Values for content-security-policy: upgrade-insecure-requests 12,707 block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; 12,511 upgrade-insecure-requests; 6,621 frame-ancestors 'self' 4,738 block-all-mixed-content 2,275 frame-ancestors 'self'; 1,350 block-all-mixed-content; frame-ancestors *; upgrade-insecure-requests; 1,208 block-all-mixed-content; 1,067 frame-ancestors 'none' 937 frame-ancestors 'self' https://*.granicus.com http://*.granicus.com https://platform.civicplus.com https://account.civicplus.com https://analytics.civicplus.com; img-src * data:; worker-src * data: blob: 'unsafe-eval' 'unsafe-inline'; script-src * about: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob:; font-src * data:; default-src * 881 default-src https: data: 'unsafe-inline' 'unsafe-eval' 453 frame-ancestors 'none'; 357 318 frame-ancestors 'self' https://*.ally.ac; 297 report-uri /report-csp-violation 273 default-src * data: 'unsafe-eval' 'unsafe-inline' 265 report-to network-errors; upgrade-insecure-requests 262 frame-ancestors 'self' ; 244 frame-ancestors 'self' godaddy.com test-godaddy.com dev-godaddy.com *.godaddy.com *.test-godaddy.com *.dev-godaddy.com 221 report-to network-errors 221 img-src https: data:; upgrade-insecure-requests 212 default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests; 145 upgrade-insecure-requests; frame-ancestors 'self' 127 frame-ancestors 'self' https://app.kajabi.com 120 frame-ancestors 'self'; default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; child-src https: blob: data:; connect-src https: blob: data: wss:; font-src https: blob: data:; img-src https: blob: data:; media-src https: blob: data:; object-src https: blob: data:; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; style-src https: blob: data: 'unsafe-inline'; upgrade-insecure-requests 118 default-src 'self'; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 117 frame-ancestors 'self' https://explore.oracle.com https://my.oracle.com https://eeho.fa.us2.oraclecloud.com https://blogs.oracle.com 107 frame-ancestors 'self' https://*.cdn.ampproject.org/ https://bing-amp.com/ https://*.tm-aws.com/ https://*.tm-awx.com/; 106 default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 88 upgrade-insecure-requests; frame-ancestors 'self' live.sagepay.com; base-uri 'self' 85 frame-ancestors 'self' continuum.epublishing.com *.continuum.epublishing.com 83 default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: data: blob:; media-src blob: data: https:; object-src https:; child-src https: data: blob:; upgrade-insecure-requests; block-all-mixed-content; 81 script-src 'self' 78 frame-ancestors 'self' http://webvisor.com 77 child-src * blob: 77 default-src * data: 'self' 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data:; font-src * 'self' data: 75 default-src * blob: data: cid:; img-src * data: cid: 'unsafe-inline'; media-src * data: blob:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline'; style-src-elem * blob: data: 'unsafe-inline', font-src * data: 74 default-src 'self' http: https: data: blob: 'unsafe-inline' 73 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: 72 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://cdn.exoticads.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com ; connect-src 'self' blob: blob https://*.mmcdn.com https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://txn.apac.paywithpoli.com https://player.vimeo.com; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://www.coinpayments.net https://wnu.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce; 68 frame-ancestors 'self'; upgrade-insecure-requests 65 default-src * blob: data: cid:; img-src * data: blob: cid: 'unsafe-inline'; media-src * data: blob:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline'; style-src-elem * blob: data: 'unsafe-inline', font-src * data: 64 sandbox allow-scripts; default-src 'self'; img-src https:; style-src 'unsafe-inline'; script-src 'unsafe-inline'; report-uri http://csp.yahoo.com/beacon/csp?src=redirect 63 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; 63 frame-ancestors 'self' https://*.brightsites.co.uk; 62 frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com 61 frame-ancestors about: 'self' 60 frame-ancestors 'self' *.google.com *.googleusercontent.com 59 frame-ancestors * 53 default-src * data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 50 frame-ancestors 'self' www.bookends.info *.bookends.info 46 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://am-assets.pl www.googletagmanager.com www.google-analytics.com www.google.com www.gstatic.com widget.helpcrunch.com connect.facebook.net stats.pusher.com secure.payu.com;style-src 'self' 'unsafe-inline' https://am-assets.pl fonts.googleapis.com; 46 default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval' 44 frame-ancestors 'self' https://*.sitewrench.com 44 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; 44 report-uri https://www.instagram.com/security/csp_report/; default-src 'self' https://www.instagram.com; img-src data: blob: https://*.fbcdn.net https://*.instagram.com https://*.cdninstagram.com https://*.facebook.com https://*.fbsbx.com https://*.giphy.com; font-src data: https://*.fbcdn.net https://*.instagram.com https://*.cdninstagram.com; media-src 'self' blob: https://www.instagram.com https://*.cdninstagram.com https://*.fbcdn.net; manifest-src 'self' https://www.instagram.com; script-src 'self' https://instagram.com https://www.instagram.com https://*.www.instagram.com https://*.cdninstagram.com wss://www.instagram.com https://*.facebook.com https://*.fbcdn.net https://*.facebook.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https://*.www.instagram.com https://www.instagram.com 'unsafe-inline'; connect-src 'self' https://instagram.com https://www.instagram.com https://*.www.instagram.com https://graph.instagram.com https://*.graph.instagram.com https://graphql.instagram.com https://*.cdninstagram.com https://api.instagram.com https://i.instagram.com https://*.i.instagram.com wss://www.instagram.com wss://edge-chat.instagram.com https://*.facebook.com https://*.fbcdn.net https://*.facebook.net chrome-extension://boadgeojelhgndaghljhdicfkmllpafd blob:; worker-src 'self' blob: https://www.instagram.com; frame-src 'self' https://instagram.com https://www.instagram.com https://*.instagram.com https://staticxx.facebook.com https://www.facebook.com https://web.facebook.com https://connect.facebook.net https://m.facebook.com; object-src 'none'; upgrade-insecure-requests 43 report-uri /report-csp-violation; upgrade-insecure-requests 43 script-src 'unsafe-inline' 'unsafe-eval' http: https: 43 base-uri 'self'; 41 block-all-mixed-content; style-src https: 'unsafe-inline'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src https:; 40 default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; 40 default-src='self' 40 default-src 'self' blob: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: embed.music.apple.com embed.podcasts.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' data: blob: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com 39 object-src 'none' 39 default-src * data: blob: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-ancestors 'self' *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.baidu.com *.bing.com; 39 default-src 'self' 'unsafe-inline' 39 frame-ancestors 'self' https://*.plazz.net ; 37 block-all-mixed-content; frame-ancestors 'self'; upgrade-insecure-requests 37 * 36 default-src 'none'; base-uri 'self'; block-all-mixed-content; connect-src 'self' uploads.github.com www.githubstatus.com collector.githubapp.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events translator.github.com wss://alive.github.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations insights.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com; frame-ancestors 'none'; frame-src render.githubusercontent.com render-temp.githubusercontent.com viewscreen.githubusercontent.com; img-src 'self' data: github.githubassets.com identicons.github.com collector.githubapp.com github-cloud.s3.amazonaws.com secured-user-images.githubusercontent.com/ *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/socket-worker-3f088aa2.js gist.github.com/socket-worker-3f088aa2.js 36 report-uri https://f6044819c139be406e5131b1724188ab.report-uri.com/r/t/csp/enforce; worker-src blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com dev.visualwebsiteoptimizer.com *.adnxs.com *.appier.net *.doubleclick.net *.google.co.uk *.googleadservices.com *.googlesyndication.com *.mathtag.com *.openx.net *.scupio.com bigsea.frontend.weborama.fr dx.bigsea.weborama.com cs.gssprt.jp match.adsrvr.org pixel.rubiconproject.com ps.eyeota.net ssp.adskom.com sync.ad-stir.com sync.adap.tv sync.adaptv.advertising.com tags.clickintext.net tapestry.tapad.com *.semasio.net *.disquscdn.com *.disqus.com disqus.com d17m68fovwmgxj.cloudfront.net apps-cdn.britishcouncil.org embed.scribblelive.com bat.bing.com public.tableau.com *.socdm.com britishcouncil-email.createsend.com *.googleapis.com *.gstatic.com www.google.de www.google.es *.google.com *.salesforceliveagent.com *.qualaroo.com s3.amazonaws.com *.bizographics.com sjs.bizographics.com idsync.rlcdn.com aa.agkn.com stags.bluekai.com sync.crwdcntrl.net loadus.exelator.com ml314.com *.adroll.com ucarecdn.com *.streamamg.com bookeo.com www-2903b.bookeo.com britishcouncil.github.io olc.live.solas.britishcouncil.digital bam.nr-data.net js-agent.newrelic.com *.akamaihd.net x.bidswitch.net *.ads-twitter.com *.twimg.com *.twitter.com *.fbcdn.net *.facebook.com cx.atdmt.com cx.atdmt.com connect.facebook.net *.linkedin.com snap.licdn.com *.sharethis.com vk.com cdn.polyfill.io www.googletagmanager.com sui.britishcouncil.org *.vimeocdn.com player.vimeo.com vimeo.com *.ytimg.com www.youtube.com *.google-analytics.com *.yahoo.com b92.yahoo.co.jp s.yimg.com britishcouncil.wufoo.com *.instagram.com *.hotjar.com *.stripe.com *.artfut.com cookies.onetrust.com cdn.cookielaw.org optanon.blob.core *.youtube-nookie.com *.fospha.com *.shorthand.com *.shorthandstories.com *.hs-scripts.com js.hs-banner.com js.hs-analytics.net js.hscollectedforms.net *.pardot.com sc-static.net *.tiktok.com *.snapchat.com *.ibytedtos.com *.arabclicks.com