.kastapay.ua *.jivosite.com; frame-src 'self' data: *.jivosite.com *.youtube.com *.facebook.com *.google.com https://connect.facebook.net *.criteo.com https://static.criteo.net https://bid.g.doubleclick.net http://creativecdn.com https://creativecdn.com https://ams.creativecdn.com https://optimize.google.com *.hotjar.com *.plerdy.com *.kastapay.ua *.jivosite.com https://www.youtube-nocookie.com; 1
default-src * data: blob: 'self'; img-src 'self' blob: data: filesystem: https:; script-src *.uizard.io uizard.io *.sentry.io sentry.io *.gstatic.com gstatic.com *.googleapis.com googleapis.com *.licdn.com licdn.com *.facebook.net facebook.net 127.0.0.1:* *.ads-twitter.com ads-twitter.com *.google-analytics.com google-analytics.com *.linkedin.com linkedin.com *.twitter.com twitter.com *.zopim.com zopim.com *.stripe.com stripe.com *.zdassets.com zdassets.com *.zendesk.com zendesk.com 'unsafe-inline' 'unsafe-eval' blob: data: 'self'; style-src data: blob: 'unsafe-inline' *; connect-src *.uizard.io uizard.io *.sentry.io sentry.io *.gstatic.com gstatic.com *.google-analytics.com google-analytics.com *.zdassets.com zdassets.com *.zendesk.com zendesk.com ws://localhost:* *.stripe.com stripe.com *.doubleclick.net doubleclick.net wss://*.uizard.io wss://*.zopim.com blob: data: 'self'; block-all-mixed-content;upgrade-insecure-requests; 1
default-src 'self' http: https: ws: wss: *.vimeo.com *.google-analytics.com *.membogo.com js-agent.newrelic.com  *.zopim.com https://bam.nr-data.net fonts.googleapis.com *.hpjcc.com  *.googleapis.com fonts.gstatic.com *.addthis.com *.addthisedge.com *.nr-data.net 'unsafe-eval' 'self' 'unsafe-inline' data: ; 1
upgrade-insecure-requests; base-uri 'self'; frame-src 'self' xc275.infusionsoft.app *.google.com *.facebook.com c.sharethis.mgr.consensu.org *.vimeo.com *.youtube.com *.s3.amazonaws.com; font-src 'self' https: data: *.gstatic.com *.googleapis.com; media-src 'self' *.thesuccessalliance.com *.mysuccessalliance.com *.mypassionforbusiness.com *.vimeo.com *.youtube.com *.s3.amazonaws.com 1
default-src 'self' ;img-src *.google.ac *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.com.kh *.google.cc *.google.cd *.google.cf *.google.cat *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.g.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gf *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.iq *.google.ie *.google.co.il *.google.im *.google.co.in *.google.io *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.com.lc *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.ne *.google.com.nf *.google.com.ng *.google.com.ni *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pk *.google.com.pa *.google.com.pe *.google.com.ph *.google.pl *.google.com.pg *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.rs *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.sm *.google.so *.google.st *.google.sr *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.to *.google.tn *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.co.za *.google.co.zm *.google.co.zw *.facebook.com https://actega.com *.doubleclick.net *.google-analytics.com *.googletagmanager.com 'self' *.ggpht.com *.google.com *.google.com.mx *.google.de *.googleapis.com *.gstatic.com data: https://px.ads.linkedin.com; script-src *.privacymanager.io *.bizographics.com *.actega.com actega.com *.googletagmanager.com *.facebook.net *.doubleclick.net *.googleapis.com *.google.com 'self' 'unsafe-eval' *.gstatic.com *.google-analytics.com *.googletagmanager.com 'unsafe-inline' *.faktor.io cdn.inspectlet.com cdn.mouseflow.com https://indivsurvey.de https://snap.licdn.com/li.lms-analytics/insight.min.js; style-src 'unsafe-inline' *.googleapis.com *.google-analytics.com *.googletagmanager.com 'self' ; connect-src *;frame-src https://www.youtube-nocookie.com/  *.google-analytics.com *.googletagmanager.com 'self' *.google.com https://cw.choice.faktor.io https://cmp.fa https://cmp.faktor.mgr.consensu.org https://cmp.choice.faktor.io https://easy-feedback.de https://indivsurvey.de *.saferpay.com https://gdpr.privacymanager.io https://gdpr-consent-tool.privacymanager.io;font-src 'self' data: *.gstatic.com; 1
child-src 'self' https://content.googleapis.com https://accounts.google.com https://calendar.google.com https://www.google.com https://forms.tandfonline.com https://taylorandfrancis.formstack.com https://tfforms.wpengine.com https://web-player.art19.com https://www.youtube.com; connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com/; default-src 'self' https://3ftfah3bhjub3knerv1hneul-wpengine.netdna-ssl.com; font-src 'self' data: https://3ftfah3bhjub3knerv1hneul-wpengine.netdna-ssl.com https://fonts.googleapis.com https://fonts.gstatic.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; img-src 'self' data: https://www.googletagmanager.com https://www.google.co.uk https://www.google.com https://3ftfah3bhjub3knerv1hneul-wpengine.netdna-ssl.com https://app.imagify.io https://cdn.syndication.twimg.com https://i.ytimg.com https://www.google-analytics.com https://imagify.io https://pbs.twimg.com https://storage.imagify.io https://secure.gravatar.com https://t.co https://ton.twimg.com https://maps.googleapis.com https://maps.gstatic.com; media-src 'self' https://www.buzzsprout.com https://www.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://3ftfah3bhjub3knerv1hneul-wpengine.netdna-ssl.com https://khan.github.io/tota11y/dist/tota11y.min.js https://ajax.googleapis.com https://analytics.twitter.com https://api.wpengineapi.com https://apis.google.com https://app.imagify.io https://c.cnzz.com https://cdn.ravenjs.com https://cdnjs.cloudflare.com https://cnzz.mmstat.com https://code.jquery.com https://connect.facebook.net https://content.googleapis.com https://dify.wpengine.com https://fast.wistia.com https://forms.tandfonline.com https://googleads.g.doubleclick.net https://i.ytimg.com https://imagify.io https://in.hotjar.com https://journalapp.taylorandfrancis.com https://maps.googleapis.com https://maps.gstatic.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://pbs.twimg.com https://pi.pardot.com https://pixel.wp.com https://placehold.it https://platform.twitter.com https://player.youku.com https://px.ads.linkedin.com https://s.w.org https://s0.wp.com https://s13.cnzz.com https://script.hotjar.com https://secure.gravatar.com https://sjs.bizographics.com https://snap.licdn.com https://ssl.google-analytics.com https://stackpath.bootstrapcdn.com https://static.addtoany.com https://static.ads-twitter.com https://static.hotjar.com https://stats.g.doubleclick.net https://stats.wp.com https://storage.imagify.io https://syndication.twitter.com https://t.co https://taylorandfrancis.formstack.com https://tfforms.wpengine.com https://translate.google.com https://translate.googleapis.com https://vars.hotjar.com https://ws.sharethis.com https://www.advancedcustomfields.com https://www.facebook.com https://www.fullstory.com https://www.google-analytics.com https://www.google.co.uk https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gravityforms.com https://www.gravityforms.local https://www.gstatic.com https://www.netdna-ssl.com https://www.paypalobjects.com https://www.tablepress.org https://www.wpengine.co.uk https://www.yoast.com; style-src 'self' 'unsafe-inline' https://3ftfah3bhjub3knerv1hneul-wpengine.netdna-ssl.com https://cdn.ravenjs.com https://fonts.googleapis.com https://forms.tandfonline.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://snap.licdn.com https://stackpath.bootstrapcdn.com https://stackpath.bootstrapcdn.com https://taylorandfrancis.formstack.com https://tfforms.wpengine.com https://www.advancedcustomfields.com https://www.gravityforms.com https://www.gravityforms.local https://www.tablepress.org https://use.fontawesome.com https://www.yoast.com; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' jsbridge: http://*.gtimg.cn https://*.gtimg.cn http://*.gtimg.com https://*.gtimg.com http://*.qq.com https://*.qq.com http://*.idqqimg.com https://*.idqqimg.com;img-src 'self' data: blob: jsbridge: http://*.gtimg.cn https://*.gtimg.cn http://*.gtimg.com https://*.gtimg.com http://*.qpic.cn https://*.qpic.cn http://*.qlogo.cn https://*.qlogo.cn http://*.myqcloud.com https://*.myqcloud.com http://*.tenpay.com https://*.tenpay.com http://*.soso.com https://*.soso.com http://*.weiyun.com https://*.weiyun.com http://*.qzone.com https://*.qzone.com http://*.qq.com https://*.qq.com http://*.tx-livetools.wang https://*.tx-livetools.wang http://*.tx-livetools.cn https://*.tx-livetools.cn http://*.tx-livetools.com https://*.tx-livetools.com;child-src 'self' jsbridge: musicqzone: mqzonev2: mqzonev3: mqzone: mqqzone: mqqapi: tmast: nextradio: mvshow: weixin: mqq: blob: jserror: weishi: qqsweetlaunch: mtt: wvjbscheme: market: mimarket: vivoMarket: http://*.qq.com https://*.qq.com http://*.gtimg.com https://*.gtimg.com http://*.qzone.com https://*.qzone.com;frame-src 'self' jsbridge: musicqzone: mqzonev2: mqzonev3: mqzone: mqqzone: mqqapi: tmast: nextradio: mvshow: weixin: mqq: blob: jserror: weishi: qqsweetlaunch: mtt: wvjbscheme: market: mimarket: vivoMarket: http://*.qq.com https://*.qq.com http://*.gtimg.com https://*.gtimg.com http://*.qzone.com https://*.qzone.com;default-src 'self' 'unsafe-inline' data: ws: wss: blob: http://*.gtimg.cn https://*.gtimg.cn http://*.gtimg.com https://*.gtimg.com http://*.qq.com https://*.qq.com http://*.qq.com:8080 https://*.qq.com:8080 http://*.myqcloud.com https://*.myqcloud.com;report-uri https://h5.qzone.qq.com/csp/report?type=header&enable=1 1
frame-ancestors 'self' vetrina.giocodellotto.it file://*; 1
default-src 'self' https://*.birdie.com.hk https://api.smooch.io https://*.clare.ai wss://api.smooch.io wss://*.clare.ai https://*.facebook.com https://*.alipay.com https://pay.google.com https://api6.ipify.org https://app.os.ma https://www.iplocate.io https://ask.onbirdie.com https://*.appier.net https://*.klook.com; font-src 'self' data: https:; img-src 'self' https: data:; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' blob: https: 'unsafe-inline'; 1
default-src *;script-src * 'unsafe-inline';style-src * 'unsafe-inline' 1
script-src 'self' publisher.formsengine.io 'unsafe-eval' 'unsafe-inline' statistiek.rijksoverheid.nl cdnjs.cloudflare.com cdn.rawgit.com cdn.jsdelivr.net; report-uri /report-csp-violation 1
manifest-src 'self' 1
default-src https://*.mail.ru https://mail.ru https://*.imgsmail.ru https://*.devmail.ru https://*.smailru.net https://*.yandex.net https://*.yandex.ru https://yandex.ru https://*.yandexadexchange.net https://yastatic.net https://*.yastatic.net https://*.mycdn.me https://icq.com https://*.icq.com https://icq.net https://*.icq.net https://ok.ru https://*.ok.ru https://odnoklassniki.ru https://*.odnoklassniki.ru https://*.mradx.net https://2gis.com https://*.2gis.com https://2gis.ru https://*.2gis.ru https://youtube.com https://*.youtube.com https://*.google.com https://*.google.ru https://cdn.consentmanager.mgr.consensu.org https://consentmanager.mgr.consensu.org https://vk.com https://*.vk.com; font-src data: https://*.mail.ru https://*.imgsmail.ru https://*.devmail.ru https://yastatic.net https://*.yastatic.net; img-src data: http: https:; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' https://cdn.consentmanager.mgr.consensu.org https://consentmanager.mgr.consensu.org https://*.mail.ru https://*.mradx.net https://icq.com https://*.icq.com https://icq.net https://*.icq.net https://*.imgsmail.ru https://*.devmail.ru https://*.smailru.net https://ok.ru https://*.ok.ru https://*.odnoklassniki.ru https://*.yandex.ru https://yastatic.net https://*.yastatic.net https://2gis.com https://*.2gis.com https://2gis.ru https://*.2gis.ru https://*.google-analytics.com https://*.google.com https://*.google.ru https://*.maps.yandex.net 'nonce-PSwMKqe9klt031Eo4Ga/iDdUfiLESzOa0v4JjAGW'; style-src 'unsafe-inline' https://cdn.consentmanager.mgr.consensu.org https://consentmanager.mgr.consensu.org https://*.mail.ru https://*.imgsmail.ru https://*.devmail.ru https://*.yandex.net https://2gis.com https://*.2gis.com https://2gis.ru https://*.2gis.ru https://yastatic.net https://*.yastatic.net; report-uri https://go.mail.ru/csp-report?qid=faaf5c7f3587c529&user_type=20 1
object-src 'self'; frame-ancestors 'none' 1
default-src https: 'self';base-uri 'self';object-src 'self';form-action https: 'self';img-src https: 'self' data: blob:;connect-src https: 'self';child-src https: 'self' blob:;frame-src https: 'self' blob:;worker-src https: 'self' blob:;font-src https: 'self' data:;script-src https: 'self' 'unsafe-inline' 'unsafe-eval' blob:;style-src https: 'self' 'unsafe-inline' 1
default-src 'self' data: https://*.moneypak.com https://*.typekit.net https://*.typekit.com https://*.vimeo.com https://vimeo.com https://greendot.tt.omtrdc.net;     img-src 'self' data: https://*.google-analytics.com https://*.typekit.net https://*.moneypak.com https://ds.reson8.com;     child-src 'self' https://*.google.com https://*.cdn-gdc.com https://player.vimeo.com https://www.greendot.com;     style-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.moneypak.com https://*.typekit.com https://*.typekit.net;     script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.moneypak.com https://*.typekit.com https://*.typekit.net       https://*.google-analytics.com https://*.googleapis.com https://*.googleadservices.com https://*.tt.omtrdc.net https://*.vimeo.com;     font-src 'self' data: https://*.typekit.com https://*.typekit.net;      1
frame-ancestors 'self' https://www.surveymonkey.com; 1
default-src 'self'; script-src 'self' https://cdnjs.cloudflare.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src * data: fonts.gstatic.com; connect-src *; object-src 'none'; img-src * data: blob:; frame-ancestors 'none' 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-PE6o2LnjVAUq+8b4DkX7+w' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
upgrade-insecure-requests; report-uri /api/csp-report; base-uri 'none'; object-src 'none'; worker-src blob:; script-src 'unsafe-inline' 'unsafe-eval' 'self' sdk.listenlive.co players.brightcove.net *.krxd.net js-agent.newrelic.com bam.nr-data.net vjs.zencdn.net www.googletagmanager.com www.google-analytics.com www.googleadservices.com www.googletagservices.com adservice.google.com storage.googleapis.com www.google.com *.2mdn.net optimize.google.com adservice.google.com adservice.google.ca googleads.g.doubleclick.net securepubads.g.doubleclick.net *.googlesyndication.com cdn.ampproject.org stats.g.doubleclick.net tagmanager.google.com imasdk.googleapis.com www.gstatic.com connect.facebook.net www.instagram.com cdn.syndication.twimg.com platform.twitter.com www1.journaldemontreal.com ping.chartbeat.com static.chartbeat.com static2.chartbeat.com *.hotjar.com *.hotjar.io cdn.jwplayer.com ssl.p.jwpcdn.com *.qub.ca imasdk.googleapis.com s0.2mdn.net/instream/video/client.js sb.scorecardresearch.com 1
default-src 'self' use.fontawesome.com/ https://www.lda.fr; font-src 'self' data: font-woff fonts.gstatic.com use.fontawesome.com https://www.lda.fr; frame-src https://www.youtube.com; child-src https://www.youtube.com; img-src 'self' data: http://0.gravatar.com https://code.jquery.com https://secure.gravatar.com https://www.lda.fr; script-src 'self' 'unsafe-eval' 'unsafe-inline' use.fontawesome.com https://www.lda.fr; style-src 'self' 'unsafe-inline' ajax.googleapis.com fonts.googleapis.com use.fontawesome.com https://www.lda.fr; report-uri https://www.lda.fr/wp-json/wpcsp/v1/route/LogPolicyViolation?_wpnonce=340516436b 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://*.criteo.com https://static.criteo.net https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://player.vimeo.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.probikekit.jp https://m.probikekit.jp https://checkout.probikekit.jp https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://*.criteo.com https://static.criteo.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://*.google-analytics.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self'; img-src 'self' https://piwiks.celibest.com https://www.google-analytics.com https://www4.celibest.com https://www.celibest.com https://www.celibnord.com https://www.celibouest.com https://www.celibparis.com https://www.celiblyon.com https://www.celibrhonealpes.com https://www.celibsud.com https://www.celibsudouest.com data:; script-src 'self' https://piwiks.celibest.com https://www.google-analytics.com https://code.createjs.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; form-action 'self' https://systempay.cyberpluspaiement.com https://www.paypal.com; media-src 'self'; base-uri 'self'; connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com; frame-src 'self'; frame-ancestors 'self'; child-src 'self'; object-src 'none'; 1
frame-ancestors 'self' www.amway.id admin.amway.id beta.amway.id www.amway.co.th admin.amway.co.th beta.amway.co.th smart.amway.co.th admin.smart.amway.co.th 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-NDkwNzVhOTgtMTc0Yy00ODdjLWI0MWQtZWJkYTY1NTQ0NTNl'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
frame-ancestors 'self'; default-src 'none'; style-src 'self' 'unsafe-inline' static.figleafapp.com fonts.googleapis.com fonts.gstatic.com; media-src static.figleafapp.com; script-src 'self' static.figleafapp.com www.google.com 'unsafe-eval' www.gstatic.com ckeditor.iframe.ly if-cdn.com www.youtube.com www.instagram.com www.facebook.com www.twitter.com boards.greenhouse.io card.aurasvc.io www.googletagmanager.com www.google-analytics.com; form-action figleafapp.com card.aurasvc.io zuora.com www.zuora.com figleaf.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com data: static.figleafapp.com; img-src 'self' data: static.figleafapp.com www.google.com www.google.com.ua logo.clearbit.com www.google-analytics.com; frame-src 'self' api.tz.figleafapp.com api.tz.figleaf.online api.figleaf.online cognito-idp.us-east-1.amazonaws.com www.google.com boards.greenhouse.io www.youtube.com card.aurasvc.io www.zuora.com; block-all-mixed-content; base-uri 'self'; connect-src 'self' events.figleafapp.com cognito-idp.us-east-1.amazonaws.com api.figleafapp.com api.aurasvc.io fonts.googleapis.com api.figleaf.online 64h2nwzm01.execute-api.us-east-1.amazonaws.com www.google-analytics.com stats.g.doubleclick.net 1
block-all-mixed-content; frame-ancestors *.dlkmodas.com.br 1
default-src * ; img-src * 'self' data: blob: mediastream: https: 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval' blob: ; style-src * 'unsafe-inline' 'unsafe-eval'; media-src * blob:; 1
default-src 'self' blob: data: 'unsafe-inline' calcuttahighcourt.nic.in calcuttahighcourt.gov.in www.calcuttahighcourt.gov.in docs.google.com ; 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=VN&lang=vi-VN&device=desktop&yrid=9o8vfsdfula54&partner=; 1
frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com; report-uri http://www.waysidewaifs.org/site/XFrameViolation 1
frame-ancestors 'self' *.gdata.de *.gdata.ch *.gdata.fr *.gdata.at *.gdata.nl *.gdata.it *.gdata.be *.gdata.es *.gdata.pt *.gdatasoftware.co.uk *.gdatasoftware.com *.gdata-software.com *.gdata-advancedanalytics.de *.gdata-advancedanalytics.com *.gdata.co.jp *.gdata-china.com *.gdata-hongkong.com *.inventorofantivirus.com; 1
object-src 'none'; form-action 'self'; frame-ancestors https://www.maybank-kimeng.com.vn/ 'self' 1
default-src https: data: 'unsafe-inline' 'unsafe-eval' blob:; img-src https: data: blob:; connect-src https: data: blob: wss: 'self'; report-uri https://www.naturabuy.fr/reportCSP.php 1
default-src 'self' https://www.mpsv.cz https://data.mpsv.cz https://www.google-analytics.com https://mapserver.mapy.cz https://api.mapy.cz https://pomoc.mluvii.com wss://pomoc.mluvii.com; img-src 'self' data: https://*.gstatic.com https://www.google-analytics.com https://api.mapy.cz https://mapserver.mapy.cz; frame-src 'self' formapps: https://www.google.com https://www.youtube.com https://*.predu.sk https://pomoc.mluvii.com; child-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.gstatic.com https://api.mapy.cz https://www.google-analytics.com https://*.predu.sk https://pomoc.mluvii.com; style-src 'self' 'unsafe-inline' https://*.gstatic.com https://fonts.googleapis.com https://api.mapy.cz https://pomoc.mluvii.com; font-src 'self' data:  https://api.mapy.cz 1
frame-ancestors https://*.budgetinternational.com https://*.rent-at-avis.com 1
default-src https: data: wss: *.plcontent.com 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'none'; frame-src 'self' *.facebook.com *.googletagmanager.com *.demdex.net; 1
default-src 'self'; connect-src 'self' https://www.ibex.co https://wavezero.ibex.co https://www.google-analytics.com https://scout.salesloft.com https://stats.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://www.googletagmanager.com https://scout-cdn.salesloft.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google-analytics.com; script-src-elem 'self' 'unsafe-inline' https://www.google.com https://www.googletagmanager.com https://cdn.ampproject.org https://connect.facebook.net https://snap.licdn.com https://scout-cdn.salesloft.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://mid.collect.igodigital.com https://www.gstatic.com; img-src 'self' https://www.google-analytics.com https://wavezero.ibex.co https://www.google.com https://www.google.com.pk https://www.facebook.com https://px.ads.linkedin.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://themes.googleusercontent.com; frame-src https://www.google.com https://www.facebook.com https://s-static.ak.facebook.com https://bid.g.doubleclick.net; object-src 'none'; media-src 'self' 1
default-src *;style-src 'unsafe-inline' *.gatchina.biz *.rambler.ru *.yandex.ru yandex.st yastat.net;script-src 'self' *.gatchina.biz *.rambler.ru *.yandex.ru yandex.st yastat.net 'unsafe-eval' 'unsafe-inline';frame-src *.gatchina.biz *.rambler.ru *.yandex.ru yandex.st yastat.net;connect-src *.gatchina.biz *.rambler.ru *.yandex.ru yandex.st yastat.net;xhr-src *.gatchina.biz *.rambler.ru *.yandex.ru yandex.st yastat.net; 1
frame-ancestors http://www.integrativepractitioner.com https://divcomplatform.s3.amazonaws.com 1
default-src 'self'; connect-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://cdn.plyr.io https://www.campofrio.es; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://ajax.googleapis.com https://gateway.zscaler.net https://cdn.plyr.io https://www.googletagmanager.com https://s.ytimg.com www.youtube.com www.google-analytics.com ajax.googleapis.com https://ssl.google-analytics.com https://www--campofrio--es.accesible.inclusite.com https://www.campofrio.es https://campofrio--es.accesible.inclusite.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com; font-src 'self' https://fonts.gstatic.com data https://maxcdn.bootstrapcdn.com; img-src 'self' data: https://www--campofrio--es.accesible.inclusite.com https://gateway.zscaler.net https://campofrio--es.accesible.inclusite.com https://www.googletagmanager.com https://img.youtube.com https://www.google-analytics.com https://ssl.google-analytics.com https://www--campofrio--es.accesible.inclusite.com https://www.confianzaonline.es; frame-src 'self' https://player.vimeo.com https://gateway.zscaler.net https://accesible.inclusite.com https://www.youtube.com https://www.promo-highco.com https://superheroescampofrio.com; frame-ancestors 'self' http://www.campofrio.es http://cfgapps.campofriofg.com https://www.promo-highco.com https://cfgapps.campofriofg.com http://cfgintranet.campofriofg.com ;  1
default-src 'none'; base-uri 'self'; connect-src https:; font-src https: data:; form-action 'self'; frame-src https:; img-src https: data:; media-src https:; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://code.jquery.com https://kendo.cdn.telerik.com https://translate.google.com https://maxcdn.bootstrapcdn.com https://translate.googleapis.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://kendo.cdn.telerik.com https://relappro.com https://www.relappro.com https://translate.googleapis.com; 1
default-src 'self' https://www.aboutmyclinic.com https://cdn.aboutmyclinic.com https://cdn.reclica.com https://checkout.razorpay.com; style-src 'self' 'unsafe-inline' https://www.tiny.cloud https://cdn.reclica.com https://cdn.aboutmyclinic.com https://*.googleapis.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://code.jquery.com https://www.google-analytics.com https://www.aboutmyclinic.com https://cdn.aboutmyclinic.com https://*.gstatic.com https://*.googleapis.com https://cdnjs.cloudflare.com https://widgets.aboutmyclinic.com https://cdn.reclica.com https://connect.facebook.net https://translate.google.com https://use.fontawesome.com https://www.googletagmanager.com; child-src 'self' tel: https://www.aboutmyclinic.com https://www.youtube.com https://player.vimeo.com https://www.slideshare.net https://docs.google.com https://widgets.aboutmyclinic.com https://app.reclica.com https://m.facebook.com https://www.facebook.com https://maps.google.com https://www.openstreetmap.org https://www.google.com; font-src 'self' https://fonts.gstatic.com https://cdn.aboutmyclinic.com https://use.fontawesome.com; img-src 'self' https: blob: data:; connect-src 'self' blob: https://api.aboutmyclinic.com https://www.aboutmyclinic.com https://cdn.aboutmyclinic.com https://app.reclica.com https://www.google-analytics.com https://www.googletagmanager.com; media-src 'self' data: blob:;report-uri https://www.aboutmyclinic.com/cspreport; 1
"self" 1
default-src 'self' 'unsafe-inline' *.system1.com *.typekit.net *.formstack.com www.googletagmanager.com www.google.com www.gstatic.com www.google-analytics.com s.flocdn.com mapquest.com *.mapquest.ca s3.amazonaws.com stats.g.doubleclick.net jobs.lever.co data:; img-src *; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://www.google.com https://www.gstatic.com 1
style-src 'unsafe-inline' 'self' *.exacttarget.com mcap.com rmgmortgages.ca *.google-analytics.com; img-src 'self' data: https: http: *.exacttarget.com mcap.com rmgmortgages.ca *.google-analytics.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' data: https: http: mcap.com rmgmortgages.ca *.google-analytics.com; frame-ancestors 'self' 1
default-src 'self' https://www.melodyvr.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fast.wistia.com https://www.universe.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://script.crazyegg.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com https://www.googletagmanager.com https://analytics.twitter.com https://*.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://connect.facebook.com cdn.ckeditor.com; media-src 'self' https://www.facebook.com; img-src 'self' data: https://s.w.org https://secure.gravatar.com https://www.facebook.com https://t.co https://*.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com cdn.ckeditor.com https://googleads.g.doubleclick.net https://www.google.com https://melodyvr-static.immersiv.es; style-src 'self' 'unsafe-inline' https://www.facebook.com https://fonts.googleapis.com https://assets.zendesk.com maxcdn.bootstrapcdn.com cdn.ckeditor.com https://use.fontawesome.com; font-src 'self' data: https://use.fontawesome.com https://www.facebook.com https://themes.googleusercontent.com maxcdn.bootstrapcdn.com; frame-src 'self' https://universe.queue-it.net https://www.universe.com https://player.vimeo.com https://bid.g.doubleclick.net https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://www.google.com; object-src 'self'; connect-src 'self' https://yoast.com https://www.google-analytics.com https://stats.g.doubleclick.net; 1
default-src 'self'; object-src 'self' https://pts.eteleon.de/p.swf; base-uri 'self'; img-src https: data:; font-src https:; form-action 'self' https://www.facebook.com https://connect.facebook.net https://chat.eteleon.de https://umfrage.eteleon.de https://pts.eteleon.de; connect-src 'self' https://widgets.trustedshops.com https://gw1.api.trustedshops.com https://cdn1.api.trustedshops.com https://cdn2.spatialbuzz.com https://cdn.spatialbuzz.com https://o2-de.spatialbuzz.net https://tags.tiqcdn.com https://collect.tealiumiq.com/event https://collect-eu-central-1.tealiumiq.com https://www.google.com https://www.googleadservices.com https://www.google-analytics.com https://stats.g.doubleclick.net https://cts.communicationads.net https://www.bing.com https://bat.bing.com https://connect.facebook.net https://www.facebook.com https://trck.spoteffects.net https://tracking.drillisch.de https://www.dwin1.com https://www.awin1.com https://www7.smartadserver.com https://*.demdex.net https://the.sciencebehindecommerce.com https://o2.mouseflow.com https://cdn.mouseflow.com https://chat.eteleon.de https://stats.eteleon.de https://imagepool.eteleon.de https://pts.eteleon.de https://api.trustedshops.com https://trustbadge.api.etrusted.com/shop/X37852C187578EB2357B3937AF0ABF16A/memberservice https://shops-si.trustedshops.com/shops/X37852C187578EB2357B3937AF0ABF16A https://trustbadge-logging.trustedshops.com; script-src 'strict-dynamic' 'nonce-8d6336656746456a86889ca08417f91d' 'nonce-bdc6249f541d3ee21ba6c9c53ac5ad5c' 'nonce-db1816416ce5dd5d8bef6bb4b95ac7cf' 'nonce-61b6d3875ed56650e9d8fa876e1267fc' 'nonce-5b6e93c036d48aa5594eea2955d6992d' 'nonce-cabb0d6551134bd403b115cddea1dc94' 'self' https: 'report-sample'; style-src 'self' 'unsafe-inline' https: data:; frame-ancestors 'self' https://paketshop.myhermes.de; frame-src https://1and1internetag.demdex.net https://www.facebook.com https://connect.facebook.net https://tags.tiqcdn.com https://cdn2.spatialbuzz.com https://bid.g.doubleclick.net https://tpc.googlesyndication.com https://www.youtube-nocookie.com https://www.awin1.com https://paketshop.myhermes.de https://pts.eteleon.de; child-src https://www.youtube.com https://cdn2.spatialbuzz.com https://trck.spoteffects.net https://www.googleadservices.com https://www.facebook.com https://tags.tiqcdn.com https://ad13.adfarm1.adition.com; upgrade-insecure-requests; block-all-mixed-content; report-uri /csp-reports; script-src-elem 'strict-dynamic' 'nonce-8d6336656746456a86889ca08417f91d' 'nonce-bdc6249f541d3ee21ba6c9c53ac5ad5c' 'nonce-db1816416ce5dd5d8bef6bb4b95ac7cf' 'nonce-61b6d3875ed56650e9d8fa876e1267fc' 'nonce-5b6e93c036d48aa5594eea2955d6992d' 'nonce-cabb0d6551134bd403b115cddea1dc94' 'self' https: 'report-sample' 1
base-uri 'none'; object-src 'none'; script-src https://caddy.community/logs/ https://caddy.community/sidekiq/ https://caddy.community/mini-profiler-resources/ https://caddy.community/assets/ https://caddy.community/brotli_asset/ https://caddy.community/extra-locales/ https://caddy.community/highlight-js/ https://caddy.community/javascripts/ https://caddy.community/plugins/ https://caddy.community/theme-javascripts/ https://caddy.community/svg-sprite/ https://www.google-analytics.com/analytics.js; worker-src 'self' https://caddy.community/assets/ https://caddy.community/brotli_asset/ https://caddy.community/javascripts/ https://caddy.community/plugins/ 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com *.cloudfront.net *.googletagmanager.com *.googleapis.com *.bootstrapcdn.com *.google.com *.google-analytics.com *.gstatic.com *.linkedin.com *.facebook.net *.twitter.com *.extreme-ip-lookup.com *.hotjar.com 1
script-src 'nonce-fca3145c96b4231a6ecf008f1f835561' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=2356008239295846; frame-ancestors 'self' 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://chimpstatic.com/mcjs-connected/js/users/7aa497212c67b4c2ac991d8c4/791b529e7e40cbf76e9955b20.js https://www.googletagmanager.com https://www.google-analytics.com https://*.poweronplatforms.com https://*.poweronpulse.com https://*.canddi.com/ https://*.canddi.io/ https://snap.licdn.com/li.lms-analytics/insight.min.js https://www.youtube.com/iframe_api https://px.ads.linkedin.com/ https://s.ytimg.com/yts/jsbin/www-widgetapi-vflnEPkPm/www-widgetapi.js; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.poweronplatforms.com https://*.poweronpulse.com; img-src 'self' data: http://*.blogspot.com/ https://secure.gravatar.com https://www.google.co.uk https://www.google.com https://stats.g.doubleclick.net https://googletagmanager.com https://www.google-analytics.com https://i.ytimg.com https://*.poweronplatforms.com https://*.poweronpulse.com https://*.canddi.io https://px.ads.linkedin.com/; connect-src 'self' 'unsafe-inline' https://www.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com https://*.poweronplatforms.com https://*.poweronpulse.com; media-src 'none'; child-src 'none'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; frame-src https://maps.google.com https://www.google.com https://www.youtube.com; worker-src 'none'; manifest-src 'none'; base-uri 'none'; upgrade-insecure-requests 1
default-src 'self';               script-src 'self' 'unsafe-inline' 'unsafe-eval' http://kendo.cdn.telerik.com https://code.jquery.com https://use.typekit.net https://maxcdn.bootstrapcdn.com;               style-src 'self' 'unsafe-inline' http://kendo.cdn.telerik.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com;               font-src 'self' data: http://kendo.cdn.telerik.com https://use.typekit.net https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;               img-src 'self' data: blob: blank: http://kendo.cdn.telerik.com https://p.typekit.net;           connect-src 'self' javascript: wss: https://taskservicestage.brightreepc.com https://performance.typekit.net;           frame-src 'self' https://transaction.hostedpayments.com/ https://certtransaction.hostedpayments.com/;           object-src 'none' 1
default-src 'self' http://localhost:* https://tpc.googlesyndication.com https://*.safeframe.googlesyndication.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.gstatic.com/charts/49/js/jsapi_compiled_corechart_module.js https://www.gstatic.com/charts/49/js/jsapi_compiled_ui_module.js https://www.gstatic.com/charts/49/js/jsapi_compiled_graphics_module.js https://www.gstatic.com/charts/49/js/jsapi_compiled_default_module.js https://www.gstatic.com/charts/49/loader.js https://www.gstatic.com/charts/loader.js https://www.google.com/jsapi https://ajax.cloudflare.com https://tpc.googlesyndication.com https://api.hubapi.com https://adservice.google.com https://adservice.google.com.ph https://js.hs-banner.com https://js.hsadspixel.net http://js.hs-analytics.net https://js.hs-analytics.net http://js.hs-scripts.com https://js.hs-scripts.com https://amplify.outbrain.com https://platform.linkedin.com/in.js http://platform.linkedin.com/in.js https://www.mynimo.com http://localhost:*  https://cdnjs.cloudflare.com  http://www.googletagservices.com https://www.googletagservices.com http://pagead2.googlesyndication.com https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net http://www.googletagmanager.com https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com http://www.googleadservices.com https://www.googleadservices.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.google-analytics.com https://cdn.ampproject.org http://www.youtube.com https://www.youtube.com; style-src 'unsafe-inline' 'self' https://www.gstatic.com/charts/49/css/util/util.css https://www.gstatic.com/charts/49/css/core/tooltip.css http://localhost:* https://fonts.googleapis.com/ https://tagmanager.google.com; img-src * blob: data:; font-src 'self' https://fonts.gstatic.com/ data:; connect-src 'self' http://localhost:* https://csi.gstatic.com https://api.hubapi.com https://stats.g.doubleclick.net https://securepubads.g.doubleclick.net https://www.google-analytics.com https://pagead2.googlesyndication.com; frame-src https://drive.google.com/ https://player.vimeo.com/ https://www.google.com/ https://maps.google.com/ https://docs.google.com/ https://www.oculu.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://staticxx.facebook.com http://www.youtube.com https://www.youtube.com https://www.facebook.com/; 1
frame-ancestors 'self' http://www.philips.hu *.philips.com *.philips.hu 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; img-src 'self' data: *; media-src 'self' *.olark.com images.ctfassets.net; font-src 'self' data: *.googleapis.com *.gstatic.com *.zohocdn.com; connect-src *; base-uri 'self' optimize.google.com; frame-src data: * 1
default-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data:; font-src https: data:; object-src 'none' 1
default-src 'none';     script-src 'self' 'unsafe-inline' 'unsafe-eval' https://player.vimeo.com https://media.funmobility.com https://cdn.datatables.net http://cdn.datatables.net https://cdn.ckeditor.com http://cdn.ckeditor.com https://maxcdn.bootstrapcdn.com http://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com http://cdnjs.cloudflare.com https://oss.maxcdn.com http://oss.maxcdn.com https://cdn.jsdelivr.net http://cdn.jsdelivr.net https://www.googletagmanager.com http://www.googletagmanager.com https://ajax.googleapis.com http://ajax.googleapis.com https://www.google-analytics.com http://www.google-analytics.com;     style-src 'self' 'unsafe-inline' https://use.fontawesome.com http://use.fontawesome.com https://cdn.ckeditor.com http://cdn.ckeditor.com https://cdnjs.cloudflare.com http://cdnjs.cloudflare.com https://cdn.datatables.net http://cdn.datatables.net https://cdn.jsdelivr.net http://cdn.jsdelivr.net https://cdn.cloudflare.com http://cdn.cloudflare.com https://maxcdn.bootstrapcdn.com http://maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com;     img-src 'self' data: https://cdn.ckeditor.com http://cdn.ckeditor.com http://castrol-prod.us-west-2.elasticbeanstalk.com https://castrol-prod.s3-us-west-2.amazonaws.com http://castrol-prod.s3-us-west-2.amazonaws.com https://www.google-analytics.com http://www.google-analytics.com;     connect-src 'self' https://www.google-analytics.com http://www.google-analytics.com https://www.googletagmanager.com;     child-src 'self' https://player.vimeo.com https://media.funmobility.com https://oreillyautoparts.mobile-promotion.com;     font-src 'self' https://use.fontawesome.com http://use.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com https://maxcdn.bootstrapcdn.com http://maxcdn.bootstrapcdn.com https://fonts.gstatic.com http://fonts.gstatic.com;     media-src 'self'  http://castrol-prod.us-west-2.elasticbeanstalk.com https://castrol-prod.s3-us-west-2.amazonaws.com http://castrol-prod.s3-us-west-2.amazonaws.com https://castrol-dev.s3-us-west-2.amazonaws.com http://castrol-dev.s3-us-west-2.amazonaws.com ; 1
frame-ancestors 'self' https://*.wiseradvisor.com 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://*.criteo.com https://static.criteo.net https://www.youtube.com https://www.zenaps.com https://www.instagram.com https://ln-rules.rewardstyle.com https://www.shoplooks.com https://vars.hotjar.com https://*.akamaihd.net https://*.translate.naver.net https://player.vimeo.com https://*.recaptcha.net https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://the.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.parcellab.com https://ct.pinterest.com https://privacyportal.onetrust.com https://analytics.tiktok.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.burtsbees.co.uk https://m.burtsbees.co.uk https://checkout.burtsbees.co.uk https://connect.facebook.net https://tr.snapchat.com; frame-ancestors 'self'; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://geolocation.onetrust.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://*.criteo.com https://static.criteo.net https://remote.captcha.com https://ssl.bing.com https://script.hotjar.com https://ssl.google-analytics.com https://ln-rules.rewardstyle.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://static.hotjar.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://*.google-analytics.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://s.pinimg.com https://static.bytedance.com https://s0.ipstatp.com https://s16.tiktokcdn.com https://analytics.tiktok.com https://sf16-scmcdn-va.ibytedtos.com; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
upgrade-insecure-requests; default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors zubersoft.com www.zubersoft.com; base-uri 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' www.google.com www.gstatic.com; frame-src zubersoft.com www.zubersoft.com www.google.com 1
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri https://partssource.report-uri.com/r/d/csp/enforce 1
frame-ancestors DENY 1
frame-ancestors *.omnimoto.it *.motor1.com 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-NjRiMDU2OTgtNmJhNC00NGZjLThjMjEtNTlmYTdmZjI1Zjc3'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com www.googletagmanager.com www.google-analytics.com *.facebook.net *.sharethis.com *.wp.com *.disqus.com *.facebook.com js.stripe.com; img-src 'self' *.google.com *.google.no www.google-analytics.com www.googletagmanager.com i.imgur.com www.facebook.com *.sharethis.com *.doubleclick.net *.gravatar.com *.w.org *.wp.com data:; style-src 'self' 'unsafe-inline' *.google.com *.sharethis.com *.googleapis.com; child-src 'self' *.google.com www.facebook.com staticxx.facebook.com *.sharethis.com www.youtube-nocookie.com disqus.com; connect-src 'self' wss://w4.no:4405 wss://*.w4.no:4405 *.sharethis.com *.google-analytics.com js.stripe.com; font-src 'self' *.gstatic.com wordpress.com data:; frame-src 'self' js.stripe.com hooks.stripe.com www.youtube-nocookie.com *.facebook.com *.google.com; 1
frame-ancestors 'self' http://toolstestdrive.esource.com; 1
report-uri /csp-hotline.php; script-src  'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://stackpath.bootstrapcdn.com https://cdn.datatables.net *.mihtool.com https://cdnjs.cloudflare.com https://yastatic.net yastatic.net  https://*.yastatic.net *.slus.name https://*.slus.name:3000 *.yastatic.net *.mail.com https://*.gstatic.com *.gstatic.com https://*.google.com *.google.com vk.com http://tomsk.effad.ru *.effad.ru effad.ru *.me-talk.ru disgusting.ru https://api-maps.yandex.ru *.yandex.net yandex.st *.yadro.ru *.yandex.ru *.ok.ru *.rf-sp.ru https://rf-sp.ru *.tbex.ru *.google-analytics.com *.googleapis.com *.jivosite.com *.jquery.com *.gismeteo.ru *.siteheart.com 38mama.ru me-talk.ru top-fwz1.mail.ru st.top100.ru https://jsconsole.com https://d3js.org; style-src 'self' 'unsafe-inline' *.rf-sp.ru 38mama.ru *.chathelp.ru *.slus.name https://cdnjs.cloudflare.com https://*.gstatic.com *.slus.name:3000 https://cdn.datatables.net https://stackpath.bootstrapcdn.com https://www.google.com https://fonts.googleapis.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://yandex.ru https://*.yandex.ru https://*.yandex.net https://yastatic.net https://*.google.com https://*.google.ru https://*.google-analytics.com https://*.googleadservices.com https://*.googleusercontent.com https://www.gstatic.com https://www.youtube.com https://*.doubleclick.net https://s.ytimg.com https://*.livechatinc.com https://top-fwz1.mail.ru https://www.tns-counter.ru https://vk.com https://cp.masterhost.ru https://connect.facebook.net; style-src 'self' 'unsafe-inline' https: ; frame-ancestors 'self' https://masterhost.ru https://*.masterhost.ru http://webvisor.com http://*.mtproxy.yandex.net https://mc.yandex.ru; frame-src 'self' https://yandex.ru https://*.yandex.ru https://*.yandex.net https://yastatic.net https://*.google.com https://*.google.ru https://*.google-analytics.com https://*.googleadservices.com https://*.googleusercontent.com https://www.gstatic.com https://www.youtube.com https://*.doubleclick.net https://s.ytimg.com https://*.livechatinc.com https://top-fwz1.mail.ru https://www.tns-counter.ru https://vk.com https://cp.masterhost.ru https://connect.facebook.net; font-src 'self' https: ; img-src data: 'self' https: ; connect-src 'self' https://yandex.ru https://*.yandex.ru https://*.yandex.net https://yastatic.net https://*.google.com https://*.google.ru https://*.google-analytics.com https://*.googleadservices.com https://*.googleusercontent.com https://www.gstatic.com https://www.youtube.com https://*.doubleclick.net https://s.ytimg.com https://*.livechatinc.com https://top-fwz1.mail.ru https://www.tns-counter.ru https://vk.com https://cp.masterhost.ru https://connect.facebook.net; 1
frame-ancestors www.facebook.com accounts.google.com s7.addthis.com www.catholicfaithstore.com 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.dwin2.com/* *.google.com/* *.twitter.com/* *.wp.me/* *.youtube.com/* *.zscalertwo.net ajax.googleapis.com/* api.stripe.com/* assets.adobedtm.com/* cdnjs.cloudflare.com/* data: fonts.googleapis.com/* hooks.stripe.com/* https: js.stripe.com/* maxcdn.bootstrapcdn.com/* penguin-group.msgfocus.com/* penguinhr.wpengine.com/* r.girogate.de/* secure.gravatar.com/* ssl.google-analytics.com/* https://jonesbo.com; upgrade-insecure-requests 1
frame-src *.hotjar.com *.doubleclick.net *.facebook.com *.demdex.net *.youtube.com; img-src 'self' *.scene7.com *.company-target.com https://match.prod.bidr.io *.doubleclick.net *.google.com *.google.co.in *.linkedin.com *.google-analytics.com *.facebook.com https://t.co *.adsymptotic.com *.akamaihd.net https://zs.sc.omtrdc.net *.everesttech.net *.ytimg.com *.googletagmanager.com *.demdex.net *.rlcdn.com; style-src 'self' 'unsafe-inline'; font-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.adobedtm.com *.googletagmanager.com *.demandbase.com https://www.googleadservices.com *.youtube.com *.doubleclick.net *.licdn.com *.google-analytics.com *.ads-twitter.com https://s.ytimg.com *.facebook.net *.hotjar.com *.cookielaw.org *.marketo.net https://analytics.twitter.com *.onetrust.com *.akamaihd.net; connect-src 'self' *.company-target.com *.tt.omtrdc.net *.cookielaw.org *.mktoresp.com *.google-analytics.com *.hotjar.com *.doubleclick.net *.demdex.net *.omtrdc.net *.hotjar.io; 1
frame-src https://www.google.com; font-src 'self' https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://img6.wsimg.com; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://www.gstatic.com; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://js.hs-scripts.com https://tags.tiqcdn.com https://snap.licdn.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://www.google-analytics.com https://js.hs-analytics.net https://js.hs-banner.com; 1
frame-ancestors 'self' https://dashboard.vidy.com; 1
frame-ancestors https://www.justcavalli.com/ https://www.justcavalli.com/ ; 1
base-uri 'self'; default-src * 'unsafe-inline'; script-src * 'unsafe-inline'; img-src * 'self' https: data:; frame-ancestors 'self' 1
default-src 'self' 'unsafe-inline' https://www.google.com https://www.google-analytics.com; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; object-src 'self' 'unsafe-inline' https://www.google.com https://www.google-analytics.com 1
base-uri 'self'; default-src 'none'; connect-src 'self' www.google-analytics.com; font-src 'self' https: data: fonts.gstatic.com; form-action 'self' payment-webinit.sogenactif.com; frame-ancestors 'none'; frame-src www.youtube.com service.mtcaptcha.com service2.mtcaptcha.com; img-src 'self' https: data: ssl.gstatic.com www.gstatic.com www.googletagmanager.com tagmanager.google.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com tagmanager.google.com service.mtcaptcha.com service2.mtcaptcha.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.googletagmanager.com tagmanager.google.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com *.onetrust.com https://cdn.cookielaw.org https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://form.jotformeu.com https://cdn.jotfor.ms https://js.jotform.com https://widgets.jotform.io https://browser.sentry-cdn.com https://events.jotform.com https://static.dvinci-easy.com https://api.heycamp.de https://svc.webspellchecker.net/spellcheck31/lf/scayt3/ckscayt/ckscayt.js https://svc.webspellchecker.net/spellcheck31/lf/scayt3/ckscayt/local/de/local.js;; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com https://cdn.jotfor.ms http://www.al-ko.com https://widgets.jotform.io https://static.dvinci-easy.com;; img-src 'self' www.google-analytics.com https://www.facebook.com https://www.google.com https://cdn.jotfor.ms https://stats.g.doubleclick.net https://events.jotform.com https://www.heycamp.de https://i3.ytimg.com;; media-src 'self'; frame-src 'self' https://www.google.com https://www.store-connector.com https://submit.jotformeu.com/ https://www.youtube.com/;; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com netdna.bootstrapcdn.com;; connect-src 'self' https://www.google-analytics.com *.onetrust.com https://cdn.cookielaw.org https://static.dvinci-easy.com https://alko-tech.dvinci-easy.com https://www.heycamp.de;; report-uri /en/report-csp-violation 1
default-src 'none';frame-src 'self' https://transfer.jungheinrich.de https://www.facebook.com https://www.googletagmanager.com https://tagmanager.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ *.zscloud.net *.jungheinrich.de https://consent.cookiebot.com https://consentcdn.cookiebot.com https://my-usedforklift.com mailto:;script-src 'self' https://transfer.jungheinrich.de 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com *.googleapis.com *.excentos.com *.zscloud.net https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://www.youtube.com *.ytimg.com https://recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ *.gstatic.com *.gstatic.cn https://consent.cookiebot.com https://consentcdn.cookiebot.com https://connect.facebook.net https://px.ads.linkedin.com https://sjs.bizographics.com https://snap.licdn.com https://media-live2.prod.scw.jungheinrichcloud.com;connect-src 'self' https://transfer.jungheinrich.de https://stats.g.doubleclick.net https://stage.excentos.com/jungheinrichwb/ https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com *.jungheinrich.de *.jungheinrich.com https://service.excentos.com https://media-live2.prod.scw.jungheinrichcloud.com;img-src 'self' https://transfer.jungheinrich.de https://d3m4cch8el4nlz.cloudfront.net https://www.linkedin.com https://p.adsymptotic.com https://www.jh-profishop.de *.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com *.excentos.com *.googleapis.com *.zscloud.net https://maps.google.com https://stats.g.doubleclick.net *.ytimg.com https://www.google.com/ads/ https://www.google.de/ads/ *.jungheinrich.de *.jungheinrich.com data: https://www.facebook.com https://px.ads.linkedin.com https://media-live2.prod.scw.jungheinrichcloud.com;child-src 'self';media-src 'self';style-src 'self' https://transfer.jungheinrich.de 'unsafe-inline' *.excentos.com https://www.googletagmanager.com https://tagmanager.google.com *.googleapis.com https://media-live2.prod.scw.jungheinrichcloud.com;font-src 'self' https://transfer.jungheinrich.de *.excentos.com https://www.googletagmanager.com https://tagmanager.google.com *.gstatic.com https://media-live2.prod.scw.jungheinrichcloud.com 1
script-src 'self' www.google.com cdnjs.cloudflare.com www.gstatic.com 'unsafe-inline' 'unsafe-eval'; 1
img-src 'self' data: *; default-src 'self' 'unsafe-inline' 'unsafe-eval' maasstad.local www.google-analytics.com www.googletagmanager.com tagmanager.google.com plus.google.com ajax.aspnetcdn.com www.facebook.com twitter.com www.linkedin.com www.youtube.com www.pinterest.com www.instagram.com mijn.maasstadziekenhuis.nl digid.nl fast.fonts.com *.maasstadehealth.nl m.maasstadziekenhuis.nl; script-src * data: application/javascript 'unsafe-inline' 'unsafe-eval'; 1
frame-ancestors signaviogtmplatform.my.salesforce.com signavio.force.com; 1
frame-ancestors 'self' https://www.katholische-kirche-steiermark.at https://www.kath-kirche-vorarlberg.at https://betacms.kath-kirche-vorarlberg.at https://www.dibk.at https://www.dsp.at https://www.erzdioezese-wien.at http://www.kirchen.net http://kirchen.net https://cms.kath-kirche-vorarlberg.at https://www.meinefamilie.at http://www.eds.at https://www.eds.at; 1
default-src https: 'unsafe-inline'; img-src 'self' https: data:; 1
frame-ancestors 'self' kiosk.bxgcorp.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' localhost: * https://stats.g.doubleclick.net https://www.google-analytics.com wss://localhost:44399 movinghelp.com movinghelpd.com cdnjs.cloudflare.com https://localhost pwctag.uhaul.com www.googletagmanager.com unpkg.com https://bing.com https://virtualearth.com pwc.uhaul.com maxcdn.bootstrapcdn.com data: media.uhaul.net  http://localhost:* beta.uhaul.com; 1
script-src 'nonce-lk7pMaQijxDLC841cfrdsg' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.google-analytics.com/analytics.js https://www.googleadservices.com https://googleads.g.doubleclick.net http://www.gstatic.com/wcm/;report-uri /_/GeoMerchantPrestoSiteUi/cspreport 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' *.intuit.com intuit.com *.quickbooks.com quickbooks.com *.square.com square.com *.squareupstaging.com squareupstaging.com *.squareup.com squareup.com; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; report-uri https://simplyinsured.report-uri.com/r/d/csp/enforce 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://writing.exchange; img-src 'self' https: data: blob: https://writing.exchange; style-src 'self' https://writing.exchange 'nonce-r5x9kWRG5rTtYM203cqzHg=='; media-src 'self' https: data: https://writing.exchange; frame-src 'self' https:; manifest-src 'self' https://writing.exchange; connect-src 'self' data: blob: https://writing.exchange https://cdn.masto.host wss://writing.exchange; script-src 'self' https://writing.exchange; child-src 'self' blob: https://writing.exchange; worker-src 'self' blob: https://writing.exchange 1
default-src 'self' shop.bestservice.de shop.bestservice.com shop.bestservice.fr dwl.dawconnect.com maps.google.de www.google.com connect.facebook.net www.facebook.com *.youtube.com ;  img-src  'self' data: *.bestservice.de *.bestservice.com *.bestservice.fr *.bsdwl.de *.google-analytics.com connect.ekomi.de *.facebook.com *.doubleclick.net *.google.com *.google.de *.youtube.com;  media-src 'self' *.bestservice.de *.bestservice.com *.bestservice.fr *.youtube.com;  script-src 'self' data: *.bestservice.de *.bestservice.com *.bestservice.fr *.google-analytics.com connect.ekomi.de www.googleadservices.com *.jwpcdn.com dwl.dawconnect.com *.facebook.net www.googletagmanager.com *.facebook.com *.google.com *.google.de *.doubleclick.net 'unsafe-inline' 'unsafe-eval';  worker-src 'self' *.bestservice.de *.bestservice.com *.bestservice.fr *.doubleclick.net www.google.com www.google.de *.youtube.com;  font-src 'self' *.bestservice.de *.bestservice.com *.bestservice.fr fonts.gstatic.com;  style-src 'self' *.bestservice.de *.bestservice.com *.bestservice.fr fonts.googleapis.com 'unsafe-inline';  object-src 'self' 1
font-src *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es cdn.dnky.co webchat.dotdigital.com https://www.googletagmanager.com/ api.razorpay.com *.google.com *.addthis.com *.pinterest.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ cdn.razorpay.com *.cloudflare.com https://cdn.klarna.com data: https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io checkout.razorpay.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ lumberjack.razorpay.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; object-src 'self' *.alamode.com; frame-ancestors 'self' *.alamode.com; font-src https://code.jquery.com https://maxcdn.bootstrapcdn.com 'self'; img-src *; script-src 'sha256-eDDMDdKnXeDK5c4q0HKnwEDQRh0+H5P/fDi8PtWX0eA=' https://code.jquery.com https://maxcdn.bootstrapcdn.com https://d3js.org https://ajax.googleapis.com 'self' 'unsafe-eval' 'sha256-32daEaoD3VVlf+DxRk4KMFlyURvzMjYgUfxhUQGb2SY=' 'sha256-qThJjxVWcaqBNMSrY9brk6F63CHUYyltinX7sy+Z3jo=' 'sha256-xRhPnEXMOJkjZuyt9HRpjr1tD7b/UnSWtXZHH4DF84U=' 'sha256-jV7+/Ddjx3akje9Yzzc9RMeGxEasjborEJ7sUB1KqI4=' 'sha256-jj/lbWfVoHfWkFHQQl8wj5CzMsMu5J701Rrq3FQabtk=' 'sha256-AeJCLKp9xBq2ip6+izwGWhF/njB9B31VKKQFa5YLC6g=' 'sha256-ELKFvcOSTiqduoyoXxWQaQ/4CBMEa3+Ni3eySFlEqDI=' 'sha256-5kGaajMelu/3RpywFBHAJuqhNp0Bjn4ylBctAv8+EFY=' 'sha256-UITiqbXyaWS7NpwiFrMIbdXAZy5EXLRUHkpylF4504k=' 'sha256-0BV5VoIlask4z+Yzf5K0nnC5VJsdaDG/aQWY8sb5Qz8=' 'sha256-HP6PJ90C1IhbXvxCx/lmv//Fuj8WIX6zqfzysdYw6Bs=' 'sha256-psevpNPdDksmjGZnD+QA0OFeXnK2mLmOTNZlKNdGMpE=' 'sha256-7dNi3PxjyxPzk7XobFmU5YLbi6+58mo9OY1p6BKoGdI=' 'sha256-EvClXdCMFTDfrYIrnffCQ5zLoZM5oHwkITIkUh6Q6r0=' 'sha256-Y842RegS2onx4EZAQYjNCe7EyUGTzVRqi1lFyWmub68=' 'sha256-WYJMBRaMCfFrVg50U8vOabVXOnWLo1c+qj/cVxA763Y=' 'sha256-qvl54PEa8xxtwvDASG8fDbk9US2O8GlF0zpKrXx3bjw=' 'sha256-H1FVRGM+EKPcb4+4F8af6Z372nzZFYMl7rGZ6I9cF6A=' 'sha256-mq1mX4nr49HktsVEMyqh2/HVmmFl72FxoC9SnLZvAXg=' https://www.googletagmanager.com https://ssl.google-analytics.com/ga.js 'sha256-wXAcd1ryB00c23Dr66WUUFoD/AT6sJb4sdVnrGMcExM=' https://www.google-analytics.com/analytics.js https://www.alamode.com 'sha256-+pBP3dlT2JLJy+wY8BHYTyXkt1zqwnODh/V8qJ8mUJU=' 'nonce-796c225be2a5c6cfa15439692bea9f6a'; style-src https://code.jquery.com https://maxcdn.bootstrapcdn.com 'unsafe-inline' 'self';  base-uri 'self';  frame-src https:; 1
default-src 'self' www.googletagmanager.com www.google-analytics.com *.cloudfront.net *.googleapis.com analytics.analytics-egain.com cloud-emea.analytics-egain.com fonts.gstatic.com portal.roadworks.org sgn.egain.cloud api.reciteme.com stats.g.doubleclick.net www.google.com www.google.co.uk www.gstatic.com maps.gstatic.com api.tomtom.com www.youtube.com data: 'unsafe-eval' 'unsafe-inline'; report-uri https://orangebus.report-uri.com/r/d/csp/enforce 1
base-uri 'self'; connect-src 'self' www.sd.be http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io https://sdworx.breezy.hr https://*.events.ubembed.com https://*.botframework.com https://*.cleverpush.com https://server.smartsupp.com wss://server.smartsupp.com wss://*.smartsupp.com https://*.smartsupp.com https://*.smartsuppchat.com https://*.smartsuppcdn.com https://smartsupp-widget-161959.c.cdn77.org cdn.cookielaw.org https://privacyportal-eu.onetrust.com https://ldynamicspublicapi.leadforensics.com https://www.google-analytics.com wss://*.hotjar.com https://stats.g.doubleclick.net https://*.doubleclick.net ; default-src 'self'; font-src https: data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.smartsuppcdn.com https://smartsupp-widget-161959.c.cdn77.org; frame-src https: https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.sdworx.at https://www.sdworx.be https://www.sdworx.ch https://www.sdworx.fr https://www.sdworx.de https://www.sdworx.lu https://www.sdworx.nl https://www.sdworx.co.uk; img-src https: data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.smartsuppcdn.com https://smartsupp-widget-161959.c.cdn77.org cdn.cookielaw.org; media-src 'self' https://smartsupp-widget-161959.c.cdn77.org/ https://*.smartsuppcdn.com https://smartsupp-widget-161959.c.cdn77.org; script-src 'unsafe-eval' 'unsafe-inline' https: data: requirejs.org http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.smartsuppchat.com https://*.smartsuppcdn.com https://smartsupp-widget-161959.c.cdn77.org cdn.cookielaw.org; style-src https: 'unsafe-inline' https://*.smartsuppcdn.com https://smartsupp-widget-161959.c.cdn77.org; worker-src 'self' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; 1
default-src 'self' discordapp.com img.cryptovoxels.com js.cryptovoxels.com controllers.babylonjs.com fonts.googleapis.com fonts.gstatic.com cryptovoxels.com cdn.cryptovoxels.com www.youtube.com blob: www.google-analytics.com video.cryptovoxels.com blob: api.userfeeds.io twitter.com syndication.twitter.com platform.twitter.com stingray.cryptovoxels.com https://broadcast.cryptovoxels.com resources.crvox.com textures.crvox.com assets.crvox.com https://immersive-web.github.io; script-src 'self' cryptovoxels.com cdn.usefathom.com cdn.cryptovoxels.com js.cryptovoxels.com 'unsafe-eval' 'unsafe-inline' blob: preview.babylonjs.com cdn.babylonjs.com cdn.jsdelivr.net stingray.cryptovoxels.com; style-src 'self' cryptovoxels.com cdn.cryptovoxels.com fonts.googleapis.com 'unsafe-inline' app.tor.us; media-src * blob: resources.crvox.com textures.crvox.com assets.crvox.com; img-src 'self' data: *.usefathom.com controllers.babylonjs.com js.cryptovoxels.com storage.opensea.io cryptovoxels.com img.cryptovoxels.com cdn.cryptovoxels.com map.cryptovoxels.com map-10769.kxcdn.com *.map.cryptovoxels.com blob: video.cryptovoxels.com imager.cryptovoxels.com lh3.googleusercontent.com stingray.cryptovoxels.com https://cryptovoxels.sfo2.digitaloceanspaces.com https://wearables-10769.kxcdn.com; object-src 'self' cryptovoxels.com img.cryptovoxels.com discordapp.com imager.cryptovoxels.com resources.crvox.com textures.crvox.com assets.crvox.com; connect-src 'self' api.opensea.io js.cryptovoxels.com img.cryptovoxels.com controllers.babylonjs.com wss://www.cryptovoxels.com wss://grid.cryptovoxels.com https://www.cryptovoxels.com fonts.googleapis.com fonts.gstatic.com video.cryptovoxels.com api.userfeeds.io wss: https://eth-mainnet.alchemyapi.io https://cdn.cryptovoxels.com wss://cryptovoxels.fly.dev wss://broadcast.cryptovoxels.com https://broadcast.cryptovoxels.com resources.crvox.com textures.crvox.com assets.crvox.com wss://cryptovoxels-multi.herokuapp.com follower.cryptovoxels.com vox-10769.kxcdn.com api.tor.us common-api.tor.us api.infura.io www.googleapis.com signer.tor.us metadata.tor.us https://immersive-web.github.io matrix.cryptovoxels.com; frame-src discordapp.com cryptovoxels.com www.cryptovoxels.com www.youtube.com untrusted.cryptovoxels.com opensea.io player.twitch.tv app.tor.us; font-src 'self' fonts.googleapis.com fonts.gstatic.com; upgrade-insecure-requests 1
frame-ancestors 'self' http://www.spelo.se 1
frame-ancestors https://*.ionos.com https://*.ionos.at https://*.ionos.co.uk https://*.ionos.de https://*.ionos.es https://*.ionos.fr https://*.ionos.it https://*.ionos.ca https://*.ionos.mx https://*.ionos.us https://*.website-editor.net https://*.mywebsite-editor.com www.tecformglobal.com 1
upgrade-insecure-requests; frame-ancestors 'self' suitu.cz *.suitu.cz mysuitu.com *.mysuitu.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.oktacdn.com *.bootstrapcdn.com *.googleapis.com *.idvu.io *.apple.com *.google.com  *.disney.com *.digitalscreeners.com *.telerik.com *.labgency.us *.getbootstrap.com *.jquery.com *.w3.org *.akamaized.net *.blob.core.windows.net *.cloudflare.com *.google-analytics.com *.newrelic.com *.nr-data.net *.idviu.io *.idviu.com *.apivu.io *.apivu.com *.apivu.us *.apivu.io.co *.apivu.nyc *.foxmediacloud.com *.cloudfront.net; img-src * 'unsafe-inline' data:; media-src * blob:;style-src * 'unsafe-inline' data:;font-src * 'unsafe-inline' data:;connect-src * 'unsafe-inline' *.idviu.io *.idviu.com *.apivu.io *.apivu.com *.apivu.us *.apivu.io.co *.apivu.nyc;frame-src * *.google.com 'unsafe-inline' 1
default-src 'self'; script-src https://tagmanager.google.com https://mc.yandex.ru https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge   https://mc.yandex.md https://mc.yandex.ua https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net https://call-tracking.by https://app.call-tracking.by https://googleads.g.doubleclick.net https://developers.google.com https://maps.googleapis.com https://offerswidget.visa.com https://blinger.io https://www.googleadservices.com https://app.blinger.io https://mc.yandex.ru https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.md https://mc.yandex.ua https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net https://fonts.googleapis.com https://offerswidget.visa.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src data: https://maps.googleapis.com https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.md https://mc.yandex.ua https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net https://www.google.by https://app.blinger.io https://maps.gstatic.com https://www.google.com https://www.visa.com https://offerswidget.visa.com https://mc.yandex.ru https://blinger.io https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net 'self'; frame-src viber: blob: https://mc.yandex.ru https://www.fxclub.org https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.md https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net https://bid.g.doubleclick.net https://widget.fxclub.org https://www.facebook.com https://www.youtube.com; connect-src https://mc.yandex.ru https://mc.yandex.by https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.md https://mc.yandex.ua https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net https://call-tracking.by https://app.call-tracking.by https://www.google-analytics.com https://stats.g.doubleclick.net wss://app.blinger.io https://blinger.io 'self'; font-src https://fonts.gstatic.com https://offerswidget.visa.com 'self'; base-uri 'self'; form-action https://www.bsb.by https://www.facebook.com; frame-ancestors http://webvisor.com 1
base-uri * 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.dimora.jp https://*.dimora.jp http://*.google-analytics.com/ https://*.google-analytics.com https://*.google.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://b91.yahoo.co.jp https://linkmaker.itunes.apple.com https://*.mul-pay.jp https://s.yimg.jp https://fonts.gstatic.com https://*.impact-ad.jp https://*.im-apps.net https://*.googleapis.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://*.googleadservices.com https://googleads.g.doubleclick.net https://*.google.co.jp; img-src 'self' data: https://*.google-analytics.com/ https://*.twitter.com https://*.impact-ad.jp https://stats.g.doubleclick.net https://linkmaker.itunes.apple.com https://b91.yahoo.co.jp; 1
default-src * data: blob: 'unsafe-inline' 'unsafe-eval';  script-src * 'unsafe-inline' 'unsafe-eval';  connect-src * 'unsafe-inline';  img-src * data: blob: 'unsafe-inline';  frame-src *;  style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors 'none'; 1
frame-ancestors demdex.net *.demdex.net iq.com.br *.iq.com.br azulis.com.br *.azulis.com.br salveospequenos.com.br *.salveospequenos.com.br br.originhosting.io *.br.originhosting.io itau.com.br *.itau.com.br credicard.com.br *.credicard.com.br 1
frame-ancestors 'self'; font-src data: 'self'; style-src 'self' 'unsafe-inline'; form-action 'self'; 1
base-uri 'none'; object-src 'none'; script-src https://matsci.org/logs/ https://matsci.org/sidekiq/ https://matsci.org/mini-profiler-resources/ https://matsci.org/assets/ https://matsci.org/brotli_asset/ https://matsci.org/extra-locales/ https://matsci.org/highlight-js/ https://matsci.org/javascripts/ https://matsci.org/plugins/ https://matsci.org/theme-javascripts/ https://matsci.org/svg-sprite/; worker-src 'self' https://matsci.org/assets/ https://matsci.org/brotli_asset/ https://matsci.org/javascripts/ https://matsci.org/plugins/ 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudfront.net https://www.googletagmanager.com https://js.hs-scripts.com https://script.hotjar.com https://s.adroll.com https://d.adroll.mgr.consensu.org https://d.adroll.com https://www.bugherd.com https://fast.wistia.com https://www.google-analytics.com https://connect.facebook.net https://d.line-scdn.net https://snap.licdn.com https://cdn.taboola.com https://trc.taboola.com https://www.clickcease.com https://js.hsleadflows.net https://js.hs-analytics.net https://js.hs-banner.com https://static.hotjar.com; script-src-elem 'self' 'unsafe-inline' https://www.googleadservices.com *.cloudfront.net https://www.googletagmanager.com https://js.hs-scripts.com https://www.bugherd.com https://js.hs-banner.com https://www.google-analytics.com https://js.hs-analytics.net https://connect.facebook.net https://js.hsleadflows.net https://d.line-scdn.net https://snap.licdn.com *.taboola.com https://www.clickcease.com *.hotjar.com https://fast.wistia.com https://cdnjs.cloudflare.com https://s.adroll.com https://d.adroll.mgr.consensu.org https://d.adroll.com https://resources.bamboohr.com https://cdn.pendo.io https://www.recaptcha.net https://www.gstatic.com https://event.webinarjam.com data:; connect-src 'self' wss: *.bugsnag.com *.s3.amazonaws.com *.pusher.com *.pusherapp.com https://www.facebook.com https://monitor.clickcease.com https://sockjs.pusher.com https://www.bugherd.com https://calltracking-api.hoiio.com https://forms.hubspot.com https://www.google-analytics.com https://in.hotjar.com https://vc.hotjar.io/ https://stats.g.doubleclick.net *.litix.io https://distillery.wistia.com https://pipedream.wistia.com https://embedwistia-a.akamaihd.net https://embed-fastly.wistia.com https://app.pendo.io https://yoast.com *.taboola.com; font-src 'self' * data:; media-src 'self' * blob:; worker-src 'self' * blob:; img-src 'self' * data: *.cloudfront.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' *.cloudfront.net fonts.googleapis.com cdn.jsdelivr.net https://resources.bamboohr.com https://event.webinarjam.com; frame-src 'self' www.youtube.com https://www.google.com https://vars.hotjar.com https://www.facebook.com https://player.vimeo.com https://primal.bamboohr.com https://resources.bamboohr.com https://event.webinarjam.com 1
default-src 'self' *.cloudflarestream.com *.videodelivery.net; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src * blob:; object-src *; script-src * 'unsafe-inline' 'unsafe-eval' blob:; style-src * 'unsafe-inline'; worker-src * blob:; 1
default-src 'self' * 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval'; media-src *; 1
script-src 'self' https://partner.googleadservices.com https://maps.googleapis.com https://www.google.com 'unsafe-eval' 'unsafe-inline' https://www.gstatic.com https://pagead2.googlesyndication.com https://adservice.google.es https://adservice.google.com https://www.googletagservices.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ajax.cloudflare.com 1
default-src 'self' http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://www.youtube.com/ https://i.vimeocdn.com/ https://player.vimeo.com/ https://gcs-vimeo.akamaized.net/ https://vod-progressive.akamaized.net/ https://vumbnail.com/; font-src * data:;img-src * data:; script-src * 'unsafe-eval' 'unsafe-inline' blob:; style-src * 'unsafe-inline' 1
default-src 'self' app.safello.com app.s4f3.io;object-src 'none';script-src 'self' 'unsafe-inline' app.safello.com app.s4f3.io www.google-analytics.com www.googletagmanager.com cdnjs.cloudflare.com app.intercom.io widget.intercom.io js.intercomcdn.com;connect-src 'self' app.safello.com app.s4f3.io www.google-analytics.com stats.g.doubleclick.net api.intercom.io api-iam.intercom.io api-ping.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com;child-src share.intercom.io intercom-sheets.com www.intercom-reporting.com www.youtube.com player.vimeo.com fast.wistia.net;img-src 'self' blob: data: www.google-analytics.com js.intercomcdn.com static.intercomassets.com downloads.intercomcdn.com uploads.intercomusercontent.com gifs.intercomcdn.com video-messages.intercomcdn.com messenger-apps.intercom.io *.intercom-attachments-5.com *.intercom-attachments-6.com *.intercom-attachments-9.com www.googletagmanager.com;style-src 'self' 'unsafe-inline' safello.com;frame-src 'self' app.safello.com app.s4f3.io www.youtube.com;font-src 'self' js.intercomcdn.com;frame-ancestors 'self' safello.com *.safello.com;form-action safello.com s4f3.io intercom.help api-iam.intercom.io; media-src js.intercomcdn.com 'self' app.safello.com app.s4f3.io; base-uri 'none'; 1
frame-src https: 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-OGMxMmUyYjYtMmZkYy00YzNjLTkwNzItYzRhMmIxMWU0NTE2'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
frame-ancestors 'self' dashboard.myzeki.com; report-uri /report-violation 1
default-src *.yandex.ru googleads.g.doubleclick.net  *.googlesyndication.com https://fonts.gstatic.com https://yandex.st/share/share.js  wss://chat-ru1.jivosite.com wss://*.jivosite.com/cometcn  http://*.jivosite.com http://code.jivosite.com https://api-maps.yandex.ru/ https://mc.yandex.ru https://www.youtube.com/ https://www.googletagmanager.com https://www.google.com/ http://esapi.siteheart.com http://static.siteheart.com ws://client.siteheart.com http://client.siteheart.com 'self'; script-src *.google.ru *.google.com *.googleadservices.com *.yandex.ru *.googletagservices.com  *.googlesyndication.com  http://site.yandex.net/ https://cdn.onthe.io cdnjs.cloudflare.com  googleadservices.com  googleads.g.doubleclick.net  googleadservices.com/pagead/conversion_async.js https://www.googletagmanager.com  https://www.google-analytics.com http://*.jivosite.com https://code.jquery.com/ https://api-maps.yandex.ru https://ajax.googleapis.com https://mc.yandex.ru http://yandex.st http://widget.siteheart.com ipt http://mc.yandex.ru  http://yastatic.net ipt http://static.siteheart.com http://client.siteheart.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src  *.googleapis.com fonts.googleapis.com https://cdnjs.cloudflare.com http://code.jquery.com https://yandex.st http://static.siteheart.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src * *.gorodnews.ru *.googlesyndication.com  https://site.yandex.net data: bs.yandex.ru http://counter.yadro.ru  self https://www.google-analytics.com https://api-maps.yandex.ru  https://*.maps.yandex.net http://static.siteheart.com https://mc.yandex.ru http://esapi.siteheart.com http://yastatic.net 'self' 1
frame-src 'self' yabrowser: data: https://dis.eu.criteo.com https://www.facebook.com http://webvisor.com https://ott-widget.yandex.ru https://www.youtube.com https://player.video.yandex.net https://ya.ru https://ok.ru https://yastatic.net https://yandex.ru https://*.yandex.ru https://downloader.yandex.net wfarm.yandex.net secure-ds.serving-sys.com yandexadexchange.net *.yandexadexchange.net music.yandex.ru music.yandex.kz yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net; 1
default-src 'unsafe-inline' 'unsafe-eval' data: blob: teveo.cu cdn.teveo.cu icecast.teveo.cu www.google.com www.gstatic.com fonts.gstatic.com stats.rsa.icrt.cu 1
media-src *; 1
default-src 'self'; connect-src 'self' wss: anvil.opentok.com api-enterprise.opentok.com api-standard.opentok.com config.opentok.com hlg.tokbox.com mantis005-pdx.tokbox.com mantis014-pdx.tokbox.com; font-src 'self' orbisv4head.blob.core.windows.net fonts.gstatic.com; frame-src 'self' s7.addthis.com static.addtoany.com www.google.com www.youtube.com www.youtube-nocookie.com; img-src 'self' data: orbisv4head.blob.core.windows.net s3-us-west-2.amazonaws.com maps.googleapis.com maps.gstatic.com; object-src www.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' orbisv4head.blob.core.windows.net m.addthis.com maps.googleapis.com s.ytimg.com s7.addthis.com static.addtoany.com v1.addthisedge.com www.google.com www.gstatic.com www.youtube.com; style-src 'self' 'unsafe-inline' orbisv4head.blob.core.windows.net fonts.googleapis.com static.addtoany.com; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' ajax.googleapis.com cdnjs.cloudflare.com oss.maxcdn.com analytics.tideways.io 'unsafe-eval' 'unsafe-inline'; connect-src 'self'; img-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com; child-src 'self' share.transistor.fm; report-to twcsp; report-uri https://app.tideways.io/error/csp; 1
default-src 'self';connect-src 'self' blob: eloket.hengelo.nl www.google-analytics.com stats.g.doubleclick.net babm.texthelp.com browsealoud-webservices-8.texthelp.com speechstreamv3-webservices-8.texthelp.com plus.browsealoud.com www.browsealoud.com wikisum.texthelp.com plusqa.browsealoud.com *.speechstream.net;script-src 'self' 'unsafe-inline' eloket.hengelo.nl websurveys2.servmetric.com hitcounter.servmetric.com babm.texthelp.com *.speechstream.net plus.browsealoud.com www.browsealoud.com wikisum.texthelp.com fonts.googleapis.com www.googletagmanager.com www.google-analytics.com apis.google.com siteimproveanalytics.com;frame-src 'self' https://eloket.hengelo-test.nl https://eloket.hengelo.nl websurveys2.servmetric.com www.youtube-nocookie.com https://www.arcgis.com;style-src 'self' 'unsafe-inline' eloket.hengelo.nl websurveys2.servmetric.com plus.browsealoud.com www.browsealoud.com fonts.googleapis.com ;img-src 'self' data: eloket.hengelo.nl img.youtube.com nieuwsbrieven.hengelo.nl *.siteimproveanalytics.io plus.browsealoud.com www.browsealoud.com upload.wikimedia.org www.google-analytics.com stats.g.doubleclick.net;child-src 'self' content.googleapis.com www.googletagmanager.com;font-src 'self' data: fonts.gstatic.com;object-src 'self';media-src 'self' blob: *.speechstream.net 1
default-src https: 'unsafe-inline' 1
default-src * data: blob:;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com https://static.hotjar.com;frame-src 'self' https://*.mhcache.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://vars.hotjar.com https://*.facebook.com https://*.googleapis.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://www.zenaps.com;script-src *.myheritage.nl https://www.myheritage.nl  'unsafe-inline' blob: data: 'self' https://*.myheritage.com https://*.mhcache.com https://cdn.trackjs.com https://tpc.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.googletagmanager.com https://connect.facebook.net https://bat.bing.com https://www.googleadservices.com https://*.google-analytics.com https://www.gstatic.com https://*.googleapis.com https://js-agent.newrelic.com https://*.nr-data.net https://*.mk-sense.com https://code.jquery.com https://*.hotjar.com https://www.dwin1.com https://www.zenaps.com https://ad.zanox.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://tagmanager.google.com https://optanon.blob.core.windows.net;connect-src data: 'self' https://*.myheritage.com https://*.mhcache.com https://www.google-analytics.com https://adservice.google.com https://*.nr-data.net https://sentry.io https://capture.trackjs.com https://*.bing.com https://*.facebook.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io:* https://*.doubleclick.net https://*.mk-sense.com https://privacyportal-eu.onetrust.com *.myheritage.nl;media-src 'self' https://*.myheritage.com https://*.mhcache.com 1
default-src 'self'; font-src 'self' data:; script-src 'self' 'unsafe-inline'; connect-src 'none'; img-src 'self' ; media-src 'none'; object-src 'none'; style-src 'self' 'unsafe-inline'; child-src *.youtube.com *.youtube-nocookie.com *.vimeo.com; frame-ancestors 'none'; upgrade-insecure-requests; base-uri vuldb.com 1
frame-src *.krato.io *.vimeo.com *.facebook.com *.google.com *.youtube.com *.yudu.com *.cloudfront.net  'self' 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://p.typekit.net https://fonts.googleapis.com https://hello.myfonts.net https://use.typekit.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://ajax.googleapis.com https://use.typekit.net https://e.issuu.com https://maps.google.com https://platform.twitter.com *.addthis.com https://tools.cdc.gov https://use.typekit.net *.hotjar.com https://www.googletagmanager.com *.facebook.com *.facebook.net https://www.google-analytics.com https://z.moatads.com https://v1.addthisedge.com https://widgets.pinterest.com; frame-src 'self' www.youtube.com events.aidschicago.org player.vimeo.com googltagmanager.com https://doublethedonation.com https://w.soundcloud.com https://www.google.com/maps *.issuu.com *.hotjar.com *.facebook.com *.addthis.com; img-src https: data: blob:; font-src 'self' https://fonts.gstatic.com https://use.typekit.net; connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com *.hotjar.com https://www.cdc.gov; media-src 'self' blob: *.youtube.com; object-src 'self' *.youtube.com; worker-src 'self' blob: 1
frame-ancestors 'self' https://admin.zelmanassociates.com; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://event.formsort.com https://assets.formsort.com https://variant.formsort.com https://flow.formsort.com https://usercontent.formsort.com https://api.flow.formsort.com https://consent.api.osano.com https://tattle.api.osano.com https://disclosure.api.osano.com https://cmp.osano.com https://*.px-cloud.net https://*.perimeterx.net https://*.pxchk.net https://*.px-cdn.net https://*.px-client.net https://www.recaptcha.net https://*.segment.com https://*.segment.io https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://tagmanager.google.com https://fonts.gstatic.com https://www.gstatic.com https://stats.g.doubleclick.net https://sentry.io https://www.grxstatic.com https://www.facebook.com https://connect.facebook.net https://di.rlcdn.com; report-uri https://o17108.ingest.sentry.io/api/5215720/security/?sentry_key=bfcc0d884fca4a1880e78f18cefd9c21 1
frame-ancestors 'self' ashford.gov.uk *.ashford.gov.uk abcoutside abcoutside.main.abc.local ; 1
default-src 'self' https://assets.onfido.com *.crazyegg.com https://cdn.onjuno.com https://cdn.plaid.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.plaid.com *.crazyegg.com https://cdn.onjuno.com https://www.gstatic.com/recaptcha/ https://widget.intercom.io https://wzrkt.com *.wzrkt.com *.cloudfront.net *.onfido.com *.sentry.io https://maps.googleapis.com https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js https://optimize.google.com *.googleoptimize.com *.verygoodvault.com https://connect.facebook.net *.woopra.com *.typeform.com https://platform.twitter.com/widgets.js https://apis.google.com https://cdn.jsdelivr.net https://www.google.com https://apis.google.com/js/platform.js https://cdn.amplitude.com/libs/amplitude-5.2.2-min.gz.js https://cdn.plaid.com/link/v2/stable/link-initialize.js *.segment.com https://code.jquery.com/jquery-3.5.1.min.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/687573008/ https://js.intercomcdn.com https://s3-us-west-2.amazonaws.com/s.cdpn.io/100903/webflow.js https://widget.intercom.io/widget/czz0xv26 https://www.google-analytics.com/analytics.js https://www.googleadservices.com/pagead/conversion_async.js https://www.youtube.com https://www.googletagmanager.com/gtm.js; object-src 'self' blob: https://cdn.onjuno.com https://nuo-public.s3.ap-south-1.amazonaws.com https://juno-public.s3-us-west-1.amazonaws.com/ https://nuo-cms.s3.ap-southeast-1.amazonaws.com; style-src 'self' 'unsafe-inline' https://cdn.onjuno.com https://assets.onfido.com https://optimize.google.com https://fonts.googleapis.com *.googleapis.com *.cloudfront.com; img-src 'self' data: blob: https://cdn.onjuno.com/ https://q.quora.com *.crazyegg.com https://s3-us-west-2.amazonaws.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.synapsepay.com https://lipis.github.io/flag-icon-css/ *.synapsefi.com https://www.googletagmanager.com https://www.facebook.com https://optimize.google.com https://images.unsplash.com https://blog.bankonjuno.com *.intercomcdn.com https://static.intercomassets.com https://uploads-ssl.webflow.com https://dev.onjuno.com https://onjuno.com https://nuo-cms.s3.ap-southeast-1.amazonaws.com https://juno-public.s3-us-west-1.amazonaws.com https://nuo-public.s3.ap-south-1.amazonaws.com https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.co.in https://www.google.com; media-src 'self' blob: https://cdn.onjuno.com/ https://juno-public.s3-us-west-1.amazonaws.com https://js.intercomcdn.com; frame-src 'self' data: blob: https://cdn.onjuno.com/ https://www.youtube.com https://optimize.google.com *.verygoodvault.com *.typeform.com https://onjuno.typeform.com https://intercom-sheets.com https://platform.twitter.com https://bid.g.doubleclick.net https://nuo-public.s3.ap-south-1.amazonaws.com https://juno-public.s3-us-west-1.amazonaws.com/ https://nuo-cms.s3.ap-southeast-1.amazonaws.com https://cdn.plaid.com https://dev.onjuno.com https://onjuno.com https://www.google.com https://accounts.google.com https://snazzymaps.com; font-src 'self' *.gstatic.com https://cdn.onjuno.com *.intercomcdn.com; frame-ancestors 'self' *.typeform.com; connect-src 'self' blob: wss://sync.onfido.com wss://ws-us3.pusher.com *.crazyegg.com *.plaid.com *.lottiefiles.com https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js *.onfido.com *.woopra.com *.sentry.io *.algolia.net *.intercomcdn.com wss://ws-ap2.pusher.com https://s3.ap-south-1.amazonaws.com https://cdn.amplitude.com https://nuo-public.s3.ap-south-1.amazonaws.com https://nuo-cms.s3.ap-southeast-1.amazonaws.com https://juno-public.s3-us-west-1.amazonaws.com *.pusher.com *.pusherapp.com https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://api-iam.intercom.io https://api.amplitude.com https://api.segment.io https://cms.nuofox.com *.onjuno.com wss://nexus-websocket-a.intercom.io; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://az416426.vo.msecnd.net/scripts/a/ai.0.js http://projects.elitechnology.com/jsprojects/eneco-client/ https://projects.elitechnology.com/jsprojects/eneco/api/ https://eneco-eneco.digitalcx.com https://cdn.conversationalsdevelopment.nl https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://w.usabilla.com https://api.usabilla.com https://d6tizftlrpuof.cloudfront.net https://cdn.nanigans.com https://api.nanigans.com https://d3or5d0jdz94or.cloudfront.net/MExDH9iB5LdtMi44LjE.js https://cdn.greenhousegroup.com/eneco-nl/slb/conversion.js https://connect.facebook.net/signals/plugins/inferredEvents.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/435765806865268 https://www.linkedin.com/px/li_sync https://px.ads.linkedin.com/collect/ https://snap.licdn.com/li.lms-analytics/ https://d2qmp7jjpd79k7.cloudfront.net/smartpixel-1.js https://d2qmp7jjpd79k7.cloudfront.net/smartpixel/3-3227/product.js https://d2qmp7jjpd79k7.cloudfront.net/pixel/3/1572447345163/script.js https://static.ads-twitter.com/uwt.js https://analytics.twitter.com/i/adsct https://bat.bing.com/bat.js https://acdn.adnxs.com/dmp/up/pixie.js https://s.pinimg.com https://ct.pinterest.com https://secure.adnxs.com https://cdnjs.cloudflare.com/ajax/libs/bodymovin/5.4.4/lottie.min.js https://tdn.r42tag.com https://admin.relay42.com https://t.svtrd.com/t-1295/ https://static.hotjar.com/c/hotjar-215132.js https://script.hotjar.com https://eneco.bbvms.com https://cdn.bluebillywig.com/apps/player/ https://mijn.enecozakelijk.nl/cookie/xdomain/xdomain_cookie.min.js https://www.youtube.com/iframe_api https://img03.en25.com/i/elqCfg.min.js https://static2.creative-serving.com/pixel_loader.js https://api.salesfeed.com https://script.adcalls.nl/e907d5da-14dc-4967-b180-03e37a3022be.js https://ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js https://ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/jquery-ui.min.js https://cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.js;object-src 'self';style-src 'self' 'unsafe-inline' fonts.googleapis.com https://d6tizftlrpuof.cloudfront.net https://tagmanager.google.com/debug/css.css https://api.tiles.mapbox.com/mapbox-gl-js/v0.50.0/mapbox-gl.css https://cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.css https://ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/themes/smoothness/jquery-ui.css;img-src 'self' * data: blob: secure.adnxs.com collect.kosi-analytics.io/i https://t.co/i/adsct googleads.g.doubleclick.net www.googleadservices.com https://script.hotjar.com;media-src 'self' data: https://eneco.bbvms.com https://cdn.bluebillywig.com/apps/player/ https://d3ehotfhpgor0k.cloudfront.net;frame-src 'self' https://d6tizftlrpuof.cloudfront.net https://www.youtube-nocookie.com https://t.svtrd.com https://ib.adnxs.com https://s3.eu-central-1.amazonaws.com/snowplow-appnexus-mapper/id.html https://6361111.fls.doubleclick.net https://9108254.fls.doubleclick.net https://bid.g.doubleclick.net https://player.vimeo.com https://eneco.bbvms.com https://mijn.enecozakelijk.nl https://vars.hotjar.com;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com https://d6tizftlrpuof.cloudfront.net https://d3ehotfhpgor0k.cloudfront.net https://script.hotjar.com https://cdn.bluebillywig.com/fonts/;connect-src 'self' *.eneco.nl https://www.google-analytics.com *.services.visualstudio.com https://api.usabilla.com https://eneco.bbvms.com https://collect.kosi-analytics.io https://d.lemonpi.io/scrapes https://ct.pinterest.com https://eneco-eneco.digitalcx.com https://conversationals-connector-live-assist-production.azurewebsites.net wss://api.seamly.ai https://api.seamly.ai https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com/events/v2 https://vc.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://api.adcalls.nl https://api.enecogroup.com https://api-digital.enecogroup.com;child-src 'self' blob: https://vars.hotjar.com;frame-ancestors 'self' https://inloggen.eneco.nl 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.kemco.or.kr *.energy.or.kr *.google-analytics.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.eskinstore.com https://eskinstore.com https://www.eskincarestore.com https://eskincarestore.com https://www.google.com https://www.gstatic.com https://fonts.googleapis.com https://use.fontawesome.com https://cdn.ywxi.net https://secure.comodo.com https://sealserver.trustwave.com https://bat.bing.com https://s3-us-west-2.amazonaws.co https://js.klevu.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://connect.facebook.net https://ajax.googleapis.com https://cdn.jsdelivr.net https://assets.zendesk.com https://static.zdassets.com https://apis.google.com https://www.paypal.com https://www.instagram.com 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://cdn.mouseflow.com https://trackcmp.net https://*.adform.net https://connect.facebook.net https://pixel.mathtag.com https://googleads.g.doubleclick.net https://hermes.allo-media.net https://backoffice.xella.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com https://www.google.de https://*.google-analytics.com https://*.hotjar.com https://*.getsitecontrol.com https://*.usercentrics.eu; 		frame-src https://multipor.b10calc.dk https://maps.google.de https://maps.google.com https://www.youtube-nocookie.com https://*.hotjar.com https://marketing.xella.cz https://backoffice.xella.com https://www.google.com http://www.youtube.com https://www.youtube.com https://www.facebook.com https://www.bimobject.com https://bimobject.com https://app.usercentrics.eu; 		img-src data: blob: 'self' https://aaa.bisnode.si https://*.getsitecontrol.com https://cdn.midas-network.com https://sistem.ytong.rs https://pixel.mathtag.com https://www.facebook.com www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.de https://*.usercentrics.eu https://*.google-analytics.com; 		object-src 'none' 1
default-src 'self' https://www.googletagmanager.com https://www.google.com https://fonts.googleapis.com https://*.google-analytics.com https://*.doubleclick.net https://mc.yandex.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.gstatic.com https://*.google-analytics.com https://www.google.com https://mc.yandex.ru https://connect.facebook.net  https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com; connect-src 'self' https://sentry.fv.ee wss://websockets.fv.ee:8902 wss://apps.fv.ee:7443 wss://novnc.fv.ee:* wss://ws.selectel.ru:* https://mc.yandex.ru https://stats.g.doubleclick.net https://www.google-analytics.com; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com; img-src 'self' data: https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://www.google.com https://www.google.ru https://www.googletagmanager.com https://www.facebook.com https://mc.yandex.ru 1
report-uri //csp.merlion.ru:8080/report/428307387702970221/; connect-src https://hd.ddix.ru rutube.ru *.google-analytics.com 'self' *.yandex.ru https://*.yandex.ru video.f1cd.ru ; child-src 'self' ; font-src static.lc-group.ru 'self' oklick.ru fonts.gstatic.com ; form-action https://hd.ddix.ru 'self' ; frame-ancestors webvisor.com *.webvisor.com 'self' ; frame-src *.oklick.ru https://*.googletagmanager.com 'self' *.yandex.ru yastatic.net video.f1cd.ru https://www.youtube.com ; img-src data: *.merlion.ru static.lc-group.ru *.oklick.ru https://*.yandex.net 'self' ferralabs.ru www.f1cd.ru *.yandex.net support.ddix.ru *.merlion.com merlion.com *.yandex.ru https://*.yandex.ru *.google-analytics.com yastatic.net ; media-src *.oklick.ru static.lc-group.ru 'self' ; object-src static.lc-group.ru *.oklick.ru 'self' *.rutube.ru *.f1cd.ru ; script-src https://hd.ddix.ru static.lc-group.ru *.oklick.ru https://*.googletagmanager.com https://yastatic.net https://*.yandex.net 'unsafe-eval' https://*.google-analytics.com *.google.com 'self' ajax.googleapis.com *.yandex.ru https://*.yandex.ru *.google-analytics.com yastatic.net support.ddix.ru www.google-analytics.com ; style-src static.lc-group.ru *.oklick.ru 'unsafe-inline' 'self' fonts.googleapis.com support.ddix.ru ; default-src 'none' ; strict-mixed-content-checking; reflected-xss filter; referrer origin-when-cross-origin; 1
default-src 'self'; script-src 'self' 'unsafe-inline' www.googletagmanager.com jira.millenniumweb.com *.consumercare.net www.google-analytics.com assets.juicer.io maps.googleapis.com www.google.com www.gstatic.com *.formstack.com *.pricespider.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com assets.juicer.io *.formstack.com cdn.pricespider.com hello.myfonts.net; img-src 'self' data: www.google-analytics.com stats.g.doubleclick.net www.google.com *.cdninstagram.com *.juicer.io maps.gstatic.com maps.googleapis.com cscoreproweustor.blob.core.windows.net *.formstack.com cdn.pricespider.com at.amgdgt.com legal.bbulibrary.com; frame-src 'self' www.youtube.com www.google.com; font-src 'self' maxcdn.bootstrapcdn.com static.juicer.io fonts.gstatic.com data: *.formstack.com; connect-src 'self' www.juicer.io stats.g.doubleclick.net www.google-analytics.com *.channelsight.com; report-uri /report-csp-violation; upgrade-insecure-requests, default-src 'self' 'self' data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *; img-src 'self' blob: data: * 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' js.stripe.com wchat.freshchat.com widget.freshworks.com 1
frame-ancestors https://www.facebook.com/ 1
upgrade-insecure-requests; default-src 'self' 'unsafe-inline'; child-src 'self' *.vimeo.com *.youtube.com; connect-src 'self' sentry.utdev.com https://*.lift.acquia.com https://*.hubspot.com https://*.hsforms.com https://*.hotjar.com https://*.hotjar.io https://www.google-analytics.com https://links.services.disqus.com https://stats.g.doubleclick.net https://sentry.utdev.com/api/11/store/; font-src 'self' data: https:; frame-src 'self' *.hotjar.com *.vimeo.com *.addtoany.com https://bid.g.doubleclick.net https://disqus.com https://www.youtube.com https://*.hsforms.com/; img-src 'self' data: https://ssl.gstatic.com https://www.gstatic.com www.googletagmanager.com https://www.google.com https://www.google-analytics.com https://*.hubspot.com https://*.hsforms.com https://*.disqus.com https://*.disquscdn.com https://www.unleashed-technologies.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://cdn.viglink.com; media-src 'self' https:; object-src 'self'; prefetch-src 'self' https://disqus.com https://c.disquscdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.lift.acquia.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.hotjar.com https://*.hs-scripts.com https://js.hscollectedforms.net https://js.hs-banner.com https://js.hsleadflows.net https://js.hs-analytics.net https://unleashedtech.disqus.com data: https://*.disquscdn.com https://*.hsforms.net https://*.hsforms.com https://*.google.com https://www.google.com/pagead/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://ajax.cloudflare.com https://static.cloudflareinsights.com https://disqus.com https://c.disquscdn.com ajax.cloudflare.com https://js.hs-scripts.com https://static.addtoany.com mdbootstrap.com; style-src 'self' 'unsafe-inline' https://*.typekit.net https://tagmanager.google.com https://*.disquscdn.com fonts.googleapis.com mdbootstrap.com use.fontawesome.com; report-uri https://sentry.utdev.com/api/11/security/?sentry_key=b1aeeca8104c4a64b2b3bc7247813238&sentry_environment=prod 1
default-src 'self'; style-src 'self' *.adyen.com/ *.chargebee.com/ *.static.criteo.net/ *.criteo.com/ *.mopinion.com/ *.gstatic.com/ *.live2support.com/ *.lpsnmedia.net/ *.gstatic.com/ *.commander1.com/ *.bootstrapcdn.com/ *.tagcommander.com/ https://www.google.nl/ https://dpm.demdex.net/ https://assets.adobedtm.com/ *.zencdn.net/ *.sharethis.com/ *.googleapis.com/ *.pinimg.com/ *.google.com/ 'unsafe-inline'; script-src 'self' *.adyen.com/ *.chargebee.com/ https://static.criteo.net/js/ld/ld.js *.criteo.com/ *.ytimg.com/ https://live2support.com/ *.mopinion.com/ *.googletagmanager.com/ https://www.google.nl/ https://dpm.demdex.net/ https://assets.adobedtm.com/ https://s.pinimg.com/ *.trustcommander.net/ *.tagcommander.com/ https://services.postcodeanywhere.co.uk/ *.commandersact.com/ *.facebook.net/ *.google.ie/ *.lpsnmedia.net/ *.pinimg.com/ *.danone-dtc.net/ *.hotjar.com/ *.outbrain.com/ *.google.com/ *.googleadservices.com/ *.google-analytics.com/ *.sharethis.com *.addthis.com/ *.live2support.com/ *.doubleclick.net/ *.googleapis.com/ *.google.com/ *.theadex.com *.commander1.com/ *.liveperson.net/ *.doubleclick.net/ *.gstatic.com/ *.aptaclub.de/ *.milupa.de/ *.digital4danone.com/ *.aptaclub.at/ *.milupa.at/ *.aptaclub.ch/ *.milupa.ch/ *.aptaclub.com.vn/ *.addthisedge.com/ 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *.adyen.com/ *.ytimg.com/ *.live2support.com/ https://ca-live.adyen.com/ https://www.google.nl/ https://dpm.demdex.net/ https://assets.adobedtm.com/ https://services.postcodeanywhere.co.uk/ http://danonegroup-stage.neolane.net/ *.trustcommander.net/ https://ca-live.adyen.com/ *.cx.atdmt.com/ *.danone-dtc.net/ https://ct.pinterest.com/ *.outbrain.com/ *.danone.com/ *.atdmt.com/ *.pinterest.com/ *.commander1.com/ *.tagcommander.com/ *.lpsnmedia.net/ *.adnxs.com/ *.adition.com/ *.doubleclick.net/ *.google.ie/ *.google.co.in/ *.theadex.com/ *.google-analytics.com/ *.google.com.ph/ *.google.com/ *.sharethis.com/ *.gstatic.com/ *.googleapis.com/ *.w3.org/ *.mookie1.com/ *.facebook.com/ *.googletagmanager.com/; frame-src 'self' *.adyen.com/ *.chargebee.com/ *.static.criteo.net/ *.criteo.com/ *.tohklom.com/  *.tagcommander.com/ https://aax-eu.amazon-adsystem.com/ *.amazon-adsystem.com/ *.liveperson.net/ *.vimeo.com/ *.live2support.com/ *.google.com/ *.lpsnmedia.net/ *.hotjar.com/ *.commander1.com/ *.proprofs.com/ https://www.google.nl/ https://dpm.demdex.net/ https://assets.adobedtm.com/ *.facebook.com/ *.doubleclick.net/ *.theadex.com/ *.sharethis.com/ *.addthis.com *.youtube.com *.adsrvr.org/ *.spotify.com/ *.cloudfront.net/ *.trustcommander.net/ *.flockler.com/; connect-src 'self' *.sentry.io/ *.adyen.com/ *.live2support.com/ https://sentry.labdigital.nl *.addthis.com/ *.mopinion.com/ https://www.google.nl/ https://dpm.demdex.net/ https://assets.adobedtm.com/ *.danone-dtc.net/ *.ct.pinterest.com/ *.privacy.trustcommander.net/ https://services.postcodeanywhere.co.uk/ *.commercetools.com/ *.google-analytics.com *.facebook.com/ *.omtrdc.net/ *.hotjar.com/ *.pinterest.com/ *.trustcommander.net/ *.commander1.com/ *.sharethis.com/ *.doubleclick.net/; font-src 'self' *.adyen.com/ *.gstatic.mopinion.com/ https://gstatic.mopinion.com/ *.gstatic.com/ *.live2support.com/ *.danone-dtc.net/ https://vjs.zencdn.net/; media-src 'self' *.lpsnmedia.net/ 1
default-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://firebase.googleapis.com https://firebaseinstallations.googleapis.com https://www.googletagmanager.com; img-src * 'self' data:; frame-src blob: data: https://www.youtube.com/; connect-src 'self' data: https://firebase.googleapis.com https://firebaseinstallations.googleapis.com https://www.google-analytics.com 1
upgrade-insecure-requests; default-src 'self' 'unsafe-inline' *.dhl24.com.pl *.dhl.pl; img-src 'self' 'unsafe-inline' www.google.at www.google.co.uk www.google.cz www.google.de www.google.fi www.google.it www.google.nl www.google.se optimize.google.com *.dhl24.com.pl *.dhl.pl www.google.com www.google.pl www.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.facebook.com *.fbcdn.net *.openstreetmap.org dhlpoland.pl vars.hotjar.com static.hotjar.com *.tradedoubler.com googletagmanager.com; script-src 'self' 'unsafe-inline' api.retargeted.co accounts.google.com www.google.at www.google.co.uk www.google.cz www.google.de www.google.fi www.google.it www.google.nl www.google.se optimize.google.com *.dhl24.com.pl *.dhl.pl www.google.com www.google.pl www.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net connect.facebook.net swrap.tradedoubler.com *.clickonometrics.pl *.retargeted.co cdn.cookielaw.org cdnjs.cloudflare.com analytics.sleeknote.com fonts.googleapis.com in.hotjar.com script.hotjar.com sleeknotecustomerscripts.sleeknote.com static.hotjar.com tbl.tradedoubler.com tbs.tradedoubler.com tpc.googlesyndication.com vars.hotjar.com vc.hotjar.io www.facebook.com tagmanager.google.com cdn.cookielaw.org cookielaw.org dhlpoland.pl vars.hotjar.com static.hotjar.com *.tradedoubler.com googletagmanager.com; style-src 'self' 'unsafe-inline' www.google.at www.google.co.uk www.google.cz www.google.de www.google.fi www.google.it www.google.nl www.google.se optimize.google.com *.bootstrapcdn.com fonts.googleapis.com; font-src 'self' 'unsafe-inline' www.google.at www.google.co.uk www.google.cz www.google.de www.google.fi www.google.it www.google.nl www.google.se *.bootstrapcdn.com fonts.gstatic.com; frame-src 'self' 'unsafe-inline' www.google.at www.google.co.uk www.google.cz www.google.de www.google.fi www.google.it www.google.nl www.google.se optimize.google.com www.google.com *.dhl.pl tbs.tradedoubler.com; connect-src 'self' cdn.cookielaw.org; 1
frame-ancestors 'self' http://ausbildungsplatzsuche.fv-eit-bw.de/ https://www.elektro-plus.com/ https://www.elektromobilitaet.nrw/ https://www.e-go-mobile.com/ https://www.deutschland-tankt-strom.de/ 1
default-src blob: 'self' www.facebook.com graph.facebook.com www.youtube.com performance.typekit.net betawpdnl.perplex.eu www.google-analytics.com 127.0.0.1 http://127.0.0.1 https://perplex.report-uri.com; child-src 'self' www.youtube.com www.google.com cse.google.com player.vimeo.com; frame-src blob: 'self' *.facebook.com channel.me www.marinetraffic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net s.ytimg.com www.google-analytics.com cse.google.com cse.google.nl www.google.nl www.google.com www.youtube.com www.gstatic.com use.typekit.net www.googleapis.com www.perplex.nl channel.me www.marinetraffic.com; style-src fonts.googleapis.com 'self' 'unsafe-inline' p.typekit.net use.typekit.net www.google.com cse.google.com; img-src www.wpd.nl www.gravatar.com 'self' p.typekit.net www.facebook.com data: services.perplex.eu www.google-analytics.com www.google.com www.googleapis.com clients1.google.com encrypted-tbn0.gstatic.com encrypted-tbn1.gstatic.com encrypted-tbn2.gstatic.com encrypted-tbn3.gstatic.com www.perplex.nl; font-src 'self' use.typekit.net data: fonts.gstatic.com; form-action 'self' ogone.test.v-psp.com ideal.bunq.com ideal.vanlanschot.com ideal.triodos.nl diensten.snsbank.nl diensten.regiobank.nl secure.ogone.com diensten.asnbank.nl bankieren.ideal.ing.nl ideal.knab.nl ideal.ing.nl betalen.rabobank.nl www.abnamro.nl; report-uri https://perplex.report-uri.io/r/default/csp/enforce; 1
block-all-mixed-content; frame-ancestors 'self' https://*.haravan.com; upgrade-insecure-requests 1
default-src 'self'   http: https: data: blob: 'unsafe-inline' 'unsafe-eval' widget.apibcknd.com lcab.talk-me.ru https://www.youtube.com/ wss://widget.apibcknd.com https://widget.apibcknd.com https://block.cyberwec.com https://pastebin.com 1
frame-ancestors 'self' https://grandwesternsteaks.com 1
frame-ancestors 'self' https://pprod.direct.hiscox.de https://direct.hiscox.de https://www.fuer-gruender.de https://www.gruenderszene.de https://makler.hiscox.de; 1
frame-ancestors 'self' https://*.aainsurance.co.nz; 1
default-src 'self' www.google.com; img-src 'self' data: www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com www.ibh.de; style-src 'self' 'unsafe-inline' 1
frame-ancestors 'self' http://www.mobility-room.com:3000 http://mobility-room.com:3000; 1
frame-ancestors https://*.aok.de https://*.dev.queo-group.com https://*.dev.queo.org localhost https://*.ddev.site; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.ytimg.com *.gstatic.com *.google-analytics.com  *.googletagmanager.com  *.googleapis.com *.fontawesome.com *.cloudflare.com *.typekit.net *.myfonts.net 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: filesystem:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data:; style-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data:; img-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data:; connect-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data:; font-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data:; media-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data:; form-action http: https: data:; object-src http: https: data:; frame-src http: https: data: 1
block-all-mixed-content; frame-ancestors *.toolsbr.com.br 1
default-src 'self';connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://*.smartlook.com https://*.smartlook.cloud;font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'self' https://www.google.com https://*.facebook.com https://*.facebook.net https://*.fbcdn.net https://platform.twitter.com https://www.youtube.com https://m.youtube.com;media-src 'self';img-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.fbcdn.net https://syndication.twitter.com https://seal.godaddy.com https://i.ytimg.com https://img.youtube.com;script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://*.facebook.com https://*.facebook.net https://*.fbcdn.net https://platform.twitter.com https://seal.godaddy.com https://*.smartlook.com https://*.smartlook.cloud 'unsafe-eval';style-src 'self' 'unsafe-inline';object-src 'none';form-action 'self' https://weldersupply.us15.list-manage.com;frame-ancestors 'self';worker-src blob:;manifest-src 'self';upgrade-insecure-requests ; 1
default-src 'self';block-all-mixed-content ; base-uri 'self'; object-src 'none'; script-src  'nonce-2ad23760e19e4165b02015ed538840d8' 'self' 'unsafe-eval' 'unsafe-inline' https://www.gstatic.com https://www.google.com https://st.getsitecontrol.com/ https://widgets.getsitecontrol.com https://c.evidon.com https://tagmanager.google.com/ https://www.googletagmanager.com/ https://polyfill.io https://optimize.google.com https://www.google-analytics.com https://az416426.vo.msecnd.net; img-src 'self' data: https://ssl.gstatic.com/ https://syndication.twitter.com https://optimize.google.com https://platform.twitter.com https://pbs.twimg.com https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com https://img.youtube.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com/ https://fonts.googleapis.com/ https://optimize.google.com https://platform.twitter.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src https://www.google.com/ https://platform.twitter.com https://www.youtube.com https://optimize.google.com https://w.soundcloud.com https://player.vimeo.com https://www.gstatic.com https://cdn.optimizely.com; connect-src 'self' https://dc.services.visualstudio.com https://az416426.vo.msecnd.net https://extreme-ip-lookup.com https://stats.g.doubleclick.net; 1
default-src 'self'; connect-src 'self' *.googleusercontent.com *.intenta.io; font-src 'self'; frame-src 'self' *.vimeo.com *.google.com https://*.gstatic.com https://*.google.com; img-src 'self' https://s3.amazonaws.com *.google.com *.gstatic.com https://*.gstatic.com https://*.google.com *.nr-data.net *.google-analytics.com *.doubleclick.net data:; media-src 'self'; object-src 'self' *.google.com https://*.gstatic.com https://*.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.gstatic.com https://*.gstatic.com https://*.google.com *.newrelic.com *.google-analytics.com *.intenta.io *.nr-data.net; style-src 'self' 'unsafe-inline'; 1
object-src *; frame-src 'self' hotjar.com *.hotjar.com *.googletagmanager.com *.google.com d18j7480fsj4ot.cloudfront.net wayspa.us1.list-manage.com *.youtube.com *.elementor.com *.facebook.com facebook.com *.cashstar.com/* wayspa-pbg.cashstar.com *.instagram.com *.pinterest.com/* assets.pinterest.com *.doubleclick.net/* app.malcare.com; font-src 'self' * data:; connect-src *; 1
default-src * data: blob: 'self';script-src *.konzerthaus-dortmund.de *.typekit.net *.facebook.net *.gstatic.com *.enuerto.net *.google-analytics.com *.google.com *.jquery.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;form-action 'self' https://konzerthaus-dortmund.com https://*.konzerthaus-dortmund.com https://*.inxmail.com https://www.facebook.com/tr/ https://*.ipg-online.com https://www.paypal.com/; connect-src *.konzerthaus-dortmund.com *.konzerthaus-dortmund.de *.facebook.net *.google-analytics.com *.doubleclick.net 1
default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' www.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.doubleclick.net *.youtube.com https://*.youtube.com *.ytimg.com https://*.ytimg.com https://*.googleapis.com https://s3-ap-northeast-1.amazonaws.com https://chatbot.com.hk *.pusher.com *.pusherapp.com https://www.bcthk.com https://sim-www.bcthk.com https://3pn36nrcw1.execute-api.ap-northeast-1.amazonaws.com https://7ab07kkkhb.execute-api.us-west-2.amazonaws.com https://us-central1-facebook-bot-backend-dev.cloudfunctions.net https://img.youtube.com; style-src 'unsafe-inline' 'self' https://*.googleapis.com *.googleapis.com https://s3-ap-northeast-1.amazonaws.com https://chatbot.com.hk *.pusher.com *.pusherapp.com https://www.bcthk.com https://sim-www.bcthk.com https://3pn36nrcw1.execute-api.ap-northeast-1.amazonaws.com https://7ab07kkkhb.execute-api.us-west-2.amazonaws.com https://us-central1-facebook-bot-backend-dev.cloudfunctions.net https://img.youtube.com; font-src 'self' https://*.gstatic.com *.gstatic.com; img-src 'self' data: www.google-analytics.com *.google.com *.googleapis.com https://*.googleapis.com https://*.gstatic.com *.gstatic.com *.doubleclick.net https://s3-ap-northeast-1.amazonaws.com https://chatbot.com.hk *.pusher.com *.pusherapp.com https://www.bcthk.com https://sim-www.bcthk.com https://3pn36nrcw1.execute-api.ap-northeast-1.amazonaws.com https://7ab07kkkhb.execute-api.us-west-2.amazonaws.com https://us-central1-facebook-bot-backend-dev.cloudfunctions.net https://img.youtube.com; frame-src 'self' *.youtube.com https://*.youtube.com *.google.com https://*.google.com; connect-src 'self' www.google-analytics.com  https://s3-ap-northeast-1.amazonaws.com https://chatbot.com.hk *.pusher.com *.pusherapp.com wss://ws-ap1.pusher.com https://www.bcthk.com https://sim-www.bcthk.com https://3pn36nrcw1.execute-api.ap-northeast-1.amazonaws.com https://7ab07kkkhb.execute-api.us-west-2.amazonaws.com https://us-central1-facebook-bot-backend-dev.cloudfunctions.net https://img.youtube.com 1
default-src 'none';frame-src 'self' https://transfer.jungheinrich.com https://charts3.equitystory.com https://qas4.equitystory.com https://www.facebook.com https://www.googletagmanager.com https://tagmanager.google.com https://www.youtube.com https://www.youtube-nocookie.com https://recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ *.zscloud.net https://player.vimeo.com https://jungheinrich.jobbase.io *.jungheinrich.de https://consent.cookiebot.com https://consentcdn.cookiebot.com;script-src 'self' https://transfer.jungheinrich.com 'unsafe-eval' 'unsafe-inline' cdnjs.cloudflare.com *.googleapis.com *.zscloud.net https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://www.youtube.com *.ytimg.com https://recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ *.gstatic.com *.gstatic.cn https://jungheinrich.jobbase.io https://consent.cookiebot.com https://consentcdn.cookiebot.com https://px.ads.linkedin.com https://sjs.bizographics.com https://snap.licdn.com https://connect.facebook.net https://media-live2.prod.scw.jungheinrichcloud.com;connect-src 'self' https://transfer.jungheinrich.com https://stats.g.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com *.jungheinrich.de *.jungheinrich.com https://service.excentos.com https://media-live2.prod.scw.jungheinrichcloud.com;img-src 'self' https://transfer.jungheinrich.com https://www.linkedin.com *.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com *.googleapis.com *.zscloud.net https://maps.google.com https://stats.g.doubleclick.net *.ytimg.com https://www.google.com/ads/ https://www.google.de/ads/ https://link.cockpit.eqs.com/cgi-bin/fncls.ssp data: https://px.ads.linkedin.com https://p.adsymptotic.com https://media-live2.prod.scw.jungheinrichcloud.com;child-src 'self';media-src 'self';style-src 'self' https://transfer.jungheinrich.com https://www.googletagmanager.com 'unsafe-inline' https://tagmanager.google.com *.googleapis.com https://media-live2.prod.scw.jungheinrichcloud.com;font-src 'self' https://transfer.jungheinrich.com https://www.googletagmanager.com https://tagmanager.google.com *.gstatic.com https://media-live2.prod.scw.jungheinrichcloud.com 1
default-src 'self' index.html; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.onesignal.com *.googleapis.com *.cloudflare.com googletagmanager.com *.google-analytics.com s.reembed.com cdn.jsdelivr.net data:; style-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.gstatic.com cdn.onesignal.com *.googletagmanager.com *.google-analytics.com s.reembed.com fonts.googleapis.com cdn.jsdelivr.net; img-src s.w.org ps.w.org 'self' data: *.gstatic.com *.gravatar.com *.onesignal.com *.googletagmanager.com *.google-analytics.com *.global.ssl.fastly.net s.reembed.com fonts.googleapis.com cdn.jsdelivr.net 'unsafe-inline'; font-src 'self' data: *.onesignal.com *.gravatar.com s.reembed.com fonts.googleapis.com cdn.jsdelivr.net fonts.gstatic.com 'unsafe-inline'; connect-src 'self' https: *.yoast.com; frame-src 'self' *.youtube.com *.test.wildsea.nl; block-all-mixed-content; base-uri 'self'; frame-ancestors 'self' wildsea.nl www.hartstichting.nl www.omroepgelderland.nl,default-src 'self' index.html; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.onesignal.com *.googleapis.com *.cloudflare.com googletagmanager.com *.google-analytics.com s.reembed.com cdn.jsdelivr.net data:; style-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.gstatic.com cdn.onesignal.com *.googletagmanager.com *.google-analytics.com s.reembed.com fonts.googleapis.com cdn.jsdelivr.net; img-src s.w.org ps.w.org 'self' data: *.gstatic.com *.gravatar.com *.onesignal.com *.googletagmanager.com *.google-analytics.com *.global.ssl.fastly.net s.reembed.com fonts.googleapis.com cdn.jsdelivr.net 'unsafe-inline'; font-src 'self' data: *.onesignal.com *.gravatar.com s.reembed.com fonts.googleapis.com cdn.jsdelivr.net fonts.gstatic.com 'unsafe-inline'; connect-src 'self' https: *.yoast.com; frame-src 'self' *.youtube.com *.test.wildsea.nl; block-all-mixed-content; base-uri 'self'; frame-ancestors 'self' wildsea.nl www.hartstichting.nl www.omroepgelderland.nl 1
frame-src https://www.googletagmanager.com http://app.nbrm.mk/ https://app.nbrm.mk/ https://platform.twitter.com/ https://www.youtube.com/ https://e-nabavki.gov.mk/ https://www.google.com/ 1
default-src 'self' https://www.google.com https://www.youtube.com https://www.facebook.com https://fonts.google.com https://fonts.googleapis.com https://google-analytics.com  https://connect.facebook.net http://code.ionicframework.com https://cdn.fontawesome.com https://*.googlesyndication.com https://*.doubleclick.net https://www.facebook.com https://www.googletagservices.com https://gateway.zscloud.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://tagmanager.google.com https://code.ionicframework.com https://*.cloudfront.net; img-src 'self' data: gap: *; connect-src 'self' https://*.getgo.com.ph https://securepubads.g.doubleclick.net https://*.googlesyndication.com https://csi.gstatic.com https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagservices.com https://graph.facebook.com https://ekr.zdassets.com https://*.zendesk.com https://cas.avalon.perfdrive.com; font-src 'self' https://fonts.gstatic.com https://code.ionicframework.com; object-src 'none'; media-src 'self' *; form-action 'self' https://www.facebook.com; frame-ancestors 'self' 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://masto.donte.com.br; img-src 'self' https: data: blob: https://masto.donte.com.br; style-src 'self' https://masto.donte.com.br 'nonce-u8W+krk42950bAXs6ZKMNg=='; media-src 'self' https: data: https://masto.donte.com.br; frame-src 'self' https:; manifest-src 'self' https://masto.donte.com.br; connect-src 'self' data: blob: https://masto.donte.com.br https://images.masto.donte.com.br wss://masto.donte.com.br; script-src 'self' https://masto.donte.com.br; child-src 'self' blob: https://masto.donte.com.br; worker-src 'self' blob: https://masto.donte.com.br 1
frame-ancestors 'self' https://secure.simplepart.com https://secure.cml.oeconnection.com https://portal.oeconnection.com; 1
default-src 'self' wss://test-websocket.yliopistonapteekki.fi wss://websocket.yliopistonapteekki.fi *.adform.net *.cdninstagram.com *.checkout.fi *.custobar.com *.facebook.com *.facebook.net *.giosgusercontent.com *.giosg.com *.google.com *.google.fi *.google-analytics.com *.googleapis.com *.igmhb.com *.instagram.com *.nosto.com *.stats.g.doubleclick.net *.sttinfo.fi *.talentadore.com *.videoly.co *.youtube-nocookie.com *.youtube.com *.ytimg.com *.nr-data.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.adform.net *.akamaihd.net *.cdninstagram.com *.cloudflare.com *.cloudflareinsights.com *.custobar.com *.facebook.com *.facebook.net *.giosg.com *.giosgusercontent.com *.google.com *.google.fi *.google-analytics.com *.googleapis.com *.googletagmanager.com *.howsmyssl.com *.instagram.com *.jsfuel.com *.metrext.com *.newrelic.com *.nosto.com *.nr-data.net *.s3.amazonaws.com *.sttinfo.fi *.urlvalidation.com *.videoly.co *.yandex.ru *.youtube-nocookie.com *.youtube.com *.ytimg.com *.nr-data.net; img-src 'self' data: blob: filesystem: *.akamaihd.net *.cdninstagram.com *.checkout.fi *.facebook.com *.facebook.net *.g.doubleclick.net *.google.com *.gstatic.com *.google.fi *.google-analytics.com *.googleapis.com *.hubspot.net *.instagram.com *.metrext.com *.nosto.com *.s3.amazonaws.com s3.eu-central-1.amazonaws.com *.videoly.co *.ytimg.com; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com *.giosgusercontent.com *.giosg.com *.google.com *.ionicframework.com *.nosto.com *.s3.amazonaws.com *.videoly.co; font-src 'self' data: *.bootstrapcdn.com *.gstatic.com *.ionicframework.com *.nosto.com *.s3.amazonaws.com *.videoly.co *.yliopistonapteekki.fi 1
default-src *; style-src 'self' https://* 'unsafe-inline'; script-src 'self' https://* 'unsafe-inline' 'unsafe-eval' 1
child-src *; 1
frame-ancestors bestdrive.marketing.adobe.com bestdrive.experiencecloud.adobe.com emea1-proxy.adobemc.com 'self' 1
object-src 'none'; script-src 'nonce-TIcknFfB35Cyzqd5F58ICQ==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' 'report-sample' https: http:; base-uri 'none'; report-uri https://bandcamp.com/api/cspreport/1/violation 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.syncfusion.com www.googletagmanager.com cdn.swaychat.com netdna.bootstrapcdn.com api.swayio.com *.firebaseio.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net a.opmnstr.com *.hotjar.com serve.albacross.com certify-js.alexametrics.com cdnjs.cloudflare.com *.cloudfront.net connect.facebook.net www.google.com www.gstatic.com *.tawk.to cdn.jsdelivr.net *.crisp.chat; img-src 'self' data: cdn.syncfusion.com cdn.swaychat.com www.gravatar.com *.ytimg.com tawk.link *.tawk.to www.google-analytics.com www.google.com www.google.co.in googleads.g.doubleclick.net certify.alexametrics.com *.albacross.com secure.gravatar.com ps.w.org www.facebook.com cdn.jsdelivr.net stats.g.doubleclick.net cdn.boldreports.com *.hotjar.com *.crisp.chat;style-src 'self' 'unsafe-inline' cdn.syncfusion.com *.tawk.to cdn.swaychat.com *.cloudfront.net fonts.googleapis.com cdn.jsdelivr.net *.crisp.chat; frame-src 'self'  *.stripe.com *.facebook.com   *.hotjar.com *.tawk.to *.opmnstr.com *.firebaseio.com *.syncfusion.com  bid.g.doubleclick.net *.addthis.com www.youtube.com www.youtube-nocookie.com *.google.com www.gstatic.com; frame-ancestors 'self'; media-src 'self'  *.syncfusion.com; object-src 'none';  base-uri 'none'; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com 'strict-dynamic' 'nonce-MjExNzQ4NDkzMCwyNDgzOTIzMzkw'; report-uri https://exceptions.hubspot.com/csp/report; 1
font-src https: data:; img-src https: data:; 1
frame-ancestors 'self' https://craft-romeroac.frb.io http://craft-romeroac.frb.io 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com;frame-ancestors 'self';style-src 'self' 'unsafe-inline' 'unsafe-eval';img-src * data:; 1
default-src 'self' https://fonts.gstatic.com https://chat.chatra.io www.google.com www.gstatic.com; object-src 'self' http://oli-dev.clnts.net; script-src 'self' https://code.jquery.com www.google.com www.gstatic.com https://cdn.datatables.net https://mc.yandex.ru https://www.google-analytics.com  http://blueimp.github.io 'unsafe-inline' 'unsafe-eval' http://cdnjs.cloudflare.com https://www.googletagmanager.com https://connect.facebook.net https://sjs.bizographics.com https://px.ads.linkedin.com https://vk.com https://call.chatra.io ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self' https://mc.yandex.ru https://olimob.net https://olimob.com http://olimob.com https://www.google.com; img-src 'self' blob: data: https://mc.yandex.ru https://www.google-analytics.com https://www.facebook.com https://vk.com https://www.google.com; 1
base-uri 'none'; object-src 'none'; script-src https://digitalstartup.co.uk/logs/ https://digitalstartup.co.uk/sidekiq/ https://digitalstartup.co.uk/mini-profiler-resources/ https://digitalstartup.co.uk/assets/ https://digitalstartup.co.uk/brotli_asset/ https://digitalstartup.co.uk/extra-locales/ https://digitalstartup.co.uk/highlight-js/ https://digitalstartup.co.uk/javascripts/ https://digitalstartup.co.uk/plugins/ https://digitalstartup.co.uk/theme-javascripts/ https://digitalstartup.co.uk/svg-sprite/ https://www.googletagmanager.com/gtm.js https://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net https://www.google.com; worker-src 'self' https://digitalstartup.co.uk/assets/ https://digitalstartup.co.uk/brotli_asset/ https://digitalstartup.co.uk/javascripts/ https://digitalstartup.co.uk/plugins/ 1
default-src 'self' https://syndication.twitter.com https://platform.twitter.com http://platform.twitter.com; style-src 'self' http: https: 'unsafe-inline'; script-src 'self' https://cdn.syndication.twimg.com http://cdn.syndication.twimg.com https://platform.twitter.com http://platform.twitter.com http: https: 'unsafe-inline' 'unsafe-eval';img-src * data:;connect-src 'self'; 1
default-src 'self'; img-src 'self' data: http: https: *.crisphealth.org *.wp.com *.wordpress.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: *.wp.com *.wordpress.com; style-src 'self' 'unsafe-inline' http: https: fonts.googleapis.com *.wp.com *.wordpress.com; font-src 'self' data: http: https: fonts.googleapis.com themes.googleusercontent.com *.wp.com *.wordpress.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: *.wp.com *.wordpress.com 1
frame-ancestors 'self' thy.com turkishairlines.com www.thy.com testwebapps01.thy.com devwebapps01.thy.com webapps01.thy.com; 1
frame-ancestors 'self' https://*.atrapalo.cl; report-uri /csp/report; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.calendly.com https://*.flodesk.com https://*.getsitecontrol.com https://*.sharethis.com https://*.vistag.com https://*.privy.com https://*.zopim.com https://*.zdassets.com *.mailchimp.com *.hotjar.com http://localhost:* https://*.powr.io https://*.tawk.to https://*.pinterest.com https://cdn.lightwidget.com js.hs-scripts.com https://unpkg.com https://www.google.com *.google.com *.google-analytics.com http://js.hs-analytics.net https://cdn.firebase.com https://cdnjs.cloudflare.com https://d2zah9y47r7bi2.cloudfront.net https://*.firebaseio.com https://*.vo.msecnd.net https://browser-update.org https://api.instagram.com *.fonts.net/ http://browser-update.org http://cdn.datatables.net http://cdn.heapanalytics.com *.googleapis.com/ https://www.googletagmanager.com https://use.typekit.net https://chat.milittisales.com https://crm.imaxcorp.com *.list-manage.com https://ct.capterra.com http://lightwidget.com https://cdn.jsdelivr.net *.googleadservices.com https://www.gstatic.com https://chimpstatic.com https://*.facebook.net/ *.segment.com/ https://api.segment.io https://s.yimg.com http://sp.analytics.yahoo.com *.driftt.com;object-src 'self' https://repzio-azurefunctions-pdfgenerator.azurewebsites.net;style-src 'self' 'unsafe-inline' https://popupmaker.com https://*.privy.com https://*.zdassets.com *.mailchimp.com data: https://*.jsdelivr.net https://*.tawk.to https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com *.fonts.net https://fonts.googleapis.com http://cdn.datatables.net https://cdn-images.mailchimp.com https://use.fontawesome.com https://translate.googleapis.com;img-src 'self' https://popupmaker.com https://google-analytics.com https://*.sharethis.com https://*.privy.com https://privymktg.com https://*.zdassets.com *.mailchimp.com data: https://*.jsdelivr.net https://*.tawk.to track.hubspot.com https://studiowebware.secure.force.com https://heapanalytics.com https://images.unsplash.com http://via.placeholder.com https://www.google.com *.google.com https://www.google-analytics.com *.google-analytics.com *.gstatic.com https://maps.googleapis.com *.googleapis.com https://usage.trackjs.com *.global.ssl.fastly.net *.repzio.com https://b2bbucket.s3.amazonaws.com https://s3.amazonaws.com https://scontent.cdninstagram.com http://cdn.datatables.net https://tradegecko-images.s3.amazonaws.com https://stats.g.doubleclick.net https://cdn.b2bdirect.io https://assets.bwconnect.com https://googleads.g.doubleclick.net https://www.facebook.com https://salesrepimages.s3.amazonaws.com *.fonts.net/ https://p.typekit.net;media-src 'self' https://*.privy.com https://*.zdassets.com https://b2bbucket.s3.amazonaws.com https://player.vimeo.com http://www.greenhillaudio.com;frame-src https://*.aftermkt.com https://popupmaker.com https://momento360.com https://calendly.com https://kuula.co https://*.activemerchandiser.com https://*.hotjar.com https://c.sharethis.mgr.consensu.org https://*.sharethis.com https://*.privy.com *.list-manage.com/ *.driftt.com https://*.tawk.to https://*.powr.io https://*.facebook.com https://cdn.lightwidget.com https://studiowebware.secure.force.com https://player.vimeo.com https://www.youtube.com https://*.firebaseio.com https://www.google.com https://showroom.gso360.com https://*.issuu.com https://*.repzio.com https://crm.imaxcorp.com http://lightwidget.com https://repzio-azurefunctions-pdfgenerator.azurewebsites.net;font-src 'self' https://b2bbucket.s3.amazonaws.com https://*.vistag.com https://*.privy.com https://*.zdassets.com https://*.tawk.to https://cdn.lightwidget.com https://cdn.joinhoney.com data: *.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://use.typekit.net https://use.fontawesome.com;connect-src 'self' https://popupmaker.com https://*.popupmaker.com https://*.flodesk.com https://*.getsitecontrol.com *.hotjar.com https://*.sharethis.com https://*.vistag.com https://*.privy.com ws://*.zopim.com https://*.zopim.com https://*.zendesk.com https://*.zdassets.com ws://*.tawk.to https://*.tawk.to https://*.powr.io ws://192.168.1.124:* ws://10.0.0.133:* ws://localhost:* http://localhost:* https://b2bbucket.s3.amazonaws.com https://repziowebapizipcodes.azurewebsites.net https://maps.googleapis.com wss://*.firebaseio.com https://capture.trackjs.com https://clconnect.coltonlane.com https://dc.services.visualstudio.com https://repziotest.azurewebsites.net https://crm.imaxcorp.com https://*.repzio.com https://api.segment.io https://www.google-analytics.com *.google-analytics.com *.azurewebsites.net https://repzio.azure-api.net https://performance.typekit.net https://tearsheetsgeneration.blob.core.windows.net;report-uri /WebResource.axd?cspReport=true 1
base-uri 'self'; connect-src 'self' https://api.ispotnature.org/ispotapi/ https://api.ispotnature.org/storage/ https://m.addthis.com https://maps.googleapis.com https://syndication.twitter.com/settings; font-src 'self' https://fonts.gstatic.com; child-src https://s7.addthis.com/static/ https://staticxx.facebook.com/connect/ https://www.facebook.com/connect/ https://syndication.twitter.com https://www.google.com/recaptcha/ https://cse.google.com https://platform.twitter.com/jot.html https://www.youtube.com/embed/; frame-src https://s7.addthis.com/static/ https://staticxx.facebook.com/connect/ https://www.facebook.com/connect/ https://syndication.twitter.com https://www.google.com/recaptcha/ https://cse.google.com https://platform.twitter.com/jot.html https://platform.twitter.com/ https://www.youtube.com/embed/; img-src https: data: blob:; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://s7.addthis.com/js/300/addthis_widget.js https://s7.addthis.com/static/ https://m.addthisedge.com https://m.addthis.com https://www.google-analytics.com/analytics.js https://ajax.googleapis.com/ajax/libs/webfont/ https://connect.facebook.net/en_US/sdk.js https://platform.twitter.com/ https://cdn.syndication.twimg.com https://*.cloudfront.net https://rpxnow.com/js/lib/ https://maps.googleapis.com https://ispot-nature-org.rpxnow.com/signin/ https://cse.google.com https://www.google.com https://www.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://platform.twitter.com https://*.cloudfront.net https://www.google.com https://cse.google.com https://ton.twimg.com; default-src 'self'; 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://policy.app.cookieinformation.com https://policy.app.cookieinformation.com/uc.js https://www.google-analytics.com/analytics.js https://cdn.segment.com/analytics.js/v1/iRtbOAyGSwQKqJWe9ULwAIil2CEUjZf0/analytics.min.js https://cdn.jsdelivr.net/npm/es6-promise@4/dist/es6-promise.auto.min.js https://unpkg.com/@segment/consent-manager@4.2.2/standalone/consent-manager.js https://www.google.com/jsapi https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://cookieinformation.com/ https://stats.g.doubleclick.net https://www.google-analytics.com https://maps.googleapis.com https://i.ytimg.com https://secure.gravatar.com https://tags.w55c.net; font-src 'self' data: https://ecostruxureit.com/wp-content/plugins/tablepress/css/tablepress.svg https://fonts.googleapis.com https://fonts.gstatic.com https://ecostruxureit.com/wp-content/plugins/tablepress/css/tablepress.ttf; connect-src 'self' https://consent.app.cookieinformation.com https://api.segment.io https://my.wpengine.com https://cdn.segment.com/v1/projects/iRtbOAyGSwQKqJWe9ULwAIil2CEUjZf0/integrations; media-src 'self' https://www.youtube.com; object-src 'self'; frame-src 'self' http://localhost:9100/ https://www.youtube.com https://policy.app.cookieinformation.com; frame-ancestors 'self' http://localhost:9100/ https://app.ecostruxureit.com/ https://dev-app.ecostruxureit.xyz/; report-uri https://ecostruxureit.report-uri.com/r/d/csp/reportOnly 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.mmvpay.com d11xsvfurkpfrh.cloudfront.net ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com wzrkt.com *.clevertap.com *.mmvpay.com d11xsvfurkpfrh.cloudfront.net d2r1yp2w7bby2u.cloudfront.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; img-src * data:; connect-src 'self' *.mmvpay.com *.matchmove-beta.com d11xsvfurkpfrh.cloudfront.net; font-src * 'unsafe-inline' data:; style-src * 'unsafe-inline'; frame-src 'self' d11xsvfurkpfrh.cloudfront.net www.googletagmanager.com https://www.google.com/recaptcha/ 1
default-src 'self' * inmotion.dhl *.inmotion.dhl imcdn.adrivo.com *.adrivo.com disqus.com disquscdn.com *.disquscdn.com; script-src 'self' * inmotion.dhl *.inmotion.dhl imcdn.adrivo.com *.adrivo.com 'unsafe-eval' 'unsafe-inline' inmotion.dhl *.inmotion.dhl  *.adrivo.com *.google.com www.googletagmanager.com www.google-analytics.com *.gstatic.com cdn.jsdelivr.net iframe.ly *.iframe.ly *.jwplatform.com *.jwpcdn.com *.twitter.com *.twimg.com *.ads-twitter.com *.facebook.net disqus.com *.instagram.com sc-static.net *.disqus.com *.disquscdn.com *.curator.io https://fanpic.co https://vjs.zencdn.net https://unpkg.com https://cdn.rawgit.com cdnjs.cloudflare.com *.licdn.com; style-src 'self' * inmotion.dhl *.inmotion.dhl imcdn.adrivo.com *.adrivo.com 'unsafe-inline' inmotion.dhl *.inmotion.dhl *.vimeo.com cdn.jsdelivr.net fast.fonts.net *.twitter.com *.disquscdn.com *.curator.io https://vjs.zencdn.net cdnjs.cloudflare.com; frame-src 'self' * inmotion.dhl *.inmotion.dhl imcdn.adrivo.com *.adrivo.com data: inmotion.dhl *.inmotion.dhl *.adrivo.com *.iframe.ly *.vimeo.com *.youtube.com *.youtube-nocookie.com *.jwplatform.com *.jwpsrv.com *.twitter.com *.facebook.com *.instagram.com *.snapchat.com disqus.com *.google.com *.spotify.com https://z6z.co/race-to-rugby https://app.idagio.com https://www.podbean.com https://i.fanpic.co; connect-src 'self' * inmotion.dhl *.inmotion.dhl imcdn.adrivo.com *.adrivo.com *.adrivo.com *.jwplatform.com *.jwpsrv.com *.jwpcdn.com jwpsrv-vh.akamaihd.net *.curator.io www.google-analytics.com stats.g.doubleclick.net; img-src * data: blob:; font-src * data:; media-src * blob:; frame-ancestors 'self' * inmotion.dhl *.inmotion.dhl imcdn.adrivo.com *.adrivo.com https://mynetconnect.staffbase.com; child-src 'self' * inmotion.dhl *.inmotion.dhl imcdn.adrivo.com *.adrivo.com blob: 1
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https:; frame-ancestors 'self' www.elkjop.no elkjop.no www.power.no power.no logon.canaldigital.com ssotest.api-canaldigital.com ssostage.api-canaldigital.com; 1
default-src 'self' *.stackadapt.com *.ifgza3.net *.ojrq.net *.tapad.com *.loggly.com *.rlcdn.com *.impactradius-event.com *.teads.tv *.passage.ai wss://tars-prod.passage.ai *.evenfinancial.com *.taboola.com *.quantcount.com *.transunion.com *.vols7feed.com *.addthis.co *.amazon-adsystem.com *.youtube.com *.doubleclick.net *.company-target.com *.brightcove.com *.brightcovecdn.com *.prod.boltdns.net *.adsrvr.org dmtry.com *.dmtry.com *.quantserve.com *.bluekai.com *.facebook.com *.demandbase.com doubleclick.net *.trustev.com *.yahoo.com *.atedra.com *.twitter.com *.bing.com crwdcntrl.net c.rstg.io cdn.nextinsure.com *.jquery.com cloudfront.net *.googleapis.com *.adnxs.com *.rlcdn.com investis.com adsrvr.org sharethrough.com adroll.com yimg.com amazonaws.com *.fastclick.net secure.leadback.advertising.com google-analytics.com *.ads-twitter.com *.openx.net *.zencdn.net googleadservices.com gstatic.com bidswitch.net *.media6degrees.com googletagmanager.com *.siteintercept.qualtrics.com *.qualtrics.com; script-src 'self' https://siteimproveanalytics.com *.kore.ai *.b0e8.com *.bc0a.com *.stackadapt.com *.thebrighttag.com *.btstatic.com *.hifiona.com *.impactradius-event.com *.teads.tv *.passage.ai *.evenfinancial.com *.taboola.com *.quantcount.com *.dotomi.com *.transunion.com *.mxpnl.com *.vols7feed.com *.addthis.com *.googletagmanager.com *.optimizely.com *.pingdom.com *.cloudflare.com *.googleadservices.com *.youtube.com *.doubleclick.net *.google-analytics.com *.quantserve.com *.g.3gl.net *.eloqua.com *.crwdcntrl.net *.googleapis.com *.investis.com *.amazonaws.com *.cloudfront.net *.nextinsure.com *.lendingtree.com *.mediaplex.com *.demandbase.com *.jquery.com *.gstatic.com *.bing.com *.3gl.net *.yourscoreonline.com *.gofreecredit.com *.creditcheckingtoday.com *.naturaltracking.com *.credit.com *.facebook.com *.yimg.com *.ytimg.com *.quora.com *.ensighten.com *.d39se0h2uvfakd.cloudfront.net *.linkedin.com *.adsprotection.com *.brightcove.com *.hotjar.com *.adroll.com *.brightcove.net *.en25.com *.adsrvr.org *.abmr.net *.mathtag.com t2.rstg.io px.ads.linkedin.com vjs.zencdn.net *.twitter.com iad-login.dotomi.com snap.licdn.com sp.analytics.yahoo.com unpkg.com *.myfonts.net *.en25.com *.addthisedge.com *.zencdn.com *.s3.amazonaws.com cdn.ampproject.org *.company-target.com *.media6degrees.com *.ads-twitter.com cdn.mxpnl.com *.bizographics.com *.pingdom.net *.mbww.com *.entrust.net *.trustev.com *.mathtag.com *.googlesyndication.com *.google.com *.outbrain.com o1.qnsr.com *.facebook.net cas.cluep.com *.quizgnome.com *.siteintercept.qualtrics.com *.qualtrics.com *.pulseinsights.com blob: 'unsafe-eval' 'unsafe-inline'; child-src *.evenfinancial.com *.hifiona.com *.transunion.com blob: *.crwdcntrl.net *.cdn.optimizely.com *.addthis.com *.doubleclick.net *.lendingtree.com *.youtube.com *.hotjar.com *.mediaplex.com *.optimizely.com *.brightcove.net s.amazon-adsystem.com *.trustev.com *.mathtag.com *.qnsr.com *.facebook.com *.siteintercept.qualtrics.com *.qualtrics.com; connect-src 'self' *.google-analytics.com *.bc0a.com *.googleapis.com *.g.doubleclick.net *.kore.ai wss://rtm.kore.ai *.stackadapt.com *.ifgza3.net *.passage.ai wss://tars-prod.passage.ai *.taboola.com *.transunion.com *.mixpanel.com *.optimizely.com *.youtube.com *.brightcovecdn.com *.pingdom.net *.brightcove.com manifest.prod.boltdns.net airbrake.io *.company-target.com r.3gl.net s7.addthis.com *.herokuapp.com unity.cadreon.com app.trustev.com *.hotjar.com wss://*.hotjar.com *.siteintercept.qualtrics.com *.qualtrics.com 'unsafe-eval'; media-src 'self' *.brightcove.com *.brightcovecdn.com *.prod.boltdns.net *.transunion.com blob: f1.media.brightcove.com; img-src * *.ifgza3.net *.ojrq.net *.tapad.com *.loggly.com *.rlcdn.com data:; font-src data: *.transunion.com *.gstatic.com *.company-target.com edge.api.brightcove.com r.3gl.net *.addthis.com *.herokuapp.com *.quora.com; style-src * 'unsafe-eval' 'unsafe-inline'; frame-ancestors *.transunion.com; 1
frame-ancestors 'self' https://*.arcgis.com 1
frame-ancestors 'self' truefit.theresumator.com truefit.applytojob.com 1
frame-ancestors 'self' https://*.experiencecloud.adobe.com https://experiencecloud.adobe.com https://experience.adobe.com 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.typekit.net *.webtype.com *.google.com *.gstatic.com *.googleapis.com *.onenorth.com *.oniqa.com s3.amazonaws.com *.googletagmanager.com *.google-analytics.com *.google.com *.doubleclick.net *.agg.com *.blob.core.windows.net *.cookielaw.org *.jquery.com *.onetrust.com *.youtube.com *.siteimprove.com hello.myfonts.net ; img-src * data:; 1
frame-ancestors 'self' https://*.atrapalo.com.mx; report-uri /csp/report; 1
frame-ancestors 'self' http://www.iffas.org; 1
frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.brides.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://maps.googleapis.com http://www.googleadservices.com https://live.adyen.com/hpp/js/; 1
frame-ancestors 'self' https://fingov-prod.softco.com:8443 https://fingov-prod.softco.com; 1
frame-ancestors in.nationbuilder.com 1
media-src * ; 1
default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src share.intercom.io fast.wistia.net; connect-src 'self' api.intercom.io api-iam.intercom.io api-ping.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io nexus-long-poller-a.intercom.io nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com; font-src 'self' data: fonts.gstatic.com fonts.typekit.net use.typekit.com use.typekit.net js.intercomcdn.com https://static.squarespace.com; form-action 'self' *.screenlight.tv; frame-ancestors 'none'; img-src 'self' data: p.typekit.net js.intercomcdn.com static.intercomassets.com uploads.intercomcdn.com *.squarespace.com *.squarespace-cdn.com uploads.intercomusercontent.com; media-src 'self' js.intercomcdn.com; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' ajax.googleapis.com *.squarespace.com use.typekit.com use.typekit.net fonts.googleapis.com app.intercom.io widget.intercom.io js.intercomcdn.com fast.wistia.com fast.wistia.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com use.typekit.net *.squarespace.com fast.wistia.net; upgrade-insecure-requests; 1
default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://asset.advized.se https://polyfill.io/v3/polyfill.min.js https://www.youtube.com https://s.ytimg.com https://www.google-analytics.com/analytics.js https://www.googletagmanager.com https://tagmanager.google.com https://connect.facebook.net https://secure.adnxs.com/px;object-src 'none';style-src 'self' https: 'unsafe-inline';frame-ancestors 'none';img-src * blob: data: 1
default-src 'self'; style-src  'self' 'unsafe-inline'; script-src 'none'; img-src 'self' data:; font-src 'none'; media-src 'none'; object-src 'none'; child-src 'none'; worker-src 'none'; frame-ancestors 'none'; block-all-mixed-content; base-uri 'self'; manifest-src 'self'; 1
default-src 'self' 46.229.173.66 46.229.173.67 46.229.173.68;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vars.hotjar.com https://trinseo.mpeasylink.com https://catalog.ulprospector.com https://embed.widencdn.net https://www.youtube.com https://youtu.be *.addthis.com 'self' https://z.moatads.com/addthismoatframe568911941483/moatframe.js https://v1.addthisedge.com/live/boost/ra-5c6c844ac47bb6e1/_ate.track.config_resp https://cdn.ampproject.org/v0.js *.baidu.com res://edgehtml.dll http://analytics.convertlanguage.com/urchin.js.php https://consent.cookiebot.com https://consent.cookiebot.com/uc.js https://consentcdn.cookiebot.com/consentconfig/67aaa768-242a-412c-a8cd-2985fe6f2507/state.js https://consentcdn.cookiebot.com/ https://sample-api-v2.crazyegg.com/ https://script.crazyegg.com/pages/scripts/0076/7137.js https://sample.crazyegg.com https://script.crazyegg.com/pages/versioned/common-scripts/11.1.32.js https://stats.g.doubleclick.net https://stats.g.doubleclick.net/j/collect https://d3rxaij56vjege.cloudfront.net/form-serialize/0.3/serialize.min.js https://trinseo.activehosted.com/f/embed.php https://trinseo.activehosted.com/proc.php *.facebook.com *.facebook.net *.google-analytics.com https://www.google.com https://www.googletagmanager.com/gtm.js https://maps.googleapis.com/ https://optimize.google.com/ 'unsafe-inline' https://www.google-analytics.com 'unsafe-inline' https://optimize.google.com https://www.google.com/recaptcha https://script.hotjar.com/ https://static.hotjar.com/c/hotjar-924686.js https://script.hotjar.com/modules-9cac31d617713ef2768f017542280bf6.js https://script.hotjar.com/modules-53580245dd2130370f2ced95f7dffc32.js https://script.hotjar.com/modules-aac78db949fa8bad21a45e66f0427dc1.js *.linkedin.com http://trinseo.mpeasylink.com http://trackcmp.net http://analytics.convertlanguage.com/urchin.js.php https://js-agent.newrelic.com/ https://bam.nr-data.net https://js-agent.newrelic.com/nr-1071.min.js https://js-agent.newrelic.com/nr-1099.min.js https://js-agent.newrelic.com/nr-1071.min.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://www.googletagmanager.com/gtm.js *.trinseo.com *.twitter.com https://static.ads-twitter.com/oct.js https://syndication.twitter.com http://static.ads-twitter.com/uwt.js https://platform.twitter.com https://syndication.twitter.com/i/jot https://embed.widencdn.net/ https://embed.widencdn.net 'self';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css https://www.gstatic.com https://optimize.google.com https://fonts.googleapis.com 'unsafe-inline' https://fonts.gstatic.com *.fonts.gstatic.com  http://trinseo.mpeasylink.com *.trinseo.com;img-src 'self' https://www.gstatic.com  https://www.google.bg https://www.google-analytics.com https://optimize.google.com *.trinseo.com * data:;font-src 'self' https://fonts.gstatic.com https://script.hotjar.com/font-hotjar_5.c9fb91.woff2 https://script.hotjar.com/font-hotjar_5.8598c5.ttf https://script.hotjar.com/font-hotjar_5.6da396.woff data: *.trinseo.com;object-src 'self';media-src 'self';frame-src 'self' *.addthis.com https://consentcdn.cookiebot.com/ *.facebook.com https://optimize.google.com https://vars.hotjar.com/ https://trinseo.mpeasylink.com https://www.google.com/recaptcha/ *.trinseo.com https://embed.widencdn.net/ *.apiplastic.com/ https://platform.twitter.com/ https://syndication.twitter.com/i/jot https://catalog.ulprospector.com https://embed.widencdn.net/ https://p.widencdn.net/ https://www.youtube.com https://youtu.be 'self';child-src 'self';connect-src 'self' *.addthis.com https://sample-api-v2.crazyegg.com/n/767137/all https://sample-api-v2.crazyegg.com/r/767137/all/84 https://sample-api-v2.crazyegg.com/r/767137/all/51 https://secure.ethicspoint.com *.facebook.com https://www.google-analytics.com/collect https://www.google-analytics.com/ https://optimize.google.com/ https://in.hotjar.com https://vc.hotjar.io/views/924686 http://trinseo.mpeasylink.com http://msdssearch.Styron.com https://bam.nr-data.net https://secure.ethicspoint.com http://tbe.taleo.net *.trinseo.com https://www.apiplastic.com/ *.services.visualstudio.com *.twitter.com;frame-ancestors 'self';; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; object-src 'none'; base-uri 'self'; connect-src 'self' https:; font-src 'self' https:; frame-src 'self' https:; img-src 'self' data: https:; manifest-src 'self'; media-src 'self' https:; worker-src 'none'; block-all-mixed-content; upgrade-insecure-requests; 1
default-src 'unsafe-inline' 'self' 'unsafe-eval' https://*.veinteractive.com https://*.doubleclick.net https://s.ytimg.com https://www.youtube.com https://*.blob.core.windows.net https://cdn.jsdelivr.net https://*.onetrust.com https://qa.cwallet.couponnetwork.fr http://res.cloudinary.com https://www.googletagmanager.com www.google-analytics.com ajax.googleapis.com https://www.google.com https://www.google.fr https://cookiee1.veinteractive.com https://track.effiliation.com https://x.bidswitch.net https://a.volvelle.tech https://prod-cn-cdn1.azureedge.net https://www.googleadservices.com https://code.jquery.com https://connect.facebook.net https://www.facebook.com https://cdn.cookielaw.org https://mastertag.effiliation.com https://bbd-tag.de https://www.uzerly.net https://adperform.fr https://track.adform.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.couponnetwork.fr https://apptracker.stream https://googleads.g.doubleclick.net https://www.gstatic.com https://s.ytimg.com https://www.youtube.com https://www.google.com https://www.google.fr https://cookiee1.veinteractive.com https://track.effiliation.com https://x.bidswitch.net https://a.volvelle.tech https://prod-cn-cdn1.azureedge.net https://*.blob.core.windows.net https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.googleadservices.com https://code.jquery.com https://geolocation.onetrust.com https://cdn.jsdelivr.net https://cdn.cookielaw.org https://mastertag.effiliation.com https://bbd-tag.de https://www.uzerly.net https://adperform.fr https://track.adform.net https://*.veinteractive.com https://bid.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com data:; style-src 'unsafe-inline' 'self' https://www.google.com https://www.google.fr https://cookiee1.veinteractive.com https://track.effiliation.com https://x.bidswitch.net https://a.volvelle.tech https://prod-cn-cdn1.azureedge.net https://*.blob.core.windows.net https://fonts.googleapis.com https://geolocation.onetrust.com https://code.jquery.com https://cdn.jsdelivr.net https://cdn.cookielaw.org https://mastertag.effiliation.com https://bbd-tag.de https://www.uzerly.net https://adperform.fr; img-src 'self' https://img.youtube.com https://www.google.com https://www.google.fr https://cookiee1.veinteractive.com https://track.effiliation.com https://x.bidswitch.net https://a.volvelle.tech https://prod-cn-cdn1.azureedge.net https://www.google.com.ua https://*.blob.core.windows.net https://www.googletagmanager.com https://*.couponnetwork.fr https://www.google-analytics.com https://*.doubleclick.net https://*.facebook.com https://connect.facebook.net http://res.cloudinary.com data:; frame-src https://*.id.amgdgt.com https://www.google.com https://www.google.fr https://cookiee1.veinteractive.com https://track.effiliation.com https://x.bidswitch.net https://a.volvelle.tech https://prod-cn-cdn1.azureedge.net https://*.facebook.com https://r.turn.com https://appanalytics.press https://www.youtube.com https://config1.veinteractive.com https://connect.facebook.net https://bid.g.doubleclick.net https://catalinamarketing.wufoo.com; 1
frame-ancestors http://*.timeout.com https://*.timeout.com 'self' 1
default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; object-src *; style-src * 'unsafe-inline'; img-src blob: * data:; media-src * data: ; child-src *; font-src * data: ; 1
default-src 'self' *.googlesyndication.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' img.equinenow.com *.2mdn.net *.acexedge.com *.adbutter.net *.adrta.com *.adsafeprotected.com *.adnxs.com *.adnxtr.com *.adroll.com *.adsrvr.org *.adtechus.com *.atdmt.com ajax.googleapis.com *.amazonaws.com *.amazon-adsystem.com *.ampproject.org *.basis.net *.betrad.com *.bidsumulator.com *.bidswitch.net *.bluekai.com *.bidr.io *.contextweb.com *.clarium.io *.demdex.net *.dotomi.com *.doubleclick.net *.doubleverify.com *.dowlextff.com *.dvtps.com connect.facebook.net confiant-integrations.global.ssl.fastly.net *.esm1.net *.exponential.com *.everesttech.net *.evidon.com *.fastclick.net *.flashtalking.com maps.googleapis.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.google-analytics.com *.gstatic.com *.iasds01.com *.imrworldwide.com *.jivox.com *.krxd.net *.mathtag.com *.mediamathtag.com *.minkatu.com *.moatads.com *.myvisualiq.net *.olark.com *.opendns.com *.revjet.com *.pinterest.com *.quantcount.com *.quantserve.com *.scorecardresearch.com *.serving-sys.com *.sharethis.com *.sitescount.com *.steelhousemedia.com *.stripe.com *.tubemogul.com *.trustarc.com *.truste.com *.turn.com *.voicefive.com *.ybp.yahoo.com *.yimg.com img.dogsnow.com; style-src img.equinenow.com 'self' 'unsafe-inline' *.googleapis.com *.cmptch.com *.evidon.com *.fastclick.net maxcdn.bootstrapcdn.com *.quantcount.com *.sharethis.com img.dogsnow.com; style-src-elem img.equinenow.com 'self' 'unsafe-inline' *.evidon.com fonts.googleapis.com maxcdn.bootstrapcdn.com content.quantcount.com secure.cdn.fastclick.net static.olark.com *.sharethis.com img.dogsnow.com; img-src * 'self' data: *.equinenow.com img.dogsnow.com; font-src 'self' data: img.equinenow.com maxcdn.bootstrapcdn.com fonts.googleapis.com tpc.googlesyndication.com cdnjs.cloudflare.com fonts.gstatic.com cdn.revjet.com c.steelhousemedia.com img.dogsnow.com; connect-src 'self' www.facebook.com *.acexedge.com *.adnxs.com *.adsrvr.org *.amazon-adsystem.com *.ampproject.org adserver-us.adtech.advertising.com *.bttrack.com *.contextweb.com *.casalemedia.com *.clearrtb.com *.clarium.io *.doubleclick.net *.doubleverify.com *.dotomi.com *.districtm.io *.flashtalking.com *.googleadservices.com *.googlesyndication.com *.google-analytics.com *.gstatic.com metrics.nt.vc *.opendns.com *.serving-sys.com *.sharethis.com *.steelhousemedia.com *.yahoo.com; frame-ancestors 'self' *.allbreedpedigree.com *.pedigreequery.com; frame-src 'self' *.2mdn.net *.adform.net *.admission.net *.adnxs.com *.amazon-adsystem.com advertising.aol.com bttrack.com *.casalemedia.com *.cargurus.com connect.facebook.net *.consensu.org *.contobox.com *.criteo.com *.doubleclick.net *.doubleverify.com *.dvtps.com *.facebook.com *.flashtalking.com *.googlesyndication.com *.linksynergy.com *.mathtag.com match.prod.bidr.io *.opendns.com *.placelocal.com *.serving-sys.com *.sharethis.com *.simpli.fi *.sitescout.com *.stripe.com *.turn.com *.vimeo.com *.w55c.net *.youtube.com; object-src 'none'; form-action 'self' edge.sharethis.com m.facebook.com facebook.com www.google.com www.paypal.com www.uship.com; base-uri 'none'; report-to csp-services; report-uri https://equinenow.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self'; img-src 'self' data: *.knygos-static.lt *.zoombook.lt *.baltotrader.lt *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.google-analytics.com *.googletagmanager.com *.gstatic.com *.facebook.com *.fbcdn.net pipirai.imgix.net knygos-blogas.imgix.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.knygos-static.lt *.google.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.gstatic.com *.facebook.net *.fbcdn.net *.adform.net *.doubleclick.net *.nr-data.net *.newrelic.com *.rollbar.com; style-src 'self' 'unsafe-inline' *.knygos-static.lt *.googleapis.com *.gstatic.com *.fbcdn.net; font-src 'self' data: *.knygos-static.lt *.googleapis.com *.gstatic.com; frame-src 'self' *.google.com *.youtube.com *.facebook.com *.doubleclick.net; connect-src 'self' *.baltotrader.lt *.google.com *.google.ge *.google-analytics.com *.facebook.com *.doubleclick.net *.nr-data.net; 1
frame-ancestors 'self' bevvy.co *.bevvy.co 1
default-src 'self' *.check-dein-spiel.de *.googleapis.com *.gstatic.com *.google.com piwik.bzga.de 'unsafe-inline'; img-src 'self' *.googleapis.com *.gstatic.com *.google.com piwik.bzga.de data:; 1
report-to default;report-uri https://alphawave.uriports.com/reports/report 1
base-uri 'none'; object-src 'none'; script-src https://kabissalegacy.kb2.org/logs/ https://kabissalegacy.kb2.org/sidekiq/ https://kabissalegacy.kb2.org/mini-profiler-resources/ https://kabissalegacy.kb2.org/assets/ https://kabissalegacy.kb2.org/brotli_asset/ https://kabissalegacy.kb2.org/extra-locales/ https://kabissalegacy.kb2.org/highlight-js/ https://kabissalegacy.kb2.org/javascripts/ https://kabissalegacy.kb2.org/plugins/ https://kabissalegacy.kb2.org/theme-javascripts/ https://kabissalegacy.kb2.org/svg-sprite/; worker-src 'self' https://kabissalegacy.kb2.org/assets/ https://kabissalegacy.kb2.org/brotli_asset/ https://kabissalegacy.kb2.org/javascripts/ https://kabissalegacy.kb2.org/plugins/ 1
default-src 'self' *.chariz.com; script-src 'self' *.chariz.com cdnjs.cloudflare.com *.sentry-cdn.com; style-src 'unsafe-inline' 'self' *.chariz.com fonts.googleapis.com; img-src 'self' data: *.chariz.com *.gravatar.com cdn.discordapp.com lh3.googleusercontent.com; font-src 'self' fonts.gstatic.com; child-src 'self' *.chariz.com www.youtube.com streamable.com; connect-src 'self' *.ingest.sentry.io 1
frame-ancestors 'self' https://analytics.google.com/analytics/ https://*.buypass.no https://*.buypass.com https://*.norsk-tipping.no https://*.altinn.no; default-src 'self' 'unsafe-inline' https://*.spotify.com https://www.youtube.com/ https://snap.licdn.com/ https://*.edialog24.com https://www.gstatic.com https://sjs.bizographics.com wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.io https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://player.acast.com/ https://player.pippa.io/ https://analytics.google.com/analytics/ https://sdks.shopifycdn.com/ https://buypass-as.myshopify.com *.buypass.no *.buypass.com; img-src 'self' https://*.edialog24.com https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net https://v.shopify.com data: 1
connect-src https://*.jaicp.com https://*.google-analytics.com https://google-analytics.com https://*.google.com https://*.yandex.ru 'self'; child-src 'self' blob: https://*.yandex.ru; font-src https://*.digma.ru https://static.lc-group.ru https://fonts.gstatic.com 'self' ; form-action https://*.jaicp.com 'self'; frame-ancestors https://*.webvisor.com https://webvisor.com http://*.webvisor.com http://webvisor.com 'self'; frame-src https://*.jaicp.com  blob: https://*.googletagmanager.com https://*.google.com https://*.yandex.ru https://*.youtube.com 'self' https://*.merlion.ru; img-src https://*.jaicp.com https://*.digma.ru https://static.lc-group.ru https://google-analytics.com https://*.google.com https://*.yandex.ru https://*.youtube.com https://*.merlion.com 'self' data: https://*.yandex.net *.yandex.ru *.yastatic.net *.merlion.ru *.google-analytics.com blob: https://*.yandex.ru; media-src https://*.digma.ru https://static.lc-group.ru 'self'; object-src https://*.digma.ru https://static.lc-group.ru 'self'; script-src https://*.digma.ru https://static.lc-group.ru https://*.googletagmanager.com https://google-analytics.com https://*.google.com https://google.com https://*.gstatic.com https://*.yandex.ru https://yastatic.net https://*.youtube.com https://s.ytimg.com 'self' *.yandex.ru *.yandex.net *.yastatic.net *.google-analytics.com https://*.jaicp.com  'unsafe-eval'; style-src https://*.jaicp.com  https://*.digma.ru https://static.lc-group.ru https://*.google.com 'self' https://fonts.googleapis.com 'unsafe-inline'; default-src 'none'; strict-mixed-content-checking; reflected-xss filter; referrer origin-when-cross-origin; 1
script-src 'report-sample' 'nonce-cx4Rcr+DXdlYfLnaNQh07A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /cspreport 1
frame-ancestors 'self' *.spreadex.com/ 1
default-src 'self' https://www.google-analytics.com https://l.sharethis.com; font-src  'self'  https://use.fontawesome.com ;img-src 'self' https://www.google.com https://platform-cdn.sharethis.com https://www.google.co.in https://www.google-analytics.com ;frame-ancestors 'self' https://cms.phhmortgage.com:9443;frame-src 'self' https://cms.phhmortgage.com:9443 https://bid.g.doubleclick.net https://c.sharethis.mgr.consensu.org; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://platform-api.sharethis.com https://cdnjs.cloudflare.com https://buttons-config.sharethis.com https://www.googletagmanager.com https://www.google-analytics.com ; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://cdnjs.cloudflare.com ;object-src 'none';base-uri 'self' https://cms-phhmortgage.com:9443; 1
default-src 'self' *.fls.doubleclick.net *.sharethis.mgr.consensu.org *.adsrvr.org *.sitescout.com *.g.doubleclick.net *.bidswitch.com *.pubmatic.com *.analytics.yahoo.com *.narrative.io *.pixel.ad *.scorecardresearch.com *.advertising.com *.sitescout.com *.thebrighttag.com *.exelator.com *.mookie1.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.linkedin.com *.w.org yoa.st *.gravatar.com *.sharethis.com *.medpace.com *.google.com *.pixel.ad *.addthis.com *.truoptik.com *.liadm.com *.adsrvr.org *.adsymptotic.com *.quantserve.com *.ads.linkedin.com *.kickfire.com *.semasio.net *.krxd.net *.google.com *.rumiview.com *.thebrighttag.com *.adsrvr.org *.narrative.io *.scorecardresearch.com *.vimeocdn.com *.advertising.com *.sitescout.com *.g.doubleclick.net ml314.com *.rd.linksynergy.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.global.ssl.fastly.net *.gstatic.com *.google.com *.googleadservices.com *.wistia.com *.cloudflare.com *.googleapis.com *.adobedtm.com *.sharethis.com *.adsrvr.org npmcdn.com *.pardot.com *.sharethis.com *.linkedin.com *.quantcount.com *.quantserve.com *.licdn.com *.kickfire.com *.bugherd.com *.google-analytics.com *.googletagmanager.com *.rumiview.com *.medpace.com *.vimeocdn.com; style-src 'self' 'unsafe-inline' *.cloudflare.com *.googleapis.com *.bootstrapcdn.com npmcdn.com *.vimeocdn.com; font-src 'self' data: *.gstatic.com *.bootstrapcdn.com; frame-src 'self' *.global.ssl.fastly.net *.google.com *.pardot.com *.adobedtm.com *.fls.doubleclick.net *.sharethis.mgr.consensu.org *.bidswitch.com *.pubmatic.com *.analytics.yahoo.com *.adsrvr.org *.narrative.io *.pixel.ad *.scorecardresearch.com *.cloudfront.net *.akamaized.net *.advertising.com *.sitescout.com *.vimeo.com *.thebrighttag.com *.exelator.com *.mookie1.com; object-src 'self'; connect-src 'self' *.yoast.com *.wpengine.com yoast.com *.medpace.com *.sharethis.com *.g.doubleclick.net *.google-analytics.com *.akamaized.net; media-src 'self' *.akamaized.net; form-action 'self'; frame-ancestors 'self' *.global.ssl.fastly.net *.google.com *.pardot.com *.fls.doubleclick.net *.sharethis.mgr.consensu.org *.bidswitch.com *.pubmatic.com *.analytics.yahoo.com *.adsrvr.org *.narrative.io *.pixel.ad *.scorecardresearch.com *.cloudfront.net *.akamaized.net *.advertising.com *.sitescout.com *.vimeo.com *.thebrighttag.com *.exelator.com *.mookie1.com; 1
default-src * 'unsafe-eval' 'unsafe-inline' 'unsafe-dynamic' data: filesystem: about: blob: ws: wss: 1
frame-ancestors myiuhealth.org myunionhealthportal.org; 1
frame-ancestros 'self' 1
default-src 'self' *.macgamestore.com *.wingamestore.com; form-action 'self' https://*.paypal.com https://*.apple.com https://*.zendesk.com; frame-src 'self' cdn1.macgamestore.com *.facebook.net *.twitter.com *.youtube.com *.google.com *.paypal.com *.apple.com *.ubisoft.com; frame-ancestors 'self'; connect-src 'self' *.google-analytics.com *.facebook.com *.googleapis.com; script-src 'self' 'nonce-cf862d38257ff2dea3973a264f55ecd6660e' appleid.cdn-apple.com *.google-analytics.com *.google.com *.gstatic.com *.facebook.net *.twitter.com *.youtube.com *.ytimg.com *.paypal.com *.paypalobjects.com ubistatic2-a.akamaihd.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: *.macgamestore.com *.wingamestore.com *.google-analytics.com *.gstatic.com *.googleusercontent.com *.facebook.com *.fbsbx.com *.fbcdn.net *.facebook.net *.twitter.com *.youtube.com *.ytimg.com *.akamaized.net www.gravatar.com; font-src 'self' data: *.gstatic.com *.googleusercontent.com fontlibrary.org github.com use.typekit.net cdn.honey.io; 1
default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' 'self' *; img-src data: *; 1
frame-ancestors 'self' bibliocms.com *.bibliocms.com bibliocommons.com *.bibliocommons.com libanswers.com *.libanswers.com fulcolibrary.bibliocms.com *.fulcolibrary.bibliocms.com https://www.fulcolibrary.org www.fulcolibrary.org *.www.fulcolibrary.org; 1
base-uri 'none'; object-src 'none'; script-src https://www.nixcraft.com/logs/ https://www.nixcraft.com/sidekiq/ https://www.nixcraft.com/mini-profiler-resources/ https://www.nixcraft.com/assets/ https://www.nixcraft.com/brotli_asset/ https://www.nixcraft.com/extra-locales/ https://www.nixcraft.com/highlight-js/ https://www.nixcraft.com/javascripts/ https://www.nixcraft.com/plugins/ https://www.nixcraft.com/theme-javascripts/ https://www.nixcraft.com/svg-sprite/ 'report-sample' https://www.google-analytics.com/analytics.js https: 'unsafe-inline'; worker-src 'self' https://www.nixcraft.com/assets/ https://www.nixcraft.com/brotli_asset/ https://www.nixcraft.com/javascripts/ https://www.nixcraft.com/plugins/; report-uri https://www.nixcraft.com/csp_reports 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://static.criteo.net https://*.criteo.com https://wb.messengerpeople.com https://www.zenaps.com https://isitetv.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://tpc.googlesyndication.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.zavvi.es https://m.zavvi.es https://checkout.zavvi.es https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.cn https://*.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://*.criteo.com https://static.criteo.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://*.google-analytics.com https://tpc.googlesyndication.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self' legislation.vic.gov.au content.legislation.vic.gov.au *.content.legislation.vic.gov.au; script-src 'self' legislation.vic.gov.au data: content.legislation.vic.gov.au *.content.legislation.vic.gov.au cdnjs.cloudflare.com 'unsafe-inline' *.googletagmanager.com tagmanager.google.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.google-analytics.com cdn.monsido.com connect.facebook.net *.cloudfront.net 'unsafe-eval' *.youtube.com ytimg.com *.ytimg.com usercheck.vgso.vic.gov.au; style-src 'self' 'unsafe-inline' legislation.vic.gov.au content.legislation.vic.gov.au *.content.legislation.vic.gov.au fonts.googleapis.com tagmanager.google.com; img-src 'self' data: legislation.vic.gov.au content.legislation.vic.gov.au *.content.legislation.vic.gov.au *.amazee.io tracking.monsido.com *.google-analytics.com *.g.doubleclick.net www.google.com *.hotjar.com *.hotjar.io wss://*.hotjar.com www.googletagmanager.com www.gstatic.com www.facebook.com; font-src 'self' data: legislation.vic.gov.au content.legislation.vic.gov.au *.content.legislation.vic.gov.au fonts.gstatic.com *.hotjar.com *.hotjar.io wss://*.hotjar.com; frame-src 'self' legislation.vic.gov.au content.legislation.vic.gov.au *.content.legislation.vic.gov.au *.hotjar.com *.hotjar.io wss://*.hotjar.com *.vimeo.com *.youtube.com; connect-src 'self' legislation.vic.gov.au content.legislation.vic.gov.au *.content.legislation.vic.gov.au *.hotjar.com *.hotjar.io wss://*.hotjar.com *.elastic.sdp.vic.gov.au api.ipify.org drwgdblqzrfiz.cloudfront.net *.g.doubleclick.net www.google-analytics.com; report-uri https://sdpops.report-uri.com/r/d/csp/enforce; 1
default-src https://tpc.googlesyndication.com https://*.safeframe.googlesyndication.com; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: http://www.pap.pl https://www.google.com https://www.google-analytics.com https://*.g.doubleclick.net https://*.googlesyndication.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.ampproject.org https://tpc.googlesyndication.com http://ckeditor.iframe.ly https://cdnjs.cloudflare.com https://www.google.com https://www.google-analytics.com https://www.googletagservices.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://adservice.google.com https://adservice.google.pl https://securepubads.g.doubleclick.net https://www.gstatic.com https://*.hit.gemius.pl https://connect.facebook.net https://platform.twitter.com;; font-src 'self' data: https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com; connect-src 'self' https://securepubads.g.doubleclick.net https://adservice.google.com https://*.googlesyndication.com https://www.google-analytics.com https://csi.gstatic.com https://www.google-analytics.com; object-src 'self'; frame-src 'self' https://igrafika.pap.pl https://*.googlesyndication.com https://www.youtube.com https://*.dcs.redcdn.pl https://www.google.com https://infostrefa.tv https://*.hit.gemius.pl https://multimedia.europarl.europa.eu https://maps.google.com https://iframe.dacast.com https://www.facebook.com https://platform.twitter.com; prefetch-src 'self' https://tpc.googlesyndication.com; base-uri 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://djtflbt20bdde.cloudfront.net https://s.ytimg.com https://*.tribalfusion.com https://www.youtube.com https://s3-ap-southeast-2.amazonaws.com https://static.hotjar.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://apis.google.com https://platform.twitter.com https://translate.google.com https://translate.googleapis.com https://script.crazyegg.com https://maps.google.com.au https://maps.googleapis.com https://dnn506yrbagrg.cloudfront.net https://www.google.com https://api.w3-edge.com https://*.google.com; style-src 'self' 'unsafe-inline' https://www.google.com https://djtflbt20bdde.cloudfront.net https://s3-ap-southeast-2.amazonaws.com https://translate.googleapis.com https://fonts.googleapis.com https://hello.myfonts.net https://fast.fonts.net https://*.google.com; img-src 'self' data: https://www.googletagmanager.com https://cm.g.doubleclick.net https://dsum-sec.casalemedia.com https://ib.adnxs.com https://yoast.com https://*.w.org https://maps.gstatic.com https://maps.google.com.au https://www.google.com.au https://s3-ap-southeast-2.amazonaws.com https://www.google-analytics.com https://www.facebook.com https://stats.g.doubleclick.net https://www.gstatic.com https://www.google.com https://translate.googleapis.com https://*.tribalfusion.com https://*.gstatic.com https://*.openx.net https://*.pubmatic.com https://*.advertising.com https://*.yahoo.com https://*.facebook.net; font-src 'self' data: https://fonts.gstatic.com https://s3-ap-southeast-2.amazonaws.com https://hello.myfonts.net https://fast.fonts.net; connect-src 'self' https://www.google-analytics.com https://yoast.com https://*.yoast.com https://*.crazyegg.com https://translate.googleapis.com; object-src 'self' https://djtflbt20bdde.cloudfront.net; frame-src 'self' https://djtflbt20bdde.cloudfront.net https://www.youtube.com https://apis.google.com https://platform.twitter.com https://accounts.google.com/ https://staticxx.facebook.com https://www.facebook.com https://*.fls.doubleclick.net/ https://*.spotify.com; block-all-mixed-content 1
frame-ancestors 'self' http://www.philips.com.vn *.philips.com *.philips.com.vn 1
default-src 'self'; img-src 'self' * data:; connect-src 'self' * wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://mc.yandex.ru https://www.google-analytics.com https://stats.g.doubleclick.net; font-src 'self' * https://maxcdn.bootstrapcdn.com fonts.gstatic.com data:; frame-src 'self' * https://www.google.com https://bid.g.doubleclick.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' * 'unsafe-eval' 'unsafe-inline' blob: https://js.intercomcdn.com https://onesignal.com https://widget.intercom.io https://cdn.onesignal.com  https://www.googletagmanager.com https://mc.yandex.ru https://connect.facebook.net https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://cdn.jsdelivr.net/ https://www.googleadservices.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' * https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com data: https://fonts.googleapis.com; base-uri 'none'; frame-ancestors 'self'; upgrade-insecure-requests 1
frame-ancestors 'self' https://www.pickaso.com https://cdn1.pickaso.com https://cdn2.pickaso.com https://cdn3.pickaso.com https://cdn4.pickaso.com; 1
frame-ancestors https://institutorm.sharepoint.com; 1
base-uri 'self'; connect-src *; default-src 'self' 'unsafe-inline' *.googleadservices.com https://googleads.g.doubleclick.net *.google.com *.google.fr *.colissimo.fr *.google-analytics.com *.googlecommerce.com *.googleapis.com blob:; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' * *.twimg.com *.twitter.com *.facebook.net *.facebook.com https://www.tnt.fr *.tnt.fr *.google.com *.gstatic.com *.google-analytics.com *.googlecommerce.com *.googleapis.com *.googleadservices.com; style-src 'self' 'unsafe-inline' *.gstatic.com *.crisp.chat *.twitter.com *.google-analytics.com *.googlecommerce.com *.googleapis.com; media-src *; img-src 'self' * data: blob:; font-src 'self' *.crisp.chat fonts.gstatic.com *.google-analytics.com *.googlecommerce.com *.googleapis.com; frame-src *.facebook.com *.pinterest.com *.google.com *.youtube.com; worker-src 'self' *.facebook.com *.googlecommerce.com *.google.com data: blob:; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com *.unicef.org *.sharethis.com rules.quantcount.com connect.facebook.net secure.quantserve.com www.google-analytics.com www.googletagmanager.com cdn.poll-maker.com embeds.tagboard.com maps.googleapis.com e.infogram.com *.hscampaigns.com *.getchute.com ssl.mousestats.com tagmanager.google.com js-agent.newrelic.com bam.nr-data.net js-agent.newrelic.com/* www.youtube.com s.ytimg.com *.instagram.com platform.twitter.com cdn.syndication.twimg.com syndication.twitter.com cdn.nativemsg.com hm.baidu.com optimize.google.com siteimproveanalytics.com downloads.mailchimp.com mc.us2.list-manage.com sjs.bizographics.com unicef.us2.list-manage.com s3.amazonaws.com www.googleadservices.com *.doubleclick.net cdn.curator.io eisi-ext.azurewebsites.net *.aparat.com *.tableau.com *.wufoo.com s.pinimg.com ct.pinterest.com analytics.tiktok.com; object-src 'self' *.youtube.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.sharethis.com cdn.poll-maker.com stories.getchute.com cdn-images.mailchimp.com downloads.mailchimp.com l.sharethis.com platform.twitter.com optimize.google.com *.unicef.org cdn.curator.io *.twimg.com; img-src 'self' data: *.unicef.org www.google-analytics.com ssl.gstatic.com sb.scorecardresearch.com  *.sharethis.com www.facebook.com pixel.quantserve.com stats.g.doubleclick.net www.gstatic.com cdn.poll-maker.com csi.gstatic.com maps.gstatic.com maps.googleapis.com www.google.com *.cdninstagram.com pixel.getchute.com media.chute.io static.getchute.com avatars.io syndication.twitter.com *.twimg.com platform.twitter.com dynamite-images.appspot.com hm.baidu.com www.googletagmanager.com unicef-images.appspot.com 88988.global.siteimproveanalytics.io cdn-images.mailchimp.com gallery.mailchimp.com downloads.mailchimp.com *.tableau.com; media-src 'self' *.cdninstagram.com video.twimg.com; frame-src 'self' *.facebook.com www.google.com *.twitter.com e.infogram.com infogram-download-us2.s3.eu-west-1.amazonaws.com infogram-download-eu.s3.eu-west-1.amazonaws.com *.sharethis.com *.hscampaigns.com embeds.tagboard.com www.youtube.com infogram.com connect.facebook.net *.unicef.org api.getchute.com static.getchute.com giphy.com *.wufoo.com www.instagram.com cdn.nativemsg.com twitter.com *.ustream.tv *.youku.com c.sharethis.mgr.consensu.org optimize.google.com embed.ted.com *.doubleclick.net player.vimeo.com forms.office.com *.aparat.com *.tableau.com oms.gameloft.com *.soundcloud.com app.powerbi.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com data: maxcdn.bootstrapcdn.com stories.getchute.com *.unicef.org cdn.curator.io; connect-src 'self' *.sharethis.com www.quiz-maker.com ssl.mousestats.com www.google-analytics.com s3.amazonaws.com getchute.com *.getchute.com c.sharethis.mgr.consensu.org stats.g.doubleclick.net unicefhq.cp.bsd.net script.google.com script.googleusercontent.com *.unicef.org api.curator.io bam.nr-data.net rpapigatewaytest.azurewebsites.net i2e.azurewebsites.net; report-uri /brazil/report-csp-violation 1
frame-ancestors 'self' *.faunia.es 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: https://static.b-ite.com https://cs-assets.b-ite.com https://api.mapbox.com https://unpkg.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://dq4irj27fs462.cloudfront.net https://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js https://api.userlike.com https://cdn.podigee.com https://browser-update.org/update.min.js https://browser-update.org/update.show.min.js https://www.regio-tv.de/wp-content/plugins/cmms/assets/js/frontend/embed.min.js; style-src 'unsafe-inline' 'self' https://api.mapbox.com https://unpkg.com https://ajax.googleapis.com https://fonts.googleapis.com https://cdn.podigee.com; font-src data: 'self' https://dq4irj27fs462.cloudfront.net/fonts/userlike_default.eot https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.podigee.com; form-action 'self';  report-uri /opnsense-report-csp-violation 1
default-src 'self';       script-src 'self' 'unsafe-inline' 'unsafe-eval' http://w.sharethis.com https://analytics.twitter.com http://www.gstatic.com https://static.ads-twitter.com https://script.hotjar.com https://static.hotjar.com https://connect.facebook.net http://bat.bing.com http://siteimproveanalytics.com http://platform.twitter.com https://cdnjs.cloudflare.com https://player.vimeo.com http://graph.facebook.com https://graph.facebook.com http://www.google-analytics.com https://www.google-analytics.com https://weatherwidget.io https://maxcdn.bootstrapcdn.com https://*.siteintercept.qualtrics.com http://websites.cdn.getfeedback.com https://ajax.googleapis.com https://googleads.g.doubleclick.net http://www.googleadservices.com http://*.addthis.com https://*.addthis.com https://*.addthisedge.com use.typekit.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://z.moatads.com http://www.twinsurance.ca https://play.vidyard.com;       style-src 'self' 'unsafe-inline' https://www.otipinsurance.com http://www.otipinsurance.com use.typekit.net https://tagmanager.google.com https://fonts.googleapis.com https://cdn.ckeditor.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com;       img-src 'self' * data: p.typekit.net https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com;       font-src 'self' use.typekit.net https://script.hotjar.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com data:;       object-src 'self';       frame-src 'self' https://www.facebook.com https://vars.hotjar.com https://www.getfeedback.com https://*.addthis.com https://www.youtube.com https://www.otip.com https://share.transistor.fm https://bid.g.doubleclick.net https://weatherwidget.io https://player.vimeo.com https://play.vidyard.com;       connect-src 'self' https://otip.secure.force.com https://vc.hotjar.io https://in.hotjar.com https://www.google.ca https://www.googleadservices.com https://stats.g.doubleclick.net https://www.google-analytics.com https://*.addthis.com https://siteintercept.qualtrics.com 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://bellocollective.com https://*.bellocollective.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
connect-src 'self'; child-src 'self'; font-src 'self'; form-action 'self' data:; frame-ancestors 'self'; frame-src 'self' blob:; img-src data: *; media-src 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-eval' 'unsafe-inline'; default-src 'none'; reflected-xss block; referrer no-referrer; 1
frame-ancestors zhannei.baidu.com http://www.chaozhoudaily.com 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; base-uri 'self' 1
frame-src 'self' https://youtube.com https://www.youtube.com https://www.youtube-nocookie.com https://vimeo.com https://www.vimeo.com https://openstreetmap.de https://umap.openstreetmap.de https://tile.openstreetmap.de https://*.tile.openstreetmap.de https://*.openstreetmap.de https://openstreetmap.fr https://umap.openstreetmap.fr https://*.openstreetmap.fr https://*.tile.openstreetmap.fr https://tube.backbord.net https://facebook.com https://www.facebook.com https://xrtwimap.de https://tube.rebellion.global https://matomo.extinctionrebellion.de https://orga.extinctionrebellion.de/ https://platform.twitter.com https://syndication.twitter.com https://spenden.twingle.de https://miro.com https://xn--r1a.website/s/xrdeutschland https://xn--r1a.website/s/berlinaction2020 https://w.soundcloud.com; style-src 'self' 'unsafe-inline' *.twitter.com *.twimg.com; form-action 'self' https://syndication.twitter.com; font-src 'self'; default-src 'none'; img-src 'self' data: https://www.gravatar.com https://matomo.extinctionrebellion.de *.twitter.com *.twimg.com https://www.facebook.com; base-uri 'self'; connect-src 'self' https://youtube.com https://www.youtube.com https://www.youtube-nocookie.com https://vimeo.com https://www.vimeo.com https://openstreetmap.de https://umap.openstreetmap.de https://tile.openstreetmap.de https://*.tile.openstreetmap.de https://*.openstreetmap.de https://openstreetmap.fr https://umap.openstreetmap.fr https://*.openstreetmap.fr https://*.tile.openstreetmap.fr https://tube.backbord.net https://facebook.com https://www.facebook.com https://xrtwimap.de https://tube.rebellion.global https://matomo.extinctionrebellion.de https://orga.extinctionrebellion.de/ https://platform.twitter.com https://syndication.twitter.com https://spenden.twingle.de https://miro.com https://xn--r1a.website/s/xrdeutschland https://xn--r1a.website/s/berlinaction2020 https://w.soundcloud.com; script-src 'self' https://matomo.extinctionrebellion.de https://platform.twitter.com https://cdn.syndication.twimg.com https://connect.facebook.net https://driveuploader.com 'nonce-RQ1kHq4Miqt8W1BkIRUAtg=='; child-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://tagmanager.google.com https://www.googletagmanager.com https://analytics.twitter.com https://www.google-analytics.com https://connect.facebook.net static.ads-twitter.com app.icontact.com www.google.com www.gstatic.com maps.google.com widget.surveymonkey.com *.googleapis.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com app.icontact.com tagmanager.google.com; img-src 'self' data: *.mzstatic.com https://pbs.twimg.com https://www.google-analytics.com https://www.facebook.com/tr/ maps.gstatic.com *.googleapis.com t.co https://i.ytimg.com *.fbcdn.net stats.g.doubleclick.net www.google.com app.icontact.com maps.google.com *.gstatic.com secure.surveymonkey.com; font-src 'self' fonts.gstatic.com; media-src 'self' *.fbcdn.net https://video.twimg.com; frame-src 'self' itmss: www.youtube.com www.google.com https://connect.facebook.net https://www5.recruitingcenter.net https://www.facebook.com *.surveymonkey.com castbox.fm embed.podcasts.apple.com; form-action 'self' https://app.icontact.com https://connect.facebook.net https://www.facebook.com/tr/; connect-src 'self' https://www.google-analytics.com stats.g.doubleclick.net; 1
default-src 'self' 'sha256-EE2P6EnF5LyhuHD1GXvcAyp0VMA+ELbkbSFlR4akzKI=' 'sha256-6F7C0E903A7D577847AE427BCB66FECB5692E6D55355D2B6986552A783B892A9' 'sha256-ekEC0FEv8t+Q88qseT1uVB/azdF0VZjnwSKhwlY+9wc=' 'sha256-76L2z81IsyivXOW8b8CsEk7m32YfJBqYCKQLmvatdCQ=' 'unsafe-inline' DiscreteSearch.com https://www.discretesearch.com *.navigateto.net *.searchemoji.global;img-src *;frame-src 'self' DiscreteSearch.com https://www.discretesearch.com *.navigateto.net www.youtube.com www.youtube-nocookie.com player.vimeo.com 'nonce-ZjU2YTJmZWFlNDYzNDcwN2E1MDk3Y2JlN2E1NTcwZjQ=';media-src *;style-src 'self' 'unsafe-inline' DiscreteSearch.com https://www.discretesearch.com *.navigateto.net;script-src 'self' 'unsafe-eval' DiscreteSearch.com https://www.discretesearch.com *.navigateto.net 'nonce-ZjU2YTJmZWFlNDYzNDcwN2E1MDk3Y2JlN2E1NTcwZjQ=' 'sha256-ekEC0FEv8t+Q88qseT1uVB/azdF0VZjnwSKhwlY+9wc=' 'sha256-76L2z81IsyivXOW8b8CsEk7m32YfJBqYCKQLmvatdCQ=' 1
frame-ancestors 'self' wc.megacom.kg; 1