js.hsadspixel.net js.usemessages.com *.go-mpulse.net; 36 frame-ancestors 'self' *.pubble.nl *.pubble.cloud *.pubble.dev *.omnyo.nl 35 default-src 'self'; img-src * data: 'unsafe-inline' blob:; style-src * 'unsafe-inline' blob:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src *; form-action *; media-src *.readspeaker.com *.streamlock.net storage.googleapis.com 'self' blob:; frame-src *; worker-src * 'unsafe-inline' blob:; 35 frame-ancestors 'self' azeu.marketing.adobe.com 34 default-src 'self' 34 frame-ancestors 'self' https://*.adobe.com https://*.navisperformance.com 34 default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; 34 frame-ancestors none; 33 default-src 'none' 33 frame-ancestors 'self' https://preview.citynavigator.nl 33 frame-ancestors 'self' *.espn.com:* *.espnqa.com:* *.espnsb.com *.espn.co.uk *.espndeportes.espn.com *.espn.com.br *.espn.com.mx *.espn.com.ve *.espn.com.ar *.espn.com.co *.espnfc.com.au *.espn.com.au *.espn.in *.espn.com.sg *.espn.cl *.espn.com.pe *.espn.com.gt *.espn.com.do *.espn.com.ec *.espn.com.uy *.espn.com.pa *.espn.co.cr qa.abcnews.go.com preview.abcnews.go.com abc7ny.com abc7.com *.abcotvssb.com preview.goodmorningamerica.com http://*.espnqa.com:* http://*.espn.com:* *.abcotvssb.com abcnews.go.com abc30.com abc7news.com abc13.com abc7chicago.com 6abc.com abc11.com *.goodmorningamerica.com qa.abc7.com 32 default-src *;script-src 'self' resource://pdf.js 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' *.teamblue.services static-dev-portal.s3-eu-west-1.amazonaws.com d1rv23qj5kas56.cloudfront.net events.webnode.com js.stripe.com www.gstatic.com www.googleadservices.com www.googletagmanager.com bat.bing.com connect.facebook.net a.quora.com www.google-analytics.com googleads.g.doubleclick.net c.imedia.cz www.google.com cdn.inspectlet.com;style-src 'self' 'unsafe-inline' 'unsafe-eval' static-dev-portal.s3-eu-west-1.amazonaws.com d1rv23qj5kas56.cloudfront.net www.gstatic.com js.stripe.com;img-src 'self' data: mediastream: blob: filesystem: *.teamblue.services d1rv23qj5kas56.cloudfront.net du5rkdszt1kq5.cloudfront.net d11bh4d8fhuq47.cloudfront.net static-dev-portal.s3-eu-west-1.amazonaws.com www.webnode.com www.gstatic.com q.stripe.com bat.bing.com q.quora.com www.google.com www.google.cz www.google.de www.google-analytics.com googleads.g.doubleclick.net cx.atdmt.com c.seznam.cz www.facebook.com www.googletagmanager.com *.webnode.com *.webnode.cz *.webnode.sk *.webnode.at *.webnode.es *.webnode.cl *.webnode.com.ve *.webnode.com.uy *.webnode.mx *.webnode.com.co *.webnode.co *.webnode.com.ar *.webnode.com.py *.webnode.bo *.webnode.do *.webnode.ec *.webnode.pe *.webnode.cr *.webnode.com.br *.webnode.pt *.webnode.it *.webnode.fr *.webnode.us *.webnode.in *.webnode.gr *.webnode.com.tr *.webnode.cn *.webnode.tw *.webnode.nl *.webnode.be *.webnode.jp *.webnode.hu *.webnode.ru *.webnode.com.ua *.webnode.se *.webnode.dk *.webnode.lv *.webnode.hr *.webnode.no *.webnode.co.uk *.webnode.vn *.webnode.ro *.webnode.cat *.webnode.kr *.webnode.fi;frame-ancestors 'self'; 32 default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; 32 default-src 'self'; connect-src *.g.doubleclick.net 'self' www.google-analytics.com https://www.google-analytics.com; frame-src 'none'; img-src 'self' data: *.pbwstatic.com https://*.pbwstatic.com www.google-analytics.com; media-src 'none'; object-src 'none'; script-src 'self' www.google-analytics.com https://www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' 31 default-src 'self' wss: http: https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors https: http:; report-uri https://secure.booked.net/?page=stat&t=csp 31 frame-ancestors 'self' ; base-uri 'self'; 31 default-src http: https: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self' *.gov.cn 30 default-src 'self' blob: wss: data: https:; img-src 'self' data: https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https:; style-src 'self' 'unsafe-inline' data: https:; report-uri https://monitor.ebay.com/csp-report/r1highlnfe38/Highline_Homepage 27 policy-definition 27 default-src https: data: blob: 'unsafe-eval' 'unsafe-inline'; object-src 'none' 27 default-src * 'unsafe-inline' 'unsafe-eval' data: blob: 27 default-src *; script-src 'unsafe-eval' 'self' 'unsafe-inline' https:; object-src 'self' *.ytimg.com ytimg.com *.youtube.com youtube.com; style-src * 'unsafe-inline'; img-src * data:; frame-src *; font-src * data:; connect-src *; media-src * blob:; 26 sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=frontpage&site=fp®ion=US&lang=en-US&device=desktop&partner=default; 25 default-src https:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss:; worker-src 'self' blob: 25 default-src https: 'unsafe-inline' 'unsafe-eval'; img-src * 'self' data: https:; font-src * 'self' data: https:; style-src * 'self' 'unsafe-inline' data: https: 25 default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self' 25 default-src 'self'; connect-src https:; font-src https:; frame-src https:; img-src https: data:; media-src https:; object-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; 25 frame-ancestors 'self' https://widget.stackla.com https://app-sj14.marketo.com https://store.nvidia.com https://resources.nvidia.com https://www.youtube.com https://www.quadro-selector.com http://player.youku.com https://player.youku.com https://live.nvidia-china.com https://www.google.com https://www.nvidia.cn https://wwwstage.nvidia.com https://www.nvidia.com https://events.rainfocus.com https://store.nvidia.com https://www.twitch.tv https://store.nvidia.ru https://store.nvidia.in https://shop.nvidia.com; 24 frame-ancestors self 24 script-src * 'self' 'unsafe-inline' 'unsafe-eval' wistia.com youtube.com blob: 24 frame-ancestors https://cue.forum.cue.cloud 24 default-src 'self'; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 24 "upgrade-insecure-requests" 24 frame-ancestors 'self' https://sage.pathfactory.com https://explore.sage.com; 23 base-uri 'self'; img-src * data: 'unsafe-inline'; default-src data: * 'unsafe-inline'; frame-ancestors 'self'; manifest-src 'none'; media-src *.readspeaker.com *.speechstream.net 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; object-src 'self'; report-uri https://www.cspreport.nl 23 default-src data: 'unsafe-inline' 'unsafe-eval' https: http:;script-src data: 'unsafe-inline' 'unsafe-eval' https: http: blob:;style-src data: 'unsafe-inline' https: http: blob:;img-src data: https: http: blob:;font-src data: https: http:;connect-src https: wss: ws: http: blob:;media-src https: blob: http:;object-src https: http:;child-src https: data: blob: http:;form-action https: http:;block-all-mixed-content; 22 frame-ancestors 'self' *.smartagent.app *.jdmesh.co *.choicestore.com http://localhost:* https://localhost:*; form-action https:; script-src https: 'unsafe-inline' 'unsafe-eval' 22 default-src 'self'; 22 upgrade-insecure-requests; block-all-mixed-content; 22 default-src 'self' *.edge-cdn.net; object-src www.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.analytics.edgekey.net *.bing.com *.ccmp.eu *.cookiebot.com *.edge-cdn.net *.google-analytics.com *.googletagmanager.com *.lidl *.lidl-flyer.com *.lidl.com *.lidl.net *.multichannelacd.de *.secrz.de *.virtualearth.net ads.yahoo.com advdl.ammadv.it analytics.google.com assets.zendesk.com c.imedia.cz cm.g.doubleclick.net connect.facebook.net d.adroll.com d.adroll.mgr.consensu.org form.lidl.com googleads.g.doubleclick.net lidl.media01.eu lidlplus-prod-api.azurewebsites.net lidlqform.omax.cz s.adroll.com s.ytimg.com tagmanager.google.com track.adform.net us-u.openx.net www.dwin1.com www.googleadservices.com www.google.com www.youtube.com schwarz.adverity.com; img-src 'self' data: *.bing.com *.ccmp.eu *.doubleclick.net *.edge-cdn.net *.google-analytics.com *.googleusercontent.com *.lidl *.lidl-flyer.com *.lidl.com *.lidl.net *.openstreetmap.org *.osm.org *.secrz.de *.virtualearth.net advdl.ammadv.it assets.zendesk.com c.imedia.cz d.adroll.com google.de ib.adnxs.com idsync.rlcdn.com lidlplusprod.blob.core.windows.net lidlplusstaticcontentpro.blob.core.windows.net lidlplusstoragestaging.blob.core.windows.net s-static.ak.facebook.com ssl.gstatic.com stats.g.doubleclick.net track.adform.net www.facebook.com www.google.com www.googletagmanager.com www.gstatic.com x.bidswitch.net; style-src 'self' 'unsafe-inline' *.bing.com *.secrz.de assets.zendesk.com fonts.googleapis.com form.lidl.com tagmanager.google.com; font-src 'self' 'unsafe-inline' fonts.gstatic.com form.lidl.com data: themes.googleusercontent.com; frame-src 'self' https: 'unsafe-inline'; connect-src 'self' *.analytics.edgekey.net *.bing.com *.ccmp.eu *.edge-cdn.net *.google-analytics.com *.lidl *.lidl.com *.lidl.net *.multichannelacd.de *.openstreetmap.org *.osm.org *.secrz.de *.test *.video-cdn.net *.virtualearth.net appgateway.lidlplus.com content.lidlplus.com form.lidl.com lidl.media01.eu lidlplus-prod-api.azurewebsites.net lidlplus-uat-api.azurewebsites.net stats.g.doubleclick.net; frame-ancestors 'self' *.bing.com *.ccmp.eu *.google-analytics.com *.googletagmanager.com *.lidl *.lidl.ch *.lidl.com *.lidl.net *.poi-service.de *.secrz.de *.test accounts-qa.lidl.com accounts-stg.lidl.com accounts-uat.lidl.com accounts.lidl.com website-lidl-account-dev.azurewebsites.net *.lidl-shop.pl *.lidl-sklep.pl; 22 default-src: https:mycolorcoach-cpd.e-loreal.com; frame-ancestors 'self' X-Frame-Options: SAMEORIGIN 22 self 22 default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com z8y8f3q6.ssl.hwcdn.net https://www.xvideos.com https://wg-xvdev.xvideos.com *.trafficfactory.biz fonts.googleapis.com fonts.gstatic.com ajax.googleapis.com www.google-analytics.com www.googletagmanager.com *.addthis.com *.addthisedge.com www.iwanttodeliver.com apis.google.com www.google.com www.gstatic.com accounts.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.lswcdn.net *.llnwd.net *.hwcdn.net fcm.googleapis.com *.nk-img.com https://static-dev-xvlive.xvideos.com https://dev-api.naked.com http://dev-api.naked.com *.googleapis.com *.exoclick.com *.exosrv.com *.realsrv.com *.exdynsrv.com *.ackcdn.net *.adtng.com *.adglare.net adinvent.engine.adglare.net *.bngpt.com bngpt.com *.trafficjunky.net *.ohmybutt.com *.flirt4free.com *.xlovecam.com *.wlresources.com *.medleyads.com *.cams.com *.acdn5165543.com *.protoawe.com *.google-analytics.com *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com *.promo-bc.com *.bongacams.com *.bongacash.com *.gammae.com *.servingmillions.com *.super-route.com cdn01.flashmediaportal.com engine.asf4f.us *.htdvt.com *.jerkmate.com *.vfgtb.com *.hytxg2.com *.awemdia.com *.cfgr3.com *.ajxx98.online *.sf4f.us *.adworldmedia.com as.air2s.com bngpst.com cretgate.com mysexchatroom.com trknex.com medleyads.com ajxx98.online gamesfromheaven.com go.hpyjmp.com r.trwl2.com bongacams.com clickserve.dartsearch.net afrtrk.com track.cam4tracking.com creative.smljmp.com sffsdvc.com www.sffsdvc.com bmedia.justservingfiles.net blkditsup.com vast.bimbim.com promo.cameraprive.com bngprl.com *.bngprl.com trafforsrv.com serving.stat-rock.com *.adglare.net www.flirt4free.com www.ohmybutt.com www.secretpartners.com cdn.asf4f.us *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com etahub.com ctrack.trafficjunky.net tracking.sexcash.com;img-src 'self' 'unsafe-inline' data: blob: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com *.hwcdn.net *.trafficfactory.biz www.google.com www.google-analytics.com ssl.gstatic.com *.nk-img.com *.camster.com *.vscdns.com *.doubleclick.net *.google.fr *.google.com *.exoclick.com *.exosrv.com *.realsrv.com *.exdynsrv.com *.ackcdn.net bmedia.justservingfiles.net; 21 frame-ancestors 'self' https://help.glassdoor.com http://library.glassdoor.com https://library.glassdoor.com http://glassdoor.lookbookhq.com https://glassdoor.lookbookhq.com https://glassdoor2.lookbookhq.com https://howto.glassdoor.com https://apply.indeed.com ; 21 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 21 connect-src http://ip-api.com/ 'self' https: data: 21 ; 21 worker-src 'self' 21 object-src 'self' 21 block-all-mixed-content; object-src 'none'; form-action 'self' *.indeed.com https://go.indeedassessments.com/ https://take.indeedassessments.com/; frame-src 'self' *.indeed.com https://accounts.google.com/ https://smartlock.google.com/ https://www.google.com/recaptcha/ https://www.youtube.com/embed/; img-src 'self' *.indeed.com data: d13w2n5a9i6r56.cloudfront.net d3hbwax96mbv6t.cloudfront.net d12632ofg6v5f7.cloudfront.net d2q79iu7y748jz.cloudfront.net d3s4xzh46vzktb.cloudfront.net d1ymdoy4af119w.cloudfront.net d3fw5vlhllyvee.cloudfront.net d3nbup7htlluyi.cloudfront.net https://indeed-labs-jp-baito.s3.amazonaws.com https://res.cloudinary.com www.google-analytics.com https://www.google.com/ads https://www.facebook.com/tr/ https://sb.scorecardresearch.com https://stats.g.doubleclick.net https://*.tvpixel.com/* https://*.optimizely.com/* https://d.turn.com/* https://idsync.rlcdn.com/* https://pt.ispot.tv; default-src 'self' 'unsafe-inline' data: *.indeed.com d3fw5vlhllyvee.cloudfront.net d3fw5vlhllyvee.cloudfront.net https://smartlock.google.com/ https://d13w2n5a9i6r56.cloudfront.net/ https://accounts.google.com/ https://cdn.ravenjs.com/3.14.2/raven.min.js d3hbwax96mbv6t.cloudfront.net d12632ofg6v5f7.cloudfront.net d2q79iu7y748jz.cloudfront.net d3s4xzh46vzktb.cloudfront.net d1ymdoy4af119w.cloudfront.net d3fw5vlhllyvee.cloudfront.net www.google-analytics.com https://www.facebook.com/tr/ https://sb.scorecardresearch.com https://connect.facebook.net *.serving-sys.com maps.googleapis.com csi.gstatic.com https://ad.doubleclick.net/ddm/activity/ https://www.google.com/recaptcha/ https://www.gstatic.com https://www.youtube.com https://pp.d2-apps.net/v1/impressions/log dpuk71x9wlmkf.cloudfront.net https://privacyportal.onetrust.com https://stats.g.doubleclick.net https://d3fw5vlhllyvee.cloudfront.net/frontend-sentry-bundle/v1.1.2/js/sentry.js https://apis.google.com/js/platform.js https://app-sj07.marketo.com/js/forms2/js/forms2.min.js https://browser.sentry-cdn.com/4.3.3/bundle.min.js https://browser.sentry-cdn.com/4.4.2/bundle.min.js https://*.tvpixel.com/* https://*.optimizely.com/* https://cdn.optimizely.com/js/10668710116.js https://munchkin.marketo.net/munchkin.js https://www.google-analytics.com/analytics.js https://www.google-analytics.com/plugins/ua/linkid.js https://fonts.gstatic.com/ https://fonts.googleapis.com/ https://pxl.indeed.com/* https://match.prod.bidr.io/cookie-sync/indeed https://rs.fullstory.com/rec/ https://d2k1bn3ko1qk4.cloudfront.net https://itad.indeed.com/* https://pres.indeed.com/*; 20 default-src 'self' http: https: data: blob: wss: 'unsafe-inline' 'unsafe-eval' 20 frame-ancestors 'self'; base-uri 'self'; 20 script-src 'self' https: 'unsafe-inline' 'unsafe-eval' 19 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; 19 base-uri 'self'; frame-ancestors 'self' 19 frame-ancestors 'self' https://*.funkedigital.de; 19 img-src * data:; default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; 19 default-src 'self' https://*.abgemea.com https://fonts.googleapis.com https://use.fontawesome.com ws.sharethis.com unpkg.com maxcdn.bootstrapcdn.com dpm.demdex.net avisbudgetgroup.tt.omtrdc.net https://*.bing.com https://*.virtualearth.net; object-src *; img-src data: *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; frame-src *; connect-src *; font-src 'self' data: https://*.abgemea.com https://fonts.gstatic.com https://*.bing.com https://use.fontawesome.com https://*.virtualearth.net 19 default-src 'self' 'unsafe-eval' 'unsafe-inline' *.amazonaws.com cdn.cookielaw.org privacyportal.onetrust.com www.google-analytics.com *.twitter.com www.youtube.com agent.nuance-va.com *.nuance-va.com cocacolaco.tt.omtrdc.net *.doubleclick.net *.coca-colacompany.com www.google.com www.gstatic.com cdn.jsdelivr.net *.pricespider.com api.mapbox.com maps.googleapis.com events.mapbox.com *.coke.com *.coca-cola.com *.yimg.com *.ads-twitter.com www.googleadservices.com sc-static.net *.sprinklr.com *.demdex.net *.adobedc.net googleads.g.doubleclick.net; img-src * data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn-social.janrain.com cdn.cookielaw.org ajax.googleapis.com www.cdnjs.cloudflare.com cdnjs.cloudflare.com geolocation.onetrust.com www.googletagmanager.com www.google-analytics.com *.twitter.com www.instagram.com connect.facebook.net *.krxd.net *.amazonaws.com www.google.com www.youtube.com rpxnow.com d29usylhdk1xyu.cloudfront.net s.ytimg.com www.gstatic.com atentochile.s1gateway.com stackpath.bootstrapcdn.com cdn.jsdelivr.net *.pricespider.com api.tiles.mapbox.com bugcrowd.com assets.bugcrowdusercontent.com *.coke.com *.coca-cola.com *.yimg.com *.ads-twitter.com *.googleadservices.com sc-static.net *.analytics.yahoo.com *.sprinklr.com *.adobedtm.com googleads.g.doubleclick.net; style-src 'self' 'unsafe-eval' 'unsafe-inline' use.typekit.net p.typekit.net *.janrain.com cdn.cookielaw.org stackpath.bootstrapcdn.com *.pricespider.com *.tiles.mapbox.com *.sprinklr.com *.coke.com; font-src 'self' data: use.typekit.net fonts.gstatic.com *.sprinklr.com *.coke.com; frame-src 'self' *; frame-ancestors 'self' bugcrowd.com editor.wallboard.info; manifest-src 'self' data:; worker-src blob:; 18 default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *; 18 frame-ancestors 'self' https://immobilier.jll.be https://events1.social27.com https://jll.maps.arcgis.com; 18 frame-ancestors *; 18 frame-ancestors https://unileverbrazil.marketing.adobe.com https://unilever3.marketing.adobe.com https://unilever2.marketing.adobe.com https://unilever.marketing.adobe.com; 18 default-src 'none'; script-src 'self' 'unsafe-inline' *.loszona.com www.google.com youtube.com *.youtube.com *.loszona.com *.facebook.com *.facebook.net *.twitter.com; style-src 'self' 'unsafe-inline' data: *.loszona.com; img-src 'self' data: *.fisioestetic.com *.loszona.com www.google.com youtube.com *.youtube.com *.loszona.com *.facebook.com *.facebook.net *.twitter.com; connect-src 'self' wss://*.glr.com:* wss://*.glrsales.com:*; manifest-src 'self'; worker-src 'self'; frame-src www.google.com youtube.com *.youtube.com *.loszona.com *.facebook.com *.facebook.net *.twitter.com 18 default-src 'self'; img-src * www.googletagmanager.com data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.typekit.net *.cloudflare.com *.fontawesome.com *.mailchimp.com cdn.p-n.io; font-src 'self' data: fonts.gstatic.com *.typekit.net *.fontawesome.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com *; frame-src 'self' *; connect-src 'self' *; prefetch-src *.google-analytics.com *.googlesyndication.com; 18 default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: blob:; media-src 'self' https: blob:; worker-src 'self' https: blob:; block-all-mixed-content; connect-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: blob: https://*.trouter.io:443 https://*.trouter.skype.com:443 wss://*.trouter.io:443 wss://*.trouter.skype.com:443; 17 upgrade-insecure-requests; block-all-mixed-content 17 frame-ancestors 'self' *.nokia.com; report-uri /report-csp-violation 17 img-src data: https: 17 default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' https://api.mapbox.com https://*.tiles.mapbox.com;block-all-mixed-content;upgrade-insecure-requests; 17 frame-ancestors 'self' *.affino.com; 17 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: 24703.online-adventskalender.de *.b-ite.com *.bitkomplex.de *.bright-guide.de *.cdn.office.net *.cloudfront.net *.cookiebot.com *.dvinci-hr.com *.etracker.com *.etracker.de *.exmap.de *.facebook.com *.flickr.com *.google-analytics.com *.google.com *.google.de *.googleapis.com *.gstatic.com *.haffhus.de *.highcharts.com *.hk24.de *.ihk.de *.ihk24.de *.jobcluster.de *.linkedin-ei.com *.linkedin.com *.mateforevents.com *.microsoft.com *.multipage.online *.newsletter2go.com *.office.com *.office365.com *.perbit-job.de *.podigee-cdn.net *.spotify.com *.staticflickr.com *.stream24.net *.thinglink.com *.thinglink.me *.twimg.com *.twitch.tv *.twitter.com *.unikam.de *.userlike.com *.vimeo.com *.wahlplus.de *.walls.io *.wirecard.com *.xing-events.com *.youtube.com api.mapbox.com app.cituro.com app.sli.do b6df6a39-9bba-47b4-b1e3-367604039de3.rlets.com bc.pressmatrix.com berufsausbildung-aachen-ihk.de cdn.contentful.com cdn.doo.net/assets/js/viovendi-embed-static-1.js cdn.podigee.com cdn.rlets.com cdnjs.cloudflare.com code.createjs.com code.jquery.com/jquery-3.1.1.min.js con.arbeitsagentur.de connect.facebook.net consentcdn.cookiebot.com corona.conterra.de cottbus-ihk-pruefungen.de covid19.webtvcampus.de datawrapper.dwcdn.net dbaw.specials-bahn.de detmold.ihk-beitragsrechner.de dihk.imageplant.de doo.net e.issuu.com e.video-cdn.net editor.signavio.com embed.nexx.cloud events-to-impress.activehosted.com expertenpool.automatisierungsregion.de geoportal-hamburg.de geoportal.metropolregion.hamburg.de haffhus.s3.eu-central-1.amazonaws.com handelskammer-bremen.appointmind.net hk24.perbit-job.de hk24.perbit-job.de html5-player.libsyn.com iframe.wvd-portfolio.de ihk-ar.ycms.rocks ihk-darmstadt-portal.rexx-recruitment.com ihk-potsdam.perbit-job.de ihk-schwerin.wahlplus.de ihk-weiterbildung-oldenburg.de ihk.selbstdenker.com ihkob.wekando.eu imagemarker.com ims-files-cdn.net infographic.statista.com inx.odav.de isi.hdb-hamburg.de komsis.inecos.de kvg-kassel.widget-generator.de link.webropolsurveys.com live.c3networking.de livestream.watch/vp/nachhaltigkeitsdialog.html maxcdn.bootstrapcdn.com pam.ihk-schleswig-holstein.de playout.3qsdn.com plugins.flockler.com roundme.com routenplaner.bus-bahn-thueringen.de service.tecintelli.de start.video-stream-hosting.de static-exp1.licdn.com static.dvinci-easy.com static.issuu.com tecintelli-static-ttl.obs.eu-de.otc.t-systems.com/ tuerchen.com umap.openstreetmap.fr userlike-cdn-operators.s3-eu-west-1.amazonaws.