default-src https: blob: data: wss://*.hotjar.com 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'self' https://kparkfr.sharepoint.com 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://ct.pinterest.com https://*.akamaihd.net https://*.attn.tv https://*.recaptcha.net https://*.translate.naver.net https://ln-rules.rewardstyle.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://sumo.com https://ct.pinterest.com https://widget.trustpilot.com https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://m.idealshape.com https://www.idealshape.com https://checkout.idealshape.com https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://load.sumo.com https://s.pinimg.com https://load.sumome.com https://static.ads-twitter.com https://*.twitter.com https://www.shopperapproved.com https://widgets.pinterest.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://google.com https://*.akamaihd.net https://*.attn.tv https://*.trustpilot.com https://*.translate.naver.net https://*.microsofttranslator.com https://ln-rules.rewardstyle.com https://*.doubleclick.net https://*.google-analytics.com https://twitter.com https://sc-static.net https://*.google.co.uk https://google.co.uk; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self' https://*.rentalcover.com; object-src 'self'; style-src 'unsafe-inline' *; img-src data: * assets.braintreegateway.com checkout.paypal.com; font-src data: *; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://r.turn.com https://fomo.com https://*.jotfor.ms https://*.jotform.co https://*.fomo.com https://*.keen.io https://*.yandex.ru https://*.nr-data.net https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.cloudfront.net https://*.fullstory.com https://*.newrelic.com https://*.alphatec.net https://googleads.g.doubleclick.net https://*.rentalcover.com https://*.usefomo.com https://www.googletagmanager.com https://www.googleadservices.com https://komito.net https://*.brightwrite.com https://bat.bing.com https://ajax.googleapis.com https://*.zopim.com https://*.trustpilot.com https://linksynergy.com https://track.linksynergy.com https://*.linksynergy.com https://intljs.rmtag.com https://*.xpay.xcover.com https://*.covergenius.com https://*.taboola.com https://www.gstatic.com https://*.zdassets.com https://*.nr-data.net *.braintreegateway.com www.paypalobjects.com c.paypal.com *.cardinalcommerce.com https://js.stripe.com https://*.ccdc02.com https://cdnjs.cloudflare.com https://www.emjcd.com https://js.hsforms.net https://forms.hsforms.com; connect-src 'self' https://*.fullstory.com https://*.segment.io https://*.alphatec.net https://stats.usefomo.com wss://*.zopim.com https://*.google-analytics.com https://*.yandex.ru https://*.trustpilot.com https://*.brightwrite.com https://sentry.io https://*.xpay.xcover.com https://*.covergenius.com https://*.taboola.com https://www.gstatic.com https://firestore.googleapis.com https://rentalcover.zendesk.com https://*.zdassets.com https://*.nr-data.net *.braintreegateway.com *.braintree-api.com https://api.stripe.com *.amazonaws.com *.cardinalcommerce.com https://www.emjcd.com https://forms.hsforms.com; media-src 'none'; frame-src 'self' https://*.vimeo.com https://*.g.doubleclick.net https://*.trustpilot.com *.braintreegateway.com c.paypal.com *.cardinalcommerce.com https://js.stripe.com https://hooks.stripe.com https://*.facebook.com https://*.kayak.com https://*.kayak.com.au https://*.momondo.com.au https://*.momondo.co.nz https://*.momondo.com https://*.hotelscombined.com.au https://*.hotelscombined.co.nz https://*.cheapflights.com.au https://*.cheapflights.co.nz https://*.cheapflights.com https://www.emjcd.com https://cj.dotomi.com https://www.google.com https://forms.hsforms.com; worker-src 'self'; frame-ancestors 'self' https://rc.xcvr.co https://www.kayak.com https://www.momondo.com.au https://www.hotelscombined.com.au https://www.cheapflights.com.au; 1
frame-ancestors https://*.lifecell.com.ua https://*.lifecell.ua 1
connect-src 'self' *.facebook.com *.facebook.net  *.google-analytics.com 'unsafe-inline' 'unsafe-eval'; default-src 'self';  script-src 'self' connect.facebook.net graph.facebook.com *.google.com  maps.googleapis.com www.google-analytics.com/analytics.js *.twitter.com *.uservoice.com assets.uvcdn.com cdn.syndication.twimg.com www.gstatic.com cdn.jsdelivr.net  'unsafe-inline' 'unsafe-eval'; style-src 'self' fonts.googleapis.com platform.twitter.com 'unsafe-inline';img-src * data: blob:;font-src 'self' fonts.gstatic.com; frame-src 'self' https:; 1
frame-ancestors 'self' app.vwo.com subs09.app.clicktale.com dev.renovateamerica.com qa.renovateamerica.com stage.renovateamerica.com authoring.renovateamerica.com www.renovateamerica.com training.renovateamerica.com go.renovateamerica.com go.pardot.com apply.renovateamerica.com 1
default-src 'none'; img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net *.gstatic.com *.zopim.com cdnjs.cloudflare.com *.adroll.com www.googletagmanager.com *.google.com www.google-analytics.com ajax.googleapis.com *.influ2.com *.zdassets.com *.news3.pw *.tomono.com *.metahash.org *.user-clicks.com *.facebook.net; connect-src 'self' *.googleapis.com *.zopim.com *.adroll.com *.doubleclick.net *.news3.pw wss://*.zopim.com wss://jp06.zopim.com metahash.zendesk.com *.influ2.com news.c8.net.ua *.zdassets.com *.tomono.com *.google-analytics.com *.metahash.org; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net use.fontawesome.com *.news3.pw *.metahash.org; font-src 'self' data: use.fontawesome.com *.news3.pw *.zopim.com *.metahash.org; frame-src 'self' *.facebook.com *.youtube.com *.news3.pw; worker-src 'self' *.news3.pw *.zendesk.com; object-src 'self' *.news3.pw 1
base-uri 'none'; object-src 'none'; script-src 'report-sample' https://www.bluehatseo.com/logs/ https://www.bluehatseo.com/sidekiq/ https://www.bluehatseo.com/mini-profiler-resources/ https://www.bluehatseo.com/assets/ https://www.bluehatseo.com/brotli_asset/ https://www.bluehatseo.com/extra-locales/ https://www.bluehatseo.com/highlight-js/ https://www.bluehatseo.com/javascripts/ https://www.bluehatseo.com/plugins/ https://www.bluehatseo.com/theme-javascripts/ https://www.bluehatseo.com/svg-sprite/ https://www.google-analytics.com/analytics.js; worker-src 'self' blob: 1
default-src 'self' data: *.sanfordguide.com *.gravatar.com *.vimeo.com *.google.com *.cloudflare.com *.ggpht.com *.youtube.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.facebook.com *.facebook.net *.leadmanagerfx.com *.doubleclick.net *.google-analytics.com *.ytimg.com *.bing.com *.googleapis.com *.adobedtm.com *.kickfire.com kickfire.com 'unsafe-inline' 'unsafe-eval' 1
default-src 'self' files.gal.ae; font-src 'self' files.gal.ae fonts.gstatic.com data:; style-src 'self' files.gal.ae fonts.googleapis.com; media-src 'self' files.gal.ae youtube.com youtu.be www.youtube.com blob: media-files.edgegroup.ae; img-src 'self' files.gal.ae jobsadmin-files.edgegroup.ae media-files.edgegroup.ae img.youtube.com pbs.twimg.com; child-src 'self' files.gal.ae youtube.com youtu.be www.youtube.com www.google.com; script-src 'self' files.gal.ae www.google.com www.gstatic.com 1
default-src *; img-src * http: https: data: 'unsafe-inline'; font-src * http: https: data: 'unsafe-inline'; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval' 1
frame-src 'self' pornotales.net *.pornotales.net static.tdstds.xyz tizer.clickpro.biz stackpath.bootstrapcdn.com cdn.jsdelivr.net ajax.googleapis.com *.googleapis.com https://*.googleapis.com *.google.com https://*.google.com *.yandex.ru https://*.yandex.ru *.mail.ru https://*.mail.ru *.yahoo.com https://*.yahoo.com *.bing.com https://*.bing.com *.rambler.ru https://*.rambler.ru *.nigma.ru https://*.nigma.ru *.go.mail.ru https://*.go.mail.ru *.pornotales.net https://*.pornotales.net *.tizer.pornotales.net https://*.tizer.pornotales.net *.mpay3.info https://*.mpay3.info;script-src 'self' 'unsafe-inline' 'unsafe-eval' pornotales.net *.pornotales.net static.tdstds.xyz tizer.clickpro.biz stackpath.bootstrapcdn.com cdn.jsdelivr.net ajax.googleapis.com *.googleapis.com https://*.googleapis.com *.google.com https://*.google.com *.yandex.ru https://*.yandex.ru *.mail.ru https://*.mail.ru *.yahoo.com https://*.yahoo.com *.bing.com https://*.bing.com *.rambler.ru https://*.rambler.ru *.nigma.ru https://*.nigma.ru *.go.mail.ru https://*.go.mail.ru *.pornotales.net https://*.pornotales.net *.tizer.pornotales.net https://*.tizer.pornotales.net *.mpay3.info https://*.mpay3.info 1
frame-ancestors 'self' http://www.imsm.es https://www.imsm.es http://www.mostoles.es https://www.mostoles.es http://www.mostolesjoven.es https://www.mostolesjoven.es  1
script-src * 'unsafe-inline' 'unsafe-eval'; style-src *.google.com *.googleapis.com *.doubleclick.net *.dohardmoney.com 'unsafe-inline'; img-src * data:; font-src * data:; frame-src * 1
default-src 'self'; img-src 'self' data: http: https: *.hot-chilli.net *.gravatar.com *.wp.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: http: https: *.google.com; style-src 'self' 'unsafe-inline'; font-src 'self' data: http: https: *.google.com; frame-src 'self' data: http: https: *.google.com; 1
default-src 'unsafe-inline' 'unsafe-eval' code.jquery.com mfa.gov.md fonts.googleapis.com *.twitter.com cdn.jsdelivr.net *.twimg.com code.jquery.com; script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com mfa.gov.md *.twitter.com cdn.jsdelivr.net *.twimg.com platform.twitter.com code.jquery.com; img-src 'unsafe-inline' 'unsafe-eval' code.jquery.com mfa.gov.md fonts.googleapis.com *.twitter.com cdn.jsdelivr.net *.twimg.com; frame-src 'unsafe-inline' 'unsafe-eval' *.twitter.com code.jquery.com mfa.gov.md; child-src 'unsafe-inline' 'unsafe-eval' *.twitter.com code.jquery.com mfa.gov.md; font-src *; report-uri /ro/report-csp-violation; upgrade-insecure-requests 1
default-src 'self'  https://*.artbrussels.com; connect-src 'self'  https://*.artbrussels.com https://my.elementor.com https://*.easyfairs.com https://*.google-analytics.com  https://stats.g.doubleclick.net https://www.wpo365.com https://efsentry.easyfairs.cloud; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://*.artbrussels.com https://*.easyfairs.cloud https://*.youtu.be https://s.ytimg.com https://*.youtube.com https://*.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.google.com https://*.googleadservices.com https://*.googleapis.com https://*.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data:  https://*.artbrussels.com  https://*.google.com https://*.google.at https://*.google.be https://*.google.bg https://*.google.ca https://*.google.cat https://*.google.ch https://*.google.de https://*.google.dk https://*.google.es https://*.google.fi https://*.google.fr https://*.google.com.hk https://*.google.it https://*.google.lt https://*.google.lu https://*.google.nl https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.ru https://*.google.se https://*.google.com.tr https://*.google.co.uk https://*.google.com https://*.ggpht.com https://library.elementor.com https://*.gravatar.com https://i.ytimg.com https://*.googleusercontent.com https://*.googleapis.com https://*.google-analytics.com https://*.g.doubleclick.net https://www.googletagmanager.com https://*.gstatic.com; style-src 'self' 'unsafe-inline' data:  https://*.artbrussels.com https://*.typekit.net https://ps.w.org https://fonts.googleapis.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://*.google.com; font-src 'self' data:  https://*.artbrussels.com https://*.typekit.net https://fonts.gstatic.com https://*.sharepointonline.com; child-src 'self'  https://*.artbrussels.com https://library.elementor.com https://*.youtube.com https://*.youtu.be https://www.youtube-nocookie.com https://www.googletagmanager.com https://*.google.com; media-src 'self'  https://*.artbrussels.com https://*.vimeo.com https://*.youtu.be https://*.youtube.com https://api.dmcdn.net https://*.twitch.tv; object-src 'self'  https://*.artbrussels.com; frame-ancestors 'self'  https://*.artbrussels.com https://*.vimeo.com https://api.dmcdn.net https://*.twitch.tv; base-uri 'self'; 1
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=index&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=6a74ca0d-a2c7-48fb-8b39-47d87d642fa2 1
default-src 'self'  https://www.google-analytics.com/j/collect https://www.facebook.com/tr/ https://stats.g.doubleclick.net/j/collect; script-src 'self'  https://*.rietumu.lv  https://*.rietumu.com https://*.rietumu.ru https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net/ 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net  https://www.google.com/ads/ https://www.google.lv/ads/ data:; frame-src https://*.rietumu.lv https://*.rietumu.com https://*.rietumu.ru https://www.google.com  https://www.facebook.com https://www.youtube.com; object-src 'none'; 1
frame-ancestors https://*.stoiximan.com.cy:* 1
frame-ancestors 'self' *.exocad.com *.excocad.net; 1
http://localhost:* file: *.labanquepostale.fr 1
media-src *.yandex.net yandex.ru yastatic.net blob: yandex.st *.strm.yandex.ru data: content.adfox.ru yastat.net strm.yandex.ru banners.adfox.ru;style-src zen.yandex.kg yastatic.net content.adfox.ru banners.adfox.ru yandex.st 'unsafe-inline' yastat.net;default-src yastat.net awaps.yandex.net awaps.yandex.ru zen.yandex.kg yastatic.net;script-src yastat.net mc.yandex.kg banners.adfox.ru ads.adfox.ru 'nonce-/g1/lWtXIDFdBzVozKu7bQ==' yandex.st yandex.kg mc.yandex.ru yandex.ru yastatic.net ads6.adfox.ru an.yandex.ru zen.yandex.kg;font-src yastat.net an.yandex.ru zen.yandex.kg yastatic.net 'self' data:;img-src verify.yandex.ru amc.yandex.ru gdero.hit.gemius.pl banners.adfox.ru pixel.adlooxtracking.com yandex.ru favicon.yandex.net 'self' ads.adfox.ru data: *.verify.yandex.ru mc.yandex.com wcm.solution.weborama.fr wcm-ru.frontend.weborama.fr *.tns-counter.ru zen.s3.yandex.net ad.doubleclick.net *.mediascope.mc.yandex.ru awaps.yandex.ru an.yandex.ru yastatic.net yastat.net awaps.yandex.net mc.yandex.kg s3.mds.yandex.net bs.serving-sys.com avatars-fast.yandex.net px.moatads.com ad.adriver.ru yandex.kg mc.yandex.ru gdeby.hit.gemius.pl zen.yandex.kg ads6.adfox.ru mc.admetrica.ru content.adfox.ru avatars.mds.yandex.net;child-src yastat.net awaps.yandex.net mc.yandex.kg *.yandexadexchange.net banners.adfox.ru *.yandex.ru mc.yandex.md yandexadexchange.net blob: yandex.kg mc.yandex.ru yandex.ru yastatic.net zen.yandex.kg;connect-src yandex.st jstracer.yandex.ru *.strm.yandex.ru *.strm.yandex.net awaps.yandex.ru an.yandex.ru yastatic.net mc.yandex.kg yastat.net awaps.yandex.net yandex.kg mc.yandex.ru matchid.adfox.yandex.ru ads6.adfox.ru zen.yandex.kg yandex.ru strm.yandex.ru yabs.yandex.ru adfox.yandex.ru mc.admetrica.ru ads.adfox.ru;report-uri https://csp.yandex.net/csp?project=morda&from=morda.spok.kg&showid=1609208817.69002.85367.146753&h=stable-morda-man-yp-365&csp=new&date=20201229&yandexuid=6109249761609208817 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' matomo.leisink.net; img-src * data; frame-src 'self' https://www.youtube.com/ 1
default-src 'self' http: https: data: blob: 'unsafe-inline' http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com 'unsafe-eval'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.xbox-interactive.com tagmanager.google.com api.getaddress.io static.addtoany.com connect.facebook.net d10lpsik1i8c69.cloudfront.net 'unsafe-inline'; style-src 'self' fonts.googleapis.com fonts.gstatic.com tagmanager.google.com d10lpsik1i8c69.cloudfront.net *.xbox-interactive.com 'unsafe-inline'; font-src 'self' fonts.googleapis.com fonts fonts.gstatic.com d10lpsik1i8c69.cloudfront.net *.xbox-interactive.com data:; img-src 'self' *.google-analytics.com *.gstatic.com *.googleapis.com s3-eu-west-1.amazonaws.com *.cdninstagram.com d10lpsik1i8c69.cloudfront.net *.xbox-interactive.com data:; frame-src *; connect-src * 1
default-src data: https:; script-src data: 'unsafe-inline' 'unsafe-eval' https:; object-src data: https:; style-src data: 'unsafe-inline' https:; img-src data: https:; media-src data: https:; frame-src data: https:; font-src 'self' data: https:; connect-src data: https:; base-uri 'self'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com reclameland.grafiportal.nl reclamelandstaging.grafiportal.nl *.hotjar.io *.hotjar.com *.cloudflare.com *.gstatic.com *.youtube.com *.google.nl *.bootstrapcdn.com *.doubleclick.net *.visualwebsiteoptimizer.com *.facebook.net *.facebook.com *.bing.com *.googleapis.com *.purechat.com *.purechatcdn.com wss://*.purechat.com *.amazonaws.com *.reclameland.nl *.tradetracker.net  *.twitter.com *.optimizely.com *.google.com www.googleadservices.com *.simian.nl office.simian.nl:3030; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.google-analytics.com www.googletagmanager.com reclameland.grafiportal.nl reclamelandstaging.grafiportal.nl *.hotjar.io *.hotjar.com *.cloudflare.com *.gstatic.com *.youtube.com *.google.nl *.bootstrapcdn.com *.doubleclick.net *.visualwebsiteoptimizer.com *.facebook.net *.facebook.com *.bing.com *.googleapis.com *.purechat.com *.purechatcdn.com wss://*.purechat.com *.amazonaws.com *.reclameland.nl *.tradetracker.net *.twitter.com *.optimizely.com *.google.com www.googleadservices.com *.simian.nl office.simian.nl:3030; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.hotjar.com ajax.googleapis.com www.google-analytics.com www.googletagmanager.com www.youtube.com www.google.com www.gstatic.com cdn.ckeditor.com; style-src 'self' 'unsafe-inline' cdn.ckeditor.com; img-src http: https: data:; frame-src 'self' www.google.com www.youtube.com *.hotjar.com public.tableau.com *.sea.gob.cl; font-src 'self' *.hotjar.com ; connect-src 'self' *.hotjar.com *.hotjar.io *.google-analytics.com *.doubleclick.net; report-uri /report-csp-violation 1
frame-ancestors korzo.nl 1
default-src  https:;  script-src 'unsafe-inline' 'self' data: https:;  img-src 'self' data: https:;  style-src 'self' 'unsafe-inline' https:;  base-uri https://analisi-logica.it;  form-action 'self';  object-src 'none';  manifest-src  data: https:; 1
frame-ancestors 'self'; script-src 'self' 'unsafe-inline' geodata.nationaalgeoregister.nl *.tile.openstreetmap.org maps.googleapis.com www.youtube.com s.ytimg.com www.googletagmanager.com www.google-analytics.com static.hotjar.com script.hotjar.com tagmanager.google.com www.google.com www.gstatic.com optimize.google.com https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://www.googleadservices.com https://googleads.g.doubleclick.net;style-src 'self' 'unsafe-inline' geodata.nationaalgeoregister.nl *.tile.openstreetmap.org fonts.googleapis.com tagmanager.google.com www.google.com optimize.google.com; img-src 'self' data: geodata.nationaalgeoregister.nl *.tile.openstreetmap.org maps.googleapis.com maps.gstatic.com csi.gstatic.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com ssl.gstatic.com www.gstatic.com www.google.com optimize.google.com static.hotjar.com script.hotjar.com www.google.nl; 1
default-src 'self' https://www.googletagmanager.com; frame-ancestors 'self'; frame-src 'self' https://www.google.com/recaptcha/ https://www.youtube.com/; base-uri 'self'; form-action 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.youtube.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; img-src 'self' 'unsafe-inline' data: https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://s.ytimg.com https://img.youtube.com https://*.tile.openstreetmap.org; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net; child-src 'self' https://www.youtube.com; 1
default-src 'self' *.cni.net.id *.addthis.com *.tawk.to *.googletagmanager.com  *.cloudflare.com *.google-analytics.com wss://*.tawk.to https://www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cni.net.id *.tawk.to *.jquery.com *.addthis.com *.moatads.com  *.addthisedge.com *.googletagmanager.com  *.cloudflare.com *.google-analytics.com wss://*.tawk.to https://cjshare.com *.cjshare.com *.cleverjump.org *.jsdelivr.net https://sharebutton.net *.sharebutton.net https://fonts.gstatic.com https://static.addtoany.com; style-src 'self' 'unsafe-inline' *.cni.net.id *.jsdelivr.net https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://use.fontawesome.com; img-src data: *; object-src 'none'; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.cni.net.id https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com 1
frame-ancestors 'self'; object-src https://*.ediblearrangements.ca/; media-src https://*.ediblearrangements.ca/ 1
default-src 'unsafe-inline' https://www.calypso.com/ https://helpdesk.calypso.com/; script-src 'unsafe-inline' https://www.calypso.com/ https://helpdesk.calypso.com/; style-src 'unsafe-inline' https://www.calypso.com/ https://helpdesk.calypso.com/ 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://chat.aiaibot.com https://chat-pr823.aiaibot.dev https://cdn.jsdelivr.net/npm/promise-polyfill@8/dist/polyfill.min.js https://e.issuu.com https://graph.facebook.com https://maps.google.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com/jsapi https://www.gstatic.com https://s7.addthis.com https://m.addthis.com https://z.moatads.com/addthismoatframe568911941483/moatframe.js https://v1.addthisedge.com https://service.newhome.ch/v1/ortschaften/suche https://siteimproveanalytics.com/js/siteanalyze_6012616.js https://unblu.cloud https://www.riddle.com/files/js/embed.js https://swisspost.opendatasoft.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unblu.cloud https://www.riddle.com https://chat-pr823.aiaibot.dev https://chat.aiaibot.com https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com https://unblu.cloud  https://netdna.bootstrapcdn.com/font-awesome/4.7.0/fonts/; img-src 'self' data: https://www.zugerkb.ch https://maps.google.com https://maps.gstatic.com https://www.google.ch https://www.google.com https://www.google-analytics.com https://unblu.cloud https://6012616.global.siteimproveanalytics.io https://www.facebook.com/tr/ https://restcountries.eu/data/ https://www.cu3.ch/zgkb/; frame-src 'self' https://e.issuu.com https://www.youtube.com https://s7.addthis.com https://www.contentupdate.net/zgkb/nlreg.aspx https://www.google.com https://chat.aiaibot.com https://chat.aiaibot.dev https://www.riddle.com https://player.vimeo.com https://b2c-prod.netcetera.ch https://tp.srgssr.ch https://video.eko.com/; connect-src 'self' https://m.addthis.com https://s7.addthis.com https://unblu.cloud https://unblu.cloud wss://unblu.cloud https://api.aiaibot.com wss://api.aiaibot.com https://api.aiaibot.dev wss://api.aiaibot.dev https://swisspost.opendatasoft.com https://stats.g.doubleclick.net https://www.google-analytics.com https://tp.srgssr.ch https://sentry.aiaibot.com/api/2/; object-src 'none'; plugin-types application/pdf; report-uri https://zgkb.report-uri.com/r/d/csp/enforce; 1
frame-ancestors 'self' tiffinmotorhomes.sandbox.us kioskmap.s3.amazonaws.com; 1
script-src 'unsafe-inline' *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net c.imedia.cz *.hotjar.com tagmanager.google.com www.google.com www.gstatic.com; style-src 'self' 'unsafe-inline' tagmanager.google.com cdnjs.cloudflare.com fonts.googleapis.com; report-uri /csp 1
default-src 'self' www.mijngezondheid.net; img-src 'self' data: home.mijngezondheid.net blob: https://www.mijngezondheid.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' home.mijngezondheid.net maps.googleapis.com www.google.com www.gstatic.com resource://pdf.js/; style-src 'self' 'unsafe-inline'; object-src 'self' blob: www.mijngezondheid.net; base-uri 'self' resource://pdf.js/; frame-ancestors 'self'; form-action 'self'; child-src 'self' blob: www.mijngezondheid.net https://player.vimeo.com www.gstatic.com www.google.com resource://pdf.js/ 1
default-src 'self' wogadobeanalytics.sc.omtrdc.net dpm.demdex.net *.cwp-stg.sg *.cwp.sg; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.wogaa.sg *.dcube.cloud *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com cdn.ampproject.org api-public.addthis.com assets.adobedtm.com s7.addthis.com ajax.googleapis.com www.google-analytics.com *.cwp-stg.sg *.cwp.sg https://m.addthisedge.com https://m.addthis.com https://stage4a.flexanswer.com; style-src 'self' 'unsafe-inline' *.wogaa.sg *.dcube.cloud *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com fonts.googleapis.com *.cwp-stg.sg *.cwp.sg https://stage4a.flexanswer.com; font-src 'self' assets.wogaa.sg fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://stage4a.flexanswer.com https://s3-us-west-2.amazonaws.com; img-src 'self' cm.everesttech.net dpm.demdex.net wogadobeanalytics.sc.omtrdc.net *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com https://stage4a.flexanswer.com; media-src 'self' data: blob:; frame-src 'self' *.shorturl.at shorturl.at www.facebook.com form.gov.sg www.youtube.com www.onemap.sg fast.wogaa.demdex.net wogaa.demdex.net www.google.com tools.onemap.sg forms.cwp.gov.sg *.cwp-stg.sg *.cwp.sg https://s7.addthis.com; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; connect-src 'self' *.wogaa.sg *.dcube.cloud wogadobeanalytics.sc.omtrdc.net dpm.demdex.net accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://m.addthis.com; object-src 'self' *.cwp-stg.sg *.cwp.sg; 1
frame-ancestors http://docplanner-front-test.docplanner.com https://docplanner-front-test.docplanner.com *.doctoralia.cl doctoraliaone-cl2-candidate.azurewebsites.net 1
frame-ancestors 'self' https://hierklimaatabonnement.nl https://*.hierklimaatabonnement.nl 1
child-src 'self' 'nonce-75fbe73f3c7f7eab3da55d666867bb7f' www.youtube.com 9917216.fls.doubleclick.net sc-static.net tr.snapchat.com gum.criteo.com/syncframe static.criteo.net bid.g.doubleclick.net; 1
default-src data: 'self' *; script-src data: 'self' 'unsafe-inline' 'unsafe-eval' *; img-src blob: data: 'self' *; style-src data: 'self' 'unsafe-inline' *; font-src data: 'self' *; frame-src data: 'self' *; object-src data: 'self' *; connect-src data: 'self' * 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-ZDliMzYzMzAtZWYxNS00Y2JkLTlkYzYtMWIxNTlkZmQ1YzAw'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
default-src https://d27urz3c38hyx4.cloudfront.net; img-src https://d27urz3c38hyx4.cloudfront.net data:; style-src https://d27urz3c38hyx4.cloudfront.net 'unsafe-inline'; script-src https://d27urz3c38hyx4.cloudfront.net; connect-src 'self'; frame-src 'self'; frame-ancestors 'none'; object-src 'none'; form-action 'self'; base-uri 'none' 1
default-src 'self' https://easypay.in; connect-src 'self' https://wsoj1u5p09.execute-api.ap-south-1.amazonaws.com/easypay-stag1/contact-us-ep; img-src 'self' https://* 'unsafe-inline'; script-src 'self' https://* 'unsafe-inline'; style-src 'self'; object-src 'none' 'unsafe-inline' 1
default-src https: 'unsafe-eval' 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data: blob: *; media-src https: data: blob: *; object-src 'none'; frame-ancestors 'none'; connect-src *; base-uri 'self'; upgrade-insecure-requests; 1
font-src *.authorize.net *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.braintreegateway.com *.braintree-api.com *.ytimg.com *.signifyd.com *.cloudflare.com *.google.com https://www.google-analytics.com/ https://www.googleadservices.com/ https://www.googletagmanager.com/ https://chimpstatic.com/ *.nr-data.net *.newrelic.com *.vimeo.com *.paypal.com *.paypalobjects.com *.usersnap.com https://www.youtube.com/ *.liveperson.net *.bootstrapcdn.com *.googleapis.com https://*.gstatic.com/ https://*.bing.com https://*.luckyorange.net https://*.lpsnmedia.net 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com https://www.google.com/ *.braintreegateway.com *.braintree-api.com *.bootstrapcdn.com *.googleapis.com https://*.gstatic.com/ https://*.lpsnmedia.net/ https://*.doubleclick.net/ https://*.bing.com https://*.luckyorange.net https://*.lpsnmedia.net *.liveperson.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.authorize.net *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.braintreegateway.com *.braintree-api.com *.ytimg.com *.signifyd.com *.cloudflare.com *.google.com https://www.google-analytics.com/ https://www.googleadservices.com/ https://www.googletagmanager.com/ https://chimpstatic.com/ *.nr-data.net *.newrelic.com *.vimeo.com *.paypal.com *.paypalobjects.com *.usersnap.com https://stats.g.doubleclick.net/ https://www.youtube.com/ *.liveperson.net https://www.polycase.com/ *.magentocommerce.com data: https://amasty.com/ *.bootstrapcdn.com *.googleapis.com https://*.gstatic.com/ https://*.doubleclick.net/ https://*.bing.com https://*.luckyorange.net https://*.lpsnmedia.net 'self' 'unsafe-inline'; script-src assets.adobedtm.com js.authorize.net jstest.authorize.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com js.braintreegateway.com s.ytimg.com video.google.com vimeo.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com *.authorize.net *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.braintreegateway.com *.braintree-api.com *.ytimg.com *.signifyd.com *.cloudflare.com *.google.com https://www.google-analytics.com/ https://www.googleadservices.com/ https://www.googletagmanager.com/ https://chimpstatic.com/ *.nr-data.net *.newrelic.com *.vimeo.com *.paypal.com *.paypalobjects.com *.usersnap.com https://www.google.com/recaptcha/ https://*.gstatic.com/ https://www.youtube.com/ *.liveperson.net *.bootstrapcdn.com *.googleapis.com https://*.doubleclick.net/ https://*.cloudfront.net/ https://*.bing.com https://*.luckyorange.net https://*.lpsnmedia.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.authorize.net *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.braintreegateway.com *.braintree-api.com *.ytimg.com *.signifyd.com *.cloudflare.com *.google.com https://www.google-analytics.com/ https://www.googleadservices.com/ https://www.googletagmanager.com/ https://chimpstatic.com/ *.nr-data.net *.newrelic.com *.vimeo.com *.paypal.com *.paypalobjects.com *.usersnap.com https://www.youtube.com/ *.liveperson.net *.bootstrapcdn.com *.googleapis.com https://*.gstatic.com/ https://*.doubleclick.net/ https://*.bing.com https://*.luckyorange.net https://*.lpsnmedia.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.lpsnmedia.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.authorize.net *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.braintreegateway.com *.braintree-api.com *.ytimg.com *.signifyd.com *.cloudflare.com *.google.com https://www.google-analytics.com/ https://www.googleadservices.com/ https://www.googletagmanager.com/ https://chimpstatic.com/ *.nr-data.net *.newrelic.com *.vimeo.com *.paypal.com *.paypalobjects.com *.usersnap.com https://www.youtube.com/ *.liveperson.net *.bootstrapcdn.com *.googleapis.com https://*.gstatic.com/ https://*.doubleclick.net/ https://*.bing.com https://*.luckyorange.net https://*.lpsnmedia.net 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' bongacams.com *.bongacams.com ymetrica1.com mc.yandex.ru cam.bet *.cam.bet cdn.fluidplayer.com movcpm.com *.movcpm.com greedseed.world xmjvf.com *.xmjvf.com 9v5.ru *.9v5.ru *.adtng.com adtng.com http://87.98.176.191 http://176.9.86.142 http://176.9.142.103 http://144.76.24.149 http://136.243.73.233 http://148.251.0.18 http://144.76.218.27 http://148.251.136.187; style-src cdn.fluidplayer.com fonts.googleapis.com 'self' 'unsafe-inline'; script-src bongacams.com *.bongacams.com cdn.jsdelivr.net cdn.fluidplayer.com 'self' 'unsafe-eval' 'unsafe-inline'; font-src 'self' fonts.gstatic.com data:; img-src 'self' bongacams.com *.bongacams.com counter.yadro.ru mc.yandex.ru ymetrica1.com mc.webvisor.org cdn.fluidplayer.com movcpm.com *.movcpm.com xmjvf.com *.xmjvf.com 9v5.ru *.9v5.ru *.adtng.com adtng.com data:; 1
default-src 'self' http://www.youtube.com;style-src 'unsafe-inline' *;frame-src *;img-src * data:;media-src *;font-src *;connect-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://google.ru http://google.ru https://google.com http://google.com https://*.google.ru http://*.google.ru https://*.google.com http://*.google.com https://*.googletagservices.com http://*.googletagservices.com http://*.googleadservices.com https://*.googleadservices.com http://*.googlesyndication.com https://*.googlesyndication.com https://googleapis.com http://googleapis.com https://*.googleapis.com http://*.googleapis.com http://google-analytics.com https://google-analytics.com http://*.google-analytics.com https://*.google-analytics.com https://yandex.ru https://yandex.net http://yandex.ru http://yandex.net https://*.yandex.ru https://*.yandex.net http://*.yandex.ru http://*.yandex.net https://yastatic.net http://yastatic.net https://*.yastatic.net http://*.yastatic.net http://rambler.ru https://rambler.ru http://*.rambler.ru https://*.rambler.ru https://vk.com http://vk.com http://*.vkontakte.ru/ https://*.vk.com http://*.vk.com https://*.facebook.com http://lc2ads.ru http://ladycash.ru http://faggrim.com http://*.lc2ads.ru http://*.ladycash.ru http://*.faggrim.com http://*.m2corp.ru http://*.pluso.ru http://*.kitbit.net http://*.insigit.com http://*.openstat.net http://*.zatexta.com http://*.addthis.com http://*.yandex.st http://*.facebook.net http://*.twitter.com http://*.userapi.com https://*.yandex.st https://*.facebook.net https://*.twitter.com https://*.userapi.com https://*.github.com https://*.githubusercontent.com http://*.disqus.com/ https://*.gstatic.com http://*.disquscdn.com http://*.lcads.ru http://*.teaser.cc http://*.vn-chk777.com/ http://*.ads1-adnow.com/ http://*.shareclods.com http://*.quicklinks.com.ua http://vkontakte.ru/ http://shareclods.com http://*.ladycoin.ru http://*.poketall.ru http://*.cashandfavor.ru http://*.purecash.ru http://*.busyprice.ru http://*.servemoney.ru http://*.levelpay.ru http://*.goodkind.ru http://openstat.net https://openstat.net http://gadali.ru/js/ http://video.rutube.ru http://*.purecapital.ru http://userapi.com/ http://*.cashheaven.ru http://*.payandpray.ru http://*.moneytrap.ru http://*.pandre10.ru http://zatexta.com http://yandex.st https://yandex.st http://n.adonweb.ru http://kitbit.net/kb.js http://front.facetz.net https://*.users-api.com https://xlog.info https://*.vn-chk123.com http://*.users-api.com  http://xlog.info http://*.vn-chk123.com http://*.cdn1now.com https://*.cdn1now.com http://cdn1now.com https://cdn1now.com http://*.cdn2now.com https://*.cdn2now.com http://cdn2now.com https://cdn2now.com http://*.cdn3now.com https://*.cdn3now.com http://cdn3now.com https://cdn3now.com http://*.cdn4now.com https://*.cdn4now.com http://cdn4now.com https://cdn45now.com http://*.cdn5now.com https://*.cdn5now.com http://cdn5now.com https://cdn5now.com http://*.cdn6now.com https://*.cdn6now.com http://cdn6now.com https://cdn6now.com http://*.cdn7now.com https://*.cdn7now.com http://cdn7now.com https://cdn7now.com http://*.cdn8now.com https://*.cdn8now.com http://cdn8now.com https://cdn8now.com http://*.cdn9now.com https://*.cdn9now.com http://cdn9now.com https://cdn9now.com http://*.cdn10now.com https://*.cdn10now.com http://cdn10now.com https://cdn10now.com ;report-uri /csp/log.php 1
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' 1
frame-ancestors http://www.commercialuavnews.com https://divcomplatform.s3.amazonaws.com 1
frame-ancestors 'self' https://weltladen-fachtage.expo-ip.com http://weltladen-fachtage.expo-ip.com https://weltladen-fachtageadmin.expo-ip.com; 1
child-src 'self' https://www.youtube.com https://disqus.com; connect-src *; default-src 'self'; img-src 'self' https://ws-na.amazon-adsystem.com https://ir-na.amazon-adsystem.com https://www.google-analytics.com data: blob: https://referrer.disqus.com; font-src 'self' https://fonts.gstatic.com; object-src 'self'; media-src 'self' blob:; manifest-src 'self'; script-src 'self' 'nonce-28d5987b-90a9-481a-9e2e-05ead59fc4d7' 'unsafe-inline' https://cdn.polyfill.io https://www.google-analytics.com https://ainoobcom.disqus.com https://appsforoffice.microsoft.com https://ajax.aspnetcdn.com data:; style-src 'self' 'unsafe-inline' blob: https://cdn.rawgit.com/milligram/milligram/master/dist/milligram.min.css https://fonts.googleapis.com https://c.disquscdn.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' vk.com https://login.vk.com http://mc.yandex.ru https://apis.google.com http://translate.google.com http://pagead2.googlesyndication.com https://translate.googleapis.com http://connect.facebook.net https://api-maps.yandex.ru http://ajax.googleapis.com http://api-maps.yandex.ru http://cdn.jquerytools.org http://releases.flowplayer.org http://flash.flowplayer.org https://maps.google.com http://maps.google.com http://cbk0.googleapis.com http://mt0.googleapis.com https://platform.twitter.com https://connect.facebook.net  http://update.consultsystems.ru http://mt1.googleapis.com https://ajax.googleapis.com http://maps.googleapis.com https://cbks0.googleapis.com https://mts1.googleapis.com http://maps.gstatic.com https://mts0.googleapis.com http://platform.twitter.com http://consultsystems.ru https://maps.googleapis.com http://www.google-analytics.com https://maps.gstatic.com http://userapi.com https://vk.com mc.yandex.ru clck.yandex.ru yandex.st; frame-src 'self' vk.com http://platform.twitter.com http://www.facebook.com https://www.facebook.com http://static.ak.facebook.com http://awaps.yandex.ru https://apis.google.com https://s-static.ak.facebook.com https://vk.com https://login.vk.com mc.yandex.ru www.youtube.com; connect-src 'self' mc.yandex.ru http://vpiter.tv https://www.youtube.com https://apis.google.com; report-uri http://vpiter.com/csp.php; 1
default-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' https:; font-src 'self' data: fonts.gstatic.com; frame-src 'self' https:; object-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; upgrade-insecure-requests; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
frame-ancestors 'self' *.cnbc.com *.cnbcevents.com *.cnbccouncils.com *.acorns.com; 1
default-src 'self';       style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://dipioubot-proxy.orizon.com.br;       script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com/ https://dipioubot-proxy.orizon.com.br;       img-src 'self' https://www.google-analytics.com https://dipioubot-proxy.orizon.com.br;       connect-src 'self' https://www.google-analytics.com;       font-src 'self' https://fonts.gstatic.com;       frame-src 'self' https://www.google.com https://dipioubot-front.orizon.com.br; 1
script-src *.frb.org *.googleapis.com *.addthis.com *.youtube.com *.google-analytics.com googlemaps.github.io *.google.com *.gstatic.com *.federalreserve.org *.addthisedge.com platform.twitter.com syndication.twitter.com cdn.syndication.twimg.com s.ytimg.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src *;base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src * data:;object-src 'none';script-src 'self' https://*.paypal.com https://www.paypalobjects.com https://widget.trustpilot.com https://connect.facebook.net https://platform.twitter.com https://www.googletagmanager.com https://*.zdassets.com https://button.aftership.com https://cdn.shoppinggives.com https://cdn.attn.tv https://*.nosto.com https://www.lightboxcdn.com https://js-agent.newrelic.com https://www.googleadservices.com https://*.cloudfront.net https://apis.google.com https://lightboxapi.azurewebsites.net https://bam.nr-data.net https://bat.bing.com https://s.pinimg.com https://*.doubleclick.net https://www.google-analytics.com https://storage.googleapis.com https://static.criteo.net https://*.criteo.com https://*.jst.ai https://*.braintreegateway.com https://*.noibu.com https://static.cloudflareinsights.com/ https://modli.attn.tv/ data: 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval';script-src-attr 'none';style-src 'self' data: 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.criteo.com https://*.trustpilot.com https://connect.facebook.net https://platform.twitter.com https://*.lightboxcdn.com https://*.noibu.com https://*.jst.ai https://*.braintreegateway.com https://modli.attn.tv/ https://static.cloudflareinsights.com/;upgrade-insecure-requests;frame-src default-src: https://platform.twitter.com https://widget.trustpilot.com https://gum.criteo.com https://www.facebook.com https://www.paypal.com https://www.paypalobjects.com https://*.doubleclick.net https://*.jst.ai https://*.noibu.com https://*.paypal.com https://*.braintreegateway.com https://modli.attn.tv/ https://static.cloudflareinsights.com/ 1
default-src 'self' https://apply5.lumessetalentlink.com www.stoneforest.com.sg stoneforest.com.sg https://stoneforest.com.sg http://stoneforest.com.sg https://www.stoneforest.com.sg http://www.stoneforest.com.sg; script-src https://apply5.lumessetalentlink.com *.linkedin.com/ https://code.jquery.com https://stackpath.bootstrapcdn.com www.stoneforest.com.sg stoneforest.com.sg https://stoneforest.com.sg http://stoneforest.com.sg https://www.stoneforest.com.sg http://www.stoneforest.com.sg 'unsafe-inline' 'unsafe-eval' *.stoneforest.com.sg https://stoneforest.com.sg/ *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com https://platform.stumbleupon.com/1/widgets.js http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com cdn.ampproject.org https://www.googletagmanager.com v1.addthis.com/ v1.addthisedge.com/ s7.addthis.com/ https://graph.facebook.com/ http://graph.facebook.com/; style-src 'self' 'unsafe-inline' https://apply5.lumessetalentlink.com/ https://maxcdn.bootstrapcdn.com/ *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; font-src 'self' https://stats.g.doubleclick.net https://apply5.lumessetalentlink.com https://maxcdn.bootstrapcdn.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src https://www.google.com/ https://www.google.com.sg https://stats.g.doubleclick.net www.stoneforest.com.sg stoneforest.com.sg https://stoneforest.com.sg http://stoneforest.com.sg https://www.stoneforest.com.sg http://www.stoneforest.com.sg *.stoneforest.com.sg *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com; media-src 'self' data: blob:; frame-src https://www.googletagmanager.com https://www.youtube.com/ *.linkedin.com/ www.stoneforest.com.sg stoneforest.com.sg https://stoneforest.com.sg http://stoneforest.com.sg https://www.stoneforest.com.sg http://www.stoneforest.com.sg http://s7.addthis.com/; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; connect-src 'self' www.google-analytics.com accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://apply5.lumessetalentlink.com/ https://journey-service.tb.lumesse.com https://message-broker.tb.lumesse.com www.stoneforest.com.sg stoneforest.com.sg https://stoneforest.com.sg http://stoneforest.com.sg https://www.stoneforest.com.sg http://www.stoneforest.com.sg *.linkedin.com/ v1.addthis.com/ v1.addthisedge.com/ s7.addthis.com/; 1
frame-ancestors 'self' www.amway.com.au www.amway.co.nz www.amway.com.vn www.amway.my www.amway.sg www.amway.com.bn www.amway.com.ph admin.amway.my admin.amway.sg admin.amway.com.bn 1
frame-ancestors https://*.asus.com http://*.asus.com https://*.asus.com.cn http://*.asus.com.cn https://asus.todayir.com.tw http://asus.todayir.com.tw https://tongji.baidu.com 1
default-src yastatic.net yastat.net zen.yandex.tm awaps.yandex.ru awaps.yandex.net;connect-src *.strm.yandex.ru yastatic.net awaps.yandex.ru yandex.tm awaps.yandex.net ads6.adfox.ru strm.yandex.ru yandex.ru matchid.adfox.yandex.ru adfox.yandex.ru *.strm.yandex.net mc.yandex.ru zen.yandex.tm ads.adfox.ru yandex.st jstracer.yandex.ru an.yandex.ru mc.admetrica.ru yastat.net yabs.yandex.ru mc.yandex.tm;script-src yastatic.net mc.yandex.ru ads6.adfox.ru zen.yandex.tm yandex.tm ads.adfox.ru yandex.st yastat.net 'nonce-jZ4sKYkY/MmtG5eapiAInQ==' an.yandex.ru yandex.ru mc.yandex.tm banners.adfox.ru;child-src yandex.ru yastat.net *.yandexadexchange.net mc.yandex.md yandexadexchange.net banners.adfox.ru mc.yandex.tm *.yandex.ru mc.yandex.ru yastatic.net blob: yandex.tm zen.yandex.tm awaps.yandex.net;style-src content.adfox.ru banners.adfox.ru zen.yandex.tm yandex.st yastatic.net yastat.net 'unsafe-inline';font-src zen.yandex.tm yastatic.net data: yastat.net 'self' an.yandex.ru;report-uri https://csp.yandex.net/csp?project=morda&from=morda.spok.tm&showid=1609227076.20524.85252.147837&h=stable-morda-man-yp-522&csp=new&date=20201229&yandexuid=4323469411609227076;media-src *.yandex.net banners.adfox.ru yandex.ru strm.yandex.ru data: yastat.net yandex.st blob: content.adfox.ru *.strm.yandex.ru yastatic.net;img-src s3.mds.yandex.net amc.yandex.ru pixel.adlooxtracking.com ads.adfox.ru ad.adriver.ru favicon.yandex.net mc.admetrica.ru zen.s3.yandex.net avatars.mds.yandex.net gdeby.hit.gemius.pl yastatic.net *.verify.yandex.ru yandex.tm awaps.yandex.ru content.adfox.ru yandex.ru 'self' ad.doubleclick.net px.moatads.com avatars-fast.yandex.net mc.yandex.ru zen.yandex.tm *.tns-counter.ru an.yandex.ru yastat.net data: bs.serving-sys.com wcm.solution.weborama.fr mc.yandex.tm mc.yandex.com ads6.adfox.ru awaps.yandex.net verify.yandex.ru *.mediascope.mc.yandex.ru gdero.hit.gemius.pl wcm-ru.frontend.weborama.fr banners.adfox.ru 1
frame-ancestors 'self' acc.piwik.lv.nl 1
default-src 'self' 'unsafe-inline' https: blob: data: *.able-group.de *.ferchau.com                                         *.mapbox.com *.pubmatic.com *.criteo.net *.criteo.com *.doubleclick.net                                         www.google-analytics.com www.googletagmanager.com *.youtube.com *.facebook.com                                         *.fbcdn.net *.googleusercontent.com *.twitter.com *.twimg.com                                         wss://www.ferchau.com wss://ferchau-test.able-plattform.de;                                         frame-ancestors *.facebook.com hnitbjoerg.able-group.de                                         hnitbjoerg-live.able-plattform.de hnitbjoerg-test.able-plattform.de; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.googletagmanager.com *.amplitude.com *.adrifund.com *.funde.no *.tinymce.com *.karolinafund.com *.crowdfarm.dk *.lemonway.fr *.payxpert.com d2tnn0p1wwhikn.cloudfront.net clients1.google.com cse.google.com www.google.com *.google-analytics.com *.facebook.net *.facebook.com *.vimeo.com *.addthis.com *.googleapis.com *.bootstrapcdn.com stats.g.doubleclick.net *.soundcloud.com soundcloud.com *.youtube.com *.w3.org *.ogp.me *.mailerlite.com *.gstatic.com;img-src * blob:;font-src data: d2tnn0p1wwhikn.cloudfront.net *.tinymce.com fonts.gstatic.com 'self' *.bootstrapcdn.com;style-src *.tinymce.com www.google.com d2tnn0p1wwhikn.cloudfront.net *.addthis.com 'self' 'unsafe-inline' cse.google.com *.bootstrapcdn.com *.googleapis.com; frame-src 'self' *.vimeo.com *.facebook.com *.youtube.com *.soundcloud.com *.google.com 1
default-src 'self'; connect-src 'self' wss://dev-ws.switcheo.io wss://test-ws.switcheo.io wss://ws.switcheo.io https://*.switcheo.network:* https://min-api.cryptocompare.com https://*.infura.io https://geoip-js.maxmind.com https://geoip-js.com https://seed1.cityofzion.io https://seed2.cityofzion.io https://seed3.cityofzion.io https://seed4.cityofzion.io https://seed5.cityofzion.io https://seed1.red4sec.com:10332 https://sentry.io https://www.google-analytics.com https://cdn.contentful.com https://ethereum-rpc.trustwalletapp.com wss://bridge.walletconnect.org wss://www.walletlink.org wss://local.get-scatter.com:50006 ws://127.0.0.1:50005 https://nodes.get-scatter.com https://dapi.o3.app:60003 http://127.0.0.1:60003 wss://dapi.o3.app:60003 https://dapi.o3.app:60004 http://127.0.0.1:60004 wss://dapi.o3.app:60004 https://jungle.obolus.com https://lightapi.eosgeneva.io https://mytokens.obolus.com:8443 https://api.light.xeos.me https://api.eosnewyork.io https://www.jungleapi.bloks.io https://www.api.bloks.io; script-src 'self' https://www.google-analytics.com https://js.maxmind.com https://info.switcheo.network https://verify.sendwyre.com https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://recaptcha.net/recaptcha/ https://connect.facebook.net/en_US/sdk.js https://platform.twitter.com/widgets.js 'sha256-5N4Pp5UCHKbIUxXXFe+KDYsfhzhQXoIzN80eQ+jF9P4=' 'sha256-/fCUycOSPg5W5rt7pgbdlufk2T9mZRRPEsV2mct1B/I=' 'sha256-WHUNY2ZcWga8vPH7Z9gTobHkZ/X9lgl1boDyScLVE8k=' 'sha256-ZvANUuHCLF2SjgsO7WxEjZOumcdB00botVDkMNymI0M=' 'sha256-atHecpNzIISu2npEMK1BU2d8nr1k602TRNTV//gRm6k=' 'sha256-ymIXlnNnf40qXRxXJpG7ta6aHSEGy8Xr4kCiHhOsVgA=' 'sha256-zp2J6ufGMxGFKz4PMh8P24xWnRSxyNbAKrsz4pNgZ7Y=' 'sha256-N9e1tGxQnBQxRZsLfacJh9nS56HygtbQL/UwfxPi8y8=' 'sha256-gRL6N+3uoaGrohPqTmYAby6loqgbS64YQX39sKNzr8U=' 'sha256-qL4IX3O24teOqU4Rpi78FaAubCS9gUHRYEErD5usI8k=' 'sha256-q35MB1EcbVIoCyGchn5I768MFmerJPSrmXGaf1dLOVU='; img-src 'self' data: ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://connect.trezor.io https://verify.sendwyre.com https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://www.walletlink.org https://widget.portis.io https://x2.fortmatic.com https://platform.twitter.com/; object-src 'none'; 1
frame-ancestors mainstreetalliance.nationbuilder.com 1
default-src 'self'; style-src 'self' *.adyen.com/ *.chargebee.com/ *.mopinion.com/ *.gstatic.com/ *.live2support.com/ *.lpsnmedia.net/ *.commander1.com/ *.bootstrapcdn.com/ *.tagcommander.com/ *.zencdn.net/ *.sharethis.com/ *.googleapis.com/ *.google.com/ *.myfonts.net/ 'unsafe-inline'; script-src 'self' *.adyen.com/ *.chargebee.com/ https://live2support.com/ *.googletagmanager.com/ *.mopinion.com/ *.ytimg.com/ *.trustcommander.net/ https://s.pinimg.com/ *.tagcommander.com/ *.facebook.net/ *.google.co.uk/ *.lpsnmedia.net/ *.hotjar.com/ *.danone-dtc.net/ *.outbrain.com/ *.googleadservices.com/ *.google-analytics.com/ *.sharethis.com *.addthis.com/ *.live2support.com/ *.doubleclick.net/ *.googleapis.com/ *.google.com/ *.theadex.com *.commander1.com/ *.liveperson.net/ *.doubleclick.net/ *.gstatic.com/ *.aptaclub.co.uk/ *.aptashop.co.uk/ *.cgbabyclub.co.uk/ *.candgshop.co.uk/ *.digital4danone.com/ *.addthisedge.com/ *.gigya.com/ *.constant.co/ *.bing.com/ *.adobedtm.com/ *.everestjs.net/ *.ads-twitter.com/ https://analytics.twitter.com/ http://danone.d3.sc.omtrdc.net/ https://sc-static.net/ *.postcodeanywhere.co.uk/ 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *.adyen.com/ *.live2support.com/ https://ca-live.adyen.com/ *.trustcommander.net/ http://danonegroup-stage.neolane.net/ *.ytimg.com/ *.cx.atdmt.com/ *.danone-dtc.net/ https://ct.pinterest.com/ *.outbrain.com/ *.danone.com/ *.commander1.com/ *.tagcommander.com/ *.lpsnmedia.net/ *.adnxs.com/ *.adition.com/ *.doubleclick.net/ *.google.co.uk/ *.google.ie/ *.theadex.com/ *.google-analytics.com/ *.google.com/ *.sharethis.com/ *.gstatic.com/ *.googleapis.com/ *.w3.org/ *.mookie1.com/ *.facebook.com/ *.googletagmanager.com/ *.bing.com/ http://t.co/ *.everesttech.net/ *.demdex.net/ *.assetsadobe2.com/ *.postcodeanywhere.co.uk/; frame-src 'self' *.adyen.com/ *.chargebee.com/ *.tohklom.com/ *.vimeo.com/ *.tagcommander.com/ https://aax-eu.amazon-adsystem.com/ *.liveperson.net/ *.live2support.com/ *.google.com/ *.lpsnmedia.net/ *.hotjar.com/ *.commander1.com/ *.proprofs.com/ *.facebook.com/ *.doubleclick.net/ *.theadex.com/ *.sharethis.com/ *.addthis.com *.youtube.com *.adsrvr.org/ *.cloudfront.net/ *.nutridrink.com.br/onde-encontrar/ *.spotify.com/ *.trustcommander.net/ *.flockler.com/ *.amazon-adsystem.com/ *.gigya.com/ *.constant.co/ *.demdex.net/ https://tr.snapchat.com/; connect-src 'self' *.adyen.com/ *.mopinion.com/ *.live2support.com/ *.addthis.com/ *.danone-dtc.net/ *.hotjar.com/ https://ct.pinterest.com/ *.privacy.trustcommander.net/ https://services.postcodeanywhere.co.uk/ *.commercetools.com/ *.google-analytics.com *.facebook.com/ *.omtrdc.net/ *.sharethis.com/ *.doubleclick.net/ https://lasteventf-tm.everesttech.net/ *.demdex.net/ *.aptaclub.co.uk/ *.aptashop.co.uk/ *.cgbabyclub.co.uk/ *.candgshop.co.uk/ *.digital4danone.com/ https://api.sphere.io/ *.sentry.io/ *.bing.com/; font-src 'self' *.adyen.com/ *.gstatic.mopinion.com/ https://gstatic.mopinion.com/ *.gstatic.com/ *.live2support.com/ *.danone-dtc.net/ https://vjs.zencdn.net/; media-src 'self' *.lpsnmedia.net/ 1
default-src 'self' 'unsafe-inline' ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' imasdk.googleapis.com https://cdn.ampproject.org https://unpkg.com https://www.google.com https://www.gstatic.com https://apps.usw2.pure.cloud https://www.googletagmanager.com http://e-certchile.cl https://www.google-analytics.com http://dhqbrvplips7x.cloudfront.net ; script-src 'self' 'unsafe-inline' 'unsafe-eval' imasdk.googleapis.com blob: https://unpkg.com https://www.google.com https://cdn.ampproject.org https://www.gstatic.com https://apps.usw2.pure.cloud https://www.google.com http://e-certchile.cl https://www.googletagmanager.com https://www.google-analytics.com http://dhqbrvplips7x.cloudfront.net ; style-src-elem 'self' https://fonts.googleapis.com 'unsafe-inline' https://unpkg.com ; frame-src 'self' https://www.youtube.com https://www.google.com; connect-src https://api.usw2.pure.cloud https://apps.usw2.pure.cloud 'self' wss://chatbotecert.sixbell.com:1880 www.google-analytics.com stats.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com data:; frame-ancestors 'self'; img-src 'self' https://unpkg.com *.tile.openstreetmap.org https://www.google.com https://www.google.cl data: https://www.google-analytics.com https://stats.g.doubleclick.net via.placeholder.com ; style-src 'self' https://fonts.googleapis.com 'unsafe-inline' https://unpkg.com 1
frame-ancestors self fasttech.com *.fasttech.com 1
frame-ancestors 'self' https://metrika.yandex.ru https://www.google.com http://webvisor.com https://analytics.google.com https://www.google-analytics.com https://ssl.google-analytics.com http://awards.ratingruneta.ru 1
default-src 'self' https: data: ;        script-src 'self' https://www.layahealthcare.ie https://*.lo.cobrowse.liveperson.net https://lpcdn.lpsnmedia.net https://accdn.lpsnmedia.net https://lptag.liveperson.net https://lo.v.liveperson.net  https://ajax.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://*.googlesyndication.com https://www.google.com https://www.google.ie https://analytics-eu.clickdimensions.com https://cdn-eu.clickdimensions.com https://twitter.com https://analytics.twitter.com https://static.ads-twitter.com https://ad.doubleclick.net https://i.ctnsnet.com https://www.gstatic.com https://*.quantserve.com https://*.quantcount.com https://*.hotjar.com 'unsafe-eval';        style-src 'self' https: data: 'unsafe-inline';        frame-ancestors 'none';        form-action 'self';        object-src 'self';        connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://googleads4.g.doubleclick.net https://www.google.com https://www.google.ie https://www.googleadservices.com https://adservice.google.com https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io;        upgrade-insecure-requests; block-all-mixed-content;        report-uri https://www.layahealthcare.ie/api/csp/report/csp-report.json; 1
script-src *.bancfirst.tv *.google.com *.gstatic.com *.typekit.net *.addthis.com *.googleapis.com *.jsdelivr.net *.googletagmanager.com *.moatads.com *.addthisedge.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval' ; style-src cdnjs.cloudflare.com *.bancfirst.bank *.googleapis.com *.google.com *.jsdelivr.net 'unsafe-inline' data:; object-src 'none';  frame-ancestors 'self' *.bancfirst.bank www.bancfirstonline.com; worker-src blob:; script-src-elem cdn.jsdelivr.net *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com *.bancfirst.bank *.googletagmanager.com *.typekit.net 'unsafe-inline'  1
default-src 'self' *.servsafe.com chooserestaurants.org *.chooserestaurants.org; script-src 'self' *.servsafe.com chooserestaurants.org *.chooserestaurants.org 'unsafe-eval' 'unsafe-inline' ajax.googleapis.com www.google-analytics.com www.googletagmanager.com www.livehelpnow.net lptag.liveperson.net public.tableau.com *.tableau.com *.tableausoftware.com googleads.g.doubleclick.net *.googleadservices.com www.googleadservices.com connect.facebook.net *.google.com *.juicer.io chooserestaurants.org *.chooserestaurants.org maxcdn.bootstrapcdn.com cdnjs.cloudflare.com use.fontawesome.com maps.googleapis.com munchkin.marketo.net impactapi.causeview.com analytics.tiktok.com sf16-scmcdn-va.ibytedtos.com; style-src 'self' *.servsafe.com chooserestaurants.org *.chooserestaurants.org 'unsafe-inline' *.googleapis.com *.juicer.io chooserestaurants.org *.chooserestaurants.org maxcdn.bootstrapcdn.com use.fontawesome.com impactapi.causeview.com; font-src 'self' *.servsafe.com chooserestaurants.org *.chooserestaurants.org fonts.gstatic.com *.juicer.io maxcdn.bootstrapcdn.com use.fontawesome.com impactapi.causeview.com; img-src 'self' data: *.servsafe.com chooserestaurants.org *.chooserestaurants.org *.juicer.io *.google.com www.livehelpnow.net cdn.livehelpnow.net www.google-analytics.com *.doubleclick.net *.google.com www.textbooks.restaurant.org flex.msn.com www.googleadservices.com i.imgur.com *.xx.fbcdn.net scontent.cdninstagram.com placehold.it live.staticflickr.com; connect-src 'self' *.servsafe.com www.juicer.io graph.facebook.com *.mktoresp.com impactapi.causeview.com; frame-ancestors 'self' *.servsafe.com *.discoverlink.com; object-src 'self' *.servsafe.com; frame-src 'self' *.servsafe.com bid.g.doubleclick.net *.discoverlink.com *.google.com www.youtube.com *.instagram.com cdn.flipsnack.com *.jotform.com; child-src 'self' *.servsafe.com bid.g.doubleclick.net 1
default-src 'self';script-src * 'unsafe-inline' 'unsafe-eval' static.cloud.coveo.com;style-src * 'unsafe-inline'; frame-src * 'unsafe-inline'; img-src * data:; connect-src * 'unsafe-inline';  font-src * 'unsafe-inline' 1
script-src 'unsafe-inline' 'unsafe-eval' https://vpx.contura.eu https://www.contura.eu https://www.googletagmanager.com https://www.google-analytics.com https://fonts.googleapis.com https://static.addtoany.com https://ads.creative-serving.com https://cdn.cookielaw.org https://fast.fonts.net https://fonts.gstatic.com https://www.gstatic.com https://ajax.googleapis.com https://optanon.blob.core.windows.net https://track.adform.net https://cm.g.doubleclick.net https://www.google.com https://www.google.se https://connect.facebook.net https://googleads.g.doubleclick.net https://www.facebook.com https://www.youtube.com https://static2.creative-serving.com https://maps.googleapis.com https://maps.gstatic.com https://secure.viewer.zmags.com https://secure.stats.zmags.com https://i.ytimg.com https://yt3.ggpht.com https://www.googleadservices.com https://web103.reachmee.com https://px.ads.linkedin.com https://www.linkedin.com https://snap.licdn.com https://portal.adway.ai https://secure.api.viewer.zmags.com https://tagmanager.google.com https://contura-oy.mynewsdesk.com https://code.jquery.com https://s.ytimg.com https://cdn.jsdelivr.net https://s2.adform.net https://cdn.mouseflow.com https://connect.getflowbox.com 1
default-src 'self'; script-src 'unsafe-inline' 'self' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com cdnjs.cloudflare.com www.googleadservices.com googleads.g.doubleclick.net a.config.skype.com b.config.skype.com swx.cdn.skype.com  www.google.com www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net www.google.co.th www.msig-thai.com cdn-akamai.mookie1.com tags.tiqcdn.com embed.typeform.com *.addthis.com *.zalo.me *.addthisedge.com *.moatads.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; img-src 'self' data: www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.co.in maps.gstatic.com maps.googleapis.com www.facebook.com www.google.co.th; frame-src 'self' www.youtube.com sp.zalo.me www.google.com bid.g.doubleclick.net  tags.tiqcdn.com 9664371.fls.doubleclick.net form.typeform.com s7.addthis.com; font-src 'self' cdnjs.cloudflare.com data: fonts.gstatic.com; connect-src 'self' browser.pipe.aria.microsoft.com sp.zalo.me www.google-analytics.com www.google.com www.google.co.in www.google.co.th stats.g.doubleclick.net *.addthis.com; report-uri /report-csp-violation 1
default-src 'self' 'unsafe-inline' *.addthis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jsdelivr.net *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.ckeditor.com *.local *.dotdemos.com *.jwplatform.com *.jwpcdn.com *.jwpsrv.com *.ytimg.com *.youtube.com cbos.gov.sd *.cbos.gov.sd *.dot.jo www.google.com s7.addthis.com m.addthisedge.com m.addthis.com cdnjs.cloudflare.com; object-src 'unsafe-inline'; style-src 'unsafe-inline' *.jsdelivr.net *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.ckeditor.com *.local *.dotdemos.com cbos.gov.sd *.cbos.gov.sd *.dot.jo *.google.com cdnjs.cloudflare.com; img-src 'self' 'unsafe-inline' data: *.jsdelivr.net *.googleapis.com *.gstatic.com *.google-analytics.com *.local *.dotdemos.com jwpltx.com *.jwpltx.com cbos.gov.sd *.cbos.gov.sd *.dot.jo stats.g.doubleclick.net *.ckeditor.com; media-src 'self' 'unsafe-inline' data: *.jsdelivr.net *.googleapis.com *.gstatic.com *.google-analytics.com *.local *.dotdemos.com cbos.gov.sd *.cbos.gov.sd *.dot.jo; frame-src 'self' 'unsafe-inline' *.googleapis.com google.com *.google.com *.gstatic.com *.youtube.com *.local *.dotdemos.com cbos.gov.sd *.gov.sd *.dot.jo *.addthis.com cbos.gov.sd:* *.google.com; font-src 'self' 'unsafe-inline' *.jsdelivr.net *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.local *.dotdemos.com *.jwpcdn.com *.jwpsrv.com cbos.gov.sd *.cbos.gov.sd *.dot.jo fonts.google.com maxcdn.bootstrapcdn.com *.google.com; connect-src 'self' 'unsafe-inline' *.googleapis.com google.com *.google.com *.gstatic.com *.youtube.com *.local *.dotdemos.com cbos.gov.sd *.gov.sd *.dot.jo *.addthis.com cbos.gov.sd:*; report-uri /admin/config/system/seckit/csp-report 1
default-src 'self' https://www.vlissingen.nl/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.vlissingen.nl https://*.zeelandveilig.nl/ https://*.google-analytics.com/ https://widgetstore.cubiss.nl https://geoviewer.windinternet.nl https://maps.googleapis.com https://maps.gstatic.com https://api.mapbox.com; worker-src blob:; connect-src 'self' https://www.vlissingen.nl/ https://*.mapbox.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://api.mapbox.com; img-src 'self' https://www.vlissingen.nl https://*.google-analytics.com/ https://stats.g.doubleclick.net/ https://maps.gstatic.com https://maps.googleapis.com https://csi.gstatic.com data: blob:; font-src 'self' https://fonts.gstatic.com; child-src 'self' https://*.woon-wijzer.com/ https://*.readspeaker.com/ https://widgetstore.cubiss.nl https://geoviewer.windinternet.nl https://*.youtube.com; media-src 'self' https://*.readspeaker.com/; 1
default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 1
frame-ancestors 'self' *.tstprep.com 1
default-src *; img-src * 'self' data: https:; style-src 'self' 'unsafe-inline'; script-src  * 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'; 1
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com cdnjs.cloudflare.com www.googletagmanager.com *.tctm.co www.google-analytics.com www.google.com www.dynamicnumbers.mediahawk.co.uk pi.pardot.com www.gstatic.com *.livechatinc.com *.cloudfront.net pages.linxglobal.com secure.livechatinc.com code.createjs.com; connect-src 'self' www.google-analytics.com www.dynamicnumbers.mediahawk.co.uk *.tctm.co stats.g.doubleclick.net settings.luckyorange.net *.googleapis.com *.visitors.live api.livechatinc.com wss:; img-src 'self' data: dashboard.umbraco.org img.youtube.com www.google.com www.google.co.uk *.cloudfront.net i.ytimg.co cdn.livechatinc.com; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com code.ionicframework.com fonts.googleapis.com *.cloudfront.net;base-uri 'self';form-action 'self';font-src 'self' maxcdn.bootstrapcdn.com code.ionicframework.com fonts.gstatic.com;frame-src 'self' www.google.com secure.livechatinc.com www.youtube.com;media-src 'self' *.cloudfront.net;worker-src 'self' blob: 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' https://fast.wistia.com https://pi.pardot.com https://static.addtoany.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://js-agent.newrelic.com https://bam.nr-data.net https://unpkg.com https://bam-cell.nr-data.net; object-src 'none'; img-src 'self' https://www.google-analytics.com data:; media-src 'self' https://embed-ssl.wistia.com; frame-src 'self' https://www.google.com https://fast.wistia.com; frame-ancestors 'self'; font-src 'self' https://maxcdn.bootstrapcdn.com data:; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://bam.nr-data.net https://bam-cell.nr-data.net; report-uri /report-csp-violation 1
frame-ancestors meusa.nationbuilder.com 1
default-src 'self' static.mycity.travel static.aigle-leysin-lesmosses.ch * 'unsafe-inline' 'unsafe-eval' data: blob:; upgrade-insecure-requests; frame-ancestors: 'self' https://static.mycity.travel *; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://static.criteo.net https://*.criteo.com https://wb.messengerpeople.com https://*.hotjar.com https://*.akamaihd.net https://*.attn.tv https://*.recaptcha.net https://isitetv.com https://*.translate.naver.net https://ln-rules.rewardstyle.com https://tr.snapchat.com https://www.shoplooks.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://services.postcodeanywhere.co.uk wss://*.hotjar.com https://*.sciencebehindecommerce.com https://*.googleapis.com https://translate.yandex.net https://*.hotjar.com https://*.akamaihd.net https://*.trustpilot.com https://*.pinterest.com https://*.bing.com https://*.doubleclick.net https://connect.facebook.net https://*.baidu.com https://*.parcellab.com https://ampcid.google.com.au; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://www.lookfantastic.com.au https://m.lookfantastic.com.au https://checkout.lookfantastic.com.au https://connect.facebook.net https://www.glossybox.at https://www.glossybox.ch https://www.glossybox.co.uk https://www.glossybox.com https://www.glossybox.de https://www.glossybox.fi https://www.glossybox.fr https://www.glossybox.ie https://www.glossybox.no https://www.glossybox.se https://www.glossybox.dk https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://static.criteo.net https://*.criteo.com https://remote.captcha.com https://*.akamaihd.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.microsofttranslator.com https://*.hotjar.com https://*.attn.tv https://*.trustpilot.com https://*.translate.naver.net https://*.bing.com https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://static.ads-twitter.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://*.shoplooks.com https://slooks.top https://slooks.me https://lantern.roeyecdn.com https://lantern.roeye.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://www.shoplooks.com https://static.shoplooks.com https://cdn.parcellab.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
frame-ancestors http://*.prosites.com https://*.prosites.com 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://newsbots.eu; img-src 'self' https: data: blob: https://newsbots.eu; style-src 'self' https://newsbots.eu 'nonce-k2oZAF6MiHS2mZZO8yM+1w=='; media-src 'self' https: data: https://newsbots.eu; frame-src 'self' https:; manifest-src 'self' https://newsbots.eu; connect-src 'self' data: blob: https://newsbots.eu https://newsbots.eu wss://newsbots.eu; script-src 'self' https://newsbots.eu; child-src 'self' blob: https://newsbots.eu; worker-src 'self' blob: https://newsbots.eu 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors https: 'self' www.benthemcrouwel.com bc-frontend.momkai.com; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'self'; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline' 1
default-src 'self' http://* https://*; script-src 'self' http://* https://* 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com cdn.ampproject.org; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; img-src 'self' http://* https://* *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com; font-src 'self' https://cdnjs.cloudflare.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; connect-src 'self' http://* https://* accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com; media-src 'self' data: blob:; child-src 'self' https://tpc.googlesyndication.com https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; 1
default-src 'self' scontent.xx.fbcdn.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://platform.twitter.com https://js-agent.newrelic.com https://bam.nr-data.net https://apis.google.com https://s7.addthis.com https://connect.facebook.net https://m.addthisedge.com https://m.addthis.com https://graph.facebook.com https://widgets.pinterest.com https://api-public.addthis.com https://scontent.xx.fbcdn.net https://q.addthis.com https://edge.addthis.com https://z.moatads.com https://v1.addthisedge.com https://www.reddit.com; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://fonts.gstatic.com https://www.golive.lamayeshe.com https://golive.lamayeshe.com; img-src * data:; media-src 'self' data: https://www.facebook.com https://www.youtube.com https://golive.lamayeshe.com https://www.golive.lamayeshe.com; frame-src 'self' data: https://www.youtube.com https://platform.twitter.com https://apis.google.com https://accounts.google.com https://staticxx.facebook.com https://s7.addthis.com https://www.facebook.com https://web.facebook.com https://syndication.twitter.com https://edge.addthis.com https://staticxx.facebook.com https://www.youtube.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://golive.lamayeshe.com https://www.golive.lamayeshe.com https://golive.lamayeshe.com; connect-src 'self' https://m.addthis.com https://syndication.twitter.com https://www.google-analytics.com https://stats.g.doubleclick.net ; report-uri /report-csp-violation 1
default-src *; script-src 'self' 'unsafe-eval' 'unsafe-inline' fanstatic.niteo.co static.woocart.com beacon-v2.helpscout.net cdn.paddle.com checkout.paddle.com woocart.com connect.facebook.net www.google-analytics.com cdn.mxpnl.com fonts.googleapis.com fonts.gstatic.com cdn.jsdelivr.net platform.twitter.com cdn.syndication.twimg.com ton.twimg.com cdn.jsdelivr.net blog.woocart.com assets.calendly.com  'self'; style-src 'self' 'unsafe-inline' fanstatic.niteo.co static.woocart.com beacon-v2.helpscout.net cdn.paddle.com checkout.paddle.com woocart.com connect.facebook.net www.google-analytics.com cdn.mxpnl.com fonts.googleapis.com fonts.gstatic.com cdn.jsdelivr.net platform.twitter.com cdn.syndication.twimg.com ton.twimg.com cdn.jsdelivr.net blog.woocart.com assets.calendly.com  'self'; img-src * data:; font-src * data: 1
default-src 'none'; script-src 'unsafe-eval' 'self' https://*.cxtrvl.com ; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://images.affinion.com https://*.cxtrvl.com; font-src 'self' data: ; connect-src 'self' https://*.cxtrvl.com; report-uri /moma/csp/v1_0/cspviolation 1
script-src 'unsafe-eval' 'unsafe-inline' liftmode.com maxcdn.bootstrapcdn.com *.lagrangesystems.net www.google-analytics.com www.gstatic.com assets.zendesk.com seal-chicago.bbb.org forms.convertkit.com static.zdassets.com ekr.zdassets.com fonts.googleapis.com cdn.convertkit.com fonts.gstatic.com ajax.googleapis.com liftmode.zendesk.com widget-mediator.zopim.com api.convertkit.com p.yotpo.com widget.trustpilot.com static.criteo.net staticw2.yotpo.com polyfills.trustpilot.com sslwidget.criteo.com dis.us.criteo.com www.googleadservices.com stats.g.doubleclick.net www.google.com surveyjs.azureedge.net cdn.mouseflow.com www.google-analytics.com forms.convertkit.com js-agent.newrelic.com *.redditstatic.com cdnjs.cloudflare.com 1
default-src *; script-src 'self' 'unsafe-inline' ce.integratedgenetics.tronestaging.com *.google.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.typekit.com *.typekit.net *.cloudflare.com *.labcorp.com *.fontawesome.com *.integratedgenetics.com *.facebook.net *.ads-twitter.com *.licdn.com *.hotjar.com *.crazyegg.com *.twitter.com fast.wistia.com cdn.jsdelivr.net *.adsrvr.org; object-src 'self' *.fontawesome.com; style-src 'self' 'unsafe-inline' *.google.com *.cloudflare.com *.labcorp.com *.fontawesome.com *.integratedgenetics.com *.typekit.net *.integratedgenetics.com ce.integratedgenetics.tronestaging.com *.twitter.com; img-src 'self' data: *.google.com *.cloudflare.com *.labcorp.com *.google-analytics.com *.typekit.net *.fontawesome.com *.integratedgenetics.com *.facebook.com *.linkedin.com t.co ce.integratedgenetics.tronestaging.com *.wistia.com px.ads.linkedin.com *.adsymptotic.com *.audacitytechnology.com *.akamaihd.net; media-src 'self' blob: *.fontawesome.com *.ads.linkedin.com *.wistia.com px.ads.linkedin.com; font-src 'self' data: *.cloudflare.com *.typekit.net *.fontawesome.com *.wistia.com px.ads.linkedin.com; worker-src blob: 1
upgrade-insecure-requests; default-src 'self' bytwork.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bytwork.com bytwork.com *.google.de *.yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru yastatic.net *.google.com *.googleapis.com *.google-analytics.com *.gstatic.com gstatic.com *.googlesyndication.com  https://*.googleapis.com https://*.gstatic.com https://gstatic.com *.googletagservices.com https://*.googlesyndication.com *.cryptocompare.com *.twitter.com *.tradingview.com *.coingecko.com *.twimg.com *.coinlib.io vk.com *.vk.com https://vk.com https://*.vk.com ok.ru *.ok.ru *.adservice.google.ru https://adservice.google.ru https://*.adservice.google.ru https://www.cryptonator.com https://files.coinmarketcap.com https://widget.coinlore.com https://coinzillatag.com https://www.googletagmanager.com https://czilladx.com https://www.worldcoinindex.com https://cdn.ckeditor.com https://*.cointraffic.io https://www.googleadservices.com https://googleads.g.doubleclick.net https://an.yandex.ru https://files.cointraffic.io https://cointraffic.io static.cryptorival.com partner.googleadservices.com public-widget.utorg.pro https://*.utorg.pro https://*.bestchange.ru; frame-src 'self' *.bytwork.com bytwork.com *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru *.google.com *.google.ru *.tradingview.com *.coinlib.io *.twitter.com *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com www.google.com youtube.ru youtube.com *.youtube.ru *.yastatic.net yastatic.net *.youtube.com *.doubleclick.net https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com apis.google.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://apis.google.com vk.com *.vk.com https://vk.com https://*.vk.com ok.ru *.ok.ru https://request-global.czilladx.com https://czilladx.com https://www.worldcoinindex.com https://files.cointraffic.io cryptorival.com twitter.com; object-src 'self' *; img-src 'self' * data:; font-src 'self' * data:; connect-src 'self' *; style-src 'unsafe-inline' 'unsafe-eval' 'self' *; base-uri 'self'; 1
default-src 'self' wss://*.tawk.to wss://*.hotjar.com https: data:;style-src 'unsafe-inline' https: ;script-src 'unsafe-inline' 'unsafe-eval' https:; form-action https:; upgrade-insecure-requests 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' * 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://code.jquery.com http://cdn.ckeditor.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' http://cdn.ckeditor.com; font-src 'self' https://fonts.gstatic.com; frame-src https://www.youtube.com/ 'self' http://iitjammu.ac.in https://www.iitjammu.ac.in https://www.facebook.com; connect-src alpha.iitjammu.ac.in 10.10.10.100 http://10.10.10.100 iitjammu.ac.in http://iitjammu.ac.in https://iitjammu.ac.in https://www.iitjammu.ac.in; img-src http://cdn.ckeditor.com http://iitjammu.ac.in https://iitjammu.ac.in https://www.iitjammu.ac.in 1
default-src 'self' 'unsafe-inline' https://stats.g.doubleclick.net googleads.g.doubleclick.net www.google-analytics.com snap.licdn.com  px.ads.linkedin.com www.youtube.com https://syndication.twitter.com assets.piraeusbankgroup.com googlevideo.com apis.google.com http://rum-collector-2.pingdom.net data: maps.googleapis.com;      style-src 'self' assets.piraeusbankgroup.com  assets.piraeusbank.gr 'unsafe-inline' fonts.googleapis.com platform.twitter.com ton.twimg.com;      script-src 'self' cdn.rawgit.com https://developers.google.com https://snap.licdn.com assets.piraeusbankgroup.com assets.piraeusbank.gr https://maps.google.com connect.facebook.net platform.twitter.com apis.google.com 'unsafe-inline' 'unsafe-eval' www.google-analytics.com maps.googleapis.com seal.thawte.com syndication.twitter.com https://cdn.syndication.twimg.com https://www.youtube.com https://s.ytimg.com http://rum-static.pingdom.net ;      font-src 'self' data: fonts.gstatic.com;     img-src 'self' data: asset.piraeusbank.gr https://maps.google.com assets.piraeusbank.gr   'unsafe-inline' assets.piraeusbankgroup.com px.ads.linkedin.com http://www.piraeusbank.gr https://www.piraeusbank.gr https://seal.thawte.com www.piraeusbankgroup.com http://rum-collector.pingdom.net  'unsafe-inline' www.google.com  syndication.twitter.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com www.google.gr csi.gstatic.com maps.gstatic.com maps.googleapis.com platform.twitter.com pbs.twimg.com o.twimg.com ton.twimg.com googleads.g.doubleclick.net img.youtube.com;      frame-src staticxx.facebook.com www.facebook.com accounts.google.com apis.google.com platform.twitter.com syndication.twitter.com 'self' www.youtube.com https://cap.attempts.securecode.com aacsw.3ds.verifiedbyvisa.com https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/www-widgetapi-vflPBjLfx/www-widgetapi.js 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-Lm/gn8u2KuDI4LJGDU3ANw' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com *.googletagmanager.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.surveymonkey.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com themes.googleusercontent.com data:; img-src 'self' neca.org *.neca.org *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com *.surveymonkey.com; media-src 'self' data: blob: prodnet.www.neca.org; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.surveymonkey.com *.neca.org; connect-src 'self' accounts.google.com www.google-analytics.com https://*.dec.sitefinity.com *.mktoresp.com *.neca.org; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://diaspodon.fr; img-src 'self' https: data: blob: https://diaspodon.fr; style-src 'self' https://diaspodon.fr 'nonce-HESqjFyyoHyWLmRkKYTJ9A=='; media-src 'self' https: data: https://diaspodon.fr; frame-src 'self' https:; manifest-src 'self' https://diaspodon.fr; connect-src 'self' data: blob: https://diaspodon.fr https://diaspodon.fr wss://diaspodon.fr; script-src 'self' https://diaspodon.fr; child-src 'self' blob: https://diaspodon.fr; worker-src 'self' blob: https://diaspodon.fr 1
frame-ancestors 'self' https://moebel-kraft.de http://images.google.de http://images.google.com https://images.google.de https://images.google.com https://ogone.test.v-psp.com https://secure.ogone.com 1
default-src 'none'; img-src 'self' data: blob: https:; media-src 'self' https://media.chitter.xyz https://media-b.chitter.xyz; script-src 'self' https://media.chitter.xyz/20_avatars.js; style-src 'self' 'unsafe-inline'; font-src 'self'; connect-src 'self' wss://chitter.xyz https://media.chitter.xyz/ https://media-b.chitter.xyz/ blob:; child-src https: blob:; report-uri https://codl.report-uri.com/r/d/csp/enforce; base-uri 'none'; manifest-src 'self' 1
frame-ancestors staging.rotterdamunlimited.com 1
default-src https: 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: fonts.gstatic.com; connect-src http://*.hotjar.com:* https://*.hotjar.com:* wss://*.hotjar.com https: https://ecs.us1.twilio.com wss://endpoint.twilio.com wss://sdkgw.us1.twilio.com wss://global.vss.twilio.com; media-src mediastream:; 1
frame-ancestors 'self' http://www.bestfoods.com unilever3.marketing.adobe.com unileverbrazil.marketing.adobe.com unilever2.marketing.adobe.com unilever.marketing.adobe.com unilever3.experiencecloud.adobe.com unileverbrazil.experiencecloud.adobe.com unilever2.experiencecloud.adobe.com unilever.experiencecloud.adobe.com emea1-proxy.adobemc.com us1-proxy.adobemc.com us1-proxy.adobemc.com apac-proxy.adobemc.com adobedemoemea131.marketing.adobe.com adobedemoemea131.experiencecloud.adobe.com 1
report-uri https://wwwhellobankat.report-uri.com/r/d/csp/enforce; frame-ancestors 'self'; 1
frame-ancestors 'self' live.sagepay.com www1.ilovewallpaper.co.uk 1
upgrade-insecure-requests; default-src 'self'; script-src 'self' https://www.google-analytics.com http://www.google-analytics.com 'unsafe-inline'; script-src-elem 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://stats.g.doubleclick.net https://*.iis.se https://*.readspeaker.com https://tagmanager.google.com https://www.googletagmanager.com https://*.bugsnag.com https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://www.google.com https://*.gstatic.com https://*.amazonaws.com https://secure.gravatar.com https://fonts.googleapis.com https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://yoa.st https://html5-player.libsyn.com 1
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; default-src *; img-src 'self' data: *; script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://maps.googleapis.com https://widgets.golomtbank.com; report-uri https://glmt.report-uri.com/r/d/csp/enforce 1
default-src * data: blob:;script-src https://*.stockbook.vn *.vndirect.com.vn https://www.googletagmanager.com *.google-analytics.com *.google.com *.sentry.io *.facebook.net *.gstatic.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.stockbook.vn *.vndirect.com.vn *.google.com *.sentry.io *.facebook.net https://v1.stringee.com:6888 wss://v1.stringee.com:6888 'self'; 1
report-uri https://energynet.report-uri.com/r/t/csp/enforce; connect-src 'self' https://www.google-analytics.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com; frame-src 'self'; img-src 'self' https://www.google-analytics.com https://emm.energynet.com/acton/bn/2202; object-src 'none'; script-src 'self' 'sha256-iJvVB3uMF1y2xb+h/9BEDIFSacUCTnGPe8calEQynFE=' 'sha256-GmEpc9U/1Tl/aqWu8mAGbqfE8p0R/hOBN15AeKedIu4=' 'sha256-Cfw9EESWSTQROjPPudV0YlQJ4nuR13cPrXULl5lXGj4=' 'sha256-s4f0nZAydJ3xlb2OglabDmkp1ay2PETQdl1pKqvS7ic=' 'sha256-cxlEDoeYujuR22mWzkaFb2MBSHjFz9qjxy8b1J2XRkU=' 'sha256-8QLbG2iSViNaytYuZ0rR52QJwCRe8GIUjRA+Vbibhnk=' https://emm.energynet.com/cdnr/23/acton/bn/tracker/2202 https://www.google-analytics.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; 1
img-src 'self' yastatic.net avatars.mds.yandex.net data: mc.yandex.ru favicon.yandex.net mc.yandex.com yandex.lv *.verify.yandex.ru mc.yandex.lv yandex.ru mc.admetrica.ru;font-src yastatic.net;connect-src mc.yandex.lv yandex.lv yastat.net mc.admetrica.ru mc.yandex.ru yastatic.net;child-src mc.yandex.ru mc.yandex.md yandex.ru yandex.lv mc.yandex.lv;default-src yastat.net yastatic.net;script-src 'nonce-5yfaae7BV8NdyeK3lGx+/g==' yastatic.net mc.yandex.ru yandex.lv mc.yandex.lv;style-src 'unsafe-inline' yastatic.net;report-uri https://csp.yandex.net/csp?project=morda&from=morda.spok.lv&showid=1609209665.52513.98041.151041&h=prestable-morda-vla-yp-186&csp=new&date=20201229&yandexuid=3518619441609209665 1
frame-ancestors https://new.mospolytech.ru https://mospolytech.ru http://awards.ratingruneta.ru uplab.uplab.digital 1
frame-ancestors 'self' https://newshop.percentil.com https://www.percentil.com; 1
default-src 'self' proofpointisolation.com *.proofpointisolation.com data: blob: https://onenote.officeapps-df.live.com/ https://portal.productboard.com/ https://urldefense.com https://urldefense.proofpoint.com; script-src 'self' proofpointisolation.com *.proofpointisolation.com google-analytics.com *.google-analytics.com 'nonce-dmVyeSBzZWN1cmU='; style-src 'unsafe-inline' 'self' proofpointisolation.com *.proofpointisolation.com data:; img-src 'self' proofpointisolation.com *.proofpointisolation.com google-analytics.com *.google-analytics.com data: blob: https://onenote.officeapps-df.live.com/ http://www.office.com/; connect-src 'self' https://proofpointisolation.com wss://proofpointisolation.com https://*.proofpointisolation.com wss://*.proofpointisolation.com https://app.getsentry.com https://sentry.io; object-src 'none'; report-uri /report/csp; 1
script-src * data: blob: 'unsafe-inline' 'unsafe-eval' 1
upgrade-insecure-requests; frame-ancestors 'self'; frame-src 'self' https://iframe.elimparcial.com *.google.com *.google.com.mx *.twitter.com *.youtube.com *.vimeo.com *.facebook.com  *.instagram.com *.ampproject.org *.doubleclick.net *.googleapis.com *.retargetly.com *.googlesyndication.com *.ampproject.net *.admanmedia.com *.vidible.tv *.cxense.com *.googletagmanager.com *.adnxs.com *.rubiconproject.com *.indexww.com *.openx.net *.doubleverify.com *.tiktok.com *.pubmatic.com *.adxyield.com *.facebook.net *.giphy.com giphy.com *.memeate.com *.windy.com iframe.enelradar.com *.taboola.com *.liveleak.com *.pinterest.com *.lkqd.net *.wcnc.com aax.amazon-adsystem.com *.seedtag.com *.criteo.com; report-uri https://imparcial.report-uri.com/r/d/csp/enforce 1
upgrade-insecure-requests; font-src 'self' fonts.googleapis.com data: fonts.gstatic.com; frame-src 'self' https://answers-goodwillnynj.pagescdn.com https://www.youtube-nocookie.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://answers-goodwillnynj.pagescdn.com https://www.googletagmanager.com www.google-analytics.com connect.facebook.net https://m.addthisedge.com https://m.addthis.com https://static.site24x7rum.com https://assets.sitescdn.net https://cdn.rawgit.com; script-src-elem 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://answers-goodwillnynj.pagescdn.com https://www.googletagmanager.com www.google-analytics.com connect.facebook.net https://m.addthisedge.com https://m.addthis.com https://static.site24x7rum.com https://assets.sitescdn.net https://cdn.rawgit.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com 1
default-src 'self';block-all-mixed-content ; base-uri 'self'; object-src 'none'; script-src  'nonce-a56ba05382744f778d1ee0c087df5c19' 'self' 'unsafe-eval' 'unsafe-inline' https://static.landbot.io https://www.gstatic.com https://www.google.com https://st.getsitecontrol.com/ https://widgets.getsitecontrol.com https://c.evidon.com https://tagmanager.google.com/ https://www.googletagmanager.com/ https://polyfill.io https://optimize.google.com https://www.google-analytics.com https://az416426.vo.msecnd.net; img-src 'self' data: https://mb.com.ph https://wtf2.forkcdn.com/ https://www.grantthornton.global/ https://photos.smugmug.com/ https://www.sunstar.com.ph/ https://chats.landbot.io http://s14255.pcdn.co/ http://ialaddin.genieesspv.jp/ http://bworldonline.com/ http://www.bworldonline.com/ http://mindanaotimes.net/ http://media.philstar.com/ http://www.mb.com.ph/ http://businessmirror.com.ph/ http://tribune.net.ph/ http://cdn.manilatimes.net/ http://www.malaya.com.ph/ http://cdn2-img.pressreader.com/ http://farm5.staticflickr.com/ http://business.mb.com.ph/ http://oxfordbusinessgroup.com/ http://assets.rappler.com/ http://www.gti.org/ https://ssl.gstatic.com/ https://syndication.twitter.com https://optimize.google.com https://platform.twitter.com https://pbs.twimg.com https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com https://img.youtube.com https://wtf2.forkcdn.com/; style-src 'self' 'unsafe-inline' data: blob: https://tagmanager.google.com/ https://fonts.googleapis.com/ https://optimize.google.com https://chats.landbot.io https://platform.twitter.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src https://view.ceros.com https://social-plugins.line.me/ https://www.google.com/ https://platform.twitter.com https://www.youtube.com https://optimize.google.com https://w.soundcloud.com https://player.vimeo.com https://www.gstatic.com https://cdn.optimizely.com; connect-src 'self' https://dc.services.visualstudio.com https://az416426.vo.msecnd.net https://www.google-analytics.com https://stats.g.doubleclick.net/ https://extreme-ip-lookup.com/ https://chats.landbot.io; 1
frame-ancestors http://cubki.jp http://*.cubki.jp https://cubki.jp https://*.cubki.jp http://newrope.biz http://*.newrope.biz https://newrope.biz https://*.newrope.biz 1
frame-ancestors *.kfst.dk *.forbrug.dk *.stormraadet.dk *.forbrugerombudsmanden.dk *.energianke.dk *.forbrugereuropa.dk *.consumerombudsman.dk *.consumereurope.dk *.danishstormcouncil.dk *.energysuppliescomplaintboard.dk 1
default-src 'none'; media-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'none'; object-src 'none' 1
default-src https: wss: about: data: blob: 'unsafe-inline' 'unsafe-eval' 1
font-src 'self' https://fonts.gstatic.com https://ka-p.fontawesome.com https://themes.googleusercontent.com https://static.juicer.io https://use.fontawesome.com data: https://js.intercomcdn.com; img-src 'self' *.facebook.com *.sestage.us *.google.com https://se-portal-staging.s3.amazonaws.com *.youtube.com https://s0.2mdn.net *.googleusercontent.com *.googlesyndication.com *.visualwebsiteoptimizer.com https://sb.scorecardresearch.com https://www.google-analytics.com *.g.doubleclick.net https://audible.sp1.convertro.com https://fast.wistia.com https://embedwistia-a.akamaihd.net https://s3.amazonaws.com *.adsafeprotected.com *.mparticle.com https://assets.ngin.com https://embed-fastly.wistia.com https://img1.niftyimages.com data: https://js.intercomcdn.com https://static.intercomassets.com https://pixel.quantserve.com https://bat.bing.com *.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net *.visualwebsiteoptimizer.com *.g.doubleclick.net https://sb.scorecardresearch.com *.googleadservices.com *.googletagmanager.com *.mparticle.com *.user.sportngin.com https://se-api.sportngin.com.dev https://www.google-analytics.com https://adservice.google.com *.googlesyndication.com https://cdn.ampproject.org https://www.googletagservices.com https://fast.wistia.com https://www.olympicchannel.com https://assets.juicer.io https://communityforum.sportngin.com https://assets.ngin.com https://www.google.com https://secure.quantserve.com https://pixel.quantserve.com https://rules.quantcount.com https://bat.bing.com https://widget.intercom.io https://js.intercomcdn.com https://js-agent.newrelic.com https://bam-cell.nr-data.net blob:; style-src 'self' 'unsafe-inline' https://assets.ngin.com https://fonts.googleapis.com https://assets.juicer.io cloud.typography.com fonts.googleapis.com use.fontawesome.com; frame-ancestors 'self'; report-uri https://corp.gomotionapp.com/report-uri/enforce 1
child-src 'self' 3speak.online emb.d.tube player.twitch.tv www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com; connect-src https://pagead2.googlesyndication.com/ https://stats.g.doubleclick.net/ https://analytics.google.com/ https://www.google-analytics.com/ https://rpc.blurt.world https://blurturl.herokuapp.com blurt.blog blurt.world images.blurt.blog 'self' rpc.blurt.world https://api.blurt.blog https://blurtd.privex.io *.blurt.buzz wss://notifications.blurt.world; default-src tpc.googlesyndication.com 'self' emb.d.tube www.youtube.com staticxx.facebook.com player.vimeo.com *.streamrail.com img.3speakcontent.online lbry.tv *.wistia.com; font-src data: fonts.gstatic.com; frame-ancestors 'none'; frame-src 'self' googleads.g.doubleclick.net https:; img-src * data:; object-src 'none'; plugin-types application/pdf; script-src 'unsafe-inline' 'unsafe-eval' data: https: 'self' www.google-analytics.com connect.facebook.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com platform.twitter.com; report-uri /api/v1/csp_violation 1
frame-ancestors *.psc.ac.uk 'self'; 1
default-src 'self' https://*.memo-linux.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.memo-linux.com;style-src 'self' 'unsafe-inline' https://*.memo-linux.com data:;img-src 'self' http://pix.toile-libre.org https://*.memo-linux.com base:;font-src 'self' https://*.memo-linux.com data:;child-src 'self' https://*.memo-linux.com https://www.youtube.com;media-src 'self' https://*.memo-linux.com; 1
default-src 'self' www.bolsasymercados.es 'unsafe-inline' 'unsafe-eval' data: *.google-analytics.com *.google.com *.google.es *.youtube.com *.vimeo.com *.vimeocdn.com *.edisoninvestmentresearch.com *.twimg.com *.twitter.com twitter.com https://www.bolsasymercados.es wss://www.bolsasymercados.es;base-uri 'self';plugin-types application/pdf;form-action 'self' *.twitter.com;frame-ancestors 'self'; 1
default-src *;style-src * 'unsafe-inline';script-src * 'nonce-0uoNNMJjoc6mM4bJMKeXkkqtk9A=' 1
frame-ancestors 'self' http://webvisor.com *.mtproxy.yandex.net 1
report-uri /content-security-policy; default-src 'self' *.spravkus.com spravkus.com; img-src 'self' data: *.spravkus.com spravkus.com *.2mdn.net *.google-analytics.com *.doubleclick.net *.googleapis.com *.googlesyndication.com *.googleadservices.com *.gstatic.com www.google.com www.google.ru www.google.kz www.google.by www.google.de goo.gl www.google.com.ua avatars-fast.yandex.net avatars.mds.yandex.net favicon.yandex.net an.yandex.ru mc.yandex.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net yastatic.net api-maps.yandex.ru *.maps.yandex.net *.passport.yandex.ru mc.webvisor.org www.tns-counter.ru images.spravkus.com telegram.org https://*.2mdn.net https://*.google-analytics.com https://*.doubleclick.net https://*.googleapis.com https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://www.google.com https://www.google.ru https://www.google.kz https://www.google.by https://www.google.de https://goo.gl https://www.google.com.ua https://avatars-fast.yandex.net https://avatars.mds.yandex.net https://favicon.yandex.net https://an.yandex.ru https://mc.yandex.ru https://banners.adfox.ru https://content.adfox.ru https://ads.adfox.ru https://ads6.adfox.ru https://yastat.net https://yastatic.net https://api-maps.yandex.ru https://*.maps.yandex.net https://*.passport.yandex.ru https://mc.webvisor.org https://www.tns-counter.ru https://images.spravkus.com https://telegram.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.spravkus.com spravkus.com *.doubleclick.net *.googlesyndication.com *.googleadservices.com www.googletagservices.com *.gstatic.com gstatic.com *.googleapis.com *.google.com google.com *.google-analytics.com adservice.google.ru adservice.google.com adservice.google.kz adservice.google.by adservice.google.com.ua an.yandex.ru yandex.st yastatic.net mc.yandex.ru banners.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net yandex.ru api-maps.yandex.ru *.maps.yandex.net *.market.yandex.ru maxcdn.bootstrapcdn.com https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://www.googletagservices.com https://*.gstatic.com https://gstatic.com https://*.googleapis.com https://*.google.com https://google.com https://*.google-analytics.com https://adservice.google.ru https://adservice.google.com https://adservice.google.kz https://adservice.google.by https://adservice.google.com.ua https://an.yandex.ru https://yandex.st https://yastatic.net https://mc.yandex.ru https://banners.adfox.ru https://ads.adfox.ru https://ads6.adfox.ru https://yastat.net https://yandex.ru https://api-maps.yandex.ru https://*.maps.yandex.net https://*.market.yandex.ru https://maxcdn.bootstrapcdn.com; frame-src 'self' *.spravkus.com spravkus.com *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.gstatic.com gstatic.com *.googleapis.com *.google.com google.com awaps.yandex.net yandexadexchange.net *.yandexadexchange.net yastatic.net *.yandex.ru banners.adfox.ru yastat.net https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://gstatic.com https://*.googleapis.com https://*.google.com https://google.com https://awaps.yandex.net https://yandexadexchange.net https://*.yandexadexchange.net https://yastatic.net https://*.yandex.ru https://banners.adfox.ru https://yastat.net; object-src 'self' *.spravkus.com spravkus.com *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.gstatic.com an.yandex.ru *.yandex.ru *.yandex.net *.yandex.st *.yastatic.net *.yandexadexchange.net yandex.ru yandex.net yandex.st yastatic.net yandexadexchange.net https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.gstatic.com https://an.yandex.ru https://*.yandex.ru https://*.yandex.net https://*.yandex.st https://*.yastatic.net https://*.yandexadexchange.net https://yandex.ru https://yandex.net https://yandex.st https://yastatic.net https://yandexadexchange.net; connect-src 'self' *.spravkus.com spravkus.com *.doubleclick.net *.google-analytics.com pagead2.googlesyndication.com *.gstatic.com geocode-maps.yandex.ru an.yandex.ru strm.yandex.ru mc.yandex.ru mc.yandex.ua mc.yandex.kz mc.yandex.by yandex.st yastatic.net matchid.adfox.yandex.ru adfox.yandex.ru ads.adfox.ru ads6.adfox.ru jstracer.yandex.ru yastat.net yandex.ru *.market.yandex.ru https://*.doubleclick.net https://*.google-analytics.com https://pagead2.googlesyndication.com https://*.gstatic.com https://geocode-maps.yandex.ru https://an.yandex.ru https://strm.yandex.ru https://mc.yandex.ru https://mc.yandex.ua https://mc.yandex.kz https://mc.yandex.by https://yandex.st https://yastatic.net https://matchid.adfox.yandex.ru https://adfox.yandex.ru https://ads.adfox.ru https://ads6.adfox.ru https://jstracer.yandex.ru https://yastat.net https://yandex.ru https://*.market.yandex.ru; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.spravkus.com spravkus.com www.google.com *.googleapis.com *.gstatic.com yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net yandexadexchange.net maxcdn.bootstrapcdn.com cdn.jsdelivr.net telegram.org https://www.google.com https://*.googleapis.com https://*.gstatic.com https://yandex.st https://yastatic.net https://banners.adfox.ru https://content.adfox.ru https://yastat.net https://yandexadexchange.net https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://telegram.org; font-src 'self' data: *.spravkus.com spravkus.com *.googleapis.com *.gstatic.com an.yandex.ru yastatic.net yastat.net maxcdn.bootstrapcdn.com https://*.googleapis.com https://*.gstatic.com https://an.yandex.ru https://yastatic.net https://yastat.net https://maxcdn.bootstrapcdn.com; form-action 'self' *.spravkus.com spravkus.com *.yandex.ru wl.walletone.com https://*.yandex.ru https://wl.walletone.com; media-src data: *.spravkus.com spravkus.com *.yandex.net strm.yandex.ru *.strm.yandex.ru yandex.ru yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net https://*.yandex.net https://strm.yandex.ru https://*.strm.yandex.ru https://yandex.ru https://yandex.st https://yastatic.net https://banners.adfox.ru https://content.adfox.ru https://yastat.net; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com/ http://www.google.com/ https://www.google.com/  *.facebook.net *.zdassets.com *.zopim.com *.ecitizen.gov.sg www.google-analytics.com www.googletagmanager.com maps.googleapis.com;script-src-elem  'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com/ http://www.google.com/ https://www.google.com/  *.facebook.net *.zdassets.com *.zopim.com *.ecitizen.gov.sg www.google-analytics.com www.googletagmanager.com maps.googleapis.com;object-src 'none';font-src 'self' data: *.ecitizen.gov.sg *.amazonaws.com *.zopim.com *.googleapis.com *.gstatic.com;img-src 'self' data: *;frame-src 'self' *.facebook.com *.youtube.com street-directory.com *.google.com mailto: tel: *.doubleclick.net;style-src 'self' 'unsafe-inline' data: *.zdassets.com *.ecitizen.gov.sg *.googleapis.com *.gstatic.com;connect-src * 1
child-src 'self' blob:;connect-src 'self' https://www.google-analytics.com https://cdn.polyfill.io facebook.com google-analytics.com cdn.islandsbanki.is https://640islandsbanki.boost.ai;default-src 'self';img-src 'self' data: https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.is *.siteimproveanalytics.io *.gstatic.com *.googleapis.com *.ytimg.com cdn.islandsbanki.is boost-files-general-eu-west-1-prod.s3-eu-west-1.amazonaws.com prismic-io.s3.amazonaws.com isb-website.cdn.prismic.io images.prismic.io t.co;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com https://cdn.islandsbanki.is/;object-src 'none';media-src 'self';manifest-src 'self';script-src 'self' 'unsafe-inline' *.prismic.io maps.googleapis.com https://prismic.io https://www.google.com https://www.youtube.com https://s.ytimg.com https://640islandsbanki.boost.ai https://www.gstatic.com https://siteimproveanalytics.com https://cdn.polyfill.io https://www.google-analytics.com https://connect.facebook.net https://www.google.com https://www.gstatic.com https://www.recaptcha.net/ https://consent.cookiebot.com https://consentcdn.cookiebot.com 'unsafe-eval' https://fill.dropandsign.is https://*.infogram.com 'sha256-YH54gkKoSCguf7XwyHBjeXdm0z7gtwuISqyXjav2ufs=' 'sha256-1gIG1EI7ABKBfq8rVwk7j2MeEOIlut5+TbLxyAnCYTA=' 'sha256-yjbQYTDTGeh83tID7X4P8shfeXu07tD4iLjoMIr+e4w=' 'sha256-qEXb+QLuCAPNTPbZxHzxcXrnG22qOg/k7niD2csPshA=' 'sha256-qGbGScyyPyVW6zjzlc+FXpyfHh9kBv2mDD3qeavhm+g=' 'sha256-gtKFj0yNetpIDkA36Pz+kl6/tx8y2XsLtD/uFt4lUYk=' 'sha256-EyouaHeuIb10tGwrxHekIIYz056OcCKB5PCCHuYHuvw=' 'sha256-4cFcsF0wg+c2o8ebtN0UyYJ+eUB2WN4lNfLtNhFrMOY=' 'sha256-FA7dx6sdwFrVkNcXvOZhbKKYH0F9fTmjG3r8Aelqd/U=' 'sha256-oLUR+Lo2PW63Sv6wLVjS9xNITHouLknhL7taVsq5LkA=' 'sha256-OlAu+nb14/tvTR/ARl1r0WWfsvjRt4DtTcgvtKPn12E=' 'sha256-AbMRibXituKZ/0sePhYI5qZMZY5xjlM+vx+M95gWXhg=' 'sha256-ikYcTQZ5ZdSDFGRMxd7Nzk4olgL4v3dFZigVGZ4Nyfc=' 'sha256-kvLuUu0gbldkoIWcCsicGWJJIo7km4Ka2hZhbmxF9ew=' 'sha256-3TY9Om6NVbkZZkVhfh95kbjLP+x6Tgx5Om2tBRTmmOg=' 'sha256-mGbGbnWys+WQjkr/v68zcXw5O6y8X97qI+UtewXd0yk=';style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com https://fill.dropandsign.is;frame-src https://*.islandsbanki.is https://gamli.islandsbanki.is https://*.islandssjodir.is https://player.vimeo.com https://www.youtube.com https://airtable.com https://consentcdn.cookiebot.com https://www.vib.is https://fill.dropandsign.is https://*.isb.is https://*.infogram.com https://www.google.com https://www.gstatic.com https://isb-website.prismic.io/;worker-src 'self' blob: 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mastodon.uno; img-src 'self' https: data: blob: https://mastodon.uno; style-src 'self' https://mastodon.uno 'nonce-RWndfayrNUQtPt+t2xRIwA=='; media-src 'self' https: data: https://mastodon.uno; frame-src 'self' https:; manifest-src 'self' https://mastodon.uno; connect-src 'self' data: blob: https://mastodon.uno https://cdn.masto.host wss://mastodon.uno; script-src 'self' https://mastodon.uno; child-src 'self' blob: https://mastodon.uno; worker-src 'self' blob: https://mastodon.uno 1
default-src 'self' https://maps.google.com https://www.google.com/maps/embed *.olark.com https://*.youtube.com https://player.vimeo.com machineryhost.com *.machineryhost.com app.machineryhost.com sellerhub.allsurplus.com; img-src 'self' data: s3.amazonaws.com *.s3.amazonaws.com *.olark.com https://www.google-analytics.com https://*.picsum.photos https://picsum.photos *.inspectlet.com https://*.sellerhub.allsurplus.com https://files.lqdt1.com https://stage.govdeals.com https://*.linkedin.com https://p.adsymptotic.com https://www.facebook.com machineryhost.com *.machineryhost.com app.machineryhost.com sellerhub.allsurplus.com; media-src 'self' data: s3.amazonaws.com *.s3.amazonaws.com *.olark.com https://picsum.photos machineryhost.com *.machineryhost.com app.machineryhost.com sellerhub.allsurplus.com; font-src 'self' data: https://fonts.gstatic.com *.olark.com https://cdnjs.cloudflare.com machineryhost.com *.machineryhost.com app.machineryhost.com sellerhub.allsurplus.com; style-src 'self' data: blob: 'unsafe-inline' https://fonts.googleapis.com *.olark.com https://maxcdn.bootstrapcdn.com/bootstrap/4.1.0/css/bootstrap.min.css https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css machineryhost.com *.machineryhost.com app.machineryhost.com sellerhub.allsurplus.com; connect-src 'self' s3.amazonaws.com *.s3.amazonaws.com http://ws.vinquery.com *.olark.com wss://ws.inspectlet.com/ *.inspectlet.com https://api.rollbar.com https://realfavicongenerator.p.rapidapi.com https://www.google-analytics.com http://*.visualwebsiteoptimizer.com machineryhost.com *.machineryhost.com app.machineryhost.com sellerhub.allsurplus.com; script-src 'self' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com *.inspectlet.com https://www.googleadservices.com *.olark.com http://*.visualwebsiteoptimizer.com https://cdn.rollbar.com https://snap.licdn.com https://connect.facebook.net https://cdnjs.cloudflare.com/ajax/libs/rollbar.js/ machineryhost.com *.machineryhost.com app.machineryhost.com sellerhub.allsurplus.com 'nonce-HDgL5wZ8K98w9L3EKExCjQ=='; object-src machineryhost.com *.machineryhost.com app.machineryhost.com sellerhub.allsurplus.com; report-uri /csp_report 1
frame-src 'self' *.solvr.no *.vimeo.com *.youtube.com; 1
block-all-mixed-content; frame-ancestors 'self' fantasticcleaners.com.au cdn.fantasticcleaners.com.au api.fantasticservicesgroup.com.au obf.fantasticservicesgroup.com.au accounts.fantasticservicesgroup.com.au wss://*.hotjar.com cobrowsing.freshchat.com; 1
frame-ancestors 'self' https://bauking.de/ 1
upgrade-insecure-requests; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net *.crazyegg.com wss://chat.userlike.com chat.userlike.com api.userlike.com https://bat.bing.com https://tracking.crazyegg.com; img-src 'self' data: ssl.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.de https://bat.bing.com https://img.youtube.com https://dam.julabo.com api.userlike.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com dq4irj27fs462.cloudfront.net *.crazyegg.com https://stats.g.doubleclick.net https://www.gstatic.com; media-src 'self' dq4irj27fs462.cloudfront.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://bat.bing.com https://script.crazyegg.com ajax.googleapis.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com dq4irj27fs462.cloudfront.net *.crazyegg.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com; frame-ancestors 'self' https://www.julabo.com/; report-uri https://julabo.report-uri.com/r/d/csp/enforce 1
default-src 'self' *.continuum.ie cdn.cookielaw.org staging.cdn-net.com staging-uk.cdn-net.com uk.cdn-net.com six.cdn-net.com ajax.aspnetcdn.com webinator.continuous.ie webinator-azure.continuous.ie static.ads-twitter.com lptag.liveperson.net lpcdn.lpsnmedia.net *.googletagmanager.com platform.twitter.com analytics.twitter.com accdn.lpsnmedia.net lo.v.liveperson.net maps.googleapis.com fonts.googleapis.com fonts.gstatic.com ajax.googleapis.com servedby.flashtalking.com accreditation.datacash.com *.googleadservices.com 2866153.fls.doubleclick.net googleads.g.doubleclick.net use.typekit.net static.addtoany.com ib.adnxs.com *.google.com *.google.ie *.google-analytics.com code.jquery.com service.gamma.ie *.t.co d1j07uq9klr1j0.cloudfront.net service.autoaddress.ie api.autoaddress.ie dev.virtualearth.net edge.quantserve.com connect.facebook.net rules.quantcount.com *.youtube.com s.ytimg.com r.turn.com secure.quantserve.com  *.hotjar.com *.googlesyndication.com *.doubleclick.net *.hotjar.io 'unsafe-eval' 'unsafe-inline'  ;  media-src *;img-src * data:; frame-src * d1j07uq9klr1j0.cloudfront.net *.youtube.com secure.quantserve.com 1
default-src 'self' *.montecito.bank; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.easysol.net *.connect.facebook.net *.googleapis.com *.widget.ellieservices.com *.onlinebanktours.com *.videodelivery.net; connect-src 'self' https: *.montecito.bank *.google-analytics.com; style-src 'self' 'unsafe-inline' hello.myfonts.net *.googleapis.com https://fonts.googleapis.com *.onlinebanktours.com; img-src 'self' data: content: https: *.montecito.bank *.google-analytics.com *.detectca.easysol.net *.google.com *.stats.g.doubleclick.net *.maps.gstatic.com *.googleapis.com; media-src 'self' https: embed.videodelivery.net blob:; font-src 'self' https: *.hello.myfonts.net *.fonts.googleapis.com fonts.gstatic.com data:; form-action 'self' https: *.montecito.bank; child-src 'self' https: *.montecito.bank *.prod.northstar.ellielabs.com *.staticxx.facebook.com *.facebook.com *.doubleclick.net *.videodelivery.net; frame-src 'self' https: *.docusign.net; worker-src 'self' https: *.montecito.bank *.videodelivery.net blob: 1
frame-ancestors www.lofficielsingapore.com dashboard.vidy.com; 1
default-src 'self' https: *.junkers.es; media-src 'self' https: mycliplister.com; font-src 'self' *.junkers.es; object-src data: 'self'; img-src http: bott-tc.nautilus bott-fs.nautilus https: bott-tc.nautilus bott-fs.nautilus data: blob:; style-src 'self' 'unsafe-inline' *.junkers.es; script-src https: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https: it.documents.junkers.com; frame-ancestors 'self' http://fs52-buderus-dev.kittelberger.net 1
frame-ancestors https://youdirect.edavine.com 1
default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline';font-src * data: blob: 'unsafe-inline'; 1
default-src 'self' https://*.dod.gr https://*.dodsocial.com https://*.facebook.com; script-src 'self' *.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https://*.facebook.com https://*.facebook.net https://*.fbcdn.net https://*.fbsbx.com https://*.ytimg.com https://*.dodsocial.com data:; font-src 'self' data: https://fonts.gstatic.com/; connect-src 'self' https://*.dodsocial.com wss://*.dodsocial.com wss://*.dod.gr wss://*.dodsocial.com:443 https://*.fbcdn.net https://*.facebook.com https://*.facebook.net https://*.fbsbx.com https://www.google-analytics.com; object-src 'none'; report-uri /libraries/php/services/logcsp.php 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://action.dstillery.com/ https://api.instagram.com/ https://connect.facebook.net/ https://dx.steelhousemedia.com/ https://googleads.g.doubleclick.net/ https://graph.facebook.com/ https://js.adsrvr.org/ https://js.authorize.net/ https://m.addthis.com/ https://pixel-geo.prfct.co/ https://px.steelhousemedia.com/ https://s7.addthis.com/ https://stats.g.doubleclick.net/ https://tag.marinsm.com/ https://tracker.marinsm.com/ https://v1.addthisedge.com/ https://widgets.pinterest.com/ https://ww.steelhousemedia.com/ https://www.google-analytics.com/  https://www.googleadservices.com/ https://www.googletagmanager.com/ https://z.moatads.com/ https://static.chartbeat.com/ https://action.media6degrees.com/ https://www.google.com/; style-src 'self' 'unsafe-inline' https://fast.fonts.net/; font-src 'self'; object-src 'self'; media-src 'self'; form-action 'self' https://www.facebook.com/ https://www.paypal.com/; connect-src 'self' https://m.addthis.com/ https://www.facebook.com/ https://js.authorize.net/ https://api.authorize.net/ https://api2.authorize.net/ https://stats.g.doubleclick.net/; frame-src	 'self' https://bid.g.doubleclick.net https://insight.adsrvr.org https://s7.addthis.com https://www.facebook.com/ https://match.adsrvr.org/ https://www.youtube.com/; img-src 'self' https://fpdbs.paypal.com/ https://insight.adsrvr.org/ https://pixel-geo.prfct.co/ https://secure.adnxs.com/ https://stats.g.doubleclick.net/ https://www.facebook.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.google.ca/ https://ping.chartbeat.net/ https://connect.facebook.net/ https://analytics.twitter.com/ https://ads.yahoo.com/ https://us-u.openx.net/ https://pixel.rubiconproject.com/ https://cm.g.doubleclick.net/ https://match.adsrvr.org/ https://match.prod.bidr.io/ https://ib.adnxs.com/ https://dpm.demdex.net/ https://pixel.prfct.co/ https://pixel.advertising.com/ https://px.steelhousemedia.com/ https://cookie-sync-service-prod.steelhousemedia.com/ https://tags.bluekai.com/ https://dsum-sec.casalemedia.com/ https://www.googletagmanager.com/ https://global.ib-ibi.com/ https://pixel.tapad.com/ https://su.addthis.com/ https://usermatch.krxd.net/ https://uipglob.semasio.net/ https://t.mookie1.com/ https://x.bidswitch.net/ https://match.sharethrough.com/ https://s.thebrighttag.com/ https://cw.addthis.com/ https://ups.analytics.yahoo.com/ https://stags.bluekai.com/ https://idsync.rlcdn.com/ https://secure.media6degrees.com/ https://www.google.com.ua/ https://i.ytimg.com/ data:; frame-ancestors 'self'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com www.google.com *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com connect.facebook.net; frame-src 'self' www.gstatic.com www.google.com *.youtube.com *.facebook.com s-static.ak.facebook.com; object-src 'self' 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com ajax.googleapis.com data: connect.facebook.net *.facebook.com *.hotjar.com *.hotjar.io www.google-analytics.com static.cloudflareinsights.com *.squarespace.com *.squarespace-cdn.com *.googleapis.com maps.gstatic.com fonts.gstatic.com *.youtube.com player.vimeo.com *.ytimg.com tagmanager.google.com api.quickstream.westpac.com.au www.google.com www.gstatic.com cdn.callrail.com *.intercom.io *.intercomcdn.com ws: *.amazonaws.com *.mailchimp.com *.list-manage.com; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://slime.global; img-src 'self' https: data: blob: https://slime.global; style-src 'self' https://slime.global 'nonce-sq0p1mQNLhZzuxlrCMYvTQ=='; media-src 'self' https: data: https://slime.global; frame-src 'self' https:; manifest-src 'self' https://slime.global; connect-src 'self' data: blob: https://slime.global https://pool.jortage.com/slimeglobal wss://slime.global; script-src 'self' https://slime.global; child-src 'self' blob: https://slime.global; worker-src 'self' blob: https://slime.global 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com 'strict-dynamic' 'nonce-MzA4NTg3NTMxOCwxNTgxMTY4NzY0'; report-uri https://exceptions.hubspot.com/csp/report; 1
default-src 'none'; script-src 'self' 'unsafe-eval' cdn.ampproject.org ajax.cloudflare.com static.cloudflareinsights.com *.algolia.net *.algolianet.com mc.yandex.ru; style-src 'self' 'unsafe-inline'; img-src 'self' blog-images.clickhouse.tech data: mc.yandex.ru; connect-src 'self' mc.yandex.ru cdn.ampproject.org *.algolia.net *.algolianet.com *.ingest.sentry.io hn.algolia.com www.reddit.com; child-src blob: mc.yandex.ru; frame-src blob: mc.yandex.ru www.youtube.com datalens.yandex; font-src 'self' data:; base-uri 'none'; form-action 'self'; frame-ancestors webvisor.com metrika.yandex.ru; prefetch-src 'self' 1
default-src https:; connect-src https: wss:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: 1
upgrade-insecure-requests; default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' www.google-analytics.com ajax.googleapis.com z.moatads.com *.addthis.com *.addthisedge.com clients1.google.com 316eebot.boost.ai; media-src 'self'; frame-src 'self' s7.addthis.com www.youtube-nocookie.com www.youtube.com; img-src 'self' data: www.google-analytics.com www.riigiteataja.ee eebot.ee; style-src 'unsafe-inline' 'self' fonts.googleapis.com; font-src 'self' fonts.gstatic.com; connect-src 'self' *.addthis.com www.google-analytics.com 316eebot.boost.ai; 1
default-src 'none'; connect-src 'self' epicenter.works *.epicenter.works; font-src 'self' epicenter.works *.epicenter.works; frame-src 'self' epicenter.works *.epicenter.works; img-src 'self' epicenter.works *.epicenter.works cdn.ckeditor.com; media-src 'self' epicenter.works *.epicenter.works; script-src 'self' epicenter.works *.epicenter.works cdn.ckeditor.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' epicenter.works *.epicenter.works cdn.ckeditor.com 'unsafe-inline'; frame-ancestors 'self' epicenter.works *.epicenter.works; base-uri 'self' epicenter.works *.epicenter.works; form-action 'self' epicenter.works *.epicenter.works secure.dialog-mail.com 1
default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; child-src *; 1
default-src            'self'            data:            blob:            https://www.google.co.uk            https://speech.speechstream.net            https://pronunciation.speechstream.net            *.hgcorewebsitepptsa.blob.core.windows.net            https://www.googleadservices.com            *.youtube.com            *.hotjar.com            *.hotjar.io            *.zopim.com            *.zdassets.com            wss://*.zopim.com            www.gravatar.com            player.vimeo.com            *.vimeocdn.com            packages.umbraco.org            our.umbraco.org;          media-src            'self'            blob:            https://*.speechstream.net;          connect-src            'self'            https://en.wikipedia.org/            https://wikisum.texthelp.com/            https://www.googleadservices.com/            https://vc.hotjar.io            https://www.google.com            https://www.google.co.uk            https://speechstreamv3-webservices-8.texthelp.com/            https://in.hotjar.com/api/v2/client/sites/            wss://widget-mediator.zopim.com/            https://ekr.zdassets.com/            https://babm.texthelp.com            https://*.speechstream.net            https://stats.g.doubleclick.net            wss://ws1.hotjar.com/api/v1/client/ws            https://www.google-analytics.com/;          script-src            sha256-XwQT/PsFMy+rKSB4vlW93i5lrzIRaGmPC3M2D0C3ZKU=            https://wikisum.texthelp.com            https://apis.google.com            https://www.google-analytics.com            https://*.speechstream.net            https://s.ytimg.com            https://analytics.twitter.com            https://ssl.google-analytics.com            https://static.ads-twitter.com            https://www.gstatic.com            https://bat.bing.com            https://connect.facebook.net            https://www.google.com            https://www.youtube.com            https://www.googletagmanager.com            https://code.highcharts.com            https://www.cqc.org.uk            https://www.tagmanager.google.com/debug            maps.googleapis.com            'self'            *.hotjar.com            *.zopim.com            *.zdassets.com            *.aspnetcdn.com            'unsafe-inline'            'unsafe-eval';          style-src             'self'            https://www.cqc.org.uk            https://fonts.googleapis.com            https://fonts.gstatic.com            'unsafe-inline';          img-src             'self'            *.googleapis.com            *.ggpht.com            https://speechstreamv3-webservices-8.texthelp.com/            https://upload.wikimedia.org            https://www.google-analytics.com/            https://www.google.co.uk            https://www.google.com            https://stats.g.doubleclick.net            https://www.facebook.com            https://bat.bing.com            https://t.co            https://ssl.google-analytics.com            https://www.cqc.org.uk            https://maps.googleapis.com            https://maps.gstatic.com            data:            www.gravatar.com            https://dashboard.umbraco.org            umbraco.tv            hgcorewebsiteprsa.blob.core.windows.net             *.zopim.com;          child-src            'self'            https://content.googleapis.com            https://www.youtube.com            https://vars.hotjar.com            https://html5-player.libsyn.com/            https://www.google.com/            https://www.googletagmanager.com/ns.html            https://html5-player.libsyn.com/            https://www.google.com/            *.facebook.com/;          font-src            'self'             https://fonts.gstatic.com            https://script.hotjar.com            *.zopim.com            data:; 1
connect-src  www.listarobinson.es; img-src 'self' www.listarobinson.es data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-ancestors 'none'; 1
frame-ancestors 'self' http://www.1001giochi.it 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.xpressbet.com *.xpressbetonline.com *.xb-online.com *.youtube.com s.ytimg.com *.kaltura.com *.twitter.com *.paysafecard.com *.facebook.net *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.facebook.com *.typekit.net *.countingdownto.com *.livehelpnow.net *.xbselect.com zz.connextra.com s.btstatic.com s.thebrighttag.com wss:; img-src * data:; font-src *; style-src * 'unsafe-inline'; media-src * blob:; worker-src * blob: 1
frame-ancestors miyazaki-city.sakura.ne.jp 1
script-src 'self' usa.experian.com smetrics1.experian.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com tagmanager.google.com *.doubleclick.net *.youtube.com *.analytics.yahoo.com *.appdynamics.com cdn.appdynamics.com *.facebook.net *.discover.com *.btstatic.com *.thebrighttag.com *.visualwebsiteoptimizer.com *.cloudflare.com *.clicktale.net *.siteimproveanalytics.com siteimproveanalytics.com *.pendo.io *.heapanalytics.com *.websecurity.norton.com nexus.ensighten.com *.aexp-static.com service.maxymiser.net omns.americanexpress.com lptag.liveperson.net js.hs-scripts.com js.hscollectedforms.net js.hs-analytics.net js.hsleadflows.net *.humanapi.co *.sundaysky.com edge.fullstory.com 'unsafe-inline' 'unsafe-eval' blob: ; object-src 'self'; 1
script-src 'unsafe-eval' 'unsafe-inline' assets.adobedtm.com h.online-metrix.net s.ytimg.com static.ads-twitter.com platform.twitter.com static.addtoany.com jdgcontactusprod.deere.com cdn.tt.omtrdc.net deere.tt.omtrdc.net connect.facebook.net forms.deere.com somni.deere.com assets.pinterest.com log.pinterest.com www.youtube.com img.youtube.com trackerapi.trustarc.com consent.trustarc.com consent-pref.trustarc.com prefmgr-cookie.truste-svc.net consent.truste.com consent-st.turstarc.com tags.tiqcdn.com cdn-akamai.mookie1.com t.mookie1.com us-gmtdmp.mookie1.com 'self' 1
frame-ancestors 'self' https://login.amaseguros.com 1
frame-ancestors 'self' versicherungen.friendsurance.de; 1
default-src https:;                      font-src https: data:;                      script-src * 'unsafe-inline' 'unsafe-eval' https:;                      connect-src https:;                      img-src https: data:;                      style-src * 'unsafe-inline' webpack: https:;                      base-uri 'self';                      form-action https:;                      media-src https:;                      worker-src 'self' blob:;                       frame-src https:;                      frame-ancestors https:;                     script-src-elem * 'unsafe-inline' 'unsafe-eval' https: 1
default-src 'self';     base-uri 'self';     script-src 'nonce-13ffa7912e00415e8364cf6c864fbf9e' 'strict-dynamic' 'self' *.zxcdn.com *.casinorewards.com cdn.jsdelivr.net https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js ;     connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net;     frame-src 'self' *.gameassists.co.uk *.gameassists.dk *.gameassists.se *.gameassists.co.za *.valueactive.eu *.valueactive.dk  ;     style-src 'self' *.zxcdn.com cdn.jsdelivr.net https://fonts.googleapis.com 'unsafe-inline';     font-src 'self' cdn.jsdelivr.net *.zxcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com;     img-src * data:;     object-src 'none';     frame-ancestors 'self';     media-src 'self' *.zxcdn.com s3.amazonaws.com/casinorewards/; 1
default-src 'self' www.nektar.com nektar.com googleads.g.doubleclick.net *.sharethis.com *.sf14g.com *.consensu.org www.concrete5.org     chp.tbe.taleo.net player.vimeo.com www.google.com phg.tbe.taleo.net *.taleo.net www.google-analytics.com;           script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com www.youtube.com                   static.doubleclick.net www.googletagmanager.com formalyzer.com www.google.com                   *.jsdelivr.net *.sharethis.com *.consensu.org *.sf14g.com www.gstatic.com www.concrete5.org;            img-src 'self' 'unsafe-inline' www.google-analytics.com stats.g.doubleclick.net tracking.leadlander.com  *.sharethis.com      www.concrete5.org;           style-src 'self' 'unsafe-inline' fonts.googleapis.com *.sf14g.com *.sharethis.com www.gstatic.com;           font-src 'self' data: fonts.gstatic.com ;           upgrade-insecure-requests;      object-src 'none' 1
default-src 'self' ; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: https://ssl.google-analytics.com/ga.js https://ajax.cloudflare.com https://amp.cloudflare.com https://static.cloudflareinsights.com/beacon.min.js https://www.google.com https://www.gstatic.com https://www.instagram.com https://platform.instagram.com https://www.redditstatic.com https://stats.g.doubleclick.net https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.syndication.twimg.com https://connect.facebook.net https://platform.twitter.com https://syndication.twitter.com; style-src 'self' 'unsafe-inline' https://www.google.com https://ajax.googleapis.com https://amp.cloudflare.com https://ton.twimg.com https://platform.twitter.com; img-src * data: ; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' *.amp.cloudflare.com https://platform.twitter.com https://syndication.twitter.com https://stats.g.doubleclick.net; frame-src 'self' data: blob: https://open.spotify.com https://www.google.com https://twitter.com https://platform.twitter.com https://syndication.twitter.com https://mobile.twitter.com https://t.co https://www.facebook.com https://web.facebook.com https://staticxx.facebook.com https://m.facebook.com https://static.xx.fbcdn.net https://www.instagram.com https://www.redditmedia.com https://w.soundcloud.com https://youtube.com https://www.youtube.com https://player.vimeo.com https://dailymotion.com https://www.dailymotion.com *.amp.cloudflare.com; upgrade-insecure-requests; block-all-mixed-content; report-uri https://ukff.report-uri.com/r/d/csp/enforce; 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-ODMyOGZiMGItNGE2ZC00MjBkLTkwYjQtYTIwYjI4NDZlODVk'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
default-src *.googlesyndication.com; prefetch-src https:; img-src 'self' axn-asia.com *.axn-asia.com axn-taiwan.com *.axn-taiwan.com animax-asia.com *.animax-asia.com animax-taiwan.com *.animax-taiwan.com animaxtv.co.kr *.animaxtv.co.kr onetvasia.com *.onetvasia.com gemtvasia.com *.gemtvasia.com *.google-analytics.com *.google.com *.googlesyndication.com *.g.doubleclick.net i.ytimg.com sb.scorecardresearch.com *.gigya.com data:; media-src 'self' mp4: 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' axn-asia.com *.axn-asia.com axn-taiwan.com *.axn-taiwan.com animax-asia.com *.animax-asia.com animax-taiwan.com *.animax-taiwan.com animaxtv.co.kr *.animaxtv.co.kr onetvasia.com *.onetvasia.com gemtvasia.com *.gemtvasia.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.google.com *.googlesyndication.com *.google.com.sg *.gstatic.com *.g.doubleclick.net cdn.ampproject.org cdns.gigya.com sb.scorecardresearch.com *.youtube.com s.ytimg.com; style-src 'self' 'unsafe-inline' axn-asia.com *.axn-asia.com axn-taiwan.com *.axn-taiwan.com animax-asia.com *.animax-asia.com animax-taiwan.com *.animax-taiwan.com animaxtv.co.kr *.animaxtv.co.kr onetvasia.com *.onetvasia.com gemtvasia.com *.gemtvasia.com *.googleapis.com *.myfonts.net; object-src 'self'; frame-src 'self' *.google.com *.googlesyndication.com *.youtube.com cdns.us1.gigya.com; connect-src 'self' *.google-analytics.com *.googlesyndication.com *.gstatic.com *.g.doubleclick.net *.youtube.com *.gigya.com; font-src 'self' *.googleapis.com *.gstatic.com *.typekit.net *.myfonts.net data: 'self' 1
object-src 'none'; base-uri 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.code.jquery.com http://*.cohenandsteers.com http://*.cohenandsteers.jp http://*.cohenandsteers.jpn.com http://*.facebook.com http://*.google-analytics.com http://*.googleadservices.com http://*.googleapis.com http://*.googletagmanager.com http://*.lfeeder.com http://*.leadfeeder.com https://tagmanager.google.com http://*.pardot.com https://*.code.jquery.com https://*.cohenandsteers.com https://*.cohenandsteers.jpn.com https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://optimize.google.com https://*.pardot.com https://*.sharethis.com https://*.vimeo.com https://assets.zendesk.com https://code.jquery.com https://connect.facebook.net https://ssl.google-analytics.com https://*.webspellchecker.net https://sjs.bizographics.com https://code.createjs.com https://*.licdn.com https://*.greenhouse.io https://*.lfeeder.com https://*.leadfeeder.com; img-src 'self' data: http://*.cohenandsteers.com http://*.cohenandsteers.jp http://*.cohenandsteers.jpn.com http://*.google-analytics.com http://*.lfeeder.com http://*.leadfeeder.com https://*.cohenandsteers.com https://*.cohenandsteers.jpn.com https://*.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.google.com.br https://*.google.com.co https://*.google.com.hk https://*.google.com.ph https://*.google.com.qa https://*.google.ca https://*.google.co.in https://*.google.co.uk https://*.google.dz https://*.google.ie https://*.google.nl https://*.google.ru https://*.google.se https://*.googletagmanager.com https://optimize.google.com https://*.gstatic.com https://*.s3.amazonaws.com https://*.sharethis.com https://assets.zendesk.com https://s-static.ak.facebook.com https://ssl.google-analytics.com https://*.vimeo.com https://*.vimeocdn.com https://tags.bluekai.com https://px.ads.linkedin.com https://p.adsymptotic.com https://*.linkedin.com https://*.lfeeder.com https://*.leadfeeder.com; child-src 'self' https://*.consensu.org https://*.doubleclick.net https://*.icsdelivery.com https://*.sharethis.com https://*.vimeo.com; default-src 'self'; frame-src 'self' https://*.doubleclick.net https://*.icsdelivery.com https://vimeo.com https://*.vimeo.com https://*.moz.com https://*.sharethis.com https://*.consensu.org https://optimize.google.com https://*.donatekindly.org https://*.greenhouse.io; style-src 'self' 'unsafe-inline' http://*.cohenandsteers.com http://*.cohenandsteers.jp http://*.cohenandsteers.jpn.com http://tagmanager.google.com https://*.cohenandsteers.com https://*.cohenandsteers.jpn.com https://*.sharethis.com https://assets.zendesk.com https://fonts.googleapis.com https://tagmanager.google.com https://*.google-analytics.com https://*.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://optimize.google.com https://*.w3schools.com; connect-src 'self' https://*.sharethis.com https://*.google-analytics.com http://info.cohenandsteers.com https://info.cohenandsteers.com; object-src 'self' http://*.cohenandsteers.com https://*.cohenandsteers.com; font-src 'self' data: http://*.code.jquery.com http://*.cohenandsteers.com http://*.cohenandsteers.jp http://*.cohenandsteers.jpn.com http://*.facebook.com http://*.google-analytics.com http://*.googleadservices.com http://*.googleapis.com http://*.googletagmanager.com http://*.pardot.com https://*.code.jquery.com https://*.cohenandsteers.com https://*.cohenandsteers.jpn.com https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.pardot.com https://*.sharethis.com https://*.vimeo.com https://assets.zendesk.com https://code.jquery.com https://connect.facebook.net https://ssl.google-analytics.com https://fonts.gstatic.com; report-uri https://vector.report-uri.com/r/d/csp/reportOnly; 1
default-src *; img-src * 'self' data: ; style-src * 'self' 'unsafe-inline' http://code.jquery.com/ https://www.gstatic.com https://ajax.googleapis.com https://maps.googleapis.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://cdn.rawgit.com https://maps.googleapis.com https://fonts.googleapis.com https://cdn.jsdelivr.net; media-src 'self' https://static-cdn.sr.se http://sverigesradio.se https://sverigesradio.se http://http-live.sr.se https://http-live.sr.se; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://netdna.bootstrapcdn.com https://www.google.com https://cdn-webgl.wrld3d.com https://www.googletagmanager.com https://use.typekit.com https://api.flickr.com https://unpkg.com https://ssl.google-analytics.com/r https://ssl.google-analytics.com https://maps.googleapis.com https://code.angularjs.org https://www.google.com/jsapi http://code.jquery.com/ https://npmcdn.com https://cdn.rawgit.com https://cdn.jsdelivr.net https://www.gstatic.com https://www.google-analytics.com https://ajax.googleapis.com https://fusiontables.google.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://google.com 1
default-src https://chimpstatic.com 'self' https://*.getprintbox.com; connect-src https://vc.hotjar.io/ https://www.lacmp.net https://bam.nr-data.net https://chimpstatic.com https://*.trustedshops.com https://trustbadge.api.etrusted.com https://*.tawk.to wss://*.tawk.to 'self' blob: bookfactory.ch bubu.getprintbox.com www.bookfactory.ch www.bubu.getprintbox.com bubu-pbx2.getprintbox.com pbx2-bubu.s3.eu-central-1.amazonaws.com pbx2-bubu.s3.eu-central-1.amazonaws.com printbox-js.s3.amazonaws.com https://*.getprintbox.com https://dbg.getprintbox.com:8888 https://*.google-analytics.com https://*.google.com https://*.facebook.com https://*.bing.com https://*.olark.com wss://*.zopim.com https://*.zopim.com https://stats.g.doubleclick.net https://www.paypal.com https://*.stripe.com https://*.hotjar.com wss://*.hotjar.com wss://*.getprintbox.com https://*.googleapis.com https://*.smartsupp.com wss://*.smartsupp.com https://api.instagram.com https://graph.instagram.com https://*.facebook.net https://*.gstatic.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://bam.nr-data.net https://*.nets.com.sg https://*.enets.sg; script-src https://www.googleadservices.com https://googleads.g.doubleclick.net https://mc.us10.list-manage.com https://*.mailchimp.com/ https://chimpstatic.com https://tc.connects.ch/ https://widgets.trustedshops.com/ https://s3.amazonaws.com https://bookfactory.us10.list-manage.com https://*.tawk.to https://cdn.jsdelivr.net 'self' bookfactory.ch bubu.getprintbox.com www.bookfactory.ch www.bubu.getprintbox.com bubu-pbx2.getprintbox.com printbox-js.s3.amazonaws.com https://dbg.getprintbox.com:8000 https://dbg.getprintbox.com:8888 'unsafe-inline' 'unsafe-eval' https://*.getprintbox.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.google.com https://*.google.pl https://*.google.dk https://*.googleapis.com https://*.googletagmanager.com https://*.bing.com https://*.gstatic.com https://*.google-analytics.com https://cdn.mouseflow.com https://*.facebook.net https://api.instagram.com https://api.flickr.com https://*.twitter.com https://*.pinterest.com https://cdn.klarna.com https://*.stripe.com https://*.olark.com https://chimpstatic.com https://*.zopim.com https://*.bootstrapcdn.com https://cdn.tinymce.com https://www.paypal.com https://www.paypalobjects.com https://*.hotjar.com https://*.prestashop.com https://auth-server.herokuapp.com https://cdnjs.cloudflare.com https://www.youtube.com https://*.ytimg.com/ https://smartsupp-widget-161959.c.cdn77.org https://bootstrap.smartsuppchat.com https://www.smartsuppchat.com https://tagmanager.google.com https://*.enets.sg; img-src 'self' data: blob: https: www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com; style-src https://tagmanager.google.com https://*.mailchimp.com/ https://widgets.trustedshops.com https://*.tawk.to https://cdn.jsdelivr.net https://cdn-images.mailchimp.com https://chimpstatic.com 'self' 'unsafe-inline' printbox-js.s3.amazonaws.com https://dbg.getprintbox.com:8888 https://*.getprintbox.com https://*.googleapis.com https://*.olark.com https://*.bootstrapcdn.com https://*.prestashop.com https://cdnjs.cloudflare.com https://smartsupp-widget-161959.c.cdn77.org https://tagmanager.google.com https://*.enets.sg; font-src https://fonts.googleapis.com https://*.trustedshops.com https://*.tawk.to 'self' data: blob: bookfactory.ch bubu.getprintbox.com www.bookfactory.ch www.bubu.getprintbox.com pbx2-bubu.s3.eu-central-1.amazonaws.com printbox-js.s3.amazonaws.com https://dbg.getprintbox.com:8888 https://*.getprintbox.com https://fonts.gstatic.com https://*.bootstrapcdn.com https://*.hotjar.com https://*.prestashop.com https://cdnjs.cloudflare.com https://*.zopim.com https://smartsupp-widget-161959.c.cdn77.org https://*.enets.sg; frame-src https://bid.g.doubleclick.net https://www.lacmp.net https://us10.list-manage.com https://bookfactory.us10.list-manage.com 'self' bookfactory.ch bubu.getprintbox.com www.bookfactory.ch www.bubu.getprintbox.com bubu-pbx2.getprintbox.com https://*.getprintbox.com https://*.google.com https://*.googletagmanager.com https://*.facebook.com https://*.facebook.net https://www.youtube.com https://www.youtube-nocookie.com https://cdn.klarna.com https://*.prestashop.com https://*.stripe.com https://*.cardinalcommerce.com https://*.olark.com https://*.twitter.com https://*.hotjar.com https://*.googleapis.com https://bid.g.doubleclick.net; media-src 'self' https://dbg.getprintbox.com:8888 https://*.olark.com https://smartsupp-widget-161959.c.cdn77.org; object-src 'none'; report-uri https://sentry.getprintbox.com/api/48/security/?sentry_key=67bc25495b504a2488cb2aa64ff50c4f; 1
frame-ancestors 'self' https://*.lgim.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' script.adcalls.nl stats.g.doubleclick.net www.googletagmanager.com code.jquery.com cdn.auth0.com stackpath.bootstrapcdn.com polyfill.io www.google-analytics.com bat.bing.com cdn.jsdelivr.net wchat.freshchat.com www.youtube.com s.ytimg.com www.googleadservices.com dl.episerver.net snap.licdn.com connect.facebook.net googleads.g.doubleclick.net maps.googleapis.com; style-src 'self' 'unsafe-inline' use.typekit.net p.typekit.net wchat.freshchat.com dl.episerver.net fonts.googleapis.com; img-src * data: blob:; font-src 'self' use.typekit.net fonts.gstatic.com; connect-src 'self' *.auth0.com bat.bing.com *.adcalls.nl stats.g.doubleclick.net www.google-analytics.com; frame-src *; form-action 'self' cadac.eu.auth0.com *.cadac.com www.youtube.com wchat.freshchat.com *.buckaroo.nl 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.ampproject.org *.googleadservices.com *.googletagmanager.com *.doubleclick.net google.com https://px.ads.linkedin.com/ https://platform.twitter.com/ https://cdn.syndication.twimg.com/ https://ajax.googleapis.com/ https://buttons.github.io/ https://c6.patreon.com/ https://cdnjs.cloudflare.com https://ajax.cloudflare.com https://www.google-analytics.com/ https://connect.facebook.net/ https://cdn.mxpnl.com/ https://beacon-v2.helpscout.net/; style-src 'self' 'unsafe-inline' https://ton.twimg.com/ https://platform.twitter.com/ https://fonts.googleapis.com/ https://code.jquery.com/ https://cdnjs.cloudflare.com/ https://maxcdn.bootstrapcdn.com/; img-src 'self' data: *.google.com *.google.pt *.google.com.br *.gravatar.com https://i.ytimg.com/ https://stats.g.doubleclick.net/ https://www.google-analytics.com/ https://ton.twimg.com/ https://platform.twitter.com/ https://pbs.twimg.com/ https://syndication.twitter.com/ https://ak1s.abmr.net/ https://www.paypal.com/ https://www.paypalobjects.com/ https://ampforwp.com/ https://cdn.ampproject.org/ https://s3.envato.com/ https://rankmath.com/ https://ps.w.org/ https://via.placeholder.com/ https://www.facebook.com/ https://s.w.org/ https://wp-rocket.me/; child-src 'self' *.doubleclick.net *.google.com https://www.youtube.com/ https://syndication.twitter.com/ https://platform.twitter.com/ https://www.patreon.com/ https://staticxx.facebook.com/ https://www.facebook.com/ https://akismet.com/; connect-src 'self' https://ampcid.google.com/ https://stats.g.doubleclick.net https://www.googletagmanager.com/ https://www.google-analytics.com https://cdn.ampproject.org/ https://mkt.marketingobjetivo.com.br/ https://www.facebook.com/ https://api.github.com/ https://api.mixpanel.com/ https://d3hb14vkzrxvla.cloudfront.net/; font-src 'self' data: https://fonts.gstatic.com/ https://maxcdn.bootstrapcdn.com/; upgrade-insecure-requests;  base-uri 'self'; frame-src https://projetosmissao.com.br *.projetosmissao.com.br *.projetosmissao.com *.sagapolicial.com *.sagapolicial.com.br https://www.facebook.com/; 1
connect-src https://* 1
frame-ancestors https://*.sambaash.com https://*.lithan.com 1
frame-src *; frame-ancestors *; report-uri https://gotoltc.edu/report-uri/enforce 1
default-src http://*.feelgoodstore.com https://*.feelgoodstore.com 'unsafe-inline' 'unsafe-eval' data: blob: *.2mdn.net *.bizrate.com *.bizrateinsights.com *.brightcove.com *.brightcove.net *.coremetrics.com *.doubleclick.net *.facebook.com *.facebook.net *.fonts.net *.googleadservices.com *.google-analytics.com *.googleapis.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hawksearch.com *.hawksearch.info *.hawksearch.net *.mcafeesecure.com *.monetate.net *.moovweb.net *.offeredby.net *.powerreviews.com *.ywxi.net *.2mdn.net *.newbenefits.com *.anthonyrichards.com *.passtohealth.com *.cloudfront.net *.zencdn.net *.cloudinary.com *.iesnare.com *.cmcore.com *.paymentech.com *.kaptcha.com chat.amerimark.com *.hotjar.com wss://*.hotjar.com *.hotjar.io *.linksynergy.com *.rakuten.com *.bing.com *.akstat.io *.googletagservices.com *.monetate.org *.paypalobjects.com *.braintreegateway.com *.paypal.com *.braintree-api.com *.trustedsite.com s3-us-west-2.amazonaws.com/mfesecure-public/ *.go-mpulse.net *.beautyboutiqueperks.com *.harrietcarterperks.com *.amerimarkperks.com *.feelgoodstoreperks.com *.timeformeperks.com *.attn.tv *.attentivemobile.com *.noibu.com wss://vf.noibu.com *.bluecore.com *.rlcdn.com *.alocdn.com *.gonift.com *.tags.wdsvc.net *.wdsvc.net *.adsrvr.org *.emmonemo.com 1
default-src wss: https: data:; script-src https: 'unsafe-inline' 'unsafe-eval' ; style-src https: 'unsafe-inline' 1
default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval';  script-src * data: blob: 'unsafe-inline' 'unsafe-eval';  connect-src * data: blob: 'unsafe-inline';  img-src * data: blob: 'unsafe-inline';  frame-src * data: blob: ;  style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 1
default-src * data:; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.google.com *.googleapis.com; font-src 'self' data: *.bootstrapcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com *.googleapis.com secure.leadforensics.com *.google.com *.unity.co.uk *.googletagmanager.com *.twitter.com *.google-analytics.com *.gstatic.com *.civiccomputing.com; 1
frame-ancestors 'self' crazyegg.com; 1
frame-ancestors 'self' http://10.1.0.241 1
frame-ancestors 'self' https://*.ok.de; font-src 'self' data: https://*.ok.de https://fonts.gstatic.com https://ir.ebaystatic.com 1
default-src 'self' https://*.centris.ca https://*.realtylink.org/ https://*.google-analytics.com https://fonts.gstatic.com https://fonts.googleapis.com https://stats.g.doubleclick.net https://www.google.ca https://www.google.com https://www.googletagmanager.com https://sb.scorecardresearch.com https://cdn.jsdelivr.net https://*.locallogic.co https://cdnjs.cloudflare.com https://browser.sentry-cdn.com https://segment.prod.bidr.io https://maps.google.com https://maps.google.ca https://maps.googleapis.com https://*.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://unpkg.com https://*.arcgis.com https://events.mapbox.com https://maxcdn.bootstrapcdn.com https://*.lrcontent.com https://connect.facebook.net https://snap.licdn.com https://*.hotjar.com https://*.hotjar.io https://www.facebook.com https://*.loginradius.com https://www.prospectsweb.com https://www.youtube.com https://*.tryinteract.com https://spark.adobe.com https://*.surveymonkey.com https://ajax.googleapis.com blob: 'unsafe-inline' 'unsafe-eval'; img-src * data: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org https://www.googletagservices.com googleads.g.doubleclick.net *.doubleclick.net *.google.ru cdn.jsdelivr.net *.top100.ru *.cloudfront.net *.google.com *.rambler.ru yandex.ru *.yandex.ru yastatic.net *.yandex.net yandex.st *.googleapis.com apis.google.com *.gstatic.com gstatic.com *.googlesyndication.com *.googleadservices.com counter.yadro.ru www.liveinternet.ru vk.com *.vk.com *.mail.ru *.twitter.com cdn.syndication.twimg.com *.facebook.net *.jquery.com cackle.me *.cackle.me; style-src 'self' 'unsafe-inline' google.com www.google.com cackle.me *.cackle.me *.yandex.ru fonts.googleapis.com; font-src 'self' data: *.gstatic.com *.yandex.ru fonts.googleapis.com maxcdn.bootstrapcdn.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' matomo.criptext.com cdn.criptext.com https://oc8k71nhga.execute-api.us-west-2.amazonaws.com/production/submit; 1
default-src 'self' blob: http://auction.hermann-historica.de/api/ http://auction.local.hermann-historica.de:81/api/ http://auction.hermann-historica.de.adherhi.dev.arrabiata.de/api/ https://*.tokbox.com https://*.opentok.com wss://*.tokbox.com https://cdn.polyfill.io/v2/polyfill.min.js https://maxcdn.bootstrapcdn.com/font-awesome/ https://stackpath.bootstrapcdn.com/font-awesome/ wss://*.bidjs.com *.bidjs.com *.shopware.de  *.shopware.com secure.pay1.de www.googletagmanager.com tagmanager.google.com www.google-analytics.com code.jquery.com www.youtube.com www.youtube-nocookie.com https://connect.facebook.net/ 'unsafe-inline' 'unsafe-eval'; img-src 'self' blob: data: https://sbp-plugin-images.s3.amazonaws.com/ https://sbp-plugin-images.s3.eu-west-1.amazonaws.com/ https://*.amazonaws.com/sbp-plugin-images/ https://res.cloudinary.com/bidlogix/ https://res.cloudinary.com/bidlogix-test/ https://res.cloudinary.com/bidlogix-staging/ https://brighton-staging.eu-central-1.bidjs.com/ https://media.bidjs.com/ https://www.google-analytics.com https://stats.g.doubleclick.net/ https://www.googletagmanager.com/ https://www.google.com/ads/ https://www.google.de/ads/ https://ssl.gstatic.com/ https://www.gstatic.com/ https://www.facebook.com/tr/ 1
default-src * data: blob:;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com https://static.hotjar.com;frame-src 'self' https://*.mhcache.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://vars.hotjar.com https://*.facebook.com https://*.googleapis.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://www.zenaps.com;script-src myheritage-container.com  'unsafe-inline' blob: data: 'self' https://*.myheritage.com https://*.mhcache.com https://cdn.trackjs.com https://tpc.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.googletagmanager.com https://connect.facebook.net https://bat.bing.com https://www.googleadservices.com https://*.google-analytics.com https://www.gstatic.com https://*.googleapis.com https://js-agent.newrelic.com https://*.nr-data.net https://*.mk-sense.com https://code.jquery.com https://*.hotjar.com https://www.dwin1.com https://www.zenaps.com https://ad.zanox.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://tagmanager.google.com https://optanon.blob.core.windows.net;connect-src data: 'self' https://*.myheritage.com https://*.mhcache.com https://www.google-analytics.com https://adservice.google.com https://*.nr-data.net https://sentry.io https://capture.trackjs.com https://*.bing.com https://*.facebook.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io:* https://*.doubleclick.net https://*.mk-sense.com https://privacyportal-eu.onetrust.com myheritage-container.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com 1
default-src * 'self' 'unsafe-inline' 'unsafe-eval' ; script-src * 'self' 'unsafe-inline' 'unsafe-eval' ; style-src * 'self' 'unsafe-inline' ; img-src * 'self' data: ; font-src * data: blob: 'unsafe-inline'; 1
frame-ancestors *.tic.ir; 1
frame-ancestors https://*.mpidc.co.in/ 'self'; 1
default-src 'self' *.nrw.de;    script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.jsdelivr.net *.etracker.com *.etracker.de *.ytimg.com *.cookiebot.com;    style-src 'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net;    font-src *;    img-src data: *;    frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.cookiebot.com;    child-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de *.youtube-nocookie.com *.issuu.com *.etracker.de *.cookiebot.com;    object-src 'self';    connect-src 'self' *.etracker.de *.etracker.com *.cookiebot.com;    media-src *; 1
script-src 'self' 'unsafe-eval' localhost:8080 cdn1.readspeaker.com use.typekit.net p.typekit.net www.googletagmanager.com www.google-analytics.com 'unsafe-inline'; connect-src 'self' app-eu.readspeaker.com rstts-eu.readspeaker.com media-eu.readspeaker.com ws://localhost:8080/ http://localhost:8080/ https://www.google-analytics.com/; font-src 'self' data: use.typekit.net; frame-src 'self' *.youtube.com *.youtube-nocookie.com youtu.be app-eu.readspeaker.com 1
default-src 'self' https://cors-anywhere.herokuapp.com https://api.jublo.net/codebird/oauth2/token https://api.jublo.net/codebird/oauth2/token https://api.jublo.net/codebird/1.1/statuses/; style-src 'self' 'unsafe-inline' https://platform.twitter.com/css/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.syndication.twimg.com/ https://syndication.twitter.com/ https://platform.twitter.com/ https://api.rss2json.com https://api.jublo.net/codebird https://api.jublo.net/codebird/oauth2/token https://matomo.irt.de; form-action 'self' https://*.twitter.com/; worker-src 'none'; frame-src https://*.twitter.com/; img-src 'self' https://*.twitter.com/  http://pbs.twimg.com/media/ https://pbs.twimg.com/media/ data: https://matomo.irt.de ; 1
default-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: http:; style-src 'unsafe-inline' https: http:; font-src data: https:; object-src 'none' ; base-uri 'none'; report-uri https://mobius.report-uri.com/r/d/csp/enforce; 1
default-src 'self' youtube.com *.nomotraplaws.com *.youtube.com *.cloudfront.net; font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com fonts.googleapis.com fast.fonts.net *.hotjar.com *.typekit.net *.cloudflare.com *.cloudfront.net unpkg.com *.hotjar.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: static.lobbytools.com *.boldchat.com code.jquery.com nextpatient.co www.healow.com js-agent.newrelic.com congress.api.sunlightfoundation.com maps.googleapis.com tagmanager.google.com sp.analytics.yahoo.com analytics.twitter.com static.ads-twitter.com s.yimg.com cdnjs.cloudflare.com t.sharethis.com *.cloudfront.net www.googletagmanager.com *.google-analytics.com ws.sharethis.com *.doubleclick.net www.youtube.com www.googleadservices.com secure.quantserve.com bat.bing.com *.e.akamai.net *.rfihub.net *.rfihub.com s.ytimg.com fast.fonts.net connect.facebook.net *.ppactionvoterguide.org *.optimizely.com *.openlayers.org bs.serving-sys.com *.addthis.com *.pinimg.com storify.com *.userzoom.com *.nr-data.net cse.google.com static.addtoany.com *.google.com dev.visualwebsiteoptimizer.com *.googleapis.com ajax.googleapis.com ajax.cloudflare.com optimizely.s3.amazonaws.com *.hotjar.com act.plannedparenthoodaction.org *.quantcount.com sc-static.net *.typekit.net d3js.org *.quantcount.com *.twitter.com *.tintup.com *.twimg.com *.ngpvan.com *.gstatic.com *.d3js.org *.sitomobile.com *.ad.gt *.hotjar.io; connect-src 'self' *.google-analytics.com secure.ppaction.org www.ppaction.org l.sharethis.com logx.optimizely.com *.openlayers.org *.luckyorange.net *.luckyorange.com *.hotjar.com *.visitors.live *.everyaction.com *.myngp.com *.plannedparenthood.org api.curator.io fifqau3zr2.execute-api.us-east-1.amazonaws.com *.amazonaws.com ed7h91nn4l.execute-api.us-east-1.amazonaws.com *.hotjar.io; img-src 'self' 'unsafe-inline' data: *.beentheredonethat.im1inamillion.org/* *.typekit.net *.ib5k.com *.boldchat.com insight.adsrvr.org www.plannedparenthood.org i.ytimg.com *.gstatic.com maps.googleapis.com t.co www.googleadservices.com sb.scorecardresearch.com l.sharethis.com *.google-analytics.com www.googletagmanager.com www.google.com *.doubleclick.net pixel.quantserve.com bat.bing.com bat.r.msn.com img.youtube.com *.vimeo.com *.facebook.com www.healow.com vmap0.tiles.osgeo.org *.googleusercontent.com *.hotjar.com *.userzoom.com *.twitter.com *.twimg.com *.myngp.com *.everyaction.com *.cloudfront.net *.sitomobile.com *.amazonaws.com *.ppedit.org *.ppedit.org/* cms-trump-tracker.ppedit.org/* gwmtracking.com *.im1inamillion.org beentheredonethat.im1inamillion.org beentheredonethat.im1inamillion.org/* adentifi.com/* *.hotjar.io; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com nextpatient.co tagmanager.google.com fonts.googleapis.com fast.fonts.net ws.sharethis.com *.google.com unpkg.com *.userzoom.com *.twitter.com *.cloudfront.net; frame-src 'self' *.snapchat.com *.adsrvr.org *.boldchat.com www.healow.com docasap.com www.google.com maps.googleapis.com maps.google.com external.ppsne.org e.issuu.com www.tintup.com tagmanager.google.com fonts.googleapis.com t.sharethis.com *.70n7.com secure.ppaction.org seg.sharethis.com ws.sharethis.com www.youtube.com player.vimeo.com www.ppaction.org register2.rockthevote.com connect.facebook.net *.facebook.com *.rfihub.com docs.google.com *.cloudfront.net storify.com *.soundcloud.com static.addtoany.com cse.google.com *.surveymonkey.com *.nomotraplaws.com *.addthis.com *.everyaction.com *.doubleclick.net *.optimizely.com *.hotjar.com *.twitter.com *.71n7.com *.nextgen.com *.hypemarks.com register.vote.org *.weareplannedparenthood.org *.weareplannedparenthoodaction.org *.actblue.com javamatch.matchinggifts.com www.flipcause.com act.plannedparenthoodaction.org secure.everyaction.com *.hotjar.io; frame-ancestors 'self' *.twitter.com www.healow.com *.ppaction.org; 1
frame-ancestors 'self' https://www.energiaxxi.com https://www.endesaclientes.com https://tempoconbisbal.com http://www.endesadiagnosticoenergetico.com http://www.endesadiagnosticoenergetico.com https://www.facebook.es https://www.facebook.com https://www.aaff.endesaclientes.com 1
script-src 'self' *.abmr.net *.awin1.com *.dwin1.com *.bazaarvoice.com *.bing.com *.brsrvr.com *.doubleclick.net *.curbside.com *.euro.confirmit.com *.facebook.com *.facebook.net *.fredhopperservices.com *.google.co.uk *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.kfplc.com *.micpn.com *.network-eu.bazaarvoice.com *.paypalobjects.com *.res-x.com *.screwfix.ie *.screwfix.local *.tiqcdn.com *.trustarc.com *.truste.com *.twitter.com *.wufoo.com *.yottaa.net *.youtube.com *.zenaps.com analytics.twitter.com bat.bing.com k1u3gele.micpn.com screwfixmedia.co.uk tealiumiq.com youtube.com 'unsafe-inline' 'unsafe-eval'; object-src 'self' *.gstatic.com 1
default-src 'self' 'unsafe-inline' *.adform.net osnatel.de www.osnatel.de www2.osnatel.de *.osnatel.de *.facebook.net *.facebook.com *.dwin1.com 20782209p.rfihub.com c1.rfihub.net *.cookiebot.com *.adc-srv.net *.google.de bat.bing.com *.google.com hello.myfonts.net *.rfihub.com *.doubleclick.net *.g.doubleclick.net *.googleadservices.com *.rfihub.net *.intelliad.de *.bing.com/bat.js https://forms.osnatel.de/ *.forms.osnatel.de *.pimcore.org *.ggpht.com *.gstatic.com *.googleapis.com 'unsafe-eval' *.googletagmanager.com *.google.com/recaptcha/ *.google-analytics.com hello.myfonts.net *.tellja.de insight.adsrvr.org js.adsrvr.org *.ad4mat.de https://ad4m.at https://*.ad4mat.net fonts.googleapis.com pso-empfehlen.staging.pso-vertrieb.de empfehlen-admin.pso-vertrieb.de data:;img-src * data:; 1
script-src http: https: 'unsafe-inline' 'unsafe-eval'; report-uri /csp-report; 1
frame-ancestors 'self' *.dmlib.de *.dmlib.in *.dmlib.io one.bydeluxe.com one-demo.bydeluxe.com 1
frame-ancestors https://www.cupraofficial.fr https://author-seat-stage63.adobecqms.net https://seat-stage63.adobecqms.net https://author-seat-prod63.adobecqms.net https://seat-prod63.adobecqms.net 'self' 1
default-src 'self' data: *.tid.es *.telefonica.com https://ucweb.movistarplay.cl/; font-src 'self' *.gstatic.com *.facebook.com data:; img-src 'self' data: http://*.telefonica.com https://*.telefonica.com http://*.tid.es https://*.tid.es https://*.tid.es *.google-analytics.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager *.google.com *.google.es; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.net *.googleadservices.com *.doubleclick.net *.facebook.com; frame-src 'self' https://* *.doubleclick.net *.facebook.com; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.facebook.com; media-src 'self' blob:; connect-src 'self' *.tid.es *.telefonica.com *.nice264.com *.youbora.com *.youborafds01.com *.youboranqs01.com *.quickplay.com *.foxplay.com *.foxsyndicationlatam.com *.footprint.net *.hbo-la.com *.hbopaseo.com *.akamaized.net *.mca.tid.es *.content.uplynk.com/wv *.content.uplynk.com/pr *.content.uplynk.com/fp-spc *.verizondigitalmedia-playready.vudrm.tech  *.content-ause1.uplynk.com *.content-ausc1.uplynk.com *.content-ausw1.uplynk.com *.uplynk.com *.x-default-stgec.uplynk.com *.disney.myvdms.com *.foxsyndicationlatam.com *.google-analytics.com *.facebook.com https://ucweb.movistarplay.cl/ 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' use.typekit.net www.googletagmanager.com www.google-analytics.com cdnjs.cloudflare.com tagmanager.google.com maps.googleapis.com developers.google.com www.google.com/recaptcha/api.js www.gstatic.com cdn.rawgit.com; style-src 'self' 'unsafe-inline' use.typekit.net fonts.googleapis.com cdnjs.cloudflare.com tagmanager.google.com; img-src 'self' p.typekit.net www.google-analytics.com data: ssl.gstatic.com www.gstatic.com maps.googleapis.com maps.gstatic.com developers.google.com cdn.rawgit.com/ckeditor fidinet.fidi.org stats.g.doubleclick.net; font-src 'self' *.typekit.net fonts.gstatic.com data; connect-src 'self' performance.typekit.net www.google-analytics.com; report-uri /report-csp-violation 1
frame-ancestors 'self' http://www.philips.pt *.philips.com *.philips.pt 1
default-src 'self' data: *.google.com *.google.co.uk *.googletagmanager.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com *.hubspot.com *.google-analytics.com *.gstatic.com maps.googleapis.com player.vimeo.com *.hsforms.net *.hsforms.com *.youtube.com *.myfonts.net www.buzzsprout.com *.linkedin.com *.smartrecruiters.com stats.g.doubleclick.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io *.google-analytics.com *.hs-scripts.com *.hs-analytics.net *.googletagmanager.com *.hsforms.net *.hsforms.com *.googleapis.com googlemaps.github.io *.smartrecruiters.com *.cloudflare.com www.google.com www.gstatic.com polyfill.io unpkg.com www.buzzsprout.com snap.licdn.com; style-src 'self' data: 'unsafe-inline' *.smartrecruiters.com fonts.googleapis.com *.myfonts.net *.cloudflare.com 1
default-src 'self' localhost maps.googleapis.com themes.googleusercontent.com fonts.gstatic.com googleads.g.doubleclick.net ads.optad360.com http://ads.optad360.com csync.smartadserver.com secure-assets.rubiconproject.com ec-ns.sascdn.com track.adform.net api.deep.bi ls.hit.gemius.pl securepubads.g.doubleclick.net *.safeframe.googlesyndication.com safeframe.googlesyndication.com googlesyndication.com *.googlesyndication.com *.gstatic.com *.cloudflare.com; block-all-mixed-content; frame-src googlesyndication.com *.googlesyndication.com pagead2.googlesyndication.com *.hit.gemius.pl *.gemius.pl *.rubiconproject.com *.smartadserver.com *.sascdn.com googleads.g.doubleclick.net; img-src 'self' data: blob: google-analytics.com www.google-analytics.com fonts.googleapis.com maps.google.com *.gstatic.com maps.googleapis.com adx.adform.net www3.smartadserver.com creatives.sascdn.com ad.doubleclick.net pixel.adsafeprotected.com x.bidswitch.net cm.g.doubleclick.net d5p.de17a.com sync.clickonometrics.pl ib.adnxs.com ma.wp.pl cm.adgrx.com cm.adform.net c1.adform.net server.seadform.net sync-eu.exe.bid track.adform.net sync.bumlam.com s1.adform.net pre.glotgrx.com dt.adsafeprotected.com pro.hit.gemius.pl gremimedia.pl cdn.uwazamrze.pl stats.g.doubleclick.net ced-ns.sascdn.com www.google.com www.google.pl *.google.com *.google.pl googlesyndication.com *.googlesyndication.com *.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: cdn.historia.uwazamrze.pl fonts.googleapis.com *.gstatic.com maps.google.com maps.googleapis.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com ced.sascdn.com ced-ns.sascdn.com s1.adform.net adx.adform.net pagead2.googlesyndication.com adservice.google.com googleads.g.doubleclick.net www3.smartadserver.com adservice.google.pl pixel.yabidos.com pixel.adsafeprotected.com track.adform.net static.adsafeprotected.com code.createjs.com radar.cedexis.com cdn.rp.pl cdn.uwazamrze.pl www.youtube.com s.ytimg.com api.deep.bi sync.smartadserver.com gapl.hit.gemius.pl securepubads.g.doubleclick.net googletagservices.com *.googletagservices.com googlesyndication.com *.googlesyndication.com ampproject.org *.ampproject.org *.2mdn.net *.evidon.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com blob: cdn.rp.pl cdn.uwazamrze.pl 1
default-src *; script-src 'self' http://www.google-analytics.com http://suggest.infospace.com http://api.autocompleteplus.com http://www.googletagservices.com http://d.yimg.com https://completr.appspot.com https://s.yimg.com http://js.wincyahoocontent.com ; frame-src  'self' http://*.yhs4.search.yahoo.com http://ad.adserver-pro.net https://s.yimg.com ; font-src 'none'; connect-src 'self'; media-src 'self'; object-src 'none'; style-src 'self'; 1
default-src allow 'self' data: blob: filesystem:; script-src https://chapterthree.od1.vtiger.com https://*.hotjar.com https://www.google.com/recaptcha/api.js https://cdn.syndication.twimg.com/tweets.json https://www.gstatic.com https://fast.wistia.com https://bam.nr-data.net https://js-agent.newrelic.com https://platform.twitter.com https://disqus.com/next/config.js https://*.disqus.com https://*.disquscdn.com 'self' 'unsafe-inline' 'unsafe-eval' https://*.google-analytics.com https://connect.facebook.net; img-src 'self' https://syndication.twitter.com https://*.hotjar.com https://www.gravatar.com https://platform.twitter.com https://pbs.twimg.com https://stats.g.doubleclick.net https://i.giphy.com https://media.giphy.com https://www.google-analytics.com https://fast.wistia.com https://embedwistia-a.akamaihd.net https://ssl.google-analytics.com https://*.disquscdn.com https://*.disqus.com data: blob: filesystem:; style-src 'self' 'unsafe-inline' https://platform.twitter.com https://cloud.typography.com https://*.chapterthree.com https://*.disquscdn.com http://*.pantheonsite.io https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data: blob: filesystem:; frame-src https://www.google.com https://www.icloud.com https://fast.wistia.net https://fast.wistia.com https://www.youtube.com archive.org https://www.slideshare.net https://public.slidesharecdn.com https://*.hotjar.com https://*.vimeo.com https://disqus.com http://*.pantheonsite.io https://*.chapterthree.com https://platform.twitter.com https://syndication.twitter.com; object-src 'none'; connect-src wss: https://distillery.wistia.com  https://*.hotjar.com https://embedwistia-a.akamaihd.net https://pipedream.wistia.com https://links.services.disqus.com https://cdn.viglink.com https://js-agent.newrelic.com 'self' 1
frame-src 'self' 7host.at my.matterport.com; 1
frame-ancestors 'self' https://*.loop21.net 1
connect-src 'self' ;default-src 'self';frame-ancestors 'self' ;frame-src 'self' https://www.google.com https://www.youtube.com;media-src 'self' ;object-src 'none'; script-src 'self' 'unsafe-inline' code.jquery.com https://ssl.google-analytics.com http://fancybox.net;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com;img-src 'self' ; 1
base-uri 'none'; object-src 'none'; script-src https://forum.sailfishos.org/logs/ https://forum.sailfishos.org/sidekiq/ https://forum.sailfishos.org/mini-profiler-resources/ https://forum.sailfishos.org/assets/ https://forum.sailfishos.org/brotli_asset/ https://forum.sailfishos.org/extra-locales/ https://forum.sailfishos.org/highlight-js/ https://forum.sailfishos.org/javascripts/ https://forum.sailfishos.org/plugins/ https://forum.sailfishos.org/theme-javascripts/ https://forum.sailfishos.org/svg-sprite/; worker-src 'self' https://forum.sailfishos.org/assets/ https://forum.sailfishos.org/brotli_asset/ https://forum.sailfishos.org/javascripts/ https://forum.sailfishos.org/plugins/ 1
default-src 'self' inverse.chat conversejs.org www.youtube-nocookie.com; connect-src * https:; img-src * 'self' data:; style-src 'self' 'unsafe-inline' cdn.conversejs.org fonts.googleapis.com; script-src 'self' 'unsafe-inline' stats.opkode.com cdn.conversejs.org; font-src 'self' fonts.gstatic.com fonts.googleapis.com cdn.conversejs.org data: 1
default-src 'self'; script-src * 'unsafe-eval' 'unsafe-inline'; object-src *; style-src * 'unsafe-inline'; img-src * data:;frame-src *;font-src * data:;connect-src * blob:;media-src * blob:;worker-src * blob:; 1
base-uri 'self'; form-action 'self' forms.hsforms.com www.facebook.com; img-src 'self' data: forms.hubspot.com www.googletagmanager.com perf.hsforms.com forms.hsforms.com track.hubspot.com https://secure.gravatar.com https://maps.googleapis.com https://maps.gstatic.com https://www.linkedin.com https://www.google-analytics.com https://px.ads.linkedin.com https://www.facebook.com; frame-src 'self' forms.hsforms.com app.hubspot.com https://www.facebook.com https://www.google.com https://www.emerchantpay.com https://maps.googleapis.com https://www.youtube.com; default-src 'self' data: https://px.ads.linkedin.com https://yoast.com https://cdn.polyfill.io https://secure.gravatar.com https://maps.googleapis.com https://maps.gstatic.com https://www.youtube.com https://www.google-analytics.com https://analysis.emerchantpay.com https://www.emerchantpay.com; font-src 'self' data: https://yoast.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://maps.googleapis.com https://www.emerchantpay.com; style-src 'self' 'unsafe-inline' https://yoast.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com; connect-src forms.hsforms.com bam.nr-data.net www.facebook.com forms.hubspot.com api.hubapi.com https://cdn.ampproject.org https://www.googletagmanager.com https://www.google-analytics.com https://graph.facebook.com https://connect.facebook.net https://www.emerchantpay.com https://api.applause-button.com/get-claps https://api.applause-button.com/update-claps https://yoast.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' bam.nr-data.net js.hsleadflows.net js-agent.newrelic.com forms.hsforms.com js.hsforms.net js.hs-scripts.com js.hsadspixel.net js.hscollectedforms.net js.hs-analytics.net js.hs-banner.com https://www.google.com https://www.gstatic.com https://snap.licdn.com https://cdn.ampproject.org https://code.jquery.com https://connect.facebook.net https://ajax.googleapis.com https://cdn.ampproject.org https://www.googletagmanager.com https://maxcdn.bootstrapcdn.com https://cdn.polyfill.io https://maps.googleapis.com https://s.ytimg.com https://www.youtube.com https://www.google-analytics.com 1
frame-ancestors my.cratejoy.com www.shakerandspoon.com shakerandspoon.cratejoy.com 1
default-src 'none'; script-src 'self' 'unsafe-inline' *.dataprovider.com *.google.com *.gstatic.com *.google-analytics.com www.googletagmanager.com blob: *.googleapis.com; style-src 'self' 'unsafe-inline' *.dataprovider.com *.typekit.net; img-src 'self' *.dataprovider.com *.dataprovider.com data: *.google-analytics.com *.google.com *.google.nl; font-src *; connect-src 'self' *.dataprovider.com *.sentry.io *.google-analytics.com *.doubleclick.net *.mapbox.com; frame-src 'self'  *.google.com *.googletagmanager.com; frame-ancestors 'self' *.googletagmanager.com *.google.com; base-uri 'self' *.dataprovider.com; form-action 'self' *.dataprovider.com; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: blob: http://placehold.it; object-src 'none'; style-src 'self' https: 'unsafe-inline' https://fast.fonts.net; connect-src 'self' https:; script-src 'self' https: http: 'unsafe-eval' 'unsafe-inline' 1
default-src *; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google.com https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://googleads.g.doubleclick.net https://detectca.easysol.net https://www.gstatic.com https://maps.googleapis.com https://platform.twitter.com https://js.hs-scripts.com https://www.googleadservices.com https://js.hs-analytics.net 1
default-sr https: data: 'unsafe-inline' 'unsafe-eval' 1
default-src https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com *.devplayground.com.br *.bizographics.com *.rawgit.com *.googleapis.com *.unpkg.com *.youtube.com *.googletagmanager.com *.googleadservices.com *.google.com *.gstatic.com *.google-analytics.com *.doubleclick.net *.ytimg.com *.facebook.net *.cloudfront.net *.rdstation.com.br *.w3-edge.com *.reclameaqui.com.br *.ampproject.org *.novahaus.com.br *.shoptarget.com.br *.shopback.net *.shopconvert.com.br *.voxus.com.br targeting.voxus.tv *.omguk.com *.hotjar.com snap.licdn.com; connect-src 'self' data: *.google.com https://freegeoip.app *.plyr.io https://noembed.com *.devplayground.com.br *.googleapis.com *.rdstation.com.br *.ampproject.org *.shoptarget.com.br *.linximpulse.net *.retargeter.com.br *.shopconvert.com.br ckies.net *.shopback.net *.viacep.com.br viacep.com.br *.voxus.tv api.ipify.org *.loggly.com *.hotjar.com wss://*.hotjar.com *.hotjar.io *.facebook.com www.google-analytics.com https://stats.g.doubleclick.net; img-src 'self' data: *.youtube.com *.ytimg.com *.devplayground.com.br *.facebook.com *.google-analytics.com *.google.com *.google.com.br *.doubleclick.net *.gravatar.com *.w.org *.linkedin.com *.shopback.net *.adsymptotic.com cliente.linx.com.br *.adnxs.com smartbmc.com.br *.smartbmc.com.br *.googletagmanager.com; style-src 'self' 'unsafe-inline' *.devplayground.com.br *.googleapis.com *.google.com *.shopback.net; font-src 'self' data: *.devplayground.com.br *.gstatic.com script.hotjar.com; worker-src https: blob: 1
frame-ancestors 'self' http://acquia.lookbookhq.com https://acquia.lookbookhq.com https://acquia.docebosaas.com https://confluence.acquia.com https://www.acquiaacademy.com https://app.veertly.com; report-uri /report-csp-violation 1
default-src 'self' data: https://www.fibt.com https://app.fibt.com https://fibt.com https://app.loanspq.com  https://apptest.loanspq.com https://www.firstintlbank.com https://firstintlbank.com https://*.salemove.com https://*.glia.com https://chatgw.firstintlbank.com https://web3.secureinternetbank.com https://maps.googleapis.com https://www.google-analytics.com https://stats.g.doubleclick.net https://maps.gstatic.com https://googleads.g.doubleclick.net https://youtube-nocookie.com; connect-src 'self' wss://*.salemove.com https://*.salemove.com wss://*.glia.com https://*.glia.com https://*.twilio.com wss://*.twilio.com https://www.google-analytics.com https://stats.g.doubleclick.net; media-src 'self' https://*.salemove.com https://*.glia.com; style-src 'self' 'unsafe-inline' https://chat.firstintlbank.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com/css https://chatgw.firstintlbank.com https://*.salemove.com https://*.glia.com; font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://chat.firstintlbank.com https://chatgw.firstintlbank.com https://web3.secureinternetbank.com https://ajax.googleapis.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://www.google.com/pagead/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com https://www.youtube.com https://s.ytimg.com https://*.salemove.com https://*.glia.com; object-src 'self'; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://bid.g.doubleclick.net https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://www.youtube.com https://chatgw.firstintlbank.com https://chat.firstintlbank.com https://www.google.com/maps/; frame-ancestors 'self' https://app.loanspq.com https://apptest.loanspq.com https://app.fibt.com; img-src 'self' blob: data: https://*.salemove.com https://*.glia.com https://chatgw.firstintlbank.com https://www.google-analytics.com https://www.googleadservices.com https://maps.gstatic.com https://maps.googleapis.com/maps/vt https://*.doubleclick.net https://insight.adsrvr.org/track/pxl/ https://ib.adnxs.com https://simage2.pubmatic.com/AdServer/Pug https://dsum-sec.casalemedia.com/rum https://x.bidswitch.net/syncd https://ib.adnxs.com/getuid https://ads.yahoo.com/cms/ https://pixel.advertising.com https://pixel.rubiconproject.com/tap.php https://ups.analytics.yahoo.com/ups/ https://match.adsrvr.org/track/ 1
frame-ancestors southeastchristian.churchonline.org southeastchristian.org www.southeastchristian.org 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.gstatic.com *.googleapis.com *.google-analytics.com www.google.com/recaptcha/  maps.googleapis.com *.facebook.com *.facebook.net licensebuttons.net *.doubleclick.net *.youtube.com cdn.maksnet.tv *.adobe.com licensebuttons.net *.rnids.rs xn--d1aholi.xn--90a3ac  forms.office.com *.tipometar.org; report-uri /report-csp-violation 1
default-src http: https: data: 'unsafe-inline' 'unsafe-eval';frame-src 'self' *.bnpparibasfortis.be *.bnpparibasfortis.com *.facebook.com *.vimeo.com *.youtube.com  'unsafe-inline' 'unsafe-eval'; 1
base-uri 'self'; frame-ancestors 'none'; report-uri /report-csp-violation 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-Jxt6Ffir6iigVv/3wGu5BA' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src 'self'; font-src * data: https:;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval' https:; style-src * 'unsafe-inline' https:; connect-src * https:; frame-src * https:; 1
default-src *; style-src  data: 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google.com https://www.gstatic.com 1
default-src 'self' https://cdn.wohnglueck.de; base-uri 'self'; object-src 'none'; form-action 'self' https://*.twitter.com https://survey.g.doubleclick.net; media-src 'self' https://v.pinimg.com; img-src 'self' https: data:; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://optimize.google.com https://fonts.googleapis.com https://platform.twitter.com https://ton.twimg.com; font-src 'self' https://fonts.gstatic.com data:; child-src https://www.instagram.com blob:; connect-src 'self' https://cdn.ampproject.org https://*.ampproject.net https://amp-error-reporting.appspot.com https://www.google.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://ampcid.google.com https://ampcid.google.de https://ampcid.google.at https://ampcid.google.ch https://widgets.pinterest.com https://platform.twitter.com https://syndication.twitter.com https://connect.facebook.net https://www.youtube.com https://*.ytimg.com https://i.vimeocdn.com https://player.vimeo.com https://www.instagram.com https://securepubads.g.doubleclick.net https://www.googletagservices.com https://pagead2.googlesyndication.com https://csi.gstatic.com https://*.s-onetag.com; worker-src blob:; frame-src https://formulare.wohnglueck.de https://ws-eu.amazon-adsystem.com https://*.ampproject.net https://www.google.com https://optimize.google.com https://*.facebook.com https://*.twitter.com https://twitter.com https://player.vimeo.com https://*.instagram.com https://www.youtube-nocookie.com https://open.spotify.com https://w.soundcloud.com https://compass.pressekompass.net https://survey.g.doubleclick.net https://adstax-match.adrtx.net https://*.googlesyndication.com https://www.googletagservices.com data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.ampproject.org https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://www.googleadservices.com https://adservice.google.com  https://optimize.google.com https://adservice.google.de https://*.g.doubleclick.net https://www.youtube.com https://*.pinterest.com https://connect.facebook.net https://www.instagram.com https://s.ytimg.com https://*.twitter.com https://cdn.syndication.twimg.com https://ads.urban-media.com https://www.googletagservices.com https://pagead2.googlesyndication.com https://confiant-integrations.global.ssl.fastly.net https://*.emetriq.de https://ups.xplosion.de https://cdn.adrtx.net https://tpc.googlesyndication.com https://*.s-onetag.com https://cdn.xplosion.de; prefetch-src *; frame-ancestors 'none'; upgrade-insecure-requests; report-uri https://report.wohnglueck.de/ 1
frame-ancestors 'self' *.kapow.com *.cvent.com http://*.cvent.com *.kapownp.com http://*.kapow.com:*; 1
upgrade-insecure-requests; block-all-mixed-content; default-src 'self'; script-src 'self' 'nonce-f68e8fefc523afce8753f3ce08d70b05ce3d7977' 'unsafe-eval' www.gstatic.com www.google-analytics.com www.googletagmanager.com ajax.googleapis.com https://chimpstatic.com downloads.mailchimp.com pagead2.googlesyndication.com www.google.com connect.facebook.net ajax.cloudflare.com static.cloudflareinsights.com https://mc.us17.list-manage.com js-agent.newrelic.com cdn-gl.imrworldwide.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com use.fontawesome.com https://downloads.mailchimp.com; img-src 'self' https: data:; font-src 'self' fonts.gstatic.com use.fontawesome.com; connect-src 'self' fcm.googleapis.com www.google-analytics.com stats.g.doubleclick.net; media-src 'self'; object-src 'self'; frame-src 'self' www.youtube.com www.google.com www.facebook.com cdn-gl.imrworldwide.com; frame-ancestors *; worker-src 'self'; manifest-src 'self'; prefetch-src 'self' *; 1
default-src 'self';   frame-src 'self' www.youtube.com analytics.clickdimensions.com pixel.mathtag.com embed.wirewax.com www.surveymonkey.com www.questionpro.com;   style-src 'self' 'unsafe-inline' fast.fonts.net az124611.vo.msecnd.net cdn.rawgit.com cdn.ckeditor.com;   img-src 'self' jwpltx.com cfvod.kaltura.com cdnapisec.kaltura.com kmc.kaltura.com ssl.google-analytics.com tracking.leadlander.com stats.g.doubleclick.net cdn.ckeditor.com px.ads.linkedin.com p.adsymptotic.com www.linkedin.com pixel.mathtag.com az124611.vo.msecnd.net data:;   script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' ssl.p.jwpcdn.com s.ytimg.com www.youtube.com t.sf14g.com snap.licdn.com px.ads.linkedin.com ssl.google-analytics.com kmc.kaltura.com cdnapisec.kaltura.com az124611.vo.msecnd.net analytics.clickdimensions.com ajax.googleapis.com cdn.rawgit.com cdn.ckeditor.com cdnapi.kaltura.com www.linkedin.com tracking.leadlander.com cdn.c212.net c212.net pixel.mathtag.com widget.surveymonkey.com www.questionpro.com;   font-src 'self' cdnapisec.kaltura.com data:;   connect-src 'self' *.kaltura.com metrics.articulate.com ssl.google-analytics.com;   media-src 'self' blob: *.kaltura.com 1
default-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; img-src 'self' *.usask.ca https: data: blob:; media-src 'self' *.usask.ca https: blob:; font-src 'self' *.usask.ca https: data:; worker-src 'self' *.usask.ca https: blob:; frame-ancestors self *.usask.ca; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.mail.ru am15.net *.am15.net vk.com *.vk.com *.google.com apis.google.com *.gstatic.com translate.google.com translate.googleapis.com www.google-analytics.com pagead2.googlesyndication.com; object-src 'self' am15.net *.am15.net *.gstatic.com; style-src 'self' 'unsafe-inline' *.google.com translate.googleapis.com fonts.googleapis.com; img-src * 'self' data:; child-src 'self' am15.net *.am15.net vk.com *.vk.com www.youtube.com *.google.com googleads.g.doubleclick.net; frame-src 'self' am15.net *.am15.net *.am15.net:8081 ok.ru vk.com *.vk.com www.youtube.com *.google.com googleads.g.doubleclick.net; font-src 'self' data: *.gstatic.com; connect-src 'self' *.mail.ru *.gstatic.com; 1
child-src 'self' *.youtube.com *.vimeo.com *.dailymotion.com sdk.companywebcast.com livestream.com ec.livecasts.eu *.europa.eu europa.eu youtube.com *.dailymotion.com *.vimeo.com *.amazonaws.com *.arcgis.com *.arte.tv *.babahh.com *.bbc.co.uk *.blitzvideoserver.de *.bpb.de *.brightcove.com *.btv.bg *.cc.cec *.cimo.fi *.cjelozivotno-ucenje.hr *.cnbc.com *.coe.int *.communi-k.eu *.compareyourcountry.org *.crp.education *.cy2012.eu *.dacast.com *.dcdn.lt debategraph.org digital-agenda-data.eu *.disaster-resilience.com *.docdroid.net *.d-portal.org *.easme-web.eu *.edcc.eu *.euneighbours.eu *.euronews.com *.europeandataportal.eu *.facebook.com https://familymeal.eu *.flickr.com *.franceculture.fr *.franceinter.fr *.freecaster.com *.freezbee.tv *.genial.ly *.giphy.com *.github.io *.google.be *.google.co.uk *.google.com *.google.fr *.grnet.gr *.index.hu *.instantflipbook.com *.issuu.com *.jrc.nl *.jwplatform.com *.learningandwork.org.uk *.libsyn.com *.live.com *.mentimeter.com *.metoo.sk *.mostra.eu *.neteyes.hu *.oecd.org *.openstreetmap.fr *.openstreetmap.org *.ourworldindata.org *.polarhd.com *.public-i.tv *.qbrick.com *.rackcdn.com *.rambla.be *.roguemotion.graphics *.sharepoint.com *.sketchfab.com *.slideshare.net *.solidtango.com *.soonfeed.com *.soundcloud.com *.streamamg.com *.streamcode.net *.streamdis.eu streamer.bg *.streaming.at *.streaming.sk *.streamovations.be *.sway.com *.tagesschau.de *.telemak.tv *.testa.eu *.thinglink.com *.tiesraides.lv *.top-ix.org *.tsnmalta.org *.tv1.eu *.tv-on-web.de *.twinix.eu *.typeform.com *.uc3m.es *.uplynk.com *.ustream.tv *.uu.se *.videliostreaming.com *.videolevels.com *.walls.io *.weforum.org *.westream.com *.wyng.com *.youongroup.com *.youtu.be *.youtube-nocookie.com *.zdf.de *.michael-lurquin.com; frame-src 'self' *.youtube.com *.vimeo.com *.dailymotion.com sdk.companywebcast.com livestream.com ec.livecasts.eu *.europa.eu europa.eu youtube.com *.dailymotion.com *.vimeo.com *.amazonaws.com *.arcgis.com *.arte.tv *.babahh.com *.bbc.co.uk *.blitzvideoserver.de *.bpb.de *.brightcove.com *.btv.bg *.cc.cec *.cimo.fi *.cjelozivotno-ucenje.hr *.cnbc.com *.coe.int *.communi-k.eu *.compareyourcountry.org *.crp.education *.cy2012.eu *.dacast.com *.dcdn.lt debategraph.org digital-agenda-data.eu *.disaster-resilience.com *.docdroid.net *.d-portal.org *.easme-web.eu *.edcc.eu *.euneighbours.eu *.euronews.com *.europeandataportal.eu *.facebook.com https://familymeal.eu *.flickr.com *.franceculture.fr *.franceinter.fr *.freecaster.com *.freezbee.tv *.genial.ly *.giphy.com *.github.io *.google.be *.google.co.uk *.google.com *.google.fr *.grnet.gr *.index.hu *.instantflipbook.com *.issuu.com *.jrc.nl *.jwplatform.com *.learningandwork.org.uk *.libsyn.com *.live.com *.mentimeter.com *.metoo.sk *.mostra.eu *.neteyes.hu *.oecd.org *.openstreetmap.fr *.openstreetmap.org *.ourworldindata.org *.polarhd.com *.public-i.tv *.qbrick.com *.rackcdn.com *.rambla.be *.roguemotion.graphics *.sharepoint.com *.sketchfab.com *.slideshare.net *.solidtango.com *.soonfeed.com *.soundcloud.com *.streamamg.com *.streamcode.net *.streamdis.eu streamer.bg *.streaming.at *.streaming.sk *.streamovations.be *.sway.com *.tagesschau.de *.telemak.tv *.testa.eu *.thinglink.com *.tiesraides.lv *.top-ix.org *.tsnmalta.org *.tv1.eu *.tv-on-web.de *.twinix.eu *.typeform.com *.uc3m.es *.uplynk.com *.ustream.tv *.uu.se *.videliostreaming.com *.videolevels.com *.walls.io *.weforum.org *.westream.com *.wyng.com *.youongroup.com *.youtu.be *.youtube-nocookie.com *.zdf.de *.michael-lurquin.com; 1