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com vimeo.com vstdbv3 w.soundcloud.com walls.io web.ihk-pfalz.net web.inxmail.com wss://chat.userlike.com/chat/ wss://umd.userlike.com/umd/ www.ausbildungslauf.de www.azubi-magdeburg-ihk.de www.bahn.de www.berufe.tv www.bso-hessen.de www.etermin.net www.finest-jobs.com www.forschungsfinder-hessen.de www.gatewatch.eu www.giu-kalender.org www.google.analytics.com www.googletagmanager.com www.hvv.de www.ihk-arbeitsgemeinschaft-rlp.de www.ihk-berlin.de www.ihk-berlin.org www.ihk-bw.digital www.ihk-ecofinder.de www.ihk-gfi.de www.ihk-koblenz.de www.ihk-lehrstellenboerse.de www.ihk-lueneburg.de www.ihk-magdeburg.de www.ihk-ostbrandenburg.de www.ihk-praktikumsportal.de www.ihk-rlp.de www.ihk-wiesbaden.de www.ihkac-anwendungen.de www.instagram.com www.iwd.de www.kandidatenmanagement.de www.leg-thueringen.de www.onlinebewerbungsserver.de www.plattform-i40.de www.powr.io www.praktikum.info www.rmv.de www.terminland.de www.tfaforms.com www.vvs.de www.youtube-nocookie.com ; report-uri /blueprint/servlet/serviceport/rest/csplogging/logViolation ; 17 block-all-mixed-content; frame-ancestors 'self' 17 frame-ancestors 'self' *.facebook.com *.vk.com 17 upgrade-insecure-requests; frame-ancestors: self 17 frame-ancestors cue.test:81 cue.test http://cuedev.ece.ksml.fi cue.media.fi; 17 frame-ancestors 'self' *.roomlynx.net 17 frame-ancestors 'self' https://medium.com 16 frame-ancestors https://*.poki.io http://localhost:1234 16 frame-ancestors 'self' http://hybris.com https://hybris.com https://discovery-center.cloud.sap https://www.discovery-center.cloud.sap http://*.hybris.com https://*.hybris.com http://sap.lookbookhq.com https://sap.lookbookhq.com http://*.sap.com https://*.sap.com http://*.sap.cn https://*.sap.cn https://www.gigya.com *.lookbookhq.com https://cloudplatform.sap.com https://cal.sap.com https://developers.sap.com *.omtrdc.net;default-src 'self' blob: https: data: 'unsafe-inline' 'unsafe-eval' github.com api.github.com raw.githubusercontent.com *.cloud.sap *.liveperson.net http://*.sap.com https://*.sap.com http://*.sap.cn https://*.sap.cn *.adobedtm.com *.company-target.com *.omtrdc.net *.w55c.net platform.twitter.com *.siteintercept.qualtrics.com *.doubleclick.net cdnjs.cloudflare.com charts3.equitystory.com http://sap-espresso.com http://*.akamai.net ust-servlet.dataxu.net https://*.cdn.sap.com *.2mdn.net *.2o7.net *.qualtrics.com https://*.akamaihd.net http://*.akamaihd.net *.lpsnmedia.net *.truste.com *.newrelic.com *.nr-data.net https://*.youtube.com https://*.youtu.be https://*.ytimg.com *.twitter.com http://*.twimg.com https://*.twimg.com *.adobe.com *.demdex.net *.liveperson.com *.liveengage.net *.liveengage.com http://livefyre.com *.liveper.sn *.licdn.com *.cloud.sap *.hana.ondemand.com http://dc1cp8nqqrmxi.cloudfront.net http://*.edgesuite.net https://bcmcps.enter.sap *.d41.co 16 default-src https: blob:; connect-src https: wss: blob:; font-src https: data:; frame-src https:; frame-ancestors 'self'; img-src https: blob: data:; media-src https: blob:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'unsafe-inline' https:; 16 upgrade-insecure-requests;connect-src * 16 default-src https: *; script-src https: 'unsafe-inline' 'unsafe-eval' *;img-src data: https:;font-src data: https:;style-src https: 'unsafe-inline' *;upgrade-insecure-requests;frame-ancestors 'self'; base-uri 'none'; frame-src mailto: *; worker-src blob: ; child-src blob: ; 16 frame-ancestors kink.com mrskin-kink.com mrman-kink.com 16 default-src *; img-src * data:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; base-uri 'self'; form-action *; frame-ancestors * 16 upgrade-insecure-requests; block-all-mixed-content; sandbox allow-modals allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-orientation-lock allow-pointer-lock; 15 upgrade-insecure-requests; frame-ancestors *.cisco.com *.jasper.com *.ciscospark.com *.ciscolive.com http://cisco.lookbookhq.com https://cisco.lookbookhq.com testcisco.marketing.adobe.com cisco.marketing.adobe.com ciscosales.my.salesforce.com test.salesforce.com zedo.com hindustantimes.com economictimes.indiatimes.com *.webex.com *.cdw.com *.cdwg.com *.cdw.ca *.meraki-go.com http://ciscopartners.lookbookhq.com https://ciscopartners.lookbookhq.com ciscolearningsystem.com ciscocustomer.lookbookhq.com cisco.lookbookhq.com ccsmedia.com *.itquotes.ie dteonline.com ampito-cisco.com arkphire.com *.insight.com *.ccsmedia.com *.ebuyer.com *.lambda-tek.com *.storm-technologies.com *.vohkus.com *.bechtle.com *.rainfocus.com *.broadbandbuyer.com *.hardware.com shop.redpontem.com; 15 frame-ancestors 'self' esbroadcom.lookbookhq.com mfbroadcom.lookbookhq.com; 15 frame-ancestors none 15 script-src 'self' https: https://* s7.addthis.com tk3d.tk3dapi.com js.braintreegateway.com *.google.com google.com *.google-analytics.com googletagmanager.com platform.twitter.com connect.facebook.net 'unsafe-inline' 'unsafe-eval'; object-src 'self'; 15 block-all-mixed-content; upgrade-insecure-requests 15 script-src 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net tagmanager.google.com maps.googleapis.com www.googleadservices.com www.google-analytics.com www.google.com www.googletagmanager.com googleads.g.doubleclick.net www.gstatic.com checkoutshopper-live.adyen.com; object-src 'none' 15 'self' https://ajax.googleapis.com 15 default-src https: data: blob: mediastream: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; font-src https: data: 'self' 'unsafe-eval' 'unsafe-inline' 15 frame-ancestors 'self'; img-src 'self' i.notino.com cdn.notinoimg.com blob: data: *; 15 default-src 'self' 'unsafe-inline';script-src 'self' 'unsafe-inline' *.ametek.com *.ametekweb.com *.sunpowerinc.com *.ameteksi.com *.ortec-online.com *.baidu.com *.boltdns.net *.bootstrapcdn.com *.brightcove.com *.brightcove.net *.brightinfo.com *.cloudflare.com *.facebook.com *.facebook.net *.g.doubleclick.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hsforms.com *.hsforms.net *.hs-analytics.net *.hs-scripts.com *.usemessages.com *.hsadspixel.net *.hubspot.com *.jquery.com *.list-manage.com *.mailchimp.com *.maxcdn.com *.pardot.com *.pingdom.net *.sharethis.com *.site24x7rum.com *.spectro.com *.thomasnet.com *.twimg.com *.twitter.com *.vimeo.com *.webtraxs.com *.youku.com *.youtube.com *.zencdn.net *.zopim.com *.vresp.com *.techmfg.com *.techmfg.cn *.techmfg.de *.techmfg.jp *.techmfg.es *.zdassets.com *.marketingautomation.services *.leadforensics.com *.constantcontact.com *.icontact.com *.leadfeeder.com https://chimpstatic.com *.zygo.com *.linkedin.com *.hootsuite.com *.3dpublisher.net *.amazonaws.com https://js.hscta.net https://js.hs-banner.com https://js.hsleadflows.net *.force.com https://analytics-eu.clickdimensions.com https://widgets.wp.com *.clickdimensions.com *.zoominfo.com https://snap.licdn.com *.salesforceliveagent.com https://bat.bing.com *.salesforce.com *.salesforceliveagent.com *.salesforce.com *.visualforce.com *.lightning.com *.visualforce.com *.adobedtm.com *.rumiview.com *.simpli.fi *.googletagmanager.com *.kickfire.com *.doubleclick.net *.lightning.com *.adroll.com *.ytimg.com *.loopanalytics.com *.surveymonkey.com https://www.qlzn6i1l.com https://secure.neck6bake.com https://go.universalanalyzers.com https://go.store.universalanalyzers.com https://go.pardot.com https://go.obcorp.com https://go.csiheat.com https://go.cardinaluhp.com https://go.barbenanalytical.com https://optinmonster.com 'unsafe-eval';style-src * 'unsafe-inline';font-src * 'unsafe-inline' data:;img-src * 'unsafe-inline' data:;frame-src * 'unsafe-inline';connect-src * 'unsafe-inline';worker-src 'self' blob:;media-src 'self' *.boltdns.net *.akamaihd.net blob:;object-src 'unsafe-inline' 'self' 15 default-src * 'unsafe-eval' 'unsafe-inline' blob: data:; 15 default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob: wss://*.hotjar.com; font-src https: data:; img-src https: data: blob: android-webview-video-poster:; media-src https: data: blob:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests 14 frame-ancestors 'self' http://toolpool.circit.de https://toolpool.circit.de 14 base-uri 'self' 14 frame-ancestors 14 default-src blob: https: 'unsafe-eval' 'unsafe-inline'; connect-src https: 'self' https: *.amazonaws.com *.cfauthx.com *.mapbox.com data: *.accesso.com; img-src 'self' https: data: blob:; 14 frame-ancestors https:; 14 default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 14 default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none' 14 default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss: 14 child-src 'self' https://b2b.verizonmedia.com https://pages.oath.com https://www.youtube.com https://pages.verizonmedia.com https://delivery.vidible.tv https://content.uplynk.com/ https://b2b-media.verizonmedia.com;worker-src 'self' blob:;frame-ancestors 'self' https://b2b.verizonmedia.com https://b2b-media.verizonmedia.com https://pages.verizonmedia.com 13 frame-ancestors 'self' metrika.yandex.ru *.yandex.tld *.yandex.net webvisor.com *.webvisor.com http://*.webvisor.com http://webvisor.com https://*.webvisor.com http://webvisor.com https://metrika.yandex.ru https://mc.yandex.ru https://*.yandex.net https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.ua https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; form-action 'self' *.timeweb.ru *.timeweb.com *.timeweb.net timeweb.com timeweb.ru timeweb.net http://timeweb.com/; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.timeweb.net *.timeweb.ru timeweb.eu *.yandex.ru yandex.ru wss://*.timeweb.ru wss://*.timeweb.net www.googletagmanager.com www.google-analytics.com disutgh7q0ncc.cloudfront.net eligibility.wootric.com wootric-eligibility.herokuapp.com facebook.com connect.facebook.net *.facebook.com mc.yandex.md mc.yandex.ru *.livetex.ru *.livetex.me stats.g.doubleclick.net *.google.com *.google.ru *.sendpulse.com data: vk.com *.vk.com dadata.ru *.dadata.ru *.hostings.info *.hosters.ru bitrix.info static.criteo.net *.push.world *.gstatic.com recreativ.ru sslwidget.criteo.com *.googleapis.com *.webpushs.com onthe.io *.onthe.io i.imgur.com ipic.su *.sendpulse.com www.youtube.com s.tmimgcdn.com cdn.jsdelivr.net mc.webvisor.org https://*.getsitecontrol.com yastatic.net *.witstroom.com metrika.yandex.ru *.yandex.tld *.yandex.net webvisor.com *.witstroom.com:8080 https://checks.botfaqtor.ru blob: timeweb.com 13 default-src http: https: 'unsafe-inline' 'unsafe-eval' data: blob: mediastream:; 13 report-uri https://99designs.report-uri.io/r/default/csp/enforce; frame-ancestors 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' wss: https: data: blob: android-webview-video-poster:; upgrade-insecure-requests; 13 default-src https:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss:; worker-src blob: 13 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.sc.pages02.net https://www.google.com http://addshoppers.s3.amazonaws.com http://connect.facebook.net https://www.gstatic.com http://www.rtb123.com http://pixel.quantserve.com http://*.shop.pe http://shop.pe https://googleads.g.doubleclick.net https://code.jquery.com http://tt.mbww.com https://staticxx.facebook.com https://secure.quantserve.com https://tag.bounceexchange.com https://insight.adsrvr.org https://api.bounceexchange.com https://*.cloudfront.net https://*.scdn2.secure.raxcdn.com *.bounceexchange.com http://api.bounceexchange.com https://cdn.optimizely.com/ www.youtube.com s.ytimg.com static.getchute.com mpsnare.iesnare.com https://connect.facebook.net https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://siteimproveanalytics.com https://tagmanager.google.com optimizely.s3.amazonaws.com app.optimizely.com cdn3.optimizely.com *.rtb123.com *.s3.amazonaws.com https://tt.mbww.com/ https://shop.pe https://*.s3.amazonaws.com https://www.googleadservices.com/ https://www.google-analytics.com https://s3.amazonaws.com https://beacon.sojern.com https://*.micpn.com *.bing.com https://tracker.marinsm.com https://cdn.onesignal.com http://cdnjs.cloudflare.com/ *.googleadservices.com/ beacon.sojern.com cdn.onesignal.com *.mathtag.com rules.quantcount.com https://ak1s.abmr.net https://maps.googleapis.com/ https://sc-static.net/ https://translate.google.com/ https://translate.googleapis.com/ https://s.pinimg.com/ https://resources.xg4ken.com/ https://services.xg4ken.com/ https://js.adsrvr.org/ https://cdn.quantummetric.com/ https://seaworld-app.quantummetric.com https://members.cj.com ci-mpsnare.iovation.com https://c212.net https://cdn.c212.net https://commercelibs.ibm.com https://tag.mtrcs.samba.tv/v3/tag/edelman/seaworld-all/sambaTag.js https://optimizely-hrd.appspot.com/ https://*.trustarc.com/ https://consent.trustarc.com/ http://consent.trustarc.com/ https://consent.truste.com/ *.queue-it.net *.taboola.com/ secfld.vmmpxl.com https://isz.app.sparkinfluence.net/ https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js https://ajax.cloudflare.com https://cdn1.affirm.com/ https://www.affirm.com/ https://zn88kiqxnnojsefct-seaworldcx.siteintercept.qualtrics.com/ https://siteintercept.qualtrics.com/ https://*.hotjar.com/ https://sts.eccmp.com/ https://s7.addthis.com seaworld.com https://z.moatads.com/ https://v1.addthisedge.com/ https://m.addthis.com/ https://spot.demostellar.com/1.3.0/spot.js https://api-cust1117.cheetahedp.com* *.tvpixel.com ;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com http://*.shop.pe http://addshoppers.s3.amazonaws.com https://*.scdn2.secure.raxcdn.com https://*.cloudfront.net https://*.secure.raxcdn.com maxcdn.bootstrapcdn.com tagmanager.google.com *.s3.amazonaws.com https://s3.amazonaws.com https://addstrap-ui.addshoppers.com https://translate.googleapis.com https://members.cj.com https://assets.bounceexchange.com https://cdn1.affirm.com/ https://zn88kiqxnnojsefct-seaworldcx.siteintercept.qualtrics.com/ https://siteintercept.qualtrics.com/ https://*.hotjar.com/;font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com *.shop.pe *.scdn2.secure.raxcdn.com https://*.buschgardens.com https://buschgardens.com *.seaworld.com *.sesameplace.com https://www.sesameplace.com *.cloudfront.net *.secure.raxcdn.com https://www.aexp-static.com https://seaworld.scdn3.secure.raxcdn.com https://maxcdn.bootstrapcdn.com s3.amazonaws.com http://maxcdn.bootstrapcdn.com https://members.cj.com https://assets.bounceexchange.com https://www.affirm.com/ https://zn88kiqxnnojsefct-seaworldcx.siteintercept.qualtrics.com/ https://siteintercept.qualtrics.com/ https://*.hotjar.com/;frame-src 'self' s7.addthis.com https://*.fls.doubleclick.net/ http://*.fls.doubleclick.net/ http://*.facebook.com/ https://bid.g.doubleclick.net/ https://www.youtube.com https://www.seaworldlibrary.com https://docs.google.com https://*.seaworld.com/ https://Commerce.4adventure.com https://*.seaworldparks.com https://*.watercountry.com https://*.Commerce.4adventure.com https://*.adventureisland.com https://*.aquaticabyseaworld.com https://*.sesameplace.com http://6258894.fls.doubleclick.net http://6258894.fls.doubleclick.net http://4174228.fls.doubleclick.net https://4174228.fls.doubleclick.net https://www.googletagmanager.com https://staticxx.facebook.com https://insight.adsrvr.org https://assets.bounceexchange.com/ https://*.cdn.optimizely.com/ https://www.pages02.net/ https://tt.mbww.com/ https://secure.buschgardens.com https://maps.google.com https://www.google.com/ https://secure.aquatica.com https://*.bounceexchange.com http://contentz.mkt922.com/ https://pixel.mathtag.com/ https://www.chargerback.com https://*.widencdn.net/ https://*.seaworldlibrary.com https://www.surveygizmo.com/ https://tr.snapchat.com/ https://qa-secure.buschgardens.com https://members.cj.com https://survey.seaworldentertainment.com/ https://survey.zohopublic.com/ https://hpc.uat.freedompay.com/ https://hpc.freedompay.com/ https://consent-pref.trustarc.com/ https://*.trustarc.com https://x.m.buschgardens.com/ http://www.youtube.com/ https://cdn1.affirm.com/ https://www.affirm.com/ https://seaworldcx.iad1.qualtrics.com/ https://siteintercept.qualtrics.com/ https://*.hotjar.com/ https://vars.hotjar.com/ https://match.adsrvr.org/%0d%0a%0d%0a;connect-src 'self' https://staticxx.facebook.com https://insight.adsrvr.org https://*.scdn2.secure.raxcdn.com https://logx.optimizely.com https://*.secure.raxcdn.com *.s3.amazonaws.com cache.getchute.com https://tapi.optimizely.com https://shopper.shop.pe https://shop.pe https://rtb123.com https://api.getchute.com https://stats.g.doubleclick.net https://www.google-analytics.com https://*.as-labs.addshoppers.com/ https://as-labs.addshoppers.com https://s3.amazonaws.com https://www.google.com https://events.bouncex.net https://onesignal.com https://*.optimizely.com https://onesignal.com https://errors.client.optimizely.com https://translate.googleapis.com https://ct.pinterest.com/ https://seaworld-app.quantummetric.com/ https://commercelibs.ibm.com https://tag.mtrcs.samba.tv/ https://cdn.quantummetric.com/ https://pixel.mtrcs.samba.tv/v2/tag/edelman/seaworld-all/ https://trc.taboola.com/ https://isz.app.sparkinfluence.net/ https://api-cf.affirm.com/ https://tracker.affirm.com/ https://www.affirm.com/api/v2/cookie_sent/ https://www.affirm.com/ https://*.siteintercept.qualtrics.com/ https://siteintercept.qualtrics.com/ https://siteintercept.qualtrics.com https://*.hotjar.com/ https://in.hotjar.com/ wss://ws13.hotjar.com https://sts.eccmp.com/ https://spot.demostellar.com/1.3.0/spot.js https://api-cust1117.cheetahedp.com* https://api-cust1117.cheetahedp.com/edp/api/event?evtId=browse_product-0 *.tvpixel.com ; img-src 'self' data: * ; media-src 'self' https://scontent.cdninstagram.com https://*.as-labs.addshoppers.com/ *.s3.amazonaws.com/ https://s3.amazonaws.com/images/BackgroundImage.jpeg s3.amazonaws.com/ https://seaworld.scdn3.secure.raxcdn.com/ https://stage-media.scdn6.secure.raxcdn.com/; 13 default-src https: 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' data: *; media-src blob: 'self' *; font-src 'self' data: *; connect-src 'self' *; child-src blob: 'self' *; block-all-mixed-content; 13 script-src 'self' 'unsafe-inline' 'unsafe-eval' player.podigee-cdn.net cdn.syndication.twimg.com platform.twitter.com syndication.twitter.com https://www.verbraucherzentrale.de/ https://www.verbraucherzentrale.nrw/core/modules/ckeditor/ https://vimeo.com/ https://podcast-player.audiocon.de/ https://www.audiocon.de/ https://lebensmittel-reise.de/foodmap/ https://www.googletagmanager.com https://gemeinschaftsredaktion.de https://www.googleadservices.com https://googleads.g.doubleclick.net https://api.kns.codiac.de https://player.podigee-cdn.net/podcast-player https://cdn.podigee.com https://cdnjs.cloudflare.com https://code.highcharts.com https://cdn.podlove.org https://verbraucherzentrale.bryter.io https://prod-bryter-assets.s3.eu-central-1.amazonaws.com https://static.newsletter2go.com/ https://cdn.rawgit.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://app.bryter.io https://heizsystemvergleich.vz-nrw.de https://maps.googleapis.com https://www.helpmundo.de https://www.helpdirect.org https://rdr.kns.codiac.de https://empathy-portal.de/; script-src-elem 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' 'unsafe-eval' *; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' ton.twimg.com platform.twitter.com syndication.twitter.com https://cdn.podigee.com/ https://player.podigee-cdn.net/ https://fonts.googleapis.com/ https://prod-bryter-assets.s3.eu-central-1.amazonaws.