connect-src 'self' *.akamaihd.net *.api4load.com *.audienceinsights.net *.c4tw.net *.cloudflare.com *.criteo.net *.davebestdeals.com *.delti.com *.googleapis.com *.optimizely.com *.promote.ro:9091 *.promote.ro:9400 *.qwtbx.com *.sovendus.com *.veinteractive.com *.wanteeed.com *.windows.net data jsctool.com wss://*.123pneus.fr wss://*.promote.ro:9091 wss://*.promote.ro:9400; default-src 'self' *.delti.com; font-src 'self' *.bootstrapcdn.com *.cloudflare.com *.davebestdeals.com *.delti.com *.gstatic.com *.trustedshops.com bankybee.fr data:; frame-ancestors *; frame-src 'self' *.123pneus.fr *.adtrustmedia.com *.akamaihd.net *.audienceinsights.net *.bluecoat.com *.capitalkoala.com *.cmptch.com *.comprigo.com *.comprigo.fr *.criteo.com *.criteo.net *.davebestdeals.com *.dcnsgroup.com *.delti.com *.doubleclick.net *.everestjs.net *.everesttech.net *.facebook.com *.go.com *.google.com *.google.fr *.googlesyndication.com *.hwcdn.net *.lenua.de *.msgp.pl *.mycouponizemac.com *.optibuymac.com *.optimizely.com *.remintrex.com *.safer-shopping.de *.sddan.com *.securesrv12.com *.sovendus.com *.surveymonkey.com *.theadex.com *.tradedoubler.com *.trustpilot.com *.veinteractive.com *.yahoo.com *.youtube-nocookie.com *.youtube.com 1986635568.rsc.cdn77.org ciuvo.com data notification.corp s3.amazonaws.com s3.eu-central-1.amazonaws.com; img-src 'self' *.123pneus.fr *.adnxs.com *.adsymptotic.com *.akamaihd.net *.akamoihd.net *.alcar-wheels.com *.audienceinsights.net *.autoscout24.de *.avocet.io *.awin1.com *.billiger.de *.bing.com *.casalemedia.com *.cnnx.io *.cpx.to *.criteo.com *.criteo.net *.davebestdeals.com *.dcoengine.com *.delti.com *.digitaloptout.com *.doubleclick.net *.ebayimg.com *.ebuyclub.com *.email-reflex.com *.everesttech.net *.facebook.com *.fagms.net *.gecirtnotification.com *.google.ad *.google.ae *.google.am *.google.at *.google.ba *.google.be *.google.bf *.google.bg *.google.bj *.google.by *.google.ca *.google.cd *.google.ch *.google.ci *.google.cm *.google.co.cr *.google.co.il *.google.co.in *.google.co.jp *.google.co.ma *.google.co.th *.google.co.ug *.google.co.uk *.google.com *.google.com.bo *.google.com.br *.google.com.co *.google.com.cu *.google.com.do *.google.com.kh *.google.com.mx *.google.com.om *.google.com.pe *.google.com.ph *.google.com.pk *.google.com.sa *.google.com.tr *.google.com.ua *.google.cz *.google.de *.google.dj *.google.dk *.google.dz *.google.es *.google.fi *.google.fr *.google.ga *.google.gp *.google.gr *.google.ht *.google.ie *.google.iq *.google.it *.google.lt *.google.lu *.google.lv *.google.md *.google.mg *.google.ml *.google.ne *.google.nl *.google.pl *.google.pt *.google.ro *.google.rs *.google.ru *.google.se *.google.si *.google.sk *.google.sn *.google.tn *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googleusercontent.com *.gstatic.com *.igstatic.com *.jfnet.de *.kelkoo.com *.kelkoogroup.net *.leguide.com *.mediapostcommunication.net *.mookie1.com *.onaudience.com *.optimizely.com *.pmddby.com *.prudsys-rde.de *.reifendirekt.de *.reifentest.com *.saaq.net *.shopmania.org *.shopping.com *.simpli.fi *.sovendus.com *.surveymonkey.com *.trustpilot.com *.ttlbd.net *.twenga.com *.tyre-pictures.com *.veinteractive.com *.ytimg.com *.zscalertwo.net analyzenetwork.xyz ciuvo.com data data: dlinkrouter maps.googleapis.com mtst.io netcheckcdn.xyz s3.amazonaws.com; object-src 'self' *.cmptch.com *.delti.com jsctool.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.123pneus.fr *.adtrustmedia.com *.akamaihd.net *.allo-pages.fr *.amazonaws.com *.apicit.net *.audienceinsights.net *.awin1.com *.batmobi.net *.bilan-imc.fr *.bing.com *.birst-gal.com *.bizrate.com *.bootstrapcdn.com *.cartes-itineraires.com *.catizz.com *.cheklaby.com *.clickintext.net *.cloudflare.com *.cmptch.com *.comloka.com *.convertisseur.pro *.cpx.to *.criteo.com *.criteo.net *.davebestdeals.com *.delti.com *.demdex.net *.dictso.com *.digitaloptout.com *.domeoco.com *.doubleclick.net *.dwin1.com *.eshopcomp.com *.everestjs.net *.everesttech.net *.facebook.net *.fagms.net *.findizer.fr *.flomaga.com *.france-telephone.fr *.gikix.com *.gimoli.com *.good-recettes.com *.google-analytics.com *.google.ch *.google.com *.google.fr *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gorgiia.com *.gstatic.com *.gutscheinconnection.de *.image2play.com *.indice-poids-ideal.com *.iti-maps.fr *.itineraire.info *.kismuta.com *.lovintest.com *.ma-direction.com *.mediapostcommunication.net *.metoun.com *.milbano.com *.modlat.com *.mondo.chat *.mr-traduction.com *.mycouponizemac.com *.myshopmatemac.com *.octapi.net *.optibuymac.com *.optimizely.com *.plusalp.com *.pmddby.com *.promote.ro *.pros-particuliers.com *.q-sis.de *.quotient-retraite.fr *.recettes.net *.repossot.com *.road-maps.fr *.sddan.com *.shopello.net *.similardeals.net *.simpli.fi *.slimness.fr *.sogapp.com *.soleadan.com *.sovendus.com *.stats-collector.org *.surfbuyermac.com *.surveymonkey.com *.tests-moi.com *.theadex.com *.tiekinetix.net *.toutlannuaire.fr *.trustpilot.com *.tuto-diy.com *.veinteractive.com *.vemopi.com *.wikimot.fr *.yummmi.es *.zanox.com 1480876790.rsc.cdn77.org 1672606776.rsc.cdn77.org 1986635568.rsc.cdn77.org aab94f698f36684c5a852a2ef272e031bb.com analyzenetwork.xyz apicit.net d1ui18tz1fx59z.cloudfront.net data data: dnn506yrbagrg.cloudfront.net entrypoints-production.herokuapp.com jsctool.com loadingpageson.club loadingpageson.science loadingpaqes.info mtst.io netcheckcdn.xyz s3-us-west-2.amazonaws.com s3.amazonaws.com srdrvp.com; style-src 'self' 'unsafe-inline' *.123pneus.fr *.bootstrapcdn.com *.davebestdeals.com *.delti.com *.gikix.com *.googleapis.com *.sovendus.com data fonts.googleapis.com; 1
script-src 'self' https://maxcdn.bootstrapcdn.com/ https://ajax.googleapis.com/ https://www.google-analytics.com/ https://www.facebook.com https://connect.facebook.net/ https://twitter.com/ https://platform.twitter.com/ https://cdn.syndication.twimg.com/ http://free.timeanddate.com/ https://www.youtube.com/ http://translate.google.com/ https://translate.googleapis.com/ https://code.jquery.com/ http://code.jquery.com/ https://www.googletagmanager.com/ https://counter.websiteout.net/  'unsafe-inline' 'unsafe-eval'; 1
default-src https: 'unsafe-eval' 'unsafe-inline' data:; object-src 'self' 1
base-uri 'none'; object-src 'none'; script-src https://thebitcoin.pub/logs/ https://thebitcoin.pub/sidekiq/ https://thebitcoin.pub/mini-profiler-resources/ https://thebitcoinpub-91d3.kxcdn.com/assets/ https://thebitcoinpub-91d3.kxcdn.com/brotli_asset/ https://thebitcoin.pub/extra-locales/ https://thebitcoinpub-91d3.kxcdn.com/highlight-js/ https://thebitcoinpub-91d3.kxcdn.com/javascripts/ https://thebitcoinpub-91d3.kxcdn.com/plugins/ https://thebitcoinpub-91d3.kxcdn.com/theme-javascripts/ https://thebitcoinpub-91d3.kxcdn.com/svg-sprite/ https://www.google-analytics.com/analytics.js; worker-src 'self' https://thebitcoinpub-91d3.kxcdn.com/assets/ https://thebitcoinpub-91d3.kxcdn.com/brotli_asset/ https://thebitcoinpub-91d3.kxcdn.com/javascripts/ https://thebitcoinpub-91d3.kxcdn.com/plugins/ 1
default-src *; font-src * 'self' data: https:; img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://cp.bhf.org.uk https://live.bhf.org.uk https://googleads.g.doubleclick.net https://ssl.google-analytics.com https://www.google-analytics.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://ajax.googleapis.com https://maps.googleapis.com https://optimize.google.com https://tagmanager.google.com https://www.google.co.uk https://www.google.com https://www.youtube.com https://s.ytimg.com https://www.gstatic.com https://edge.addthis.com https://m.addthis.com https://s2.adform.net https://s7.addthis.com https://v1.addthisedge.com https://track.adform.net https://c5.adalyser.com https://js.adsrvr.org https://static.ads-twitter.com https://s3.amazonaws.com https://s3-us-west-2.amazonaws.com https://ads.avct.cloud https://ads.avocet.io https://bat.bing.com https://sjs.bizographics.com https://cdnjs.cloudflare.com https://d2oh4tlt9mrke9.cloudfront.net https://d3alqb8vzo7fun.cloudfront.net https://dfgmr6l6mkcrn.cloudfront.net https://cdn.cookielaw.org https://connect.facebook.net https://chat-eu.freshdesk.com https://wchat.eu.freshchat.com https://healthunlocked.com https://wusote.hirizasune.com https://assets.hu-production.be https://snap.licdn.com https://www.linkedin.com https://px.ads.linkedin.com https://i5uzp6l0.micpn.com https://assets.nhs.uk https://ls.northchaddertonschool.co.uk https://z.moatads.com https://secure.myshopcouponmac.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.oracle.com https://services.postcodeanywhere.co.uk https://timeline51-clientstats1.pusher.com https://js.pusher.com https://stats.pusher.com https://ws.sessioncam.com https://public.tableau.com https://auth.iws-hybrid.trendmicro.com https://turbo.qualaroo.com https://a.rfihub.com https://c1.rfihub.net https://sc-static.net https://siteimproveanalytics.com https://assetscdn.stackla.com https://goconnect.stackla.com https://widget.trustpilot.com https://analytics.twitter.com https://use.typekit.net https://config1.veinteractive.com https://sp.analytics.yahoo.com https://s.yimg.com https://vjs.zencdn.net https://code.jquery.com https://maxcdn.bootstrapcdn.com;style-src 'self' 'unsafe-inline' https://optimize.google.com https://tagmanager.google.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://dfgmr6l6mkcrn.cloudfront.net https://use.fontawesome.com https://wchat.eu.freshchat.com https://net.ootil.fr https://assetscdn.stackla.com https://cloud.typography.com https://vjs.zencdn.net https://code.jquery.com https://maxcdn.bootstrapcdn.com;img-src 'self' data: https://cp.bhf.org.uk https://live.bhf.org.uk https://ad.doubleclick.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://adservice.google.com https://www.google-analytics.com https://maps.googleapis.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://optimize.google.com https://www.google.com https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.nz https://www.google.co.tz https://www.google.co.uk https://www.google.co.za https://www.google.co.zw https://www.google.com.au https://www.google.com.br https://www.google.com.cy https://www.google.com.eg https://www.google.com.et https://www.google.com.mm https://www.google.com.ng https://www.google.com.sg https://www.google.ae https://www.google.be https://www.google.bf https://www.google.ca https://www.google.de https://www.google.es https://www.google.fr https://www.google.gr https://www.google.ie https://www.google.nl https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.tt https://maps.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://img.youtube.com https://www.youtube.com https://i.ytimg.com https://m.addthis.com https://s3.amazonaws.com https://cx.atdmt.com https://ads.avct.cloud https://x.bidswitch.net https://bat.bing.com https://scontent-iad3-1.cdninstagram.com https://scontent-syd2-1.cdninstagram.com https://dfgmr6l6mkcrn.cloudfront.net https://cdn.cookielaw.org https://connect.facebook.net https://www.facebook.com https://gorentoys.net https://assets.hu-production.be https://images.hu-production.be https://www.linkedin.com https://px.ads.linkedin.com https://twemoji.maxcdn.com https://i5uzp6l0.micpn.com https://zswpmanager.wip.mmc.com https://bam.nr-data.net https://idsync.rlcdn.com https://ws.sessioncam.com https://assetscdn.stackla.com https://web-assets.stackla.com https://trc.taboola.com https://public.tableau.com https://auth.iws-hybrid.trendmicro.com https://gjtrack.ucweb.com https://cookiee1.veinteractive.com https://a.volvelle.tech;media-src 'self' https://ssl.gstatic.com https://dop9av6nvryqq.cloudfront.net;frame-src 'self' ms-appx-web: https://cp.bhf.org.uk https://extras.bhf.org.uk https://bid.g.doubleclick.net https://cm.g.doubleclick.net https://8233349.fls.doubleclick.net https://8455068.fls.doubleclick.net https://optimize.google.com https://tpc.googlesyndication.com https://www.youtube.com https://www.google.com gsa://onpageload https://player.acast.com https://track.adform.net https://edge.addthis.com https://s7.addthis.com https://match.adsrvr.org https://insight.adsrvr.org https://aax-eu.amazon-adsystem.com https://www.boombox.com https://view.ceros.com https://www.facebook.com https://wchat.eu.freshchat.com https://280841640230733.eu.webpush.freshchat.com https://www.ons.gov.uk https://irewind.com https://zswpmanager.wip.mmc.com https://assets.nhs.uk https://net.ootil.fr https://public.tableau.com https://digital19.typeform.com https://dntcl.qualaroo.com https://app.qzzr.com https://www.qzzr.com https://a.rfihub.com https://20782797p.rfihub.com https://20782800p.rfihub.com https://20782816p.rfihub.com https://20782822p.rfihub.com https://20798315p.rfihub.com https://20798316p.rfihub.com https://20798319p.rfihub.com https://20782802p.rfihub.com https://20782821p.rfihub.com https://20822326p.rfihub.com https://20823015p.rfihub.com https://20823018p.rfihub.com https://tr.snapchat.com https://w.soundcloud.com https://widget.stackla.com https://embed.wirewax.com https://config1.veinteractive.com;font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://static3.avast.com https://use.fontawesome.com https://280841640230733.eu.webpush.freshchat.com https://assetscdn.stackla.com https://maxcdn.bootstrapcdn.com;connect-src 'self' https://stats.g.doubleclick.net https://ampcid.google.com https://adservice.google.com https://www.google.com https://www.google-analytics.com https://m.addthis.com https://s7.addthis.com https://in.api4load.net https://cdn.cookielaw.org https://bam.nr-data.net https://www.facebook.com https://chat-eu.freshdesk.com https://privacyportal-eu.onetrust.com wss://chat-eu.freshdesk.com https://sockjs-eu.pusher.com https://sock57-eu.pusher.com wss://ws-eu.pusher.com https://ws.sessioncam.com https://b.ws.sessioncam.com https://gjtrack.ucweb.com https://plugin.ucads.ucweb.com https://cookiee1.veinteractive.com https://dtrc.veinteractive.com https://sessionapi.veinteractive.com 1
default-src * 'unsafe-inline' 'unsafe-eval' 'self' app.optimizely.com *.hawksearch.com *.hawksearch.net 1
default-src 'self' *.starbucks.com *.starbucksassets.com *.starbucks.ca; child-src 'self' *.starbucks.com *.americanexpress.com *.starbucks.ca *.chase.com *.doubleclick.net *.facebook.com *.mastercard.com *.optimizely.com *.paypal.com *.visa.com *.surveymonkey.com *.trustarc.com prefmgr-cookie.truste-svc.net; connect-src 'self' ws: *.starbucks.com *.starbucksassets.com *.starbucks.ca *.akamaihd.net *.akstat.io *.bing.com *.doubleclick.net *.facebook.com *.go-mpulse.net *.google-analytics.com *.iesnare.com wss://mpsnare.iesnare.com *.mastercard.com *.mparticle.com *.nr-data.net *.optimizely.com *.paypal.com *.pinterest.com https://thm.visa.com *.zeronaught.com; font-src 'self' data: *.starbucks.com *.starbucksassets.com *.starbucks.ca https://fonts.gstatic.com *.trustarc.com; img-src 'self' data: *.starbucks.com *.starbucksassets.com *.starbucks.ca *.adsrvr.org *.agkn.com *.akamaihd.net *.bing.com *.demdex.net *.doubleclick.net *.facebook.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com https://*.gstatic.com *.marinsm.com *.mparticle.com *.nr-data.net  *.pinterest.com https://bs.serving-sys.com *.visa.com *.surveymonkey.com *.trustarc.com; media-src 'self' data: *.starbucks.com *.starbucksassets.com *.starbucks.ca *.iesnare.com; object-src 'self' *.starbucks.com *.starbucks.ca https://thm.visa.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.starbucks.com *.starbucksassets.com *.starbucks.ca *.aexp-static.com https://s3.amazonaws.com *.akamaihd.net *.bing.com *.chase.com *.doubleclick.net *.facebook.net *.go-mpulse.net *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.iesnare.com *.marinsm.com *.mastercard.com *.mparticle.com *.newrelic.com *.nr-data.net *.optimizely.com  *.paypal.com *.pinimg.com sc-static.net *.surveymonkey.com *.trustarc.com *.visa.com *.zeronaught.com; style-src 'self' 'unsafe-inline' *.starbucks.com *.starbucksassets.com *.starbucks.ca *.google.com https://fonts.googleapis.com; report-uri /webhooks/csp-report 1
frame-ancestors my.cratejoy.com www.creationcrate.com creationcrate.cratejoy.com 1
frame-ancestors 'self' *.6connex.com; script-src 'self' cookie-cdn.cookiepro.com https://www.googletagmanager.com http://clicky.com *.getclicky.com https://*.googleapis.com *.gstatic.com www.google-analytics.com ajax.googleapis.com ajax.aspnetcdn.com use.typekit.net us1.siteimprove.com cdn.datatables.net https://siteimproveanalytics.com 'unsafe-inline' 'unsafe-eval' 1
default-src 'unsafe-inline' https: 1
default-src 'self' 'unsafe-inline' data: https://piwik.bzga.de/; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' jira.reactos.org www.google.com www.gstatic.com; img-src 'self' data:; 1
default-src 'self' https://*.ean.com https://*.google.ie https://*.facebook.com https://*.facebook.net https://*.expediapartnersolutions.com https://*.leadspace.com https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.gstatic.com https://*.googleadservices.com https://*.licdn.com https://*.marketo.net https://*.marketo.com https://*.aws.ean http://*.aws.ean https://*.amazonaws.ean http://*.amazonaws.com https://*.amazonaws.com https://d2yeu2mwujl2s5.cloudfront.net https://931-quh-525.mktoresp.com https://*.doubleclick.net https://js-agent.newrelic.com https://*.linkedin.com https://*.nr-data.net https://*.addthis.com https://*.addthisedge.com https://*.issuu.com https://*.google.co.uk https://*.vimeo.com https://*.cloudflare.com https://*.reachforce.com https://*.googleapis.com data: 'unsafe-eval' 'unsafe-inline' 1
script-src 'strict-dynamic' 'nonce-5SGqqeKBj9aViA=='  'unsafe-inline' https:; object-src 'none'; base-uri 'none'; 1
default-src https:; style-src 'unsafe-inline' https:; script-src 'unsafe-inline' https:; frame-ancestors 'none' 1
script-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval' static4.mybonuscenter.com static5.mybonuscenter.com static6.mybonuscenter.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com cts.tradepub.com hkmgyhf6.micpn.com api.survata.net apps.rokt.com roktcdn1.akamaized.net surveywall-api.survata.com api.trustedform.com create.leadid.com www.offerfwd.net www.clear-request.com; 1
base-uri 'none'; connect-src https://rum-http-intake.logs.datadoghq.com/ https://api.getdelta.io/ https://www.google-analytics.com/; object-src 'none'; script-src 'unsafe-inline' https: 'nonce-ODZhOWVjNjgtOTc5MS00NzczLWE1MzctNmYxMzQ2YTYyMjI1' 'strict-dynamic'; frame-ancestors 'none' 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://xoxo.zone; img-src 'self' https: data: blob: https://xoxo.zone; style-src 'self' https://xoxo.zone 'nonce-vPWo9V21W5hdrYq+TS2Hfw=='; media-src 'self' https: data: https://xoxo.zone; frame-src 'self' https:; manifest-src 'self' https://xoxo.zone; connect-src 'self' data: blob: https://xoxo.zone https://xoxo-media.sfo2.cdn.digitaloceanspaces.com wss://xoxo.zone; script-src 'self' https://xoxo.zone; child-src 'self' blob: https://xoxo.zone; worker-src 'self' blob: https://xoxo.zone 1
default-src https: 'unsafe-inline'; img-src * blob: 1
default-src 'none'; object-src 'none'; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline'; connect-src *; media-src 'self'; img-src * 'self' data: blob:; style-src 'self' 'unsafe-inline' fast.fonts.net *.googleapis.com; manifest-src 'self'; font-src * data:; frame-ancestors http://dnk-sport.ru 'self';frame-src 'self' www.facebook.com www.youtube-nocookie.com *.youtube.com; worker-src 'self' blob:; report-uri /home/CSPReport; 1
default-src https: 'self' ws: wss: gsa:; child-src https: 'self' data:; connect-src https: 'self' wss:; font-src https: 'self' 'unsafe-inline' data:; img-src https: 'self' 'unsafe-inline' data:; media-src https: 'self' 'unsafe-inline'; object-src https: 'self'; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; style-src https: 'self' 'unsafe-inline'; worker-src blob: 1
frame-ancestors *.estrenarvivienda.com 1
style-src https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline'; img-src 'self' https://www.denic.de https://www.google-analytics.com; frame-src 'self' 1
default-src 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' https://donorbox.org; img-src 'self' data:; frame-src 'self' https://donorbox.org https://youtube.com https://www.youtube.com https://youtube-nocookie.com https://www.youtube-nocookie.com; font-src https://fonts.gstatic.com; connect-src 'self'; object-src 'self'; 1
img-src 'self'; font-src 'self'; script-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'self'; 1
frame-ancestors *.theartofcoachingvolleyball.com 1
default-src 'self'; child-src 'self' https://events.eventzilla.net https://www.youtube.com https://player.vimeo.com; connect-src 'self' https://www.ocimf-mtis.org; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.ocimf-ovid.org https://events.eventzilla.net https://www.youtube.com https://player.vimeo.com;  img-src 'self' data: lib.ocimf.org https://csi.gstatic.com https://gallery.mailchimp.com https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://code.jquery.com/ https://*.list-manage.com https://maps.googleapis.com https://www.google-analytics.com ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; 1
connect-src 'self' www.google-analytics.com https://stats.g.doubleclick.net;default-src 'self' 10363-2.s.cdn13.com cdn.feet9.com www.google.com theporndude.com www.livelemon.com www.google-analytics.com https://stats.g.doubleclick.net;frame-ancestors 'self' ;frame-src www.google.com;media-src 'self' 10363-2.s.cdn13.com cdn.feet9.com;object-src 'none'; font-src 'self' fonts.gstatic.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' data: www.feet9.com www.gstatic.com www.google.com www.google-analytics.com;style-src 'self' 'unsafe-inline'; 1
base-uri 'self'; default-src https: data: wss: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; font-src 'self' static.sessun.com *.sessun.com fonts.gstatic.com; frame-ancestors 'self' sessun.zendesk.com 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://yiff.life; img-src 'self' https: data: blob: https://yiff.life; style-src 'self' 'unsafe-inline' https://yiff.life; media-src 'self' https: data: https://yiff.life; frame-src 'self' https:; manifest-src 'self' https://yiff.life; connect-src 'self' data: blob: https://yiff.life https://cdn.yiff.life wss://yiff.life; script-src 'self' https://yiff.life; child-src 'self' blob: https://yiff.life; worker-src 'self' blob: https://yiff.life 1
script-src 'unsafe-inline' 'self' 'unsafe-eval' snap.licdn.com *.google.com ssl.google-analytics.com *.linkedin.com doubleclick.net ; 1
default-src 'none'; style-src 'self' 'unsafe-inline' *.fr.ingdirect.intranet https://m.ing.fr/ https://dev.visualwebsiteoptimizer.com/static/0.5/styles/themes/ https://s3.amazonaws.com/vwo-surveys/theme/ https://fonts.googleapis.com/ http://app.vwo.com/ ; media-src 'self'; font-src 'self' https://www.ing.fr/assets/fonts/ https://app.vwo.com/assets/fonts/ https://fonts.gstatic.com/ ; object-src 'self'; connect-src 'self' https://dev.visualwebsiteoptimizer.com/analysis/ https://*.ing.fr/ https://www.google-analytics.com/j/ https://ampcid.google.com/v1/publisher:getClientId https://www.google.com/ads https://www.google.fr/ads https://amp-error-reporting.appspot.com/ https://stats.g.doubleclick.net/r/ https://ampcid.google.fr/ https://www.google-analytics.com/r/collect *.fr.ingdirect.intranet https://www.ing.fr/ https://services.opcvm360.com/api-v1/ https://cr-input.mxpnl.net/; img-src 'self' https://www.google.fr/ads/ https://www.google.com/ads/ https://news.ing.be/newsingbeimages/assets/ https://stats.g.doubleclick.net/r/collect/ data: http://chart.googleapis.com/ http://*.visualwebsiteoptimizer.com/ *.fr.ingdirect.intranet www.ing.fr www.google-analytics.com ssl.google-analytics.com https://syndication.twitter.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.ampproject.org/ https://s.ytimg.com/yts/jsbin/ https://www.youtube.com/iframe_api http://www.youtube.com/iframe_api https://app.vwo.com/visitor-behavior-analysis/ https://www.google.com/jsapi http://b.mxpnl.net/cs/ http://trendtext.eu/metric/ http://trendtext.eu/ https://cse.google.com/cse/brand *.fr.ingdirect.intranet http://www.ing.fr www.google-analytics.com ssl.google-analytics.com www.google.com platform.twitter.com connect.facebook.net apis.google.com http://d5phz18u4wuww.cloudfront.net/ http://*.visualwebsiteoptimizer.com/ code.jquery.com; frame-src https://*.visualwebsiteoptimizer.com/ https://app.vwo.com/visitor-behavior-analysis/ https://fls.doubleclick.net/ https://*.fls.doubleclick.net/ http://www.youtube.com/embed/ https://www.youtube.com/embed/ http://www.google.com/cse https://cse.google.com/cse; child-src 'self' https://cse.google.com/cse http://cse.google.com https://*.doubleclick.net https://*.youtube.com http://*.youtube.com https://apis.google.com/ http://www.google.com https://www.google.com http://r.turn.com https://r.turn.com http://platform.twitter.com/widgets https://accounts.google.com https://s-static.ak.facebook.com http://www.facebook.com/plugins;  1
default-src https:; connect-src https: wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io; font-src https: data:; frame-src https:; img-src https: data:; media-src https:;  object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; frame-ancestors https:; 1
default-src https: 'unsafe-inline' data:; 1
default-src 'self' piwik.xnet-x.net cdn.jsdelivr.net; frame-src *.youtube.com *.bambuser.com *.vimeo.com; child-src: *.youtube.com *.bambuser.com *.vimeo.com; script-src 'self' *.twitter.com *.twimg.com piwik.xnet-x.net cdn.jsdelivr.net; font-src 'self'; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net; img-src 'self' piwik.xnet-x.net i.ytimg.com *.twimg.com *.piwik.xnet-x.net data:; 1
block-all-mixed-content; default-src 'self'; base-uri 'self'; form-action 'self' flightbookings.airnewzealand.co.kr flightbookings.airnewzealand.kr flightbookings.airnewzealand.ca flightbookings.airnewzealand.cn flightbookings.airnewzealand.co.nz flightbookings.airnewzealand.co.uk flightbookings.airnewzealand.com.au flightbookings.airnewzealand.com.hk flightbookings.airnewzealand.com.sg flightbookings.airnewzealand.com.tw flightbookings.airnewzealand.com flightbookings.airnewzealand.de flightbookings.airnewzealand.eu flightbookings.airnewzealand.fr flightbookings.airnewzealand.hk flightbookings.airnewzealand.jp flightbookings.airnewzealand.pf flightbookings.airnewzealand.tw  flightbookings.airnewzealand.com.cn flightbookings.grabaseat.co.nz  flightbookings.airnewzealand.co.jp; script-src 'self' s-airnz.com p-airnz.com 'unsafe-inline' 'unsafe-eval' www.youtube.com s.ytimg.com www.everestjs.net *.demdex.net www.google-analytics.com analytics.google.com tagmanager.google.com www.googletagmanager.com *.doubleclick.net www.googleadservices.com www.googletagservices.com tpc.googlesyndication.com www.google.com cdn-assets-prod.s3.amazonaws.com *.optimizely.com optimizely-hrd.appspot.com optimizely.s3.amazonaws.com nebula-cdn.kampyle.com screencapture.kampyle.com screencaptue-cdn.kampyle.com *.hotjar.com s.wayin.com xd.wayin.com s.engagesciences.com display.engagesciences.com display.wayin.com ddc.optimahub.com; style-src 'unsafe-inline' s-airnz.com p-airnz.com tagmanager.google.com; img-src https: data:; font-src s-airnz.com p-airnz.com dhm5hy2vn8l0l.cloudfront.net script.hotjar.com; media-src 'self' ; frame-src 'self' www.youtube.com www.everestjs.net pixel.everesttech.net *.demdex.net *.doubleclick.net www.googletagmanager.com tpc.googlesyndication.com *.cdn.optimizely.com nebula-cdn.kampyle.com *.hotjar.com xd.wayin.com display.engagesciences.com; connect-src 'self' api.airnz.io api.airnz.ai auth.airnewzealand.co.nz auth.grabaseat.co.nz *.demdex.net *.tt.omtrdc.net www.google-analytics.com analytics.google.com stats.g.doubleclick.net adservice.google.com pagead2.googlesyndication.com *.optimizely.com *.kampyle.com wss://*.hotjar.com https://*.hotjar.com vc.hotjar.io; object-src 'none'; frame-ancestors 'none'; report-uri /csp-report 1
worker-src 'none';upgrade-insecure-requests;reflected-xss block 1
default-src 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://use.fontawesome.com https://code.jquery.com  data:; script-src 'self' *.google.com 'unsafe-inline' https://use.fontawesome.com https://code.jquery.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.highcharts.com https://unpkg.com https://connect.facebook.net *.gstatic.com data:; img-src 'self' https://cdn.datatables.net https://www.cloudpanda.ph https://www.facebook.com data:; font-src 'self' *.gstatic.com https://use.fontawesome.com data:; connect-src 'self' ws://localhost:* http://localhost:* ws://35.173.0.77:* http://35.173.0.77:*; frame-src 'self' *.google.com 'unsafe-inline' https://www.youtube.com data:; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline' fonts.googleapis.com *.google.com;font-src 'self' fonts.googleapis.com fonts.gstatic.com *.hotjar.com;img-src 'self' data: *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.facebook.com *.google.nl *.ytimg.com *.bing.com *.gstatic.com *.googleusercontent.com sc-static.net snapchat.com *.sc-static.net *.snapchat.com *.bing.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com cdnjs.cloudflare.com *.google.com *.googletagmanager.com *.google-analytics.com *.hotjar.com *.youtube.com *.ipify.org *.ytimg.com *.cookiebot.com *.googleadservices.com *.bing.com *.facebook.net *.doubleclick.net *.addthis.com *.addthisedge.com sc-static.net snapchat.com *.sc-static.net *.snapchat.com stl.h5p.com *.webinargeek.com;frame-src 'self' *.hotjar.com *.cookiebot.com *.youtube.com *.google.com *.inzetbaarheidscheck.nl *.clickdimensions.com *.google-analytics.com sc-static.net snapchat.com *.sc-static.net *.snapchat.com *.formdesk.com stl.h5p.com *.webinargeek.com;connect-src 'self' *.hotjar.com *.hotjar.io *.doubleclick.net *.google-analytics.com sc-static.net snapchat.com *.sc-static.net *.snapchat.com;object-src 'self' 1
default-src 'none'; base-uri 'self'; frame-ancestors 'none'; img-src 'self' data: https:; media-src 'self' https:; style-src 'self' 'unsafe-inline'; font-src 'self'; manifest-src 'self'; connect-src 'self' https://freespeechextremist.com wss://freespeechextremist.com; script-src 'self'; upgrade-insecure-requests; 1
default-src 'self'; frame-src 'self' https://www.youtube.com https://bandcamp.com https://fonts.googleapis.com https://khms0.googleapis.com https://maps.googleapis.com https://khms1.googleapis.com https://maps.gstatic.com https://www.google.com https://s4.bcbits.com https://i.ytimg.com https://google-analytics.com; img-src 'self' https://cdn.sanity.io; script-src 'self' 'unsafe-eval' https://asphalt-tango.us12.list-manage.com/; style-src 'self' 'unsafe-inline' 1
default-src 'self' img-src * 'unsafe-inline'; 1
base-uri 'none'; object-src 'none'; script-src https://forum.image.sc/logs/ https://forum.image.sc/sidekiq/ https://forum.image.sc/mini-profiler-resources/ https://aws1.discourse-cdn.com/business4/assets/ https://aws1.discourse-cdn.com/business4/brotli_asset/ https://forum.image.sc/extra-locales/ https://sjc3.discourse-cdn.com/business4/highlight-js/ https://sjc3.discourse-cdn.com/business4/javascripts/ https://sjc3.discourse-cdn.com/business4/plugins/ https://sjc3.discourse-cdn.com/business4/theme-javascripts/ https://sjc3.discourse-cdn.com/business4/svg-sprite/; worker-src 'self' https://aws1.discourse-cdn.com/business4/assets/ https://aws1.discourse-cdn.com/business4/brotli_asset/ https://sjc3.discourse-cdn.com/business4/javascripts/ https://sjc3.discourse-cdn.com/business4/plugins/ 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maxcdn.bootstrapcdn.com http://code.jquery.com http://html5shim.googlecode.com https://www.google.com https://maps.googleapis.com http://maps.googleapis.com https://mts0.googleapis.com https://mts1.googleapis.com http://www.google-analytics.com https://connect.facebook.net http://connect.facebook.net https://apis.google.com http://platform.twitter.com/ http://assets.pinterest.com https://log.pinterest.com http://s7.addthis.com http://m.addthisedge.com https://www.gstatic.com http://127.0.0.1:35729 http://cdnjs.cloudflare.com http://platform.linkedin.com http://www.dailymotion.com https://www.dailymotion.com http://dai.ly https://www.googleapis.com http://feeds.delicious.com https://ajax.googleapis.com https://vimeo.com http://richters.tumblr.com https://api.instagram.com https://api.dribbble.com http://designchemical.tumblr.com 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://liberdon.com; img-src 'self' https: data: blob: https://liberdon.com; style-src 'self' https://liberdon.com 'nonce-RbyMYksZqovhDxeBX1LLjw=='; media-src 'self' https: data: https://liberdon.com; frame-src 'self' https:; manifest-src 'self' https://liberdon.com; connect-src 'self' data: blob: https://liberdon.com https://cdn.masto.host wss://liberdon.com; script-src 'self' https://liberdon.com; child-src 'self' blob: https://liberdon.com; worker-src 'self' blob: https://liberdon.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://ajax.googleapis.com https://rum-static.pingdom.net https://cdnjs.cloudflare.com https://fast.wistia.com https://pi.pardot.com https://translate.google.com http://translate.google.com https://translate.googleapis.com https://www.google-analytics.com https://bpasblog.disqus.com; style-src 'self' https://fast.wistia.net https://bpas.com 'unsafe-inline' https://fonts.googleapis.com https://translate.googleapis.com http://translate.google.com; default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; object-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: www.google-analytics.com www.googletagmanager.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://cdnjs.cloudflare.com/ajax/libs/select2/ https://cdn.rawgit.com/ckeditor/ckeditor-dev/ https://cdn.rawgit.com/w8tcha/CKEditor-CodeMirror-Plugin/ platform.twitter.com platform.twitter.co syndication.twitter.com cdn.syndication.twimg.com https://cdn.rawgit.com/ractoon/jQuery-Text-Counter/ https://js-agent.newrelic.com/nr-1071.min.js bam.nr-data.net tagmanager.google.com https://js-agent.newrelic.com https://www.recaptcha.net/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ https://www.google.com/recaptcha/api.js; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://cdnjs.cloudflare.com/ajax/libs/select2/ platform.twitter.com tagmanager.google.com; img-src 'self' data: www.google-analytics.com https://cdn.rawgit.com/ckeditor/ckeditor-dev/ https://raw.githubusercontent.com/ckeditor/ckeditor-dev/ www.googletagmanager.com www.bureauveritas.com syndication.twitter.com platform.twitter.com *.twimg.com ssl.gstatic.com www.gstatic.com https://stats.g.doubleclick.net; media-src 'self'; frame-src 'self' www.youtube.com tools.eurolandir.com cws.huginonline.com www.googletagmanager.com platform.twitter.com syndication.twitter.com inpublic.globenewswire.com https://sdk.companywebcast.com/sdk/player/ player.youku.com  https://www.google.com; child-src 'self' blob:; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com; connect-src 'self' www.google-analytics.com https://tools.eurolandir.com/tools/pricefeed/RequestStockDataBundleXML.aspx https://bam.nr-data.net https://stats.g.doubleclick.net; report-uri https://csp-report-uri.bureauveritas.com 1
default-src 'self' c.disquscdn.com disqus.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' disqus.com c.disquscdn.com cdnjs.cloudflare.com www.google-analytics.com code.jquery.com aaronpowell.disqus.com unpkg.com platform.twitter.com gist.github.com fb.me cdn.syndication.twimg.com www.googletagmanager.com; style-src 'self' 'unsafe-inline' c.disquscdn.com fonts.googleapis.com cdnjs.cloudflare.com unpkg.com platform.twitter.com; img-src 'self' data: www.google-analytics.com cdnjs.cloudflare.com frinkiac.com syndication.twitter.com dev.azure.com referrer.disqus.com platform.twitter.com pbs.twimg.com; font-src 'self' fonts.googleapis.com cdnjs.cloudflare.com fonts.gstatic.com unpkg.com; connect-src 'self' links.services.disqus.com; child-src www.google.com; frame-src codesandbox.io disqus.com c.disquscdn.com www.google.com www.youtube.com twitter.com platform.twitter.com syndication.twitter.com; form-action 'self'; upgrade-insecure-requests; report-uri https://aaronpowell.report-uri.com/r/d/csp/enforce; 1
default-src 'self' data:; script-src 'self' data: about: 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.googleapis.com *; object-src *; style-src 'self' 'unsafe-inline' *; img-src 'self' data: *; media-src *; frame-src *; frame-ancestors *; child-src 'self' blob: *; font-src 'self' data: *.gstatic.com *.sydneymetro.info *.hotjar.com *.googleapis.com *.google.com *; connect-src 'self' *; report-uri /report-csp-violation 1
default-src 'none'; base-uri 'self' https://morgridge.org; connect-src 'self' *.donately.com/ https://*.google-analytics.com https://*.kinstacdn.com https://capture.trackjs.com/ https://collector-px963uiwkr.px-cdn.net/ https://collector-px963uiwkr.px-cloud.net/ https://collector-px963uiwkr.pxchk.net/ https://morgridge.org; font-src 'self' *.kinstacdn.com/ data: https://*.kinstacdn.com https://fonts.gstatic.com/ https://morgridge.org; form-action 'self' https://*.twitter.com https://morgridge.org; frame-ancestors 'none'; frame-src 'self' *.twitter.com/ https://event.webinarjam.com/ https://js.stripe.com/ https://morgridgeinstitute.wufoo.com https://player.vimeo.com/ https://vimeo.com https://www.google.com/ https://www.youtube.com/ https://morgridge.org; child-src 'self' *.twitter.com/ https://event.webinarjam.com/ https://js.stripe.com/ https://morgridgeinstitute.wufoo.com https://player.vimeo.com/ https://vimeo.com https://www.google.com/ https://www.youtube.com/ https://morgridge.org; img-src 'self' *.donately.com/ *.kinstacdn.com/ *.twimg.com/ *.twitter.com/ data: https://*.kinstacdn.com https://i.vimeocdn.com https://maps.googleapis.com/ https://maps.gstatic.com/ https://secure.gravatar.com/ https://usage.trackjs.com/ https://www.google-analytics.com/ https://morgridge.org; manifest-src 'self' https://morgridge.org; media-src 'self' https://*.kinstacdn.com https://player.vimeo.com/ https://morgridge.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.kinstacdn.com/ *.twimg.com/ https://*.googleapis.com/ https://*.kinstacdn.com https://*.wufoo.com https://captcha.perimeterx.net https://capture.trackjs.com/ https://cdn.donately.com/ https://cdn.trackjs.com/ https://cdnjs.cloudflare.com/ https://client.perimeterx.net/ https://client.px-cdn.net/ https://event.webinarjam.com/ https://js.stripe.com/ https://platform.twitter.com/ https://www.google-analytics.com/ https://www.gstatic.com/ https://www.recaptcha.net/ https://morgridge.org; style-src 'self' 'unsafe-inline' *.kinstacdn.com/ *.twimg.com/ https://*.googleapis.com/ https://*.kinstacdn.com https://cdn.trackjs.com/ https://event.webinarjam.com/ https://platform.twitter.com/ https://morgridge.org; worker-src 'self' https://morgridge.org 1
frame-ancestors 'self' *.gill-cote-bistro.fr *.avenir-resa.fr www.brasserie-paul.com www.emael76.com www.laplace-restaurant-brasserie.fr www.rimini-chaussures.com www.riminichaussures.fr; 1
frame-ancestors 'none'; upgrade-insecure-requests; report-uri https://serversignin.com/guard 1
frame-ancestors 'self' piwik.almelo.nl 1
default-src 'self' *.googleapis.com *.com  ;script-src 'unsafe-inline' *.googleapis.com *.com;style-src 'self'   'unsafe-inline' *.googleapis.com *.com ; font-src 'unsafe-inline' *.googleapis.com *.com *.gstatic.com data: fonts.gstatic.com ; img-src   *.com data: *.com 1
style-src https://*.akamaized.net/ https://cdn-images.mailchimp.com/ https://cdnjs.cloudflare.com/ 'unsafe-inline' 'self' https://s34190.pcdn.co/ https://fonts.googleapis.com/ https://cdn.sucuri.net/ https://maxcdn.bootstrapcdn.com/ https://cdn1.stamped.io/; block-all-mixed-content ; base-uri 'self'; script-src 'unsafe-inline' https://cdn.jsdelivr.net/ https://*.nofraud.com/ 'self' https://s34190.pcdn.co/ https://beacon-v2.helpscout.net/ https://*.instantsearchplus.com/ https://cdn-stamped-io.azureedge.net/ https://cdn1.stamped.io/ https://chimpstatic.com/ https://*.appspot.com/ https://*.akamaized.net/ https://*.cloudflare.com/ https://js-agent.newrelic.com/ https://*.algolianet.com/ https://www.gstatic.com/ https://www.googletagmanager.com/ https://www.youtube.com/ https://nsg.symantec.com/ https://oqh1ch2a21-dsn.algolia.net/ https://connect.facebook.net/ https://ajax.aspnetcdn.com/ https://*.google-analytics.com/ https://*.google.com/ https://instantsearchplus.global.ssl.fastly.net/ https://cdn-assets.rapidspike.com/ https://*.livechatinc.com/ https://static.doubleclick.net/ https://js.authorize.net/ https://fast.wistia.com/ https://*.nr-data.net/ https://cdn.verifypass.com/ https://dashboard-assets.skyverge.com/ 'unsafe-eval' https://ajax.googleapis.com/; form-action https://*.facebook.com/ https://na.account.amazon.com/ https://ar15discounts.us14.list-manage.com/ 'self'; frame-src https://wp-rocket.me/ 'self' http://www.gunbroker.com/ https://www.gunbroker.com/ https://www.googletagmanager.com/ https://nsg.symantec.com/ https://www.youtube.com/ https://www.google.com/ https://secure.livechatinc.com/; img-src 'self' blob: data: https: http:; connect-src 'self' https://*.google-analytics.com/ https://s34190.pcdn.co/ https://ar15discounts.us14.list-manage.com/ https://*.livechatinc.com/ https://acp-magento.appspot.com/ https://d3hb14vkzrxvla.cloudfront.net/ https://api.nofraud.com/ https://*.algolianet.com/ https://yoast.com/ https://*.wistia.com/ https://rum-727bac1d-96b3-46ce-a42f-f77896f0a42d.rapidspike.com/ https://fg8vvsvnieiv3ej16jby.litix.io/ https://stamped.io/ https://*.mmapiws.com/ https://js.authorize.net/ https://oqh1ch2a21-dsn.algolia.net/ https://*.nr-data.net/; worker-src 'self'; object-src 'none'; media-src https://cdn.livechatinc.com/ https://cdn.stamped.io/ https://s3.us-west-2.amazonaws.com/ data:; frame-ancestors https://ar15discounts.com; report-uri https://csp.tsrs.cloud/r/09c5ff66e71197f7e7fbcac0f8b46e0ddc1c725a; font-src https://*.akamaized.net/ https://cdn.livechatinc.com/ https://fonts.gstatic.com/ 'self' https://s34190.pcdn.co/ http://fonts.gstatic.com/ https://maxcdn.bootstrapcdn.com/ https://cdn1.stamped.io/ data:; 1
frame-ancestors 'self' http://www.philips.sa *.philips.com *.philips.sa 1
default-src 'self' https://bam.nr-data.net; style-src 'self' 'unsafe-inline'; img-src 'self' https://accounts.flatiron.com data:; script-src 'self' 'unsafe-inline' https://js-agent.newrelic.com https://bam.nr-data.net; frame-ancestors https://*.oncoemr.com; report-uri https://csp.flatiron.com/csp-report 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mastodon.nl; img-src 'self' https: data: blob: https://mastodon.nl; style-src 'self' https://mastodon.nl 'nonce-v5yoz1bEkCXbEVy/b01WWA=='; media-src 'self' https: data: https://mastodon.nl; frame-src 'self' https:; manifest-src 'self' https://mastodon.nl; connect-src 'self' data: blob: https://mastodon.nl https://mastodon.nl wss://mastodon.nl; script-src 'self' https://mastodon.nl; child-src 'self' blob: https://mastodon.nl; worker-src 'self' blob: https://mastodon.nl 1
Content-Security-Policy-Report-Only: default-src https: 'unsafe-inline' 'unsafe-eval' 1
default-src 'self' https:; connect-src https: http: wss: ws:; font-src 'self' https: data:; frame-src 'self' https: http: www.youtube.com www.google.com; img-src 'self' data: https: http: gotoknow.org classstart.org s3.amazonaws.com *.google-analytics.com stats.g.doubleclick.net google.com *.google.com www.google.ca www.google.co.th app.classstart.org app.classstart.com app-dot-classstart-73adc.appspot.com; object-src 'none'; script-src 'self' wss: ws: https: http: 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ajax.cloudflare.com ajax.googleapis.com lvs.truehits.in.th www.google-analytics.com code.angularjs.org www.googletagmanager.com www.google.com app.classstart.org app.classstart.com app-dot-classstart-73adc.appspot.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; worker-src 'self' blob: https: http: raw.githubusercontent.com cdn.ampproject.org 1
base-uri 'none'; object-src 'none'; script-src https://2kgamer.com/logs/ https://2kgamer.com/sidekiq/ https://2kgamer.com/mini-profiler-resources/ https://2kgamer.com/assets/ https://2kgamer.com/brotli_asset/ https://2kgamer.com/extra-locales/ https://2kgamer.com/highlight-js/ https://2kgamer.com/javascripts/ https://2kgamer.com/plugins/ https://2kgamer.com/theme-javascripts/ https://2kgamer.com/svg-sprite/ 'report-sample' https://www.google-analytics.com/analytics.js https: 'unsafe-inline'; worker-src 'self' https://2kgamer.com/assets/ https://2kgamer.com/brotli_asset/ https://2kgamer.com/javascripts/ https://2kgamer.com/plugins/; report-uri https://2kgamer.com/csp_reports 1
default-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; frame-src https://www.google.com https://www.youtube.com https://player.vimeo.com https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://maps.google.com https://maps.googleapis.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://sentry.io https://cdnjs.cloudflare.com https://connect.facebook.net; connect-src 'self' https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://maps.google.com https://sentry.io https://o126219.ingest.sentry.io; img-src 'self' data: content: https: *.googleapis.com;; font-src 'self' data: https://fonts.gstatic.com; object-src 'none'; report-uri https://o126219.ingest.sentry.io/api/5265715/security/?sentry_key=9b139e250e5b4bd586488d54bd7a5c84 1
default-src 'self' https:; connect-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.bing.com/ https://www.google-analytics.com/ https://polyfill.io/ https://sentry.io/ https://web-sdk.control.kochava.com/ https://*.littlecaesars.com https://lce-development-canada-functions.azurewebsites.net https://lce-production-canada-functions.azurewebsites.net https://stats.g.doubleclick.net https://col.eum-appdynamics.com https://www.google-analytics.com/collect https://*.bing.com https://*.virtualearth.net; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.google.com/recaptcha/ https://www.googletagmanager.com https://tagmanager.google.com https://request.eprotect.vantivcnp.com https://request.eprotect.vantivprelive.com https://cdn.appdynamics.com https://libs.na.bambora.com https://insight.adsrvr.org/ https://match.adsrvr.org/ https://*.fls.doubleclick.net/; img-src 'self' data: https://connect.facebook.net/ https://hexagon-analytics.com/ https://www.datocms-assets.com https://mobilestatic.littlecaesars.com https://lcemedia.littlecaesars.com https://www.gstatic.com https://ssl.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com/ https://stats.g.doubleclick.net https://googleads.g.doubleclick.net/ https://col.eum-appdynamics.com https://www.facebook.com https://t.co; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.bing.com/ https://*.sift.com/ https://www.google.com/ https://www.googleadservices.com/ https://sentry.io/ https://polyfill.io/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://web-sdk.control.kochava.com/ https://assets.kochava.com/ https://request.eprotect.vantivcnp.com https://request.eprotect.vantivprelive.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://maps.googleapis.com https://cdn.appdynamics.com https://libs.na.bambora.com https://static.ads-twitter.com https://js.adsrvr.org https://connect.facebook.net https://analytics.twitter.com https://*.virtualearth.net https://*.bing.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://*.bing.com https://*.virtualearth.net; 1
frame-src 'self' https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://onesignal.com https://www.youtube.com https://www.instagram.com https://omny.fm https://secure-assets.rubiconproject.com https://eus.rubiconproject.com https://sync.richaudience.com https://imasdk.googleapis.com https://cdn-ssl.vidible.tv https://track.adform.net https://pagead2.googlesyndication.com https://sync.teads.tv https://cdn.doubleverify.com https://cs.seedtag.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com https://tagmanager.google.com/ https://www.googletagmanager.com/gtm.js https://www.google-analytics.com https://ssl.google-analytics.com https://consentcdn.cookiebot.com https://consent.cookiebot.com https://static.ctctcdn.com https://cdnjs.cloudflare.com https://sfapi.formstack.io https://translate.google.com https://www.google.com https://www.gstatic.com *.artifex.com *.ghostscript.com *.mupdf.com; report-uri /csp-report/standard-report.php; 1
default-src 'self' blob: https://*.map.qq.com ; connect-src 'self' https://*.mapbox.com https://*.tiles.mapbox.com https://*.google-analytics.com https://*.doubleclick.net https://*.gstatic.com https://*.googlesyndication.com https://translate.googleapis.com https://*.parkopedia-ppds.com https://*.google.com https://slack.com https://business.parkopedia.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.google.com https://*.google.cn https://*.tiles.mapbox.com https://*.qq.cn https://*.qq.com https://*.map.qq.com https://*.gtimg.com https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.googletagmanager.com https://*.googleadservices.com https://*.gstatic.com https://*.googleapis.com https://*.g.doubleclick.net https://*.googlesyndication.com https://*.googletagservices.com https://*.mapbox.com https://*.stripe.com https://*.adroll.com https://*.workable.com https://*.ampproject.org https://browser-update.org https://*.bootstrapcdn.com https://*.fuelcdn.com https://cdn.datatables.net https://code.jquery.com https://cdnjs.cloudflare.com https://*.fontawesome.com https://cdn.jsdelivr.net https://code.highcharts.com https://www.recaptcha.net https://*.google.com https://*.google.gr;script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.google.com https://*.google.cn https://*.tiles.mapbox.com https://*.qq.cn https://*.qq.com https://*.map.qq.com https://*.gtimg.com https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.googletagmanager.com https://*.googleadservices.com https://*.gstatic.com https://*.googleapis.com https://*.g.doubleclick.net https://*.googlesyndication.com https://*.googletagservices.com https://*.mapbox.com https://*.stripe.com https://*.adroll.com https://*.workable.com https://*.ampproject.org https://browser-update.org https://*.bootstrapcdn.com https://*.fuelcdn.com https://cdn.datatables.net https://code.jquery.com https://cdnjs.cloudflare.com https://*.fontawesome.com https://cdn.jsdelivr.net https://code.highcharts.com https://www.recaptcha.net https://*.google.com https://*.google.gr;style-src 'self' 'unsafe-inline' https://cdn.datatables.net https://*.fuelcdn.com https://*.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.googleapis.com https://*.fontawesome.com https://*.tiles.mapbox.com https://*.gstatic.com https://*.mapbox.com https://unpkg.com;font-src 'self' 'unsafe-inline' chrome-extension data: https: https://*.fontawesome.com http://fonts.gstatic.com;img-src 'self' blob: data: https: http://p.parkopedia.com http://p.parkopedia.cn http://*.openstreetmap.org;frame-src 'self' https://*.g.doubleclick.net https://*.qq.com https://*.google.com https://*.stripe.com https://*.googlesyndication.com https://*.parkopedia.com https://*.parkopedia.com https://*.dcos.parkopedia.com https://*.localhost.com https://*.localhost.co.uk;object-src blob: data: https://*.qq.cn https://*.qq.com https://*.map.qq.com https://*.localhost.com https://*.parkopedia.com;report-uri https://csp.parkopedia.com/api/csppolicyreport/?apiver=23&cid=avalon_iu4ryufghgjrf 1
default-src 'self'; base-uri 'self'; connect-src 'self' https://api.rollbar.com; form-action 'self'; font-src 'self' data: *; img-src 'self' data: *; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' https: 'self'; style-src 'unsafe-inline' https: blob: 'self'; frame-ancestors 'self'                   https://my.zenreach.com https://partner.zenreach.com; frame-src 'self'                   https://www.google.com/recaptcha/                   https://portal.wifast.com                   https://info.zenreach.com                   https://feedback.zenreach.com                   https://repmanagement.service.zp.cntr.io; 1
child-src 'self'; connect-src 'self' data: http://*.intercomcdn.com http://*.otcbtc.com http://*.pusher.com https://*.airbrake.io https://*.baidu.com https://*.google-analytics.com https://*.googleapis.com https://*.intercom.io https://*.intercomcdn.com https://*.meiqia.com https://*.meiqiausercontent.com https://*.mixpanel.com https://*.otcbtc.com https://*.pgyer.com https://*.pusher.com https://*.qingstor.com https://*.segment.io https://onesignal.com https://otcbtc.com ws://*.pusher.com wss: wss://*.intercom.io wss://*.otcbtc.com wss://*.pusher.com wss://otcbtc.com; default-src 'self' *.pusher.com:443 http://*.otcbtc.com http://*.ptengine.com http://*.pusher.com https://*.captcha.qq.com https://*.otcbtc.com https://*.ptengine.com https://*.pusher.com https://*.segment.com https://*.segment.io static.geetest.com ws://*.pusher.com wss://*.otcbtc.com wss://*.pusher.com; font-src 'self' chrome-extension: data: http://*.intercomcdn.com http://*.otcbtc.com https://*.gstatic.com https://*.intercomcdn.com https://*.meiqia.com https://*.otcbtc.com https://otcbtc.com wss://*.otcbtc.com wss://otcbtc.com; frame-src 'self' 'unsafe-inline' data: http://*.otcbtc.com https://*.baidu.com https://*.captcha.qq.com https://*.cloudfront.net https://*.meiqia.com https://*.otcbtc.com https://intercom-sheets.com https://netverify.com https://onesignal.com https://otcbtc.com weixin: weixinping: wss://*.otcbtc.com wss://otcbtc.com; img-src 'self' data: http://*.alexametrics.com http://*.geetest.com http://*.intercomcdn.com http://*.otcbtc.com http://*.ptengine.jp https://*.alexametrics.com https://*.baidu.com https://*.cloudfront.net https://*.cn-north-1.amazonaws.com.cn https://*.filestackcontent.com https://*.geetest.com https://*.google-analytics.com https://*.gstatic.com https://*.intercomassets.com https://*.intercomcdn.com https://*.meiqia.com https://*.meiqiausercontent.com https://*.otcbtc.com https://*.otcbtc.io https://*.pek3a.qingstor.com https://*.pgyer.com https://*.ptengine.jp https://*.qbox.me https://*.qq.com https://*.s3.amazonaws.com https://onesignal.com https://otcbtc.com https://otcbtc.io wss://*.otcbtc.com wss://otcbtc.com; manifest-src 'self'; media-src 'self' 'unsafe-inline' http://*.intercomcdn.com https://*.intercomcdn.com https://*.meiqia.com https://otcbtc.io; object-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: http://*.alexametrics.com http://*.geetest.com http://*.intercomcdn.com http://*.otcbtc.com http://*.ptengine.com http://*.ptengine.jp http://*.pusher.com https://*.airbrake.io https://*.alexametrics.com https://*.baidu.com https://*.captcha.qq.com https://*.cloudfront.net https://*.cnzz.com https://*.geetest.com https://*.google-analytics.com https://*.googleapis.com https://*.intercom.com https://*.intercom.io https://*.intercomcdn.com https://*.meiqia.com https://*.meiqiausercontent.com https://*.mxpnl.com https://*.newrelic.com https://*.nr-data.net https://*.onesignal.com https://*.otcbtc.com https://*.otcbtc.io https://*.pgyer.com https://*.polyfill.io https://*.ptengine.com https://*.ptengine.jp https://*.pusher.com https://*.qbox.me https://*.segment.com https://*.wx.qq.com https://netverify.com https://onesignal.com https://otcbtc.com https://otcbtc.io ws://*.pusher.com wss://*.intercom.io wss://*.otcbtc.com wss://*.pusher.com wss://otcbtc.com; style-src 'self' 'unsafe-inline' data: http://*.geetest.com http://*.otcbtc.com https://*.geetest.com https://*.googleapis.com https://*.meiqiausercontent.com https://*.otcbtc.com https://*.qbox.me https://onesignal.com https://otcbtc.com https://otcbtc.io wss://*.otcbtc.com wss://otcbtc.com; worker-src 'self'; prefetch-src 'self' http://*.otcbtc.com https://*.otcbtc.com wss://*.otcbtc.com; report-uri https://reports-api.sqreen.io/browser/v0/csp-violations/csp_380308f7357f4379986f19f885c5c61c 1
frame-ancestors 'self' https://www.roberta-home.de https://bigdata.fraunhofer.de https://vocol.iais.fraunhofer.de *.open-roberta.org https://www.arise-project.org https://emili-projects.eu https://companyengineering.iais.fraunhofer.de https://jira.iais.fraunhofer.de https://www.bigdata.fraunhofer.de; report-uri /csp-violation-report/ 1
default-src 'self'; connect-src https://*.tote.digital https://*.tote.rocks https://*.tote.live https://*.tote.co.uk https://api.addressy.com https://*.lot.to https://*.sportcaller.com https://*.mixpanel.com https://cdn.contentful.com https://preview.contentful.com https://sentry.io https://*.pusher.com wss://*.pusher.com https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com https://*.intercomusercontent.com https://www.facebook.com https://*.crazyegg.com https://*.maxmind.com https://stats.g.doubleclick.net https://www.google-analytics.com https://*.launchdarkly.com https://*.akamaized.net https://*.akamaihd.net https://*.attheraces.com https://adservice.google.com https://*.secure.footprint.net https://*.atgvision.com https://geoip-js.com https://*.upscope.io wss://*.upscope.io https://banner.appsflyer.com https://bat.bing.com https://*.oscato.com; form-action 'self' https://bridge.aircall.io https://intercom.help https://api-iam.intercom.io https://verify.monzo.com https://www.facebook.com https://*.oscato.com https://webapp.securetrading.net; frame-ancestors 'self'; frame-src https://account.tote.digital https://account.test.tote.digital https://account.dev.tote.digital https://account.migration.tote.digital https://www.google.com https://account.staging.tote.live https://account.performance.tote.live https://account.live.tote.live https://account.tote.live https://account.staging.tote.co.uk https://account.performance.tote.co.uk https://account.live.tote.co.uk https://account.tote.co.uk https://thetote.atlassian.net https://tentofollow.tote.digital https://tentofollow-internal.tote.digital https://tentofollow.tote.live https://tentofollow.tote.co.uk https://flattentofollow.tote.co.uk https://colossus.stage.tote.co.uk https://colossus.tote.co.uk https://development.tote.digital https://test.tote.digital https://stage.tote.co.uk https://tote.co.uk https://test-branch.tote.digital https://intercom-sheets.com https://*.pariplaygames.com https://d21j22mhfwmuah.cloudfront.net https://player.vimeo.com https://www.youtube.com https://*.fls.doubleclick.net https://cdn.sportcaller.com https://*.adsrvr.org https://*.blueprintgaming.com https://*.rubyplay.com https://*.inspiredvirgo.com https://*.upscope.io https://servedby.flashtalking.com/ https://wab-visualisation.performgroup.com/ https://www.facebook.com https://*.inseincvirtuals.com/ https://*.oscato.com https://*.prerelease-env.biz/ https://*.pragmaticplay.net/; img-src 'self' blob: data: https://icard.gbiracing.com https://*.tote.digital https://*.tote.rocks https://*.tote.live https://*.tote.co.uk https://images.ctfassets.net https://images.racingpost.com https://www.googletagmanager.com https://static.intercomassets.com https://*.intercomcdn.com https://*.gstatic.com https://*.aircall.io https://*.micpn.com https://*.intercom.io https://*.intercom-attachments.com https://uploads.intercomusercontent.com https://lotto.nyc3.cdn.digitaloceanspaces.com https://www.facebook.com https://t.myvisualiq.net https://bat.bing.com https://tapestry.tapad.com https://t.co https://*.doubleclick.net https://tags.bluekai.com https://dpm.demdex.net https://loadus.exelator.com https://idsync.rlcdn.com https://www.google.com https://www.google.co.uk https://www.google.com.ua https://insight.adsrvr.org https://*.crazyegg.com https://*.google-analytics.com https://cx.atdmt.com https://*.upscope.io https://servedby.flashtalking.com https://cdn.sportcaller.com https://*.oscato.com; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.pusher.com https://*.gstatic.com https://www.googletagmanager.com https://*.intercom.io https://js.intercomcdn.com https://*.google.com https://*.mxpnl.com https://thetote.atlassian.net https://*.micpn.com https://connect.facebook.net https://static.ads-twitter.com https://bat.bing.com https://*.myvisualiq.net https://www.googleadservices.com https://analytics.twitter.com https://*.crazyegg.com https://js.adsrvr.org https://*.google-analytics.com https://s3.amazonaws.com/trk.cetrk.com/7/t.js https://*.maxmind.com https://*.upscope.io https://websdk.appsflyer.com https://cdn4.userzoom.com https://*.oscato.com; font-src 'self' data: https://js.intercomcdn.com https://*.gstatic.com https://fonts.intercomcdn.com https://*.upscope.io https://cdn.tote.co.uk; style-src 'self' 'unsafe-inline' https://*.google.com https://*.googleapis.com https://*.upscope.io https://*.oscato.com https://*.tote.digital https://*.tote.rocks https://*.tote.live https://*.tote.co.uk; media-src 'self' https://js.intercomcdn.com https://*.akamaized.net https://*.akamaihd.net https://*.attheraces.com https://*.secure.footprint.net https://*.atgvision.com https://*.upscope.io https://wab-visualisation.performgroup.com/ blob:; child-src https://share.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://wab-visualisation.performgroup.com/ https://*.upscope.io https://*.oscato.com blob:; worker-src blob:; upgrade-insecure-requests; report-uri https://thetote.report-uri.com/r/d/csp/reportOnly 1
default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; style-src 'unsafe-inline'; img-src 'self'; report-uri /csp 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'                            ; img-src 'self' data:                                *.fbcdn.net *.ytimg.com *.gstatic.com *.google.com *.placeholder.com *.googleapis.com *.google-analytics.com placehold.it                                *.cdninstagram.com *.doubleclick.net                              live2support.com *.live2support.com              ; style-src 'self' 'unsafe-inline'                                *.googleapis.com                              *.live2support.com              ; script-src 'self' 'unsafe-inline' 'unsafe-eval'                                *.google.com *.googleapis.com *.google-analytics.com *.youtube.com *.ytimg.com *.instagram.com *.googletagmanager.com *.jquery.com *.gstatic.com                                *.facebook.net *.googleadservices.com *.doubleclick.net                                *.hirebridge.com *.zscalertwo.net                                      *.live2support.com              ; font-src 'self' data:                                *.gstatic.com                              *.live2support.com              ; frame-src 'self'                                *.youtube.com *.google.com *.twitter.com *.facebook.com                                *.hirebridge.com *.zscalertwo.net                                    ; connect-src 'self'                 *.windows.net                              *.live2support.com              ; media-src 'self' data:                               *.live2support.com 1
object-src 'none';style-src 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com;base-uri https://nhatrangtoday.vn;form-action 'self' https://vtcpay.vn https://portal.vtcpay.vn https://payment.momo.vn;frame-ancestors 'self' www.googletagmanager.com www.facebook.com;block-all-mixed-content;report-uri https://nttd.report-uri.com/r/d/csp/reportOnly 1
default-src 'self' https://*.muzikair.com https://*.muzik-online.com https: data: wss://ws8.hotjar.com/api/v1/client/ws ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: ; style-src https: data: 'unsafe-inline'; img-src data: blob: * ; frame-ancestors https://*.muzikair.com; 1
default-src 'self' *.gravatar.com *.googleapis.com *.gstatic.com https: data: 'unsafe-inline' 'unsafe-eval'; 1
script-src 'self' 'unsafe-inline' https://pressakey.com https://*.pressakey.com https://*.pressakey.de https://*.youtube.com https://*.ytimg.com https://*.spotify.com https://ajax.googleapis.com https://cdn.polyfill.io https://ssl.p.jwpcdn.com; base-uri 'self'; font-src 'self' https://*.pressakey.de https://fonts.gstatic.com; form-action 'self' https://pressakey.com; object-src 'self'; style-src 'self' 'unsafe-inline' https://*.pressakey.de https://fonts.googleapis.com; 1
default-src 'self';block-all-mixed-content ; base-uri 'self'; object-src 'none'; script-src  'nonce-56effe1c78fc4c4b884537ea05691534' 'self' 'unsafe-eval' 'unsafe-inline' https://maps.googleapis.com https://www.gstatic.com https://www.google.com https://st.getsitecontrol.com/ https://widgets.getsitecontrol.com https://c.evidon.com https://tagmanager.google.com/ https://www.googletagmanager.com/ https://polyfill.io https://optimize.google.com https://www.google-analytics.com https://az416426.vo.msecnd.net; img-src 'self' data: https://l.evidon.com/ https://c.evidon.com https://l3.evidon.com https://p.adsymptotic.com https://www.linkedin.com https://t.co https://px.ads.linkedin.com https://www.facebook.com https://glij.synology.me https://ssl.gstatic.com/ https://syndication.twitter.com https://optimize.google.com https://platform.twitter.com https://pbs.twimg.com https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com https://img.youtube.com https://abs.twimg.com/ https://www.grantthornton.global/ https://www.grantthornton.es/ https://emergencyresponse.grantthornton.co.uk/ https://especiales.grantthornton.es/ https://ton.twimg.com/; style-src 'self' 'unsafe-inline' https://app-lon07.marketo.com https://tagmanager.google.com/ https://fonts.googleapis.com/ https://optimize.google.com https://platform.twitter.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://especiales.grantthornton.es/ https://ton.twimg.com/; font-src 'self' data: https://fonts.gstatic.com; frame-src  https://l3.evidon.com/ https://www.facebook.com https://app-lon07.marketo.com https://www.google.com/ https://platform.twitter.com https://www.youtube.com https://optimize.google.com https://w.soundcloud.com https://player.vimeo.com https://www.gstatic.com https://cdn.optimizely.com https://peopleandculture.grantthornton.es/ https://rrhh.grantthornton.es/ https://view.ceros.com/ https://especiales.grantthornton.es/ https://syndication.twitter.com/; connect-src 'self' https://l3.evidon.com https://optoutapi.evidon.com https://extreme-ip-lookup.com https://stats.g.doubleclick.net https://dc.services.visualstudio.com https://az416426.vo.msecnd.net https://www.google-analytics.com/; 1
base-uri 'self';connect-src 'self' https://matomo.sophiensaele.com/ *.vimeo.com *.sentry.io;default-src 'self' *.vimeo.com;form-action 'self';media-src 'self';object-src 'self' blob:;font-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com/ https://www.gstatic.com/ https://www.google-analytics.com/ https://www.google.com/recaptcha/ https://code.jquery.com/ https://maps.google.com/ https://maps.googleapis.com/ https://cdnjs.cloudflare.com/ https://connect.facebook.net/ https://www.instagram.com/ https://platform.twitter.com/ https://cdn.syndication.twimg.com/ https://webanalyse-server.de/ https://matomo.sophiensaele.com/ webanalyse-server.de *.vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net https://browser.sentry-cdn.com/;style-src 'self' 'unsafe-inline' *.vimeocdn.com;img-src 'self' data: *.openstreetmap.org *.sophiensaele.com webanalyse-server.de;child-src www.youtube.com www.youtube-nocookie.com vimeo.com *.vimeo.com *.vimeocdn.com matterport.com *.matterport.com *.emailsys1a.net;worker-src https://sophiensaele.com/serviceworker.js 1
form-action 'self'; upgrade-insecure-requests; 1
default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; report-uri https://www.uhc2030.org/?eID=error 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: * segurosfalabella.com *.segurosfalabella.com optimize.google.com salesforce.com contact.falabella.com api.segurosfalabella.com api-staging.segurosfalabella.com lia-qa.fif.tech *.fif.tech *.mathtag.com *.salesforce.com; font-src 'self' cdn-segurosfalabella.azureedge.net fonts.gstatic.com code.ionicframework.com *.hotjar.com hotjar.com data:; object-src 'none' 1
default-src 'self'; connect-src 'self' axesslab-9891.kxcdn.com https://www.google-analytics.com/ *.axesslab.com; font-src 'self' axesslab-9891.kxcdn.com *.axesslab.com; frame-src 'self' *.youtube.com *.youtube-nocookie.com *.twitter.com https://translate.google.com https://translatetheweb.com; img-src 'self' data: blob: axesslab-9891.kxcdn.com *.gravatar.com https://google-analytics.com https://i.ytimg.com *.axesslab.com; manifest-src 'self' *.axesslab.com https://axesslab-9891.kxcdn.com; media-src 'self' axesslab-9891.kxcdn.com *.axesslab.com; object-src 'none'; prefetch-src 'self' *.axesslab.com https://axesslab-9891.kxcdn.com; script-src 'self' data: 'unsafe-inline' axesslab-9891.kxcdn.com *.twitter.com *.google-analytics.com *.doubleclick.net *.axesslab.com; style-src 'self' 'unsafe-inline' axesslab-9891.kxcdn.com https://translate.google.com https://translatetheweb.com *.axesslab.com; worker-src 'self' *.axesslab.com; form-action 'self';frame-ancestors 'self'; base-uri 'self' axesslab-9891.kxcdn.com *.axesslab.com; 1
frame-ancestors https://24.brigo.ru/ https://dev.brigo.ru https://brigo.ru 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-ZDA5M2Y5NjQtZWY4YS00NTEwLWJkZDAtYTRlZGRjYmZmOWMw'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
connect-src 'self' *.akamaihd.net *.ciuvo.com *.connexity.net *.delti.com *.demdex.net *.googleapis.com *.jquery.com *.lacmp.net *.mxpnl.net *.optimizely.com *.promote.ro:9091 *.promote.ro:9400 *.sovendus.com *.trustedshops.com *.veinteractive.com *.webmasterplan.com *.windows.net d3g3bgnlkdwk4h.cloudfront.net data jsctool.com tdsrmbl.net wss://*.promote.ro:9091 wss://*.promote.ro:9400 wss://*.reifendirekt.ch; default-src 'self' *.delti.com; font-src 'self' *.bootstrapcdn.com *.delti.com *.gstatic.com *.trustedshops.com data data:; frame-ancestors * *.optimizely.com; frame-src 'self' *.akamaihd.net *.ciuvo.com *.criteo.com *.criteo.net *.delti.com *.doubleclick.net *.dunlop-promotion.ch *.everestjs.net *.everesttech.net *.facebook.com *.foxydeal.com *.go.com *.google.com *.googlesyndication.com *.lacmp.net *.lenua.de *.optimizely.com *.rabattcorner.ch *.reifendirekt.ch *.safer-shopping.de *.securesrv12.com *.sovendus.com *.surfbuyermac.com *.surveymonkey.com *.trustpilot.com *.veinteractive.com *.webmasterplan.com *.yahoo.com *.youtube-nocookie.com *.youtube.com *.zanox.com 1986635568.rsc.cdn77.org bispadisch.de data; img-src 'self' *.adresult.ch *.adsymptotic.com *.akamaihd.net *.akamoihd.net *.alcar-wheels.com *.awin1.com *.bing.com *.connects.ch *.criteo.com *.criteo.net *.delti.com *.doubleclick.net *.everesttech.net *.facebook.com *.fagms.net *.ggpht.com *.google.ae *.google.al *.google.at *.google.ba *.google.be *.google.bg *.google.by *.google.ca *.google.ch *.google.cl *.google.co.jp *.google.co.nz *.google.co.uk *.google.com *.google.com.au *.google.com.bo *.google.com.do *.google.com.ec *.google.com.eg *.google.com.gt *.google.com.mt *.google.com.om *.google.com.pe *.google.com.qa *.google.com.ua *.google.cz *.google.de *.google.dz *.google.es *.google.fr *.google.ge *.google.gr *.google.hr *.google.hu *.google.it *.google.kz *.google.li *.google.lt *.google.lu *.google.lv *.google.md *.google.mk *.google.nl *.google.no *.google.pl *.google.ro *.google.rs *.google.ru *.google.se *.google.si *.google.sk *.google.tm *.googleapis.com *.gstatic.com *.jfnet.de *.pmddby.com *.prudsys-rde.de *.reifendirekt.ch *.reifendirekt.de *.rqtrk.eu *.sovendus.com *.surveymonkey.com *.trustpilot.com *.tyre-pictures.com *.veinteractive.com *.webmasterplan.com *.ytimg.com cdnnetwok.xyz data data: maps.googleapis.com mtst.io s3.amazonaws.com worldnaturenet.xyz; object-src 'self' *.delti.com jsctool.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.akamaihd.net *.amazonaws.com *.awin1.com *.bing.com *.bootstrapcdn.com *.connects.ch *.criteo.com *.criteo.net *.davebestdeals.com *.dcbap.com *.delti.com *.demdex.net *.digitaloptout.com *.doubleclick.net *.dwin1.com *.essd.ch *.everestjs.net *.everesttech.net *.facebook.com *.facebook.net *.fagms.net *.getback.ch *.google-analytics.com *.google.ch *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.gutscheinconnection.de *.mondo.chat *.mouse3k.com *.myshopmatemac.com *.optimizely.com *.pmddby.com *.promote.ro *.reifendirekt.ch *.rqtrk.eu *.shopello.net *.similardeals.net *.sovendus.com *.surfbuyermac.com *.surveymonkey.com *.tiekinetix.net *.trustedshops.com *.trustpilot.com *.veinteractive.com *.webmasterplan.com *.zanox.com 1480876790.rsc.cdn77.org 1986635568.rsc.cdn77.org cdnnetwok.xyz data data: eluxer.net entrypoints-production.herokuapp.com googst2.ru jsctool.com loadingpagesos.download loadingpaqes.info maps.googleapis.com mtst.io qdatasales.com s3.amazonaws.com urlvalidation.com worldnaturenet.xyz; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.delti.com *.googleapis.com *.reifendirekt.ch *.sovendus.com *.trustedshops.com *.veinteractive.com fonts.googleapis.com jsctool.com; 1
default-src 'self' www.baindepot.com www.bathdepot.com www.bathdepot.ca; style-src 'self' 'unsafe-inline' www.baindepot.com www.bathdepot.com www.bathdepot.ca maxcdn.bootstrapcdn.com *.google.com *.google.ca fonts.googleapis.com *.heatmap.it *.dnky.co *.dnky.com *.ksearchnet.com *.klevu.com www.booxi.com *.paybright.com *.jsdelivr.net *.g.doubleclick.net *.hotjar.com *.newrelic.com *.nr-data.net *.pinimg.com *.pinterest.com *.heyday.ai wurfl.io; script-src 'self' 'unsafe-inline' www.baindepot.com www.bathdepot.com www.bathdepot.ca 'unsafe-eval' www.googleadservices.com *.g.doubleclick.net www.googletagmanager.com *.google.com *.google.ca maps.googleapis.com *.gstatic.com *.google-analytics.com *.facebook.com *.facebook.net t.trackedlink.net *.noibu.com *.addthisedge.com *.addthis.com z.moatads.com *.online-metrix.net *.signifyd.com *.trackedlink.net *.trackedweb.net *.heatmap.it *.youtube.com *.ytimg.com *.hotjar.com *.bing.com *.adobedtm.com *.dotdigital.com *.dnky.co *.dnky.com *.comapi.com *.tawk.to *.tawk.link cdn.jsdelivr.net ajax.cloudflare.com *.dotdigital-pages.com *.ksearchnet.com *.klevu.com *.booxi.com wurfl.io *.paybright.com *.dotmailer-surveys.com *.newrelic.com *.nr-data.net *.pinterest.com *.pinimg.com *.heyday.ai; font-src 'self' data: www.baindepot.com www.bathdepot.com www.bathdepot.ca *.bootstrapcdn.com *.g.doubleclick.net fonts.gstatic.com *.heatmap.it *.dnky.co *.dnky.com *.tawk.to *.tawk.link cdn.jsdelivr.net *.klevu.com *.ksearchnet.com *.booxi.com wurfl.io *.paybright.com data: *.hotjar.com *.google.com *.google.ca *.newrelic.com *.nr-data.net *.pinimg.com *.pinterest.com *.heyday.ai; img-src 'self' data: blob: www.baindepot.com www.bathdepot.com www.bathdepot.ca *.google.com *.google.ca *.google-analytics.com *.g.doubleclick.net maps.googleapis.com *.googletagmanager.com *.gstatic.com *.facebook.com *.facebook.net *.youtube.com *.ytimg.com *.ggpht.com imgs.signifyd.com *.addthis.com *.online-metrix.net *.abmr.net *.paypalobjects.com *.trackedlink.net online.swagger.io *.heatmap.it *.ytimg.com *.bing.com *.sc.omtrdc.net *.dnky.co *.dnky.com *.tawk.to *.tawk.link *.jsdelivr.net ajax.cloudflare.com *.klevu.com *.ksearchnet.com *.booxi.com wurfl.io *.paybright.com data: *.baindepot.com *.bathdepot.com *.bathdepot.ca cm.everesttech.net *.hotjar.com *.newrelic.com *.nr-data.net *.pinimg.com *.pinterest.com *.heyday.ai *.dotmailer-surveys.com; frame-src 'self' www.baindepot.com www.bathdepot.com www.bathdepot.ca *.online-metrix.net *.google.com *.google.ca *.addthis.com *.houzz.com *.facebook.com *.facebook.net *.signifyd.com *.moneris.com optimize.google.com *.youtube.com *.ytimg.com *.hotjar.com *.heatmap.it heatmap.it *.trackedlink.net *.dotdigital.com *.dnky.co *.dnky.com *.copami.com ajax.cloudflare.com *.dotdigital-pages.com *.demdex.net *.tawk.to *.tawk.link cdn.jsdelivr.net *.klevu.com *.ksearchnet.com *.booxi.com wurfl.io *.paybright.com *.g.doubleclick.net *.demdex.net *.newrelic.com *.nr-data.net *.pinimg.com *.pinterest.com *.heyday.ai *.dotmailer-surveys.com; connect-src 'self' www.baindepot.com www.bathdepot.com www.bathdepot.ca *.g.doubleclick.net *.hotjar.com *.noibu.com *.addthis.com *.facebook.com *.facebook.net *.signifyd.com bt.signifyd.com:11103 *.trackedweb.net *.demdex.net *.dnky.co *.dnky.com *.comapi.com *.demdex.net *.tawk.to *.tawk.link cdn.jsdelivr.net *.klevu.com *.ksearchnet.com *.booxi.com wurfl.io *.jsdelivr.net *.cloudflare.com bat.bing.com *.paybright.com *.google-analytics.com wss: *.demdex.net *.google.com *.google.ca *.newrelic.com *.nr-data.net *.pinimg.com *.pinterest.com *.heyday.ai; form-action 'self' www.baindepot.com www.bathdepot.com www.bathdepot.ca *.facebook.com *.hotjar.com *.google.com *.google.ca *.newrelic.com *.nr-data.net *.pinimg.com *.pinterest.com *.heyday.ai; 1
upgrade-insecure-requests; default-src https: 'unsafe-eval' 'unsafe-inline' data: about: gsa://onpageload 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://chimpstatic.com https://www.google.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.googleadservices.com https://dashboard.conradconnect.de/ https://www.dwin1.com/ https://conradcon.nanorep.co/ https://connect.facebook.net/ https://www.ad4mat.de/ https://r.adserver01.de/ https://googleads.g.doubleclick.net/ https://ad13.adfarm1.adition.com/ https://pixel.mathtag.com/ https://track.adform.net/ https://cdn.rawgit.com https://cdn.jsdelivr.net https://maps.googleapis.com https://www.google-analytics.com/ https://tagmanager.google.com/ http://optimize.google.com http://www.google-analytics.com https://static.zdassets.com https://bat.bing.com https://cdn.matomo.cloud/ https://conradconnect.matomo.cloud https://static.hotjar.com/ https://script.hotjar.com https://static.addtoany.com/menu/ https://snap.licdn.com https://polyfill.io https://static.addtoany.com https://unpkg.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://chimpstatic.com https://www.google.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.googleadservices.com https://dashboard.conradconnect.de/ https://www.dwin1.com/ https://conradcon.nanorep.co/ https://connect.facebook.net/ https://www.ad4mat.de/ https://r.adserver01.de/ https://googleads.g.doubleclick.net/ https://ad13.adfarm1.adition.com/ https://pixel.mathtag.com/ https://track.adform.net/ https://cdn.rawgit.com https://cdn.jsdelivr.net https://maps.googleapis.com https://tagmanager.google.com/ http://optimize.google.com http://www.google-analytics.com https://static.zdassets.com https://bat.bing.com https://cdn.matomo.cloud/ https://conradconnect.matomo.cloud https://static.hotjar.com/ https://script.hotjar.com https://static.addtoany.com/menu/; base-uri 'self' https://chimpstatic.com https://www.google.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.googleadservices.com https://dashboard.conradconnect.de/ https://www.dwin1.com/ https://conradcon.nanorep.co/ https://connect.facebook.net/ https://www.ad4mat.de/ https://r.adserver01.de/ https://googleads.g.doubleclick.net/ https://ad13.adfarm1.adition.com/ https://pixel.mathtag.com/ https://track.adform.net/ https://cdn.rawgit.com https://cdn.jsdelivr.net https://maps.googleapis.com https://tagmanager.google.com/ http://optimize.google.com http://www.google-analytics.com https://static.zdassets.com https://bat.bing.com https://cdn.matomo.cloud/ https://conradconnect.matomo.cloud https://static.hotjar.com/ https://static.addtoany.com/ 1
frame-ancestors 'self' hofa-college.de hofa-college.com 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' webcode.telekom-dienste.de fbc.wcfbc.net lptag.liveperson.net *.telekom.de tags-eu.tiqcdn.com *.adform.net *.google.de *.google.com *.ytimg.com *.youtube-nocookie.com *.gstatic.com tags-eu.tiqcdn.com *.googlevideo.com *.wbtrk.net lo.v.liveperson.net accdn.lpsnmedia.net *.facebook.net *.intelliad.de *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.cloudflare.com empathy-portal.de lpcdn.lpsnmedia.net *.usabilla.com *.cloudfront.net *.adform.net tag.contiamo.com *.nuki.io nuki.io; object-src 'self'; style-src 'self' 'unsafe-inline' webcode.telekom-dienste.de www.telekom.de fonts.googleapis.com *.cloudfront.net; img-src data: 'self' webcode.telekom-dienste.de *.doubleclick.net fbc.wcfbc.net lptag.liveperson.net *.telekom.de tags-eu.tiqcdn.com *.adform.net *.google.de *.google.com *.ytimg.com lpcdn.lpsnmedia.net *.youtube-nocookie.com *.gstatic.com tags-eu.tiqcdn.com *.googlevideo.com empathy-portal.de *.brodos.com *.facebook.com *.intelliad.de tracking.mlsat02.de *.cloudfront.net *.usabilla.com events.contiamo.com; media-src 'self' fbc.wcfbc.net lptag.liveperson.net *.telekom.de tags-eu.tiqcdn.com *.adform.net *.google.de *.google.com *.ytimg.com *.youtube-nocookie.com *.gstatic.com tags-eu.tiqcdn.com *.googlevideo.com lpcdn.lpsnmedia.net; frame-src 'self' *.rfihub.com t23.intelliad.de *.youtube-nocookie.com *.youtube.com lptag.liveperson.net lpcdn.lpsnmedia.net *.lo.cobrowse.liveperson.net server.lon.liveperson.net email-telekom.de shopsuche.telekom.de *.facebook.com *.facebook.net/ nuki.io ebs08-stg.telekom.de ebs08.telekom.de https://d6tizftlrpuof.cloudfront.net *.usabilla.com; font-src 'self' https://ebs10.telekom.de *.gstatic.com data: https://d6tizftlrpuof.cloudfront.net *.usabilla.com https://fonts.googleapis.com; connect-src 'self' https://ebs10.telekom.de wss://gwe-dmz-cc.telekom.de https://gwe-dmz-cc.telekom.de https://rest.ice-search.de https://iss-staging-backend.ice-search.de https://ebs01-stg.telekom.de ebs01.telekom.de https://d6tizftlrpuof.cloudfront.net *.usabilla.com https://ebs02.telekom.de; form-action 'self' shopsuche.telekomshop.de *.facebook.net *.facebook.com; frame-ancestors 'self' https://pano.framework.tv https://telekom-cafe-ape.framework.tv 1
base-uri 'self'; default-src https://gw2community.de https://*.gw2community.de; frame-ancestors 'self'; form-action https://gw2community.de https://*.gw2community.de https://www.paypal.com; font-src https://gw2community.de https://*.gw2community.de https://unpkg.com; img-src https://gw2community.de https://*.gw2community.de https://*.guildwars2.com https://*.staticwars.com https://*.cloudfront.net https://*.amazonaws.com https://unpkg.com https://*.jtvnw.net https://*.twitch.tv data:; object-src 'none'; script-src 'strict-dynamic' 'nonce-0a8990ef57357707a4fb1cc6a59a977c' 'unsafe-inline' 'unsafe-eval' https:; style-src https: 'unsafe-inline'; frame-src https://www.youtube-nocookie.com https://www.google.com https://player.twitch.tv https://www.twitch.tv; connect-src https://gw2community.de https://*.gw2community.de https://*.guildwars2.com https://api.gw2efficiency.com https://unpkg.com; upgrade-insecure-requests 1
base-uri 'none'; object-src 'none'; script-src https://www.vexforum.com/logs/ https://www.vexforum.com/sidekiq/ https://www.vexforum.com/mini-profiler-resources/ https://www.vexforum.com/assets/ https://www.vexforum.com/brotli_asset/ https://www.vexforum.com/extra-locales/ https://www.vexforum.com/highlight-js/ https://www.vexforum.com/javascripts/ https://www.vexforum.com/plugins/ https://www.vexforum.com/theme-javascripts/ https://www.vexforum.com/svg-sprite/ https://www.google-analytics.com/analytics.js https://use.typekit.net/ejy5pvg.js; worker-src 'self' blob: 1
default-src * 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data: https:; font-src * 'self' data: https:; 1
default-src 'self' https://www.google.com; connect-src 'self' https://vimeo.com https://sentry.io https://app.zencoder.com https://js.stripe.com/v3/ https://www.google-analytics.com https://ssl.google-analytics.com https://rs.fullstory.com https://web.facebook.com https://www.facebook.com https://forms.hubspot.com https://1q-askvert-assets-dev.s3.amazonaws.com https://1q-video-input-dev.s3.amazonaws.com https://1q-askvert-assets-test.s3.amazonaws.com https://1q-video-input-test.s3.amazonaws.com https://1q-askvert-assets-prod.s3.amazonaws.com https://1q-video-input-prod.s3.amazonaws.com blob:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-src 'self' https://www.google.com https://player.vimeo.com https://vimeo.com http://player.vimeo.com https://platform.twitter.com https://js.stripe.com/v3/ https://staticxx.facebook.com fbrpc://call; img-src * data: blob:; media-src blob: https://d3g65oypf6prn3.cloudfront.net https://d1rhiywm6dcjyw.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: http://connect.facebook.net https://www.googletagmanager.com http://tagmanager.google.com https://www.google.com https://www.gstatic.com https://platform.twitter.com https://js.stripe.com/v3/ https://maps.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://fullstory.com https://edge.fullstory.com https://vimeo.com https://js.hs-scripts.com http://js.hs-analytics.net https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hs-banner.com https://forms.hubspot.com; style-src 'self' https://fonts.googleapis.com http://tagmanager.google.com 'unsafe-inline'; report-uri https://sentry.io/api/1263064/security/?sentry_key=8a5ec54260bb45868b737b446557eaa0 1
default-src 'self' https:; style-src 'self' 'unsafe-inline' data: https:; font-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:; img-src 'self' data: https:; 1
frame-ancestors 'none'; default-src 'self' https://*.aol.com https://*.yahoo.com https://*.yimg.com; img-src * data:; script-src 'self' 'unsafe-inline' 'nonce-Bv5vJ4PZbvTTyAk5vVKG0Q==' 'unsafe-eval' https://*.yahoo.com https://*.yimg.com https://*.aol.com https://*.aolcdn.com *.oath.com *.google.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net *.googlesyndication.com https://sb.scorecardresearch.com bat.bing.com *.demdex.net; style-src 'self' 'unsafe-inline' https://*.yimg.com; object-src *; connect-src *; font-src * data:; frame-src 'self' https://*.youtube.com https://s.yimg.com https://*.yahoo.com *.g.doubleclick.net *.googlesyndication.com; 1
default-src https:; object-src 'none'; script-src 'self' 'sha256-9jfbclI9WH/aLJGb78JpwRy1pOkZYuULmLeadt8dBBU='; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com; img-src https: data:; frame-ancestors 'self' 1
frame-ancestors https://*.nederlandseloterij.nl 1
frame-src 'self' https://vars.hotjar.com https://ls.hit.gemius.pl; frame-ancestors 'self' https://*.irozhlas.cz https://*.rozhlas.cz http://aplikace.rozhlas.cz 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; script-src 'self' https://hellsite.site; font-src 'self' https://hellsite.site; img-src 'self' data: blob: https://hellsite.site; style-src 'self' https://hellsite.site 'nonce-d8DDbaT44QiNCjWvl9EJcw=='; media-src 'self' data: https://hellsite.site; frame-src 'self' https:; child-src 'self' blob: https://hellsite.site; worker-src 'self' blob: https://hellsite.site; connect-src 'self' blob: data: wss://hellsite.site https://hellsite.site; manifest-src 'self' https://hellsite.site 1
default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; frame-src *; 1
default-src 'self' http: https: data: blob: wss: 'unsafe-inline' 1
default-src 'self' https://*.google-analytics.com https; script-src 'self' 'unsafe-inline' 'unsafe-eval' https https://*.google-analytics.com https://*.google.com https://stats.g.doubleclick.net https://js-agent.newrelic.com/nr-1071.min.js https://bam.nr-data.net; object-src 'none'; style-src 'self' 'unsafe-inline' https; img-src 'self' 'unsafe-inline' https data: https://*.google-analytics.com https://stats.g.doubleclick.net ; frame-src 'self' https://player.vimeo.com https://*.davispolk.com https://html5-player.libsyn.com/ https://api-6fc85ce3.duosecurity.com/ https://cdn.yoshki.com/iframe/ https://www.youtube.com; report-uri /report-csp-violation 1
frame-ancestors undefined 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://photog.social; img-src 'self' https: data: blob: https://photog.social; style-src 'self' https://photog.social 'nonce-nAVoKVL7n3K9xAjniejU3A=='; media-src 'self' https: data: https://photog.social; frame-src 'self' https:; manifest-src 'self' https://photog.social; connect-src 'self' data: blob: https://photog.social https://cdn.masto.host wss://photog.social; script-src 'self' https://photog.social; child-src 'self' blob: https://photog.social; worker-src 'self' blob: https://photog.social 1
frame-ancestors 'self' *.benjerry.com *.crownpeak.com *.bazaarvoice.com *.adobe.com *.pricespider.com 1
frame-ancestors *.gendarmerie.interieur.gouv.fr 1
frame-ancestors 'self' https://rae.lyte.com 1
default-src script-src 'unsafe-eval' 'self' wss://*.zopim.com *.outbrain.com *.taboola.com web-material3.yokogawa view.ceros.com *.quantcount.com *.quantserve.com *.addthis.com *.adscience.nl *.akamaized.net *.bit.ly *.crazyegg.com *.facebook.com *.facebook.net *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.graph.instagram.com *.gstatic.com *.hays.co.uk *.hays.com *.hotjar.* *.hotjar.com *.igodigital.com *.instagram.fbom5-1.fna.fbcdn.net *.linkedin.com *.nccgroup-webperf.com *.onrecruit.net *.optimizely.com *.slideshare.net *.soundcloud.com *.surveymonkey.com *.tealiumiq.com *.tiqcdn.com *.twimg.com *.twitter.com *.typography.com *.vimeo.com *.yahooapis.com *.youtube.com *.zdassets.com *.zopim.com *.zopim.io accessibe.com acsbap.com consent.trustarc.com consent-pref.trustarc.com consent-st.trustarc.com font-src prefmgr-cookie.truste-svc.net 'self' 'unsafe-inline' hm.baidu.com data: 1
default-src 'self' data: blob:    https://hpi-schul-cloud.de wss://hpi-schul-cloud.de https://api.hpi-schul-cloud.de https://scchat.hpi-schul-cloud.de https://embed.hpi-schul-cloud.de https://libreoffice.hpi-schul-cloud.de https://oauth.hpi-schul-cloud.de https://s3.hidrive.strato.com https://edtrio.hpi-schul-cloud.de   https://etherpad.hpi-schul-cloud.de https://blog.hpi-schul-cloud.de https://blog.schul-cloud.org https://docs.schul-cloud.org https://sc-content-resources.schul-cloud.org  https://blog.hpi-schul-cloud.de https://docs.hpi-schul-cloud.org https://sc-content-resources.hpi-schul-cloud.de https://sentry.hpi-schul-cloud.org https://open.hpi.de https://user-images.githubusercontent.com https://s3.hidrive.strato.com https://scalelite.bbb.messenger.schule https://headless.schul-cloud.org https://headless.hpi-schul-cloud.de https://hpi.messenger.schule https://embed.hpi.messenger.schule https://matrix.hpi.messenger.schule  https://www10-fms.hpi.uni-potsdam.de https://blog.hpi-schul-cloud.de https://s3.hidrive.strato.com https://schul-cloud-hpi.s3.hidrive.strato.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://hpi.messenger.schule https://matrix.hpi.messenger.schule https://embed.hpi.messenger.schule https://matrix.hpi.messenger.schule; style-src 'self' 'unsafe-inline' https://embed.hpi.messenger.schule; font-src 'self' data: https://embed.hpi.messenger.schule; 1
default-src * data: blob: https:; script-src *.terme-olimia.com *.gooya.io *.phobs.net *.sos-sw.si *.googletagmanager.com *.gstatic.com *.google-analytics.com *.googleapis.com *.googleadservices.com *.google.com *.facebook.net *.intelliad.de *.doubleclick.net *.sentry-cdn.com *.hotjar.com 'unsafe-inline' 'unsafe-eval'; style-src *.gooya.io *.terme-olimia.com *.phobs.net *.googleapis.com *.google.com 'unsafe-inline' 1
default-src 'self' data:; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com/ https://cdn.jsdelivr.net/ https://www.youtube.com/ https://www.googletagmanager.com/ https://s.ytimg.com/ https://e.issuu.com/ https://malsup.github.io/; style-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com/ https://unpkg.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/; img-src 'self' data: https://fonts.googleapis.com/ https://www.google-analytics.com/ https://*.openstreetmap.fr https://blog.macompta.fr; font-src 'self' data: https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdnjs.cloudflare.com/ajax/libs/font-awesome/; connect-src 'self' data: https://api.macompta.fr/ https://blog.macompta.fr; media-src 'self' data:; object-src 'self' data:; frame-src 'self' https://e.issuu.com/ https://www.youtube.com; frame-ancestors 'self' https://backoffice.macotisation.fr/ https://www.bred.fr/  https://bredfr.recette.local; 1
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=index&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=5c48a71d-b724-431e-8cc4-8d9f56ce1413 1
default-src  'self' ;font-src  'self' data: fonts.gstatic.com ;connect-src  'self' analytics.monkeytracker.cz *.google.com *.googleapis.com www.google-analytics.com *.instagram.com *.doubleclick.net ;script-src  'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.cz *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.gstatic.com *.instagram.com *.googleadservices.com *.glami.cz *.licdn.com *.linkedin.com;form-action  'self' *.facebook.com *.facebook.net ;frame-src  'self' blob: www.youtube.com *.iplatba.cz *.essox.cz;worker-src  'self' blob: www.youtube.com *.iplatba.cz *.essox.cz;frame-ancestors  'self' ;img-src  'self' data: blob: *.gstatic.com *.googleapis.com *.googlecode.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.google.com *.google.cz *.google.ie *.instagram.com *.cdninstagram.com *.fbcdn.net *.glami.cz www.zasilkovna.cz www.zasielkovna.sk;style-src  'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz *.google.com *.gstatic.com ;object-src  'self' 1
default-src 'self'; font-src 'self' https://fonts.gstatic.com; img-src data: 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com:* *.bootstrapcdn.com:* *.googleusercontent.com:* *.webspellchecker.net:*  *.twitter.com; script-src 'self' 'unsafe-inline'  *.googleapis.com:* *.google.com *.bootstrapcdn.com:* *.googleusercontent.com:* *.webspellchecker.net:* *.google-analytics.com:* *.highcharts.com cdn.jsdelivr.net:*  *.twitter.com  *.twimg.com data:; style-src 'self' 'unsafe-inline' *.googleapis.com:* cdn.jsdelivr.net:* *.twitter.com; img-src 'self'  *.bootstrapcdn.com:* *.googleapis.com:* *.googleusercontent.com:* *.google-analytics.com *.twitter.com *.twimg.com *.gstatic.com data: ; frame-src 'self'   *.constantcontact.com:80 *.youtube.com *.google.com *.vimeo.com * data:; child-src 'self' 'unsafe-inline'  *.constantcontact.com:80 *.youtube.com *.google.com *.vimeo.com *; font-src 'self' fonts.gstatic.com *.twimg.com; report-uri /report-csp-violation 1
default-src 'none'; script-src 'self' https://in.getclicky.com https://in.getclicky.co https://www.googleadservices.com https://static.getclicky.co https://pi.pardot.com https://connect.facebook.net https://static.getclicky.com https://info.anchor.com.au https://googleads.g.doubleclick.net https://www.google-analytics.com https://connect.facebook.ne https://www.googletagmanager.com https://code.jquery.com https://widget.trustpilot.com https://digitalpacificgroup.formstack.com https://static.formstack.com https://analytics.formstack.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://www.google.com.au https://www.facebook.com https://www.google.com https://secure.gravatar.com https://members.panthur.com.au https://www.google-analytics.com data: 'unsafe-inline'; frame-src 'self' https://www.facebook.com https://widget.trustpilot.com/ https://player.vimeo.com; style-src 'self' https://use.typekit.net https://p.typekit.net https://static.formstack.com 'unsafe-inline'; font-src 'self' https://netdna.bootstrapcdn.com https://widget.trustpilot.com https://use.typekit.net https://static.formstack.com data: blob: 'unsafe-inline'; object-src 'self'; connect-src 'self' https://in.getclicky.com https://www.google-analytics.com https://yoast.com; 1
script-src 'self' *.google.com 'unsafe-inline' 'unsafe-eval' *.facebook.net *.serving-sys.com *.addtoany.com *.cloudflare.com *.googletagmanager.com *.evidon.com *.newrelic.com *.facebook.com *.doubleclick.net web.facebook.com *.google-analytics.com *.krxd.net *.cloudfront.net *.nestle.de *.nr-data.net *.pinimg.com *.gstatic.com *.google.es *.yimg.com *.adsrvr.org *.googleadservices.com *.yahoo.com;; style-src 'self' *.google.com *.googleapis.com 'unsafe-inline' *.addtoany.com *.google.es;; img-src 'self' data: *.google.com *.google.co.za https://services.purina.de/ https://services.nestle.de/ *.facebook.com *.twitter.com *.youtube.com *.googletagmanager.com fls.doubleclick.net ad.ad-srv.net cdn.krxd.net *.googleapis.com *.rackcdn.com *.purina.de purinade.factory.purina.com *.flaticon.com *.sessioncam.com *.gstatic.com *.evidon.com *.doubleclick.net web.facebook.com *.krxd.net *.pinterest.com *.google-analytics.com *.google.es *.outbrain.com;; frame-src 'self' https://services.purina.de/ https://services.nestle.de/ *.google.com *.facebook.com *.twitter.com *.youtube.com *.googletagmanager.com ad.ad-srv.net cdn.krxd.net *.googleapis.com fonts.gstatic.com web.facebook.com *.google-analytics.com *.krxd.net *.cloudfront.net *.nr-data.net *.pinimg.com *.fls.doubleclick.net *.google.es *.adfarm1.adition.com *.adsrvr.org;; frame-ancestors 'self' https://services.purina.de/ https://services.nestle.de/ *.google.com *.facebook.com *.twitter.com *.youtube.com *.googletagmanager.com fls.doubleclick.net ad.ad-srv.net cdn.krxd.net *.googleapis.com fonts.gstatic.com *.doubleclick.net web.facebook.com *.google-analytics.com *.krxd.net *.cloudfront.net *.nr-data.net *.pinimg.com *.google.es *.adfarm1.adition.com *.adsrvr.org;; child-src 'self' https://services.purina.de/ https://services.nestle.de/ *.google.com *.facebook.com *.twitter.com *.youtube.com *.googletagmanager.com fls.doubleclick.net ad.ad-srv.net cdn.krxd.net *.googleapis.com fonts.gstatic.com *.doubleclick.net web.facebook.com *.google-analytics.com *.krxd.net *.cloudfront.net *.nr-data.net *.pinimg.com *.google.es *.adfarm1.adition.com *.adsrvr.org;; font-src 'self' fonts.gstatic.com;; report-uri /report-csp-violation 1
frame-ancestors http://app.chronomics.local https://app.stage.chronomics.com https://app.chronomics.com 1
default-src 'self' cms-schuetz.ionas.de www.schuetz.net www.schuetz-energy.net www.schuetz-composites.net www.schuetz-services.net www.schuetz-packaging.net; child-src 'self' cms-schuetz.ionas.de www.schuetz.net www.schuetz-energy.net www.schuetz-composites.net www.schuetz-services.net www.schuetz-packaging.net https://kb.ionas.de/ https://client.rlpdirekt.de/; connect-src 'self' cms-schuetz.ionas.de www.schuetz.net www.schuetz-energy.net www.schuetz-composites.net www.schuetz-services.net www.schuetz-packaging.net https://*.etracker.de https://api.mapbox.com; font-src 'self' cms-schuetz.ionas.de www.schuetz.net www.schuetz-energy.net www.schuetz-composites.net www.schuetz-services.net www.schuetz-packaging.net https://*.googleapis.com https://*.gstatic.com; img-src 'self' cms-schuetz.ionas.de www.schuetz.net www.schuetz-energy.net www.schuetz-composites.net www.schuetz-services.net www.schuetz-packaging.net data: https://*.googleapis.com https://*.gstatic.com https://maps.gstatic.com https://maps.google.com https://marketing.schuetz.net/; script-src 'self' cms-schuetz.ionas.de www.schuetz.net www.schuetz-energy.net www.schuetz-composites.net www.schuetz-services.net www.schuetz-packaging.net 'unsafe-inline' 'unsafe-eval' https://*.etracker.com https://*.etracker.de https://maps.gstatic.com https://maps.google.com https://*.googleapis.com; script-src-elem 'self' cms-schuetz.ionas.de www.schuetz.net www.schuetz-energy.net www.schuetz-composites.net www.schuetz-services.net www.schuetz-packaging.net 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com https://*.etracker.com https://*.etracker.de https://maps.gstatic.com https://maps.google.com; style-src 'self' cms-schuetz.ionas.de www.schuetz.net www.schuetz-energy.net www.schuetz-composites.net www.schuetz-services.net www.schuetz-packaging.net 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com; style-src-elem 'self' cms-schuetz.ionas.de www.schuetz.net www.schuetz-energy.net www.schuetz-composites.net www.schuetz-services.net www.schuetz-packaging.net 'unsafe-inline' https://*.googleapis.com 1
object-src 'none';script-src 'self' 'nonce-c78dd983dc994bc5817cdf1185310ed6' 'unsafe-inline' 'strict-dynamic' 'unsafe-eval' https: http:;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://offerswidget.visa.com;img-src 'self' data: https://stats.g.doubleclick.net https://www.google.com https://www.google.rs https://maps.googleapis.com https://maps.gstatic.com https://www.facebook.com https://csi.gstatic.com https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://offerswidget.visa.com https://www.visa.com;frame-src 'self' https://www.youtube.com https://www.ustream.tv https://www.facebook.com https://player.vimeo.com https://www.google.com 1
script-src 'self' blob: https://www.googletagmanager.com/ http://cdn.jsdelivr.net/ https://www.youtube.com/iframe_api https://s.ytimg.com/ https://cdn-3.convertexperiments.com/ https://google-analytics.com/ https://www.google-analytics.com/ https://player.vimeo.com/ https://google.com/ https://www.google.com/ https://gstatic.com/ https://www.gstatic.com/ https://maps.googleapis.com/ https://platform.twitter.com/ https://widget.intercom.io/ https://connect.facebook.net https://use.typekit.net/ https://js.intercomcdn.com https://fullstory.com https://staging.coincircle.com/ https://coincircle.com/ https://translate.google.com https://translate.googleapis.com 'unsafe-inline'; worker-src 'self' blob: 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://wb.messengerpeople.com https://*.criteo.com https://static.criteo.net https://tpc.googlesyndication.com https://*.zenaps.com https://*.hotjar.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://ampcid.google.ae https://*.sciencebehindecommerce.com https://*.hotjar.com wss://*.hotjar.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://www.myprotein.ae https://m.myprotein.ae https://checkout.myprotein.ae https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.cn https://*.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://*.criteo.com https://static.criteo.net https://s.pinimg.com https://tpc.googlesyndication.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.hotjar.com https://*.akamaihd.net https://*.microsofttranslator.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://twitter.com https://*.baidu.com https://sc-static.net https://www.google.com https://*.google.co.uk https://google.co.uk https://static.ads-twitter.com https://analytics.twitter.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
frame-ancestors malacanang.gov.ph 1
base-uri 'none'; object-src 'none'; script-src https://feuniverse.us/logs/ https://feuniverse.us/sidekiq/ https://feuniverse.us/mini-profiler-resources/ https://feuniverse.us/assets/ https://feuniverse.us/brotli_asset/ https://feuniverse.us/extra-locales/ https://feuniverse.us/highlight-js/ https://feuniverse.us/javascripts/ https://feuniverse.us/plugins/ https://feuniverse.us/theme-javascripts/ https://feuniverse.us/svg-sprite/; worker-src 'self' https://feuniverse.us/assets/ https://feuniverse.us/brotli_asset/ https://feuniverse.us/javascripts/ https://feuniverse.us/plugins/ 1
default-src 'self' *.loilo.tv *.loilonote.app; img-src 'self' *.loilo.tv *.loilonote.app data: blob:; media-src 'self' *.loilo.tv *.loilonote.app blob:; style-src 'self' *.loilo.tv *.loilonote.app 'unsafe-inline'; child-src 'self' *.loilo.tv *.loilonote.app blob: data:; connect-src 'self' *.loilo.tv *.loilonote.app wss: data: blob: *.bugsnag.com firebaseinstallations.googleapis.com fcmregistrations.googleapis.com; script-src 'self' *.loilo.tv *.loilonote.app www.gstatic.com; report-uri /_report/csp 1
base-uri 'self'; font-src 'self'; media-src 'self'; connect-src 'self'; object-src 'self'; form-action 'self' *.izzysoft.de *.qumran.org; frame-ancestors 'self' *.izzysoft.de *.qumran.org; block-all-mixed-content; script-src 'self'; 1
frame-ancestors 'self' *.knak.com; 1
default-src 'self' https:; object-src 'self'; frame-src 'self' *.kvk.nl channel.me www.youtube.com cloud.reflexappointment.nl iwelcome.sso.eherkenning.nl ehm01.iwelcome.nl opendata.ondernemersplein.nl www.googletagmanager.com *.hotjar.com https://miloo.nl wss://miloo.nl *.mopinion.com *.soundcloud.com *.youtube-nocookie.com disqus.com; child-src 'self' *.kvk.nl channel.me www.youtube.com cloud.reflexappointment.nl iwelcome.sso.eherkenning.nl ehm01.iwelcome.nl opendata.ondernemersplein.nl www.googletagmanager.com *.hotjar.com https://miloo.nl wss://miloo.nl *.mopinion.com *.soundcloud.com *.youtube-nocookie.com *.disqus.com; style-src 'self' 'unsafe-inline' *.kvk.nl s3.amazonaws.com tagmanager.google.com translate.googleapis.com *.mopinion.com https://fonts.googleapis.com *.abtasty.com *.disqus.com *.disquscdn.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.kvk.nl blob: bat.bing.com *.nowinteract.com www.youtube.com s.ytimg.com channel.me cloudstatic.obi4wan.com *.hotjar.com www.google-analytics.com www.googletagmanager.com cdn-assets-prod.s3.amazonaws.com tagmanager.google.com *.mopinion.com https://miloo.nl wss://miloo.nl *.abtasty.com *.disqus.com *.disquscdn.com; img-src 'self' *.kvk.nl blob: data: tr3.onlinesucces.nl www.ondernemersplein.nl bat.bing.com https://www.gstatic.com/images/branding/product/2x/translate_24dp.png www.google-analytics.com www.googletagmanager.com https://miloo.nl wss://miloo.nl *.abtasty.com *.cloudfront.com *.mopinion.com *.disqus.com *.disquscdn.com; font-src 'self' blob: data: *.kvk.nl http://fonts.gstatic.com https://fonts.gstatic.com static.hotjar.com *.mopinion.com *.abtasty.com *.disqus.com; connect-src 'self' *.kvk.nl wss://*.kvk.nl opendata.ondernemersplein.nl *.nowinteract.com translate.googleapis.com bots.obi4wan.com app.obi4wan.ai *.hotjar.com wss://*.hotjar.com www.google-analytics.com script.google.com https://miloo.nl wss://miloo.nl *.mopinion.com col.eum-appdynamics.com *.abtasty.com sentry.io *.disqus.com; frame-ancestors 'self' https://*.kvk.nl transmision.invitado.nl www.kvk-live.nl registratie.kvk-live.nl; base-uri 'self' *.kvk.nl; 1
script-src 'nonce-ECDUJ2/Y9umgz+gTeV35wg' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://www.google-analytics.com/analytics.js https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport 1
upgrade-insecure-requests; default-src * data: blob: *.medallia.eu *.kampyle.com *.google-analytics.com https://hello.myfonts.net/count/39cfed https://monitor.clickcease.com https://www.clickcease.com/monitor/stat.js; script-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.medallia.eu *.kampyle.com https://monitor.clickcease.com https://www.clickcease.com/monitor/stat.js https://cdn.tt.omtrdc.net https://stmicroelectronics.tt.omtrdc.net *.nrich.ai *.speedcurve.com *.3gl.net https://maps.googleapis.com https://fonts.googleapis.com/css https://maps.google.com/mapfiles/ms/icons/red-dot.png https://maps.google.com/mapfiles/ms/icons/green-dot.png https://hello.myfonts.net/count/39cfed https://*.zscaler.net *.st.com *.stmicroelectronics.com.cn browser-update.org *.blob.core.windows.net *.adobedtm.com *.demandbase.com *.s3.amazonaws.com *.ads.linkedin.com *.onetrust.com https://cdn.cookielaw.org https://snap.licdn.com https://www.google-analytics.com https://connect.facebook.net https://cdn.decibelinsight.net wss://cdn.decibelinsight.net https://collection.decibelinsight.net wss://collection.decibelinsight.net; style-src * data: blob: *.medallia.eu *.kampyle.com 'unsafe-inline' https://monitor.clickcease.com https://www.clickcease.com/monitor/stat.js https://hello.myfonts.net/count/39cfed; connect-src 'self' *.google-analytics.com *.medallia.eu *.nrich.ai *.speedcurve.com *.kampyle.com  https://stats.g.doubleclick.net https://monitor.clickcease.com https://www.clickcease.com/monitor/stat.js https://privacyportal-de.onetrust.com/request/v1/consentreceipts https://hello.myfonts.net/count/39cfed https://privacyportal-de.onetrust.com/request/v1/consentreceipts* *.3gl.net https://maps.googleapis.com https://fonts.googleapis.com/css https://maps.google.com/mapfiles/ms/icons/red-dot.png https://maps.google.com/mapfiles/ms/icons/green-dot.png https://*.zscaler.net *.st.com *.stmicroelectronics.com.cn *.demandbase.com *.company-target.com *.s3.amazonaws.com https://api.ipify.org https://stmicroelectronics.tt.omtrdc.net https://dpm.demdex.net https://cdn.decibelinsight.net wss://cdn.decibelinsight.net https://collection.decibelinsight.net wss://collection.decibelinsight.net 1
default-src 'none' ; object-src 'none' ; frame-ancestors 'none' ; frame-src https://www.googletagmanager.com https://www.facebook.com https://player.vimeo.com/; connect-src 'self' https://amon.tech https://wallet.amon.tech https://api.amon.tech https://www.facebook.com https://connect.facebook.net https://stats.g.doubleclick.net https://static.ads-twitter.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.vg https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://api.exchangeratesapi.io https://sentry.io https://api.coingecko.com https://api.celsius.network; script-src 'self' https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline' ; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com ; img-src 'self' https: blob: data: https://www.facebook.com https://www.googletagmanager.com https://www.google-analytics.com; media-src 'self' ; form-action 'self' https://www.facebook.com; base-uri 'self' ; manifest-src 'self' ; worker-src 'self' ; upgrade-insecure-requests ; 1
base-uri 'self'; img-src * data: 'unsafe-inline'; default-src data: * 'unsafe-inline'; frame-ancestors pscekcc01.meierijstad.nl 'self'; manifest-src 'none'; media-src *.readspeaker.com *.speechstream.net 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; object-src 'self'; plugin-types application/x-shockwave-flash application/pdf; report-uri https://www.cspreport.nl 1
default-src  'self' data: ;font-src  'self' data: fonts.gstatic.com ;connect-src  'self' analytics.monkeytracker.cz *.google.com *.googleapis.com www.google-analytics.com *.doubleclick.net *.facebook.com ;script-src  'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.cz *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.gstatic.com *.imedia.cz *.facebook.net *.adform.net *.doubleclick.net *.googleadservices.com *.glami.cz *.licdn.com *.linkedin.com *.seznam.cz;form-action  'self' *.facebook.com *.facebook.net ;frame-src  'self' blob: www.youtube.com *.vimeo.com *.imedia.cz *.facebook.com *.adform.net *.matterport.com datastudio.google.com *.iplatba.cz *.essox.cz;worker-src  'self' blob: www.youtube.com *.vimeo.com *.imedia.cz *.facebook.com *.adform.net *.matterport.com datastudio.google.com *.iplatba.cz *.essox.cz;frame-ancestors  'self' datastudio.google.com ;img-src  'self' data: blob: *.gstatic.com *.googleapis.com *.googlecode.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.google.com *.google.cz *.google.ie www.zasilkovna.cz www.zasielkovna.sk *.imedia.cz *.facebook.com *.doubleclick.net c.seznam.cz *.glami.cz;style-src  'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz *.google.com *.gstatic.com ;object-src  'self' 1
default-src 'self' https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' esotericsoftware.com search.agilitycms.com *.googleadservices.com *.googletagmanager.com *.google.com *.gstatic.com *.google-analytics.com connect.facebook.net *.doubleclick.net *.youtube.com *.marketingautomation.services snap.licdn.com cdnjs.cloudflare.com fast.fonts.net *.linkedin.com *.topechelon.com s.ytimg.com unpkg.com identity.netlify.com *.dropbox.com *.perfectaudience.com *.prfct.co;style-src 'self' 'unsafe-inline' search.agilitycms.com esotericsoftware.com *.googleapis.com identity.netlify.com unpkg.com *.fonts.net fonts.net bb3jobboard.topechelon.com *.googletagmanager.com *.google.com;font-src 'self' data: 'unsafe-inline' *.gstatic.com fast.fonts.net;img-src 'self' blob: data: cdn.agilitycms.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.com.vn *.doubleclick.net *.netlify.com *.facebook.com develop--9thwonder.netlify.com 9thwonder.netlify.com 9thwonder.com carbon8.info *.ytimg.com px.ads.linkedin.com p.adsymptotic.com *.gstatic.com *.adnxs.com *.prfct.co *.yahoo.com *.twitter.com *.rubiconproject.com *.openx.net *.linkedin.com; frame-src 'self' *.facebook.com *.doubleclick.net *.vimeo.com *.youtube.com *.google.com app-3qnhoq39xc.marketingautomation.services;form-action 'self' *.facebook.com email.carbon8.info;base-uri 'self';connect-src 'self' search.agilitycms.com cdn.agilitycms.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net email.carbon8.info *.topechelon.com api.bitbucket.org *.facebook.com carbon8.info;frame-ancestors 'self';object-src 'self' blob:; 1
default-src * data: blob:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *;object-src 'self';style-src 'unsafe-inline' * data:;form-action 'self' *.twitter.com va.tawk.to https://cp.payguru.com https://www.testgpay.com https://www.gpay.com.tr https://gpay.com.tr https://demo.gpay.com.tr https://www.paytr.com https://www.playanka.com https://test.papara.com https://www.papara.com https://papara.com https://payment.paybrothers.com https://stg.paybrothers.com https://api.paym.es https://checkout.test.pay.g2a.com https://checkout.pay.g2a.com;frame-ancestors 'self' http://*.livechatinc.com https://*.livechatinc.com http://*.tawk.to https://*.tawk.to https://chat.utechsoft.com.tr;worker-src 'self' blob: 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-MGE2MzMyMDMtMWU3Yi00YWYyLWE3MWUtOGY5ODBiZmJiNjRi'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
base-uri 'none'; object-src 'none'; script-src https://www.hungryonion.org/logs/ https://www.hungryonion.org/sidekiq/ https://www.hungryonion.org/mini-profiler-resources/ https://cdn2.hungryonion.org/assets/ https://cdn2.hungryonion.org/brotli_asset/ https://www.hungryonion.org/extra-locales/ https://cdn2.hungryonion.org/highlight-js/ https://cdn2.hungryonion.org/javascripts/ https://cdn2.hungryonion.org/plugins/ https://cdn2.hungryonion.org/theme-javascripts/ https://cdn2.hungryonion.org/svg-sprite/ https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js; worker-src 'self' https://cdn2.hungryonion.org/assets/ https://cdn2.hungryonion.org/brotli_asset/ https://cdn2.hungryonion.org/javascripts/ https://cdn2.hungryonion.org/plugins/ 1
frame-ancestors 'self' http://sharepoint http://sharepoint.configura.local http://dashboard.configura.local https://www.configura.com https://configurasverige.sharepoint.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://d.adroll.com *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://www.googletagmanager.com https://js.hsforms.net https://bat.bing.com https://static.ads-twitter.com https://s.adroll.com https://js.hs-banner.com https://forms.hsforms.com https://snap.licdn.com https://www.googleapis.com https://d.adroll.mgr.consensu.org https://analytics.twitter.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.google.com net dna.bootstrapcdn.com kendo.cdn.telerik.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://maxcdn.bootstrapcdn.com https://www.googleapis.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://maxcdn.bootstrapcdn.com; img-src 'self' https://d.adroll.com *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com *.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com https://ascentiumcapital.com https://seal.entrust.net https://bat.bing.com *.google.com https://px.ads.linkedin.com *.doubleclick.net https://www.googleapis.com https://t.co https://p.adsymptotic.com *.youtube.com https://forms.hsforms.com https://dsum-sec.casalemedia.com *.rubiconproject.com https://sync.outbrain.com https://pixel.advertising.com https://simage2.pubmatic.com *.yahoo.com https://sync.taboola.com https://x.bidswitch.net https://eb2.3lift.com https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://pippio.com https://sync.mathtag.com https://match.adsrvr.org *.criteo.com https://s.amazon-adsystem.com https://dpm.demdex.net https://pm.w55c.net https://usermatch.krxd.net https://tags.bluekai.com https://sync-tm.everesttech.net https://loadm.exelator.com https://match.rundsp.com https://secure.insightexpressai.com https://ads.scorecardresearch.com https://d.turn.com *.addthis.com https://lrpush.apxlv.com https://p.rfihub.com https://bcp.crwdcntrl.net https://beacon.walmart.com https://pixel.spotify.com https://aa.agkn.com https://segments.company-target.com https://lrp.mxptint.net https://d.xp1.ru4.com https://epiv.cardlytics.com *.bing.com https://match.prod.bidr.io https://tags.rd.linksynergy.com *.simpli.fi https://sync.tidaltv.com https://pixel.sitescout.com https://rtb.adentifi.com https://idsync.reson8.com https://dmp.truoptik.com https://dmp.adform.net https://www.entitytag.co.uk https://www.googletagmanager.com; media-src 'self' data: blob: https://www.youtube.com; child-src 'self' https://platform.twitter.com https://syndication.twitter.com https://player.vimeo.com https://w.soundcloud.com apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com www.youtube.com https://forms.hsforms.com https://ascentiumcapital.atsondemand.com https://www.youtube-nocookie.com/embed/v0kab7S2iMk; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com *.googleapis.com https://forms.hsforms.com *.google-analytics.com https://stats.g.doubleclick.net *.addroll.com; 1
default-src 'self';connect-src localhost:* https://sentry.io https://*.icatuseguros.com.br https://*.p.azurewebsites.net https://*.inbenta.io https://*.blob.core.windows.net https://*.cookielaw.org https://dc.services.visualstudio.com https://*.onetrust.com wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.io https://*.facebook.net https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google-analytics.com https://surfly.com;base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data: https: *.jsdelivr.net;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jsdelivr.net https://*.inbenta.io https://*.onetrust.com https://*.blob.core.windows.net https://*.cookielaw.org https://www.gstatic.com https://*.vo.msecnd.net https://*.hotjar.com https://www.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net/ https://www.google.com https://*.facebook.net https://www.googleadservices.com https://snap.licdn.com https://www.sc.pages03.net https://static.netshow.me https://surfly.com https://*.icatuseguros.com.br;script-src-attr 'none';style-src 'self' https: 'unsafe-inline' https://*.p.azurewebsites.net https://*.blob.core.windows.net https://*.facebook.net https://surfly.com https://*.icatuseguros.com.br;upgrade-insecure-requests;frame-src https://vars.hotjar.com https://www.google.com https://*.facebook.net https://static.netshow.me https://embed-videos.netshow.me/ https://bid.g.doubleclick.net/ https://fast.player.liquidplatform.com https://*.onetrust.com/ https://surfly.com https://*.icatuseguros.com.br 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://nulled.red; img-src 'self' https: data: blob: https://nulled.red; style-src 'self' https://nulled.red; media-src 'self' https: data: https://nulled.red; frame-src 'self' https:; manifest-src 'self' https://nulled.red; connect-src 'self' data: blob: https://nulled.red https://cdn.nulled.red/mastodon-nulled wss://nulled.red; script-src 'self' https://nulled.red; child-src 'self' blob: https://nulled.red; worker-src 'self' blob: https://nulled.red 1
base-uri 'self' 'unsafe-inline' *.slimpay.com; frame-src 'self' *.slimpay.com www.google.com www.google-analytics.com https://www.googletagmanager.com *.youtube.com https://www.w3-edge.com https://cse.google.com go.pardot.com; font-src 'self' data: fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.slimpay.com www.googletagmanager.com pi.pardot.com www.google-analytics.com *.google.com www.welcomekit.co cdnjs.cloudflare.com; img-src 'self' *.slimpay.com www.google.com www.google.fr www.google.de data: www.google-analytics.com www.googletagmanager.com https://clients1.google.com https://www.googleapis.com *.gstatic.com https://cse.google.com 1
default-src 'self';base-uri 'self';font-src data:;script-src https://www.cheto.io/assets/main.immutable.513701.js https://www.cheto.io/assets/support.immutable.513701.js https://www.cheto.io/assets/editor.immutable.513701.js ;style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self'; worker-src 'none';frame-src  https://www.youtube-nocookie.com;frame-ancestors 'none' 1
default-src https:; script-src https: data: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; frame-ancestors 'self' https://www.hermespaketshop.de 1
frame-ancestors 'self' https://www.facebook.com/ 1
default-src 'self' *.doubleclick.net *.googlesyndication.com *.twitter.com blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.osa.org code.jquery.com *.twitter.com adservice.google.com *.doubleclick.net *.ampproject.org *.googlesyndication.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com www.google.com tagmanager.google.com www.googletagservices.com *.brightcove.net *.zencdn.net *.twimg.com *.ytimg.com www.youtube.com *.myfonts.net blob:; style-src 'unsafe-inline' *; font-src * data:; connect-src 'self' *.osa.org www.google-analytics.com *.brightcove.com *.brightcove.net *.boltdns.net *.googlesyndication.com *.akamaihd.net *.doubleclick.net; object-src 'self' *.googlesyndication.com blob: 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.poems.com.sg/TransferToStockSum.aspx?exch=KLSE&ticker=1818;   frame-src 'self' data: https://analytics.poems.com.sg/TransferToStockSum.aspx?exch=KLSE&ticker=1818; font-src https://fonts.googleapis.com https://fonts.gstatic.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.youtube.com *.ytimg.com *.google.com *.gstatic.com *.google-analytics.com *.googleapis.com stats.g.doubleclick.net connect.facebook.net www.facebook.com; 1
default-src data: 'self' 'unsafe-eval' 'unsafe-inline' https://* wss://*; frame-src 'self'  https://ru.spotscan.com/ https://loreal-webconsultation.modiface.com/ https://makeupstat.ru/ https://skinstat.ru/ https://staticxx.facebook.com/ https://*.doubleclick.net/ https://tag.rutarget.ru/ https://*.criteo.com/ https://*.google.com/ https://www.facebook.com/ https://www.youtube.com/ https://*.googletagmanager.com https://api.flocktory.com/ https://vk.com/ https://*.criteo.net https://rbnt.org https://*.yandex.ru https://loreal.helpdeskeddy.com/; img-src data: 'self' http://* https://* wss://*; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.ssl.google-analytics.com https://ssl.google-analytics.com 1
default-src 'self';child-src 'self' www.google.com; connect-src 'self' googletagmanager.com dc.services.visualstudio.com google-analytics.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com *.bootstrapcdn.com *.heart.org; font-src 'self' data: fonts.gstatic.com *.bootstrapcdn.com *.heart.org; script-src 'self' www.googletagmanager.com tagmanager.google.com www.google.com ajax.googleapis.com cdnjs.cloudflare.com code.jquery.com *.bootstrapcdn.com *.heart.org s3.amazonaws.com az416426.vo.msecnd.net https://unpkg.com 'nonce-YWhhc3NvYXBwbGljYXRpb25pbnNpZ2h0c25vbmNl' 'nonce-QUhBU1NPR29vZ2xlQW5hbHl0aWNzTm9uY2U=' 'nonce-YWhhY3NwYm9vdHJhcA==' 'nonce-YWhhc3NvcGhvbmV2YWxpZGF0aW9ubm9uY2U=' 'nonce-YWhhdG9rZW52ZXJpZmljYXRpb25tb2RhbA==' 'nonce-YWhhc3NvY3VzdG9tZm9vdGVyY29udGFjdA==' 'nonce-YWhheHJlZ2V4cG5vbmNldmFs' 'nonce-YWhhc3NvcmVjYXB0Y2hhdmVyaWZpY2F0aW9uIQ==' 'nonce-bm9uY2Vmb3JyZXRyaWV2ZWFjY291bnRhaGE=' www.gstatic.com *.google-analytics.com; img-src 'self' blob: data: * ahasadevsso.blob.core.windows.net ahablobssotest.blob.core.windows.net www.charitynavigator.org *.heart.org graph.facebook.com lh6.googleusercontent.com pbs.twimg.com apis.live.net media.licdn.com s.yimg.com; 1
default-src *.snobessentials.com dd.snobglobalmedia.com; font-src data: http://*.snobessentials.com  *.snobessentials.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com 'unsafe-inline'; style-src *.snobessentials.com fonts.googleapis.com maxcdn.bootstrapcdn.com www.gstatic.com 'unsafe-inline'; script-src *.snobessentials.com dd.snobglobalmedia.com assets.pinterest.com log.pinterest.com api.instagram.com static.bam-x.com connect.facebook.net www.gstatic.com www.google-analytics.com www.google.com cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *.snobessentials.com dd.snobglobalmedia.com *.cdninstagram.com *.gravatar.com ad.linksynergy.com www.facebook.com api.bam-x.com www.google-analytics.com stats.g.doubleclick.net www.instagram.com *.fbcdn.net i.ytimg.com ps.w.org; frame-src 'self' api.bam-x.com staticxx.facebook.com www.facebook.com www.google.com www.youtube.com; connect-src 'self' api.bam-x.com yoast.com www.facebook.com www.google-analytics.com stats.g.doubleclick.net; 1
default-src 'none'; connect-src 'self' *.geraspora.de embedr.flickr.com geo.query.yahoo.com nominatim.openstreetmap.org api.github.com; font-src 'self'; form-action 'self' platform.twitter.com syndication.twitter.com; frame-ancestors 'self'; frame-src 'self' blob: www.youtube.com w.soundcloud.com twitter.com platform.twitter.com syndication.twitter.com player.vimeo.com www.mixcloud.com www.dailymotion.com media.ccc.de bandcamp.com www.instagram.com; img-src data: blob: *; manifest-src 'self'; media-src https:; script-src 'self' blob: 'unsafe-eval' *.geraspora.de platform.twitter.com cdn.syndication.twimg.com widgets.flickr.com embedr.flickr.com www.instagram.com 'unsafe-inline' 'nonce-pQN64YVgrsZTK0LnTNr6ahCbaCafjAXoXBPHzozNCvk='; style-src 'self' 'unsafe-inline' *.geraspora.de platform.twitter.com *.twimg.com; report-uri https://bughunt.geraspora.de/api/2/security/?sentry_key=9d040bae5cfd4f5d8dcf7224e2b88613 1
frame-ancestors 'self' *.letsbab.app 1
base-uri 'none'; default-src 'none'; child-src https://www.google.com; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; frame-src https://www.google.com; img-src 'self'; object-src 'none'; script-src 'nonce-LFSjSi+/+8Wof3+v3pLgxQ==' 'strict-dynamic'; style-src 'self'; worker-src 'self'; 1
base-uri 'none'; object-src 'none'; script-src https://www.elektronauts.com/logs/ https://www.elektronauts.com/sidekiq/ https://www.elektronauts.com/mini-profiler-resources/ https://www.elektronauts.com/assets/ https://www.elektronauts.com/brotli_asset/ https://www.elektronauts.com/extra-locales/ https://www.elektronauts.com/highlight-js/ https://www.elektronauts.com/javascripts/ https://www.elektronauts.com/plugins/ https://www.elektronauts.com/theme-javascripts/ https://www.elektronauts.com/svg-sprite/ https://www.google-analytics.com/analytics.js; worker-src 'self' https://www.elektronauts.com/assets/ https://www.elektronauts.com/brotli_asset/ https://www.elektronauts.com/javascripts/ https://www.elektronauts.com/plugins/ 1
upgrade-insecure-requests; frame-ancestors 'self' https://www.wpxbox.com 1
child-src 'self' *.ecentry.io *.pipz.io *.onesignal.com *.os.tc www.youtube.com player.vimeo.com www.google.com disqus.com staticxx.facebook.com; 1
script-src 'report-sample' 'nonce-4/1iHEMXynobn09bO51w+g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/drive-explorer/ 1
default-src 'self'; frame-src 'self' https://ptmdigital.co https://googleads.g.doubleclick.net https://*.googlesyndication.com; script-src 'self' https://*.googleapis.com https://*.googlesyndication.com https://*.wp.com https://*.gravatar.com https://*.google.com.co https://*.google.com https://*.googletagservices.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://pagead2.googlesyndication.com; style-src 'self' https://cdnjs.cloudflare.com https://*.googleapis.com https://*.gstatic.com https://secure.gravatar.com 'unsafe-inline'; font-src 'self' https://cdnjs.cloudflare.com https://*.googleapis.com https://*.gstatic.com https://wordpress.com data:; img-src 'self' https://*.gstatic.com https://*.googleapis.com https://*.wp.com https://*.googlesyndication.com data:; form-action 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; block-all-mixed-content;; child-src 'self' https://ptmdigital.co 1
default-src 'self' *.wtiau.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com ; frame-ancestors 'self' https://trustseal.enamad.ir 1
default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; report-uri https://www.ialc.org/?eID=error 1
frame-ancestors ucimc.nationbuilder.com 1
https://client.libertydentalplan.com; https://libertydentalplan.com 1
frame-ancestors 'self'; default-src 'self' 'unsafe-inline' *.meandermc.nl *.connexys.nl *.zorgkaartnederland.nl *.youtube-nocookie.com *.youtube.com maps.google.nl *.google.com *.soundcloud.com app.giponline.nl; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.zorgkaartnederland.nl siteimproveanalytics.com *.google-analytics.com maps.google.nl; img-src 'self' *.meandermc.nl data: blob: *.zorgkaartnederland.nl *.google-analytics.com *.siteimprove.com *.siteimproveanalytics.io pbs.twimg.com i.ytimg.com img.youtube.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.zorgkaartnederland.nl *.typekit.net; font-src 'self' data: *.typekit.net 1
: default-src 'self'; img-src *; media-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://platform.twitter.com/widgets.js 1
default-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:;  font-src 'self' data: https:; 1
default-src 'unsafe-inline' https://www.portofmelbourne.com https://www.google.com https://use.fontawesome.com https://maps.googleapis.com https://www.gstatic.com https://maps.gstatic.com https://khms0.googleapis.com https://khms1.googleapis.com https://fonts.googleapis.com https://apis.google.com https://www.google-analytics.com https://fonts.gstatic.com https://www.googletagmanager.com https://tagmanager.google.com https://ajax.google.com https://secure.gravatar.com https://stats.g.doubleclick.net https://player.vimeo.com ;img-src 'self' data: https://www.google.com https://use.fontawesome.com https://maps.googleapis.com https://maps.gstatic.com https://khms0.googleapis.com https://khms1.googleapis.com https://fonts.googleapis.com https://apis.google.com https://www.google-analytics.com https://fonts.gstatic.com https://www.googletagmanager.com https://tagmanager.google.com https://ajax.google.com https://secure.gravatar.com https://stats.g.doubleclick.net https://player.vimeo.com;frame-src 'self' https://player.vimeo.com https://www.google.com;report-uri https://portofmelbourne.report-uri.io/r/default/csp/enforce 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.carfax.com *.gstatic.com *.newrelic.com bam.nr-data.net storage.googleapis.com; style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com *.crashdocs.org *.carfaxforpolice.com; img-src 'self' data: *.carfax.com; font-src 'self' fonts.gstatic.com; connect-src 'self' *.carfaxforpolice.com bam.nr-data.net; object-src 'self' blob: *.crashdocs.org; frame-src 'self' https://www.youtube.com https://www.google.com *.carfaxforpolice.com carfaxforpolice.com *.sandbox-cresecure.net *.cresecure.net 1
default-src *; style-src 'self' https://ajax.cloudflare.com/cdn-cgi/scripts/7089c43e/cloudflare-static/ https://s.trackingmore.com/track/css/ https://fonts.googleapis.com/ 'unsafe-inline' ; form-action 'self'  https://payment.ipay88.com.ph/epayment/entry.asp; script-src 'self' https://youtu.be/ https://s.trackingmore.com/ https://www.17track.net/ https://www.gstatic.com/ https://ajax.googleapis.com/ https://cdn.datatables.net/ https://code.jquery.com/ https://connect.facebook.net/ https://www.googletagmanager.com/ https://fonts.googleapis.com/ https://www.facebook.com/ http://storage.googleapis.com/ https://static.cloudflareinsights.com/ https://ajax.cloudflare.com https://www.google-analytics.com https://browser-update.org/update.min.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/HYx6hBAtwYatsD8qzq7tXNTk/recaptcha__en.js 'unsafe-inline' 'unsafe-eval' ; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; connect-src *; img-src 'self' data: https: http://www.google-analytics.com http://www.googletagmanager.com; base-uri 'self' 1
frame-ancestors 'self' *.sgx.com 1
default-src 'self'; connect-src 'self' blob: https://idp-test.uniqa.at https://idp.uniqa.at https://pa-test.uniqa.at https://pa.uniqa.at https://dpm.demdex.net https://uniqaitservicesgmbh.tt.omtrdc.net/ https://api.usabilla.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.adobedtm.com https://w.usabilla.com https://api.usabilla.com https://www.uniqa.at https://cdnjs.cloudflare.com https://d6tizftlrpuof.cloudfront.net; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.uniqa.at https://d6tizftlrpuof.cloudfront.net; img-src 'self' blob: data: https://uniqaitservicesgmbh.d3.sc.omtrdc.net https://cm.everesttech.net https://d6tizftlrpuof.cloudfront.net https://w.usabilla.com; object-src 'self'; frame-src 'self' https://uniqa.demdex.net/ https://d6tizftlrpuof.cloudfront.net 1
default-src 'self' http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net data: http://www.google-analytics.com https://www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://ajax.googleapis.com https://ajax.googleapis.com http://* https://* http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net data: http://www.google-analytics.com https://www.google-analytics.com; connect-src * 'self' http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net wss://* data: http://www.google-analytics.com https://www.google-analytics.com; img-src data: 'self' http://* https://* http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net http://www.google-analytics.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net data: http://www.google-analytics.com https://www.google-analytics.com; font-src 'self' data: http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net http://www.google-analytics.com https://www.google-analytics.com; frame-src 'self' http://d3r1yij6ygbpvd.cloudfront.net https://d3r1yij6ygbpvd.cloudfront.net http://www.nordtouch.com http://www.nordtouch.fi data: http://www.google-analytics.com https://www.google-analytics.com; 1
frame-ancestors 'self' https://*.costcophotocenter.com 1
"default-src https: data: 'unsafe-inline' 'unsafe-eval'" always; 1
default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval';  script-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval';  connect-src 'self' http: https: data: blob: 'unsafe-inline';  img-src 'self' http: https: data: blob: 'unsafe-inline';  style-src 'self' http: https: data: blob: 'unsafe-inline';  frame-ancestors productlink.io app.productlink.io 1
default-src * 'unsafe-inline' data: ; font-src * 'unsafe-inline' data:; script-src * 'unsafe-inline' 'unsafe-eval' https:  1
connect-src 'self'; font-src 'self'; 1
default-src 'self' *.googlesyndication.com:443; script-src * 'self' 'unsafe-inline' 'unsafe-eval' *.ioam.de:443 www.googletagmanager.com:443 www.google-analytics.com:443; style-src * 'self' 'unsafe-inline' fonts.googleapis.com:443; img-src * 'self' data: www.google-analytics.com:443; font-src 'self' fonts.gstatic.com:443; frame-src *; connect-src *; report-uri https://www.derpatriot.de; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' orc.widepoint.com; img-src 'self' data:;style-src 'self' 'unsafe-inline'  fonts.googleapis.com;font-src 'self' fonts.gstatic.com data:; 1
base-uri 'none'; object-src 'none'; script-src https://www.hitmanforum.com/logs/ https://www.hitmanforum.com/sidekiq/ https://www.hitmanforum.com/mini-profiler-resources/ https://www.hitmanforum.com/assets/ https://www.hitmanforum.com/brotli_asset/ https://www.hitmanforum.com/extra-locales/ https://www.hitmanforum.com/highlight-js/ https://www.hitmanforum.com/javascripts/ https://www.hitmanforum.com/plugins/ https://www.hitmanforum.com/theme-javascripts/ https://www.hitmanforum.com/svg-sprite/ https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js; worker-src 'self' https://www.hitmanforum.com/assets/ https://www.hitmanforum.com/brotli_asset/ https://www.hitmanforum.com/javascripts/ https://www.hitmanforum.com/plugins/ 1
frame-ancestors https://*.barcodefactory.com 1
default-src 'self' data: reedexpo-service.com *.youtube-nocookie.com *.googleapis.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' reedexpo-service.com *.googletagmanager.com *.google-analytics.com https://optanon.blob.core.windows.net https://cdn.cookielaw.org https://www.gstatic.com/recaptcha/ https://www.youtube.com https://*.ytimg.com *.db-app.de https://www.google.com *.googleapis.com *.google.com googleads.g.doubleclick.net https://www.googleadservices.com https://hotelmap.com *.hotelmap.com https://browser.sentry-cdn.com https://snap.licdn.com https://fullstory.com https://code.jquery.com *.facebook.net *.onetrust.com; style-src 'self' data: 'unsafe-inline' fast.fonts.net hotelmap.com https://optanon.blob.core.windows.net https://tagmanager.google.com https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https://optanon.blob.core.windows.net https://www.facebook.com reedexpo-service.com *.db-app.de *.googletagmanager.com *.googleapis.com *.google-analytics.com https://www.google.de https://www.google.com https://www.google.at stats.g.doubleclick.net *.cloudfront.net integration.hotelmap.com hotelmap.com i.travelapi.com https://www.hotelmap.com foto.hrsstatic.com https://cdn.cookielaw.org/ *.gstatic.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; connect-src 'self' data: *.google-analytics.com reedexpo-service.com stats.g.doubleclick.net *.googleapis.com https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com https://rs.fullstory.com https://cdn.cookielaw.org https://privacyportal.onetrust.com; font-src 'self' data: fonts.gstatic.com fast.fonts.net; child-src 'self' data: blob: *.youtube-nocookie.com https://cdn.cookielaw.org https://www.google.com reedexpo-service.com *.google.com https://privacyportal.onetrust.com https://www.hotelmap.com https://www.googletagmanager.com https://rxosc.messe.at; worker-src 'self' data: blob:; frame-ancestors 'self' data: 1
script-src 'self' 'unsafe-inline' altanacomcdn.azureedge.net altanadecdn.azureedge.net *.azureedge.net *.choice.faktor.io cmp.faktor.mgr.consensu.org *.privacymanager.io maps.googleapis.com *.recruitmentplatform.com *.etracker.com *.etracker.de 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://*.akamaihd.net https://*.translate.naver.net https://www.recaptcha.net https://www.google.com https://www.zenaps.com https://tr.snapchat.com https://www.youtube.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://the.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://privacyportal-eu.onetrust.com https://*.parcellab.com; default-src 'none'; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://uk.sanctuary.com https://checkout.uk.sanctuary.com https://connect.facebook.net https://tr.snapchat.com; frame-ancestors 'self'; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://the.sciencebehindecommerce.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.googleapis.com https://www.recaptcha.net https://connect.facebook.net https://*.trustpilot.com https://www.googleadservices.com https://*.translate.naver.net https://*.doubleclick.net https://*.google.com https://*.google-analytics.com https://fp.zenaps.com https://www.gstatic.com https://bat.bing.com https://www.googletagmanager.com https://www.youtube.com https://s.ytimg.com https://www.dwin1.com https://sc-static.net; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
font-src https://cdnjs.cloudflare.com/ https://fonts.gstatic.com/ http://www.aexp-static.com/ https://use.typekit.net/ 'self' https://easy.myfonts.net/ http://fonts.gstatic.com/ https://maxcdn.bootstrapcdn.com/ https://*.aexp-static.com/ https://cloud.webtype.com/ http://cloud.webtype.com/ data:; frame-ancestors https://*.aexp.com/  https://*.americanexpress.com/; style-src https://14106077.va.cobrowse.liveperson.net/ https://cdnjs.cloudflare.com/ 'unsafe-inline' 'self' https://fonts.googleapis.com/ https://icm.americanexpress.com/ https://*.aexp-static.com/ https://cloud.webtype.com/ https://cdn.myfonts.net/ http://cloud.webtype.com/; frame-src https://connect.facebook.net/ https://platform.twitter.com/ https://*.americanexpress.com/ https://*.liveperson.net/ https://lpcdn.lpsnmedia.net/ https://*.facebook.com/ https://vars.hotjar.com/ https://www.cdn-net.com/ https://*.doubleclick.net/ https://assets.bounceexchange.com/ https://service.maxymiser.net/ https://*.youtube.com/ https://youtube.com/ https://*.aexp-static.com/ https://omny.fm/ https://*.akamaihd.net/ https://aexp.demdex.net/ https://youtu.be/; object-src  'self'; report-uri https://csp.tsrs.cloud/r/318d71ec785ab08bba5825cacbc60f5fa6c68b60; base-uri https://aeopprodvip.acxiom.com/ https://*.americanexpress.com/ https://ds-aksb-a.akamaihd.net/ 'self'; script-src http://assets.adobedtm.com/ 'self' https://*.delvenetworks.com/ https://s.yjtag.jp/ https://*.lpsnmedia.net/ https://www.gstatic.com/ https://www.googleadservices.com/ https://*.hotjar.com/ http://omn.americanexpress.com/ http://www.aexp-static.com/ https://img.en25.com/ https://d5phz18u4wuww.cloudfront.net/ https://bat.bing.com/ https://*.google.com/ https://*.omtrdc.net/ https://ads.avocet.io/ https://*.doubleclick.net/ https://*.contentsquare.com/ https://easy.myfonts.net/ https://cdnssl.clicktale.net/ https://addevent.com/ https://*.ensighten.com/ https://secure.leadforensics.com/ 'unsafe-eval' https://*.ss-omtrdc.net/ https://assets.adobedtm.com/ 'unsafe-inline' https://use.typekit.net/ https://stags.bluekai.com/ https://*.liveperson.net/ https://maxcdn.bootstrapcdn.com/ https://script.crazyegg.com/ https://bam.nr-data.net/ https://code.jquery.com/ https://www.cdn-net.com/ https://www.google-analytics.com/ https://js-agent.newrelic.com/ https://dev.visualwebsiteoptimizer.com/ https://yjtag.yahoo.co.jp/ https://service.maxymiser.net/ https://cdn.raygun.io/ https://ads.avct.cloud/ https://www.googletagmanager.com/ https://*.aexp-static.com/ https://www.youtube.com/ https://snap.licdn.com/ https://*.bounceexchange.com/ http://nexus.ensighten.com/ https://connect.facebook.net/ https://*.americanexpress.com/ https://*.linkedin.com/ https://ct.contentsquare.net/ https://amplify.outbrain.com/ https://*.googleapis.com/ https://contentsquare.com/ https://assets.omny.fm/ https://aeopprodvip.acxiom.com/ https://*.akamaihd.net/; media-src https://www.youtube.com/ https://lpcdn.lpsnmedia.net/ https://origin-slgem.americanexpress.com/ https://production.smedia.lvp.llnw.net/ 'self' http://production.smedia.lvp.llnw.net/; connect-src https://assets.adobedtm.com/ 'self' https://performance.typekit.net/ wss://www.americanexpress.com/ https://*.liveperson.net/ https://*.contentsquare.net/ https://www.google-analytics.com/ https://americanexpresscards.tt.omtrdc.net/ https://v.lkqd.net/ https://in.hotjar.com/ https://www.youtube.com/ https://*.aexp-static.com/ https://s.delvenetworks.com/ https://*.visualwebsiteoptimizer.com/ https://events.bouncex.net/ https://connect.facebook.net/ https://*.americanexpress.com/ https://dpm.demdex.net/ wss://iwmap.americanexpress.com/ https://bat.bing.com/ https://www.facebook.com/ https://vc.hotjar.io/ https://aeopprodvip.acxiom.com/ wss://va.msg.liveperson.net/ https://*.akamaihd.net/; img-src 'self' data: https: http:; worker-src  'self' blob:; form-action https://connect.facebook.net/ https://www.cdn-net.com/ https://www.facebook.com/ https://amexhk.chubbtravelinsurance.com/ https://*.americanexpress.com/ 'self';  1
base-uri 'none'; default-src 'none'; child-src 'self'; connect-src 'self' https://www.google-analytics.com https://daemon.bigogo.com wss://ws.bgogo.com wss://ws.bgogo.com/prediction; font-src 'self' https://fonts.gstatic.com data:; form-action 'self'; frame-ancestors 'none'; img-src 'self' https://static.bggex.pro https://daemon.bigogo.com/ https://www.google-analytics.com https://storage.googleapis.com https://stats.g.doubleclick.net https://static.bgogo.com https://v.liaoliaosj.com blob: data:; media-src https://daemon.bigogo.com/ https://static.bgogo.com https://v.liaoliaosj.com; object-src 'self'; script-src 'self' https://static.bgogo.com https://www.googletagmanager.com https://www.google-analytics.com https://hm.baidu.com 'unsafe-inline'; style-src 'self' 'unsafe-inline'; upgrade-insecure-requests 1
frame-ancestors vuviphimmoi.com 1
default-src 'self' https://diageoplatform.com https://*.diageoplatform.com *.diageoplatform.com diageoplatform.com https://theworldclassclub.com https://*.theworldclassclub.com theworldclassclub.com *.theworldclassclub.com https://openstreetmap.org https://*.openstreetmap.org openstreetmap.org *.openstreetmap.org; font-src 'self' 'unsafe-inline' https://bootstrapcdn.com https://*.bootstrapcdn.com bootstrapcdn.com *.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https://googleapis.com https://*.googleapis.com googleapis.com *.googleapis.com https://bootstrapcdn.com https://*.bootstrapcdn.com bootstrapcdn.com *.bootstrapcdn.com https://diageohorizon.com https://*.diageohorizon.com diageohorizon.com *.diageohorizon.com; img-src 'self' https://*.onetrust.com https://googletagmanager.com https://*.googletagmanager.com googletagmanager.com *.googletagmanager.com https://theworldclassclub.com https://*.theworldclassclub.com theworldclassclub.com *.theworldclassclub.com https://doubleclick.net https://*.doubleclick.net doubleclick.net *.doubleclick.net https://google-analytics.com https://*.google-analytics.com google-analytics.com *.google-analytics.com https://amazonaws.com https://*.amazonaws.com amazonaws.com *.amazonaws.com https://*.facebook.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.onetrust.com https://diageoplatform.com https://*.diageoplatform.com  diageoplatform.com *.diageoplatform.com https://cloudfront.net https://*.cloudfront.net cloudfront.net *.cloudfront.net https://ytimg.com https://*.ytimg.com ytimg.com *.ytimg.com https://google-analytics.com https://*.google-analytics.com google-analytics.com *.google-analytics.com https://youtube.com https://*.youtube.com youtube.com *.youtube.com https://diageoagegate.com https://*.diageoagegate.com diageoagegate.com *.diageoagegate.com https://cloudflare.com https://*.cloudflare.com cloudflare.com *.cloudflare.com https://googletagmanager.com https://*.googletagmanager.com googletagmanager.com *.googletagmanager.com https://diageohorizon.com https://*.diageohorizon.com diageohorizon.com *.diageohorizon.com https://facebook.net  https://*.facebook.net  facebook.net *.facebook.net https://twitter.com https://*.twitter.com twitter.com *.twitter.com; frame-src 'self' https://akamaized.net https://*.akamaized.net akamaized.net *.akamaized.net https://cloudfront.net https://*.cloudfront.net cloudfront.net *.cloudfront.net https://facebook.com https://*.facebook.com facebook.com *.facebook.com https://youtube.com https://*.youtube.com youtube.com *.youtube.com https://twitter.com https://*.twitter.com twitter.com *.twitter.com; connect-src 'self' https://*.onetrust.com https://*.facebook.com; object-src 'self' 1
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; font-src data: 'self'; object-src 'self'; img-src data: https: 1
base-uri 'none'; object-src 'none'; script-src https://www.talktimers.com/logs/ https://www.talktimers.com/sidekiq/ https://www.talktimers.com/mini-profiler-resources/ https://aws1.discourse-cdn.com/business7/assets/ https://aws1.discourse-cdn.com/business7/brotli_asset/ https://www.talktimers.com/extra-locales/ https://sjc3.discourse-cdn.com/business7/highlight-js/ https://sjc3.discourse-cdn.com/business7/javascripts/ https://sjc3.discourse-cdn.com/business7/plugins/ https://sjc3.discourse-cdn.com/business7/theme-javascripts/ https://sjc3.discourse-cdn.com/business7/svg-sprite/; worker-src 'self' https://aws1.discourse-cdn.com/business7/assets/ https://aws1.discourse-cdn.com/business7/brotli_asset/ https://sjc3.discourse-cdn.com/business7/javascripts/ https://sjc3.discourse-cdn.com/business7/plugins/ 1
base-uri 'self' *.nr-data.net; child-src blob:; connect-src 'self' wss://*.planetromeo.com wss://*.hunqz.com *.facebook.com *.gstatic.com *.googlesyndication.com *.planetromeo.com *.doubleclick.net *.google-analytics.com *.nr-data.net *.smaato.net *.smaato.com *.maptiler.com *.report-uri.com wss://*.firebaseio.com *.googleapis.com *.zendesk.com; font-src 'self' *.gstatic.com *.typekit.net data:; form-action 'self' *.planetromeo.com google.com; frame-ancestors 'none'; frame-src 'self' *.doubleclick.net *.google.com *.googlesyndication.com *.blufm.de blufm.de winq.nl *.firebaseio.com *.youtube.com *.facebook.com; img-src https: data: blob: *.smaato.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ampproject.org *.doubleclick.net *.googlesyndication.com  *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ai *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gp *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.ms *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vg *.google.vu *.google.ws  *.google-analytics.com *.gstatic.com *.googletagmanager.com *.googletagservices.com recaptcha.net *.newrelic.com *.nr-data.net *.siftscience.com *.smaato.net *.firebaseio.com *.youtube.com *.ytimg.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.typekit.net; worker-src 'self' blob:; default-src 'self' *.planetromeo.com *.hunqz.com *.googlesyndication.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.admissionfp.com *.cloudflare.com www.googletagmanager.com www.google-analytics.com; style-src 'self' 'unsafe-inline' *.admissionfp.com *.cloudflare.com; img-src 'self' www.inforoutefpt.org *.youtube.com *.googleapis.com; frame-src 'self' *.admissionfp.com *.youtube.com 1
upgrade-insecure-requests; frame-ancestors 'self' 'unsafe-inline'; 1
font-src yastatic.net;default-src yastatic.net yastat.net;child-src mc.yandex.md mc.yandex.ee yandex.ee yandex.ru mc.yandex.ru;report-uri https://csp.yandex.net/csp?project=morda&from=morda.spok.ee&showid=1609223537.14586.97939.152278&h=prestable-morda-vla-yp-164&csp=new&date=20201229&yandexuid=2592238011609223537;img-src mc.yandex.ee mc.yandex.ru avatars.mds.yandex.net mc.admetrica.ru favicon.yandex.net *.verify.yandex.ru data: yandex.ee mc.yandex.com yandex.ru yastatic.net 'self';connect-src mc.yandex.ru mc.admetrica.ru yastatic.net yastat.net mc.yandex.ee yandex.ee;script-src 'nonce-C/jgZAX0EHd3BcIWZ/sGTw==' mc.yandex.ru yastatic.net mc.yandex.ee yandex.ee;style-src yastatic.net 'unsafe-inline' 1
frame-ancestors 'self' *.denhelder.nl 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=PH&lang=en-PH&device=desktop&yrid=4u37kalfulm9v&partner=; 1
default-src 'self'  http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io http://www.webgozar.ir http://webgozar.ir ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com http://www.webgozar.ir http://webgozar.ir ; frame-ancestors 'self' https://trustseal.enamad.ir 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.myshopify.com         https://fast.fonts.net         https://downloads.mailchimp.com         https://google.com         https://www.google.com 	https://www.google-analytics.com 	https://www.googletagmanager.com         https://*.doubleclick.net         https://*.list-manage.com         https://connect.facebook.net         https://*.zdassets.com         https://maharishi.zendesk.com 	https://www.recaptcha.net 	https://www.gstatic.com 	https://*.sentry.io         https://www.youtube.com         https://*.ytimg.com 	https://*.backinstock.org 	https://*.doubleclick.net 	https://*.paypal.com         wss://widget-mediator.zopim.com 	blob:         data:;    img-src * data:; 1
frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com; report-uri http://www.tofighthiv.org/site/XFrameViolation 1
default-src 'self' tagmanager.google.com www.google-analytics.com;font-src 'self' fonts.gstatic.com *.typekit.net *.typekit.com data: *.bootstrapcdn.com kariera.fg.cz;connect-src 'self' analytics.monkeytracker.cz *.typekit.net *.zeerat.com fullstory.com wss://collector.zeerat.com https://rs.fullstory.com/rec/page *.doubleclick.net *.google-analytics.com *.sociablekit.com fonts.googleapis.com *.clarity.ms;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com maps.google.com *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz maps.google.com *.googleapis.com *.typekit.net *.typekit.com *.facebook.net *.twimg.com *.geoplugin.net *.zeerat.com *.fullstory.com fullstory.com *.rs.fullstory.com *.sociablekit.com unpkg.com *.unpkg.com *.licdn.com *.linkedin.com kariera.fg.cz sjs.bizographics.com *.gstatic.com c.imedia.cz *.clarity.ms;form-action 'self' *.facebook.com *.facebook.net;frame-src 'self' *.youtube.com *.facebook.com *.facebook.net www.googletagmanager.com *.sociablekit.com https://indd.adobe.com;worker-src 'self' *.youtube.com *.facebook.com *.facebook.net www.googletagmanager.com *.sociablekit.com https://indd.adobe.com;frame-ancestors 'self';img-src 'self' data: *.gstatic.com *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.gstatic.com *.googleapis.com *.typekit.net *.typekit.com *.facebook.com *.facebook.net *.twimg.com www.google.com *.google.cz *.youtube.com *.fg.cz *.google.ie *.sociablekit.com *.fbcdn.net kariera.fg.cz *.linkedin.com c.imedia.cz *.seznam.cz;style-src 'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz *.typekit.net *.typekit.com tagmanager.google.com *.sociablekit.com *.bootstrapcdn.com *.google.com *.googleapis.com kariera.fg.cz *.gstatic.com;report-uri https://fgforrest.report-uri.com/r/d/csp/enforce 1
default-src 'self' *.google-analytics.com *.deluxe.com *.jquery.com *.authorize.net *.braintreegateway.com *.bootstrapcdn.com *.paypal.com *.braintree-api.com *.jsdelivr.net *.nr-data.net *.holidaycardwebsite.com *.4printing.com *.bootstrapcdn.com;              img-src * data:;                style-src 'unsafe-inline' *.4printing.com  *.bootstrapcdn.com  *.jquery.com *.paypalobjects.com *.bootstrapcdn.com *.holidaycardwebsite.com  *.paypal.com *.deluxe.com *.jsdelivr.net *.googleapis.com *.braintreegateway.com *.braintree-api.com;                script-src 'self' 'unsafe-eval' 'unsafe-inline' *.pagespeed-mod.com *.braintreegateway.com    *.jquery.com *.paypal.com  *.bootstrapcdn.com *.paypalobjects.com *.braintree-api.com *.jsdelivr.net *.deluxe.com *.nr-data.net js-agent.newrelic.com *.googletagmanager.com www.google-analytics.com ssl.google-analytics.com *.googleadservices.com googleads.g.doubleclick.net www.google.com www.gstatic.com *.cloudflare.com *.aspnetcdn.com *.4printing.com *.holidaycardwebsite.com rum-static.pingdom.net *.pinterest.com *.facebook.com *.facebook.net *.scene7.com *.twitter.com *.linkedin.com *.digicert.com *.braintreegateway.com polyfill.io *.crownpeak.com *.cookielaw.org;                connect-src *.google-analytics.com *.pingdom.net *.4printing.com *.holidaycardwebsite.com    *.jquery.com *.paypal.com  *.bootstrapcdn.com *.paypalobjects.com *.jsdelivr.net *.deluxe.com *.btobsource.com *.braintreegateway.com *.braintree-api.com *.crownpeak.net *.cookielaw.org;                frame-src 'self' *.scene7.com *.authorize.net *.twitter.com *.facebook.com  *.jquery.com *.pinterest.com  *.bootstrapcdn.com *.paypal.com  *.paypalobjects.com *.braintreegateway.com *.jsdelivr.net *.deluxe.com *.googletagmanager.com www.google.com;                     font-src 'self' fonts.gstatic.com *.deluxe.com; 1
default-src 'self'; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' *.google-analytics.com *.googletagmanager.com ajax.googleapis.com maps.googleapis.com; style-src 'unsafe-inline' 'report-sample' 'self' fonts.googleapis.com https://p.typekit.net https://use.typekit.net; object-src 'none'; base-uri 'self'; connect-src 'self' yoast.com www.google-analytics.com; font-src 'self' data: fonts.gstatic.com use.typekit.net; frame-src 'self' https://player.vimeo.com https://otp.tools.investis.com https://irs.tools.investis.com; img-src 'self' *.google-analytics.com *.gravatar.com data: maps.gstatic.com *.googleapis.com *.ggpht; manifest-src 'self'; media-src 'self'; report-uri https://5f5f4be97d2e04922acab86c.endpoint.csper.io/; worker-src menziesaviation.com; 1
font-src *.cloudfront.net *.cloudflare.com *.google.com *.gstatic.com *.googleapis.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.kmail-lists.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.google.com *.youtube.com *.affirm.com *.mixcloud.com *.spotify.com *.instagram.com *.facebook.com *.gleamjs.io gleam.io js.stripe.com m.stripe.com x.klarnacdn.net klarna.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com data: *.bootstrapcdn.com *.cloudfront.net *.affirm.com *.signifyd.com *.facebook.com *.instagram.com *.amazonaws.com *.gleam.io *.klaviyo.com *.adroll.com *.google.com *.yahoo.com *.doubleclick.net *.advertising.com *.casalemedia.com *.rubiconproject.com *.pubmatic.com *.outbrain.com *.taboola.com *.adnxs.com *.openx.net *.nr-data.net 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com js.authorize.net jstest.authorize.net www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com js.braintreegateway.com s.ytimg.com video.google.com vimeo.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com polyfill.io *.cloudfront.net *.cloudflare.com *.google.com *.googleadservices.com *.google-analytics.com *.gstatic.com *.fontawesome.com *.paypalobjects.com *.paypal.com *.googletagmanager.com *.bootstrapcdn.com seal.godaddy.com *.affirm.com *.cardinalcommerce.com *.klaviyo.com *.zdassets.com *.signifyd.com *.googleapis.com *.disqus.com *.vimeocdn.com *.instagram.com *.newrelic.com *.facebook.net *.facebook.com *.nr-data.net *.gleamjs.io *.crazyegg.com *.adroll.com *.consensu.org https://static.klaviyo.com https://fast.a.klaviyo.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.cloudfront.net *.cloudflare.com *.googleapis.com *.google.com *.gstatic.com *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.algolia.net *.google-analytics.com *.cloudfront.net *.cloudflare.com *.google.com *.cardinalcommerce.com *.affirm.com *.klaviyo.com *.zdassets.com *.signifyd.com *.zendesk.com *.googleapis.com *.facebook.com *.amazonaws.com *.disqus.com *.algolianet.com *.crazyegg.com *.adroll.com *.consensu.org *.nr-data.net https://static.klaviyo.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src wss://localhost:3000 https: 'unsafe-inline' 'unsafe-eval' http: 'unsafe-inline' 'unsafe-eval' *.tawk.to wss://*.tawk.to; object-src 'self'; img-src 'self' data: http: https:; media-src http: https:; font-src 'self' data: https: 1
default-src * data: filesystem: about: blob: ws: wss:; script-src * data: filesystem: about: blob: ws: wss: 'unsafe-eval' 'unsafe-inline'; style-src * data: filesystem: about: blob: ws: wss: 'unsafe-inline'; frame-ancestors 'self' 1
base-uri 'none'; object-src 'none'; script-src https://flutterforum.co/logs/ https://flutterforum.co/sidekiq/ https://flutterforum.co/mini-profiler-resources/ https://flutterforum.co/assets/ https://flutterforum.co/brotli_asset/ https://flutterforum.co/extra-locales/ https://flutterforum.co/highlight-js/ https://flutterforum.co/javascripts/ https://flutterforum.co/plugins/ https://flutterforum.co/theme-javascripts/ https://flutterforum.co/svg-sprite/ https://www.google-analytics.com/analytics.js; worker-src 'self' https://flutterforum.co/assets/ https://flutterforum.co/brotli_asset/ https://flutterforum.co/javascripts/ https://flutterforum.co/plugins/ 1
frame-ancestors https://*.hussle.com https://apps.facebook.com/ 1
frame-ancestors 'self' *.sompojapan.com.tr  *.somposigorta.com.tr 1
default-src 'self' 'unsafe-inline' https://*.kornferry.com https://*.talentqgroup.com https://www.kfassessment-qa.com https://www.dev.kfassessment-qa.com https://www.kfassessment.com https://*.kfassessment-qa.com https://kfassessment-qa.com https://*.kfassessment.com https://www.kfassessment.eu https://*.kfassessment.eu https://*.cloudfront.net https://www.google-analytics.com https://www.google.com/ https://www.gstatic.com https://cardinaldata.net https://hello.myfonts.net/count/3122c9; frame-ancestors 'self' 1
frame-ancestors 'self' https://pancherosfranchise.com 1
default-src 'self'; child-src 'self' https://kvhs-duew.de/ https://www.google.com/ *.ikvs.de https://maps.google.de https://www.reservix.de/ https://web4.deskline.net/ https://www.reservix.de/tickets-limburg-sommer/t11839 https://www.vrn.de https://bad-duerkheim.reservix.de https://www.drk-blutspende.de https://www.outdooractive.com https://karelkunc.musikschul-anmeldung.de/ https://ratsinfo.desvdue2.de/buergerinfo/info.asp https://stadtbuecherei-bad-duerkheim.bibliotheca-open.de/ https://kb.ionas.de/ https://client.rlpdirekt.de/; connect-src 'self' https://www.outdooractive.com https://www.bad-duerkheim.de/:outdooractive/search/; font-src 'self' https://resc.deskline.net/ https://www.outdooractive.com; frame-src 'self' https://kvhs-duew.de/ https://www.google.com/ *.ikvs.de https://maps.google.de https://www.reservix.de/ https://web4.deskline.net/ https://bad-duerkheim.reservix.de https://www.youtube.com/ https://weatherwidget.io/ https://www.eTermin.net/bad-duerkheim https://www.drk-blutspende.de https://badduerkheim.musikschul-anmeldung.de/aufnahmeantrag https://www.outdooractive.com https://karelkunc.musikschul-anmeldung.de/ https://www.facebook.com/ https://ratsinfo.desvdue2.de/buergerinfo/info.asp https://stadtbuecherei-bad-duerkheim.bibliotheca-open.de/; img-src 'self' data: https://img.oastatic.com/img/ https://www.google-analytics.com https://www.googletagmanager.com https://client.rlpdirekt.de/ https://resc.deskline.net/ https://www.outdooractive.com https://www.facebook.com/; manifest-src 'self' https://www.outdooractive.com; media-src 'self' https://www.outdooractive.com; object-src 'self' https://www.outdooractive.com; prefetch-src 'self' https://www.outdooractive.com; script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://www.googletagmanager.com https://web4.deskline.net/ https://resc.deskline.net/ https://ajax.googleapis.com/ https://weatherwidget.io/ https://www.outdooractive.com 'unsafe-eval'; script-src-elem 'self' https://www.google-analytics.com https://www.googletagmanager.com https://web4.deskline.net/ https://resc.deskline.net/ https://ajax.googleapis.com/ https://weatherwidget.io/ https://connect.facebook.net/ https://www.outdooractive.com 'unsafe-inline'; script-src-attr 'self' https://resc.deskline.net/ 'unsafe-inline' https://weatherwidget.io/ https://www.outdooractive.com; style-src 'self' https://resc.deskline.net/ https://weatherwidget.io/ https://www.outdooractive.com 'unsafe-inline'; style-src-elem 'self' https://resc.deskline.net/ https://weatherwidget.io/ https://www.outdooractive.com 'unsafe-inline'; style-src-attr 'self' https://resc.deskline.net/ 'unsafe-inline' https://weatherwidget.io/ https://www.outdooractive.com; worker-src 'self' https://resc.deskline.net/ https://www.outdooractive.com 1
default-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com cdn.jsdelivr.net sdk.companywebcast.com https://ipapi.connectid.cloud *.google-analytics.com stats.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net sjp.getmediamanager.com *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edge.api.brightcove.com *.googleapis.com www.youtube.com youtube.com s.ytimg.com unpkg.com sdk.companywebcast.com https://staticcontents.investisdigital.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net; img-src 'self' 'unsafe-inline' * data:; media-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com; frame-src 'self' staticcontents.investis.com www.google.com sjp.getmediamanager.com careers.sjp.co.uk irs.tools.investis.com otp.tools.investis.com digital.feprecisionplus.com sjp.hireserve-test.com ir.tools.investis.com staticxx.facebook.com www.youtube.com player.vimeo.com sdk.companywebcast.com streams.nfgd.nl; font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com; report-uri /report-csp-violation 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src * data: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com data:; upgrade-insecure-requests; block-all-mixed-content; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; connect-src *; frame-src *; media-src *; 1
default-src 'self' 'unsafe-inline' * ; 	script-src 		'self' 'unsafe-inline' 'unsafe-eval' 		*.typekit.net *.recaptcha.net 		remote.captcha.com app.getresponse.com 		*.moatads.com *.newsletter2go.com *.cookiebot.com 		maps.googleapis.com www.google.com *.google.at www.googletagmanager.com www.google-analytics.com fonts.googleapis.com *.gstatic.com 		*.hotjar.com stats.g.doubleclick.net *.facebook.net *.facebook.com  		*.linkedin.com snap.licdn.com *.addthis.com *.addthisedge.com *.moatoads.com *.typekit.net 		'unsafe-inline'; 	connect-src 'self' 'unsafe-inline' *.hotjar.com *.hotjar.io *.typekit.net *.newsletter2go.com www.google-analytics.com; 	frame-src 'self' player.youku.com *.cookiebot.com www.youtube.com www.youtube-nocookie.com  		vars.hotjar.com www.google.com *.addthis.com app.getresponse.com; 	img-src 'self' data: *.primetals.com *.googleapis.com *.gstatic.com www.google-analytics.com www.google.com www.google.at 		*.newsletter2go.com *.linkedin.com *.facebook.com *.doubleclick.net app.getresponse.com; 	font-src 'self' fonts.googleapis.com fonts.gstatic.com *.typekit.net; 	style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com *.hotjar.com *.addthis.com app.getresponse.com; 	 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://d.line-scdn.net https://ajax.googleapis.com https://fonts.googleapis.com https://certify-js.alexametrics.com https://certify.alexametrics.com https://www.google-analytics.com https://www.facebook.com https://static.xx.fbcdn.net https://fonts.gstatic.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://code.jquery.com https://www.google.com https://www.google.com.tw https://www.chccd.com http://localhost:6088; 1
default-src 'self'; script-src 'self' *.dataconsultants.com https://ssl.google-analytics.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' *.dataconsultants.com 'unsafe-inline'; img-src * data:; font-src 'self' *.dataconsultants.com; style-src 'self' 'unsafe-inline' *.dataconsultants.com; 1
script-src 'self' 'unsafe-inline' www.google-analytics.com www.google.com maps.googleapis.com code.jquery.com jquery.com cdn.jquery.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com www.gstatic.com; 1
script-src 'unsafe-inline' 'unsafe-eval' *.beaconproducts.co.uk *.beaconforms.com *.riddle.com *.fontawesome.com *.visitgunnersbury.org ajax.googleapis.com maps.googleapis.com *.google-analytics.com *.googletagmanager.com *.vimeo.com *.youtube.com *.addthis.com *.addthisedge.com *.ytimg.com; style-src 'self' 'unsafe-inline'  *.fonts.net *.fontawesome.com *.typekit.net *.riddle.com; 1
default-src none; connect-src 'self' http://danalica.ito.gov.ir; font-src 'self' maxcdn.bootstrapcdn.com data:; style-src 'self' maxcdn.bootstrapcdn.com 'unsafe-inline'; script-src 'unsafe-eval' 'self' 'nonce-wpLBLQVy7yfJ0EziZmc0' http://danalica.ito.gov.ir https://www.google.com/recaptcha/api.js; img-src 'self' http://danalica.ito.gov.ir www.gstatic.com; frame-src www.google.com; object-src 'self'; base-uri 'none'; 1
default-src 'self' https://www.youtube.com https://*.google.com https://yoast.com https://*.facebook.com https://*.twitter.com https://service.meway.host; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://connect.facebook.net http://platform.twitter.com; style-src 'self' 'unsafe-inline' data: http://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' http://1.gravatar.com https://*.twitter.com https://www.webdesi9.com https://*.w.org data: 1
default-src 'unsafe-eval' http: https: data: blob: 'unsafe-inline' 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; media-src * 'self' blob: ;connect-src https: wss: 1
frame-ancestors 'self' https://gattaca-helix.my.salesforce.com/ 1
default-src 'self' comments.davidbcalhoun.com www.youtube.com; style-src 'self' 'unsafe-inline'; img-src * data:; media-src *; script-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com; prefetch-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org www.googletagmanager.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com https://snap.licdn.com/li.lms-analytics/ https://px.ads.linkedin.com/ https://p.adsymptotic.com https://www.linkedin.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: cdnjs.cloudflare.com; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com www.google.com https://px.ads.linkedin.com https://www.google.be https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com http://edana-cde.staging.alligence.com https://members.edana.org https://stats.g.doubleclick.net https://p.adsymptotic.com; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com www.google.com https://www.youtube-nocookie.com/; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://members.edana.org http://edana-cde.localhost.com http://edana-cde.staging.alligence.com https://www.google-analytics.com; 1
frame-ancestors 'self' *.celulares.com *.moviles.com;upgrade-insecure-requests 1
default-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: 'self' data: https:;  frame-ancestors https:; 1
default-src 'self' https: http: bankid:; connect-src 'self' ws: wss: localhost:40000 http://*.onlinetechsupport24.com https://*.onlinetechsupport24.com https://sentry.slotv.com https://sentry.slotv.se https://livechat24.tech https://*.amazonaws.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://stats.g.doubleclick.net https://recaptcha.net https://*.unetsafe.com https://ui.invisiblesport.com https://www.facebook.com https://*.bing.com https://*.pingdom.net https://*.go-mpulse.net https://*.akstat.io https://cdnetwork.world https://*.ps-gamespace.com https://*.casinomodule.com https://cdrs.netentcdn.com https://gcl.netentcdn.com https://*.gameassists.co.uk https://*.risemi.net https://*.grindbyte.net https://*.discreetgaming.com https://*.betsoftgaming.com https://*.tomhorngames.com https://*.tomhorngaming.eu https://d334r25pe15ehe.cloudfront.net https://d2drhksbtcqozo.cloudfront.net https://*.atlantgaming.com https://nyxcuracao.com https://ogs-game.thunderkick.com https://*.dopamine-gaming.com/ https://gserver-avento.tgp.cash https://gserver-avento2.redtiger.cash https://*.contentmedia.eu https://d2vtif2pieq2oh.cloudfront.net https://d19h7q92ya6ec9.cloudfront.net https://*.amusnet.eu:8181 https://*.amusnetgaming.com:8181 https://*.redrakegaming.com https://*.yggdrasilgaming.com https://*.endorphina.com https://*.endorphina.network https://aventonv.prerelease-env.biz https://*.pragmaticplay.net https://engine-eu.games-assets.xyz https://engine.eu.booming-games.com https://engine-eu.cdn.systems https://engine-mt.games-assets.xyz https://engine.mt.booming-games.com https://engine-mt.cdn.systems https://*.playngonetwork.com https://cdn02.cdn.amatic.com http://*.ptstaging.eu https://*.aventonv.com https://*.playtechgaming.com https://*.uat1.evo-test.com https://*.aventogroup.com https://*.sptpub.com https://*.visualwebsiteoptimizer.com https://d5phz18u4wuww.cloudfront.net https://cdn-cn.vwo-analytics.com https://*.hotjar.com https://*.hotjar.io; font-src 'self' https://fonts.gstatic.com data: https://ui.invisiblesport.com https://cdnetwork.world https://*.sptpub.com https://*.hotjar.com https://*.hotjar.io; frame-src *; img-src 'self' https: http: data: blob: *.captchas.net https://*.akstat.io https://cdnetwork.world *.visualwebsiteoptimizer.com https://*.hotjar.com https://*.hotjar.io; script-src 'self' 'unsafe-eval' https://*.onlinetechsupport24.com http://*.onlinetechsupport24.com https://livechat24.tech localhost:40000 https://mc.yandex.ru https://ajax.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://*.curacao-egaming.com https://www.google.com https://www.gstatic.com https://recaptcha.net https://*.unetsafe.com https://ui.invisiblesport.com https://connect.facebook.net https://*.bing.com https://*.cloudflare.com https://*.pingdom.net https://*.go-mpulse.net https://drifttopgame.space https://cdnetwork.world https://*.casinomodule.com https://cdrs.netentcdn.com https://*.discreetgaming.com https://*.betsoftgaming.com https://*.tomhorngames.com https://*.tomhorngaming.eu https://*.playngonetwork.com http://*.ptstaging.eu https://*.sptpub.com *.visualwebsiteoptimizer.com https://cdn-cn.vwo-analytics.com https://*.hotjar.com https://*.hotjar.io *.paywallk.com *.unetsafe.com *.ecommpay.com *.zimpler.net *.adyen.com *.hotjar.com *.acaptureservices.com acaptureservices.com *.oppwa.com oppwa.com *.unetcard.com p1.secpaysys.com 'nonce-ZSl98lrO9yx0C90Xed6KMSvgTMcV9+FO+7C/9pvfMTk=' 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline' https://ui.invisiblesport.com https://cdnetwork.world https://*.playngonetwork.com https://*.sptpub.com *.paywallk.com *.unetsafe.com *.ecommpay.com *.adyen.com *.hotjar.com *.ppipe.net *.oppwa.com oppwa.com *.unetcard.com p1.secpaysys.com; worker-src 'self' https://drifttopgame.space blob:; report-uri https://sentry.onlinetechsupport24.com/api/32/csp-report/?sentry_key=9d399a756c41455cb83dee764a694f33 1
default-src 'self' vimeo.com *.akamaized.net; object-src 'self'; frame-src 'self' *.vimeo.com *.youtube.com *.cookiebot.com; script-src data: 'self' *.cookiebot.com *.vimeo.com *.googletagmanager.com *.google-analytics.com maps.googleapis.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' data: 'unsafe-inline'; img-src 'self' data: *.googletagmanager.com *.google-analytics.com maps.gstatic.com maps.google.com maps.googleapis.com; font-src data: 'self' fonts.googleapis.com fonts.gstatic.com; manifest-src 'self' 1
base-uri 'none'; object-src 'none'; script-src https://forum.projecthax.com/logs/ https://forum.projecthax.com/sidekiq/ https://forum.projecthax.com/mini-profiler-resources/ https://forum.projecthax.com/assets/ https://forum.projecthax.com/brotli_asset/ https://forum.projecthax.com/extra-locales/ https://forum.projecthax.com/highlight-js/ https://forum.projecthax.com/javascripts/ https://forum.projecthax.com/plugins/ https://forum.projecthax.com/theme-javascripts/ https://forum.projecthax.com/svg-sprite/ https://www.google-analytics.com/analytics.js; worker-src 'self' https://forum.projecthax.com/assets/ https://forum.projecthax.com/brotli_asset/ https://forum.projecthax.com/javascripts/ https://forum.projecthax.com/plugins/ 1
frame-ancestors 'self' https://api.opentlv.com 1
script-src * 'unsafe-eval' 'unsafe-inline'; worker-src blob: *; frame-ancestors 'self' https://webs.amigoenergy.com https://account.justenergy.com; 1
default-src blob: 'self' 'unsafe-inline' 'unsafe-eval' 1
default-src 'self' https: data: https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://go.id-systems.com https://go.powerfleet.com  'unsafe-inline' 'unsafe-eval' https://snap.licdn.com https://www.googletagmanager.com/ https://dc.ads.linkedin.com; 1
default-src 'self'; script-src 'self' https://www.google.com/ https://www.gstatic.com https://webstats.eco.de; connect-src 'self' https://api.siwecos.de https://api.staging.siwecos.de https://webstats.eco.de; style-src 'self' 'sha256-J81qacJpdjuZYZHBvLbeK5vg9AKFKTTFPYxZfoCEXFw='; frame-src 'self' https://www.youtube.com/ https://www.youtube-nocookie.com/ https://www.google.com/; img-src 'self' data: https://img.youtube.com https://i1.ytimg.com https://i.ytimg.com https://i9.ytimg.com https://s.ytimg.com https://siegel.siwecos.de https://webstats.eco.de; 1
default-src *; img-src * data: https://*; style-src * https://* 'unsafe-inline'; script-src * https://* 'unsafe-inline' 'unsafe-eval'; font-src * data:;  frame-ancestors 'self'; 1
default-src 'self' *.iauahvaz.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io https://www.google.com/maps/* ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com https://www.google.com/maps/* ; frame-ancestors 'self' https://trustseal.enamad.ir 1
base-uri 'self' https://optimize.google.com; object-src 'none'; default-src 'self' http://public.tableau.com/ https://static.zdassets.com https://ekr.zdassets.com https://saverlife.zendesk.com https://redtabsavers.zendesk.com wss://saverlife.zendesk.com wss://*.zopim.com wss://*.visitors.live wss://visitors.live https://www.youtube.com https://cdn.plaid.com https://promos.rtm.com/EarnScratchAndSaveIWYearlong/ https://saverlife.org https://www.saverlife.org https://saverlife-production.herokuapp.com https://optimize.google.com https://promos.rtm.com https://www.auntbertha.com https://duke.qualtrics.com/ https://covid.commoncentslab.org/ https://covid-stimulus.s3.amazonaws.com/ https://docraptor.com/ https://form.typeform.com/ https://www.google.com/recaptcha/; connect-src 'self' https://settings.luckyorange.net wss://*.visitors.live https://pubsub.googleapis.com https://api.luckyorange.com wss://*.zopim.com wss://visitors.live https://ekr.zdassets.com https://api.amplitude.com https://saverlife.zendesk.com https://redtabsavers.zendesk.com https://service2.funifier.com https://saverlife-production.herokuapp.com/users/log_in https://saverlife.org https://www.saverlife.org https://saverlife-production.herokuapp.com https://pay.uat.hyperwallet.com/ https://uat-api.paylution.com/ https://api.paylution.com/rest/ https://www.google-analytics.com/j/collect; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com/; img-src 'self' data: https://public.tableau.com/static/images/20/200316-Raceto100Leaderboard/Leaderboard/1.png https://earn.zendesk.com https://redtabsavers.zendesk.com https://v2assets.zopim.io https://static.zdassets.com https://d10lpsik1i8c69.cloudfront.net https://client2.funifier.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.specialneedscommunities.com/images/consumers/img_nogravatar.png https://thumbs.gfycat.com/UnitedSmartBinturong-max-1mb.gif https://s3.amazonaws.com/funifier/ https://funifier.s3.amazonaws.com/ https://s3.amazonaws.com/funifier_node/ https://partner.saverlife.org https://twemoji.maxcdn.com/ https://secure.gravatar.com/ https://www.facebook.com https://optimize.google.com http://www.gstatic.com https://ssl.gstatic.com/analytics-suite/ https://www.googletagmanager.com/ http://www.googletagmanager.com/ https://www.saverlife.org https://partner.saverlife.org/ https://saverlife.s3.us-east-2.amazonaws.com/ https://sboffers.swagbucks.com/GL6kS https://s3-us-east-2.amazonaws.com/ https://www.tmmtrack.com/ https://www.shareasale.com/sale.cfm; script-src 'self' https://public.tableau.com/javascripts/api/viz_v1.js https://static.zdassets.com https://ekr.zdassets.com https://saverlife.zendesk.com/ https://redtabsavers.zendesk.com wss://saverlife.zendesk.com wss://redtabsavers.zendesk.com wss://*.zopim.com https://d10lpsik1i8c69.cloudfront.net https://client2.funifier.com https://service2.funifier.com https://f.vimeocdn.com/js/froogaloop2.min.js https://cdn.amplitude.com https://www.googletagmanager.com https://cdnjs.cloudflare.com/ajax/libs/jquery-timeago/1.5.3/jquery.timeago.min.js https://cdnjs.cloudflare.com/ajax/libs/jquery.nanoscroller/0.8.7/javascripts/jquery.nanoscroller.min.js https://cdnjs.cloudflare.com/ajax/libs/svg4everybody/2.1.9/svg4everybody.min.js https://promos.rtm.com/EarnScratchAndSaveIWYearlong/js/embedPromo.js https://connect.facebook.net/en_US/fbevents.js https://saverlife.org https://www.saverlife.org https://saverlife-production.herokuapp.com https://connect.facebook.net https://www.google-analytics.com https://optimize.google.com https://cdnjs.cloudflare.com/ajax/libs/jquery.inputmask/3.2.6/jquery.inputmask.bundle.js https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.7.8/angular.min.js https://pay.uat.hyperwallet.com https://api.paylution.com/rest/ https://embed.typeform.com/ https://www.recaptcha.net/recaptcha/api.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.dwin1.com 'nonce-bP4ot/7rAzGkYpao5PRHQw=='; style-src 'self' 'unsafe-inline' https://client2.funifier.com https://service2.funifier.com https://d10lpsik1i8c69.cloudfront.net https://cdn.quilljs.com https://fonts.googleapis.com https://service2.funifier.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://optimize.google.com https://www.google-analytics.com https://tagmanager.google.com/; worker-src 'self' blob: 1
worker-src 'self' *.adsa.org *.videodelivery.net; 1
default-src 'self';connect-src 'self' https://login.microsoftonline.com https://login.windows-ppe.net https://consentreceiverfd-prod.azurefd.net/v1/consent;script-src 'self' 'nonce-7J9RNTaOwxrQGyqUYMgoTMjdDVSQ+CTfmTOdoG40028=' 'unsafe-eval' https://client.hip.live.com https://*.client.hip.live.com https://c.s-microsoft.com https://wcpstatic.microsoft.com/;style-src 'self' 'unsafe-inline' https://c.s-microsoft.com;font-src 'self' https://*.sharepointonline.com https://spoprod-a.akamaihd.net;img-src 'self' https://*.client.hip.live.com;media-src https://client.hip.live.com https://*.client.hip.live.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'  softhome.ru *.softhome.ru authentication.me *.authentication.me adnext.net www.googletagmanager.com softhomeru.disqus.com c.disquscdn.com disqus.com authentication.me softcdn.ru *.softcdn.ru sftcdn.ru *.sftcdn.ru soft-apps.ru *.soft-apps.ru sftpps.ru *.sftpps.ru vk.com *.vk.com https://*.vk.com https://vk.com facebook.com *.facebook.com https://*.facebook.com https://facebook.com addthis.com *.addthis.com https://*.addthis.com https://addthis.com m.addthisedge.com adriver.ru *.adriver.ru doubleclick.net *.doubleclick.net https://*.doubleclick.net https://doubleclick.net yandex.ru *.yandex.ru https://*.yandex.ru https://yandex.ru googlesyndication.com *.googlesyndication.com https://*.googlesyndication.com https://googlesyndication.com googletagservices.com *.googletagservices.com https://*.googletagservices.com https://googletagservices.com googleadservices.com *.googleadservices.com https://*.googleadservices.com https://googleadservices.com gstatic.com *.gstatic.com https://*.gstatic.com https://gstatic.com google-analytics.com *.google-analytics.com https://*.google-analytics.com https://google-analytics.com publisherconsole.appspot.com *.publisherconsole.appspot.com https://*.publisherconsole.appspot.com https://publisherconsole.appspot.com softobase.com *.softobase.com cdnjs.cloudflare.com google.com *.google.com https://*.google.com https://google.com http://*.googlevideo.com https://*.googlevideo.com fonts.googleapis.com youtube.com *.youtube.com http://*.youtube.com https://*.youtube.com https://youtube.com youtube-nocookie.com *.youtube-nocookie.com https://*.youtube-nocookie.com https://youtube-nocookie.com http://*.ytimg.com https://*.ytimg.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' softhome.ru *.softhome.ru data: *; media-src 'self' 'unsafe-inline' 'unsafe-eval' softhome.ru *.softhome.ru mediastream: *; report-uri /csp 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *; 1
default-src 'self'; frame-ancestors 'none'; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.canyayinlari.com:* *.canyayinlari.com ajax.googleapis.com *.googleapis.com *.developers.google.com *.amplitude.com *.googletagmanager.com *.google-analytics.com maps.googleapis.com cdn.jsdelivr.net ajax.aspnetcdn.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com use.fontawesome.com;img-src 'self' data: *.google-analytics.com *.googleapis.com *.google.com *.doubleclick.net *.gstatic.com *.canyayinlari.com maps.googleapis.com admin-7866.kxcdn.com cdn.canyayinlari.com;frame-src *.youtube.com *.spotify.com;font-src 'self' *.gstatic.com use.fontawesome.com;connect-src 'self';form-action 'self';report-uri /WebResource.axd?cspReport=true 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.axessx.de *.googleapis.com 1