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.podlove.org https://rdr.kns.codiac.de https://www.verbraucherzentrale.nrw; frame-ancestors 'self' vznrw-piwik.init-ag.de gemeinschaftsredaktion.de vzbv.de www.vzbv.de test.vzbv.de; 13 default-src 'self' https://* data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://* data: blob:; style-src 'self' 'unsafe-inline' https://* data: blob:; frame-src 'self' https://*; frame-ancestors 'self'; img-src 'self' https://* data: blob:; media-src 'self' https://* data: blob:; font-src 'self' https://* data: blob: 13 default-src 'self'; script-src 'self' 'unsafe-inline' 13 referrer origin 13 default-src http: data: 'unsafe-inline' 'unsafe-eval' 13 default-src https: blob:; frame-ancestors 'self' *.ford.com.cn *.lincolnstore.com.cn *.brandaplb.ford.com *.brandap.ford.com *.brandap.lincoln.com *.brandaplb.lincoln.com *.blueland.fordstore.com.cn *.fordstore.com.cn *.brandauthoraplb.ford.com *.hosts.cloud.ford.com *.ford.com.tw *.lincoln.com.cn *.blueland.com.cn *.brandapftzlb.ford.com.cn *.wwwqa.brandap.ford.com *.wwwint.brandap.ford.com *.wwwdev.brandap.ford.com *.apps.pp01.cneast.cf.ford.com.cn; connect-src https: wss: blob:; font-src https: data:; img-src https: data: blob:; media-src https: blob:; object-src 'none'; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src 'unsafe-inline' https:; base-uri 'self';worker-src 'self' blob:; script-src-elem 'unsafe-inline' 'unsafe-eval' blob: https:; script-src-attr 'unsafe-inline' 'unsafe-eval' blob: https:; style-src-attr 'unsafe-inline' https:; style-src-elem 'unsafe-inline' https:;upgrade-insecure-requests; 13 default-src 'self' 'unsafe-inline' https://park.101datacenter.net https://*.deviceatlascloud.com/ https://cs-cdn.deviceatlas.com data: 13 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 13 default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; connect-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; font-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; frame-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; img-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' * data:; manifest-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; object-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; prefetch-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; style-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; media-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; form-action 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; worker-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; report-uri https://hyperia.report-uri.com/r/d/csp/enforce; block-all-mixed-content; upgrade-insecure-requests 13 frame-ancestors 'self', upgrade-insecure-requests 12 font-src * 12 frame-ancestors https://*.marketo.com 12 frame-ancestors 'self' *.basf.com basf-performance-materials.expo-ip.com 12 frame-ancestors https://*.gov.cn http://*.gov.cn http://zwfw.cq.gov.cn http://wmcs.devdemo.trs.net.cn http://www.ceirp.com:8888 http://183.64.111.243:28080 12 default-src * 'unsafe-inline' 'unsafe-eval' data: blob 12 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.moatads.com benchmark.marketshare.com *.rlcdn.com *.company-target.com *.bidr.io *.facebook.com *.linkedin.com *.crazyegg.com *.myworkdayjobs.com *.neustar.biz *.neuweb.biz *.neustarlocaleze.biz *.cdn.neustar cdn.optimizely.com *.pimcore.org *.marketo.com *.marketo.net *.mktoresp.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.googleapis.com html5shim.googlecode.com code.jquery.com *.ads-twitter.com *.twitter.com t.co *.twimg.com *.bing.com *.gstatic.com *.agkn.com *.intentsify.io *.zoominfo.com *.visualwebsiteoptimizer.com *.google.com *.doubleclick.net *.truste.com *.quora.com *.adnxs.com *.liveperson.net *.intentsify.io *.newscred.com *.addthis.com *.addthisedge.com *.lpsnmedia.net *.wistia.com *.cloudflare.com *.syndication.twimg.com pixel.mathtag.com *.bizographics.com *.formalyzer.com oss.maxcdn.com *.ultradns.com *.webmetrics.com dnn506yrbagrg.cloudfront.net d12ulf131zb0yj.cloudfront.net ace-tag.advertising.com flex.atdmt.com se.monetate.net tag.demandbase.com siteimproveanalytics.com connect.facebook.net snap.licdn.com embedwistia-a.akamaihd.net *.adsymptotic.com fg8vvsvnieiv3ej16jby.litix.io blob: data:; 12 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 12 frame-ancestors 'self' https://*.etracker.com 12 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' app.optimizely.com; 12 form-action 'self' 12 default-src 'self' *.googlesyndication.com;style-src 'unsafe-inline' *.livenationinternational.com *.googleapis.com *.monetate.net tagmanager.google.com platform.twitter.com;img-src 'self' data: *.livenationinternational.com www.lntvglobal.com *.2mdn.net *.betrad.com *.celtra.com *.doubleverify.com *.evidon.com *.facebook.com *.g.doubleclick.net *.googleapis.com *.googlesyndication.com *.googletagservices.com *.gstatic.com *.mgr.consensu.org *.monetate.net *.ticketm.net *.tmol.co *.quantserve.com *.youtube.com *.adzip.co *.twitter.com *.tiktokcdn.com *.scdn.co *.twimg.com ad.doubleclick.net ads.celtra.com adservice.google.com dt.adsafeprotected.com cache-ssl.celtra.com media.ticketmaster.com media.ticketmaster.co.uk pixel.adsafeprotected.com pixel.moatads.com px.moatads.com secure.adnxs.com tagmanager.google.com track.celtra.com www.google-analytics.com www.google.co.uk www.google.com www.googletagmanager.com api.permutive.com cdn.permutive.com cdn.cookielaw.org;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.livenationinternational.com *.2mdn.net *.bannersnack.com *.doubleverify.com *.evidon.com *.g.doubleclick.net *.google.com *.googleapis.com *.googlesyndication.com *.googletagservices.com *.gstatic.com *.quantcount.com *.monetate.net *.universe.com *.adzip.co *.tiktok.com *.tiktokcdn.com geolocation.onetrust.com cdn.cookielaw.org cdn.ampproject.org cdn.polyfill.io ad.doubleclick.net ads.celtra.com adservice.google.co.uk adservice.google.com bam.nr-data.net cache-ssl.celtra.com connect.facebook.net evidon.mgr.consensu.org js-agent.newrelic.com pixel.adsafeprotected.com secure.adnxs.com secure.quantserve.com static.adsafeprotected.com tagmanager.google.com widget.ticketmaster.eu www.google-analytics.com www.googletagmanager.com z.moatads.com api.permutive.com cdn.permutive.com www.instagram.com platform.twitter.com cdn.syndication.twimg.com secure.wufoo.com static.ads-twitter.com;connect-src 'self' *.doubleverify.com *.evidon.com *.g.doubleclick.net *.googleapis.com *.googlesyndication.com *.permutive.com *.tmol.co *.tmol.io geolocation.onetrust.com cdn.cookielaw.org privacyportal.onetrust.com csi.gstatic.com vendorlist.consensu.org widget.ticketmaster.eu www.google-analytics.com www.googletagmanager.com track.celtra.com adservice.google.com www.ticketmaster.co.uk www.ticketmaster.co.nz www.ticketmaster.com.au www.ticketmaster.de;font-src *.livenationinternational.com fonts.gstatic.com widget.ticketmaster.eu;frame-src *.2mdn.net *.bannersnack.com *.doubleverify.com *.dvtps.com *.evidon.com *.facebook.com *.fls.doubleclick.net *.googlesyndication.com *.googletagservices.com *.monetate.net *.ticketmaster.co.uk *.twitch.tv *.bilibili.com *.player.vimeo.com *.soundcloud.com *.instagram.com *.twitter.com *.spotify.com *.tiktok.com *.tiktokcdn.com *.youtube.com *.youtu.be cookies.onetrust.mgr.consensu.org music.163.com player.vimeo.com secureframe.doubleclick.net terriverhoeven.wufoo.com universe.queue-it.net v.qq.com www.google.com www.universe.com;worker-src 'self' blob: 12 default-src 'self' https://www.bmbf.de https://*.bmbfcluster.de https://cdn1.readspeaker.com https://app-eu.readspeaker.com https://media-eu.readspeaker.com https://rstts-eu.readspeaker.com https://f1-eu.readspeaker.com https://monitoring.echobot.de https://event.beyondwork2020.com https://walls.io https://streaming.talk42.de https://streaming.sendewerk.berlin/ https://stream.zukunftsarena.de/ 'unsafe-inline' blob:; img-src 'self' https://www.bmbf.de https://*.bmbfcluster.de https://*.tile.openstreetmap.org/ https://api.mapbox.com/ 'unsafe-inline' data:;font-src 'self' data:; 12 img-src *; 12 frame-ancestors 'self' *.heartinternet.com:* *.heartinternet.co.uk:* *.heartinternet.uk:* *.heart-internet.com:* *.heart-internet.co.uk:* *.123-reg.co.uk:* *.vps-10.com:* *.ds-10.com:* *.managethisdomain.com:*; 12 default-src https: 'unsafe-inline' 'unsafe-eval' 12 ; frame-ancestors 'self' 12 frame-ancestors 'self' websitebuilder.godaddy.com websitebuilder.secureserver.net 12 default-src https: *.sim-cms.net http://sdk.listenlive.co http://*.streamtheworld.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https: http://cdn.saleminteractivemedia.com; media-src 'self' blob: data: https: http://*.streamtheworld.com; worker-src blob: *.sim-cms.net 'self'; font-src data: https://* 'self' 12 block-all-mixed-content; report-uri https://de.forumhome.com/cspreport.php 12 frame-ancestors 'self' *.plentymarkets-cloud-de.com 12 default-src https: data: blob: 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net wss://*.hotjar.com wss://*.qualified.com 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://*.zendesk.com https://*.myshopify.com https://teams.microsoft.com https://*.eloqua.com https://*.surveymonkey.com https://*.sharepoint.com https://*.worldpay.com https://*.cardinalcommerce.com;report-uri https://csp.surveymonkey.com/report?e=true&c=prod&ar=true&a=cmscache 11 media-src https: blob:; connect-src 'self' https: blob: wss:; child-src https: blob:; default-src https: wss: 'unsafe-inline' 'unsafe-eval' data:; font-src https: data:; img-src https: data: blob:; report-uri https://sentry.io/api/115794/csp-report/?sentry_key=40c3396129f24aacbf05aed4885600b3 11 frame-ancestors 'self' *.freshworks.com *.freshsuccess.com *.freshsuccess.io views.paperflite.com app.paperflite.com web.paperflite.com canvas.paperflite.com 11 form-action 'self' www.facebook.com; report-uri /_internal/security/report-csp-violation 11 frame-ancestors 'self' http://localhost:* https://*.bustle.com 11 base-uri 'self'; block-all-mixed-content; upgrade-insecure-requests; default-src 'self' blob:; child-src 'self' blob:; connect-src 