script-src 'self' 'unsafe-eval' 'nonce-ffd98221c598354e4998d5705c1986db' https://static-sandbox.intsig.net https://static12013.intsig.net https://static.intsig.net http://www.devstatic.com https://static-c.intsig.net https://static12013-c.intsig.net https://static-c.intsig.net https://*.camcard.me https://*.camcard.com https://srh-sandbox.intsig.net/CCAppService https://srh.intsig.net/CCAppService https://srh.intsig.net/CCAppService http://hm.baidu.com https://hm.baidu.com https://*.geetest.com; object-src 'none' 1
base-uri 'none'; object-src 'none'; script-src https://electric-skateboard.builders/logs/ https://electric-skateboard.builders/sidekiq/ https://electric-skateboard.builders/mini-profiler-resources/ https://electric-skateboard.builders/assets/ https://electric-skateboard.builders/brotli_asset/ https://electric-skateboard.builders/extra-locales/ https://electric-skateboard.builders/highlight-js/ https://electric-skateboard.builders/javascripts/ https://electric-skateboard.builders/plugins/ https://electric-skateboard.builders/theme-javascripts/ https://electric-skateboard.builders/svg-sprite/ https://www.google-analytics.com/analytics.js https: 'unsafe-inline' https://connect.facebook.net https://www.facebook.com; worker-src 'self' https://electric-skateboard.builders/assets/ https://electric-skateboard.builders/brotli_asset/ https://electric-skateboard.builders/javascripts/ https://electric-skateboard.builders/plugins/ 1
frame-ancestors https://www.iskoop.org 1
frame-ancestors http://krankenpflege-journal.site/ https://static.esanum.de 'self' https://krankenpflege-journal.site https://mailings.esanum.de krankenpflege-journal.site www.krankenpflege-journal.site; 1
script-src 'self' data: https://optimize.google.com http://100012771.collect.igodigital.com/ https://dc.ads.linkedin.com/ https://www.linkedin.com/ https://analytics.twitter.com/ https://px.ads.linkedin.com/ https://script.hotjar.com https://sjs.bizographics.com https://static.hotjar.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://www.googleadservices.com https://connect.facebook.net https://bat.bing.com https://collector-1623.tvsquared.com https://s.ytimg.com https://www.youtube.com https://www.google-analytics.com https://www.googletagmanager.com https://apis.google.com https://ajax.googleapis.com https://dl.episerver.net https://platform.twitter.com https://tagmanager.google.com https://10417751.fls.doubleclick.net https://v2.zopim.com https://static.zdassets.com 'unsafe-inline' 'unsafe-eval'; worker-src 'self' https://plusone.google.com https://facebook.com https://platform.twitter.com https://www.googletagmanager.com https://tagmanager.google.com; frame-src 'self' https://www.youtube.com https://vars.hotjar.com/ https://www.facebook.com/ https://optimize.google.com https://10417751.fls.doubleclick.net 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' clicky.com *.getclicky.com www.google.com www.gstatic.com www.googletagmanager.com cdn.jsdelivr.net ssl.google-analytics.com www.google-analytics.com ajax.googleapis.com ajax.aspnetcdn.com fast.fonts.com cdnjs.cloudflare.com; frame-src https://www.google.com 'self'; 1
default-src 'self'; connect-src *; font-src * data:; frame-src *; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * 'self' data: blob:; 1
default-src 'self'; img-src 'self' blob: data: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *; media-src 'self' 'unsafe-inline' *; font-src 'self' *; frame-src 'self' *; connect-src 'self' *; object-src 'none' 1
default-src 'self'; block-all-mixed-content; connect-src 'self' wss://*.smartsupp.com https://*.smartsupp.com https://*.smartsuppchat.com https://*.smartsuppcdn.com; font-src 'self' data: https://*.smartsuppcdn.com; img-src 'self' data: https://*.smartsuppcdn.com https://twemoji.maxcdn.com; media-src 'self' https://*.smartsuppcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.smartsuppcdn.com https://*.smartsuppchat.com; style-src 'self' 'unsafe-inline' 1
default-src 'self'; object-src 'self' *.alamode.com; frame-ancestors 'self' *.alamode.com; font-src https://code.jquery.com https://maxcdn.bootstrapcdn.com 'self'; img-src *; script-src 'sha256-eDDMDdKnXeDK5c4q0HKnwEDQRh0+H5P/fDi8PtWX0eA=' https://code.jquery.com https://maxcdn.bootstrapcdn.com https://d3js.org https://ajax.googleapis.com 'self' 'unsafe-eval' 'sha256-32daEaoD3VVlf+DxRk4KMFlyURvzMjYgUfxhUQGb2SY=' 'sha256-qThJjxVWcaqBNMSrY9brk6F63CHUYyltinX7sy+Z3jo=' 'sha256-xRhPnEXMOJkjZuyt9HRpjr1tD7b/UnSWtXZHH4DF84U=' 'sha256-jV7+/Ddjx3akje9Yzzc9RMeGxEasjborEJ7sUB1KqI4=' 'sha256-jj/lbWfVoHfWkFHQQl8wj5CzMsMu5J701Rrq3FQabtk=' 'sha256-AeJCLKp9xBq2ip6+izwGWhF/njB9B31VKKQFa5YLC6g=' 'sha256-ELKFvcOSTiqduoyoXxWQaQ/4CBMEa3+Ni3eySFlEqDI=' 'sha256-5kGaajMelu/3RpywFBHAJuqhNp0Bjn4ylBctAv8+EFY=' 'sha256-UITiqbXyaWS7NpwiFrMIbdXAZy5EXLRUHkpylF4504k=' 'sha256-0BV5VoIlask4z+Yzf5K0nnC5VJsdaDG/aQWY8sb5Qz8=' 'sha256-HP6PJ90C1IhbXvxCx/lmv//Fuj8WIX6zqfzysdYw6Bs=' 'sha256-psevpNPdDksmjGZnD+QA0OFeXnK2mLmOTNZlKNdGMpE=' 'sha256-7dNi3PxjyxPzk7XobFmU5YLbi6+58mo9OY1p6BKoGdI=' 'sha256-EvClXdCMFTDfrYIrnffCQ5zLoZM5oHwkITIkUh6Q6r0=' 'sha256-Y842RegS2onx4EZAQYjNCe7EyUGTzVRqi1lFyWmub68=' 'sha256-WYJMBRaMCfFrVg50U8vOabVXOnWLo1c+qj/cVxA763Y=' 'sha256-qvl54PEa8xxtwvDASG8fDbk9US2O8GlF0zpKrXx3bjw=' 'sha256-H1FVRGM+EKPcb4+4F8af6Z372nzZFYMl7rGZ6I9cF6A=' 'sha256-mq1mX4nr49HktsVEMyqh2/HVmmFl72FxoC9SnLZvAXg=' https://www.googletagmanager.com https://ssl.google-analytics.com/ga.js 'sha256-wXAcd1ryB00c23Dr66WUUFoD/AT6sJb4sdVnrGMcExM=' https://www.google-analytics.com/analytics.js https://www.alamode.com 'sha256-+pBP3dlT2JLJy+wY8BHYTyXkt1zqwnODh/V8qJ8mUJU=' 'nonce-09de95b7a6ac7009c787fcd7930df866'; style-src https://code.jquery.com https://maxcdn.bootstrapcdn.com 'unsafe-inline' 'self';  base-uri 'self';  frame-src https:; 1
frame-ancestors 'self' foxblocks.com *.foxblocks.com ; 1
frame-ancestors http://my.rotary.org https://my.rotary.org http://my-cms.rotary.org https://my-cms.rotary.org 'self'; 1
frame-ancestors 'self' games.mail.ru *.vk.com vk.com ok.ru *.ok.ru odnoklassniki.ru 1
upgrade-insecure-requests;reflected-xss block; referrer no-referrer-when-downgrade; 1
frame-ancestors https://*.ionos.com https://*.ionos.at https://*.ionos.co.uk https://*.ionos.de https://*.ionos.es https://*.ionos.fr https://*.ionos.it https://*.ionos.ca https://*.ionos.mx https://*.ionos.us https://*.website-editor.net https://*.mywebsite-editor.com www.clampstudio.com 1
frame-src 'self' https://donorbox.org/; default-src 'none'; script-src 'self' https://www.google-analytics.com https://donorbox.org/ https://www.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' data: 'self'; img-src 'self' https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com/; manifest-src 'self' 1
frame-src https:; report-uri /csp-violation-endpoint/ 1
default-src 'self' https://stats.g.doubleclick.net https://npci.corover.mobi https://fonts.gstatic.com https://*.facebook.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com; font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com; img-src 'self' https://coroverbackendstorage.blob.core.windows.net https://uiresource.blob.core.windows.net 'unsafe-inline' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://*.facebook.com; script-src 'self' https://*.facebook.com https://*.facebook.net https://www.googletagmanager.com https://ajax.googleapis.com https://www.google-analytics.com https://npci.corover.mobi 'unsafe-inline' 1
frame-ancestors 'self' *.davengo.com; 1
script-src 'self' https: 'unsafe-inline' 'unsafe-eval' http://viacep.com.br 1
default-src  http:; script-src 'self' 'unsafe-inline' 'unsafe-eval'  http:; style-src http:  'unsafe-inline'; img-src 'self' data: http:; connect-src http:  ws:; 1
default-src 'self'; img-src 'self' https: data:; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' https://plus.browsealoud.com https://fonts.googleapis.com 'sha256-ej0IfBIDCgiY0YkUpOWxRhKGoTP2Xisz8L4bEnKsH78=' 'sha256-oM4/ciu4hDJPwGBaV24ezMKSuezH1satHHBPnQ8sSTY=' 'sha256-XYDjw1ZTZooTVVSIqeJOTDrdw9COixWvlZ+IL8qRP4U=' 'sha256-wk3AOYc/I5qMEvqu9OPvmZ6ZN8TlRT8Acr6AYTko0JA=' 'sha256-PQX48N0TbPhN3NP/voXdBgMSe3UC6wOZMkoMckZDvQg=' 'sha256-/nijTDIv4e+mrKwE6CerMRHFv/FTSLH5a8Ub384Yurc=' 'sha256-AC5oF4xOeLOO33Wh6YBRSjSnJ2QsT89JthrjfaHCZHM=' 'sha256-kiYre4Ldolo9jqssPGAv1HFduMqKClFSx4LFI5xulAU='; script-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://fonts.googleapis.com https://apis.google.com https://plus.browsealoud.com https://www.browsealoud.com 'sha256-XwQT/PsFMy+rKSB4vlW93i5lrzIRaGmPC3M2D0C3ZKU='; object-src 'self'; base-uri 'none'; connect-src 'self' https://en.wikipedia.org/ https://wikisum.texthelp.com https://speechstreamv3-webservices-8.texthelp.com https://www.browsealoud.com/modules/3.2.1/sri.json https://www.browsealoud.com/version.json https://www.google-analytics.com https://plus.browsealoud.com https://babm.texthelp.com https://*.speechstream.net https://stats.g.doubleclick.net; media-src blob: 'self' https://*.speechstream.net; frame-src 'self' https://content.googleapis.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' base-uri 'self'  data: https://*.facebook.com https://*.facebook.net https://*.google.com https://*.google.fr https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.youtube.com https://*.admo.tv https://*.bing.com https://*.doubleclick.net https://*.hermesmc.fr https://hermesmc.fr https://*.metaffiliation.com https://*.ytimg.com https://*.weborama.fr https://*.gwallet.com https://*.bootstrapcdn.com https://*.doubleclick.net https://*.vocalcom.com https://mc35.fr 1
default-src * data: blob: 'unsafe-inline' 'unsafe-eval';script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; img-src * data:; font-src * data: blob:; base-uri * 'unsafe-inline' 'unsafe-eval'; frame-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 'unsafe-eval'; report-uri https://asdphone.report-uri.com/r/d/csp/reportOnly 1
connect-src 'self' https://*.akafms.net https://*.akamaihd.net https://*.brightcove.com https://*.brightcovecdn.com https://*.brightcove.net https://*.digitalpfizer.com https://*.evidon.com https://*.hotjar.com https://*.llnw.net/ https://*.llnwd.net/ https://adservice.google.com https://amer-identity.pfizer.com https://bam.nr-data.net https://brightcove.hs.llnwd.net https://emea-identity.pfizer.com https://house-cloudfront.ap-northeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-2.prod.boltdns.net https://house-cloudfront.eu-west-1.prod.boltdns.net https://house-cloudfront.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://knrpc.olark.com/nrpc/ https://l.betrad.com https://stats.addtoany.com/menu https://stats.g.doubleclick.net https://tagmanager.google.com https://vc.hotjar.io/ https://www.facebook.com https://www.google-analytics.com wss://*.hotjar.com wss://*.pfizer.com https://m.addthis.com https://api-v3.conductrics.com https://cdn-v3.conductrics.com https://players.brightcove.net https://www.youtube.com https://svc.webspellchecker.net; font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://docs.gcs.digitalpfizer.com/fonts/ https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://script.hotjar.com https://use.fontawesome.com/releases/ https://use.typekit.net https://vjs.zencdn.net https://www.youtube.com https://maxcdn.bootstrapcdn.com https://s3.us-east-2.amazonaws.com https://svc.webspellchecker.net https://stackpath.bootstrapcdn.com https://api2.fonts.com; frame-src 'self' tel: https://*.fls.doubleclick.net https://*.janrainsso.com https://bid.g.doubleclick.net https://l3.evidon.com https://players.brightcove.net https://static.addtoany.com https://static.olark.com https://tpc.googlesyndication.com https://vars.hotjar.com https://www.facebook.com https://www.google.com/maps/ https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.youtube.com https://s7.addthis.com https://platform.twitter.com https://syndication.twitter.com https://www.hapyak.com https://player.simplecast.com https://p2a.co https://www.pfizer.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://action.pfizer.com https://www.medrespond-pfra.com https://twitter.com https://insight.adsrvr.org; img-src 'self' about: data: https://* https://img.youtube.com https://cdnjs.cloudflare.com https://pbs.twimg.com https://images-cdn.newscred.com https://syndication.twitter.com https://abs.twimg.com https://ton.twimg.com https://platform.twitter.com https://developers.google.com https://pixel.newscred.com https://t.co/i/adsct https://tr.outbrain.com/pixel https://amplifypixel.outbrain.com/pixel https://px.ads.linkedin.com/collect https://p.adsymptotic.com/d/px/ https://app.icontact.com https://s3.us-east-2.amazonaws.com https://secure.adnxs.com https://pixel.mediaiqdigital.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://ajax.googleapis.com https://api.olark.com https://assets.adobedtm.com https://bam.nr-data.net https://cdnjs.cloudflare.com https://connect.facebook.net https://c.evidon.com https://l.evidon.com https://d1v9u0bgi1uimx.cloudfront.net https://d29usylhdk1xyu.cloudfront.net https://d7v0k4dt27zlp.cloudfront.net/assets/ https://docs.gcs.digitalpfizer.com https://googleads.g.doubleclick.net https://js.bizographics.com https://js-agent.newrelic.com https://knrpc.olark.com/nrpc/ https://l.betrad.com https://maps.googleapis.com https://optoutapi.evidon.com https://p.adsymptotic.com https://pfizer-grv-eu.janraincapture.com https://players.brightcove.net https://px.ads.linkedin.com https://rpxnow.com/load/ https://s3.amazonaws.com/pfe_grv https://s3.amazonaws.com/pfe_im/ https://script.hotjar.com https://sjs.bizographics.com https://static.hotjar.com https://static.addtoany.com https://static.olark.com https://tagmanager.google.com https://tpc.googlesyndication.com https://vjs.zencdn.net https://www.bizographics.com https://www.google.com/recaptcha/ https://www.google.com/search/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.linkedin.com https://cdn.jsdelivr.net https://s7.addthis.com https://z.moatads.com https://v1.addthisedge.com https://m.addthis.com https://platform.twitter.com https://cdn.syndication.twimg.com https://p2a.co https://www.youtube.com/iframe_api https://action.pfizer.com https://s.ytimg.com https://maxcdn.bootstrapcdn.com https://static.ads-twitter.com/uwt.js https://analytics.twitter.com https://amplify.outbrain.com https://snap.licdn.com https://app.icontact.com https://d2qrdklrsxowl2.cloudfront.net https://js.adsrvr.org https://svc.webspellchecker.net https://d.turn.com https://tr.outbrain.com/cachedClickId https://bam-cell.nr-data.net https://www.youtube.com cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://cookies.pfizer.com https://d3hmp0045zy3cs.cloudfront.net https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://pfredirect.pfizersite.io https://quilt-cdn.janrain.com/HEAD/providers.css https://quilt-cdn.janrain.com/HEAD/widgets.css https://s3.amazonaws.com/pfe_grv/ https://static.olark.com https://stackpath.bootstrapcdn.com https://tagmanager.google.com https://translate.googleapis.com https://use.typekit.net https://cdn.jsdelivr.net https://p.typekit.net https://www.youtube.com https://platform.twitter.com https://ton.twimg.com https://app.icontact.com https://svc.webspellchecker.net cdnjs.cloudflare.com fonts.googleapis.com https://cdnjs.cloudflare.com; child-src 'self'; manifest-src 'self'; media-src 'self' data: blob: https://brightcove.hs.llnwd.net https://*.media.brightcove.com https://static.olark.com https://secure.brightcove.com/services/mobile/streaming/; worker-src 'self' blob:; report-uri https://pfeprod.report-uri.com/r/t/csp/enforce 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://healthtransformer.co https://*.healthtransformer.co https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
script-src 'unsafe-eval' 'unsafe-inline' 'self' *.wcfservices *.wcfservices2 *.wcfservicest *.arcgis.com https://www.teignbridge.gov.uk http://serverapi.arcgisonline.com *.teignbridgetest.gov.uk *.teignbridge.gov.uk *.google-analytics.com *.google.com *.gstatic.com *.siteimproveanalytics.io *.siteimprove.com https://content.govdelivery.com https://maps.strata.solutions *.whoson.com; object-src 'self'; style-src 'self' 'unsafe-inline' *.arcgis.com http://serverapi.arcgisonline.com https://maps.strata.solutions; img-src 'self' data: *.wcfservices *.wcfservices2 *.wcfservicest https://www.teignbridge.gov.uk *.teignbridgetest.gov.uk *.teignbridge.gov.uk  *.google-analytics.com *.google.com *.gstatic.com *.arcgis.com https://content.govdelivery.com http://serverapi.arcgisonline.com https://maps.strata.solutions *.siteimproveanalytics.io *.siteimprove.com *.whoson.com; media-src 'self'; font-src 'self'; connect-src *.wcfservices *.wcfservices2 *.wcfservicest *.teignbridgetest.gov.uk https://www.teignbridge.gov.uk *.teignbridge.gov.uk 'self' *.google-analytics.com *.siteimproveanalytics.io *.siteimprove.com *.whoson.comb https://maps.strata.solutions; form-action 'self' *.teignbridge.gov.uk https://www.teignbridge.gov.uk; frame-ancestors 'self' *.teignbridge.gov.uk; 1
default-src * 'self' 'unsafe-inline'; img-src * 'self' data: https:; script-src 'self' https://www.gstatic.com https://www.google.com https://www.googletagmanager.com https://maps.googleapis.com https://ajax.googleapis.com https://developers.google.com https://www.googleadservices.com https://cdn.optimizely.com https://www.youtube.com https://platform.linkedin.com https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com https://connect.facebook.net https://js.adsrvr.org https://rum-static.pingdom.net https://googleads.g.doubleclick.net https://static.ads-twitter.com https://analytics.twitter.com https://snap.licdn.com https://sjs.bizographics.com https://px.ads.linkedin.com https://jobadder.com https://apps.jobadder.com https://s.ytimg.com https://calculators.infochoice.com.au https://www.linkedin.com https://tagmanager.google.com https://*.addthis.com https://*.addthisedge.com https://use.typekit.net https://calculators.gbst.com https://*.trustpilot.com https://*.emudesign.com.au https://*.gobookings.com https://*.quantserve.com https://*.quantcount.com data: 'unsafe-inline' 'unsafe-eval'; connect-src *; upgrade-insecure-requests; 1
default-src 'self' button.moddb.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; worker-src 'none'; frame-src https://www.moddb.com; 1
report-uri /error/csp;default-src 'none';connect-src 'self' data: widget.trustpilot.com v2.zopim.com wss://*.zopim.com *.zdassets.com www.google-analytics.com stats.g.doubleclick.net www.google.com analytics.google.com www.facebook.com in.hotjar.com vc.hotjar.com vc.hotjar.io i.ytimg.com www.addwish.com core.helloretail.com bat.bing.com s.kelkoogroup.net;frame-src widget.trustpilot.com www.youtube.com www.facebook.com www.googletagmanager.com tpc.googlesyndication.com vars.hotjar.com www.addwish.com;frame-ancestors 'self';font-src 'self' fonts.gstatic.com v2.zopim.com data:;img-src 'self' www.av-cables.dk maps.gstatic.com data: *.googleapis.com v2.zopim.com *.zopim.io www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.dk www.google.gl www.google.se www.google.no i.ytimg.com www.facebook.com ssl.gstatic.com www.gstatic.com www.googletagmanager.com googleads.g.doubleclick.net tpc.googlesyndication.com bat.bing.com s.kelkoogroup.net www.facebook.com analytics.google.com s.kelkoogroup.net d1pna5l3xsntoj.cloudfront.net px.ads.linkedin.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' widget.trustpilot.com maps.googleapis.com maps.gstatic.com v2.zopim.com *.zopim.com static.zdassets.com www.googletagmanager.com www.google-analytics.com googleads.g.doubleclick.net tagmanager.google.com www.googleadservices.com tpc.googlesyndication.com connect.facebook.net bat.bing.com www.google.com s.kk-resources.com cdn.clerk.io api.clerk.io static.hotjar.com script.hotjar.com d1pna5l3xsntoj.cloudfront.net ajax.googleapis.com www.addwish.com snap.licdn.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com d1pna5l3xsntoj.cloudfront.net;form-action 'self' payment.quickpay.net www.facebook.com;object-src www.youtube.com;media-src 'self' v2.zopim.com 1
default-src 'self' data: wss: *.tile.openstreetmap.org *.gstatic.com *.googleapis.com geocode.arcgis.com nominatim.openstreetmap.org sp-dir.uwn.com; style-src 'self' 'unsafe-inline' *.googleapis.com; img-src 'self' *.tile.openstreetmap.org maps.gstatic.com *.googleapis.com blog.ui.com data:; script-src 'self' data: wss: *.tile.openstreetmap.org *.gstatic.com *.googleapis.com geocode.arcgis.com nominatim.openstreetmap.org sp-dir.uwn.com 'sha256-Zc2oA+UYJ+DvoL6dBPANTH0scVupEzz5Lf3etbzNLtI=' 1
frame-ancestors 'self' *.career-inspiration.com <http://career-inspiration.com> *.pathmotion.com <http://pathmotion.com>; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.googleapis.com maxcdn.bootstrapcdn.com www.youtube.com www.googletagmanager.com *.makitamedia.com *.gstatic.com *.ytimg.com ssl.google-analytics.com connect.facebook.net www.google-analytics.com stats.g.doubleclick.net *.facebook.com *.addthis.com *.addthisedge.com *.google.com *.icmsmakita.eu *.google.nl *.fls.doubleclick.net 1
default-src 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com *.jsdelivr.net *.zdn.vn *.youtube.com *.vimeo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.gstatic.com *.zalo.me *.zdn.vn *.zaloapp.com *.facebook.net *.facebook.com *.googleapis.com *.ampproject.org *.jsdelivr.net *.youtube.com *.vimeo.com *.g.doubleclick.net; font-src 'self' *.gstatic.com *.youtube.com *.vimeo.com; media-src *; img-src * data: *.jsdelivr.net *.youtube.com *.vimeo.com; script-src-elem 'self' 'unsafe-inline' *.google.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.gstatic.com *.zalo.me *.zdn.vn *.zaloapp.com *.facebook.net *.facebook.com *.googleapis.com *.ampproject.org *.jsdelivr.net *.youtube.com *.vimeo.com *.g.doubleclick.net; frame-src 'self' *.facebook.com *.zalo.me *.google.com *.youtube.com *.vimeo.com *.g.doubleclick.net; connect-src * 1
default-src 'none'; font-src 'self'; img-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'none'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://duckduckgo.com; base-uri 'self' 1
connect-src 'self' https://*.stgairasia.com https://*.cloudfront.net https://*.gstatic.com https://*.amazonaws.com https://www.getvidi.co https://www.getvidi.co/deals/ http://web-svc https://*.airasia.com https://*.touristly.net https://*.getvidi.co https://www.getvidi.co https://loki.airasiabig.com https://sentry.io https://*.google-analytics.com https://www.googletagmanager.com https://intljs.rmtag.com https://*.apiairasia.com http://localhost:* https://*.googleapis.com https://stats.g.doubleclick.net https://securepubads.g.doubleclick.net https://*.googlesyndication.com http://www.googletagservices.com https://*.dc-storm.com https://ut.ra.linksynergy.com https://*.google.com https://*.adyen.com https://*.staticaa.com https://*.stg-apiairasia.com https://*.contentstack.io https://*.trvl-media.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; img-src data: https://*.stgairasia.com https://*.cloudfront.net https://*.gstatic.com https://*.amazonaws.com https://www.getvidi.co https://www.getvidi.co/deals/ http://web-svc https://*.airasia.com https://*.touristly.net https://*.getvidi.co https://www.getvidi.co https://loki.airasiabig.com https://sentry.io https://*.google-analytics.com https://www.googletagmanager.com https://intljs.rmtag.com https://*.apiairasia.com http://localhost:* https://*.googleapis.com https://stats.g.doubleclick.net https://securepubads.g.doubleclick.net https://*.googlesyndication.com http://www.googletagservices.com https://*.dc-storm.com https://ut.ra.linksynergy.com https://*.google.com https://*.adyen.com https://*.staticaa.com https://*.stg-apiairasia.com https://*.contentstack.io https://*.trvl-media.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.stgairasia.com https://*.cloudfront.net https://*.gstatic.com https://*.amazonaws.com https://www.getvidi.co https://www.getvidi.co/deals/ http://web-svc https://*.airasia.com https://*.touristly.net https://*.getvidi.co https://www.getvidi.co https://loki.airasiabig.com https://sentry.io https://*.google-analytics.com https://www.googletagmanager.com https://intljs.rmtag.com https://*.apiairasia.com http://localhost:* https://*.googleapis.com https://stats.g.doubleclick.net https://securepubads.g.doubleclick.net https://*.googlesyndication.com http://www.googletagservices.com https://*.dc-storm.com https://ut.ra.linksynergy.com https://*.google.com https://*.adyen.com https://*.staticaa.com https://*.stg-apiairasia.com https://*.contentstack.io https://*.trvl-media.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; upgrade-insecure-requests; worker-src 'self' https://www.getvidi.co 1
upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval'               use.typekit.net               www.youtube.com s.ytimg.com               api.flockler.com               *.disqus.com               *.google-analytics.com               www.googleadservices.com *.doubleclick.net *.google.com *.google.fi              connect.facebook.net               js-agent.newrelic.com bam.nr-data.net               *.episerver.net               *.jquery.com               *.visualwebsiteoptimizer.com               occhat.elisa.fi              *.adform.net              atria-oyj.mynewsdesk.com              api.siteattention.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com siteattentionstorage.blob.core.windows.net              ajax.googleapis.com ajax.aspnetcdn.com              *.googletagmanager.com              *.simulator.palmu.fi               *.cookiebot.com 1
default-src 'self'; connect-src *; font-src *; frame-src *; img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
frame-ancestors 'self' *.yourstack.com 1
script-src 'unsafe-inline' http: https: data: https://*.captrust.com https://www.captrust.com https://*.google.com https://*.googleapis.com https://*.googleanalytics.com https://*.clickdimensions.com https://*.gstatic.com; style-src 'unsafe-inline' http: https: data: https://*.captrust.com https://*.googleapis.com https://*.gstatic.com; img-src http: https: data:; font-src http: https: data:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests 1
frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://player.vimeo.com; img-src 'self' https://ssl.google-analytics.com data:; default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://ssl.google-analytics.com; connect-src 'self' https://api.stripe.com https://ssl.google-analytics.com; frame-ancestors 'self' 1
frame-ancestors 'none'; default-src 'self' https://*.aol.com https://*.yahoo.com https://*.yimg.com; img-src * data:; script-src 'self' 'unsafe-inline' 'nonce-qvou493rF4dOhlyIuiAALQ==' 'unsafe-eval' https://*.yahoo.com https://*.yimg.com https://*.aol.com https://*.aolcdn.com *.oath.com *.google.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net *.googlesyndication.com https://sb.scorecardresearch.com bat.bing.com *.demdex.net; style-src 'self' 'unsafe-inline' https://*.yimg.com; object-src *; connect-src *; font-src * data:; frame-src 'self' https://*.youtube.com https://s.yimg.com https://*.yahoo.com *.g.doubleclick.net *.googlesyndication.com; 1
default-src 'self'; script-src 'self' https://cdn.walkme.com https://playerserver.walkme.com https://ec.walkme.com https://rapi.walkme.com https://papi.walkme.com 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' https://ec.walkme.com https://cdn.walkme.com;img-src 'self' https://d3sbxpiag177w8.cloudfront.net https://d2qhvajt3imc89.cloudfront.net;frame-src 'self' https://cdn.walkme.com 1
frame-ancestors https://*.canalplus.com https://*.cnews.fr 1
base-uri 'self'     support.speakermatch.com ;     default-src 'self' 'unsafe-inline' 'unsafe-eval';    connect-src 'self'         botsrv.com         www.paypalobjects.com         www.paypal.com         *.google-analytics.com         *.googleapis.com         *.gstatic.com         *.fontawesome.com         ;     font-src 'self' data:         www.paypalobjects.com         *.bootstrapcdn.com         *.fontawesome.com         *.gstatic.com         support.speakermatch.com         best-virtual-speakers.com         ;     img-src * data:;     frame-src *;     media-src *;     style-src 'self' 'unsafe-inline'         static.botsrv.com         downloads.mailchimp.com         cdn.jsdelivr.net         www.gstatic.com         *.cloudflare.com         speakermatch.com         *.speakermatch.com         *.googleapis.com         *.bootstrapcdn.com         *.fontawesome.com         code.jquery.com         best-virtual-speakers.com         s3.amazonaws.com/agilecrm/         ;    script-src 'self' 'unsafe-inline' 'unsafe-eval'         cdnjs.cloudflare.com         static.botsrv.com         chimpstatic.com         downloads.mailchimp.com         mc.us2.list-manage.com         paypal.adtag.where.com          *.paypalobjects.com         *.paypal.com         *.taboola.com         goodfirms.co         www.goodfirms.co         analytics.twitter.com         *.g.doubleclick.net         rules.quantcount.com         connect.facebook.net         static.ads-twitter.com         snap.licdn.com         amplify.outbrain.com         code.jquery.com         *.fontawesome.com         *.cloudflare.com         speakermatch.ladesk.com         speakermatch.com         *.speakermatch.com         *.bootstrapcdn.com         *.google-analytics.com         *.googleapis.com         *.googletagmanager.com         *.gstatic.com         *.googleadservices.com         *.cloudfront.net         *.quantserve.com         certify-js.alexametrics.com         best-virtual-speakers.com         speakermatch.agilecrm.com         stats2.agilecrm.com         s3.amazonaws.com/agilecrm/         s3.amazonaws.com/agilewebgrabbers/         ;  1
default-src 'self'; frame-src 'self' https://nhs.attendanywhere.com/ *.nhs.uk/ *.facebook.com/ *.youtube.com/ *.vimeo.com/ *.google.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.amazonaws.com https://cdnjs.cloudflare.com/ https://www.google-analytics.com/ https://connect.facebook.net/ https://feeds.trac.jobs/ *.google.com/ *.googleapis.com *.gstatic.com *.cqc.org.uk; font-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ https://feeds.trac.jobs/ *.googleapis.com  *.gstatic.com *.cqc.org.uk; img-src * data:; object-src 'self' blob:; connect-src 'self' https://nhs.attendanywhere.com https://feeds.trac.jobs/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://ads.adjust-net.jp https://apis.google.com https://b92.yahoo.co.jp https://connect.facebook.net https://cre.adjust-net.jp https://custom.search.yahoo.co.jp https://d.line-scdn.net https://fonts.gstatic.com https://googleads.g.doubleclick.net https://i.yimg.jp https://i.ytimg.com https://img.macromill.com https://ot.ca-mpr.jp https://platform.twitter.com https://s.yjtag.jp https://scontent-nrt1-1.xx.fbcdn.net https://sitest.jp https://social-plugins.line.me https://ssl.google-analytics.com https://ssl.gstatic.com https://static.doubleclick.net https://static.xx.fbcdn.net https://staticxx.facebook.com https://stats.g.doubleclick.net https://syndication.twitter.com https://torimochi.line-apps.com https://www.facebook.com https://www.google.co.jp https://www.google.com https://www.google-analytics.com https://www.googleapis.com https://www.youtube.com https://yjtag.yahoo.co.jp www.googletagmanager.com code.jquery.com ajax.googleapis.com cdnjs.cloudflare.com www.googleadservices.com vjs.zencdn.net api.socialplus.jp production-widget.socialplus.jp e4a5a31c-921a-4d46-84ac-4cade28b6d69.cloudapp.net staging.movieplus.jp cse.google.com cdn.gaie.jp; img-src 'self' syndication.twitter.com custom.search.yahoo.co.jp i.yimg.jp i.ytimg.com s.yimg.jp http://www.movieplus.jp www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net www.google.com www.google.co.jp dummyimage.com www.banger.jp 76be9462a992510f6f207ce26b54e101.cdnext.stream.ne.jp www.googleapis.com clients1.google.com encrypted-tbn0.gstatic.com encrypted-tbn1.gstatic.com encrypted-tbn2.gstatic.com encrypted-tbn3.gstatic.com ssl.gstatic.com cdn.gaie.jp pbs.twimg.com data:; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com api.socialplus.jp production-widget.socialplus.jp http://fonts.googleapis.com www.google.com cdn.gaie.jp; frame-src 'self' platform.twitter.com social-plugins.line.me staticxx.facebook.com syndication.twitter.com www.facebook.com bid.g.doubleclick.net custom.search.yahoo.co.jp www.youtube.com cse.google.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' www.google-analytics.com www.googleapis.com 104092656e9f45eb2bf5e2962e5778f2.cdnext.stream.ne.jp api.movieplus.jp api.gaie.jp stats.g.doubleclick.net; worker-src blob:; media-src blob: 1
default-src https:; connect-src https: wss://*.examsoft.io; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; font-src 'self' https://fonts.gstatic.com https://www.wiris.net; 1
frame-ancestors 'self' mein.kabelplus.at newapp.etracker.com 1
default-src 'self' *.fprimecapital.com fprimecapital.com https://secure.gravatar.com https://live-f-prime-capital.pantheonsite.io/;script-src 'self' *.fprimecapital.com fprimecapital.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://live-f-prime-capital.pantheonsite.io/ 'unsafe-inline';img-src 'self' *.fprimecapital.com fprimecapital.com https://www.google-analytics.com https://stats.g.doubleclick.net https://live-f-prime-capital.pantheonsite.io/ data:;style-src 'self' *.fprimecapital.com fprimecapital.com https://live-f-prime-capital.pantheonsite.io/ 'unsafe-inline'; 1
frame-ancestors 'self' http://remit.gkpge.pl http://www.remit.gkpge.pl https://remit.gkpge.pl https://www.remit.gkpge.pl 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; font-src 'self' https: data:; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https://10188242.fls.doubleclick.net/ https://www.youtube.com https://www.google.com https://*.rlets.com https://commitchange.com https://us.commitchange.com 1
child-src 'self' www.youtube-nocookie.com *.youtube.com www.google.com blob:; default-src 'self'; font-src 'self' data:; img-src 'self' data: https://*.wien.gv.at/ https://i.ytimg.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.youtube-nocookie.com *.ytimg.com www.google.com www.gstatic.com; style-src 'self' 'unsafe-inline'; 1
frame-ancestors *.fujitsugeneral.com.au fga.localtest.me fga-staging.azurewebsites.net fga-prod.azurewebsites.net fga-prod-ds.azurewebsites.net; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google-analytics.com *.google.co.in *.herokuapp.com *.ravepay.co *.flutterwave.com *.stripe.com *.atfawry.com *.google.com  *.facebook.net wss://*.kayako.net:* wss://*.tidio.co:* *.tidio.co *.tidiochat.com https://tawk.to/ *.kayakocdn.com *.kayako.com *.kayako.net *.cloudfront.net *.onwebchat.com https://cdnjs.cloudflare.com/ajax/libs/socket.io/1.4.5/socket.io.min.js  wss://*.citruspay.com:* wss://*.google.co:* *.citruspay.com wss://*.fawrystaging.com wss://*.atfawry.com wss://*.fawry.com wss://*.youtube.com:* *.youtube.com wss://*.tawk.to:* *.tawk.to *.facebook.com *.fawrystaging.com *.mastercard.com.au *.fawry.com atfawry.fawrystaging.com *.facebook.net *.mastercard.com *.razorpay.com *.google-analytics.com *.securecode.com  *.google.com *.dhru.com *.paypal.com *.googletagmanager.com ; img-src * data:; font-src * data: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ravelry.com https://www.ravelry.com *.ravelrycache.com *.hotjar.com *.doorbell.io *.crazyegg.com https://*.ravelrycache.com https://*.chatlio.com https://*.hotjar.com https://*.raygun.io https://*.pusher.com https://*.frontapp.com https://apis.google.com https://www.amazon.com https://www.dropbox.com *.googleapis.com https://*.googleapis.com *.google-analytics.com https://www.google.com *.gstatic.com https://maps.gstatic.com maps.googleapis.com maps.google.com https://ban.nr-data.net bam.nr-data.net *.newrelic.com https://*.newrelic.com https://*.twitter.com connect.facebook.net *.facebook.com *.pinterest.com https://*.hotjar.com  https://*.pinterest.com; object-src 'self' *.ravelry.com *.macromedia.com *.etsy.com *.youtube.com https://*.youtube.com https://*.vimeo.com *.vimeo.com *.vimeocdn.com *.vimeo.com *.crazyegg.com *.gstatic.com *.raygun.io; frame-src 'self' https://*.facebook.com https://*.hotjar.com  https://docs.google.com https://accounts.google.com https://www.amazon.com https://*.spotify.com https://*.buffer.com https://player.vimeo.com *.vimeo.com *.vimeocdn.com *.youtube.com https://*.youtube.com vine.co *.google.com https://*.twitter.com *.facebook.com *.pinterest.com chromenull://* chromeinvoke://* webviewprogressproxy://*; connect-src 'self' *.ravelry.com https://www2.ravelry.com doorbell.io:443 *.crazyegg.com https://*.raygun.io https://bam.nr-data.net https://*.hotjar.com https://*.dropbox.com https://www.ravelry.com wss://websocket.ravelry.com wss://websocket2.ravelry.com wss://*.hotjar.com translate.googleapis.com syndication.twitter.com https://*.chatlio.com https://*.pusher.com *.pusherapp.com; 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-KmBOC8eS9oE8WkAahPkfAw' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
script-src 'unsafe-inline' 'unsafe-eval' https://*.eskimoz.fr  https://*.eskimoz.be https://academy.eskimoz.fr https://*.eskimoz.de https://*.eskimoz.nl https://*.eskimoz.co.uk https://*.eskimoz.es https://*.eskimoz.it https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://maps.googleapis.com https://static.ads-twitter.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://sjs.bizographics.com https://px.ads.linkedin.com https://tagmanager.google.com https://analytics.twitter.com https://snap.licdn.com https://px.ads.linkedin.com https://tpc.googlesyndication.com https://www.google.com https://www.gstatic.com ; base-uri 'self'; 1
default-src data: https: 'self' 'unsafe-eval' 'unsafe-inline'; img-src blob: data: https: 'self' 'unsafe-eval' 'unsafe-inline' 1
default-src 'self' 'unsafe-inline' www.google-analytics.com www.gstatic.com translate.googleapis.com http://www.skillsconnect.gov.sg https://www.skillsconnect.gov.sg; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com; 1
upgrade-insecure-requests; form-action: http://go.aclara.com/*; 1
default-src 'none'; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; worker-src https: blob:; child-src https: blob:; style-src https: data: 'unsafe-inline' 'unsafe-eval'; img-src https: data: 'unsafe-inline'; font-src https:; object-src blob: 'self'; base-uri 'none'; frame-ancestors 'self'; connect-src blob: 'self'; frame-src 'self' *.youtube.com *.vimeo.com docs.google.com www.google.com *.usti-nad-labem.cz hlasenirozhlasu.cz *.strekov.cz *.mag-ul.cz; 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-pACsH3WPVWMjbVN0SmrN8A' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src https:; connect-src https: wss:; font-src https: data:; frame-src https:; frame-ancestors https:; img-src https: data: blob:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:;  1
default-src 'self' http: https: data: blob: style-src: script-src: 'unsafe-inline' 'unsafe-eval' 1
img-src 'self' 'unsafe-inline' *.nsimg.net pic.aebn.net www.google.com www.google-analytics.com stats.g.doubleclick.net tagmanager.google.com www.googletagmanager.com *.gstatic.com ssl.gstatic.com data: *.google.com *.google.ca *.google.de *.google.com.tw *.google.com.br *.google.com.fr *.google.co.uk *.google.co.in *.google.fr *.google.com.mx *.google.ch *.google.com.au *.google.es *.stats.g.doubleclick.net *.google.it *.google.nl *.google.ru *.google.no *.google.co.jp *.google.com.pe *.google.be *.google.at *.google.se *.google-analytics.com *.google.dk *.google.ie *.google.co.kr *.google.cl *.google.fi *.google.com.ph *.google.cz *.googletagmanager.com *.google.com.ua *.google.co.il *.google.com.ar *.google.gr *.google.sk *.google.com.pk *.google.com.co *.google.co.nz *.google.com.mm *.google.com.eg *.google.com.sg *.google.com.hk *.google.co.id *.google.ro *.google.co.za *.google.is *.google.com.pr *.google.pt *.google.pl *.google.co.th *.google.com.uy *.google.kz *.google.co.tz *.google.hr *.google.com.my *.google.ae  *.google.cat;  style-src 'self' 'unsafe-inline' pic.aebn.net fonts.googleapis.com tagmanager.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.google.com www.googletagmanager.com www.google-analytics.com www.gstatic.com tagmanager.google.com translate.googleapis.com; object-src 'self' 'unsafe-inline'; frame-ancestors www.googletagmanager.com; 1
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests 1
form-action 'self' https://go.pardot.com https://submit-irm.trustarc.com; 1
frame-ancestors webvisor.com 'self' 1
frame-ancestors 'self' https://*.tenniswarehouse-europe.com https://*.tennis-warehouse.com https://*.runningwarehouse.com https://*.runningwarehouse.eu https://www.runningwarehouse.de https://www.runningwarehouse.it https://www.runningwarehouse.es https://www.runningwarehouse.fr; 1
default-src 'self' data: 'unsafe-inline' 'unsafe-hashes'; script-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; style-src * 'self' data: 'unsafe-inline' 'unsafe-hashes'; img-src * 'self' data:; font-src *; connect-src * 'self'; media-src * 'self'; object-src * 'self'; prefetch-src * 'self'; child-src * 'self'; frame-src * 'self'; worker-src * 'self'; frame-ancestors * 'self'; form-action 'self' 1
default-src https:;script-src https: 'unsafe-inline' 'unsafe-eval';style-src https: 'unsafe-inline' 1
block-all-mixed-content; frame-ancestors 'self' fantasticservicesgroup.com.au cdn.fantasticservicesgroup.com.au api.fantasticservicesgroup.com.au obf.fantasticservicesgroup.com.au accounts.fantasticservicesgroup.com.au wss://*.hotjar.com cobrowsing.freshchat.com; 1
default-scr 'self' 1
upgrade-insecure-requests; default-src 'self' 'unsafe-inline' https://c.disquscdn.com https://disqus.com/; child-src 'self' https://www.google.com/ https://disqus.com/ https://www.youtube.com/ https://www.podbean.com/ https://www.facebook.com/ https://platform.twitter.com/ https://submit.jotform.com/ https://submit.jotform.us/ https://*.partnerbookingkit.com/; connect-src 'self' http://sentry.utdev.com/ https://links.services.disqus.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://polo.feathr.co/ https://bam.nr-data.net/ https://www.googletagmanager.com/ https://*.partnerbookingkit.com/ https://sentry.utdev.com/api/12/store/; font-src 'self' https:; frame-src 'self' https://ausa-a.akamaihd.net/ https://submit.jotform.com/ https://*.jotform.com/; img-src 'self' https: data:; media-src 'self' https:; object-src 'self'; script-src 'self' 'unsafe-eval' https://form.jotform.com/* https://form.jotform.com/ https://code.jquery.com/ https://secure.polldaddy.com/ https://www.googletagmanager.com/ https://cdn.jotfor.ms/ https://www.google-analytics.com/ https://snap.licdn.com/ https://*.partnerbookingkit.com/ addtocalendar.com ajax.googleapis.com cdnjs.cloudflare.com chosen.jquery.js https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://platform.twitter.com https://polyfill.io https://static.addtoany.com https://unpkg.com https://use.fontawesome.com https://ws.sharethis.com mdbootstrap.com stackpath.bootstrapcdn.com; script-src-elem * 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://*.typekit.net https://tagmanager.google.com https://cdn.jotfor.ms/ https://*.partnerbookingkit.com/ addtocalendar.com chosen.css fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://use.typekit.net mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com; style-src-elem * 'unsafe-inline'; worker-src 'self' https://www.google.com/ https://disqus.com/ https://www.youtube.com/ https://www.podbean.com/ https://www.facebook.com/ https://platform.twitter.com/ https://submit.jotform.com/ https://submit.jotform.us/ https://www.googletagmanager.com/; form-action 'self' https://login.salesforce.com/ https://submit.jotform.us/ https://ausa.my.salesforce.com/ https://submit.jotform.com/ https://form.jotform.com/; frame-ancestors 'self'; report-uri https://sentry.utdev.com/api/12/security/?sentry_key=4b68ad836f66459b9f72b9694051d603&sentry_environment=Production&sentry_release=latest 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https:; object-src 'none'; base-uri 'none'; img-src *; 1
frame-ancestors 'self' http://werbeareal.de http://werbe-areal.de http://werbebazar.de http://werbe-bazar.de https://werbeareal.de https://werbe-areal.de https://werbebazar.de https://werbe-bazar.de http://www.imposa.es http://thesegifts.eu; 1
default-src 'self' https://assets.garantme.fr;connect-src 'self' https://api.garantme.fr https://*.dotaki.com https://api.rollbar.com https://*.amazonaws.com;base-uri 'self';block-all-mixed-content;font-src 'self' https://assets.garantme.fr https: data:;frame-ancestors 'self';frame-src 'self' https://widget.trustpilot.com https://js.stripe.com https://*.yousign.com/;img-src 'self' data: https://purecatamphetamine.github.io https://*.amazonaws.com https://assets.garantme.fr;object-src 'none';script-src 'self' https://assets.garantme.fr https://widget.trustpilot.com https://www.googletagmanager.com https://tag.dotaki.com 'unsafe-inline' https://js.stripe.com;script-src-attr 'none';style-src 'self' https://assets.garantme.fr https: 'unsafe-inline';upgrade-insecure-requests;worker-src 'self' blob: 1
default-src 'self' *.cigna.com; script-src 'self' *.cigna.com  'unsafe-inline' 'unsafe-eval'; style-src 'self' *.cigna.com 'unsafe-inline'; img-src 'self'  data: 'unsafe-inline'; connect-src 'self'; font-src 'self' *.cigna.com; object-src 'self'; media-src *.cigna.com; child-src 'self' *.cigna.com; form-action 'self'; frame-ancestors 'self' *.cigna.com; allow-forms allow-same-origin allow-scripts allow-popups 1
frame-ancestors 'self' www.amway.com.au www.amway.co.nz https://pos.amway.com.au https://pos.amway.co.nz https://pos.amway.com.vn www.amway.com.vn www.amway.com.ph admin.amway.com.ph 1
frame-ancestors 'self' https://www.carealotpetresorts.com/ 1
default-src 'self'; connect-src 'self' https://*.moerdijk.nl https://*.obi4wan.com/ wss://ws-eu.pusher.com/ https://*.pusher.com/ https://*.googleapis.com https://atlas.brabant.nl; font-src 'self' data: https://fonts.gstatic.com https://js.pusher.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://m.youtube.com/ https://youtu.be/ https://*.readspeaker.com; img-src 'self' data: https://*.moerdijk.nl https://www.vrmwb.nl https://www.vrmwb.nl/sluiten.png https://geoservices.rijkswaterstaat.nl https://geodata.nationaalgeoregister.nl https://*.siteimproveanalytics.io https://*.siteimprove.com https://f1-eu.readspeaker.com https://maps.gstatic.com https://www.gstatic.com/images *.google.com *.googleapis.com https://s3-eu-west-1.amazonaws.com https://www.gstatic.com http://maps.google.com; media-src 'self' https://*.readspeaker.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://f1-eu.readspeaker.com https://www.vrmwb.nl https://siteimproveanalytics.com https://maps.google.com https://maps.googleapis.com https://geo.moerdijk.nl https://cdnjs.cloudflare.com https://cdn.polyfill.io https://d2y613pujgeg9g.cloudfront.net https://cloudstatic.obi4wan.com https://*.pusher.com; style-src 'self' 'unsafe-inline' https://www.vrmwb.nl/vhrmwb.css https://f1-eu.readspeaker.com https://fonts.googleapis.com https://geo.moerdijk.nl https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com; report-uri https://www.moerdijk.nl/cspreport 1
default-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com cdn.jsdelivr.net www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edge.api.brightcove.com *.googleapis.com www.youtube.com youtube.com s.ytimg.com unpkg.com staticcontents.investisdigital.com ipapi.connectid.cloud; style-src 'self' 'unsafe-inline' 'unsafe-eval' viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net; img-src 'self' 'unsafe-inline' * data:; media-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com; frame-src 'self' staticcontents.investis.com www.google.com irs.tools.investis.com otp.tools.investis.com digital.feprecisionplus.com ir.tools.investis.com staticxx.facebook.com www.youtube.com w.soundcloud.com; font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.ensighten.com *.google-analytics.com *.api.brightcove.com *.tools.investis.com *.doubleclick.net  ipapi.connectid.cloud; report-uri /report-csp-violation 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://gist.github.com https://apis.google.com https://api.amplitude.com https://widget.intercom.io https://js.intercomcdn.com https://logs-01.loggly.com https://cdn.segment.com https://analytics.pgncs.notion.so https://checkout.stripe.com https://embed.typeform.com https://admin.typeform.com https://platform.twitter.com https://cdn.syndication.twimg.com; connect-src 'self' https://msgstore.www.notion.so wss://msgstore.www.notion.so https://notion-emojis.s3-us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://s3.us-west-2.amazonaws.com https://notion-production-snapshots-2.s3.us-west-2.amazonaws.com https: http: https://api.amplitude.com https://api.embed.ly https://js.intercomcdn.com https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://logs-01.loggly.com https://api.segment.io https://api.pgncs.notion.so https://checkout.stripe.com https://cdn.contentful.com https://preview.contentful.com https://images.ctfassets.net https://api.unsplash.com https://boards-api.greenhouse.io; font-src 'self' data: https://cdnjs.cloudflare.com https://js.intercomcdn.com; img-src 'self' data: blob: https: https://platform.twitter.com https://syndication.twitter.com https://pbs.twimg.com https://ton.twimg.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://github.githubassets.com https://platform.twitter.com https://ton.twimg.com; frame-src https: http:; media-src https: http: 1
style-src 'self' 'unsafe-inline' use.fontawesome.com pchilquinta.pruebas *.twimg.com stackpath.bootstrapcdn.com storage.googleapis.com fonts.googleapis.com www.google.com platform.twitter.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' api.pruebas api.chilquinta pchilquinta.pruebas chilquinta.clientes chilquinta.pagos pchilquinta.desa cdn.jsdelivr.net www.gstatic.com *.twimg.com www.google.com www.googletagmanager.com *.talkcenter.io *.twitter.com www.google-analytics.com *.googleapis.com www.youtube.com s.ytimg.com *.googleapis.com *.jquery.com cdn.datatables.net cdnjs.cloudflare.com stackpath.bootstrapcdn.com printjs-4de6.kxcdn.com data:; img-src 'self' * storage.googleapis.com data: 1
frame-ancestors 'self' https://hyundai-motors.zp.ua/ 1
script-src 'self' 'unsafe-inline' data: cdnjs.cloudflare.com *.instagram.com *.twitter.com www.googletagmanager.com tagmanager.google.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.buzzsprout.com *.google-analytics.com *.ads-twitter.com *.facebook.net *.hotjar.com dr1stk14alc8x.cloudfront.net maxcdn.bootstrapcdn.com ajax.aspnetcdn.com ajax.googleapis.com; frame-src *; connect-src 'self' *.hotjar.com wss://*.hotjar.com *.google-analytics.com stats.g.doubleclick.net *.internet.apps.samsung.com; style-src 'self' 'unsafe-inline' data: dr1stk14alc8x.cloudfront.net tagmanager.google.com maxcdn.bootstrapcdn.com translate.googleapis.com; img-src d3unf4s5rp9dfh.cloudfront.net 'self' data: *; media-src 'self' images-tv.adobe.com d3unf4s5rp9dfh.cloudfront.net 1
default-src 'none'; base-uri 'self'; child-src 'self' *.googletagmanager.com 3f5l8ze0o4j2m.cloudfront.net *.youtube.com *.youtube-no-cookie.com *.ytimg.com *.google.com www.google.com https://www.facebook.com https://staticxx.facebook.com https://stats.g.doubleclick.net https://8432189.fls.doubleclick.net; connect-src 'self' *.business.govt.nz https://www.facebook.com/tr/ https://www.google-analytics.com; frame-ancestors 'self'; font-src fonts.gstatic.com data: 'self'; form-action 'self' https://connect.facebook.com https://www.facebook.com/tr; img-src 'self' *.doubleclick.net *.google-analytics.com *.googletagmanager.com d3f5l8ze0o4j2m.cloudfront.net *.ytimg.com data: https://www.facebook.com; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' *.jquery.com *.youtube.com *.ytimg.com *.google.com *.google-analytics.com *.googletagmanager.com 'unsafe-eval' d3f5l8ze0o4j2m.cloudfront.net www.gstatic.com https://connect.facebook.net; style-src 'self' fonts.googleapis.com 'unsafe-inline'; 1
frame-src 'self' https://www.googletagmanager.com https://widget.trustpilot.com https://www.emjcd.com  https://service.force.com https://vinesse-preview.secure.force.com 1
default-src 'self' *.google.com *.gstatic.com *.bidtracer.com *.bidtracer.net *.bidtracer.biz *.google-analytics.com *.googleapis.com *.boldchat.com 127.0.0.1:* *.scanalert.com  *.johnsoncontrols.com *.kele.com *.alpscontrols.com  *.workaci.com *.carriercms.com *.shareddocs.com; frame-src 'self' *.matterport.com forms.hubspot.com *.google.com *.gstatic.com *.bidtracer.com *.bidtracer.net *.bidtracer.biz *.google-analytics.com *.googleapis.com *.boldchat.com 127.0.0.1:* *.scanalert.com  *.johnsoncontrols.com *.kele.com *.alpscontrols.com *.workaci.com; img-src 'self' data: *.ferguson.com *.google.com *.gstatic.com *.bidtracer.com *.bidtracer.net *.bidtracer.biz *.google-analytics.com *.googleapis.com *.boldchat.com 127.0.0.1:* *.scanalert.com *.hubspot.com *.hubspot.net *.amazonaws.com *.johnsoncontrols.com *.kele.com *.belimo.com *.alpscontrols.com *.workaci.com *.automatedlogic.com *.bapihvac.com *.aic-wireless.com *.dwyer-inst.com *.kmccontrols.com *.alerton.com *.honeywell.com *.kele.com *.functionaldevices.com *.veris.com *.belimo.us *.inteccontrols.com *.cloudfront.net *.fullcontact.com *.carriercms.com;script-src 'self' *.cloudfront.net *.hsadspixel.net cdnjs.cloudflare.com *.draw.io *.hsleadflows.net *.google.com *.gstatic.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net *.bidtracer.com *.bidtracer.net *.bidtracer.biz *.google-analytics.com *.googleapis.com *.boldchat.com *.hs-analytics.net *.usemessages.com forms.hubspot.com *.hs-scripts.com *.hsleadflows.net 127.0.0.1:* *.scanalert.com  *.johnsoncontrols.com *.kele.com *.alpscontrols.com *.workaci.com 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com *.googleapis.com; connect-src 'self' webflow.com *.hubapi.com *.draw.io *.pdftron.com *.webflow.com *.google.com *.gstatic.com *.bidtracer.com *.bidtracer.net *.bidtracer.biz *.google-analytics.com *.googleapis.com *.boldchat.com 127.0.0.1:* *.scanalert.com *.hubspot.com *.johnsoncontrols.com *.kele.com *.alpscontrols.com *.workaci.com; font-src 'self' data: 'unsafe-inline' *.gstatic.com *.googleapis.com; worker-src 'self' blob:; 1
block-all-mixed-content;frame-ancestors 'self';upgrade-insecure-requests; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: wss://*.hotjar.com wss://*.zopim.com http://*.hotjar.com:* http://*.hotjar.io http://*.googletagmanager.com http://*.google-analytics.com http://*.gstatic.com http://*.googleapis.com http://*.youtube.com http://*.facebook.com http://*.facebook.net http://*.ads-twitter.com http://*.twitter.com http://t.co http://*.doubleclick.net http://*.adform.net http://*.clarovideo.net http://*.claromusica.com http://*.claro.com.uy http://*.tiendaclaro.uy http://*.maplink.com.br http://*.s1gateway.com http://s1g.in/ http://www.soyclaro.com.uy http://*.google.com http://*.aspnetcdn.com http://clarovm2.eastus2.cloudapp.azure.com https://*.hotjar.com:* https://*.hotjar.io https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://*.youtube.com https://*.facebook.com https://*.facebook.net https://*.ads-twitter.com https://*.twitter.com https://t.co https://*.doubleclick.net https://*.adform.net https://*.clarovideo.net https://*.claromusica.com https://*.claro.com.uy https://*.tiendaclaro.uy https://*.maplink.com.br https://*.s1gateway.com https://s1g.in/ https://www.soyclaro.com.uy https://*.google.com https://*.aspnetcdn.com https://clarovm2.eastus2.cloudapp.azure.com; media-src mediastream:; 1
default-src 'self' wss: https://static.zdassets.com https://ekr.zdassets.com https://*.contentful.com https://*.zendesk.com https://*.kampyle.com https://*.tigocloud.net http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; frame-src 'self' https://bid.g.doubleclick.net https://*.tigocloud.net https://*.tigo.com.bo https://*.tigo.com.py https://www.youtube.com https://*.kampyle.com https://khipu.com/ https://*.hotjar.com https://*.hotjar.com:* https://*.hotjar.io https://www.reportv.com.ar https://*.crwdcntrl.net https://6493920.fls.doubleclick.net https://*.google.com https://*.tigo.com.hn; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://optimize.google.com https://www.google.com.ar https://*.tigocloud.net https://static.zdassets.com https://connect.facebook.net https://s.ytimg.com https://www.youtube.com/iframe_api https://widget-mediator.zopim.com https://*.kampyle.com https://js-agent.newrelic.com https://bam.nr-data.net http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.reportv.com.ar https://*.crwdcntrl.net https://tigo.us7.list-manage.com https://web.webpushs.com https://tigo.us18.list-manage.com https://static.ads-twitter.com https://www.gstatic.com https://cdn.epica.ai https://*.inbenta.chat https://*.inbenta.io https://*.googleoptimize.com https://ad.doubleclick.net https://cdn.smooch.io; font-src 'self' data: blob: https://fonts.gstatic.com https://*.kampyle.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.tigocloud.net https://*.inbenta.io; img-src 'self' data: blob: https://www.google-analytics.com https://googleads.g.doubleclick.net https://*.tigocloud.net https://*.contentful.com https://www.facebook.com https://*.kampyle.com https://static.zdassets.com https://www.googletagmanager.com https://images.ctfassets.net https://stats.g.doubleclick.net https://*.zopim.io https://lh3.googleusercontent.com https://platform-lookaside.fbsbx.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.tigo.com.bo https://ssl.gstatic.com https://www.gstatic.com https://cdn.sendpulse.com https://www.google.com https://www.google.com.ar https://www.google.com.bo https://www.google.com.co https://www.google.com.sv https://www.google.com.gt https://www.google.hn https://www.google.com.ni https://www.google.com.pa https://www.google.com.py https://t.co https://analytics.twitter.com https://svr.mic.edge.com.py http://openweathermap.org https://openweathermap.org https://bcp.crwdcntrl.net https://cx.atdmt.com https://ad.doubleclick.net https://*.inbenta.com https://*.inbenta.io;  style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.kampyle.com https://tagmanager.google.com https://cdn.sendpulse.com https://*.tigocloud.net https://*.inbenta.io https://*.google.com; connect-src *; 1
default-src 'self' 'unsafe-inline' *.google.com www.googletagmanager.com www.googleapis.com www.google-analytics.com assets.wogaa.sg www.adobetag.com *.facebook.com *.ampproject.org *.youtube.com *.twitter.com *.wogaa.demdex.net dpm.demdex.net wogadobeanalytics.sc.omtrdc.net cm.everesttech.net https://ton.twimg.com *.addthis.com *.mccy.gov.sg *.flickr.com https://stats.g.doubleclick.net https://amp-error-reporting.appspot.com *.ytimg.com *.google.com *.gstatic.com https://*.wogaa.sg https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com *.google.com www.googletagmanager.com www.googleapis.com www.google-analytics.com assets.wogaa.sg www.adobetag.com wogaa.demdex.net dpm.demdex.net wogadobeanalytics.sc.omtrdc.net cm.everesttech.net *.addthis.com *.mccy.gov.sg https://stats.g.doubleclick.net https://amp-error-reporting.appspot.com *.google.com *.gstatic.com https://*.wogaa.sg https://dpm.demdex.net/; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com z.moatads.com www.googletagmanager.com www.googleapis.com www.google-analytics.com assets.wogaa.sg www.adobetag.com http://platform.twitter.com connect.facebook.net *.facebook.com *.addthis.com *.syndication.twimg.com *.addthisedge.com *.ampproject.org *.youtube.com *.ytimg.com *.mccy.gov.sg *.wogaa.demdex.net *.gstatic.com https://*.wogaa.sg https://assets.adobedtm.com/; style-src 'self' 'unsafe-inline' https://assets.wogaa.sg/fonts/; font-src 'self' data: https://assets.wogaa.sg/fonts/; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.com.sg stats.g.doubleclick.net www.google-analytics.com https://wogadobeanalytics.sc.omtrdc.net/ https://cm.everesttech.net/ https://dpm.demdex.net/;  object-src 'none'; 1
default-src 'self' vk.com yastatic.net *.yandex.md *.yandex.ru *.yandex.net *.google.com *.google.ru *.googleadservices.com *.g.doubleclick.net *.googletagmanager.com *.google-analytics.com *.gstatic.com top-fwz1.mail.ru *.facebook.net *.facebook.com client.taxsee.com taximaximblog.disqus.com *.taxsee.ru 'unsafe-inline' 'unsafe-eval' data: blob:; block-all-mixed-content; upgrade-insecure-requests 1
frame-ancestors http://*.livechat.com 1
upgrade-insecure-requests; default-src europe-west1-hannoversche.cloudfunctions.net player.vimeo.com *.cookielaw.org *.onetrust.com *.opinary.com *.outbrain.com *.krxd.net *.po.intern *.crednet.de *.youtube-nocookie.com *.mouseflow.com connect.ekomi.de *.facebook.net *.facebook.com *.ytimg.com *.ctoid.net container.cdn-eso.me *.adnxs.com *.itrack.it *.hyj.mobi *.audiencemanager.de *.criteo.com *.criteo.net *.mookie1.com *.typekit.net sea.quisma.com tpc.googlesyndication.com scripts.psyma.com *.pushetta.com *.rocom.de *.plista.com *.wistia.com *.wistia.net *.zanox.com *.intelliad.de *.financeads.net *.serving-sys.com *.webmasterplan.com *.gstatic.com *.bing.com *.akamaihd.net *.realperson.de wss://*.realperson.de *.doubleclick.net *.imgix.net *.tellja.de *.google.com *.google-analytics.com *.hannoversche.de wss://*.hannoversche.de wss://*.realperson.de *.neoskop.io *.neoskop.cloud wss://*.neoskop.cloud *.litix.io *.googletagmanager.com *.youtube.com *.googleapis.com *.vhv.de *.appdynamics.com *.google.de *.exactag.com *.googleadservices.com *.adsrvr.org *.massresponse.com *.pw-footprints.de *.adrtx.net 'unsafe-inline' 'unsafe-eval' 'self' data: blob:; 1
default-src data: 'unsafe-inline' 'unsafe-eval' https:; connect-src *; object-src 'self' always; upgrade-insecure-requests 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' static.etracker.com http://code.etracker.com http://www.etracker.de; script-src-elem 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' 'unsafe-eval' *; 1
frame-ancestors 'self' insights.hotjar.com 1
default-src 'self' *.cablevision.qc.ca *.cablevision.ca *.google.com *.moneris.com *.doubleclick.net; connect-src 'self' *.cablevision.qc.ca *.cablevision.ca *.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cablevision.qc.ca *.cablevision.ca *.google.com *.gstatic.com *.google-analytics.com; img-src 'self' data: *.cablevision.qc.ca *.cablevision.ca *.gstatic.com *.google-analytics.com *.googleapis.com; style-src 'self' 'unsafe-inline' *.cablevision.qc.ca *.cablevision.ca; font-src 'self' data: *.cablevision.qc.ca *.cablevision.ca *.gstatic.com; frame-ancestors 'self' *.cablevision.qc.ca *.cablevision.ca *.moneris.com; report-uri /csp-collector.php; 1
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.samson.de 1
default-src https:; font-src https: data:; img-src https: data:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline'; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://retro.social; img-src 'self' https: data: blob: https://retro.social; style-src 'self' 'unsafe-inline' https://retro.social; media-src 'self' https: data: https://retro.social; frame-src 'self' https:; manifest-src 'self' https://retro.social; connect-src 'self' data: blob: https://retro.social https://retro.social wss://retro.social; script-src 'self' https://retro.social; worker-src 'self' blob: https://retro.social 1
frame-ancestors www.eclecticiq.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://ssl.google-analytics.com https://image-cdn.s256.dev https://log.s256.ru https://www.google-analytics.com https://cdn.polyfill.io https://connect.facebook.net; img-src 'self' data: https://maps.gstatic.com  https://maps.googleapis.com https://www.facebook.com https://api.1c.com.vn https://ssl.google-analytics.com https://i.imgur.com https://imgur.com  https://s-static.ak.facebook.com https://image-cdn.s256.dev https://log.s256.ru https://www.google-analytics.com https://cdn.polyfill.io;connect-src 'self' 'unsafe-inline' https://api.1c.com.vn https://www.facebook.com https://log.s256.ru https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://image-cdn.s256.dev https://log.s256.ru https://www.google-analytics.com https://cdn.polyfill.io; font-src 'self' https://fonts.gstatic.com; frame-src https://image-cdn.s256.dev https://log.s256.ru https://www.google-analytics.com https://cdn.polyfill.io https://www.facebook.com https://s-static.ak.facebook.com https://image-cdn.s256.dev https://log.s256.ru https://www.google-analytics.com https://cdn.polyfill.io; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ cdn.jsdelivr.net data.ajenti.com.au maps.googleapis.com ajax.googleapis.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com https://www.trybooking.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net data.ajenti.com.au *.hydro.com.au https://cloud.typography.com fonts.googleapis.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://www.trybooking.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com https://cloud.typography.com data:; img-src 'self' data.ajenti.com.au maps.gstatic.com maps.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com; media-src 'self' data: blob:; frame-src 'self' https://www.trybooking.com https://www.youtube.com/ https://data.ajenti.com.au/ https://w.soundcloud.com https://www.google.com/recaptcha/; child-src 'self' *.hydro.com.au data.ajenti.com.au https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://cloud.typography.com https://www.trybooking.com; connect-src 'self' accounts.google.com wss://data.ajenti.com.au https://data.ajenti.com.au https://*.dec.sitefinity.com *.mktoresp.com *.google-analytics.com; 1
frame-ancestors 'self' https://partner.easybell.de https://partner-production.easybell.de http://localhost https://partner-feature.easybell.de; 1
default-src 'self' ; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.servmetric.com *.govmetric.com  *.obi4wan.com *.pusher.com https://cdn.siteimprove.net/cms/overlay.js siteimproveanalytics.com siteimprove.com; object-src 'self'; style-src 'self' 'unsafe-inline' *.servmetric.com *.govmetric.com; img-src 'self' data: *.servmetric.com *.govmetric.com *.obi4wan.com *.amazonaws.com *.siteimprove.com *.servmetric.com *.govmetric.com *.siteimproveanalytics.io; media-src 'self'; frame-src 'self' *.servmetric.com *.govmetric.com ; frame-ancestors 'self'; child-src 'self'; font-src 'self' data: *.googleusercontent.com; connect-src 'self' *.servmetric.com *.obi4wan.com *.pusher.com wss://*.pusher.com; report-uri /report-csp-violation 1
frame-ancestors https://*.db.com https://*.bhw.de 1
script-srс 'self' vk.com mc.yandex.ru; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://qrokes.com/ https://*.gravatar.com/  https://github.githubassets.com/ https://*.qrokes.com/ https://*.twimg.com/ https://*.twitter.com/ https://*.googleapis.com/ www.google-analytics.com/ www.google.com/ https://www.googletagmanager.com/ *.gstatic.com/ https://*.w.org/ 1
default-src 'self' 'unsafe-inline' *.google-analytics.com *.calendly.com *.hotjar.com:* *.hotjar.io 'unsafe-eval' 1
script-src 'unsafe-eval' 'self'; worker-src blob:; child-src blob:; style-src 'unsafe-inline' 'self' 1
default-src 'self' 'strict-dynamic'; connect-src 'self' https://www.google-analytics.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://cdn.cookielaw.org; font-src 'self' data: https://cdn.jsdelivr.net https://fonts.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; frame-src 'self' https://www.youtube.com https://www.youku.com https://player.youku.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://www.google.com https://player.youku.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://cdn.cookielaw.org https://geolocation.onetrust.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://player.youku.com https://static.hotjar.com https://script.hotjar.com https://cdn.jsdelivr.net https://js-agent.newrelic.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://player.youku.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://player.youku.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; frame-ancestors 'self' 1
frame-ancestors 'self' http://www.viadeo.com http://fr.viadeo.com/ https://www.viadeo.com https://fr.viadeo.com/ ; 1
default-src 'self';frame-src 'self' gateway.zscloud.net vars.hotjar.com onlinebooking.mydentist.co.uk onlinebooking.mydentist.co.uk www.facebook.com outlook.office365.com apply.v12finance.com www.youtube.com;style-src 'self' 'unsafe-inline' gateway.zscloud.net hello.myfonts.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com gateway.zscloud.net platform.twitter.com stats.g.doubleclick.net translate.google.com googleads.g.doubleclick.net www.googletagmanager.com www.googleadservices.com connect.facebook.net script.hotjar.com static.hotjar.com www.google-analytics.com www.patientcomms.co.uk www.gstatic.com static.criteo.net maps.googleapis.com;img-src 'self' data: blob: gateway.zscloud.net i.ytimg.co onlinebooking.mydentist.co.uk stats.g.doubleclick.net www.facebook.com maps.googleapis.com www.google-analytics.com www.google.com www.google.co.uk www.googletagmanager.com;connect-src 'self' api.opencagedata.com 1
default-src 'self' http://www.cmbwinglungbank.com https://www.cmbwinglungbank.com http://ac.cmbwinglungbank.com https://ac.cmbwinglungbank.com https://www.cmbwinglungsec.com http://www.cmbwinglungsec.com http://www.winglungbank.com https://www.winglungbank.com http://ac.winglungbank.com https://ac.winglungbank.com https://www.winglungsec.com https://www.winglungfutures.com http://www.winglungsec.com http://www.winglungfutures.com fc10.etwealth.com http://cmblive.hlslive.zh.cmbchina.com https://demo02.etwealth.com http://demo02.etwealth.com https://m2.cmbwinglungbank.com *.cmbchina.com https://cms.aqumon.com https://push.cmbwinglungbank.com;style-src 'self' 'unsafe-inline';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com; frame-ancestors 'self' fc10.etwealth.com http://cmblive.hlslive.zh.cmbchina.com https://hkwallet.moneydata.hk *.winglungbank.com *.cmbwinglungbank.com *.cmbwinglungsec.com *.winglungsec.com *.cmbchina.com https://cms.aqumon.com; 1
frame-ancestors 'self' *.embedsocial.com; 1
script-src *.sentry-cdn.com *.b2brain.com *.nr-data.net *.ytimg.com *.newrelic.com *.googletagmanager.com *.fullstory.com *.youtube.com *.tidiochat.com *.tidio.co *.doubleclick.net cbandrey2static.s3.amazonaws.com *.google-analytics.com *.googleadservices.com  optimize.google.com www.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval';style-src cbandrey2static.s3.amazonaws.com *.b2brain.com 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com *.google.com *.youtube.com; 1
report-uri https://grepular.report-uri.com/r/d/csp/enforce; default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' 1
default-src 'self' style-src 'unsafe-inline' 1
frame-ancestors *.2checkout.com *.2co.com *.avangate.com 1
default-src https: 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: https://*.fontcdn.ir; img-src * 'self' data:; connect-src  'self' wss://*.raychat.io https://*.raychat.io https://*.mouseflow.com https://*.neshan.org;  frame-ancestors 'self' https://*.enamad.ir; 1
default-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; object-src https:; style-src 'unsafe-inline' https:; img-src https: data:; media-src https:; frame-src https: ; worker-src https: data: blob:; connect-src https: wss: blob:; font-src https: data:; 1
default-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://troopers.de https://download.ernw-insight.de; object-src 'none' 1
script-src 'nonce-V7/fvHNXbFq4ay43YmANbA' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://www.google-analytics.com/analytics.js https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport 1
default-src 'self' www.google-analytics.com app-eu.readspeaker.com rstts-eu.readspeaker.com www.gstatic.com media-eu.readspeaker.com stats.g.doubleclick.net; child-src 'self' app-eu.readspeaker.com rstts-eu.readspeaker.com www.google.com stats.g.doubleclick.net media-eu.readspeaker.com;  script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.perplex.nl www.gstatic.com maps.googleapis.com www.google.com; style-src 'self' 'unsafe-inline' www.gstatic.com fonts.googleapis.com; img-src 'self' data: services.perplex.eu www.google-analytics.com www.perplex.nl www.gstatic.com mt.googleapis.com maps.gstatic.com ssl.gstatic.com maps.googleapis.com lh3.googleusercontent.com lh4.googleusercontent.com lh5.googleusercontent.com lh6.googleusercontent.com khms0.googleapis.com khms1.googleapis.com stats.g.doubleclick.net; font-src 'self' data: fonts.gstatic.com; form-action 'self'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.google-analytics.com https://google-analytics.com https://*.doubleclick.net https://*.gstatic.com https://*.google.com/ https://*.googleapis.com/ https://maxcdn.bootstrapcdn.com/ https://*.sharethis.com https://*.facebook.net https://*.facebook.com https://*.fbcdn.net https://*.googleusercontent.com https://googleusercontent.com https://*.youtube.com/ https://*.gravatar.com https://code.jquery.com/ https://cdnjs.cloudflare.com/ https://*.twitter.com/ https://api.instagram.com https://*.cdninstagram.com https://s.w.org https://ps.w.org/ https://api.myparcel.nl/ https://www.googletagmanager.com/ https://www.googleadservices.com/ https://www.google.nl/ https://cdn.datatables.net/ https://wordpress.com https://*.wp.com https://use.fontawesome.com/ https://edgewebpages.com/ https://webchat.missiveapp.com/ http://demo.startup-company.cmsmasters.net/ 1
default-src self;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://d3js.org https://unpkg.com https://ajax.googleapis.com https://cdnjs.cloudflare.com;img-src 'self' https://www.google-analytics.com https://api.producthunt.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com;font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com;connect-src 'self' https://docs.google.com https://www.google-analytics.com https://stats.g.doubleclick.net;frame-src https://www.google.com https://www.gstatic.com https://www.youtube.com;object-src none; 1
default-src 'self' aclu.org *.aclu.org peoplepower.org *.peoplepower.org *.mapbox.com dev-people-power.pantheonsite.io test-people-power.pantheonsite.io heapanalytics.com *.heapanalytics.com; style-src 'self' 'unsafe-inline' aclu.org *.aclu.org peoplepower.org *.peoplepower.org dev-people-power.pantheonsite.io test-people-power.pantheonsite.io heapanalytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' aclu.org *.aclu.org peoplepower.org *.peoplepower.org *.mapbox.com dev-people-power.pantheonsite.io test-people-power.pantheonsite.io heapanalytics.com *.heapanalytics.com; img-src 'self' data: blob: aclu.org *.aclu.org peoplepower.org *.peoplepower.org *.mapbox.com dev-people-power.pantheonsite.io test-people-power.pantheonsite.io heapanalytics.com 1
default-src 'self' https://*.wogaa.sg https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/;frame-src 'self' forms.cwp.gov.sg *.youtube.com https://*.dcube.cloud/ https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/;media-src 'self' *.youtube.com *.googlevideo.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.wogaa.sg https://assets.adobedtm.com/ googleads.g.doubleclick.net *.google-analytics.com;img-src 'self' data: https://wogadobeanalytics.sc.omtrdc.net/ https://cm.everesttech.net/ https://dpm.demdex.net/ *.onemap.sg *.fbcdn.net i.ytimg.com i.imgur.com yt3.ggpht.com *.google-analytics.com;connect-src 'self' https://*.wogaa.sg *.juicer.io graph.facebook.com *.youtube.com https://dpm.demdex.net/;style-src 'self' 'unsafe-inline' https://assets.wogaa.sg/fonts/ *.youtube.com;font-src 'self' data: https://assets.wogaa.sg/fonts/ fonts.gstatic.com *.juicer.io; 1
default-src 'self' blob: *.fitch.group; frame-ancestors 'self' *.fitchratings.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net/npm/css-vars-ponyfill@2 vjs.zencdn.net/7.3.0/video.js use.fontawesome.com ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js *.jsdelivr.net www.googletagmanager.com www.google-analytics.com fitchconnect.piwikpro.com cdn.polyfill.io  *.fitch.group *.brightcove.net *.brightcove.com munchkin.marketo.net your.fitchratings.com c.evidon.com cdn2.funnelenvy.com script.crazyegg.com snap.licdn.com *.clearbit.com *.idio.co *.googletagmanager.com *.google-analytics.com fitchconnect.piwikpro.com cdn.polyfill.io *.brightcove.net *.brightcove.com munchkin.marketo.net your.fitchratings.com c.evidon.com cdn2.funnelenvy.com script.crazyegg.com snap.licdn.com *.clearbit.com *.idio.co;style-src 'self' 'unsafe-inline' blob: *.fitch.group your.fitchratings.com fonts.googleapis.com fonts.googleapis.com vjs.zencdn.net/7.7.6/video-js.css; connect-src 'self' blob: *.fitch.group *.brightcove.com *.brightcove.net 732-ckh-767.mktoresp.com fx.fitchgroup.co *.boltdns.net *.akamaihd.net *.crazyegg.com *.idio.co *.brightcovecdn.com *.marketo.net your.fitch.group c.evidon.com *.funnelenvy.com www.google-analytics.com fonts.googleapis.com *.piwikpro.com snap.licdn.com images.ctfassets.net fonts.gstatic.com stats.g.doubleclick.net; prefetch-src 'self' *.funnelenvy.com 732-ckh-767.mktoresp.com *.boltdns.com *.betrad.com *.idio.co ga.clearbit.com house-fastly-signed-us-east-1-prod.brightcovecdn.com c.evidon.com fitchconnect.piwikpro.com munchkin.marketo.net snap.licdn.com script.crazyegg.com www.google-analytics.com www.googletagmanager.com *.brightcove.com; img-src 'self' data: images.ctfassets.net *.boltdns.net metrics.brightcove.com www.google-analytics.com stats.g.doubleclick.net l.betrad.com fitchconnect.piwikpro.com *.linkedin.com p.adsymptotic.com *.idio.co your.fitch.group *.fitch.group httpsak-a.akamaihd.net; font-src 'self' data: *.fitch.group fonts.gstatic.com; frame-src 'self' *.fitch.group infogram.com e.infogram.com infogram-download-eu.s3.eu-west-1.amazonaws.com infogram-download-us2.s3.eu-west-1.amazonaws.com your.fitch.group;media-src 'self' blob: *.fitch.group videos.ctfassets.net *.akamaihd.net manifest.prod.boltdns.net;object-src 'none' 1
connect-src 'self' https://*.karolina.io http://*.karolina.io *.karolina.io https://vimeo.com http://vimeo.com vimeo.com https://*.nets.eu http://*.nets.eu *.nets.eu https://*.typekit.net http://*.typekit.net *.typekit.net; font-src 'self' https://*.typekit.net http://*.typekit.net *.typekit.net data:; img-src 'self' https://cdn.holvi.com http://cdn.holvi.com cdn.holvi.com https://s3-eu-west-1.amazonaws.com http://s3-eu-west-1.amazonaws.com s3-eu-west-1.amazonaws.com https://*.karolina.io http://*.karolina.io *.karolina.io https://mesenaatti.me http://mesenaatti.me mesenaatti.me https://*.youtube.com http://*.youtube.com *.youtube.com https://*.facebook.com http://*.facebook.com *.facebook.com https://*.google.com http://*.google.com *.google.com https://*.twitter.com http://*.twitter.com *.twitter.com https://*.twimg.com http://*.twimg.com *.twimg.com https://*.google-analytics.com http://*.google-analytics.com *.google-analytics.com https://about http://about about https://*.typekit.net http://*.typekit.net *.typekit.net data:; script-src 'self' https://*.youtube.com http://*.youtube.com *.youtube.com https://*.ytimg.com http://*.ytimg.com *.ytimg.com https://*.facebook.net http://*.facebook.net *.facebook.net https://*.jquery.com http://*.jquery.com *.jquery.com https://*.twitter.com http://*.twitter.com *.twitter.com https://*.twimg.com http://*.twimg.com *.twimg.com https://*.googletagmanager.com http://*.googletagmanager.com *.googletagmanager.com https://*.google-analytics.com http://*.google-analytics.com *.google-analytics.com https://data http://data data https://*.typekit.net http://*.typekit.net *.typekit.net 'unsafe-eval'; style-src 'self' https://fonts.googleapis.com http://fonts.googleapis.com fonts.googleapis.com https://*.twitter.com http://*.twitter.com *.twitter.com https://*.twimg.com http://*.twimg.com *.twimg.com https://*.typekit.net http://*.typekit.net *.typekit.net 'unsafe-inline'; 1
base-uri 'none'; default-src 'none'; child-src https://www.youtube.com https://www.youtube.com https://player.vimeo.com https://player.vimeo.com https://w.soundcloud.com https://www.delijn.be; connect-src 'self' https://vimeo.com https://*.resengo.com https://bam.nr-data.net; font-src 'self' https://use.typekit.net https://fonts.googleapis.com https://cloud.typenetwork.com https://fonts.gstatic.com; frame-ancestors 'self'; frame-src https://www.youtube.com https://player.vimeo.com https://w.soundcloud.com https://www.delijn.be; img-src 'self' https://www.google-analytics.com https://www.facebook.com https://i3.ytimg.com https://gallery.mailchimp.com https://cdn-images.mailchimp.com/ https://www.resengo.com data:; media-src https://p.scdn.co; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.youtube.com/player_api https://s.ytimg.com https://player.vimeo.com/api/player.js https://www.resengo.com https://*.resengo.com https://js-agent.newrelic.com https://bam.nr-data.net 'unsafe-inline' 'unsafe-eval' data:; style-src 'self' https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com https://www.resengo.com 'unsafe-inline'; 1
default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com https://maps.googleapis.com/ https://maps.google.com/ https://fonts.gstatic.com/ https://www.google-analytics.com https://ajax.googleapis.com; img-src 'self' data: https://stats.g.doubleclick.net https://csi.gstatic.com/ https://www.google-analytics.com https://fonts.gstatic.com/ https://maps.google.com/ https://maps.googleapis.com/ https://maps.gstatic.com/;  style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com/ https://fonts.googleapis.com/; font-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.gstatic.com/ https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/; frame-ancestors 'self' https://www.google.com/ https://www.youtube.com/; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/ https://www.youtube.com/ 1
frame-ancestors 'self' http://*.charlottesymphony.org https://*.charlottesymphony.org *.morphogine.com *.brynk.com; report-uri /?p=csp-report 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' api.orangefootballclub.com www.surveygizmo.com www.surveygizmo.eu help.dimelo.com cobrowsing.eu2.digital.ringcentral.com orange-rdc.engagement.dimelo.com cobrowsing.eu2.digital.ringcentral.com dimelo-chat.s3.amazonaws.com orange.cd orange-rdc.ws.dimelo.com orange-rdc.dimelochat.com orange-rdc.messaging.dimelo.com sfdc.dimelo.com engagement-connect.herokuapp.com optimize.google.com s.ytimg.com www.youtube.com tagmanager.google.com w.usabilla.com orange-ci.dimelochat.com appstatic.quanta.io completion.ke.orange.fr img.ke.woopic.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com ajax.googleapis.com graph.facebook.com urls.api.twitter.com api.pinterest.com www.linkedin.com script.crazyegg.com; style-src 'self' 'unsafe-inline' api.orangefootballclub.com www.surveygizmo.com www.surveygizmo.eu help.dimelo.com cobrowsing.eu2.digital.ringcentral.com orange-rdc.engagement.dimelo.com cobrowsing.eu2.digital.ringcentral.com dimelo-chat.s3.amazonaws.com orange-rdc.wc.dimelo.com orange-rdc.dimelochat.com orange-rdc.messaging.dimelo.com sfdc.dimelo.com engagement-connect.herokuapp.com optimize.google.com mastermedia.orange-business.com img.ke.woopic.com orange-rdc.dimelochat.com; img-src data: 'self' 'unsafe-inline' api.orangefootballclub.com www.surveygizmo.com www.surveygizmo.eu help.dimelo.com cobrowsing.eu2.digital.ringcentral.com orange-rdc.engagement.dimelo.com cobrowsing.eu2.digital.ringcentral.com dimelo-chat.s3.amazonaws.com orange-rdc.wc.dimelo.com orange-rdc.dimelochat.com orange-rdc.messaging.dimelo.com sfdc.dimelo.com engagement-connect.herokuapp.com optimize.google.com i.ytimg.com fr.orangefootballclub.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.google.com.pk www.google.fr rum-metrics.quanta.io d212beldn0wvcm.cloudfront.net dimelo.s3.amazonaws.com; form-action 'self'; object-src 'self'; frame-src 'self' 'unsafe-inline' api.orangefootballclub.com wwww.surveygizmo.com ww.surveygizmo.eu help.dimelo.com cobrowsing.eu2.digital.ringcentral.com orange-rdc.engagement.dimelo.com cobrowsing.eu2.digital.ringcentral.com dimelo-chat.s3.amazonaws.com orange-rdc.wc.dimelo.com orange-rdc.dimelochat.com orange-rdc.messaging.dimelo.com sfdc.dimelo.com engagement-connect.herokuapp.com optimize.google.com mastermedia.orange-business.com www.orange-business.com www.youtube.com datastudio.google.com otapoci.gos.orange.com; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; script-src 'self' https://aleph.land; font-src 'self' https://aleph.land; img-src 'self' data: blob: https://aleph.land; style-src 'self' 'unsafe-inline' https://aleph.land; media-src 'self' data: https://aleph.land; frame-src 'self' https:; worker-src 'self' https://aleph.land; connect-src 'self' blob: wss://aleph.land https://aleph.land; manifest-src 'self' https://aleph.land 1
default-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' raw.githubusercontent.com; font-src 'self'; script-src 'sha256-4GSSHu97HhzPW1x/WBshpfkzFKdacee+plB7YeJBoEM=' 1
frame-ancestors 'self' *.leelootrading.com 1
default-src 'self' https://cdn-a.leavemealone.app; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.squarecat.io https://cdn-a.leavemealone.app https://stats.leavemealone.app https://js.stripe.com https://checkout.stripe.com https://m.stripe.network https://support.squarecat.io https://storage.googleapis.com/workbox-cdn https://*.inspectlet.com; img-src 'self' 'unsafe-inline' data: https://cdn-a.leavemealone.app https://*.inspectlet.com https://*.googleusercontent.com https://stats.leavemealone.app https://q.stripe.com https://api.producthunt.com https://cdn.leavemealone.app; style-src 'self' 'unsafe-inline' https://cdn-a.leavemealone.app; font-src 'self' data: https://fonts.gstatic.com https://cdn-a.leavemealone.app; frame-src https://cdn.squarecat.io https://stats.leavemealone.app https://js.stripe.com https://hooks.stripe.com https://support.squarecat.io; object-src 'self'; media-src 'self' data:; connect-src 'self' wss://leavemealone.app https://cdn.squarecat.io https://cdn-a.leavemealone.app https://*.inspectlet.com wss://*.inspectlet.com https://sentry.io https://stats.leavemealone.app https://apipub.metomic.io https://api.stripe.com https://support.squarecat.io https://api.pwnedpasswords.com; form-action 'self'; upgrade-insecure-requests;report-uri https://squarecat.report-uri.com/r/d/csp/enforce 1
default-src 'unsafe-eval' 'unsafe-inline' 'self' https: blob:; font-src 'self' https: data:; img-src 'self' data: https: blob:; child-src https:; object-src https: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com/gtm.js https://tagmanager.google.com/debug https://ajax.googleapis.com/ajax/libs/jquery/ https://fonts.googleapis.com/ https://www.google-analytics.com/analytics.js https://www.google-analytics.com/plugins/ua/linkid.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ https://fd10.formdesk.com/scripts/fd_general.js https://cdn.feedbackify.com/f.js https://cdn.feedbackify.com/dialog.js https://www.feedbackify.com/touch https://s3.amazonaws.com/fby-form/13644/d.js https://dev.visualwebsiteoptimizer.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: http://www.royalfloraholland.com/ https://www.google-analytics.com https://www.googletagmanager.com/ https://i.ytimg.com/ https://cdn.feedbackify.com/img/classic/ https://dev.visualwebsiteoptimizer.com/v.gif https://s3.amazonaws.com/fby-form/13644/logo.jpg; font-src 'self' https://fonts.googleapis.com/ data:; frame-src 'self' *.royalfloraholland.com *.floraholland.nl https://www.google.com/ https://www.youtube.com/ https://forms.office.com/ https://www.formdesk.com/ https://fd10.formdesk.com/; connect-src 'self' https://fhctest.rimote.nl/myfloraholland/ https://fhc-acc.rimote.nl/myfloraholland/ https://community.royalfloraholland.com/myfloraholland/ 1
default-src 'none'; script-src 'self'; connect-src 'self' https://ehrn.org https://ehrnprd.blob.core.windows.net; style-src 'self' https://fonts.googleapis.com; base-uri 'self'; form-action 'self'; img-src 'self' https://ehrnprd.blob.core.windows.net; manifest-src 'self'; font-src https://fonts.gstatic.com; 1
base-uri 'none'; object-src 'none'; script-src https://frontpage.pk/logs/ https://frontpage.pk/sidekiq/ https://frontpage.pk/mini-profiler-resources/ https://frontpage.pk/assets/ https://frontpage.pk/brotli_asset/ https://frontpage.pk/extra-locales/ https://frontpage.pk/highlight-js/ https://frontpage.pk/javascripts/ https://frontpage.pk/plugins/ https://frontpage.pk/theme-javascripts/ https://frontpage.pk/svg-sprite/ https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/ 'unsafe-inline' https://www.googletagmanager.com/ https://facebook.com/ https://connect.facebook.net/; worker-src 'self' https://frontpage.pk/assets/ https://frontpage.pk/brotli_asset/ https://frontpage.pk/javascripts/ https://frontpage.pk/plugins/ 1
frame-ancestors 'self' *.bizcompass.jp; 1
default-src 'self'; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.twitter.com *.twimg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' embed.nicovideo.jp *.googleapis.com *.google.com *.treasuredata.com googleads.g.doubleclick.net www.googleadservices.com www.googletagmanager.com www.google-analytics.com apis.google.com *.twitter.com *.twimg.com *.facebook.net; connect-src 'self' blob: *.google.com *.g.doubleclick.net *.google-analytics.com; img-src 'self' data: blob: *.googleusercontent.com *.gstatic.com *.treasuredata.com *.g.doubleclick.net www.google.co.jp www.google.com www.google-analytics.com *.twitter.com *.twimg.com; form-action 'self' *.twitter.com; frame-src 'self' embed.nicovideo.jp bid.g.doubleclick.net *.youtube.com *.twitter.com *.facebook.com *.google.com; child-src 'self' youtube.com platform.twitter.com; font-src 'self' data: *.gstatic.com 1
default-src 'self' *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.youtube.com vimeo.com *.facebook.net *.facebook.com *.cookiebot.com dummyimage.com millenaris.hu ; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com millenaris.hu ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.youtube.com vimeo.com *.facebook.net *.facebook.com *.cookiebot.com dummyimage.com millenaris.hu ; img-src 'self' *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.youtube.com vimeo.com *.facebook.net *.facebook.com *.cookiebot.com dummyimage.com millenaris.hu data: ; style-src 'self' 'unsafe-inline' millenaris.hu ; frame-src 'self' *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.youtube.com vimeo.com *.facebook.net *.facebook.com *.cookiebot.com dummyimage.com millenaris.hu 1
report-uri https://sentry.io/api/1206618/security/?sentry_key=4b848061416d44a9bc925db5abadefe2; script-src 'sha256-7+d3tDe1h+c1BvpnFsJbCnM24CHSTAhqrS9zcD0HwME=' 'self' 'sha256-4+Xb6TA4/weI090BB3pTfkf7sQ9B2WNNUxkAn9gwhks=' 'sha256-LfbuW2GlEmUSyviun1qLrU3vH/s8LsYLZShWtrB4Bdo=' 'sha256-945XBdB2PDA2I2Nfprpg3ZRjQOWdVOzImA9yAejXUaA=' 'sha256-fYfTwIukbC3cwEhaEIIQ93WYGqllebGPaKX4tn49Mkc=' 'sha256-Q8jGi14QRgx+zDUZK4SdPzj5jN633beRKcv0uhiGHOw=' 'sha256-U97J3EPcXDZ+IbK1EsVTlZxjoiNbGJLi/rm27b6nOKQ=' 'sha256-U/+ndIOBOUTFEGC6jcua+3HDFzjfJ03FptwkI2+ONZo=' 'sha256-qK0I6CxMOaE8yjaneq9LHTSGweoIPwY15PosfsNSe8U=' 'sha256-/TWvyReNZJKpS2r2G+vf9ChG+aacrku2G+M7HHL6+wk=' 'sha256-FTposC1nDWj5zGDQs6dDst97o/lFdA/NF4HYpLPk33M=' https://static.smartrecruiters.com https://cdn.materialdesignicons.com https://fonts.googleapis.com https://fonts.gstatic.com https://breadwallet.us14.list-manage.com; default-src 'self'; connect-src 'self' https://sentry.io https://storerocket.io https://api.mapbox.com; style-src 'self' blob: 'unsafe-inline' cdn.materialdesignicons.com fonts.googleapis.com api.tiles.mapbox.com; font-src 'self' cdn.materialdesignicons.com fonts.gstatic.com; worker-src 'self' blob:; child-src 'self' blob:; img-src 'self' data: blob: https://storage.googleapis.com/ https://brd.imgix.net/; frame-src 'self' blob: https://www.youtube.com/ 1
default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm *.mktoresp.com;block-all-mixed-content;upgrade-insecure-requests; 1
script-src 'self' 'unsafe-inline' *.typekit.net *.google-analytics.com *.googleapis.com *.instagram.com; style-src 'self' 'unsafe-inline' *.typekit.net *.instagram.com; img-src 'self' *.typekit.net *.google.com *.google-analytics.com *.googleapis.com *.instagram.com 1
default-src 'self' blob: *.onlineumfragen.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.onlineumfragen.com www13.onlineumfragen.com:85 https://www.googletagmanager.com https://www.google-analytics.com ajax.googleapis.com www.googleadservices.com platform.twitter.com translate.google.com translate.googleapis.com www.google.com www.gstatic.com code.highcharts.com *.cloudflare.com extreme-ip-lookup.com https://js.intercomcdn.com https://widget.intercom.io https://api.sovendus.com global.localizecdn.com https://polyfill.io https://cdn.jsdelivr.net/npm/mathjax@3/ https://cdn.mathjax.org https://cdn.datatables.net https://assets.adobedtm.com; connect-src 'self' www.onlineumfragen.com cust.onlineumfragen.com https://www5.onlineumfragen.com http://*.amazonaws.com https://*.amazonaws.com translate.googleapis.com translate.google.com extreme-ip-lookup.com https://*.sovendus.com global.localizecdn.com *.intercom.io wss://nexus-websocket-a.intercom.io https://www.google-analytics.com https://iqdigital.demdex.net; img-src 'self' data: blob: http://localhost www.onlineumfragen.com cust.onlineumfragen.com http://*.amazonaws.com https://*.amazonaws.com seal.beyondsecurity.com *.twitter.com www13.onlineumfragen.com:85 *.onlineumfragen.com https://www.googletagmanager.com https://www.google-analytics.com maps.google.ch www.googleadservices.com http://92.42.184.213 *.cloudflare.com ups.xplosion.de *.doubleclick.net *.googlesyndication.com www.sovendus.com translate.googleapis.com translate.google.com www.gstatic.com www.google.com www.evu-benchmarking.ch chart.googleapis.com api.qrserver.com global.localizecdn.com https://*.intercomcdn.com https://bildungsplan-bw-ext.pirobase.de https://cdn.datatables.net; media-src 'self' blob: www.onlineumfragen.com cust.onlineumfragen.com *.sensiqol.ch; style-src 'self' 'unsafe-inline' www.onlineumfragen.com cust.onlineumfragen.com fonts.googleapis.com translate.googleapis.com https://cdn.datatables.net; frame-src 'self' www.onlineumfragen.com cust.onlineumfragen.com *.twitter.com www.youtube.com maps.google.ch www.google.com *.onlineumfragen.com www.facebook.com https://*.sovendus.com; font-src 'self' data: blob: www.onlineumfragen.com cust.onlineumfragen.com fonts.gstatic.com https://js.intercomcdn.com https://cdn.jsdelivr.net/npm/mathjax@3/ https://cdnjs.cloudflare.com/ajax/libs/mathjax/ https://cdn.mathjax.org; object-src 'self' blob: www.onlineumfragen.com cust.onlineumfragen.com www.youtube.com 1
frame-src 'self' 'unsafe-inline' https://*.adyen.com https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.glami.cz https://*.heureka.sk https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.sk https://*.online-metrix.net https://*.pingdom.net https://*.tradedoubler.com https://*.xplosion.de https://*.yahoo.com https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.sk https://creativecdn.com https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.sk https://lidl.media01.eu https://ligadx.com https://ligatus.com https://login.dognet.sk https://m6r.eu https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://twiago.com https://www.dwin1.com https://www.edge-cdn.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.youtube-nocookie.com https://www.youtube.com https://yahoo.com https://yieldlab.net https://youtube.com https://*.reisebank.de https://*.targobank.de https://3d-secure.pluscard.de https://3ds-secure.cardcomplete.com https://3ds.borica.bg https://3ds.sia.eu https://3dsecure-vrp.de https://acs.touch.tech https://acs2.gpesecure.com https://acspa.petafuel.net https://acsv2.centrum24.pl https://german-3ds.wlp-acs.com https://mc-id-check.firstdata.de https://ps4acs.netcetera-payment.ch https://securesuite.co.uk https://ssl-prd-u5g-fo-acs-areq.wlp-acs.com:9743 https://tsys.arcot.com https://visa-secure.ing.de ; object-src 'unsafe-eval' data: https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.glami.cz https://*.heureka.sk https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.sk https://*.online-metrix.net https://*.tradedoubler.com https://*.xplosion.de https://*.yahoo.com https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.sk https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.sk https://lidl.media01.eu https://ligadx.com https://ligatus.com https://login.dognet.sk https://m6r.eu https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://twiago.com https://www.dwin1.com https://www.edge-cdn.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.youtube.com https://yahoo.com https://yieldlab.net https://youtube.com ; img-src 'self' 'unsafe-inline' data: http://www.w3.org https://*.360yield.com https://*.addthis.com https://*.adnxs.com https://*.advertising.com https://*.adyen.com https://*.assets.lidl https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.demdex.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.glami.cz https://*.heureka.sk https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.cz https://*.lidl-shop.sk https://*.lidl.de https://*.lidl.sk https://*.online-metrix.net https://*.openx.net https://*.pubmatic.com https://*.retail.lidl.net https://*.searchhub.io https://*.stickyadstv.com https://*.taboola.com https://*.tradedoubler.com https://*.twiago.com https://*.xplosion.de https://*.yahoo.com https://*.yieldlab.net https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://analytics.google.com https://asset.schwarz https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.sk https://content.odj.cloud https://contextual.media.net https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.sk https://lidl.media01.eu https://lidl.sk https://ligadx.com https://ligatus.com https://login.dognet.sk https://m6r.eu https://match.sharethrough.com https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://sync.outbrain.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://translate.google.com https://twiago.com https://visitor.omnitagjs.com https://www.dwin1.com https://www.edge-cdn.net https://www.glami.sk https://www.google-analytics.com https://www.google.at https://www.google.ba https://www.google.be https://www.google.bg https://www.google.ch https://www.google.co.uk https://www.google.com https://www.google.com.bd https://www.google.com.tr https://www.google.com.ua https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.is https://www.google.it https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.sk https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.secrz.de https://www.youtube.com https://x.bidswitch.net https://yahoo.com https://yieldlab.net https://youtube.com ; report-uri https://csp-server.prod.varnish-poc.lidl-shop.com/csp/report ; frame-ancestors 'self' ; style-src 'self' 'unsafe-inline' https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.doubleclick.net https://*.glami.cz https://*.googleapis.com https://*.heureka.sk https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.sk https://*.online-metrix.net https://*.tradedoubler.com https://*.xplosion.de https://*.yahoo.com https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.sk https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.sk https://lidl.media01.eu https://ligadx.com https://ligatus.com https://login.dognet.sk https://m6r.eu https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://twiago.com https://www.dwin1.com https://www.edge-cdn.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.youtube.com https://yahoo.com https://yieldlab.net https://youtube.com ; default-src 'self' 'unsafe-inline' blob: data: https://*.adyen.com https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.glami.cz https://*.googleapis.com https://*.heureka.sk https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.sk https://*.online-metrix.net https://*.pingdom.net https://*.tradedoubler.com https://*.xplosion.de https://*.yahoo.com https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://analytics.google.com https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.sk https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://fonts.gstatic.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.sk https://lidl.media01.eu https://ligadx.com https://ligatus.com https://login.dognet.sk https://m6r.eu https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.kk-resources.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://twiago.com https://www.dwin1.com https://www.edge-cdn.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.youtube-nocookie.com https://www.youtube.com https://yahoo.com https://yieldlab.net https://youtube.com https://csp-server.prod.varnish-poc.lidl-shop.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://localhost https://*.adyen.com https://*.cookiebot.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.glami.cz https://*.googleapis.com https://*.heureka.sk https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl-shop.com https://*.lidl-shop.sk https://*.online-metrix.net https://*.pingdom.net https://*.searchhub.io https://*.tradedoubler.com https://*.xplosion.de https://*.yahoo.com https://3218-4706-m.edge-cdn.net https://act.webmasterplan.com https://addthis.com https://advertising.com https://awin1.com https://bidswitch.net https://bing.com https://casalemedia.com https://cloud.news.lidl.sk https://creativecdn.com https://criteo.com https://demdex.net https://doubleclick.net https://dsp-user-sync.emetriq.de https://dwin1.com https://etracker.de https://event.yoochoose.net https://facebook.com https://form.lidl.com https://glami.cz https://hlserve.com https://ih.adscale.de https://im9.cz https://imedia.cz https://liadm.com https://lidl-shop.com https://lidl-shop.sk https://lidl.media01.eu https://ligadx.com https://ligatus.com https://login.dognet.sk https://m6r.eu https://media.net https://nxtck.com https://omnitagjs.com https://openx.net https://outbrain.com https://partners.webmasterplan.com https://pubmatic.com https://quantserve.com https://rlcdn.com https://s.kk-resources.com https://s.ytimg.com https://searchhub.io https://sentry.int.secrz.com https://seznam.cz https://sharethrough.com https://smartadserver.com https://smartclip.net https://spatial.virtualearth.net https://sspqns.com https://st.smartassistant.com https://stickyadstv.com https://t.semtrack.de https://taboola.com https://teads.tv https://tracker.marinsm.com https://tracking.m6r.eu https://tradetracker.net https://twiago.com https://www.dwin1.com https://www.edge-cdn.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.jsctool.com https://www.lead-alliance.net https://www.youtube.com https://yahoo.com https://yieldlab.net https://youtube.com ; 1
default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'none'; default-src 'self' www.srectrade.com www.facebook.com ; frame-src staticxx.facebook.com www.facebook.com  www.youtube.com rightsignature.com go.srectrade.com js.stripe.com maps.googleapis.com www.google.com/recaptcha/ platform.twitter.com syndication.twitter.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' go.srectrade.com pi.pardot.com ssl.google-analytics.com js.stripe.com code.jquery.com maps.googleapis.com ajax.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.google-analytics.com cdn.pardot.com platform.twitter.com connect.facebook.net; style-src 'self' 'unsafe-inline' code.jquery.com maps.googleapis.com fonts.googleapis.com fonts.gstatic.com; img-src 'self' ssl.google-analytics.com syndication.twitter.com code.jquery.com maps.googleapis.com maps.gstatic.com secure.gravatar.com chart.googleapis.com data: image/* 1.gravatar.com; font-src 'self' data: application/font-woff 1
default-src 'self';script-src 'self' 'sha256-fM8bPHTtg62HWLF582AUElbUYoLeNdbgfS5Wim6+X2E=' 'sha256-Rv0XCoOhq4H0QyKE7rEhr+e9GI5gsmGcC04fY0HPORc=' 'sha256-28NJWgGMi7z1BsySG4SYZCjth/ys7dkElS3oIl5ZEqM=' 'sha256-nUHIts9QUqQq4nfffteH1WG3ZeWESwmxZn6bWMNWsiM=' 'sha256-MGLg9fH15qQqEcT+iTfwx/cfVp2MgjSrVt08u3NVKa8=' 'sha256-OQjxgqHHnjfZwkCEsAo2MRjd3GuPmg+RvmjrZd35TN4=' 'sha256-sS3nggZVNGyoYqI7U/PSwnwI4CymIdHNgJwW49qztWo=' 'sha256-aASq1hOJ8PP2cfK9QGXaCLdqgtkDXDb5VFXlSyrpX/M=' 'sha256-1ujkGrbsh0Yx/bquh2I9gkG1ZaZetCkjre6vciK2u7U=';worker-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' * data: blob:;media-src 'self' *;connect-src 'self' * data: blob:;frame-src 'none';frame-ancestors 'none';object-src 'none';manifest-src 'self';form-action 'none';base-uri 'self' 1
form-action 'self'; frame-ancestors 'self' 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-ZWU0ODRiOGMtNDRhOC00MGEyLWI1ODAtMzQyZmI2ZWRlM2M5'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=XE&lang=en-AE&device=desktop&yrid=diaq7mtfulkfu&partner=; 1
default-src 'self';script-src 'self' https://*.nr-data.net https://js-agent.newrelic.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com https://graph.facebook.com https://secure.livechatinc.com https://cdn.livechatinc.com https://api.livechatinc.com https://*.queue-it.net 'unsafe-inline';connect-src 'self' https://*.nr-data.net https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com https://*.queue-it.net;img-src 'self' data: https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com;style-src 'self' https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com 'unsafe-inline';font-src 'self' data: https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com;frame-src 'self' https://www.youtube.com https://vimeo.com https://player.vimeo.com https://luminor-funds.metasite.lt https://new.luminor.lt https://secure.livechatinc.com 1
default-src 'self' blob: https://www.eigenhaard.nl; connect-src 'self' 'unsafe-eval' wss://*.hotjar.com api.pro6pp.nl https://*.google-analytics.com https://*.hotjar.com https://*.zopim.com https://*.zdassets.com wss://*.zopim.com cdnjs.cloudflare.com https://*.googleapis.com https://*.hotjar.io https://*.doubleclick.net https://*.mixpanel.com api.parley.nu https://api.segment.io; frame-src 'self' sdn.sitecore.net https://*.youtube.com https://www.youtube-nocookie.com eigenhaard.bbvms.com https://eigenhaard.mwm2.nl https://*.hotjar.com sitecoreboost.azurewebsites.net https://consent.azureedge.net https://*.cookiebot.com https://*.facebook.com; font-src 'self' data: https://*.gstatic.com maxcdn.bootstrapcdn.com https://*.zopim.com; img-src 'self' data: blob: https://*.gstatic.com https://*.ggpht.com https://*.googleapis.com https://*.google.com https://*.google.nl https://*.google-analytics.com www.facebook.com https://*.akamaihd.net https://*.doubleclick.net https://*.ytimg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://browser.sentry-cdn.com https://bam.nr-data.net https://*.gstatic.com *.google.com *.google.nl https://*.zopim.com https://*.zdassets.com https://*.googleapis.com https://*.google-analytics.com api.pro6pp.nl script.crazyegg.com https://*.hotjar.com https://*.googletagmanager.com https://*.cookiebot.com https://*.cookieinfo.net https://consent.azureedge.net https://*.mxpnl.com https://*.segment.com https://*.youtube.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://*.gstatic.com https://*.googleapis.com https://*.google.com; frame-ancestors 'self'; base-uri https://www.eigenhaard.nl; 1
default-src 'self' plentycar.ru plentycom.ru m.plentycar.ru plenty.parts *.plenty.parts *.plentycar.ru *.plentycom.ru plentycar.bitrix24.ru *.cdnvideo.ru *.youtube.com youtu.be *.bootstrapcdn.com api-maps.yandex.ru counter.yadro.ru *.googlesyndication.com adservice.google.ru yastatic.net adservice.google.com *.googletagservices.com ajax.googleapis.com api.pdftron.com pdfnet.s3.amazonaws.com fonts.googleapis.com img.yandex.ru informer.yandex.ru kraken.rambler.ru mc.yandex.ru scounter.rambler.ru *.maps.yandex.net *.bitrix24.ru *.bitrix24.com *.doubleclick.net *.google-analytics.com *.liveinternet.ru partscatalog.deere.com fonts.gstatic.com vk.com wss://*.bitrix24.com wss://*bitrix24.ru data: 'unsafe-inline' 'unsafe-eval'; 1
default-src *  data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval' blob:; connect-src * 'unsafe-inline' wss:; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'  * 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.cnetcontent.com *.ldlc.com *.ldlc-pro.com *.groupe-ldlc.com  *.ldlc-pro.fr  *.ldlc-pro.be  *.ldlc-pro.lu  *.ldlc-pro.ch *.fontawesome.com via.placeholder.com *.intercomassets.com *.s-microsoft.com *.intercomcdn.com *.intercom.io *.hotjar.com *.hotjar.io *.doofinder.com *.youtube.com *.quadro-selector.com  *.google.com *.google-analytics.com *.doubleclick.net *.gstatic.com *.googleapis.com *.facebook.com *.facebook.net *.licdn.com *.linkedin.com ws: wss: data:; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' averin.pro nominatim.openstreetmap.org api-maps.yandex.ru stat.sputnik.ru s.ytimg.com static.issuu.com www.1c-bitrix.ru http://firmsonmap.api.2gis.ru analytics.bitrix.info firmsonmap.api.2gis.ru widgets.2gis.com www.bratsk-city.ru http://349000.bratsk-city.ru obrbratsk.ru dumabratsk.ru mc.yandex.ru clck.yandex.ru top-fwz1.mail.ru top-abd.mail.ru yastatic.net bitrix.info youtube.com www.youtube.com youtu.be https://local.adguard.com; img-src informer.yandex.ru 'self' stat.sputnik.ru www.dumabratsk.ru top-fwz1.mail.ru mc.yandex.ru info.weather.yandex.net yastatic.net bitrix.info *.bratsk-city.ru api-maps.yandex.ru *.maps.yandex.net data: blob: 1
default-src 'self' http: https:; manifest-src 'self'; connect-src * blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https: http:; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' http: https: data: blob:; media-src blob:; object-src blob:; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com  https://ajax.aspnetcdn.com https://www.googleadservices.com https://tags.crwdcntrl.net              https://code.jquery.com https://static.ads-twitter.com https://connect.facebook.net https://sc-static.net https://analytics.twitter.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://img06.en25.com https://tags.bkrtx.com https://assets.voxcinemas.com https://cdn.curator.io https://cdnjs.cloudflare.com; 1
block-all-mixed-content; report-uri /v1/csplog 1
object-src 'self';script-src 'nonce-1ea7c830f3351580a38149922a210b69' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:;base-uri 'none';report-uri https://www.checkdomain.net/en/report-uri/;frame-ancestors 'self' https://*.checkdomain.website 1
base-uri 'none'; connect-src 'self' https://*.cbc.be https://*.clicktale.com https://*.clicktale.net https://*.kbc.be https://*.kbc.com https://*.kbcbrussels.be https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://*.omtrdc.net https://*.vee24.com https://dpm.demdex.net https://kbc.symex.be https://uat.serversidegraphics.com https://uk.personalcard.net https://www.facebook.com wss://*.vee24.com https://*.contentsquare.net https://admp-tc-mediahuis.adtlgc.com; child-src blob:; default-src 'none'; font-src 'self' data: https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://fonts.googleapis.com https://fonts.gstatic.com https://static.vee24.com; frame-ancestors 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbcgroup.com https://*.kbcgroup.eu https://*.vee24.com https://*.adobe.com; frame-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc-group.com https://*.omniture.com https://*.vee24.com https://assets.adobedtm.com https://kbcgroup.demdex.net https://uat.serversidegraphics.com https://uk.personalcard.net https://www.google.com/recaptcha/ https://www.youtube-nocookie.com https://*.instagram.com https://kbc.symex.be https://*.trustarc.com https://code3.adtlgc.com/ https://scdn.cxense.com/; img-src 'self' data: https://*.cbc.be https://*.clicktale.com https://*.clicktale.net https://*.contentsquare.net https://*.doubleclick.net https://*.facebook.com https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://*.omtrdc.net https://*.adobemc.com https://action.metaffiliation.com https://*.instagram.com https://scontent.cdninstagram.com https://cbc.azureedge.net https://cm.everesttech.net https://csi.gstatic.com https://dc.ads.linkedin.com https://dpm.demdex.net https://edash.azureedge.net https://invest.azureedge.net https://kbc.azureedge.net https://maps.googleapis.com https://maps.gstatic.com https://mba.azureedge.net https://mbj.azureedge.net https://pixel.everesttech.net https://scomcluster.cxense.com https://secure.adnxs.com https://static.vee24.com https://t.co https://touch.azureedge.net https://uat.serversidegraphics.com https://uk.personalcard.net https://www.google.be https://www.google.com https://www.googleadservices.com https://img.youtube.com https://*.truste.com https://*.trustarc.com https://cdn.publish.macrobond.net; media-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://cbc.azureedge.net https://edash.azureedge.net https://invest.azureedge.net https://kbc.azureedge.net https://mba.azureedge.net https://mbj.azureedge.net https://touch.azureedge.net; object-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be; script-src 'nonce-X+qaRAqgMg0AAHIFKmAAAABv' 'strict-dynamic' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://cdn.tt.omtrdc.net https://fonts.googleapis.com https://static.vee24.com; manifest-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://cdn.tt.omtrdc.net https://fonts.googleapis.com https://static.vee24.com; worker-src blob:;  1
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=articles&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=a5760c64-28cf-4385-a6e2-502f47ca5e87 1
frame-ancestors iwf.nationbuilder.com 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' * www.google-analytics.com ajax.googleapis.com www.facebook.com; 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.signalize.com https://*.etracker.com https://*.etracker.de https://cdn.jsdelivr.net https://code.jquery.com https://ajax.googleapis.com https://cdnjs.cloudflare.com; frame-ancestors 'self' https://*.etracker.com https://*.haendlerbund.de 1
object-src 'none'; script-src 'nonce-4ysm4ISyslS4cXSkgEn3SA==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' 'report-sample' https: http:; base-uri 'none'; report-uri https://bandcamp.com/api/cspreport/1/violation 1
default-src * data: blob:;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com https://static.hotjar.com;frame-src 'self' https://*.mhcache.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://vars.hotjar.com https://*.facebook.com https://*.googleapis.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://www.zenaps.com;script-src *.myheritage.it https://www.myheritage.it  'unsafe-inline' blob: data: 'self' https://*.myheritage.com https://*.mhcache.com https://cdn.trackjs.com https://tpc.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.googletagmanager.com https://connect.facebook.net https://bat.bing.com https://www.googleadservices.com https://*.google-analytics.com https://www.gstatic.com https://*.googleapis.com https://js-agent.newrelic.com https://*.nr-data.net https://*.mk-sense.com https://code.jquery.com https://*.hotjar.com https://www.dwin1.com https://www.zenaps.com https://ad.zanox.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://tagmanager.google.com https://optanon.blob.core.windows.net;connect-src data: 'self' https://*.myheritage.com https://*.mhcache.com https://www.google-analytics.com https://adservice.google.com https://*.nr-data.net https://sentry.io https://capture.trackjs.com https://*.bing.com https://*.facebook.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io:* https://*.doubleclick.net https://*.mk-sense.com https://privacyportal-eu.onetrust.com *.myheritage.it;media-src 'self' https://*.myheritage.com https://*.mhcache.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' youtu.be *.youtube.com *.gstatic.com *.googleapis.com *.google-analytics.com *.bootstrapcdn.com *.wp.com *.googletagmanager.com *.gravatar.com *.bbb.org *.jquery.com browser-update.org *.zendesk.com *.facebook.com *.twitter.com *.broadly.com wollses.com unpkg.com api.pinterest.com *.cloudflare.com *.google.com *.aspnetcdn.com *.sitejabber.com; frame-src 'self' *.youtu.be *.youtube.com *.facebook.com s-static.ak.facebook.com *.zendesk.com *.amazon-adsystem.com *.twitter.com *.wp.com *.google.com *.googleapis.com *.wp-themes.com; object-src 'self' 1
default-src https:; img-src https: data: http://gethatch.com; connect-src https: wss://*.hotjar.com; font-src data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://www.googletagmanager.com https://tagmanager.google.com; style-src 'unsafe-inline' 'self' https://cd.acesdirect.nl https://fonts.googleapis.com; frame-src 'self' https:; report-uri https://www.acesdirect.nl/csp_violation/ 1
frame-ancestors 'self' https://*.expo-ip.com 1
default-src 'none' ;manifest-src 'self' ; script-src  'self' 'unsafe-eval' 'nonce-9133c390122dcbc3c5c5f305deef660d71ccff72402173ef8c89f3954906ccc1' https://www.google.com/recaptcha/ ; style-src 'self' 'nonce-9133c390122dcbc3c5c5f305deef660d71ccff72402173ef8c89f3954906ccc1'   https://fonts.googleapis.com; img-src 'self' ; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' ; media-src 'none' ; object-src 'none' ; child-src 'none' ; frame-src 'self' https://www.google.com/ ; worker-src 'self' ; frame-ancestors 'none' ; form-action 'self' ; block-all-mixed-content; base-uri 'self'; 1
default-src 'none'; base-uri 'self'; connect-src 'self' https://*.google-analytics.com https://*.facebook.com https://*.doubleclick.net https://*.ytimg.com; frame-src 'self' https://*.youtube.com https://*.twitter.com https://*.vimeo.com https://*.trendmicro.com https://*.facebook.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.clickdimensions.com; form-action 'self' https://*.twitter.com https://*.facebook.com; frame-ancestors 'self'; font-src 'self' https://*.bootstrapcdn.com https://*.gstatic.com; img-src 'self' https://*.fireandemergency.nz https://*.google.com https://*.googletagmanager.com https://*.facebook.com https://*.fbcdn.net https://*.google.co.nz https://*.google.com.au https://*.google-analytics.com https://*.twimg.com https://*.ytimg.com https://*.doubleclick.net https://*.gstatic.com https://*.googleapis.com https://*.twitter.com https://i.creativecommons.org https://licensebuttons.net https://*.youtube.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://www.googleadservices.com https://*.doubleclick.net https://*.google.com https://*.google-analytics.com https://maps.googleapis.com https://*.facebook.net https://cdn.syndication.twimg.com https://*.googletagmanager.com https://*.ytimg.com https://*.youtube.com https://code.jquery.com https://*.gstatic.com https://*.twitter.com; child-src https://*.doubleclick.net https://*.twitter.com https://*.facebook.com https://*.googletagmanager.com https://*.youtube.com; media-src 'self'; object-src 'self'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.syndication.twimg.com data: https://*.facebook.net https://maps.googleapis.com https://*.ytimg.com https://*.twitter.com https://*.googletagmanager.com https://*.youtube.com https://*.google-analytics.com https://code.jquery.com https://*.gstatic.com https://*.google.com https://*.twitter.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.twitter.com https://*.twimg.com; style-src-elem 'self' https://*.bootstrapcdn.com 'unsafe-inline' https://*.googleapis.com https://*.twitter.com *.twimg.com; 1
frame-ancestors 'self'; default-src 'self'; base-uri 'self'; script-src * 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline'; img-src * data:; font-src 'self' *.gstatic.com *.embedly.com data:;connect-src 'self' *.reddit.com *.akamaihd.net unite.spoe.at www.google-analytics.com www.facebook.com; media-src * blob: data: 'self'; object-src 'self'; frame-src * ; manifest-src 'self'; worker-src 'self' blob: data: ; form-action *; upgrade-insecure-requests; block-all-mixed-content; 1
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests 1
default-src  'self' data:;font-src  'self' data: fonts.gstatic.com kariera.rako.cz www.kariera.rako.cz;connect-src  'self' analytics.monkeytracker.cz *.google.com *.googleapis.com www.google-analytics.com *.hotjar.com wss://ws6.hotjar.com *.hotjar.io;script-src  'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com *.gstatic.com *.hotjar.com static.hotjar.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz connect.facebook.net kariera.rako.cz www.kariera.rako.cz c.imedia.cz *.googleadservices.com *.doubleclick.net;form-action  'self' *.facebook.com *.facebook.net;frame-src  'self' blob: www.youtube.com *.iplatba.cz www.tvbydleni.cz *.facebook.com *.facebook.net *.hotjar.com;worker-src  'self' blob: www.youtube.com *.iplatba.cz www.tvbydleni.cz *.facebook.com *.facebook.net *.hotjar.com;frame-ancestors  'self';img-src  'self' data: blob: *.gstatic.com *.googleapis.com *.googlecode.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.google.com *.google.cz *.google.ie www.facebook.com kariera.rako.cz www.kariera.rako.cz c.imedia.cz;style-src  'self' 'unsafe-inline' fonts.googleapis.com analytics.monkeytracker.cz *.gstatic.com *.google.com kariera.rako.cz www.kariera.rako.cz;object-src  'self' 1
style-src 'self' 'unsafe-inline'; default-src 'self'; img-src 'self' data: https://www.google-analytics.com *.googleusercontent.com; script-src 'self' https://www.google-analytics.com; object-src 'none'; connect-src 'self' https://www.google-analytics.com https://api.mapbox.com; report-uri /api/csp-report 1
default-src 'none'; script-src 'self' https://www.google-analytics.com; font-src https://fonts.gstatic.com; style-src 'self' https://fonts.googleapis.com; img-src 'self' https://www.google-analytics.com 1
default-src 'self';script-src 'report-sample' sentry.io 'unsafe-eval' 'self' 'unsafe-inline' tagmanager.google.com/ www.googletagmanager.com storage.googleapis.com maps.googleapis.com www.google-analytics.com;style-src 'report-sample' 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com;object-src 'none';connect-src 'self' sentry.io images.prismic.io fonts.googleapis.com exscientia.cdn.prismic.io tagmanager.google.com/ storage.googleapis.com maps.googleapis.com www.google-analytics.com www.googletagmanager.com maps.gstatic.com api.lever.co;font-src 'self' fonts.gstatic.com;frame-src 'self' cabinpanda.com;img-src 'self' maps.gstatic.com images.prismic.io data: blob: 'unsafe-inline' www.googletagmanager.com ssl.gstatic.com/ storage.googleapis.com www.google-analytics.com maps.googleapis.com;media-src 'self' exscientia.cdn.prismic.io;worker-src 'self' www.googletagmanager.com ssl.gstatic.com/ storage.googleapis.com www.google-analytics.com maps.googleapis.com exscientia.cdn.prismic.io images.prismic.io 1
default-src 'self' https://*.stripe.com http://127.0.0.1:10000 https://*.dmds.com wss://*.dmds.com https://*.google-analytics.com fasp://* https://local.connectme.us:* https://v5media.dmds.com https://proddmdsstorage.blob.core.windows.net https://*.jwpcdn.com https://fonts.googleapis.com 'unsafe-inline' 'unsafe-eval' blob:; img-src * data:; font-src * data:; 1
frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://d12wqas9hcki3z.cloudfront.net https://d33v4339jhl8k0.cloudfront.net https://beacon-v2.helpscout.net https://www.google.com https://www.gstatic.com https://js-agent.newrelic.com https://bam.nr-data.net; 1
default-src https: 'self'; style-src https: 'self' 'unsafe-inline'; script-src https: 'self' 'unsafe-eval' 'unsafe-inline'; font-src https: data: 'self';img-src https: data: 'self'; object-src 'none' 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://arvrjourney.com https://*.arvrjourney.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self';block-all-mixed-content ; base-uri 'self'; object-src 'none'; script-src  'nonce-a715911be73141ce96c5742b4af54dd6' 'self' 'unsafe-eval' 'unsafe-inline' https://static.landbot.io https://www.gstatic.com https://www.google.com https://st.getsitecontrol.com/ https://widgets.getsitecontrol.com https://c.evidon.com https://tagmanager.google.com/ https://www.googletagmanager.com/ https://polyfill.io https://optimize.google.com https://www.google-analytics.com https://az416426.vo.msecnd.net; img-src 'self' data: https://mb.com.ph https://wtf2.forkcdn.com/ https://www.grantthornton.global/ https://photos.smugmug.com/ https://www.sunstar.com.ph/ https://chats.landbot.io http://s14255.pcdn.co/ http://ialaddin.genieesspv.jp/ http://bworldonline.com/ http://www.bworldonline.com/ http://mindanaotimes.net/ http://media.philstar.com/ http://www.mb.com.ph/ http://businessmirror.com.ph/ http://tribune.net.ph/ http://cdn.manilatimes.net/ http://www.malaya.com.ph/ http://cdn2-img.pressreader.com/ http://farm5.staticflickr.com/ http://business.mb.com.ph/ http://oxfordbusinessgroup.com/ http://assets.rappler.com/ http://www.gti.org/ https://ssl.gstatic.com/ https://syndication.twitter.com https://optimize.google.com https://platform.twitter.com https://pbs.twimg.com https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com https://img.youtube.com https://wtf2.forkcdn.com/; style-src 'self' 'unsafe-inline' data: blob: https://tagmanager.google.com/ https://fonts.googleapis.com/ https://optimize.google.com https://chats.landbot.io https://platform.twitter.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src https://view.ceros.com https://social-plugins.line.me/ https://www.google.com/ https://platform.twitter.com https://www.youtube.com https://optimize.google.com https://w.soundcloud.com https://player.vimeo.com https://www.gstatic.com https://cdn.optimizely.com; connect-src 'self' https://dc.services.visualstudio.com https://az416426.vo.msecnd.net https://www.google-analytics.com https://stats.g.doubleclick.net/ https://extreme-ip-lookup.com/ https://chats.landbot.io; 1
default-src 'none'; script-src 'self' 'nonce-RufoQIK7ZsXONrhAfHBpG6S7c3s5CKLcDGy' https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://in.getclicky.com https://static.getclicky.com; connect-src 'self' https://www.google-analytics.com https://in.getclicky.com; img-src 'self' data: https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://in.getclicky.com; media-src 'self'; style-src 'self' https://tagmanager.google.com https://fonts.googleapis.com; manifest-src 'self'; font-src 'self' data: https://fonts.gstatic.com; base-uri 'none'; form-action 'self' https://transnexus.us19.list-manage.com; frame-src https://bid.g.doubleclick.net https://www.youtube.com; frame-ancestors 'none'; block-all-mixed-content 1
img-src https: data:; frame-src https:; form-action https:; script-src https: 'unsafe-inline' 'unsafe-eval';style-src https: 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' schnitzel.stefanjudis.com production-assets.codepen.io static.codepen.io storage.googleapis.com cdn.jsdelivr.net *.carbonads.com *.carbonads.net unpkg.com cdn.skypack.dev; style-src 'self' 'unsafe-inline' unpkg.com; img-src 'self' data: images.contentful.com downloads.ctfassets.net images.ctfassets.net www.gravatar.com pbs.twimg.com platform-lookaside.fbsbx.com *.buysellads.net ad.doubleclick.net pixel.adsafeprotected.com static.adsafeprotected.com tps.doubleverify.com i.ytimg.com; font-src 'self' data:; connect-src 'self' cdn.contentful.com images.contentful.com videos.contentful.com images.ctfassets.net videos.ctfassets.net schnitzel.stefanjudis.com unpkg.com; media-src 'self' videos.contentful.com videos.ctfassets.net; object-src 'self'; frame-src 'self' codepen.io www.youtube.com; frame-ancestors 'self'; worker-src 'self' blob:; block-all-mixed-content; manifest-src 'self'; prefetch-src 'self'; report-uri https://stefanjudis.report-uri.com/r/d/csp/reportOnly 1
frame-ancestors 'self' https://*.metro.de https://*.metrosystems.net https://*.metro-group.com  https://app.optimizely.com https://cdn-assets-prod.s3.amazonaws.com 1
default-src 'self' https://*.googleapis.com/ https://www.google-analytics.com/ http://www.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://*.facebook.net/ https://*.facebook.com/ https://*.hotjar.com/ https://*.hotjar.io/ https://*.matterport.com/ https://*.praha3.cz/ https://upload.wikimedia.org/ https://portal.digilab.nfa.cz/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com/ https://www.google-analytics.com/ http://www.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://*.facebook.net/ https://*.facebook.com/ https://*.hotjar.com/ https://*.hotjar.io/ https://*.matterport.com/ https://*.praha3.cz/ https://upload.wikimedia.org/ https://portal.digilab.nfa.cz/; connect-src 'self' https://*.googleapis.com/ https://www.google-analytics.com/ http://www.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://*.facebook.net/ https://*.facebook.com/ https://*.hotjar.com/ https://*.hotjar.io/ https://*.matterport.com/ https://*.praha3.cz/ https://upload.wikimedia.org/ https://portal.digilab.nfa.cz/; img-src 'self' data: blob: 'unsafe-inline' https://*.googleapis.com/ https://www.google-analytics.com/ http://www.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://*.facebook.net/ https://*.facebook.com/ https://*.hotjar.com/ https://*.hotjar.io/ https://*.matterport.com/ https://*.praha3.cz/ https://upload.wikimedia.org/ https://portal.digilab.nfa.cz/; font-src 'self' https://*.googleapis.com/ https://www.google-analytics.com/ http://www.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://*.facebook.net/ https://*.facebook.com/ https://*.hotjar.com/ https://*.hotjar.io/ https://*.matterport.com/ https://*.praha3.cz/ https://upload.wikimedia.org/ https://portal.digilab.nfa.cz/; style-src 'self' 'unsafe-inline' https://*.googleapis.com/ https://www.google-analytics.com/ http://www.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://*.facebook.net/ https://*.facebook.com/ https://*.hotjar.com/ https://*.hotjar.io/ https://*.matterport.com/ https://*.praha3.cz/ https://upload.wikimedia.org/ https://portal.digilab.nfa.cz/; frame-src 'self' https://*.googleapis.com/ https://www.google-analytics.com/ http://www.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://*.facebook.net/ https://*.facebook.com/ https://*.hotjar.com/ https://*.hotjar.io/ https://*.matterport.com/ https://*.praha3.cz/ https://upload.wikimedia.org/ https://portal.digilab.nfa.cz/ 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-MDk3MGE3YzQtZmYzZC00MTM2LTk0M2ItMGI4MGE0NzRlOWI5'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
Content-Security-Policy	script-src 'self' https://www.general-security.gov.lb 'unsafe-inline' 'unsafe-eval'; object-src 'self' https://www.general-security.gov.lb 'unsafe-inline'; connect-src 'self' https://www.general-security.gov.lb 'unsafe-inline' 1
default-src 'self' *.bricodepotcdn.ro;style-src 'self' 'unsafe-inline' *.bricodepotcdn.ro fonts.googleapis.com *.bazaarvoice.com code.ionicframework.com cdnjs.cloudflare.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.bricodepotcdn.ro mpsnare.iesnare.com cdn.mookie1.com survey.euro.confirmit.com www.google-analytics.com www.google.com www.gstatic.com www.googletagmanager.com ssl.google-analytics.com www.googleadservices.com connect.facebook.net googleads.g.doubleclick.net *.tvsquared.com *.bazaarvoice.com a.opmnstr.com cdnjs.cloudflare.com acdn.adnxs.com static.hotjar.com script.hotjar.com polyfill.io;font-src 'self' data: *.bricodepotcdn.ro fonts.gstatic.com code.ionicframework.com *.bazaarvoice.com;img-src 'self' data: blob: *.bricodepotcdn.ro *.mookie1.com www.google-analytics.com www.facebook.com stats.g.doubleclick.net www.google.com www.google.ro img.youtube.com i.ytimg.com www.googletagmanager.com *.tvsquared.com optin-monster.s3.amazonaws.com *.opmnstr.com *.bazaarvoice.com ib.adnxs.com;media-src 'self' data: blob:;frame-src 'self' *.bricodepotcdn.ro survey.euro.confirmit.com www.google.com www.youtube-nocookie.com *.facebook.com *.bazaarvoice.com vars.hotjar.com;connect-src 'self' *.bricodepotcdn.ro api.omappapi.com *.mookie1.com www.google-analytics.com connect.facebook.net www.google.com www.google.ro www.interactivpdf.com *.youtube.com survey.euro.confirmit.com heatmaps.presti.media *.opmnstr.com stats.g.doubleclick.net *.bazaarvoice.com *.hotjar.com *.hotjar.io wss://ws4.hotjar.com; 1
default-src 'self'; img-src 'self' data: * https://www.google-analytics.com/; script-src 'self' 'strict-dynamic' 'unsafe-inline' 'nonce-cf94c55a-d270-48ff-99c2-300bf5ccbf15' https://www.google-analytics.com/; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; frame-src 'self'; object-src 'none'; base-uri 'self'; connect-src 'self' https://api.dribbble.com https://sentry.audent.io https://www.google-analytics.com/; form-action 'self'; media-src 'self' https://cdn.dribbble.com https://static.dribbble.com 1
frame-ancestors 'self' *.xealth.io 1
default-src blob: https: 'unsafe-inline' data: 'unsafe-eval' wss: 1
default-src 'self' https://*.wistia.com https://*.wistia.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://view.ceros.com https://js.hsleadflows.net https://js.hscta.net https://*.hubspot.com https://static.ads-twitter.com https://js.hs-scripts.com https://siteimproveanalytics.com https://*.allenmatkins.com/ https://video.allenmatkins.com https://report.23video.com https://analytics.twitter.com https://js.hs-analytics.net https://www.youtube.com https://player.vimeo.com https://s.ytimg.com https://analytics.rubensteintech.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://s3.amazonaws.com https://*.allenmatkins.com https://*.allenmatkins.com https://video.allenmatkins.com https://*.wistia.com https://*.wistia.net https://src.litix.io https://js.hs-banner.com https://js.hsadspixel.net; style-src 'self' 'unsafe-inline' https://*.allenmatkins.com https://*.allenmatkins.com https://fonts.googleapis.com https://fonts.gstatic.com https://fast.wistia.com blob:; img-src 'self' https://*.hubspot.net https://*.hubspot.com https://*.hubspotusercontent10.net https://connect.allenmatkins.com https://track.hubspot.com https://*.siteimproveanalytics.io https://t.co https://analytics.rubensteintech.com https://i.ytimg.com https://stats.g.doubleclick.net https://www.google.com https://www.google-analytics.com https://images.unsplash.com https://www.googletagmanager.com https://maps.gstatic.com https://maps.googleapis.com https://img.youtube.com https://i.vimeocdn.com https://*.allenmatkins.com https://*.allenmatkins.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net data:; media-src 'self' https://*.allenmatkins.com https://*.wistia.com https://*.wistia.net blob: data:; frame-src 'self' https://www.google.com/recaptcha/ https://www.youtube.com https://player.vimeo.com https://video.allenmatkins.com https://fast.wistia.com https://fast.wistia.net https://view.ceros.com blob:; frame-ancestors 'self' https://*.allenmatkins.com https://*.allenmatkins.com https://events1.social27.com; font-src https://fonts.gstatic.com https://*.allenmatkins.com https://*.allenmatkins.com https://*.wistia.com data:; connect-src 'self' https://cdn.plyr.io https://vimeo.com https://*.allenmatkins.com https://api.hubapi.com https://*.litix.io https://*.wistia.com https://embedwistia-a.akamaihd.net https://forms.hubspot.com; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://mc.yandex.ru https://static.epayments.com; img-src 'self' https://ssl.google-analytics.com https://mc.yandex.ru https://pp.vk.me https://vk.com https://chart.googleapis.com *.userapi.com https://static.epayments.com; style-src 'self' 'unsafe-inline'; font-src 'self' https://static.epayments.com; frame-src 'self' https://static.epayments.com; object-src 'self' 1
default-src 'self' http://localhost:4200 ; script-src 'self' www.google-analytics.com www.googleadservices.com www.googletagmanager.com googleads.g.doubleclick.net 'sha256-4CvayC4Ok6d1a6e3UazuPEPVsCNm0EgyPrUsV3POmSI=' http://localhost:4200 'sha256-AXIIM4FqCo1K0BX1hMIT/+4imm0zG/aDGzoTP0A8q84=' 'sha256-syPUeMi2THgcS3Oqscv6dDYFTrUbWSk8YLdugGe2TnM=' ; style-src 'self' 'unsafe-inline' ; img-src 'self' data: via.placeholder.com www.google.com www.google.co.uk www.google-analytics.com ; connect-src 'self' www.creation.co.uk www.creation.co.uk:9443 www.creation.co.uk:8443 www.google-analytics.com stats.g.doubleclick.net ; font-src 'self' ; object-src 'none' ; plugin-types application/pdf application/json ;  1
script-src 'self' https://chart.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com 'unsafe-inline' 'unsafe-eval'; report-uri https://www.xtm-cloud.com:443/saas-manager/cspReport.serv; img-src 'self' https://chart.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com; style-src 'self' 'unsafe-inline' 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://dobbs.town; img-src 'self' https: data: blob: https://dobbs.town; style-src 'self' https://dobbs.town 'nonce-pMTGNB8BVu/tD2xXDQYhRg=='; media-src 'self' https: data: https://dobbs.town; frame-src 'self' https:; manifest-src 'self' https://dobbs.town; connect-src 'self' data: blob: https://dobbs.town https://cdn.masto.host wss://dobbs.town; script-src 'self' https://dobbs.town; child-src 'self' blob: https://dobbs.town; worker-src 'self' blob: https://dobbs.town 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.qwant.com; media-src blob: *.qwant.com *.apple.com *.qobuz.com; object-src 'self'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' data: *.qwant.com; base-uri 'self'; block-all-mixed-content; img-src blob: 'self' s1.qwant.com s2.qwant.com s.qwant.com f.qwant.com data: s-boards.qwant.com s-lite.qwant.com www.qwant.com; worker-src blob: 'self' www.youtube-nocookie.com www.youtube.com; default-src 'self' data: blob:; form-action 'self'; frame-ancestors *.qwant.com *.qwantjunior.com lmqt.fyi; frame-src viewer.dood3d.com *.vid.web.acsta.net player.twitch.tv player.vimeo.com www.dailymotion.com *.qwant.com *.qwantjunior.com www.youtube-nocookie.com player.myvideoplace.tv; style-src 'unsafe-inline' data: *.qwant.com *.qwantjunior.com *.kamoov.com; font-src 'self'; connect-src *.qobuz.com *.apple.com wss://masq-ws.qwant.com *.qwant.com extras.qwantjunior.com *.qwantjunior.com;  1
frame-ancestors 'self' https://www.omfcanada.ngo https://omfcanada.ngo https://www.omf.ngo https://omf.ngo 1
default-src 'self' bizimhesap.com *.google.com *.facebook.com *.facebook.net *.gstatic.com *.youtube.com *.ytimg.com *.tawk.to wss://*.tawk.to *.typography.com *.googleapis.com *.stripe.com *.bootstrapcdn.com *.cloudflare.com *.online-metrix.net *.googletagmanager.com *.google-analytics.com *.jsdelivr.net *.googleusercontent.com;script-src 'unsafe-eval' 'unsafe-inline' 'self' bizimhesap.com *.google.com *.facebook.com *.facebook.net *.gstatic.com *.youtube.com *.ytimg.com *.tawk.to wss://*.tawk.to *.typography.com *.googleapis.com *.stripe.com *.bootstrapcdn.com *.cloudflare.com *.online-metrix.net *.googletagmanager.com *.google-analytics.com *.jsdelivr.net *.googleusercontent.com;style-src 'unsafe-inline' 'unsafe-eval' 'self' bizimhesap.com *.google.com *.facebook.com *.facebook.net *.gstatic.com *.youtube.com *.ytimg.com *.tawk.to wss://*.tawk.to *.typography.com *.googleapis.com *.stripe.com *.bootstrapcdn.com *.cloudflare.com *.online-metrix.net *.googletagmanager.com *.google-analytics.com *.jsdelivr.net *.googleusercontent.com;frame-src 'unsafe-eval' 'unsafe-inline' 'self' bizimhesap.com *.google.com *.facebook.com *.facebook.net *.gstatic.com *.youtube.com *.ytimg.com *.tawk.to wss://*.tawk.to *.typography.com *.googleapis.com *.stripe.com *.bootstrapcdn.com *.cloudflare.com *.online-metrix.net *.googletagmanager.com *.google-analytics.com *.jsdelivr.net *.googleusercontent.com;font-src data 'self' bizimhesap.com *.google.com *.facebook.com *.facebook.net *.gstatic.com *.youtube.com *.ytimg.com *.tawk.to wss://*.tawk.to *.typography.com *.googleapis.com *.stripe.com *.bootstrapcdn.com *.cloudflare.com *.online-metrix.net *.googletagmanager.com *.google-analytics.com *.jsdelivr.net *.googleusercontent.com;connect-src 'self' wss://esirket.com https://esirket.com wss://*.tawk.to *.tawk.to *.google-analytics.com;img-src 'self' data: *.jsdelivr.net *.googleusercontent.com 'self' bizimhesap.com *.google.com *.facebook.com *.facebook.net *.gstatic.com *.youtube.com *.ytimg.com *.tawk.to wss://*.tawk.to *.typography.com *.googleapis.com *.stripe.com *.bootstrapcdn.com *.cloudflare.com *.online-metrix.net *.googletagmanager.com *.google-analytics.com *.jsdelivr.net *.googleusercontent.com 1
frame-ancestors 'self' http://greyhound.charterhouse.org.uk https://charterhouse.fireflycloud.net; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'none' 1
default-src 'self'; child-src 'self' https://platform.twitter.com https://staticxx.facebook.com https://www.facebook.com https://fast.wistia.net https://www.useloom.com https://www.loom.com https://play.vidyard.com https://player.vimeo.com https://www.youtube.com https://intercom-sheets.com https://www.intercom-reporting.com; connect-src 'self' wss://*.intercom.io https://*.intercom.io https://*.intercom.com https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://www.google-analytics.com https://stats.g.doubleclick.net; font-src data: https:; frame-ancestors 'self' https://intercom.skilljar.com; img-src data: blob: https: http:; media-src data: blob: https:; object-src 'self' https://static.intercomassets.com; script-src 'self' https://connect.facebook.net https://platform.twitter.com https://static.intercomassets.com https://googleadservices.com https://googletagmanager.com https://google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://intercom.help 'nonce-qT7Fqc9/p1ab+5Vzv7ifJ7OSbFO4e4z1HN/msPK+Xlw='; style-src 'self' 'unsafe-inline' https://fonts.intercomcdn.com https://static.intercomassets.com https://static.intercomcdn.com https://marketing.intercomassets.com https://marketing.intercomcdn.com https://intercom.help 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/api.js?onload=cf7srLoadCallback&render=explicit https://www.gstatic.com/recaptcha/api2/v1528135568984/recaptcha__de.js ; object-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; media-src 'self'; child-src 'self' https:; font-src 'self' data:; connect-src 'self' 1
https: 'unsafe-inline'; reflected-xss block 1
default-src 'self' api.craftcms.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' js.stripe.com cdnjs.cloudflare.com code.jquery.com piwik.kolle-rebbe.net s.ytimg.com www.youtube.com consent.cookiebot.com consentcdn.cookiebot.com snap.licdn.com; object-src 'self'; style-src 'self' 'unsafe-inline' fast.fonts.net; img-src 'self' data: pluginicons.craft-cdn.com secure.gravatar.com piwik.kolle-rebbe.net www.youtube-nocookie.com px.ads.linkedin.com www.linkedin.com; frame-src 'self' js.stripe.com piwik.kolle-rebbe.net www.youtube.com www.youtube-nocookie.com consentcdn.cookiebot.com; font-src 'self' data: fast.fonts.net; 1
default-src 'self' https://vilans.blueconic.net https://api.ipify.org https://www.google.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://extend.vimeocdn.com https://code.jquery.com https://plugins.blueconic.net https://collect.mopinion.com https://deploy.mopinion.com https://cdn.blueconic.net https://vilans.blueconic.net https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://www.google.com https://optimize.google.com https://tagmanager.google.com https://js.driftt.com https://static.landbot.io https://landbot.io https://static.hotjar.com https://script.hotjar.com https://statistiek.rijksoverheid.nl https://ajax.googleapis.com;style-src 'self' 'unsafe-inline' https://plugins.blueconic.net https://fonts.mopinion.com blob: https://hello.myfonts.net https://fonts.googleapis.com https://fonts.gstatic.com https://optimize.google.com https://tagmanager.google.com https://landbot.io;img-src 'self' data: https://www.google.nl https://www.google.com https://www.google-analytics.com https://img.youtube.com https://www.googletagmanager.com https://www.gstatic.com https://ssl.gstatic.com https://static.landbot.io https://stats.g.doubleclick.net https://statistiek.rijksoverheid.nl https://vilans.blueconic.net https://plugins.blueconic.net;frame-src 'self' https://www.flexmail.eu https://optimize.google.com https://www.google.com https://js.driftt.com https://landbot.io https://vars.hotjar.com;font-src 'self' https://script.hotjar.com https://fonts.gstatic.com https://gstatic.mopinion.com;connect-src 'self' https://www.google-analytics.com https://pastease.mopinion.com https://cacheorcheck.mopinion.com wss://ws10.hotjar.com/api/v1/client/ws https://vc.hotjar.io https://in.hotjar.com https://landbot.io https://api.ipify.org https://vilans.blueconic.net https://deploy.mopinion.com https://stats.g.doubleclick.net 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com https://tagmanager.google.com www.googletagmanager.com *.googletagmanager.com bam.nr-data.net js-agent.newrelic.com viewmedica.com *.viewmedica.com swarminteractive.com *.swarminteractive.com *.virtualspirits.com *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.livechatinc.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com *.cloudflare.com 172.16.2.69:91 *.virtualspirits.com *.fontawesome.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com *.livechatinc.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com *.fontawesome.com *.livechatinc.com data:; img-src * 'self' *.lfi.cl *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.lfi.cl *.eloqua.com track.hubspot.com *.livechatinc.com; media-src 'self' *.lfi.cl *.livechatinc.com data: blob:; child-src 'self' * www.bancoestado.cl bancoestado.cl webpay3g.transbank.cl *.transbank.cl *.hotjar.com https://6c03d479ec55ad2eb218a2aba471ee8cfc457a3e.agenda.softwaredentalink.com 6c03d479ec55ad2eb218a2aba471ee8cfc457a3e.agenda.softwaredentalink.com agendamiento.softwaredentalink.com viewmedica.com *.google.com *.clinicauandes.cl *.lfi.cl lfi.lfi.cl http://172.16.2.69:91/ swarminteractive.com 172.16.2.69:91 *.swarminteractive.com *.virtualspirits.com https://platform.twitter.com/ *.livechatinc.com https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; connect-src 'self' stats.g.doubleclick.net www.google-analytics.com *.hotjar.io wss://ws6.hotjar.com *.hotjar.com www.facebook.com bam.nr-data.net accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com *.livechatinc.com; 1
frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com; report-uri http://site.foodshare.org/site/XFrameViolation 1
default-src 'self';style-src 'self' 'unsafe-inline' https://*.googleapis.com/ https://tagmanager.google.com https://fonts.googleapis.com;font-src 'self' https://*.gstatic.com/ data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;img-src 'self' data: http://* https://*;script-src 'self' https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 'unsafe-eval' 'unsafe-inline';script-src-elem 'self' https://www.googletagmanager.com/ https://www.google-analytics.com/ https://*.facebook.net/ https://*.tellq.io/ https://*.livechatinc.com/ https://omnisrc.com https://*.soundestlink.com/ https://*.cookiebot.com/ https://polyfill.io http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 'unsafe-eval' 'unsafe-inline';frame-src 'self' https://*.cookiebot.com/ https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://bid.g.doubleclick.net https://*.livechatinc.com/ https://www.facebook.com/ https://www.youtube.com/ https://www.google.com/;frame-ancestors 'none';connect-src 'self' https://*.searchnode.net/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://*.facebook.net/ http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com/ https://multi-api-v3.tellq.io/ https://*.tellq.io/ https://*.livechatinc.com/ https://omnisrc.com https://*.soundestlink.com/ https://*.cookiebot.com/ https://polyfill.io 1
script-src 'report-sample' 'nonce-I7U4HiXODh6QGPn4hPzzeg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport 1
default-src 'self'; script-src 'self' data: 'unsafe-inline' https://www.google.com https://www.gstatic.com; object-src 'none'; style-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com; img-src *; media-src *; frame-src 'self' https://www.google.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' 1
frame-ancestors 'self' http://www.philips.fi *.philips.com *.philips.fi 1
frame-ancestors 'none'; default-src 'self' https://*.aol.com https://*.yahoo.com https://*.yimg.com; img-src * data:; script-src 'self' 'unsafe-inline' 'nonce-1D8NOqg9hc7RlQ+XQ7zsaA==' 'unsafe-eval' https://*.yahoo.com https://*.yimg.com https://*.aol.com https://*.aolcdn.com *.oath.com *.google.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net *.googlesyndication.com https://sb.scorecardresearch.com bat.bing.com *.demdex.net; style-src 'self' 'unsafe-inline' https://*.yimg.com; object-src *; connect-src *; font-src * data:; frame-src 'self' https://*.youtube.com https://s.yimg.com https://*.yahoo.com *.g.doubleclick.net *.googlesyndication.com; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' img.youtube.com youtube.com cdn.jsdelivr.net www.youtube.com maps.gstatic.com data: fonts.gstatic.com fonts.googleapis.com www.gstatic.com platform.twitter.com s7.addthis.com www.google-analytics.com z.moatads.com cdn.syndication.twimg.com m.addthis.com v1.addthisedge.com stats.g.doubleclick.net syndication.twitter.com pbs.twimg.com maps.google.com maps.googleapis.com; report-uri /admin/config/system/seckit/csp-report 1
frame-ancestors 'self' https://mboutrecht.onderwijsonline.nl 1
font-src 'self' *.gstatic.com data:;              style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com;              script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cdic.ca *.gstatic.com *.google.com googleads.g.doubleclick.net www.googleadservices.com connect.facebook.net www.googletagmanager.com www.google-analytics.com *.googleapis.com *.youtube.com s.ytimg.com tagmanager.google.com *.bing.com;              img-src * data:; 1
default-src 'none'; style-src 'self'; media-src 'self' rtmp:; img-src 'self' 'unsafe-inline' https://queer.hacktivis.me/; script-src 'self'; object-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none' 1
All content will be vetted and secured 1
frame-ancestors 'self' us.creativecdn.com *.encuentra24.com *.inmobiliaria24.com *.casas24.com encuentra24.zendesk.com *.youtube.com view.atdmt.com www.facebook.com www.google.com encuentra24.wufoo.com.mx encuentra24.ticforum-ca.com tpc.googlesyndication.com googleads.g.doubleclick.net storage.googleapis.com js.stripe.com e24.unityducruet.com cotizador.unityducruet.com api-js.datadome.co s.ytimg.com www-widgetapi.js googlesyndication.com youtube.com teads.tv; 1
font-src https://cdnjs.cloudflare.com/ https://fonts.gstatic.com/ http://www.aexp-static.com/ https://use.typekit.net/ 'self' http://fonts.gstatic.com/ https://cloud.webtype.com/ https://s3-ap-southeast-1.amazonaws.com/ https://cache.marriott.com/ https://www.aexp-static.com:50443/ https://fonts.googleapis.com/ https://*.bootstrapcdn.com/ https://*.aexp-static.com/ http://cloud.webtype.com/ https://origin-pqgemapp.americanexpress.com/ data:; img-src 'self' data: https: http:; script-src http://assets.adobedtm.com/ http://www.americanexpress.com/ https://s.ytimg.com/ 'self' https://*.delvenetworks.com/ https://*.demdex.net/ https://cdn.taboola.com/ https://*.cloudfront.net/ https://analytics.twitter.com/ https://px.ads.linkedin.com/ https://*.lpsnmedia.net/ https://googletagmanager.com/ https://s.yimg.com/ https://www.gstatic.com/ https://www.googleadservices.com/ https://sp.analytics.yahoo.com/ https://*.hotjar.com/ https://qapm.baidu.com/ https://c00.adobe.com/ http://*.aexp-static.com/ https://static.criteo.net/ https://report1.maritz.com/ https://bat.bing.com/ https://github.com/ https://*.google.com/ https://*.omtrdc.net/ https://js.maxmind.com/ https://s.go-mpulse.net/ https://ads.avocet.io/ https://*.s3-ap-southeast-1.amazonaws.com/ https://*.doubleclick.net/ https://www.facebook.com/ https://*.contentsquare.com/ https://cdnssl.clicktale.net/ https://secure.leadforensics.com/ https://fidoapi.com/ https://browser-update.org/ 'unsafe-eval' https://cdnjs.cloudflare.com/ https://assets.adobedtm.com/ 'unsafe-inline' https://use.typekit.net/ https://static.ads-twitter.com/ https://tpc.googlesyndication.com/ https://stags.bluekai.com/ https://*.liveperson.net/ https://maxcdn.bootstrapcdn.com/ https://sp1004f289.guided.ss-omtrdc.net/ https://code.jquery.com/ https://www.cdn-net.com/ https://dev.visualwebsiteoptimizer.com/ https://service.maxymiser.net/ https://*.aexp-static.com/ https://www.youtube.com/ https://snap.licdn.com/ http://nexus.ensighten.com/ https://connect.facebook.net/ https://*.americanexpress.com/ https://*.google-analytics.com/ https://ct.contentsquare.net/ https://nexus.ensighten.com/ http://www.youtube.com/ https://*.googleapis.com/ https://contentsquare.com/ https://s3-ap-southeast-1.amazonaws.com/ https://n-cdn.areyouahuman.com/ https://*.en25.com/ https://*.acxiom.com/ https://*.akamaihd.net/; base-uri https://aeopprodvip.acxiom.com/ https://*.americanexpress.com/ https://ds-aksb-a.akamaihd.net/ 'self'; frame-src https://tpc.googlesyndication.com/ https://*.demdex.net/ https://*.liveperson.net/ https://player.vimeo.com/ https://vars.hotjar.com/ https://www.cdn-net.com/ https://service.maxymiser.net/ https://www.googletagmanager.com/ https://*.youtube.com/ https://*.aexp-static.com/ https://connect.facebook.net/ https://view.axel.org/ https://*.americanexpress.com/ http://lsrelay-config-production.s3.amazonaws.com/ https://myhrportal-en.custhelp.com/ https://*.google.com/ https://lpcdn.lpsnmedia.net/ https://*.facebook.com/ http://www.youtube.com/ https://*.doubleclick.net/ https://versicherungen.amex-services.de/ https://youtube.com/ https://*.akamaihd.net/ https://stoamigocom.s3.amazonaws.com/; form-action https://www.assurances.americanexpress.fr/ https://connect.facebook.net/ http://www.americanexpress.com/ https://*.americanexpress.com/ 'self' https://amex.voiceradar.com.br/ https://amex.chubbtravelinsurance.com.sg/ https://americanexpress-sg.custhelp.com/ https://www.cdn-net.com/ https://www.facebook.com/ https://amex-api.homolog.lqdi.net/ https://www.axa-travel-insurance.com/ https://*.eloqua.com/; worker-src  'self' blob:; frame-ancestors https://*.aexp.com/  https://*.americanexpress.com/; style-src http://www145.americanexpress.com/ https://cdnjs.cloudflare.com/ https://*.americanexpress.com/ 'unsafe-inline' 'self' https://cloud.webtype.com/ https://*.typekit.net/ https://s3-ap-southeast-1.amazonaws.com/ https://*.s3-ap-southeast-1.amazonaws.com/ https://14106077.va.cobrowse.liveperson.net/ https://fonts.googleapis.com/ https://*.bootstrapcdn.com/ https://*.aexp-static.com/ http://cloud.webtype.com/; plugin-types  image/svg+xml; media-src https://*.s3-ap-southeast-1.amazonaws.com/ https://origin-slgem.americanexpress.com/ 'self' http://production.smedia.lvp.llnw.net/ https://ssl.gstatic.com/ https://lpcdn.lpsnmedia.net/ https://production.smedia.lvp.llnw.net/ data:; report-uri https://csp.tsrs.cloud/r/dfd1f1800d789d5ec6b4b9cc277a7ac2093b167d; connect-src https://assets.adobedtm.com/ 'self' https://stats.g.doubleclick.net/ https://performance.typekit.net/ wss://www.americanexpress.com/ https://*.liveperson.net/ https://*.contentsquare.net/ https://code.jquery.com/ https://www.google-analytics.com/ https://s.yimg.com/ https://amex-api.homolog.lqdi.net/ https://cached-cors-proxy.consumercentric.eu/ https://americanexpresscards.tt.omtrdc.net/ https://*.eloqua.com/ https://in.hotjar.com/ https://d.turn.com/ https://*.aexp-static.com/ https://s.delvenetworks.com/ https://*.visualwebsiteoptimizer.com/ https://www.flipkart.com/ http://iwmap.americanexpress.com/ https://connect.facebook.net/ http://www.aexp-static.com/ https://*.americanexpress.com/ https://c.go-mpulse.net/ https://dpm.demdex.net/ wss://iwmap.americanexpress.com/ https://www.americanexpressindia.co.in/ https://bat.bing.com/ https://amex.voiceradar.com.br/ https://sb-ssl.google.com/ https://americanexpress-sg.custhelp.com/ http://dpm.demdex.net/ https://www.facebook.com/ https://vc.hotjar.io/ https://*.acxiom.com/ wss://va.msg.liveperson.net/ https://*.akamaihd.net/ https://col.eum-appdynamics.com/ https://ajax.googleapis.com/; object-src https://assets.delvenetworks.com/ http://*.delvenetworks.com/ https://www.youtube.com/ https://*.aexp-static.com/ 'self';  1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://*; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://dps.psx.com.pk https://s3.ap-south-1.amazonaws.com https://cdnjs.cloudflare.com http://admin.capitalstake.com http://code.jquery.com http://www.google-analytics.com http://connect.facebook.net http://platform.twitter.com https://cdn.mathjax.org  https://www.capitalanalytics.co http://www.capitalstake.com https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com https://connect.facebook.net https://platform.twitter.com  https://www.google-analytics.com  https://ssl.google-analytics.com; connect-src 'self' 'unsafe-inline' https://dps.psx.com.pk https://www.capitalstake.com wss://market.capitalstake.com/stream https://market.capitalstake.com  https://search.capitalstake.com/filter;  style-src 'self' 'unsafe-inline' https://s3.ap-south-1.amazonaws.com http://admin.capitalstake.com http://code.jquery.com http://fonts.googleapis.com https://fonts.googleapis.com;  font-src 'self' 'unsafe-inline' data: https://cdnjs.cloudflare.com  https://s3.ap-south-1.amazonaws.com  http://fonts.gstatic.com https://fonts.googleapis.com  https://cdn.syndication.twimg.com https://cdn.mathjax.org https://fonts.gstatic.com; frame-src 'self' 'unsafe-inline' *.amazonaws.com https://www.google.com http://staticxx.facebook.com https://www.youtube.com  https://s3.amazonaws.com http://s3.amazonaws.com http://platform.twitter.com https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com https://web.facebook.com https://staticxx.facebook.com; img-src 'self' 'unsafe-inline' data: *.cemnet.com *.dailytimes.com.pk *.thenews.com.pk https://*.dawn.com http://*.dawn.com *.toiimg.com *.geo.tv *.pakistantoday.com.pk https://profit.pakistantoday.com.pk https://*.tribune.com.pk https://tribune.com.pk *.marketscreener.com *.zawya.com *.urdupoint.com https://dailytimes.com.pk https://www.brecorder.com/* https://brecorder.com https://www.brecorder.com https://www.thenews.com.pk https://tribune.com.pk https://www.dawn.com https://www.urdupoint.com https://profit.pakistantoday.com.pk https://nation.com.pk https://dailytimes.com.pk https://fp.brecorder.com https://www.pakistantoday.com.pk http://www.dawn.com https://www.marketscreener.com https://www.globalvillagespace.com https://finance.yahoo.com https://www.samaa.tv https://www.forbes.com https://www.nytimes.com https://www.pakwheels.com https://www.fool.com https://www.techjuice.pk https://arynews.tv https://www.ft.com https://www.businesswire.com https://www.reuters.com https://www.cemnet.com https://pakobserver.net https://simplywall.st http://www.bolnews.com https://www.wsj.com https://www.bolnews.com https://www.cnbc.com https://www.globalcement.com https://www.bloomberg.com https://www.yahoo.com https://www.washingtonpost.com https://seekingalpha.com https://www.bbc.com https://asia.nikkei.com https://www.businessinsider.com https://dunyanews.tv https://www.zawya.com https://customstoday.com.pk https://images.dawn.com https://aurora.dawn.com https://blogs.tribune.com.pk http://www.xinhuanet.com https://www.fitchratings.com https://www.npr.org https://www.economist.com https://qz.com https://*.dunyanews.tv https://*.googleusercontent.com https://dps.psx.com.pk https://cs-static-content.s3.ap-south-1.amazonaws.com https://encrypted-tbn1.gstatic.com https://encrypted-tbn2.gstatic.com  https://encrypted-tbn0.gstatic.com https://encrypted-tbn3.gstatic.com http://www.capitalstake.com http://capitalstake.com http://admin.capitalstake.com http://www.thenews.com.pk http://www.brecorder.com http://s2.reutersmedia.net http://s3.reutersmedia.net http://code.jquery.com  http://www.google-analytics.com https://www.google.com.pk http://t0.gstatic.com http://t1.gstatic.com http://t2.gstatic.com http://t3.gstatic.com https://cdn.mathjax.org https://www.google.com https://stats.g.doubleclick.net https://www.facebook.com https://syndication.twitter.com https://web.facebook.com https://www.google-analytics.com 1
default-src data: https: 'unsafe-inline' 'unsafe-eval'; font-src https: data: https://fonts.googleapis.com 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'self' http://*.dji.com https://*.dji.com 1
default-src 'self' blob: https://vars.hotjar.com/; frame-src 'self' https://w.soundcloud.com/ *.buzzsprout.com *.nspa.org.uk *.hotjar.com *.nhs.uk/ *.facebook.com/ *.youtube.com/ *.vimeo.com/ *.google.com/ *.googleapis.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mozilla.github.io/ * https://mozilla.github.io/pdf.js/build/pdf.js https://cdn.jsdelivr.net/gh/fancyapps/ *.buzzsprout.com *.heat6have.com https://static.hotjar.com/ https://www.googletagmanager.com/ *.hotjar.com https://www.googletagmanager.com/ *.hotjar.co blob: https://cdnjs.cloudflare.com/ https://www.google-analytics.com/ https://connect.facebook.net/ https://feeds.trac.jobs/ *.google.com *.googleapis.com *.gstatic.com *.cqc.org.uk ; font-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/summernote/ *.hotjar.com *.typekit.net https://fonts.googleapis.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/gh/fancyapps/ *.typekit.net https://cdnjs.cloudflare.com/ https://feeds.trac.jobs/ *.googleapis.com  *.gstatic.com *.cqc.org.uk; img-src * data:; object-src 'self' blob:; connect-src 'self' https://stats.g.doubleclick.net/ https://www.google-analytics.com/ https://translate.googleapis.com/ *.hotjar.com *.hotjar.io wss://*.hotjar.com/ https://feeds.trac.jobs/ 1
font-src * 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src data: 'self'; frame-src 'self' 1
default-src https: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; font-src https: data:; media-src * 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: unpkg.com static1.mybonuscenter.com maxcdn.bootstrapcdn.com ajax.googleapis.com graph.facebook.com www.googletagmanager.com www.google-analytics.com code.jquery.com errors.angularjs.org connect.facebook.net videojs.com paypal.com www.paypal.com www.paypalobjects.com paypalobjects.com vjs.zencdn.net www.googleadservices.com googleads.g.doubleclick.net www.google.com; 1
block-all-mixed-content; default-src 'self' https:; font-src 'self' data: https:; img-src 'self' data: https:; report-to csp_default; report-uri https://errors.tdncld.net/api/3/security/?sentry_key=4506ed9868c04825ab93bc512dc6a5e9; script-src 'self' 'unsafe-eval' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https: 1
default-src 'unsafe-eval' 'unsafe-inline' 'self' data: *.vars.com vars.com *.googleapis.com *.ovh.net *.skiplan.com *.googleadservices.com *.google-analytics.com  *.doubleclick.net *.youtube.com *.google.com *.google.fr *.gstatic.com *.vimeo.com *.vimeocdn.com *.openrunner.com unpkg.com *.mapbox.com *.facebook.com *.facebook.net *.zenbus.net *.skidor.com *.liveski.fr *.skaping.com *.webcam-hd.com *.vision-environnement.com *.twitter.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.katchup.fr; frame-ancestors 'self'; 1
script-src 'self' https://bat.bing.com https://app.intercom.io https://connect.facebook.net https://js.intercomcdn.com https://widget.intercom.io 'nonce-4Ta6yEb4QyMHKHRTwmg/gw=='; font-src 'self' https://js.intercomcdn.com; base-uri 'none'; frame-ancestors 'none'; object-src 'none'; sandbox allow-same-origin allow-forms allow-scripts allow-modals allow-popups allow-downloads; upgrade-insecure-requests; child-src 'self' https://player.vimeo.com https://www.youtube.com https://www.intercom-reporting.com https://www.googletagmanager.com https://fast.wistia.net https://bid.g.doubleclick.net https://intercom-sheets.com https://share.intercom.io; form-action 'self' https://connect.stripe.com https://api-iam.intercom.io https://intercom.help; connect-src 'self' https://dfv0m9orel-3.algolianet.com https://nexus-long-poller-a.intercom.io https://nexus-websocket-a.intercom.io https://uploads.intercomusercontent.com https://dfv0m9orel-dsn.algolia.net wss://nexus-websocket-b.intercom.io https://nexus-long-poller-b.intercom.io https://api.intercom.io https://stats.g.doubleclick.net https://www.facebook.com/tr/ https://dfv0m9orel-2.algolianet.com https://api-iam.intercom.io https://uploads.intercomcdn.com wss://nexus-websocket-a.intercom.io https://api-ping.intercom.io https://bat.bing.com https://dfv0m9orel-1.algolianet.com https://www.google-analytics.com https://nexus-websocket-b.intercom.io https://www.google.com; img-src 'self' https://*.intercom-attachments.com images.i-make.com https://ssl.gstatic.com https://googleads.g.doubleclick.net https://uploads.intercomusercontent.com https://www.google.be https://static.intercomassets.com https://stats.g.doubleclick.net https://www.facebook.com/tr/ https://www.google.ch https://messenger-apps.intercom.io https://www.googletagmanager.com data: https://js.intercomcdn.com https://www.gstatic.com https://bat.bing.com https://www.google-analytics.com https://gifs.intercomcdn.com https://www.google.com https://www.google.co.uk https://www.google.fr https://downloads.intercomcdn.com; default-src 'self'; media-src 'self' https://js.intercomcdn.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com; report-uri https://sentry.io/api/1446358/security/?sentry_key=99c13f5abc1a4aae8816a11ee05786f9 1
default-src 'self';style-src 'self' 'unsafe-inline';script-src https://www.recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/;frame-src 'self' https://www.google.com/recaptcha/ 1
frame-ancestors 'self'; block-all-mixed-content; report-uri https://maxlaumeister.report-uri.com/r/d/csp/enforce 1
default-src self; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk ajax.googleapis.com apps.nestle.com apps.nestle.co.uk https://js-agent.newrelic.com https://static.addtoany.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com s.ytimg.com *.evidon.com code.jquery.com *.krxd.net *.serving-sys.com *.facebook.net *.cloudfront.net bfred-it.github.io bam.nr-data.net *.hypemarks.com *.cloudflare.com *.wowza.com momentjs.com *.serving-sys.com *.pricespider.com *.mapbox.com; style-src 'self' 'unsafe-inline' *.acsitefactory.com fonts.googleapis.com fonts.gstatic.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com cloud.typography.com *.google.com *.wowza.com *.addtoany.com *.cloudfront.net *.pricespider.com *.mapbox.com *.cloudflare.com; img-src 'self' 'unsafe-inline'  data: *.googleapis.com *.gstatic.com *.cloudflare.com *.google-analytics.com https://stats.g.doubleclick.net www.google.com www.google.co.uk *.doubleclick.net *.betrad.com *.amazonaws.com px.pump.to brand-ecommerce-assets.fusepump.com *.evidon.com *.youtube.com *.facebook.com *.krxd.net www.googletagmanager.com *.cloudfront.net https://www.google.co.in https://trz.neodatagroup.com *.pricespider.com; media-src 'self' 'unsafe-inline' blob: *.akamaihd.net *.sanpellegrinofruitbeverages.com; frame-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com *.fls.doubleclick.net *.facebook.com *.hypemarks.com *.krxd.net *.nestle-watersna.com s.amazon-adsystem.com; child-src 'self' blob: static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com *.fls.doubleclick.net *.sanpellegrinofruitbeverages.com s.amazon-adsystem.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' brand-ecommerce-api.fusepump.com *.google-analytics.com https://collect.analyze.ly *.serving-sys.com *.doubleclick.net *.akamaihd.net *.krxd.net bam.nr-data.net *.mapbox.com; report-uri /us/report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://blowmeuptom.com https://cdn.blowmeuptom.com https://cdn.engine.4dsply.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.youtube.com https://*.facebook.com https://*.twitter.com https://*.twimg.com https://*.amazon-adsystem.com; img-src 'self' https://cdn.blowmeuptom.com https://secure.gravatar.com https://fonts.googleapis.com https://*.doubleclick.net https://www.google-analytics.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com data:; style-src 'self' 'unsafe-inline' https://cdn.blowmeuptom.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://wms-na.amazon-adsystem.com; font-src 'self' https://cdn.blowmeuptom.com https://fonts.googleapis.com https://fonts.gstatic.com data:; child-src 'self' https://cdn.blowmeuptom.com https://www.google.com https://*.amazon-adsystem.com https://*.images-amazon.com https://www.youtube.com https://*.twitter.com; media-src 'self' https://*.streamtheworld.com; connect-src 'self' https://apis.google.com https://syndication.twitter.com; object-src 'none'; upgrade-insecure-requests; block-all-mixed-content; reflected-xss block; referrer no-referrer-when-downgrade; 1
default-src 'self'; style-src 'self' *.google.com *.googleapis.com cloud.typography.com *.cyber-duck.co.uk *.fasttiger.io fasttiger.io 'unsafe-inline'; img-src * data:; frame-src 'self' *.youtube.com *.google.com *.googletagmanager.com *.slideshare.net jira.cyberduck.net giphy.com *.facebook.com *.fasttiger.io fasttiger.io *.hotjar.com; connect-src 'self' *.doubleclick.net *.google-analytics.com *.fullstory.com *.fasttiger.io fasttiger.io *.googleadservices.com googleadservices.com *.google.co.uk google.co.uk iptrack.io *.iptrack.io https://gloin-eu-west-1.searchly.com; font-src 'self' data: *.gstatic.com; form-action 'self' *.linkedin.com *.facebook.com *.fasttiger.io fasttiger.io; script-src 'self' *.youtube.com *.doubleclick.net *.google-analytics.com *.google.co.uk *.google.com *.googleapis.com *.googlecode.com *.googlesyndication.com *.googleadservices.com *.twitter.com *.googletagmanager.com *.gstatic.com *.addthis.com *.jquery.com *.leadforensics.com *.typography.com *.fasttiger.com *.cyberduck.net *.licdn.com *.fullstory.com *.ads-twitter.com *.ytimg.com *.fasttiger.io fasttiger.io fullstory.com googleadservices.com iptrack.io *.iptrack.io connect.facebook.net *.responsetap.com *.hotjar.com 'unsafe-inline' 'unsafe-eval'; 1
default-src nmrc.org; base-uri 'self'; form-action 'none'; frame-ancestors 'none'; 1
frame-ancestors 'self' https://*.fynskebank.dk https://fynskebank.dk https://*.bec.dk https://bec.dk; 1
default-src 'none'; report-uri https://pfeprod.report-uri.com/r/t/csp/enforce; child-src 'self'; connect-src 'self' https://*.akafms.net/ https://*.akamaihd.net/ https://*.brightcove.com/ https://*.brightcovecdn.com/ https://*.brightcove.net/ https://*.digitalpfizer.com/ https://*.evidon.com/ https://*.hotjar.com/ https://*.llnw.net/ https://*.llnwd.net/ https://1vrf04rusa.execute-api.eu-west-1.amazonaws.com/ https://223i44638a.execute-api.eu-west-1.amazonaws.com/ https://6q7zxrfi35.execute-api.eu-west-1.amazonaws.com/ https://amer-identity.pfizer.com/ https://appsapi.veinteractive.com/api/ https://brightcove.hs.llnwd.net/ https://code.jquery.com/ https://cookiee1.veinteractive.com/api/ https://drs2.veinteractive.com/ https://edge.api.brightcove.com/playback/ https://emea-identity.pfizer.com/ https://f1.media.brightcove.com/ https://geoip-js.maxmind.com/geoip/v2.1/country/ https://house-cloudfront.ap-northeast-1.prod.boltdns.net/ https://house-cloudfront.ap-southeast-1.prod.boltdns.net/ https://house-cloudfront.ap-southeast-2.prod.boltdns.net/ https://house-cloudfront.eu-west-1.prod.boltdns.net/ https://house-cloudfront.us-east-1.prod.boltdns.net/ https://manifest.prod.boltdns.net/ https://in.hotjar.com/api/v2/client/sites/ https://l.betrad.com/ https://loremflickr.com/ https://metrics.articulate.com/ https://newton-api.eu.cloudhub.io https://pfe-dse-dar-poc.auth.us-east-1.amazoncognito.com/ https://pfizer.sc.omtrdc.net/ https://secure.brightcove.com/services/mobile/streaming/ https://sessionapi.veinteractive.com/ https://storybook.js.org/ https://tagmanager.google.com/ https://vlswbkfag3.execute-api.eu-west-1.amazonaws.com/ https://vc.hotjar.io/ https://vc.hotjar.io/views/ https://www.google-analytics.com/ https://www.facebook.com/ wss://*.hotjar.com/ wss://*.pfizer.com/ https://uatpfizerservice.hartehanks.com/ https://pfizerservice.hartehanks.com/ https://hcp-grv.digitalpfizer.com/ https://hcp-grv-uat.digitalpfizer.com/ https://hcp-grv-staging.digitalpfizer.com/ https://chatterbox-3-0-dev-mw.pfizer.com/ https://chatterbox43.pfizer.com/ https://chatterbox45.pfizer.com/ https://chatterbox46.pfizer.com/ https://chatterbox49.pfizer.com/ https://chatterbox55.pfizer.com/ https://chatterbox56.pfizer.com/ https://app.kore.com/ https://dpm.demdex.net/; font-src 'self' data: https://canvas.pfizer.com/ https://cdnjs.cloudflare.com/ https://docs.gcs.digitalpfizer.com/fonts/ https://fast.fonts.net/ https://fast.fonts.net/dv2/1 https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://pfcopayoffers-stage.pfizersite.io/ https://pkg-cdn.digitalpfizer.com/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://script.hotjar.com https://use.fontawesome.com/releases/ https://vjs.zencdn.net/ https://use.typekit.net/ https://api2.fonts.com/ https://maxcdn.bootstrapcdn.com/; frame-src 'self' https://*.fls.doubleclick.net/ https://bid.g.doubleclick.net/ https://config1.veinteractive.com/ https://l3.evidon.com/ https://platform.twitter.com/ https://players.brightcove.net/ https://player.vimeo.com/ https://player.vimeo.com/video https://staticxx.facebook.com/ https://syndication.twitter.com/ https://vars.hotjar.com/ https://v5.organimi.com/ https://where-to-buy.co/ https://www.facebook.com/ https://www.google.com/maps/ https://www.youtube.com/ https://www.google.com/ https://pfizer.demdex.net/; img-src 'self' blob: data: https://*; manifest-src 'self'; media-src 'self' blob: data: https://*.brightcovecdn.com/ https://*.media.brightcove.com/ https://manifest.prod.boltdns.net/ https://secure.brightcove.com/services/mobile/streaming/; object-src 'self' https://players.brightcove.net/; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://a.volvelle.tech/ https://ajax.googleapis.com/ajax/ https://analytics.twitter.com/ https://assets.adobedtm.com/ https://assets.edison.sh/ https://canvas.pfizer.com/ https://cdnjs.cloudflare.com/ https://c.betrad.com/ https://c.evidon.com/ https://l.evidon.com/ https://code.jquery.com/ https://connect.facebook.net/ https://cookies.pfizer.com/ https://config1.veinteractive.com/ https://fast.fonts.net/jsapi/ https://googleads.g.doubleclick.net/ https://js.maxmind.com/js/apis/geoip2/v2.1/ https://maps.googleapis.com/maps/api/ https://maps.googleapis.com/maps-api-v3/api/js/ https://maxcdn.bootstrapcdn.com/ https://pfcopayoffers-stage.pfizersite.io/ https://pkg-cdn.digitalpfizer.com/ https://platform.twitter.com/ https://players.brightcove.net/ https://player.vimeo.com/ https://player.vimeo.com/api/ https://px.veinteractive.com/ https://s3.amazonaws.com/docs.gcs.digitalpfizer.com/ https://s3.amazonaws.com/pfe_im/ https://s.ytimg.com/yts/jsbin/ https://sadmin.brightcove.com/js/ https://script.hotjar.com/ https://ssl.google-analytics.com/ https://static.ads-twitter.com/ https://static.hotjar.com/c/ https://tagmanager.google.com/ https://tpc.googlesyndication.com/sodar/ https://vjs.zencdn.net/vttjs/ https://www.geoplugin.net/ https://www.googleadservices.com/pagead/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://www.gstatic.com/charts/ https://www.youtube.com/player_api https://analytics.digitalpfizer.com/ https://www.google.com/ https://www.gstatic.com/ https://www.youtube.com/ https://ajax.aspnetcdn.com/; style-src 'self' 'unsafe-inline' https://assets.edison.sh/ https://cdnjs.cloudflare.com/ https://cloud.typography.com/ https://cookies.pfizer.com/ https://fast.fonts.net/ https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/ https://p.typekit.net/ https://pfcopayoffers-stage.pfizersite.io/ https://pfredirect.pfizersite.io/files/fonts/ https://pkg-cdn.digitalpfizer.com/ https://px.veinteractive.com/ https://quilt-cdn.janrain.com/HEAD/providers.css/ https://quilt-cdn.janrain.com/HEAD/widgets.css/ https://s3.amazonaws.com/docs.gcs.digitalpfizer.com/ https://stackpath.bootstrapcdn.com/ https://tagmanager.google.com/ https://use.typekit.net/ https://www.gstatic.com/charts/; worker-src 'self' blob: 1
default-src 'self';connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
default-src 'self' https://cdn.yoshki.com/ https://gamma.euroland.com/  https://www.w3schools.com/howto/rain.mp4 https://www.youtube.com  https://fonts.googleapis.com    https://fonts.gstatic.com/    https://ldynamicspublicapi.leadforensics.com        https://s7.addthis.com/ https://m.addthis.com/        https://z.moatads.com/ https://player.vimeo.com/        https://ldynamicspublicapi.leadforensics.com         https://clapi.civiccomputing.com/       https://api-public-oci-origin.addthis.com/   https://tools.eurolandir.com/;                 script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://secure.leadforensics.com/ https://ldynamicspublicapi.leadforensics.com/dynamics/  https://cdn.yoshki.com/  http://cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js    https://secure.care5alea.com/        https://www.googletagmanager.com        https://www.google-analytics.com https://www.google.com    https://www.w3schools.com/howto/rain.mp4     https://secure.care5alea.com/js/149047.js   https://secure.leadforensics.com/js/135672.js     https://secure.care5alea.com/Track/Capture.aspx        https://ldynamicspublicapi.leadforensics.com/dynamics/script/get/2/149047/        https://ldynamicspublicapi.leadforensics.com/dynamics/event/capture/scripttimer/176/        http://s7.addthis.com https://s7.addthis.com        https://z.moatads.com/addthismoatframe568911941483/moatframe.js        https://v1.addthisedge.com        https://m.addthis.com/        http://graph.facebook.com/       http://api-public.addthis.com/        https://api-public-oci-origin.addthis.com/        https://ldynamicspublicapi.leadforensics.com/dynamics/        https://s3-eu-west-1.amazonaws.com/ldproduct/editor/images/        https://cc.cdn.civiccomputing.com/8/cookieControl-8.2.min.js       https://webeo-web-content.s3-eu-west-1.amazonaws.com/    http://tools.euroland.com/tools/common/eurolandiframeautoheight/eurolandtoolsintegrationobject.js   https://cdn.jsdelivr.net/npm/;                    style-src 'self' 'unsafe-inline'        data: https://s3-eu-west-1.amazonaws.com/ldproduct/editor/images/ https://fonts.gstatic.com/s/montserrat/  https://fonts.googleapis.com     https://webeo-web-content.s3-eu-west-1.amazonaws.com/;                        img-src 'self' data:       https://s3-eu-west-1.amazonaws.com/ldproduct/editor/images/    https://fonts.googleapis.com     https://www.google.co.in        https://www.google-analytics.com        https://www.googletagmanager.com        https://www.google.com        https://dashboard.umbraco.org/       https://webeo-web-content.s3-eu-west-1.amazonaws.com/            https://s3-eu-west-1.amazonaws.com/ldproduct/editor/images/       https://stats.g.doubleclick.net/;                             font-src 'self' http://fonts.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com/s/montserrat/; base-uri 'self';                              connect-src 'self' https://stats.g.doubleclick.net/ https://www.google-analytics.com/ https://apikeys.civiccomputing.com/; 1
default-src * https://*.google.com 'unsafe-eval' https:; style-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; font-src 'self' * data:; img-src * 'self' data:; 1
connect-src * 'self'; 1
frame-ancestors 'self' https://www.alandsbanken.fi https://www.alandsbanken.ax https://www.alandsbanken.se https://www.alandsbanken.com 1
default-src 'self' https:; script-src 'unsafe-inline' 'unsafe-eval' 'self' https:; style-src 'unsafe-inline' 'self' https:; object-src 'none'; img-src 'self' data: *; font-src 'self' data: * 1
connect-src 'self' https://*.akafms.net https://*.akamaihd.net https://*.brightcove.com https://*.brightcovecdn.com https://*.brightcove.net https://*.digitalpfizer.com https://*.evidon.com https://*.hotjar.com https://*.llnw.net/ https://*.llnwd.net/ https://adservice.google.com https://amer-identity.pfizer.com https://bam.nr-data.net https://brightcove.hs.llnwd.net https://emea-identity.pfizer.com https://house-cloudfront.ap-northeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-2.prod.boltdns.net https://house-cloudfront.eu-west-1.prod.boltdns.net https://house-cloudfront.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://knrpc.olark.com/nrpc/ https://l.betrad.com https://stats.addtoany.com/menu https://stats.g.doubleclick.net https://tagmanager.google.com https://vc.hotjar.io/ https://www.facebook.com https://www.google-analytics.com wss://*.hotjar.com wss://*.pfizer.com https://m.addthis.com/; frame-src 'self' tel: https://*.fls.doubleclick.net https://*.janrainsso.com https://bid.g.doubleclick.net https://l3.evidon.com https://players.brightcove.net https://static.addtoany.com https://static.olark.com https://tpc.googlesyndication.com https://vars.hotjar.com https://www.facebook.com https://www.google.com/maps/ https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.youtube.com https://players.brightcove.net/ https://platform.twitter.com/ https://syndication.twitter.com/ https://l3.evidon.com/ https://s7.addthis.com/; img-src 'self' about: data: https://* https://platform.twitter.com/ https://syndication.twitter.com/ https://s3-eu-west-1.amazonaws.com/ https://pbs.twimg.com/ https://ton.twimg.com/ https://pfizer.sc.omtrdc.net/ https://abs.twimg.com/ https://www.epressi.com/ https://www.google-analytics.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://ajax.googleapis.com https://api.olark.com https://assets.adobedtm.com https://bam.nr-data.net https://cdnjs.cloudflare.com https://connect.facebook.net https://c.evidon.com https://l.evidon.com https://d1v9u0bgi1uimx.cloudfront.net https://d29usylhdk1xyu.cloudfront.net https://d7v0k4dt27zlp.cloudfront.net/assets/ https://docs.gcs.digitalpfizer.com https://googleads.g.doubleclick.net https://js.bizographics.com https://js-agent.newrelic.com https://knrpc.olark.com/nrpc/ https://l.betrad.com https://maps.googleapis.com https://optoutapi.evidon.com https://p.adsymptotic.com https://pfizer-grv-eu.janraincapture.com https://players.brightcove.net https://px.ads.linkedin.com https://rpxnow.com/load/ https://s3.amazonaws.com/pfe_grv https://s3.amazonaws.com/pfe_im/ https://script.hotjar.com https://sjs.bizographics.com https://static.hotjar.com https://static.addtoany.com https://static.olark.com https://tagmanager.google.com https://tpc.googlesyndication.com https://vjs.zencdn.net https://www.bizographics.com https://www.google.com/recaptcha/ https://www.google.com/search/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.linkedin.com https://platform.twitter.com/ https://cdn.syndication.twimg.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://js-agent.newrelic.com/ https://bam.nr-data.net/ https://s7.addthis.com/ https://graph.facebook.com/ https://z.moatads.com/ https://v1.addthisedge.com/ https://m.addthis.com/ https://cdn.jsdelivr.net https://polyfill.io https://s3-eu-west-1.amazonaws.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://cloud.typography.com https://cookies.pfizer.com https://d3hmp0045zy3cs.cloudfront.net https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://pfredirect.pfizersite.io https://quilt-cdn.janrain.com/HEAD/providers.css https://quilt-cdn.janrain.com/HEAD/widgets.css https://s3.amazonaws.com/pfe_grv/ https://static.olark.com https://stackpath.bootstrapcdn.com https://tagmanager.google.com https://translate.googleapis.com https://use.typekit.net https://platform.twitter.com/ https://ton.twimg.com/ fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://s3-eu-west-1.amazonaws.com; child-src 'self'; font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://docs.gcs.digitalpfizer.com/fonts/ https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://script.hotjar.com https://use.fontawesome.com/releases/ https://use.typekit.net https://vjs.zencdn.net; manifest-src 'self'; media-src 'self' data: blob: https://brightcove.hs.llnwd.net https://*.media.brightcove.com https://static.olark.com https://secure.brightcove.com/services/mobile/streaming/; worker-src 'self' blob:; report-uri https://pfeprod.report-uri.com/r/t/csp/enforce 1
referrer origin; 1
form-action 'self'; 1
style-src 'self' 'unsafe-inline' https:;img-src 'self' data: https: http://61.57.41.102/;frame-src 'self' https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;script-src-elem 'self' 'unsafe-inline' https:;frame-ancestors 'none' 1
script-src 'nonce-YJpXbMXqjVgQipPZN+VWBg' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://www.google-analytics.com/analytics.js https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport 1
connect-src 'self'; default-src 'none'; media-src 'self'; font-src 'self' https://brave.com https://fonts.gstatic.com data:; frame-ancestors 'self' https://blog.batcommunity.org; frame-src 'self' https://www.brave.com https://player.vimeo.com https://boards.greenhouse.io https://www.surveymonkey.com https://public.tableau.com https://www.slideshare.net https://docs.google.com https://www.youtube-nocookie.com https://js.driftt.com; img-src 'self' data: https://brave.com https://basicattentiontoken.org https://analytics.brave.com https://boards.greenhouse.io https://secure.gravatar.com https://blog.brave.com https://*.ggpht.com https://*.jtvnw.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://brave.com https://djtflbt20bdde.cloudfront.net https://analytics.brave.com https://boards.greenhouse.io https://js.driftt.com; style-src 'self' 'unsafe-inline' https://brave.com https://fonts.googleapis.com; object-src 'self'; manifest-src 'self'; upgrade-insecure-requests 1
default-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline' fonts.googleapis.com;font-src 'self' 'unsafe-inline' fonts.gstatic.com;script-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com *.hotjar.com www.hotjar.com maps.googleapis.com www.google.com *.google.com www.gstatic.com *.gstatic.com;img-src 'self' data: www.google-analytics.com *.twtest.nl maps.googleapis.com maps.gstatic.com;frame-src 'self' *.hotjar.com *.frisbee.nl *.google.com *.vimeo.com *.youtube.com;connect-src 'self' *.hotjar.com 1
default-src 'self' data: *.conac.cn *.bdimg.com *.jiathis.com *.baidu.com *.bshare.cn *.qq.com *.kaipuyun.cn *.pku.edu.cn bdopenlab.pku.edu.cn:8083 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self' *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com  *.youtube.com *.webspellchecker.net *.civiccomputing.com prezi.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.civiccomputing.com cdnjs.cloudflare.com cdn.rawgit.com; style-src 'unsafe-inline' 'self' *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com cdnjs.cloudflare.com; img-src 'self' *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com stats.g.doubleclick.net data: raw.githubusercontent.com cdn.rawgit.com; report-uri /report-csp-violation 1
default-src 'unsafe-inline' 'unsafe-eval' * blob: data: *.googleapis.com *.clickcease.com *.doubleclick.net *.ngageics.com *.ngagelive.com *.facebook.com *.soundcloud.com 1
connect-src 'self' *.aitudala.kz dmp.dt.aitudala.kz aitudala.kz ecommerce.pult24.kz stats.g.doubleclick.net wss://rtc-v2-ms1.bitrix24.com wss://rtc-v2-ms2.bitrix24.com www.facebook.com mc.yandex.kz mc.yandex.ru push.esputnik.com spektr.bitrix24.kz top-fwz1.mail.ru www.google-analytics.com api.ppyvzz8u.biz ajax.googleapis.com cdncache1-a.akamaihd.net gjtrack.ucweb.com plugin.ucads.ucweb.com sovetnik.market.yandex.ru code.jquery.com datds.net rtc-v2-ms1.bitrix24.com yandex.ru mc.yandex.ua mc.yandex.kg mc.yandex.by mc.yandex.ee mc.yandex.lv mc.yandex.uz www.kassa24.kz; img-src data: *.maps.yandex.net games.szhuldyz.kz lh3.googleusercontent.com ssl.gstatic.com cdn-ru.bitrix24.kz www.google.com www.google.kz login.vk.com yastatic.net www.google.ru www.googletagmanager.com vec01.maps.yandex.net api-maps.yandex.ru cdn.bitrix24.kz kassa24.kz top-fwz1.mail.ru vec02.maps.yandex.net vec03.maps.yandex.net vec04.maps.yandex.net www.google-analytics.com www.google.ae www.google.com.ua www.google.ie yandex.ru m.facebook.com www.facebook.com 'self' mc.yandex.ru pics.kassa24.kz spektr.bitrix24.kz vk.com www.google.co.uk www.google.lv auth2.bitrix24.net stats.g.doubleclick.net www.google.by www.google.it m.vk.com www.google.co.il www.google.de www.google.fr www.google.ge www.szhuldyz.kz www.google.com.tj www.google.lt core-sat.maps.yandex.net www.google.no file www.google.az www.google.com.eg www.google.es www.google.co.kr blob: connect.facebook.net translate.google.com www.google.am www.google.at www.google.be www.google.bg www.google.co.id www.google.co.uz www.google.com.do www.google.com.kw www.google.com.mt www.google.com.tr www.google.cz www.google.hu www.google.iq www.google.kg www.google.mn www.google.mv www.google.nl www.google.ro www.google.rs www.google.se www.google.tm www.gstatic.com; frame-src 'self' games.szhuldyz.kz aitubirge.kz yandex.ru api-maps.yandex.ru mc.yandex.md mc.yandex.ru www.googletagmanager.com www.youtube.com dl.metabar.ru saltcdn2.googleapis.com www.facebook.com www.google.com gsa://onpageload data:; script-src-elem *.aitudala.kz dmp.dt.aitudala.kz aitudala.kz tagmanager.google.com aitubirge.kz yastatic.net yandex.st 'self' 'unsafe-inline' cdn-ru.bitrix24.kz api.instagram.com api.vk.com cdn.bitrix24.kz connect.facebook.net esputnik.com graph.facebook.com mc.yandex.ru spektr.bitrix24.kz top-fwz1.mail.ru api.ppyvzz8u.biz vk.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com api-maps.yandex.ru gc.kis.v2.scr.kaspersky-labs.com dl.metabar.ru vec01.maps.yandex.net vec02.maps.yandex.net vec03.maps.yandex.net vec04.maps.yandex.net saltcdn2.googleapis.com code.jquery.com www.instagram.com data: gc.kis.scr.kaspersky-labs.com s3.amazonaws.com ajax.googleapis.com cdn-javascript.net cdnjs.cloudflare.com mc.yandex.kz vk-online.xyz; script-src *.aitudala.kz aitudala.kz aitubirge.kz yastatic.net cdn-ru.bitrix24.kz yandex.st vec01.maps.yandex.net vec02.maps.yandex.net vec03.maps.yandex.net vec04.maps.yandex.net ucads-cdn.ucweb.com 'self' 'unsafe-eval' 'unsafe-inline' api.instagram.com api.vk.com cdn.bitrix24.kz cdn.visadd.com connect.facebook.net esputnik.com graph.facebook.com mc.yandex.ru spektr.bitrix24.kz top-fwz1.mail.ru vk.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com api-maps.yandex.ru code.jquery.com mc.yandex.kz ajax.googleapis.com blob: cdn-javascript.net clck.yandex.ru img.ucweb.com www.instagram.com; font-src data: 'self' fonts.gstatic.com chrome-extension themes.googleusercontent.com; child-src 'self'; style-src 'unsafe-eval' 'unsafe-inline' fonts.googleapis.com spektr.bitrix24.kz 'self' translate.googleapis.com; style-src-elem tagmanager.google.com fonts.googleapis.com 'unsafe-inline' spektr.bitrix24.kz 'self' gc.kis.v2.scr.kaspersky-labs.com; style-src-attr 'unsafe-inline'; default-src fonts.googleapis.com spektr.bitrix24.kz 'unsafe-inline' 'self'; script-src-attr 'unsafe-inline'; manifest-src 'self'; worker-src 'self' 1
frame-ancestors 'self' https://www.buonalavita.it; 1
script-src 'self' https://cdnjs.cloudflare.com https://cloud.51degrees.com https://nexus.ensighten.com https://www.youtube.com https://s.ytimg.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; frame-ancestors 'self' https://*.velobank.com https://*.eastwestbank.com; frame-src https://www.youtube.com https://eastwestbank.demdex.net https://play.app.goo.gl https://itunes.apple.com https://android.myapp.com velo: 1
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; font-src https: data:;  report-uri https://csp.rcahms.gov.uk/coflein-live; 1
connect-src 'self' *.healthcatalyst.com *.6sc.co *.company-target.com *.doubleclick.net *.google.com *.google-analytics.com *.hotjar.com *.hotjar.io secure.adnxs.com wss://*.hotjar.com wss://*.hotjar.io *.mrpfd.com vimeo.com; default-src 'none'; font-src 'self' data: *.healthcatalyst.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.slidesharecdn.com; frame-src 'self' *.healthcatalyst.com *.addtoany.com *.bootstrapcdn.com hcdatascienceservices.com *.hotjar.com *.myworkdayjobs.com *.pardot.com *.youtube.com *.youtube-nocookie.com *.slideshare.net *.vimeo.com; img-src 'self' data: *.healthcatalyst.com *.6sc.co *.adnxs.com *.adsymptotic.com *.bidr.io *.bizible.com *.company-target.com *.doubleclick.net *.facebook.com *.google.com *.google.pt *.google-analytics.com *.googletagmanager.com *.glassdoor.com *.gravatar.com *.linkedin.com *.publishthis.com t.co; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.healthcatalyst.com *.6sc.co *.addtoany.com *.ads-twitter.com *.bizible.com *.bizographics.com *.demandbase.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.hotjar.com *.jsdelivr.net *.licdn.com *.mrpfd.com *.youtube.com *.ytimg.com *.lassomarketing.io *.lhmos.com *.pardot.com polyfill.io *.steelhousemedia.com *.twitter.com *.vimeo.com *.zoominfo.com; style-src 'self' 'unsafe-inline' *.healthcatalyst.com *.bootstrapcdn.com *.google.com *.googleapis.com; base-uri ; frame-ancestors 'self'; block-all-mixed-content; upgrade-insecure-requests; 1
child-src https://plusone.google.com https://facebook.com https://platform.twitter.com https://www.youtube.com/ 'self' https://www.google.com/; connect-src 'self' https://www.google-analytics.com/ https://www.cognitoforms.com/ https://use.fontawesome.com https://www.cognitoforms.com data:; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://use.fontawesome.com https://www.cognitoforms.com data:; script-src 'self' https://apis.google.com https://platform.twitter.com https://use.fontawesome.com https://www.royalscottishacademy.org 'unsafe-inline' https://www.google-analytics.com/ https://services.cognitoforms.com/ https://www.cognitoforms.com/ 'unsafe-eval' https://www.google.com/ https://www.gstatic.com/; style-src 'self' https://fonts.googleapis.com/ https://use.fontawesome.com https://www.royalscottishacademy.org/ 'unsafe-inline' https://www.cognitoforms.com/; img-src 'self' *.gravatar.com http://www.w3.org/ https://www.royalscottishacademy.org/ https://www.cognitoforms.com data:; media-src self; default-src 'none'; 1
default-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data: wss://*.hotjar.com https://iaacu.lkcsmap.com https://d3rxaij56vjege.cloudfront.net/ https://trackcmp.net https://www.digindemo.com/ https://*.facebook.com https://connect.facebook.net https://*.lk-cs.com https://*.app-us1.com https://*.formstack.com https://*.googletagmanager.com https://netdna.bootstrapcdn.com https://platform.twitter.com https://*.ytimg.com https://*.typekit.net https://*.youtube.com https://www.google.com https://www.gstatic.com https://*.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://maps.googleapis.com https://maps.gstatic.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://clients.lk-cs.com https://lkcsunix.com; frame-ancestors 'self' https://www.youtube.com; 1
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://cdn.jsdelivr.net https://tagmanager.google.com https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com https://config1.veinteractive.com http://mtrclnco06.motorit.net; font-src 'self' https://fonts.gstatic.com http://mtrclnco06.motorit.net data: https://maxcdn.bootstrapcdn.com 1
default-src 'self';                  script-src 'unsafe-eval' 'self' 'unsafe-inline' *.criteo.com *.criteo.net *.pinterest.com s.ytimg.com www.youtube.com *.google-analytics.com *.googleapis.com *.facebook.net *.facebook.com *.bing.com *.googleadservices.com static.criteo.net *.googletagmanager.com *.smartlook.com googleads.g.doubleclick.net code.jquery.com;                  style-src  'self' 'unsafe-inline' *.googleapis.com;                  connect-src 'self' *.facebook.com *.smartlook.com code.jquery.com manager.eu.smartlook.cloud/rec/init manager.eu.smartlook.cloud/rec/check *.google-analytics.com stats.g.doubleclick.net;                   img-src 'self' *.msn.com *.bing.com *.google-analytics.com *.facebook.com *.blob.core.windows.net *.xx.fbcdn.net scontent.cdninstagram.com *.g.doubleclick.net *.google.co.uk *.google.com *.criteo.com *.tshirtstudio.com;                   font-src 'self' fonts.gstatic.com;                   frame-src 'self' *.criteo.com *.facebook.com *.googleadservices.com googleads.g.doubleclick.net *.google.com *.google.co.uk;                  frame-ancestors 'self'; 1
default-src 'self'; script-src https://static.zinoui.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://ajax.googleapis.com https://platform.twitter.com 'unsafe-inline' 'self'; style-src https://static.zinoui.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'unsafe-inline' 'self'; img-src https://static.zinoui.com https://assets.zinoui.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.gravatar.com data: 'self'; font-src https://fonts.gstatic.com https://cdnjs.cloudflare.com data: 'self'; child-src https://platform.twitter.com https://www.facebook.com https://jsfiddle.net https://www.slideshare.net 'self'; connect-src https://www.google-analytics.com https://stats.g.doubleclick.net 'self'; report-uri https://projects.zinoui.com/report-uri/csp; report-to csp-endpoint 1
frame-ancestors https://io.apply.creditkarma.com 1
script-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval' static2.mybonuscenter.com static4.mybonuscenter.com static6.mybonuscenter.com www.google-analytics.com ajax.googleapis.com maps.googleapis.com www.googleadservices.com bat.bing.com s.yimg.com sp.analytics.yahoo.com; 1
frame-ancestors 'self' http://www.lipton.com unilever3.marketing.adobe.com unileverbrazil.marketing.adobe.com unilever2.marketing.adobe.com unilever.marketing.adobe.com unilever3.experiencecloud.adobe.com unileverbrazil.experiencecloud.adobe.com unilever2.experiencecloud.adobe.com unilever.experiencecloud.adobe.com emea1-proxy.adobemc.com us1-proxy.adobemc.com us1-proxy.adobemc.com apac-proxy.adobemc.com adobedemoemea131.marketing.adobe.com adobedemoemea131.experiencecloud.adobe.com 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com/; child-src 'self'; connect-src 'self' blob: https://*.stripe.com/; img-src 'self' blob: data: https://gravatar.com/ https://*.stripe.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; font-src 'self' blob: data: https://fonts.gstatic.com/; media-src 'self'; manifest-src 'self'; frame-src 'self' https://www.linkedin.com/ https://*.stripe.com/; 1
default-src 'self' https:; connect-src https:; font-src https: data:; frame-ancestors https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; 1
default-src 'self' *.bell.ca; frame-ancestors 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.bell.ca *.addthis.com *.addthisedge.com *.moatads.com https://www.google.com https://www.gstatic.com https://assets.adobedtm.com https://analytics.analytics-egain.com https://static.ads-twitter.com https://connect.facebook.net https://gateway.answerscloud.com https://analytics.twitter.com https://www.googletagmanager.com https://dpm.demdex.net https://s.pinimg.com https://ssl.google-analytics.com https://s.webtrends.com https://statse.webtrendslive.com https://seal.entrust.net; style-src 'self' 'unsafe-inline' *.bell.ca; connect-src 'self' https://mboxedge28.tt.omtrdc.net https://data1.bell.ca https://www.facebook.com https://bellcanada.tt.omtrdc.net https://ct.pinterest.com https://dpm.demdex.net https://mboxedge17.tt.omtrdc.net; frame-src 'self' https://www.facebook.com http://speedtest.fibreop.ca https://speedtest.fibreop.ca http://player.vimeo.com https://player.vimeo.com https://s7.addthis.com https://bellca.demdex.net; object-src 'self' *.fibreop.ca; img-src 'self' *.fibreop.ca *.bell.ca *.bellaliant.ca *.bellaliant.net https://www.googletagmanager.com https://www.facebook.com https://t.co https://ct.pinterest.com https://cx.atdmt.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://seal.entrust.net data: 1
object-src 'none'; frame-src 'self' https:;child-src 'self' https:; 1
frame-ancestors *.csxww.com 1
default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://leschampslibres.us15.list-manage.com https://*.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.google.com https://*.soundcloud.com https://*.openstreetmap.fr https://giphy.com https://www.youtube.com https://player.vimeo.com https://*.amazonaws.com http://www.calameo.com https://www.premierchapitre.fr https://www.facebook.com https://twitter.com https://*.twitter.com  https://www.openstreetmap.org https://*.instagram.com https://*.vine.co https://*.pscp.tv https://*.pinterest.com https://*.tumblr.com https://*.tripadvisor.com https://*.tripadvisor.fr https://*.slideshare.net; frame-src 'self' https://*.calameo.com https://framaforms.org/ https://*.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.google.com https://*.soundcloud.com https://*.openstreetmap.fr https://giphy.com https://www.youtube.com https://player.vimeo.com https://*.amazonaws.com http://www.calameo.com https://www.premierchapitre.fr https://www.facebook.com https://twitter.com https://*.twitter.com  https://www.openstreetmap.org https://*.instagram.com https://*.vine.co https://*.pscp.tv https://*.pinterest.com https://*.tumblr.com https://*.tripadvisor.com https://*.tripadvisor.fr https://*.slideshare.net; style-src 'self' 'unsafe-inline' https://cdn-images.mailchimp.com https://*.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.google.com https://*.soundcloud.com https://*.openstreetmap.fr https://giphy.com https://www.youtube.com https://player.vimeo.com https://*.amazonaws.com http://www.calameo.com https://www.premierchapitre.fr https://www.facebook.com https://twitter.com https://*.twitter.com  https://www.openstreetmap.org https://*.instagram.com https://*.vine.co https://*.pscp.tv https://*.pinterest.com https://*.tumblr.com https://*.tripadvisor.com https://*.tripadvisor.fr https://*.slideshare.net; font-src 'self' https://fonts.gstatic.com https://*.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.google.com https://*.soundcloud.com https://*.openstreetmap.fr https://giphy.com https://www.youtube.com https://player.vimeo.com https://*.amazonaws.com http://www.calameo.com https://www.premierchapitre.fr https://www.facebook.com https://twitter.com https://*.twitter.com  https://www.openstreetmap.org https://*.instagram.com https://*.vine.co https://*.pscp.tv https://*.pinterest.com https://*.tumblr.com https://*.tripadvisor.com https://*.tripadvisor.fr https://*.slideshare.net; child-src 'self' https://www.google-analytics.com https://ssl.google-analytics.com https://*.google.com https://*.soundcloud.com https://*.openstreetmap.fr https://giphy.com https://www.youtube.com https://player.vimeo.com https://*.amazonaws.com http://www.calameo.com https://www.premierchapitre.fr https://www.facebook.com https://twitter.com https://*.twitter.com  https://www.openstreetmap.org https://*.instagram.com https://*.vine.co https://*.pscp.tv https://*.pinterest.com https://*.tumblr.com https://*.tripadvisor.com https://*.tripadvisor.fr https://*.slideshare.net; img-src 'self' data:  https://*.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.google.com https://*.soundcloud.com https://*.openstreetmap.fr https://giphy.com https://www.youtube.com https://player.vimeo.com https://*.amazonaws.com http://www.calameo.com https://www.premierchapitre.fr https://www.facebook.com https://twitter.com https://*.twitter.com  https://www.openstreetmap.org https://*.instagram.com https://*.vine.co https://*.pscp.tv https://*.pinterest.com https://*.tumblr.com https://*.tripadvisor.com https://*.tripadvisor.fr https://*.slideshare.net; connect-src 'self' https://*.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.google.com https://*.soundcloud.com https://*.openstreetmap.fr https://giphy.com https://www.youtube.com https://player.vimeo.com https://*.amazonaws.com http://www.calameo.com https://www.premierchapitre.fr https://www.facebook.com https://twitter.com https://*.twitter.com  https://www.openstreetmap.org 1
frame-ancestors 'self' *.chemistwarehouse.com.au *.epharmacy.com.au *.mychemist.com.au htmlbuilder.com.au *.htmlbuilder.com.au *.chemistwarehouse.hk 1
default-src 'self'; connect-src 'self' *.googleapis.com *.google-analytics.com *.google.com *.facebook.net *.facebook.com *.dtscout.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.cloudflare.com *.bookcdn.com *.facebook.net *.facebook.com *.dtscout.com; font-src 'self' *.googleapis.com *.gstatic.com *.facebook.net *.facebook.com *.dtscout.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googleapis.com *.google.com *.googletagmanager.com *.google-analytics.com *.cloudflare.com *.fontawesome.com *.histats.com *.fx-exchange.com *.booked.net *.facebook.net *.facebook.com *.dtscout.com; img-src 'self' *.google.com *.googleapis.com *.google-analytics.com *.facebook.net *.facebook.com *.dtscout.com *.doubleclick.net data: *.gstatic.com *.histats.com *.bookcdn.com; object-src *.histats.com; frame-src 'self' www.youtube.com *.google.com *.facebook.net *.facebook.com *.dtscout.com; 1
child-src 'self' *.google.com *.youtube.com *.facebook.com *.twitter.com blob:; frame-ancestors 'self'; frame-src 'self' https://www.google.com https://www.youtube.com https://coviavoices.gv-one.com https://sna.etapestry.com *.doubleclick.net *.facebook.com *.wistia.net *.wistia.com https://pixel.kiosk.tm pixel.sitescout.com https://player.vimeo.com https://videopress.com app.etapestry.com; report-uri https://sentry.kiosk.tm/api/33/csp-report/?sentry_key=7cb476f83cf248bf993f736994bce0c6 1
default-src 'self'; base-uri 'self'; connect-src 'self'; font-src 'self' data:; form-action 'self'; frame-src 'self'; img-src 'self' data: *.akamaihd.net *.doubleclick.net www.google-analytics.com; object-src 'self'; script-src 'self' *.akamaihd.net cyseal.cyveillance.com *.doubleclick.net www.google-analytics.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; report-uri /api/ContentSecurity/ 1
frame-ancestors 'self' http://webvisor.com; default-src 'self' https://yandex.ru; font-src 'self'; script-src 'self' https://api-maps.yandex.ru https://maps.google.com https://code.jivosite.com https://www.googletagmanager.com https://stats.hts.ru https://mc.yandex.ru https://yastatic.net https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://mc.yandex.ru https://code.jivosite.com https://*.jivosite.com; img-src 'self' https://ext.host-tracker.com https://api-maps.yandex.ru https://counter.yadro.ru http://cp.hts.ru https://mc.yandex.ru https://*.maps.yandex.net http://www.hts.ru http://hubble.ht-systems.ru https://stats.hts.ru https://www.google-analytics.com data:; media-src 'self' https://code.jivosite.com; style-src 'self' 'unsafe-inline'; object-src 'self' 1
default-src 'self'; frame-src 'self' https://www.surveymonkey.com/ https://www.youtube.com livestream.com mediacapture.e-cast.co.nz iframe.dacast.com https://player.vimeo.com https://vimeo.com https://*.google.co.nz https://*.google.com https://w.soundcloud.com/ *.hotjar.com; script-src 'self' *.hotjar.com http://widget.surveymonkey.com/ www.googletagmanager.com tagmanager.google.com www.google-analytics.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com 'unsafe-inline' 'unsafe-eval';  img-src 'self' https://secure.surveymonkey.com/ https://stats.g.doubleclick.net www.google-analytics.com https://*.hotjar.com ssl.gstatic.com www.gstatic.com data:; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com; font-src 'self' https://*.hotjar.com fonts.gstatic.com data:; connect-src 'self' https://*.tagmanager.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://*.hotjar.com wss://*.hotjar.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://angular-ui.github.io https://vidassets.terminus.services https://cdn.bigzeta.com https://api.bigzeta.com https://info.onsemi.com https://cdn.demio.com https://onsemi.ladesk.com https://onsemi.taleo.net https://*.gcs-web.com https://*.atdmt.com https://*.mktoresp.com https://*.marketo.com https://*.taboola.com https://*.tealiumiq.com https://*.tealium.com https://*.facebook.net https://*.googleapis.com https://*.gstatic.com https://*.baidu.com https://*.geniusmonkey.com https://*.doubleclick.net https://*.gstatic.com https://*.linkedin.com https://*.pingdom.net https://*.crazyegg.com https://*.marketo.net https://*.licdn.com https://www.google.com https://*.tiqcdn.com https://*.digikey.com https://*.googleadservices.com https://*.google-analytics.com https://*.googletagmanager.com https://*.facebook.com https://*.boltdns.net https://*.brightcove.net https://*.brightcove.com https://*.zencdn.net https://*.akamaihd.net blob: data: 1
default-src 'self' https://tribeca.vidavee.com https://img.youtube.com   https://googleads.g.doubleclick.net https://assets.adobedtm.com https://cdnjs.cloudflare.com https://maps.lightstoneproperty.co.za http://maps.lightstoneproperty.co.za http://*.tt.omtrdc.net http://dpm.demdex.net https://maps.googleapis.com https://www.gstatic.com https://maps.googleapis.com http://fast.standardbank.demdex.net http://accstandardbank.d1.sc.omtrdc.net https://bid.g.doubleclick.net/xbbe/pixel http://8448999.fls.doubleclick.net https://cdn.krxd.net https://bs.serving-sys.com/Serving https://secure-ds.serving-sys.com https://standardbank.demdex.net https://www.youtube.com/ https://*.map2.ssl.hwcdn.net; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://tribeca.vidavee.com https://img.youtube.com https://www.homeloans1.standardbank.co.za https://googleads.g.doubleclick.net https://www.homeloans1.standardbank.co.za https://geo0.ggpht.com https://geo1.ggpht.com https://geo2.ggpht.com https://geo3.ggpht.com https://khms1.googleapis.com https://khms0.googleapis.com https://geo0.ggpht.com https://cbks0.googleapis.com https://maps.googleapis.com https://maps.gstatic.com http://accstandardbank.d1.sc.omtrdc.net https://www.google.com https://www.google.co.za http://cm.everesttech.net https://beacon.krxd.net https://jslog.krxd.net https://standardbank.demdex.net https://dpm.demdex.net http://*.tt.omtrdc.net https://*.map2.ssl.hwcdn.net https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tribeca.vidavee.com https://img.youtube.com https://connect.facebook.net https://code.jquery.com https://assets.adobedtm.com https://googleads.g.doubleclick.net https://www.gstatic.com https://maps.googleapis.com http://assets.adobedtm.com https://secure-ds.serving-sys.com http://cdn.krxd.net http://www.googleadservices.com http://www.googletagmanager.com https://consumer.krxd.net https://googleads.g.doubleclick.net https://beacon.krxd.net https://tribeca.vidavee.com http://*.tt.omtrdc.net  https://geo0.ggpht.com https://*.map2.ssl.hwcdn.net; style-src 'unsafe-inline' 'self' https://tribeca.vidavee.com https://img.youtube.com https://fonts.googleapis.com https://googleads.g.doubleclick.net https://cdnjs.cloudflare.com https://*.map2.ssl.hwcdn.net; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://maxcdn.bootstrapcdn.com https://code.jquery.com https://cdnjs.cloudflare.com https://browser.sentry-cdn.com/; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://code.jquery.com/ https://fonts.googleapis.com/;font-src 'self' data: https://fonts.googleapis.com/ https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; img-src 'self' data: http://*.almcms.com https://*.almcms.com https://secure.gravatar.com/;connect-src 'self' https://sentry.io/; frame-src https://www.google.com https://*.benefitspro.com https://*.law.com https://*.cutimes.com https://*.propertycasualty360.com https://*.chinalawandpractice.com https://*.consultingmag.com https://*.lawjournalnewsletters.com https://*.thinkadvisor.com https://*.globest.com https://*.nuco.com https://*.treasuryandrisk.com 1
frame-ancestors 'self' live.sagepay.com www1.kickers.co.uk 1
default-src 'self'; img-src 'self' data: * https://www.google-analytics.com/; script-src 'self' 'strict-dynamic' 'unsafe-inline' 'nonce-b10be8be-8f84-4745-9d26-fe5259a61ec8' https://www.google-analytics.com/; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; frame-src 'self'; object-src 'none'; base-uri 'self'; connect-src 'self' https://api.dribbble.com https://sentry.audent.io https://www.google-analytics.com/; form-action 'self'; media-src 'self' https://cdn.dribbble.com https://static.dribbble.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; connect-src 'self' accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; 1
default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; report-uri https://www.plumpton.ac.uk/?eID=error 1
frame-ancestors 'self' https://webvisor.com https://*.webvisor.com http://webvisor.com http://*.webvisor.com 1
frame-ancestors https://www.onatlas.com 1
frame-ancestors 'self'; manifest-src 'none'; font-src https: data: 'self'; img-src https: data: blob: 'self'; style-src https: data: blob: 'unsafe-inline' 'self'; script-src 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' data: https://www.shopmania.pt https://s.cdnshm.com www.shopmania.net *.facebook.com *.facebook.net *.fbcdn.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.doubleclick.net *.google.com 'self'; object-src 'self'; media-src 'self'; default-src https://www.shopmania.pt https://s.cdnshm.com www.shopmania.net *.facebook.com *.facebook.net *.fbcdn.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.doubleclick.net *.google.com 'self'; report-to csp_reports; report-uri https://www.shopmania.pt/csp?action=report_csph&k=ByIhEhAZb0tGdwcSMR9iY29GOC4%3D 1
frame-ancestors 'self' https://cms.raaak.net 84.199.78.210 https://preview.citynavigator.nl 1
default-src 'none';  font-src 'self' *.bobsfa.com.br *.cdn77.org fonts.gstatic.com *.bootstrapcdn.com use.typekit.net; style-src 'unsafe-inline' 'self' *.bobsfa.com.br *.cdn77.org fonts.googleapis.com *.bootstrapcdn.com *.google.com cdnjs.cloudflare.com unpkg.com ; connect-src 'self' *.bobs.com.br *.bobsfa.com.br *.addthis.com *.hotjar.io *.hotjar.com wss://*.hotjar.com wss://*.hotjar.io sentry.io bam.nr-data.net *.facebook.com *.loggly.com *.ipify.org *.netdna-ssl.com *.openstreetmap.org; object-src 'self'; child-src 'self' *.google.com rpm.newrelic.com *.addthis.com *.hotjar.com *.facebook.com *.facebook.net  *.reclameaqui.com.br *.googletagmanager.com *.voxus.tv *.doubleclick.net *.uptimerobot.com *.youtube.com; img-src data: 'self' *.bobs.com.br *.bobsfa.com.br *.cdn77.org *.google.com.br *.google.com maps.googleapis.com  *.gstatic.com *.twimg.com *.google-analytics.com *.doubleclick.net *.facebook.com t.co *.adnxs.com   *.googletagmanager.com api.qrserver.com *.mapbox.com; media-src data: 'self' *.bobsfa.com.br *.cdn77.org ; frame-ancestors 'self' *.facebook.com *.hotjar.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' *.bobsfa.com.br *.bobs.com.br *.cdn77.org *.reclameaqui.com.br *.google-analytics.com  *.googleapis.com *.google.com *.gstatic.com www.googletagmanager.com www.googleadservices.com *.jquery.com  cdnjs.cloudflare.com *.sentry-cdn.com *.addthis.com unpkg.com  *.bootstrapcdn.com *.facebook.net *.facebook.com *.hotjar.com *.twitter.com *.ads-twitter.com *.crazyegg.com  *.newrelic.com *.nr-data.net *.reclameaqui.com.br cdn.smart.voxus.com.br *.netdna-ssl.com;manifest-src 'self'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.crazyegg.com *.gstatic.com lightboxapi1.azurewebsites.net lightboxapi2.azurewebsites.net lightboxapi3.azurewebsites.net *.googleadservices.com *.swncdn.com *.google.com *.bing.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.blueconic.net *.googleapis.com *.sitescout.com *.sermonspice.com ct.pinterest.com *.worshiphousemedia.com worshiphousemedia.com *.salemchurchproducts.com *.salemwebnetwork.com *.lightboxcdn.com *.ubembed.com *.bootstrapcdn.com *.jwpcdn.com fonts.gstatic.com *.s3.amazonaws.com salemmediagroup.blueconic.net  *.g.doubleclick.net  *.kissmetrics.com *.googlesyndication.com *.livechatinc.com *.livechat.com livechat.com; 
	script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.sitescout.com *.sermonspice.com *.gstatic.com *.lightboxcdn.com *.googleapis.com bid.g.doubleclick.net *.google.com pubads.g.doubleclick.net *.s3.amazonaws.com worshiphousemedia.s3.amazonaws.com *.google-analytics.com *.salemwebnetwork.com *.facebook.com *.googlesyndication.com *; 
	img-src 'unsafe-inline' 'unsafe-eval' data: *; 
	frame-src 'unsafe-inline' 'unsafe-eval' data:  *.sitescout.com ct.pinterest.com *.worshiphousemedia.com worshiphousemedia.com *.salemchurchproducts.com *.salemwebnetwork.com *.lightboxcdn.com *.ubembed.com *.bootstrapcdn.com *.jwpcdn.com fonts.gstatic.com *.s3.amazonaws.com salemmediagroup.blueconic.net  *.g.doubleclick.net *.lightboxcdn.com *.kissmetrics.com *.facebook.com *.googlesyndication.com *;
	style-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.googleapis.com *; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://fonts.googleapis.com https://code.jquery.com https://cdn.jsdelivr.net https://www.google-analytics.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data:;; frame-src 'self' https://www.youtube.com; font-src 'self' https://cdn.jsdelivr.net https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com; report-uri /report-csp-violation; upgrade-insecure-requests 1
default-src 'unsafe-inline' 'unsafe-eval' https:;img-src * data:; script-src 'unsafe-inline' 'unsafe-eval' blob: * https:; connect-src * blob:; 1
base-uri 'none'; object-src 'none'; script-src https://www.debian-fr.org/logs/ https://www.debian-fr.org/sidekiq/ https://www.debian-fr.org/mini-profiler-resources/ https://www.debian-fr.org/assets/ https://www.debian-fr.org/brotli_asset/ https://www.debian-fr.org/extra-locales/ https://www.debian-fr.org/highlight-js/ https://www.debian-fr.org/javascripts/ https://www.debian-fr.org/plugins/ https://www.debian-fr.org/theme-javascripts/ https://www.debian-fr.org/svg-sprite/; worker-src 'self' https://www.debian-fr.org/assets/ https://www.debian-fr.org/brotli_asset/ https://www.debian-fr.org/javascripts/ https://www.debian-fr.org/plugins/ 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline' 1
script-src 'nonce-abcdbfbd9ddb3551415b8ae666f628a2' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=1823401581235293; frame-ancestors 'self' 1
frame-ancestors 'self'; report-uri https://conxillium.report-uri.io/r/default/csp/enforce 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://ajax.googleapis.com https://rum-static.pingdom.net https://fast.wistia.com https://fast.wistia.net https://cdnjs.cloudflare.com; img-src 'self' https://ssl.google-analytics.com https://rum-collector.pingdom.net https://fast.wistia.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fast.wistia.net; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com; child-src 'self' https://fast.wistia.com https://fast.wistia.net; object-src 'self' 1
script-src 'self' https://*.app.cookieinformation.com https://www.googletagmanager.com https://siteimproveanalytics.com 'unsafe-inline' 'unsafe-eval'; frame-ancestors *.commentor.dk https://pensure.dk https://drb.bankdata.dk https://*.bankdata.dk https://*.jyskebank.dk https://*.pension.dk *.bec.dk http://pbuapp.ngrok.io https://portal.pfa.dk https://mit.pfa.dk https://mitpfa.dk https://www.industrienspension.dk https://Pka.dk https://Pbu.dk https://Lppension.dk *.danicapension.dk *.appension.dk *.pensure.dk https://mppension.dk *.pka.dk *.pbu.dk *.lppension.dk drb://drb.jyskebank.dk https://drb.jyskebank.dk https://localhost:44337/* https://akademikerpension.dk https://*.sydbank.dk https://*.almbrand.dk drb://drb.sydbank.dk drb://drb.almbrand.dk https://staging.pengeprofilen.dk https://min.pengeprofilen.dk 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://glitterkitten.co.uk; img-src 'self' https: data: blob: https://glitterkitten.co.uk; style-src 'self' https://glitterkitten.co.uk 'nonce-JV6P2q2dyGxlXtHaSuRmKQ=='; media-src 'self' https: data: https://glitterkitten.co.uk; frame-src 'self' https:; manifest-src 'self' https://glitterkitten.co.uk; connect-src 'self' data: blob: https://glitterkitten.co.uk https://cdn.masto.host wss://glitterkitten.co.uk; script-src 'self' https://glitterkitten.co.uk; child-src 'self' blob: https://glitterkitten.co.uk; worker-src 'self' blob: https://glitterkitten.co.uk 1
upgrade-insecure-requests; default-src 'self' *.summitracing.com *.dragracecentral.com googleads.g.doubleclick.net; font-src 'self' fonts.googleapis.com; frame-src 'self' *.doubleclick.net; img-src 'self' *.coremetrics.com *.dragracecentral.com *.google-analytics.com *.googleapis.com *.googlesyndication.com *.summitracing.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.coremetrics.com *.doubleclick.net *.googleapis.com *.googlesyndication.com *.googletagservices.com *.google-analytics.com *.google.com; style-src 'self' 'unsafe-inline' *.2mdn.net *.googleapis.com *.mediaplex.com; connect-src 'self' *.google-analytics.com 1
frame-src 'self' *.paycomet.com *.sequrapi.com *.soundcloud.com *.facebook.com *.brightcove.net *.google.com *.youtube.com *.vimeo.com http://10.11.12.251; 1
default-src 'self' 'unsafe-inline' https://*.typekit.net https://*.googleapis.com;  script-src  'self' 'unsafe-eval' 'unsafe-inline' https://*.typekit.net https://ajax.googleapis.com https://*.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://polyfill.io https://static-ssl.responsetap.com https://script.crazyegg.com https://*.msecnd.net https://bat.bing.com https://secure.leadforensics.com https://*.responsetap.com https://*.visualstudio.com https://*.acquire.io https://maps.googleapis.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://services.postcodeanywhere.co.uk https://*.webvisor.com https://mc.yandex.ru https://yastatic.net https://*.clickdimensions.com https://*.episerver.net https://tagmanager.google.com https://snap.licdn.com https://*.adroll.com https://*.adroll.mgr.consensu.org https://cdn.cookielaw.org https://geolocation.onetrust.com https://connect.facebook.net;  connect-src 'self' https://dc.services.visualstudio.com https://services.postcodeanywhere.co.uk wss://*.acquire.io https://*.acquire.io https://mc.yandex.ru https://www.google-analytics.com https://stats.g.doubleclick.net https://bat.bing.com https://*.adroll.com https://cdn.cookielaw.org;  media-src 'self' data:;  img-src 'self' data: https: https://*.gstatic.com https://maps.googleapis.co https://mc.yandex.ru https://googleads.g.doubleclick.net https://www.google.com;  style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://*.typekit.net;  frame-ancestors 'self' http://webvisor.com https://mc.yandex.ru;  frame-src 'self' https://webvisor.com https://mc.yandex.ru https://s.acquire.io https://www.google.com https://*.doubleclick.net;  font-src 'self' data: https://fonts.gstatic.com https://*.typekit.net; 1
default-src https:                    'unsafe-inline'                    'unsafe-eval'; 1
default-src 'self' 'unsafe-inline' data: blob: https://unpkg.com https://cdn.jwplayer.com https://code.jquery.com https://tagmanager.google.com https://www.googletagmanager.com https://browser-update.org https://lftracker.leadfeeder.com https://www.google-analytics.com https://*.mouseflow.com https://*.salesforceliveagent.com https://identity-uaa.aurishealth.com https://contentful-uaa.aurishealth.com https://mailchimp-uaa.aurishealth.com https://cdp-uab.aurishealth.com https://report-data-uaa.aurishealth.com https://slp.aurishealth.com https://cdp-uab.aurishealth.com https://slp.aurishealth.com https://physicianfinderuaa.aurishealth.com https://salesforce-intuaa.aurishealth.com https://prod-logviewer-uaa.aurishealth.com https://stats.g.doubleclick.net https://*.contentful.com https://*.ctfassets.net https://player.vimeo.com https://i.vimeocdn.com https://extend.vimeocdn.com https://www.google.com https://*.googleapis.com https://us-east-1.online.tableau.com https://boards.greenhouse.io https://app.acuityscheduling.com https://*.gstatic.com https://ssl.p.jwpcdn.com https://prd.jwpltx.com https://cognito-idp.us-west-2.amazonaws.com https://s3-us-west-1.amazonaws.com https://s3.us-west-1.amazonaws.com https://www.datadoghq-browser-agent.com https://amazon-cognito-assets.us-west-2.amazoncognito.com https://assets-auris.s3-us-west-1.amazonaws.com https://*.datadoghq.com https://tr.lfeeder.com https://*.matomo.cloud https://*.iconnode.com; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.fontawesome.com *.erecruiter.pl *.google-analytics.com cdnjs.cloudflare.com *.intercom.io js.intercomcdn.com www.googletagmanager.com www.google.com www.gstatic.com/recaptcha/ *.hotjar.com *.hotjar.io *.callpage.io; connect-src 'self' *.callpage.io cdnjs.cloudflare.com wss://*.intercom.io *.intercom.io uploads.intercomcdn.com uploads.intercomusercontent.com *.hotjar.com *.hotjar.io wss://*.hotjar.com; frame-src *.callpage.io www.googletagmanager.com www.google.com/recaptcha/ *.hotjar.com *.hotjar.io; img-src data: blob: 'self' *.zapier.com *.youtube.com *.erecruiter.pl *.ytimg.com *.fbcdn.net *.twimg.com *.callpage.io *.google-analytics.com *.smsapi.com www.googletagmanager.com *.intercomcdn.com static.intercomassets.com uploads.intercomusercontent.com messenger-apps.intercom.io *.intercom-attachments-5.com *.intercom-attachments-6.com *.intercom-attachments-9.com *.hotjar.com *.hotjar.io; style-src 'unsafe-inline' 'self' *.fontawesome.com *.erecruiter.pl *.callpage.io fonts.googleapis.com; font-src 'self' *.fontawesome.com cdnjs.cloudflare.com fonts.gstatic.com js.intercomcdn.com *.hotjar.com *.hotjar.io; child-src share.intercom.io intercom-sheets.com www.intercom-reporting.com www.youtube.com player.vimeo.com fast.wistia.net; form-action 'self' intercom.help api-iam.intercom.io; media-src 'self' *.callpage.io; 1
default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; report-uri https://www.companyrescue.co.uk/?eID=error 1
default-src https: data: wss: 'self' http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://www.gstatic.com/recaptcha https://www.google.com/recaptcha/; connect-src https: wss: 1
default-src 'self' *.elsevierfoundation.org *.google-analytics.com *.youtube.com data: http: https: 'unsafe-inline' 'unsafe-eval'; 1
frame-ancestors 'none'; object-src 'none'; base-uri 'none' 1
frame-ancestors saint-gobain.wmh-demos.com 'self'; report-uri /report-csp-violation 1
default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; base-uri 'none'; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.zenaps.com https://www.youtube.com https://wb.messengerpeople.com https://static.criteo.net https://*.criteo.com https://tpc.googlesyndication.com https://ct.pinterest.com https://www.awin1.com https://*.hotjar.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://*.yandex.ru https://*.yandex.net https://*.google.ru https://ct.pinterest.com https://*.google.com.ua https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.hotjar.com wss://*.hotjar.com https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; default-src 'none'; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://www.myprotein.ru https://m.myprotein.ru https://checkout.myprotein.ru https://connect.facebook.net https://ct.pinterest.com https://tr.snapchat.com; frame-ancestors 'self'; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.cn https://*.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://*.criteo.com https://static.criteo.net https://s.pinimg.com https://tpc.googlesyndication.com https://remote.captcha.com https://platform.twitter.com https://mc.yandex.ru https://*.akamaihd.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.hotjar.com https://*.microsofttranslator.com https://yastatic.net https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://twitter.com https://*.baidu.com https://sc-static.net https://www.google.com https://*.google.co.uk https://google.co.uk https://static.ads-twitter.com https://analytics.twitter.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self'; connect-src 'self' https://www.google-analytics.com https://yoast.com/feed/widget/ https://chat-server-veiligthuis.serviant.nl; font-src 'self' data:; form-action https://chat-client-veiligthuis.serviant.nl https://veiligthuis.nl 'self'; img-src 'self' https://ps.w.org data: https://secure.gravatar.com https://www.google-analytics.com https://maps.gstatic.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://chat-client-veiligthuis.serviant.nl https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' 1
script-src 'nonce-1V96SWaSLjc0ALGIAAB7tw' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/webmaster/about_google; base-uri 'none' 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://norden.social; img-src 'self' https: data: blob: https://norden.social; style-src 'self' https://norden.social 'nonce-A5QYfd8mh0zupemIAYsJcw=='; media-src 'self' https: data: https://norden.social; frame-src 'self' https:; manifest-src 'self' https://norden.social; connect-src 'self' data: blob: https://norden.social https://norden.social wss://norden.social; script-src 'self' https://norden.social; child-src 'self' blob: https://norden.social; worker-src 'self' blob: https://norden.social 1
default-src https: 'self' 'unsafe-inline' 'unsafe-eval' data: 1
frame-ancestors localmotion.nationbuilder.com 1
frame-ancestors 'self' https://www.the-pillow.com.au https://*.parnhamgroup.com:* https://*.parnhamgroup.com.au:* https://theramed.com.au https://*.theramed.com.au https://completesleeprrr.com.au https://*.completesleeprrr.com.au; 1
font-src 'self' *.googleapis.com *.gstatic.com *.icfwebservices.com *.campaign-image.com;              style-src 'self' *.googleapis.com *.google.com *.icfwebservices.com;                           script-src 'self' 'unsafe-eval' *.google-analytics.com *.google.com *.digitalgov.gov *.googletagmanager.com *.onstreamsecure.com *.icfwebservices.com *.crazyegg.com *.amazonaws.com;               default-src 'self' *.googleapis.com *.google-analytics.com *.onstreamsecure.com *.crazyegg.com *.onstreammedia.com *.icfwebservices.com *.campaign-image.com *.youtube.com;              img-src 'self' data: *.google-analytics.com *.icfwebservices.com *.gstattic.com *.campaign-image.com *.crazyegg.com *.ytimg.com https://campaign-image.com http://lyrismedia.icfwebservices.com;              media-src 'self' *.onstreamsecure.com *.onstreammedia.com *.icfwebservices.com;              frame-ancestors 'self' *.icfwebservices.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/jsapi https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.google.com/uds/; img-src 'self' data: https://cdn.jsdelivr.net https://twemoji.maxcdn.com; style-src 'self' 'unsafe-inline' https://www.google.com/uds/ https://fonts.googleapis.com https://ajax.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/normalize/5.0.0/; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com; frame-src https://www.google.com https://www.youtube.com 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' https://snap.licdn.com https://mc.yandex.ru https://*.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://maps.googleapis.com https://vk.com https://*.facebook.net https://www.youtube.com/iframe_api 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://*.google.com https://fonts.googleapis.com https://*.mailchimp.com 'unsafe-inline'; img-src 'self' data: https://*.linkedin.com https://*.google.com https://*.gstatic.com https://www.google-analytics.com https://*.googleapis.com https://vk.com https://*.vk.com https://www.facebook.com; child-src 'self' https://*.google.com https://www.youtube.com https://www.facebook.com; connect-src 'self' https://www.google-analytics.com https://*.amazonaws.com https://*.doubleclick.net; media-src 'self' https://www.youtube.com/ https://*.amazonaws.com; font-src 'self' https://fonts.gstatic.com; 1
default-src 'none'; base-uri 'none'; img-src 'self' www.google-analytics.com; connect-src 'self' www.google-analytics.com; frame-ancestors 'self'; manifest-src 'self';form-action 'none'; style-src 'unsafe-inline' 'sha256-OD7c/oBXyiMrMhtfp1zkRNnA3Hc3gW3LUd9QtEQ9nsw='; script-src 'unsafe-inline' 'sha256-Ag2QGym+RZ4cb/7Mwibt4zPwAcy4z7ZagMhrF3ShK+w='; report-uri https://alpertron23.report-uri.com/r/d/csp/enforce 1
frame-ancestors 'self'; upgrade-insecure-requests; default-src 'self' *.twitter.com *.twimg.com data: gov.bc.ca *.gov.bc.ca;  font-src 'self' 'unsafe-inline' data:; media-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' *.twitter.com *.twimg.com;; connect-src 'self' gov.bc.ca  *.gov.bc.ca;  frame-src 'self' *.twitter.com youtube.com *.youtube.com youtu.be gov.bc.ca *.gov.bc.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' gov.bc.ca *.gov.bc.ca  *.twimg.com *.twitter.com; 1
frame-ancestors 'self' go.pardot.com go.medigate.io medigate.pathfactory.com; 1
default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.googleapis.com www.google-analytics.com *.cloudflare.com *.statcounter.com *.google.com *.jquery.com *.calendly.com; style-src 'unsafe-inline' 'self' *.cloudflare.com; font-src 'self' *.cloudflare.com data: ; img-src 'self' *.statcounter.com; frame-src 'self' 'unsafe-inline' calendly.com; connect-src 'self' *.statcounter.com; 1
default-src https: wss: data: 'unsafe-eval' 'unsafe-inline'; 1
default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:; font-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' api.bufferapp.com api.facebook.com api.mixpanel.com bam.nr-data.net cdn.bayonet.io beek.dexecure.net beek.io buttons.reddit.com cdn.ampproject.org cdn.heapanalytics.com cdn.jsdelivr.net cdn.mxpnl.com cdn.onesignal.com cdn.optimizely.com cdn.ravenjs.com cdn.segment.com cdnjs.cloudflare.com connect.facebook.net d24n15hnbwhuhn.cloudfront.net d3pbwovfiyg83c.cloudfront.net max-staging-1-load-balancer-406189762.us-west-2.elb.amazonaws.com event.api.drift.com graph.facebook.com guillermo.beek.io heapanalytics.com horcrux1.beek.io horcrux2.beek.io horcrux3.beek.io horcrux4.beek.io horcrux5.beek.io horcrux6.beek.io horcrux7.beek.io js.driftt.com js.stripe.com mixpanel.com onesignal.com pixel.cdnwidget.com pixel-geo.prfct.co platform.twitter.com production.beek.io rum-static.pingdom.net script.hotjar.com static.hotjar.com tag.marinsm.com vars.hotjar.com widgets.pinterest.com www.beek.io www.facebook.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com https://googleads.g.doubleclick.net www.linkedin.com cdn.ranksci.com https://cdn.branch.io https://app.link https://static.ads-twitter.com https://analytics.twitter.com; frame-ancestors 'self' app.optimizely.com www.amazon.com www.amazon.com.mx www.facebook.com; 1
font-src 'self' https://fonts.gstatic.com https://script.hotjar.com data:; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://static.hotjar.com https://vars.hotjar.com; img-src 'self' https://www.hollandskroon.nl https://beeldbank.hollandskroon.nl https://gemeenteraad.hollandskroon.nl https://meedoen.hollandskroon.nl https://werkenbij.hollandskroon.nl https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://i.ytimg.com https://script.hotjar.com data: blob:; script-src 'self' 'unsafe-eval' static.hotjar.com https://script.hotjar.com https://vars.hotjar.com https://www.googletagmanager.com https://www.google-analytics.com cdn.botframework.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://polyfill.io https://www.google.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; report-uri https://www.hollandskroon.nl/report-uri/enforce; script-src-attr 'self' 'unsafe-eval' static.hotjar.com https://script.hotjar.com https://vars.hotjar.com https://www.googletagmanager.com https://www.google-analytics.com cdn.botframework.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://polyfill.io https://www.google.com 1
font-src *;img-src *; 1
font-src 'self' data: fonts.gstatic.com; 1
default-src https: 'unsafe-eval' 'unsafe-inline'; img-src * data:; font-src * data:; object-src 'none'; frame-ancestors 'self'; 1
default-src 'self' http: https: 1
base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://kit.fontawesome.com https://mpsnare.iesnare.com https://stage-libs.hipay.com https://widget.trustpilot.com https://kit-pro.fontawesome.com https://www.googletagmanager.com https://bat.bing.com https://www.dwin1.com https://www.googleadservices.com https://www.google-analytics.com https://googleads.g.doubleclick.net 1
default-src blob: 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://*.hotjar.com https://*.google-analytics.com https://www.googletagmanager.com https://sjs.bizographics.com; img-src 'self' blob: data: https://relay.vmsproxy.com https://relay-ch.vmsproxy.com https://relay-chi.vmsproxy.com https://relay-fr.vmsproxy.com https://relay-la.vmsproxy.com https://relay-ny.vmsproxy.com https://relay-si.vmsproxy.com https://relay-sy.vmsproxy.com https://*.relay.vmsproxy.com https://*.relay-ch.vmsproxy.com https://*.relay-chi.vmsproxy.com https://*.relay-fr.vmsproxy.com https://*.relay-la.vmsproxy.com https://*.relay-ny.vmsproxy.com https://*.relay-si.vmsproxy.com https://*.relay-sy.vmsproxy.com https://nxcloud-prod-integrations-static.s3.amazonaws.com  https://*.google-analytics.com https://*.hotjar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://themes.googleusercontent.com https://static.hotjar.com; frame-src * cox-vms://* demo-vms://* dtv-vms://* dw-vms://* ez-vms://* fly-vms://* hanwha-vms://* mvss-vms://* nvision-vms://* nx-vms://* pcms-vms://* qulu-vms://* ras-vms://* sentry-vms://* sk-vms://* https://*; connect-src 'self' https://*.networkoptix.com https://*.google-analytics.com https://*.googleapis.com https://*.hotjar.com:* wss://*.hotjar.com blob: https://relay.vmsproxy.com https://relay-ch.vmsproxy.com https://relay-chi.vmsproxy.com https://relay-fr.vmsproxy.com https://relay-la.vmsproxy.com https://relay-ny.vmsproxy.com https://relay-si.vmsproxy.com https://relay-sy.vmsproxy.com https://*.relay.vmsproxy.com https://*.relay-ch.vmsproxy.com https://*.relay-chi.vmsproxy.com https://*.relay-fr.vmsproxy.com https://*.relay-la.vmsproxy.com https://*.relay-ny.vmsproxy.com https://*.relay-si.vmsproxy.com https://*.relay-sy.vmsproxy.com https://nxcloud-prod-integrations-static.s3.amazonaws.com ; object-src 'none'; media-src 'self' blob: https://relay.vmsproxy.com https://relay-ch.vmsproxy.com https://relay-chi.vmsproxy.com https://relay-fr.vmsproxy.com https://relay-la.vmsproxy.com https://relay-ny.vmsproxy.com https://relay-si.vmsproxy.com https://relay-sy.vmsproxy.com https://*.relay.vmsproxy.com https://*.relay-ch.vmsproxy.com https://*.relay-chi.vmsproxy.com https://*.relay-fr.vmsproxy.com https://*.relay-la.vmsproxy.com https://*.relay-ny.vmsproxy.com https://*.relay-si.vmsproxy.com https://*.relay-sy.vmsproxy.com https://nxcloud-prod-integrations-static.s3.amazonaws.com 1
default-src http://*.timeformecatalog.com https://*.timeformecatalog.com https://*.emmonemo.com 'unsafe-inline' 'unsafe-eval' data: blob: *.2mdn.net *.bizrate.com *.bizrateinsights.com *.brightcove.com *.brightcove.net *.coremetrics.com *.doubleclick.net *.facebook.com *.facebook.net *.fonts.net *.googleadservices.com *.google-analytics.com *.googleapis.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hawksearch.com *.hawksearch.info *.hawksearch.net *.mcafeesecure.com *.monetate.net *.moovweb.net *.offeredby.net *.powerreviews.com *.ywxi.net *.2mdn.net *.newbenefits.com *.anthonyrichards.com *.passtohealth.com *.cloudfront.net *.zencdn.net *.cloudinary.com *.iesnare.com *.cmcore.com *.paymentech.com *.kaptcha.com chat.amerimark.com *.hotjar.com wss://*.hotjar.com *.hotjar.io *.linksynergy.com *.rakuten.com *.bing.com *.akstat.io *.googletagservices.com *.monetate.org *.paypalobjects.com *.braintreegateway.com *.paypal.com *.braintree-api.com *.trustedsite.com s3-us-west-2.amazonaws.com/mfesecure-public/ *.go-mpulse.net *.beautyboutiqueperks.com *.harrietcarterperks.com *.amerimarkperks.com *.feelgoodstoreperks.com *.timeformeperks.com *.attn.tv *.attentivemobile.com *.noibu.com wss://vf.noibu.com *.bluecore.com *.rlcdn.com *.alocdn.com *.gonift.com *.tags.wdsvc.net *.wdsvc.net *.adsrvr.org *.emmonemo.com 1
frame-ancestors 'self' http://www.usa.philips.com *.philips.com *.usa.philips.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' adverto.co *.google-analytics.com *.googleapis.com *.google.com *.googletagmanager.com *.staticstuff.net *.hotjar.com 1
default-src 'none';base-uri 'none';child-src blob:;connect-src 'self' https://*.ampproject.net https://cdn.ampproject.org;font-src 'self' https://fonts.gstatic.com;form-action 'self';frame-ancestors 'self';frame-src 'self' https://*.ampproject.net https://cdn.ampproject.org https://www.youtube.com/embed/;img-src 'self' data: https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.ytimg.com;manifest-src 'self';script-src 'self' 'unsafe-inline' https://cdn.ampproject.org maps.googleapis.com;script-src-elem 'unsafe-inline' https://cdn.ampproject.org https://maps.googleapis.com https://polyfill.io;style-src 'unsafe-inline' https://fonts.googleapis.com;worker-src blob:;sandbox allow-popups allow-same-origin allow-scripts allow-presentation allow-top-navigation-by-user-activation;upgrade-insecure-requests; block-all-mixed-content; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: md04.middendrenthe.nl 5.100.228.188 *.google-analytics.com *.jwpcdn.com https://mdtel01.my3cx.nl:5001/callus.js *.readspeaker.com s3.amazonaws.com; worker-src 'self' 'unsafe-inline' 'unsafe-eval' blob: s3.amazonaws.com connect.facebook.net *.jwpcdn.com; frame-src 'self' arcg.is *.arcgis.com *.readspeaker.com *.facebook.com s-static.ak.facebook.com *.youtube.com; object-src 'self'; frame-ancestors 'self' 1
default-src https: blob: data: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval';img-src https: data:;frame-ancestors 'self' *.psplugin.com *.vergic.com 1
default-src 'self';     base-uri 'self';     script-src 'nonce-d86d252593aa4117b13cf8fbc4393502' 'strict-dynamic' 'self' *.zxcdn.com *.casinorewards.com cdn.jsdelivr.net https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js ;     connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net;     frame-src 'self' *.gameassists.co.uk *.gameassists.dk *.gameassists.se *.gameassists.co.za *.valueactive.eu *.valueactive.dk  ;     style-src 'self' *.zxcdn.com cdn.jsdelivr.net https://fonts.googleapis.com 'unsafe-inline';     font-src 'self' cdn.jsdelivr.net *.zxcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com;     img-src * data:;     object-src 'none';     frame-ancestors 'self';     media-src 'self' *.zxcdn.com s3.amazonaws.com/casinorewards/; 1
default-src https:; img-src https:; object-src 'none'; script-src 'self' https://ajax.googleapis.com; style-src 'self' https://maxcdn.bootstrapcdn.com 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: *; img-src * 'self' data: blob: https:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' www.googletagmanager.com https://www.google-analytics.com maps.googleapis.com www.nightline-delivers.com https://my-parcelmotel.nightline.ie ; img-src * data: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com 'self' data:; frame-src 'self' https://maps.google.com https://*.nightline.ie https://www.youtube.com https://www.google.com; connect-src 'self' https://apis.google.com https://www.google-analytics.com; object-src 'none'; report-uri https://nightline.report-uri.com/r/d/csp/enforce; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.abtasty.com *.abtastylab.com *.adform.net *.bing.com *.contentpagina.nl *.doubleclick.net *.dwin1.com *.facebook.net *.google.com *.google.nl *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.hotjar.com *.instagram.com *.nowgo.com *.nowgo.local *.pega.com *.reaal.local *.reaal.nl *.reaal.srg *.segment.com *.usefirefly.com *.vimeo.com *.youtube.com *.ytimg.com *.zwitserleven.local *.zwitserleven.nl az416426.vo.msecnd.net cdn.mxpnl.com dl.episerver.net embedsocial.com web.telemetric.dk snap.licdn.com tagmanager.google.com consent.cookiebot.com consentcdn.cookiebot.com content.jwplatform.com ssl.p.jwpcdn.com;style-src 'self' 'unsafe-inline' *.abtasty.com *.contentpagina.nl *.googleapis.com *.nowgo.com *.nowgo.local *.pega.com *.reaal.local *.reaal.nl *.reaal.srg *.usefirefly.com *.vimeo.com *.zwitserleven.local *.zwitserleven.nl dl.episerver.net embedsocial.com maxcdn.bootstrapcdn.com tagmanager.google.com;img-src 'self' data: *.abtasty.com *.abtastylab.com *.atdmt.com *.bing.com *.contentpagina.nl *.doubleclick.net *.facebook.com *.google.com *.google.nl *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.kiyoh.nl *.linkedin.com *.nowgo.com *.nowgo.local *.pega.com *.reaal.local *.reaal.nl *.reaal.srg *.twitter.com *.vivat.nl *.ytimg.com *.zwitserleven.local *.zwitserleven.nl dl.episerver.net prd.jwpltx.com ping-meta-prd.jwpltx.com;media-src 'self' blob: *.vimeo.com *.vimeocdn.com www.youtube-nocookie.com storage.googleapis.com;frame-src 'self' blob: *.bnr.nl *.contentpagina.nl *.doubleclick.net *.hotjar.com *.instagram.com *.nowgo.com *.nowgo.local *.pega.com *.reaal.local *.reaal.nl *.reaal.srg *.usefirefly.com *.vimeo.com *.youtube.com *.zwitserleven.local *.zwitserleven.nl www.google.com tbs.tradedoubler.com sdk.companywebcast.com www.youtube-nocookie.com embedsocial.com consentcdn.cookiebot.com;font-src 'self' data: *.abtasty.com *.abtastylab.com *.hotjar.com *.googleapis.com *.gstatic.com *.zwitserleven.local *.zwitserleven.nl maxcdn.bootstrapcdn.com tagmanager.google.com;connect-src 'self' *.abtasty.com *.abtastylab.com *.azure-api.net *.contentpagina.nl *.doubleclick.net *.google-analytics.com *.googleapis.com *.hotjar.com *.nowgo.com *.nowgo.local *.pega.com *.reaal.local *.reaal.nl *.reaal.srg *.segment.io *.usefirefly.com *.zwitserleven.local *.zwitserleven.nl api.mixpanel.com api.zwitserleven.nl az416426.vo.msecnd.net dc.services.visualstudio.com digitalapis.azure-api.net vc.hotjar.io wss://eu.usefirefly.com wss://euuat.usefirefly.com wss://*.hotjar.com www.facebook.com api.storyteq.com ssl.p.jwpcdn.com;frame-ancestors 'self';manifest-src 'self' *.zwitserleven.local *.zwitserleven.nl 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.gtjaqh.com *.gtja.com *.gtja.com:7443 *.baidu.com *.bdimg.com *.bdstatic.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.addtoany.com *.newrelic.com *.google-analytics.com *.krxd.net *.facebook.net *.cloudfront.net *.nr-data.net *.jsdelivr.net *.googleapis.com *.cloudflare.com *.fusepump.com unpkg.com *.pinterest.com https://code.jquery.com *.pricespider.com *.mapbox.com *.evidon.com; object-src 'self'; style-src 'self' 'unsafe-inline' *.jsdelivr.net *.googleapis.com *.fusepump.com *.cloudflare.com *.cloudfront.net *.pricespider.com *.mapbox.com; img-src 'self' *.google-analytics.com *.doubleclick.net *.google.com *.google.co.uk *.facebook.com *.krxd.net maps.gstatic.com maps.googleapis.com data: *.fusepump.com *.google.ro px.pump.to *.pinterest.com *.neodatagroup.com *.pricespider.com *.mapbox.com; media-src 'self'; frame-src 'self' *.krxd.net *.addtoany.com *.cloudfront.net *.doubleclick.net www.youtube.com www.facebook.com *.googleapis.com *.pinterest.com; frame-ancestors 'self'; child-src 'self' *.cloudfront.net; font-src 'self' cdn.jsdelivr.net fonts.gstatic.com data:; connect-src 'self' *.analyze.ly *.fusepump.com *.visibleconsumerinsight.com *.mapbox.com; report-uri /us/report-csp-violation 1
default-src 'unsafe-eval' 'unsafe-inline' * blob:; script-src 'unsafe-inline' 'unsafe-eval' * blob:; img-src * data:; connect-src *; font-src * data 1
script-src 'self' https://*.googleapis.com *.gstatic.com www.google-analytics.com ajax.googleapis.com ajax.aspnetcdn.com use.typekit.net us1.siteimprove.com cdnjs.cloudflare.com connect.facebook.net 'unsafe-inline' 'unsafe-eval' 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://vis.social; img-src 'self' https: data: blob: https://vis.social; style-src 'self' https://vis.social 'nonce-fX8IMrSTXz5wxrhsQB84AQ=='; media-src 'self' https: data: https://vis.social; frame-src 'self' https:; manifest-src 'self' https://vis.social; connect-src 'self' data: blob: https://vis.social https://cdn.masto.host wss://vis.social; script-src 'self' https://vis.social; child-src 'self' blob: https://vis.social; worker-src 'self' blob: https://vis.social 1
default-src * 'self' data: 'unsafe-inline' ; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.vo.msecnd.net *.google.com *.googleapis.com maps.gstatic.com *.googletagmanager.com cdnjs.cloudflare.com code.jquery.com *.facebook.net secure.quantserve.com rules.quantcount.com *.trustpilot.com www.googleadservices.com komito.net bat.bing.com googleads.g.doubleclick.net *.google-analytics.com static.ads-twitter.com analytics.twitter.com snap.licdn.com px.ads.linkedin.com www.shrfbdg004.com *.playbuzz.com *.hotjar.com *.hotjar.io *.infinity-tracking.net *.youtube.com *.ytimg.com *.socialsignin.net emac-direct.service-plan.co.uk secure.hiss3lark.com s3.amazonaws.com *.list-manage.com *.evanshalshaw.com *.stratstone.com *.carstore.com intranet.local *.pendragonplc.com *.pendragonvehiclemanagement.co.uk ; connect-src * ; frame-src * 'self' *.socialsignin.net *.evanshalshaw.com *.stratstone.com *.carstore.com; upgrade-insecure-requests; block-all-mixed-content; 1
frame-ancestors https://www.urionlinejudge.com.br https://www.maisprati.com.br; 1
default-src 'self'; img-src 'self' data:; frame-src 'self' https://www.google.com https://www.gstatic.com; object-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'unsafe-inline' 'self' https://www.woopra.com https://static.woopra.com https://www.google.com https://www.gstatic.com; 1
frame-ancestors https://*.apus.edu https://*.hondros.edu 1
frame-ancestors 'self' *.atlantichealth.org; 1
default-src 'none'; base-uri 'self'; object-src 'self'; form-action 'self' data: http://search.ebscohost.com/login.aspx http://eds.b.ebscohost.com/ https://tepuna.on.worldcat.org/external-search https://mts.realme.govt.nz https://www.ite.logon.realme.govt.nz https://www.logon.realme.govt.nz https://www1.logon.realme.govt.nz https://www2.logon.realme.govt.nz https://*.logon.realme.govt.nz; font-src 'self' data: https://hello.myfonts.net/ https://cdn.embedly.com https://api-cdn.embed.ly; img-src 'self' data: https: https://digitalnz.org http://assets.ctfassets.net/; media-src 'self' data: https: https://digitalnz.org http://assets.ctfassets.net/; connect-src 'self' https: https://www.googletagmanager.com www.google-analytics.com *.digitalnz.org digitalnz.org https://cdn.embedly.com https://api-cdn.embed.ly https://cdn.embedly.com https://api-cdn.embed.ly; script-src 'self' https: https://www.googletagmanager.com https://www.google-analytics.com https://apis.google.com https://connect.facebook.net https://platform.twitter.com https://www.recaptcha.net https://cdn.embedly.com https://api-cdn.embed.ly 'nonce-OxWbesgz9TcbjJpjArQ6oA=='; style-src 'self' data: http://hello.myfonts.net/ https://cloud.typography.com https://cdn.embedly.com https://api-cdn.embed.ly 'nonce-OxWbesgz9TcbjJpjArQ6oA=='; frame-src https://nlnztest.altarama.com https://askalibrarian.natlib.govt.nz https://www.youtube.com https://player.vimeo.com https://www.google.com/ https://fs3.formsite.com/ https://cdn.embedly.com https://api-cdn.embed.ly; frame-ancestors 'self' https://nlnztest.altarama.com https://askalibrarian.natlib.govt.nz https://www.youtube.com https://player.vimeo.com https://cdn.embedly.com https://api-cdn.embed.ly; child-src https://www.youtube.com https://player.vimeo.com; upgrade-insecure-requests 1
frame-ancestors polarisinstitute.nationbuilder.com 1
frame-ancestors 'self' https://www.sugarsync.com https://www.sugarsync.jp https://*.sugarsync.com https://*.sugarsync.jp; child-src 'self' https://www.sugarsync.com https://www.sugarsync.jp https://*.sugarsync.com https://*.sugarsync.jp https://zuora.com https://www.zuora.com https://*.cloudsponge.com https://*.doubleclick.net https://facebook.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.google.com https://*.evyy.net https://www.ojrq.net https://*.a8.net https://*.emjcd.com https://*.dnb.com https://*.dunsregistered.com https://*.youtube.com; frame-src 'self' https://www.sugarsync.com https://www.sugarsync.jp https://*.sugarsync.com https://*.sugarsync.jp https://zuora.com https://www.zuora.com https://*.cloudsponge.com https://*.doubleclick.net https://facebook.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.google.com https://*.evyy.net https://www.ojrq.net https://*.a8.net https://*.emjcd.com https://*.dnb.com https://*.dunsregistered.com https://*.youtube.com; 1
script-src 'self' 'nonce-c0e02d04-423a-468a-868e-27f7f5efaf31' 'strict-dynamic' 'unsafe-eval' ; object-src none; 1
frame-ancestors 'self'; base-uri 'none'; object-src 'self'; script-src https: http: 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://bullshit.ist https://*.bullshit.ist https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
block-all-mixed-content; frame-ancestors 'self' securityscorecard.lookbookhq.com securityscorecard.pathfactory.com discover.securityscorecard.com instant.securityscorecard.com securityscorecard.qa securityscorecard.com *.cookiebot.com; default-src 'none'; object-src 'none'; img-src 'self' blob: data: https:; media-src 'self' data: https: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' securityscorecard.com instant.securityscorecard.com data: https:; frame-src 'self' https:; connect-src 'self' https:; base-uri 'self'; form-action 'self' https: 1
default-src 'self' bongacams.com *.bongacams.com ymetrica1.com mc.yandex.ru cam.bet *.cam.bet cdn.fluidplayer.com movcpm.com *.movcpm.com greedseed.world xmjvf.com *.xmjvf.com 9v5.ru *.9v5.ru *.adtng.com adtng.com http://87.98.171.25 http://176.9.86.142 http://176.9.142.103 http://144.76.24.149 http://136.243.73.233 http://148.251.0.18 http://144.76.218.27 http://148.251.136.187; style-src cdn.fluidplayer.com fonts.googleapis.com 'self' 'unsafe-inline'; script-src bongacams.com *.bongacams.com cdn.jsdelivr.net cdn.fluidplayer.com 'self' 'unsafe-eval' 'unsafe-inline'; font-src 'self' fonts.gstatic.com data:; img-src 'self' bongacams.com *.bongacams.com counter.yadro.ru mc.yandex.ru ymetrica1.com mc.webvisor.org cdn.fluidplayer.com movcpm.com *.movcpm.com xmjvf.com *.xmjvf.com 9v5.ru *.9v5.ru *.adtng.com adtng.com data:; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: wss://*.hotjar.com http://*.hotjar.com:* http://*.hotjar.io http://*.googletagmanager.com http://*.google-analytics.com http://*.gstatic.com http://*.googleapis.com http://*.youtube.com http://*.facebook.com http://*.facebook.net http://*.ads-twitter.com http://*.twitter.com http://t.co http://*.doubleclick.net http://*.adform.net http://*.clarovideo.net http://*.claromusica.com http://*.claro.com.sv https://*.hotjar.com:* https://*.hotjar.io https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://*.youtube.com https://*.facebook.com https://*.facebook.net https://*.ads-twitter.com https://*.twitter.com https://t.co https://*.doubleclick.net https://*.adform.net https://*.clarovideo.net https://*.claromusica.com https://*.claro.com.sv https://www.google.com media-src mediastream:; 1
default-src 'self' https://*.addthis.com; connect-src 'self' https://*.addthis.com; font-src 'self' fonts.gstatic.com data:; script-src https://z.moatads.com www.google-analytics.com tools.euroland.com tools.eurolandir.com https://addthisevent.com https://*.addthisevent.com https://*.addevent.com https://*.addthisedge.com https://*.addthis.com graph.facebook.com www.linkedin.com *.google.com https://*.googleapis.com www.gstatic.com www.youtube.com s.ytimg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src https://addevent.com https://*.addevent.com www.google-analytics.com http://maps.googleapis.com img.youtube.com data: 'self'; frame-src www.youtube.com https://*.addthis.com tools.euroland.com tools.eurolandir.com https://www.google.com 'self' 1
frame-ancestors 'self' https://www.kerstpakkettenidee.nl; 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://magenta.as https://*.magenta.as https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: blob: 1
frame-src * 'self' 1
default-src https: wss: blob: data: 'unsafe-inline' 'unsafe-eval' 1
frame-src 'self' camera.deckchair.com  events.epicureanhotel.com *.youtube.com *.threshold360.com *.doubleclick.net *.yelp.com *.google.com; 1
upgrade-insecure-requests; default-src 'self' data: 'unsafe-inline' www.bfgoodrich.ru; object-src 'none' 1
default-src 'self' *.iau-arak.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com ; frame-ancestors 'self' https://trustseal.enamad.ir 1
default-src 'self'; font-src 'self' data:; script-src 'nonce-IO7SFTEBEF2xGdXY9kOLCg==' 'strict-dynamic' 'self'; connect-src 'none'; media-src 'self'; object-src 'self'; style-src 'self' 'unsafe-inline'; child-src 'self' *.youtube-nocookie.com *.ted.com *.vimeo.com *.liveleak.com *.srgssr.ch *.srf.ch *.slideshare.net *.spotify.com *.podcasts.apple.com *.eventbrite.co.uk; frame-ancestors 'none'; base-uri scip.ch 1
default-src 'self' https://www.hofvantwente.nl/;connect-src 'self' https://log.prezi.com/ https://chatapi.obi4wan.com/ https://bots.obi4wan.com/api/public/ https://s3.eu-central-1.amazonaws.com/obistatic/ wss://ws-eu.pusher.com/ https://sockjs-eu.pusher.com https://cloudstatic.obi4wan.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s3.eu-central-1.amazonaws.com/obistatic/ https://d2y613pujgeg9g.cloudfront.net/ https://js.pusher.com/ https://stats.pusher.com/ https://prezi-a.akamaihd.net/ https://*.google-analytics.com/ https://maps.googleapis.com/ https://www.googleadservices.com/ https://www.googletagmanager.com/ https://cloudstatic.obi4wan.com/ https://public.tableau.com/;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://prezi-a.akamaihd.net/;img-src 'self' data: https://*.google-analytics.com/ https://maps.gstatic.com/ https://*.googleapis.com/ https://csi.gstatic.com/ https://*.static.prezi.com/ https://s3-eu-west-1.amazonaws.com/obipub/ https://public.tableau.com/ https://obistatic.s3.eu-central-1.amazonaws.com/bots/img/; font-src 'self' https://fonts.gstatic.com/ https://prezi-a.akamaihd.net/; frame-src 'self' https://prezi.com/ https://*.googletagmanager.com/ https://www.google.com/ https://maps.google.com/ https://player.vimeo.com/ https://www.youtube.com https://gem-hvt.maps.arcgis.com/ https://public.tableau.com/; 1
default-src 'self' https://admin.df.eu/ https://analytics.aklamio.com https://*.ampproject.org https://*.lpsnmedia.net https://*.tealiumiq.com https://*.google.com https://*.google.de https://*.doubleclick.net https://*.optimizely.com https://www.google-analytics.com https://*.facebook.com; style-src 'self' 'unsafe-inline' https://s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.omnitagjs.com https://*.adnxs.com https://*.aklamio.com https://*.doubleclick.net https://java.com https://optimizely.s3.amazonaws.com https://tags.tiqcdn.com https://static-artifact.heg-cp.com https://cdn.polyfill.io https://www.google.com https://www.gstatic.com https://*.optimizely.com https://www.googleadservices.com https://bat.bing.com https://www.dwin1.com https://connect.facebook.net https://www.google-analytics.com ajax.googleapis.com https://*.twitter.com https://static.ads-twitter.com https://*.ampproject.org https://*.wsimg.com https://*.liveperson.net https://*.lpsnmedia.net; font-src 'self' https://optimizely.github.io; object-src 'self'; img-src 'self' 'unsafe-inline' https://*.atdmt.com https://*.zemanta.com https://*.trustpilot.com https://*.aklamio.com https://img1.wsimg.com https://*.lpsnmedia.net https://java.com https://www.df.eu/ data: https://i.ytimg.com https://*.g.doubleclick.net https://bat.bing.com https://www.google-analytics.com https://www.facebook.com https://www.google.com https://www.google.de https://t.co https://*.multiscreensite.com; frame-src 'self' https://*.aklamio.com https://lo.tokenizer.liveperson.net https://pixel.bsmartdata.com https://www.google.com https://*.optimizely.com https://*.facebook.com https://*.facebook.net www.youtube.com *.vimeo.com *.vimeocdn.com https://*.fls.doubleclick.net https://*.lpsnmedia.net https://server.lon.liveperson.net/; 1
default-src 'self' https: 'unsafe-inline' 'unsafe-eval' data:; media-src * data: 'unsafe-inline' 'unsafe-eval' blob:; img-src * data: 'unsafe-inline' 1
upgrade-insecure-requests;script-src 'self';connect-src 'self' blob: https://outerheaven.club wss://outerheaven.club;media-src 'self' https:;img-src 'self' data: blob: https:;default-src 'none';base-uri 'self';frame-ancestors 'none';style-src 'self' 'unsafe-inline';font-src 'self';manifest-src 'self'; 1
default-src https: data:; style-src https: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; 		font-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googleapis.com; 		style-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-inline' *.gstatic.com *.googleapis.com; 		frame-src 'self' *.youtube.com *.google.com *.google.co.kr  *.gstatic.com *.googleapis.com; 		img-src * data:; 		connect-src 'self' *.google-analytics.com *.google.com *.google.co.kr *.gstatic.com *.googleapis.com;		script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.google.com *.google.co.kr *.gstatic.com *.googleapis.com; 1
frame-ancestors 'self' http://www.galaxyclub.cn https://www.galaxyclub.cn http://www.samsungmembers.cn https://www.samsungmembers.cn 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://tagmanager.google.com; object-src 'self' 1
base-uri 'none'; object-src 'none'; script-src https://communaute.solomilan.com/logs/ https://communaute.solomilan.com/sidekiq/ https://communaute.solomilan.com/mini-profiler-resources/ https://communaute.solomilan.com/assets/ https://communaute.solomilan.com/brotli_asset/ https://communaute.solomilan.com/extra-locales/ https://communaute.solomilan.com/highlight-js/ https://communaute.solomilan.com/javascripts/ https://communaute.solomilan.com/plugins/ https://communaute.solomilan.com/theme-javascripts/ https://communaute.solomilan.com/svg-sprite/ https://js.stripe.com/v3/ https://hooks.stripe.com; worker-src 'self' https://communaute.solomilan.com/assets/ https://communaute.solomilan.com/brotli_asset/ https://communaute.solomilan.com/javascripts/ https://communaute.solomilan.com/plugins/ 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://deephunt.in https://*.deephunt.in https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com https://google.com https://apis.google.com https://ajax.googleapis.com https://api.tiles.mapbox.com https://www.google-analytics.com https://oss.maxcdn.com https://cdn.socket.io https://*.stripe.com https://stripe.github.io https://cdnjs.cloudflare.com https://translate.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleadservices.com https://maxcdn.bootstrapcdn.com https://blog.numundo.org https://d37gvrvc0wt4s1.cloudfront.net https://connect.facebook.net https://cdn.mxpnl.com https://disqus.com https://numundo.disqus.com https://*.disquscdn.com https://*.leaddyno.com https://*.intercom.io https://*.intercomcdn.com https://*.datatables.net https://unpkg.com https://*.unpkg.com https://cdn.datatables.net https://*.sentry-cdn.com blob: data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://translate.googleapis.com https://*.stripe.com https://stripe.github.io https://cdnjs.cloudflare.com/ https://*.numundo.org https://*.disquscdn.com https://cdn.datatables.net; font-src data: 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://themes.googleusercontent.com https://*.intercomcdn.com https://*.numundo.org; img-src 'self' data: blob: https://i.ytimg.com https://gravatar.com https://avatars.githubusercontent.com https://*.twimg.com https://*.twitter.com https://*.4sqi.net https://*.media.tumblr.com https://graph.facebook.com https://*.facebook.com https://*.fbcdn.net https://*.fbsbx.com https://fbcdn-profile-a.akamaihd.net https://github.global.ssl.fastly.net https://chart.googleapis.com https://google.com https://www.google.com https://*.google-analytics.com https://*.googleusercontent.com https://*.gstatic.com https://*.googleapis.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://*.google.pt https://google.pt https://numundo.org https://*.numundo.org https://*.tiles.mapbox.com https://*.tile.osm.org https://numundo-dev.imgix.net https://numundo.imgix.net https://blog.numundo.org https://www.facebook.com https://stats.g.doubleclick.net https://*.disqus.com https://*.disquscdn.com https://*.mxpnl.com https://*.stripe.com https://*.intercomcdn.com https://*.intercomassets.com https://*.imgix.net https://medium.com https://*.medium.com https://www.coinpayments.net; media-src 'self' https://*.intercomcdn.com; connect-src 'self' ws://localhost:5000 ws://localhost:3000 ws://ec2-52-5-60-124.compute-1.amazonaws.com:3000 ws://numundo.org/3000 ws://127.0.0.1:35729/livereload a.tiles.mapbox.com api.github.com https://pnm-development.s3.amazonaws.com https://pnm-development.s3.sa-east-1.amazonaws.com https://pnm-production.s3.amazonaws.com https://pnm-production.s3.us-west-2.amazonaws.com s3.amazonaws.com *.numundo.org *.googleapis.com *.google-analytics.com https://maps.googleapis.com *.mxpnl.com *.mixpanel.com stripe.github.io https://*.numundo.org *.services.disqus.com *.stripe.com wss://*.intercom.io https://*.intercom.io https://*.imgix.net https://api.rss2json.com https://sentry.io; object-src 'self'; frame-src 'self' https://player.vimeo.com https://www.youtube.com/ https://www.youtube.com/embed/ https://*.stripe.com https://google.com https://www.google.com https://stripe.github.io https://*.ak.facebook.com https://*.facebook.com https://disqus.com; report-uri /report-violation 1
default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*; img-src 'self' https://www.googletagmanager.com https://matomoprod.babelstreet.com https://www.google-analytics.com; 1
default-src 'none'; child-src *.jotform.com *.jotformeu.com *.jotformpro.com player.vimeo.com *.typeform.com/ *.hotjar.com *.hotjar.io www.googletagmanager.com *.google.com *.facebook.com *.matterport.com *.youtube.com *.piiqvr.com *.zillow.com kuula.co 3dapartment.com; connect-src 'self' bold-images-production.s3.amazonaws.com bold-deal-documents-production.s3.amazonaws.com performance.typekit.net/ sentry.io/ *.hotjar.com wss://*.hotjar.com *.hotjar.io wss://*.hotjar.io; font-src d31ip4t2r0mfnn.cloudfront.net use.typekit.net fonts.typekit.net fonts.gstatic.com data:; img-src 'self' blob: data: d31ip4t2r0mfnn.cloudfront.net bold-ny-production.imgix.net p.typekit.net api.mapbox.com www.google-analytics.com stats.g.doubleclick.net www.google.com googleads.g.doubleclick.net *.gstatic.com *.facebook.com; script-src 'self' 'unsafe-inline' d31ip4t2r0mfnn.cloudfront.net *.google-analytics.com use.typekit.net cdn.ravenjs.com *.typeform.com *.hotjar.com *.hotjar.io www.googletagmanager.com googleads.g.doubleclick.net bid.g.doubleclick.net www.googleadservices.com www.gstatic.com *.google.com maps.googleapis.com *.facebook.net *.facebook.com connect.facebook.net/en_US/sdk.js; style-src 'self' blob: 'unsafe-inline' d31ip4t2r0mfnn.cloudfront.net use.typekit.net fonts.googleapis.com tagmanager.google.com 1
default-src 'none'; script-src 'self' *.uriports.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com/pagead/conversion_async.js 'sha256-7FvpPpXAHZNjGoFLxlIG3coKVnX7eUhefISTBgmTciU='; img-src 'self' data: https:; connect-src *.uriports.com https://www.google.com/pagead/landing; style-src 'self'; font-src 'self'; form-action 'self' *.uriports.com; base-uri 'self'; frame-ancestors 'self'; frame-src https://bid.g.doubleclick.net https://tpc.googlesyndication.com; object-src 'self'; block-all-mixed-content; report-uri https://leemankuiper.uriports.com/reports/enforce 1
default-src 'self';connect-src 'self' https://*.officesaigon.vn https://*.responsivevoice.org https://*.google-analytics.com https://*.doubleclick.net;script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://*.officesaigon.vn *.dmca.com https://*.responsivevoice.org https://*.googleapis.com https://*.google.com https://*.google-analytics.com https://*.gstatic.com https://*.youtube.com https://*.ytimg.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.googleadservices.com *.googleadservices.com https://*.doubleclick.net https://*.googletagservices.com https://*.facebook.net https://*.facebook.com https://*.twitter.com https://*.yandex.com https://*.bing.com https://*.yahoo.com https://*.pinterest.com;img-src 'self' blob: data: https://*.officesaigon.vn *.dmca.com https://*.google-analytics.com https://*.google.com *.googletagmanager.com https://*.ytimg.com https://*.youtube.com https://*.facebook.net https://*.facebook.com https://*.doubleclick.net https://*.google.com.vn;font-src 'self' data: https://*.officesaigon.vn https://*.cloudflare.com;frame-src 'self' https://*.officesaigon.vn https://*.youtube.com https://*.facebook.com https://*.google.com https://*.doubleclick.net;form-action 'self' https://*.officesaigon.vn https://*.facebook.com;style-src * 'unsafe-inline';media-src * data: blob: filesystem:; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; script-src 'self' https://tabletop.social; font-src 'self' https://tabletop.social; img-src 'self' data: blob: https://tabletop.social https://storage.gra.cloud.ovh.net; style-src 'self' https://tabletop.social 'nonce-u2hHbEycEwKsGI3b8CSe1A=='; media-src 'self' data: https://tabletop.social https://storage.gra.cloud.ovh.net; frame-src 'self' https:; child-src 'self' blob: https://tabletop.social; worker-src 'self' blob: https://tabletop.social; connect-src 'self' blob: data: wss://tabletop.social https://tabletop.social https://storage.gra.cloud.ovh.net; manifest-src 'self' https://tabletop.social 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-4PJCPKP+jKiIGmtRIKFFiA' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src 'self' *.zywave;script-src 'self' *.zywave.com *.zywave.co.uk 'nonce-Ly3ctd3OWhi38luDF4QdEyLO8pHpwHRqhi8Pz8bOaTs=';style-src 'self' 'nonce-Ly3ctd3OWhi38luDF4QdEyLO8pHpwHRqhi8Pz8bOaTs=';connect-src 'self' www.google-analytics.com;img-src 'self' data: *.zywave.com *.zywave.co.uk www.google-analytics.com;manifest-src *.zywave.com *.zywave.co.uk 1
frame-ancestors 'self' *.elanfinancialservices.com mediaserver-elan.qa.clockfour.net elancenters.webex.com; 1
frame-ancestors 'self' https://js.prd.invesco.net; 1
upgrade-insecure-requests;script-src 'self';connect-src 'self' blob: https://weeaboo.space wss://weeaboo.space;media-src 'self' https://s3.amazonaws.com;img-src 'self' data: blob: https://s3.amazonaws.com;default-src 'none';base-uri 'self';frame-ancestors 'none';style-src 'self' 'unsafe-inline';font-src 'self';manifest-src 'self'; 1
frame-ancestors 'self' http://wa.aruba.it https://wa.aruba.it http://manage.pec.it https://manage.pec.it 1
worker-src 'self'; connect-src 'self' blob: wss://visitors.live https://pubsub.googleapis.com wss://in.visitors.live https://settings.luckyorange.net https://www.paypal.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://vc.hotjar.io https://*.visualwebsiteoptimizer.com https://in.hotjar.com https://ct.pinterest.com https://fast.a.klaviyo.com https://fast.a.klaviyo.com https://telemetrics.klaviyo.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://static.addtoany.com https://assets.adobedtm.com https://cdn-scripts.signifyd.com https://googleads.g.doubleclick.net https://imgs.signifyd.com https://submit.activedemand.com https://analytics.twitter.com https://script.hotjar.com https://in.hotjar.com https://chimpstatic.com https://dev.visualwebsiteoptimizer.com https://a.klaviyo.com https://connect.facebook.net https://fast.a.klaviyo.com https://s.pinimg.com https://s.pinimg.com https://s.ytimg.com https://static.ads-twitter.com https://static.hotjar.com https://static.klaviyo.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com https://vendor1.quickspark.com https://www.paypalobjects.com https://www.paypal.com https://maps.googleapis.com https://cdn.bizible.com https://cdn.bioz.com https://snap.licdn.com https://d10lpsik1i8c69.cloudfront.net https://pi.pardot.com https://app.brightinfo.com https://ssl.google-analytics.com https://bia.brightinfo.com https://settings.luckyorange.net; object-src 'none'; report-uri https://csp.firstscribe.com/nuaire.com; 1
frame-ancestors 'self' https://www.cresecure.net; 1
default-src https: 'self'; connect-src https: 'self' http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://axon-ems-fe-api.arx.com.ua wss://axon-ems-fe-api.arx.com.ua; font-src https: 'self' data: http://script.hotjar.com https://script.hotjar.com; frame-src https: 'self' https://vars.hotjar.com; frame-ancestors https: 'self'; img-src https: data: 'self' https://script.hotjar.com http://script.hotjar.com; media-src https: 'self'; object-src https: 'self'; script-src 'unsafe-inline' 'unsafe-eval' https: 'self' http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com; style-src 'unsafe-inline' https: 'self';  1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.raxcdn.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://flockler.embed.codes/62wAnK *.gstatic.com *.flockler.com *.pinterest.com *.addtoany.com *.paypal.com *.ytimg.com *.youtube.com www.googleadservices.com *.googletagmanager.com *.google.com *.gstatic.com www.snta0034.com *.rnib.org.uk *.paypalobjects.com collector-1065.tvsquared.com app.vwo.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net dev.visualwebsiteoptimizer.com *.google-analytics.com ajax.googleapis.com *.hotjar.com *.hotjar.io *.bing.com; style-src 'self' 'unsafe-inline' *.rnib.org.uk https://tagmanager.google.com https://fonts.googleapis.com app.vwo.com fonts.googleapis.com *.flockler.com; img-src 'self' data: *.cloudfyprod.com *.rackcdn.com *.cdninstagram.com *.google.co.uk *.google.com *.instagram.com *.pinterest.com *.rnib.org.uk *.paypalobjects.com https://ssl.gstatic.com https://www.gstatic.com *.paypal.com collector-1065.tvsquared.com maps.googleapis.com *.googletagmanager.com maps.gstatic.com csi.gstatic.com www.facebook.com www.google-analytics.com stats.g.doubleclick.net dev.visualwebsiteoptimizer.com *.hotjar.com *.hotjar.io *.bing.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.uk; font-src 'self' data: app.vwo.com *.rnib.org.uk *.rnib.panlogic.co.uk fonts.gstatic.com *.hotjar.com *.hotjar.io; frame-src 'self' *.google.com *.pinterest.com *.addtoany.com google.com *.google.com *.paypal.com app.vwo.com youtube.com *.youtube.com *.hotjar.com *.hotjar.io; upgrade-insecure-requests; report-uri https://report-uri.io/report/37d691f11ddee70a60a651059fdfc1dc; connect-src 'self' www.google-analytics.com *.paypal.com dev.visualwebsiteoptimizer.com bam.nr-data.net *.hotjar.com *.hotjar.io wss://*.hotjar.com 1
frame-ancestors https://mychart.mackenziehealth.ca 1
frame-src api.xprt.com *.api.xprt.com extension.xprt.com *.extension.xprt.com xprt.com *.xprt.com energy-xprt.com *.energy-xprt.com agriculture-xprt.com *.agriculture-xprt.com environmental-expert.com *.environmental-expert.com google.com *.google.com google.es *.google.es ubembed.com *.ubembed.com braintreegateway.com *.braintreegateway.com newrelic.com *.newrelic.com *.gstatic.com *.googlesyndication.com *.googlesyndication.com iperceptions.com *.iperceptions.com doubleclick.net *.doubleclick.net vimeo.com *.vimeo.com youtube.com *.youtube.com placeholder.com *.placeholder.com dailymotion.com *.dailymotion.com d20854696ijsuu.cloudfront.net *.d20854696ijsuu.cloudfront.net d3c0q80nmylf81.cloudfront.net *.d3c0q80nmylf81.cloudfront.net d3pcsg2wjq9izr.cloudfront.net *.d3pcsg2wjq9izr.cloudfront.net dpjzd8xd615dp.cloudfront.net *.dpjzd8xd615dp.cloudfront.net adservice.google.com *.adservice.google.com webinars.xprt.com *.webinars.xprt.com cardinalcommerce.com *.cardinalcommerce.com paypal.com *.paypal.com 1
default-src 'self' *.iausr.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io https://www.google.com/ ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com https://www.google.com/ ; frame-ancestors 'self' https://trustseal.enamad.ir 1
child-src https: 'self' https://enertrag.com/ https://*.enertrag.com/; default-src https: 'self' data: https://enertrag.com/ https://analytics.enertrag.com/ https://www.youtube.com/ https://maps.google.de/ https://*.gstatic.com/ https://*.googleapis.com/;script-src 'self' https://analytics.enertrag.com/ https://*.enertrag.com/ 'unsafe-inline' 'unsafe-eval' https://maps.google.de/ https://maps.googleapis.com/; font-src 'self' data: https://*.enertrag.com/ https://enertrag.com/ https://netdna.bootstrapcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/; style-src 'unsafe-inline' 'self' https://*.enertrag.com/ https://enertrag.com/ https://hello.myfonts.net https://fonts.googleapis.com/; object-src https://*.enertrag.com/ 1
default-src 'none'; script-src 'self' 'sha256-+bciAoXo8tqxurJAfFdRHhPFvC+ti9sSCf6nP1Mq0zk='; style-src 'self' data: 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self'; media-src 'self'; object-src 'self'; child-src 'none'; frame-src 'none'; worker-src 'self'; frame-ancestors 'none'; form-action 'self' https://docs.immerda.ch/de/search; base-uri 'self'; report-uri https://csp-report.immerda.ch/report.php; upgrade-insecure-requests; block-all-mixed-content 1
frame-ancestors 'self' https://www.domainedevillers.fr https://www.thalasso-deauville.com https://benerville.fr http://www.lacloseriedeauville.com http://www.augeval.com http://www.congres-deauville.com https://www.hotel-saint-james.fr https://www.bellevue-hotel.fr https://www.mairie-benerville.neopse-site.fr https://www.benerville.fr https://www.acapars.com/ 1
frame-ancestors *.txb.press 1
default-src 'self' 'unsafe-inline' ajax.aspnetcdn.com *.vo.msecnd.net *.visualstudio.com *.ppdlweb.ca 1
frame-ancestors 'self' *.swisse.com.au; object-src 'none'; upgrade-insecure-requests 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://stats.g.doubleclick.net https://my.localina.com https://api.doctena.ch 1
default-src * http: https:; style-src 'self' 'unsafe-inline' http: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:; frame-ancestors 'self' *.gigas.com;img-src data: 'self' 'unsafe-inline' 'unsafe-eval' http: https:; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com code.jquery.com gravatar.com www.google-analytics.com http://*.zopim.com https://*.zopim.com ajax.aspnetcdn.com ajax.microsoft.com www.google.com sys.mailworx.info/ cdnjs.cloudflare.com www.gstatic.com cdn.mlwrx.com *.facebook.com *.facebook.net maxcdn.bootstrapcdn.com cdn.polyfill.io cdn.maptiler.com *.zdassets.com *.google.com *.gstatic.com;frame-src 'self' *.facebook.com *.youtube.com cdn.mlwrx.com *.mailworx.info *.facebook.net *.google.com master.useworxdev.intern sys.useworx.info;connect-src 'self' wss://*.zopim.com ws://*.zopim.com wss://sys.mailworx.info ws://sys.mailworx.info https://cdn.mlwrx.com http://cdn.mlwrx.com graph.facebook.com *.zdassets.com *.facebook.com *.facebook.net *.gstatic.com *.google-analytics.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com maps.googleapis.com www.google-analytics.com; img-src 'self' data: www.googletagmanager.com maps.googleapis.com www.google-analytics.com maps.gstatic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline'  'unsafe-eval' https://connect.facebook.net https://www.youtube.com https://www.google-analytics.com https://s.ytimg.com https://mccorp-staging.scdn2.secure.raxcdn.com https://mccorp.scdn4.secure.raxcdn.com https://www.googletagmanager.com https://www.mccain.com/scripts/gdpr/cookie-message.js https://cdnjs.cloudflare.com/ https://mccain.my.salesforce.com/embeddedservice/ https://service.force.com/embeddedservice/ *.salesforceliveagent.com/chat/rest/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://mccorp-staging.scdn2.secure.raxcdn.com https://mccorp.scdn4.secure.raxcdn.com https://www.mccain.com/css/gdpr.css https://service.force.com/embeddedservice/ ; img-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://0.gravatar.com https://secure.gravatar.com https://www.facebook.com https://mccorp-staging.scdn2.secure.raxcdn.com https://mccorp.scdn4.secure.raxcdn.com https://www.google.co.uk/ads/ga-audiences https://www.google.com/ads/ga-audiences data:; font-src 'self' https://fonts.gstatic.com https://mccorp-staging.scdn2.secure.raxcdn.com https://mccorp.scdn4.secure.raxcdn.com https://mccorp-ie.scdn1.secure.raxcdn.com *.sfdcstatic.com/ data:; connect-src 'self' https://stats.g.doubleclick.net; frame-src 'self' https://staticxx.facebook.com https://static.ak.facebook.com https://s-static.ak.facebook.com https://www.facebook.com https://web.facebook.com https://mccain.secure.force.com/ https://service.force.com/; child-src 'self' https://staticxx.facebook.com https://static.ak.facebook.com https://s-static.ak.facebook.com https://www.facebook.com https://web.facebook.com https://mccain.secure.force.com/ https://service.force.com/; 1
default-src 'self' profiauto.pl profiauto.de profiauto.co.at; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.profiauto.pl profiauto.pl profiauto.de profiauto.co.at ssl.silnet.pl www.googletagmanager.com www.google-analytics.com www.googleadservices.com *.doubleclick.net *.google.com *.gstatic.com *.facebook.com *.facebook.net *.onesignal.com onesignal.com *.googleapis.com cdnjs.cloudflare.com cdn.ampproject.org cdn.datatables.net; style-src 'self' 'unsafe-inline' profiauto.pl profiauto.de profiauto.co.at fonts.googleapis.com ssl.silnet.pl onesignal.com cdnjs.cloudflare.com *.tagmanager.google.com tagmanager.google.com motoflota.pl cdn.datatables.net *.bootstrapcdn.com; img-src 'self' data: *.ggpht.com *.profiauto.pl profiauto.pl profiauto.de profiauto.co.at silnet.pl ssl.silnet.pl cdn.datatables.net *.doubleclick.net www.google-analytics.com *.google.com *.google.pl *.facebook.com *.gstatic.com *.googleapis.com cdnjs.cloudflare.com *.openstreetmap.org *.gravatar.com motoflota.pl; media-src 'self' profiauto.pl profiauto.de profiauto.co.at; font-src 'self' profiauto.pl profiauto.de profiauto.co.at fonts.gstatic.com *.bootstrapcdn.com; frame-src 'self' profiauto.pl profiauto.de profiauto.co.at *.google.com google.com *.facebook.com onesignal.com *.youtube.com linkedin.com *.linkedin.com kalkulatoraliorbank.bluemedia.pl; connect-src 'self' profiauto.pl profiauto.de profiauto.co.at onesignal.com *.google-analytics.com *.doubleclick.net *.google.com *.google.pl *.facebook.com 1
frame-ancestors 'self' https://*.target.com; 1
default-src 'self' http: https: ; img-src http: https: data: ; font-src http: https: data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: https://www.googletagmanager.com/gtag/ ; style-src 'unsafe-inline' http: https: ; frame-ancestors 'self' ; child-src 'self' * ;frame-src 'self' * 1
default-src * data: blob: 'self'; style-src *.googleapis.com *.cloudflare.com *.google.com 'unsafe-inline' blob: data: 'self'; script-src *.satr.jp *.google.com www.googleadservices.com www.youtube.com youtube.com s.ytimg.com weworkjpn.com maps.gstatic.com *.googleapis.com *.weworkjpn.com code.jquery.com cdn.jsdelivr.net *.satori.cloud *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.yimg.jp *.facebook.net *.cdn.krxd.net *.yahoo.co.jp *.smartnews-ads.com satori.segs.jp unpkg.com *.cloudflare.com *.krxd.net *.nakanohito.jp *.satori.segs.jp googleads.g.doubleclick.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self'; report-uri https://a5c63740386415add5b158e5234504bd.report-uri.com/r/d/csp/enforce 1
frame-ancestors https://*.acufinder.com; script-src * https://ssl.google-analytics.com https://pxlssl.ibpxl.com  https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com 'unsafe-inline' 'unsafe-eval'; object-src * 1
default-src 'unsafe-inline' 'unsafe-eval' 'self' data: https://woobox.com https://lkcs.lkcsmap.com https://d3rxaij56vjege.cloudfront.net/ https://trackcmp.net https://*.app-us1.com https://*.amazonaws.com https://*.formstack.com https://*.ubembed.com https://*.gstatic.com https://chat.lk-cs.com wss://*.hotjar.com https://platform.twitter.com https://*.sitefinity.com https://dec.azureedge.net https://lkcssecurehosting.com https://*.google.com https://*.hotjar.io https://maps.google.com https://securenetgate9.com https://trkn.us https://*.leadforensics.com https://blog.lk-cs.com https://*.securenetgate9.com https://www.googleadservices.com https://*.doubleclick.net https://connect.facebook.net https://s.ytimg.com https://*.facebook.com https://app.termly.io https://www.googletagmanager.com https://netdna.bootstrapcdn.com https://*.typekit.net https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://ajax.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://clients.lk-cs.com https://lkcsunix.com https://maps.googleapis.com https://content-partnersbadge-pa.googleapis.com https://secure.adnxs.com https://maps.gstatic.com https://stats.g.doubleclick.net https://*.vimeo.com https://*.sharefile.com https://*.calendly.com https://calendly.com https://*.youtube.com https://*.hotjar.com; frame-ancestors 'self' https://lkcsweb.activehosted.com https://lkcs.sharefile.com https://*.vimeo.com https://www.youtube.com https://*.calendly.com https://calendly.com; report-uri https://lkcs.report-uri.com/r/d/csp/enforce; 1
default-src 'self' *.google.com *.googleapis.com *.gstatic.com *.government.bg www.google-analytics.com *.nksoftware.net *.youtube.com *.vimeo.com *.freecallinc.com; script-src 'self' *.google.com *.gstatic.com *.googleapis.com www.google-analytics.com *.nksoftware.net *.youtube.com *.freecallinc.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' *.googleapis.com *.freecallinc.com; img-src 'self' *.google.com *.googleapis.com *.gstatic.com *.nksoftware.net *.youtube.com *.freecallinc.com *.fbcdn.net data:; font-src 'self' *.gstatic.com *.freecallinc.com data:; 1
frame-ancestors https://mc.yandex.ru 1
default-src 'self' https://paisanikal.com;connect-src 'self' https://0netoeey20.execute-api.ap-south-1.amazonaws.com/paisanikal-stag1/contact-us-ep https://*.amazonaws.com; img-src 'self'; script-src 'self' https://* 'unsafe-inline' 'unsafe-eval'; style-src 'self'; object-src 'self' 1
'self'; 1
default-src * 'self' data: blob:; script-src * 'self' 'unsafe-inline' 'unsafe-eval' ; style-src * 'self' 'unsafe-inline' ; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' blob: *.writers-online.co.uk *.wgp-cdn.co.uk *.cloudflare.com https://api.raygun.io wss://am.freshrelevance.com https://apikeys.civiccomputing.com https://clapi.civiccomputing.com *.advertising.com *.adnxs.com *.doubleverify.com *.serving-sys.com https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net *.googlesyndication.com *.google-analytics.com; base-uri 'self'; 1
base-uri 'self'; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net cdn.cookielaw.org http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com  https://unifiedpost-cm.prd.reference.be/ privacyportal-eu.onetrust.com; default-src 'self'; font-src 'self' data: http://script.hotjar.com https://script.hotjar.com; frame-src 'self' https://www.google.com/recaptcha/ https://vars.hotjar.com https://unifiedpost.wistia.com https://fast.wistia.net https://www.youtube.com; img-src 'self' data: www.googletagmanager.com https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://script.hotjar.com http://script.hotjar.com https://www.facebook.com https://www.google.com https://www.google.be https://i.ytimg.com; media-src 'self' https://www.youtube.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.googletagmanager.com https://*.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ http://static.hotjar.com https://*.hotjar.com cdn.cookielaw.org https://www.googleadservices.com https://connect.facebook.net  https://googleads.g.doubleclick.net https://*.ytimg.com https://www.youtube.com/ https://unifiedpost-cm.prd.reference.be/ geolocation.onetrust.com; style-src 'unsafe-inline' 'self'; worker-src 'self' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; 1
frame-ancestors https: 1
default-src none https://*.disquscdn.com https://disqus.com; connect-src 'self' https://*.mixpanel.com https://*.disqus.com https://onesignal.com https://www.google-analytics.com https://*.omappapi.com https://*.optmnstr.com https://*.opmnstr.com https://*.optmstr.com https://*.doubleclick.net https://certify.gpwa.org https://*.swiftypecdn.com https://*.swiftype.com; frame-ancestors 'none'; img-src 'self' data: https://*.gravatar.com https: https://*.swiftype.com https://*.viglink.com https://*.disqus.com; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com; frame-src https://onesignal.com https://*.google.com https://disqus.com; script-src 'self' 'unsafe-eval' https://*.mxpnl.com https://*.mixpanel.com https://*.google.com https://*.disqus.com https://*.disquscdn.com https://*.swiftypecdn.com https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://onesignal.com https://*.onesignal.com https://certify.gpwa.org https://*.omappapi.com https://*.optmnstr.com https://*.opmnstr.com https://*.optmstr.com 'nonce-196bd3e5c2f6a6a82e71e48950220a4c76dbf7ce' 'nonce-85f561fc4c76bcc5ed98af785b7b3c3cbfdb4528' 'nonce-40c313e1ffb271c7b144baec332e7910b48f0ef8' 'nonce-2cbf7314fab430cf7d38469eee8532783c1151d8' 'nonce-1733994338a67c01875b67f5f8c42e64e3bb45fa' 'nonce-979b23257e2317205ee963e97e994dd0ffd94874'; style-src 'self' 'unsafe-inline' https://*.google.com https://onesignal.com https://*.disquscdn.com https://*.swiftypecdn.com/ https://use.fontawesome.com https://*.googleapis.com; 1
default-src 'self';     base-uri 'self';     script-src 'nonce-551733e112974dc8b6378287556ef204' 'strict-dynamic' 'self' *.zxcdn.com *.casinorewards.com cdn.jsdelivr.net https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js ;     connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net;     frame-src 'self' *.gameassists.co.uk *.gameassists.dk *.gameassists.se *.gameassists.co.za *.valueactive.eu *.valueactive.dk  ;     style-src 'self' *.zxcdn.com cdn.jsdelivr.net https://fonts.googleapis.com 'unsafe-inline';     font-src 'self' cdn.jsdelivr.net *.zxcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com;     img-src * data:;     object-src 'none';     frame-ancestors 'self';     media-src 'self' *.zxcdn.com s3.amazonaws.com/casinorewards/; 1
script-src 'report-sample' 'nonce-AIXyNUXmE/yPuEGvgrScmQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /cspreport 1
frame-ancestors 'self' http://www.philips.dk *.philips.com *.philips.dk 1
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://*.youtube.com https://*.ytimg.com https://bancoserfinanza.com https://cdnjs.cloudflare.com; style-src 'report-sample' 'self' 'unsafe-inline' https://*.googleapis.com https://www.gstatic.com; object-src 'self' blob:; base-uri 'self';connect-src 'self' https://*.google-analytics.com https://tarjetaolimpica.com.co https://yoast.com https://bancoserfinanza.com; font-src 'self' data: 'unsafe-inline' https://*.gstatic.com; frame-src 'self' blob: https://*.youtube.com https://*.wpdownloadmanager.com https://www.google.com https://bancoserfinanza.com; img-src 'self' data: https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://secure.gravatar.com https://ps.w.org; manifest-src 'self'; worker-src 'none';media-src 'self'; 1
default-src blackfire.io wss://ws.pusherapp.com pusherapp.com ajax.cloudflare.com https: data: 'unsafe-eval' 'unsafe-inline'; object-src 'none' 1
default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss:; frame-ancestors 'self' nvidia.lookbookhq.com nvidia.pathfactory.com resources.nvidia.com www.nvidia.com; report-uri https://nvidia.report-uri.com/r/d/csp/wizard 1
frame-ancestors 'self' https://luckypantsbingo.playtech.bingo https://bingo.kittybingo.com 1
base-uri 'self'; connect-src *; default-src 'self' *.meetup.com *.dev.meetup.com:8001; font-src * data:; frame-ancestors 'self'; frame-src *; img-src * data: blob: ;script-src * 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline' 1
default-src 'self' data: gap: *.gstatic.com 'unsafe-eval' 'unsafe-inline' cyberkov.com *.cyberkov.com *.googleapis.com *.gosquared.com *.cloudfront.net *.google.com *.vimeo.com *.gravatar.com *.youtube.com *.twitter.com twitter.com *.sei.cmu.edu *.facebook.com *.wp.com *.facebook.net *.cloudflare.com *.youtube-nocookie.com *.aljazeera.net aljazeera.net http://*.brightcove.com http://brightcove.com *.twimg.com youtu.be *.youtu.be; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.googleapis.com www.google.com www.gstatic.com;style-src 'self' 'unsafe-inline' *.googleapis.com www.google.com www.gstatic.com;font-src 'self' fonts.gstatic.com;connect-src 'self' ws://mnemonic.no www.google-analytics.com stats.g.doubleclick.net;form-action 'self' 1
frame-ancestors 'self' optimize.google.com f2f.moneyexpert.com *.moneyexpert.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.rubensteintech.com *.choate.com *.google-analytics.com *.siteimprove.com *.longtailvideo.com *.typekit.net *.googletagmanager.com *.youtube.com *.ytimg.com *.vimeo.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com *.choate.com; font-src 'self' *.googleapis.com *.gstatic.com *.choate.com *.typekit.net ; frame-src 'self' *.vimeo.com *.google.com blob: 1
default-src 'self' data: https://www.amica.ca https://amica.ca https://uatamica.azureedge.net https://player.vimeo.com https://dc.amica.ca https://fonts.googleapis.com https://fonts.gstatic.com https://img.en25.com https://www.google.com https://www.google.ca https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://connect.facebook.net https://s-static.ak.facebook.com https://www.facebook.com https://graph.facebook.com *.hotjar.com *.hotjar.io https://9276423.fls.doubleclick.net https://stats.g.doubleclick.net https://s1407586515.t.eloqua.com https://*.addthis.com https://*.addthisedge.com https://*.moatads.com https://www.linkedin.com https://donorbox.org https://www.paypal.com https://*.gaconnector.com https://www.paypalobjects.com https://t.paypal.com https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://apps.twinesocial.com/ https://apps-cdn.twinesocial.com/ https://*.twinesocial.com/ https://ajax.googleapis.com/ https://play.vidyard.com https://cdn.amica.ca https://videocdn.amica.ca https://tagmanager.google.com/ https://customer.cludo.com/ https://api-us1.cludo.com/ 'unsafe-eval' 'unsafe-inline'; 1
default-src https://tpc.googlesyndication.com https://*.safeframe.googlesyndication.com 'self';child-src 'self';connect-src https://gn-flagpoles.api.bbci.co.uk https://*.akamaihd.net https://a1.api.bbc.co.uk/hit.xiti https://config.api.bbci.co.uk https://cookie-oven.api.bbc.com https://cookie-oven.api.bbc.co.uk https://www.bbc.co.uk https://news.files.bbci.co.uk https://static.files.bbci.co.uk https://mybbc-analytics.files.bbci.co.uk https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net https://csi.gstatic.com https://experience.tinypass.com https://pagead2.googlesyndication.com https://*.g.doubleclick.net https://static.test.files.bbci.co.uk https://static.files.bbci.co.uk https://survey.effectivemeasure.net https://collector.effectivemeasure.net https://detect-survey.effectivemeasure.net https://www.live.bbc.co.uk https://adservice.google.com https://tpc.googlesyndication.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://securepubads.g.doubleclick.net 'self';font-src https://gel.files.bbci.co.uk https://ws-downloads.files.bbci.co.uk https://static.bbci.co.uk https://news.files.bbci.co.uk https://static.files.bbci.co.uk https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff;frame-src https://emp.bbc.com https://emp.bbc.co.uk https://chartbeat.com https://*.chartbeat.com https://www.youtube.com https://platform.twitter.com https://www.instagram.com https://syndication.twitter.com https://news.files.bbci.co.uk https://static.files.bbci.co.uk https://www.bbc.co.uk https://bbc.com https://www.bbc.com https://bbc-maps.carto.com https://flo.uri.sh https://www.riddle.com https://*.g.doubleclick.net https://tpc.googlesyndication.com https://bcp.crwdcntrl.net https://edigitalsurvey.com https://*.safeframe.googlesyndication.com https://ad.doubleclick.net https://secureframe.doubleclick.net 'self';img-src https://ichef.bbci.co.uk https://ping.chartbeat.net https://a1.api.bbc.co.uk/hit.xiti https://news.files.bbci.co.uk https://r.bbci.co.uk https://syndication.twitter.com https://platform.twitter.com https://pbs.twimg.com https://i.ytimg.com https://ton.twimg.com https://news.bbcimg.co.uk https://static.bbc.co.uk https://static.files.bbci.co.uk https://collector.effectivemeasure.net https://csi.gstatic.com https://pagead2.googlesyndication.com https://sb.scorecardresearch.com https://secure-us.imrworldwide.com https://*.g.doubleclick.net https://tpc.googlesyndication.com https://*.google.com https://dt.adsafeprotected.com https://dtvc.adsafeprotected.com https://fwvc.adsafeprotected.com https://pixel.adsafeprotected.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://static.doubleclick.net https://www.gstatic.com https://securepubads.g.doubleclick.net https://*.googleusercontent.com https://static.files.bbci.co.uk data: 'self';script-src https://news.files.bbci.co.uk https://*.chartbeat.com https://mybbc-analytics.files.bbci.co.uk https://emp.bbci.co.uk https://static.bbci.co.uk https://platform.twitter.com https://www.instagram.com https://cdn.syndication.twimg.com https://static.bbc.co.uk https://www.bbc.co.uk https://passport-control.int.tools.bbc.co.uk/bookmarkletScript.js https://passport-control.test.tools.bbc.co.uk/bookmarkletScript.js https://passport-control.tools.bbc.co.uk/bookmarkletScript.js https://public.flourish.studio https://static.files.bbci.co.uk https://ad.crwdcntrl.net https://adservice.google.co.uk https://adservice.google.com https://bcp.crwdcntrl.net https://cdn.ampproject.org https://collector.effectivemeasure.net https://me-ssl.effectivemeasure.net https://pixel.adsafeprotected.com https://privacy.crwdcntrl.net https://sb.scorecardresearch.com https://static.adsafeprotected.com https://*.g.doubleclick.net https://t.effectivemeasure.net https://tags.crwdcntrl.net https://tpc.googlesyndication.com https://gn-web-assets.api.bbc.com https://www.googletagservices.com https://securepubads.g.doubleclick.net https://bbc.gscontxt.net https://adservice.google.co.ve https://adservice.google.ru https://adservice.google.co.in https://adservice.google.com.br https://adservice.google.com.mx https://adservice.google.com.ec https://adservice.google.cl https://adservice.google.com.eg https://adservice.google.com.sa https://adservice.google.com.co https://adservice.google.com.ar https://adservice.google.com.ua https://adservice.google.com.pe https://adservice.google.kz https://adservice.google.com.hk https://adservice.google.es https://adservice.google.co.jp https://adservice.google.ae https://adservice.google.com.tw https://adservice.google.com.uy https://adservice.google.co.il https://adservice.google.com.pr https://adservice.google.com.bo https://adservice.google.iq https://adservice.google.com.gt https://adservice.google.com.sg https://adservice.google.com.tr https://adservice.google.com.pk https://adservice.google.de https://adservice.google.ca https://adservice.google.com.vn https://adservice.google.com.py https://adservice.google.com.ng https://adservice.google.jo https://adservice.google.se https://adservice.google.com.au https://adservice.google.it https://adservice.google.com.kh https://adservice.google.co.nz https://adservice.google.az https://adservice.google.fi https://adservice.google.com.ro https://adservice.google.co.id https://adservice.google.ie https://adservice.google.cz https://adservice.google.com.cy https://adservice.google.at https://adservice.google.nl https://adservice.google.cv https://adservice.google.com.mt https://adservice.google.dk https://adservice.google.com.af https://adservice.google.fr https://adservice.google.no https://adservice.google.com.sv https://adservice.google.hn https://adservice.google.be https://adservice.google.com.ni https://adservice.google.ch https://adservice.google.co.kr https://adservice.google.pl https://adservice.google.com.mm https://adservice.google.so https://adservice.google.co.tz https://adservice.google.com.np https://adservice.google.lk https://adservice.google.lv https://adservice.google.ge 'self' 'unsafe-inline';style-src https://news.files.bbci.co.uk https://platform.twitter.com https://ton.twimg.com https://news.files.bbci.co.uk https://static.bbc.co.uk https://static.bbci.co.uk https://static.files.bbci.co.uk 'unsafe-inline';media-src https://news.files.bbci.co.uk https://static.files.bbci.co.uk;worker-src 'self';prefetch-src https://*.safeframe.googlesyndication.com;report-to default;upgrade-insecure-requests 1
default-src 'none'; base-uri 'none'; form-action 'self'; img-src 'self' data:; script-src 'self'; style-src 'self' 'unsafe-inline' 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://shelter.moe; img-src 'self' https: data: blob: https://shelter.moe; style-src 'self' https://shelter.moe 'nonce-e1IUXC1T/EWitC+ZzzDq1Q=='; media-src 'self' https: data: https://shelter.moe; frame-src 'self' https:; manifest-src 'self' https://shelter.moe; connect-src 'self' data: blob: https://shelter.moe https://shelter.moe wss://shelter.moe; script-src 'self' https://shelter.moe; child-src 'self' blob: https://shelter.moe; worker-src 'self' blob: https://shelter.moe 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://mjbeats.com.br https://*.mjbeats.com.br https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self' ; style-src 'self' 'unsafe-inline' ; script-src 'unsafe-inline' 'self' apis.google.com pagead2.googlesyndication.com 1
default-src 'self' *.crazyegg.com *.driftqa.com *.drift.com *.driftt.com ka-p.fontawesome.com *.mktoresp.com; img-src 'self' 'unsafe-inline' https: *.google-analytics.com data:; style-src 'self' 'unsafe-inline' https: fonts.googleapis.com; font-src 'self' 'unsafe-inline' https: pro.fontawesome.com ka-p.fontawesome.com data: chrome-extension:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.google-analytics.com ajax.googleapis.com pro.fontawesome.com ka-p.fontawesome.com; 1
default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval';           script-src * data: blob: 'unsafe-inline' 'unsafe-eval';           connect-src * data: blob: 'unsafe-inline';           img-src * data: blob: 'unsafe-inline';           frame-src * data: blob: ;           style-src * data: blob: 'unsafe-inline';           font-src * data: blob: 'unsafe-inline'; 1
default-src * 'self' data: 'unsafe-inline' 'unsafe-eval' https: wss: 1
frame-ancestors 'self';base-uri 'self';default-src 'self';script-src 'self' 'unsafe-inline' cdn-solenis.netdna-ssl.com *.hotjar.com *.hotjar.io *.youtube.com *.ytimg.com *.youku.com *.ykimg.com *.google-analytics.com *.googleapis.com *.google.com syndication.twitter.com *.sketchfab.com js.driftt.com *.surveymonkey.com up.pixel.ad;script-src-elem 'self' 'unsafe-inline' cdn-solenis.netdna-ssl.com *.hotjar.com *.hotjar.io *.youtube.com *.ytimg.com *.youku.com *.ykimg.com *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com syndication.twitter.com *.sketchfab.com js.driftt.com *.surveymonkey.com up.pixel.ad;style-src 'self' 'unsafe-inline' cdn-solenis.netdna-ssl.com *.googleapis.com;font-src 'self' cdn-solenis.netdna-ssl.com *.gstatic.com *.hotjar.com data:;connect-src 'self' cdn-solenis.netdna-ssl.com *.hotjar.com *.hotjar.io *.google-analytics.com *.googleapis.com *.gstatic.com https://stats.g.doubleclick.net data:;img-src * data:;frame-src 'self' *.youtube.com *.youku.com *.hotjar.com https://sketchfab.com/ *.google.com js.driftt.com pixel.sitescout.com;child-src www.youtube.com *.youku.com;form-action 'self' https://solenis.com/login/authenticate/concrete/ https://channelmanagement.solenis.com/; 1
frame-ancestors 'self' http://apod.businesscatalyst.com http://apod.co.nz http://apod.com.au http://apod.worldsecuresystems.com http://defenceclub.com.au http://defencediscounts.co.nz http://defencediscounts.com.au http://defencelife.com http://defenceticketing.com http://defenceticketing.com.au http://m.apod.com.au http://troopon.com.au http://www.apod.co.nz http://www.apod.com.au http://www.defenceclub.com.au http://www.defencediscounts.co.nz http://www.defencediscounts.com.au http://www.defencelife.com http://www.defenceticketing.com http://www.defenceticketing.com.au http://www.troopon.com.au http://s70147.gridserver.com http://mt.apod.com.au http://*.apod.businesscatalyst.com http://*.apod.co.nz http://*.apod.com.au http://*.apod.worldsecuresystems.com http://*.defenceclub.com.au http://*.defencediscounts.co.nz http://*.defencediscounts.com.au http://*.defencelife.com http://*.defenceticketing.com http://*.defenceticketing.com.au http://*.m.apod.com.au http://*.troopon.com.au http://*.s70147.gridserver.com http://*.mt.apod.com.au https://apod.businesscatalyst.com https://apod.co.nz https://apod.com.au https://apod.worldsecuresystems.com https://defenceclub.com.au https://defencediscounts.co.nz https://defencediscounts.com.au https://defencelife.com https://defenceticketing.com https://defenceticketing.com.au https://m.apod.com.au https://troopon.com.au https://www.apod.co.nz https://www.apod.com.au https://www.defenceclub.com.au https://www.defencediscounts.co.nz https://www.defencediscounts.com.au https://www.defencelife.com https://www.defenceticketing.com https://www.defenceticketing.com.au https://www.troopon.com.au https://s70147.gridserver.com https://mt.apod.com.au https://*.apod.businesscatalyst.com https://*.apod.co.nz https://*.apod.com.au https://*.apod.worldsecuresystems.com https://*.defenceclub.com.au https://*.defencediscounts.co.nz https://*.defencediscounts.com.au https://*.defencelife.com https://*.defenceticketing.com https://*.defenceticketing.com.au https://*.m.apod.com.au https://*.troopon.com.au https://*.s70147.gridserver.com https://*.mt.apod.com.au 1
block-all-mixed-content; frame-ancestors *; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=index&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=b98d0f5d-9fdd-4f65-9360-47e57b0ce36e 1
base-uri 'none'; object-src 'none'; script-src 'self' *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleads.g.doubleclick.net *.static.doubleclick.net *.gstatic.com *.youtube.com s.ytimg.com; 1
default-src 'self' * data: blob:; img-src 'self' * 'unsafe-inline' data: blob:; style-src 'self' * 'unsafe-inline' data:; script-src 'self' * 'unsafe-inline' 'unsafe-eval' blob:; object-src 'none'; worker-src 'self' data: blob: resume.io *.resume.io cvster.nl *.cvster.nl cvmonk.nl *.cvmonk.nl cvapp.es *.cvapp.es cvapp.it *.cvapp.it cvapp.fr *.cvapp.fr cvkungen.se *.cvkungen.se cv.dk *.cv.dk cv.app *.cv.app resume.app *.resume.app cvapp.cz *.cvapp.cz cvapp.fi *.cvapp.fi cvapp.no *.cvapp.no cveasy.pl *.cveasy.pl; frame-src https:; frame-ancestors 'self' vwo.com *.vwo.com 1
frame-ancestors 'self' foodhub.co.uk *.touch2success.com *.facebook.com; 1
report-uri https://www.reflects.com; default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' data:; style-src https: 'unsafe-inline'; font-src https: data:; img-src https: data:; frame-src https://www.reflects.com/ https://memorysticks.reflects.de/ https://lanyards.reflects.de/ https://www.rooom.com/ 1
default-src https:; connect-src https: wss:; font-src https: data:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; object-src 'none' 1
frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; img-src 'self' data: https: http:; style-src 'self' 'unsafe-inline' https: data:; font-src 'self' data: https:; frame-src 'self' https://*.google.com https://player.vimeo.com https://www.linkedin.com; connect-src 'self' https://*.googleapis.com https://*.google-analytics.com https://player.vimeo.com; object-src 'self'; 1
default-src script-src 'unsafe-eval' 'self' wss://*.zopim.com wss://*.hotjar.com *.outbrain.com *.taboola.com web-material3.yokogawa view.ceros.com *.quantcount.com *.quantserve.com *.addthis.com *.adscience.nl *.akamaized.net *.bit.ly *.crazyegg.com *.facebook.com *.facebook.net *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.graph.instagram.com *.gstatic.com *.hays.co.uk *.hays.com *.hotjar.* *.hotjar.com *.igodigital.com *.instagram.fbom5-1.fna.fbcdn.net *.linkedin.com *.nccgroup-webperf.com *.onrecruit.net *.optimizely.com *.slideshare.net *.soundcloud.com *.surveymonkey.com *.tealiumiq.com *.tiqcdn.com *.twimg.com *.twitter.com *.typography.com *.vimeo.com *.yahooapis.com *.youtube.com *.zdassets.com *.zopim.com *.zopim.io accessibe.com acsbap.com consent.trustarc.com consent-pref.trustarc.com consent-st.trustarc.com font-src prefmgr-cookie.truste-svc.net 'self' 'unsafe-inline' hm.baidu.com data: 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-SIHL+AbdJpLj0GI5TMkaug' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
script-src 'nonce-fy2PKgphdfkL' 'strict-dynamic' 'report-sample' 'self' https://static.furkot.com; worker-src 'self' https://static.furkot.com; style-src 'self' fonts.googleapis.com https://static.furkot.com; base-uri 'self'; object-src 'none'; form-action 'self'; report-uri https://zsyp.code42day.com/csp 1
frame-ancestors 'self'; report-uri /bin/lexmark/csp-report; report-to lxk-report 1
default-src https:; img-src https: data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 1
frame-ancestors 'self' *.kiabi.it; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://maps.googleapis.com https://*.paypalobjects.com https://*.paypal.com; object-src 'self'; style-src 'self' 'unsafe-inline'  https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com; img-src 'self' data: https:; media-src 'self'; child-src 'self'; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; connect-src 'self'  https://*.paypal.com; frame-src 'self' https://*.sessionlinkpro.com https://*.paypal.com; 1
img-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline';  font-src * ; child-src http://*.wufoo.com https://*.youtube.com https://*.google.com http://*.essex-fire.gov.uk; connect-src * 1
frame-ancestors 'self'; script-src-elem 'self' 'unsafe-inline' use.fontawesome.com ui.customsearch.ai maxcdn.bootstrapcdn.com cdn.datatables.net apis.google.com seal.geotrust.com static.cloudflareinsights.com www.gstatic.com www.google.com googleads.g.doubleclick.net www.googleadservices.com cdnjs.cloudflare.com www.google-analytics.com bat.bing.com ajax.googleapis.com cdn.livechatinc.com secure.livechatinc.com www.googletagmanager.com; script-src-attr 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; 1
frame-ancestors 'none'; default-src 'self' https://*.aol.com https://*.yahoo.com https://*.yimg.com; img-src * data:; script-src 'self' 'unsafe-inline' 'nonce-Bg/PEYa/QgzM6r35PB5s+g==' 'unsafe-eval' https://*.yahoo.com https://*.yimg.com https://*.aol.com https://*.aolcdn.com *.oath.com *.google.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net *.googlesyndication.com https://sb.scorecardresearch.com bat.bing.com *.demdex.net; style-src 'self' 'unsafe-inline' https://*.yimg.com; object-src *; connect-src *; font-src * data:; frame-src 'self' https://*.youtube.com https://s.yimg.com https://*.yahoo.com *.g.doubleclick.net *.googlesyndication.com; 1
default-src 'self' *.nrw.de;    script-src  'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net;    style-src   'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net;    font-src data: *;    img-src  data: *;    frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com;    worker-src  'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de;    frame-src   'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de;    object-src  'self';    connect-src 'self' *.nrw.de svc.webspellchecker.net;    media-src *; 1
script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://s3-eu-west-1.amazonaws.com; style-src 'self' 'unsafe-inline'; base-uri 'self'; report-uri https://selectra.report-uri.com/r/d/csp/enforce 1
default-src 'none'; font-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'; frame-ancestors 'none' 1
frame-ancestors 'self' *.11freunde.de *; 1
base-uri 'none'; object-src 'none'; script-src https://llllllll.co/logs/ https://llllllll.co/sidekiq/ https://llllllll.co/mini-profiler-resources/ https://llllllll.co/assets/ https://llllllll.co/brotli_asset/ https://llllllll.co/extra-locales/ https://llllllll.co/highlight-js/ https://llllllll.co/javascripts/ https://llllllll.co/plugins/ https://llllllll.co/theme-javascripts/ https://llllllll.co/svg-sprite/; worker-src 'self' https://llllllll.co/assets/ https://llllllll.co/brotli_asset/ https://llllllll.co/javascripts/ https://llllllll.co/plugins/ 1
block-all-mixed-content;default-src 'self' https://robotattack.org; 1
default-src 'self'; script-src 'self' 'unsafe-inline' cdn.ampproject.org; style-src 'self' 'unsafe-inline'; child-src 'self' adactio.com 1
default-src 'none';base-uri 'self';img-src * data: about;style-src 'self' https://web103.reachmee.com 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' data: https://fonts.gstatic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://web103.reachmee.com;frame-src 'self' https://web103.reachmee.com;connect-src 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests; report-uri https://bbcsp.report-uri.com/r/d/csp/enforce 1
default-src 'self' data: myonvent.com d3p33jfjhyr0ua.cloudfront.net streaming.myonvent.com demo.onvent.online staging.onvent.online *.googleapis.com *.youtube.com *.ytimg.com *.stripe.com *.google-analytics.com; script-src 'self' 'unsafe-inline' *.youtube.com *.ytimg.com *.stripe.com *.google-analytics.com; style-src 'self' 'unsafe-inline' *.googleapis.com; font-src 'self' *.gstatic.com; connect-src 'self' https: wss:; object-src 'none' 1
default-src https:;                 script-src https: https://optimize.google.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com 'unsafe-inline' 'unsafe-eval';                 style-src https: https://optimize.google.com https://fonts.googleapis.com https://tagmanager.google.com 'unsafe-inline';                 img-src https: data: https://optimize.google.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com;                 font-src * data:;                 frame-src https:;                 connect-src https: wss: 'self' *.hotjar.com https://www.google-analytics.com 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-rBqKaVwd6sqOvwR/5N+DKQ' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://connect.facebook.net https://www.klick-tipp.com; img-src 'self' https://www.google-analytics.com https://s-static.ak.facebook.com http://i.lyrix.at https://klicktipp.s3.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://themes.googleusercontent.com; frame-src 'self' https://www.facebook.com https://s-static.ak.facebook.com; object-src 'none' 1
default-src 'self' *.saa.nl data: https://connect.facebook.net https://s-static.ak.facebook.com https://www.facebook.com https://js-agent.newrelic.com https://beacon-3.newrelic.com https://bam.nr-data.net https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://saa-saa.digitalcx.com https://ajax.googleapis.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://www.saavoorwaarden-zoeker.nl http://projects.elitechnology.com *.formdesk.com https://www.youtube.com *.hypotheekbond.nl https://tools.denkis.nl https://zorgverzekering.upiva.nl *.hotjar.com *.hotjar.io https://tagmanager.google.com https://www.finly.nl http://www.finly.nl https://finly.nl http://finly.nl https://wm-backend-prod-dot-watermelonmessenger.appspot.com https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com https://wm-livechat-2-prod-dot-watermelonmessenger.appspot.com/assets/js/wm_plugin.js https://stats.g.doubleclick.net http://e.issuu.com https://e.issuu.com http://issuu.com https://issuu.com 'unsafe-eval' 'unsafe-inline'; object-src 'self' data: application/x-silverlight-2 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.yurist-online.net yurist-online.net an.yandex.ru strm.yandex.ru mc.yandex.ru yandex.st yastatic.net matchid.adfox.yandex.ru adfox.yandex.ru ads.adfox.ru ads6.adfox.ru jstracer.yandex.ru yastat.net yandex.ru awaps.yandex.net yandexadexchange.net *.yandexadexchange.net *.yandex.ru banners.adfox.ru avatars-fast.yandex.net favicon.yandex.net content.adfox.ru *.yandex.net *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net *.2mdn.net *.google.com *.google.ru *.google-analytics.com google-analytics.com *.youtube.com youtube.com *.icq.com *.skype.com *.rambler.ru loginza.ru *.loginza.ru *.yadro.ru *.webmoney.ru *.mail.ru *.twitter.com *.facebook.com vk.com *.vk.com googletagmanager.com *.googletagmanager.com *.googletagservices.com; 1
default-src 'none' ;report-to csp; report-uri https://report-uri.simplyadmire.com/ ; frame-ancestors 'self';script-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://*.readspeaker.com https://siteimproveanalytics.com; style-src 'self' data: 'unsafe-inline' https://*.readspeaker.com; img-src 'self' data: https://6175418.global.siteimproveanalytics.io/ https://eu2.siteimprove.com/ https://*.readspeaker.com;media-src 'self' https://*.readspeaker.com ;font-src 'self' data: ; object-src 'self';frame-src 'self' https://*.readspeaker.com; form-action 'self' https://users.opengemeenten.nl/ https://*.readspeaker.com;connect-src 'self' https://6175418.global.siteimproveanalytics.io/; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.io *.net *.com *.org *.github.io  *.smartlook.com *.paywhirl.com *.jsdelivr.net *.google.com *.googletagmanager.com *.uptimerobot.com *.tawk.to *.lottiefiles.com *.shortpixel.ai *.youtube.com *.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com assets.zendesk.com connect.facebook.net; frame-src 'self' *.io *.net *.com *.org *.github.io *.smartlook.com *.paywhirl.com *.jsdelivr.net *.google.com *.googletagmanager.com *.uptimerobot.com *.tawk.to *.lottiefiles.com *.shortpixel.ai *.youtube.com *.gstatic.com assets.zendesk.com *.facebook.com s-static.ak.facebook.com; object-src 'self'; worker-src * data: 'unsafe-eval' 'unsafe-inline' blob: 1
default-src 'self'; font-src 'self' data:; script-src 'self' 'unsafe-eval'; connect-src 'self' https://sentry.io https://www.google-analytics.com wss://au.betterconsult.com; img-src 'self' data:; report-uri https://sentry.io/api/194134/security/?sentry_key=34046c5c429e4543bcf99e4d14d29137 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-ZmI0NTlhOTYtMzA1Yi00NTFmLWEwNzUtYzZkMzhiMWZjYzBk'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
frame-ancestors 'self' rtvs.sk *.rtvs.sk *.dev.rtvs.sk rtvs.org *.rtvs.org 1
connect-src 'self' ssl.google-analytics.com; form-action 'self' app.mt.gov mtefile.courts.mt.gov; img-src 'self' ssl.google-analytics.com data: translate.google.com www.gstatic.com; script-src-attr 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' ssl.google-analytics.com www.google-analytics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' ssl.google-analytics.com data:; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; style-src 'self' 'unsafe-eval' 'unsafe-inline' translate.googleapis.com; default-src 'self' 'unsafe-inline' ssl.google-analytics.com 'unsafe-eval' self; font-src 'self' data: fonts.gstatic.com; frame-ancestors 'none'; report-uri https://citepayusa.report-uri.com/r/d/csp/enforce 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://staticw2.yotpo.com/ https://www.googletagmanager.com/ https://cdn.listrakbi.com/ https://www.google-analytics.com/ https://s1.listrakbi.com/ https://services.listrak.com/ https://at1.listrakbi.com/ https://s7.addthis.com/ https://z.moatads.com/ https://v1.addthisedge.com/ https://m.addthis.com/ https://api-public.addthis.com/ https://www.google.com/ https://www.gstatic.com/ https://ajax.googleapis.com/ https://m1.listrakbi.com/ https://ssl.google-analytics.com/ https://js-agent.newrelic.com/ https://bam.nr-data.net/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://staticw2.yotpo.com/ https://cdn.listrakbi.com/ https://maxcdn.bootstrapcdn.com/; font-src 'self' https://fonts.gstatic.com/ https://staticw2.yotpo.com/ https://maxcdn.bootstrapcdn.com/; object-src 'self'; form-action 'self'; connect-src 'self' https://staticw2.yotpo.com/ https://m.addthis.com/ https://recs.listrakbi.com/ https://api.yotpo.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://bam.nr-data.net/; frame-src 'self' https://cdn.flipsnack.com/ https://s7.addthis.com/ https://www.google.com/ https://youtube.com/ https://www.youtube.com/; img-src 'self' https://p.yotpo.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://yotpo-editor-production.s3.amazonaws.com/ https://sca1.listrakbi.com/ https://www.shars.com/ https://services.listrak.com/ https://fp.listrakbi.com/ https://s1.listrakbi.com/ https://mediacdn.espssl.com/ https://store-1wa94vq6.mybigcommerce.com/ https://www.googletagmanager.com/ https://ssl.google-analytics.com/ https://recs.listrakbi.com/ https://shars.com/ data:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; style-src 'self' 'unsafe-inline'; img-src 'self' data: ; media-src 'none' 1
default-src 'self';     base-uri 'self';     script-src 'nonce-f0e205e906434e54b5b60e4f35d8eb96' 'strict-dynamic' 'self' *.zxcdn.com *.casinorewards.com cdn.jsdelivr.net https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js ;     connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net;     frame-src 'self' *.gameassists.co.uk *.gameassists.dk *.gameassists.se *.gameassists.co.za *.valueactive.eu *.valueactive.dk  ;     style-src 'self' *.zxcdn.com cdn.jsdelivr.net https://fonts.googleapis.com 'unsafe-inline';     font-src 'self' cdn.jsdelivr.net *.zxcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com;     img-src * data:;     object-src 'none';     frame-ancestors 'self';     media-src 'self' *.zxcdn.com s3.amazonaws.com/casinorewards/; 1
script-src 'unsafe-inline' 'unsafe-eval' 'nonce-E4A2RZ8OYLUCZF5RVMRUWNO0ZIQ49V8Y6Q9IZN4HL81XGPZ0NZA5SEM1QJDIJDOC' 'strict-dynamic' https: http:; frame-ancestors 'none' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.typeform.com; img-src 'self' data: ; object-src 'self' https://*.typeform.com; frame-src 'self' https://*.typeform.com; 1
default-src 'self'; font-src 'self' 'unsafe-inline' https://cdn.podigee.com/; connect-src 'self' https://ottogroupunterwegs.podigee.io https://www.google.com https://media.manufactum.de https://*.scene7.com https://www.google-analytics.com https://stats.g.doubleclick.net https://connect.facebook.net https://www.facebook.com https://s.pinimg.com https://ct.pinterest.com; img-src 'self' data: https://images.podigee.com/ https://manufactum.scene7.com https://media.manufactum.de https://www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.facebook.com https://s.pinimg.com https://ct.pinterest.com; child-src blob: https://*.adition.com https://s3.eu-central-1.amazonaws.com/esomecdn/60 https://www.google.com/maps/ https://test-brot-und-butter.mfdp.io https://www.brot-und-butter.de https://www.facebook.com; frame-src blob: https://bid.g.doubleclick.net https://*.adition.com https://s3.eu-central-1.amazonaws.com/esomecdn/60 https://www.google.com/maps/ https://test-brot-und-butter.mfdp.io https://www.brot-und-butter.de https://www.facebook.com https://cdn.podigee.com; worker-src blob:; media-src blob: 'self' https://media.manufactum.de https://*.scene7.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://ottogroupunterwegs.podigee.io https://tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://s.pinimg.com https://ct.pinterest.com https://connect.facebook.net https://cdn.podigee.com https://media.manufactum.de https://cdn.epoq.de/flow/ https://*.arc.epoq.de/inbound-servletapi/ 'sha256-24E9spO23svDkTBI3pZ9OBMtJ9sLH2RiAbSkYdi/38c=' 'sha256-RK5gWrwaWY7/F6AUGQ9ZmFFw6206P+y8yxL2hevtowc='; object-src 'none'; style-src 'self' 'unsafe-inline' https://cdn.podigee.com/ https://media.manufactum.de  ; report-uri /sell/csp-violation; base-uri 'self' 1
default-src 'self' *.hotetec.com; connect-src 'self' *.hotetec.com *.hotelinking.com *.reviewpro.com backend.fideltour.com stats.g.doubleclick.net www.google-analytics.com in.hotjar.com www.123compare.me cognito-identity.eu-west-1.amazonaws.com firehose.eu-west-1.amazonaws.com www.googleadservices.com www.google.es www.facebook.com dev-traffic.attby.io vc.hotjar.io *.parthenon.io *.triptease.io api.rollbar.com www.thehotelsnetwork.com; frame-src *; ; font-src * data:;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
upgrade-insecure-requests;script-src 'self';connect-src 'self' blob: https://letsalllovela.in wss://letsalllovela.in;media-src 'self' https://s3.amazonaws.com;img-src 'self' data: blob: https://s3.amazonaws.com;default-src 'none';base-uri 'self';frame-ancestors 'none';style-src 'self' 'unsafe-inline';font-src 'self';manifest-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://use.fontawesome.com https://use.typekit.net https://fonts.gstatic.com; connect-src 'self'  https://*.hotjar.io https://stats.g.doubleclick.net https://cdnjs.cloudflare.com https://*.visualwebsiteoptimizer.com https://*.hotjar.com; media-src 'self' https:; object-src 'none'; frame-src 'self' https://calculator.connectfirstcu.com https://connectfirst-fte-calculator.celeroxpress.ca https://tr.snapchat.com/ https://forms.office.com/ https://player.vimeo.com https://www.youtube.com https://www.google.com https://www.eventbrite.ca https://www.eventbrite.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://bid.g.doubleclick.net https://*.visualwebsiteoptimizer.com https://*.hotjar.com; form-action 'self' https://insurelinkdirect.com https://tr.snapchat.com https://www.facebook.com; 1
frame-ancestors 'self' http://www.philips.cl *.philips.com *.philips.cl 1
default-src https: wss:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data: blob:; font-src https: data:; report-uri /csp-report 1
default-src 'self' dpm.demdex.net *.freedom55financial.com; connect-src 'self' https://www.google-analytics.com maps.googleapis.com https://stats.g.doubleclick.net dpm.demdex.net greatwestlife.hb.omtrdc.net pdx-col.eum-appdynamics.com; script-src 'self' *.freedom55financial.com assets.adobedtm.com s.ytimg.com www.youtube.com *.vidyard.com www.googletagmanager.com snap.licdn.com www.google-analytics.com bat.bing.com connect.facebook.net static.ads-twitter.com analytics.twitter.com *.linkedin.com stats.g.doubleclick.net maps.googleapis.com p.adsymptotic.com cdn.appdynamics.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' fast.fonts.net *.vidyard.com *.freedom55financial.com; font-src 'self' *.vidyard.com; frame-src 'self' *.vidyard.com gwl.demdex.net *.vimeo.com www.youtube.com; child-src *.freedom55financial.com greatwestlife.sc.omtrdc.net; img-src 'self' *.vidyard.com greatwestlife.sc.omtrdc.net cm.everesttech.net bat.bing.com t.co www.google-analytics.com www.facebook.com stats.g.doubleclick.net maps.gstatic.com www.google.com www.google.ca dpm.demdex.net dev.day.com www.googletagmanager.com px.ads.linkedin.com p.adsymptotic.com 1
default-src 'self' http://*.mhealth100.com https://*.mhealth100.com http://*.file.myqcloud.com https://*.file.myqcloud.com https://*.cos.ap-shanghai.myqcloud.com http://*.cos.ap-shanghai.myqcloud.com http://*.cos.myqcloud.com https://*.cos.myqcloud.com; script-src 'self' https://hm.baidu.com http://*.mhealth100.com https://*.mhealth100.com https://at.alicdn.com https://cdn.bootcss.com/ https://*.amap.com/ 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://hm.baidu.com https://*.amap.com/ https://*.is.autonavi.com data: blob: http://*.mhealth100.com https://*.mhealth100.com http://*.file.myqcloud.com https://*.file.myqcloud.com https://*.cos.ap-shanghai.myqcloud.com http://*.cos.ap-shanghai.myqcloud.com https://mobilecodec.alipay.com https://mp.weixin.qq.com https://gw.alipayobjects.com; style-src 'self' http://*.mhealth100.com https://*.mhealth100.com https://cdn.bootcss.com/ https://*.amap.com/ 'unsafe-inline'; connect-src 'self' http://*.mhealth100.com https://*.mhealth100.com https://*.amap.com/; worker-src 'self' http://*.mhealth100.com https://*.mhealth100.com blob: ; 1
upgrade-insecure-requests; report-uri https://aurgasmdotus.report-uri.com/r/d/csp/enforce; 1
default-src 'self' 'unsafe-inline' go.xenial.com www.sicom.com fonts.googleapis.com fonts.gstatic.com pi.pardot.com privacy-policy.truste.com; 1
default-src 'self' 'unsafe-inline' s3-eu-west-2.amazonaws.com; connect-src 'self' 'unsafe-inline' search.sainsburys.jobs www.google-analytics.com stats.g.doubleclick.net yoast.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com *.onetrust.com; frame-src player.vimeo.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io www.facebook.com; img-src https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com doubleclick.net stage-tmp-search.clients.uk.funnelback.com search.sainsburys.jobs maps.googleapis.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io sjs.bizographics.com *.onetrust.com snap.licdn.com connect.facebook.net data:; style-src 'self' 'unsafe-inline' f.vimeocdn.com use.typekit.net p.typekit.net; font-src 'self' 'unsafe-inline' data: https: use.typekit.net http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; worker-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 1
default-src 'self'  https://*.futurebuild.co.uk    ; connect-src 'self'  https://*.futurebuild.co.uk https://my.elementor.com https://*.easyfairs.com https://*.google-analytics.com  https://stats.g.doubleclick.net https://www.wpo365.com https://efsentry.easyfairs.cloud  https://*.facebook.com https://*.mapbox.com https://forms.hubspot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://*.futurebuild.co.uk https://*.easyfairs.cloud https://*.youtu.be https://s.ytimg.com https://*.youtube.com https://*.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.google.com https://*.googleadservices.com https://*.googleapis.com https://*.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://px.ads.linkedin.com https://snap.licdn.com https://sjs.bizographics.com https://connect.facebook.net https://www.facebook.com https://hotelmap.com/ https://*.hotelmap.com/ https://browser.sentry-cdn.com/ https://snap.licdn.com/ https://*.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hscollectedforms.net; img-src 'self' data:  https://*.futurebuild.co.uk  https://*.google.com https://*.google.at https://*.google.be https://*.google.bg https://*.google.ca https://*.google.cat https://*.google.ch https://*.google.de https://*.google.dk https://*.google.es https://*.google.fi https://*.google.fr https://*.google.com.hk https://*.google.it https://*.google.lt https://*.google.lu https://*.google.nl https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.ru https://*.google.se https://*.google.com.tr https://*.google.co.uk https://*.google.com https://*.ggpht.com https://library.elementor.com https://*.gravatar.com https://i.ytimg.com https://*.googleusercontent.com https://*.googleapis.com https://*.google-analytics.com https://*.g.doubleclick.net https://www.googletagmanager.com https://*.gstatic.com https://px.ads.linkedin.com https://*.licdn.com https://www.linkedin.com https://www.facebook.com https://*.fbcdn.net blob: https://hotelmap.com/ https://*.hotelmap.com/ https://*.cloudfront.net/ https://i.travelapi.com/ https://foto.hrsstatic.com https://q-xx.bstatic.com https://images.getaroom-cdn.com https://track.hubspot.com https://forms.hsforms.com; style-src 'self' 'unsafe-inline' data:  https://*.futurebuild.co.uk https://*.typekit.net https://ps.w.org https://fonts.googleapis.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://*.google.com   https://hotelmap.com/ https://*.hotelmap.com/ https://fast.fonts.net ; font-src 'self' data:  https://*.futurebuild.co.uk https://*.typekit.net https://fonts.gstatic.com https://*.sharepointonline.com   https://fast.fonts.net ; child-src 'self'  https://*.futurebuild.co.uk https://library.elementor.com https://*.youtube.com https://*.youtu.be https://www.youtube-nocookie.com https://www.googletagmanager.com https://*.google.com  https://www.facebook.com https://staticxx.facebook.com/ blob: ; media-src 'self'  https://*.futurebuild.co.uk https://*.vimeo.com https://*.youtu.be https://*.youtube.com https://api.dmcdn.net https://*.twitch.tv    ; object-src 'self'  https://*.futurebuild.co.uk    ; frame-ancestors 'self'  https://*.futurebuild.co.uk https://*.vimeo.com https://api.dmcdn.net https://*.twitch.tv    ; base-uri 'self'    ; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://tooot.im; img-src 'self' https: data: blob: https://tooot.im; style-src 'self' https://tooot.im 'nonce-clgr7BLwCEcslyr5AAmiWQ=='; media-src 'self' https: data: https://tooot.im; frame-src 'self' https:; manifest-src 'self' https://tooot.im; connect-src 'self' data: blob: https://tooot.im https://s3-eu-central-1.amazonaws.com wss://tooot.im; script-src 'self' https://tooot.im; child-src 'self' blob: https://tooot.im; worker-src 'self' blob: https://tooot.im 1
default-src 'self' www.bolsasymercados.es 'unsafe-inline' 'unsafe-eval' data: *.typekit.net www.google-analytics.com *.vimeo.com *.vimeocdn.com go.grupobme.es *.twimg.com *.twitter.com twitter.com wss://*.meff.es https://*.meff.es wss://www.bolsasymercados.es https://www.bolsasymercados.es;base-uri 'self';plugin-types application/pdf;form-action 'self' *.twitter.com;frame-ancestors 'self'; 1
report-uri //csp.merlion.ru:8080/report/441566962880210047/; connect-src https://hd.ddix.ru 'self' *.yandex.ru *.yandex.net *.google-analytics.com https://*.yandex.ru ; child-src 'self' ; font-src static.lc-group.ru 'self' ; form-action https://hd.ddix.ru *.ippon.ru 'self' ; frame-ancestors 'self' webvisor.com *.webvisor.com ; frame-src https://*.yandex.ru https://*.google.com https://*.gstatic.com 'self' *.yandex.ru *.yandex.net *.youtube.com youtube.com ; img-src static.lc-group.ru 'self' data: *.merlion.com *.merlion.ru merlion.ru merlion.com ippon.ru *.ippon.ru *.yandex.ru *.yandex.net *.google-analytics.com support.ddix.ru https://*.yandex.ru https://*.yandex.net ; media-src *.ippon.ru static.lc-group.ru 'self' ; object-src *.ippon.ru static.lc-group.ru 'self' ; script-src https://hd.ddix.ru static.lc-group.ru https://*.webvisor.org https://*.google-analytics.com http://*.googletagmanager.com https://*.google.com https://*.gstatic.com 'self' 'unsafe-eval' *.ippon.ru ippon.ru *.yandex.ru *.yandex.net *.google-analytics.com support.ddix.ru https://*.yandex.ru https://yastatic.net ; style-src static.lc-group.ru 'self' 'unsafe-inline' *.ippon.ru ippon.ru *.yandex.ru *.yandex.net *.google-analytics.com support.ddix.ru ; default-src 'none' ; strict-mixed-content-checking; reflected-xss filter; referrer origin-when-cross-origin; 1
object-src 'none';default-src 'none';connect-src https://www.wefact.nl *.doubleclick.net;img-src https://www.wefact.nl data: *.ytimg.com *.google-analytics.com *.google.com *.google.nl https://maps.gstatic.com https://maps.googleapis.com;script-src https://www.wefact.nl https://www.youtube.com *.ytimg.com *.google-analytics.com https://developers.google.com https://maps.googleapis.com https://embed.webinargeek.com;style-src https://www.wefact.nl 'unsafe-inline' https://fonts.googleapis.com *.typekit.net;manifest-src https://www.wefact.nl;frame-src https://www.youtube.com https://app.webinargeek.com;font-src https://fonts.gstatic.com *.typekit.net 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://dragon.style; img-src 'self' https: data: blob: https://dragon.style; style-src 'self' 'unsafe-inline' https://dragon.style; media-src 'self' https: data: https://dragon.style; frame-src 'self' https:; manifest-src 'self' https://dragon.style; connect-src 'self' data: blob: https://dragon.style https://dragon.style wss://dragon.style; script-src 'self' https://dragon.style; worker-src 'self' blob: https://dragon.style 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.doubleclick.net *.google-analytics.com bda.bookatable.com static.tacdn.com www.google.com www.tripadvisor.com www.tripadvisor.de www.gstatic.com www.jscache.com www.gastronavi.de app.usercentrics.eu api.usercentrics.eu www.googletagmanager.com; script-src-elem 'self' fast.fonts.net 'unsafe-inline' *.doubleclick.net t.contentsquare.net bda.bookatable.com static.tacdn.com www.tripadvisor.com www.tripadvisor.de www.jscache.com www.gastronavi.de www.gstatic.com www.google.com app.usercentrics.eu api.usercentrics.eu www.googletagmanager.com  *.google-analytics.com; connect-src 'self' *.doubleclick.net *.google-analytics.com *.usercentrics.eu api.usercentrics.eu www.googletagmanager.com; img-src 'self' data: *.google-analytics.com bda.bookatable.com static.tacdn.com www.tripadvisor.de www.gastronavi.de app.usercentrics.eu api.usercentrics.eu www.google-analytics.com; style-src 'self' 'unsafe-inline' bda.bookatable.com static.tacdn.com fast.fonts.net; style-src-elem 'self' 'unsafe-inline' bda.bookatable.com static.tacdn.com fast.fonts.net; form-action 'self'; object-src 'none'; frame-src 'self' *.doubleclick.net bda.bookatable.com www.gastronavi.de app.usercentrics.eu www.youtube-nocookie.com www.youtube.com www.google.com 1
default-src 'self'; img-src 'self' blob: data: https://mc.yandex.ru; font-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' https://mc.yandex.ru/; connect-src 'self' blob: https://mc.yandex.ru/; frame-src blob: https://www.youtube.com https://www.youtube-nocookie.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com/ https://policy.privacyandcookies.eu/ https://players.brightcove.net https: blob:; object-src 'none'; base-uri 'none'; frame-src 'self' https://www.youtube-nocookie.com https://player.quadia.net https://players.brightcove.net; frame-ancestors 'self'; img-src 'self' https://www.msd-animal-health.com https://secure.gravatar.com https://www.google-analytics.com/ https://*.brightcove.com https://cdn.cookielaw.org https://policy.privacyandcookies.eu data: ; media-src 'self' blob:; style-src 'self' 'unsafe-inline'; upgrade-insecure-requests; default-src https: data: 'self' ; trusted-types default; 1
frame-ancestors 'none'; upgrade-insecure-requests; 1
policy-Report-Only 1
default-src 'self' *.chocosphere.com *.google.com *.googleadservices.com *.googlebot.com *.doubleclick.net *.search.msn.com *.gstatic.com seal-alaskaoregonwesternwashington.bbb.org *.digicert.com *.googletagmanager.com *.google-analytics.com;     img-src 'self' data: *.chocosphere.com *.google.com *.googlebot.com *.doubleclick.net *.search.msn.com *.gstatic.com seal-alaskaoregonwesternwashington.bbb.org *.digicert.com *.googletagmanager.com *.google-analytics.com;     script-src 'self' 'unsafe-inline' 'unsafe-eval' *.chocosphere.com *.google.com *.googleadservices.com *.googlebot.com *.doubleclick.net *.search.msn.com *.gstatic.com seal-alaskaoregonwesternwashington.bbb.org *.digicert.com *.googletagmanager.com *.google-analytics.com;     style-src 'self' 'unsafe-inline' *.chocosphere.com *.googletagmanager.com;     base-uri 'self'; 1
default-src 'self' win7programmy.com;style-src 'self' 'unsafe-inline' https://vk.com http://vk.com https://ajax.googleapis.com http://ajax.googleapis.com;frame-src 'self' https://vk.com http://vk.com https://*.doubleclick.net http://*.doubleclick.net https://*.yastatic.net http://*.yastatic.net https://yastatic.net http://yastatic.net;media-src 'self';connect-src 'self' https://*.yandex.ru http://*.yandex.ru;font-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com http://ajax.googleapis.com https://vk.com http://vk.com http://*.googlesyndication.com https://*.googlesyndication.com https://*.yandex.ru http://*.yandex.ru https://*.google.de http://*.google.de https://*.google.ru http://*.google.ru https://*.google.com http://*.google.com https://*.google.com.ua http://*.google.com.ua https://*.yastatic.net http://*.yastatic.net https://yastatic.net http://yastatic.net https://*.googletagservices.com http://*.googletagservices.com;img-src 'self' http://counter.yadro.ru https://counter.yadro.ru https://vk.com http://vk.com https://*.yandex.net http://*.yandex.net https://*.yandex.ru http://*.yandex.ru data: blob: filesystem:; 1
frame-ancestors 'self' *.facebook.com *.twitter.com *.google.com *.mentalhealth.org.uk 1
default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.readspeaker.com; style-src 'unsafe-inline' 'self' *.readspeaker.com; img-src data: blob: 'self' *.thueringen.de;font-src data: 'self';frame-src *.youtube-nocookie.com *.readspeaker.com *.thueringen.de *.thueringer-landtag.de; media-src 'self' *.readspeaker.com; connect-src 'self' *.readspeaker.com 1
default-src 'self' https://www.thevalkyrie.com http://www.thevalkyrie.com 1
default-src 'self'; media-src 'self' http://idex.cachefly.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.onetrust.com https://*.cookielaw.org https://*.braintreegateway.com https://*.braintree-api.com http://www.googleadservices.com https://www.google-analytics.com https://pi.pardot.com https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://players.brightcove.net; style-src 'self' 'unsafe-inline' https://*.braintreegateway.com https://fonts.googleapis.com; img-src 'self' data: https://*.google-analytics.com https://*.google.com https://*.doubleclick.net; connect-src 'self' https://*.braintreegateway.com https://*.braintree-api.com https://*.cookielaw.org https://*.onetrust.com https://www.google-analytics.com; font-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://netdna.bootstrapcdn.com; form-action 'self'; base-uri 'self'; frame-src 'self' https://*.youtube.com https://*.braintreegateway.com https://*.avr-optics.com https://avr-optics.com; frame-ancestors 'self' https://*.avr-optics.com https://avr-optics.com; 1
default-src * data: 'unsafe-eval' 'unsafe-inline';img-src * data: blob: 'self' 1
frame-ancestors *.commandcentral.com *.imw.motorolasolutions.com *.commandcentral.com *.<no value> 1
default-src * data: blob: about: vkcall:;script-src 'self' https://vk.com https://*.vk.com https://static.vk.me https://*.mail.ru https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com https://connect.facebook.net https://telegram.org https://*.yandex.ru https://*.google-analytics.com https://*.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://*.google.com https://google.com https://*.vkpartner.ru https://*.moatads.com https://*.adlooxtracking.com https://*.gstatic.com https://*.google.ru https://securepubads.g.doubleclick.net https://cdn.ampproject.org https://www.googletagmanager.com https://googletagmanager.com https://*.vk-cdn.net https://*.hit.gemius.pl https://yastatic.net 'unsafe-inline' 'unsafe-eval' blob:;style-src https://vk.com https://*.vk.com https://static.vk.me https://ton.twimg.com https://tagmanager.google.com https://platform.twitter.com https://*.googleapis.com 'self' 'unsafe-inline' 1
default-src 'none'; connect-src 'self'; font-src 'self' data: https://fonts.gstatic.com; form-action 'self' https://www.lunarsoft.net https://www.paypal.com; frame-src 'self' https://www.lunarsoft.net https://www.youtube-nocookie.com https://www.youtube.com https://www.google.com/recaptcha/; img-src 'self' data: https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/api.js https://www.gstatic.com https://cdnjs.cloudflare.com/ajax/libs/ace/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://www.gstatic.com; upgrade-insecure-requests; block-all-mixed-content; 1
sandbox allow-forms allow-scripts 1
frame-ancestors 'self' *.aalsmeer.nl 1
default-src https://* gap-iab://* data: 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors https://crmplus.zoho.com/ 1
frame-ancestors 'self' secure.worldpay.com 1
font-src 'self' http://*.mozilla.net https://*.mozilla.net http://*.mozilla.org https://*.mozilla.org; img-src 'self' data: http://*.mozilla.net https://*.mozilla.net http://*.mozilla.org https://*.mozilla.org http://www.google-analytics.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' http://*.mozilla.org https://*.mozilla.org http://*.mozilla.net https://*.mozilla.net; script-src 'self' 'unsafe-inline' data: http://*.mozilla.org https://*.mozilla.org http://*.mozilla.net https://*.mozilla.net http://www.google-analytics.com https://www.google-analytics.com http://www.googletagmanager.com https://www.googletagmanager.com; default-src 'self' *.cdn.mozilla.net assets.mozilla.net; child-src 'self' player.simplecast.com embed.simplecast.com; form-action 'self' https://www.mozilla.org; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' js.hs-banner.com js.hs-analytics.net js.hsadspixel.net snap.licdn.com js.hs-scripts.com rum-static.pingdom.net gb-api-widgets.nvplay.com api-widgets.nvplay.com ajax.googleapis.com widgets.nvplay.com connect.facebook.net *.pinterest.com pinterest.com static.hotjar.com maps.google.com www.gstatic.com www.google.com fast.fonts.net m.addthisedge.com m.addthis.com s7.addthis.com googleads.g.doubleclick.net www.googleadservices.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com maps.googleapis.com *.webspellchecker.net www.linkedin.com www.gstatic.com graph.facebook.com js.hsforms.net forms.hsforms.com; frame-src 'self' *.doubleclick.net www.facebook.com *.pinterest.com pinterest.com player.vimeo.com www.google.com maps.google.com s7.addthis.com www.youtube.com *.webspellchecker.net forms.hsforms.com 1
default-src 'self'; 
		script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://maps.googleapis.com/ https://platform.twitter.com https://ws.sharethis.com https://maps.google.com/  https://ssl.google-analytics.com https://www.google-analytics.com  https://connect.facebook.net https://fast.fonts.net https://www.googletagmanager.com https://static.hotjar.com https://www.google.com https://cdnjs.cloudflare.com https://www.gstatic.com https://script.hotjar.com; 
		img-src 'self' https://csi.gstatic.com/ https://maps.gstatic.com/ https://*.sharethis.com https://*.googleapis.com/ https://*.google.com http://a.basemaps.cartocdn.com http://b.basemaps.cartocdn.com  https://ssl.google-analytics.com https://s-static.ak.facebook.com https://www.google-analytics.com data: http://a.basemaps.cartocdn.com http://b.basemaps.cartocdn.com http://c.basemaps.cartocdn.com http://d.basemaps.cartocdn.com https://stats.g.doubleclick.net https://www.facebook.com https://cf-previews.widencdn.net;
		style-src 'self' 'unsafe-inline' https://*.sharethis.com https://fonts.googleapis.com https://fast.fonts.net https://cdnjs.cloudflare.com; 
		font-src 'self' https://themes.googleusercontent.com https://fast.fonts.net;
		connect-src 'self' https://*.sharethis.com https://in.hotjar.com https://vc.hotjar.io; 
		frame-src 'self' https://www.facebook.com https://s-static.ak.facebook.com https://*.sharethis.com https://www.youtube.com https://www.google.com https://vars.hotjar.com https://embed.widencdn.net https://platform.twitter.com; object-src 'none' 1
default-src 'none'; base-uri https://*.google.com/; connect-src 'self' 'unsafe-inline' https://launcher.hotmart.com https://ekr.zdassets.com https://in.hotjar.com https://tracking-api.hotmart.com https://gerenciagram.zendesk.com https://*.zopim.com https://*.zopim.com https://zopim.com https://bid.g.doubleclick.net wss://*.zopim.com https://*.huggy.io wss://*.huggy.io https://chat.movidesk.com https://*.facebook.com https://*.rdstation.com.br https://globalbot.ai; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://fonts.googleapis.com https://use.fontawesome.com https://*.zopim.com https://*.zopim.com https://zopim.com wss://*.zopim.com https://gerenciagram.com.br https://prospectgram.com https://*.huggy.io wss://*.huggy.io https://w-cdn.pzw.io/ https://chat.movidesk.com data:; form-action 'none'; frame-ancestors 'self' 'unsafe-inline' https://go.hotmart.com; frame-src 'self' 'unsafe-inline' https://www.youtube.com https://vars.hotjar.com https://static.hotmart.com https://*.huggy.io wss://*.huggy.io https://*.facebook.com https://gerenciagram.zendesk.com https://bid.g.doubleclick.net https://*.google.com https://ajax.googleapis.com https://chat.movidesk.com https://go.hotmart.com https://dev.gerenciagram.com.br https://*.globalbot.ai; img-src 'self' https://www.google-analytics.com https://www.facebook.com https://stats.g.doubleclick.net https://*.google.com https://google.com https://www.google.com.br https://api-identification.hotmart.com https://*.zopim.com https://www.googletagmanager.com wss://*.zopim.com https://*.zopim.com https://*.zopim.io https://*.huggy.io wss://*.huggy.io https://prospectgram.com https://gerenciagram.com.br https://cdn.pzw.io/ https://c.pzw.io/ https://cdn.jsdelivr.net https://www.gstatic.com https://gerenciagram.zendesk.com https://globalbot.ai data:; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://optimize.google.com https://www.googletagmanager.com https://www.google-analytics.com https://code.jquery.com https://ajax.googleapis.com https://launcher.hotmart.com https://connect.facebook.net https://static.hotjar.com https://www.googleadservices.com https://assets.zendesk.com https://www.youtube.com https://script.hotjar.com https://googleads.g.doubleclick.net https://static.zdassets.com https://api-identification.hotmart.com https://static.hotmart.com https://*.zopim.com https://zopim.com https://*.huggy.io https://widget.huggy.io wss://*.huggy.io https://*.hotmart.com https://cdn.jsdelivr.net https://chat.movidesk.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://tagmanager.google.com https://s.ytimg.com https://d335luupugsy2.cloudfront.net https://globalbot.ai; style-src 'self' 'unsafe-inline' https://optimize.google.com https://use.fontawesome.com https://fonts.googleapis.com https://*.huggy.io wss://*.huggy.io https://chat.movidesk.com https://globalbot.ai; worker-src 'none' 1
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; font-src data: 'unsafe-inline' *.typekit.net https: *.matthiasott.com; img-src data: https: 1
default-src 'self' 'unsafe-inline' data: https: 1
frame-ancestors https://www.snowshop.pl https://www.bikesalon.pl https://www.surfshop.pl 1
frame-src 'self' https://cheidemann.bannerview.com https://hcaptcha.com https://*.hcaptcha.com https://www.youtube.com https://www.google.com https://platform.twitter.com https://www.twitter.com 1
upgrade-insecure-requests; base-uri 'self'; manifest-src 'self'; block-all-mixed-content; form-action 'self'; frame-src player.vimeo.com www.youtube.com www.youtube-nocookie.com www.googletagmanager.com  www.google.com; img-src 'self' www.google-analytics.com www.google.com www.google.ca data:; media-src 'self'; frame-ancestors 'self' https://www.youtube.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' www.google-analytics.com www.googletagmanager.com subscribe.investright.org www.google.com www.gstatic.com; style-src 'self' 'unsafe-inline'; object-src 'self'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' wss: https: data:; base-uri 'self'; 1
object-src 'self' www.google.com transac.telebec.com google-analytics.com api.google-analytics.com; frame-ancestors 'self'; 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://travishorn.com https://*.travishorn.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self' https://librariadelfin.ro/; connect-src 'self' 'unsafe-inline' https://librariadelfin.ro/ https://*.tawk.to wss://*.tawk.to https://stats.g.doubleclick.net https://www.facebook.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google-analytics.com; font-src 'self' https://librariadelfin.ro/ https://static-v.tawk.to https://fonts.gstatic.com; frame-src https://www.youtube.com https://va.tawk.to https://www.facebook.com https://connect.facebook.net https://event.2performant.com https://vars.hotjar.com/; img-src 'self' https://librariadelfin.ro/ https://static-v.tawk.to https://tawk.link https://www.facebook.com https://stats.g.doubleclick.net https://cdn.jsdelivr.net https://www.google.com https://www.google.ro https://www.google-analytics.com https://ssl.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com; manifest-src 'none'; media-src https://static-v.tawk.to; object-src 'none'; script-src 'self' 'unsafe-inline' https://librariadelfin.ro/ https://connect.facebook.net https://embed.tawk.to https://cdn.jsdelivr.net https://static.hotjar.com https://googleads.g.doubleclick.net https://script.hotjar.com https://www.gstatic.com https://www.google.com https://static-v.tawk.to https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.google-analytics.com https://ssl.google-analytics.com; style-src 'self' 'unsafe-inline' https://librariadelfin.ro/ https://cdn.jsdelivr.net https://fonts.googleapis.com https://tagmanager.google.com https://fonts.googleapis.com; worker-src 'none'; 1
frame-ancestors https://www.motovario.com https://my.motovario.com http://lab3.workup.it 1
child-src 'self' https://iaccess.wpengine.com https://www.google.com https://ilogin.okta.com https://*.hotjar.com:* 1
script-src 'self' *.stripe.com www.google-analytics.com www.googletagmanager.com ajax.googleapis.com maps.googleapis.com cdnjs.cloudflare.com www.youtube.com s.ytimg.com 'unsafe-inline'; 1
frame-ancestors 'self' www.deubner-recht.de www.deubner-steuern.de www.deubner-verlag.de www.deubner-akademie.de; 1
default-src 'self' staticxx.facebook.com www.facebook.com v1.addthis.com connect.facebook.net api-public.addthis.com cse.google.com www.google.com www.google-analytics.com www.youtube.com s7.addthis.com m.addthis.com; img-src 'self' s7.addthis.com clients1.google.com www.google.com stats.g.doubleclick.net www.google-analytics.com www.youtube.com data: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' v1.addthis.com connect.facebook.net cdnjs.cloudflare.com m.addthisedge.com m.addthis.com s7.addthis.com v1.addthis.com v1.addthisedge.com api-public.addthis.com www.gstatic.com www.google.com ajax.googleapis.com cse.google.com www.google-analytics.com www.googletagmanager.com; font-src 'self' 'unsafe-inline' cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com www.google.com; style-src-elem 'self' 'unsafe-inline' cdnjs.cloudflare.com www.google.com; 1
default-src 'self'; connect-src *; font-src 'self' data: fonts.gstatic.com https://*.zopim.com; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
frame-ancestors 'self' ; report-uri /error/csp/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.driftt.com https://widget.drift.com *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com https://www.googletagmanager.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com https://hmgstrategy1.blob.core.windows.net; media-src 'self' data: blob: https://hmgstrategy1.blob.core.windows.net; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; connect-src 'self' accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com; frame-src 'self' https://js.driftt.com https://widget.drift.com; 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com *.fonts.googleapis.com data: api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com *.youtube.com *.google-analytics.com *.google.com *.gstatic.com *.googletagmanager.com *.twitter.com *.addthis.com *.pinterest.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com data: *.cloudflare.com https://cdn.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com https://s.ytimg.com *.lightemporium.com *.usercentrics.eu *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.cloudflare.com *.twitter.com *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.googleapis.com *.addthis.com *.cardinalcommerce.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.vimeo.com *.ctfassets.net share.hsforms.com; img-src https: *.ctfassets.net *.vimeo.com https://www.denkwerk.com *.icons8.com data:; style-src 'self' 'unsafe-inline' https://www.denkwerk.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.denkwerk.com polyfill.io *.googletagmanager.com *.google-analytics.com analytics.denkwerk.com google-analytics.com tagmanager.google.com static.etracker.com code.etracker.com *.etracker.de; connect-src https://www.denkwerk.com vimeo.com *.vimeo.com data: *.contentful.com *.etracker.de *.google-analytics.com; form-action 'self'; frame-ancestors 'none'; object-src 'none'; base-uri https://www.denkwerk.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com maps.googleapis.com www.gstatic.com wchat.freshchat.com connect.facebook.net tagmanager.google.com www.googleadservices.com www.google.com www.google.co.id www.facebook.com cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com rsms.me wchat.freshchat.com cdn.jsdelivr.net i.icomoon.io; font-src 'self' data: fonts.gstatic.com rsms.me; img-src 'self' data: blob: pinhome.imgix.net pinhome-staging.imgix.net pinhome-web-assets.imgix.net pinhome-panoramic.imgix.net *.s3.amazonaws.com www.google.com www.google-analytics.com maps.gstatic.com maps.googleapis.com www.googletagmanager.com googleads.g.doubleclick.net stats.g.doubleclick.net ssl.gstatic.com www.gstatic.com www.google.co.id www.facebook.com; connect-src 'self' *.pinhome.id *.pinvest.id wchat.freshchat.com www.google-analytics.com stats.g.doubleclick.net graph.facebook.com www.facebook.com pinhome.imgix.net pinhome-staging.imgix.net pinhome-panoramic.imgix.net localhost:*; frame-src 'self' wchat.freshchat.com pinhome.webpush.freshchat.com www.facebook.com www.google.com 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://deadinsi.de; img-src 'self' https: data: blob: https://deadinsi.de; style-src 'self' https://deadinsi.de 'nonce-JZWPpsoRgFGGv5kEE36EOw=='; media-src 'self' https: data: https://deadinsi.de; frame-src 'self' https:; manifest-src 'self' https://deadinsi.de; connect-src 'self' data: blob: https://deadinsi.de https://deadinside.sfo2.cdn.digitaloceanspaces.com wss://deadinsi.de; script-src 'self' https://deadinsi.de; child-src 'self' blob: https://deadinsi.de; worker-src 'self' blob: https://deadinsi.de 1
frame-ancestors https://*.shayanashop.com 1
default-src 'self' ; font-src 'self' data: ; 1
default-src 'self' https:; frame-src 'self' googleads.g.doubleclick.net pagead2.googlesyndication.com www.google.com www.gstatic.com; font-src 'self' https: data:; img-src 'self' https: data: bit.sikkou.jp *.googleusercontent.com *.google.com; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https: pagead2.googlesyndication.com www.google-analytics.com www.google.com www.gstatic.com; style-src 'self' 'unsafe-inline' https: 1
default-src https: 'unsafe-inline' 'unsafe-eval' blob: https://app.acquire.io wss://s.acquire.io data:; img-src https: 'self' data: blob:; font-src 'self' data: https://fonts.gstatic.com https://cdn.dynamicyield.com https://cdn.tollbrothers.com https://app.acquire.io https://s.acquire.io; worker-src https: blob: 1
block-all-mixed-content; child-src 'self' www.google.com; font-src 'self' data: https://fonts.gstatic.com https://script.hotjar.com; frame-ancestors https://www.google.com https://www.topgenetics.pl https://*.invicta.pl https://*.dev-invicta.pl; frame-src id.invicta.pl https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://vars.hotjar.com; img-src 'self' data: https://www.google.com https://www.google.pl https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://ssl.gstatic.com https://www.gstatic.com https://script.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://static.hotjar.com https://script.hotjar.com id.invicta.pl; style-src 'self' 'unsafe-inline' https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; report-uri /en/csp/report 1
connect-src 'self' https://*.hotjar.com https://*.evidon.com https://*.brightcove.com https://*.brightcovecdn.com https://*.brightcove.net https://adservice.google.com https://amer-identity.pfizer.com https://bam.nr-data.net https://brightcove.hs.llnwd.net https://emea-identity.pfizer.com https://house-cloudfront.ap-northeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-2.prod.boltdns.net https://house-cloudfront.eu-west-1.prod.boltdns.net https://house-cloudfront.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://ms-contact-form-production.digitalpfizer.com https://ms-contact-form-staging.digitalpfizer.com https://ms-forms-service-production.digitalpfizer.com https://ms-forms-service-staging.digitalpfizer.com https://knrpc.olark.com/nrpc/ https://l.betrad.com https://next-gen-search-production.digitalpfizer.com https://next-gen-search-staging.digitalpfizer.com https://stats.addtoany.com/menu https://stats.g.doubleclick.net https://tagmanager.google.com https://vc.hotjar.io/ https://www.facebook.com https://www.google-analytics.com wss://*.hotjar.com wss://*.pfizer.com https://in.hotjar.com https://vc.hotjar.io; frame-src 'self' tel: https://*.fls.doubleclick.net https://*.janrainsso.com https://bid.g.doubleclick.net https://l3.evidon.com https://players.brightcove.net https://static.addtoany.com https://static.olark.com https://tpc.googlesyndication.com https://vars.hotjar.com https://www.facebook.com https://www.google.com/maps/ https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.youtube.com https://platform.twitter.com https://syndication.twitter.com https://www.pfizershop.se https://customers.anpdm.com https://www.podbean.com https://pfizervardetavlakemedel.podbean.com; img-src 'self' about: data: https://* https://syndication.twitter.com https://pbs.twimg.com https://platform.twitter.com https://ton.twimg.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://www.linkedin.com https://p.adsymptotic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://ajax.googleapis.com https://api.olark.com https://assets.adobedtm.com https://bam.nr-data.net https://cdnjs.cloudflare.com https://connect.facebook.net https://c.evidon.com https://d1v9u0bgi1uimx.cloudfront.net https://d29usylhdk1xyu.cloudfront.net https://d7v0k4dt27zlp.cloudfront.net/assets/ https://docs.gcs.digitalpfizer.com https://googleads.g.doubleclick.net https://js.bizographics.com https://js-agent.newrelic.com https://knrpc.olark.com/nrpc/ https://l.betrad.com https://maps.googleapis.com https://optoutapi.evidon.com https://p.adsymptotic.com https://pfizer-grv-eu.janraincapture.com https://players.brightcove.net https://px.ads.linkedin.com https://rpxnow.com/load/ https://s3.amazonaws.com/pfe_grv https://s3.amazonaws.com/pfe_im/ https://script.hotjar.com https://sjs.bizographics.com https://static.hotjar.com https://static.addtoany.com https://static.olark.com https://tagmanager.google.com https://tpc.googlesyndication.com https://vjs.zencdn.net https://www.bizographics.com https://www.google.com/recaptcha/ https://www.google.com/search/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.linkedin.com https://www.pfizershop.se https://cdn.syndication.twimg.com https://s3.amazonaws.com https://www.google.com https://www.gstatic.com https://snap.licdn.com https://cdn.jsdelivr.net https://platform.twitter.com; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://cookies.pfizer.com https://d3hmp0045zy3cs.cloudfront.net https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://pfredirect.pfizersite.io https://s3.amazonaws.com/pfe_grv/ https://static.olark.com https://stackpath.bootstrapcdn.com https://tagmanager.google.com https://translate.googleapis.com https://use.typekit.net https://platform.twitter.com https://ton.twimg.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://docs.gcs.digitalpfizer.com/fonts/ https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://script.hotjar.com https://use.fontawesome.com/releases/ https://use.typekit.net https://vjs.zencdn.net; manifest-src 'self'; media-src 'self' data: blob: https://brightcove.hs.llnwd.net https://*.media.brightcove.com https://static.olark.com https://secure.brightcove.com/services/mobile/streaming/; worker-src 'self' blob:; report-uri https://pfeprod.report-uri.com/r/t/csp/enforce 1