'self' blob: o1.ingest.sentry.siemens-web.com w3.siemens.com siemens.sc.omtrdc.net siemens.tt.omtrdc.net siemens.demdex.net tools.adlytics.net metrics.brightcove.com edge.api.brightcove.com secure.brightcove.com *.media.brightcove.com privacyportal-eu.onetrust.com manifest.prod.boltdns.net www.fortbildung.siemens.com profiles.siemens.com searchapi.new.siemens.com house-fastly-signed-eu-west-1-prod.brightcovecdn.com www.downloads.siemens.com api.dc.siemens.com www.facebook.com *.cf.brightcove.com cert-portal.siemens.com www.hqs.sbt.siemens.com www.google.com api.company-target.com resource.finnchat.com api-fra.livechatinc.com aem-distribuidores.siemens.com.br aem-equivalentes.siemens.com.br go.cuenect.de hm.virtualevent.siemens.com smartbuildingsconnect.virtualevent.siemens.com assets.new.siemens.com www.siemens.at dpm.demdex.net siemens-umschluesselungstool-slplus-extreme.s3.eu-central-1.amazonaws.com www.yousty.ch directline.botframework.com wss://directline.botframework.com www.automation.siemens.com limvjirfm8.execute-api.us-east-2.amazonaws.com 7gjrjhtrwh.execute-api.us-east-2.amazonaws.com c.la3-c2-cdg.salesforceliveagent.com flcschat.secure.force.com; frame-ancestors 'self' resources.dc.siemens.com siemensfactoryautomation.pathfactory.com; frame-src 'self' www.facebook.com bid.g.doubleclick.net hit.sbt.siemens.com *.equitystory.com partners.sea.siemens.com secure-fra.livechatinc.com siemens.demdex.net partners.finance.siemens.ru extranet.siemens.pt www.lowvoltage.siemens.com www.siemens.at players.brightcove.net partner.vytal.org; font-src 'self' data: tools.adlytics.net new.siemens.com; img-src 'self' data: android-webview-video-poster: blob: https:; media-src 'self' blob: data: assets.new.siemens.com secure.brightcove.com *.media.brightcove.com manifest.prod.boltdns.net house-fastly-signed-eu-west-1-prod.brightcovecdn.com *.cf.brightcove.com; object-src players.brightcove.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' w3.siemens.com tools.adlytics.net assets.adobedtm.com players.brightcove.net img.en25.com vjs.zencdn.net www.automation.siemens.com w3.siemens.com profiles.siemens.com *.ste.dc.siemens.com googleads.g.doubleclick.net www.google.com www.googletagmanager.com www.googleadservices.com connect.facebook.net cookies.siemens.com snap.licdn.com scripts.demandbase.com analytics.twitter.com static.ads-twitter.com ajax.googleapis.com resource.finnchat.com cdn.livechatinc.com secure-fra.livechatinc.com secure.livechatinc.com api.livechatinc.com api-fra.livechatinc.com www.sfs.siemens.de cdn.botframework.com geolocation.onetrust.com service.force.com siemensint.my.salesforce.com; style-src 'self' 'unsafe-inline' w3.siemens.com tools.adlytics.net profiles.siemens.com www.sfs.siemens.de cdn.botframework.com; worker-src 'self' 'unsafe-inline' blob:; report-uri https://o1.ingest.sentry.siemens-web.com/api/68/security/?sentry_key=b4382018df484832b4ee2501bc82cea7&sentry_environment=sites-prod&sentry_release=f23162c8; 11 frame-src *.2checkout.com *.bitdefender.com *.bitdefender.biz *.bitdefender.net *.bitdefender.fr *.bitdefender.de *.bitdefender.com.au *.bitdefender.co.uk *.bitdefender.es *.bitdefender.it *.bitdefender.pt *.bitdefender.com.br *.bitdefender.ro *.bitdefender.nl *.bitdefender.be *.bitdefender.se bitdefender.marketing.adobe.com download.bitdefender.com *.facebook.com *.doubleclick.net *.adsrvr.org *.mathtag.com *.google.com *.google.ro *.flashtalking.com *.amazon-adsystem.com *.livechatinc.com *.twitter.com *.cedexis.com *.cedexis-test.com *.youtube.com *.soundcloud.com *.hubspot.com *.cookiebot.com *.vimeo.com *.edgecastcdn.net *.linkedin.com *.hsforms.com *.cloudfront.net *.edgecastdns.net *.hotjar.com *.zanox.ws *.zanox.com *.usemax.de usemax.de bitdefender.demdex.net dpm.demdex.net *.omniture.com widget.trustpilot.com *.2o7.net *.omtrdc.net *.demdex.net assets.adobedtm.com api-eu.boldchat.com livechat-eu.boldchat.com *.youtube-nocookie.com *.instagram.com instawidget.net consentcdn.cookiebot.com recommender.scarabresearch.com *.zenaps.com hal9000.redintelligence.net pixel.xonaz.com static-hello.bitdefender.com tags.dynamo.one *.redintelligence.net 20787700p.rfihub.com pixel.xonazz.com *.adobe.com *.outgrow.us bitdefender.applytojob.com *.alchemer.com *.adyen.com *.paypal.com paypal.com ad.ad-srv.net 11 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://optimize.google.com https://www.googleadservices.com https://www.google.com https://connect.facebook.net www.snapengage.com https://storage.googleapis.com/code.snapengage.com/js/ https://prod-nplayer.dacast.com/lib/theoplayer/ https://analytics.webgains.io/ https://analytics-wg.webgains.io/ https://track.webgains.com/ https://w-it.m-t.io/ https://www.mczbf.com/ https://wcs.naver.net/ https://bat.bing.com/; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://optimize.google.com; img-src 'self' https: data:; media-src 'self' https://ftr.imgix.net https://www.snapengage.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://view.vzaar.com https://www.facebook.com https://*.fls.doubleclick.net https://optimize.google.com www.snapengage.com https://www.expresvpn-private-analytics.net https://frontend-private-analytics.xvtest.net; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://*.amazonaws.com https://www.google-analytics.com https://stats.g.doubleclick.net/ https://analytics.google.com https://www.facebook.com/tr/ https://www.snapengage.com https://api.webgains.io/ https://track.webgains.com/ https://w-it.m-t.io/ https://www.mczbf.com https://wcs.naver.com/; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests 11 default-src * 'unsafe-eval' 'unsafe-inline' data:; frame-ancestors 'self' app.optimizely.com apps.facebook.com fonts.googleapis.com 11 frame-ancestors https://nurture.solarwinds.com/ https://try.solarwinds.com/ https://www.solarwinds.com/ 11 frame-ancestors 'self' https://help.jouwweb.nl; 11 default-src *;child-src * blob:;script-src * 'unsafe-inline' 'unsafe-eval';style-src * 'unsafe-inline';img-src * data: blob: 11 frame-ancestors 'self' *.ci360.sas.com 11 base-uri 'self'; frame-src https:; object-src 'none'; worker-src 'self'; img-src 'self' data: http: https:; upgrade-insecure-requests; default-src 'self' https://*.googlesyndication.com; connect-src 'self' https://*.google-analytics.com/ https://*.facebook.com https://*.ioam.de https://*.taboola.com https://translate.googleapis.com https://*.doubleclick.net https://eum-eu-west-1.instana.io wss://mpsnare.iesnare.com https://logx.optimizely.com/v1/events https://www.eharmony.com/lane/ https://s7.addthis.com/l10n/ https://eharmony-app.quantummetric.com/ https://yoast.com/feed/widget/ https://m.addthis.com https://*.googlesyndication.com https://connect.facebook.net https://*.usercentrics.eu https://api.personio.de/recruiting/applicant ; font-src data: 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://assets.eharmony.com https://assets.eharmony.com.au https://assets.eharmony.co.uk https://assets.eharmony.ca https://assets.squarespace.com/universal/fonts/ https://static.squarespace.com/universal/fonts/ ; script-src https: 'report-sample' 'unsafe-inline' 'unsafe-eval' data: 'self' https://*.custhelp.com https://*.ioam.de; style-src 'self' 'unsafe-inline' https://www.parship.com https://*.custhelp.com https://fonts.googleapis.com https://partnerboerse.parship.de https://translate.googleapis.com https://assets.eharmony.com https://assets.eharmony.com.au https://assets.eharmony.co.uk https://assets.eharmony.ca https://s.po.st/static/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://static1.squarespace.com/static/sitecss/ ; media-src 'self' data: https://mpsnare.iesnare.com https://assets.eharmony.com/files/us/images/careers/ https://www.googleapis.com/youtube/; prefetch-src 'self' https://*.googlesyndication.com/safeframe/; frame-ancestors 'self'; report-uri /ls/ 11 frame-src 'self' https://3cx.com https://www.google.com https://cse.google.com https://services-sandbox.google-3cx.com https://services.3cx.com https://audioconverter.3cx.com https://login.3cx.com https://docs.google.com https://www.facebook.com https://bid.g.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com/ https://www.googletagmanager.com mailto:; 11 default-src 'self' *.cscglobal.com *.swiftypecdn.com *.swiftype.com script.crazyegg.com rum-collector-2.pingdom.net *.doubleclick.net *.google-analytics.com geoip-js.com *.maxmind.com *.typekit.net api.company-target.com sample-api-v2.crazyegg.com api.hubapi.com https://lat9412.d41.co/api/; script-src 'self' https://lat9412.d41.co/sync/ https://cdn-0.d41.co/tags/dnb_coretag_v5.min.js rum-static.pingdom.net ws.zoominfo.com js.hs-banner.com js.hsadspixel.net *.swiftypecdn.com *.swiftype.com *.wufoo.com tag.demandbase.com script.crazyegg.com s3.amazonaws.com dnn506yrbagrg.cloudfront.net gateway.zscalertwo.net sjs.bizographics.com px.ads.linkedin.com *.google-analytics.com *.googletagmanager.com *.maxmind.com 'unsafe-inline' 'unsafe-eval' *.typekit.net forms.hsforms.com api.hubapi.com js.hs-analytics.net js.hs-scripts.com js.hsforms.net *.hubspot.com *.googleadservices.com tagmanager.google.com *.zmags.com snap.licdn.com; style-src 'self' ocp.cscglobal.com ocu.cscglobal.com gateway.zscalertwo.net *.swiftypecdn.com fast.fonts.net fonts.googleapis.com 'unsafe-inline' tagmanager.google.com ssl.gstatic.com *.gstatic.com; img-src 'self' p.adsymptotic.com *.swiftype.com *.cscglobal.com *.googletagmanager.com googleapis.com match.prod.bidr.io segments.company-target.com cdn2.hubspot.net *.google-analytics.com *.crazyegg.com *.google.com track.hubspot.com data: *.doubleclick.net ssl.gstatic.com *.gstatic.com *.zmags.com px.ads.linkedin.com; font-src 'self' 'unsafe-inline' ocp.cscglobal.com ocu.cscglobal.com data: fonts.gstatic.com *.typekit.net; frame-src 'self' *.youtube.com *.wufoo.com forms.hsforms.com *.zmags.com drive.google.com 11 frame-ancestors 'self' gather.town; 11 default-src * data: 'unsafe-inline' 'unsafe-eval' 11 default-src * data: 'unsafe-eval' 'unsafe-inline' blob: 11 frame-ancestors *.adikteev.com 'self' *.facebook.com *.nikonelearning.com; 11 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://optimize.google.com https://survey.g.doubleclick.net https://tagmanager.google.com *.googleapis.com *.gstatic.com https://dyv6f9ner1ir9.cloudfront.net https://362-lxb-565.mktoutil.com https://storage.googleapis.com https://i.ytimg.com https://pnapi.invoca.net https://www.google-analytics.com https://player.vimeo.com https://pixel.mathtag.