default-src 'self' *.benzin-price.ru;  script-src 'self' *.benzin-price.ru  http://an.yandex.ru https://an.yandex.ru http://yandex.st https://yandex.st http://yandex.ru https://yandex.ru http://yandex.net https://yandex.net http://mc.yandex.ru https://mc.yandex.ru https://mc.yandex.by http://site.yandex.net https://site.yandex.net http://stats.g.doubleclick.net https://stats.g.doubleclick.net http://yastatic.net https://yastatic.net http://api-maps.yandex.ru https://api-maps.yandex.ru http://clck.yandex.ru https://clck.yandex.ru http://sitesearch-suggest.yandex.ru https://sitesearch-suggest.yandex.ru http://sitesuggest.yandex.ru https://sitesuggest.yandex.ru http://share.yandex.net https://share.yandex.net http://an.yandex.ru https://an.yandex.ru http://awaps.yandex.ru https://awaps.yandex.ru http://api-maps.yandex.ru https://api-maps.yandex.ru http://maps.googleapis.com https://maps.googleapis.com https://www.google-analytics.com http://www.google.com https://www.google.com https://www.gstatic.com 'unsafe-inline' 'unsafe-eval' https://top-fwz1.mail.ru http://top-fwz1.mail.ru  ;  style-src 'self' *.benzin-price.ru  http://an.yandex.ru https://an.yandex.ru http://yandex.st https://yandex.st http://yandex.ru https://yandex.ru http://yandex.net https://yandex.net http://mc.yandex.ru https://mc.yandex.ru https://mc.yandex.by http://site.yandex.net https://site.yandex.net http://stats.g.doubleclick.net https://stats.g.doubleclick.net http://yastatic.net https://yastatic.net http://api-maps.yandex.ru https://api-maps.yandex.ru http://clck.yandex.ru https://clck.yandex.ru http://sitesearch-suggest.yandex.ru https://sitesearch-suggest.yandex.ru http://sitesuggest.yandex.ru https://sitesuggest.yandex.ru http://share.yandex.net https://share.yandex.net http://an.yandex.ru https://an.yandex.ru http://awaps.yandex.ru https://awaps.yandex.ru http://api-maps.yandex.ru https://api-maps.yandex.ru http://maps.googleapis.com https://maps.googleapis.com http://www.google.com https://www.google.com 'unsafe-inline' ;  img-src * data: ;  frame-src 'self' https://st.yandexadexchange.net http://yandexadexchange.net http://yastatic.net https://yastatic.net http://awaps.yandex.ru http://www.google.com https://www.google.com http://api-maps.yandex.ru https://api-maps.yandex.ru https://money.yandex.ru ;  object-src 'self';  media-src 'self';  connect-src 'self' http://an.yandex.ru https://an.yandex.ru https://mc.yandex.ru https://mc.yandex.by https://www.google-analytics.com http://top-fwz1.mail.ru https://top-fwz1.mail.ru ;  font-src * ;  report-uri //www.benzin-price.ru/collector.php 1
frame-ancestors 'self' https://www.casamentos.pt https://comunidade.casamentos.pt 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:; frame-src 'unsafe-inline' 'unsafe-eval' blob: https:; connect-src 'self' https:; img-src 'self' data: https: blob:; style-src 'unsafe-inline' data: https:; font-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: http: https:; media-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https: 1
default-src 'self' *.binomoplatform.com *.binomo.com; child-src *; connect-src 'self' analytics.tiktok.com *.adroll.com static.criteo.net static.ads-twitter.com bat.bing.com sc-static.net tr.snapchat.com top-fwz1.mail.ru *.hotjar.io *.hotjar.com wss://*.hotjar.com stats.g.doubleclick.net *.optimizely.com *.zopim.com *.launchdarkly.com api.exponea.com ekr.zdassets.com analytics.google.com fcm.googleapis.com www.googleapis.com www.google-analytics.com wss://*.zopim.com binomo.zendesk.com app.getsentry.com *.binomoplatform.com *.binomo.com wss://as.binomoplatform.com:* wss://as.binomo.com:* wss://ws.binomoplatform.com:* wss://ws.binomo.com:* s.yimg.com; font-src data: 'self' *.zopim.com themes.googleusercontent.com *.binomoplatform.com *.binomo.com; img-src * data:; media-src 'self' *.binomoplatform.com *.binomo.com; script-src 'self' static.ads-twitter.com sc-static.net tr.snapchat.com *.hotjar.io *.hotjar.com www.redditstatic.com *.googleoptimize.com *.doubleclick.net *.google.com assets.zendesk.com static.zdassets.com *.zopim.com wss://*.zopim.com *.zopim.io binomo.co *.adroll.com static.criteo.net *.getsitecontrol.com binstats.com *.googletagmanager.com *.google-analytics.com echo.ecortb.com connect.facebook.net vk.com *.youtube.com s.yimg.com s.ytimg.com bat.bing.com www.gstatic.com www.googleadservices.com binomo.go2affise.com api.exponea.com *.adnetwork.vn storage.googleapis.com sp.analytics.yahoo.com top-fwz1.mail.ru 'unsafe-eval' 'unsafe-inline' *.binomoplatform.com *.binomo.com; style-src 'self' *.google.com fonts.googleapis.com 'unsafe-inline' *.binomoplatform.com *.binomo.com 1
default-src 'none'; script-src 'self' 'unsafe-inline' www.google.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com *.g.doubleclick.net js.stripe.com www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com; img-src 'self' data: www.google.com www.google-analytics.com *.g.doubleclick.net www.google.ca www.google.co.au www.google.co.in www.google.co.uk www.google.com.mx www.google.com.ph www.google.de www.google.jo www.google.tt; frame-src 'self' www.youtube.com www.youtube-nocookie.com bid.g.doubleclick.net www.googleadservices.com js.stripe.com www.google.com/recaptcha/; connect-src 'self' www.google-analytics.com *.g.doubleclick.net; manifest-src 'self'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'; upgrade-insecure-requests; report-uri https://csp.track1099.com/prod/csp 1
default-src https: 'self' 'unsafe-inline' 'unsafe-eval' recruitics.com eprotect.vantivcnp.com *.vimeo.com *.recruitics.com soundcloud.com vimeo.com *.soundcloud.com *.adspeed.net sterlingcheck.com *.sterlingcheck.com vimeocdn.com jquery.com *.jquery.com *.vimeocdn.com *.vantivcnp.com worldpay.com *.paypal.com *.worldpay.com paypal.com paypalobjects.com *.paypalobjects.com *.greenhouse.io greenhouse.io *.braintree-api.com adspeed.net adsymptotic.com *.adsymptotic.com linkedin.com *.linkedin.com ads.linkedin.com googleapis.com licdn.com google.ca *.licdn.com iterable.com *.hexagon-analytics.com *.siftscience.com *.iterable.com *.googleapis.com google.com hsforms.com hsadspixel.net hsleadflows.net hs-scripts.com hs-analytics.net hubspot.com *.google.com *.amplitude.com amplitude.com *.getsentry.com hubapi.com hsforms.net *.hscta.net hscta.net *.hsforms.net *.hubapi.com *.hsforms.com *.hsadspixel.net *.hsleadflows.net *.hs-scripts.com *.hs-analytics.net *.hubspot.com getsentry.com akamaihd.net google-analytics.com *.google-analytics.com fls.doubleclick.net googleadservices.com *.googleadservices.com wss://*.care.com *.googletagmanager.com *.care.com *.cdn-care.com g.doubleclick.net *.facebook.net *.akamaihd.net cloudfront.net *.cloudfront.net btttag.com *.btttag.com googletagmanager.com facebook.com facebook.net *.facebook.com care.com cdn-care.com *.gstatic.com siftscience.com *.pinimg.com *.google.ca *.tiqcdn.com pinimg.com pinterest.com *.pinterest.com gstatic.com *.monetate.net monetate.net hexagon-analytics.com tiqcdn.com *.googlesyndication.com *.google.de shareasale.com pmmapads.com *.shareasale.com pmqzads.com *.pmmapads.com *.pmqzads.com *.google.ie *.google.ch *.google.es *.google.nl ieframe.dll *.google.fr *.google.se *.google.fi kis.v2.scr.kaspersky-labs.com *.google.it *.snapchat.com *.ieframe.dll getletterpress.com *.getletterpress.com *.flaticon.com svc.bronze.dom.omni.carezen.net wss://*.tokbox.com talentwise.com *.talentwise.com abtasty.com *.abtasty.com tokbox.com *.tokbox.com opentok.com *.stripe.com *.indeed.com indeed.com snapchat.com sc-static.net *.sc-static.net dropbox.com *.dropbox.com ziprecruiter.com *.ziprecruiter.com *.liveperson.net stripe.com *.opentok.com google.co.in google.com.mx *.youtube.com ytimg.com youtube.com xx.fbcdn.net *.cloudinary.com cloudinary.com *.twitter.com twitter.com google.co.jp emjcd.com *.emjcd.com amazonaws.com google.co.uk google.es google.nl google.fr google.de google.ie google.ch googlesyndication.com google.com.tr *.amazonaws.com google.it google.com.sg google.com.ph liveperson.net *.bing.com bing.com google.co.za s3.amazonaws.com google.se google.fi agkn.com lpsnmedia.net *.lpsnmedia.net v.liveperson.net *.agkn.com *.ytimg.com google.com.jm google.co.nz trendmicro.com *.hsappstatic.net *.trendmicro.com hubspot.net *.usemessages.com *.hscollectedforms.net *.google.tt google.at google.ae google.com.co google.com.sa hsappstatic.net *.hubspot.net alocdn.com *.alocdn.com va.us.criteo.net *.doubleclick.net kinsights.com *.kinsights.com *.criteo.net *.criteo.com da.us.criteo.net sv.us.criteo.net us.criteo.com criteo.net criteo.com *.amazon-adsystem.com *.monetate.org monetate.org ivaws.com *.ivaws.com narrative.io *.narrative.io *.honey.io honey.io mplxtms.com quora.com *.adsrvr.org adsrvr.org amazon-adsystem.com usemessages.com google.al *.google.lt *.google.cz *.google.rs *.google.sk *.google.bg *.google.al google.tt google.com.do google.co.cr cloudflare.com google.sk google.com.au google.hu *.google.hr *.google.bs *.google.hu google.ee google.com.np *.google.ae google.bg *.google.at *.google.cl google.rs *.google.dk *.google.gr *.google.no google.cz google.lt google.hr google.bs google.com.pa google.pl google.com.ar chrome-extension jwpltx.com p.jwpcdn.com google.com.ua google.no google.pt google.com.pr google.com.tw google.co.vi ms-browser-extension google.com.hk yahoo.com *.google.pl thrtle.com *.thrtle.com google.gr google.dk hscollectedforms.net data: blob:; 1
default-src https: data: 'self' ; frame-ancestors 'self'; script-src https: data: 'self' 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'self' 'unsafe-inline'  1
frame-ancestors 'self' webvisor.com metrika.yandex.ru mc.yandex.ru *.yandex.tld *.yandex.net webvisor.com; 1
default-src 'self';script-src 'self' https://stackpath.bootstrapcdn.com https://cdn4.mxpnl.com https://ajax.aspnetcdn.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com *.recaptcha.net *.google.com *.googletagmanager.com https://www.gstatic.com https://ajax.googleapis.com https://*.msecnd.net 'unsafe-inline' 'unsafe-eval' *;style-src 'self' https://stackpath.bootstrapcdn.com https://ajax.aspnetcdn.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com 'unsafe-inline' *;connect-src 'self' *.visualstudio.com https://api.mixpanel.com *;font-src https://ajax.aspnetcdn.com https://stackpath.bootstrapcdn.com 'self' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com;img-src 'self' https://cdnjs.cloudflare.com * data:; frame-src https://www.google.com https://stackpath.bootstrapcdn.com 1
child-src 'self' www.google.com player.vimeo.com s7.addthis.com www.youtube.com *.webspellchecker.net platform.twitter.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.twitter.com cdn.syndication.twimg.com www.gstatic.com www.google.com fast.fonts.net m.addthisedge.com m.addthis.com s7.addthis.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com maps.googleapis.com *.webspellchecker.net www.linkedin.com www.gstatic.com graph.facebook.com v1.addthisedge.com  ; frame-src 'self' platform.twitter.com player.vimeo.com www.google.com *.das.co.uk s7.addthis.com cdn.yoshki.com 1
frame-src 'self' *.erp321.com *.jushuitan.com *.aftership.com *.aftership.io *.automizely.io *.automizely.com *.google.com *.recaptcha.net https://platform.twitter.com https://www.facebook.com/; frame-ancestors 'self' *.erp321.com *.vv1865.com *.hsbc.com.hk 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' secure.perk0mean.com *.google-analytics.com *.googleapis.com *.google.com www.googletagmanager.com *.clickdimensions.com *.vimeocdn.com *.youtube.com s.ytimg.com *.vo.msecnd.net az551914.vo.msecnd.net web.hymans.co.uk snap.licdn.com *.linkedin.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; style-src 'self' 'unsafe-inline' *.googleapis.com *.vo.msecnd.net; img-src 'self' data: px.ads.linkedin.com *.gstatic.com *.google-analytics.com  maps.googleapis.com stats.g.doubleclick.net *.clickdimensions.com *.vo.msecnd.net *.hotjar.com *.hotjar.io; font-src 'self' fonts.gstatic.com *.hotjar.com *.hotjar.io; frame-src 'self' player.vimeo.com *.youtube.com web.hymans.co.uk *.clickdimensions.com https://*.hotjar.com https://*.hotjar.io widget.spreaker.com; connect-src 'self' vimeo.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; child-src 'self' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; object-src 'none' 1
script-src 'self' *.china-xianxue.com mmbiz.qpic.cn  mmbiz.qpic api.map.baidu.com *.csxyzx.org *.baidu.com  gss0.bdstatic.com 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com; img-src 'self' *.googletagmanager.com *.google-analytics.com *.googleapis.com *.gstatic.com *.yastatic.net *.paypalobjects.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.googleapis.com; font-src 'self' *.googletagmanager.com *.gstatic.com data:; connect-src 'self' *.google-analytics.com *.googleapis.com *.gstatic.com data:; report-uri https://guitarsongs.club:8443/servlets2/security_policy_report; 1
sandbox allow-presentation allow-forms allow-same-origin allow-scripts allow-popups allow-modals 1
default-src 'self' sentry.litea.cz https://www.youtube.com/ https://www.google.com/ http://maps.googleapis.com/ http://maps.google.com/maps/ https://nominatim.openstreetmap.org/reverse https://c.imedia.cz/ http://c.imedia.cz/ https://vars.hotjar.com/ wss://ws2.hotjar.com/api/v1/client/ws https://in.hotjar.com/api/v1/client/sites/1357916/visit-data https://in.hotjar.com/api/v1/sites/1357916/content https://vc.hotjar.io/views/1357916 https://*.hotjar.com/api/v2/client/sites/1357916/visit-data https://ws8.hotjar.com/api/ wss://ws8.hotjar.com/api/ https://www.google-analytics.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com http://www.youtube.com/iframe_api https://s.ytimg.com/yts/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://static.hotjar.com/ https://c.imedia.cz/js/retargeting.js http://c.imedia.cz/js/retargeting.js https://script.hotjar.com/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net http://www.googletagmanager.com/gtag/js https://www.google.com/ https://*.hotjar.com/ https://www.seznam.cz/; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://maxcdn.bootstrapcdn.com; img-src 'self' data: http://1.gravatar.com https://www.google-analytics.com/ https://ars.test.litea.cz/ http://c.imedia.cz/retargeting https://www.google.com/ https://www.google.cz/ stats.g.doubleclick.net/ http://c.seznam.cz/; connect-src 'self' https://www.google.com/ ws4.hotjar.com/ in.hotjar.com/ wss://ws3.hotjar.com/api/v1/client/ws https://ws3.hotjar.com/api/v2/sites/1357916/recordings/content https://www.google-analytics.com/; font-src 'self' fonts.gstatic.com https://fonts.googleapis.com/ data:; frame-ancestors 'self' https://www.youtube.com/ https://www.google.com/; 1
default-src 'self'; connect-src 'self' https://*.google-analytics.com https://www.googletagmanager.com http://www.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com http://www.googleadservices.com https://www.facebook.com https://connect.facebook.net https://bat.bing.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io ws://*.hotjar.com wss://*.hotjar.com ws://*.hotjar.io wss://*.hotjar.io https://*.rollbar.com https://*.algolia.com https://*.algolia.net https://*.algolianet.com https://*.imagekit.io https://*.insiderx.com https://api.mapbox.com https://static.legitscript.com https://fonts.googleapis.com https://fonts.gstatic.com; script-src 'sha256-S74OVZzU/HgAycXRObAo4mSLdWPjqYhjbjP2pj6gxak=' 'sha256-kJR3HipXN4KzkiiryEVtd9535jDXeY4rCyYKVbMG7ww=' 'sha256-PWlVTi4E2NeSs60ln1mZdtssDqDcKwKC80ZyIJHqFec=' 'self' 'unsafe-eval' blob: https://*.google-analytics.com https://*.googletagmanager.com https://storage.googleapis.com https://www.googleadservices.com https://www.google.com https://*.doubleclick.net https://*.facebook.net https://bat.bing.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.rollbar.com https://*.algolia.com https://*.algolia.net https://*.algolianet.com https://imagekit.io https://*.imagekit.io http://static.legitscript.com/seals/ https://static.legitscript.com/seals/ https://assets.insiderx.com; style-src 'self' 'unsafe-inline' blob: https://fonts.googleapis.com https://assets.insiderx.com; font-src 'self' data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://fonts.googleapis.com https://fonts.gstatic.com https://assets.insiderx.com; img-src 'self' data: https://*.google-analytics.com https://*.doubleclick.net https://www.google.com https://www.google.com.pr https://www.google.com.mx https://www.gstatic.com https://www.facebook.com https://bat.bing.com https://ik.imagekit.io https://static.legitscript.com/seals/ http://static.legitscript.com/seals/ https://api.mapbox.com https://translate.google.com; frame-src https://*.doubleclick.net https://www.facebook.com https://*.hotjar.com https://*.hotjar.io; child-src 'self' https://*.hotjar.com https://*.hotjar.io blob:; manifest-src 'self' https://*.insiderx.com; sandbox allow-forms allow-scripts allow-same-origin allow-top-navigation allow-modals allow-popups; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; worker-src 'self' blob:; media-src 'self' blob: data:; report-uri https://services.insiderx.com/api/report-violation 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://machinelearnings.co https://*.machinelearnings.co https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self'; connect-src 'self' https://*.pixelbar.nl; font-src 'self' https://fonts.gstatic.com;frame-src 'self' https://*.pixelbar.nl https://giphy.com; img-src 'self' data: https://www.google-analytics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com https://ajax.googleapis.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; frame-ancestors 'self'; block-all-mixed-content; 1
frame-ancestors 'self' www.ljsmith.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.2bay.club 2bay.club *.mail.ru *.hotlog.ru js.hotlog.ru *.yandex.ru *.yandex.az *.yandex.by *.yandex.co.il *.yandex.com *.yandex.com.am *.yandex.com.ge *.yandex.com.tr *.yandex.ee *.yandex.fr *.yandex.kg *.yandex.kz *.yandex.ru *.yandex.lt *.yandex.lv *.yandex.md *.yandex.tj *.yandex.tm *.yandex.ua *.yandex.uz *.mc.webvisor.com *.mc.webvisor.org *.yastatic.net mc.yandex.ru *.google-analytics.com adservice.google.com *.googlesyndication.com *.doubleclick.net *.googletagservices.com *.googleadservices.com *.ampproject.org *.google.com *.googleapis.com *.google.co.uk *.google.co.il *.google.ru *.google.at *.google.fr *.google.ch *.google.nl *.google.sc *.google.ae *.google.de *.google.ca *.google.se *.google.hu *.google.no *.google.es *.google.md *.google.fi *.google.ro *.google.sk *.google.is *.google.com.ua *.google.com.bd *.google.com.sg *.google.pl *.google.cz *.google.lv *.google.bg *.google.co.in *.google.lt *.google.dj *.google.gr *.google.co.jp *.google.rs *.google.com.tr *.google.ie *.google.pt *.google.com.pe *.google.com.mx *.google.kz *.google.dz *.google.co.th *.google.com.mx *.google.com.hk *.google.com.sa *.google.com.tj *.google.co.uz *.google.com.vn *.google.com.tw *.google.ee *.google.kg *.google.co.za *.google.hr *.google.it *.google.tn *.google.mk *.google.com.bo *.google.co.kr *.google.com.mm *.google.co.id *.google.az *.google.com.br *.google.tm *.google.ge *.google.dk *.google.com.my *.google.co.ve *.google.co.ve *.google.iq *.google.cl *.google.com.au *.google.tt *.google.com.ar *.google.be *.google.com.cy *.google.co.nz *.google.mn *.google.com.pk *.google.lu *.google.com.ng *.google.com.ph *.google.mu *.google.co.tz *.google.com.uy *.google.com.co *.google.com.eg *.google.me *.google.com.np *.google.com.pg *.google.com.mt *.google.com.sv *.google.com.pr *.google.si *.google.com.gt *.google.co.ke *.google.com.bz *.google.cd *.google.ps *.google.la *.google.com.bn *.google.gg *.google.com.py *.google.com.et *.google.com.lb *.google.com.cu *.google.com.ec *.google.co.cr *.google.co.zw *.google.co.ug *.google.com.pa *.google.ci *.google.co.ao *.google.al *.google.com.om *.google.com.ly *.google.com.gh *.google.bj *.google.lk *.google.cg *.google.jo *.google.com.bh *.google.cm *.google.com.kh *.google.sm *.google.ad *.google.co.bw *.google.ne *.google.gy *.google.mv *.google.bf *.google.com.qa *.google.com.na *.google.com.kw *.google.com.ni *.google.hn *.google.vu *.google.co.mz *.google.com.jm *.google.im *.google.com.ag *.google.sn *.google.mg *.google.com.fj *.google.bs *.google.co.zm *.google.so *.google.com.gi *.advideo.ru *.sckxppzdm.com; img-src * data: ; font-src * data: ; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.google.cm; frame-src *; connect-src *; media-src *; 1
default-src * data: blob:; script-src freegeoip.net *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.gstatic.com *.googleapis.com *.youtube.com *.ytimg.com *.google.com 'unsafe-inline' 'unsafe-eval' blob: data: 'self'; style-src data: blob: 'unsafe-inline' *; 1
default-src 'self' static.mycity.travel static.fribourgtourisme.ch * 'unsafe-inline' 'unsafe-eval' data: blob:; upgrade-insecure-requests; frame-ancestors: 'self' https://static.mycity.travel *; 1
frame-ancestors 'self' https://www.facebook.com https://business.facebook.com 1
frame-ancestors https://*.kundelik.kz 1
frame-ancestors https://hugedomains.com/ 1
child-src 'self' https://*.docusign.com https://*.docusign.net https://*.trustcommerce.com https://*.slimpay.net https://*.slimpay.com https://*.stripe.com https://*.windriverfinancialgateway.com 1
frame-ancestors 'self' http://0.0.0.0:* http://999.loc:* http://*.999.loc:* http://*.business.loc:* http://127.0.0.1:* http://localhost:* http://*.simpals.com http://*.achizitii.md https://999.md https://*.999.md https://achizitii.md https://*.achizitii.md https://afisha.md https://*.afisha.md https://elicitatie.md https://*.elicitatie.md https://etender.md https://*.etender.md https://forum.md https://*.forum.md https://joblist.md https://*.joblist.md https://mama.md https://*.mama.md https://map.md https://*.map.md https://maximum.md https://numbers.md https://*.numbers.md https://pay.md https://*.pay.md https://play.md https://*.play.md https://point.md https://*.point.md https://price.md https://*.price.md https://shop.price.md https://*.shop.price.md https://profi.md https://*.profi.md https://raport.md https://*.raport.md https://revizia.md https://simpals.com https://*.simpals.com https://simpalsid.com https://*.simpalsid.com https://sporter.md https://*.sporter.md https://stiri.md https://*.stiri.md https://studii.md https://*.studii.md https://cursuri.studii.md https://*.cursuri.studii.md https://manuale.studii.md https://*.manuale.studii.md https://prelegeri.studii.md https://*.prelegeri.studii.md https://mentor.md https://*.mentor.md https://votum.md https://*.votum.md https://farmacie.md https://cartego.md https://socksmarket.md https://alife.zone https://cleanline.md https://apabuna.md https://shop.cheeseland.md https://doxyterra.md https://yves-rocher.md https://kinderrash.md https://promstore.md https://lovelybaby.md https://zbrands.md https://mlshop.md https://zoutlet.md https://gig.md 1
default-src 'self'  https://*.dutchcomiccon.com     ; connect-src 'self'  https://*.dutchcomiccon.com https://*.elementor.com https://*.easyfairs.com https://*.google-analytics.com https://stats.g.doubleclick.net https://www.wpo365.com https://efsentry.easyfairs.cloud    https://in.hotjar.com https://vs.hotjar.com https://ct.pinterest.com; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://*.dutchcomiccon.com https://beacon-v2.helpscout.net https://easyfairsassets.com https://*.easyfairs.cloud https://*.youtu.be https://s.ytimg.com https://*.youtube.com https://*.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.google.com https://*.googleadservices.com https://*.googleapis.com https://*.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://px.ads.linkedin.com https://snap.licdn.com https://sjs.bizographics.com https://connect.facebook.net https://cdn.leadexpress.nl https://api.leadexpress.nl https://www.googleoptimize.com https://static.hotjar.com/ https://script.hotjar.com https://s.pinimg.com; img-src 'self' data:  https://*.dutchcomiccon.com  https://*.google.com https://*.google.at https://*.google.be https://*.google.bg https://*.google.ca https://*.google.cat https://*.google.ch https://*.google.de https://*.google.dk https://*.google.es https://*.google.fi https://*.google.fr https://*.google.com.hk https://*.google.it https://*.google.lt https://*.google.lu https://*.google.nl https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.ru https://*.google.se https://*.google.com.tr https://*.google.co.uk https://*.google.com http://1.gravatar.com https://easyfairsassets.com https://*.ggpht.com https://library.elementor.com https://*.gravatar.com https://i.ytimg.com https://*.googleusercontent.com https://*.googleapis.com https://*.google-analytics.com https://*.g.doubleclick.net https://www.googletagmanager.com https://*.gstatic.com https://px.ads.linkedin.com https://*.licdn.com https://www.linkedin.com https://www.facebook.com https://*.fbcdn.net   https://ct.pinterest.com; style-src 'self' 'unsafe-inline' data:  https://*.dutchcomiccon.com https://easyfairsassets.com https://*.googleapis.com https://*.typekit.net https://ps.w.org https://cdn.jsdelivr.net https://www.googletagmanager.com https://*.google.com     ; font-src 'self' data:  https://*.dutchcomiccon.com https://spoprod-a.akamaihd.net https://easyfairsassets.com https://*.typekit.net https://fonts.gstatic.com https://*.sharepointonline.com    https://script.hotjar.com ; child-src 'self'  https://*.dutchcomiccon.com https://docs.wpo365.com https://library.elementor.com https://*.youtube.com https://*.youtu.be https://www.youtube-nocookie.com https://www.googletagmanager.com https://*.google.com  https://www.facebook.com https://staticxx.facebook.com/  https://vars.hotjar.com ; media-src 'self'  https://*.dutchcomiccon.com https://*.vimeo.com https://*.youtu.be https://*.youtube.com https://api.dmcdn.net https://*.twitch.tv     ; object-src 'self'  https://*.dutchcomiccon.com     ; frame-ancestors 'self'  https://*.dutchcomiccon.com https://*.vimeo.com https://api.dmcdn.net https://*.twitch.tv     ; base-uri 'none'     ; 1
base-uri 'self'; default-src openbridge.com *.openbridge.com; img-src * data:; script-src 'unsafe-inline' 'unsafe-eval' openbridge.com *.openbridge.com *.bing.com *.cloudflare.com *.intercom.io *.intercomcdn.com tagmanager.google.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com www.google.com *.crisp.chat assets.calendly.com use.typekit.net; worker-src openbridge.com *.openbridge.com; style-src 'self' 'unsafe-inline' openbridge.com *.openbridge.com *.crisp.chat *.typekit.net fonts.googleapis.com ssl.gstatic.com www.gstatic.com; font-src data: openbridge.com *.openbridge.com fonts.gstatic.com use.typekit.net *.crisp.chat *.intercomcdn.com; connect-src 'self' stats.g.doubleclick.net www.google-analytics.com openbridge.com *.openbridge.com wss://openbridge.com wss://*.openbridge.com wss://*.intercom.io wss://*.crisp.chat *.intercom.io *.intercomusercontent.com *.intercomcdn.com client.crisp.chat; frame-src openbridge.com *.openbridge.com *.calendly.com calendly.com *.crisp.chat; media-src openbridge.com *.openbridge.com *.youtube.com youtu.be s3.amazonaws.com *.crisp.chat *.intercom.io *.intercomcdn.com client.crisp.chat; object-src 'none' 1
block-all-mixed-content; default-src 'self'; base-uri 'self'; form-action 'self' flightbookings.airnewzealand.co.kr flightbookings.airnewzealand.kr flightbookings.airnewzealand.ca flightbookings.airnewzealand.cn flightbookings.airnewzealand.co.nz flightbookings.airnewzealand.co.uk flightbookings.airnewzealand.com.au flightbookings.airnewzealand.com.hk flightbookings.airnewzealand.com.sg flightbookings.airnewzealand.com.tw flightbookings.airnewzealand.com flightbookings.airnewzealand.de flightbookings.airnewzealand.eu flightbookings.airnewzealand.fr flightbookings.airnewzealand.hk flightbookings.airnewzealand.jp flightbookings.airnewzealand.pf flightbookings.airnewzealand.tw  flightbookings.airnewzealand.com.cn flightbookings.grabaseat.co.nz  flightbookings.airnewzealand.co.jp; script-src 'self' s-airnz.com p-airnz.com 'unsafe-inline' 'unsafe-eval' maps.googleapis.com typesquare.com player.vimeo.com www.youtube.com s.ytimg.com s.wayin.com xd.wayin.com s.engagesciences.com display.engagesciences.com *.demdex.net www.google-analytics.com analytics.google.com tagmanager.google.com www.googletagmanager.com *.doubleclick.net www.googleadservices.com www.google.com cdn-assets-prod.s3.amazonaws.com *.optimizely.com optimizely-hrd.appspot.com optimizely.s3.amazonaws.com *.hotjar.com s.swiftypecdn.com nebula-cdn.kampyle.com screencapture.kampyle.com screencaptue-cdn.kampyle.com; style-src 'unsafe-inline' s-airnz.com p-airnz.com fonts.googleapis.com tagmanager.google.com s.swiftypecdn.com; img-src https: data:; font-src s-airnz.com p-airnz.com fonts.googleapis.com fonts.gstatic.com d3pj3vgx4ijpjx.cloudfront.net fonts.gstatic.com dhm5hy2vn8l0l.cloudfront.net script.hotjar.com; media-src 'self' video.cdnvue.com ; frame-src 'self' www.google.com nz.fltmaps.com player.youku.com v.qq.com player.vimeo.com www.youtube.com airnz.wufoo.com xd.wayin.com display.engagesciences.com *.demdex.net *.doubleclick.net www.googletagmanager.com *.cdn.optimizely.com *.hotjar.com nebula-cdn.kampyle.com; connect-src 'self' api.airnz.io api.airnz.ai l.typesquare.com *.demdex.net *.tt.omtrdc.net www.google-analytics.com analytics.google.com stats.g.doubleclick.net adservice.google.com *.optimizely.com wss://*.hotjar.com https://*.hotjar.com vc.hotjar.io s.swiftypecdn.com search-api.swiftype.com *.kampyle.com; object-src 'none'; frame-ancestors 'none'; report-uri /csp-report 1
default-src 'self' https://www.google-analytics.com/; font-src 'self' https://*.wp.com https://ajax.googleapis.com/ https://fonts.googleapis.com/ http: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.wp.com https://public-api.wordpress.com https://apis.google.com www.google-analytics.com www.googletagmanager.com https://ajax.googleapis.com http://*.googlecode.com http://www.semrush.com https://www.google.com/recaptcha/api.js https://www.gstatic.com/; style-src 'self' 'unsafe-inline' https://*.wp.com https://fonts.googleapis.com https://ajax.googleapis.com/ http: data:; img-src * 'self' https: data:; frame-src 'self' https://public-api.wordpress.com https://widgets.wp.com https://*.google.com https://mozbar.moz.com/; object-src 'none'; 1
style-src 'self' 'unsafe-inline' *.fonts.net *.typekit.net *.google.com *.googleapis.com *.gstatic.com *.postcodeanywhere.co.uk; img-src 'self' data: *.google-analytics.com https://evocms.s3.amazonaws.com https://d3qd5ly540y1aa.cloudfront.net *.doubleclick.net *.adfenix.com *.sfnix.com *.sfnix.net *.googleapis.com *.google.com *.google.co.uk *.google.ie *.gstatic.com *.ggpht.com *.googletagmanager.com *.facebook.com *.ytimg.com  *.vimeocdn.com *.icims.com  *.postcodeanywhere.co.uk media.reedsrains.co.uk https://a.b0e8.com; frame-src 'self' *.doubleclick.net *.adfenix.com *.hotjar.com *.facebook.com *.google.com *.audioagent.com *.youtube.com  https://youtu.be  *.vimeo.com  *.icims.com  *.matterport.com  *.vieweet.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.net *.adfenix.com *.hotjar.com *.googletagmanager.com https://core-aws.evocdn.co.uk *.youtube.com  *.postcodeanywhere.co.uk https://akya.io https://cdn.b0e8.com; font-src 'self' *.fonts.net *.typekit.net https://fonts.gstatic.com https://fonts.googleapis.com https://evocms.s3.amazonaws.com/; connect-src 'self' *.facebook.com *.adfenix.com *.hotjar.com wss://*.hotjar.com *.hotjar.io *.google-analytics.com *.doubleclick.net *.postcodeanywhere.co.uk; report-uri /?module=classes\content_security_policy&ajax_act=report 1
default-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.brighttalk.com https://*.paypal.com https://*.paypalobjects.com https://www.youtube-nocookie.com https://www.xoom.com https://www.wootag.com https://*.qualtrics.com; script-src 'nonce-iEFLUPNGudJIIRegxD/Q9kGaX6moIlPclQ1r1Z/9ZhyqueDl' 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://nominatim.openstreetmap.org https://*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com https://*.salesforce.com https://*.force.com https://*.eloqua.com https://nexus.ensighten.com https://api.paypal-retaillocator.com https://*.brighttalk.com https://*.dialogtech.com https://*.qualtrics.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com data:; img-src 'self' https: data:; form-action 'self' https://*.paypal.com https://*.salesforce.com https://*.eloqua.com https://secure.opinionlab.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-ancestors 'self' https://*.paypal.com; block-all-mixed-content;; report-uri https://www.paypal.com/csplog/api/log/csp 1
frame-ancestors http://detran-br.com http://detran-br.com.br http://fotodicas.com/ http://onlinetvhd.net/ 1
default-src 'self'; connect-src 'self' *.youtube.com www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net accounts.google.com *.nakanohito.jp; style-src 'self' 'unsafe-inline' platform.twitter.com; script-src 'self' 'unsafe-inline' cdn.ampproject.org www.googletagmanager.com www.google-analytics.com platform.twitter.com syndication.twitter.com *.syndication.twimg.com connect.facebook.net apis.google.com accounts.google.com b.st-hatena.com cdn-ak.b.st-hatena.com social-plugins.line.me d.line-scdn.net uh.nakanohito.jp webfont.fontplus.jp *.amazonaws.com *.instagram.com;img-src 'self' data: cdn.cdp-japan.jp www.google.com www.google.co.jp www.google-analytics.com b.st-hatena.com https://cdn-ak.b.st-hatena.com www.facebook.com i.ytimg.com *.twitter.com csi.gstatic.com pbs.twimg.com;media-src 'self' cdn.cdp-japan.jp;font-src 'self' data: cdn.jsdelivr.net fonts.gstatic.com *.amazonaws.com webfont.fontplus.jp;child-src 'self' *.youtube.com *.google.com *.facebook.com *.twitter.com https://b.hatena.ne.jp cdn.api.b.hatena.ne.jp social-plugins.line.me *.st-hatena.com webfont.fontplus.jp *.instagram.com;object-src 'self';frame-ancestors 'none';form-action 'self' syndication.twitter.com platform.twitter.com accounts.google.com webfont.fontplus.jp;report-uri /csp/report 1
frame-src 'self' https://www.google.com https://content.googleapis.com https://accounts.google.com https://staticxx.facebook.com https://www.youtube.com https://www.facebook.com http://erp.vkursi.pro https://wdtsearch2.azurewebsites.net https://erp-vkursi.azurewebsites.net https://cid.center https://cid.center/sme/ https://cid.center/sme/profile https://tascombank.ua https://24b.tascombank.ua https://tas24b.ua https://ovsb.ics.gov.ua https://ovsb.ics.gov.ua https://gisfile.com http://www.vkursi.com.ua https://vars.hotjar.com https://a.plerdy.com;frame-ancestors 'self' https://www.google.com https://content.googleapis.com https://accounts.google.com https://staticxx.facebook.com https://www.youtube.com https://www.facebook.com http://erp.vkursi.pro https://wdtsearch2.azurewebsites.net https://erp-vkursi.azurewebsites.net https://cid.center https://cid.center/sme/ https://cid.center/sme/profile https://tascombank.ua https://24b.tascombank.ua https://tas24b.ua https://ovsb.ics.gov.ua https://ovsb.ics.gov.ua https://gisfile.com http://www.vkursi.com.ua https://vars.hotjar.com https://a.plerdy.com 1
default-src 'none'; style-src 'nonce-270FC06BEFF1BEAE7402F76F08CB98D16413F90BEE70ED6CEBF4E886FE31D8BA' 'self'; script-src 'none'; img-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'none' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://ajax.googleapis.com https://api.olark.com https://assets.adobedtm.com https://bam.nr-data.net https://cdnjs.cloudflare.com https://connect.facebook.net https://c.evidon.com https://d1v9u0bgi1uimx.cloudfront.net https://d29usylhdk1xyu.cloudfront.net https://d7v0k4dt27zlp.cloudfront.net/assets/ https://docs.gcs.digitalpfizer.com https://googleads.g.doubleclick.net https://js.bizographics.com https://js-agent.newrelic.com https://knrpc.olark.com/nrpc/ https://l.betrad.com https://maps.googleapis.com https://optoutapi.evidon.com https://p.adsymptotic.com https://pfizer-grv-eu.janraincapture.com https://players.brightcove.net https://px.ads.linkedin.com https://rpxnow.com/load/ https://s3.amazonaws.com/pfe_grv https://s3.amazonaws.com/pfe_im/ https://script.hotjar.com https://sjs.bizographics.com https://static.hotjar.com https://static.addtoany.com https://static.olark.com https://tagmanager.google.com https://tpc.googlesyndication.com https://vjs.zencdn.net https://www.bizographics.com https://www.google.com/recaptcha/ https://www.google.com/search/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.linkedin.com https://cdn.jsdelivr.net https://s3-eu-west-1.amazonaws.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://cloud.typography.com https://cookies.pfizer.com https://d3hmp0045zy3cs.cloudfront.net https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://pfredirect.pfizersite.io https://s3.amazonaws.com/pfe_grv/ https://static.olark.com https://stackpath.bootstrapcdn.com https://tagmanager.google.com https://translate.googleapis.com https://use.typekit.net fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://s3-eu-west-1.amazonaws.com; connect-src 'self' https://*.hotjar.com https://*.evidon.com https://*.brightcove.com https://*.brightcovecdn.com https://*.brightcove.net https://adservice.google.com https://bam.nr-data.net https://brightcove.hs.llnwd.net https://house-cloudfront.ap-northeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-2.prod.boltdns.net https://house-cloudfront.eu-west-1.prod.boltdns.net https://house-cloudfront.us-east-1.prod.boltdns.net https://knrpc.olark.com/nrpc/ https://l.betrad.com https://stats.addtoany.com/menu https://stats.g.doubleclick.net https://tagmanager.google.com https://vc.hotjar.io/ https://www.facebook.com https://www.google-analytics.com wss://*.hotjar.com; font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://docs.gcs.digitalpfizer.com/fonts/ https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://script.hotjar.com https://use.fontawesome.com/releases/ https://use.typekit.net https://vjs.zencdn.net; frame-src 'self' tel: https://*.fls.doubleclick.net https://*.janrainsso.com https://bid.g.doubleclick.net https://l3.evidon.com https://players.brightcove.net https://static.addtoany.com https://static.olark.com https://tpc.googlesyndication.com https://vars.hotjar.com https://www.facebook.com https://www.google.com/maps/ https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.youtube.com; img-src 'self' about: data: https://*; manifest-src 'self'; media-src 'self' data: blob: https://brightcove.hs.llnwd.net https://*.media.brightcove.com https://static.olark.com https://secure.brightcove.com/services/mobile/streaming/; worker-src 'self' blob:; report-uri https://pfeprod.report-uri.com/r/t/csp/enforce 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.wogaa.sg https://*.demdex.net/ https://cm.everesttech.net/ https://wogadobeanalytics.sc.omtrdc.net/; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.wogaa.sg  https://assets.adobedtm.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://hc-spa.careshieldlife.gov.sg https://va.ecitizen.gov.sg https://code.jquery.com/; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://va.ecitizen.gov.sg https://assets.wogaa.sg/fonts/ https://stackpath.bootstrapcdn.com/ https://cdnjs.cloudflare.com/; font-src 'self' data: https://fonts.gstatic.com https://s3-us-west-2.amazonaws.com https://va.ecitizen.gov.sg https://assets.wogaa.sg/fonts/; frame-src 'self' https://www.youtube.com https://www.google.com; img-src 'self' data: https://va.ecitizen.gov.sg https://wogadobeanalytics.sc.omtrdc.net/ https://cm.everesttech.net/ https://dpm.demdex.net/ https://*.wogaa.sg https://va-intranet.ecitizen.gov.sg/; connect-src 'self' https://va.ecitizen.gov.sg https://*.wogaa.sg https://dpm.demdex.net/; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'  https://www.google-analytics.com https://www.youtube.com https://api.ipdata.co https://yoast.com https://inphi.gcs-web.com https://jobs.jobvite.com https://www.inphi.com https://code.jquery.com https://www.google.com https://secure.gravatar.com https://www.gstatic.com https://fonts.googleapis.com https://inphi.force.com/ https://customerbeta.inphi.com ;font-src 'self' https://www.inphi.com https://fonts.googleapis.com https://fonts.gstatic.com data: ;img-src 'self' https://www.inphi.com https://ml.globenewswire.com https://secure.gravatar.com https://www.google-analytics.com https://stats.g.doubleclick.net data: 1
frame-ancestors 'self' https://uk.prd.invesco.net; 1
default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline';connect-src *; report-uri https:/procredtibank-kos.com/report; 1
script-src 'self' www.google-analytics.com https:  'unsafe-inline' 1
default-src 'unsafe-inline' 'self' https://*.fileyourtaxes.com; img-src 'unsafe-inline' 'self'; script-src 'unsafe-inline' 'self' https://ajax.googleapis.com https://code.jquery.com; style-src 'unsafe-inline' 'self' https://use.fontawesome.com https://cdnjs.cloudflare.com; font-src 'unsafe-inline' 'self' https://use.fontawesome.com 1
frame-ancestors https://edmodoqabranch.com https://*.edmodoqabranch.com https://*.edmodo.com; 1
default-src https: data: wss: *.plcontent.com 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'none'; frame-src 'self' *.facebook.com *.adsrvr.org *.doubleclick.net *.youtube.com tr.snapchat.com *.googletagmanager.com; 1
default-src 'self' https://api.deezer.com https://*.bernardo.fm; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://code.getmdl.io https://*.bernardo.fm; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdnjs.cloudflare.com https://code.getmdl.io https://pagead2.googlesyndication.com https://adservice.google.ch https://*.bernardo.fm https://*.google.com https://*.gstatic.com; font-src 'self' data: https://fonts.gstatic.com https://*.bernardo.fm; media-src 'self' https://www.dropbox.com https://*.dl.dropboxusercontent.com https://*.bernardo.fm; img-src 'self' data: http://www.w3.org https://*.bernardo.fm; frame-src https://googleads.g.doubleclick.net https://www.google.com 1
default-src 'none'; connect-src 'self'; img-src 'self' www.initiative-s.de webstats.eco.de; script-src 'self' webstats.eco.de;  style-src 'self' 'sha256-RtX6YyM6bwLYpccRQ6PFb1kogqs0GpNlm1JpNfhiO4Y='; 1
frame-ancestors 'self' https://*.sagepay.com https://*.paypal.com https://*.paypalobjects.com https://*.deko.finance https://*.v12finance.com https://*.pay4later.com https://s.ytimg.com https://www.youtube.com  1
frame-ancestors 'self' api.sheetmusicdirect.com 1
frame-ancestors *.ia.ca *.inalco.com *.ia.iafg.net 1
default-src * data: blob:;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com https://static.hotjar.com;frame-src 'self' https://*.mhcache.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://vars.hotjar.com https://*.facebook.com https://*.googleapis.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://www.zenaps.com;script-src *.myheritage.pl https://www.myheritage.pl  'unsafe-eval' 'unsafe-inline' blob: data: 'self' https://*.myheritage.com https://*.mhcache.com https://cdn.trackjs.com https://tpc.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.googletagmanager.com https://connect.facebook.net https://bat.bing.com https://www.googleadservices.com https://*.google-analytics.com https://www.gstatic.com https://*.googleapis.com https://js-agent.newrelic.com https://*.nr-data.net https://*.mk-sense.com https://code.jquery.com https://*.hotjar.com https://www.dwin1.com https://www.zenaps.com https://ad.zanox.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://tagmanager.google.com https://optanon.blob.core.windows.net;connect-src data: 'self' https://*.myheritage.com https://*.mhcache.com https://www.google-analytics.com https://adservice.google.com https://*.nr-data.net https://sentry.io https://capture.trackjs.com https://*.bing.com https://*.facebook.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io:* https://*.doubleclick.net https://*.mk-sense.com https://privacyportal-eu.onetrust.com *.myheritage.pl;media-src 'self' https://*.myheritage.com https://*.mhcache.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.cloudflare.com https://connect.facebook.net https://*.coupontools.com https://*.kaspersky-labs.com https://a.opmnstr.com https://www.googletagmanager.com https://js.intercomcdn.com https://script.hotjar.com https://static.hotjar.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://a.optmnstr.com https://widget.intercom.io https://js.stripe.com https://www.controlpanel.center https://ajax.googleapis.com https://snap.licdn.com https://maxcdn.bootstrapcdn.com https://api.stripe.com https://*.smartlook.com https://*.smartlook.cloud https://a.optnmstr.com https://www.youtube.com https://s.ytimg.com https://client.crisp.chat https://settings.crisp.chat https://googleads.g.doubleclick.net https://code.jquery.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://gc.kis.v2.scr.kaspersky-labs.com https://cdn.jsdelivr.net https://translate.googleapis.com https://translate.google.com https://coupontools.localhost https://zapier.com https://d.adroll.com https://img.xis.be https://img.coupontools.com https://ipinfo.io https://cdn.leadinfo.net 1
default-src https:; connect-src https: wss:; font-src https: data:; frame-src https: twitter:; frame-ancestors https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' https:; style-src 'unsafe-inline' https:; 1
*.yandex.ru *.google.com *.google-analytics.com *.gstatic.com *.vk.com *.doubleclick.net *.bitrix.info *.bitrix24.ru *.cnetcontent.com 1
default-src * 'self' data: blob:; script-src * 'self' 'unsafe-inline' 'unsafe-eval' ; style-src * 'self' 'unsafe-inline' ; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' blob: *.pianistmagazine.com *.wgp-cdn.co.uk *.cloudflare.com https://api.raygun.io wss://am.freshrelevance.com https://apikeys.civiccomputing.com https://clapi.civiccomputing.com https://www.googleapis.com *.advertising.com *.adnxs.com *.doubleverify.com *.serving-sys.com https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net *.googlesyndication.com *.google-analytics.com *.adxbid.info *.lijit.com prebid-eu.creativecdn.com *.adxpremium.services; base-uri 'self'; 1
script-src 'unsafe-inline' 'unsafe-eval' *.brandshelter.com *.webinarjam.com diffuser-cdn.app-us1.com prism.app-us1.com cdnjs.cloudflare.com trackcmp.net www.google-analytics.com data:; style-src 'unsafe-inline' *.brandshelter.com fonts.googleapis.com fonts.gstatic.com *.webinarjam.com 1
script-src 'unsafe-inline' ssl.google-analytics.com maps.googleapis.com ajax.googleapis.com www.blockandco.com google-maps-utility-library-v3.googlecode.com cdn.rawgit.com 1
default-src 'self' https://*.smit.ee https://*.google-analytics.com; script-src https://www.gstatic.com https://*.google.com https://www.recaptcha.net https://www.google-analytics.com https://siseministeerium.ee https://*.siseministeerium.ee https://ct1.addthis.com https://*.siseministeerium.ee 'unsafe-eval' 'unsafe-inline' https://piwik.smit.ee; img-src 'self' https://piwik.smit.ee https://www.google-analytics.com https://ct1.addthis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://ct1.addthis.com https://*.siseministeerium.ee; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self'  https://www.google.com https://ct1.addthis.com https://*.siseministeerium.ee; object-src https://*.siseministeerium.ee https://siseministeerium.ee 1
default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval'; 1
default-src * 'self' data: blob:; script-src * 'self' 'unsafe-inline' 'unsafe-eval' ; style-src * 'self' 'unsafe-inline' ; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' blob: *.family-tree.co.uk *.wgp-cdn.co.uk *.cloudflare.com https://api.raygun.io wss://am.freshrelevance.com https://apikeys.civiccomputing.com https://clapi.civiccomputing.com *.advertising.com *.adnxs.com *.doubleverify.com *.serving-sys.com https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net *.googlesyndication.com *.google-analytics.com; base-uri 'self'; 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://dl.episerver.net http://fast.fonts.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://dl.episerver.net https://www.google.com https://www.gstatic.com https://ajax.googleapis.com http://ajax.googleapis.com https://www.google-analytics.com http://znawaumklg1tyn20l-apagroup.siteintercept.qualtrics.com qualtrics.com js-agent.newrelic.com bam.nr-data.net; connect-src ws: http://localhost https://uatadmin.apa.com.au https://uatadmin.apa.com.au:4443 https://uat.apa.com.au https://www.apa.com.au https://admin.apa.com.au https://admin.apa.com.au:4443 https://admin-origin.apa.aws.haylix.net:4443 https://prod-origin.apa.aws.haylix.net https://wcsecure.weblink.com.au siteintercept.qualtrics.com qualtrics.com; img-src 'self' data: https://www.apa.com.au https://dl.episerver.net https://www.google-analytics.com; frame-src 'self' https://wcsecure.weblink.com.au https://player.vimeo.com https://www.youtube.com https://www.google.com siteintercept.qualtrics.com qualtrics.com apagroup.au1.qualtrics.com; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://gameliberty.club; img-src 'self' https: data: blob: https://gameliberty.club; style-src 'self' https://gameliberty.club 'nonce-ue7L8OPfzB9z8hmP53683Q=='; media-src 'self' https: data: https://gameliberty.club; frame-src 'self' https:; manifest-src 'self' https://gameliberty.club; connect-src 'self' data: blob: https://gameliberty.club https://media.gameliberty.club/media wss://gameliberty.club; script-src 'self' https://gameliberty.club; child-src 'self' blob: https://gameliberty.club; worker-src 'self' blob: https://gameliberty.club 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' js.hs-scripts.com js.hs-banner.com js.hs-analytics.net js.hscollectedforms.net www.google-analytics.com www.googletagmanager.com snap.licdn.com 370576-1158183-raikfcquaxqncofqfm.stackpathdns.com cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https: https: https://fonts.googleapis.com 370576-1158183-raikfcquaxqncofqfm.stackpathdns.com cdnjs.cloudflare.com 1
default-src 'self' mediabank.valkenhorst.nl; child-src 'self' js.stripe.com p.travelsmarter.net valkexclusief-virtueletours.nl www.googletagmanager.com www.google.com www.youtube.com zien360.nl *.facebook.com; connect-src 'self' data: api.widget.trengo.eu gkkmgz0bw7.execute-api.eu-central-1.amazonaws.com wss://ws-eu.pusher.com www.google-analytics.com *.shoppingminds.net *.g.doubleclick.net *.facebook.com *.facebook.net *.googleapis.com *.hotjar.com *.hotjar.io *.sovendus.com *.adyen.com *.paypal.com *.klippa.com mediabank.valkenhorst.nl; img-src 'self' data: ads.creative-serving.com cdn.feedbackify.com gravatar.com onlinedialogue.s3-eu-west-1.amazonaws.com/valk portal.payconiq.com script.shoppingminds.com s3.amazonaws.com/fby-form/ i.vimeocdn.com ta-client-assets.s3.amazonaws.com trkr.shoppingminds.net valkexclusief-virtueletours.nl video.jobpromo.nl www.google-analytics.com www.googletagmanager.com www.google.com www.tripadvisor.com www.tripadvisor.de www.tripadvisor.nl aws-tiqets-cdn.imgix.net/images/content/ zien360.nl cx.atdmt.com *.g.doubleclick.net *.facebook.com *.facebook.net *.gstatic.com *.google.ae *.google.al *.google.am *.google.at *.google.ba *.google.be *.google.bg *.google.by *.google.ca *.google.ch *.google.ci *.google.cl *.google.co.ao *.google.co.bw *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ma *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.ve *.google.co.za *.google.com *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.br *.google.com.co *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.om *.google.com.pa *.google.com.pe *.google.com.ph *.google.com.pk *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sg *.google.com.sl *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dk *.google.dz *.google.ee *.google.es *.google.fi *.google.fr *.google.gg *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.hu *.google.ie *.google.it *.google.im *.google.iq *.google.is *.google.je *.google.jo *.google.kg *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.mu *.google.mv *.google.ne *.google.nl *.google.no *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.si *.google.sk *.google.sm *.google.sn *.google.sr *.google.st *.google.tn *.google.tm *.google.tt *.ggpht.com *.googleapis.com *.googletraveladservices.com *.linkedin.com *.ytimg.com dashboard.umbraco.org our.umbraco.com mediabank.valkenhorst.nl *.adyen.com *.paypalobjects.com fr135.net *.giphy.com trengo.s3.eu-central-1.amazonaws.com; frame-src 'self' js.stripe.com live.tourdash.com loyaltymanager.nl myalbum.com p.travelsmarter.net ts.ticketcounter.nl valkexclusief-virtueletours.nl web-widget.mobility.here.com widget.salonhub.nl widgets.vvvzeeland.nl www.googletagmanager.com www.omnivr.nl www.panowalks.com www.youtube.com www.eenvacaturebij.nl www.werkenbijavifauna.nl www.werkenbijvandervalkhoteltilburg.nl www.werkenbijvandervalkhotelutrecht.nl zien360.nl *.g.doubleclick.net *.facebook.com *.facebook.net *.hotjar.com *.googlesyndication.com *.google.com *.salonized.com *.sovendus.com vimeo.com *.vimeo.com *.adyen.com *.paypal.com valkexclusief.typeform.com www.securesuite.co.uk www.rsa3dsauth.co.uk *.cardinalcommerce.com rtsp.me; font-src 'self' data: cdnjs.cloudflare.com fonts.gstatic.com maxcdn.bootstrapcdn.com static.tacdn.com mediabank.valkenhorst.nl; media-src 'self' static.widget.trengo.eu video.jobpromo.nl mediabank.valkenhorst.nl; style-src 'self' 'unsafe-inline' static.tacdn.com fonts.googleapis.com *.google.com *.adyen.com mediabank.valkenhorst.nl; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: cdn.widget.trengo.eu static.widget.trengo.eu stats.pusher.com/timeline/v4/jsonp/1 js.stripe.com s.ytimg.com marketplace.mobility.here.com player.vimeo.com script.shoppingminds.com static.tacdn.com s3.amazonaws.com/fby-form/ widget.salonhub.nl www.googletagmanager.com www.google-analytics.com www.tripadvisor.nl www.youtube.com snap.licdn.com *.facebook.net *.feedbackify.com *.g.doubleclick.net *.googleapis.com *.google.com *.googleadservices.com *.googlesyndication.com *.gstatic.com *.hotjar.com *.sovendus.com *.adyen.com *.paypal.com *.cdn-apple.com mediabank.valkenhorst.nl; block-all-mixed-content; report-uri /Api/ContentSecurityPolicyApi/Report; 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://cinapse.co https://*.cinapse.co https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org ajax.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com www.googletagmanager.com a.quora.com cdn.rawgit.com s3-ap-southeast-1.amazonaws.com; connect-src 'self' d3hb14vkzrxvla.cloudfront.net m.addthisedge.com m.addthis.com ampcid.google.co.in ampcid.google.com www.googletagmanager.com in.hotjar.com vc.hotjar.com l.sharethis.com msg.onedirect.in www.narayanahealth.org www.google-analytics.com stats.g.doubleclick.net www.facebook.com; img-src 'self' data: cache.addthiscdn.com stats.g.doubleclick.net www.paypalobjects.com http://blogs.narayanahealth.org blogs.narayanahealth.org ciphercoin.com soledad.pencidesign.com s.w.org ps.w.org i.liadm.com secure.gravatar.com cache.addthiscdn.com stats.g.doubleclick.net www.narayanahealth.org 1.gravatar.com www.googletagmanager.com staging.narayanahealth.org maps.gstatic.com maps.googleapis.com i3.ytimg.com i.ytimg.com www.freeiconspng.com ws.sharethis.com l.sharethis.com hospital.narayanahealth.org http://www.narayanahealth.org www.narayanahealth.org campaign.narayanahealth.org narayanahealth.org q.quora.com www.facebook.com www.google.com www.google.lk www.google.co.in www.google-analytics.com img.youtube.com cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline';font-src 'self' data: maxcdn.bootstrapcdn.com fonts.gstatic.com stackpath.bootstrapcdn.com www.narayanahealth.org; style-src-elem 'self' 'unsafe-inline' www.gstatic.com ws.sharethis.com t.sharethis.com l.sharethis.com code.jquery.com maxcdn.bootstrapcdn.com campaign.narayanahealth.org fonts.googleapis.com stackpath.bootstrapcdn.com cdnjs.cloudflare.com www.narayanahealth.org; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' platform.twitter.com apis.google.com www.gstatic.com www.google.com beacon-v2.helpscout.net cdn.ampproject.org script.hotjar.com static.hotjar.com maps.googleapis.com l.sharethis.com t.sharethis.com ws.sharethis.com code.jquery.com maxcdn.bootstrapcdn.com ajax.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com www.googletagmanager.com a.quora.com cdn.rawgit.com s3-ap-southeast-1.amazonaws.com www.google-analytics.com connect.facebook.net cdn-in.pagesense.io www.googleadservices.com googleads.g.doubleclick.net www.narayanahealth.org; media-src 'self' s.w.org s3-ap-southeast-1.amazonaws.com; frame-src 'self' tags.bluekai.com s7.addthis.com talleen.in vars.hotjar.com mynh.narayanahealth.org amsonline.narayanahealth.org ws.sharethis.com l.sharethis.com t.sharethis.com c.sharethis.mgr.consensu.org amsonline.narayanahealth.org cdn-in.pagesense.io www.facebook.com www.youtube.com youtube.com bid.g.doubleclick.net; 1
default-src 'none'; script-src 'self' *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.segment.com *.pingdom.net *.netlify.com unpkg.com *.customer.io; connect-src 'self' *.google.com *.segment.io *.google-analytics.com *.googleusercontent.com; img-src 'self' data: *.google-analytics.com *.customer.io *.doubleclick.net *.googletagmanager.com *.google.com; style-src 'self' *.googleapis.com *.cloudflare.com *.bootstrapcdn.com; base-uri 'self'; form-action 'self'; font-src 'self' *.gstatic.com *.cloudflare.com; child-src 'self' *.googletagmanager.com *.youtube.com; 1
default-src 'self' 'unsafe-eval' http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.polyfill.io https://www.gstatic.com https://cc.cdn.civiccomputing.com https://cdnjs.cloudflare.com https://www.authy.com https://v1.addthis.com https://www.authy.com/form.authy.min.js https://maps.googleapis.com https://graph.facebook.com https://widgets.pinterest.com https://api-public.addthis.com https://m.addthisedge.com https://m.addthis.com https://s7.addthis.com https://tagmanager.google.com https://s.ytimg.com https://www.youtube.com https://script.hotjar.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.co.uk https://www.google.com https://cdn.datatables.net https://static.hotjar.com https://www.google-analytics.com https://connect.facebook.net https://www.googletagmanager.com https://bat.bing.com https://ajax.googleapis.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org https://z.moatads.com; style-src 'self' 'unsafe-inline' https://www.authy.com https://www.authy.com/form.authy.min.css https://tagmanager.google.com https://cdn.datatables.net https://cdn.jsdelivr.net https://fonts.googleapis.com https://jaywing-bc-leeds-development-assets.s3.amazonaws.com; img-src 'self' data: https://csi.gstatic.com https://www.authy.com/images/ https://maps.gstatic.com https://maps.googleapis.com https://secure.gravatar.com https://ssl.gstatic.com https://www.gstatic.com https://www.google.co.uk https://www.google.com https://www.ecology.co.uk https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://s.w.org https://bat.bing.com https://jaywing-bc-leeds-development-assets.s3.amazonaws.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com; connect-src 'self' https://v1.addthis.com https://insights.hotjar.com https://apikeys.civiccomputing.com https://cache.addthiscdn.com https://*.hotjar.com https://m.addthis.com https://www.addthis.com https://yoast.com wss://*.hotjar.com https://in.hotjar.com https://vc.hotjar.io https://www.google-analytics.com https://bat.bing.com https://stats.g.doubleclick.net https://www.facebook.com; media-src 'self' https://*.youtube.com; object-src 'self'; child-src 'self' https://*.youtube.com; frame-src 'self' https://www.google.com https://s7.addthis.com https://vars.hotjar.com https://*.youtube.com https://www.facebook.com; worker-src 'self' https://www.ecology.co.uk; frame-ancestors 'self'; form-action 'self' https://www.ecology.co.uk https://staging.ecology.co.uk https://www.facebook.com; upgrade-insecure-requests; block-all-mixed-content; base-uri https://www.ecology.co.uk 1
base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'self'; script-src 'self' 'unsafe-eval' https://code.jquery.com/jquery-3.2.1.min.js https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js https://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.7.1/Chart.min.js; block-all-mixed-content; upgrade-insecure-requests 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.livechatinc.com https://www.google-analytics.com/ https://www.google.com/ https://api.vroomvroomvroom.com/ https://files.vroomvroomvroom.com https://api.vroom.com.au https://www.youtube.com/;               style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://fonts.gstatic.com;               font-src 'self' https://fonts.googleapis.com/ https://files.vroomvroomvroom.com/ https://fonts.gstatic.com data:;               script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.google.com/  https://maps.googleapis.com/ https://www.googletagmanager.com/ https://files.vroomvroomvroom.com/ https://www.google-analytics.com;               img-src 'self' https://stats.g.doubleclick.net https://www.google.com.au https://dashboard.umbraco.org/ https://umbraco.tv/ https://www.google-analytics.com/ https://www.newcastleairport.com.au/ data:; 1
frame-ancestors *.lsm.lv *.lsm.lc; 1
default-src 'self'; connect-src *; font-src *; frame-src *; img-src * blob: data:; media-src * blob:; object-src *; child-src blob:;worker-src blob:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' 1
font-src https://www.callisonrtkl.com https://cdn.crtkl.com data: 1
default-src 'self' www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com; 1
object-src 'none'; script-src 'nonce-3ZPrlAd9ckm80IWZTBY/+Q==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' 'report-sample' https: http:; base-uri 'none'; report-uri https://bandcamp.com/api/cspreport/1/violation 1
default-src 'self'; script-src 'self' https://*.doubleclick.net https://*.google-analytics.com https://*.consensu.org https://*.onetrust.com https://*.cookielaw.org https://*.googletagmanager.com https://*.yahoo.com https://*.msn.com https://*.googleadservices.com https://*.addthisedge.com https://*.mixpanel.com https://*.mxpnl.com https://*.facebook.net https://*.addthis.com https://*.google-analytics.com https://*.lassocrm.com https://*.googleapis.com https://*.moatads.com https://*.adroll.com https://*.snapengage.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' * data:; style-src 'self' 'unsafe-inline'; frame-src 'self' https://*; connect-src 'self' https://*.consensu.org https://*.onetrust.com https://*.cookielaw.org https://*.cavco.com https://*.addthis.com https://*.mixpanel.com https://*.facebook.com  https://*.google-analytics.com https://*.doubleclick.net 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.activehosted.com trackcmp.net d3rxaij56vjege.cloudfront.net bat.bing.com mpsnare.iesnare.com *.app-us1.com *.coastappliances.com *.bazaarvoice.com *.doubleclick.net *.googleoptimize.com *.google-analytics.com *.google.ca *.google.com *.googleapis.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.podium.com polyfill.io *.bugsnag.com *.logdna.com bv-loader-prod.s3.us-east-2.amazonaws.com *.moneris.com connect.facebook.net *.facebook.com *.hotjar.io *.hotjar.com wss://*.hotjar.com; font-src * data:; img-src * data:; 1
font-src 'self' 'unsafe-inline' data: *.credit-suisse.com *.credit-suisse.cspta.ch *.credit-suisse-stg.cspta.ch *.inbenta.com fonts.gstatic.com *.anychart.com *.inbenta.io gateway.zscloud.net 1
default-src 'none'; img-src * data:; media-src *; font-src * data:; frame-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sandberg.world https://files.sandberg.world https://cdn.sandberg.world https://sandberg.gl https://sandberg.es https://sandberg.pt https://sandberg.cz https://sandberg.si https://sandberg.lt https://sandberg.is https://sandberg.bg https://sandberg.fr https://sandberg.at https://sandberg.rs https://sandberg.ae https://sandberg.ie https://sandberg.com.ua https://www.google-analytics.com https://connect.facebook.net https://maps.google.com https://maps.googleapis.com https://player.vimeo.com https://ajax.cloudflare.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://sandberg.world https://files.sandberg.world https://cdn.sandberg.world https://sandberg.gl https://sandberg.es https://sandberg.pt https://sandberg.cz https://sandberg.si https://sandberg.lt https://sandberg.is https://sandberg.bg https://sandberg.fr https://sandberg.at https://sandberg.rs https://sandberg.ae https://sandberg.ie https://sandberg.com.ua https://fonts.googleapis.com; connect-src 'self' https://sandberg.world https://files.sandberg.world https://cdn.sandberg.world https://sandberg.gl https://sandberg.es https://sandberg.pt https://sandberg.cz https://sandberg.si https://sandberg.lt https://sandberg.is https://sandberg.bg https://sandberg.fr https://sandberg.at https://sandberg.rs https://sandberg.ae https://sandberg.ie https://sandberg.com.ua https://www.google-analytics.com https://vimeo.com https://stats.g.doubleclick.net https://www.facebook.com 1
frame-ancestors 'self' www.kingstongrand.ca kingstongrand.ca https://kingstongrand.ca https://secure1.tixhub.com 1
frame-ancestors 'self' www.kingcanada.com 1
default-src 'self' *.taxcloud.com *.taxcloud.net taxcloud-core-staging.azurewebsites.net taxcloud-core-qa.azurewebsites.net api.buttercms.com cdn.buttercms.com dc.services.visualstudio.com 9133694.fls.doubleclick.net fonts.googleapis.com apis.google.com docs.google.com fonts.gstatic.com stats.g.doubleclick.net www.google-analytics.com www.google.com/ads/ga-audiences maps.googleapis.com maps.gstatic.com cdnjs.cloudflare.com data: blob: player.vimeo.com ekr.zdassets.com static.zdassets.com taxcloudsupport.zendesk.com wss://widget-mediator.zopim.com widget-mediator.zopim.com;script-src 'self' 'unsafe-inline' ngsw-worker.js cdnjs.cloudflare.com www.google-analytics.com/analytics.js apis.google.com api-cdn.amazon.com www.googletagmanager.com static.zdassets.com code.getmdl.io/1.3.0/material.min.js www.googletagmanager.com/gtm.js www.gstatic.com/charts/loader.js www.gstatic.com maps.googleapis.com stats.g.doubleclick.net track.taxcloud.com unpkg.com blob:;style-src 'self' 'unsafe-inline' fonts.googleapis.com taxcloud.my.salesforce.com www.gstatic.com/charts/49/css/core/tooltip.css www.gstatic.com/charts/49/css/util/util.css www.gstatic.com/charts/49/css/table/table.css www.gstatic.com/charts/49/css/util/format.css;font-src 'self' 'unsafe-inline' fonts.gstatic.com data:;frame-src *.fls.doubleclick.net player.vimeo.com accounts.google.com 1
base-uri 'none'; default-src 'self'; style-src 'self' 'nonce-82a2e4c24ad2f61c' static.sooqr.com fonts.googleapis.com; font-src 'self' data: use.typekit.net fonts.gstatic.com; img-src 'self' data: pixel.sooqr.com www.google-analytics.com www.googletagmanager.com p.typekit.net www.toegankelijkheidsverklaring.nl; script-src 'self' 'nonce-82a2e4c24ad2f61c' static.sooqr.com www.google-analytics.com dynamic.sooqr.com www.googletagmanager.com use.typekit.net; connect-src 'self' cognito-identity.eu-central-1.amazonaws.com firehose.eu-central-1.amazonaws.com www.google-analytics.com; frame-src 'self' www.youtube.com www.google.com; frame-ancestors 'self'; 1
default-src 'self'; base-uri 'self'; font-src 'self' *.googleapis.com *.gstatic.com; img-src 'self' *.youtube.com data: *.google-analytics.com *.jquery.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.jquery.com; form-action 'self';frame-ancestors 'self'; script-src 'self'  *.aspnetcdn.com *.google-analytics.com *.googleapis.com cdnjs.cloudflare.com *.google.com *.youtube.com *.gstatic.com *.ytimg.com;frame-src 'self' *.youtube.com *.google.com *.facebook.com *.jquery.com;connect-src 'self' *.google-analytics.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.google-analytics.com https://www.gstatic.com https://ajax.googleapis.com https://cdnjs.cloudflare.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.youtube.com/ http://free.timeanddate.com/; object-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' ; connect-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' 'unsafe-inline' 'unsafe-eval' data:; 1
default-src 'self' *.vimeo.com; script-src *.leady.com *.vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net 'self' 'unsafe-eval' 'unsafe-inline' https://connect.facebook.net https://maps.google.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com https://tagmanager.google.com https://cdn.ravenjs.com https://maps.googleapis.com https://api.usersnap.com https://cdn.usersnap.com https://img.en25.com https://*.t.eloqua.com; img-src 'self' data: https://*.googleapis.com https://www.googletagmanager.com https://maps.google.com https://www.facebook.com https://browser-update.org https://www.google-analytics.com https://csi.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://cdn.usersnap.com https://*.t.eloqua.com; style-src 'self' 'unsafe-inline' *.vimeocdn.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn.usersnap.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' *.leady.com *.vimeo.com https://sentry.io https://www.google-analytics.com  https://www.facebook.com https://api.usersnap.com https://*.eloqua.com; frame-src *.vimeo.com https://www.youtube.com https://www.facebook.com https://www.googletagmanager.com https://www.google.com/recaptcha/; child-src 'self' *.vimeo.com *.vimeocdn.com www.youtube.com 1
block-all-mixed-content; default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; 1
frame-ancestors 'self' *.thornburg.com 1
default-src 'self' data: *.coop.co.uk s3-eu-west-1.amazonaws.com s3.amazonaws.com coop-pub2-dev-development-s3-ssn.s3-eu-west-1.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.coop.co.uk cdn.embedly.com *.ensighten.com *.google-analytics.com *.youtube.com *.ytimg.com *.facebook.net *.twitter.com s3-eu-west-1.amazonaws.com s3.amazonaws.com coop-pub2-dev-development-s3-ssn.s3-eu-west-1.amazonaws.com *.cloudfront.net cdn.polyfill.io *.algolia.net assets.digital.coop.co.uk optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com *.smartsurvey.co.uk assets.adobedtm.com https://www.googletagmanager.com *.doubleclick.net; style-src * 'unsafe-inline'; img-src 'self' data: *.ensighten.com images.contentful.com images.ctfassets.net www.google-analytics.com www.facebook.com *.cloudfront.net *.twitter.com *.doubleclick.net assets.digital.coop.co.uk www.google.com adservice.google.com https://cm.everesttech.net https://dpm.demdex.net *.google.co.uk *.google.ie secure.adnxs.com storage.googleapis.com; font-src 'self' s3-eu-west-1.amazonaws.com s3.amazonaws.com assets.digital.coop.co.uk; media-src *; object-src youtube.com vimeo.com; frame-src 'self' https://youtube.com https://www.youtube.com https://vimeo.com *.doubleclick.net *.facebook.com fusiontables.google.com https://google.com https://www.google.com *.smartsurvey.co.uk ash-coopcreatecase.cs88.force.com; connect-src api.cls.digital.coop.co.uk/webleads *.algolia.net *.algolianet.com https://api.autoaddress.ie/2.0/getGBPostcodeData https://api-staging-coop.foodieservices.com/v1/dts/places-nearby *.google-analytics.com; 1
frame-src 'self' blob: *.cochlear.cloud *.stg.cochlear.cloud  *.cochlear.cloud *.qualaroo.com *.simpli.fi https://marvelapp.com *.livechatinc.com *.doubleclick.net *.wufoo.com *.cochlearamericas.com *.youtube-nocookie.com *.marvelapp.com *.linkedin.com *.cvent.com *.google.ch *.cochlear.com *.irmau.com *.marketo.com *.youtube.com *.twitter.com *.addthis.com *.google.com *.facebook.com *.batchgeo.com; child-src 'self' blob: *.batchgeo.com *.addtoany.com *.doubleclick.net *.cochlear.com *.addthis.com *.google.com *.facebook.com *.twitter.com  *.marketo.com ; connect-src 'self' *.yimg.com *.doubleclick.net *.marketo.com *.swiftype.com *.onelink-translations.com *.nekudo.com *.cochlear.com *.cvent.com *.linkedin.com *.google-analytics.com *.googleapis.com *.optimizely.com *.addthis.com *.mktoresp.com *.twitter.com *.maxmind.com *.geoip-js.com geoip-js.com *.crazyegg.com ; font-src 'self'  'unsafe-inline' 'unsafe-eval' data: *.cvent-assets.com *.gstatic.com *.googleusercontent.com *.livechatinc.com *.bootstrapcdn.com ; img-src 'self'  'unsafe-inline' 'unsafe-eval' data: *.quora.com *.pubmatic.com *.rubiconproject.com *.adtechjp.com *.yahoo.com * bidswitch.net *.adap.tv *.adnxs.com *.rlcdn.com *.openx.net *.adroll.com *.casalemedia.com *.t.co *.datatables.net *.cochlear.com *.quantserve.com *.marketo.com *.bing.com *.steelhousemedia.com *.adsrvr.org *.adsymptotic.com *.android.com *.youtube.com *.visualwebsiteoptimizer.com *.cochlear.com *.googletagmanager.com *.teads.tv *.impact-ad.jp *.yahoo.co.jp *.impact-ad.jp *.outbrain.com *.amazonaws.com *.google.com.au  *.google.com *.twitter.com *.doubleclick.net *.facebook.com *.linkedin.com *.google-analytics.com medialead.de; script-src 'self'  'unsafe-inline' 'unsafe-eval' blob: *.yahoo.com *.taboola.com *.adsrvr.org *.yimg.com *.onetrust.com *.cookielaw.org *.windows.net *.qualaroo.com *.simpli.fi *.salesforceliveagent.com *.amazonaws.com *.gstatic.com *.quantcount.com *.cvent-assets.com *.cvent.com *.quora.com *.livechatinc.com *.typekit.com *.dialogtech.com *.cloudfront.net *.media6degrees.com *.quora.com *.wufoo.com *.zendesk.com *.domdex.com *.adroll.com  *.datatables.net *.quantserve.com *.ads-twitter.com *.steelhousemedia.com *.bing.com  *.ads-twitter.com *.steelhousemedia.com *.bing.com adroll.com *.outbrain.com *.addtoany.com *.visualwebsiteoptimizer.com *.jquery.com *.optimizely.com *.google.com.au *.doubleclick.net *.googleadservices.com *.yimg.jp *.yahoo.co.jp *.crazyegg.com *.mktoweb.com *.cochlear.com  *.bootstrapcdn.com *.cloudflare.com *.cochlear.com *.jsdelivr.net *.addthisedge.com *.google.com *.ytimg.com *.youtube.com *.marketo.net *.marketo.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.twitter.com *.facebook.com *.facebook.net *.linkedin.com *.addthis.com *.maxmind.com *.geoip-js.com geoip-js.com medialead.de; style-src 'self'  'unsafe-inline' 'unsafe-eval' *.cookielaw.org *.windows.net *.cvent-assets.com *.googleapis.com *.cloudflare.com *.cochlear.com *.google.com *.zendesk.com *.datatables.net *.jquery.com *.cochlear-europe.com *.bootstrapcdn.com *.marketo.com; 1
script-src 'self' 'unsafe-inline' https://www.pluscard.de/; frame-ancestors 'self' https://www.s-id-check.de/ https://www.mein-transakt.de/ https://www.pluscard.de/ 1
frame-ancestors 'self';default-src https: data: 'unsafe-eval' 'unsafe-inline' https://pagead2.googlesyndication.com/ ; img-src * data: blob:; script-src * 'unsafe-eval' 'unsafe-inline' 'self' https://pagead2.googlesyndication.com/ 1
default-src 'self' 'unsafe-inline' wss://*.zopim.com http://*.singleinterface.com *.zopim.com *.netcoresmartech.com https:; img-src http://www.skodalive.in/ http://www.skodalive.co.in/ 'self' data: http://*.singleinterface.com http://*.google-analytics.com http://gaadicdn.com https: *.gstatic.com *.google-analytics.com *.ytimg.com *.googleapis.com blob:; object-src 'self' http://*.singleinterface.com https:; script-src http://www.skodalive.in/ http://www.skodalive.co.in/ 'self' 'unsafe-eval' *.mapmyindia.com *.google.com http://*.singleinterface.com *.jquery.com *.google-analytics.com assets.adobedtm.com fbexternal-a.akamaihd.net *.netcore.co.in *.crazyegg.com *.netcoresmartech.com 'unsafe-inline' *.googleapis.com *.gstatic.com https: blob:;style-src http://www.skodalive.in/ http://www.skodalive.co.in/ 'unsafe-inline' 'self' http://*.singleinterface.com maxcdn.bootstrapcdn.com https: *.googleapis.com *.gstatic.com; font-src http://www.skodalive.in/ http://www.skodalive.co.in/ data: http://*.singleinterface.com 'self' maxcdn.bootstrapcdn.com https: *.googleapis.com *.gstatic.com  1
script-src 'self' 'unsafe-inline' 'unsafe-eval' files.gpxpl.us pagead2.googlesyndication.com https://pagead2.googlesyndication.com www.google-analytics.com www.gstatic.com gpxplus.s3-website-us-west-2.amazonaws.com https://gpxplus.s3.amazonaws.com https://apis.google.com platform.twitter.com https://platform.twitter.com static.gpx.plus https://static.gpx.plus ap.lijit.com * 1
default-src 'self' https://stats.g.doubleclick.net https://npci.corover.mobi https://fonts.gstatic.com https://*.facebook.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com; font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com; img-src 'self' https://coroverbackendstorage.blob.core.windows.net https://uiresource.blob.core.windows.net 'unsafe-inline' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://*.facebook.com https://www.google.com/recaptcha/; script-src 'self' https://*.facebook.com https://*.facebook.net https://ajax.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://npci.corover.mobi 'unsafe-inline'; frame-src 'self' https://npci.corover.mobi/npci https://*.youtube.com https://www.google.com/recaptcha/; 1
default-src https:; script-src 'unsafe-inline' https: blob: 'unsafe-eval'; style-src 'unsafe-inline' https:; img-src data: https:; font-src https: data: 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: about: *.ads-twitter.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.jotfor.ms *.jotform.com *.jotform.io *.jotform.us *.jotformpro.com *.multiview.com *.paypal.com *.paypalobjects.com *.texmed.org *.twimg.com *.twitter.com *.unitednetworksofamerica.com *.yahooapis.com *.zkcdn.net code.jquery.com https://t.co https://feed.jquery-plugins.net *.unitednetworksofamerica.com; frame-src 'self' *; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' tagmanager.google.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com static.hotjar.com script.hotjar.com ajax.googleapis.com services.postcodeanywhere.co.uk dl.episerver.net maps.google.com maps.googleapis.com www.google.com www.gstatic.com api.reciteme.com vo.msecnd.net *.vo.msecnd.net cdn.botframework.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fast.fonts.net services.postcodeanywhere.co.uk fonts.googleapis.com fonts.gstatic.com api.reciteme.com; frame-src 'self' vars.hotjar.com www.youtube.com www.google.com api.reciteme.com; connect-src 'self' in.hotjar.com vc.hotjar.io services.postcodeanywhere.co.uk api.reciteme.com https://enw-geo.mandogroup.com:8443 https://geoserver.enwl.co.uk:8443 directline.botframework.com wss://directline.botframework.com https://www.google-analytics.com/ https://dc.services.visualstudio.com/ wss://ws1.hotjar.com/api/v1/client/ws; img-src 'self' data: www.google-analytics.com maps.gstatic.com maps.google.com api.reciteme.com pbs.twimg.com script.hotjar.com https://enw-geo.mandogroup.com:8443 https://geoserver.enwl.co.uk:8443 bot-azd-chatdev01-uks.azurewebsites.net bot-azd-chatci01-uks.azurewebsites.net bot-azd-chatqa01-uks.azurewebsites.net bot-azr-chatuat01-uks.azurewebsites.net bot-azp-chatprod01-uks.azurewebsites.net http://t0.ads.astuntechnology.com; font-src 'self' fonts.gstatic.com api.reciteme.com script.hotjar.com; media-src 'self' api.reciteme.com 1
frame-ancestors 'self' https://*.flemingcollege.ca https://*.flemingc.on.ca; default-src *; font-src *;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
upgrade-insecure-requests; default-src 'self'; child-src 'self' https://players.brightcove.net/ *.bfbs.com *.linkedin.com *.youtube.com *.facebook.com https://twitter.com; connect-src 'self' https://edge.api.brightcove.com https://secure.brightcove.com https://f1.media.brightcove.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https://metrics.brightcove.com https://f1.media.brightcove.com https://ping.chartbeat.net/ https://www.google-analytics.com https://www.googletagmanager.com https://googletagmanager.com https://www.tagmanager.google.com https://tagmanager.google.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.gstatic.com https://cdn.cookielaw.org optanon.blob.core.windows.net px.ads.linkedin.com *.linkedin.com *.google.com *.google.co.uk; media-src 'self' https://f1.media.brightcove.com blob: https://secure.brightcove.com; object-src 'self' https://brightcove.net; script-src 'self' 'unsafe-inline' https://code.jquery.com https://www.tagmanager.google.com https://tagmanager.google.com https://www.googletagmanager.com https://googletagmanager.com https://www.google-analytics.com https://players.brightcove.net https://vjs.zencdn.net https://ajax.cloudflare.com https://static.cloudflareinsights.com https://cdn.cookielaw.org https://optanon.blob.core.windows.net https://geolocation.onetrust.com *.licdn.com blob:; style-src 'self' 'unsafe-inline' https://cdn.cookielaw.org https://optanon.blob.core.windows.net https://tagmanager.google.com https://fonts.googleapis.com; frame-ancestors 'none'; report-uri https://bfbs.report-uri.com/r/d/csp/enforce 1
default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: 'unsafe-eval' *.actian.com *.wpengine.com; connect-src *; font-src * data:; media-src * 'unsafe-inline'; frame-ancestors *.actian.com; frame-src *; object-src * data: 'unsafe-eval' 1
connect-src 'self' https: itms-services:; default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: https://media.synergy.com.sg; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://maps.googleapis.com; style-src 'self' https: 'unsafe-inline'; report-uri https://o98279.ingest.sentry.io/api/266414/security/?sentry_key=3cdf4f4025db433e9c4ddca0518c128b 1
default-src 'self' frame-ancestors *.jinmajia.com style-src 'self' 'unsafe-inline' *.jinmajia.com; 1
frame-ancestors https://*.ionos.com https://*.ionos.at https://*.ionos.co.uk https://*.ionos.de https://*.ionos.es https://*.ionos.fr https://*.ionos.it https://*.ionos.ca https://*.ionos.mx https://*.ionos.us https://*.website-editor.net https://*.mywebsite-editor.com www.ams-automation.de 1
default-src 'self' *.force.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com *.google-analytics.com *.googletagmanager.com https://www.gstatic.com *.force.com *.salesforce.com *.salesforceliveagent.com; connect-src 'self' *.force.com; img-src 'self' *.google-analytics.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.google.com https://www.gstatic.com *.force.com; font-src 'self' https://fonts.gstatic.com data:; object-src 'none'; 1
report-uri //csp.merlion.ru:8080/report/213382566580540246/; connect-src *.google-analytics.com http://*.yandex.ru https://mc.yandex.ru https://connect.facebook.net https://vk.com 'self' ; child-src 'none' ; font-src static.lc-group.ru 'self' ; form-action https://www.facebook.com http://cp.unisender.com https://cp.unisender.com 'self' ; frame-ancestors webvisor.com *.webvisor.com ; frame-src https://*.facebook.com https://*.youtube.com *.youtube.com https://*.yandex.ru http://*.yandex.ru ; img-src https://img.youtube.com *.merlion.ru *.pcm.ru static.lc-group.ru pcm.ru *.google-analytics.com *.yandex.net *.yandex.ru data: https://*.yandex.net https://*.yandex.ru 'self' https://vk.com https://*.facebook.com; media-src static.lc-group.ru ; object-src static.lc-group.ru *.pcm.ru 'self' ; script-src https://vk.com https://connect.facebook.net static.lc-group.ru *.pcm.ru https://*.yandex.ru *.google-analytics.com *.yandex.ru https://yastatic.net https://yandex.ru https://*.google-analytics.com 'self' 'unsafe-eval' ; style-src static.lc-group.ru *.pcm.ru 'unsafe-inline' 'self' ; default-src 'none' ; strict-mixed-content-checking; reflected-xss filter; referrer origin-when-cross-origin; 1
default-src * blob: 'self' data: 'unsafe-inline' 'unsafe-eval' https:; 1
default-src 'self' 'unsafe-inline' sc-static.net 'unsafe-eval' *.arcot.com *.realexpayments.com *.adnxs.com *.w3.org *.snapchat.com *.spotify.com *.jobillico.com *.tecnic.ca *.youtube.com *.youtu.be *.vimeo.com *.google.ca *.google.com *.gstatic.com *.googleapis.com *.google-analytics.com *.g.doubleclick.net *.googletagmanager.com *.googleadservices.com *.facebook.com *.facebook.net *.hpjcc.com *.bootstrapcdn.com 1
frame-src 'none' 1
default-src 'self'; script-src 'self' https://code.jquery.com https://www.google.com https://maxcdn.bootstrapcdn.com 'unsafe-inline' https://cdnjs.cloudflare.com 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com; img-src 'self' https://www.google-analytics.com https://c0.froala.com data: blob:; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://stackpath.bootstrapcdn.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://www.youtube.com https://www.google.com; connect-src 'self' https://apis.google.com; object-src 'self'  1
style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com;; font-src 'self' https://fonts.googleapis.com https://use.typekit.net https://cdnjs.cloudflare.com https://fonts.gstatic.com;; 1
default-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self'; object-src 'none'; base-uri 'self' 1
default-src * 'unsafe-inline' 'unsafe-eval'; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; report-uri /csp/reporting/add; 1
default-src * self blob: data: gap:; style-src * self 'unsafe-inline' blob: data: gap:; script-src * 'self' 'unsafe-eval' 'unsafe-inline' blob: data: gap:; object-src * 'self' blob: data: gap:; img-src * self 'unsafe-inline' blob: data: gap:; connect-src self * 'unsafe-inline' blob: data: gap:; frame-src * self blob: data: gap:; 1
default-src 'self'; script-src 'self'; connect-src 'self'; img-src 'self' data:; style-src 'self'; 1
default-src 'self' https://www.googletagmanager.com https://optanon.blob.core.windows.net https://ad.enviedebienmanger.fr https://cdnjs.cloudflare.com https://invitation.opinionbar.com https://www.google-analytics.com https://tags.digital-metric.com https://analytics.digital-metric.com https://dgvoua7mh4f9h.cloudfront.net https://www.enviedebienmanger.fr https://5301507.fls.doubleclick.net https://www.google.com https://www.google.fr https://tbl.tradedoubler.com https://track.effiliation.com https://tagmanager.google.com https://tracker.optin-lead.com https://snakeinteractive.go2cloud.org https://connect.facebook.net https://staticxx.facebook.com https://www.gstatic.com/ https://www.uptilabtest1.com https://track.actiplay-network.com https://7890636.fls.doubleclick.net https://www.youtube.com https://extl.ebtrk1.com https://7950743.fls.doubleclick.net https://7972514.fls.doubleclick.net https://7965989.fls.doubleclick.net https://geolocation.onetrust.com https://contact.president.fr https://kwptg.kantarworldpanel.fr https://fonts.gstatic.com https://tracker.mailomedia-tracking.com https://swrap.tradoubler.com https://cdn.cookielaw.org https://www.dwin1.com https://www.awin1.com https://www.zenaps.com https://the.sciencebehindecommerce.com https://static.criteo.net https://mobile.mng-ads.com https://sslwidget.criteo.com https://gum.criteo.com; frame-src 'self' https://5301507.fls.doubleclick.net https://tagmanager.google.com https://tracker.optin-lead.com https://snakeinteractive.go2cloud.org https://www.google.fr https://www.google.com/ https://track.actiplay-network.com https://7890636.fls.doubleclick.net https://www.youtube.com https://extl.ebtrk1.com https://7950743.fls.doubleclick.net https://7972514.fls.doubleclick.net https://cdn.cookielaw.org https://7965989.fls.doubleclick.net https://geolocation.onetrust.com https://contact.president.fr https://www.jeu-enviedebienmanger.fr https://www.dwin1.com https://www.awin1.com https://www.zenaps.com https://the.sciencebehindecommerce.com blob:; img-src 'self' https://www.googletagmanager.com https://optanon.blob.core.windows.net https://ad.enviedebienmanger.fr https://cdnjs.cloudflare.com https://invitation.opinionbar.com https://www.google-analytics.com https://tags.digital-metric.com https://analytics.digital-metric.com https://dgvoua7mh4f9h.cloudfront.net https://stats.g.doubleclick.net https://5301507.fls.doubleclick.net https://www.google.com https://tbl.tradedoubler.com https://track.effiliation.com https://tagmanager.google.com https://tracker.optin-lead.com https://snakeinteractive.go2cloud.org https://www.google.fr https://connect.facebook.net https://staticxx.facebook.com https://track.actiplay-network.com https://7890636.fls.doubleclick.net https://www.youtube.com https://extl.ebtrk1.com https://7950743.fls.doubleclick.net https://7972514.fls.doubleclick.net https://7965989.fls.doubleclick.net https://geolocation.onetrust.com https://contact.president.fr data: https://kwptg.kantarworldpanel.fr https://tracker.mailomedia-tracking.com https://swrap.tradoubler.com https://cdn.cookielaw.org https://www.dwin1.com https://www.awin1.com https://www.zenaps.com https://the.sciencebehindecommerce.com https://static.criteo.net https://mobile.mng-ads.com https://sslwidget.criteo.com https://gum.criteo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.enviedebienmanger.fr https://www.googletagmanager.com https://optanon.blob.core.windows.net https://ad.enviedebienmanger.fr https://cdnjs.cloudflare.com https://invitation.opinionbar.com https://www.google-analytics.com https://tags.digital-metric.com https://analytics.digital-metric.com https://dgvoua7mh4f9h.cloudfront.net https://5301507.fls.doubleclick.net https://www.google.com https://tbl.tradedoubler.com https://track.effiliation.com https://www.google.fr https://tagmanager.google.com https://tracker.optin-lead.com https://snakeinteractive.go2cloud.org https://staticxx.facebook.com https://connect.facebook.net https://www.gstatic.com https://track.actiplay-network.com https://7890636.fls.doubleclick.net https://www.youtube.com https://extl.ebtrk1.com https://7950743.fls.doubleclick.net https://7972514.fls.doubleclick.net https://7965989.fls.doubleclick.net https://geolocation.onetrust.com https://contact.president.fr https://tracker.mailomedia-tracking.com https://swrap.tradoubler.com https://cdn.cookielaw.org https://www.jeu-enviedebienmanger.fr https://www.dwin1.com https://www.awin1.com https://www.zenaps.com https://the.sciencebehindecommerce.com https://static.criteo.net https://mobile.mng-ads.com https://sslwidget.criteo.com https://gum.criteo.com; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://optanon.blob.core.windows.net https://ad.enviedebienmanger.fr https://cdnjs.cloudflare.com https://invitation.opinionbar.com https://www.google-analytics.com https://tags.digital-metric.com https://analytics.digital-metric.com https://dgvoua7mh4f9h.cloudfront.net https://www.enviedebienmanger.fr https://5301507.fls.doubleclick.net https://www.google.com https://tbl.tradedoubler.com https://track.effiliation.com https://tagmanager.google.com https://tracker.optin-lead.com https://snakeinteractive.go2cloud.org https://www.google.fr https://www.gstatic.com/ https://track.actiplay-network.com https://7890636.fls.doubleclick.net https://www.youtube.com https://extl.ebtrk1.com https://7950743.fls.doubleclick.net https://7972514.fls.doubleclick.net https://7965989.fls.doubleclick.net https://geolocation.onetrust.com https://contact.president.fr https://fonts.googleapis.com https://tracker.mailomedia-tracking.com https://swrap.tradoubler.com https://cdn.cookielaw.org https://www.dwin1.com https://www.awin1.com https://www.zenaps.com https://the.sciencebehindecommerce.com https://static.criteo.net https://mobile.mng-ads.com https://sslwidget.criteo.com https://gum.criteo.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net; 1
frame-ancestors 'self' https://page-preview.instapage.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.google.com/recaptcha/ *.gstatic.com/recaptcha/ maps.googleapis.com fonts.googleapis.com fonts.gstatic.com use.typekit.net *.google.com/maps/embed *.youtube-nocookie.com *.cloudflare.com *.yumpu.com cdn.ampproject.org *.zwetschke.de; img-src 'self' data: *.google.com/recaptcha/ *.gstatic.com/recaptcha/ maps.googleapis.com fonts.googleapis.com fonts.gstatic.com use.typekit.net *.google.com/maps/embed *.youtube-nocookie.com *.cloudflare.com *.yumpu.com cdn.ampproject.org *.zwetschke.de 1
script-src 'self' 'unsafe-eval' 'translate.googleapis.com' 'sha256-2dEsWoJ+jPm8icdeutF+h4u2IrbmF29Gy85oA3Jsy4k=' 'sha256-leuWwDIR//H/ZDuFlls1sqS9nLlAHHVn/8olars9rwk=' 'sha256-JeWbh0DatVbnZhQNBSXTdn1mQkTkdb72YVLCn8c2k88=' 'sha256-Wlaq8xLchFJCDdSZp0X4WYusrmrGRuSnYjd7W9L+kVY=' 'sha256-wXjhQ1fDvcsmAcbtndDTzBItpzm+HKl+33JrbwZj0/E=' 'sha256-j4U3jv4FJtpKFjcavhwKHlmJjwj75nnuWJQEJom5a1o=' 'sha256-A68UzqNSwJipNKTX2HZ4tFiPG/MmPDYZkNNuKHYXUN0=' 'sha256-k8Kx+oSRaLZ+X7/r67j0Mow6bzS2pemyX++9YAOg3BU=' 'sha256-97Yxj9Bn2Px89Hzj5rEKaTO4PeSaDE+Qu/JQNs8sPuI=' 'sha256-qTQGoeFG9jgGbi/t6r1PejF+7f/Bqw2o1/1Vp4c5VrU=' 'sha256-U/hwmTuzr+Kt1MnGsbo2bCExks0TzJ6UvUW2KEYlqKY=' 'sha256-L6groTlHITBOTgbc4YMrhOCqXYRWh3X7PUQnKik9f2c=' 'sha256-YmhO4Gyb3X8i7JZUAzKjaK1WyYCuvv6EBSwHDu1KUsM=' 'sha256-wAu2X7OOqir67tkfuFV+ZlYr3f2WulA2bw5vWbYcdYQ=' 'sha256-ZH9vD5MBwFBtkJh+1ZGgubVnnk1PHOL6vOa/8eaJ2ms=' 'sha256-n9j84FzfSG6hPl+DPCUCZmeuuRhoiQGC9qJALI9yGXc=' 'sha256-r7Hypc4M0Nww+l3q8Q0vSPKpj5EN5T5HufwNt8oYpYc=' 'sha256-ZvnxPmysz5+YzVvjQeZW0WVApWz4H82JQDjShhKy73k='  'sha256-XPHiyPDyu4C+XVB9dLWwkrWHrK1Uyx+SZ15a45HFbQc=' 'sha256-dOi6Kx3uqtQmTSZw5fSiFVa0bO69X8XHjNT20XAgKvw=' 'sha256-gSmC74HBc+Zo8GsZbkoq13Uc6chKlO2u/CDlEclL6hY=' 'sha256-1KGNNbniqHNO7NBXZUDioT/K+van6fVhJzEtxDBfz4U=' 'sha256-+ppgKrgyeEi0hzFPDmfO+bzccmUOm6ifCwANXl2HtTg=' 'sha256-zWSmABROKAvKHsdbiCe1EOCt/VvKcnWxCUN1rrsLt0Q=' 'sha256-Jp3uJUHkdvqRRGpNNsQF8NQybkbwso6vQ0RmRXOW+iY=' 'sha256-vPwFrccY1OuyabyNqSTIZHps9Mhm2K0zl7A7OPv2PGo=' 'sha256-OBoDlUuKqolTB7ck1nyYaqz3sS8WHpGv1IKXKvoQNmM=' 'sha256-z2b+5r4jPe7aDOaEsDkRDMaaRscdu7m+Vq2hM6n2PeQ='  https://* 'nonce-acdjslf678' 'nonce-32432jlkfsdaf' 'nonce-jfsdjlfu907ssss3' 'nonce-jfsdjlfu907fds3' 'sha256-vXYiFXrJhbYM0eK7UYu8DwdSqBZS1odnNdv0Ya/51js=' 'sha256-bFHonhdQdOPFiHU56vtmzsNEH8GFIzuKBtbrEpDkWmc=' 'sha256-0EZqoz+oBhx7gF4nvY2bSqoGyy4zLjNF+SDQXGp/ZrY=' 'sha256-0EZqoz+oBhx7gF4nvY2bSqoGyy4zLjNF+SDQXGp/ZrY=' 'sha256-lk8SzzRhav95DJinJGJacYhFa8J9bTay5smWUFnb6qg=' 'sha256-8njayUM1FuX1aDBngKWKVRN407SAdI2E+j3R8fCdPeU=' 'sha256-WCg1a4AhMGgFRCQG5w+hgG+Q2j8Ygrbd+2dgjByIOIU=' 'sha256-Awu6hl63MCY3jiYHaDclrL7Lic9KcEalXm2o/i3e0v8=' 'sha256-98YrCiNzcgdv0E0hZ++6KN4vAOsolURQC1+nrRJgIeM=' 'sha256-pzGD5RVgDqM0S97YqTUXi62dEhmhoxcR3bp4I2FFYBw=' 'sha256-MammJ3J+TGIHdHxYsGLjD6DzRU0ZmxXKZ2DvTePAF0o=' 'sha256-6iA6WDOL1mgUULZ6GSs2OOfP4eMuu6iI5agxCjK2m2A=' 'sha256-+zzuded9+DHoztKyASJeCkVU0gxvYNWMUIQM7x//CB4=' 'sha256-ldCXMle1JJUAD9eAjLdSuPIgIBcTcBecWlaXs0A2y4M=' 'sha256-9ElgeDIBcqZx5iOQ7lv1merAvpgDoj5gmESHhl7dA3M=' 'sha256-j5jIc9bRDNCmA2kU9dt2/A3wM19xImMcsLpAMb3BCSI=' 'sha256-a2VR/Wq1VPr0+3GRY+lEmAQm7wjwwnDtPpcCPs2zTrw=' 'sha256-/4YlUlisxufO6wbKvYp4xV8Hkzxm85+1Tb31SjmAox0=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' https://translate.google.com https://maps.google.com  https://fonts.googleapis.com https://www.google-analytics.com https://cdn.livechatinc.com https://www.google.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.ywxi.net https://cdn.trustedsite.com https://www.gstatic.com https://secure.livechatinc.com https://code.jquery.com https://maps.gstatic.com https://maps.googleapis.com https://cdn3.devexpress.com https://my.sendinblue.com https://sendinblue.com 'sha256-RhcRBIhVQMo5/4z2dvVAFwTDpNnRGVcr4gpNnDaUs2w=' 'sha256-C79k3NMxL3wVXcbvwq/FYXXG//ZRbN4xY606EWVlCVg=' 'sha256-/Blk7vfXK2clI9zQIsc9Xc+gDSAERVcODnYC0Rtf6FY=' 'sha256-nVFEuXRj3Y9n9gQ7lJEnibDTaFo65F6lJez1EnRq/gE=' 'sha256-FDQDtTfUVbbkTn4hSFEntTrE1VIfcVpX2kcMd3wwQiY=' 'sha256-Wdlqx3pvKGsfvamZ+nsuaoBWkByJApU90eRkdLY1LFE=' 'sha256-TcUB1mzXiQO4GxpTRZ0EMpOXKMU3u+n/q1WrgVIcs1I=' 'sha256-yEwwxPcwe+d6vGN38jr2R9EaiFht3AvF7C3nth4DBhw=' 'sha256-hokqypm8z1XCSS+X5atxgFdZEVDERLeoo/v3fgXKq9Q=' 'sha256-2F+p5DmbitWPjvP1fcmD26DhEKjYNcnioxcCu+1klWM=' 'sha256-RjZHEyoj30dwKrZgyMp9pVwQ9gstfVWJDKC4onvjZUY=' 'sha256-Sc3rdzXtRU6yGvVWYMTWGv37gLfm3dIuW7Pq0/6QZ3I=' 'sha256-go7hPNooDbZWiygPojtlbIvi4XGYtUKDxh4BbGvsCxw=' 'sha256-q7X83XmttSo3kZ16ic6123CsuwvhHJdIkmyJwBrLsuI=' 'sha256-8SWmAqUai1Ow5s6YxNOuHqv3NXl2bcWqOrNuDHXjEVE=' 1
frame-ancestors 'self' *.swtue.de swt.sb-sites.com ; 1
default-src 'self';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.css;font-src 'self' https://fonts.gstatic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.js https://connect.facebook.net;connect-src 'self' https://api.raygun.io https://www.google-analytics.com;frame-src 'self' https://www.google.com;img-src 'self' data: https://www.google-analytics.com https://www.facebook.com; 1
policy 1
*://*.ozgurpolitika.com:* 1
default-src 'self' data: https://*.cafebazaar.ir https://*.cafebazaar.cloud https://*.hotjar.com; frame-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cafebazaar.ir https://*.cafebazaar.cloud https://*.hotjar.com https://tagmanager.google.com https://imasdk.googleapis.com https://s0.2mdn.net https://adservice.google.com https://www.google-analytics.com https://www.googletagmanager.com; worker-src 'self' data: blob: https://*.cafebazaar.ir https://*.cafebazaar.cloud https://*.hotjar.com; style-src 'self' data: 'unsafe-inline' https://*.cafebazaar.ir https://*.cafebazaar.cloud https://tagmanager.google.com https://fonts.googleapis.com; img-src * data: blob: android-webview-video-poster:; font-src * data:; connect-src *; media-src * data: blob: blob: https://*.cafebazaar.ir https://*.cafebazaar.cloud; object-src 'none'; upgrade-insecure-requests; block-all-mixed-content; 1
default-src https: self http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com 'unsafe-eval' 'unsafe-inline'; object-src 'self'; img-src https: self data: 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'  wss: blob: data: *.bootstrapcdn.com *.googleapis.com *.googleusercontent.com *.hs-scripts.com *.facebook.net *.fbcdn.net *.bing.com *.diversesolutions.com *.marketleader.com *.google-analytics.com *.optnmstr.com *.cloudflare.com *.gstatic.com *.doubleclick.net *.facebook.com *.wpbeaverbuilder.com *.hs-analytics.net *.hsleadflows.net *.usemessages.com *.hscollectedforms.net *.pagesense.io *.brainstormforce.com *.youtube.com *.vimeo.com *.cusmin.com cusmin.com *.hubspot.com *.optnmnstr.com *.amazonaws.com *.google.com *.hubapi.com *.hsappstatic.net actifymedia.com *.actifymedia.com *.pinterest.com *.helenaevents.com *.twitter.com *.gravatar.com *.ytimg.com *.diverse-cdn.com *.twimg.com *.pubnub.com *.paypalobjects.com *.paypal.com *.singleplatform.co *.singleplatform.com *.mjml.io *.jquery.com *.auth0.com *.ggpht.com *.w.org *.helenaevents.net helenaevents.net *.montanasecretaryofstate.net *.freshdesk.com *.mailchimp.com *.googleadservices.com *.ads-twitter.com *.mailchimp.com *.wp.com *.rapidscansecure.com *.reddit.com *.linkedin.com *.bufferapp.com *.websitedemos.net websitedemos.net *.ultimatebeaver.com *.wpbeaveraddons.com *.squareup.com *.yelpcdn.com *.jsdelivr.net *.heapanalytics.com *.constantcontact.com heapanalytics.com placehold.it *.imgix.net *.convertplug.com *.sumo.com *.sumome.com sumo.com sumome.com *.cloudfront.net *.placeholder.com polyfill.io *.wistia.net *.kxcdn.com *.zoho.com *.zohostatic.com *.zohopublic.com requirejs.org instagram.com *.instagram.com *.cdninstagram.com cdninstagram.com facetwp.com enviragallery.com *.arcgis.com *.fontawesome.com *.stripe.com mautic.net; 1
manifest-src 'self'; base-uri * 1
default-src 'self'; connect-src 'self'; frame-ancestors 'self'; frame-src 'self' 'unsafe-inline' https://maps.google.com/ http://iqit-commerce.com/ https://www.google.com/; worker-src 'self'; object-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ http://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/ https://unpkg.com/; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com/ https://maxcdn.bootstrapcdn.com/; img-src 'self' http://app.1emailing.com/ http://profile.prestashop.com/ https://addons.prestashop.com/ https://ssl.google-analytics.com/ https://*.tile.openstreetmap.fr/ https://*.tile.openstreetmap.org/ https://unpkg.com/ http://placehold.it data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ssl.google-analytics.com/ https://unpkg.com/ https://embed.tawk.to/ https://www.google.com/ https://www.gstatic.com/; 1
default-src 'none' ;report-to csp; report-uri https://report-uri.simplyadmire.com/ ; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google-analytics.com https://f1-eu.readspeaker.com https://include.timeblockr.com/v1/ https://siteimproveanalytics.com/ ;style-src 'self' data: 'unsafe-inline' https://f1-eu.readspeaker.com https://include.timeblockr.com/v1/ ; img-src 'self' data: https://www.google-analytics.com https://eu2.siteimprove.com/ https://f1-eu.readspeaker.com https://include.timeblockr.com/v1/ https://6006049.global.siteimproveanalytics.io ;media-src 'self' https://media-eu.readspeaker.com https://app-eu.readspeaker.com https://rstts-eu.readspeaker.com ; font-src 'self' data: https://include.timeblockr.com/v1/ ; object-src 'self' ;frame-ancestors 'self' https://www.bergen-nh.nl https://www.castricum.nl https://www.uitgeest.nl https://www.heiloo.nl ; frame-src 'self' https://www.bergen-nh.nl https://www.castricum.nl https://www.uitgeest.nl https://www.heiloo.nl https://rstts-eu.readspeaker.com https://app-eu.readspeaker.com https://media-eu.readspeaker.com ; connect-src 'self' https://rstts-eu.readspeaker.com https://media-eu.readspeaker.com https://app-eu.readspeaker.com https://f1-eu.readspeaker.com https://include.timeblockr.com https://shared.api.timeblockr.com https://www.google-analytics.com ;  1
frame-ancestors 'self'; report-uri https://bakerdist.report-uri.com/r/t/csp/enforce 1
report-uri 1
default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://steamcommunity-a.akamaihd.net/ https://steamcdn-a.akamaihd.net/steamcommunity/public/assets/ https://api.steampowered.com/ *.google-analytics.com https://www.google.com https://www.gstatic.com https://apis.google.com https://recaptcha.net https://www.gstatic.cn/recaptcha/; object-src 'none'; connect-src 'self' https://steamcommunity-a.akamaihd.net/ https://store.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ *.google-analytics.com https://*.valvesoftware.com https://*.steambeta.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcastchat.akamaized.net https://broadcast.st.dl.bscstorage.net https://broadcast.st.dl.eccdnx.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://steamvideo-a.akamaihd.net/; frame-src 'self' steam: https://store.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; 1
default-src 'self' *.klauke.com https://*.ridgidapps.com https://*.cybersource.com https://*.bazaarvoice.com www.google-analytics.com www.facebook.com www.google.com data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.klauke.com maps.google.com *.googleapis.com www.googletagmanager.com *.pricespider.com cdnjs.cloudflare.com www.googleadservices.com https://*.bootstrapcdn.com https://*.bazaarvoice.com connect.facebook.net www.google-analytics.com https://googleads.g.doubleclick.net www.youtube.com https://s.ytimg.com https://*.ridgidapps.com www.google.com https://www.gstatic.com https://tagmanager.google.com https://tpc.googlesyndication.com https://img.en25.com blob:;style-src 'self' 'unsafe-inline' *.klauke.com *.googleapis.com https://cloud.typography.com https://*.bazaarvoice.com https://*.bootstrapcdn.com https://*.pricespider.com https://*.ridgid.com https://tagmanager.google.com;img-src 'self' *.klauke.com www.google-analytics.com *.youtube.com www.googletagmanager.com https: data: blob:;frame-src 'self' *.klauke.com www.youtube.com https://bid.g.doubleclick.net https://*.bazaarvoice.com https://www.facebook.com https://orchardproject.net https://www.orchardproject.net https://www.orchardcore.net https://*.cybersource.com www.google.com www.googletagmanager.com https://*.fls.doubleclick.net https://tpc.googlesyndication.com data:;font-src 'self' *.klauke.com fonts.gstatic.com https://cloud.typography.com https://fonts.googleapis.com https://*.bootstrapcdn.com greenlee.com data: 1
child-src 'self' blob:;connect-src 'self' https://www.google-analytics.com https://cdn.polyfill.io facebook.com google-analytics.com cdn.islandsbanki.is https://640islandsbanki.boost.ai;default-src 'self';img-src 'self' data: https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.is *.siteimproveanalytics.io *.gstatic.com *.googleapis.com *.ytimg.com cdn.islandsbanki.is boost-files-general-eu-west-1-prod.s3-eu-west-1.amazonaws.com prismic-io.s3.amazonaws.com isb-website.cdn.prismic.io images.prismic.io t.co;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com https://cdn.islandsbanki.is/;object-src 'none';media-src 'self';manifest-src 'self';script-src 'self' 'unsafe-inline' *.prismic.io maps.googleapis.com https://prismic.io https://www.google.com https://www.youtube.com https://s.ytimg.com https://640islandsbanki.boost.ai https://www.gstatic.com https://siteimproveanalytics.com https://cdn.polyfill.io https://www.google-analytics.com https://connect.facebook.net https://www.google.com https://www.gstatic.com https://www.recaptcha.net/ https://consent.cookiebot.com https://consentcdn.cookiebot.com 'unsafe-eval' https://fill.dropandsign.is https://*.infogram.com 'sha256-YH54gkKoSCguf7XwyHBjeXdm0z7gtwuISqyXjav2ufs=' 'sha256-1gIG1EI7ABKBfq8rVwk7j2MeEOIlut5+TbLxyAnCYTA=' 'sha256-yjbQYTDTGeh83tID7X4P8shfeXu07tD4iLjoMIr+e4w=' 'sha256-qEXb+QLuCAPNTPbZxHzxcXrnG22qOg/k7niD2csPshA=' 'sha256-qGbGScyyPyVW6zjzlc+FXpyfHh9kBv2mDD3qeavhm+g=' 'sha256-gtKFj0yNetpIDkA36Pz+kl6/tx8y2XsLtD/uFt4lUYk=' 'sha256-/OVTBpAiYCQnsUNNhFbtu+DvMdoZmIP29VujidIo7gQ=' 'sha256-4cFcsF0wg+c2o8ebtN0UyYJ+eUB2WN4lNfLtNhFrMOY=' 'sha256-FA7dx6sdwFrVkNcXvOZhbKKYH0F9fTmjG3r8Aelqd/U=' 'sha256-oLUR+Lo2PW63Sv6wLVjS9xNITHouLknhL7taVsq5LkA=' 'sha256-OlAu+nb14/tvTR/ARl1r0WWfsvjRt4DtTcgvtKPn12E=' 'sha256-AbMRibXituKZ/0sePhYI5qZMZY5xjlM+vx+M95gWXhg=' 'sha256-ikYcTQZ5ZdSDFGRMxd7Nzk4olgL4v3dFZigVGZ4Nyfc=' 'sha256-kvLuUu0gbldkoIWcCsicGWJJIo7km4Ka2hZhbmxF9ew=' 'sha256-3TY9Om6NVbkZZkVhfh95kbjLP+x6Tgx5Om2tBRTmmOg=' 'sha256-mGbGbnWys+WQjkr/v68zcXw5O6y8X97qI+UtewXd0yk=';style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com https://fill.dropandsign.is;frame-src https://*.islandsbanki.is https://gamli.islandsbanki.is https://*.islandssjodir.is https://player.vimeo.com https://www.youtube.com https://airtable.com https://consentcdn.cookiebot.com https://www.vib.is https://fill.dropandsign.is https://*.isb.is https://*.infogram.com https://www.google.com https://www.gstatic.com https://isb-website.prismic.io/;worker-src 'self' blob: 1
default-src 'self'; script-src 'self' *.feriascotiabank.com.pe *.lyra.com 'unsafe-inline' 'unsafe-hashes' *; frame-src 'self' https://ws.punto-web.com https://api.lyra.com ; connect-src 'self' *.feriascotiabank.com.pe *.lyra.com *.punto-web.com https://sentry.lyra-network.com ; img-src 'self' https://d1nebb9kcr19m8.cloudfront.net data: ; style-src 'self'  'unsafe-inline' 'unsafe-hashes' *.feriascotiabank.com.pe *.lyra.com https://* ; font-src 'self' 'unsafe-inline' *.feriascotiabank.com.pe https://* data: ; form-action 'self' *.feriascotiabank.com.pe *.lyra.com *.punto-web.com; frame-ancestors 'self' https://*; 1
default-src 'self' 'unsafe-inline'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; object-src https: 1
default-src *.go2tigers.com 'self' 'unsafe-eval' 'unsafe-inline' *.wistia.net *.jquery.com *.googleapis.com *.gstatic.com *.google.com         tigers-web1-staging.azurewebsites.net tigers-web1.azurewebsites.net *.fontawesome.com *.facebook.com *.tawk.to cdnjs.cloudflare.com        cdn.jsdelivr.net *.google-analytics.com gateway.zscaler.net gateway.zscalerthree.net gateway.zscalertwo.net gateway.zscloud.net *.trendmicro.com *.yoast.com *;      form-action 'self';     frame-ancestors 'none'; 1
frame-ancestors 'self' https://www.sapo.pt; block-all-mixed-content; upgrade-insecure-requests; 1
[frame-ancestors] 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: blob:  1
default-src 'self'; style-src 'unsafe-inline' data: *; font-src 'self' data: *.googleapis.com  *.typekit.net fonts.gstatic.com; img-src 'self' data: about: *.youtube.com *.facebook.com *.doubleclick.net *.gstatic.com jbssinc.com *.jbssinc.com *.typekit.net *.google.com *.google-analytics.com *.amazonaws.net *.amazon-adsystem.com *.amazonaws.com placeholdit.co *.placeholdit.co; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.facebook.net *.facebook.com *.googletagmanager.com tagmanager.google.com tagmanager.google.com *.google-analytics.com *.googleapis.com *.typekit.net cdn.polyfill.io cdnjs.cloudflare.com digitalhub.atlassian.net; frame-src 'self' *; media-src 'self' *.youtube.com *.youtu.be; connect-src 'self' * 1
frame-ancestors 'self' *.epublishmerck.com facebook.com; 1
upgrade-insecure-requests; default-src 'self' data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.callrail.com *.googletagmanager.com *.gstatic.com *.jotfor.ms *.jotform.com *.instagram.com *.cloudflare.com *.googleapis.com *.google.com *.pinterest.com *.sharethis.com *.bootstrapcdn.com *.facebook.net *.doubleclick.net *.googleadservices.com *.google-analytics.com; img-src 'self' data: *.gstatic.com *.sharethis.com theeventscalendar.com *.googleapis.com *.jotform.com *.jotfor.ms bmediatest.com *.w.org *.gravatar.com *.pinimg.com *.cdninstagram.com *.googletagmanager.com *.google-analytics.com *.facebook.com *.google.com *.bootstrapcdn.com; style-src 'unsafe-inline' 'self' *.google.com *.jotfor.ms *.googleapis.com *.fontawesome.com *.bootstrapcdn.com; font-src 'self' data: *.gstatic.com *.fontawesome.com *.bootstrapcdn.com; frame-src 'self' *.instagram.com *.jotform.us *.jotformpro.com *.giphy.com *.facebook.com *.brightcove.net *.vimeo.com *.hulu.com *.imdb.com *.clubautomation.com *.youtube.com *.googleapis.com *.google.com *.consensu.org *.jotform.com *.facebook.com *.doubleclick.net; connect-src 'self' *.callrail.com *.facebook.com *.google.com *.sharethis.com *.consensu.org *.google-analytics.com yoast.com; base-uri 'self'; form-action 'self' *.constantcontact.com *.facebook.com; object-src 'self' *.facebook.com; frame-ancestors 'none' 1
object-src 'none'; script-src 'nonce-65175fb56101c91bccc84efbcffe6c32' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; 1
default-src 'none';script-src 'self' https://info.anchor.com.au https://pi.pardot.com https://code.jquery.com https://hostopia.bamboohr.com https://www.google.com https://www.gstatic.com https://digitalpacificgroup.formstack.com https://static.formstack.com https://ajax.googleapis.com https://analytics.formstack.com data: blob: 'unsafe-inline' 'unsafe-eval';style-src 'self' https://fonts.googleapis.com https://hostopia.bamboohr.com https://static.formstack.com 'unsafe-inline';img-src 'self' https://resources.bamboohr.com blob: 'unsafe-inline' data: 'unsafe-inline';font-src 'self' https://fonts.gstatic.com https://themes.googleusercontent.com https://static.formstack.com data: blob: 'unsafe-inline';frame-src https://www.google.com 'self';connect-src 'self' https://hostopia.bamboohr.com https://www.google.com; 1
default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline';object-src 'self';base-uri 'self' 1
default-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.bunrattycastle.ie https://www.craggaunowen.ie https://www.dunguairecastle.com https://www.gpowitnesshistory.ie https://www.kingjohnscastle.com https://www.knappoguecastle.ie https://www.malahidecastleandgardens.ie https://www.newbridgehouseandfarm.com https://www.shannonheritage.com https://www.modelrailwaymuseum.ie data: https://*.facebook.net https://*.facebook.com https://*.hotjar.com https://*.bing.com https://*.typekit.net https://stats.g.doubleclick.net https://translate.google.com https://translate.googleapis.com https://www.google-analytics.com https://www.google.co.uk https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://dev.visualwebsiteoptimizer.com https://*.crazyegg.com https://*.youtube.com https://*.youtu.be https://youtu.be https://cookie-cdn.cookiepro.com https://*.instagram.com https://*.cdninstagram.com; 1
default-src 'self' 'unsafe-inline' blob: data: *.elastic.co https://cesium.com https://*.cesium.com *.tiles.mapbox.com *.unity3d.com *.iteos.de *.jrc.ec.europa.eu www.draw.io https://cesiumjs.org https://*.cesiumjs.org *.bkg.bund.de *.gdi-de.org *.geodatenkatalog.de http://*.geodatenzentrum.de *.geodatenzentrum.de *.geoportal.de *.iers.org *.stagn.de *.stagn.org; font-src 'self' data: maxcdn.bootstrapcdn.com fonts.gstatic.com cdn.jsdelivr.net; frame-ancestors 'self' *.bkg.bund.de http://kibana.geoportal.dev.ffm.gdi-de.org *.gdi-de.org *.geodatenkatalog.de *.geodatenzentrum.de *.geoportal.de *.iers.org *.stagn.de *.stagn.org; img-src 'self' blob: data: http: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: maxcdn.bootstrapcdn.com cdnjs.cloudflare.com https://cesium.com https://*.cesium.com ajax.googleapis.com www.google.com code.jquery.com cdn.datatables.net https://cesiumjs.org https://*.cesiumjs.org openlayers.org *.bkg.bund.de *.gdi-de.org *.geodatenkatalog.de *.geodatenzentrum.de *.geoportal.de *.iers.org *.stagn.de *.stagn.org; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com fonts.googleapis.com unpkg.com cdn.datatables.net cdn.jsdelivr.net *.bkg.bund.de *.gdi-de.org *.geodatenkatalog.de *.geodatenzentrum.de *.geoportal.de *.iers.org *.stagn.de *.stagn.org; report-uri https://ktkymjds.uriports.com/reports/report; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ssl.google-analytics.com https://www.registrationservices.gov.kh https://connect.facebook.net https://www.google.com https://www.gstatic.com; img-src 'self' https://ssl.google-analytics.com https://s-static.ak.facebook.com https://www.registrationservices.gov.kh https://registrationservices.gov.kh; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.registrationservices.gov.kh https://registrationservices.gov.kh; font-src 'self' https://fonts.gstatic.com https://themes.googleusercontent.com data:; frame-src https://www.registrationservices.gov.kh https://www.facebook.com https://s-static.ak.facebook.com https://registrationservices.gov.kh https://youtube.com https://www.youtube.com https://www.google.com; object-src 'none' 1
default-src * 'unsafe-inline' 'unsafe-eval'; worker-src blob:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * intent:; child-src * blob:; frame-ancestors *; style-src * 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 1
default-src 'self'; frame-src 'unsafe-inline' 'self' https://www.google.com/recaptcha/; img-src 'unsafe-inline' 'self' *.google-analytics.com data:; object-src 'none'; script-src https://www.gstatic.com/recaptcha/ 'unsafe-inline' 'self' https://www.google.com/recaptcha/ 'unsafe-eval'; style-src 'unsafe-inline' 'self'; form-action *; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://static.criteo.net https://*.criteo.com https://player.vimeo.com https://*.translate.naver.net https://*.akamaihd.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.sciencebehindcommerece.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.parcellab.com https://ct.pinterest.com; default-src 'none'; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.exantediet.com https://m.exantediet.com https://checkout.exantediet.com https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://*.criteo.com https://static.criteo.net https://s.trustpilot.com https://*.microsofttranslator.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.akamaihd.net https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://s.pinimg.com; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com *.google-analytics.com *.googleapis.com/ *.facebook.net *.holdmyticket.com https://ajax.googleapis.com https://www.google.com/recaptcha/api.js *.gstatic.com *.vimeo.com *.google.com *.googleadservices.com; object-src 'self'; frame-ancestors 'self'; form-action 'self' 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.3ds.com *.solidworks.com *.rainfocus.com cdn.contentful.com *.ctfassets.net *.youtube.com *.jquery.com *.bootstrapcdn.com; 1
default-src 'self' https://z-p3-graph.facebook.com https://d21894huws9hvv.cloudfront.net/ https://ipinfo.io/  https://www.google-analytics.com/ https://z-m-graph.facebook.com/ https://graph.facebook.com/ https://www.facebook.com/ https://ookaaz.com/ https://www.ookaaz.com/ https://firebaseinstallations.googleapis.com/ https://fcmregistrations.googleapis.com/ data:  blob:; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline'; script-src 'self' https://connect.facebook.net/ 'unsafe-inline' 'unsafe-eval' https://d21894huws9hvv.cloudfront.net/ https://www.google.com/ https://maps.googleapis.com/ https://www.gstatic.com/ https://platform-api.sharethis.com/ https://buttons-config.sharethis.com/ https://apis.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/; font-src 'self' https://fonts.googleapis.com/ https://fonts.gstatic.com/   data:; img-src 'self'  https://www.googletagmanager.com https://khms0.googleapis.com https://khms1.googleapis.com https://lh3.googleusercontent.com/ https://platform-lookaside.fbsbx.com/ https://graph.facebook.com/ https://www.facebook.com/ https://ookaaz.com/ https://www.ookaaz.com/ https://maps.googleapis.com/ https://maps.gstatic.com/ https://www.google-analytics.com/ https://ookaaz.s3-us-west-2.amazonaws.com/ https://d21894huws9hvv.cloudfront.net/ blob: data:;frame-src 'self' https://accounts.google.com/ https://www.google.com/ https://c.sharethis.mgr.consensu.org/ 1
default-src 'self' 'unsafe-inline' wss://*.purechat.com *.amazonaws.com *.purechatcdn.com *.purechat.com *.chase.com *.chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay.com *.googleadservices.com *.google-analytics.com *.schemaapp.com *.googletagmanager.com *.doubleclick.net *.youtube.com *.gstatic.com *.googleapis.com *.google.com; style-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; report-uri /error/csp-violation 1
frame-ancestors 'self' https://intranat.jarfalla.se/; 1
default-src 'self' *.ctctcdn.com *.google.com *.constantcontact.com *.gstatic.com maps.googleapis.com *.usersnap.com *.google-analytics.com; script-src 'self' 'unsafe-inline' *.ctctcdn.com *.google.com *.gstatic.com cdnjs.cloudflare.com maps.googleapis.com *.usersnap.com cdn.rawgit.com *.googletagmanager.com *.google-analytics.com; style-src 'self' 'unsafe-inline' *.typekit.net *.ctctcdn.com fonts.googleapis.com cdnjs.cloudflare.com *.bootstrapcdn.com; img-src 'self' data: maps.googleapis.com maps.gstatic.com *.usersnap.com raw.githubusercontent.com cdn.rawgit.com *.google-analytics.com *.googletagmanager.com; frame-src 'self' *.youtube.com *.google.com; font-src 'self' *.typekit.net fonts.gstatic.com *.bootstrapcdn.com; report-uri /report-csp-violation 1
default-src * 'self' data: blob:k https: 'unsafe-inline' 'unsafe-eval' 1
default-src 'self' 5porno.pro *.5porno.pro *.5porno.tv *.5porno.net megabc.info https://fex.net *.fcdn.net *.kxcdn.com *.fex.net *.pljs.ru *.cdnbmb.com gcvbmb.com https://n161adserv.com *.advertserve.com advrich.com *.bannersvideo.com prfctmney.com chsrkred.com mikellli.com jmpmedia.club jmpmedia.info bmrdrct.best ggbuy.info bigbonga.com bmrdrct.info razdvabm.com *.cdnkimg.com gcvbmb.com cdnbmb.com jumpbmb.com cdn-r02.cdnbmb.com cdn-r01.cdnbmb.com iconcnd.net dzubavstal.com kokorzabil.com messiupal.com aj1616.online *.sem-vosem.com *.converteam.net *.aj1616.online protovid.com *.protovid.com trifandvid.com *.trifandvid.com bigoff.info bcnewltd.club bctwe.com primebc1.website *.xcvgdf.party *.n161adserv.com ajx161.online bannersvideo.com u2bmco.com orjzy.com mibmcbm.com afd.iwad.ru syndication.exosrv.com bestrrd.com jmpmedia.club *.trfmxt.com protovid.com *.protovid.com mtrcss.com 11flexiblebig9.website mtrcdn.com zrlcr.com *.traffic8.net *.aserverstats.com *.traffer.biz *.traffer.net *.cdn12.com *.zerocdn.com *.vids69.com http://counter.rambler.ru my2.imgsmail.ru www.gstatic.com https://yandex.ru yandex.st *.yandex.ru pagead2.googlesyndication.com www.youtube.com vk.com cdn.connect.mail.ru *.gstatic.com mc.yandex.ru www.google-analytics.com https://www.google-analytics.com https://apis.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' *.24xxx.me data: 0.gravatar.com http://0.gravatar.com/ 1.gravatar.com http://1.gravatar.com/ an.yandex.ru/count http://an.yandex.ru/count/ favicon.yandex.net http://favicon.yandex.net avatars-fast.yandex.net http://avatars-fast.yandex.net/ vk.com yastatic.net counter.rambler.ru top-fwz1.mail.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com yastatic.net http://yastatic.net/ connect.mail.ru an.yandex.ru www.youtube.com googleads.g.doubleclick.net vk.com userapi.com site.yandex.net yastatic.net https://yastatic.net http://site.yandex.net https://site.yandex.net www.tns-counter.ru *.gstatic.com https://vk.com fonts.googleapis.com mc.yandex.ru *.gstatic.com 1
default-src * blob: data: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.amazonaws.com *.tweak.com *.tweakdesign.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.gstatic.com *.jsdelivr.net *.tawk.to *.lfeeder.com *.crazyegg.com *.hsforms.com *.facebook.net calendly.com *.calendly.com *.licdn.com *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; script-src *.amazonaws.com *.tweak.com *.tweakdesign.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.gstatic.com *.jsdelivr.net *.tawk.to *.lfeeder.com *.crazyegg.com *.hsforms.com *.facebook.net calendly.com *.calendly.com *.licdn.com *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src *.amazonaws.com *.tweak.com *.tweakdesign.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.gstatic.com *.jsdelivr.net *.tawk.to *.lfeeder.com *.crazyegg.com *.hsforms.com *.facebook.net calendly.com *.calendly.com *.licdn.com *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; font-src *.amazonaws.com *.tweak.com *.tweakdesign.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.gstatic.com *.jsdelivr.net *.tawk.to *.lfeeder.com *.crazyegg.com *.hsforms.com *.facebook.net calendly.com *.calendly.com *.licdn.com *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; frame-src *.amazonaws.com *.tweak.com *.tweakdesign.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.gstatic.com *.jsdelivr.net *.tawk.to *.lfeeder.com *.crazyegg.com *.hsforms.com *.facebook.net calendly.com *.calendly.com *.licdn.com *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors *.amazonaws.com *.tweak.com *.tweakdesign.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.gstatic.com *.jsdelivr.net *.tawk.to *.lfeeder.com *.crazyegg.com *.hsforms.com *.facebook.net calendly.com *.calendly.com *.licdn.com *.youtube.com; worker-src *.amazonaws.com *.tweak.com *.tweakdesign.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.gstatic.com *.jsdelivr.net *.tawk.to *.lfeeder.com *.crazyegg.com *.hsforms.com *.facebook.net calendly.com *.calendly.com *.licdn.com *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://local.connectme.us https://d3gcli72yxqn2z.cloudfront.net 1
default-src 'self' charts3.equitystory.com www.google-analytics.com maps.gstatic.com maps.googleapis.com maps.google.com fonts.gstatic.com api.stream24.net hmmh.scnem.com www.w3.org 128.30.52.100; script-src 'self' charts3.equitystory.com www.googletagmanager.com ajax.googleapis.com maps.googleapis.com www.google-analytics.com maps.google.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' charts3.equitystory.com fonts.googleapis.com 'unsafe-inline'; frame-src 'self' www.vtg.de vtg.de www.vtg.com vtg.com charts3.equitystory.com www.google-analytics.com maps.gstatic.com maps.googleapis.com maps.google.com fonts.gstatic.com api.stream24.net www.youtube.com www.youtube-nocookie.com hmmh.scnem.com; img-src 'self' charts3.equitystory.com maps.gstatic.com maps.googleapis.com maps.google.com khms0.googleapis.com khms1.googleapis.com data: www.w3.org 1
default-src 'self'; frame-src 'self' https://connect.trezor.io/* https://connect.trezor.io/; connect-src *; img-src 'self' data:; script-src 'self' 'unsafe-eval' 'sha256-hnF01G4lUcBRBGAqTTfng1Jl9ifL4iDk3r3e9AKUsoU=' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none'; 1
base-uri 'none'; object-src 'none'; script-src https://jvm-gaming.org/logs/ https://jvm-gaming.org/sidekiq/ https://jvm-gaming.org/mini-profiler-resources/ https://jvm-gaming.org/assets/ https://jvm-gaming.org/brotli_asset/ https://jvm-gaming.org/extra-locales/ https://jvm-gaming.org/highlight-js/ https://jvm-gaming.org/javascripts/ https://jvm-gaming.org/plugins/ https://jvm-gaming.org/theme-javascripts/ https://jvm-gaming.org/svg-sprite/; worker-src 'self' https://jvm-gaming.org/assets/ https://jvm-gaming.org/brotli_asset/ https://jvm-gaming.org/javascripts/ https://jvm-gaming.org/plugins/ 1
default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic' script-src * data: blob: 'unsafe-inline' 'unsafe-eval' connect-src * data: blob: 'unsafe-inline' img-src * data: blob: 'unsafe-inline' frame-src * data: blob:  style-src * data: blob: 'unsafe-inline' font-src * data: blob: 'unsafe-inline' 1
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://amasty.com https://www.paypalobjects.com https://*.paypal.com https://googleads.g.doubleclick.net https://*.braintreegateway.com https://*.addthis.com https://*.addthisedge.com https://maps.googleapis.com https://www.google.com https://adservice.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://*.likebtn.com https://*.payments-amazon.com https://payments.amazon.com https://assets.pinterest.com https://pay.google.com https://cdn.b0e8.com/conv_v3.js https://marvel-b2-cdn.bc0a.com/marvel.js https://m2-prod-fy.scdn7.secure.raxcdn.com; style-src 'self' 'unsafe-inline' https://amasty.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://www.google.com https://w.likebtn.com https://m2-prod-fy.scdn7.secure.raxcdn.com; img-src * data:; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://m2-prod-fy.scdn7.secure.raxcdn.com data: blob:; connect-src 'self' https://www.google-analytics.com https://m.addthis.com https://*.sandbox.braintreegateway.com https://*.braintreegateway.com https://stats.g.doubleclick.net https://*.amazonpay.com https://www.zipcodeapi.com https://yoast.com https://*.sandbox.braintree-api.com https://*.braintree-api.com https://payments.amazon.com https://braintree.gene.co.uk https://*.paypal.com https://m2-prod-fy.scdn7.secure.raxcdn.com; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://amasty.com https://assets.braintreegateway.com https://bid.g.doubleclick.net https://payments.amazon.com https://*.addthis.com https://assets.pinterest.com https://*.paypal.com https://pay.google.com https://ssl.kaptcha.com https://tst.kaptcha.com; form-action 'self' https://secure.campaigner.com; report-uri https://nowhealth.report-uri.com/r/d/csp/enforce 1
default-src *;style-src * 'unsafe-inline';script-src * 'nonce-Oym9ZUB4mZad3hRODoP3NXcez28=' 1
frame-ancestors 'self' https://system.erif.pl https://demo.erif.pl https://infokonsument.erif.pl; 1
media-src https://*.lic.co.nz; manifest-src https:; frame-ancestors 'self'; img-src 'self' data: https:; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://*.hotjar.com https://livestream.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:; connect-src 'self' https: https://*.lic.co.nz wss://*.lic.co.nz; default-src 'none'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https://*.cloudfront.net *.googleapis.com https://fonts.gstatic.com https://*.lic.co.nz https://*.hotjar.com 1
default-src 'self';                                                    frame-ancestors 'self' *.staffbase.com;                                                    frame-src 'self' www.google.com www.youtube.com *.facebook.com *.doubleclick.net s7.addthis.com player.vimeo.com;          connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://secure-ds.serving-sys.com;                                                    script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.google-analytics.com www.gstatic.com tracking.aldi-international.com connect.facebook.net *.doubleclick.net www.googleadservices.com googleads.g.doubleclick.net secure-ds.serving-sys.com maps.googleapis.com s7.addthis.com bs.serving-sys.com *.addthisedge.com *.addthis.com www.linkedin.com graph.facebook.com api-public.addthis.com data:;                                                    img-src 'self' www.google-analytics.com stat.aldi.com *.facebook.com tracking.aldi-international.com *.doubleclick.net www.google.com maps.gstatic.com data:;                                                    style-src 'self' 'unsafe-inline'; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://myasstodon.xyz; img-src 'self' https: data: blob: https://myasstodon.xyz; style-src 'self' https://myasstodon.xyz 'nonce-ToE4HDLl3gtORe4hFJib7A=='; media-src 'self' https: data: https://myasstodon.xyz; frame-src 'self' https:; manifest-src 'self' https://myasstodon.xyz; connect-src 'self' data: blob: https://myasstodon.xyz https://cdn.masto.host wss://myasstodon.xyz; script-src 'self' https://myasstodon.xyz; child-src 'self' blob: https://myasstodon.xyz; worker-src 'self' blob: https://myasstodon.xyz 1
frame-ancestors 'self' https://www.abcdin.cl https://abc-auth.preprod.coc.ibmcloud.com; 1
script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.onesignal.com https://onesignal.com https://www.google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://script.hotjar.com https://static.hotjar.com; style-src 'self' 'unsafe-inline' https://onesignal.com; img-src 'self' blob: https://plisio.net data: https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net https://downloads.intercomcdn.com https://js.intercomcdn.com https://gifs.intercomcdn.com https://www.google.ru https://static.intercomassets.com https://img.onesignal.com https://www.googletagmanager.com https://hn.inspectlet.com; default-src 'self'; base-uri 'self'; connect-src 'self' wss: https://api-iam.intercom.io/messenger/web/ping wss://nexus-websocket-a.intercom.io/pubsub/ https://api-iam.intercom.io https://uploads.intercomcdn.com https://onesignal.com https://hn.inspectlet.com https://*.hotjar.com https://in.hotjar.com https://vc.hotjar.io/; font-src 'self' https://js.intercomcdn.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self'; frame-ancestors 'none'; frame-src 'self' https://onesignal.com https://www.youtube.com https://vars.hotjar.com; manifest-src 'self'; media-src 'self' https://api-iam.intercom.io https://js.intercomcdn.com; object-src 'self'; worker-src 'self'; block-all-mixed-content; upgrade-insecure-requests 1
default-src 'self' 'unsafe-inline' *.surveymonkey.com *.bootstrapcdn.com code.jquery.com https://ton.twimg.com/ https://blog.recipero.com/ https://www.google.co.uk/ http://pipedream.wistia.com/ https://distillery.wistia.com/ https://embedwistia-a.akamaihd.net/ https://fast.wistia.com/ http://go.callcredit.co.uk/ http://pi.pardot.com/ https://translate.googleapis.com/  http://cdn.pardot.com/ http://siteimproveanalytics.com/ http://translate.google.com/ http://www.googletagmanager.com/ data: blob: https://pbs.twimg.com/ https://abs.twimg.com/ https://syndication.twitter.com/ https://cdn.syndication.twimg.com/ https://staticxx.facebook.com/  https://opensharecount.com/ https://graph.facebook.com/ http://connect.facebook.net/ http://platform.twitter.com/ http://connect.facebook.net/ http://rum-static.pingdom.net/ http://rum-collector-2.pingdom.net/ https://fonts.gstatic.com/ https://fonts.googleapis.com/ http://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://www.google.com/ https://maps.googleapis.com/ https://www.gstatic.com/ https://maps.gstatic.com/ 1
default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-Qnl0K2s3QVdiRXEwV1luOG5LcC96UWRGemZ0K2VBdUhKd0RPOXlrdEVFMD06UW5zYXl2aDVDR1hBSHVHTjZ0QWVxVFUvcFpNMktWR3dZMisycHh4cGRqdz0=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';worker-src 'self' blob:;form-action 'self' 1
frame-ancestors 'self' covid-check.generali.de 1
default-src http: 'self' https: 'unsafe-eval' 'unsafe-inline'; img-src 'self' https://block64.com https://wiki.block64.com https://ka-p.fontawesome.com https://www.google-analytics.com https://ps.w.org https://s.w.org data:; style-src 'unsafe-inline' 'self' https://block64.com https://ka-p.fontawesome.com https://fonts.googleapis.com; worker-src 'self' blob:; object-src 'none'; font-src 'self' https://block64.com https://ka-p.fontawesome.com https://fonts.gstatic.com data:; 1
frame-ancestors https://shop.proteinpow.com; 1
child-src 'self' www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com www.theweedtube.com emb.d.tube player.twitch.tv www.twitch.tv gleam.io js.gleam.io; connect-src 'self' smoke.io rpc.smoke.io wss://rpc.smoke.io https://rpc.smoke.io pubrpc.smoke.io api.smoke.io; default-src 'self' www.youtube.com staticxx.facebook.com player.vimeo.com open.spotify.com; font-src data: fonts.gstatic.com; frame-ancestors 'none'; img-src * data:; object-src 'none'; plugin-types application/pdf; script-src 'self' www.google-analytics.com connect.facebook.net assets.mantisadnetwork.com mantodea.mantisadnetwork.com ecs.mantisadnetwork.com 'sha256-9MdCJGZqoXb6/d816rvLgJt14oUMkZptgCfncCZfl5k=' secure.quantserve.com rules.quantcount.com gleam.io js.gleam.io; style-src 'self' 'unsafe-inline' fonts.googleapis.com; report-uri /api/v1/csp_violation 1
script-src 'self' www.dbschenker.com 'unsafe-inline' 'unsafe-eval' *.adobedtm.com img.en25.com dk7xb8gkokqbk.cloudfront.net www.google.com www.gstatic.com ecm-mediathek-deutschebahn.cdn.mediamid.com ssl.p.jwpcdn.com platform.twitter.com cdn.syndication.twimg.com s3.eu-central-1.amazonaws.com/dbschenkercom-cdn/ www.google-analytics.com lptag.liveperson.net va.v.liveperson.net lpcdn.lpsnmedia.net accdn.lpsnmedia.net https://www.googletagmanager.com/gtag/js?id=UA-54483706-1 https://www.googletagmanager.com/gtag/js?id=UA-54483706-5 img06.en25.com; report-uri https://dis-sentry.schenker.sh/api/45/security/?sentry_key=02dc3484201d4d1b8bcbc0adfa098fa8 1
report-uri //csp.merlion.ru:8080/report/963066156255080967/; connect-src https://www.google-analytics.com https://*.yandex.ru 'self' ; child-src 'none' ; font-src https://static.lc-group.ru 'self' ; form-action 'self' ; frame-ancestors https://webvisor.com https://*.webvisor.com ; frame-src https://*.youtube.com https://www.google-analytics.com https://*.yandex.ru 'self' ; img-src https://*.buro.ru https://static.lc-group.ru https://www.google-analytics.com https://*.webvisor.org data: https://*.yandex.ru https://*.yandex.net https://*.merlion.com https://*.merlion.ru 'self' https://*.maps.yandex.net ; media-src https://*.buro.ru https://static.lc-group.ru 'self' ; object-src https://*.buro.ru https://static.lc-group.ru 'self' ; script-src https://static.lc-group.ru 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yandex.net 'self' https://*.merlion.com ; style-src https://static.lc-group.ru 'self' https://*.merlion.com 'unsafe-inline' ; default-src 'none' ; strict-mixed-content-checking; reflected-xss filter; referrer origin-when-cross-origin; 1
script-src 'self' 'unsafe-inline' https://*.uservoice.com https://www.google-analytics.com; font-src 'self' 'self' data:; connect-src 'self' https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; default-src 'self'; frame-src 'self' 'self' https://*.uservoice.com; img-src 'self' 'self' blob: https: 1
default-src 'none'; font-src 'self'; img-src 'self' *.amazonaws.com  *.iamplus.com *.googletagmanager.com *.google.com *.google-analytics.com *.klaviyo.com *.facebook.net *.facebook.com *.youtube.com *.mixpanel.com *.googleapis.com *.cloudfront.net *.curalate.com *.cloudflare.com *.googleadservices.com *.doubleclick.net; script-src 'self' *.doubleclick.net *.cloudflare.com *.klaviyo.com *.google-analytics.com *.facebook.net *.facebook.com 'nonce-bmV0c3BhcmtlciBydWxlcyA7KQ==' 'unsafe-eval'; frame-src *.youtube.com *.doubleclick.net; style-src 'self' *.klaviyo.com 'unsafe-inline'; object-src 'self'; media-src 'self' *.iamplus.com; connect-src 'self' *.kmail-lists.com *.mixpanel.com 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://masthead.social; img-src 'self' https: data: blob: https://masthead.social; style-src 'self' https://masthead.social 'nonce-Sb+luEjCgSVxjjOPzEsS5g=='; media-src 'self' https: data: https://masthead.social; frame-src 'self' https:; manifest-src 'self' https://masthead.social; connect-src 'self' data: blob: https://masthead.social https://cdn.masto.host wss://masthead.social; script-src 'self' https://masthead.social; child-src 'self' blob: https://masthead.social; worker-src 'self' blob: https://masthead.social 1
frame-ancestors my.cratejoy.com www.saloonbox.com saloonbox.cratejoy.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://stackpath.bootstrapcdn.com https://use.fontawesome.com https://use.typekit.net https://fonts.gstatic.com; connect-src 'self'  https://*.hotjar.io https://stats.g.doubleclick.net https://cdnjs.cloudflare.com https://*.visualwebsiteoptimizer.com https://*.hotjar.com https://performance.typekit.net; media-src 'self' https:; object-src 'none'; frame-src 'self' https://calculator.connectfirstcu.com https://connectfirstcu.horiznplatform.com https://connectfirstcu.horiznplatform.com https://forms.office.com/ https://submit.jotform.com/ https://form.jotform.com/ https://tr.snapchat.com/ https://player.vimeo.com https://www.youtube.com https://www.google.com https://www.eventbrite.ca https://www.eventbrite.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://bid.g.doubleclick.net https://*.visualwebsiteoptimizer.com https://*.hotjar.com; form-action 'self'; 1
default-src 'self'; script-src 'sha256-N9e1tGxQnBQxRZsLfacJh9nS56HygtbQL/UwfxPi8y8=' 'sha256-5N4Pp5UCHKbIUxXXFe+KDYsfhzhQXoIzN80eQ+jF9P4=' 'sha256-Q+D/f3WqGeAX9CzFC4zXwVauFencuFghKrjMR0Qq2E8=' 'sha256-R6gLaH6VxMl+2mCb4GFkQIIobZQW0vJDALp1qKI9mXM=' https://prizmbit.freshdesk.com/ https://prizmbit.com https://*.prizmbit.com https://www.gstatic.com https://www.google.com https://www.googletagmanager.com https://*.google-analytics.com https://static.zdassets.com https://widget.freshworks.com; style-src * 'unsafe-inline'; connect-src 'self'  https://prizmbit.freshdesk.com https://widget.freshworks.com https://*.prizmbit.com wss://wss.prizmbit.com/ https://www.googletagmanager.com https://fonts.googleapis.com https://*.google-analytics.com https://static.zdassets.com https://ekr.zdassets.com https://prizmbithelp.zendesk.com wss://*.zopim.com https://*.tradingview.com https://fonts.googleapis.com https://fonts.gstatic.com ; frame-ancestors 'self'; object-src 'none'; frame-src 'self' https://google.com https://www.google.com https://www.gstatic.com ; media-src 'self' https://widget.freshworks.com https://static.zdassets.com https://*.prizmbit.com ; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; img-src 'self' https://widget.freshworks.com https://cms.prizmbit.com  https://v2assets.zopim.io https://static.zdassets.com data: ; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self'; block-all-mixed-content; 1
script-src 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google-analytics.com yourconnectivity.net ads.exoclick.com main.exoclick.com syndication.exoclick.com; 1
default-src 'self';frame-src 'self' https://resources.santanderbreakthrough.co.uk https://www.youtube-nocookie.com https://www.surveymonkey.com https://www.research.net https://my2.siteimprove.com https://www.facebook.com https://www.youtube.com https://www.google.com https://www.doubleclick.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn-ukwest.onetrust.com data: https://tagmanager.google.com https://www.linkedin.com https://www.cloudfront.net  https://www.bugherd.com  https://snap.licdn.com  https://cdn.siteimprove.net https://connect.facebook.net https://www.quantserve.com https://px.ads.linkedin.com  https://www.bizographics.com https://d.turn.com https://siteimproveanalytics.com  https://cdnjs.cloudflare.com  https://use.typekit.net https://s.ytimg.com  https://www.youtube.com https://www.googletagmanager.com https://www.google-analytics.com; connect-src 'self' https://resources.santanderbreakthrough.co.uk https://cdn-ukwest.onetrust.com https://www.google-analytics.com https://stats.g.doubleclick.net https://ws.pusherapp.com https://sessions.bugsnag.com https://bugherd-attachments.s3.amazonaws.com  https://www.bugherd.com  https://www.pusher.com   https://www.pusherapp.com  https://www.cloudfront.net  https://id.siteimprove.com https://my2.siteimprove.com  https://performance.typekit.net ; img-src 'self' https://santandercb.s3-eu-west-1.amazonaws.com data: https://px.ads.linkedin.com https://8612.global.siteimproveanalytics.io https://ssl.gstatic.com https://www.gstatic.com https://lh3.googleusercontent.com https://www.linkedin.com https://www.siteimproveanalytics.io https://www.bugherd.com  https://bugherd-attachments.s3.amazonaws.com  https://secure.adnxs.com  https://www.cloudfront.net  https://s.ml-attr.com https://attr.ml-api.io snap.licdn.com  https://www.facebook.com https://www.quantserve.com https://www.siteimprove.com   https://stats.g.doubleclick.net  https://santandercb-staging.s3-eu-west-1.amazonaws.com  https://p.typekit.net https://www.google-analytics.com ; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com  https://www.cloudfront.net; font-src 'self' https://www.cloudfront.net https://fonts.gstatic.com  https://www.bugherd.com  https://erd.com.bugherd.com  https://use.typekit.net; object-src 'none' ; 1
frame-ancestors 'none'; sandbox allow-scripts allow-same-origin; default-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; base-uri 'none'; form-action 'none'; media-src 'self' 1
default-src 'self'; base-uri 'self'; connect-src 'self' https://www.siepomaga.pl https://www.ratujemyzwierzaki.pl https://onesignal.com https://www.facebook.com https://accounts.google.com https://syndication.twitter.com https://api.rollbar.com/api/1/item/ https://stats.g.doubleclick.net https://www.google-analytics.com https://m.facebook.com https://ssl.google-analytics.com https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://img.ratujemyzwierzaki.pl; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://siepomagaimg.pl https://*.hotjar.com https://*.hotjar.io; form-action 'self' https://secure.payu.com https://www.platnosci.pl https://www.facebook.com/tr/; frame-ancestors 'self'; frame-src 'self' https://pay.google.com https://www.youtube.com https://onesignal.com/ https://www.facebook.com https://m.facebook.com https://staticxx.facebook.com https://web.facebook.com https://static.xx.fbcdn.net https://player.vimeo.com/ https://secure.snd.payu.com https://bid.g.doubleclick.net https://secure.payu.com https://kibana.siepomaga.pl https://accounts.google.com https://tpc.googlesyndication.com https://*.hotjar.com https://*.hotjar.io https://www.google.com; img-src * data: android-webview-video-poster: https://*.hotjar.com https://*.hotjar.io; media-src 'self' https://siepomagaimg.pl; object-src 'none'; script-src https: 'strict-dynamic' 'unsafe-eval' 'nonce-gIb2o0vPwz9cb8mRDjntd5llmQpSq9l76FWaqGmkeSE=' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://onesignal.com https://secure.przelewy24.pl; worker-src 'self'; report-uri /csp-report 1
frame-ancestors 'self' *.fkn-systems.de *.fkn-service.de linux-events.org l-p-d.org bs-lug.de 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-+cX577vKjsPzDQK0i1/a+g' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src 'self'; connect-src 'self' www.oakwood.com api.oakwood.com www.jscache.com eligibility.wootric.com wootric-eligibility.herokuapp.com api.mixpanel.com api.segment.io maps.googleapis.com api.ipstack.com l.sharethis.com; font-src 'self' data: images.oakwood.com static.tacdn.com fonts.gstatic.com fonts.googleapis.com use.fontawesome.com; script-src 'self' 'unsafe-inline' 'unsafe-eval'  s.ytimg.com www.youtube.com count-server2.sharethis.com www.tripadvisor.com www.jscache.com static.tacdn.com d1i2rwfs45w8ba.cloudfront.net api.map.baidu.com t.sharethis.com bdimg.com cdn.mxpnl.com cdn.wootric.com tagmanager.google.com cdn.segment.com hippocdn.global.ssl.fastly.net platform-api.sharethis.com count-server.sharethis.com images.oakwood.com www.googletagmanager.com www.google-analytics.com ajax.googleapis.com cdnjs.cloudflare.com maps.googleapis.com geolocation.onetrust.com www.googleadservices.com connect.facebook.net googleads.g.doubleclick.net use.fontawesome.com www.oakwood.com baidu.com sharethis.com bdimg.com newton.newtonsoftware.com platform-api.sharethis.com count-server.sharethis.com buttons-config.sharethis.com www.oakwood.com client.oakwood.com ssl.google-analytics.com tracker.marinsm.com; img-src 'self' l.sharethis.com s3.amazonaws.com platform-cdn.sharethis.com api.map.baidu.com t.sharethis.com gss0.bdstatic.com www.tripadvisor.com static.tacdn.com images.oakwood.com fonts.gstatic.com fonts.googleapis.com use.fontawesome.com www.googletagmanager.com www.google-analytics.com ajax.googleapis.com cdnjs.cloudflare.com maps.googleapis.com geolocation.onetrust.com www.googleadservices.com connect.facebook.net googleads.g.doubleclick.net www.oakwood.com stats.g.doubleclick.net maps.gstatic.com ssl.google-analytics.com www.google.com www.facebook.com data:; style-src 'self' 'unsafe-inline' tagmanager.google.com images.oakwood.com static.tacdn.com fonts.googleapis.com use.fontawesome.com www.oakwood.com client.oakwood.com; frame-src 'self'  tours.vpixvr.com view.joomag.com www.youtube.com kuula.co indd.adobe.com p.travelsmarter.net www.vpix.net www.google.com www.facebook.com players.brightcove.net t.sharethis.com www.careerarc.com bid.g.doubleclick.net newton.newtonsoftware.com www.tripadvisor.com  c.sharethis.mgr.consensu.org www.oakwood.com www.corp.oakwood.com fls.doubleclick.net 3447646.fls.doubleclick.net; plugin-types application/x-shockwave-flash application/pdf; form-action 'self' newton.newtonsoftware.com; frame-ancestors 'self' kuula.co newton.newtonsoftware.com epicclient.oakwood.com epicclientqa.oakwood.com; 1
default-src 'self' https://www.google-analytics.com https://www.sfia-online.org; img-src *; frame-src https://www.youtube.com https://www.slideshare.net; style-src 'self' 'unsafe-inline' https://sfia-online.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.sfia-online.org https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: blob: vjs.zencdn.net bofa.demdex.net tags.tiqcdn.com *.akamaihd.net *.baml.com bankofamerica.tt.omtrdc.net *.ml.com secure.insightexpressai.com *.businesswire.com testdata.coremetrics.com http://*.bankofamerica.com https://*.bankofamerica.com  *.brightcove.com *.brightcove.net *.sharethis.com *.twitter.com twitter.com *.facebook.com www.linkedin.com delicious.com digg.com api.pinterest.com www.stumbleupon.com www.myspace.com buzz.yahoo.com www.bankofamerica.com www.boa.com www.ml.com www.merrill.com www.totalmerrill.com www.merrilllynch.com www.ust.com www.us-trust.com www.ustrust.com www.baml.com www.ba-ml.com www.bac.com acemegreen.thismoment.com analytics1.onedotone.net *.googleapis.com ecx.images-amazon.com brightcove.vo.llnwd.net *.doubleclick.net cdnt.meteorsolutions.com expressyourthanks.thismoment.com thismoment-a.akamaihd.net api.tiles.mapbox.com *.google.com *.gstatic.com www.youtube.com www.google-analytics.com bofa.44doors.com *.mapbox.com bofa.demdex.net *.maxmind.com *.betrad.com sjs.bizographics.com www.googletagmanager.com *.userzoom.com *.evidon.com *.zencdn.net *.licdn.com *.company-target.com *.demandbase.com brightcove.hs.llnwd.net *.boldchat.com *.2mdn.net *.dartmotif.net *.doubleclick.com *.merrilledge.com *.digitas.com *.serving-sys.com *.mediamind.com *.corporate-ir.net *.imwx.com; font-src 'self' http: https: *.zencdn.net *.ml.com data:;, worker-src 'self' blob:; 1
base-uri 'none'; object-src 'none'; script-src https://forum.evilhuntertycoon.com/logs/ https://forum.evilhuntertycoon.com/sidekiq/ https://forum.evilhuntertycoon.com/mini-profiler-resources/ https://forum.evilhuntertycoon.com/assets/ https://forum.evilhuntertycoon.com/brotli_asset/ https://forum.evilhuntertycoon.com/extra-locales/ https://forum.evilhuntertycoon.com/highlight-js/ https://forum.evilhuntertycoon.com/javascripts/ https://forum.evilhuntertycoon.com/plugins/ https://forum.evilhuntertycoon.com/theme-javascripts/ https://forum.evilhuntertycoon.com/svg-sprite/; worker-src 'self' blob: 1
default-src 'self' www.facebook.com player.vimeo.com gcs-vimeo.akamaized.net vod-progressive.akamaized.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' use.typekit.net www.googletagmanager.com tagmanager.google.com www.google-analytics.com maps.googleapis.com connect.facebook.net www.facebook.com cdn.cookielaw.org script.crazyegg.com www.googleadservices.com https://appds8093.blob.core.windows.net; connect-src 'self' cdn.cookielaw.org sentry.io www.google-analytics.com privacyportal.onetrust.com privacyportal-cdn.onetrust.com https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com www.facebook.com stats.g.doubleclick.net sample-api-v2.crazyegg.com tracking.crazyegg.com https://appds8093.blob.core.windows.net; img-src 'self' data: blob: p.typekit.net www.facebook.com www.google-analytics.com stats.g.doubleclick.net api.mapbox.com www.googletagmanager.com nolocdnv.azureedge.net cdn.cookielaw.org; style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com api.mapbox.com use.typekit.net p.typekit.net https://appds8093.blob.core.windows.net; font-src 'self' data: use.typekit.net fonts.gstatic.com https://appds8093.blob.core.windows.net; manifest-src 'self'; frame-src 'self' www.googletagmanager.com www.facebook.com; child-src blob:; worker-src blob:; report-uri https://sentry.io/api/1441400/security/?sentry_key=8b15e5ac267942b49c1c8f9c68ff000a 1
default-src 'self' data: developer.samsung.com http://developer.samsung.com d13643hualop71.cloudfront.net d3unf4s5rp9dfh.cloudfront.net dr1stk14alc8x.cloudfront.net www.youtube.com www.facebook.com www.googletagmanager.com tagmanager.google.com youtube.com *.youtube.com s.ytimg.com *.instagram.com *.twitter.com *.hotjar.com maxcdn.bootstrapcdn.com; script-src 'self' 'unsafe-inline' data: cdnjs.cloudflare.com *.instagram.com *.twitter.com www.googletagmanager.com tagmanager.google.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.buzzsprout.com *.google-analytics.com *.ads-twitter.com *.facebook.net *.hotjar.com dr1stk14alc8x.cloudfront.net maxcdn.bootstrapcdn.com ajax.aspnetcdn.com ajax.googleapis.com; frame-src *; connect-src 'self' *.hotjar.com wss://*.hotjar.com *.google-analytics.com stats.g.doubleclick.net *.internet.apps.samsung.com; style-src 'self' 'unsafe-inline' data: dr1stk14alc8x.cloudfront.net tagmanager.google.com maxcdn.bootstrapcdn.com translate.googleapis.com; img-src d3unf4s5rp9dfh.cloudfront.net 'self' data: *; media-src 'self' images-tv.adobe.com d3unf4s5rp9dfh.cloudfront.net 1
default-src 'self' https://*.lochem.nl/ https://lochem.nl/ https://*.google-analytics.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://lochem.notubiz.nl/ https://lochem.checkwaarjerechtophebt.nl/ https://*.google-analytics.com/ https://apis.google.com/ https://ajax.googleapis.com/ https://maps.googleapis.com/ https://www.googletagmanager.com/ https://*.pdok.nl/;style-src 'self' 'unsafe-inline' https://lochem.checkwaarjerechtophebt.nl/ https://fonts.googleapis.com/ https://*.pdok.nl/;img-src 'self' data: https://*.google-analytics.com/ https://maps.gstatic.com/ http://www.gstatic.com/ https://*.googleapis.com/ https://csi.gstatic.com/ https://*.pdok.nl https://geodata.nationaalgeoregister.nl/;media-src 'self';font-src 'self' https://fonts.gstatic.com/; frame-src 'self' https://*.lochem.nl/ https://lochem.checkwaarjerechtophebt.nl/ https://www.googletagmanager.com/ https://www.google.com/ https://content.googleapis.com/ https://maps.google.com/ https://player.vimeo.com/ https://www.youtube.com/; 1
script-src 'nonce-6d9517aef1d8b56c5f570042d370875e' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=5357393823085691; frame-ancestors 'self' 1
default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com www.gstatic.com www.googletagmanager.com tags.srv.stackadapt.com *.zopim.com *.zopim.io *.zdassets.com *.stackadapt.com *.linkedin.com *.licdn.com *.revbits.com; style-src 'self' 'unsafe-inline' revbits.com www.revbits.com fonts.googleapis.com *.zopim.com *.zopim.io *.zdassets.com *.google.com www.googletagmanager.com tags.srv.stackadapt.com *.stackadapt.com *.linkedin.com *.licdn.com; img-src 'self' *.zopim.com *.zopim.io data: blob: *.stackadapt.com *.linkedin.com *.licdn.com *.adsymptotic.com *.revbits.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com *.zopim.com *.zopim.io data:; report-uri /report-violation; object-src 'self' 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-eval' 'nonce-Iior3x4Xa2oxsDn4+zkZ7w=='; style-src 'self' https: 'unsafe-inline' 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://hispagatos.space; img-src 'self' https: data: blob: https://hispagatos.space; style-src 'self' https://hispagatos.space 'nonce-IBPvCg2YsLyhcTsuV1K1mA=='; media-src 'self' https: data: https://hispagatos.space; frame-src 'self' https:; manifest-src 'self' https://hispagatos.space; connect-src 'self' data: blob: https://hispagatos.space https://hispagatos.space wss://hispagatos.space; script-src 'self' https://hispagatos.space; child-src 'self' blob: https://hispagatos.space; worker-src 'self' blob: https://hispagatos.space 1
default-src 'none'; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval' *.disqus.com c.disquscdn.com; worker-src https: blob:; child-src https: blob:; style-src https: data: 'unsafe-inline' 'unsafe-eval' c.disquscdn.com; img-src https: data: 'unsafe-inline' http://*.tile.osm.org; font-src https:; object-src blob: 'self'; base-uri 'none'; frame-ancestors 'self'; connect-src blob: 'self' *.openstreetmap.org *.disqus.com *.pixabay.com pixabay.com *.addthis.com www.google-analytics.com; frame-src 'self' *.youtube.com *.vimeo.com docs.google.com disqus.com *.disqus.com *.opava-city.cz e.issuu.com *.addthis.com api.mapy.cz www.google.com; media-src https: 1
default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; font-src * data:; img-src * data: 1
frame-ancestors 'self' www.allseasonsuniforms.com 1
default-src https:; font-src https: data:; img-src https: data:; style-src 'unsafe-inline' 'unsafe-eval' https:; script-src 'unsafe-inline' 'unsafe-eval' https: 1
default-src 'none'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ http://cdnjs.cloudflare.com/; object-src 'none'; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ http://cdnjs.cloudflare.com/ https://fonts.googleapis.com/ http://fonts.googleapis.com/ https://fonts.gstatic.com/ http://fonts.gstatic.com/; media-src 'none'; img-src 'self'; frame-src 'none'; frame-ancestors 'none'; font-src 'self' https://cdnjs.cloudflare.com/ http://cdnjs.cloudflare.com/ https://fonts.gstatic.com/ http://fonts.gstatic.com/; connect-src 'self' wss://upstream ws://upstream 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: https:; child-src blob: data: https: 1
default-src 'self' https://s.ytimg.com *.youtube.com *.ytimg.com spie-web.azurewebsites.net http://spie-web.azurewebsites.net spie-web-preprod.azurewebsites.net tagmanager.google.com *.cookiebot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://www.googletagmanager.com tagmanager.google.com *.cookiebot.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com tagmanager.google.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: *.cookiebot.com; img-src 'self' spie.azureedge.net *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com http://spie-qa.azurewebsites.net *.ytimg.com tagmanager.google.com; media-src 'self' data: blob: spie.azureedge.net; frame-ancestors 'self' https://atspie.spie.com https://spie.de; child-src 'self' https://bewerbung.sag.eu https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com maps.google.com www.youtube-nocookie.com *.cookiebot.com; connect-src 'self' bewerbung.sag.eu accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://*.googleapis.com https://*.google.com/* *.cookiebot.com; 1
base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-zGG3MS6i4V5y7Me/e6tiFA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' 1
default-src 'none';manifest-src 'self';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self';connect-src 'self';media-src 'self' 1
default-src 'self' 'unsafe-inline' https://www.google-analytics.com ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://service.force.com https://trakm8.force.com https://d10lpsik1i8c69.cloudfront.net https ; media-src  'self' 'unsafe-inline' https://d10lpsik1i8c69.cloudfront.net https: data: ; img-src 'self' 'unsafe-inline' https: data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com  https://api.w3-edge.com https://www.google.com https://www.google-analytics.com https://marketing.trakm8.com https://api.w3-edge.com https://pi.pardot.com https://widget.bugyard.io https://www.googletagmanager.com https://js.stripe.com https://cdnjs.cloudflare.com https://bat.bing.com https://service.force.com https://trakm8.my.salesforce.com https://trakm8.force.com https://c.la2-c1cs-cdg.salesforceliveagent.com https://d.la2-c1cs-cdg.salesforceliveagent.com https://static.lightning.force.com https://d.la1-c2-fra.salesforceliveagent.com https://d10lpsik1i8c69.cloudfront.net https://www.googleadservices.com https://googleads.g.doubleclick.net ; script-src-elem 'self' 'unsafe-inline' https://www.gstatic.com https://www.google-analytics.com https://pi.pardot.com https://marketing.trakm8.com https://api.w3-edge.com  https://www.google.com https://widget.bugyard.io https://cdnjs.cloudflare.com https://www.googletagmanager.com  https://js.stripe.com https://bat.bing.com/ https://www.google-analytics.com https://service.force.com https://trakm8.my.salesforce.com https://trakm8.force.com https://c.la2-c1cs-cdg.salesforceliveagent.com https://d.la2-c1cs-cdg.salesforceliveagent.com https://static.lightning.force.com https://d.la1-c2-fra.salesforceliveagent.com https://d10lpsik1i8c69.cloudfront.net https://www.googleadservices.com https://googleads.g.doubleclick.net data: ; worker-src blob: ; connect-src 'self' 'unsafe-inline' https://stats.g.doubleclick.net https://www.tweetjs.com https://app.bugyard.io https://trakm8.force.com https://settings.luckyorange.net https://d10lpsik1i8c69.cloudfront.net wss://in.visitors.live https://pubsub.googleapis.com wss://visitors.live  data: ; frame-src 'self' 'unsafe-inline' https://marketing.trakm8.com https://www.google.com https://player.vimeo.com https://www.youtube.com  https://js.stripe.com https://irpages2.equitystory.com https://obdchecker.trakm8.net  https://charts3.equitystory.com https://service.force.com data: ; font-src https: data: ;  1
default-src 'self' all81soft.com;style-src 'self' 'unsafe-inline' https://vk.com http://vk.com https://ajax.googleapis.com http://ajax.googleapis.com;frame-src 'self' https://vk.com http://vk.com https://*.doubleclick.net http://*.doubleclick.net https://*.yastatic.net http://*.yastatic.net https://yastatic.net http://yastatic.net;media-src 'self';connect-src 'self' https://*.yandex.ru http://*.yandex.ru;font-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com http://ajax.googleapis.com https://vk.com http://vk.com http://*.googlesyndication.com https://*.googlesyndication.com https://*.yandex.ru http://*.yandex.ru https://*.google.de http://*.google.de https://*.google.ru http://*.google.ru https://*.google.com http://*.google.com https://*.google.com.ua http://*.google.com.ua https://*.yastatic.net http://*.yastatic.net https://yastatic.net http://yastatic.net https://*.googletagservices.com http://*.googletagservices.com;img-src 'self' http://counter.yadro.ru https://counter.yadro.ru https://vk.com http://vk.com https://*.yandex.net http://*.yandex.net https://*.yandex.ru http://*.yandex.ru data: blob: filesystem:;report-uri https://all81soft.com/31d81706659151e8da5b3cf131/; 1
base-uri 'self'; frame-ancestors 'self';form-action 'self' *.twitter.com; object-src 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com *.twitter.com *.twimg.com *.jsdelivr.net 1
frame-ancestors http://*.lessentiel.lu https://*.lessentiel.lu http://www.garage-pauly.lu https://www.garage-pauly.lu http://www.gti.lu http://automobiles-cr.lu http://www.automobiles-cr.lu https://www.garagethielen.lu http://www.reiserbann.lu https://www.reiserbann.lu https://www.smartcenter.lu https://www.marval.lu https://www.garagecastermans.lu http://www.schneiders.lu https://www.serviceautomobile.lu https://www.pirsch.lu http://www.foyer.lu https://www.foyer.lu http://www.lesfrontaliers.lu https://www.lesfrontaliers.lu http://www.diegrenzgaenger.lu https://www.diegrenzgaenger.lu; 1
img-src https: data: blob: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.diageohorizon.com *.diageoplatform.com *.diageofooter.com www.googletagmanager.com *.sharethis.com *.cloudflare.com *.diageoagegate.com *.youtube.com www.youtube.com s.ytimg.com *.onetrust.com www.google-analytics.com c.sharethis.mgr.consensu.org; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://ieji.de; img-src 'self' https: data: blob: https://ieji.de; style-src 'self' https://ieji.de 'nonce-cXnJ/DFL43mF33cEJ4lRZQ=='; media-src 'self' https: data: https://ieji.de; frame-src 'self' https:; manifest-src 'self' https://ieji.de; connect-src 'self' data: blob: https://ieji.de https://files.example.com wss://ieji.de; script-src 'self' https://ieji.de; child-src 'self' blob: https://ieji.de; worker-src 'self' blob: https://ieji.de 1
default-src 'self' ; frame-ancestors 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.greateasternlife.com *.lifeisgreat.net *.adobedtm.com *.facebook.net *.googletagmanager.com *.addthisedge.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.juicer.io *.addthis.com *.twitter.com *.demdex.net *.omtrdc.net *.youtube.com *.ytimg.com ; style-src 'self' 'unsafe-inline' fonts.googleapis.com ; font-src 'self' fonts.gstatic.com ; img-src * data: ; media-src 'self' *.scene7.com ; frame-src 'self' *.doubleclick.net *.juicer.io *.twitter.com *.addthis.com *.financialexpress.net *.youtube.com *.facebook.net *.facebook.com ; object-src 'self' ; connect-src 'self' *.greateasternlife.com *.addthis.com *.demdex.net *.google-analytics.com *.omtrdc.net *.doubleclick.net *.facebook.net *.facebook.com ; report-uri https://www.greateasterngeneral.com/bin/GreatEastern/sg/csp/report ;  1
default-src *  data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval' http://cdn.permutive.com/8a2c2f13-f564-4fff-8d22-177534028b95-1.0.js ; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' http://95.177.162.103/DocManagerAPI/ScopeerAssets/ https://www.google.com/maps/embed  https://cdn.tiny.cloud/   https://sp.tinymce.com/ https://www.tiny.cloud/ https://fonts.gstatic.com/  https://fonts.googleapis.com/ https://rainmaker.tiny.cloud/ https://rainmaker.tiny.cloud/ https://fonts.googleapis.com/ https://rainmaker.tiny.cloud/  https://www.tiny.cloud/  https://cdnjs.cloudflare.com/ajax https://flexiblestg.com http://95.177.162.97/ScopeerUAT    http://doc.scopeer.com/DocmanagerAPI/ScopeerAssets/  https://doc.scopeer.com/DocmanagerAPI/ScopeerAssets/  http://localhost/ScopeerWebv1 http://tinymce.cachefly.net smtp.office365.com preprodb2b.alinma.com yakeen-piloting.eserve.com.sa oppwa.com test.oppwa.com api1.yamamah.com test.ppipe.net  ppipe.net; http://*.tiny*.*; 1
default-src 'self' *.dcube.cloud *.demdex.net cm.everesttech.net wogadobeanalytics.sc.omtrdc.net; script-src 'self' blob: cdnjs.cloudflare.com cdn.monsido.com *.ytimg.com www.google-analytics.com www.googletagmanager.com connect.facebook.net cse.google.com www.facebook.com www.google.com www.youtube.com *.wogaa.sg assets.adobedtm.com *.sharethis.com 'unsafe-eval' 'sha256-zO041P2SCSnTCQrtdX/3QKAD3qhSpUZDRbDF+SK15Eg=' 'sha256-TUU77ZiIuFFMkGfvbeDJc72VIsxDIDeUWI2XwBAFhxE=' 'sha256-t6n0rZu3s1pDxadg3K/Yq8rG2ZXMFYdrp0HGjpIJMsM=' 'sha256-cpnSDeKJyItv3W3anSRQxDBi+HMi8IrwG1lTOG10DJg=' 'sha256-NXL0tg0arm/dA/VDYEJYYxYz42+UAorjifYEKTgCP9o=' 'sha256-uNOEFKSSA0zTt60eb9L9bUN1PTFPkYsB+FVj2iTguxU='; style-src 'self' assets.wogaa.sg www.google.com fonts.googleapis.com 'unsafe-inline'; img-src 'self' l.sharethis.com *.google.com www.googleapis.com *.gstatic.com www.googletagmanager.com tracking.monsido.com *.ytimg.com via.placeholder.com www.facebook.com stats.g.doubleclick.net www.google-analytics.com data: wogadobeanalytics.sc.omtrdc.net cm.everesttech.net dpm.demdex.net secure.adnxs.com ad.doubleclick.net; font-src 'self' data: assets.wogaa.sg fonts.gstatic.com; frame-src 'self' www.viddsee.com cse.google.com t.sharethis.com c.sharethis.mgr.consensu.org *.demdex.net www.youtube.com; connect-src 'self' snowplow-web.wogaa.sg stats.g.doubleclick.net www.google-analytics.com l.sharethis.com *.dcube.cloud dpm.demdex.net wogadobeanalytics.sc.omtrdc.net www.facebook.com 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-h/MFLn1VY2IC7Fo/zPUTBw' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src 'self' *.gewobag.de data: *.youtube-nocookie.com *.ytimg.com *.googleapis.com *.gstatic.com *.wohnungshelden.de 'unsafe-inline' 1
connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self' data:; media-src 'self'; object-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 1
default-src  * 'unsafe-inline' 'unsafe-eval' ; img-src * data: 'unsafe-inline' ; font-src * data: 'unsafe-inline' ; media-src * blob: 'unsafe-inline' ; frame-src * data: 'unsafe-inline' 'unsafe-eval' ; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: d3h4aaocp8p235.cloudfront.net code.jquery.com widget-bf.kognitiv.com player.vimeo.com www.youtube.com *.salesforceliveagent.com echo-hbe-api.kognitiv.com hbe-api.kognitiv.com booking.anantaravacationclub.com cdnjs.cloudflare.com res.cloudinary.com www.gravatar.com releases.wagtail.io images.seekda.net *.google.com *.googleapis.com *.gstatic.com www.googletagmanager.com www.google-analytics.com api.map.baidu.com *.baidu.com  *.bdimg.com www.anantaravacationclub.com *.seekda.com *.sinajs.cn *.weibo.com ; style-src 'self' 'unsafe-inline' fonts.googleapis.com d3h4aaocp8p235.cloudfront.net cdnjs.cloudflare.com widget-bf.kognitiv.com; font-src 'self' data: fonts.gstatic.com cdnjs.cloudflare.com widget-bf.kognitiv.com d3h4aaocp8p235.cloudfront.net 1
img-src blob: https: data:; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hotjar.com https://cdn.ywxi.net https://www.mcafeesecure.com https://www.google.com/recaptcha/api.js https://www.gstatic.com https://*.googleapis.com https://*.google-analytics.com http://*.google-analytics.com https://cdn.rawgit.com/mahnunchik https://cdn.rawgit.com/printercu https://s3.amazonaws.com/subscription-cdn/0.2/widget.min.js https://*.tawk.to https://connect.facebook.net https://js-agent.newrelic.com https://cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js https://bam.nr-data.net https://cdn.rawgit.com/mahnunchik/markerclustererplus/master/dist/markerclusterer.min.js https://cdn.rawgit.com/printercu/google-maps-utility-library-v3-read-only/master/infobox/src/infobox_packed.js https://*.braintreegateway.com http://*.braintree-api.com https://*.cardinalcommerce.com/ https://s3-us-west-2.amazonaws.com/mfesecure-public/host/wogi.sg/client.js https://www.trustedsite.com https://www.wogi.sg https://*.sentry-cdn.com https://*.paypal.com/ https://cdn.triple-a.io/; font-src 'self' data: https://fonts.gstatic.com https://*.tawk.to; img-src 'self' data: https://cdn.ywxi.net https://s3.amazonaws.com/braintree-badges/ https://www.google-analytics.com http://*.google-analytics.com https://*.tawk.to https://*.facebook.com https://stats.g.doubleclick.net https://*.gstatic.com https://maps.googleapis.com https://*.amazonaws.com https://cdn.jsdelivr.net/emojione/ https://www.mooments.com https://www.wogi.sg https://*.paypal.com/ https://gifted.ph https://*.digitaloceanspaces.com https://stg.wogi.dev http://img.giftting.co.kr https://cdn.triple-a.io/ https://moneyoverip.io/; object-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://s3.amazonaws.com/subscription-cdn/0.2/widget.min.css https://cdn.jsdelivr.net/emojione/2.2.7/assets/css/emojione.min.css https://stackpath.bootstrapcdn.com https://www.wogi.sg; frame-src 'self' https://*.hotjar.com https://*.tawk.to/ https://*.facebook.com https://*.braintreegateway.com https://www.google.com https://www.mcafeesecure.com https://*.cardinalcommerce.com/ https://tst.kaptcha.com/ https://*.paypal.com/ https://cdn.triple-a.io https://kg668dbov0.execute-api.us-east-1.amazonaws.com/; connect-src 'self' https://*.hotjar.com https://*.tawk.to wss://*.tawk.to wss://ws1.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net https://s3-us-west-2.amazonaws.com/mfesecure-public/ https://bam.nr-data.net https://*.braintreegateway.com http://*.braintree-api.com http://s3-us-west-2.amazonaws.com/mfesecure-pub https://*.cardinalcommerce.com/ http://sentry.dippol.com/ https://moneyoverip.io/ 1
object-src 'none'; script-src 'none'; connect-src *; child-src *; frame-src *; 1
default-src 'unsafe-inline' https://landbot.io https://www.google.pl https://static.landbot.io https://emplocity.com https://stats.g.doubleclick.net https://use.fontawesome.com https://system.erecruiter.pl https://skk.erecruiter.pl https://www.youtube.com https://www.youtube-nocookie.com https://www.emplocity.com https://*.googleapis.com  https://*.twimg.com https://pbs.twimg.com https://syndication.twitter.com https://platform.twitter.com https://www.youtube.com https://www.youtube-nocookie.com https://*.gstatic.com https://*.google.com https://www.google-analytics.com https://*.facebook.com https://*.bgk.pl https://www.en.bgk.pl https://nowa.bgk.pl; script-src * 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://*.facebook.com https://*.bgk.pl https://www.en.bgk.pl https://nowa.bgk.pl; style-src 'unsafe-inline' https://www.google-analytics.com  https://www.google.pl https://static.landbot.io https://emplocity.com https://stats.g.doubleclick.net https://use.fontawesome.com https://system.erecruiter.pl https://skk.erecruiter.pl https://www.youtube.com https://www.youtube-nocookie.com https://www.emplocity.com https://*.googleapis.com  https://*.twimg.com https://pbs.twimg.com https://syndication.twitter.com https://platform.twitter.com https://www.youtube.com https://www.youtube-nocookie.com https://*.facebook.com https://*.bgk.pl https://www.en.bgk.pl https://nowa.bgk.pl blob: data:; img-src 'self'  https://www.google.pl https://static.landbot.io https://emplocity.com https://stats.g.doubleclick.net https://use.fontawesome.com https://system.erecruiter.pl https://skk.erecruiter.pl https://www.youtube.com https://www.youtube-nocookie.com https://www.emplocity.com https://*.googleapis.com  https://*.twimg.com https://pbs.twimg.com https://syndication.twitter.com https://platform.twitter.com https://www.youtube.com https://www.youtube-nocookie.com https://*.gstatic.com https://*.google.com https://www.google-analytics.com https://*.facebook.com https://*.bgk.pl https://www.en.bgk.pl https://nowa.bgk.pl data: 1
frame-ancestors 'self' https://*.tw.mawebcenters.com 1
frame-ancestors 'self' www.symbaloo.com; 1
Array; script-src 'self' https://*.instagram.com *.google-analytics.com widget.cdek.ru pickpoint.ru api-maps.yandex.ru yastatic.net *.yandex.net https://*.jivosite.com sentry.io vk.com *.vk.com cdn.jsdelivr.net 'unsafe-inline' *.yandex.ru *.googletagmanager.com; frame-src 'self' widget.cdek.ru pickpoint.ru mc.yandex.md api-maps.yandex.ru *.instagram.com *.youtube.com youtube.com facebook.com *.facebook.com vk.com *.vk.com https://*.jivosite.com *.yandex.ru *.googletagmanager.com; media-src 'self' https://*.jivosite.com *.googletagmanager.com; img-src 'self' data: https://*.jivosite.com *.teaworkshop.ru vk.me pp.vk.me vk.com *.vk.com teaworkshop-dev.s3.eu-west-1.amazonaws.com teaworkshop-prod.s3.eu-west-1.amazonaws.com api-maps.yandex.ru *.market.yandex.ru yastatic.net *.yastatic.net  *.yandex.net *.yandex.ru *.googletagmanager.com *.cdek.ru *.gravatar.com *.wp.com *.google-analytics.com; style-src 'self' https://*.jivosite.com widget.cdek.ru pickpoint.ru api-maps.yandex.ru *.yandex.ru *.googletagmanager.com 'unsafe-inline'; Array; form-action 'self'; object-src 'self'; base-uri 'self' 1
font-src https://cache.marriott.com/ https://use.typekit.net/ 'self' https://cdn.vivocha.com/ https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/ https://*.aexp-static.com/ https://cloud.webtype.com/ data: https://gem-dev.aexp.com/; img-src 'self' data: https: http:; script-src https://s.ytimg.com/ http://icm.aexp-static.com/ 'self' https://*.delvenetworks.com/ https://*.demdex.net/ https://*.lpsnmedia.net/ https://www.gstatic.com/ https://www.googleadservices.com/ https://adservice.google.it/ https://img.en25.com/ https://d5phz18u4wuww.cloudfront.net/ https://report1.maritz.com/ https://bat.bing.com/ https://*.google.com/ https://www.youtube-nocookie.com/ https://*.omtrdc.net/ https://ads.avocet.io/ https://*.doubleclick.net/ https://*.contentsquare.com/ https://cdnssl.clicktale.net/ https://secure.leadforensics.com/ https://fidoapi.com/ 'unsafe-eval' https://ajax.googleapis.com/ https://*.ss-omtrdc.net/ https://cdnjs.cloudflare.com/ https://assets.adobedtm.com/ 'unsafe-inline' https://use.typekit.net/ https://*.liveperson.net/ https://*.vivocha.com/ https://dstatic.dev.ipc.us.aexp.com/ https://code.jquery.com/ https://www.cdn-net.com/ https://www.google-analytics.com/ https://dev.visualwebsiteoptimizer.com/ https://service.maxymiser.net/ https://www.googletagmanager.com/ https://*.aexp-static.com/ https://www.youtube.com/ https://snap.licdn.com/ https://*.bounceexchange.com/ https://connect.facebook.net/ https://*.adform.net/ https://*.americanexpress.com/ https://*.linkedin.com/ https://ct.contentsquare.net/ https://nexus.ensighten.com/ https://*.bluekai.com/ https://contentsquare.com/ https://aeopprodvip.acxiom.com/ https://*.akamaihd.net/; base-uri 'self' https://lpcdn.lpsnmedia.net/ https://*.americanexpress.com/; frame-src https://icm.aexp-static.com/ https://*.americanexpress.com/ 'self' https://player.videosmart.com/ https://*.liveperson.net/ https://www.youtube-nocookie.com/ https://lpcdn.lpsnmedia.net/ https://*.facebook.com/ https://www.cdn-net.com/ https://*.doubleclick.net/ https://c1.adform.net/ https://www.payback.it/ https://assets.bounceexchange.com/ https://service.maxymiser.net/ https://www.youtube.com/ https://*.akamaihd.net/ https://f2.vivocha.com/ https://aexp.demdex.net/ https://*.yahoo.com/; form-action https://www.cdn-net.com/ http://www.americanexpress.com/ https://*.custhelp.com/ https://*.americanexpress.com/ 'self' https://*.eloqua.com/; worker-src  'self' blob:; frame-ancestors https://*.aexp.com/  https://*.americanexpress.com/; style-src http://fonts.googleapis.com/ https://*.americanexpress.com/ 'unsafe-inline' 'self' https://cdn.vivocha.com/ https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/ https://*.aexp-static.com/ https://cloud.webtype.com/; plugin-types  application/x-shockwave-flash; report-uri https://csp.tsrs.cloud/r/3d3e5ffcb32976d6742d7c72179ea0f0b133fe2e; media-src https://ssl.gstatic.com/ https://lpcdn.lpsnmedia.net/ https://production.smedia.lvp.llnw.net/ 'self' http://production.smedia.lvp.llnw.net/; connect-src https://www.google.co.th/ http://www.americanexpress.com/ https://cdnjs.cloudflare.com/ https://assets.adobedtm.com/ 'self' https://performance.typekit.net/ wss://www.americanexpress.com/ https://*.vivocha.com/ https://*.custhelp.com/ https://14106077-sync.va.cobrowse.liveperson.net/ https://ds-aksb-a.akamaihd.net/ https://*.contentsquare.net/ https://www.cdn-net.com/ https://dev.visualwebsiteoptimizer.com/ https://americanexpresscards.tt.omtrdc.net/ https://*.eloqua.com/ https://*.aexp-static.com/ https://events.bouncex.net/ https://*.americanexpress.com/ https://dpm.demdex.net/ wss://iwmap.americanexpress.com/ https://bat.bing.com/ https://aeopprodvip.acxiom.com/ wss://va.msg.liveperson.net/ https://www.google.com/ https://ib.adnxs.com/ https://ing-district.clicktale.net/ https://conductor.clicktale.net/; object-src 'self' https://www.aexp-static.com/;  1
frame-src 'self' *.tianqi.com *.baidu.com 1
default-src ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.entrecode.de https://www.youtube.com https://s.ytimg.com https://www.google-analytics.com *.googleapis.com *.googleadservices.com *.googletagmanager.com bat.bing.com *.doubleclick.net *.usercentrics.eu; object-src ; style-src 'unsafe-inline' *; img-src * data:; media-src *; child-src 'self' *.t5-karriereportal.de *.youtube.com *.googlevideo.com *.doubleclick.net; font-src * data:; connect-src * *.entrecode.de; manifest-src 'self' 1
default-src 'self' https://wp-rocket.helpscoutdocs.com https://djtflbt20bdde.cloudfront.net; frame-ancestors 'self' https://m.facebook.com; font-src 'self' https://reporting.wd40company.eu https://yoast.com https://netdna.bootstrapcdn.com *.gstatic.com data:; img-src 'self' *.cloudfront.net *.wd40.com https://www.google.com https://www.google.co.uk https://reporting.wd40company.eu/ https://yoast.com https://wp-rocket.me https://djtflbt20bdde.cloudfront.net https://i.ytimg.com *.googletagmanager.com https://stats.g.doubleclick.net *.googleapis.com *.gravatar.com *.wpmudev.org *.gstatic.com *.google-analytics.com https://cdn.wd40company.eu https://secure.gravatar.com *.cdninstagram.com *.fbcdn.net *.twimg.com *.facebook.com data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.wd40.com *.e2ma.net https://extend.vimeocdn.com *.ytimg.com https://reporting.wd40company.eu *.youtube.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdn.wd40company.eu https://extend.vimeocdn.com https://reporting.wd40company.eu https://djtflbt20bdde.cloudfront.net https://cdn.ampproject.org https://connect.facebook.net *.gstatic.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com https://emarketing.wd40.co.uk; frame-src 'self' *.vimeo.com https://djtflbt20bdde.cloudfront.net *.facebook.com https://yoa.st *.youtube-nocookie.com *.google.com *.youtube.com; style-src 'self' https://yoast.com https://djtflbt20bdde.cloudfront.net https://cdn.ampproject.org *.bootstrapcdn.com *.cloudflare.com 'unsafe-inline' https://code.jquery.com *.googleapis.com; connect-src 'self' *.wd40.com https://reporting.wd40company.eu https://wp-rocket.helpscoutdocs.com https://secure.helpscout.net https://api.ipify.org https://graph.facebook.com https://yoast.com *.google-analytics.com *.googleapis.com *.gstatic.com data:  1
frame-ancestors none; default-src 'unsafe-inline' 'self' *.keltia.net; frame-src *; object-src 'none'; style-src 'unsafe-inline' 'self' *.keltia.net 1
default-src 'self'; script-src  'self' 'unsafe-inline' 'unsafe-eval' https://rules.quantcount.com https://secure.quantserve.com https://www.youtube.com https://unpkg.com https://geolocation.onetrust.com/ https://cdn.cookielaw.org/ https://static.arcgis.com https://sp.analytics.yahoo.com https://s.yimg.com https://donorbox.org https://optimize.google.com https://tagmanager.google.com https://www.conservation.org https://app.vwo.com https://public.tableau.com *.typeform.com https://s3.amazonaws.com/trk.cetrk.com/f/t.js *.visualwebsiteoptimizer.com *.crazyegg.com *.stripe.com bitpay.com api.tiles.mapbox.com fast.wistia.com googleads.g.doubleclick.net www.googleadservices.com bat.bing.com secure.adnxs.com *.googletagmanager.com js.stripe.com dcc4iyjchzom0.cloudfront.net cartocdn-gusc.global.ssl.fastly.net conservation.carto.com sp13loader.ciapps.org maps.googleapis.com https://cdnjs.cloudflare.com http://conservation-tron.imgix.net ajax.googleapis.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://conservation-org.tron.silvertech.net https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com; style-src 'self' 'unsafe-inline' https://optimize.google.com https://tagmanager.google.com https://tagmanager.google.com api.tiles.mapbox.com sp13loader.ciapps.org  fonts.googleapis.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; img-src https://pixel.quantserve.com https://njoel9cc11.execute-api.us-east-1.amazonaws.com https://d2ey44ppm6i0sm.cloudfront.net https://53f5mmurac.execute-api.us-east-1.amazonaws.com https://53f5mmurac.execute-api.us-east-1.amazonaws.com https://d1wrq3tu9qy8md.cloudfront.net https://ci-pixel-ephemeral.s3.amazonaws.com https://ci-pixel-persistent.s3.amazonaws.com https://cicloud.s3.amazonaws.com/ https://cdn.cookielaw.org/ https://firecastwebserver01.ciapps.org https://services.arcgisonline.com https://server.arcgisonline.com https://d1iczxrky3cnb2.cloudfront.net https://ssl.gstatic.com https://www.gstatic.com http://cloud.conservation.org.s3.amazonaws.com/ https://cloud.conservation.org.s3.amazonaws.com/ https://www.arcgis.com/ https://public.tableau.com https://ci-public.s3.amazonaws.com *.crazyegg.com *.visualwebsiteoptimizer.com *.stripe.com *.googletagmanager.com sitefinity.ciapps-aws.org www.google.com.br www.google.com bat.bing.com stats.g.doubleclick.net cartocdn-gusc.global.ssl.fastly.net sp13loader.ciapps.org *.maps.api.here.com ciorg.imgix.net ciapps-kiwi.imgix.net 'self' maps.gstatic.com http://conservation-tron.imgix.net maps.googleapis.com https://conservation-org.tron.silvertech.net/ i.ytimg.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com; font-src 'self' sp13loader.ciapps.org themes.googleusercontent.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; connect-src 'self' https://privacyportal-eu.onetrust.com https://analytics.google.com https://stats.g.doubleclick.net https://script.crazyegg.com https://ci-public.s3.amazonaws.com https://conservation.org.s3.amazonaws.com https://dvm5qo6r5pdyf.cloudfront.net https://cdn.cookielaw.org/ https://tracking.crazyegg.com https://s.yimg.com https://api.altmetric.com https://doi.org https://api.crossref.org https://data.crossref.org https://carbonfootprint.short.car-calc.cc sample-api-v2.crazyegg.com https://cibitly.ciapps.org https://act.conservation.org https://firecastwebserver01.ciapps.org stripe.ciapps.org checkout.stripe.com bitpay.ciapps.org *.google-analytics.com bitpay.com events.mapbox.com api.mapbox.com convio.ciapps.org secure2.convio.net sharkstracker.ciapps.org conservation.carto.com sp13loader.ciapps.org accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com data: blob: ; media-src civideos.ciapps.org 'self' data: blob:; child-src 'self' https://forms.microsoft.com https://app.powerbi.com https://open.spotify.com https://donorbox.org/ https://optimize.google.com https://app.vwo.com https://firecastwebserver01.ciapps.org https://form.jotform.com/ https://www.un.org https://logiprod.conservation.org/ https://www.arcgis.com/ https://public.tableau.com *.microsoftonline.com *.office.com *.typeform.com www.tiktok.com data: blob: checkout.stripe.com bitpay.com bid.g.doubleclick.net sitefinity.ciapps-aws.org submit.jotformz.com form.jotformz.com 8760954.fls.doubleclick.net js.stripe.com www.qzzr.com https://platform.twitter.com/ http://conservation-tron.imgix.net https://syndication.twitter.com/ https://www.youtube.com/ https://conservation-org.tron.silvertech.net/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; 1
default-src 'self'; upgrade-insecure-requests; style-src 'self' 'unsafe-inline'; object-src 'none'; report-uri https://tdrs.report-uri.io/r/default/csp/enforce 1
default-src 'none'; font-src 'self' data: https:; img-src 'self' data: https:; connect-src 'self' https://api.redcross.com.ph https://quotes.rest/qod https://www.who.int/rss-feeds/news-english.xml https://hn.algolia.com/api/v1/search_by_date; script-src 'self'; style-src 'self' 'unsafe-inline'; prefetch-src 'self' 1
default-src 'self'; connect-src 'self' https://secure-ds.serving-sys.com/adServingData/PROD/TMClient/3/; font-src 'self'; frame-src 'self' https://www.youtube.com; img-src 'self' https://stats.g.doubleclick.net/r/ https://www.google-analytics.com/ https://www.google-analytics.com/r/; script-src 'self' 'unsafe-eval' 'unsafe-inline' http://www.google-analytics.com/ https://bs.serving-sys.com/ https://sadmin.brightcove.com/js/ https://secure-ds.serving-sys.com/SemiCachedScripts/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://www.googletagmanager.com/gtag/; style-src 'self' 'unsafe-inline'; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://emacsen.net; img-src 'self' https: data: blob: https://emacsen.net; style-src 'self' https://emacsen.net 'nonce-C2e0WYyBcs+rLs515uKMkA=='; media-src 'self' https: data: https://emacsen.net; frame-src 'self' https:; manifest-src 'self' https://emacsen.net; connect-src 'self' data: blob: https://emacsen.net https://emacsen.net wss://emacsen.net; script-src 'self' https://emacsen.net; child-src 'self' blob: https://emacsen.net; worker-src 'self' blob: https://emacsen.net 1
default-src 'self' *.zlm.nl vars.hotjar.com; script-src 'self' 'unsafe-inline' *.zlm.nl www.youtube.com www.googletagmanager.com www.google-analytics.com *.hotjar.com s.ytimg.com js-agent.newrelic.com 'unsafe-eval' bam.nr-data.net cehute.ramitetuha.com www.googleadservices.com data1.ahjilop.com data1.saliche.com connect.facebook.net najiwu.xeyutezepo.com bat.bing.com tpc.googlesyndication.com diyini.junasonuku.com data1.fedjuh.com googleads.g.doubleclick.net yotejo.cevocoxuhu.com; style-src 'self' 'unsafe-inline' www.youtube.com *.zlm.nl translate.googleapis.com; img-src 'self' *.zlm.nl i.ytimg.com www.youtube.com yt3.ggpht.com www.google-analytics.com data: www.gstatic.com translate.google.com www.googletagmanager.com bat.bing.com googleads.g.doubleclick.net www.facebook.com www.google.com www.google.nl https://script.hotjar.com; media-src 'self' *.zlm.nl; frame-src 'self' *.zlm.nl www.youtube.com www.youtube-nocookie.com vars.hotjar.com tpc.googlesyndication.com; frame-ancestors 'self' *.zlm.nl; font-src 'self' *.zlm.nl data: themes.googleusercontent.com fonts.gstatic.com https://script.hotjar.com; connect-src 'self' *.zlm.nl *.hotjar.com wss://*.hotjar.com vc.hotjar.io www.google-analytics.com bam.nr-data.net stats.g.doubleclick.net bat.bing.com www.googletagmanager.com; report-uri /report-csp-violation; upgrade-insecure-requests 1
default-src 'self' fyu.se  i.fyu.se 'unsafe-inline'; script-src 'self' fyu.se 'unsafe-inline'; img-src 'self' fyu.se i.fyu.se blob:; worker-src * blob: 1
default-src https: blob: data: wss: gap://ready; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob:; worker-src https: data: blob: 1
default-src 'self'; connect-src 'self' https://performance.typekit.net https://apikeys.civiccomputing.com *.siteimprove.com https://stats.g.doubleclick.net https://www.google-analytics.com https://data.cdnbasket.net https://page.cdnbasket.net https://view.cdnbasket.net https://ids.cdnwidget.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; frame-src 'self' https://www.google.com https://api-abf6734b.duosecurity.com https://player.vimeo.com https://www.youtube.com/; img-src 'self' data: *.siteimproveanalytics.io *.google.gg https://www.gstatic.com https://ssl.gstatic.com https://cm.g.doubleclick.net https://i.vimeocdn.com https://www.google.co.uk https://www.google.com https://p.typekit.net http://maps.gstatic.com http://maps.google.com http://maps.googleapis.com http://www.google-analytics.com https://img.youtube.com https://stats.g.doubleclick.net https://careyolsen.vuture.net *.siteimprove.com https://e.cdnwidget.com https://ads.yahoo.com https://x.bidswitch.net https://idsync.rlcdn.com https://us-u.openx.net https://www.facebook.com https://ib.adnxs.com https://d.adroll.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com http://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cc.cdn.civiccomputing.com https://apikeys.civiccomputing.com https://tagmanager.google.com *.siteimprove.net siteimproveanalytics.com *.siteimproveanalytics.com *.siteimproveanalytics.io https://js-agent.newrelic.com https://s.adroll.com https://www.careyolsen.com https://www.googleadservices.com https://cdn.mouseflow.com https://use.typekit.net http://fast.fonts.net http://www.google-analytics.com https://www.googletagmanager.com *.google.gg http://www.google.com http://maps.google.com https://pixel.cdnwidget.com https://bam.nr-data.net http://maps.googleapis.com https://googleads.g.doubleclick.net https://d.adroll.com https://connect.facebook.net https://www.gstatic.com https://secure.rock5rice.com https://secure.bomb5mild.com/js/192685.js https://secure.bomb5mild.com/Track/Capture.aspx; object-src 'self' blob:; 1
default-src 'self' https://www.phonepe.com https://phonepe.com https://website.phonepe.com; media-src 'self' https://www.phonepe.com https://phonepe.com https://website.phonepe.com; prefetch-src 'self' https://www.phonepe.com https://phonepe.com https://website.phonepe.com; script-src https://www.phonepe.com https://phonepe.com https://website.phonepe.com https://www.gstatic.com https://www.google.com http://api.recaptcha.net https://cdn.jotfor.ms https://form.jotform.me https://code.jquery.com https://www.google-analytics.com https://platform.twitter.com/ 'self' 'unsafe-inline'; style-src https://www.phonepe.com https://phonepe.com https://website.phonepe.com  https://cdn.jotfor.ms https://fonts.googleapis.com http://api.recaptcha.net 'self' 'unsafe-inline'; img-src data: https://website.phonepe.com data: https://www.phonepe.com https://phonepe.com https://imgstatic.phonepe.com http://images.phonepe.com http://api.recaptcha.net https://cdn.jotfor.ms 'self' https://www.google-analytics.com; font-src https://www.phonepe.com https://phonepe.com https://website.phonepe.com https://cdn.jotfor.ms https://fonts.gstatic.com/ 'self'; connect-src https://api.phonepe.com https://www.phonepe.com https://phon.pe https://phonepe.com https://website.phonepe.com https://insights-api.phonepe.com 'self'; frame-src http://api.recaptcha.net https://form.jotform.me https://docs.google.com https://qr.phonepe.com https://www.google.com https://phonepe.helpshift.com https://phonepe.freshdesk.com *.phonepe.com https://www.sisainfosec.com https://website.phonepe.com https://www.youtube.com https://platform.twitter.com/; frame-ancestors https://mercury.phonepe.com https://mercury-t1.phonepe.com https://mercury-t2.phonepe.com; report-uri https://csp.phonepe.com/log 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: data: wss:; block-all-mixed-content 1
default-src https:; connect-src https: wss:; font-src https: data:; img-src https: data: blob:; frame-src https:; worker-src https: data: 'unsafe-inline' 'unsafe-eval'; form-action https: javascript:; script-src https: data: 'unsafe-inline' 'unsafe-eval';style-src https: data: 'unsafe-inline'; base-uri 'self'; 1
default-src 'self' data: *.avaus.io *.avaus.com *.avaus.fi *.avaus.se *.facebook.net *.google.fi *.bizographics.com *.linkedin.com *.facebook.com *.marketo.com *.mktoresp.com *.marketo.net *.juicer.io *.instagram.com *.google.com *.google.se *.googleanalytics.com *.appspot.com player.vimeo.com *.vimeocdn.com cdnjs.cloudflare.com use.fontawesome.com *.adform.net *.google-analytics.com *.googleadservices.com *.doubleclick.net *.gstatic.com *.google.pl *.youtube.com *.ytimg.com *.ggpht.com *.vendemore.com *.cookiebot.com *.cookiepro.com *.onetrust.com *.googleapis.com *.googletagmanager.com *.slideshare.net *.slidesharecdn.com app.interactiveads.ai leadfeeder.com *.leadfeeder.com *.lfeeder.com snap.licdn.com bot.leadoo.com *.adobedtm.com *.demdex.net 'unsafe-inline' 'unsafe-eval' 1
default-src https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.largolibrary.com https://*.revize.com https://cdnjs.cloudflare.com https://cdn.userway.org https://www.gstatic.com https://*.google.com https://siteimproveanalytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.google-analytics.com https://chat.uniqueic.com https://api.instagram.com https://*.facebook.com https://*.facebook.net https://platform.twitter.com https://cdn.syndication.twimg.com https://s3-us-west-2.amazonaws.com https://crm.bloomerang.co https://ajax.aspnetcdn.com; style-src * 'unsafe-inline' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.elasticbeanstalk.com *.jquery.com *.seera.sa *.twitcount.com *.twitter.com https: data:; worker-src blob: 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://s3.amazonaws.com/icomoon.io/81457/ https://widget.wststatusboard.nl/marketing.css; font-src 'self' data: https://s3.amazonaws.com/icomoon.io/81457/ https://fonts.gstatic.com/ https://script.hotjar.com/; script-src 'self' 'unsafe-inline' https://www.gstatic.com/recaptcha/releases/ https://www.google.com/recaptcha/ https://uu.createsend.com/javascript/copypastesubscribeformlogic.js https://widget.wststatusboard.nl/marketing.js https://widget.wststatusboard.nl:8443/widget.js https://widget.wststatusboard.nl/widget.js https://maps.googleapis.com/ https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com; connect-src 'self' https://api.wststatusboard.nl https://api.wststatusboard.nl:8443 https://createsend.com/ https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://www.google-analytics.com; frame-src 'self' https://www.google.com/ https://www.youtube-nocookie.com/ https://vars.hotjar.com/; img-src 'self' data: https://maps.googleapis.com/ https://maps.gstatic.com/ https://i.ytimg.com/vi_webp/ https://www.google-analytics.com https://script.hotjar.com; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline';  script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self'; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline'; img-src 'self' 'unsafe-eval' 'unsafe-inline' data: ; frame-ancestors 'self' 1
block-all-mixed-content; base-uri 'self' 1
default-src http: https: data: blob: 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://tagmanager.google.com/ https://www.googletagmanager.com/ lh3.googleusercontent.com photos.app.goo.gl cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com lh3.googleusercontent.com photos.app.goo.gl cdn.jsdelivr.net; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com https://members.cml.org/ lh3.googleusercontent.com photos.app.goo.gl cdn.jsdelivr.net; media-src 'self' data: blob: www.youtube.com www.podbean.com; frame-src 'self' https://coloradodemography.github.io/Municipal_Data/ http://legislativematters.wordpress.com/ https://legislativematters.wordpress.com/ www.youtube.com www.podbean.com *.google.com; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com; 1
base-uri 'self';default-src 'self' cdn.helpspace.com helpspace.com;form-action 'self';script-src 'self' cdn.helpspace.com helpspace.com ferret.helpspace.com gist.github.com github.io cdn.paddle.com sentry.io 'unsafe-eval' 'nonce-fDW1BN8hOglBjHDXSqNq15eQuUn7wsFr';style-src 'self' cdn.helpspace.com helpspace.com ferret.helpspace.com github.githubassets.com github.io gist.github.com cdn.paddle.com sentry.io 'unsafe-inline';img-src 'self' cdn.helpspace.com helpspace.com ferret.helpspace.com cdn.paddle.com;media-src 'self' cdn.helpspace.com;font-src 'self' cdn.helpspace.com;object-src 'none';frame-src 'self' *.paddle.com paddle.com;frame-ancestors 'self';connect-src 'self' ws.helpspace.com ws://ws.helpspace.com ws://ws.helpspace.com:6001 wss://ws.helpspace.com:6001 wss://ws.helpspace.com https://sentry.io 1
object-src 'self' *.google.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com 1
style-src 'unsafe-inline' http:; script-src 'unsafe-inline' 'unsafe-eval' http: https: 1
default-src 'self' *.googlesyndication.com; 1
script-src 'self' 'unsafe-inline' 'sha256-Vm4GC9dCs8yiOt3vkFoyb7CG9wQvsbg2ZxRvujWCkjU=' 1
default-src * 'unsafe-inline' 'unsafe-eval' img-src data: 1
default-src 'none'; base-uri 'self'; frame-ancestors 'self'; frame-src 'self'; media-src 'self' https://ssl.gstatic.com; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com; connect-src 'self' https://www.google-analytics.com; font-src 'self' https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com https://www.google-analytics.com https://maxcdn.bootstrapcdn.com http://maxcdn.bootstrapcdn.com; form-action 'self' https://secure.paypal.com https://www.paypal.com; style-src 'self' https://kellypublishing.com https://ssl.gstatic.com https://fonts.googleapis.com http://maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com; script-src 'self' https://kellypublishing.com https://www.google-analytics.com https://www.googletagmanager.com; 1
default-src 'self' https:; font-src 'self' https: data: https://fonts.gstatic.com; img-src 'self' https: data: https://www.googletagmanager.com https://www.google-analytics.com https://optimize.google.com; object-src 'none'; frame-src 'self' https: https://optimize.google.com https://www.google.com/recaptcha/; script-src 'self' https: 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https://tagmanager.google.com https://www.googletagmanager.com https://edge.fullstory.com https://www.fullstory.com https://www.google-analytics.com https://ssl.google-analytics.com https://optimize.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'nonce-QWTOS7b11HB6C5frheI7OQ=='; style-src 'self' https: 'unsafe-inline' https://optimize.google.com https://tagmanager.google.com https://fonts.googleapis.com; connect-src 'self' https: https://rs.fullstory.com https://www.google-analytics.com; base-uri 'self'; report-uri https://7675095cf102cb04f6ef9b5b801194e5.report-uri.com/r/d/csp/reportOnly 1
frame-ancestors adnews.mobi 1
font-src                     'self';                 base-uri                     'self';                 connect-src                     'self'                     www.google-analytics.com                     *.google.co.uk                     *.google.com                     *.doubleclick.net                     www.facebook.com                     trc.taboola.com;                 form-action                     *.facebook.com                     'self';                frame-src                     'self'                     *.youtube.com                     *.googletagmanager.com                     *.google.com                     *.facebook.com                     connect.facebook.net                     *.doubleclick.net;                 script-src                     'unsafe-inline'                     'unsafe-eval'                     'self'                     ajax.googleapis.com                     www.googletagmanager.com                     www.google-analytics.com                     *.doubleclick.net                     www.googleadservices.com                     s.ytimg.com                     *.youtube.com                     *.google.com                     *.gstatic.com                     ajax.googleapis.com                     connect.facebook.net                     trc.taboola.com                     cdn.taboola.com;                 style-src                     'self'                     'unsafe-inline';                 object-src                     'none';                 frame-ancestors                     'self';                 img-src                     data:                     *                     'self';                 report-uri https://dnatc.report-uri.com/r/d/csp/enforce;                 report-to https://dnatc.report-uri.com/r/d/csp/enforce; 1
default-src https://www.zerobounce.net 'unsafe-inline' https://* www.zbapis.net; script-src https://www.zerobounce.net 'self' 'unsafe-eval' 'unsafe-inline' https://*; connect-src https://www.zerobounce.net https://* wss://* www.zbapis.net; style-src https://www.zerobounce.net 'unsafe-inline' https://* ; frame-src https://www.zerobounce.net 'self' https://* ; child-src https://www.zerobounce.net 'self' https://* ; worker-src https://www.zerobounce.net 'self' https://* ; font-src https://www.zerobounce.net data: https://* ; img-src https://www.zerobounce.net data: https://* ; object-src 'none' ; report-uri https://zerob.report-uri.com/r/d/csp/enforce 1
block-all-mixed-content; default-src 'self'; base-uri 'self'; form-action 'self' flightbookings.airnewzealand.co.kr flightbookings.airnewzealand.kr flightbookings.airnewzealand.ca flightbookings.airnewzealand.cn flightbookings.airnewzealand.co.nz flightbookings.airnewzealand.co.uk flightbookings.airnewzealand.com.au flightbookings.airnewzealand.com.hk flightbookings.airnewzealand.com.sg flightbookings.airnewzealand.com.tw flightbookings.airnewzealand.com flightbookings.airnewzealand.de flightbookings.airnewzealand.eu flightbookings.airnewzealand.fr flightbookings.airnewzealand.hk flightbookings.airnewzealand.jp flightbookings.airnewzealand.pf flightbookings.airnewzealand.tw  flightbookings.airnewzealand.com.cn flightbookings.grabaseat.co.nz  flightbookings.airnewzealand.co.jp auth.airnewzealand.co.nz auth.airnewzealand.eu; script-src 'self' s-airnz.com p-airnz.com 'unsafe-inline' 'unsafe-eval' maps.googleapis.com flightbookings.airnewzealand.co.nz player.vimeo.com www.youtube.com s.ytimg.com s.wayin.com xd.wayin.com s.engagesciences.com display.engagesciences.com *.demdex.net www.google-analytics.com analytics.google.com tagmanager.google.com www.googletagmanager.com *.doubleclick.net www.googleadservices.com www.googletagservices.com www.google.com pagead2.googlesyndication.com cdn-assets-prod.s3.amazonaws.com *.optimizely.com optimizely-hrd.appspot.com optimizely.s3.amazonaws.com s.swiftypecdn.com upgrade.plusgrade.com nebula-cdn.kampyle.com screencapture.kampyle.com screencaptue-cdn.kampyle.com *.hotjar.com yourir.info auth.airnewzealand.co.nz auth.airnewzealand.eu ssl.google-analytics.com cdnjs.cloudflare.com res.levexis.com; style-src 'unsafe-inline' s-airnz.com p-airnz.com fonts.googleapis.com tagmanager.google.com s.swiftypecdn.com upgrade-cdn-prd.plusgrade.com yourir.info 'self'; img-src https: data:; font-src s-airnz.com p-airnz.com fonts.googleapis.com fonts.gstatic.com dhm5hy2vn8l0l.cloudfront.net script.hotjar.com 'self'; media-src 'self' video.cdnvue.com ; frame-src 'self' www.google.com nz.fltmaps.com player.youku.com v.qq.com player.vimeo.com www.youtube.com airnz.wufoo.com xd.wayin.com display.engagesciences.com *.demdex.net *.doubleclick.net www.googletagmanager.com *.cdn.optimizely.com nebula-cdn.kampyle.com *.hotjar.com; connect-src 'self' api.airnz.io api.airnz.ai auth.airnewzealand.co.nz auth.airnewzealand.eu *.demdex.net *.tt.omtrdc.net www.google-analytics.com analytics.google.com stats.g.doubleclick.net adservice.google.com pagead2.googlesyndication.com *.optimizely.com s.swiftypecdn.com search-api.swiftype.com *.kampyle.com wss://*.hotjar.com https://*.hotjar.com vc.hotjar.io yourir.info ssl.google-analytics.com; object-src 'none'; frame-ancestors 'self'; report-uri /csp-report 1
default-src 'self' https:; child-src 'self' https: http:; font-src 'self' https: data:; img-src 'self' http: https: data: sounz.org.nz; media-src 'self' https: http:; object-src 'self' https: http:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https: http:; style-src 'self' https: 'unsafe-inline' 1
default-src 'self' www.adn.de media.adn.de; img-src 'self' * data:; media-src 'self' * data:; frame-src * data:; script-src * 'self' 'unsafe-inline' data: 'unsafe-eval'; style-src * 'self' 'unsafe-inline'; font-src *; child-src *; object-src https://www.youtube.com; connect-src *; frame-ancestors * https: data: https://www.youtube.com/; 1
frame-ancestors https://*.zscalertwo.net 'self' *.gehealthcare.com *.gehealthcare.co.uk https://virtualevents.6connex.com https://ecr2020admin.expo-ip.com https://ecr2020.expo-ip.com/ https://overcome.6connex.eu https://gehealthcare.6connex.eu/ https://gehealthcare-oncology.com http://ge-eanm-sympo.com https://www.genworkshealth.com https://lives2020.e-lives.org 1
default-src 'none'; form-action https://nowtv-international.secure.force.com; font-src 'self' https://web.static.nowtv.com https://www.sky.com https://static.skyassets.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://core.spreedly.com https://cdn.ravenjs.com https://web.static.nowtv.com https://cdn3.optimizely.com https://cdn.optimizely.com https://*.content-square.fr https://*.contentsquare.net https://analytics.global.sky.com https://*.demdex.net https://d3c3cq33003psk.cloudfront.net https://opentag-stats.qubit.com https://connect.facebook.net https://static.ads-twitter.com https://analytics.twitter.com https://*.doubleclick.net https://www.googleadservices.com https://vt.myvisualiq.net https://www.dwin1.com https://www.zenaps.com https://polyfill.io https://browser.sentry-cdn.com https://*.salesforce.com https://whatfix.com https://*.salesforceliveagent.com https://*.force.com https://help.nowtv.com https://*.sp-prod.net https://*.whatfix.com https://*.cdn.optimizely.com; connect-src 'self' https://*.optimizely.com https://*.ottcds.com https://*.skycdc.com https://*.sky.es https://*.sky.de https://*.nowtv.it https://*.sky.at https://*.skyboxoffice.com https://*.bskyb.com https://*.sky.com https://*.nowtv.com https://ott-clients.s3.amazonaws.com https://*.demdex.net https://opentag-stats.qubit.com https://graph.facebook.com https://*.contentsquare.net wss://*.nowtv.lightstreamer.com https://*.nowtv.lightstreamer.com wss://*.nowtv-dev.lightstreamer.com https://*.nowtv-dev.lightstreamer.com https://*.epgsky.com https://*.force.com https://*.sp-prod.net https://sourcepoint.mgr.consensu.org; img-src 'self' data: https://*.sky.es https://*.sky.de https://*.nowtv.it https://*.sky.at https://*.skyboxoffice.com https://*.sky.com https://*.nowtv.com https://t.co https://www.facebook.com https://*.contentsquare.net https://www.awin1.com https://www.zenaps.com https://*.epgsky.com https://now--c.documentforce.com https://cm.everesttech.net https://*.demdex.net https://aa.agkn.com https://pm.w55c.net https://cm.everesttech.net https://*.adnxs.com https://cm.g.doubleclick.net https://rtd.tubemogul.com https://analytics.twitter.com https://p.rfihub.com https://a.collective-media.net https://pixel.quantserve.com https://c.bing.com https://pixel.advertising.com https://image5.pubmatic.com https://a.tribalfusion.com https://cms.analytics.yahoo.com https://odr.mookie1.com https://dmp.v.fwmrm.net https://sync-tm.everesttech.net https://spl.zeotap.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://web.static.nowtv.com https://now.my.salesforce.com https://*.force.com https://nowtv.my.salesforce.com; media-src 'self' data: https://*.nowtv.com https://*.sky.com https://*.sky.es https://*.sky.de https://*.nowtv.it https://*.sky.at https://*.skyboxoffice.com; prefetch-src 'self' data: https://*.sky.es; frame-src  https://core.spreedly.com https://pay.sky.com https://signup.nowtv.com https://ottsas.sky.com https://web.static.nowtv.com https://skypay-01.cg.bskyb.com https://uat-p.ottsas.sky.com https://5884513.fls.doubleclick.net https://bskyb.demdex.net https://now.my.salesforce.com https://*.sp-prod.net https://nowtv-international.secure.force.com https://*.whatfix.com https://*.cdn.optimizely.com https://nowtv.my.salesforce.com; worker-src blob:; upgrade-insecure-requests; report-uri https://sentry.prd.ottcds.com/api/90/security/?sentry_key=7b074e724b744718a12f87d48756c876; 1
default-src 'self';img-src 'self' data: https://s3.eu-central-1.amazonaws.com https://miro.medium.com https://hsto.org https://habrastorage.org https://cdn24.img.ria.ru https://*.rbk.ru https://www.facebook.com https://vk.com https://mc.yandex.ru;font-src 'self' data: https://fonts.googleapis.com;style-src 'self' 'unsafe-inline' https://unpkg.com/;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://vk.com https://connect.facebook.net https://mc.yandex.ru https://code.jquery.com/;object-src 'none';connect-src 'self' https://mc.yandex.ru https://www.facebook.com https://vk.com https://www.google-analytics.com;frame-src 'self' https://www.youtube.com https://youtube.com 1
default-src https: data: 'unsafe-eval' 'unsafe-inline' 1
default-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *; connect-src 'self' *; img-src 'self' * data:; style-src 'self' 'unsafe-inline' *;base-uri 'self';form-action 'self' *;font-src 'self' * 1
default-src 'none'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://m.stripe.com https://m.stripe.network https://www.googletagmanager.com https://www.google-analytics.com https://unpkg.com https://cdn.polyfill.io https://storage.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.playhq.com https://cognito-idp.ap-southeast-2.amazonaws.com https://s3.ap-southeast-2.amazonaws.com https://www.google-analytics.com https://events.split.io https://auth.split.io https://o297455.ingest.sentry.io https://sentry.io https://sdk.split.io https://streaming.split.io; frame-src 'unsafe-inline' https://js.stripe.com https://www.googletagmanager.com; img-src 'self' https://*.playhq.com https://www.google-analytics.com data: https://res.cloudinary.com/playhq/; manifest-src 'self'; child-src 'self' 1
default-src 'self' vimeo.com *.vimeo.com *.openstreetmap.org *.instagram.com *.facebook.net www.youtube.com *.youtube.com www.google.com *.google.com googlesyndication.com *.googlesyndication.com *.www.bermudayp.com 'unsafe-inline'  *.google.com googlesyndication.com *.googlesyndication.com sentry.yabsta.net cdn.ravenjs.com www.google.com *.www.bermudayp.com *.gstatic.com www.googletagservices.com www.googletagmanager.com *.google-analytics.com *.twitter.com *.facebook.net *.simpli.fi www.facebook.com *.facebook.com *.twimg.com *.doubleclick.net *.googleapis.com;img-src * data: blob: 1
manifest-src 'self' 'unsafe-inline' 'unsafe-eval' 1
default-src https:; connect-src https:; font-src https: data:; frame-src https: wvjbscheme:; frame-ancestors https:; img-src https: data:; media-src https:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.google.com/uds/ *.googleapis.com *.google-analytics.com www.googletagmanager.com/ www.google.com/jsapi www.googleadservices.com www.youtube.com s.ytimg.com googleads.g.doubleclick.net static.hotjar.com script.hotjar.com static.ads-twitter.com cdn.mouseflow.com *.stripe.com js.braintreegateway.com *.fontawesome.com cdn.pubnub.com connect.facebook.net cdnjs.cloudflare.com/ajax/libs/select2/ cdnjs.cloudflare.com/ajax/libs/d3/ *.twitter.com *.twimg.com cdn.jsdelivr.net/npm/vue cdn.jsdelivr.net/npm/vue/dist/vue.js assets.sitescdn.net/ytag/ytag.min.js *.braintreegateway.com *.braintree-api.com widget.surveymonkey.com; style-src *.fontawesome.com 'unsafe-inline' 'self' www.google.com www.gstatic.com/recaptcha *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com *.twitter.com cdnjs.cloudflare.com/ajax/libs/select2/ use.fontawesome.com; 1
default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * 'self' data: http:; child-src * 'self' blob: http:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
upgrade-insecure-requests; default-src 'self'; connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com https://*.addthis.com; font-src 'self' https://fonts.gstatic.com data:; media-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' widget.trustpilot.com https://tracker.marinsm.com https://track.adform.net https://sc-static.net https://connect.facebook.net https://cdn.cookielaw.org https://maps.googleapis.com https://code.jquery.com https://instagram.com https://cdn.syndication.twimg.com https://s.ytimg.com https://platform.twitter.com https://www.linkedin.com https://px.ads.linkedin.com https://snap.licdn.com  https://www.youtube.com https://www.google-analytics.com https://tagmanager.google.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://*.addthis.com https://*.addthisedge.com https://graph.facebook.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://cdn.cookielaw.org https://platform.twitter.com; img-src 'self' data: https://tracker.marinsm.com https://track.adform.net https://www.facebook.com https://stats.g.doubleclick.net https://cdn.cookielaw.org https://hq.elanonline.net https://maps.googleapis.com https://maps.gstatic.com https://*.cdninstagram.com https://*.twimg.com https://*.twitter.com https://*.fbcdn.net https://storify.com https://www.google.com https://www.google.co.uk https://www.google-analytics.com https://tagmanager.google.com https://www.googletagmanager.com; child-src 'self' https://www.google.com https://*.addthis.com; frame-src 'self' widget.trustpilot.com https://track.adform.net https://tr.snapchat.com https://staticxx.facebook.com https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com https://*.addthis.com https://player.vimeo.com https://www.google.com https://www.youtube.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.hotjar.com *.googletagmanager.com *.sharethis.com *.jquery.com *.jsdelivr.net *.bing.com *.proofpoint.com *.hs-scripts.com *.facebook.net *.ads-twitter.com *.bing.com *.hs-analytics.net *.hs-banner.com *.doubleclick.net *.twitter.com *.stackadapt.com *.googleadservices.com *.googleapis.com *.google.com *.gstatic.com *.nutrienagsolutions.com  *.hsforms.net *.hsforms.com; style-src 'self' 'unsafe-inline' *.typekit.net *.sharethis.com *.stackadapt.com *.googleapis.com *.nutrienagsolutions.com  *.hsforms.net *.hsforms.com; img-src 'self' data: *.bing.com t.co *.google.com *.google.co.in *.google.ca *.facebook.com *.hubspot.com *.gstatic.com *.googleapis.com *.google-analytics.com *.sharethis.com *.ytimg.com *.googletagmanager.com *.nutrienagsolutions.com  *.hsforms.net *.hsforms.com; media-src 'self' *.nutrienagsolutions.com  *.hsforms.net *.hsforms.com; frame-src 'self' *.consensu.org *.hotjar.com *.sharethis.com *.doubleclick.net *.youtube.com *.facebook.com *.google.com  *.nutrienagsolutions.com *.stackadapt.com  *.hsforms.net *.hsforms.com; font-src 'self' *.typekit.net *.gstatic.com  *.nutrienagsolutions.com  *.hsforms.net *.hsforms.com; connect-src 'self' *.sharethis.com *.google-analytics.com *.doubleclick.net *.stackadapt.com *.hotjar.com wss://ws4.hotjar.com wss://ws3.hotjar.com wss://ws8.hotjar.com  *.amazonaws.com  *.hsforms.net *.hsforms.com; report-uri /report-csp-violation; upgrade-insecure-requests 1
frame-ancestors  cms.gkfx.eu cms.gkfx.de cms.gkfx.ae cms.gkfx.es cms.gkfx.it partnersportal.gkfx.com affiliatetest.gkfx.com localhost:82 affiliates.gkfx.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cc.cdn.civiccomputing.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://tools.eurolandir.com/ https://cdn.videosync.fi/ https://www.googleadservices.com/ https://snap.licdn.com/ https://komito.net/ https://googleads.g.doubleclick.net/ https://3xscreen.videosync.fi/ https://player.vimeo.com/api/player.js http://tools.euroland.com/tools/common/eurolandiframeautoheight/eurolandtoolsintegrationobject.js https://connect.facebook.net/ http://cdn.pardot.com/ https://maps.googleapis.com/ http://pi.pardot.com/ cdnjs.cloudflare.com; font-src 'self' data: https://fonts.googleapis.com/ https://fonts.gstatic.com/ ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ ; connect-src 'self' https://apikeys.civiccomputing.com/ https://our.umbraco.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/; frame-src 'self' https://tools.eurolandir.com/ https://www.thewaterfront.com/ https://gamma.euroland.com/ https://fast.wistia.net/ https://view.vzaar.com/ https://player.vimeo.com/ https://www.youtube.com/ https://go.1spatial.com/ https://www.google.com/ https://e.issuu.com/; img-src 'self' data: https://px.ads.linkedin.com/ https://www.google.com/ https://accounts.google.com https://dashboard.umbraco.org/ https://www.google-analytics.com/ https://p.adsymptotic.com/ https://accounts.youtube.com/ https://www.google.co.uk/ https://accounts.google.co.uk/ https://i.ytimg.com/vi/668nUCeBHyY/mqdefault.jpg https://1spatial.com/ https://maps.gstatic.com/ https://maps.googleapis.com/ 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com 'strict-dynamic' 'nonce-NDIwNzk5ODg0NiwyMjQyMzIxNTQ='; report-uri https://exceptions.hubspot.com/csp/report; 1
default-src 'self'; connect-src 'self' telmac.co.in drstech.co.in *.googleapis.com; style-src 'self' 'unsafe-inline' telmac.co.in drstech.co.in *.googleapis.com *.cloudflare.com code.jquery.com *.bootstrapcdn.com; font-src 'self' *.googleapis.com *.gstatic.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' telmac.co.in drstech.co.in *.googleapis.com *.google.com *.cloudflare.com code.jquery.com *.bootstrapcdn.com; img-src 'self' telmac.co.in drstech.co.in *.google.com *.googleapis.com code.jquery.com data: *.gstatic.com *.histats.com; object-src *.histats.com; frame-src 'self' www.youtube.com *.google.com maps.googleapis.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube-nocookie.com maps.googleapis.com developers.google.com *.3qsdn.com *.flickr.com tde-stats.spin-ag.de *.telefonica.de; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.3qsdn.com; connect-src 'self' *.3qsdn.com; media-src 'self' *.youtube-nocookie.com *.3qsdn.com *.flickr.com blob:; child-src 'self' *.telefonica.de *.udldigital.de *.youtube-nocookie.com *.3qsdn.com blob:; object-src 'self'; frame-src 'self' *.telefonica.de *.youtube-nocookie.com data:; form-action 'self'; img-src 'self' chart.apis.google.com maps.gstatic.com *.googleapis.com developers.google.com *.udldigital.de *.telefonica.de *.flickr.com tde-stats.spin-ag.de *.3qsdn.com data: 1
frame-src 'self' http://onlinetestrunner.etadbir.com; frame-ancestors 'self' http://onlinetestrunner.etadbir.com; 1
default-src data: * 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://maps.googleapis.com/ https://www.googletagmanager.com/gtag/ https://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js https://www.google-analytics.com/analytics.js ; img-src 'self' data: https://maps.googleapis.com https://maps.gstatic.com https://googletagmanager.com https://i.ytimg.com/vi_webp/-jGV1WPLdIE/ https://www.google-analytics.com/  https://www.gstatic.com/images/branding/product/2x/ https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/; font-src 'self' https://fonts.gstatic.com/; frame-src 'self' https://player.vimeo.com https://www.youtube.com/ https://www.youtube-nocookie.com/embed/;  style-src 'self' https://fonts.googleapis.com/css https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/1.0.9/ 'unsafe-inline'; connect-src 'self' https://www.google-analytics.com; report-uri https://ankoecsp.uriports.com/reports/report; 1
frame-ancestors 'self' facebook.com *.facebook.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://seal.websecurity.norton.com; img-src 'self' https://seal.websecurity.norton.com https://i.ytimg.com data:; frame-src 'self' https://www.youtube.com; frame-ancestors 'self' 1
frame-ancestors my.cratejoy.com www.thenomadik.com thenomadik.cratejoy.com 1
frame-ancestors 'self' https://ece.umass.edu 1
script-src * 'unsafe-inline' 'unsafe-eval'; object-src 'self'; 1
frame-ancestors carecenla.nationbuilder.com 1
frame-ancestors 'self' https://microapps.google.com/ https://pwa.zomato.com; default-src *; font-src * data:; child-src 'self' * blob:; img-src * data:; media-src * blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' browser.sentry-cdn.com *.jwpcdn.com *.cloudflare.com *.twitter.com *.recruiterbox.com *.zdev.net *.zdev.net:8080 *.zomato.com *.tinymce.com *.gstatic.com *.googleapis.com *.google.com *.google.co.in *.facebook.com sdk.accountkit.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.nr-data.net *.newrelic.com *.google-analytics.com *.zmtcdn.com *.googletagmanager.com *.facebook.net *.googleadservices.com *.cdninstagram.com *.googlesyndication.com *.spreedly.com *.instagram.com *.twimg.com d1m0gkspj3l6or.cloudfront.net d3mvnvhjmkxpjz.cloudfront.net d36mpcpuzc4ztk.cloudfront.net d2weczhvl823v0.cloudfront.net d2z9qv80fklwtv.cloudfront.net d32l4mqe5xk032.cloudfront.net *.serving-sys.com *.pubnub.com *.branch.io app.link cdn.poll-maker.com *.ampproject.org rec.smartlook.com static.hotjar.com script.hotjar.com zba.se *.googletagmanager.com eff.org cdn.plot.ly 3717.tm.zedo.com *.bing.com static.criteo.net sslwidget.criteo.com gum.criteo.com mddigital.in static.zdassets.com zomato.zendesk.com cdn.taboola.com trc.taboola.com ds-aksb-a.akamaihd.net service.force.com zomato.my.salesforce.com zomato.secure.force.com d.la1-c1-hnd.salesforceliveagent.com; style-src * 'unsafe-inline'; worker-src 'self' https: blob:; 1
script-src: https://analytics.google.com 1
style-src 'self' 'nonce-6965802f-b26a-43ba-985b-379450cf35fb' www2.triodos.com; img-src 'self' p-pan.triodos.com api.triodos.com maps.triodos.com www2.triodos.com video.triodos.com ad.doubleclick.net adservice.google.com www.facebook.com data: android-webview-video-poster:; font-src 'self' data:; script-src 'self' 'nonce-6965802f-b26a-43ba-985b-379450cf35fb' t-pan.triodos.com p-pan.triodos.com www2.triodos.com video.triodos.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com; child-src https://www.youtube.com https://www.youtube-nocookie.com; default-src 'self' video.triodos.com; 1
default-src 'none'; object-src 'self'; script-src 'self' 'unsafe-inline' code.jquery.com; connect-src 'self'; img-src *; style-src 'self' 'unsafe-inline'; font-src 'self' data:; media-src 'self' 1
default-src * 'unsafe-inline' 'unsafe-eval' blob:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; worker-src * blob: 1
frame-ancestors 'self' https://astrafemus.com https://e-egorov.ru 1
frame-ancestors https://*.cinematheque.ch 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://nerdculture.de; img-src 'self' https: data: blob: https://nerdculture.de; style-src 'self' https://nerdculture.de 'nonce-16tPCBOokM+XHUIV64kFVg=='; media-src 'self' https: data: https://nerdculture.de; frame-src 'self' https:; manifest-src 'self' https://nerdculture.de; connect-src 'self' data: blob: https://nerdculture.de https://nerdculture.de wss://nerdculture.de; script-src 'self' https://nerdculture.de; child-src 'self' blob: https://nerdculture.de; worker-src 'self' blob: https://nerdculture.de 1
default-src 'self' https://*.optimizely.com https://www.google-analytics.com https://*.heg-cp.com; style-src 'self' 'unsafe-inline' https://*.hosteurope.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hosteurope.de https://js.leadinspector.de http://js.leadinspector.de https://js.leadinspector.de tags.tiqcdn.com https://*.doubleclick.net https://static-artifact.heg-cp.com https://cdn.polyfill.io https://www.google.com https://www.gstatic.com https://*.optimizely.com http://*.optimizely.com www.googleadservices.com https://bat.bing.com www.dwin1.com https://connect.facebook.net https://www.google-analytics.com ajax.googleapis.com https://*.twitter.com https://static.ads-twitter.com https://*.ampproject.org; font-src 'self' data:; object-src 'self'; img-src 'self' 'unsafe-inline' https://www.hosteurope.com/ data: https://www.google.com.ua https://*.leadinspector.de https://i.ytimg.com https://*.g.doubleclick.net https://bat.bing.com https://www.google-analytics.com https://www.facebook.com https://www.google.com https://www.google.de https://t.co https://*.multiscreensite.com; frame-src 'self' https://www.google.com https://*.optimizely.com https://*.facebook.com https://*.facebook.net www.youtube.com *.vimeo.com *.vimeocdn.com *.doubleclick.net; 1
default-src http: data: blob: 'unsafe-inline' 'unsafe-eval' 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://maps.googleapis.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://bat.bing.com https://connect.facebook.net https://sibforms.com https://atout.email-match.com https://app.katchup.fr https://s.adroll.com https://i.realytics.io https://dcniko1cv0rz.cloudfront.net https://asset.easydmp.net https://idsync.rlcdn.com https://spl.zeotap.com https://d.adroll.mgr.consensu.org https://d.adroll.com https://sibautomation.com; object-src 'self'; worker-src 'self' blob:; frame-ancestors 'self' https://idealspaces-cuisines-aviva-prod.2020-platform.com 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://digitalcourage.social; img-src 'self' https: data: blob: https://digitalcourage.social; style-src 'self' https://digitalcourage.social 'nonce-tiMzNQhk0uxqJzzEMq7iSA=='; media-src 'self' https: data: https://digitalcourage.social; frame-src 'self' https:; manifest-src 'self' https://digitalcourage.social; connect-src 'self' data: blob: https://digitalcourage.social https://digitalcourage.social wss://digitalcourage.social; script-src 'self' https://digitalcourage.social; child-src 'self' blob: https://digitalcourage.social; worker-src 'self' blob: https://digitalcourage.social 1
default-src https: 'self' 'unsafe-inline';img-src 'self' data: www.zlate-mince.cz www.prazskamincovna.cz www.google-analytics.com stats.g.doubleclick.net c.imedia.cz;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org ajax.cloudflare.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com c.imedia.cz cdn.jsdelivr.net 1
script-src 'nonce-97ad6a2613ffe1d4ae0867ce2d95d3cb' 'nonce-v+7wJcXXi+yvoruVTzurBhBXLyfU1Z1T6zjkbTiDg+g=' 'self' 'unsafe-eval' https: 'sha256-jTbbX7kA2AFEiHkjGYboK9ooUurX+Mc9th2/quUZwkI=' 'sha256-yntX1DMo3v8w5zK0Wt5LS96gm1dTl95wU0As+x8+vsU='; frame-ancestors 'none' 1
default-src 'none'; img-src 'self' *.oettinger-physics.de data: cdnjs.cloudflare.com unpkg.com ; script-src 'self' *.oettinger-physics.de 'nonce-uYaV4vmjlGIPscszBc+5yK4kPrY=' cdnjs.cloudflare.com unpkg.com ; style-src 'self' *.oettinger-physics.de cdnjs.cloudflare.com unpkg.com ; font-src 'self' cdnjs.cloudflare.com www.oettinger-physics.de; base-uri 'self'; form-action 'self' ; frame-ancestors 'self' www.oettinger-physics.de child-src  worker-src 1
frame-ancestors 'self' *.rijssen-holten.nl 1
frame-ancestors 'none'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-2h3sQjqGDKFyo8ncjUSFCw==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.youtube.com *.yahooapis.com blob: *.izlesene.com *.ioam.de *.avg.com *.rewardsaccelerator.com smetrics.att.com; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; img-src 'self' data: https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv smetrics.att.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv; media-src * blob:; object-src *; connect-src *; font-src * data:; child-src blob:; 1
'self' 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; object-src 'self'; base-uri 'self'; img-src https: data: http://imagepool.drillisch-online.de; font-src https:; form-action 'self'; connect-src 'self' https://imagepool.drillisch-online.de https://tags.tiqcdn.com https://collect.tealiumiq.com/event https://collect-eu-central-1.tealiumiq.com https://tracking.drillisch.de https://*.demdex.net; script-src 'strict-dynamic' 'nonce-78269bc3ad22250ffd25cbc4b30e1557' 'nonce-60eaf770b5bcf6b8f44754be0d0e4203' 'nonce-b27aeb22ca6efe905f54c6d884695670' 'nonce-895b846bc39e0330490d27bca56a0aec' 'nonce-03cab15d7349b2f8cd0393b6c30eb30e' 'nonce-477582a885f8346b9a27c48acb088b9e' 'nonce-ef5149d566eafe1141a537b0ac220010' 'nonce-cff1f7bde385e34b6f7aa041ee735c7b' 'nonce-97c8caf4bb514547de7d7cfa633c3f44' 'nonce-629418da5dda9b549254a79fdd1fffe8' 'self' https:; style-src 'self' 'unsafe-inline' https: data:; frame-ancestors 'self'; frame-src https://1and1internetag.demdex.net https://tags.tiqcdn.com; child-src https://tags.tiqcdn.com; upgrade-insecure-requests; block-all-mixed-content; report-uri /csp-reports; script-src-elem 'strict-dynamic' 'nonce-78269bc3ad22250ffd25cbc4b30e1557' 'nonce-60eaf770b5bcf6b8f44754be0d0e4203' 'nonce-b27aeb22ca6efe905f54c6d884695670' 'nonce-895b846bc39e0330490d27bca56a0aec' 'nonce-03cab15d7349b2f8cd0393b6c30eb30e' 'nonce-477582a885f8346b9a27c48acb088b9e' 'nonce-ef5149d566eafe1141a537b0ac220010' 'nonce-cff1f7bde385e34b6f7aa041ee735c7b' 'nonce-97c8caf4bb514547de7d7cfa633c3f44' 'nonce-629418da5dda9b549254a79fdd1fffe8' 'self' https: 1
base-uri 'none'; object-src 'none'; script-src https://www.hardwaremana.community/logs/ https://www.hardwaremana.community/sidekiq/ https://www.hardwaremana.community/mini-profiler-resources/ https://www.hardwaremana.community/assets/ https://www.hardwaremana.community/brotli_asset/ https://www.hardwaremana.community/extra-locales/ https://www.hardwaremana.community/highlight-js/ https://www.hardwaremana.community/javascripts/ https://www.hardwaremana.community/plugins/ https://www.hardwaremana.community/theme-javascripts/ https://www.hardwaremana.community/svg-sprite/ https://www.googletagmanager.com/gtm.js https://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/; worker-src 'self' https://www.hardwaremana.community/assets/ https://www.hardwaremana.community/brotli_asset/ https://www.hardwaremana.community/javascripts/ https://www.hardwaremana.community/plugins/ 1
default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src https: wss:; img-src data: https://* 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' www.stratos-ad.com code.jquery.com t.sharethis.com w.sharethis.com wd-edge.sharethis.com maps.googleapis.com www.google-analytics.com www.exitjunction.com www.bcloudhost.com contextual.media.net lg3.media.net 1
default-src 'self'; style-src 'self' 'unsafe-inline'; img-src *; media-src * 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://*.criteo.com https://static.criteo.net https://player.vimeo.com https://vimeo.com https://wb.messengerpeople.com https://isitetv.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tpc.googlesyndication.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; form-action 'self' https://www.facebook.com https://www.iwoot.us https://m.iwoot.us https://checkout.iwoot.us https://connect.facebook.net https://tr.snapchat.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://*.criteo.com https://static.criteo.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://tpc.googlesyndication.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; report-to report-endpoint 1
default-src 'self' danq.me *.danq.me *.wp.com public-api.wordpress.com; frame-src 'self' danq.me *.danq.me www.youtube-nocookie.com w.soundcloud.com embed.ted.com *.wp.com videopress.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' danq.me *.danq.me *.wp.com; style-src 'self' *.wp.com 'unsafe-inline'; img-src * 'self' *.wp.com data:; font-src 'self' *.wp.com wordpress.com data:; worker-src 'self' danq.me; report-uri https://danq.report-uri.com/r/d/csp/enforce 1
frame-ancestors 'self' junchae.com linkharu.com 1
default-src 'self' 'unsafe-eval' https://analytics.twitter.com https://code.jquery.com https://connect.facebook.net https://googleads.g.doubleclick.net https://snap.licdn.com https://static.ads-twitter.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.gstatic.com https://www.mahindracomviva.com https://www.youtube.com https://fonts.gstatic.com https://static.doubleclick.net https://www.facebook.com https://www.google.com/  https://www.youtube-nocookie.com/ http://www.un.org/ ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.twitter.com https://code.jquery.com https://connect.facebook.net https://googleads.g.doubleclick.net https://snap.licdn.com https://static.ads-twitter.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.gstatic.com https://www.mahindracomviva.com https://www.youtube.com https://fonts.gstatic.com https://static.doubleclick.net  https://comvivasocial.com/ https://platform.twitter.com https://www.googletagmanager.com http://platform.twitter.com/ https://ajax.googleapis.com/  https://s0.wp.com/ https://stats.wp.com/ https://s1.wp.com/; style-src 'self' 'unsafe-inline' https://analytics.twitter.com https://code.jquery.com https://connect.facebook.net https://googleads.g.doubleclick.net https://snap.licdn.com https://static.ads-twitter.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.gstatic.com https://www.mahindracomviva.com https://www.youtube.com https://fonts.gstatic.com https://static.doubleclick.net http://fonts.googleapis.com; img-src 'self' 'unsafe-inline' data: https://analytics.twitter.com https://code.jquery.com https://connect.facebook.net https://googleads.g.doubleclick.net https://snap.licdn.com https://static.ads-twitter.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.gstatic.com https://www.mahindracomviva.com https://www.youtube.com https://fonts.gstatic.com https://static.doubleclick.net https://px.ads.linkedin.com https://t.co https://www.google.co.in https://stats.g.doubleclick.net https://p.adsymptotic.com https://www.facebook.com https://www.google.com/ http://t.co https://ps.w.org/ *.gravatar.com https://s.w.org/ https://i.ytimg.com http://img.youtube.com https://img.youtube.com https://cdn1.iconfinder.com https://pixel.wp.com/ https://majorelevents.in/ https://www.comviva.com/; connect-src 'self' https://analytics.twitter.com https://code.jquery.com https://connect.facebook.net https://googleads.g.doubleclick.net https://snap.licdn.com https://static.ads-twitter.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.gstatic.com https://www.mahindracomviva.com https://www.youtube.com https://fonts.gstatic.com https://static.doubleclick.net https://www.facebook.com https://www.google.com/ https://stats.g.doubleclick.net https://developer.hirexp.com/ https://majorelevents.in/; font-src 'self' data: http://fonts.gstatic.com; report-uri https://www.comviva.com; upgrade-insecure-requests 1
default-src 'unsafe-inline' 'unsafe-eval' https://www.cuetoems.com https://*.paypal.com https://*.paypalobjects.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.aspnetcdn.com https://ajax.googleapis.com https://*.authorize.net https://maps.googleapis.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://*.paypal.com https://*.paypalobjects.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://*.fontawesome.com; img-src 'self' data: https://cemsuploads.s3.amazonaws.com https://*.googleapis.com https://maps.gstatic.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://pubads.g.doubleclick.net https://ssl.google-analytics.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.fontawesome.com; connect-src 'self' https://cemsuploads.s3.amazonaws.com https://maps.googleapis.com https://*.authorize.net https://*.shift4api.net https://*.i4go.com https://*.paypal.com https://*.paypalobjects.com; media-src 'none' ; object-src 'self' ; frame-ancestors 'none' ; form-action 'self' ; upgrade-insecure-requests; block-all-mixed-content; report-uri https://www.cuetoems.com/cspreport.ashx; 1
frame-ancestors 'self' www.facebook.com; 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://skull.website; img-src 'self' https: data: blob: https://skull.website; style-src 'self' https://skull.website 'nonce-68nf7OyCRjsjprU4PHFCTA=='; media-src 'self' https: data: https://skull.website; frame-src 'self' https:; manifest-src 'self' https://skull.website; connect-src 'self' data: blob: https://skull.website https://cdn.masto.host wss://skull.website; script-src 'self' https://skull.website; child-src 'self' blob: https://skull.website; worker-src 'self' blob: https://skull.website 1
frame-ancestors *.exacttarget.com *.marketingcloudapps.com *.exct.net *.salesforce.com 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-MDY0YTU5NjAtNTc0ZC00MTg1LTg3NmEtYjY4MDJkNjRmMWM4'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
default-src 'self';style-src 'self' 'unsafe-inline'; 1
frame-ancestors 'self' https://www.leedonline.com https://leedonline-api.usgbc.org 1
frame-ancestors https://insportline-cz.livesale.me https://insportline-pl.livesale.me 1
frame-ancestors 'self' 'unsafe-inline' 1
default-src 'self' junfermann.de www.junfermann.de captcha.wirth-horn.de cookiemanager.wirth-horn.de whstatistics-api.wirth-horn.de https://www.google-analytics.com https://tagmanager.google.com https://www.googletagmanager.com https://www.googleadservices.com *.g.doubleclick.net https://fonts.googleapis.com https://www.youtube.com https://www.youtube-nocookie.com https://www.blickinsbuch.de https://appjs.blickinsbuch.de https://www.instagram.com 'unsafe-eval' 'unsafe-inline'; img-src data: *; media-src *; font-src data: 'self' https://fonts.gstatic.com https://fonts.googleapis.com; report-uri /csp-report.cfm 1
default-src 'none'; connect-src 'self'; font-src 'self' https://themes.googleusercontent.com; frame-src https://platform.twitter.com https://syndication.twitter.com; img-src 'self' data: https://pbs.twimg.com https://platform.twitter.com https://s1795.t.eloqua.com https://smtrcs.redhat.com https://syndication.twitter.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.syndication.twimg.com https://img.en25.com https://platform.twitter.com https://secure.eloqua.com https://secure.p01.eloqua.com https://static.redhat.com https://www.redhat.com; style-src 'self' 'unsafe-inline' https://platform.twitter.com 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://embed.cacher.io https://www.google-analytics.com https://cdn.mxpnl.com https://*.crisp.chat https://cdn.commento.io https://cdn.jsdelivr.net https://*.algolia.net; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://client.crisp.chat; media-src 'self' https://cdn.cacher.io; frame-src 'self' https://www.youtube.com; frame-ancestors 'self' https://app.cacher.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://client.crisp.chat https://cdn.commento.io https://cdn.jsdelivr.net; connect-src 'self' https://api-js.mixpanel.com https://s3.amazonaws.com https://client.crisp.chat https://www.google-analytics.com wss://client.relay.crisp.chat https://commento.io https://*.algolia.net; img-src https://* http://* data:; 1
default-src 'self'; script-src 'self' https://snap.licdn.com 'unsafe-inline' 'unsafe-eval' https://web.facebook.com https://mc.yandex.ru/* vk.com mc.yandex.ru tagmanager.google.com https://connect.facebook.net/en_US/sdk.js *.google-analytics.com http://cdn.livechatinc.com https://www.youtube.com https://maps.googleapis.com https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ *.maps.googleapis.com *.gstatic.com https://maps.googleapis.com/maps/api/ https://www.google.com/pagead/ https://jonathantneal.github.io/svg4everybody/svg4everybody.min.js https://jonneal.dev/svg4everybody/svg4everybody.min.js https://maps.googleapis.com/maps-api-v3/api/js/35/4/util.js https://maps.googleapis.com/maps-api-v3/api/js/35/4/common.js https://cdn.polyfill.io/v2/polyfill.min.js https://clip2net.com https://secure.livechatinc.com https://www.googletagmanager.com https://www.googleadservices.com https://connect.facebook.net https://www.facebook.com https://*.playbuzz.com https://sc-static.net https://sb.scorecardresearch.com https://*.doubleclick.net https://*.bing.com; style-src 'self' 'unsafe-inline' https://web.facebook.com/ https://use.typekit.net/pwq5edw.css https://p.typekit.net/p.css https://fonts.googleapis.com tagmanager.google.com; font-src 'self' 'unsafe-inline' tagmanager.google.com https://use.typekit.net https://fonts.gstatic.com ; img-src * data:  'self' * https://maps.gstatic.com http://www.google-analytics.com https://stats.g.doubleclick.net *.google.com https://www.google.com.ua; frame-src 'self' https://web.facebook.com https://staticxx.facebook.com/ https://www.google.com https://www.youtube.com https://*.playbuzz.com https://tr.snapchat.com https://www.facebook.com https://*.doubleclick.net; connect-src 'self' https://mc.yandex.ru https://www.facebook.com/tr/ https://www.google-analytics.com https://*.playbuzz.com https://*.doubleclick.net 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://birb.site; img-src 'self' https: data: blob: https://birb.site; style-src 'self' https://birb.site 'nonce-yx/XdgoDxdGqFajGIRKEPw=='; media-src 'self' https: data: https://birb.site; frame-src 'self' https:; manifest-src 'self' https://birb.site; connect-src 'self' data: blob: https://birb.site https://cdn.masto.host wss://birb.site; script-src 'self' https://birb.site; child-src 'self' blob: https://birb.site; worker-src 'self' blob: https://birb.site 1
frame-ancestors https://myota.tradingacademy.com http://myota.tradingacademy.com 1
default-src 'self';script-src 'self' https://ajax.aspnetcdn.com https://az416426.vo.msecnd.net https://cdnjs.cloudflare.com https://cdn.syndication.twimg.com https://code.jquery.com https://js.stripe.com https://platform.twitter.com https://pro.fontawesome.com https://stackpath.bootstrapcdn.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.cn https://www.gstatic.com https://www.recaptcha.net 'unsafe-inline';style-src 'self' https://fonts.googleapis.com https://platform.twitter.com https://stackpath.bootstrapcdn.com https://ton.twimg.com 'unsafe-inline';connect-src 'self' https://www.google-analytics.com https://dc.services.visualstudio.com;font-src 'self' https://fonts.gstatic.com;img-src 'self' data: https://chart.apis.google.com https://files.actiprosoftware.com https://pbs.twimg.com https://platform.twitter.com https://secure.gravatar.com https://syndication.twitter.com https://ton.twimg.com https://via.placeholder.com https://www.google-analytics.com;frame-src 'self' https://js.stripe.com https://platform.twitter.com https://syndication.twitter.com https://www.google.com 1
default-src 'self' *.qualitycottages.co.uk *.tawk.to *.cloudinary.com *.responseiq.com *.hotjar.io; img-src * *.cloudinary.com data:; style-src 'self' 'unsafe-inline' data: *.qualitycottages.co.uk *.fontawesome.com *.bootstrapcdn.com *.googleapis.com *.google.com *.gstatic.com *.tawk.to *.cloudflare.com *.jsdelivr.net *.datatables.net *.responseiq.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.unpkg.com *.instagram.com *.qualitycottages.co.uk  *.zuko.io *.fontawesome.com *.sentry-cdn.com *.mobiscroll.com *.salesfire.co.uk https://www.youtube.com/iframe_api *.instagram.com *.google-analytics.com *.googletagmanager.com *.google.com *.google.ie *.google.co.uk googleads.g.doubleclick.net *.cloudfront.net tracking.hivecloud.net *.usefomo.com *.gstatic.net *.gstatic.com *.fomo.com *.bootstrapcdn.com *.googleapis.com *.tawk.to *.hotjar.com *.bugsnag.com *.googleadservices.com *.bing.com *.cloudflare.com *.jsdelivr.net *.cloudinary.com *.formisimo.com *.amazonaws.com code.jquery.com *.postcodeanywhere.co.uk *.feefo.com *.affiliatefuture.com *.adnxs.com *.datatables.net smct.co *.ampproject.org *.facebook.net *.responseiq.com *.impactradius-event.com *.ad4m.at ad4m.at; font-src 'self' *.bootstrapcdn.com *.qualitycottages.co.uk *.gstatic.com *.tawk.to *.cloudflare.com *.fontawesome.com *.hotjar.com *.viewyoursite.net *.googleapis.com *.responseiq.com data:; frame-src 'self' *.instagram.com *.giraffe360.com *.viewin360.co player.vimeo.com *.spotify.com *.matterport.com *.tawk.to *.hotjar.com *.googleadservices.com googleads.g.doubleclick.net *.google.com *.googletagmanager.com *.google.co.uk *.youtube.com *.facebook.com *.facebook.net *.impactradius-event.com quality-cottages.pxf.io *.affiliatefuture.com ad4m.at ad4m.net; connect-src 'self' *.qualitycottages.co.uk https://static.arcgis.com *.zuko.io services.postcodeanywhere.co.uk *.googleapis.com *.fontawesome.com *.cloudinary.com *.hotjar.com *.google.com *.google.co.uk *.google-analytics.com stats.g.doubleclick.net *.tawk.to wss://*.tawk.to wss://*.hotjar.com *.bugsnag.com hivetracking.azurewebsites.net *.formisimo.com *.feefo.com smct.co *.ampproject.org stats.usefomo.com *.facebook.com *.responseiq.com live.smartmetrics.co.uk quality-cottages.pxf.io; 1
default-src 'self';                 script-src 'self' 'unsafe-eval' https://code.jquery.com https://stackpath.bootstrapcdn.com https://*.fontawesome.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://az416426.vo.msecnd.net;                 style-src 'self' 'unsafe-inline' https://*.fontawesome.com https://stackpath.bootstrapcdn.com https://fonts.googleapis.com https://cdn.jsdelivr.net;                 font-src 'self' https://fonts.gstatic.com https://*.fontawesome.com;                 connect-src 'self' https://*.algolia.net https://*.algolianet.com https://dc.services.visualstudio.com https://api2.autopilothq.com https://www.google-analytics.com https://*.fontawesome.com;                 frame-src 'self' https://www.youtube.com/;                 img-src 'self' https://www.google-analytics.com data:; 1
default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com surveyjs.azureedge.net medium-widget.pixelpoint.io www.buzzsprout.com diconium.jobbase.io ipinfo.io maps.googleapis.com www.youtube.com tags.tiqcdn.com www.google-analytics.com www.googleadservices.com snap.licdn.com connect.facebook.net *.leadlab.click *.doubleclick.net *.linkedin.com s.ytimg.com *.wbtrk.net s.stry.tl woobox.com *.rg02.diconium.cloud; connect-src 'self' medium-widget-api.pixelpoint.io www.salesviewer.com salesviewer.org *.leadlab.click my.tealiumiq.com dmcpartnersand.demdex.net; img-src 'self' data: maps.googleapis.com maps.gstatic.com www.google-analytics.com www.google.com www.google.pt www.google.de *.doubleclick.net www.facebook.com ronet01.wt-eu02.net tags.tiqcdn.com http://tags.tiqcdn.com/ *.rg02.diconium.cloud *.medium.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com stats.g.doubleclick.net www.google.com e.stry.tl; font-src 'self' data: fonts.gstatic.com; child-src www.buzzsprout.com diconium.jobbase.io www.youtube.com connect.facebook.net e.issuu.com issuu.com edit.storytile.net e.stry.tl *.vimeo.com vimeo.com forms.office.com woobox.com 1
report-uri /urireport.php; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://www.zenaps.com https://*.akamaihd.net https://*.translate.naver.net https://*.recaptcha.net https://ln-rules.rewardstyle.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://services.postcodeanywhere.co.uk https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://www.christopherobin.co.uk https://m.christopherobin.co.uk https://checkout.christopherobin.co.uk https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.akamaihd.net https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://sc-static.net https://*.google.co.uk https://google.co.uk; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
frame-ancestors 'self'; object-src 'none'; report-uri https://tudofsi.report-uri.com/r/d/csp/reportOnly 1
frame-src https://www.triplemint.com/ 'self' https://accounts.google.com/ https://i-broadway.triplemint.in https://s-broadway.triplemint.in https://app.appzi.io/ https://w.appzi.io/ https://js.stripe.com https://s3.amazonaws.com/ https://www.youtube.com/ http://www.youtube.com/ http://gdata.youtube.com/ https://www.wellcomemat.com/ https://my.matterport.com https://tours.h5property.com/ https://listing3d.com/ https://player.vimeo.com/ https://w.soundcloud.com/ https://www.facebook.com/ https://www.google.com/ 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-jZcE6tDr7wTnK2r4TcR0vw' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
frame-ancestors 'self' *.firmenbuchgrundbuch.at *.compass.at 1
default-src 'self' www.mega-porno.me mega-porno.me *.mega-porno.me *.mega-porno.tv *.mega-porno.online *.mega-porno.love mega-porno.info megabc.info mega-bc.info *.fcdn.net *.kxcdn.com *.fex.net *.pljs.ru https://fex.net https://n161adserv.com *.advertserve.com *.aserverstats.com *.traffer.biz *.traffer.net *.sem-vosem.com aj1616.online *.aj1616.online protovid.com *.protovid.com trifandvid.com *.trifandvid.com *.converteam.net advrich.com prfctmney.com chsrkred.com mikellli.com jmpmedia.club jmpmedia.info bmrdrct.best ggbuy.info bmrdrct.info razdvabm.com gcvbmb.com cdnbmb.com jumpbmb.com cdn-r02.cdnbmb.com cdn-r01.cdnbmb.com kokorzabil.com messiupal.com dzubavstal.com bigbonga.com bigoff.info iconcnd.net *.cdnkimg.com bcnewltd.club bctwe.com http://plpromos.com http://fderty.com promo-bc.com ajx161.online *.n161adserv.com u2bmco.com vast.yomeno.xyz *.protovid.com protovid.com *.baimgfroggd.site mtrcss.com *.thevideome.site *.visitstats.com *.cloudfrale.com franecki.net *.cdnbmb.com *.ankunding.biz *.bongacash.com mibmcbm.com orjzy.com *.iwad.ru 11flexiblebig9.website syndication.exosrv.com *.trfmxt.com mtrcss.com bestrrd.com mtrcdn.com zrlcr.com *.spylees.com covivado.club *.traffic8.net ebetoni.com *.exdynsrv.com *.zerocdn.com *.vids69.com *.mega-porno.me *.advertserve.com http://counter.rambler.ru my2.imgsmail.ru www.gstatic.com yandex.st an.yandex.ru pagead2.googlesyndication.com www.youtube.com vk.com cdn.connect.mail.ru *.gstatic.com mc.yandex.ru www.google-analytics.com https://www.google-analytics.com https://apis.google.com www.gstatic.com *.xcvgdf.party 'unsafe-inline' 'unsafe-eval' http://www.mega-porno.me http://mega-porno.me data: 0.gravatar.com http://0.gravatar.com/ 1.gravatar.com http://1.gravatar.com/ an.yandex.ru/count http://an.yandex.ru/count/ favicon.yandex.net http://favicon.yandex.net avatars-fast.yandex.net http://avatars-fast.yandex.net/ vk.com yastatic.net counter.rambler.ru top-fwz1.mail.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com yastatic.net http://yastatic.net/ connect.mail.ru an.yandex.ru www.youtube.com googleads.g.doubleclick.net vk.com userapi.com site.yandex.net yastatic.net https://yastatic.net http://site.yandex.net https://site.yandex.net *.gstatic.com https://vk.com fonts.googleapis.com mc.yandex.ru *.gstatic.com 1
script-src 'self' 'unsafe-inline' www.google-analytics.com www.google.com www.googletagmanager.com checkout.stripe.com js.stripe.com ; font-src fonts.gstatic.com ; object-src 'none' ; frame-src js.stripe.com hooks.stripe.com www.triptipedia.com 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mastodon.design; img-src 'self' https: data: blob: https://mastodon.design; style-src 'self' https://mastodon.design 'nonce-yWdcZqWLYzEgpElz/uOjtg=='; media-src 'self' https: data: https://mastodon.design; frame-src 'self' https:; manifest-src 'self' https://mastodon.design; connect-src 'self' data: blob: https://mastodon.design https://cdn.masto.host wss://mastodon.design; script-src 'self' https://mastodon.design; child-src 'self' blob: https://mastodon.design; worker-src 'self' blob: https://mastodon.design 1
default-src 'self'; script-src 'self'     'unsafe-inline'     'unsafe-eval'     data:     www.google-analytics.com     widget.intercom.io/widget/     cdnjs.cloudflare.com/ajax/libs/handlebars.js/     cdnjs.cloudflare.com/ajax/libs/jquery/     cdnjs.cloudflare.com/ajax/libs/jsoneditor/     cdnjs.cloudflare.com/ajax/libs/vis/     cdnjs.cloudflare.com/ajax/libs/modernizr/     cdnjs.cloudflare.com/ajax/libs/webshim/     cdnjs.cloudflare.com/ajax/libs/jstree/     js.intercomcdn.com     jochen-destimo-family.s3-website.eu-central-1.amazonaws.com; style-src 'self'     'unsafe-inline'     cdnjs.cloudflare.com; img-src 'self'     data:     www.google-analytics.com     cdnjs.cloudflare.com/ajax/libs/handlebars.js/     cdnjs.cloudflare.com/ajax/libs/jquery/     cdnjs.cloudflare.com/ajax/libs/jsoneditor/     cdnjs.cloudflare.com/ajax/libs/vis/     cdnjs.cloudflare.com/ajax/libs/modernizr/     cdnjs.cloudflare.com/ajax/libs/webshim/     cdnjs.cloudflare.com/ajax/libs/jstree/     js.intercomcdn.com    downloads.intercomcdn.com    static.intercomassets.com;font-src 'self'     data:  js.intercomcdn.com/fonts/     fonts.gstatic.com; child-src www.youtube.com/; connect-src 'self'    *.intercom.io     wss://*.intercom.io/    *.tui-destiservices.com     *.tui-destimo.com; 1
frame-ancestors 'self' https://us-sunset-public.prd.invesco.net; 1
default-src 'self'; upgrade-insecure-requests; 1
default-src data: *.vnforapps.com fonts.googleapis.com fonts.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' i.ytimg.com imasdk.googleapis.com www.subaru.com.bo *.google.com.ar *.google.com.br *.google.com.pe *.google.com.co googleads.g.doubleclick.net *.google.com *.google.es ad.doubleclick.net px.sunmedia.tv secure.adnxs.com pixel.efike.co *.tile.openstreetmap.org *.facebook.com www.google-analytics.com  www.gstatic.com ssl.gstatic.com ssl.google-analytics.com www.google.com googleads.g.doubleclick.net bid.g.doubleclick.net s0.2mdn.net 'unsafe-eval' *.salesforceliveagent.com www.googletagmanager.com tagmanager.google.com connect.facebook.net www.googleadservices.com *.g.doubleclick.net www.youtube.com www.google.cl unpkg.com cdnjs.cloudflare.com cdn.jsdelivr.net au-ecom-sit.inchcapedigital.com v2.zopim.com static.zdassets.com ekr.zdassets.com *.subaru.com.pe *.subaru.cl *.subaru.com.ar *.subaru.com.bo *.subarucolombia.com image.crm.inchcapelatam.com *.tawk.to la-ecom-preprod.inchcapedigital.com la-ecom-gr.inchcapedigital.com  api.retargetly.com clickserv.sitescout.com pixel.sitescout.com afiliacion.net inchcapelatam.sirv.com au-ecom-dev.inchcapedigital.com au-ecom-uat.inchcapedigital.com subaru.doblenuez.com.ar www.google.com.au *.inchcape.cl *.inchcape.com *.inchcape.com.pe *.inchcape.com.bo *.inchcape.com.ar *.inchcape.cl widget-mediator.zopim.com tpc.googlesyndication.com imasdk.googleapis.com; connect-src 'self' uc.gre *.tawk.to *.facebook.com *.google.com  wss://widget-mediator.zopim.com wss://*.tawk.to ekr.zdassets.com au-ecom-dev.inchcapedigital.com au-ecom-uat.inchcapedigital.com au-ecom-sit.inchcapedigital.com tinyurl.com la-ecom-preprod.inchcapedigital.com la-ecom-gr.inchcapedigital.com stats.g.doubleclick.net www.google-analytics.com inchcape.zendesk.com; script-src-elem data: 'self' 'unsafe-inline' static.zdassets.com v2.zopim.com www.pagespeed-mod.com poruce.neyelanane.com *.kaspersky-labs.com *.googlesyndication.com px.sunmedia.tv unpkg.com ww.googleadservices.com www.facebook.com  api.retargetly.com *.gstatic.com *.google.com *.salesforceliveagent.com *.googleadservices.com unpkg.com cdnjs.cloudflare.com *.inchcapedigital.com *.googleapis.com www.google-analytics.com cdn.jsdelivr.net  *.facebook.net googleads.g.doubleclick.net px.sunmedia.tv data1.itiarg.com www.googletagmanager.com embed.tawk.to; worker-src blob: 'self'; img-src data: android-webview-video-poster: 'self' *.google.com.sv *.google.com.mx *.google.ht *.google.es *.google.com.ng *.google.fi subaruevoltis.pe *.google.com.pr *.google.com.my *.google.ca *.gstatic.com *.google.hn *.google.com.do *.google.com.sg i.ytimg.com clickserv.sitescout.com unpkg.com *.googletagmanager.com *.facebook.net *.google.com.tw *.google.dk googleads.g.doubleclick.net *.inchcapedigital.com *.openstreetmap.org pixel.efike.co inchcapelatam.sirv.com *.tawk.to www.google-analytics.com  *.facebook.com cx.atdmt.com *.google.de *.google.com *.google.cl *.google.com.pe *.google.co.uk *.google.com.pa www.google.com.bo *.google.ae *.google.com.co *.google.co.ve *.google.com.ec *.google.com.br *.google.co.cr *.google.co.jp *.google.com.ar; font-src data: 'self' *.inchcapedigital.com fonts.gstatic.com *.tawk.to static3.avast.com *.google.com.mx *.google.es 1
script-src 'report-sample' 'nonce-MVJGvsz0Qsu3Y0LyDlITEA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport 1
frame-ancestors webvisor.com 1
frame-ancestors 'none'; default-src 'self' https://matomo.sinokultur.ch https://www.youtube.com; script-src 'self' https://matomo.sinokultur.ch; style-src 'self' 'unsafe-inline'; object-src 'self' 1
default-src      'self' https://use.typekit.net https://p.typekit.net; script-src       'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://maps.googleapis.com https://ssl.google-analytics.com https://use.typekit.net; script-src-elem  'self' 'unsafe-inline' https://ajax.googleapis.com https://maps.googleapis.com https://www.gstatic.com https://cdnjs.cloudflare.com; img-src          'self' data: https://ssl.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://secure.gravatar.com https://via.placeholder.com; style-src        'self' 'unsafe-inline' https://fonts.googleapis.com https://themes.googleusercontent.com https://www-preview.axelspace.com https://www-preview2.axelspace.com; font-src         'self' 'unsafe-inline' data: https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net; frame-src        'self' https://www.youtube.com https://axelspace.applytojob.com/; frame-ancestors  'self' https://axelspace.applytojob.com; worker-src	  'self' blob: https://www-preview.axelspace.com https://www-preview2.axelspace.com https://www.axelspace.com; object-src       'none'; 1
default-src 'self'; img-src 'self' data: *.schlijper.nl *.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google-analytics.com *.google.com *.facebook.net *.twitter.com *.linkedin.com *.youtube.com *.ytimg.com; style-src 'self' 'unsafe-inline'; frame-src 'self' *.google.com *.twitter.com *.facebook.com *.youtube.com *.youtube-nocookie.com; connect-src www.contentecontent.nl www.youtube.com 1
default-src 'self' ; style-src 'self' 'unsafe-inline' analytik-news.al.sites.jobware.net fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' analytik-news.al.sites.jobware.net maps.googleapis.com www.gstatic.com www.google.com www.google-analytics.com ; img-src 'self' analytik-news.al.sites.jobware.net data: maps.gstatic.com *.googleapis.com *.ggpht www.google-analytics.com; font-src fonts.gstatic.com ; 1
default-src 'self'; connect-src 'self' wss://myzel.ir www.google-analytics.com; script-src 'self' blob: www.google-analytics.com 'nonce-7299f65d-b03c-4aa0-9a25-a592d11afddf' 'nonce-4b67e426-c22c-4ae7-b4b4-b88a5c4092f2' 'nonce-cbe090da-eb6e-4a61-b319-fb09505b4875' 'nonce-04253c53-2dbc-4be5-9eac-78eb833d664d' 'nonce-a08ac901-8a89-4aea-a477-ae0804f95219' 'nonce-7964e395-f16e-474e-9916-f4c51bc5f90d'; style-src 'self' 'unsafe-inline' blob:; font-src 'self' data:; img-src 'self' blob: data: www.google-analytics.com; frame-src 'self' *.enamad.ir 1
default-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com cdn.jsdelivr.net tagmanager.google.com *.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net sjp.getmediamanager.com *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edg tagmanager.google.come.api.brightcove.com *.googleapis.com www.youtube.com youtube.com s.ytimg.com unpkg.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net tagmanager.google.com; img-src 'self' 'unsafe-inline' * data:; media-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com; frame-src 'self' *.investis.com www.google.com sjp.getmediamanager.com careers.sjp.co.uk digital.feprecisionplus.com sjp.hireserve-test.com ir.tools.investis.com staticxx.facebook.com www.youtube.com; font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com *.typekit.net p.typekit.net nr-data.net; report-uri /report-csp-violation 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src * 'unsafe-inline'; img-src * data:; connect-src *; font-src 'self' https: data:; media-src 'self' https:; frame-ancestors 'self' https:; object-src 'self' https:; frame-src 'self' https: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; 1
frame-ancestors 'self' http://tongji.baidu.com https://tongji.baidu.com 1
frame-ancestors 'self' *.tennisonly.com.au *.runningwarehouse.com.au www.runningwarehouse.eu www.runningwarehouse.com www.tennis-warehouse.com www.tenniswarehouse-europe.com; 1
default-src 'self' https://*.googleapis.com/ https://*.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.g.doubleclick.net/ https://*.mapy.cz/ https://*.polyfill.io/ https://polyfill.io/ https://*.googletagmanager.com/ https://*.hotjar.com/ https://*.google.cz/ https://*.hotjar.io/ wss://*.hotjar.com/ https://*.googleadservices.com/ https://*.facebook.net/ https://*.facebook.com/ https://*.opmnstr.com/ https://*.omappapi.com/ https://*.darujme.cz/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com/ https://*.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.g.doubleclick.net/ https://*.mapy.cz/ https://*.polyfill.io/ https://polyfill.io/ https://*.googletagmanager.com/ https://*.hotjar.com/ https://*.google.cz/ https://*.hotjar.io/ wss://*.hotjar.com/ https://*.googleadservices.com/ https://*.facebook.net/ https://*.facebook.com/ https://*.opmnstr.com/ https://*.omappapi.com/ https://*.darujme.cz/; connect-src 'self' https://*.googleapis.com/ https://*.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.g.doubleclick.net/ https://*.mapy.cz/ https://*.polyfill.io/ https://polyfill.io/ https://*.googletagmanager.com/ https://*.hotjar.com/ https://*.google.cz/ https://*.hotjar.io/ wss://*.hotjar.com/ https://*.googleadservices.com/ https://*.facebook.net/ https://*.facebook.com/ https://*.opmnstr.com/ https://*.omappapi.com/ https://*.darujme.cz/; img-src 'self' data: blob: 'unsafe-inline' https://*.googleapis.com/ https://*.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.g.doubleclick.net/ https://*.mapy.cz/ https://*.polyfill.io/ https://polyfill.io/ https://*.googletagmanager.com/ https://*.hotjar.com/ https://*.google.cz/ https://*.hotjar.io/ wss://*.hotjar.com/ https://*.googleadservices.com/ https://*.facebook.net/ https://*.facebook.com/ https://*.opmnstr.com/ https://*.omappapi.com/ https://*.darujme.cz/; font-src 'self' https://*.googleapis.com/ https://*.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.g.doubleclick.net/ https://*.mapy.cz/ https://*.polyfill.io/ https://polyfill.io/ https://*.googletagmanager.com/ https://*.hotjar.com/ https://*.google.cz/ https://*.hotjar.io/ wss://*.hotjar.com/ https://*.googleadservices.com/ https://*.facebook.net/ https://*.facebook.com/ https://*.opmnstr.com/ https://*.omappapi.com/ https://*.darujme.cz/; style-src 'self' 'unsafe-inline' https://*.googleapis.com/ https://*.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.g.doubleclick.net/ https://*.mapy.cz/ https://*.polyfill.io/ https://polyfill.io/ https://*.googletagmanager.com/ https://*.hotjar.com/ https://*.google.cz/ https://*.hotjar.io/ wss://*.hotjar.com/ https://*.googleadservices.com/ https://*.facebook.net/ https://*.facebook.com/ https://*.opmnstr.com/ https://*.omappapi.com/ https://*.darujme.cz/; frame-src 'self' https://*.googleapis.com/ https://*.google-analytics.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.g.doubleclick.net/ https://*.mapy.cz/ https://*.polyfill.io/ https://polyfill.io/ https://*.googletagmanager.com/ https://*.hotjar.com/ https://*.google.cz/ https://*.hotjar.io/ wss://*.hotjar.com/ https://*.googleadservices.com/ https://*.facebook.net/ https://*.facebook.com/ https://*.opmnstr.com/ https://*.omappapi.com/ https://*.darujme.cz/ 1
default-src 'self' https://a104733541.cdn.optimizely.com https://www.google.com https://deluxeforms.scene7.com https://raptor.scene7.com https://www.youtube.com https://maps.google.com  https://s7d4.scene7.com *.qualtrics.com; font-src *;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; connect-src 'self' https://www.google.com https://logx.optimizely.com https://rum.optimizely.com https://siteintercept.qualtrics.com https://uberall.com https://*.quantummetric.com;  1
default-src 'self'; script-src 'self' 'unsafe-inline' data: app.usercentrics.eu www.googletagmanager.com maps.googleapis.com; frame-src app.usercentrics.eu; font-src 'self' data: fonts.gstatic.com; connect-src 'self' api.usercentrics.eu aggregator.service.usercentrics.eu graphql.usercentrics.eu www.google-analytics.com; img-src 'self' data: app.usercentrics.eu www.googletagmanager.com maps.googleapis.com maps.gstatic.com khms0.googleapis.com khms1.googleapis.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; base-uri 'self'; form-action 'self' 1
default-src 'self' data: http://www.africanriskcapacity.org https://www.africanriskcapacity.org https://fonts.gstatic.com http://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://s.w.org http://1.gravatar.com https://api.w.org http://gmpg.org https://www.google-analytics.com secure.gravatar.com ; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com http://fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com code.jquery.com maxcdn.bootstrapcdn.com ; object-src 'self'; font-src 'self' data: fonts.gstatic.com https://maxcdn.bootstrapcdn.com ; 1
default-src 'self' *.vergic.com www.facebook.com; prefetch-src 'self' *.boltdns.net *.googleapis.com *.vergic.com www.facebook.com; media-src blob: 'self' *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.vergic.com www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.zuora.com tags.tiqcdn.com cdn.mouseflow.com o2.mouseflow.com us-content.vergic.com *.brightcove.net *.brightcove.com blob: vjs.zencdn.net d2qrdklrsxowl2.cloudfront.net www.googletagmanager.com bat.bing.com/bat.js connect.facebook.net static.ads-twitter.com *.twitter.com snap.licdn.com www.googleadservices.com www.google.com googleads.g.doubleclick.net *.vergic.com www.facebook.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.brightcove.net d2qrdklrsxowl2.cloudfront.net *.s3.amazonaws.com *.vergic.com www.facebook.com; img-src 'self' data: images.ctfassets.net aicpa.sc.omtrdc.net media.aicpa.org *.rackcdn.com cm.everesttech.net dpm.demdex.net content.psplugin.com *.brightcove.com *.boltdns.net players.brightcove.net bat.bing.com static.ads-twitter.com t.co px.ads.linkedin.com www.googletagmanager.com googleads.g.doubleclick.net www.google.com *.google.co.uk *.facebook.com * *.vergic.com www.facebook.com; font-src 'self' data: fonts.gstatic.com d2qrdklrsxowl2.cloudfront.net *.s3.amazonaws.com *.vergic.com content.psplugin.com *.vergic.com www.facebook.com; connect-src 'self' id.aicpa.org secureaicpa.okta.com aicpa.okta.com devaicpa.oktapreview.com id.test-aicpa.org stagingaicpa.okta.com assets.ctfassets.net downloads.ctfassets.net sentry.io app.getsentry.org app.getsentry.com dpm.demdex.net aicpa.demdex.net collect.tealiumiq.com aicpa.sc.omtrdc.net o2.mouseflow.com players.brightcove.net *.brightcove.com *.hapyak.com *.boltdns.net *.brightcovecdn.com *.akamaihd.net *.akafms.net *.vergic.com bat.bing.com *.facebook.com *.vergic.com www.facebook.com; frame-src 'self' id.aicpa.org secureaicpa.okta.com aicpa.okta.com devaicpa.oktapreview.com id.test-aicpa.org stagingaicpa.okta.com www.facebook.com m.facebook.com html5-player.libsyn.com *.brightcove.net d2qrdklrsxowl2.cloudfront.net vjs.zencdn.net *.podomatic.com podomatic.com *.youtube.com apisandbox.zuora.com aicpa.demdex.net www.zuora.com bid.g.doubleclick.net *.vergic.com www.facebook.com; frame-ancestors 'self' *.aicpa.org *.cgma.org; manifest-src 'self'; block-all-mixed-content; upgrade-insecure-requests; report-uri https://sentry.io/api/3382497/security/?sentry_key=9aee855e0ce84a1db4b69530c6b45163@sentry.io/3382497 1
default-src 'self' 'unsafe-inline' https://piwik.bzga.de/  https://service.bzga.de/ 1
frame-ancestors staging.firebrand.training firebrand.training cms.firebrandtraining.com 1
default-src 'self'; font-src 'self'; connect-src *; img-src * data:; script-src * 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' election.gov.np *.election.gov.np 202.166.205.141 *.election.gov.np www.google.com.np *.google.com *.gstatic.com cdn.jsdelivr.net code.jquery.com stackpath.bootstrapcdn.com s.ytimg.com *.facebook.net *.sharethis.com *.youtube.com *.twimg.com cdn.syndication.twimg.com cdnjs.cloudflare.com maps.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com fonts.googleapis.com fonts.gstatic.com; object-src 'self'; style-src 'self' 'unsafe-inline' *.election.gov.np use.fontawesome.com stackpath.bootstrapcdn.com placehold.it *.facebook.net *.sharethis.com  *.youtube.com *.twimg.com cdn.syndication.twimg.com cdnjs.cloudflare.com maps.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com fonts.googleapis.com fonts.gstatic.com; img-src 'self' data: placehold.it election.gov.np *.election.gov.np *.gstatic.com *.facebook.net *.facebook.com *.sharethis.com lh3.googleusercontent.com *.youtube.com *.twimg.com secure.gravatar.com cdn. *.twitter.com *.twimg.com cdnjs.cloudflare.com maps.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com cdnjs.cloudflare.com fonts.googleapis.com fonts.gstatic.com; media-src 'self'; frame-src 'self' 202.166.205.141 *.election.gov.np *.youtube.com *.google.com *.facebook.net *.facebook.com syndication.twitter.com platform.twitter.com; font-src 'self' data: fonts.googleapis.com stackpath.bootstrapcdn.com use.fontawesome.com fonts.gstatic.com maxcdn.bootstrapcdn.com; connect-src 'self' l.sharethis.com 1
default-src 'self' 'unsafe-inline' https://mobisindia.com  https://fonts.gstatic.com https://maps.gstatic.com/ https://fonts.googleapis.com https://maps.google.com  https://maps.googleapis.com https://www.google-analytics.com https://www.youtube.com https://www.googletagmanager.com; 1
default-src 'self'; connect-src 'self' https://client-analytics.sandbox.braintreegateway.com https://api.sandbox.braintreegateway.com https://js.braintreegateway.com https://www.paypal.com https://origin-analytics-sand.sandbox.braintree-api.com https://client-analytics.sandbox.braintreegateway.com https://api.sandbox.braintreegateway.com https://js.braintreegateway.com https://www.paypal.com https://origin-analytics-sand.sandbox.braintree-api.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://ipmeta.io/api/enrich https://ipmeta.io https://www.google-analytics.com/; img-src 'self' data: res.cloudinary.com www.paypalobjects.com www.google-analytics.com www.googletagmanager.com t.paypal.com; script-src 'self' 'unsafe-inline' www.google-analytics.com www.googletagmanager.com https://unpkg.com https://www.paypal.com https://js.braintreegateway.com https://www.paypalobjects.com https://wageforwork.us5.list-manage.com https://ipmeta.io https://ipmeta.io/api/enrich; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com https://assets.braintreegateway.com; frame-src 'self' www.youtube.com https://assets.braintreegateway.com/ https://gfycat.com/ https://www.paypal.com/; font-src 'self' cdnjs.cloudflare.com 1
default-src 'none'; connect-src *.g.doubleclick.net *.doubleclick.net *.subscribers.com *.google-analytics.com *.facebook.net *.twitter.com  pro.ip-api.com bat.bing.com forms.hubspot.com api.hubapi.com 'self'; font-src 'self'; frame-src *.google-analytics.com *.facebook.net *.facebook.com *.twitter.com *.google.com/recaptcha/ 'self'; img-src * 'self' data: https:; manifest-src 'self'; object-src 'self'; prefetch-src ; script-src bam.nr-data.net*.newrelic.com *.ads-twitter.com *.googleadservices.com *.quora.com *.adroll.com snap.licdn.com *.subscribers.com bat.bing.com js.hscollectedforms.net js.hs-analytics.net js.hs-scripts.com js.hsadspixel.net js.hs-banner.com  *.google-analytics.com *.facebook.net *.twitter.com *.redditstatic.com  *.google.com/recaptcha/ *.gstatic.com/recaptcha/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; media-src 'self'; form-action syndication.twitter.com 'self'; worker-src 'self'; report-uri https://company.report-uri.com/r/d/csp/enforce; block-all-mixed-content; upgrade-insecure-requests 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' d2cy9xgqvri3r7.cloudfront.net www.google.com www.gstatic.com www.altospam.eu cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' d2cy9xgqvri3r7.cloudfront.net fonts.googleapis.com cdnjs.cloudflare.com; font-src 'self' d2cy9xgqvri3r7.cloudfront.net fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com; report-uri https://altospam.uriports.com/reports/report; report-to default; base-uri 'self'; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; base-uri 'none'; 1
script-src-elem 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' 'self' geolocation.onetrust.com www.google.com cookie-cdn.cookiepro.com fonts.gstatic.com www.google-analytics.com www.gstatic.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com www.un.org cdn.jsdelivr.net unpkg.com npmcdn.com platform.twitter.com *.twimg.com connect.facebook.net *.google-analytics.com *.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.un.org cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.twitter.com *.twimg.com stackpath.bootstrapcdn.com; img-src 'self' downloads.unmultimedia.org www.devbusiness.com cdn.un.org data: *.un.org *.twimg.com *.twitter.com *.facebook.com *.google-analytics.com *.doubleclick.net; media-src 'self' *.un.org *.libsyn.com; frame-src 'self' *.twitter.com *.youtube-nocookie.com *.youtube.com *.facebook.com *.vimeo.com www.google.com  *.brightcove.com; font-src 'self' fonts.gstatic.com cdn.jsdelivr.net *.un.org maxcdn.bootstrapcdn.com stackpath.bootstrapcdn.com; report-uri /report-csp-violation 1
default-src * ; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; font-src * data:; 1
default-src 'self' 'unsafe-inline' *.googleapis.com *.googletagmanager.com *.gstatic.com *.facebook.com *.facebook.net *.clickcease.com *.google-analytics.com *.sharethis.com secure.gravatar.com cdnjs.cloudflare.com *.zopim.com *.zdassets.com;img-src 'self' 'unsafe-inline' data: *.googleapis.com *.googletagmanager.com *.gstatic.com *.facebook.com *.facebook.net *.clickcease.com *.google-analytics.com *.sharethis.com secure.gravatar.com cdnjs.cloudflare.com *.zopim.com *.zdassets.com;font-src 'self' 'unsafe-inline' data: *.palawanpawnshop.com *.googleapis.com *.gstatic.com *.zopim.com;connect-src 'self' 'unsafe-inline' *.googleapis.com *.googletagmanager.com *.gstatic.com *.facebook.com *.facebook.net *.clickcease.com *.google-analytics.com *.sharethis.com secure.gravatar.com cdnjs.cloudflare.com *.zopim.com *.zdassets.com wss://*.zopim.com; frame-src 'self' *.ppspepp.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://tagmanager.google.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://jamesallardice.github.io http://jamesallardice.github.io http://releases.flowplayer.org https://*.ytimg.com https://*.youtube.com https://www.youtube.com/iframe_api https://*.google-analytics.com https://*.googleapis.com https://*.google.com https://*.facebook.com http://*.facebook.com https://*.fbcdn.net http://*.fbcdn.net https://*.facebook.net https://*.twitter.com https://*.pinterest.com https://*.amazonaws.com http://*.jquery.com https://*.jquery.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jivosite.com www.google-analytics.com www.googleadservices.com connect.facebook.net googleads.g.doubleclick.net www.googletagmanager.com tagmanager.google.com; img-src * data:; connect-src 'self' *.jivosite.com wss://*.jivosite.com www.google-analytics.com stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com code.jivosite.com; frame-src 'self' www.youtube.com www.facebook.com sketchfab.com bid.g.doubleclick.net; font-src * data:; media-src 'self' 'unsafe-inline' *.jivosite.com 1
block-all-mixed-content; base-uri 'none'; default-src 'none'; frame-ancestors 'none'; frame-src player.vimeo.com www.google.com www.youtube.com vars.hotjar.com; object-src 'self'; media-src 'self'; form-action 'self'; script-src 'self' 'nonce-VV+MRy3eMWZ0Bw2LYk7QfBKaQscNdcJZ4cNlrmykiB8=' bam.nr-data.net js-agent.newrelic.com vimeo.com player.vimeo.com maps.googleapis.com ssl.google-analytics.com www.googleadservices.com www.google-analytics.com www.google.com/recaptcha/ www.googletagmanager.com www.gstatic.com/recaptcha/ static.hotjar.com script.hotjar.com *.ads.linkedin.com secure.norm0care.com; connect-src 'self' skyfire.vimeocdn.com maps.googleapis.com *.hotjar.com; img-src * data:; style-src 'self' 'unsafe-inline' maps.googleapis.com fonts.googleapis.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com script.hotjar.com data:; 1
default-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * 'unsafe-inline'; 1
default-src *; script-src 'self' 'unsafe-inline' webmention.io platform.twitter.com cdn.syndication.twimg.com *.vimeo.com *.vimeocdn.com *.codepen.io *.typekit.net gist.github.com; style-src * 'unsafe-inline' *.vimeocdn.com; img-src * data: res.cloudinary.com; connect-src 'self' *.imgur.com *.gravatar.com res.cloudinary.com webmention.io api.github.com platform.twitter.com; child-src 'self' www.youtube.com *.twitter.com *.vimeo.com *.vimeocdn.com codepen.io *.slideshare.net; upgrade-insecure-requests; block-all-mixed-content; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: fonts.gstatic.com *.typekit.net www.google-analytics.com *.googleapis.com api.corporateshowcase.com code.jquery.com *.vzaar.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net cdnjs.cloudflare.com *.addthis.com *.google.com *.addthisedge.com *.googletagmanager.com *.irasia.com stats.g.doubleclick.net 1
frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; script-src 'self' 'unsafe-inline' https://www.google.com/ https://www.gstatic.com/; img-src 'self' data: https://s3.amazonaws.com/internPhotos.mecopinc.org/ https://s3.amazonaws.com/companylogos.mecopinc.org/ https://s3.amazonaws.com/photogallery.mecopinc.org/ https://s3.amazonaws.com/public.mecopinc.org/ https://s3.amazonaws.com/test.mecopinc.org/ https://www.gstatic.com/ https://chart.googleapis.com/ https://a.tile.openstreetmap.org/ https://b.tile.openstreetmap.org/ https://c.tile.openstreetmap.org/; media-src blob: 'self' https://s3.amazonaws.com/videos.mecopinc.org/ https://s3.amazonaws.com/video-stream.mecopinc.org/; font-src 'self' data: https://fonts.gstatic.com/; default-src 'self' https://s3.amazonaws.com/video-stream.mecopinc.org/ https://cdn.jsdelivr.net/codemirror.spell-checker/; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.hotjar.com script.hotjar.com blob: ajax.googleapis.com maps.googleapis.com www.youtube.com s.ytimg.com static.notifia.io checkout.culqi.com ws.bluesnap.com bluesnap.com *.bluesnap.com www.paypal.com www.paypalobjects.com bitpay.com cdn.ravenjs.com connect.facebook.net www.google-analytics.com www.google.com www.googleadservices.com googleads.g.doubleclick.net www.googletagmanager.com ssl.luckyorange.com d10lpsik1i8c69.cloudfront.net use.fontawesome.com djtflbt20bdde.cloudfront.net cdn.segment.com cdn.amplitude.com collectcdn.com widget.sirena.app vpayment.verifika.com; style-src 'self' 'unsafe-inline' checkout.culqi.com static.culqi.com fonts.googleapis.com d10lpsik1i8c69.cloudfront.net use.fontawesome.com static.notifia.io; img-src 'self' http: https: data: collectcdn.com res.cloudinary.com maps.googleapis.com checkout.culqi.com static.culqi.com stats.g.doubleclick.net www.google-analytics.com www.facebook.com; connect-src 'self' wss://*.hotjar.com *.hotjar.com vc.hotjar.io api.qempo.com wss://api.qempo.com api.ipify.org pro.ip-api.com sentry.io api.notifia.io www.paypal.com stats.g.doubleclick.net www.facebook.com www.google-analytics.com settings.luckyorange.net wss://in.visitors.live wss://visitors.live api.luckyorange.com api.segment.io api.amplitude.com load.collect.chat app.collect.chat api.collect.chat widget.sirena.app buttons.sirena.app; font-src 'self' fonts.googleapis.com fonts.gstatic.com s3.amazonaws.com use.fontawesome.com; object-src 'self' djtflbt20bdde.cloudfront.net; media-src 'self' data:; frame-src 'self' vars.hotjar.com bitpay.com checkout.culqi.com www.facebook.com connect.facebook.net staticxx.facebook.com tagmanager.google.com www.googletagmanager.com bid.g.doubleclick.net www.paypal.com www.paypalobjects.com www.youtube.com bluesnap.com *.bluesnap.com ssl.kaptcha.com; report-uri https://sentry.io/api/1353240/security/?sentry_key=b7e07db316a544d993fb1fddc5b5b016 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://aus.social; img-src 'self' https: data: blob: https://aus.social; style-src 'self' https://aus.social 'nonce-w9cx4s70qreIzERCkTHZpQ=='; media-src 'self' https: data: https://aus.social; frame-src 'self' https:; manifest-src 'self' https://aus.social; connect-src 'self' data: blob: https://aus.social https://s3-ap-southeast-2.amazonaws.com wss://aus.social; script-src 'self' https://aus.social; child-src 'self' blob: https://aus.social; worker-src 'self' blob: https://aus.social 1
default-src https://ironpony.com https://www.ironpony.com https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.google.com https://analytics.google.com https://ssl.google-analytics.com; style-src 'unsafe-inline' https://ironpony.com https://www.ironpony.com https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.google.com https://analytics.google.com https://ssl.google-analytics.com; script-src 'unsafe-inline' 'unsafe-eval' https://ironpony.com https://www.ironpony.com https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.google.com https://analytics.google.com https://ssl.google-analytics.com; 1
default-src 'self' https://status.sentia.dk 'unsafe-inline';connect-src 'self' *.gravatar.com *.hotjar.com *.google-analytics.com *.hubapi.com *.hubspot.com *.sharethis.com *.googleadservices.com *.google.nl *.facebook.com;font-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.typekit.net;frame-src 'self' *.hotjar.com status.sentia.dk *.vimeo.com *.google.com www.youtube.com youtube.com c.sharethis.mgr.consensu.org *.sharethis.com forms.hsforms.com *.hubspot.com *.cookiebot.com;img-src 'self' data: common.cdn.sentia.dk *.google-analytics.com *.doubleclick.net *.gstatic.com *.azureedge.net *.hubspot.net *.sentia.com *.hubspot.com *.google.com *.google.ie *.google.nl www.googletagmanager.com *.googleapis.com *.blob.core.windows.net *.sharethis.com https://secure.hiss3lark.com forms.hsforms.com *.linkedin.com;manifest-src 'self';media-src 'self' *.vimeo.com *.vimeocdn.com *.youtube.com *.akamaized.net;object-src 'self';script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.amazonaws.com *.googletagmanager.com *.gstatic.com *.licdn.com *.bizographics.com *.googleadservices.com *.linkedin.com tagmanager.google.com *.hotjar.com *.akamized.com *.google.nl *.vimeo.com vimeo.com *.google.com js.hs-scripts.com js.hs-analytics.net js.hsadspixel.net googleads.g.doubleclick.net *.google.ie js.usemessages.com *.googleapis.com *.sharethis.com *.hiss3lark.com *.hsleadflows.net *.google.be *.hubspot.com *.hsforms.net *.hsforms.com *.hscta.net *.cookiebot.com *.hs-banner.com;style-src 'self' 'unsafe-inline' *.typekit.net fonts.googleapis.com fonts.gstatic.com tagmanager.google.com;worker-src 'self'; 1
default-src 'self' data:; script-src 'self' https://www.gstatic.com https://ajax.googleapis.com https://cdn.inspectlet.com https://*.pendo.io https://*.storage.googleapis.com https://browser.sentry-cdn.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://www.gstatic.com https://ajax.googleapis.com https://*.pendo.io https://*.storage.googleapis.com https://fonts.googleapis.com 'unsafe-inline' blob:; connect-src 'self' http://hn.inspectlet.com wss://ws.inspectlet.com https://mail-scanner.eu https://sentry.io; img-src 'self' http://hn.inspectlet.com https://*.pendo.io https://*.storage.googleapis.com data:; font-src 'self' https://fonts.gstatic.com; 1
default-src 'self'; worker-src 'self' blob: https://www.youtube.com/ https://fast.wistia.com https://s7.addthis.com https://forms.hubspot.com https://forms.hsforms.com; frame-src 'self' https://platform.twitter.com https://vars.hotjar.com https://www.youtube.com/ https://fast.wistia.com https://s7.addthis.com https://forms.hubspot.com https://forms.hsforms.com https://www.facebook.com; connect-src 'self' https://hubspot-forms-static-embed.s3.amazonaws.com wss://ws2.hotjar.com wss://ws7.hotjar.com https://ws2.hotjar.com https://ws7.hotjar.com https://in.hotjar.com https://trc-events.taboola.com/ https://api.hubapi.com/ https://www.facebook.com/tr/ https://www.google-analytics.com https://embed-ssl.wistia.com https://api.hubspot.com https://forms.hsforms.com https://distillery.wistia.com https://pipedream.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io https://embedwistia-a.akamaihd.net https://m.addthis.com https://s7.addthis.com https://stats.g.doubleclick.net https://us-central1-strategics-f44fd.cloudfunctions.net/ebcert/; font-src 'self' data: https://use.fontawesome.com https://fonts.gstatic.com; img-src 'self' data: blob: https://trc.taboola.com https://p.adsymptotic.com/d/px/ https://www.linkedin.com https://cds.taboola.com https://www.facebook.com/tr/ https://www.google.com/pagead/ https://www.google.co.za/pagead/ https://googleads.g.doubleclick.net/pagead/ https://px.ads.linkedin.com https://extensionscdn.joomla.org https://www.google-analytics.com https://www.google.com/ads/ga-audiences https://www.google.co.za/ads/ga-audiences https://track.hubspot.com https://stats.g.doubleclick.net https://fast.wistia.com https://embedwistia-a.akamaihd.net https://forms.hsforms.com https://no-cache.hubspot.com; media-src 'self' data: blob: https://embedwistia-a.akamaihd.net; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://platform.twitter.com https://static.hotjar.com  https://trc.taboola.com https://cdn.taboola.com https://connect.facebook.net https://googleads.g.doubleclick.net/pagead/ https://www.google.com/pagead/ https://www.google.co.za/pagead/ https://www.googleadservices.com/pagead/ https://js.hs-banner.com https://js.hsadspixel.net https://appscdn.joomla.org https://ajax.googleapis.com https://js.hscta.net https://cta-service-cms2.hubspot.com https://js.hs-analytics.net https://api.usemessages.com https://js.usemessages.com https://s.ytimg.com https://src.litix.io https://www.youtube.com https://js.hs-scripts.com https://fast.wistia.com https://www.google-analytics.com https://www.googletagmanager.com https://fast.wistia.net https://js.hsforms.net https://forms.hubspot.com https://forms.hsforms.com https://s7.addthis.com https://m.addthisedge.com https://m.addthis.com https://snap.licdn.com https://px.ads.linkedin.com https://www.linkedin.com/px/li_sync https://unpkg.com/axios/dist/axios.min.js https://cdnjs.cloudflare.com/ajax/libs/fingerprintjs2/2.1.0/fingerprint2.min.js https://ebcert-lib.web.app/1.0.0/ebcert.min.js https://secure.hiss3lark.com/Track/Capture.aspx; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://entersekt.info https://fonts.googleapis.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://static.hotjar.com https://fast.wistia.com https://www.googletagmanager.com https://ajax.googleapis.com https://www.google-analytics.com https://js.hsadspixel.net https://js.hs-analytics.net https://js.hs-banner.com/315236.js https://snap.licdn.com https://trc.taboola.com https://cdn.taboola.com https://connect.facebook.net https://js.hs-scripts.com/315236.js https://unpkg.com/axios/dist/axios.min.js https://cdnjs.cloudflare.com/ajax/libs/fingerprintjs2/2.1.0/fingerprint2.min.js https://ebcert-lib.web.app/1.0.0/ebcert.min.js https://script.hotjar.com/modules.357b13f05c394b8c0899.js https://js.hsforms.net https://www.googleadservices.com https://forms.hsforms.com https://googleads.g.doubleclick.net https://platform.twitter.com; 1
child-src 'self' 'unsafe-inline' *.youtube.com *.bootstrapcdn.com;connect-src 'self' oc-cdn-public-gbr.azureedge.net/ https://stats.g.doubleclick.net www.google-analytics.com *.bovishomes.co.uk *.pcapredict.com *.postcodeanywhere.co.uk *.cookiepro.com cookie-cdn.cookiepro.comdefault-src 'self' 'unsafe-inline' *.bovishomes.co.uk *.doubleclick.net *.bootstrapcdn.com *.google-analytics.com 'unsafe-eval';font-src 'self' 'unsafe-inline' https://use.fontawesome.com/ cdnjs.cloudflare.com fonts.gstatic.com *.bovishomes.co.uk *.googleapis.com *.bootstrapcdn.com bootstrapcdn.com;frame-ancestors 'self' https://dev-bovissales.vistry.co.uk/ *.youtube.com https://player.vimeo.com *.bovishomes.co.uk  www.google-analytics.com;frame-src 'self' 'unsafe-inline' https://dev-bovissales.vistry.co.uk/ *.bovishomes.co.uk  www.google.com/ https://player.vimeo.com my.matterport.com maps.google.com oc-cdn-public-gbr.azureedge.net *.facebook.com *.twitter.com *.doubleclick.net *.revolutionviewing.co.uk *.youtube.com youtube.com;img-src 'self' 'unsafe-inline' *.vistry.co.uk *.bovishomes.co.uk *.cookiepro.com sales-dev-images.vistry.co.uk/ data: connect.facebook.net *.gstatic.com *.googleapis.com *.google.com www.google.co.uk www.google.com www.facebook.com *.doubleclick.net www.google-analytics.com dev.visualwebsiteoptimizer.com *.cloudflare.com https://sales-dev.vistry.co.uk/ bovisstaging.vistry.co.uk *.bootstrapcdn.com;media-src 'self' 'unsafe-inline' *.youtube.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' oc-cdn-public-gbr.azureedge.net *.bovishomes.co.uk  *.dev-bovissales.vistry.co.uk *.bovishomes.co.uk https://az416426.vo.msecnd.net/scripts/a/ai.0.js *.vimeo.com *.aspnetcdn.com *.vistry.co.uk/  *.cookiepro.com *.pcapredict.com *.postcodeanywhere.co.uk *.googleadservices.com *.g.doubleclick.net *.twitter.com script.crazyegg.com connect.facebook.net *.googletagmanager.com *.googleapis.com/ https://www.google-analytics.com/ https://use.fontawesome.com/* https://*.fontawesome.com/*/ *.survicate.com *.visualwebsiteoptimizer.com www.google-analytics.com  *.postcodeanywhere.co.uk  *.cloudflare.com *.bootstrapcdn.com *.jquery.com;style-src 'self' 'unsafe-inline' oc-cdn-public-gbr.azureedge.net use.fontawesome.com/ *.bovishomes.co.uk *.cloudflare.com *.pcapredict.com *.postcodeanywhere.co.uk *.bootstrapcdn.com  bootstrapcdn.com *.googleapis.com fonts.googleapis.com cdnjs.cloudflare.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' https://www.google-analytics.com https://code.jquery.com https://na02.mypinpointe.com https://js-agent.newrelic.com https://bam.nr-data.net https://js-agent.newrelic.com/nr-1167.min.js addtocalendar.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://platform.twitter.com https://polyfill.io; style-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' https://fonts.googleapis.com https://na02.mypinpointe.com https://na02.mypinpointe.com/admin/resources/form_designs/Advantage-Popup/style.css addtocalendar.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; report-uri https://msiworldwide.com/report-uri/enforce 1
frame-ancestors 'self' https://sconto.de http://images.google.de http://images.google.com https://images.google.de https://images.google.com https://ogone.test.v-psp.com https://secure.ogone.com 1
default-src 'self' https: wss: data: blob: 'unsafe-inline' 'unsafe-eval' *.unitedtraders.com *.unitedtraders.ru *.uttoken.io *.unitedtraders.team *.utchallenge.com *.utconf.ru *.auroraplatform.com *.finderby.net *.utex.io *.whattobuy.today ; 1
block-all-mixed-content; font-src https://use.typekit.net https://fonts.gstatic.com https://script.hotjar.com; frame-ancestors 'none'; manifest-src 'none'; media-src 'none'; object-src 'none'; worker-src 'none'; report-uri https://o223921.ingest.sentry.io/api/1440158/security/?sentry_key=541f0dd3978f481cb41cd99dc9f24ed6&sentry_environment=production&sentry_release=a8f3e03d97367acc259080681013ba94aa383f3e-production 1
script-src 'unsafe-inline' 'unsafe-eval' https:; worker-src blob: https: https://api.useinsider.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://ssl.google-analytics.com/ 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com ssl.google-analytics.com translate.google.com translate.googleapis.com *.livechatinc.com; 1
default-src 'none'; child-src 'self' https://navigate.portofrotterdam.com blob:; script-src * data: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://bam-cell.nr-data.net https://www.google-analytics.com https://bam.nr-data.net https://hbr-hm-portmaps-service-prod.eu-gb.mybluemix.net https://dhmr-portmapsapi.ha.naiade.portofrotterdam.com https://public-portmapsapi.ha.naiade.portofrotterdam.com https://dhmr-gis.ha.naiade.portofrotterdam.com https://public-gis.ha.naiade.portofrotterdam.com https://api.mapbox.com https://theemswegtraceheadless.s3.amazonaws.com https://*.siteimprove.com https://api.eu.apiconnect.ibmcloud.com https://*.hotjar.com wss://*.hotjar.com https://gis.portofrotterdam.com https://*.arcgis.com https://services.arcgisonline.nl https://*.arcgisonline.com; media-src 'self' data:; object-src 'self' http://www.youku.com https://players.youku.com; img-src 'self' * data: blob:; style-src * 'unsafe-inline'; frame-src 'self' https://360vr-video.nl https://*.hotjar.com https://www.youtube.com https://www.google.com https://player.vimeo.com https://*.akamaihd.net https://shipinfo.dirkzwager.com http://vaarsnelheden.mx-systems.nl https://clients.skycap.com https://inlandlinks.cofano.nl https://portofrotterdam.maps.arcgis.com https://my2.siteimprove.com/overlay/cms/cmssite* https://fotopaulmartens.netcam.nl; font-src * data:; plugin-types application/pdf application/x-shockwave-flash; report-uri https://portofrotterdam.report-uri.io/r/default/csp/enforce; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; report-uri /ct-report 1
default-src * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' viewpointforum.com vpf.me *.google.com *.gstatic.com *.googleapis.com *.bootstrapcdn.com data: blob:;style-src * 'unsafe-inline' data: blob:;connect-src 'self' viewpointforum.com vpf.me *.google.com *.gstatic.com *.googleapis.com; 1
frame-ancestors 'self' http://www.philips.com.pk *.philips.com *.philips.com.pk 1
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.iadvize.com https://code.jquery.com https://cdn.actito.be https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css  https://tagmanager.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sslwidget.criteo.com https://static.criteo.net/js/ld/ld.js https://cdn.actito.be/actito-goal/goal.js https://eu-ma.sam4m.com/2.0/product/lgj5g/analytics/sa.js https://ssl01.groovinads.com https://call.mgtmod01.com https://api-productviewer.copytop.com https://cdnjs.cloudflare.com https://tagmanager.google.com https://www.gstatic.com https://www.google.com https://apis.google.com https://www.googleadservices.com/ https://maps.googleapis.com https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://netdna.bootstrapcdn.com https://mastertag.effiliation.com https://connect.ekomi.de https://cdn.doofinder.com https://u.logbor.com https://track.effiliation.com https://tag.azame.net https://secure.adnxs.com https://*.msecnd.net https://webapp-beyable-prod.azurewebsites.net https://ads2.adverline.com/ https://connect.facebook.net https://mc.yandex.ru https://blueimp.github.io https://lc.iadvize.com https://api.kameleoon.com https://proxy.kameleoon.com  https://editor.kameleoon.com https://static-direct.kameleoon.com https://maps.google.com https://widget.intercom.io https://js.intercomcdn.com https://www.fullstory.com https://static.kameleoon.com https://webappe-beyable-prod.azurewebsites.net https://cobrowsing.iadvize.com https://static.iadvize.com https://code.jquery.com https://snap.licdn.com https://dc.ads.linkedin.com https://px.ads.linkedin.com https://www.linkedin.com https://a.cdn3.net https://bat.bing.com/bat.js https://gl.hostcg.com/js/genlead.js https://gl.hostcg.com/js/genlead2.js https://gl.hostcg.com/js/tracker.php  https://*.dynamo.one 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://dice.camp; img-src 'self' https: data: blob: https://dice.camp; style-src 'self' https://dice.camp 'nonce-qGsPnbcHqJTQD/ep+Bwjlg=='; media-src 'self' https: data: https://dice.camp; frame-src 'self' https:; manifest-src 'self' https://dice.camp; connect-src 'self' data: blob: https://dice.camp https://cdn.masto.host wss://dice.camp; script-src 'self' https://dice.camp; child-src 'self' blob: https://dice.camp; worker-src 'self' blob: https://dice.camp 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' *.inxmail.com www.google-analytics.com ajax.googleapis.com www.youtube.com www.youtube-nocookie.com news.hima.com *.cookiebot.com; 1
font-src 'self' data: data: *.bootstrapcdn.com *.sharpspring.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cardinalcommerce.com *.marketingautomation.services *.facebook.com *.sharpspring.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cardinalcommerce.com *.hotjar.com *.hotjar.io *.freshchat.com *.facebook.com *.klantenvertellen.nl *.marketingautomation.services *.sharpspring.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com *.vimeocdn.com s.ytimg.com *.magentocommerce.com *.ytimg.com data: *.google-analytics.com *.bing.com *.doubleclick.net *.facebook.net *.icttrainingen.nl *.onlineitcourses.com *.marketingcompetenties.nl *.facebook.com *.pay.nl *.sharpspring.com 'self' 'unsafe-inline'; script-src s.ytimg.com video.google.com *.vimeo.com www.vimeo.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.youtube.com *.ytimg.com *.google.com *.cardinalcommerce.com *.ccdc02.com *.youtube.com *.bing.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.hotjar.com *.facebook.net *.facebook.com *.freshchat.com *.opmnstr.com *.klantenvertellen.nl *.marketingautomation.services *.sharpspring.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.getfirebug.com *.bootstrapcdn.com *.freshchat.com *.sharpspring.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.bing.com *.hotjar.com *.hotjar.io *.opmnstr.com *.omappapi.com *.cardinalcommerce.com *.sharpspring.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors https://aperfeicoa.enem.com.br 'self' 1
default-src 'self'; object-src 'self' blob:; style-src * 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' acsbap.com *.paypal.com *.facebook.com *.facebook.net *.criteo.net *.criteo.com *.doubleclick.net *.twitter.com *.ads-twitter.com *.trackedlink.net *.cloudfront.net *.xg4ken.com *.bing.com *.getcandid.com *.pinterest.com *.amazonaws.com *.googletagmanager.com tagmanager.google.com *.shopbot.ca *.pinimg.com *.pinterest.com *.youtube.com *.adnxs.com *.yimg.com *.ytimg.com *.hotjar.com *.amazon-adsystem.com *.addthis.com *.addthisedge.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.adroll.com *.jsdelivr.net *.typekit.net *.adsrvr.org *.rubiconproject.com *.casalemedia.com *.openx.net *.pubmatic.com *.richemontpartners.com *.kaptcha.com *.impactradius-event.com *.rolex.com *.flexiti.fi *.smaato.net *.sharethrough.com chimpstatic.com *.braintreegateway.com tools-cartier.ctxprod1.com maisonbirks-cartier.ctxprod1.com *.breitling.com *.jquery.com *.vimeocdn.com *.google.com *.gstatic.com *.tudorwatch.com ajax.cloudflare.com odcc2.bell.ca z.moatads.com *.krxd.net assets.adobedtm.com; font-src 'self' data: *.gstatic.com maxcdn.bootstrapcdn.com maps.googleapis.com; img-src * data:; frame-src 'self' acsbap.com *.paypal.com *.facebook.com *.facebook.net *.criteo.net *.criteo.com *.doubleclick.net *.twitter.com *.ads-twitter.com *.trackedlink.net *.cloudfront.net *.xg4ken.com *.bing.com *.getcandid.com *.pinterest.com *.amazonaws.com *.googletagmanager.com tagmanager.google.com *.shopbot.ca *.pinimg.com *.pinterest.com *.youtube.com *.adnxs.com *.yimg.com *.ytimg.com *.hotjar.com *.amazon-adsystem.com *.addthis.com *.addthisedge.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.adroll.com *.jsdelivr.net *.typekit.net *.adsrvr.org *.rubiconproject.com *.casalemedia.com *.openx.net *.pubmatic.com *.richemontpartners.com *.moneris.com birksgroup.pxf.io *.flexiti.fi *.smaato.net *.sharethrough.com *.vimeo.com *.braintreegateway.com tools-cartier.ctxprod1.com maisonbirks-cartier.ctxprod1.com *.rolex.com *.breitling.com *.tudorwatch.com *.patek.com *.google.com odcc2.bell.ca *.krxd.net *.office.com *.microsoft.com; connect-src *; media-src 'none'; report-uri /csp-violation.php; 1
report-uri https://allegrocredit.report-uri.com/r/d/csp/reportOnly;frame-ancestors 'self' 1
connect-src 'self' translate.googleapis.com www.google-analytics.com; default-src 'self'; font-src 'self' data: fonts.gstatic.com; frame-src 'self' syndication.twitter.com staticxx.facebook.com platform.twitter.com www.youtube.com www.google.com player.vimeo.com public.tableau.com app.smartsheetgov.com; img-src 'self' data: platform.twitter.com ton.twimg.com platform.twimg.com abs.twimg.com pbs.twimg.com www.gstatic.com translate.google.com dojdev.canvasvps.com www.facebook.com www.google-analytics.com syndication.twitter.com csi.gstatic.com maps.googleapis.com maps.gstatic.com public.tableau.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.syndication.twimg.com platform.twitter.com connect.facebook.net ajax.googleapis.com cdn.datatables.net www.google-analytics.com translate.googleapis.com translate.google.com fonts.googleapis.com maps.google.com maps.googleapis.com www.google.com www.gstatic.com player.vimeo.com public.tableau.com ibossr1.doj.pri; style-src 'self' 'unsafe-inline' ton.twimg.com platform.twitter.com connect.facebook.net ajax.googleapis.com cdn.datatables.net staticxx.facebook.com translate.googleapis.com www.google-analytics.com fonts.googleapis.com fonts.gstatic.com public.tableau.com; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com shougai.rakuraku.or.jp map.yahooapis.jp kaigo.rakuraku.or.jp ajax.googleapis.com s.yimg.jp map.c.yimg.jp *.yahoo.co.jp www.youtube.com www.google.com ssl.rakuraku.or.jp www.rakuraku.or.jp www.adaptive-techs.com; 1
default-src https:; font-src https: data:; img-src https: data:; base-uri 'self'; object-src 'self'; media-src https: blob:; frame-ancestors 'self' https://*.blackrock.com https://*.ishares.com; style-src https: 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline' 'nonce-F3gE7kyCFGcjK0zALcgTlA=='; 1
connect-src 'self' ; frame-ancestors 'self' ;  media-src 'self' *.watconsult.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://web.archive.org/  https://www.google-analytics.com/ https://www.google.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://apis.google.com; style-src 'self' 'unsafe-inline' filesystem: https://use.fontawesome.com/ https://fonts.googleapis.com; 1
font-src fonts.googleapis.com data: cdn.jotform.ms cdn.jotfor.ms 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com submit.jotform.com 'self' 'unsafe-inline'; frame-ancestors self *.barstooldesigns.com *.brandsourcetest.ca 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com data: youtube.com www.youtube.com vimeo.com api.amisco.pixistudio.com staging.amisco.pixistudio.com google.com www.google.com www.gstatic.com s7.addthis.com submit.jotform.com cdn.dnky.co webchat.dotdigital.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com *.vimeocdn.com s.ytimg.com data: maps.gstatic.com www.maps.gstatic.com maps.googleapis.com developers.google.com www.google-analytics.com ssl.gstatic.com www.davinci.tools cdn.jotfor.ms www.jotform.com files.jotform.com events.jotform.com 'self' 'unsafe-inline'; script-src s.ytimg.com video.google.com vimeo.com www.vimeo.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.youtube.com www.googletagmanager.com data: js-agent.newrelic.com maps.googleapis.com www.google-analytics.com google.com www.google.com https://ajax.googleapis.com www.googleapis.com www.gstatic.com bam.nr-data.net tagmanager.google.com form.jotform.com cdn.jotform.ms cdn.jotfor.ms cdnjs.cloudflare.com bam-cell.nr-data.net s7.addthis.com z.moatads.com v1.addthisedge.com m.addthis.com api-public.addthis.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com tagmanager.google.com fonts.googleapis.com cdn.jotfor.ms cdn.jotform.ms cdn.dnky.co webchat.dotdigital.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bam.nr-data.net s7.addthis.com m.addthis.com www.google-analytics.com submit.jotform.com bam-cell.nr-data.net r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com 'self' 'unsafe-inline'; child-src blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'none'; object-src *; frame-src *; base-uri *; require-sri-for script 1
base-uri 'none'; object-src 'none'; script-src https://1e9.community/logs/ https://1e9.community/sidekiq/ https://1e9.community/mini-profiler-resources/ https://1e9.community/assets/ https://1e9.community/brotli_asset/ https://1e9.community/extra-locales/ https://1e9.community/highlight-js/ https://1e9.community/javascripts/ https://1e9.community/plugins/ https://1e9.community/theme-javascripts/ https://1e9.community/svg-sprite/ https://www.googletagmanager.com/gtm.js https://meet.jit.si/external_api.js https://unpkg.com https://cdnjs.cloudflare.com/ajax/libs/picturefill/3.0.3/picturefill.min.js https://1e9.community/uploads/db1440/original/2X/4/44ef1f913bb49e8f0c13ad9a6db132b304bc96b7.js https://1e9.community/uploads/db1440/original/2X/6/68f45a6ef337e9018077fb1feb98cda77ea4f914.js https://static.landbot.io/landbot-3/landbot-3.0.0.js https://js.stripe.com/v3 https://www.google-analytics.com https://widget.flowxo.com https://cdn.flipboard.com https://www.google-analytics.com/analytics.js https://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.youtube.com https://xing.com https://1e9.community https://static.landbot.io https: https://chats.landbot.io 'unsafe-eval' 'unsafe-inline'  https://api.stripe.com https://q.stripe.com; worker-src 'self' https://1e9.community/assets/ https://1e9.community/brotli_asset/ https://1e9.community/javascripts/ https://1e9.community/plugins/ 1
default-src 'self' *.wistia.net https://wp-rocket.helpscoutdocs.com https://djtflbt20bdde.cloudfront.net; frame-ancestors 'self' https://m.facebook.com; font-src 'self' *.typekit.net https://reporting.wd40company.eu https://yoast.com https://netdna.bootstrapcdn.com *.gstatic.com data:; img-src 'self' *.helpscout.net *.akamaihd.net *.wistia.com https://www.google.com https://www.google.co.uk https://reporting.wd40company.eu/ https://yoast.com https://wp-rocket.me https://djtflbt20bdde.cloudfront.net https://i.ytimg.com *.googletagmanager.com https://stats.g.doubleclick.net *.googleapis.com *.gravatar.com *.wpmudev.org *.gstatic.com *.google-analytics.com https://cdn.wd40company.eu https://secure.gravatar.com *.cdninstagram.com *.fbcdn.net *.twimg.com *.facebook.com data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.wistia.com *.helpscout.net *.ytimg.com https://reporting.wd40company.eu *.youtube.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdn.wd40company.eu https://extend.vimeocdn.com https://reporting.wd40company.eu https://djtflbt20bdde.cloudfront.net https://cdn.ampproject.org https://connect.facebook.net *.gstatic.com *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com https://emarketing.wd40.co.uk; frame-src 'self' wp-rocket.me *.vimeo.com https://djtflbt20bdde.cloudfront.net *.facebook.com https://yoa.st *.youtube-nocookie.com *.google.com *.youtube.com; style-src 'self' https://yoast.com https://djtflbt20bdde.cloudfront.net https://cdn.ampproject.org *.bootstrapcdn.com *.cloudflare.com *.typekit.net 'unsafe-inline' https://code.jquery.com *.googleapis.com; connect-src 'self' https://cdn.ampproject.org *.helpscout.net *.wistia.com *.cloudfront.net *.litix.io https://reporting.wd40company.eu https://wp-rocket.helpscoutdocs.com https://secure.helpscout.net https://api.ipify.org https://graph.facebook.com https://yoast.com *.google-analytics.com *.googleapis.com *.gstatic.com data:  1
default-src * blob: data:; script-src 'sha256-5CxqAdDXlHviOy7zxeRpMobzRK/JNpLvkS+k8Zj3L3A=' 'sha256-FIBGC/wl1Qfnh2Fb5NPFHmRty7BHJdDpWW1FZ8egppI=' 'sha256-dKn2nAtwgzaaXC8ZM58hhldxNyeuu4qrzW4H9//9YMA=' blob: https://cdn.ampproject.org/esm/ https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/mp/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sp/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp 1
default-src 'self' https://* data: 'unsafe-inline' 'unsafe-eval' bdk.force.com www.youtube.com pdk.theplatform.com www.stanleyblackanddecker.com www.storageconfiguration.com config.listaintl.com quickship.lista.vidmar.com www.facebook.com www.flipsnack.com twitter.com www.linkedin.com na.lista.assets.sbd-nonprod.com storage.stanleyblackanddecker.com www.lista-automotive.com ergo.human.cornell.edu s7.addthis.com configure.stanleyvidmar.com web.archive.org www.stanleyinnerspace.com www.stanleyvidmar.com ss405628-eastus-azure.searchstax.com www.go.stanleyblackanddecker.com www.mynewsdesk.com *.theplatform.com; 1
default-src 'unsafe-inline' 'unsafe-eval' https: data: wss: http://www.cockovnik.cz http://www.vasecocky.cz http://www.lentiamo.cz; frame-ancestors 'self' 1
frame-ancestors *  https://ipcamlive.com 104.20.205.35; 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; 1
font-src 'self' fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com/ 1
default-src 'none'; media-src 'self'; img-src https: https://img.shields.io 1
default-src 'self' data: blob: api.mapbox.com cdnjs.cloudflare.com *.editmysite.com *.nhd.weebly.com fonts.gstatic.com fonts.googleapis.com cdn.ampproject.org *.ampproject.org *.w.org w.org wp.com sendpulse.com gravatar.com *.wp.com *.sendpulse.com *.gravatar.com wordpress.com *.wordpress.com *.youtube.com youtube.com; frame-src 'self' *.youtube-nocookie.com *.rud.is rud.is datawrapper.dwcdn.net youtube.com *.youtube.com jetpack.wordpress.com platform.twitter.com widgets.wp.com *.ampproject.net; connect-src: 'self' vega.github.io *.sendpulse.com ssl.google-analytics.com platform.twitter.com *.ampproject.net ampproject.net; img-src 'self' data: blob: gramener.com cdn.jsdelivr.net pbs.twimg.com syndication.twitter.com graph.facebook.com *.tiles.mapbox.com server.arcgisonline.com cranlogs.r-pkg.org cdn.leafletjs.com www.gstatic.com *.editmysite.com *.nhd.weebly.com im.ft-static.com *.tile.openstreetmap.se *.gravatar.com gravatar.com t.co ssl.google-analytics.com cdn.mathjax.org ci.appveyor.com *.w.org w.org *.wp.com wp.com wordpress.com *.wordpress.com tile.openstreetmap.org *.tile.openstreetmap.org; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: api.mapbox.com gramener.com cdn.jsdelivr.net/npm/comicgen cdn.syndication.twimg.com syndication.twitter.com  *.editmysite.com editmysite.com mathjax.rstudio.com d3js.org cdnjs.cloudflare.com gist.github.com platform.twitter.com ssl.google-analytics.com fonts.gstatic.com ajax.googleapis.com cdn.mathjax.org fonts.googleapis.com *.w.org w.org wp.com cdn.ampproject.org *.ampproject.org sendpulse.com gravatar.com *.wp.com *.sendpulse.com *.gravatar.com wordpress.com *.wordpress.com; style-src 'self' data: 'unsafe-inline' 'unsafe-eval' api.mapbox.com gramener.com cdn.jsdelivr.net/npm/comicgen/dist/comicgen.min.css github.githubassets.com *.nhd.weebly.com nhd.weebly.com *.editmysite.com editmysite.com fonts.gstatic.com fonts.googleapis.com *.w.org w.org wp.com *.sendpulse.com sendpulse.com *.gravatar.com gravatar.com *.wp.com cdn.ampproject.org *.ampproject.org; base-uri 'none'; upgrade-insecure-requests; object-src 'self' *.youtube.com youtube.com; block-all-mixed-content; report-uri https://qpduebzqua.execute-api.us-east-1.amazonaws.com/prod/report; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://d3sbxpiag177w8.cloudfront.net https://playerserver.walkme.com https://js-agent.newrelic.com https://bam.eu01.nr-data.net https://d6e36ddde8c0e2a4f2a7-9047f2144bf3a327a20c602d8334c89a.ssl.cf3.rackcdn.com https://eu-cdn.walkme.com https://eu-playerserver.walkme.com https://ekr.zdassets.com/compose/ https://*.zendesk.com/embeddable/ https://*.zendesk.com/ wss://*.zopim.com https://*.zopim.com/client/widget/;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://f754480b912adb0ef3d9-35cf9bca3b3dea17d061fbb9955691d8.ssl.cf3.rackcdn.com;img-src 'self' * data:;media-src 'self' https://static.zdassets.com;frame-src 'self' https://localhost:* https://eu-cdn.walkme.com https://www.youtube.com;font-src 'self' https://fonts.gstatic.com data:;connect-src 'self' https://ec.walkme.com https://bam.eu01.nr-data.net wss://www.sympahr.net https://datacard.sympahr.net https://eu-ec.walkme.com/event/ https://ekr.zdassets.com/compose/ https://*.zendesk.com/embeddable/ https://*.zendesk.com/ wss://*.zopim.com https://*.zopim.com/client/widget/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://oss.maxcdn.com/html5shiv/3.7.3/html5shiv.min.js https://oss.maxcdn.com/respond/1.4.2/respond.min.js; style-src 'self' 'unsafe-inline'; img-src 'self' https://www.google-analytics.com; 1
frame-ancestors 'none'; style-src 'self' 'unsafe-inline' 1
default-src https:; script-src 'self' https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.googletagmanager.com https://platform.twitter.com https://connect.facebook.net 'unsafe-inline' 'unsafe-eval'; object-src 'self'; style-src 'self' https://www.w3.org/2000/svg 'unsafe-inline'; font-src 'self' data:; img-src https://syndication.twitter.com https://www.google-analytics.com https://i.ytimg.com https://facebook.com https://www.facebook.com 'self'  data:; 1
frame-ancestors http://www.liligo.fr http://cosearch.edreams.fr http://cosearch.govoyages.com http://cosearch.opodo.fr http://admin.liligo.fr http://www.cosearch.opodo.fr http://www.cosearch.edreams.fr http://www.cosearch.govoyages.com http://flights.sebogo.fr http://vol-v2.routard.com https://www.liligo.fr https://cosearch.edreams.fr https://cosearch.govoyages.com https://cosearch.opodo.fr https://admin.liligo.fr https://www.cosearch.opodo.fr https://www.cosearch.edreams.fr https://www.cosearch.govoyages.com https://flights.sebogo.fr https://vol-v2.routard.com https://local-b2c.corsair.fr https://run-b2c.corsair.fr https://pp2-b2c.corsair.fr https://www.corsair.fr https://local-ibev2.corsair.fr https://run-ibe.corsair.fr https://pp2-ibe.corsair.fr https://vols.corsair.fr 1
default-src 'self' blob: https://stats.tele-task.de:443 https://www10-fms.hpi.uni-potsdam.de:443; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://stats.tele-task.de:443; frame-src https://www.google.com/recaptcha/; 1
script-src 'self' https://www.gstatic.cn *.acceleratoradmin.com *.adpclientappreciation.com *.lincolnelectricdigitalrewards.com *.boschappliancedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.thermadorappliancedigitalrewards.com *.tranedigitalrewards.com *.americanstandardairdigitalrewards.com *.myacuvuedigitalrewards.com *.attrecognition.com *.coopervisiondigitalrewards.com *.allglobalcircle-rewards.com *.habcard.com *.minimotoringredemption.com *.minimotoringrewardsredemption.com *.ultimaterewardsredemption.com *.mystarzrewards.com *.e-rewardsmedicalrewards.com *.recognizingyourewards.com *.kelloggsdigitalrewards.ca *.valvolinedigitalrewards.com *.goodyeardigitalrewards.com *.alconchoicepayments.com *.geappliancesdigitalrewards.com *.topcashbackdigitalsolutions.com *.topcashbackdigitalsolutions.co.uk *.prosper2card.co.uk *.ppdslab.com *.cooperdigitalrewards.com *.tranedigitalrewards.com https://cdn.datatables.net https://www.google-analytics.com https://www.recaptcha.net https://ajax.aspnetcdn.com https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com *.google.com *.googletagmanager.com https://www.gstatic.com https://ajax.googleapis.com https://*.msecnd.net *.acceleratoradmin.com *.mxpnl.com *.greencompasspay.com *.360digitalpayments.com *.adpclientappreciation.com *.alconchoicepayments.com *.allglobalcircle-rewards.com *.americanstandardairdigitalrewards.com *.attrecognition.com *.bittyadvancecard.com *.bmwrebateredemption.com *.bmwultimaterewardsredemption.com *.boschappliancedigitalrewards.com *.cbdatsbypay.com *.ceomovementpay.com *.cooperdigitalrewards.com *.coopervisiondigitalrewards.com *.digitalwalletdemo.com *.emrispay.com *.e-rewardsmedicalrewards.com *.expectationsrewards.co.uk *.ferrerorecognition.com *.fundkitecard.com *.geappliancesdigitalrewards.com *.gettogether-pjlibraryrewards.org *.goodyeardigitalrewards.com *.greencompasspay.com *.guustodigitalrewards.com *.habcard.com *.healthyhempfarmspay.com *.honey20pay.com *.hoolalifepay.com *.kelloggsdigitalrewards.ca *.leafywellpay.com *.lincolnelectricdigitalrewards.com *.minimotoringredemption.com *.minimotoringrewardsredemption.com *.minirebateredemption.com *.myacuvuedigitalrewards.com *.mygocardspay.com *.myrevealpay.com *.my-rewardcard.com *.mystarzrewards.com *.natureancepay.com *.NNAPartsDigitalRewards.com *.noble8pay.com *.onelogicmoney.com *.perksatworkcard.com *.ppdslab.com *.ppdslabautomation.com *.prepaiddigitalsolutions.com *.prosper2card.co.uk *.purestoragedigitalrewards.com *.pyurlifepay.com *.recognizingyourewards.com *.redgagedirect.com *.sanctuarygirlpay.com *.swiftimplementations.com *.thermadorappliancedigitalrewards.com *.tirestorerewards.com *.topcashbackdigitalsolutions.co.uk *.topcashbackdigitalsolutions.com *.tranedigitalrewards.com *.ultimaterewardsredemption.com *.uulalacard.com *.valvolinedigitalrewards.com *.vsponeprepaidcard.com *.wealthbuilderpay.com *.worldpaymerchantrewards.com *.yourrewardpass.com topcashbackdigitalsolutions.co.uk https://cdn.highimpactpayments.com 'unsafe-inline';style-src 'self' cdn.highimpactpayments.com *.acceleratoradmin.com *.adpclientappreciation.com *.lincolnelectricdigitalrewards.com *.boschappliancedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.thermadorappliancedigitalrewards.com *.tranedigitalrewards.com *.americanstandardairdigitalrewards.com *.myacuvuedigitalrewards.com *.attrecognition.com *.coopervisiondigitalrewards.com *.allglobalcircle-rewards.com *.habcard.com *.minimotoringredemption.com *.minimotoringrewardsredemption.com *.ultimaterewardsredemption.com *.mystarzrewards.com *.e-rewardsmedicalrewards.com *.recognizingyourewards.com *.kelloggsdigitalrewards.ca *.valvolinedigitalrewards.com *.goodyeardigitalrewards.com *.alconchoicepayments.com *.geappliancesdigitalrewards.com *.topcashbackdigitalsolutions.com *.topcashbackdigitalsolutions.co.uk *.prosper2card.co.uk *.ppdslab.com *.cooperdigitalrewards.com *.tranedigitalrewards.com https://cdn.datatables.net https://ajax.aspnetcdn.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com *.greencompasspay.com *.360digitalpayments.com *.adpclientappreciation.com *.alconchoicepayments.com *.allglobalcircle-rewards.com *.americanstandardairdigitalrewards.com *.attrecognition.com *.bittyadvancecard.com *.bmwrebateredemption.com *.bmwultimaterewardsredemption.com *.boschappliancedigitalrewards.com *.cbdatsbypay.com *.ceomovementpay.com *.cooperdigitalrewards.com *.coopervisiondigitalrewards.com *.digitalwalletdemo.com *.emrispay.com *.e-rewardsmedicalrewards.com *.expectationsrewards.co.uk *.ferrerorecognition.com *.fundkitecard.com *.geappliancesdigitalrewards.com *.gettogether-pjlibraryrewards.org *.goodyeardigitalrewards.com *.greencompasspay.com *.guustodigitalrewards.com *.habcard.com *.healthyhempfarmspay.com *.honey20pay.com *.hoolalifepay.com *.kelloggsdigitalrewards.ca *.leafywellpay.com *.lincolnelectricdigitalrewards.com *.minimotoringredemption.com *.minimotoringrewardsredemption.com *.minirebateredemption.com *.myacuvuedigitalrewards.com *.mygocardspay.com *.myrevealpay.com *.my-rewardcard.com *.mystarzrewards.com *.natureancepay.com *.NNAPartsDigitalRewards.com *.noble8pay.com *.onelogicmoney.com *.perksatworkcard.com *.ppdslab.com *.ppdslabautomation.com *.prepaiddigitalsolutions.com *.prosper2card.co.uk *.purestoragedigitalrewards.com *.pyurlifepay.com *.recognizingyourewards.com *.redgagedirect.com *.sanctuarygirlpay.com *.swiftimplementations.com *.thermadorappliancedigitalrewards.com *.tirestorerewards.com *.topcashbackdigitalsolutions.co.uk *.topcashbackdigitalsolutions.com *.tranedigitalrewards.com *.ultimaterewardsredemption.com *.uulalacard.com *.valvolinedigitalrewards.com *.vsponeprepaidcard.com *.wealthbuilderpay.com *.worldpaymerchantrewards.com *.yourrewardpass.com topcashbackdigitalsolutions.co.uk https://cdn.highimpactpayments.com 'unsafe-inline';connect-src 'self' *.acceleratoradmin.com *.adpclientappreciation.com *.lincolnelectricdigitalrewards.com *.boschappliancedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.thermadorappliancedigitalrewards.com *.tranedigitalrewards.com *.americanstandardairdigitalrewards.com *.myacuvuedigitalrewards.com *.attrecognition.com *.coopervisiondigitalrewards.com *.allglobalcircle-rewards.com *.habcard.com *.minimotoringredemption.com *.minimotoringrewardsredemption.com *.ultimaterewardsredemption.com *.mystarzrewards.com *.e-rewardsmedicalrewards.com *.recognizingyourewards.com *.kelloggsdigitalrewards.ca *.valvolinedigitalrewards.com *.goodyeardigitalrewards.com *.alconchoicepayments.com *.geappliancesdigitalrewards.com *.topcashbackdigitalsolutions.com *.topcashbackdigitalsolutions.co.uk *.prosper2card.co.uk *.ppdslab.com *.cooperdigitalrewards.com https://www.google-analytics.com *.visualstudio.com *.acceleratoradmin.com api.mixpanel.com *.greencompasspay.com *.360digitalpayments.com *.adpclientappreciation.com *.alconchoicepayments.com *.allglobalcircle-rewards.com *.americanstandardairdigitalrewards.com *.attrecognition.com *.bittyadvancecard.com *.bmwrebateredemption.com *.bmwultimaterewardsredemption.com *.boschappliancedigitalrewards.com *.cbdatsbypay.com *.ceomovementpay.com *.cooperdigitalrewards.com *.coopervisiondigitalrewards.com *.digitalwalletdemo.com *.emrispay.com *.e-rewardsmedicalrewards.com *.expectationsrewards.co.uk *.ferrerorecognition.com *.fundkitecard.com *.geappliancesdigitalrewards.com *.gettogether-pjlibraryrewards.org *.goodyeardigitalrewards.com *.greencompasspay.com *.guustodigitalrewards.com *.habcard.com *.healthyhempfarmspay.com *.honey20pay.com *.hoolalifepay.com *.kelloggsdigitalrewards.ca *.leafywellpay.com *.lincolnelectricdigitalrewards.com *.minimotoringredemption.com *.minimotoringrewardsredemption.com *.minirebateredemption.com *.myacuvuedigitalrewards.com *.mygocardspay.com *.myrevealpay.com *.my-rewardcard.com *.mystarzrewards.com *.natureancepay.com *.NNAPartsDigitalRewards.com *.noble8pay.com *.onelogicmoney.com *.perksatworkcard.com *.ppdslab.com *.ppdslabautomation.com *.prepaiddigitalsolutions.com *.prosper2card.co.uk *.purestoragedigitalrewards.com *.pyurlifepay.com *.recognizingyourewards.com *.redgagedirect.com *.sanctuarygirlpay.com *.swiftimplementations.com *.thermadorappliancedigitalrewards.com *.tirestorerewards.com *.topcashbackdigitalsolutions.co.uk *.topcashbackdigitalsolutions.com *.tranedigitalrewards.com *.ultimaterewardsredemption.com *.uulalacard.com *.valvolinedigitalrewards.com *.vsponeprepaidcard.com *.wealthbuilderpay.com *.worldpaymerchantrewards.com *.yourrewardpass.com topcashbackdigitalsolutions.co.uk https://api-js.mixpanel.com api-js.mixpanel.com api-js.mixpanel.com https://cdn.highimpactpayments.com;font-src 'self' cdn.highimpactpayments.com https://ajax.aspnetcdn.com *.tranedigitalrewards.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.acceleratoradmin.com https://cdn.highimpactpayments.com;img-src 'self' cdn.highimpactpayments.com https://cdnjs.cloudflare.com https://www.google-analytics.com *.acceleratoradmin.com data: data: https://cdn.highimpactpayments.com;frame-src 'self' https://www.recaptcha.net/ https://www.google.com *.acceleratoradmin.com *.adpclientappreciation.com *.lincolnelectricdigitalrewards.com *.boschappliancedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.prepaiddigitalsolutions.com *.purestoragedigitalrewards.com *.thermadorappliancedigitalrewards.com *.tranedigitalrewards.com *.americanstandardairdigitalrewards.com *.myacuvuedigitalrewards.com *.attrecognition.com *.coopervisiondigitalrewards.com *.allglobalcircle-rewards.com *.habcard.com *.minimotoringredemption.com *.minimotoringrewardsredemption.com *.ultimaterewardsredemption.com *.mystarzrewards.com *.e-rewardsmedicalrewards.com *.recognizingyourewards.com *.kelloggsdigitalrewards.ca *.valvolinedigitalrewards.com *.goodyeardigitalrewards.com *.alconchoicepayments.com *.geappliancesdigitalrewards.com *.topcashbackdigitalsolutions.com *.topcashbackdigitalsolutions.co.uk *.prosper2card.co.uk *.ppdslab.com *.cooperdigitalrewards.com *.youtube.com https://youtu.be https://testcommon.swiftprepaid.com https://common.swiftprepaid.com *.greencompasspay.com *.360digitalpayments.com *.adpclientappreciation.com *.alconchoicepayments.com *.allglobalcircle-rewards.com *.americanstandardairdigitalrewards.com *.attrecognition.com *.bittyadvancecard.com *.bmwrebateredemption.com *.bmwultimaterewardsredemption.com *.boschappliancedigitalrewards.com *.cbdatsbypay.com *.ceomovementpay.com *.cooperdigitalrewards.com *.coopervisiondigitalrewards.com *.digitalwalletdemo.com *.emrispay.com *.e-rewardsmedicalrewards.com *.expectationsrewards.co.uk *.ferrerorecognition.com *.fundkitecard.com *.geappliancesdigitalrewards.com *.gettogether-pjlibraryrewards.org *.goodyeardigitalrewards.com *.greencompasspay.com *.guustodigitalrewards.com *.habcard.com *.healthyhempfarmspay.com *.honey20pay.com *.hoolalifepay.com *.kelloggsdigitalrewards.ca *.leafywellpay.com *.lincolnelectricdigitalrewards.com *.minimotoringredemption.com *.minimotoringrewardsredemption.com *.minirebateredemption.com *.myacuvuedigitalrewards.com *.mygocardspay.com *.myrevealpay.com *.my-rewardcard.com *.mystarzrewards.com *.natureancepay.com *.NNAPartsDigitalRewards.com *.noble8pay.com *.onelogicmoney.com *.perksatworkcard.com *.ppdslab.com *.ppdslabautomation.com *.prepaiddigitalsolutions.com *.prosper2card.co.uk *.purestoragedigitalrewards.com *.pyurlifepay.com *.recognizingyourewards.com *.redgagedirect.com *.sanctuarygirlpay.com *.swiftimplementations.com *.thermadorappliancedigitalrewards.com *.tirestorerewards.com *.topcashbackdigitalsolutions.co.uk *.topcashbackdigitalsolutions.com *.tranedigitalrewards.com *.ultimaterewardsredemption.com *.uulalacard.com *.valvolinedigitalrewards.com *.vsponeprepaidcard.com *.wealthbuilderpay.com *.worldpaymerchantrewards.com *.yourrewardpass.com topcashbackdigitalsolutions.co.uk https://cdn.highimpactpayments.com 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://winsmarts.com https://*.winsmarts.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://stat1.mbasehost.de/piwik/; style-src 'self' 'unsafe-inline' ;img-src 'self' https://stat1.mbasehost.de/piwik/ data: 1
default-src 'self'; connect-src 'self' https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.google-analytics.com https://*.facebook.net; media-src 'self'; object-src 'none'; font-src 'self' https://*.hotjar.com https://*.hotjar.io; frame-src 'self' https://www.youtube.com https://*.hotjar.com/ https://*.hotjar.io/ https://www.googletagmanager.com https://www.google.com/recaptcha/ https://*.youtube-nocookie.com; img-src 'self' data: https://cnt-media.boxqos.com https://www.google-analytics.com https://script.hotjar.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://px.ads.linkedin.com/ https://*.adsymptotic.com/ https://cnt-cdn-test.nyc3.cdn.digitaloceanspaces.com; script-src 'sha256-7KS5TAvn1t7fUyfA8dKV9X6kDmdRCbDZhr56a9Lm5OU=' 'self' 'sha256-1rbDzM8rknJRvmqAwOz0VTE+V9sYBI3N6l2LPiNh2Tw=' https://*.hotjar.com https://*.hotjar.io https://*.facebook.com https://*.facebook.net https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://snap.licdn.com/; style-src 'self' 'unsafe-inline' 1
default-src data: https: http: 'unsafe-inline' 'unsafe-eval' 1
default-src 'self' https://vc.hotjar.io/sessions https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org wss://*.hotjar.com https://in.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com https://tagmanager.google.com/ https://connect.facebook.net/ https://www.gstatic.com/images/icons/ https://snap.licdn.com/; object-src 'self' ;img-src 'self' https://www.linkedin.com/ https://px.ads.linkedin.com/ https://consentmanager.mgr.consensu.org  https://cdn.consentmanager.mgr.consensu.org https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://maps.googleapis.com https://scontent.xx.fbcdn.net https://www.google.de https://www.google.com https://pbs.twimg.com https://media.licdn.com https://ssl.gstatic.com/ https://insights.hotjar.com https://static.hotjar.com https://external.xx.fbcdn.net/ https://www.gstatic.com/ https://www.facebook.com/tr/ data:; style-src 'self' 'unsafe-inline' 'unsafe-eval'  https://cdn.consentmanager.mgr.consensu.org https://s.ytimg.com https://fonts.googleapis.com/ https://tagmanager.google.com/; child-src 'self' https://www.facebook.com/v3.2/plugins/video.php https://www.youtube-nocookie.com https://vars.hotjar.com https://tagmanager.google.com/ https://fonts.googleapis.com/; font-src 'self' https://fonts.gstatic.com https://static.hotjar.com https://tagmanager.google.com/ data:; 1
default-src 'none'; connect-src 'self' *.mil.ru mc.yandex.ru www.google-analytics.com; script-src 'self' 'unsafe-inline' yastatic.net *.googletagmanager.com *.mil.ru *.xn--90anlfbebar6i.xn--p1ai *.rambler.ru *.yandex.ru *.maps.yandex.net *.mail.ru *.google-analytics.com *.google.com cdnjs.cloudflare.com; object-src 'self' *.mil.ru *.vintera.tv *.cdnvideo.ru *.youtube.com; style-src 'self' 'unsafe-inline' *.mil.ru *.googleapis.com; img-src 'self' mil.ru *.yandex.net *.yadro.ru *.mil.ru data: counter.yadro.ru *.yandex.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.mail.ru *.google-analytics.com *.rambler.ru ; media-src 'self' *.mil.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtu.be *.youtube.com *.xn--90anlfbebar6i.xn--p1ai; frame-src 'self' http://mil.ru/ *.yumpu.com mil.ru *.mil.ru www.mil.ru vk.com *.vk.com ok.ru *.ok.ru *.yandex.md *.yandex.net *.yandex.ru *.yadro.ru *.youtube.com *.vintera.tv *.cdnvideo.ru *.youtube.com *.youtu.be *.google.com; font-src 'self' fonts.gstatic.com *.mil.ru *.vintera.tv *.cdnvideo.ru *.mil.ru *.youtube.com *.youtube.com *.youtu.be *.google.com; frame-ancestors 'self' http://mil.ru http://www.mil.ru http://vuz.mil.ru http://*.mil.ru https://vuz.mil.ru https://www.mil.ru https://*.mil.ru; base-uri 'self'; form-action 'self'; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://www.e-gen.or.kr https://member.nemc.or.kr http://media.nemc.or.kr http://www.youtube.com http://*.daumcdn.net https://dapi.kakao.com https://api2.sktelecom.com; 1
default-src 'self' blob: https://www.gstatic.com engasjert.sbm.no *.sbm.no *.sbm.no/* www.sbm.no localhost:* localhost:*/* web103.reachmee.com sbm.asp.manamind.com www.youtube.com sbm-demo.manamind.com nettbank-pilot.edb.com nettbank.edb.com nettbank.sbm.no ebankdemo.evry.com ssl.google-analytics.com competella.sbm.no https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net gstatic.com www.gstatic.com https://www.google.com/recaptcha/ https://search.atom.no nettbedriften-pilot.evry.com nettbedriften.evry.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.sbm.no *.sbm.no/* https://www.google-analytics.com https://ssl.google-analytics.com localhost:* maps.googleapis.com csi.gstatic.com edialog24.edb.com browser-update.org web103.reachmee.com ssl.google-analytics.com script.crazyegg.com competella.sbm.no www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/api2/r20171212152908/recaptcha__no.js https://www.gstatic.com gstatic.com www.gstatic.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://connect.facebook.net https://www.googletagmanager.com https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://*.adform.net:* https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net;object-src 'self' *;style-src 'self' 'unsafe-inline' https://www.gstatic.com fonts.googleapis.com https://*.adform.net:* https://tagmanager.google.com;img-src 'self' * data: https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://googleads.g.doubleclick.net https://www.google.com;media-src 'self' *;frame-src 'self' https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com www.google.com https://sbm.asp.manamind.com https://*.evry.com https://bid.g.doubleclick.net https://*.sbm.no https://www.youtube.com https://*.reachmee.com https://*.youtube-nocookie.com https://*.morningstar.com https://www.anpdm.com https://www.facebook.com https://m.facebook.com;font-src * data: https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://fonts.gstatic.com;connect-src 'self' https://www.google-analytics.com *.sbm.no localhost:* https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://stats.g.doubleclick.net;base-uri 'self';child-src 'self' * https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://www.facebook.com https://m.facebook.com;form-action 'self' *.sbm.no localhost:*;frame-ancestors 'self' www.sbm.no *.sbm.no localhost:* facebook.com web103.reachmee.com forvaltning.sbm.no https://www.facebook.com https://m.facebook.com;plugin-types application/pdf;block-all-mixed-content;report-uri /csp_report_uri.aspx 1
default-src https: data:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline';  1
frame-ancestors http://*.almamedia.net https://*.almamedia.net https://app.powerbi.com 1
default-src 'none' ;img-src 'self' data: media.banyantreespa.com p.typekit.net www.google-analytics.com www.tripadvisor.com www.tripadvisor.com.sg *.doubleclick.net *.ckeditor.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' banyantreespa.com use.typekit.net www.recaptcha.net www.gstatic.com *.addthis.com www.google-analytics.com *.moatads.com *.addthisedge.com www.jscache.com www.tripadvisor.com www.tripadvisor.com.sg static.tacdn.com *.ckeditor.com; style-src 'unsafe-inline' 'self' banyantreespa.com static.tacdn.com *.ckeditor.com; object-src 'none'; form-action 'self' banyantreespa.com; font-src 'self' data: banyantreespa.com use.typekit.net media.banyantreespa.com static.tacdn.com; frame-src 'self' *.addthis.com www.google.com *.travelsmarter.net; base-uri 'none'; frame-ancestors 'self'; connect-src 'self' https: m.addthis.com; media-src media.banyantreespa.com 1
upgrade-insecure-request 1
default-src 'self' https://tongji.54doctor.net/ https://hm.baidu.com/  https: ;script-src  'self' https://tongji.54doctor.net/ https://hm.baidu.com/ https://api.map.baidu.com/ https://maponline0.bdimg.com/ https://maponline1.bdimg.com/ https://maponline2.bdimg.com/ 'unsafe-inline' 'unsafe-eval';style-src  'self'  'unsafe-inline'; 1
default-src https: 'unsafe-inline' 'unsafe-eval'; font-src data: https: ; img-src data: https: ; 1
script-src https://translate.google.com/  https://translate.googleapis.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://translate.googleapis.com/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; default-src 'self'; frame-src https://docs.e-iepdata.com 'self'; font-src https://fonts.gstatic.com/ 'self'; img-src data: https: 'self'; connect-src https://*.e-iepdata.com https://translate.googleapis.com/ 'self';  1
default-src 'self' 'unsafe-inline'; object-src 'none'; img-src 'self' https://helpdesk.vodafonekabelforum.de; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
img-src 'self' data: http: https: *.gravatar.com *.wp.com *.wordpress.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: *.wp.com *.wordpress.com; style-src 'self' 'unsafe-inline' http: https: fonts.googleapis.com *.wp.com *.wordpress.com; font-src 'self' data: http: https: fonts.googleapis.com themes.googleusercontent.com *.wp.com *.wordpress.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: *.wp.com *.wordpress.com; 1
'default-src' https://www.dhanistocks.com/ 1
default-src 'self' *.binomocompany.com *.binomo.com; child-src *; connect-src 'self' analytics.tiktok.com *.adroll.com static.criteo.net static.ads-twitter.com bat.bing.com sc-static.net tr.snapchat.com top-fwz1.mail.ru *.hotjar.io *.hotjar.com wss://*.hotjar.com stats.g.doubleclick.net *.optimizely.com *.zopim.com *.launchdarkly.com api.exponea.com ekr.zdassets.com analytics.google.com fcm.googleapis.com www.googleapis.com www.google-analytics.com wss://*.zopim.com binomo.zendesk.com app.getsentry.com *.binomocompany.com *.binomo.com wss://as.binomocompany.com:* wss://as.binomo.com:* wss://ws.binomocompany.com:* wss://ws.binomo.com:* s.yimg.com; font-src data: 'self' *.zopim.com themes.googleusercontent.com *.binomocompany.com *.binomo.com; img-src * data:; media-src 'self' *.binomocompany.com *.binomo.com; script-src 'self' static.ads-twitter.com sc-static.net tr.snapchat.com *.hotjar.io *.hotjar.com www.redditstatic.com *.googleoptimize.com *.doubleclick.net *.google.com assets.zendesk.com static.zdassets.com *.zopim.com wss://*.zopim.com *.zopim.io binomo.co *.adroll.com static.criteo.net *.getsitecontrol.com binstats.com *.googletagmanager.com *.google-analytics.com echo.ecortb.com connect.facebook.net vk.com *.youtube.com s.yimg.com s.ytimg.com bat.bing.com www.gstatic.com www.googleadservices.com binomo.go2affise.com api.exponea.com *.adnetwork.vn storage.googleapis.com sp.analytics.yahoo.com top-fwz1.mail.ru 'unsafe-eval' 'unsafe-inline' *.binomocompany.com *.binomo.com; style-src 'self' *.google.com fonts.googleapis.com 'unsafe-inline' *.binomocompany.com *.binomo.com 1
base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mstdn.mx; img-src 'self' https: data: blob: https://mstdn.mx; style-src 'self' https://mstdn.mx; media-src 'self' https: data: https://mstdn.mx; frame-src 'self' https:; manifest-src 'self' https://mstdn.mx; connect-src 'self' data: blob: https://mstdn.mx https://mstdn.mx wss://mstdn.mx; script-src 'self' https://mstdn.mx; child-src 'self' blob: https://mstdn.mx; worker-src 'self' blob: https://mstdn.mx 1
default-src 'self' www.youtube.com ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net googletagmanager.com www.googletagmanager.com twitter.com static.queue-it.net p.typekit.net bat.bing.com performance.typekit.net fls.doubleclick.net pixel-a.basis.net ct.pinterest.com googleads.g.doubleclick.net omahapa-preprod.azurewebsites.net siteimproveanalytics.com 6154533.global.siteimproveanalytics.io siteimproveanalytics.io www.googleadservices.com connect.facebook.net www.googletagmanager.com tagmanager.google.com www.googletagmanager.com bi.capacityinteractive.com capacityinteractive.com platform.twitter.com platform.twitter.co www.facebook.com connect.facebook.net facebook.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.saveourstages.com www.google-analytics.com stats.g.doubleclick.net optimize.google.com widgets.instantencore.com services.instantencore.com code.jquery.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net googletagmanager.com www.googletagmanager.com www.youtube.com twitter.com s.pinimg.com www.googleadservices.com use.typekit.net s.yimg.com static.queue-it.net queue-it.net assets.queue-it.net bat.bing.com performance.typekit.net fls.doubleclick.net pixel-a.basis.net ct.pinterest.com googleads.g.doubleclick.net static.ads-twitter.com sp.analytics.yahoo.com analytics.twitter.com cdnjs.cloudflare.com omahapa-preprod.azurewebsites.net googleads.g.doubleclick.net siteimproveanalytics.com 6154533.global.siteimproveanalytics.io siteimproveanalytics.io www.googletagmanager.com tagmanager.google.com www.googletagmanager.com bi.capacityinteractive.com capacityinteractive.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.saveourstages.com optimize.google.com www.google-analytics.com widgets.instantencore.com services.instantencore.com code.jquery.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com cdnjs.cloudflare.com omahapa-preprod.azurewebsites.net tagmanager.google.com www.googletagmanager.com bi.capacityinteractive.com capacityinteractive.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca optimize.google.com code.jquery.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com use.typekit.net data: tagmanager.google.com www.googletagmanager.com fonts.googleapis.com; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net googletagmanager.com www.youtube.com p.typekit.net pixel-a.basis.net pixel.sitescout.com stats.g.doubleclick.net bat.bing.com t.co www.google.com ct.pinterest.com googleads.g.doubleclick.net omahapa-preprod.azurewebsites.net 6154533.global.siteimproveanalytics.io siteimproveanalytics.io www.googletagmanager.com tagmanager.google.com www.googletagmanager.com ssl.gstatic.com lh3.googleusercontent.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.youtube.com widgets.instantencore.com services.instantencore.com s3.amazonaws.com; media-src  'self' data: blob: www.youtube.com o-pa.org www.o-pa.org ticketomaha.com www.ticketomaha.com; frame-src www.youtube.com twitter.com pixel-a.basis.net pixel.sitescout.com fls.doubleclick.net 6899690.fls.doubleclick.net bid.g.doubleclick.net 8071554.fls.doubleclick.net www.google.com 8093096.fls.doubleclick.net omahapa-preprod.azurewebsites.net ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net bi.capacityinteractive.com capacityinteractive.com platform.twitter.com platform.twitter.co www.facebook.com connect.facebook.net facebook.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.saveourstages.com optimize.google.com www.google-analytics.com; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.saveourstages.com optimize.google.com www.google-analytics.com code.jquery.com; connect-src 'self' accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net s.yimg.com ct.pinterest.com performance.typekit.net omahapa-preprod.azurewebsites.net bi.capacityinteractive.com capacityinteractive.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.saveourstages.com stats.g.doubleclick.net www.google-analytics.com optimize.google.com code.jquery.com; 1
https: 'unsafe-inline'; frame-ancestors *.figueras.com; base-uri https://www.figueras.com; form-action https://www.figueras.com https://figueras.us2.list-manage.com 1
default-src https: 'unsafe-eval' 'unsafe-inline' data:; img-src * data:; frame-ancestors 'self'; report-uri https://bluex.net/report-uri/report-csp.php; 1
default-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.brighttalk.com https://*.paypal.com https://*.paypalobjects.com https://www.youtube-nocookie.com https://www.xoom.com https://www.wootag.com https://*.qualtrics.com; script-src 'nonce-ojgF/9M6/sgmQfLdGKU9/UmhdLO3lQ2aBpB2xWCALftSj8uI' 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://nominatim.openstreetmap.org https://*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com https://*.salesforce.com https://*.force.com https://*.eloqua.com https://nexus.ensighten.com https://api.paypal-retaillocator.com https://*.brighttalk.com https://*.dialogtech.com https://*.qualtrics.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com data:; img-src 'self' https: data:; form-action 'self' https://*.paypal.com https://*.salesforce.com https://*.eloqua.com https://secure.opinionlab.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-ancestors 'self' https://*.paypal.com; block-all-mixed-content;; report-uri https://www.paypal.com/csplog/api/log/csp 1
default-src 'self' tokokomputer007.com tokoonline88.com harga-jual.com hargakom-puter.com kameracctvmurah.net *.youtube.com *.ytimg.com *.google-analytics.com *.googletagmanager.com connect.facebook.net *.facebook.com cdn.onesignal.com onesignal.com *.googleadservices.com googleads.g.doubleclick.net bid.g.doubleclick.net *.hotjar.com *.google.com *.google.co.id stats.g.doubleclick.net data: 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googleapis.com static.ads-twitter.com analytics.twitter.com t.co cdnjs.cloudflare.com lh3.googleusercontent.com graph.facebook.com cdn.jsdelivr.net; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://apis.google.com https://fonts.googleapis.com https://*.google-analytics.com https://*.googleadservices.com https://www.googleadservices.com https://panel.stopthehacker.com https://www.googlecommerce.com https://www.gstatic.com https://*.facebook.net https://*.addthis.com https://*.addthisedge.com https://*.bing.com https://*.pinterest.com https://*.powerreviews.com https://*.nr-data.net https://*.doubleclick.net https://*.typekit.net https://*.marinsm.com https://*.googletagmanager.com https://*.tm00.com https://*.cloudfront.net https://*.zendesk.com https://*.newrelic.com https://*.zdassets.com https://*.zopim.com https://*.steelhousemedia.com https://*.newrelic.com https://*.godatafeed.com https://*.steelhousemedia.com https://maps.googleapis.com https://s3.amazonaws.com https://mpsnare.iesnare.com https://www.googleapis.com https://*.nexcesscdn.net https://r2-t.trackedlink.net https://static.trackedweb.net https://h.online-metrix.net https://z.moatads.com https://*.youtube.com https://*.ytimg.com https://tagmanager.google.com https://*.yotpo.com https://cdnjs.cloudflare.com https://*.avmws.com; connect-src 'self' 'unsafe-inline' https://www.google.com https://ssl.google-analytics.com https://www.facebook.com https://panel.stopthehacker.com https://www.google.com https://insights.hotjar.com https://*.addthis.com https://*.bing.com https://*.zdassets.com https://*.zendesk.com https://*.typekit.net/ https://*.zopim.com ws://*.zopim.com ws://*.zendesk.com https://*.wyng.com https://wyng.io https://bam.nr-data.net https://api.offerpop.com https://www.google-analytics.com https://*.nexcesscdn.net https://r2.trackedweb.net https://*.yotpo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.bootstrapcdn.com https://*.nexcesscdn.net https://use.typekit.net https://use.fontawesome.com https://p.typekit.net https://tagmanager.google.com https://fonts.googleapis.com https://*.yotpo.com; img-src 'self' https://www.facebook.com https://ssl.google-analytics.com https://panel.stopthehacker.com https://*.doubleclick.net https://*.google.com https://*.bing.com https://*.googleadservices.com https://*.outdoorsignsamerica.com https://*.magentocommerce.com https://*.pinterest.com https://*.addthis.com https://*.amazon-adsystem.com https://*.typekit.net https://*.cloudinary.com https://*.adsymptotic.com https://*.adsrvr.org https://*.zopim.com https://www.google-analytics.com https://www.googletagmanager.com https://dsum-sec.casalemedia.com https://images.ebsco.com https://*.googleapis.com data: https://*.advertising.com https://dpm.demdex.net https://maps.gstatic.com https://*.adnxs.com https://ads.yahoo.com https://m.addthisedge.com https://*.amazonaws.com https://*.steelhousemedia.com https://pixel.rubiconproject.com https://pixel.tapad.com https://*.bluekai.com https://s.thebrighttag.com https://simage2.pubmatic.com https://adadvisor.net https://beacon.krxd.net https://uipglob.semasio.net https://x.bidswitch.net https://match.sharethrough.com https://ads.scorecardresearch.com https://aa.agkn.com https://*.cloudfront.net https://use.fontawesome.com https://use.typekit.net https://privacy-policy.truste.com https://www.oakmountainoutfitters.com https://*.nexcesscdn.net https://ssl.gstatic.com https://www.gstatic.com https://*.yotpo.com https://cdn.wyng.com https://tracking.avantlink.com; font-src 'self' https://fonts.gstatic.com https://*.typekit.net https://*.bootstrapcdn.com https://*.zopim.com data: https://*.cloudfront.net https://*.amazonaws.com https://*.nexcesscdn.net https://use.fontawesome.com https://*.yotpo.com; frame-src 'self' https://www.google.com https://*.googleadservices.com https://*.doubleclick.net https://*.facebook.com https://connect.facebook.net https://www.youtube-nocookie.com https://*.addthis.com https://*.authorize.net https://*.bing.com https://*.pinterest.com https://*.zendesk.com https://*.youtube.com https://*.wyng.com https://*.cybersource.com; object-src 'self' https://mpsnare.iesnare.com; media-src 'self' https://static.zdassets.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com connect.facebook.net www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net onesignal.com tpc.googlesyndication.com 1
base-uri 'none'; object-src 'none'; script-src https://nocourses.com/logs/ https://nocourses.com/sidekiq/ https://nocourses.com/mini-profiler-resources/ https://nocourses.com/assets/ https://nocourses.com/brotli_asset/ https://nocourses.com/extra-locales/ https://nocourses.com/highlight-js/ https://nocourses.com/javascripts/ https://nocourses.com/plugins/ https://nocourses.com/theme-javascripts/ https://nocourses.com/svg-sprite/ 'report-sample' https://www.google-analytics.com/analytics.js https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js https: 'unsafe-inline'; worker-src 'self' https://nocourses.com/assets/ https://nocourses.com/brotli_asset/ https://nocourses.com/javascripts/ https://nocourses.com/plugins/; report-uri https://nocourses.com/csp_reports 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' https://api.mapbox.com/ https://api.tiles.mapbox.com/ https://code.jquery.com/ https://unpkg.com/ https://fonts.gstatic.com/ https://maps.gstatic.com/ https://maps.googleapis.com/ https://fonts.googleapis.com/ https://ajax.googleapis.com/ www.google.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com www.gstatic.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://api.mapbox.com/ https://api.tiles.mapbox.com/ https://code.jquery.com/ https://unpkg.com/ https://maps.googleapis.com/ https://fonts.googleapis.com/ https://ajax.googleapis.com/ www.google.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com www.gstatic.com; object-src 'self'; connect-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com ;img-src 'self' 'unsafe-inline' https://api.mapbox.com/ https://api.tiles.mapbox.com/ https://unpkg.com/ https://maps.gstatic.com/ https://maps.googleapis.com/ www.google.com ajax.googleapis.com www.google-analytics.com stats.g.doubleclick.net data: ; style-src 'self' 'unsafe-eval' 'unsafe-inline' https://unpkg.com/ https://fonts.gstatic.com/ https://maps.googleapis.com/ https://fonts.googleapis.com/;  1
default-src 'self';      object-src 'self';      frame-src 'self' http://youtube.com/ https://youtube.com/ https://www.youtube.com/ https://api-maps.yandex.ru https://www.google.com https://koronapay.com;      font-src 'self' https://fonts.gstatic.com;      img-src 'self' data: http://img.youtube.com https://play.google.com https://linkmaker.itunes.apple.com https://mc.yandex.ru https://www.google-analytics.com https://stats.g.doubleclick.net https://api-maps.yandex.ru https://*.maps.yandex.net https://vk.com/rtrg;      style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://hello.myfonts.net;      script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api-maps.yandex.ru https://*.maps.yandex.net https://mc.yandex.ru https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://vk.com/js/api/ https://yastatic.net/ https://cdnjs.cloudflare.com/;      connect-src 'self' https://mc.yandex.ru https://www.google-analytics.com/ https://stats.g.doubleclick.net/; 1
default-src 'self' *.googleapis.com *.google.com *.google-analytics.com *.gstatic.com *.stripe.com *.mxpnl.com *.mixpanel.com *.rollbar.com *.cloudinary.com *.fusekit.io; style-src 'self' 'unsafe-inline' *.googleapis.com *.bootstrapcdn.com *.fusekit.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.mxpnl.com *.mixpanel.com *.googleapis.com *.google.com *.google-analytics.com *.gstatic.com *.stripe.com *.fusekit.io; font-src 'self' data: *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.fusekit.io; img-src 'self' data: *.google-analytics.com *.cloudinary.com *.fusekit.io; media-src 'self' data: *.cloudinary.com *.fusekit.io; connect-src 'self' wss: mailto: *.salesforce.com *.fusekit.io *.google.com *.mozilla.org *.youtube.com *.atginfo.com *.gstatic.com *.stripe.com *.mxpnl.com *.mixpanel.com *.rollbar.com *.cloudinary.com *.googleapis.com *.google-analytics.com; frame-ancestors 'self' *.google.com *.fusekit.io; report-uri /security/report-violation 1
default-src 'none';  base-uri https://www.filoi-esfigmenou.com/; connect-src https://www.filoi-esfigmenou.com/; script-src http: 'unsafe-inline' https://www.filoi-esfigmenou.com/; style-src http: 'unsafe-inline'; img-src https://www.filoi-esfigmenou.com/ www.filoi-esfigmenou.com/ http://vk.com/images/icons/ https://syndication.twitter.com/ https://log.pinterest.com/ https://img.youtube.com data: ; media-src https://www.filoi-esfigmenou.com/; font-src https://www.filoi-esfigmenou.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ ; child-src https://www.youtube.com/ http://www.youtube.com/ https://www.facebook.com/ https://platform.twitter.com/ https://assets.pinterest.com/; frame-ancestors iframe; worker-src https://www.filoi-esfigmenou.com/ public/js/swcachesite.js; 1
frame-src https://chaturbate.com/ 1
base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'nonce-0d7b250cd996d978cd2ee69ddb11a27e6c6715615553632b05413c9effd8c25aa90a3c260026bb5e21b17597040bf30693d87de552aeb6e43a4c4d1a8ab2afd0' 'strict-dynamic' http: https:; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ib-formation.fr *.ib-formation.com https://www.gstatic.com/ https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://tagmanager.google.com/ https://www.googleadservices.com/pagead/conversion/ https://www.google.fr/pagead/attribution/ https://www.gstatic.com/wcm/ https://www.gstatic.com/recaptcha/api2/ https://www.google-analytics.com/analytics.js https://www.google-analytics.com/plugins/ua/ec.js https://www.linkedin.com/px/ https://px.ads.linkedin.com/collect/ https://platform.linkedin.com/ https://snap.licdn.com/li.lms-analytics/insight.min.js 1
frame-ancestors *.swatchon.com *.swatchon.me *.facebook.com *.chaty.co.kr *.messenger.com; 1
default-src 'self';style-src * 'unsafe-inline';child-src www.youtube.com www.google.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.googletagmanager.com www.google-analytics.com www.google.com stats.g.doubleclick.net https://stats.g.doubleclick.net openstat.net;img-src 'self' www.googletagmanager.com www.google-analytics.com www.google.com stats.g.doubleclick.net https://stats.g.doubleclick.net openstat.net; connect-src www.google-analytics.com www.google.com openstat.net; font-src * 1
default-src 'none'; form-action 'self'; font-src 'self' https://stackpath.bootstrapcdn.com; img-src 'self' data: https://minotar.net https://www.google-analytics.com; script-src 'self' https://stackpath.bootstrapcdn.com https://code.jquery.com https://cdn.jsdelivr.net https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com; connect-src 'self' https://www.google-analytics.com; upgrade-insecure-requests; report-uri https://spirit55555.report-uri.com/r/d/csp/enforce 1
frame-ancestors 'self' libanswers.com *.libanswers.com tumblr.com mhlteenroom.tumblr.com eventkeeper.com; 1
default-src https: 'unsafe-inline' 'unsafe-eval' data: connect-src: wss://*.smartsupp.com https://*.smartsupp.com https://*.smartsuppchat.com https://*.smartsuppcdn.com font-src: https://*.smartsuppcdn.com media-src: https://*.smartsuppcdn.com img-src: data: https://*.smartsuppcdn.com script-src: 'unsafe-inline' https://*.smartsuppchat.com https://*.smartsuppcdn.com style-src: 'unsafe-inline' https://*.smartsuppcdn.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.screenpages.com *.facebook.com *.dotdigital-pages.com code.jquery.com www.gstatic.com *.livechatinc.com *.googletagmanager.com *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com translate.google.com www.google.com screenpages.info connect.facebook.net; object-src 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://ajax.aspnetcdn.com/ajax/knockout/knockout-2.2.1.js http://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/1.0.10/cookieconsent.min.js https://use.typekit.net/ http://s7.addthis.com/js/300/addthis_widget.js https://embed.tawk.to/570f81dc9fe6dde006264d2c/default https://cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js https://*.gstatic.com https://*.googleapis.com https://*.gstatic.com https://*.googleapis.com https://*.google.com https://*.googletagmanager.com https://connect.facebook.net/en_US/fbevents.js https://www.google-analytics.com/analytics.js https://v1.addthisedge.com https://m.addthisedge.com https://m.addthis.com https://connect.facebook.net https://v1.addthis.com https://s7.addthis.com https://graph.facebook.com https://api-public.addthis.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.eventbrite.co.uk https://*.crwdcntrl.net https://*.adnxs.com https://www.youtube.com https://s.ytimg.com ; style-src 'unsafe-inline' 'self' https://maxcdn.bootstrapcdn.com https://*.gstatic.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/1.0.10/dark-bottom.css https://cdn.jsdelivr.net/emojione/2.2.7/assets/css/emojione.min.css ;           1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com *.g.doubleclick.net *.gstatic.com *.google.com *.googleapis.com *.addtoany.com *.googletagmanager.com *.google-analytics.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com *.googleapis.com *.addtoany.com; img-src 'self' 'unsafe-inline' data: *.googleapis.com *.gstatic.com *.google-analytics.com *.doubleclick.net *.gravatar.com; font-src 'self' 'unsafe-inline' data: cdnjs.cloudflare.com *.googleapis.com *.gstatic.com; connect-src 'self' *.google-analytics.com; media-src 'self'; object-src 'self' *.googleapis.com; prefetch-src 'self'; frame-src 'self' *.addtoany.com *.google.com *.youtube.com *.vimeo.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.cloudflare.com https://maps.googleapis.com/ https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://secure.gravatar.com/; connect-src 'self' https://www.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com; media-src 'self'; object-src 'none'; frame-src 'self' https://player.vimeo.com https://www.youtube.com; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self' 1
worker-src 'self' *.tawk.to https://platform-api.sharethis.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://lovelife.matomo.cloud https://cdn.matomo.cloud 1
default-src 'unsafe-eval' 'unsafe-inline' https:; img-src * data: 1
upgrade-insecure-requests; report-uri https://sentry.io/api/1185627/csp-report/?sentry_key=093e2f72c47a4fe3a90d61aa5f2f8d7a; 1
default-src 'self' hsbc.de hsbctrinkaus.de; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.youtube.com *.ytimg.com *.etracker.com *.etracker.de; style-src 'self' 'unsafe-inline'; child-src 'self' *.youtube.com *.youtube-nocookie.com *.hsbc.de *.hsbctrinkaus.de ats.ccmp.eu *.fagms.de; connect-src 'self' *.etracker.com *.etracker.de *.hsbc.de *.hsbctrinkaus.de; frame-ancestors 'self' www.teleboerse.de  https://*.etracker.com 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-554f7c6d5bd5168dc3ae2a0b24ae6ac29f44fcac' https: http:; style-src 'self' 'unsafe-inline' https: http:; connect-src 'self' https: http: wss: ws:; frame-src *; img-src *; media-src *; 1
img-src 'self' https://nyc3.digitaloceanspaces.com cdn.snipcart.com; style-src 'self' 'unsafe-inline' cdn.snipcart.com; connect-src 'self' *.wagtail.io app.snipcart.com; default-src 'self' cdn.snipcart.com; frame-src http://localhost:3000 https://www.canadanewyork.com/ https://www.youtube-nocookie.com www.google.com www.youtube.com https://open.spotify.com player.vimeo.com https://gfycat.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' code.jquery.com cdn.snipcart.com www.googletagmanager.com 1
frame-ancestors https://www.fariaedu.com 1
frame-ancestors 'self' https://leidenuniv.libwizard.com https://library-tutorials.leidenuniv.nl https://brightspace.universiteitleiden.nl 1
script-src 'unsafe-eval' 'unsafe-inline' 'self' https://*.servify.in https://*.servify.tech https://*.cloudflare.com https://*.facebook.net https://*.googleapis.com https://*.wp.com https://*.adsymptotic.com https://*.linkedin.com https://*.amazonaws.com https://*.licdn.com https://*.google-analytics.com https://*.google.ca https://*.google.com https://*.googletagmanager.com https://*.gstatic.com https://*.recaptcha.net https://*.facebook.com https://*.gravatar.com; object-src 'none'; connect-src 'self' *; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:' 1
default-src data: * 'unsafe-eval' 'unsafe-inline' 1
frame-ancestors 'self' piwik.echt-susteren.nl 1
frame-src 'self' blob: https://www.google.com/recaptcha/ https://www.youtube.com https://www.youtube-nocookie.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' dallmeier.com *.dallmeier.com *.dallmeier.de *.twimg.com platform.twitter.com 1
default-src 'self' https://www.dbk.de/ https://domradiomedien.akamaized.net https://medien.domradio.de https://dbk.de/ https://youtu.be/ https://app-eu.readspeaker.com https://www.dbk-shop.de https://player.vimeo.com https://www.google.com https://www.google-analytics.com https://graph.facebook.com https://www.juicer.io https://*.katholisch.de https://www.domradio.de https://www.youtube.com https://stats.dbk.de; img-src 'self' data: https://dbk.de/ https://www.dbk.de/ https://stats.dbk.de https://www.google-analytics.com https://pbs.twimg.com https://*.fbcdn.net https://*.juicer.io https://*.imgur.com https://*.gstatic.com https://*.googleapis.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: https://dbk.de/  https://www.google.com https://www.google-analytics.com https://*.googleapis.com https://www.gstatic.com https://*.juicer.io https://*.ytimg.com https://f1-eu.readspeaker.com https://stats.dbk.de https://www.youtube.com; font-src 'unsafe-inline' 'self' data: https://fonts.gstatic.com  https://*.juicer.io https://s3.amazonaws.com https://f1-eu.readspeaker.com; style-src 'unsafe-inline' 'self' https://s3.amazonaws.com https://fonts.googleapis.com https://f1-eu.readspeaker.com https://*.juicer.io ; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.trustarc.com *.googleadservices.com *.clickdimensions.com *.facebook.net *.tctm.co cdnjs.cloudflare.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.google.com *.bootstrapcdn.com *.fontawesome.com *.gstatic.com platform.twitter.com findmespot.disqus.com 1
frame-ancestors https://*.ionos.com https://*.ionos.at https://*.ionos.co.uk https://*.ionos.de https://*.ionos.es https://*.ionos.fr https://*.ionos.it https://*.ionos.ca https://*.ionos.mx https://*.ionos.us https://*.website-editor.net https://*.mywebsite-editor.com www.sfvpoolcare.com 1
frame-ancestors http://*.ohca.org https://*.ohca.org http://*.efohca.org https://*.efohca.org http://efohca.org https://efohca.org 1
script-src 'self' 'sha256-u0MFNvrofWnLUheWzePwOah1MZJZu0GlKtgNysirHts=' 'sha256-Fy6oZgoc1ToTgCjTwKuBCeCT3M1U4jVbfTb8i18FnN0=' 'sha256-iqOPaRlwwgtNy7J3vh/+LSW9/QVdN+Fl+YfMS8+GcPo=' 'sha256-v4s6GqGTEzxVS6Ds/8xBfhqVZqE+VvThcuPhgIDnpXU=' 'sha256-fPESgSpXLN0kTtQG7my2QqA6bu+kO7VRqgnSu02ehtU=' https://www.google-analytics.com/ https://www.googletagmanager.com/ https://www.youtube.com/ https://s.ytimg.com https://cdn.jsdelivr.net https://cloud.typography.com https://cookie-cdn.cookiepro.com https://www.demilec.com https://www.demilecuk.com https://cdn.jsdelivr.net; object-src 'self'; child-src 'self' https://www.youtube.com/ https://s.ytimg.com https://cdn.jsdelivr.net https://cloud.typography.com https://www.googletagmanager.com/ https://www.demilec.com https://www.demilecuk.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://fonts.demilec.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.jsdelivr.net *.facebook.net *.facebook.com *.fonts.net *.googleapis.com *.gstatic.com *.hs-analytics.net *.hs-scripts.com *.bootstrapcdn.com *.linkedin.com *.twitter.com *.hubspot.com *.google-analytics.com *.googletagmanager.com *.google.com *.vimeo.com *.vimeocdn.com *.doubleclick.net cspace-www.s3.amazonaws.com *.hsforms.net *.hsforms.com *.cdninstagram.com *.youtube.com *.soundcloud.com *.greenhouse.io 1
frame-ancestors *.neighbourhoodalert.co.uk 1
default-src https: data: blob: 'unsafe-inline'; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-src https:; base-uri 'self';  upgrade-insecure-requests; report-uri /csp.cgi 1
default-src: 'self' https://*.ewizyta.pl; font-src: 'self' https://fonts.googleapis.com; style-src: 'self' https://use.fontawesome.com 1
frame-ancestors 'self' *.highspot.com 1
connect-src 'self' https://vimeo.com *.vimeo.com https://restcountries.eu https://www.google-analytics.com; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com; form-action 'self'; frame-src 'self' *.vimeo.com *.google.com https://www.youtube.com/; img-src 'self' data: https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.hra-pharma.com; manifest-src 'self'; media-src 'self' *.vimeo.com *.akamaized.net *.vimeocdn.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://google.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://www.hra-pharma.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.fontawesome.com https://www.hra-pharma.com 1
style-src 'self' 'unsafe-inline' hello.myfonts.net showcase-mde.bowst.com https://kit.fontawesome.com https://www.moviedecisionengine.com/ https://fonts.googleapis.com https://theappreciationengine.com https://tagmanager.google.com https://cdn.jotfor.ms https://kit-pro.fontawesome.com; img-src 'self' data: 'unsafe-inline' https://maps.googleapis.com https://maps.gstatic.com http://www.movienewsletters.net https://as.showcasecinemas.com https://www.facebook.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://files.jotform.com http://events.jotform.com https://cdn.jotfor.ms https://www.jotform.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://us4.siteimprove.com https://www.google.com https://www.google.co.uk https://images-na.ssl-images-amazon.com https://m.media-amazon.com https://vws.showcasecinemas.com https://*.cloudfront.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://theappreciationengine.com/framework/js/1890 https://apis.google.com https://maps.googleapis.com https://www.googletagmanager.com https://as.showcasecinemas.com https://am.showcasecinemas.com https://s7.addthis.com https://m.addthisedge.com https://m.addthis.com https://www.google-analytics.com https://connect.facebook.net https://tagmanager.google.com https://www.googleadservices.com https://form.jotform.com https://cdn.ravenjs.com https://cdn.jotfor.ms https://js.jotform.com https://www.jotform.com https://siteimproveanalytics.com https://cdn-cinema-ui-assets-prod.movio.co https://api-us.movio.co https://api.tripleseat.com https://static-na.payments-amazon.com https://www.moviedecisionengine.com https://kit.fontawesome.com; 1
default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none';base-uri 'none';frame-ancestors 'self' 1
frame-ancestors 'self' https://m.jobsdb.com; 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.wp.com; form-action 'self'; upgrade-insecure-requests 1
default-src 'self'; img-src * data:; style-src 'self' 'unsafe-inline'; connect-src 'self' http://www.snsoffice.com https://api.snsoffice.com https://api.dashingsoft.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors www.megacryptopolis.com mcp.town mcp3d.com 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.blueconic.net *.googletagmanager.com tagmanager.google.com www.gstatic.com *.google-analytics.com www.googleadservices.com www.google.com www.googleadservices.com googleads.g.doubleclick.net www.google.com *.hotjar.com *.hotjar.io connect.facebook.net *.blueconic.net knltb.sb.blueconic.net service.force.com *.salesforceliveagent.com *.googleapis.com knltb.my.salesforce.com knltb.secure.force.com ajax.aspnetcdn.com *.cloudfront.net www.instagram.com www.mollie.com *.youtube.com *.ytimg.com *.newrelic.com *.nr-data.net *.g.doubleclick.net; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.blueconic.net tagmanager.google.com fonts.googleapis.com service.force.com knltb.secure.force.com *.cloudfront.net www.mollie.com; img-src 'self' 'unsafe-eval' 'unsafe-inline' data: dashboard.umbraco.org our.umbraco.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com www.google-analytics.com googleads.g.doubleclick.net www.google.com *.hotjar.com *.hotjar.io www.facebook.com *.ytimg.com *.googleapis.com *.gstatic.com *.blueconic.net stats.g.doubleclick.net *.persgroep.net *.google.nl; connect-src 'self' 'unsafe-eval' 'unsafe-inline' our.umbraco.com tagmanager.google.com www.google-analytics.com *.hotjar.com:* *.hotjar.io *.blueconic.net knltb.sb.blueconic.net service.force.com knltb.secure.force.com homerun.co *.nr-data.net stats.g.doubleclick.net; frame-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.com www.youtube.com bid.g.doubleclick.net *.hotjar.com *.hotjar.io service.force.com www.facebook.com widgets.knltb.club www.instagram.com www.mollie.com nlpadel.meshlink.nl m.facebook.com crionet-ms-widgets.azurewebsites.net; style-src-elem 'self' 'unsafe-eval' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.blueconic.net service.force.com knltb.secure.force.com *.cloudfront.net; font-src 'self' 'unsafe-eval' 'unsafe-inline' data: fonts.gstatic.com *.hotjar.com *.hotjar.io *.sfdcstatic.com; child-src 'self' 'unsafe-eval' 'unsafe-inline' *.hotjar.com *.hotjar.io *.youtube.com *.blueconic.net knltb.sb.blueconic.net; frame-ancestors 'self' 'unsafe-eval' 'unsafe-inline' *.blueconic.net knltb.sb.blueconic.net; block-all-mixed-content; 1
default-src             'self';         font-src             'self'             data:             https://www.careopinion.org.uk/             https://fast.fonts.net/;         connect-src             'self'             https://yoast.com/feed/widget/ 	    https://feeds.trac.jobs/;         frame-src             https://maps.google.com/             https://www.careopinion.org.uk/             https://www.careopinion.org.uk/             https://player.vimeo.com/             https://www.youtube.com/             https://www.google.com/;         img-src             'self'             data:             https://www.cqc.org.uk/             https://secure.gravatar.com/             https://www.google-analytics.com/             https://ps.w.org/ 	    https://feeds.trac.jobs/;         script-src             'self'             'unsafe-eval'             'unsafe-inline'             https://fast.fonts.net/             https://script.crazyegg.com/             https://www.cqc.org.uk/             https://www.careopinion.org.uk/             https://www.google-analytics.com/ 	    https://feeds.trac.jobs/;         style-src             'self'             'unsafe-inline'             https://fast.fonts.net/             https://www.careopinion.org.uk/             https://www.cqc.org.uk/ 	    https://feeds.trac.jobs/; 1
font-src 'self' data: http: https: https://www.crisiscenter.com; form-action 'self' https: https://www.crisiscenter.com; frame-src 'self' https: https://www.crisiscenter.com; child-src 'self' https: https://www.crisiscenter.com; img-src 'self' data: http: https: https://www.crisiscenter.com; script-src 'strict-dynamic' 'unsafe-inline' *.blackbaudhosting.com https: 'nonce-VqFz8eWc1V1HbsBEElEEpaMW3HRLxeyeprgrZxHROShLZ10W932qJNNEzIrG0l1oVvdI8zBAaB04yIE5ywNhqlfj0Tp9fvlDSQEb7E1TyBxCSejamEWnZvtUWrUAEqIs'; style-src 'self' 'unsafe-inline' http: https: https://www.crisiscenter.com; worker-src * 1
base-uri 'none'; object-src 'none'; script-src https://voskcointalk.com/logs/ https://voskcointalk.com/sidekiq/ https://voskcointalk.com/mini-profiler-resources/ https://voskcointalk.com/assets/ https://voskcointalk.com/brotli_asset/ https://voskcointalk.com/extra-locales/ https://voskcointalk.com/highlight-js/ https://voskcointalk.com/javascripts/ https://voskcointalk.com/plugins/ https://voskcointalk.com/theme-javascripts/ https://voskcointalk.com/svg-sprite/ https://www.google-analytics.com/analytics.js; worker-src 'self' https://voskcointalk.com/assets/ https://voskcointalk.com/brotli_asset/ https://voskcointalk.com/javascripts/ https://voskcointalk.com/plugins/ 1
font-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://static.addtoany.com http://tagcommander.com http://static.ads-twitter.com https://connect.facebook.net https://snap.licdn.com https://unpkg.com https://privacy.trustcommander.net cdn.tagcommander.com https://polyfill.io static.addtoany.com 'unsafe-inline' 1
default-src 'unsafe-inline' 'self' https:; img-src https: data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' https:; style-src 'unsafe-inline' 'self' https:; frame-src https: 'self'; child-src https: 'self'; base-uri https:; form-action 'self'; frame-ancestors 'none'; object-src 'self'; connect-src https: 'self'; font-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval';  style-src 'self' 'unsafe-inline'; img-src * data:; 1
base-uri 'none'; script-src 'report-sample' 'self' 'unsafe-inline' 'sha256-5FzEj8nPWizzR4CfOSeMYo9ZykrRN58bCkM9UDIB63M=' 'sha256-G6jiDrJ9TsR8ohQUxtjA1rq2ozHDdhItcZuxfp3ambg='; style-src 'self' 'unsafe-inline' ; object-src 'self'; img-src 'self' *.regenwald.org data: ; connect-src 'self' ; block-all-mixed-content 1
default-src 'self';object-src 'none';object-src allow-forms allow-same-origin allow-scripts;base-uri 'self';upgrade-insecure-requests;frame-ancestors 'none';script-src 'self' 'unsafe-inline' ajax.aspnetcdn.com;style-src 'self' 'unsafe-inline' ajax.aspnetcdn.com fonts.googleapis.com maxcdn.bootstrapcdn.com;font-src font-src 'self' ajax.aspnetcdn.com fonts.gstatic.com maxcdn.bootstrapcdn.com data:;img-src data: 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.com www.google-analytics.com www.gstatic.com ajax.googleapis.com; connect-src 'self'; img-src 'self' www.google-analytics.com www.google.com ps.w.org data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com code.jquery.com; font-src 'self' data: fonts.gstatic.com; frame-src 'self' bestellen.myh2oservers.com www.google.com player.vimeo.com; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.datatables.net *.tg.org.au *.hotjar.com www.google-analytics.com ajax.googleapis.com fonts.googleapis.com netdna.bootstrapcdn.com fonts.gstatic.com cdn.ckeditor.com code.jquery.com cdnjs.cloudflare.com *.gstatic.com *.macromedia.com *.adobe.com *.youtube.com *.google.com i.imgur.com *.wa.gov.au i.ytimg.com *.edu.au *.gravatar.com cdn.jsdelivr.net *.oclc.org *.silverchain.idm.oclc.org *.googletagmanager.com *.iws.trendmicro.com *.ckn.org.au data: 1
connect-src 'self' https://yourir.info https://tracker.mrpfd.com https://www.google-analytics.com https://*.zdassets.com https://*.zendesk.com wss://*.zopim.com https://*.doubleclick.net;  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.licdn.com https://widget.trustpilot.com https://connect.facebook.net https://yourir.info https://bat.bing.com https://www.googleadservices.com https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://www.google-analytics.com https://tracker.mrpfd.com https://*.cloudfront.net https://*.gosquared.com https://maps.googleapis.com https://*.g.doubleclick.net https://*.googlesyndication.com https://*.zdassets.com https://*.zopim.com;  style-src 'self' 'unsafe-inline' https://yourir.info https://fonts.googleapis.com;  font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com;  frame-src 'self' https://*.facebook.com https://www.youtube.com https://www.google.com https://fast.wistia.net https://widget.trustpilot.com https://strakertranslations.wistia.com https://*.googlesyndication.com;  media-src 'self' https://*.zdassets.com https://*.zendesk.com https://*.zopim.com;  object-src 'self' https://yourir.info 1
default-src 'self'; script-src 'self' 'unsafe-eval' https://js.stripe.com; img-src 'self' data: blob:; block-all-mixed-content; style-src 'self' 'unsafe-inline'; frame-ancestors 'none'; child-src 'self' blob: https://js.stripe.com; frame-src 'self' https://js.stripe.com; connect-src 'self' https://*.passcamp.com wss://*.passcamp.com https://logo.clearbit.com https://api.stripe.com; worker-src 'self' blob: 1
script-src * 'unsafe-inline' 'self' 'unsafe-eval' blob: data: https://www.google.com http://www.google-analytics.com/gtm/js 1
default-src 'none'; font-src 'self'; script-src 'self' 'unsafe-inline'; connect-src 'self' wss://connected.intel.com; img-src 'self' data:; style-src 'self' 'unsafe-inline'; frame-src 'self' mcrouter:; media-src 'self'; form-action 'self' 1
child-src data https://chat.spsmcdn.ru *.spsmcdn.ru  https://vk.com vk.com *.spellsmell.ru direct.yandex.ru https://direct.yandex.ru *.google.ru awaps.yandex.ru https://awaps.yandex.ru https://*.ytimg.com https://*.doubleclick.net https://*.youtube.com http://*.youtube.com https://*.google.com https://api-maps.yandex.ru api-maps.yandex.ru maps.yandex.ru https://*.facebook.com *.facebook.com https://*.olark.com *.olark.com https://yandex.st yandex.st https://*.yandex.net *.yandex.net yastatic.net https://www.clarity.ms https://mc.yandex.ru *.me-talk.ru *.criteo.com *.criteo.net https://connect.ok.ru dis.eu.criteo.com webvisor.com; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' js.usemessages.com js.hs-banner.com *.hsforms.net platform.twitter.com googleads.g.doubleclick.net *.infogram.com www.googleadservices.com analytics.twitter.com *.addthis.com *.ads-twitter.com *.hsadspixel.net *.addthisedge.com forms.hubspot.com js.hsleadflows.net sjs.bizographics.com *.hscollectedforms.net *.hs-analytics.net *.hs-scripts.com js.hs-analytics.net js.hs-scripts.com *.hotjar.com *.linkedin.com snap.licdn.com t.wowanalytics.co.uk connect.facebook.net *.pinterest.com pinterest.com static.hotjar.com maps.google.com www.gstatic.com www.google.com fast.fonts.net m.addthisedge.com m.addthis.com s7.addthis.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com maps.googleapis.com *.webspellchecker.net www.linkedin.com www.gstatic.com graph.facebook.com; frame-src 'self' *.infogram.com forms.hubspot.com *.eurolandir.com *.doubleclick.net www.facebook.com *.pinterest.com pinterest.com player.vimeo.com www.google.com *.addthis.com www.youtube.com *.webspellchecker.net *.hotjar.com app.hubspot.com 1
default-src data: *.vnforapps.com fonts.googleapis.com fonts.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' i.ytimg.com imasdk.googleapis.com www.subaru.com.bo *.google.com.ar *.google.com.br *.google.com.pe *.google.com.co googleads.g.doubleclick.net *.google.com *.google.es ad.doubleclick.net px.sunmedia.tv secure.adnxs.com pixel.efike.co *.tile.openstreetmap.org *.facebook.com www.google-analytics.com  www.gstatic.com ssl.gstatic.com ssl.google-analytics.com www.google.com googleads.g.doubleclick.net bid.g.doubleclick.net s0.2mdn.net 'unsafe-eval' *.salesforceliveagent.com www.googletagmanager.com tagmanager.google.com connect.facebook.net www.googleadservices.com *.g.doubleclick.net www.youtube.com www.google.cl unpkg.com cdnjs.cloudflare.com cdn.jsdelivr.net au-ecom-sit.inchcapedigital.com v2.zopim.com static.zdassets.com ekr.zdassets.com *.subaru.com.pe *.subaru.cl *.subaru.com.ar *.subaru.com.bo *.subarucolombia.com image.crm.inchcapelatam.com *.tawk.to la-ecom-preprod.inchcapedigital.com la-ecom-gr.inchcapedigital.com  api.retargetly.com clickserv.sitescout.com pixel.sitescout.com afiliacion.net inchcapelatam.sirv.com au-ecom-dev.inchcapedigital.com au-ecom-uat.inchcapedigital.com subaru.doblenuez.com.ar www.google.com.au *.inchcape.cl *.inchcape.com *.inchcape.com.pe *.inchcape.com.bo *.inchcape.com.ar *.inchcape.cl widget-mediator.zopim.com tpc.googlesyndication.com imasdk.googleapis.com; connect-src 'self' *.vnforapps.com uc.gre *.tawk.to *.facebook.com *.google.com  wss://widget-mediator.zopim.com wss://*.tawk.to ekr.zdassets.com au-ecom-dev.inchcapedigital.com au-ecom-uat.inchcapedigital.com au-ecom-sit.inchcapedigital.com tinyurl.com la-ecom-preprod.inchcapedigital.com la-ecom-gr.inchcapedigital.com stats.g.doubleclick.net www.google-analytics.com inchcape.zendesk.com; script-src-elem data: 'self' 'unsafe-inline' *.vnforapps.com  static.zdassets.com v2.zopim.com www.pagespeed-mod.com poruce.neyelanane.com *.kaspersky-labs.com *.googlesyndication.com px.sunmedia.tv unpkg.com ww.googleadservices.com www.facebook.com  api.retargetly.com *.gstatic.com *.google.com *.salesforceliveagent.com *.googleadservices.com unpkg.com cdnjs.cloudflare.com *.inchcapedigital.com *.googleapis.com www.google-analytics.com cdn.jsdelivr.net  *.facebook.net googleads.g.doubleclick.net px.sunmedia.tv data1.itiarg.com www.googletagmanager.com embed.tawk.to; worker-src blob: 'self'; img-src data: *.vnforapps.com android-webview-video-poster: 'self' *.google.com.sv *.google.com.mx *.google.ht *.google.es *.google.com.ng *.google.fi subaruevoltis.pe *.google.com.pr *.google.com.my *.google.ca *.gstatic.com *.google.hn *.google.com.do *.google.com.sg i.ytimg.com clickserv.sitescout.com unpkg.com *.googletagmanager.com *.facebook.net *.google.com.tw *.google.dk googleads.g.doubleclick.net *.inchcapedigital.com *.openstreetmap.org pixel.efike.co inchcapelatam.sirv.com *.tawk.to www.google-analytics.com  *.facebook.com cx.atdmt.com *.google.de *.google.com *.google.cl *.google.com.pe *.google.co.uk *.google.com.pa www.google.com.bo *.google.ae *.google.com.co *.google.co.ve *.google.com.ec *.google.com.br *.google.co.cr *.google.co.jp *.google.com.ar; font-src data: *.vnforapps.com 'self' *.inchcapedigital.com fonts.gstatic.com *.tawk.to static3.avast.com *.google.com.mx *.google.es; report-uri /app_subaru/csp/csp_report 1
frame-ancestors *.travelallrussia.com *.firebirdtours.com *.force.com http://webvisor.com https://tourstoeurope.com 1
Add 'default-src `self`' 1
default-src none;script-src 'self' 'unsafe-inline' 'unsafe-eval' lofficielmode.ru voltajs.org piwik-gosbar.gosuslugi.ru yastatic.net mc.yandex.ru api-maps.yandex.ru gosbar.gosuslugi.ru stat.sputnik.ru piwik.nsign.ru www.googletagmanager.com www.youtube.com s.ytimg.com translate.yandex.net cdnjs.cloudflare.com *.maps.yandex.net pos.gosuslugi.ru pos.gosuslugi.ru;connect-src 'self' gosbar.gosuslugi.ru mc.yandex.ru www.googletagmanager.com; img-src 'self' img.youtube.com data: www.rosmintrud.ru piwik-gosbar.gosuslugi.ru api-maps.yandex.ru *.maps.yandex.net stat.sputnik.ru mc.yandex.ru piwik.nsign.ru pos.gosuslugi.ru; style-src 'self' 'unsafe-inline' gosbar.gosuslugi.ru; font-src 'self' gosbar.gosuslugi.ru pos.gosuslugi.ru; media-src 'self' static.rosmintrud.ru *.youtube.com *.youtu.be; frame-src *; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://static.criteo.net https://*.criteo.com https://wb.messengerpeople.com https://isitetv.com https://ln-rules.rewardstyle.com https://*.recaptcha.net https://*.akamaihd.net https://*.translate.naver.net https://www.shoplooks.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://*.baidu.com https://services.postcodeanywhere.co.uk https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com; form-action 'self' https://www.facebook.com https://m.beautyexpert.com https://checkout.beautyexpert.com https://www.beautyexpert.com https://connect.facebook.net https://tr.snapchat.com; frame-ancestors; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://ssl.trustpilot.com https://www.facebook.com https://www.googleadservices.com https://www.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://remote.captcha.com https://*.criteo.com https://static.criteo.net https://ssl.bing.com https://ln-rules.rewardstyle.com https://*.baidu.com https://*.recaptcha.net https://*.akamaihd.net https://*.sciencebehindecommerce.com https://www.gstatic.cn https://translate.yandex.net https://*.shoplooks.com https://slooks.top https://slooks.me https://*.microsofttranslator.com https://google.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://*.google-analytics.com https://sc-static.net https://*.google.co.uk https://google.co.uk; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.shoplooks.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://www.shoplooks.com https://cdn.parcellab.com; upgrade-insecure-requests; report-to report-endpoint 1
default-src https:; script-src https: blob: 'self' 'unsafe-inline' 'unsafe-eval'; style-src https: blob: 'unsafe-inline'; img-src https: blob: data: unsafe-inline; font-src https: blob: data:; 1
default-src 'self' *.iqueue.com *.leantaas.health *.leantaas.com *.pantheonsite.io *.leantaas.local; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://js.driftt.com https://s.swiftypecdn.com https://js-agent.newrelic.com/ *.nr-data.net https://www.google-analytics.com https://maps.googleapis.com https://*.marketo.com https://spark.kickfire.com https://sc.lfeeder.com https://script.leadboxer.com https://www.googleadservices.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://s.swiftypecdn.com https://cdnjs.cloudflare.com https://js.driftt.com https://fonts.googleapis.com https://*.marketo.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: *.iqueue.com *.leantaas.health *.leantaas.com https://leantaas.com *.pantheonsite.io https://www.google.com https://cc.swiftype.com https://js.driftt.com https://driftt.imgix.net https://secure.gravatar.com https://www.google-analytics.com https://maps.gstatic.com https://maps.googleapis.com https://www.googletagmanager.com https://spark.kickfire.com https://tr.lfeeder.com https://log.leadboxer.com; connect-src 'self' https://www.google-analytics.com https://s.swiftypecdn.com https://bam.nr-data.net https://search-api.swiftype.com https://stats.g.doubleclick.net ws://127.0.0.1:* https://kibana.leadboxer.com; frame-src https://js.driftt.com https://*.marketo.com 1
default-src 'self' https://www.googletagmanager.com resource: 'unsafe-inline' 'unsafe-eval' https://idptest.spid.gov.it https://www.puntobanca.eu https://www.popolarebari.it https://www.agenziabpb.it https://www.youtube.com www.googleadservices.com https://*.g.doubleclick.net www.google-analytics.com *.googleapis.com wurfl.io *.gstatic.com *.google.com *.google.it www.compass.it *.opentok.com ws: wss://*.tokbox.com https://*.tokbox.com; img-src 'self' https://www.agid.gov.it https://www.spid.gov.it https://googleads.g.doubleclick.net https://*.segugio.it https://maps.gstatic.com https://maps.googleapis.com www.google-analytics.com data:; frame-ancestors 'self' https://www.puntobanca.eu https://www.popolarebari.it https://www.agenziabpb.it; frame-src 'self' 'unsafe-inline' https://www.compass.it https://www.youtube.com data: https://www.puntobanca.eu https://www.popolarebari.it https://www.agenziabpb.it; object-src 'self' 'unsafe-inline' data: https://www.puntobanca.eu https://www.popolarebari.it https://www.agenziabpb.it; 1
default-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'unsafe-inline' https: data:; img-src data: https: blob: android-webview android-webview-video-poster:; font-src data: https:; connect-src *; media-src https: data: blob:; worker-src https: blob:; frame-src 'self' https:; frame-ancestors 'self' https://acc.cordaid.org; upgrade-insecure-requests 1
script-src 'self' https://statistiek.rijksoverheid.nl http: https: data: blob: 'unsafe-inline' 1
default-src 'self'; script-src 'self' https://ajax.googleapis.com https://adservice.google.co.uk https://adservice.google.com https://www.googleadservices.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://survey.g.doubleclick.net https://ajax.googleapis.com https://www.googletagmanager.com https://cdn.syndication.twimg.com https://platform.twitter.com https://cdn.mouseflow.com https://sharecdn.social9.com https://share.social9.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://platform.twitter.com https://ton.twimg.com https://sharecdn.social9.com https://sharec.social9.com; font-src 'self' https://fonts.gstatic.com; img-src * data:; frame-src 'self' https://bid.g.doubleclick.net https://platform.twitter.com https://syndication.twitter.com; connect-src 'self' https://www.google.com https://www.google.co.uk https://www.google-analytics.com 1
script-src 'nonce-e529279aa4dd98d11a2ff123c05b0949' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com www.gstatic.com/recaptcha/ 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com *.youtube.com *.ytimg.com; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-media-upload.s3-accelerate.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=1412942464380455; frame-ancestors 'self' 1
default-src https: 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: maps.gstatic.com maps.googleapis.com *.ytimg.com; 1
base-uri 'none'; default-src 'self'; style-src 'self' 'nonce-60fb40023d6c45f2' fonts.googleapis.com static.sooqr.com cdn1.readspeaker.com websurveys2.servmetric.com websurveys2.govmetric.com f1-eu.readspeaker.com; font-src 'self' data: fonts.gstatic.com f1-eu.readspeaker.com; img-src 'self' data: pixel.sooqr.com 6005968.global.siteimproveanalytics.io www.google-analytics.com maps.googleapis.com www.toegankelijkheidsverklaring.nl; script-src 'self' 'nonce-60fb40023d6c45f2' static.sooqr.com cdn1.readspeaker.com websurveys2.servmetric.com counter.servmetric.com websurveys2.govmetric.com dynamic.sooqr.com www.google-analytics.com siteimproveanalytics.com f1-eu.readspeaker.com; connect-src 'self' cognito-identity.eu-central-1.amazonaws.com firehose.eu-central-1.amazonaws.com counter.servmetric.com app-eu.readspeaker.com rstts-eu.readspeaker.com www.google-analytics.com; frame-src 'self' websurveys2.govmetric.com; frame-ancestors 'self'; 1
frame-ancestors 'self' https://sso.kabelmail.de 1
report-uri /api/submit-csp-violation-report; default-src 'self' blob: data: https://i.mgtbk.nl https://cdn.jsdelivr.net https://www.google-analytics.com https://o2.mouseflow.com https://cdn.mouseflow.com https://jouw.postnl.nl https://*.gstatic.com ; script-src 'self' blob: https://i.mgtbk.nl https://cdn.jsdelivr.net  'nonce-dae8e307f59320a6' https://polyfill.io https://unpkg.com https://www.google-analytics.com https://www.googletagmanager.com https://mouseflow.com https://cdn.mouseflow.com ; style-src 'self' https://i.mgtbk.nl https://cdn.jsdelivr.net https://fonts.googleapis.com data: 'unsafe-inline'; img-src 'self' blob: https://i.mgtbk.nl https://cdn.jsdelivr.net data: https://www.google-analytics.com https://www.google.com https://www.google.nl https://www.google.be https://*.gstatic.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://o2.mouseflow.com https://i.ytimg.com https://i.vimeocdn.com ; connect-src 'self' blob: https://i.mgtbk.nl https://cdn.jsdelivr.net data: https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://o2.mouseflow.com; frame-src https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://www.managementvideo.nl https://*.soundcloud.com https://static.managementboek.nl https://i.mgtbk.nl; frame-ancestors 'none'; 1
default-src 'unsafe-inline' https:; img-src data: https:; media-src blob: data: https:; script-src 'unsafe-eval' 'unsafe-inline' https:; frame-ancestors 'self' https://www.20min.ch https://*.unitycms.io; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'nonce-Ltty1KIakM55VGXOAhHhKFzt' 'unsafe-eval' www.google.com www.gstatic.com fonts.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com ajax.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com stats.g.doubleclick.net amp.azure.net https://js-agent.newrelic.com https://bam.nr-data.net cdn.monsido.com app-script.monsido.com unpkg.com cdnjs.cloudflare.com https://www.youtube.com https://s.ytimg.com https://www.onegov.nsw.gov.au https://onegov.nsw.gov.au https://feedbackassist.onegov.nsw.gov.au https://connect.facebook.net 'sha256-y4ewc994eN4QLSKqkNumiXZrsHEfdsvr8A0DetBTf14=' 'sha256-hpI06JP8EQnuF/T8cfVCoowV1D0Fuq8jiUy1aursPUg=' 'sha256-gDQisuMxfnCK4wzry20qrxclTB7TgxpqzZoR7kGiPhs=' 'sha256-4vhLw9JxCBejsr5fjhZ0bXyP92Zv6w+29MrX0zg16Mg=' 'sha256-F3URLfcW4jU6aK2gdr4rXcDJ96rFLe75GTk6IWiuP8g=' 'sha256-1gbMmBLr81cdT7DcWG90rmNeJQ5JnZZu8qXIOcmsu7E=' 'sha256-7RYH/8tWB1gVghHbNQdRVHov/cx4FnwOuqhM1gvExOE=';object-src 'none';style-src 'self' 'unsafe-inline' amp.azure.net https://fonts.googleapis.com https://tagmanager.google.com https://onegov.nsw.gov.au https://cdn.jsdelivr.net;img-src 'self' data: www.google-analytics.com www.googletagmanager.com https://www.gstatic.com https://ssl.gstatic.com maps.googleapis.com tracking.monsido.com https://bam.nr-data.net https://js-agent.newrelic.com https://onegov.nsw.gov.au https://www.google.com https://www.google.com.au https://www.facebook.com https://cdn.jsdelivr.net;media-src 'self';frame-src 'self' www.youtube.com www.google.com;font-src 'self' fonts.googleapis.com fonts.gstatic.com data: https://onegov.nsw.gov.au;connect-src 'self' www.google-analytics.com api.ipgeolocation.io bam.nr-data.net stats.g.doubleclick.net https://feedbackassist.onegov.nsw.gov.au https://clinicaltrials.cancer.nsw.gov.au;child-src 'self';form-action 'self';frame-ancestors 'self' admin.cancer.nsw.gov.au;manifest-src 'self';plugin-types application/pdf;report-uri /WebResource.axd?cspReport=true 1
default-src * 'unsafe-inline' 'unsafe-eval';script-src * 'unsafe-inline' 'unsafe-eval';img-src 'self' data:; frame-src 'self' data:; object-src 'self' data: 1
object-src 'none'; script-src 'nonce-N8wM28drwYz74PXU8KKGJQ==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' 'report-sample' https: http:; base-uri 'none'; report-uri https://bandcamp.com/api/cspreport/1/violation 1
worker-src https://www.arbelatech.com/ 1
frame-ancestors 'self' https://www.schoolnutritionandfitness.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: https://maps.googleapis.com https://cdn.userway.org https://snap.licdn.com https://www.alliancebanks.com https://p.adsymptotic.com https://www.linkedin.com https://fg8vvsvnieiv3ej16jby.litix.io https://distillery.wistia.com https://pipedream.wistia.com https://px.ads.linkedin.com https://www.mcul.org https://cse.google.com https://kit-free.fontawesome.com https://p.typekit.net https://ssl.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://code.jquery.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://www.google-analytics.com https://ssl.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://code.jquery.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://kit.fontawesome.com https://use.typekit.net https://ajax.googleapis.com https://stackpath.bootstrapcdn.com https://use.typekit.net https://www.google.com https://stats.g.doubleclick.net https://secure.mcul.org https://www.googletagmanager.com https://ajax.googleapis.com https://maps.googleapis.com https://www.splash-screen.net https://fast.wistia.com https://embedwistia-a.akamaihd.net https://sjs.bizographics.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https:; 1
default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data: 'unsafe-inline'; font-src https: data:; frame-ancestors 'self'; report-uri https://www.guntrader.uk/report 1
default-src 'self' 'sha256-074pUaq4zj0A4OXHpScr+Jaq4rgmSSZHS3VNxFPrckE=' *.google-analytics.com *.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' *.google-analytics.com; frame-src 'self'  https://*.youtube-nocookie.com https://*.youtube.com https://*.googletagmanager.com; 1
referrer "no-referrer" 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com  www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.azurewebsites.net; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com *.azurewebsites.net; font-src 'self' *.azurewebsites.net fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com *.azurewebsites.net; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.selectsires.com *.addthis.com *.issuu.com *.cognitoforms.com; connect-src 'self' accounts.google.com https://www.google-analytics.com https://*.googleapis.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com https://*.azurewebsites.net https://dc.services.visualstudio.com wss:; 1
default-src 'self' blob:;script-src 'self' 'unsafe-inline' 'nonce-h/PQc7rvPBKwBDB5wT3L' 'unsafe-eval' https://*.blob.core.windows.net https://*.azurewebsites.net https://*.mepcontent.eu https://*.mepcontent.com https://*.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://*.wistia.com https://*.google.com https://*.addthis.com https://*.addthisedge.com https://*.googletagmanager.com https://*.litix.io https://*.kxcdn.com https://*.hotjar.com https://cdn.jsdelivr.net https://*.pardot.com https://*.visualwebsiteoptimizer.com wss: https://optanon.blob.core.windows.net https://*.onetrust.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdnjs.cloudflare.com https://go.stabiplan.com https://fast.wistia.com https://*.jquery.com https://*.aptrinsic.com https://edge.fullstory.com https://cdn.segment.com https://*.cloudfront.net;object-src 'self' https://*.blob.core.windows.net https://*.azurewebsites.net https://*.mepcontent.eu https://*.mepcontent.com https://*.akamaihd.net blob: https://*.jquery.com https://*.aptrinsic.com http://127.0.0.1:*;style-src 'self' 'unsafe-inline' https://*.blob.core.windows.net https://*.azurewebsites.net https://*.mepcontent.eu https://*.mepcontent.com https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.kxcdn.com https://pushcrew.com https://optanon.blob.core.windows.net https://*.onetrust.com https://*.jquery.com https://*.aptrinsic.com;img-src 'self' https://*.blob.core.windows.net https://*.azurewebsites.net https://*.mepcontent.eu https://*.mepcontent.com https://*.visualwebsiteoptimizer.com https://*.litix.io https://*.google-analytics.com https://*.googleadservices.com https://*.googletagmanager.com https://*.google.com https://*.google.com.bn https://*.google.com.mx https://*.google.com.vn https://*.google.co.kr https://*.google.co.nz https://*.google.co.uk https://*.google.az https://*.google.by https://*.google.cl https://*.google.de https://*.google.es https://*.google.fr https://*.google.it https://*.google.nl https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.se https://*.google.sk https://*.google.tn https://*.google.tr https://*.gstatic.com https://*.doubleclick.net https://*.googleapis.com https://*.akamaihd.net https://*.wistia.com https://*.ggpht.com https://*.pushcrew.com https://pushcrew.com https://static.hotjar.com https://*.addthis.com https://*.bing.com https://*.pingdom.net https://*.adnxs.com https://*.linkedin.com data: blob: https://localhost:* http://127.0.0.1:* https://content2:* https://optanon.blob.core.windows.net https://*.onetrust.com https://www.facebook.com https://*.jquery.com https://*.aptrinsic.com;media-src 'self' https://*.blob.core.windows.net https://*.azurewebsites.net https://*.mepcontent.eu https://*.mepcontent.com https://*.akamaihd.net https://*.wistia.net https://*.wistia.com blob: https://*.jquery.com https://js.intercomcdn.com https://*.aptrinsic.com http://127.0.0.1:*;frame-src 'self' https://*.blob.core.windows.net https://*.azurewebsites.net https://*.mepcontent.eu https://*.mepcontent.com https://*.wistia.com https://*.addthis.com https://*.google.com https://*.youtube.com https://*.twitter.com https://*.facebook.com https://*.hotjar.com https://*.doubleclick.net https://*.cloudfront.net https://*.jquery.com https://*.aptrinsic.com;font-src 'self' https://*.blob.core.windows.net https://*.azurewebsites.net https://*.mepcontent.eu https://*.mepcontent.com https://*.gstatic.com https://*.wistia.com cdnjs.cloudflare.com data: https://*.jquery.com https://*.aptrinsic.com https://*.hotjar.com;connect-src 'self' https://localhost:* https://*.blob.core.windows.net https://*.azurewebsites.net https://*.mepcontent.eu https://*.mepcontent.com https://*.google.com https://*.google-analytics.com https://*.akamaihd.net https://*.wistia.com https://*.addthis.com/ https://sumome.com https://*.hotjar.com https://*.hotjar.io https://sumo.com https://*.litix.io/ https://*.pingdom.net https://*.herokuapp.com https://*.mixpanel.com wss: https://*.jquery.com https://app.getsentry.com https://*.aptrinsic.com http://127.0.0.1:* https://stats.g.doubleclick.net https://api.segment.io https://*.fullstory.com data:;child-src 'self' https://*.blob.core.windows.net https://*.azurewebsites.net https://*.mepcontent.eu https://*.mepcontent.com https://*.wistia.com https://*.addthis.com https://*.google.com https://*.youtube.com https://*.twitter.com https://*.facebook.com https://*.hotjar.com blob: https://*.jquery.com https://player.vimeo.com https://*.aptrinsic.com;upgrade-insecure-requests;report-uri /WebResource.axd?cspReport=true 1
default-src 'self' 'unsafe-inline' blob: 'unsafe-eval' data: *.crazyegg.com *.gstatic.com lightboxapi1.azurewebsites.net lightboxapi2.azurewebsites.net lightboxapi3.azurewebsites.net *.googleadservices.com *.swncdn.com *.google.com *.bing.com *.facebook.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.blueconic.net *.googleapis.com *.sitescout.com *.sermonspice.com ct.pinterest.com *.worshiphousemedia.com worshiphousemedia.com *.salemchurchproducts.com *.salemwebnetwork.com *.lightboxcdn.com *.ubembed.com *.bootstrapcdn.com *.jwpcdn.com fonts.gstatic.com *.s3.amazonaws.com salemmediagroup.blueconic.net  *.g.doubleclick.net  *.kissmetrics.com *.googlesyndication.com *.app-us1.com scpmedia.activehosted.com *.braintreegateway.com *.renewedvision.com *.livechatinc.com *.livechat.com livechat.com *.stackadapt.com *.srv.stackadapt.com; 
	script-src 'self' 'unsafe-inline' blob: 'unsafe-eval' data: *.sitescout.com *.sermonspice.com *.gstatic.com *.lightboxcdn.com *.googleapis.com bid.g.doubleclick.net *.google.com pubads.g.doubleclick.net *.s3.amazonaws.com worshiphousemedia.s3.amazonaws.com *.google-analytics.com *.salemwebnetwork.com *.facebook.com *.googlesyndication.com *; 
	img-src 'unsafe-inline' 'unsafe-eval' data: *; 
	frame-src 'unsafe-inline' 'unsafe-eval' data:  *.sitescout.com ct.pinterest.com *.worshiphousemedia.com worshiphousemedia.com *.salemchurchproducts.com *.salemwebnetwork.com *.lightboxcdn.com *.ubembed.com *.bootstrapcdn.com *.jwpcdn.com fonts.gstatic.com *.s3.amazonaws.com salemmediagroup.blueconic.net  *.g.doubleclick.net *.lightboxcdn.com *.kissmetrics.com *.facebook.com *.googlesyndication.com *;
	style-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.googleapis.com *; 1
frame-src https://docs.google.com https://player.vimeo.com https://instagram.com https://www.instagram.com https://twitter.com https://www.youtube.com https://web.facebook.com https://platform.twitter.com https://www.facebook.com https://staticxx.facebook.com  https://syndication.twitter.com https://accounts.google.com https://vars.hotjar.com https://w.soundcloud.com https://www.slideshare.net https://www.instamojo.com https://instamojo.com https://skillenza.verloop.io https://api.razorpay.com 1
frame-ancestors 'self' christianscience.com *.christianscience.com; 1
default-src 'self' *.googlesyndication.com; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src 'none'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
font-src data: *.bootstrapcdn.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.magento.com *.revlonhairtools.com fonts.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.authorize.net *.cardinalcommerce.com *.heledigital.com *.facebook.com *.facebook.net *.signifyd.com *.braintree-api.com *.braintreegateway.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.signifyd.com *.online-metrix.net *.cardinalcommerce.com *.paypal.com *.youtube.com *.facebook.com *.facebook.net *.demdex.net *.doubleclick.net *.hotjar.com *.adyen.com *.xisecurenet.com *.adobedtm.com *.weltpixel.com *.xtento.com *.google.com *.custhelp.com *.oraclecloud.com *.trustarc.com *.googletagmanager.com *.paymetric.com *.revlonhairtools.com *.sdiapi.com *.braintree-api.com *.braintreegateway.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.magentocommerce.com *.googleadservices.com *.google-analytics.com *.paypal.com *.paypalobjects.com *.ytimg.com *.heledigital.com *.cloudflare.com *.gethatch.com *.quantserve.com *.doubleclick.net *.google.com *.facebook.com *.omtrdc.net *.demdex.net *.everesttech.net *.bazaarvoice.com data: *.adyen.com *.landofcoder.com *.klarna.com *.xtento.com *.gstatic.com *.cdninstagram.com *.rnengage.com *.trustarc.com *.co.in *.truste.com *.signifyd.com *.online-metrix.net 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com js.authorize.net jstest.authorize.net www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com js.braintreegateway.com s.ytimg.com video.google.com vimeo.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com *.adobedtm.com *.authorize.net *.cardinalcommerce.com *.ccdc02.com *.googleadservices.com *.google-analytics.com *.paypal.com *.paypalobjects.com *.braintreegateway.com *.ytimg.com *.google.com *.vimeo.com *.signifyd.com *.youtube.com *.heledigital.com *.googletagmanager.com *.facebook.net *.facebook.com *.doubleclick.net *.xisecurenet.com *.magento.com *.wootric.com *.rapidspike.com *.cloudflare.com *.instagram.com *.gstatic.com *.oraclecloud.com *.atgsvcs.com *.rnengage.com *.custhelp.com *.rightnowtech.com *.newrelic.com *.nr-data.net *.trustarc.com *.sdiapi.com *.co.in *.braintree-api.com *.googleapis.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.getfirebug.com *.heledigital.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com *.magento.com *.google.com *.custhelp.com fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.magento.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.signifyd.com *.cardinalcommerce.com *.facebook.com *.facebook.net *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.oraclecloud.com *.google-analytics.com *.demdex.net *.omtrdc.net *.magento.com *.wootric.com *.herokuapp.com *.rapidspike.com *.doubleclick.net *.nr-data.net *.atgsvcs.com *.sdiapi.com *.braintree-api.com *.braintreegateway.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://connect.facebook.net https://*.doubleclick.net https://www.google.com https://cdnjs.cloudflare.com https://script.crazyegg.com https://s3.amazonaws.com/trk.cetrk.com/7/t.js https://cookiepro.blob.core.windows.net https://code.jquery.com  https://cookie-cdn.cookiepro.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cookiepro.blob.core.windows.net https://cookie-cdn.cookiepro.com; font-src 'self' data: http://localhost:60281; img-src 'self' data: blob: https://*; frame-src 'self' https://shop.palazzo.org https://palazzo.palboo.de http://palazzo.palboo.de http://palazzo-dinnershow.tickettoaster.de https://palazzo-dinnershow.tickettoaster.de https://www.eventim.nl https://www.palboo.de http://pal-palboo1.wavecloud.de https://www.google.com https://www.sofortueberweisung.de https://checkout.wirecard.com/ https://www.googletagmanager.com https://ajax.googleapis.com/ https://maxcdn.bootstrapcdn.com/ https://cdnjs.cloudflare.com/ https://www.sofort.com/ https://bid.g.doubleclick.net/; media-src 'self'; connect-src 'self' https://www.google-analytics.com/ https://sample-api-v2.crazyegg.com/ https://tracking.crazyegg.com/; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; 1
default-src 'self' *.google.com:443; script-src 'self' 'unsafe-inline' *.nr-data.net:443 *.newrelic.com:443 *.google-analytics.com:443 *.tanihub.com:443 apis.google.com:443 https://api.smooch.io https://maps.googleapis.com https://www.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.googletagmanager.com  https://connect.facebook.com https://www.gstatic.com https://connect.facebook.net https://www.google-analytics.com https://cdn.smooch.io https://www.google.com; connect-src 'self' *.nr-data.net:443 *.doubleclick.net:443 *.google-analytics.com:443 https://tanihub.com wss://api.smooch.io https://sentry.io https://connect.facebook.net *.smooch.io:443 *.tanifund.com:443 *.tanihub.com:443 ;frame-src *.google.com:443 blog.tanihub.com:443 https://bid.g.doubleclick.net https://www.google.com https://www.youtube.com *.facebook.com:443 ;img-src 'self' blob: data: *.twimg.com:443 *.doubleclick.net:443 cdn.shortpixel.ai:443 *.tanihub.com:443 *.veritrans.co.id:443 *.googleapis.com:443 https://maps.googleapis.com https://maps.gstatic.com *.tanihub.com:443 https://www.google.co.id https://www.google.com https://google.com https://play.google.com https://afpi.or.id https://www.google-analytics.com https://www.facebook.com https://stats.g.doubleclick.net *.tanifund.com:443 *.smooch.io:443 ; style-src 'self' blob: 'unsafe-inline' *.tanihub.com:443 https://fonts.googleapis.com https://cdn.smooch.io ; font-src 'self' data: *.tanihub.com:443 https://fonts.gstatic.com https://cdn.smooch.io https://netdna.bootstrapcdn.com ; object-src 'none' 1
connect-src 'self' * ;default-src 'self' ;font-src 'self' * 'unsafe-inline' ;frame-src 'self' * ;img-src 'self' data: * ;script-src 'self' * 'unsafe-inline' 'unsafe-eval' ;style-src 'self' 'unsafe-inline' * ; 1
connect-src https://www.aquaray.com https://*.purechat.com wss://*.purechat.com https://developers.google.com https://ipinfo.io 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://ferdychristant.com https://*.ferdychristant.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
frame-ancestors 'self' https://www.veinteractive.com/ 1
script-src 'self' https://dqnp8bdp95f7m.cloudfront.net https://www.google.com https://ajax.googleapis.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; base-uri 'self'; object-src 'none'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://snap.licdn.com https://connect.facebook.net https://ssl.google-analytics.com https://www.google-analytics.com https://static.ads-twitter.com https://analytics.twitter.com https://w.usabilla.com https://www.workable.com/ https://script.crazyegg.com/ https://tagmanager.google.com https://apply.workable.com/ https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net www.googleadservices.com googleads.g.doubleclick.net www.google.com https://api.usabilla.com/ https://cookie-cdn.cookiepro.com/ 1
default-src 'self';img-src http: https: 'self' 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/;script-src 'self' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/;style-src 'self' 'unsafe-inline' https://www.gstatic.com/recaptcha;form-action 'self' https://www.google.com/recaptcha/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://wwww.stanleysecuritysolutions.com https://*.google.com https://www.google.fr https://www.google.be https://www.google.nl https://*.google-analytics.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.googleadservices.com https://*.bing.com https://*.go-mpulse.net https://*.akamaihd.com https://*.akamaihd.net https://*.janraincapture.com https://*.rpxnow.com https://*.nr-data.net https://*.newrelic.com https://*.marketo.net https://*.marketo.com https://*.youtube.com https://*.ytimg.com https://*.onetrust.com https://*.cookielaw.org https://*.drift.com https://*.driftt.com https://*.reevoo.com https://*.pricespider.com https://*.cloudfront.net https://*.mapbox.com https://*.hotjar.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.linkedin.com https://*.licdn.com https://*.ads.linkedin.com https://*.facebook.net https://*.facebook.com https://rpxnow.com resource://pdf.js; img-src 'self' data: blob: https://*.google.com https://www.google.nl https://www.google.be https://www.google.fr https://*.googleusercontent.com https://*.google.com.ua https://*.facebook.com https://*.facebook.net https://*.ads.linkedin.com https://*.adsymptotic.com https://*.google-analytics.com https://*.linkedin.com https://*.googleapis.com https://*.google.co.in https://*.googletagmanager.com https://*.gstatic.com https://*.ggpht.com https://*.akamaihd.net https://*.google.by https://*.ytimg.com https://*.reevoo.com https://*.pricespider.com https://*.cloudfront.net https://*.g.doubleclick.net https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.google.com https://www.google.nl https://www.google.fr https://www.google.be https://*.marketo.net https://*.marketo.com https://*.google-analytics.com https://*.googleapis.com https://*.reevoo.com https://*.pricespider.com https://*.cloudfront.net https://in.hotjar.com https://*.mapbox.com https://*.typekit.net https://p.typekit.net; font-src 'self' data: https://wwww.stanleysecuritysolutions.com https://*.googleapis.com https://*.googleusercontent.com https://*.gstatic.com https://*.typekit.net; connect-src 'self' https://*.g.doubleclick.net https://*.google.com https://www.google.nl https://www.google.fr https://www.google.be https://*.facebook.com https://*.facebook.net https://*.driftcdn.com https://*.googleapis.com https://*.google-analytics.com https://*.mktoresp.com https://*.bing.com https://*.googlevideo.com https://*.hotjar.com https://*.hotjar.io https://*.nr-data.net https://*.onetrust.com https://*.cookielaw.org wss://*.driftt.com https://*.reevoo.com https://*.mapbox.com https://*.g.doubleclick.net; worker-src data: blob:; frame-src 'self' https://*.google.com https://www.google.nl https://www.google.fr https://www.google.be https://*.marketo.net https://*.marketo.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.googletagmanager.com https://*.hotjar.com https://*.janraincapture.com https://*.youtube.com https://*.drift.com https://*.driftt.com https://*.reevoo.com https://*.pricespider.com; media-src 'self' https://*.driftqa.com; upgrade-insecure-requests; report-uri /csp.cgi; 1
upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: 1
default-src 'self' img.desktopwallpapers.ru yastatic.net *.kavanga.ru *.yandex.ru *.yandex.net *.adriver.ru counter.rambler.ru data: counter.yadro.ru connect.odnoklassniki.ru vk.com platform.twitter.com *.google.com *.gstatic.com https://login.vk.com yandexadexchange.net st.yandexadexchange.net *.tns-counter.ru; style-src 'unsafe-inline' img.desktopwallpapers.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' img.desktopwallpapers.ru yastatic.net *.kavanga.ru *.yandex.net *.yandex.ru *.adriver.ru *.google.com vk.com platform.twitter.com https://login.vk.com connect.ok.ru; report-uri /dk/rec.php; 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.lend.ch/ https://www.gstatic.com/charts/ https://v2.zopim.com https://trck.spoteffects.net https://tagmanager.google.com/ https://www.googletagmanager.com https://static.zdassets.com https://www.google-analytics.com https://www.googleadservices.com https://sjs.bizographics.com https://secure.keet1liod.com https://tc.connects.ch https://www.dwin1.com https://googleads.g.doubleclick.net https://r.adserver01.de https://ib.adnxs.com https://secure.adnxs.com https://html5shiv.googlecode.com https://code.jquery.com https://cdnjs.cloudflare.com/ajax/libs/highlight.js https://use.typekit.net/ https://www.google.com/pagead/ https://connect.facebook.net/ https://static.hotjar.com/ https://script.hotjar.com https://act.webmasterplan.com/ https://p.webmasterplan.com https://snap.licdn.com https://tr.mediards.de https://tr.mediards.com https://amplify.outbrain.com https://acdn.adnxs.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: franklinwater.com *.franklinwater.com naws.local naws.dev.dev *.mouseflow.com *.facebook.com *.facebook.net *.youtube.com youtube.com *.google.com *.googletagmanager.com *.gstatic.com *.googleapis.com html5shiv.googlecode.com cloud.typography.com google-analytics.com www.google-analytics.com stats.g.doubleclick.net www.dhenr54m.com *.dhenr54m.com packages.umbraco.org *.umbraco.org code.jquery.com *.addsearch.com addsearch.com *.cloudfront.net *.searchcdn.com 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-MDE1YzEwMjctMTg3NC00MGEzLWE4YWQtMmIxNmI5ODlhNjUy'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
default-src 'self'; connect-src 'self' ws://127.0.0.1:35729;object-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.google.com *.googleapis.com *.gstatic.com *.newrelic.com *.nr-data.net; style-src 'self' 'unsafe-inline'; img-src * data:; frame-src 'self' *.google.com *.itella.com *.youtube.com blob:;frame-ancestors *; 1
default-src 'self';block-all-mixed-content ; base-uri 'self'; object-src 'none'; script-src  'nonce-f19b029f936b42b5a8065c8be0d359c5' 'self' 'unsafe-eval' 'unsafe-inline' https://maps.googleapis.com https://app-lon07.marketo.com https://www.gstatic.com https://www.google.com https://st.getsitecontrol.com/ https://widgets.getsitecontrol.com https://c.evidon.com https://tagmanager.google.com/ https://www.googletagmanager.com/ https://polyfill.io https://optimize.google.com https://www.google-analytics.com https://az416426.vo.msecnd.net; img-src 'self' data: https://l.evidon.com/ https://c.evidon.com https://l3.evidon.com https://p.adsymptotic.com https://px.ads.linkedin.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.vg https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://emergencyresponse.grantthornton.co.uk https://ssl.gstatic.com https://syndication.twitter.com https://optimize.google.com https://platform.twitter.com https://pbs.twimg.com https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com https://img.youtube.com https://abs.twimg.com/ https://www.grantthornton.global/ https://ton.twimg.com/ https://www.grantthornton.nl/ https://googleads.g.doubleclick.net/; style-src 'self' 'unsafe-inline' https://ton.twimg.com https://app-lon07.marketo.com https://tagmanager.google.com/ https://fonts.googleapis.com/ https://optimize.google.com https://platform.twitter.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://cdn-images.mailchimp.com/; font-src 'self' data: https://fonts.gstatic.com; frame-src  https://l3.evidon.com/ 'self' https://syndication.twitter.com/ https://www.google.com https://app-lon07.marketo.com https://platform.twitter.com https://www.youtube.com https://optimize.google.com https://w.soundcloud.com https://player.vimeo.com https://www.gstatic.com https://cdn.optimizely.com https://view.ceros.com/; connect-src 'self' https://l3.evidon.com https://optoutapi.evidon.com https://extreme-ip-lookup.com https://stats.g.doubleclick.net https://dc.services.visualstudio.com https://az416426.vo.msecnd.net https://www.google-analytics.com https://www.googleadservices.com; 1
default-src 'none'; base-uri 'none'; connect-src 'self' https://beyond-hd.me:2083/ wss://beyond-hd.me:2083/ https://beyond-hd.me:8443/ wss://beyond-hd.me:8443/; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'none'; frame-src 'self' https://www.youtube.com/ https://youtube.com/; img-src 'self' https: data:; manifest-src 'none'; media-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.15.35/css/bootstrap-datetimepicker.min.css; worker-src 'none' 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://hm.baidu.com;img-src 'self' https://hm.baidu.com;style-src 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://ssl.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' *.fbcdn.net https://ssl.google-analytics.com https://www.google-analytics.com data:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://o61707.ingest.sentry.io; media-src 'self' *.fbcdn.net; frame-src 'self' https://open.spotify.com https://w.soundcloud.com https://player.vimeo.com https://www.youtube.com https://facebook.com https://bandcamp.com; worker-src blob:; upgrade-insecure-requests; manifest-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' webstg.lilt.com cdn.contentful.com preview.contentful.com lilt.com cdnjs.cloudflare.com js.hs-scripts.com js.chilipiper.com code.jquery.com js.hsforms.net forms.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com www.google-analytics.com www.googletagmanager.com js.hscollectedforms.net js.hsleadflows.net js.hs-banner.com js.hs-analytics.net hubspot.com snap.licdn.com js.driftt.com; connect-src 'self' tracking.chilipiper.com api.chilipiper.com forms.hubspot.com cdn.contentful.com forms.hsforms.com api.lever.co; style-src 'self' 'unsafe-inline' js.chilipiper.com; img-src 'self' images.ctfassets.net track.hubspot.com forms.hubspot.com dc.ads.linkedin.com px.ads.linkedin.com p.adsymptotic.com www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net www.google.com; media-src 'self' images.ctfassets.net videos.ctfassets.net; frame-src 'self' js.driftt.com forms.hsforms.com 1
default-src 'self' https://*.triplevision.nl; child-src 'self' https://*.triplevision.nl https://triplevisiondigital.com https://www.google.com https://paypal.com https://vimeo.com https://youtube.com https://twitter.com https://*.logrocket.com data: blob:; connect-src 'self' wss://*.hotjar.com wss://*.triplevision.nl https://*; font-src 'self' https:; frame-src 'self' https://blackfire.io https://vars.hotjar.com/ https://www.google.com/recaptcha/; img-src 'self' data: http: https:; script-src 'self' https://*.triplevision.nl https://ajax.googleapis.com https://cdn.ampproject.org https://cdn.logrocket.com https://code.jquery.com https://platform.twitter.com https://maps.googleapis.com/ https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com data: https: 'unsafe-inline'; style-src 'self' https://*.triplevision.nl https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://platform.twitter.com https://*.twimg.com 'unsafe-inline'; 1
default-src 'self' http: https: data: blob: 'unsafe-inline'; connect-src 'self' http: https: http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-BfnrSkqBjwyYrnrCITfgSg' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src 'none'; style-src 'self'; img-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.neurologic.com.br https://www.clickcease.com https://*.cloudflare.com https://*.google-analytics.com https://*.cloudfront.net https://fonts.googleapis.com https://www.projuris.com.br https://www.googletagmanager.com; img-src 'self' data: https://cdn.neurologic.com.br https://storage.googleapis.com https://www.google.com https://*.cloudflare.com https://*.cloudfront.net https://www.projuris.com.br https://*.google-analytics.com https://www.google.com.br/ads/; style-src 'self' https://stackpath.bootstrapcdn.com https://*.cloudflare.com https://www.projuris.com.br 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://use.typekit.net https://www.projuris.com.br https://fonts.googleapis.com https://fonts.gstatic.com https://themes.googleusercontent.com; frame-src https://*.soundcloud.com https://www.projuris.com.br https://www.youtube.com https://www.facebook.com https://s-static.ak.facebook.com https://*.google.com https://app.projuris.com.br; connect-src 'self' https://monitor.clickcease.com https://app.neurologic.com.br https://stats.g.doubleclick.net https://*.google-analytics.com https://*.rdstation.com.br; object-src 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.gstatic.com googleads.g.doubleclick.net www.googleadservices.com *.vimeocdn.com *.vimeo.com vimeo.com *.ytimg.com *.youtube.com *.hotjar.com *.facebook.net *.crazyegg.com *.giosg.com *.giosgusercontent.com www.googletagmanager.com www.google-analytics.com online.adservicemedia.dk tagmanager.google.com optimize.google.com; frame-src 'self' *.santanderconsumer.se *.google.com *.vimeo.com *.facebook.com *.santanders.se *.hotjar.com *.doubleclick.net www.youtube.com optimize.google.com *.giosg.com *.giosgusercontent.com; child-src 'self' *.hotjar.com; img-src * 'self' data: *.hotjar.com google-analytics.com optimize.google.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com optimize.google.com *.giosg.com *.giosgusercontent.com; connect-src wss://*.santanderconsumer.se *.santanderconsumer.se *.hotjar.io *.hotjar.com wss://*.hotjar.com *.crazyegg.com wss://*.crazyegg.com *.giosg.com *.giosgusercontent.com *.google-analytics.com 'self'; font-src 'self' *.hotjar.com fonts.gstatic.com giosg-chat-public-eu.s3.amazonaws.com; worker-src 'self' blob: 1
default-src 'none'; font-src 'self'; media-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self'; img-src 'self' data: blob:; connect-src 'self' blob: wss://streaming.ecodigital.social; frame-src 'self' https://www.youtube.com; manifest-src 'self'; frame-ancestors 'none'; upgrade-insecure-requests 1
default-src https: http: data: wss://*.zopim.com:* wss://*.hotjar.com blob: 'unsafe-inline' 'unsafe-eval' 1
default-src * data: 'unsafe-inline' 'unsafe-eval'; 1
frame-ancestors 'self' *.optimizely.com optimizely.com http://*.corp.westmarine.com:* https://*.corp.westmarine.com:* http://*.westmarine.net:* http://westmarine.net:* https://*.westmarine.net:* https://westmarine.net:* 1
default-src 'self';               script-src 'self' 'unsafe-inline' 'unsafe-eval';              worker-src 'self' blob:;              style-src 'self' 'unsafe-inline' data: https://netdna.bootstrapcdn.com;              img-src 'self' 'unsafe-inline' data:;              font-src 'self' 'unsafe-inline' data: https://netdna.bootstrapcdn.com; 1
frame-ancestors 'none'; default-src 'self' https://*.yahoo.com https://*.yimg.com; script-src 'self' 'unsafe-inline' 'nonce-SeCXc2VT0jjBZgEIO5cxkg==' 'unsafe-eval' https://*.yahoo.net https://*.yahoo.com https://*.yimg.com https://*.uservoice.com *.oath.com https://*.youtube.com *.yahooapis.com blob: *.izlesene.com *.ioam.de *.avg.com *.rewardsaccelerator.com smetrics.att.com; style-src 'self' 'unsafe-inline' https://assets.video.yahoo.net https://*.yimg.com; img-src 'self' data: https://*.bing.net https://*.yimg.com https://s.ytimg.com yahoo.com https://*.yahoo.com https://*.bing.com *.here.com *.wc.yahoodns.net https://*.doubleclick.net https://sb.scorecardresearch.com https://*.adaptv.advertising.com https://*.vidible.tv smetrics.att.com; frame-src 'self' https://*.yahoo.net https://*.youtube.com https://s.yimg.com https://*.yahoo.com https://yahoo.uservoice.com https://*.vidible.tv; media-src * blob:; object-src *; connect-src *; font-src * data:; child-src blob:; 1
default-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.twitter.com *.cloudflare.com *.twimg.com *.polyfill.io *.googleapis.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' *.youtube.com *.gravatar.com *.twitter.com *.cloudflare.com *.twimg.com *.polyfill.io *.googleapis.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.cloudflare.com *.twimg.com *.polyfill.io *.googleapis.com *.twitter.com; font-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.gstatic.com data:; frame-src *.youtube.com *.twitter.com; 1
frame-ancestors *.caibow.com *.polocai.com tongji.baidu.com 1
default-src 'self' ; style-src 'self' 'unsafe-inline' ; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com/analytics.js ; img-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.rsk.is/skin/rsk/i/sitelogo.png ; connect-src https://www.google-analytics.com 1
referrer 'unsafe-url' 1
default-src * data: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: 'unsafe-inline' 'unsafe-eval'; connect-src * data: 'unsafe-inline'; img-src * data: 'unsafe-inline'; frame-src * data: ; style-src * data: 'unsafe-inline'; font-src * data: 'unsafe-inline' 1
default-src 'self'; frame-src https://e.issuu.com/ https://player.vimeo.com/ https://www.google.com/recaptcha/ https://www.facebook.com https://www.youtube.com https://hunterwater.maps.arcgis.com https://vars.hotjar.com https://www.smartwatermark.org https://hunterwater.typeform.com https://open.spotify.com; frame-ancestors 'self'; connect-src 'self' https://hwc-web.s3-ap-southeast-2.amazonaws.com wss://carrier-pigeon.mypurecloud.com.au https://api.mypurecloud.com.au https://www.google-analytics.com https://api.rollbar.com https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com; font-src 'self' data: https://fonts.gstatic.com https://script.hotjar.com https://use.typekit.net; img-src 'self' data: https://www.google-analytics.com https://hunter-water.imgix.net https://*.amazonaws.com https://api.swiftype.com https://maps.googleapis.com https://maps.gstatic.com https://www.facebook.com https://script.hotjar.com; media-src 'none'; object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://apps.mypurecloud.com.au https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdnjs.cloudflare.com https://www.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://api.swiftype.com https://static.hotjar.com https://script.hotjar.com https://connect.facebook.net https://www.smartwatermark.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://use.typekit.net https://p.typekit.net; prefetch-src 'self'; base-uri 'self'; form-action 'self' https://adfs1.hunterwater.com.au https://www.facebook.com; 1
script-src 'self' *.topsource.in *.topsource.co.uk *.google.com *.gstatic.com 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'self' swaepp.stadtwerke-konstanz.de https://swaepp.stadtwerke-konstanz.de *.staffbase.com https://staffbase.com 1
frame-ancestors https://lares.cl 1
default-src 'self'; media-src 'self'; font-src 'self'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com/ https://www.googletagmanager.com/  https://connect.facebook.net/es_LA/sdk.js https://platform.twitter.com/widgets.js https://unpkg.com/leaflet@1.3.1/dist/leaflet.js https://platform.twitter.com/js/ https://cdn.syndication.twimg.com/timeline/profile; connect-src 'self'; img-src 'self' data: https://unpkg.com/leaflet@1.3.1/dist/images/ https://tile.openstreetmap.org https://syndication.twitter.com https://platform.twitter.com/ https://pbs.twimg.com https://ton.twimg.com https://www.google-analytics.com/; frame-src https://forms.office.com/ https://platform.twitter.com/ https://staticxx.facebook.com/ https://www.youtube.com/  https://www.facebook.com/ https://syndication.twitter.com/ https://docs.google.com/; style-src 'self' 'unsafe-inline' https://unpkg.com/leaflet@1.3.1/dist/leaflet.css https://platform.twitter.com/ https://ton.twimg.com/; object-src 'self'; 1
default-src 'none';base-uri 'none';connect-src 'self' https://api.segment.io/v1/ https://api-iam.intercom.io/ https://uploads.intercomcdn.com/ wss://nexus-websocket-a.intercom.io/ https://nexus-websocket-a.intercom.io/ wss://nexus-websocket-b.intercom.io/ https://nexus-websocket-b.intercom.io/ https://stats.g.doubleclick.net https://stats.g.doubleclick.net/ https://in.hotjar.com/ https://vc.hotjar.io/ wss://*.hotjar.com/ https://*.pingdom.net/ https://*.survicate.com/ https://*.survicate.com/ https://bat.bing.com/  https://www.google-analytics.com/ https://ws4.hotjar.com/;font-src 'self' data: https://js.intercomcdn.com/fonts/ https://fonts.gstatic.com/s/montserrat/ https://fonts.gstatic.com/stats/Montserrat/ https://fonts.gstatic.com/s/lora/ https://fonts.gstatic.com/s/roboto/ https://fonts.gstatic.com/;form-action 'self' *.cortex.net *.transzap.com *.openinvoice.com *.oildex.com webto.salesforce.com *.facebook.com/ https://jekyll.fundthrough.com/v1/auth https://express.fundthrough.com/;frame-ancestors 'self' *.cortex.net *.transzap.com *.openinvoice.com *.oildex.com *.intuit.com;frame-src 'self' https://calendly.com/ https://staticxx.facebook.com/ https://www.facebook.com/ https://track.bigdatascoring.com/ https://bid.g.doubleclick.net/ https://bid.g.doubleclick.net/ https://platform.twitter.com/ https://vars.hotjar.com/ https://player.vimeo.com/ https://www.google.com/ https://www.gstatic.com/ https://*.fundthrough.com/ https://*.intuit.com/;img-src 'self' data: https://gifs.intercomcdn.com/images/ https://downloads.intercomcdn.com/ https://static.intercomassets.com/assets/default-avatars/ https://js.intercomcdn.com/images/ https://syndication.twitter.com/ https://static.intercomassets.com/avatars/ https://seal-mwco.bbb.org/seals/blue-seal-63-134-fundthroughinc-1330074.png https://www.googleadservices.com/ https://analytics.twitter.com/ https://bat.bing.com/ https://www.google.com/ https://www.google.ca/ https://googleads.g.doubleclick.net/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://stats.g.doubleclick.net/ https://secure.gravatar.com/ http://www.google-analytics.com/ https://www.facebook.com/ https://staticxx.facebook.com/ http://www.fundthrough.com/ https://ssl.gstatic.com/ https://www.gstatic.com/ http://*.survicate.com/ https://*.survicate.com/ https://px.ads.linkedin.com/ https://p.adsymptotic.com/;media-src https://js.intercomcdn.com/audio/;object-src 'none';script-src 'self' 'unsafe-inline' https://www.google-analytics.com/gtm/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net/ https://px.ads.linkedin.com/ https://js.intercomcdn.com/ https://www.google-analytics.com/analytics.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://snap.licdn.com/li.lms-analytics/insight.beta.min.js https://www.googleadservices.com/pagead/conversion_async.js https://bat.bing.com/bat.js https://widget.intercom.io/ https://cdn.segment.com/analytics.js/v1/ https://platform.twitter.com/widgets.js https://connect.facebook.net/en_US/sdk.js https://track.bigdatascoring.com/tracking.min.js https://assets.calendly.com/assets/external/widget.js https://track.bigdatascoring.com/tracking.min.js https://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js http://www.google-analytics.com/analytics.js https://platform.twitter.com/ https://cdnjs.cloudflare.com/ https://www.googletagmanager.com/ https://tagmanager.google.com/ https://connect.facebook.net/ https://ajax.cloudflare.com/ https://platform.twitter.com/ https://connect.facebook.net/ https://track.bigdatascoring.com/ https://assets.calendly.com/ https://ajax.googleapis.com/ https://static.hotjar.com/ https://sjs.bizographics.com/ https://script.hotjar.com/ https://*.pingdom.net/ http://*.survicate.com/ https://*.survicate.com/ https://www.google.com/ https://www.gstatic.com/ https://edge.fullstory.com/;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css https://assets.calendly.com/assets/external/widget.css https://fonts.googleapis.com/ https://tagmanager.google.com/ https://*.survicate.com/ http://*.survicate.com/;worker-src 'none'; 1
frame-ancestors https://*.prolific.co http://*.prolific.co https://prolific.co 1
default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 1
font-src 'self' 'unsafe-inline' *.aimhunt.com data: fonts.gstatic.com https://www.aimhunt.com; script-src 'self' 'unsafe-inline' *.aimhunt.com https://www.aimhunt.com, referrer "no-referrer" 1
frame-ancestors 'self' www.bzzworldtravel.com irbooking.bzzworldtravel.com oss.bzzworld.com admin.saveonresorts.com admin.saveonresorts.com cash.kivac.com.mx internationalcash.liveaquaresidenceclub.com www.travelii.mx www.world2go.mx globe.re-set.mx cash.kivac.com.mx reservation.re-set.travel members.re-set.travel visa.re-set.travel internationalcash.liveaquaresidenceclub.com www.favc.com access.favc.com www.crownclubmarketplace.com redeem.travelsavingspassport.com book.qvitravelsavings.com ir.tripsavr.com pc.tripsavr.com pc.tripsavr2.com ir.tripsavr2.com club.latitude21resorts.com www.IAMLVC.com www.travelsavingspassport.com www.qvitravelsavings.com activate.tripsavr.com tripsavr2.com latitudevacationclub.com 1
default-src 'self' 'unsafe-eval'  https://arcgis.sdi.abudhabi.ae https://js.arcgis.com blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://player.vimeo.com https://www.tamm.abudhabi https://js.arcgis.com https://recaptcha.net https://ssl.google-analytics.com https://translate.google.com https://translate.googleapis.com https://www.gstatic.com https://www.youtube.com https://s.ytimg.com; object-src 'self'; img-src 'self' data: *; media-src *; style-src 'self' 'unsafe-inline' https://js.arcgis.com https://translate.googleapis.com https://fonts.googleapis.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://www.instagram.com https://www.google.com https://player.vimeo.com; font-src 'self' https://fonts.gstatic.com data: *; worker-src 'self' https://www.tamm.abudhabiblob:; connect-src 'self'  wss://directline.botframework.com  https://static.arcgis.com https://services.arcgisonline.com https://translate.googleapis.com https://geocode.arcgis.com https://arcgis.sdi.abudhabi.ae https://js.arcgis.com https:; 1
default-src https://fonts.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://cdn.bnamed.net https://www.bnamed.net https://www.googletagmanager.com/ https://www.google-analytics.com/ www.google.com connect.facebook.net www.facebook.com ws://www.bnamed.net wss://www.bnamed.net 'self';script-src 'nonce-NDYwMzM4MjE0ODcwODk2' 'sha256-uQyoKR3lBoDKU5iLg9zKfBYNrpUw6f/mybOTAsyvaZI=' 'sha256-Sr+FfLApO55KEHUmp1pCdAfP+DIUvDvWeljNRs5Ts4k=' 'sha256-Sr+FfLApO55KEHUmp1pCdAfP+DIUvDvWeljNRs5Ts4k=' https://tagmanager.google.com https://cdn.bnamed.net https://www.bnamed.net https://www.googletagmanager.com/ https://www.google-analytics.com/ www.google.com connect.facebook.net www.facebook.com www.gstatic.com ws://www.bnamed.net wss://www.bnamed.net 'self'; style-src https://tagmanager.google.com https://fonts.googleapis.com https://cdn.bnamed.net https://www.bnamed.net 'self' 'unsafe-inline'; object-src 'none';report-uri /reportURI 1
default-src 'self' blob:; img-src 'self' data: https://*.azure.net https://*.hubspot.com/ https://*.fod247.io https://*.amazonaws.com http://*.boldchat.com https://*.boldchat.com http://via.placeholder.com/ https://seal.websecurity.norton.com https://*.internal.ashfitness.net/ https://*.ashconnect.com http://*.gstatic.com http://*.googleapis.com https://app.validic.com https://*.typekit.net https://*.ashcompanies.com https://*.api.ashcompanies.com https://*.googleapis.com  https://csi.gstatic.com https://www.google-analytics.com http://www.google-analytics.com https://stats.g.doubleclick.net/ https://www.facebook.com/ https://www.google.com/ https://dev.api.healthyroads.com https://stg.api.healthyroads.com/ https://preprod.api.healthyroads.com https://api.healthyroads.com/ https://www.googletagmanager.com/ https://optimize.google.com http://optimize.google.com https://*.choosehealthynext.com https://cdn.fod247.com https://*.ooyala.com https://*.brightcove.com https://*.boltdns.net https://*.choosehealthy.com;media-src 'self' blob: https://*.silverandfit.com/ http://*.boldchat.com https://*.boldchat.com https://*.internal.ashfitness.net https://dev.api.healthyroads.com  https://preprod.api.healthyroads.com  https://api.healthyroads.com/ https://stg.api.healthyroads.com/ https://*.api.ashcompanies.com https://*.ooyala.com https://*.akamaized.net https://*.choosehealthy.com https://*.boltdns.net https://*.akamaihd.net https://*.azure.net https://*.ptrx.org https://*.amazonaws.com;frame-src 'self' 'unsafe-inline' https://vimeo.com/ http://*.boldchat.com https://*.boldchat.com https://www.youtube.com/  https://www.facebook.com/ https://connect.facebook.net/ https://*.vimeo.com https://api.recurly.com/ https://*.networksearch.api.ashcompanies.com https://optimize.google.com http://optimize.google.com https://*.choosehealthynext.com https://*.ooyala.com https://*.choosehealthy.com https://youtu.be/;font-src 'self' 'unsafe-inline' data: http://*.boldchat.com https://*.boldchat.com https://*.api.ashcompanies.com/ https://*.ashconnect.com http://*.gstatic.com http://*.typekit.net https://*.ui.api.ashcompanies.com https://fonts.gstatic.com http://fonts.gstatic.com https://*.ooyala.com https://*.choosehealthy.com;connect-src 'self' blob: wss://*.bold360.com https://www.google-analytics.com https://ak-use.akamaized.net/ https://metrics-api.librato.com http://americanspecialtyhealth.nanorep.co http://*.boldchat.com https://*.boldchat.com https://*.silverandfit.com https://silverandfit.com http://dc.services.visualstudio.com/v2/track https://dc.services.visualstudio.com/v2/track https://api.healthyroads.com/ https://*.api.healthyroads.com https://*.ashconnect.com https://*.exerciserewards.com https://*.typekit.net/ https://*.api.ashcompanies.com https://api.recurly.com https://connect.facebook.net https://dc.services.visualstudio.com/ https://*.choosehealthynext.com https://*.ooyala.com https://*.bitmovin.com https://*.brightcove.com https://*.boltdns.net https://stats.g.doubleclick.net https://*.akamaihd.net https://*.choosehealthy.com https://*.azure.net;worker-src 'self' data: blob:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://www.googleoptimize.com http://americanspecialtyhealth.nanorep.co http://*.boldchat.com https://*.boldchat.com https://seal.verisign.com/ http://*.typekit.net http://noembed.com/ https://noembed.com/ https://api.healthyroads.com https://*.ui.api.ashcompanies.com/ https://*.api.ashcompanies.com https://*.api.healthyroads.com https://*.exerciserewards.com http://tagmanager.google.com https://tagmanager.google.com http://*.googleapis.com https://js.recurly.com/v4/recurly.js  https://www.googletagmanager.com http://www.google-analytics.com/ https://www.google-analytics.com/ https://analytics.clickdimensions.com https://az416426.vo.msecnd.net/ https://connect.facebook.net/ http://analytics.clickdimensions.com/ https://optimize.google.com http://optimize.google.com https://*.choosehealthynext.com https://*.ooyala.com https://*.brightcove.net https://*.gstatic.com https://*.choosehealthy.com;style-src 'self' http://*.boldchat.com https://*.boldchat.com https://js.recurly.com/ http://tagmanager.google.com https://tagmanager.google.com https://*.googleapis.com http://*.googleapis.com https://api.healthyroads.com/ https://*.api.ashcompanies.com/ https://*.api.healthyroads.com https://*.choosehealthynext.com 'unsafe-inline' https://optimize.google.com https://seal.websecurity.norton.com http://optimize.google.com https://*.ooyala.com;child-src 'self' 'unsafe-inline' blob: data:;frame-ancestors 'self' https://vimeo.com/ https://*.choosehealthy.com; 1
default-src 'none'; connect-src www.google-analytics.com www.googletagmanager.com https://stats.g.doubleclick.net; img-src 'self' http://www.w3.org https://havenhealthcare.com https://www.google.com www.google-analytics.com www.googletagmanager.com; script-src 'unsafe-inline' 'self' www.google-analytics.com www.googletagmanager.com; style-src 'unsafe-inline' 'self' https://havenhealthcare.com; font-src 'self' https://havenhealthcare.com; object-src 'none' 1
object-src 'none'; script-src 'self' 'unsafe-inline' https://geolocation.onetrust.com https://cdn.cookielaw.org https://cdn.jsdelivr.net mdbootstrap.com https://www.googletagmanager.com https://ws.facil-iti.com https://www.google-analytics.com; script-src-elem 'self' https://geolocation.onetrust.com https://cdn.cookielaw.org https://www.googletagmanager.com https://ws.facil-iti.com https://www.google-analytics.com https://cdn.jsdelivr.net mdbootstrap.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' fonts.googleapis.com mdbootstrap.com use.fontawesome.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' fonts.googleapis.com mdbootstrap.com use.fontawesome.com 'unsafe-inline'; frame-ancestors 'self'; report-uri https://groupe-rocher.com/report-uri/reportOnly 1
upgrade-insecure-requests;default-src * 'unsafe-inline'; script-src * 'self' 'unsafe-inline' 'unsafe-eval' ; connect-src * 'unsafe-inline'; img-src * data:; frame-src *; style-src * 'unsafe-inline' 'unsafe-eval';font-src data:  * 'unsafe-inline' 'unsafe-eval' 1
default-src https: http; script-src https http: 'unsafe-inline' 'unsafe-eval' http://*.addthis.com ; style-src https http: 'unsafe-inline'; media-src https http: 'unsafe-inline'; img-src https http: 'unsafe-eval' data:; font-src https http: 'unsafe-inline'; connect-src https http: 'unsafe-inline' ; frame-src https http: 'unsafe-inline' 1
default-src 'self'; img-src 'self' https://d300tb5wusuhi2.cloudfront.net https://assets.abenity.com https://a.tiles.mapbox.com https://abenity.s3.amazonaws.com https://abs.twimg.com https://api.mapbox.com https://b.tiles.mapbox.com https://bam.nr-data.net https://bat.bing.com https://chart.apis.google.com https://embed-fastly.wistia.com https://embedwistia-a.akamaihd.net https://fast.wistia.com https://i.ytimg.com https://img.youtube.com https://s3.amazonaws.com https://stats.g.doubleclick.net https://syndication.twitter.com https://www.google-analytics.com https://www.gstatic.com data:; font-src 'self' https://d300tb5wusuhi2.cloudfront.net https://cloud.typography.com https://fast.wistia.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://use.fontawesome.com data:; object-src 'self' https://embedwistia-a.akamaihd.net; connect-src 'self' 'unsafe-eval' https://d300tb5wusuhi2.cloudfront.net https://a.tiles.mapbox.com https://api.abenity.com https://api.mapbox.com https://bam.nr-data.net https://bam-cell.nr-data.net https://bat.bing.com https://distillery.wistia.com https://distillery.wistia.net https://embed-fastly.wistia.com https://embed-ssl.wistia.com https://embedwistia-a.akamaihd.net https://events.mapbox.com https://fg8vvsvnieiv3ej16jby.litix.io https://pipedream.wistia.com https://stats.g.doubleclick.net https://www.google-analytics.com; script-src 'self' 'unsafe-inline' https://d300tb5wusuhi2.cloudfront.net https://abenity.ontraport.com https://api.mapbox.com https://app.wistia.com https://bam.nr-data.net https://bam-cell.nr-data.net https://bat.bing.com https://cdn.walkme.com https://distillery.wistia.com https://fast.wistia.com https://js-agent.newrelic.com https://optassets.ontraport.com https://platform.twitter.com https://s3.amazonaws.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://d300tb5wusuhi2.cloudfront.net https://abenity.s3.amazonaws.com https://api.mapbox.com https://cloud.typography.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://s3.amazonaws.com https://use.fontawesome.com; media-src 'self'  https://d300tb5wusuhi2.cloudfront.net https://embed-fastly.wistia.com https://embed-ssl.wistia.com https://embedwistia-a.akamaihd.net blob:; frame-src 'self'  https://abenityinc.freshdesk.com https://docs.google.com https://fast.wistia.com https://fast.wistia.net https://platform.twitter.com https://www.google.com https://www.youtube.com; report-uri https://api.abenity.com/public/csp-logger.json 1
default-src 'self' *.googlesyndication.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' img.equinenow.com *.2mdn.net *.acexedge.com *.adbutter.net *.adrta.com *.adsafeprotected.com *.adnxs.com *.adnxtr.com *.adroll.com *.adsrvr.org *.adtechus.com *.atdmt.com ajax.googleapis.com *.amazonaws.com *.amazon-adsystem.com *.ampproject.org *.basis.net *.betrad.com *.bidsumulator.com *.bidswitch.net *.bluekai.com *.bidr.io *.contextweb.com *.clarium.io *.demdex.net *.dotomi.com *.doubleclick.net *.doubleverify.com *.dowlextff.com *.dvtps.com connect.facebook.net confiant-integrations.global.ssl.fastly.net *.esm1.net *.exponential.com *.everesttech.net *.evidon.com *.fastclick.net *.flashtalking.com maps.googleapis.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.google-analytics.com *.gstatic.com *.iasds01.com *.imrworldwide.com *.jivox.com *.krxd.net *.mathtag.com *.mediamathtag.com *.minkatu.com *.moatads.com *.myvisualiq.net *.olark.com *.opendns.com *.revjet.com *.pinterest.com *.quantcount.com *.quantserve.com *.scorecardresearch.com *.serving-sys.com *.sharethis.com *.sitescount.com *.steelhousemedia.com *.stripe.com *.tubemogul.com *.trustarc.com *.truste.com *.turn.com *.voicefive.com *.ybp.yahoo.com *.yimg.com img.localbiketrader.com; style-src img.equinenow.com 'self' 'unsafe-inline' *.googleapis.com *.cmptch.com *.evidon.com *.fastclick.net maxcdn.bootstrapcdn.com *.quantcount.com *.sharethis.com img.localbiketrader.com; style-src-elem img.equinenow.com 'self' 'unsafe-inline' *.evidon.com fonts.googleapis.com maxcdn.bootstrapcdn.com content.quantcount.com secure.cdn.fastclick.net static.olark.com *.sharethis.com img.localbiketrader.com; img-src * 'self' data: *.equinenow.com img.localbiketrader.com; font-src 'self' data: img.equinenow.com maxcdn.bootstrapcdn.com fonts.googleapis.com tpc.googlesyndication.com cdnjs.cloudflare.com fonts.gstatic.com cdn.revjet.com c.steelhousemedia.com img.localbiketrader.com; connect-src 'self' www.facebook.com *.acexedge.com *.adnxs.com *.adsrvr.org *.amazon-adsystem.com *.ampproject.org adserver-us.adtech.advertising.com *.bttrack.com *.contextweb.com *.casalemedia.com *.clearrtb.com *.clarium.io *.doubleclick.net *.doubleverify.com *.dotomi.com *.districtm.io *.flashtalking.com *.googleadservices.com *.googlesyndication.com *.google-analytics.com *.gstatic.com metrics.nt.vc *.opendns.com *.serving-sys.com *.sharethis.com *.steelhousemedia.com *.yahoo.com; frame-ancestors 'self' *.allbreedpedigree.com *.pedigreequery.com; frame-src 'self' *.2mdn.net *.adform.net *.admission.net *.adnxs.com *.amazon-adsystem.com advertising.aol.com bttrack.com *.casalemedia.com *.cargurus.com connect.facebook.net *.consensu.org *.contobox.com *.criteo.com *.doubleclick.net *.doubleverify.com *.dvtps.com *.facebook.com *.flashtalking.com *.googlesyndication.com *.linksynergy.com *.mathtag.com match.prod.bidr.io *.opendns.com *.placelocal.com *.serving-sys.com *.sharethis.com *.simpli.fi *.sitescout.com *.stripe.com *.turn.com *.vimeo.com *.w55c.net *.youtube.com; object-src 'none'; form-action 'self' edge.sharethis.com m.facebook.com facebook.com www.google.com www.paypal.com www.uship.com; base-uri 'none'; report-to csp-services; report-uri https://equinenow.report-uri.com/r/d/csp/reportOnly; 1
default-src 'none'; base-uri 'none'; connect-src 'self' https://*.olark.com https://*.hotjar.com https://*.mktoresp.com https://*.pointillist.com https://translate.google.com https://translate.google.com/* https://translate.googleapis.com https://translate.googleapis.com/*; font-src 'self' https://fonts.gstatic.com data:; form-action 'self' https://*.marketo.com https://*.jotform.com https://*.jotformpro.com https://*.arvig.com https://*.arvig.net https://translate.google.com https://translate.google.com/* https://translate.googleapis.com https://translate.googleapis.com/*; frame-ancestors 'none'; frame-src 'self' https://*.jotform.com https://*.jotformpro.com https://*.marketo.com https://*.youtube.com https://youtu.be https://*.arvig.com https://*.arvig.net https://*.olark.com https://*.google.com https://*.paymentus.com https://*.hotjar.com; img-src 'self' https://*.youtube.com https://*.olark.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagemanager.com https://www.google.com https://ssl.gstatic.com https://www.gstatic.com data: https://translate.google.com https://translate.google.com/* https://translate.googleapis.com https://translate.googleapis.com/*; manifest-src 'none'; media-src https://*.olark.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.marketo.com https://*.marketo.net https://*.olark.com https://www.googletagmanager.com https://*.hotjar.com https://*.pointillist.com https://www.google-analytics.com https://*.mktoresp.com https://tagmanager.google.com https://translate.google.com https://translate.google.com/* https://translate.googleapis.com https://translate.googleapis.com/*; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.marketo.com https://*.olark.com https://*.hotjar.com https://www.google-analytics.com https://tagmanager.google.com https://translate.google.com https://translate.google.com/* https://translate.googleapis.com https://translate.googleapis.com/*; worker-src 'none' 1
base-uri 'none'; object-src 'none'; script-src https://cd-rw.org/logs/ https://cd-rw.org/sidekiq/ https://cd-rw.org/mini-profiler-resources/ https://cd-rw.org/assets/ https://cd-rw.org/brotli_asset/ https://cd-rw.org/extra-locales/ https://cd-rw.org/highlight-js/ https://cd-rw.org/javascripts/ https://cd-rw.org/plugins/ https://cd-rw.org/theme-javascripts/ https://cd-rw.org/svg-sprite/ https://www.google-analytics.com/analytics.js https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js cdnjs.cloudflare.com/ajax/libs/cookieconsent2/1.0.10/cookieconsent.min.js; worker-src 'self' https://cd-rw.org/assets/ https://cd-rw.org/brotli_asset/ https://cd-rw.org/javascripts/ https://cd-rw.org/plugins/ 1
frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://thomsonreuterstaxprofessionals.lookbookhq.com https://thomsonreuterstaxprofessionals.lookbookhq.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' mepspay.com *.perk0mean.com *.jquery.com *.cloudflare.com *.licdn.com *.google-analytics.com *.facebook.com *.facebook.net *.gstatic.com *.twitter.com *.linkedin.com *.doubleclick.net *.googletagmanager.com *.googleadservices.com *.hotjar.com *.google.com *.google.net *.google.jo; img-src 'self' mepspay.com *.licdn.com *.google-analytics.com *.facebook.com *.facebook.net *.gstatic.com *.twitter.com *.linkedin.com *.doubleclick.net *.googletagmanager.com *.googleadservices.com *.hotjar.com *.google.com *.google.net *.google.jo data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self' mepspay.com *.licdn.com *.google-analytics.com *.facebook.com *.facebook.net *.gstatic.com *.twitter.com *.linkedin.com *.doubleclick.net *.googletagmanager.com *.googleadservices.com *.hotjar.com *.google.com *.google.net *.google.jo; connect-src 'self' wss://mepspay.com mepspay.com *.licdn.com *.google-analytics.com *.facebook.com *.facebook.net *.gstatic.com *.twitter.com *.linkedin.com *.doubleclick.net *.googletagmanager.com *.googleadservices.com *.hotjar.com *.google.com *.google.net *.google.jo; object-src 'none' 1
default-src 'self' *.google-analytics.com *.google.com *.addthis.com *.bugherd.com *.pusher.com *.pusherapp.com *.cloudfront.net *.amazonaws.com; style-src 'self' 'unsafe-inline' *.google.com *.cloudfront.net *.googleapis.com; font-src 'self' *.googleapis.com *.bugherd.com *.google.com *.gstatic.com;  script-src 'self' 'unsafe-inline' 'unsafe-eval' snap.licdn.com *.linkedin.com *.facebook.com *.facebook.net *.google.com *.googleapis.com *.googletagmanager.com sjs.bizographics.com px.ads.linkedin.com *.google-analytics.com *.cloudflare.com *.addthis.com *.gstatic.com *.bugherd.com *.addthisedge.com *.cloudfront.net *.twitter.com; connect-src 'self' twixl.i-sites.be *.twixlmedia.com *.facebook.com *.google-analytics.com *.doubleclick.net *.bugherd.com *.pusher.com *.pusherapp.com *.addthis.com *.google.com *.googleapis.com wws:; img-src 'self' *.cloudfront.net *.amazonaws.com *.addthis.com *.bugherd.com data: *; frame-src *.twitter.com *.addthis.com *.google.com *.googleapis.com *.facebook.com player.vimeo.com www.youtube.com a.quora.com static.hotjar.com 1
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://www.mijnstadmijndorp.nl https://mijnstadmijndorp.nl/ https://openatlantis.mijnstadmijndorp.nl https://beeldbank.hellendoorn.nl 1
base-uri 'self'; default-src 'none'; child-src 'none'; connect-src 'self' https://widget.marktjagd.de https://spotlight.offerista.com https://*.marktjagd.de http://*.marktjagd.de *.marktjagd.de; font-src 'self' https://fonts.gstatic.com https://*.marktjagd.de http://*.marktjagd.de *.marktjagd.de https://widget.marktjagd.de https://spotlight.offerista.com; form-action 'self'; img-src 'self' https://* http://* * data:; object-src 'none'; script-src 'self' https://cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js http://cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js https://*.marktjagd.de http://*.marktjagd.de *.marktjagd.de https://widget.marktjagd.de https://spotlight.offerista.com 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com/css https://*.marktjagd.de http://*.marktjagd.de *.marktjagd.de https://widget.marktjagd.de https://spotlight.offerista.com 'unsafe-inline'; report-uri /csprep.php; 1
frame-ancestors https://*.brilianpreneur.com https://brilianpreneur.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' production.hull.gov.uk  www.activeintime.com activeintime.com analytics.google.com maps.google.com www.google.com www.google-analytics.com fonts.googleapis.com themes.googleusercontent.com www.gstatic.com fonts.gstatic.com b.scorecardresearch.com l.sharethis.com w.sharethis.com edge.sharethis.com system.spektrix.com svc.webspellchecker.net www.youtube.com www.youtube-nocookie.com e.issuu.com www.yumpu.com yumpu.com www.players.yumpu.com players.yumpu.com my.matterport.com; 1
default-src https: data: 'self' *.cloudflare.com www.trecuori.org/community/*; script-src https: data: 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com www.google-analytics.com; style-src https: data: 'self' 'unsafe-inline' 1
default-src 'self' data: 'unsafe-inline'; script-src 'self' data: 'unsafe-inline' https://cdn.jsdelivr.net https://*.cloudflare.com https://code.jquery.com https://*.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://*.google.com https://*.googletagmanager.com https://*.bbb.org https://jobs.ourcareerpages.com https://vid.ly https://*.apigroupinc.com; style-src 'self' data: 'unsafe-inline' https://cdn.jsdelivr.net https://*.cloudflare.com https://code.jquery.com https://*.gstatic.com https://*.googleapis.com https://jobs.ourcareerpages.com https://vid.ly https://*.apigroupinc.com; img-src 'self' data: https:; font-src 'self' data: https://*.gstatic.com; frame-src 'self' data: https://html5-player.libsyn.com/ https://vid.ly https://*.apigroupinc.com;connect-src 'self' data: https://*.gstatic.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.polyfill.io https://www.googletagmanager.com https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com cdn.plyr.io https://assets.app.smart-tribune.com https://cdnjs.cloudflare.com https://widget.trustpilot.com mdbootstrap.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' cdn.polyfill.io https://www.googletagmanager.com https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com cdn.plyr.io https://assets.app.smart-tribune.com https://cdnjs.cloudflare.com https://widget.trustpilot.com mdbootstrap.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://p.typekit.net fonts.googleapis.com https://cdn.plyr.io https://cdnjs.cloudflare.com https://use.typekit.net mdbootstrap.com use.fontawesome.com; style-src-attr 'self' 'unsafe-inline' https://p.typekit.net; frame-ancestors 'self'; report-uri http://www.mgefi.fr/report-uri/enforce 1
default-src 'none';base-uri 'self';connect-src 'self';form-action 'self';img-src 'self' 'unsafe-inline' data: www.google-analytics.com maps.googleapis.com maps.gstatic.com www.gravatar.com;media-src 'self';object-src 'none';script-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com maps.googleapis.com maps.google.com;style-src 'self' 'unsafe-inline';frame-src 'self' www.youtube.com youtube.com www.youtu.be youtu.be;style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com;font-src 'self' fonts.googleapis.com fonts.gstatic.com;manifest-src 'self' 1
default-src http: https:; img-src http: https: data: wogadobeanalytics.sc.omtrdc.net cm.everesttech.net; script-src http: https: 'unsafe-inline' 'unsafe-eval' assets.adobedtm.com www.adobetag.com www.googletagmanager.com www.google-analytics.com; style-src http: https: 'unsafe-inline'; frame-src http: https: dpm.demdex.net wogaa.demdex.net www.youtube.com www.googletagmanager.com www.google-analytics.com 1
frame-ancestors 'self' *.calbar.ca.gov *.force.com *.salesforce.com *.youtube.com *.youtu.be 1
frame-ancestors https://*.ivr-platform.com https://straticsnetworks.com ivr.straticsnetworks.com beta.straticsnetworks.com nothing2seehere.ivr-platform.com staging-app.straticsnetworks.com https://rallytree.com https://ivr.straticsnetworks.com login.ivr-platform.com login.ivr-platform.com/:1 https://nothing2seehere.ivr-platform.com http://nothing2seehere.ivr-platform.com app.straticsnetworks.com; 1
style-src https://toilet-guru.com https://*.googleapis.com 'unsafe-inline'; 1
default-src 'self';             connect-src 'self' https://ssl.google-analytics.com;             frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://embed.ted.com https://freestompboxes.api.oneall.com;             img-src 'self' https: data:;             media-src 'self' https:;             object-src 'none';             script-src 'self' https://www.google-analytics.com/ https://ssl.google-analytics.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/ https://freestompboxes.api.oneall.com/ 'unsafe-inline';             style-src 'self' 'unsafe-inline' https: 1
frame-ancestors www.samsung.com www.samsung.net www.webcollage.net www.webcollage.net www.abt.com agent.samsungsupport.com admin.samsungsupport.com nacyberadmin site-36720.preview.bcvp0rtal.com nacyberagent samsung.brightcovegallery.com retail.samsungusa.com:9003 aem.samsung.com qaweb.samsung.com aem-eu.samsung.com www.mobilevirtualtour.com samsung-tmo-stage.herokuapp.com 5g.samsungtmobile.com 1
base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-Fel+D+bGFcPDn4+Q2KLF0Q' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://data.corp.google.com https://dashboards.corp.google.com https://google-admin.corp.google.com/ 1
default-src 'none'; connect-src 'self' *.enable.com *.typekit.net *.hubspot.com *.google-analytics.com *.mktoresp.com *.mktoutil.com https://rs.fullstory.com https://www.facebook.com/tr/ https://stats.g.doubleclick.net/ *.salesloft.com https://api-widget.prodpad.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.enable.com use.typekit.net *.enable.com p.typekit.net https://munchkin.marketo.net/ www.google-analytics.com *.googletagmanager.com ssl.google-analytics.com *.twitter.com *.ads-twitter.com *.bing.com *.hs-growth-metrics.com *.hubspot.com js.hs-scripts.com *.usemessages.com *.hs-analytics.net maps.google.com maps.googleapis.com https://edge.fullstory.com https://www.fullstory.com https://www.googleadservices.com/ https://googleads.g.doubleclick.net/ https://tpc.googlesyndication.com/ https://connect.facebook.net/ *.hsleadflows.net *.licdn.com *.linkedin.com *.hs-banner.com https://widget.prodpad.com *.salesloft.com deal-track.com; style-src 'self' 'unsafe-inline' *.enable.com p.typekit.net use.typekit.net fonts.googleapis.com https://deal-track.com/; font-src 'self' use.typekit.net fonts.typekit.net fonts.gstatic.com; img-src 'self' data: *.enable.com www.google-analytics.com ssl.google-analytics.com p.typekit.net maps.gstatic.com *.hubspot.com csi.gstatic.com *.google.co.uk *.google.com *.googletagmanager.com *.doubleclick.net maps.googleapis.com maps.google.com *.bing.com *.twitter.com *.ads-twitter.com t.co *.hubspot.net *.deal-track.com https://googleads.g.doubleclick.net/ *.linkedin.com https://www.facebook.com/  https://p.adsymptotic.com *.ytimg.com *.hubspotusercontent20.net https://deal-track.com/; child-src https://www.facebook.com/ https://staticxx.facebook.com/; frame-src www.facebook.com www.youtube.com *.googlesyndication.com https://app.hubspot.com/; media-src *.hubspot.net; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: 1
frame-ancestors http://www.vistaprint.no https://www.vistaprint.no http://vistaprint.no https://vistaprint.no; default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.interco.io wss://endpoint.twilio.com wss://sdkgw.us1.twilio.com wss://*.twilio.com wss://*.firebaseio.com  https://cdn.firebase.com https://*.firebaseio.com; report-uri https://endpoint1.collection.us2.sumologic.com/receiver/v1/http/ZaVnC4dhaV1YajQYljNDyq_HZcQMFwMFIEBS9eHG3wV3FNhihD_eeXQkr_HnJMjSGly5t4VQFrfZujfZFoFY5wHaTC8TvTlxRcur_pISTvX0Dw96EIlb4Q== 1
script-src 'self' 'unsafe-inline' https://code.jquery.com/ https://cdnjs.cloudflare.com/ajax/libs/popper.js/ https://stackpath.bootstrapcdn.com/bootstrap/ https://d1f8f9xcsvx3ha.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/ https://www.googletagmanager.com/gtag/ https://www.google-analytics.com/; sandbox allow-top-navigation allow-scripts allow-same-origin allow-forms allow-downloads; 1
base-uri 'none'; default-src 'self'; style-src 'self' 'nonce-f773a895f8f2f9cf' static.sooqr.com cdn1.readspeaker.com fonts.googleapis.com f1-eu.readspeaker.com; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: pixel.sooqr.com 6006250.global.siteimproveanalytics.io szsurvey.siteimprove.com f1-eu.readspeaker.com www.toegankelijkheidsverklaring.nl; media-src 'self' app-eu.readspeaker.com rstts-eu.readspeaker.com media-eu.readspeaker.com; script-src 'self' 'nonce-f773a895f8f2f9cf' static.sooqr.com dynamic.sooqr.com cdn1.readspeaker.com f1-eu.readspeaker.com siteimproveanalytics.com; connect-src 'self' cognito-identity.eu-central-1.amazonaws.com firehose.eu-central-1.amazonaws.com www.google-analytics.com app-eu.readspeaker.com rstts-eu.readspeaker.com docreader.readspeaker.com; frame-src 'self' app-eu.readspeaker.com rstts-eu.readspeaker.com media-eu.readspeaker.com www.youtube.com omroepgelderland.bbvms.com www.google.com; frame-ancestors 'self'; 1
script-src 'unsafe-inline' https: https://www.google-analytics.com/analytics.js https://www.googletagmanager.com https://tagmanager.google.com https://www.youtube.com/iframe_api;object-src 'none' 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.google-analytics.com http://data.avizhe.ir/ https://landing.niceoffer.ir http://www.w3.org/ https://api.niceoffer.ir https://cdn.mouseflow.com/ https://cdn.yektanet.com/ https://www.googletagmanager.com/; img-src * 'self' data: https; 1
frame-ancestors 'self' https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.search.aol.com https://*.search.huffpost.com https://*.verizonmedia.com https://*.publishing.oath.com https://*.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=XE&lang=en-AE&device=desktop&yrid=9nh4e4tfulkuc&partner=; 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://static.criteo.net https://*.criteo.com https://wb.messengerpeople.com https://ln-rules.rewardstyle.com https://www.zenaps.com https://*.recaptcha.net https://*.hotjar.com https://*.akamaihd.net https://*.attn.tv https://isitetv.com https://*.translate.naver.net https://tr.snapchat.com https://www.shoplooks.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://services.postcodeanywhere.co.uk https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.googleapis.com https://translate.yandex.net https://*.hotjar.com wss://*.hotjar.com https://*.trustpilot.com https://*.pinterest.com https://*.bing.com https://*.doubleclick.net https://connect.facebook.net https://*.baidu.com https://*.parcellab.com https://ampcid.google.es; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://m.lookfantastic.es https://checkout.lookfantastic.es https://www.lookfantastic.es https://connect.facebook.net https://www.glossybox.at https://www.glossybox.ch https://www.glossybox.co.uk https://www.glossybox.com https://www.glossybox.de https://www.glossybox.fi https://www.glossybox.fr https://www.glossybox.ie https://www.glossybox.no https://www.glossybox.se https://www.glossybox.dk https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://google.com https://*.google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://static.criteo.net https://*.criteo.com https://ln-rules.rewardstyle.com https://*.akamaihd.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.microsofttranslator.com https://*.hotjar.com https://*.attn.tv https://*.trustpilot.com https://*.translate.naver.net https://*.bing.com https://*.doubleclick.net https://*.google-analytics.com https://static.ads-twitter.com https://*.baidu.com https://sc-static.net https://*.google.co.uk https://google.co.uk https://*.shoplooks.com https://slooks.top https://slooks.me https://lantern.roeyecdn.com https://lantern.roeye.com https://cdn.parcellab.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://www.shoplooks.com https://static.shoplooks.com https://cdn.parcellab.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.carolinasclassaction.com *.classactionsbrief.com *.facebook.com *.genomicslawreport.com *.gravatar.com *.rbh.com *.robinsonbradshaw.com *.sharethis.com *.theprivacyreport.com *.trianglefunds.com *.w.org *.wordpress.com *.wp.com carolinasclassaction.com connect.facebook.net classactionsbrief.com connect.facebook.net fonts.googleapis.com fonts.gstatic.com genomicslawreport.com gmpg.org maxcdn.bootstrapcdn.com *.sharethis.mgr.consensu.org rbh.com robinsonbradshaw.com theprivacyreport.com trianglefunds.com wordpress.com www.google-analytics.com www.googletagmanager.com yoast.com www.google.com www.gstatic.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://www.didierfle.fr; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://fonts.googleapis.com https://www.didierfle.fr; script-src 'unsafe-eval' 'self' 'unsafe-inline' https://assets.pinterest.com https://maps.googleapis.com https://connect.facebook.net https://www.google-analytics.com https://www.googletagmanager.com https://www.didierfle.fr;img-src data: 'self' https://log.pinterest.com https://www.google-analytics.com https://www.images.hachette-livre.fr https://maps.gstatic.com https://maps.googleapis.com https://www.google.com https://secure.gravatar.com https://www.didierfle.fr; frame-ancestors 'self'; frame-src 'self' https://www.didierfle.fr; upgrade-insecure-requests; block-all-mixed-content; base-uri 'self'; form-action 'self' https://wwww.didierfle.fr; connect-src 'self' https://www.google-analytics.com ; object-src 'self'  1
default-src: 'self';             font-src:   'self' data: fonts.gstatic.com;             script-src: 'self'       fonts.google.com;             style-src:  'self'       fonts.googleapis.com;          1
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=articles&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=8297612a-3aca-440c-934e-4f3b5b200d50 1
default-src 'self'; img-src 'self' https://blog.taxdoo.com https://*.contentful.com https://*.typeform.com http://images.ctfassets.net/ https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google.com https://www.google-analytics.com https://www.google.de https://www.facebook.com https://connect.facebook.net https://maps.googleapis.com; connect-src 'self'  https://taxdoo-blog.ghost.io https://stats.g.doubleclick.net/ https://cdn.contentful.com https://*.contentful.com https://www.google-analytics.com https://*.api.osano.com https://fonts.googleapis.com  https://*.herokuapp.com https://*.launchdarkly.com https://*.segment.io https://*.nr-data.net https://connect.facebook.net https://facebook.com https://*.facebook.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com https://*.contentful.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.facebook.com https://www.google.com https://calendly.com https://*.typeform.com https://connect.facebook.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://assets.calendly.com https://www.googletagmanager.com/ https://www.google.com https://www.gstatic.com https://maps.googleapis.com/ https://cmp.osano.com/ 'sha256-kVMRRt6mXg6Lk8An7mwKAwHn4S6GBG9wrUOm4++PVHI='; script-src-elem 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com/ https://assets.calendly.com https://www.google-analytics.com https://connect.facebook.net https://cmp.osano.com https://maps.googleapis.com 1
default-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.fonts.net code.jquery.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.umantis.com; script-src 'self' www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net maps.googleapis.com maps.gstatic.com *.fonts.net code.jquery.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.umantis.com cookie-script.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.fonts.net *.umantis.com; object-src 'self'; img-src 'self' data: www.google-analytics.com stats.g.doubleclick.net https://stats.g.doubleclick.net maps.googleapis.com maps.gstatic.com; frame-src *.youtube.com *.youtube-nocookie.com *.vimeo.com *.euroland.com *.umantis.com; 1
font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com/; script-src 'self' 'unsafe-inline' blob: 'unsafe-eval' https://code.jquery.com https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://pagead2.googlesyndication.com/ https://ajax.googleapis.com/ https://platform.twitter.com/ https://ssl.google-analytics.com/; style-src 'self' https://www.nccdp.org https://nccdp.org 'unsafe-inline' https://fonts.googleapis.com https://code.jquery.com https://maxcdn.bootstrapcdn.com/ https://stackpath.bootstrapcdn.com/ https://www.gstatic.com/; frame-ancestors 'self' 1
upgrade-insecure-requests;frame-ancestors 'self' 1
default-src https: 'unsafe-eval' 'unsafe-inline' data: ; base-uri 'none'; form-action 'self'; img-src https: data: blob: https://static.etracker.com/; frame-ancestors 'self' https://use.fontawesome.com/ https://cdn.jsdelivr.net www.youtube-nocookie.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://use.fontawesome.com/ https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://cdn.jsdelivr.net/fontawesome/4.7.0/css/font-awesome.min.css https://fonts.googleapis.com/css https://cdnjs.cloudflare.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: www.google-analytics.com www.googletagmanager.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://cdnjs.cloudflare.com/ajax/libs/select2/ https://cdn.rawgit.com/ckeditor/ckeditor-dev/ https://cdn.rawgit.com/w8tcha/CKEditor-CodeMirror-Plugin/ platform.twitter.com platform.twitter.co syndication.twitter.com cdn.syndication.twimg.com https://cdn.rawgit.com/ractoon/jQuery-Text-Counter/ https://js-agent.newrelic.com/nr-1071.min.js bam.nr-data.net tagmanager.google.com https://www.recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://cdnjs.cloudflare.com/ajax/libs/select2/ platform.twitter.com tagmanager.google.com; img-src 'self' data: www.google-analytics.com https://cdn.rawgit.com/ckeditor/ckeditor-dev/ https://raw.githubusercontent.com/ckeditor/ckeditor-dev/ www.googletagmanager.com www.bureauveritas.com syndication.twitter.com platform.twitter.com *.twimg.com ssl.gstatic.com www.gstatic.com https://stats.g.doubleclick.net; media-src 'self'; frame-src 'self' www.youtube.com tools.eurolandir.com cws.huginonline.com www.googletagmanager.com platform.twitter.com syndication.twitter.com player.youku.com https://www.google.com; child-src 'self' blob:; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com; connect-src 'self' www.google-analytics.com https://tools.eurolandir.com/tools/pricefeed/RequestStockDataBundleXML.aspx; report-uri https://csp-report-uri.bureauveritas.com 1
default-src 'self' *.cloudconformity.com *.googleapis.com *.gstatic.com *.intercom.io https://connect.facebook.net; img-src *; frame-src https://www.google.com https://bid.g.doubleclick.net *.intercom.com *.hubspot.com https://connect.facebook.net https://www.youtube.com/ https://airtable.com/ https://bugcrowd.com/; font-src 'self' *.googleapis.com *.gstatic.com *.bootstrapcdn.com https://js.intercomcdn.com data: https://connect.facebook.net https://fonts.gstatic.com https://www.google-analytics.com; script-src 'self' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://ssl.google-analytics.com https://www.google-analytics.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net *.hubspot.com https://connect.facebook.net *.hs-scripts.com *.usemessages.com *.hscollectedforms.net *.hs-analytics.net https://snap.licdn.com https://sjs.bizographics.com *.linkedin.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://syndication.twitter.com/ https://js.hsadspixel.net/fb.js https://cse.google.com/ https://cloudconformity.breezy.hr https://bugcrowd.com/ https://assets.bugcrowdusercontent.com/ https://customer.cludo.com 'sha256-NQfc27RODJMCUmaqjMwdfn4W0gAOlXht1ZZm3Yldg8E=' 'sha256-L7viC3kUpXu9uCOi97VqCR2bLlMwSQlmLmSuuQ93ngU=' 'sha256-8AD5icVKiYWC8MscX0D+ZcmhbLFkB1ppsaHohjXoGtc=' 'sha256-fHmFdRcCNB+gsirXg9Acp9GFy1Mlw0v46beRAUSmnXk=' 'sha256-aDJ5Bql+RjPsQvM2jhkH/Zsvfio3OzAB4a0aMxemTeY=' 'sha256-fxA853EpxmMJlFyXruhm6jg+xE3OgVBEL1dHmqFmVFM=' 'sha256-XTnBRYcOj/jiQ82O0AEnrJquNPKboirtXvtqrDMpGVQ=' 'sha256-C4M6S22ORpYw9XmqhBCq9aWDB43OIZWXcS8K6VOoxO4=' 'sha256-gYU8JK5hG+QZk08yGiH7C8DUMC7uxGaNvRSk3C8Rb84='; style-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://fonts.googleapis.com *.bootstrapcdn.com https://tagmanager.google.com; connect-src 'self' https://js.intercomcdn.com/ https://www.google.com *.cloudconformity.com *.hubspot.com *.hotjar.com *.intercom.io *.intercomcdn.com https://uploads.intercomusercontent.com https://app.getsentry.com https://www.facebook.com/tr/ https://connect.facebook.net https://www.google-analytics.com/ wss://nexus-websocket-a.intercom.io https://api.hubapi.com https://cloudconformity.breezy.hr *.cludo.com; child-src https://share.intercom.io https://intercom-sheets.com https://www.youtube.com https://www.facebook.com/ https://staticxx.facebook.com/ https://connect.facebook.net; media-src https://js.intercomcdn.com https://connect.facebook.net; 1
frame-ancestors 'self'; default-src 'self' https://apps.catholic.net.au; frame-src 'self' https://*.youtube.com https://*.google.com https://*.google.com.au https://*.facebook.com; media-src 'self' data: blob: https://apps.catholic.net.au https://*.youtube.com; font-src 'self' https://fonts.gstatic.com https://*.googleapis.com data:; img-src data: 'self' https://*.w.org http://*.gravatar.com https://*.gravatar.com https://apps.catholic.net.au https://*.googleapis.com https://*.google.com https://*.google.com.au https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.facebook.com https://*.facebook.net https://*.ytimg.com https://*.ggpht.com https://*.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.googleapis.com https://*.google.com https://*.google.com.au https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://cdnjs.cloudflare.com https://*.youtube.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.amazonaws.com https://*.list-manage.com https://*.mailchimp.com https://*.wistia.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://hello.myfonts.net https://*.youtube.com https://*.googleapis.com https://*.google.com https://*.google.com.au https://*.gstatic.com https://*.list-manage.com https://*.mailchimp.com; object-src 'self'; base-uri 'self'; form-action 'self' https://*.facebook.com; connect-src 'self' https://apps.catholic.net.au https://*.google-analytics.com https://*.doubleclick.net https://yoast.com https://*.facebook.com; upgrade-insecure-requests 1
frame-ancestors www.jivochat.es https://app.jivosite.com https://app3alpha.jivosite.com https://app3beta.jivosite.com; child-src https://mc.yandex.ru 1
child-src 'self' https://www.googletagmanager.com https://*.liveperson.net https://cdn.appdynamics.com https://*.lpsnmedia.net https://www.facebook.com https://connect.facebook.net https://*.google.com https://widget.trustpilot.com https://*.doubleclick.net https://www.youtube.com https://wb.messengerpeople.com https://static.criteo.net https://*.criteo.com https://tpc.googlesyndication.com https://ct.pinterest.com https://hal9000.redintelligence.net https://*.recaptcha.net https://*.zenaps.com https://*.hotjar.com https://*.akamaihd.net https://*.translate.naver.net https://ln-rules.rewardstyle.com https://tr.snapchat.com; connect-src 'self' https://*.thcdn.com https://*.ingest.sentry.io https://*.pingdom.net https://*.doubleclick.net https://*.google-analytics.com https://capture.trackjs.com https://fp.zenaps.com https://www.facebook.com https://*.google.com https://*.thehut.net https://ct.pinterest.com https://*.google.it https://*.akamaihd.net https://*.sciencebehindecommerce.com https://*.hotjar.com wss://*.hotjar.com https://*.googleapis.com https://*.trustpilot.com https://*.pinterest.com https://*.doubleclick.net https://*.bing.com https://connect.facebook.net https://*.baidu.com https://*.parcellab.com; font-src 'self' data: https://*.thcdn.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://fonts.googleapis.com https://static.thgcdn.cn; form-action 'self' https://www.facebook.com https://www.myprotein.it https://m.myprotein.it https://checkout.myprotein.it https://connect.facebook.net https://tr.snapchat.com; img-src 'self' data: https://*.thcdn.com https://col.eum-appdynamics.com https://usage.trackjs.com https://*.lpsnmedia.net https://*.doubleclick.net https://www.google-analytics.com https://*.google.com https://cx.atdmt.com https://www.zenaps.com https:; media-src 'self' https://*.thcdn.com https://*.lpsnmedia.net https://static.thgcdn.cn; object-src 'self' https://*.thcdn.com https://www.youtube.com; report-uri https://csp.thehut.net/cspReport.txt; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.thcdn.com https://*.thehut.net https://rum-static.pingdom.net https://*.liveperson.net https://col.eum-appdynamics.com https://*.lpsnmedia.net https://cdn.appdynamics.com https://*.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://fp.zenaps.com https://www.youtube.com https://www.google-analytics.com https://*.google.com https://google.com https://connect.facebook.net https://bat.bing.com https://widget.trustpilot.com https://s.ytimg.com https://www.googletagservices.com https://*.googleapis.com https://www.facebook.com https://www.googleadservices.com https://*.gstatic.cn https://*.gstatic.com https://www.dwin1.com https://cdn.trackjs.com https://seal.digicert.com https://*.criteo.com https://static.criteo.net https://s.pinimg.com https://tpc.googlesyndication.com https://remote.captcha.com https://platform.twitter.com https://*.akamaihd.net https://*.recaptcha.net https://*.sciencebehindecommerce.com https://*.hotjar.com https://*.microsofttranslator.com https://*.trustpilot.com https://*.translate.naver.net https://*.doubleclick.net https://ln-rules.rewardstyle.com https://*.google-analytics.com https://twitter.com https://*.baidu.com https://sc-static.net https://www.google.com https://*.google.co.uk https://google.co.uk https://static.ads-twitter.com https://analytics.twitter.com https://static.thgcdn.cn; style-src 'self' 'unsafe-inline' https://*.thcdn.com https://*.google.com https://*.googleapis.com https://fp.zenaps.com https://cdnjs.cloudflare.com https://*.googleapis.com https://*.translate.naver.net https://*.microsofttranslator.com https://cdn.parcellab.com https://static.thgcdn.cn; upgrade-insecure-requests; report-to report-endpoint 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://theiotmagazine.com https://*.theiotmagazine.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src https:; frame-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' 'self'; style-src https: data: 'unsafe-inline'; object-src *.butlins.com *.azurewebsites.net; frame-ancestors 'self' *.butlins.com localhost; img-src https: data:; upgrade-insecure-requests; base-uri 'self'; 1
: upgrade-insecure-requests 1
default-src *.enaturelive.com; script-src 'unsafe-inline' *.enaturelive.com *.gstatic.com; style-src 'unsafe-inline' *.enaturelive.com fonts.googleapis.com; img-src *.enaturelive.com data:; font-src *.enaturelive.com *.gstatic.com fonts.googleapis.com; 1
default-src 'self' data:; script-src 'self' 'nonce-7583a7eef1e430ef75620c3681a2200fa039dab8bb2164b1'; style-src 'self' 'unsafe-inline' 1
default-src 'none'; script-src 'unsafe-inline' 'sha256-mJIL+RoRa5Km2B1U1jTYSODyv7Zbwh1g6/iuj4b7txc=' 'sha256-BP7ZCLptRn7DIRiqUEmMpUet8MB2Mcp2rTEyKQg12mA=' 'sha256-IZ/+UtzU0zT5zsOBI2MXO0E6Ejco1c5bpb6v7bdFwuo=' 'self'; object-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://www.google-analytics.com https://stats.g.doubleclick.net https://banno.com https://*.banno.com https://*.googleusercontent.com https://banno-assets-production.s3.amazonaws.com https://banno-sentry-production.s3.amazonaws.com; media-src 'none'; frame-src 'self' https://*.mybankhq.com https://*.billpaysite.com https://*.banno.com https://geezeo-tiles.s3.amazonaws.com; child-src 'self'; font-src https: data:; frame-ancestors 'none'; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://getsentry-production.banno.com wss://tbonlinebanking.com; manifest-src 'self'; worker-src 'self'; report-uri https://getsentry.banno-tools.com/api/2/security/?sentry_key=e7dd91cbbd044257977d999a9c5709f5; 1
frame-src 'self' https://www.google.com; default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com; img-src 'self' https://www.google-analytics.com; style-src 'self' https://stackpath.bootstrapcdn.com; font-src 'self' data: https://maxcdn.bootstrapcdn.com; form-action 'self'; upgrade-insecure-requests; 1
default-src 'self' https://cdn.jsdelivr.net https://www.google.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net cdnjs.cloudflare.com https://tagmanager.google.com https://fonts.googleapis.com https://www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.cloudflare.com/ cdnjs.cloudflare.com mc.yandex.ru mc.yandex.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com; font-src 'self' cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.google.com; img-src 'self' data: api.qrserver.com mc.yandex.ru mc.yandex.com https://cdn.jsdelivr.net https://ssl.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com; connect-src 'self' mc.yandex.ru https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net https://api.coindesk.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://platform.twitter.com http://connect.facebook.net http://www.google-analytics.com https://ssl.google-analytics.com/ https://cdn.syndication.twimg.com; 1
frame-ancestors wgfilm.nationbuilder.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.googletagmanager.com jira.millenniumweb.com *.consumercare.net www.google-analytics.com assets.juicer.io maps.googleapis.com www.google.com www.gstatic.com *.formstack.com *.littlebites.com *.cloudflare.com *.rawgit.com *.pricespider.com woobox.com *.googleapis.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com assets.juicer.io *.formstack.com *.littlebites.com *.cloudflare.com *.pricespider.com; img-src 'self' data: www.google-analytics.com stats.g.doubleclick.net www.google.com *.cdninstagram.com *.juicer.io maps.gstatic.com maps.googleapis.com cscoreproweustor.blob.core.windows.net *.formstack.com *.pinimg.com *.xx.fbcdn.net *.imgur.com *.littlebites.com *.rawgit.com *.githubusercontent.com *.pricespider.com; frame-src 'self' www.youtube.com www.google.com *.icontact.com *.littlebites.com woobox.com; font-src 'self' maxcdn.bootstrapcdn.com static.juicer.io fonts.gstatic.com data: *.formstack.com; connect-src 'self' www.juicer.io stats.g.doubleclick.net www.google-analytics.com *.channelsight.com *.facebook.com *.mapbox.com; report-uri /report-csp-violation; upgrade-insecure-requests, default-src 'self' 'self' data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *; img-src 'self' blob: data: * 1
default-src 'self'; connect-src *; font-src *; frame-src *; img-src *; object-src *; frame-ancestors 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 1
default-src *; script-src 'unsafe-inline' *.vaush.gg https://vaush.gg *.fontawesome.com https://apis.google.com www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://ssl.google-analytics.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://*.gstatic.com; object-src 'none'; style-src 'self' data: 'unsafe-inline' *.vaush.gg https://vaush.gg *.fontawesome.com fonts.googleapis.com; img-src 'self' data: *.vaush.gg https://vaush.gg *.whiteleaf.xyz *.amazonaws.com *.ytimg.com https://www.google-analytics.com https://static-cdn.jtvnw.net https://ssl.google-analytics.com https://ting.7eer.net https://adn-ssl.impactradius.com https://ssl.gstatic.com www.googletagmanager.com; media-src 'self'; frame-src 'self' *.vaush.gg https://vaush.gg *.whiteleaf.xyz *.amazonaws.com *.mixer.com *.picarto.tv *.streamlabs.com https://www.google.com *.youtube.com *.twitch.tv googleads.g.doubleclick.net; font-src *.vaush.gg https://vaush.gg *.fontawesome.com fonts.googleapis.com fonts.gstatic.com; connect-src 'self' *.vaush.gg https://www.google-analytics.com https://vaush.gg wss://vaush.gg wss://*.vaush.gg 1
default-src 'self' *.instagram.com *.twitter.com *.google.com *.google.fr *.youtube.com *.addtoany.com *.douane *.douane.gouv.fr botify-chat-douane-pro.apps.innershift.sodigital.io *.fls.doubleclick.net; script-src 'self' www.googletagmanager.com cdn.jotfor.ms form.jotform.com/jsform/ static.addtoany.com/menu/ botify-chat-douane-pro.apps.innershift.sodigital.io widgets.flickr.com embedr.flickr.com 'sha256-m5/MdH9UDuGh4NYRNojfYeGK0kh+8g7XLqu+kJFLKe4=' 'sha256-SZ9HUHvc4HjF0RnizBcEjtSRucklPR+EyCJmv82yDvE=' 'sha256-aCvRIQ79zbEtvxwsqDbuavE4Sa35jGPLpcm4Y1yIUA0=' 'sha256-cCETlTnFe4oVc3iBrpHJ+mMfiW0J6VfUSQiZOA22/6o=' 'sha256-e41hangRwS/GROqGdnMLg/+eiC1CBtiRDsmDdBV0RUM=' 'sha256-8GOuxY1n6x7nutr1sn43R3wbBFvqziONnQzIvEXAsRU=' 'sha256-qOjyyc7YXOy1u5qyJF9ck+xogVlGHmBhwhYVB0com9A=' 'sha256-d/5JgEXtWfNaSDSMOALKykJIRHvej0L+DlSnB5/a8rs=' www.google-analytics.com tag.aticdn.net 'sha256-mgcPTyg0OxxTSWtBRdjsuDqBUmW8LBC0DRAJy2xxwcs=' 'sha256-bmAqrDKXlWYvee7wrmVHmfzKcFytigou+jhMOYvxw9w=' 'sha256-j6M2xA9I+y0hcxGQvpuoGQ1XPpUcWN/3ORbD6BLAVow=' 'sha256-U9Limcj++LS83qwNFqxme6uPFdXdnGH6Gi8alLG4JiE=' 'sha256-TtWZJYo9CsnFDflsnKpvMQupYp0SWPUJhncXRWhqHgY=' 'sha256-100fHJspvS0ZijqxsqS4hurifOLdUxpd2tMfSBn1XH0='; object-src 'self'; style-src 'self' 'unsafe-inline' *.twitter.com *.jotfor.ms *.jotfor.com botify-chat-douane-pro.apps.innershift.sodigital.io; img-src 'self' *.fbcdn.net *.cdninstagram.com syndication.twitter.com *.twimg.com platform.twitter.com *.jotform.com *.jotfor.ms *.staticflickr.com data: *.google-analytics.com *.xiti.com botify-chat-douane-pro.apps.innershift.sodigital.io fonts.gstatic.com; media-src 'self' *.cdninstagram.com *.twimg.com; frame-ancestors *.douane.gouv.fr *.douane ec.europa.eu cdaweb:7007 10.119.3.5; font-src 'self'; connect-src  'self' api.flickr.com *.instagram.com *.flickr.com botify-chat-douane-pro.apps.innershift.sodigital.io wss://botify-chat-douane-pro.apps.innershift.sodigital.io www.google-analytics.com ; report-uri /report-csp-violation 1
style-src 'unsafe-inline' 'self' http: https: ; 1
default-src 'none'; script-src 'self' 'unsafe-inline' cdnjs.cloudflare.com static.cloudflareinsights.com ajax.cloudflare.com ajax.googleapis.com www.google.com www.googletagmanager.com www.gstatic.com www.youtube.com s.ytimg.com cdn.datatables.net code.jquery.com maxcdn.bootstrapcdn.com friconix.com/cdn/; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com; img-src 'self' fonts.gstatic.com stats.g.doubleclick.net eu.ui-avatars.com/api/ crafatar.com cdn.datatables.net blob: data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com cdn.datatables.net maxcdn.bootstrapcdn.com; frame-src 'self' www.google.com calendar.google.com www.youtube.com clips.twitch.tv; frame-ancestors 'self'; connect-src 'self'; base-uri 'none'; form-action 'self'; require-trusted-types-for 'style'; upgrade-insecure-requests; block-all-mixed-content 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https: data: filesystem: https://cdn.shortpixel.ai/assets/js/snip-2.1.min.js https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js https://connect.facebook.net/en_US/sdk/xfbml.customerchat.js https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js https://static.cloudflareinsights.com/beacon.min.js https://use.fontawesome.com/releases/v5.0.9/js/all.js https://www.google.com/jsapi https://www.gstatic.com/charts/49/loader.js; style-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' filesystem: https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://www.gstatic.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdn.shortpixel.ai https://chart.googleapis.com https://secure.gravatar.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' data: filesystem: wss://ws.coincap.io; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: filesystem: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; media-src 'self'; report-uri filesystem: https://5fe24819937fe147894b780e.endpoint.csper.io/; object-src 'none'; frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: filesystem: https://web.facebook.com https://www.facebook.com; manifest-src 'self'; base-uri 'self' 1
img-src 'self' https: data:; font-src 'self' data: https://fonts.gstatic.com; form-action 'self' 1
upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://www.cccnetbank.com; 1
frame-ancestors 'self' https://*.jumpseller.com https://app.jivosite.com 1
default-src 'none';manifest-src 'self';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: source.unsplash.com images.unsplash.com;font-src 'self';connect-src 'self';media-src 'self' 1
frame-ancestors www.briochepasquier-pro.com briochepasquier-pro.com.pasquier-2.test.oceanet.eu 1
default-src https: wss: 'unsafe-eval' 'unsafe-inline' data: 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vallentunakommun.liveagent.se https://vallentuna.mynewsdesk.com https://webapp.vallentuna.se https://vallentuna.liveagent.se https://plus.browsealoud.com https://www.browsealoud.com https://*.speechstream.net https://translate.google.com https://translate.googleapis.com https://fonts.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://apis.google.com https://use.fontawesome.com https://fonts.gstatic.com https://oppnadata.skl.se; script-src-elem * 'self' 'unsafe-inline' https://vallentunakommun.liveagent.se https://vallentuna.mynewsdesk.com https://vallentuna.liveagent.se https://plus.browsealoud.com https://www.browsealoud.com https://*.speechstream.net https://translate.google.com https://translate.googleapis.com https://fonts.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://apis.google.com https://use.fontawesome.com https://fonts.gstatic.com https://oppnadata.skl.se; script-src-attr 'self' 'unsafe-inline' 'unsafe-eval' https://vallentunakommun.liveagent.se https://vallentuna.mynewsdesk.com https://vallentuna.liveagent.se https://plus.browsealoud.com https://www.browsealoud.com https://*.speechstream.net https://translate.google.com https://translate.googleapis.com https://fonts.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://apis.google.com https://use.fontawesome.com https://fonts.gstatic.com https://oppnadata.skl.se; style-src 'self' 'unsafe-inline' https://translate.google.com https://translate.googleapis.com https://fonts.googleapis.com https://plus.browsealoud.com https://use.fontawesome.com; style-src-elem * 'self' 'unsafe-inline' https://fonts.googleapis.com https://plus.browsealoud.com https://use.fontawesome.com; style-src-attr * 'self' 'unsafe-inline' https://fonts.googleapis.com https://plus.browsealoud.com https://use.fontawesome.com; img-src * 'self' data: https://vallentunakommun.liveagent.se https://images.vallentuna.se https://vallentuna.liveagent.se https://browsealoud-webservices-8.texthelp.com https://plus.browsealoud.com https://www.google-analytics.com; font-src * 'self' data: https://fonts.googleapis.com; connect-src * 'self'; media-src * 'self' blob: filesystem:; object-src 'self'; prefetch-src 'self'; child-src 'self' https://*.googleapis.com https://www.googletagmanager.com; frame-src 'self' https://vallentunakommun.liveagent.se https://vallentuna.mynewsdesk.com https://externkarta.vallentuna.se https://vallentuna.liveagent.se https://www.youtube.com https://images.vallentuna.se https://*.siteseeker.se https://dreambroker.com; worker-src 'self'; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; manifest-src * 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://flow-e.com https://*.flow-e.com wss://*.flow-e.com:* https://*.kanbanize.com https://*.googleapis.com https://cdn.jsdelivr.net https://*.braintreegateway.com https://*.unsplash.com https://www.googletagmanager.com https://tagmanager.google.com https://*.youtube.com https://*.intercom.io https://*.intercomcdn.com https://www.google-analytics.com https://optimize.google.com https://js.hs-scripts.com/2999884.js https://js.usemessages.com/conversations-embed.js https://js.hsleadflows.net/leadflows.js https://js.hs-analytics.net https://*.hubspot.com https://fast.appcues.com wss://api.appcues.net https://my.appcues.com https://api.appcues.net https://flow-e.typeform.com https://cdn.wootric.com chrome://pdf-viewer/ resource://pdf.js data: blob:; img-src * data: blob:; font-src 'self' https://fonts.gstatic.com data: 1
default-src *; img-src * data:; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval' 1
frame-ancestors 'self'; report-uri https://concordia.report-uri.com/r/d/csp/enforce; 1
connect-src m.addthis.com  'self' stats.g.doubleclick.net www.rpsl.org.uk s7.addthis.com; font-src 'self' maxcdn.bootstrapcdn.com data:; frame-src s7.addthis.com platform.twitter.com 'self' apis.google.com www.facebook.com www.google.com www.youtube.com members.rpsl.org.uk; img-src 'self' data: assets.pinterest.com ssl.google-analytics.com stats.g.doubleclick.net www.gravatar.com www.gstatic.com www.rpsl.org.uk syndication.twitter.com www.facebook.com www.google-analytics.com; script-src-elem 'self' 'unsafe-inline' m.addthis.com s7.addthis.com z.moatads.com apis.google.com assets.pinterest.com platform.linkedin.com platform.twitter.com log.pinterest.com ssl.google-analytics.com stats.g.doubleclick.net ajax.googleapis.com data:; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com; media-src 'self' ajax.googleapis.com; form-action 'self' members.rpsl.org.uk; frame-ancestors 'self'; script-src-attr 'unsafe-inline'; script-src 'unsafe-eval' 'self' 'unsafe-inline' apis.google.com assets.pinterest.com log.pinterest.com m.addthis.com platform.linkedin.com platform.twitter.com s7.addthis.com stats.g.doubleclick.net z.moatads.com connect.facebook.net ssl.google-analytics.com ; child-src 'self' members.rpsl.org.uk platform.twitter.com s7.addthis.com www.youtube.com; default-src 'self' 'unsafe-eval' 'unsafe-inline' apis.google.com assets.pinterest.com data: log.pinterest.com m.addthis.com platform.linkedin.com platform.twitter.com s7.addthis.com self ssl.google-analytics.com stats.g.doubleclick.net syndication.twitter.com www.facebook.com www.google-analytics.com www.gravatar.com www.rpsl.org.uk www.youtube.com z.moatads.com; object-src 'self'; style-src 'self' 'unsafe-eval' 'unsafe-inline' maxcdn.bootstrapcdn.com ; report-uri https://aspensoftware.report-uri.com/r/d/csp/enforce 1
default-src 'self' https://www.gstatic.com https://*.intercom.io https://*.onlim.com; font-src 'self' data: http://fonts.googleapis.com https://fonts.googleapis.com http://fonts.gstatic.com https://fonts.gstatic.com https://*.onlim.com; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://fonts.googleapis.com https://*.google.com https://tagmanager.google.com https://*.onlim.com; child-src 'self' http://www.youtube.com https://www.youtube.com https://www.gstatic.com https://*.google.com https://www.googletagmanager.com https://*.onlim.com https://saubermacher-slovenija-d-o-o.jobbase.io https://*.apa.at https://*.eventmaker.at; img-src 'self' data: *; media-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' http://www.googleadservices.com http://www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com http://*.googleapis.com https://*.googleapis.com http://*.google.com https://*.google.com http://maps.gstatic.com https://maps.gstatic.com https://www.gstatic.com https://*.intercom.io https://*.intercomcdn.com https://*.onlim.com https://*.b-ite.com http://*.b-ite.com https://*.youtube.com https://*.ytimg.com https://polyfill.io https://saubermacher-slovenija-d-o-o.jobbase.io https://saubermacher.us7.list-manage.com; connect-src 'self' * 1
default-src 'self' files.aljasoor.ae; font-src 'self' files.aljasoor.ae fonts.gstatic.com data:; style-src 'self' files.aljasoor.ae fonts.googleapis.com; media-src 'self' files.aljasoor.ae youtube.com youtu.be www.youtube.com blob: media-files.edgegroup.ae; img-src 'self' files.aljasoor.ae jobsadmin-files.edgegroup.ae media-files.edgegroup.ae img.youtube.com pbs.twimg.com; child-src 'self' files.aljasoor.ae youtube.com youtu.be www.youtube.com www.google.com; script-src 'self' files.aljasoor.ae www.google.com www.gstatic.com 1
default-src *; img-src * data:; script-src * 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline' 1
object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none' 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tpc.googlesyndication.com https://www.googletagservices.com https://adservice.google.co.nz https://partner.googleadservices.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://static.hotjar.com https://connect.facebook.net https://script.hotjar.com https://vars.hotjar.com https://apis.google.com https://px.ads.linkedin.com https://www.googleadservices.com https://www.google.com.au https://google.com.au https://www.google.co.nz https://google.co.nz https://tagmanager.google.com https://adservice.google.com https://pagead2.googlesyndication.com https://9750987.fls.doubleclick.net https://briskpelican.io https://widget.trustpilot.com https://api.segment.io https://alb.reddit.com https://load.sheetsu.com https://cdn.segment.com https://snap.licdn.com https://bat.bing.com https://www.redditstatic.com https://widget.intercom.io https://analytics.investnow.co.nz https://canalytics.investnow.co.nz https://js.intercomcdn.com https://store.tms-plugins.com https://js.createsend1.com https://code.jquery.com https://cdn.paddle.com https://ajax.googleapis.com https://platform.twitter.com https://player.vimeo.com https://www.youtube.com https://cdn.syndication.twimg.com; style-src 'self' https://platform.twitter.com https://tagmanager.google.com https://store.tms-plugins.com https://code.jquery.com https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' data: https://cdn.investnow.co.nz https://www.facebook.com https://updates.themepunch.tools https://pagead2.googlesyndication.com https://platform.twitter.com https://syndication.twitter.com https://updates.themepunch.tool https://code.jquery.com https://js.intercomcdn.com https://downloads.intercomcdn.com https://analytics.investnow.co.nz https://canalytics.investnow.co.nz https://img.createsend1.com https://www.googletagmanager.com https://googletagmanager.com https://secure.gravatar.com https://alb.reddit.com https://www.google-analytics.com https://bat.bing.com https://www.google.com https://www.google.co.uk https://www.google.com.au https://google.com.au https://www.google.co.nz https://google.co.nz https://ssl.gstatic.com https://www.gstatic.com https://p.adsymptotic.com https://px.ads.linkedin.com; font-src 'self' data: https://fonts.gstatic.com https://js.intercomcdn.com; connect-src 'self' https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://sheetsu.com https://yoast.com https://in.hotjar.com wss://ws1.hotjar.com https://vc.hotjar.io https://www.google-analytics.com wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://api.segment.io https://js.intercomcdn.com https://widget.intercom.io https://briskpelican.io https://analytics.google.com; frame-src 'self' https://tpc.googlesyndication.com https://platform.twitter.com https://youtube.com https://9750987.fls.doubleclick.net https://googleads.g.doubleclick.net https://docs.google.com https://widget.trustpilot.com https://vars.hotjar.com https://www.youtube.com https://www.google.com https://www.facebook.com https://www.google.com.au https://google.com.au https://www.google.co.nz https://google.co.nz; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.createsend.com https://createsend.com https://go.pardot.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' data: https://maps.googleapis.com/ https://maps.gstatic.com/; font-src 'self' https://fonts.gstatic.com; child-src 'self' https://geoviewer.windinternet.nl; media-src 'self'; 1
frame-ancestors 'self' https://*.messenger.com https://messenger.com; 1
default-src https://www.irisfmg.it https://www.irisfmg.com https://www.irisfmg.fr https://www.irisfmg.de https://www.irisfmg.es; script-src 'strict-dynamic' 'nonce-73263e3a524c54615f4b7a2b6f' 'unsafe-inline' 'unsafe-eval' http: https: ; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ https://fonts.googleapis.com https://ajax.googleapis.com; img-src 'self' data: https://www.linkedin.com https://px.ads.linkedin.com/ https://i.ytimg.com/ https://maps.googleapis.com https://maps.gstatic.com https://ajax.googleapis.com https://www.google-analytics.com https://www.facebook.com https://www.google.com https://www.google.it https://stats.g.doubleclick.net ; media-src 'self'; child-src 'self' https://www.facebook.com/ https://www.youtube.com https://connect.facebook.com https://connect.facebook.net; font-src 'self' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com; connect-src 'self' https://stats.g.doubleclick.net/ https://www.google-analytics.com/ https://www.facebook.com; object-src 'self'; base-uri 'none'; frame-src https://www.facebook.com/ https://www.youtube.com/ https://www.google.com/ 1
default-src 'none' ;report-to csp; report-uri https://report-uri.simplyadmire.com/ ; frame-ancestors 'self';script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://include.timeblockr.com https://ssl.google-analytics.com https://maps.googleapis.com https://ajax.googleapis.com https://ajax.aspnetcdn.com https://siteimproveanalytics.com; object-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://include.timeblockr.com; img-src 'self' data: https://include.timeblockr.com https://ssl.google-analytics.com https://csi.gstatic.com https://maps.gstatic.com/mapfiles/ https://maps.googleapis.com/maps/ https://eu2.siteimprove.com/;media-src 'self'; frame-src 'self'; font-src 'self' https://include.timeblockr.com https://netdna.bootstrapcdn.com https://fonts.gstatic.com; connect-src 'self' https://include.timeblockr.com https://shared.api.timeblockr.com;  1
default-src 'self' *.passwordping.com *.googleapis.com *.gstatic.com *.twimg.com *.twitter.com *.gravatar.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.google.com cdn.rawgit.com jsfiddle.net *.hsforms.net *.hs-scripts.com *.hsforms.com *.hs-analytics.net *.hubspot.com *.youtube.com *.hubapi.com *.enzoic.com *.enzoicdev.com; font-src 'self' data: *.gstatic.com *.enzoic.com; img-src 'self' data: *.passwordping.com *.googleapis.com *.gstatic.com *.twimg.com *.twitter.com *.gravatar.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.google.com cdn.rawgit.com jsfiddle.net *.hsforms.net *.hs-scripts.com *.hsforms.com *.hs-analytics.net *.hubspot.com s.w.org *.youtube.com *.ads.linkedin.com www.linkedin.com *.adsymptotic.com *.enzoic.com *.enzoicdev.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.passwordping.com *.googleapis.com *.gstatic.com *.twimg.com *.twitter.com *.gravatar.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.google.com cdn.rawgit.com *.hsforms.net *.hs-scripts.com *.hsforms.com *.hs-analytics.net *.hubspot.com *.youtube.com *.hsadspixel.net *.hscollectedforms.net *.hs-banner.com *.hubapi.com *.licdn.com *.enzoic.com *.enzoicdev.com *.googletagmanager.com js.usemessages.com; style-src 'self' 'unsafe-inline' *.passwordping.com *.googleapis.com *.gstatic.com *.twimg.com *.twitter.com *.gravatar.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.google.com cdn.rawgit.com *.hsforms.net *.hs-scripts.com *.hsforms.com *.hs-analytics.net *.hubspot.com cdn.jsdelivr.net *.youtube.com *.enzoic.com *.enzoicdev.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googleapis.com *.cdninstagram.com syndication.twitter.com platform.twitter.com *.youtube.com *.instagram.com data: blob: filesystem: *.twitter.com *.gstatic.com *.twimg.com *.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/; 1
default-src 'self'; frame-src  *.youtube.com youtu.be *.youtube-nocookie.com noembed.com *.vimeo.com www.google.com www.civas.nl www.civas.be usersync.datatrics.com www.bladerpdf.nl vars.hotjar.com optimize.google.com; connect-src wss://www.civas.nl wss://www.civas.be api.datatrics.com wss://ws1.hotjar.com *.bugsnag.com www.feedbackcompany.com net-civas-api-prod.tresprojecten.nl api.civas.nl um-civas-nl-prod.tresprojecten.nl um-civas-be-prod.tresprojecten.nl um-civas-prod.tresprojecten.nl www.civas.nl www.civas.be in.hotjar.com vc.hotjar.io ws1.hotjar.com; font-src *;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' js-inject *.mail.ru *.devmail.ru *.imgsmail.ru *.api.2gis.ru s0.2mdn.net *.adlooxtracking.com *.algovid.com s3.amazonaws.com cdn.ampproject.org *.apester.com *.bing.com static.bbc.co.uk news.files.bbci.co.uk coub.com *.coub.com *.criteo.com *.criteo.net *.doubleclick.net *.doubleverify.com *.dvtps.com *.facebook.net *.facebook.com *.flickr.com translate.google.com *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googleoptimize.com *.googletagmanager.com *.googletagservices.com *.google-analytics.com *.google.ru *.instagram.com mediatoday.ru *.moatads.com *.mradx.net *.mxpnl.com *.odnoklassniki.ru ok.ru *.ok.ru *.playbuzz.com *.qmerce.com relap.io *.relap.io sb.scorecardresearch.com *.twimg.com *.twitter.com platform.vine.co vk.com *.vk.com *.webvisor.com *.mtproxy.yandex.net *.yandex.ru yandex.st yastatic.net *.pinterest.com *.adsafeprotected.com *.serving-sys.com *.viqeo.tv *.videonow.ru *.nativeroll.tv *.seedr.com *.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org *.tns-counter.ru *.youtube.com *.ytimg.com *.ex.co *.weborama.fr *.tiktok.com *.tiktokcdn.com cdn.jsdelivr.net *.googleusercontent.com; connect-src 'self' wss://*.mail.ru wss://*.devmail.ru wss://*.viqeo.tv *.mail.ru *.devmail.ru *.imgsmail.ru *.api.2gis.ru s0.2mdn.net *.adlooxtracking.com *.algovid.com *.ampproject.net cdn.ampproject.org *.apester.com *.doubleclick.net facebook.com *.facebook.com *.facebook.net *.flickr.com *.googleapis.com *.google-analytics.com *.googlesyndication.com *.googleoptimize.com *.googletagmanager.com *.gstatic.com *.instagram.com *.mixpanel.com *.mradx.net *.playbuzz.com *.qmerce.com geo.query.yahoo.com relap.io *.relap.io twitter.com *.twitter.com *.yadro.ru *.yandex.ru yandex.st yastatic.net collector.mediator.media *.serving-sys.com *.doubleverify.com *.viqeo.tv *.videonow.ru *.vidiom.net *.nativeroll.tv *.seedr.com *.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org *.criteo.com *.criteo.net *.ex.co *.ibytedtos.com cdn.jsdelivr.net *.googleusercontent.com; img-src * data: blob:; frame-ancestors 'self' *.vk.com; default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' mail.ru *.mail.ru *.devmail.ru *.imgsmail.ru *.2gis.com *.2gis.ru s0.2mdn.net *.adlooxtracking.com *.adriver.ru *.ampproject.net *.ampproject.org *.apester.com *.cloudfront.net www.dailymail.co.uk coub.com *.coub.com *.doubleclick.net *.doubleverify.com facebook.com *.facebook.com *.gemius.pl giphy.com *.google.com *.googleapis.com *.googlesyndication.com themes.googleusercontent.com *.gstatic.com instagram.com *.instagram.com video.khl.ru *.moatads.com *.mradx.net ok.ru *.ok.ru *.playbuzz.com *.qmerce.com *.relap.io rutube.ru *.rutube.ru *.serving-sys.com soundcloud.com *.soundcloud.com *.streamrail.com *.twimg.com twitter.com *.twitter.com player.vimeo.com vine.co vk.com *.vk.com *.weborama.fr *.yandex.ru *.yandex.net yandex.st yandexadexchange.net *.yandexadexchange.net yastatic.net *.youtube.com *.adsafeprotected.com *.newstube.ru *.bbc.com *.viqeo.tv facecast.net *.facecast.net *.nativeroll.tv *.seedr.com *.ex.co consentmanager.mgr.consensu.org *.consentmanager.mgr.consensu.org *.criteo.com *.criteo.net *.tiktok.com *.tiktokcdn.com cdn.jsdelivr.net *.googleusercontent.com; worker-src 'self' blob: *.mail.ru *.devmail.ru 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: blob:; media-src 'self' https: blob:; worker-src 'self' https: blob:; block-all-mixed-content; 1
default-src 'self'; script-src 'self' metrics.responsetap.com static-ssl.responsetap.com api.instagram.com *.facebook.net https://s1536.t.eloqua.com play.vidyard.com https://img.en25.com https://play.vidyard.com tagmanager.google.com www.google.com www.google-analytics.com ajax.googleapis.com maps.googleapis.com maps.google.com www.gstatic.com www.googletagmanager.com developers.google.com www.bugherd.com d2iiunr5ws5ch1.cloudfront.net 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *.amazonaws.com *.facebook.com https://*.ggpht.com https://s1536.t.eloqua.com https://play.vidyard.com https://cdn.vidyard.com https://public.flourish.studio https://maps.google.com https://*.googleapis.com https://scontent.cdninstagram.com/ https://www.google.co.in https://*.xx.fbcdn.net https://pbs.twimg.com media.licdn.com image-store.slidesharecdn.com http://graph.facebook.com https://*.rackcdn.com http://*.cdn.starberry.com www.google.com https://*.gstatic.com maps.gstatic.com maps.googleapis.com www.google-analytics.com stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com d2iiunr5ws5ch1.cloudfront.net tagmanager.google.com; font-src 'self' maxcdn.bootstrapcdn.com fonts.gstatic.com www.bugherd.com data: tagmanager.google.com; frame-src 'self' www.facebook.com *.amazonaws.com https://play.vidyard.com https://www.google.com https://www.youtube.com https://flo.uri.sh; object-src 'self' https://flo.uri.sh *.amazonaws.com 1
default-src https: ; style-src https: 'unsafe-inline'; script-src https: 'unsafe-inline'; object-src 'none' 1
default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://sprintstories.com https://*.sprintstories.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.static.addtoany.com *.email.healthyeating.org *.surveygizmo.com *.googleapis.com *.gstatic.com www.googletagmanager.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org tagmanager.google.com use.typekit.net kit.fontawesome.com *.hotjar.com; style-src 'self' 'unsafe-inline' *.email.healthyeating.org *.surveygizmo.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com use.typekit.net p.typekit.net kit-free.fontawesome.com *.google.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: use.typekit.net kit-free.fontawesome.com script.hotjar.com; img-src 'self' *.ytimg.com *.email.healthyeating.org *.surveygizmo.com *.cloudfront.net *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com stats.g.doubleclick.net i1.ytimg.com; media-src 'self' data: blob: https://www.youtube.com/; frame-src 'self' *.email.healthyeating.org *.hotjar.com *.youtube.com *.google.com *.gstatic.com *.arcgis.com *.choosemyplate.gov; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://www.google.com/ *.hotjar.com *.gstatic.com; connect-src 'self' *.google-analytics.com accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io; 1
default-src 'self' *.kmsu.ac.ir http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com ; frame-ancestors 'self' https://trustseal.enamad.ir 1
upgrade-insecure-requests; block-all-mixed-content; default-src 'self'; script-src 'self' 'nonce-e0cfbfa7f478ec85f1d8b648099764b595150cc3' 'unsafe-eval' www.gstatic.com www.google-analytics.com www.googletagmanager.com ajax.googleapis.com https://chimpstatic.com downloads.mailchimp.com pagead2.googlesyndication.com www.google.com connect.facebook.net ajax.cloudflare.com static.cloudflareinsights.com https://mc.us17.list-manage.com js-agent.newrelic.com cdn-gl.imrworldwide.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com use.fontawesome.com https://downloads.mailchimp.com; img-src 'self' https: data:; font-src 'self' fonts.gstatic.com use.fontawesome.com; connect-src 'self' fcm.googleapis.com www.google-analytics.com stats.g.doubleclick.net; media-src 'self'; object-src 'self'; frame-src 'self' www.youtube.com www.google.com www.facebook.com cdn-gl.imrworldwide.com; frame-ancestors *; worker-src 'self'; manifest-src 'self'; prefetch-src 'self' *; 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline' 'unsafe-eval' 'self'; style-src-elem 'unsafe-inline' 'unsafe-eval' 'self'; font-src 'self'; img-src blob: 'self'; frame-src 'self'; plugin-types application/pdf image/jpeg image/png image/jpg; connect-src 'self';  media-src 'self';   1
default-src 'self'; object-src 'none'; font-src 'self' data:; manifest-src 'self'; img-src 'self' 'unsafe-inline' data:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; prefetch-src 'self'; 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-NWNlZWNlODctN2FhMC00MDUyLTllNmUtNDUxMjYwMGYyOTZi'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
default-src 'none'; base-uri 'self'; img-src 'self' https://yt3.ggpht.com https://i.ytimg.com https://www.google-analytics.com https://public-firm.com https://stats.g.doubleclick.net https://uicdn.toast.com; script-src 'self' 'unsafe-eval' 'nonce-pAZemDb01JEpoIHFR3Na' https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://static.hotjar.com https://script.hotjar.com https://www.paypal.com https://static.doubleclick.net https://*.cloudflare.com https://*.cloudfront.net https://code.jquery.com https://uicdn.toast.com https://blueimp.github.io; style-src 'self' 'unsafe-inline' https://cdn.datatables.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://uicdn.toast.com; font-src 'self' data: https://cdn.datatables.net https://script.hotjar.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com; manifest-src 'self'; connect-src 'self' https://*.google-analytics.com https://*.google.com https://*.hotjar.com https://*.hotjar.io https://*.amazonaws.com wss://*.hotjar.com wss://*.hotjar.io; media-src 'self';frame-src 'self'  https://www.google.com https://www.youtube.com https://player.vimeo.com https://vars.hotjar.com 1
default-src 'self'; frame-src https://*; img-src 'self' data: https://* http://dev.visualwebsiteoptimizer.com  http://*.bunkerhillins.com http://*.pilgrimins.com http://www.google-analytics.com ; style-src 'self' https://* 'unsafe-inline'; font-src 'self' https://*; connect-src 'self' https://*; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://* http://ajax.googleapis.com http://www.google-analytics.com http://dev.visualwebsiteoptimizer.com http://tags.tiqcdn.com 1
default-src 'self' script-src: 'unsafe-inline' https://www.googletagmanager.com https://www.youtube.com https://www.facebook.com https://twitter.com https://platform.twitter.com https://www.google-analytics.com/analytics.js 'unsafe-inline' 'unsafe-eval' data:; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self' 'unsafe-inline' data: api.postcodes.io cdn.jsdelivr.net fonts.googleapis.com maps.gstatic.com maps.googleapis.com maxcdn.bootstrapcdn.com placehold.it smartmoneypeople.com saffron.whoson.com stats.g.doubleclick.net themes.googleusercontent.com www.google.co.uk www.google.com www.google-analytics.com www.googletagmanager.com www.youtube.com; script-src 'self' 'unsafe-inline' cdnjs.cloudflare.com cdn.jsdelivr.net maps.googleapis.com polyfill.io saffron.whoson.com www.google.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.youtube.com; media-src 'self' stats.g.doubleclick.net; font-src 'self' fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com themes.googleusercontent.com; object-src 'none'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' railscot.co.uk www.railscot.co.uk *.akamai.net cdn.jsdelivr.net *.doubleclick.net www.google-analytics.com *.google-analytics.com *.googlesyndication.com *.gstatic.com code.jquery.com maxcdn.bootstrapcdn.com *.media-amazon.com *.ssl-images-amazon.com adservice.google.ca adservice.google.com adservice.google.co.uk partner.googleadservices.com pagead2.googlesyndication.com www.googletagservices.com stats.g.doubleclick.net m.media-amazon.com images-eu.ssl-images-amazon.com www.google.com www.google.co.uk www.google.ca www.gstatic.com tpc.googlesyndication.com fonts.googleapis.com fonts.gstatic.com ajax.googleapis.com *.gstatic.com googleads.g.doubleclick.net openspace.ordnancesurvey.co.uk cdn.jsdelivr.net *.twitter.com *.ebay.com *.ebayimg.com *.ebaystatic.com id.rlcdn.com data: blob:; 1
default-src https: data: wss: 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self' https://sentry.io https://*.u-explore.com https://icould.com/ https://zimovi.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://npmcdn.com https://unpkg.com http://*.google-analytics.com https://*.google-analytics.com http://*.googletagmanager.com https://*.googletagmanager.com http://*.u-explore.com https://*.nr-data.net https://*.gstatic.com https://gstatic.com https://*.newrelic.com  https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net; img-src 'self' blob: http://*.u-explore.com http://*.google-analytics.com https://*.google-analytics.com https://*.mapbox.com data: http://*.cloudfront.net https://*.cloudfront.net https://*.startprofile.com https://icould.com https://*.cloudfront.net https://*.icould.com https://*.u-explore.com; style-src 'self' 'unsafe-inline' https://npmcdn.com https://unpkg.com https://*.bootstrapcdn.com http://*.u-explore.com https://*.googleapis.com; font-src 'self' https://*.gstatic.com; frame-src 'self' http://* https://*; object-src 'self' https://*.u-explore.com 1
default-src *; img-src *      'unsafe-inline'; script-src *      'unsafe-inline' 'unsafe-eval'; style-src *      'unsafe-inline'; 1
default-src 'unsafe-inline' 'unsafe-eval' https: data: www.youtube.com s.ytimg.com *.cicbiogune.es *.googleapis.com *.gstatic.com *.google-analytics.com placehold.it; 1
default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; font-src * ; img-src * data: blob: 'unsafe-inline'; frame-src sanalmarket: yenism: http://*.youtube.com https://tr.rdrtr.com https://stags.bluekai.com https://*.creativecdn.com https://creativecdn.com https://*.criteo.com https://*.facebook.com https://*.doubleclick.net https://*.api.sociaplus.com https://*.webinstats.com https://sanalmarket.api.useinsider.com https://optimize.google.com https://*.bkmexpress.com.tr https://www.linkadoo.co https://linkadoo.co; style-src * 'unsafe-inline'; 1
default-src * data: 'unsafe-eval' 'unsafe-inline'; frame-ancestors *.eiendomsmegler1.no 1
default-src * data: blob:; script-src ajax.cloudflare.com blob: https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/ https://cdn.ampproject.org/rtv/; object-src 'none'; style-src 'unsafe-inline'; 1
default-src 'none';img-src 'self';style-src 'self'; font-src 'self' 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://*.2o7.net  https://static.quiq-cdn.com https://lululemon.quiq-api.com https://p11.techlab-cdn.com https://portal.afterpay.com https://static-us.afterpay.com https://content.zeronaught.com https://api.zeronaught.com https://imp.zeronaught.com https://static.afterpay.com https://graphql.contentful.com https://*.medallia.com https://cdn.contentful.com https://preview.contentful.com https://www.shopstylecollective.com/ https://tracking.shopstylecollective.com/ https://beta.shopstylecollective.com/ https://test.shopstylecollective.com/ https://optimize.google.com https://*.kampyle.com https://functions62d2bb65.azurewebsites.net https://omny.fm https://*.braintreegateway.com https://*.braintree-api.com https://cdnjs.cloudflare.com https://*.btttag.com https://*.omtrdc.net https://*.tt.omtrdc.net https://*.demdex.net https://*.sentry.io https://sentry.io https://*.lululemon.com https://adobedtm.com https://assets.adobedtm.com https://scripts.agileone.com https://cx.atdmt.com https://static.atgsvcs.com https://rules.atgsvcs.com https://bat.bing.com https://lululemonspna.btttag.com https://d.btttag.com https://cache-ssl.celtra.com https://celtraidentity.com https://custhelp.com https://widget.custhelp.com https://lululemon.custhelp.com https://lululemonfr.custhelp.com https://lululemon.widget.custhelp.com https://www.facebook.com https://connect.facebook.net https://clientstream.launchdarkly.com https://app.launchdarkly.com https://*.lllapps.com https://*.lllapi.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://www.google.com https://maps.gstatic.com https://fonts.gstatic.com https://www.gstatic.com https://adservice.google.com https://adservice.google.ca https://www.google.ca https://fonts.googleapis.com https://maps.googleapis.com https://googleads.g.doubleclick.net https://cdn.ravenjs.com https://*.bazaarvoice.com https://*.akamaihd.net https://cm.everesttech.net https://lululemonusa.tt.omtrdc.net https://cm.g.doubleclick.net https://stats.g.doubleclick.net https://bid.g.doubleclick.net https://ads.celtra.com https://scripts.agilone.com https://vsvipmw01.rightnowtech.com https://*.quantummetric.com https://ad.doubleclick.net https://events.launchdarkly.com https://track.celtra.com https://ads-twitter.com https://www.youtube.com https://*.paypal.com https://www.paypalobjects.com https://websecurity.norton.com https://seal.websecurity.norton.com https://rlcdn.com https://di.rlcdn.com https://s.pinimg.com https://yimg.com https://analytics.yahoo.com https://static.ads-twitter.com https://analytics.twitter.com https://t.co https://ct.pinterest.com https://beacon.lynx.cognitivlabs.com https://scene7.com https://s.ytimg.com https://s.yimg.com https://prf.hn https://ln-rules.rewardstyle.com https://*.curalate.com https://d28m5bx785ox17.cloudfront.net https://d2i1u3dt4wjv23.cloudfront.net https://sp.analytics.yahoo.com https://analytics.google.com https://mpsnare.iesnare.com https://shopstylecollective.com https://flex.cybersource.com ; base-uri 'self'; frame-ancestors 'none'; object-src 'none'; block-all-mixed-content; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' w.estat.com *.moatads.com *.captcha.com *.vimeo.com fresnel.vimeocdn.com www.youtube.com *.doubleclick.net www.google-analytics.com ajax.googleapis.com maps.googleapis.com www.googletagmanager.com s7.addthis.com m.addthisedge.com m.addthis.com v1.addthisedge.com v1.addthis.com w.estat.com www.google.com www.gstatic.com;style-src 'self' 'unsafe-inline' code.jquery.com maxcdn.bootstrapcdn.com fonts.googleapis.com www.google.com ajax.googleapis.com; base-uri 'self'; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' *.youtube.com *.googleapis.com *.google-analytics.com *.google.com *.googletagmanager.com; frame-src 'self' *.google.com *.youtube.com; font-src 'unsafe-eval' 'unsafe-inline' 'self' https://themes.googleusercontent.com https://fonts.gstatic.com data:; object-src 'self' 1
frame-ancestors 'self' unilever3.marketing.adobe.com unileverbrazil.marketing.adobe.com unilever2.marketing.adobe.com unilever.marketing.adobe.com unilever3.experiencecloud.adobe.com unileverbrazil.experiencecloud.adobe.com unilever2.experiencecloud.adobe.com unilever.experiencecloud.adobe.com emea1-proxy.adobemc.com us1-proxy.adobemc.com us1-proxy.adobemc.com apac-proxy.adobemc.com adobedemoemea131.marketing.adobe.com adobedemoemea131.experiencecloud.adobe.com assets.adobedtm.com 1
base-uri 'self'; default-src https:; object-src 'none'; frame-src 'self' www.facebook.com bid.g.doubleclick.net vars.hotjar.com www.youtube.com; frame-ancestors 'none'; font-src 'unsafe-inline' script.hotjar.com *.acronis.com acronis.host fonts.gstatic.com fonts.googleapis.com; style-src 'unsafe-inline' *.acronis.com acronis.host cdn.cookielaw.org tagmanager.google.com fonts.googleapis.com; img-src 'self' script.hotjar.com acronis.events *.ytimg.com *.google.com *.google.ac *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.com.kh *.google.cc *.google.cd *.google.cf *.google.cat *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.g.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gf *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.iq *.google.ie *.google.co.il *.google.im *.google.co.in *.google.io *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.com.lc *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.ne *.google.com.nf *.google.com.ng *.google.com.ni *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pk *.google.com.pa *.google.com.pe *.google.com.ph *.google.pl *.google.com.pg *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.rs *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.sm *.google.so *.google.st *.google.sr *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.to *.google.tn *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.co.za *.google.co.zm *.google.co.zw data: cdn.cookielaw.org *.doubleclick.net bat.bing.com b.6sc.co p.adsymptotic.com *.facebook.com *.linkedin.com *.acronis.com storage.acronis.host www.googletagmanager.com www.google-analytics.com ssl.gstatic.com www.gstatic.com; connect-src 'self' ws: *.schemaapp.com *.scarabresearch.com *.bing.com *.6sc.co *.adnxs.com *.doubleclick.net *.hotjar.com *.acronis.com *.acronis.host cdn.cookielaw.org www.google-analytics.com *.sentry.io; script-src 'sha256-Ih/cZIopHFpQfJYhmkNgVzqbE3SKee5mz+qB2ImeGh0=' 'sha256-KKEg3ZEq+BgGQ1C5dLoRcW9hlzPdbw2QGAJ4ZSh3NRA=' 'self' cdn.schemaapp.com *.acronis.com polyfill.io *.onetrust.com cdn.cookielaw.org tagmanager.google.com www.googletagmanager.com www.google-analytics.com *.hotjar.com bat.bing.com snap.licdn.com www.googleadservices.com *.doubleclick.net connect.facebook.net j.6sc.co cdn.scarabresearch.com 'strict-dynamic' 'sha256-4mTphhCDeHUhvLTWSZIttgy0LwW6t0y7AOLvMe+rd/I=' 'sha256-Ix6jp59heyEfSvbOwK+NQHSkg3NaIKRO5JbvTivq2FU=' 'sha256-hAKYZD2+XuA6uCsPnEuLvkFUg9jGUb1CQFFQ7/3cm2I=' 'sha256-R1k0nIlggUUALkWQ0hY1iWCiWu/OLc7NBKdKsTn4cOg=' 'sha256-dg1lPQT9GbnCu5vvGxNFYQ/ZdZNmPRza26m731o6jEY=' 'sha256-OzNQRQpvhy0BWuK1MDnoXOy/cZBdSzwPOCxVdy21QTg='; report-uri https://o394472.ingest.sentry.io/api/5245823/security/?sentry_key=309fb7dafb2d4ddd9cc6a3ec4b65a070 1
default-src *; style-src 'self' t1.daumcdn.net fonts.googleapis.com 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval' 1
worker-src 'self' data: 'unsafe-inline' *.studioi3.it *.gstatic.com *.googleapis.com cdnjs.cloudflare.com;frame-src 'self' *.studioi3.it *.google.com get.adobe.com *.youtube.com *.vimeo.com *.paypal.com;media-src 'self' *.studioi3.it *.dropboxusercontent.com;object-src 'self' *.studioi3.it;img-src * data: blob: ;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.studioi3.it code.jquery.com *.google.com *.googleapis.com cdnjs.cloudflare.com  *.youtube.com *.ytimg.com *.paypal.com; style-src 'self' 'unsafe-inline' *.studioi3.it *.google.com *.googleapis.com cdnjs.cloudflare.com; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://images.101datacenter.net https://*.101domain.com https://chat.livecustomer.com https://my.101domain.ru https://www.googleapis.com https://*.googleadservices.com https://*.facebook.net https://*.yandex.ru https://*.101domain.ru https://*.google.com https://*.geotrust.com https://www.google-analytics.com https://*.gstatic.com https://*.yadro.ru https://secure.campaigner.com https://www.youtube.com https://www.googletagmanager.com data: 1
default-src 'self' *.arexchange.com *.aspnetcdn.com *.bootstrapcdn.com *.fontawesome.com *.cloudflare.com *.google-analytics.com; img-src 'self' *.arexchange.com *.aspnetcdn.com *.bootstrapcdn.com *.fontawesome.com *.cloudflare.com *.google-analytics.com data:; script-src 'self' *.arexchange.com *.aspnetcdn.com *.bootstrapcdn.com *.fontawesome.com *.cloudflare.com *.google-analytics.com 'unsafe-inline'; style-src 'self' *.arexchange.com *.aspnetcdn.com *.bootstrapcdn.com *.fontawesome.com *.cloudflare.com *.google-analytics.com 'unsafe-inline'; frame-ancestors 'none'; 1
frame-ancestors 'self'; img-src * data:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; default-src * 1
script-src 'nonce-csZVoNhHTDa2HbRO5fAR4Q' 'self' 'unsafe-eval' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://www.google-analytics.com/analytics.js https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport 1
connect-src 'self' ;default-src 'self';frame-ancestors 'self' ;frame-src 'self' www.careerarc.com www.youtube.com youtube.com www.bloomberg.com *.vimeo.com vimeo.com www.google.com *.google.com;img-src *;font-src 'self' fonts.gstatic.com *.fontawesome.com;media-src 'self' *.example.com;object-src 'none'; report-uri example.com/violationReportForCSP.php;script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com www.google-analytics.com www.google.com www.gstatic.com maps.googleapis.com *.fontawesome.com clients.sosimplecms.com ;style-src 'self' 'unsafe-inline' fonts.googleapis.com *.fontawesome.com clients.sosimplecms.com; 1
default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' www.wagnergroup.com *.googleapis.com www.google-analytics.com www.googletagmanager.com tagmanager.google.com vjs.zencdn.net hello.myfonts.net http://*.hotjar.com https://*.hotjar.com http://conv.indeed.com https://c.leadlab.click http://siteimproveanalytics.com 'unsafe-eval'; style-src 'unsafe-inline' 'self' fonts.googleapis.com vjs.zencdn.net hello.myfonts.net; img-src 'self' data: www.wagnergroup.com www.google-analytics.com maps.googleapis.com csi.gstatic.com maps.gstatic.com stats.g.doubleclick.net http://*.hotjar.com https://*.hotjar.com http://conv.indeed.com https://c.leadlab.click http://ssl.siteimprove.com; connect-src 'self' www.youtube.com http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com http://conv.indeed.com https://c.leadlab.click; object-src 'self' www.youtube.com http://conv.indeed.com https://c.leadlab.click; frame-src 'self' www.youtube.com https://*.hotjar.com http://conv.indeed.com https://c.leadlab.click; child-src 'self' www.youtube.com https://*.hotjar.com http://conv.indeed.com https://c.leadlab.click; font-src 'self' data: vjs.zencdn.net fonts.gstatic.com; 1
default-src * data: blob:;script-src 'self' static.sodonsolution.org static4.sodonsolution.org erxes.bid-finance.mn static4.cdn.sodonsolution.org static.blogs.sodonsolution.org 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.gstatic.com maps.gstatic.com maps.googleapis.com static.whatshelp.io www.adshark.mn siskin.sodonsolution.com connect.facebook.net certify-js.alexametrics.com cdnjs.cloudflare.com platform.twitter.com www.youtube.com/iframe_api s.ytimg.com cse.google.com www.google.com static.getbutton.io js.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.usemessages.com js.hscollectedforms.net;style-src 'self' static.sodonsolution.org static4.sodonsolution.org static4.cdn.sodonsolution.org static.blogs.sodonsolution.org 'unsafe-inline' resource.blogs.sodonsolution.org www.gstatic.com static.whatshelp.io cse.google.com www.google.com;connect-src 'self' www.google-analytics.com whatshelp.io www.adshark.mn siskin.sodonsolution.com connect.facebook.net staticxx.facebook.com graph.facebook.com api.hubspot.com forms.hubspot.com;object-src 'self'; 1
default-src 'self' *.paypal.com *.stripe.com *.youtube.com *.google.com *.googletagmanager.com *.doubleclick.net; img-src 'self'  data:; style-src 'self' *.googleapis.com; font-src 'self' *.googleapis.com *.gstatic.com; script-src 'self' 'nonce-57n4ofkF0D5W4UWA' *.paypal.com *.stripe.com 1
upgrade-insecure-requests; report-uri https://csp.atbaux.com/csp-error;  default-src 'none'; connect-src 'self' https://www.atb.com/ https://www.facebook.com https://ajax.googleapis.com https://forms.hsforms.com/emailcheck/v1/ https://ct.pinterest.com/md/ https://web-atbva-uat.k8s-prod-na.finn.ai/api/v1/finn-chat/ https://web-atbva-prod.k8s-prod-na.finn.ai/api/v1/finn-chat/ https://web-atbva-uat.k8s-prod-na.finn.ai/ https://web-atbva-prod.k8s-prod-na.finn.ai/ https://msg-atbva-uat.k8s-prod-na.finn.ai/subscriptions/finnChat/ https://msg-atbva-prod.k8s-prod-na.finn.ai/subscriptions/finnChat/ https://csp-uat.atbaux.com/csp-error wss://msg-atbva-uat.k8s-prod-na.finn.ai/ wss://msg-atbva-prod.k8s-prod-na.finn.ai/ https://msg-atbva-prod.k8s-prod-na.finn.ai/ https://cdn.siteimprove.net https://superscribe.atbaux.com https://api.genesyscloud.com https://www.google-analytics.com/ https://dc.services.visualstudio.com/v2/track https://siteintercept.qualtrics.com https://atb.postclickmarketing.com https://interactive.atb.com https://vimeo.com https://rates.atbaux.com/ https://tags.srv.stackadapt.com/ https://ct.pinterest.com/user/ https://q.quora.com/ https://csp.atbaux.com/csp-error https://stats.g.doubleclick.net https://east.srv.stackadapt.com https://uw.srv.stackadapt.com https://bat.bing.com https://analytics.google.com https://eu.srv.stackadapt.com; base-uri 'none'; font-src 'self' data: https://fonts.atbaux.com/atb.com/ https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com; form-action https://forms.hsforms.com https://tr.snapchat.com/p https://tr.snapchat.com/cm/i; frame-ancestors 'none'; style-src 'self' 'unsafe-inline' https://tags.srv.stackadapt.com https://fonts.atbaux.com https://cloud.typography.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://web-atbva-uat.k8s-prod-na.finn.ai/webchat/static/styles/styles.css https://fonts.googleapis.com https://tagmanager.google.com https://east.srv.stackadapt.com https://uw.srv.stackadapt.com https://eu.srv.stackadapt.com; script-src 'self' https://zn5hxoymepfxxwpmj-atbfeedback.siteintercept.qualtrics.com 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https://siteintercept.qualtrics.com https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.googletagmanager.com/ https://www.google-analytics.com https://tagmanager.google.com https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://maps.googleapis.com/maps/api/js https://adservice.google.com/ https://adservice.google.com/* https://www.google.com/ads/ga-audiences https://js.hs-scripts.com/4764334.js https://js.hsforms.net/forms/v2.js https://forms.hsforms.com/ https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/ https://znbd9nr9vkcjqslin-atbfeedback.siteintercept.qualtrics.com https://dl.episerver.net/13.2.4/epi-util/find.js https://js.hs-analytics.net/analytics/1563383400000/4764334.js https://www.workable.com/api/accounts/377831 https://www.workable.com/assets/embed.js https://extend.vimeocdn.com/ga/10780070.js https://zn5hxoymepfxxwpmj-atbfeedback.siteintercept.qualtrics.com/WRSiteInterceptEngine/ https://code.jquery.com/jquery-3.4.1.min.js https://sc-static.net/ https://static.ads-twitter.com/uwt.js https://analytics.twitter.com/i/ https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/ https://www.youtube.com/s/player/2e6e57d8/www-widgetapi.vflset/www-widgetapi.js https://cdn.jsdelivr.net/npm/vue@2.6.10/dist/vue.runtime.min.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://s.pinimg.com/ct/core.js https://s.pinimg.com/ct/lib/ https://a.quora.com/qevents.js https://tags.srv.stackadapt.com/events.js https://east.srv.stackadapt.com/events.js https://uw.srv.stackadapt.com/events.js https://eu.srv.stackadapt.com/events.js https://platform.twitter.com/oct.js https://static.ads-twitter.com/oct.js https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/ https://secure.quantserve.com/quant.js https://edge.quantserve.com/quant.js https://siteimproveanalytics.com/ https://js.hs-banner.com https://apply.workable.com https://www.google.com/ads/ga-audiences* https://s.mitaa.io/dtag.min.js https://ionfiles.scribblecdn.net/scripts/ionizer-1.2.min.js http://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js https://web-atbva-uat.k8s-prod-na.finn.ai/webchat/static/ https://siteimproveanalytics.com/js/siteanalyze_77682.js https://js.hs-banner.com/4764334.js https://bat.bing.com clarity.microsoft.com https://web-atbva-uat.k8s-prod-na.finn.ai/webchat/static/bundle.js https://web-atbva-uat.k8s-prod-na.finn.ai/webchat/static/config.js 'sha256-AoNQZpaRmemSTxMy9xcqXX5VLwI6IMPYugO7bFHOW+U=' 'sha256-VazP97ZCwtekAsvgPBSUwPFKdrwD3unUfSGVYrahUqU=' 'sha256-CSXorXvZcTkaix6Yvo6HppcZGetbYMGWSFlBw8HfCJo=' 'sha256-27gTObPp0STAt+fV8fwrG9pRwkVFaEg7ZHzBv6L0yto=' 'sha256-2bKthQiZc2RXXJ2zuNdQgergsosNJNO0j0pY5/AMUKE=' 'sha256-3ZrSyKXyfCBhxmUPydg8a9mgpCxBzKb9p2d6IFRh3+Q=' 'sha256-kiNksdOX+M4g0/nMTqaTImuB/PHpOdvlQF6VaBmvnoE=' 'sha256-fmBnciP22+IeufKiwett0ScrQcvXA2ltLjO5AkOn/eQ=' 'sha256-GxB2ppK+t1dQ/6WHfZRc7UJL/ct7a59qHKzBE/c1SzE=' 'sha256-kN2TxtGds1lhWybMfEoIXWeS4x4Enya8DiiyBAbeyHs=' 'sha256-olgZwKESUKBk5MwFwAYxCIamu4KAcRjk5VqnZxOlat0=' 'sha256-rXnvrupdVgmIsBg96vSU/gV2uQjZSH3AKma5y9FlGaU=' 'nonce-gO9Se8UvWSCaurqxB3GDQXGMy+JFf/WaqkW8vobLQtM=' 'nonce-kr7iOZnV7rIgKofbOmBQtoGo8p/iPI7EOqRo4aZ9rIs='; img-src 'self' data: *;  frame-src https://verify.auth.atb.com/ https://verify-uat.auth-dev.atb.com/ https://www.googletagmanager.com https://va.atb.com/ https://virtual-assist-prod.atb.com/ https://virtual-assist-uat.atb.com/ https://web-atbva-prod.k8s-prod-na.finn.ai/ https://bank-api-gateway-atbva-prod.k8s-prod-na.finn.ai https://bank-api-gateway-atbva-prod.k8s-prod-na.finn.ai/ https://identity-prod.auth-dev.atb.com/ https://identity.auth.atb.com/ https://web-atbva-uat.k8s-prod-na.finn.ai/ https://bank-api-gateway-atbva-uat.k8s-prod-na.finn.ai https://bank-api-gateway-atbva-uat.k8s-prod-na.finn.ai/ https://identity-uat.auth-dev.atb.com/ https://8389598.fls.doubleclick.net/ https://www.google.com https://stats.g.doubleclick.net/ https://siteintercept.qualtrics.com/ https://feedback.atb.com/ https://www.youtube.com/ https://player.vimeo.com/ https://atb.postclickmarketing.com/ https://interactive.atb.com/ https://forms.hsforms.com/ https://tr.snapchat.com/ https://www.atbonline.com/ https://app.hubspot.com/; manifest-src 'self'; child-src 'none'; object-src 'self'; 1
default-src 'self' *.nrw.de cdn.consentmanager.mgr.consensu.org;    script-src  'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.jsdelivr.net www.googletagmanager.com *.google-analytics.com *.ytimg.com cdn.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org;    style-src   'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net tagmanager.google.com cdn.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org;    font-src data: *;    img-src  data: *;    frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com;    child-src  'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de *.youtube-nocookie.com 945387.fls.doubleclick.net;    object-src 'self';    media-src *; 1
frame-ancestors https://my.bigcartel.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' ; img-src 'self' data: ; object-src 'self' ; frame-src 'self' ; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; object-src 'self'; style-src 'self' fonts.googleapis.com/ 'unsafe-inline'; img-src 'self' data: https:; media-src 'self'; child-src 'self' https:; font-src 'self' fonts.googleapis.com/ fonts.gstatic.com/ data:; connect-src 'self' https://syndication.twitter.com/settings; frame-ancestors 1
default-src 'self' https://str0.creacast.com/radio-rcj http://audio-rcj.s3.amazonaws.com https://audio-rcj.s3.amazonaws.com data: ; base-uri 'self' radiorcj.info; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://staticxx.facebook.com; script-src 'self' 'unsafe-inline' https://connect.facebook.net/ https://radiorcj.info www.google-analytics.com ajax.googleapis.com https://www.youtube.com ; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://code.jquery.com ; font-src 'self' fonts.gstatic.com data: ; img-src 'self' data: https://code.jquery.com https://secure.gravatar.com www.google-analytics.com; 1
connect-src 'self' blob: https://*.giphy.com https://*.pscp.tv https://*.video.pscp.tv https://*.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://*.twitter.com; font-src 'self' https://*.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com ; img-src 'self' blob: data: https://*.cdn.twitter.com https://ton.twitter.com https://*.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://*.giphy.com https://*.pscp.tv https://prod-periscope-profile.*.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://*.googleusercontent.com; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://*.twimg.com https://*.vine.co https://*.pscp.tv https://*.video.pscp.tv https://*.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.twimg.com   https://www.google-analytics.com https://twitter.com https://app.link  'nonce-NTM2ZjcyNDUtZWQyNy00MjI3LWEzYjUtNGUwZTVkNjQ0Mjdm'; style-src 'self' 'unsafe-inline' https://*.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false 1
connect-src 'self' *.adtraction.com *.bing.com *.delti.com *.optimizely.com *.veinteractive.com data wss://*.rengas-online.com; default-src 'self' *.delti.com; font-src 'self' *.bootstrapcdn.com *.delti.com *.gstatic.com data; frame-ancestors *; frame-src 'self' *.criteo.com *.criteo.net *.delti.com *.doubleclick.net *.everestjs.net *.everesttech.net *.facebook.com *.go.com *.google.com *.googlesyndication.com *.optimizely.com *.trustpilot.com *.yahoo.com *.youtube-nocookie.com *.youtube.com data; img-src 'self' *.alcar-wheels.com *.awin1.com *.bing.com *.criteo.com *.criteo.net *.delti.com *.doubleclick.net *.everesttech.net *.facebook.com *.fagms.net *.google.al *.google.at *.google.be *.google.by *.google.ch *.google.co.id *.google.co.in *.google.co.jp *.google.co.uk *.google.com *.google.com.my *.google.com.np *.google.com.pe *.google.com.tr *.google.com.ua *.google.com.vn *.google.de *.google.dk *.google.ee *.google.es *.google.fi *.google.hu *.google.it *.google.md *.google.nl *.google.no *.google.pl *.google.ro *.google.rs *.google.ru *.google.se *.google.si *.gstatic.com *.jfnet.de *.prudsys-rde.de *.rengas-online.com *.tyre-pictures.com *.vergelijk.nl *.vertaa.fi *.ytimg.com data data: khms0.googleapis.com khms1.googleapis.com maps.googleapis.com mtst.io; object-src 'self' *.delti.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.akamaihd.net *.bing.com *.bootstrapcdn.com *.criteo.com *.criteo.net *.delti.com *.demdex.net *.doubleclick.net *.dwin1.com *.everestjs.net *.everesttech.net *.facebook.net *.fagms.net *.google-analytics.com *.google.com *.google.fi *.googleadservices.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.optimizely.com *.rengas-online.com *.shopello.net *.trustpilot.com *.wirkaufendeinauto.de 1672606776.rsc.cdn77.org adtr.io data mtst.io; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.delti.com *.rengas-online.com data fonts.googleapis.com; 1
default-src 'self';              script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://s7.addthis.com https://m.addthisedge.com https://m.addthis.com https://p2a.co https://tagmanager.google.com https://connect.facebook.net https://www.youtube.com https://s.ytimg.com;              style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://hello.myfonts.net https://tagmanager.google.com;              font-src 'self' https://fonts.gstatic.com data:;              img-src 'self' data: https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://stats.g.doubleclick.net https://www.facebook.com http://atlanticcoastpipeline.com https://i.ytimg.com https://atlanticcoastpipeline.mediaroom.com https://s3.amazonaws.com;              connect-src 'self' https://www.google-analytics.com https://m.addthis.com/ https://stats.g.doubleclick.net;              frame-src 'self' https://s7.addthis.com https://p2a.co https://www.youtube.com https://dom.maps.arcgis.com; 1
frame-ancestors 'self' https://*.tyrolia.com https://*.head-test.com https://head.testing-varnish.symmetrics.de 1
script-src 'strict-dynamic' 'nonce-UNWUiyA66j9KntmBvmkdeWIKFGxom1yD' 'unsafe-inline' 'unsafe-eval' https: http:; object-src 'none'; base-uri 'none'; report-uri /report/csp; report-to csp-endpoint 1
frame-ancestors 'self' https://myleanlaw.co http://localhost http://localhost:8080 1
default-src * data:; img-src * data:; script-src https://*.facebook.com http://*.facebook.com https://*.fbcdn.net http://*.fbcdn.net *.facebook.net *.google-analytics.com *.google.com *.doubleclick.net https://ads.uh.ro http://storage.trafic.ro https://secure.trafic.ro https://code.createjs.com https://s3.amazonaws.com *.disqus.com *.disquscdn.com disqus.com https://storage.googleapis.com https://ajax.googleapis.com https://cdn.jsdelivr.net https://cdn.ampproject.org https://uh.us19.list-manage.com https://embed.ex.co https://cdn.playbuzz.com https://pb-story.playbuzz.com https://www.googletagmanager.com https://mcd-sdk.playbuzz.com https://*.infogram.com 127.0.0.1:* uh.ro:* 84.1.159.35:* 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; connect-src https://ads.uh.ro https://*.facebook.com http://*.facebook.com https://*.fbcdn.net http://*.fbcdn.net *.facebook.net https://*.akamaihd.net wss://*.facebook.com:* ws://*.facebook.com:* http://*.akamaihd.net https://fb.scanandcleanlocal.com:* *.atlassolutions.com http://attachment.fbsbx.com https://attachment.fbsbx.com https://ads.uh.ro https://storage.trafic.ro https://secure.trafic.ro https://code.createjs.com *.disqus.com *.disquscdn.com disqus.com https://embed.ex.co https://prd-collector-anon.playbuzz.com https://pixel.playbuzz.com https://voting.ex.co 127.0.0.1:* uh.ro:* 84.1.159.35:* *.google-analytics.com *.doubleclick.net;  1
default-src 'self';              frame-src 'self' mailto: tel:;              script-src 'unsafe-inline' 'self' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net;              style-src 'unsafe-inline' 'self' https://img.jobs.ch https://www.jobup.ch https://fonts.googleapis.com;              object-src 'none';              base-uri 'self' https://img.jobs.ch https://www.jobup.ch resource:;              connect-src 'self' https://*.netiva.ch https://*.agrarjobs.ch https://*.ingest.sentry.io https://www.google-analytics.com;              font-src 'self' https://fonts.gstatic.com;              img-src * data: blob:;              worker-src 'none';              frame-ancestors 'none';              report-uri /api/healthcheck;              report-to csp-endpoint 1
default-src 'none'; base-uri 'none'; frame-ancestors 'self'; frame-src 'self' https:; form-action 'self'; object-src 'self'; img-src 'self' data: blob: https://a.sidepodcast.com; media-src 'self' https://a.sidepodcast.com; style-src 'self' 'unsafe-inline' https://a.sidepodcast.com; font-src https://a.sidepodcast.com; connect-src 'self' wss: https://a.sidepodcast.com; script-src 'self' https://a.sidepodcast.com; 1
default-src 'self' *.pingdom.net; script-src 'self'  'unsafe-eval' 'unsafe-inline' *.pingdom.net https://xiecomm.paymetric.com/; style-src 'self' 'unsafe-inline'; connect-src 'self' *.pingdom.net https://xiecomm.paymetric.com/; frame-src 'self' https://services.concordsoftwareleasing.com; frame-ancestors 'self' www.tristatefinancial.net  www.midatlanticcapital.net  ownerslounge.welkresorts.com  www.myaccountinquiry.com  test.myaccountinquiry.com; 1
frame-ancestors https://www.gastroback.de https://gastroback.roomskale.com https://gastroback.roomskale.local 1
default-src 'none';script-src 'self';connect-src 'self';style-src 'self';img-src 'self' data:;font-src 'self' data:;media-src 'self';form-action 'self';frame-ancestors 'none';block-all-mixed-content 1