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.twitter.com *.marketo.com *.inquicker.com *.sitefinity.xyz *.tenethealth.com *.googletagmanager.com *.youtube.com/iframe_api https://app-sj01.marketo.com https://pnapi.invoca.net https://maps.googleapis.com https://d.monetate.net https://se.monetate.net https://s.ytimg.com https://pixel.mathtag.com https://player.vimeo.com https://rw1.marchex.io https://resources.xg4ken.com https://rw1.marchex.io https://resources.xg4ken.com https://ajax.googleapis.com https://solutions.invocacdn.com https://polyfill.io http://siteimproveanalytics.com https://cdn.siteimprove.net https://connect.facebook.net https://s.ytimg.com https://maps.googleapis.com https://se.monetate.net https://d.monetate.net accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com *.twitter.com *.marketo.com *.inquicker.com *.sitefinity.xyz *.tenethealth.com *.siteimprove.net *.facebook.com *.google.com *.google.co.in *.gstatic.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://munchkin.net https://stats.g.doubleclick.net https://pnapi.invoca.net https://www.google-analytics.com https://player.vimeo.com https://pixel.mathtag.com https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://s.ytimg.com https://se.monetate.net https://maps.googleapis.com https://maps.gstatic.com https://siteimproveanalytics.com https://d.monetate.net https://rw1.marchex.io https://resources.xg4ken.com https://www.googletagmanager.com https://ajax.googleapis.com https://px.marchex.io https://my2.siteimprove.com https://www.googletagmanager.com https://maps.googleapis.com https://munchkin.marketo.net https://solutions.invocacdn.com https://service-uat.tenethealth.com https://service-test.tenethealth.com https://service-prep.tenethealth.com https://www.tenethealthpacificcoast.com https://id.siteimprove.com https://cdn.siteimprove.net https://polyfill.io https://www.google-analytics.com https://www.youtube.com https://munchkin.marketo.net https://68956.global.siteimproveanalytics.io https://siteimproveanalytics.com https://stats.g.doubleclick.net https://connect.facebook.net https://px.marchex.io https://www.googletagmanager.com https://my2.siteimprove.com https://s.ytimg.com https://maps.googleapis.com https://maps.gstatic.com https://se.monetate.net https://rw1.marchex.io https://ajax.googleapis.com https://resources.xg4ken.com https://cdnjs.cloudflare.com https://radiomd.com https://tours.sunnymedia.com https://checkin.arriv.net https://checkin-stg.arriv.net https://checkin-dev.arriv.net https://healthcheck.arriv.net https://healthcheck-stg.arriv.net https://healthcheck-dev.arriv.net https://ms-prod.arriv.net https://www.googleadservices.com https://code.jquery.com https://stackpath.bootstrapcdn.com https://tbcdn.talentbrew.com https://www.panoskin.com https://lcp360.cachefly.net *.practicematch.com; style-src 'self' 'unsafe-inline' https://optimize.google.com https://tagmanager.google.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com *.twimg.com *.marketo.com *.sitefinity.xyz *.tenethealth.com https://fonts.googleapis.com https://checkin.arriv.net https://checkin-stg.arriv.net https://ms-prod.arriv.net https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' https://www.gstatic.com https://ssl.gstatic.com https://optimize.google.com *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com *.twimg.com data: blob: *.eloqua.com track.hubspot.com *.google.co.in *.google.com *.googletagmanager.com *.tenethealth.com https://*.youtube.com https://app-sj01.marketo.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://service-prep.tenethealth.com https://68956.global.siteimproveanalytics.io https://i.ytimg.com https://px.marchex.io https://pixel.mathtag.com *.baptisthealthsystem.com *.nacmedicalcenter.com *.resolutehealth.com *.providencechildrenshospital.com *.thehospitalsofprovidence.com *.valleybaptist.net *.dmc.org *.childrensdmc.org *.rimrehab.org *.brookwoodbaptisthealth.com *.saintfrancishosp.com *.saintfrancisbartlett.com *.eastcoopermedctr.com *.hiltonheadregional.com *.piedmontmedicalcenter.com *.coralgableshospital.com *.delraymedicalctr.com *.floridamedctr.com *.goodsamaritanmc.com *.hialeahhosp.com *.northshoremedical.com *.palmbeachchildrenshospital.com *.pbgmc.com *.palmettogeneral.com *.stmarysmc.com *.westbocamedctr.com *.stvincenthospital.com *.mwmc.com *.abrazohealth.com *.carondelet.org *.desertcarenetwork.com *.doctorsmanteca.com *.dmc-modesto.com *.emanuelmedicalcenter.org *.fountainvalleyhospital.com *.lakewoodregional.com *.losalamitosmedctr.com *.placentialinda.com *.sanramonmedctr.com *.sierravistaregional.com *.twincitieshospital.com *.brookwoodbaptistmedicalcenter.com *.brookwoodwomensmedicalcenter.com *.citizensbaptistmedicalcenter.com *.princetonbaptistmedicalcenter.com *.shelbybaptistmedicalcenter.com *.walkerbaptistmedicalcenter.com *.tenethealthcentralcoast.com *.tenethealthpacificcoast.com; media-src 'self' data: blob: https://media.tenethealth.com; form-action *.sitefinity.xyz *.facebook.com 'self' https://optimize.google.com https://paypage.epx.com https://www.tenethealthpacificcoast.com; frame-src *.marketo.com *.sitefinity.xyz 'self' *.tenethealth.com *.google.com *.youtube.com *.facebook.com *.facebook.com/tr/ *.doubleclick.net *.doubleclick.com https://givebutter.com https://optimize.google.com https://tenethealth.outgrow.us https://platform.twitter.com https://tenethealthbotprodcontainer01.azurewebsites.net/ https://pixel.mathtag.com/ https://player.vimeo.com/ https://radiomd.com https://tours.sunnymedia.com https://9207741.fls.doubleclick.net https://my2.siteimprove.com https://www.practicematch.com https://my.matterport.com https://viewer.panoskin.com; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.marketo.com *.sitefinity.xyz *.tenethealth.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com https://optimize.google.com https://survey.g.doubleclick.net https://dyv6f9ner1ir9.cloudfront.net https://362-lxb-565.mktoutil.com https://storage.googleapis.com https://i.ytimg.com https://pnapi.invoca.net https://www.google-analytics.com https://player.vimeo.com https://pixel.mathtag.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.twitter.com *.marketo.com *.inquicker.com *.sitefinity.xyz *.tenethealth.com *.googletagmanager.com *.youtube.com/iframe_api https://pnapi.invoca.net https://maps.googleapis.com https://d.monetate.net https://se.monetate.net https://s.ytimg.com https://pixel.mathtag.com https://player.vimeo.com https://rw1.marchex.io https://resources.xg4ken.com https://rw1.marchex.io https://resources.xg4ken.com https://ajax.googleapis.com https://solutions.invocacdn.com https://polyfill.io http://siteimproveanalytics.com https://cdn.siteimprove.net https://connect.facebook.net https://s.ytimg.com https://maps.googleapis.com https://se.monetate.net https://d.monetate.net 'self' accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com *.twitter.com *.marketo.com *.inquicker.com *.sitefinity.xyz *.tenethealth.com *.siteimprove.net *.facebook.com *.google.com *.google.co.in *.gstatic.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://munchkin.net https://stats.g.doubleclick.net https://pnapi.invoca.net https://www.google-analytics.com https://player.vimeo.com https://pixel.mathtag.com https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://s.ytimg.com https://se.monetate.net https://maps.googleapis.com https://maps.gstatic.com https://siteimproveanalytics.com https://d.monetate.net https://rw1.marchex.io https://resources.xg4ken.com https://www.googletagmanager.com https://ajax.googleapis.com https://px.marchex.io https://my2.siteimprove.com https://www.googletagmanager.com https://maps.googleapis.com https://munchkin.marketo.net https://solutions.invocacdn.com https://service-uat.tenethealth.com https://service-test.tenethealth.com https://service-prep.tenethealth.com https://www.tenethealthpacificcoast.com https://id.siteimprove.com https://cdn.siteimprove.net https://polyfill.io https://www.google-analytics.com https://www.youtube.com https://munchkin.marketo.net https://68956.global.siteimproveanalytics.io https://siteimproveanalytics.com https://stats.g.doubleclick.net https://connect.facebook.net https://px.marchex.io https://www.googletagmanager.com https://my2.siteimprove.com https://s.ytimg.com https://maps.googleapis.com https://maps.gstatic.com https://se.monetate.net https://rw1.marchex.io https://ajax.googleapis.com https://resources.xg4ken.com *.baptisthealthsystem.com *.nacmedicalcenter.com *.resolutehealth.com *.providencechildrenshospital.com *.thehospitalsofprovidence.com *.valleybaptist.net *.dmc.org *.childrensdmc.org *.rimrehab.org *.brookwoodbaptisthealth.com *.saintfrancishosp.com *.saintfrancisbartlett.com *.eastcoopermedctr.com *.hiltonheadregional.com *.piedmontmedicalcenter.com *.coralgableshospital.com *.delraymedicalctr.com *.floridamedctr.com *.goodsamaritanmc.com *.hialeahhosp.com *.northshoremedical.com *.palmbeachchildrenshospital.com *.pbgmc.com *.palmettogeneral.com *.stmarysmc.com *.westbocamedctr.com *.stvincenthospital.com *.mwmc.com *.abrazohealth.com *.carondelet.org *.desertcarenetwork.com *.doctorsmanteca.com *.dmc-modesto.com *.emanuelmedicalcenter.org *.fountainvalleyhospital.com *.lakewoodregional.com *.losalamitosmedctr.com *.placentialinda.com *.sanramonmedctr.com *.sierravistaregional.com *.twincitieshospital.com *.brookwoodbaptistmedicalcenter.com *.brookwoodwomensmedicalcenter.com *.citizensbaptistmedicalcenter.com *.princetonbaptistmedicalcenter.com *.shelbybaptistmedicalcenter.com *.walkerbaptistmedicalcenter.com *.tenethealthcentralcoast.com *.tenethealthpacificcoast.com https://img.youtube.com https://radiomd.com https://o381876.ingest.sentry.io https://checkin.arriv.net https://checkin-stg.arriv.net https://healthcheck.arriv.net https://healthcheck-stg.arriv.net https://ms-dev.arriv.net https://ms-prod.arriv.net https://www.googleadservices.com https://code.jquery.com https://assets.grammarly.com https://stackpath.bootstrapcdn.com *.practicematch.com; 11 frame-ancestors 'self' sun.eduzz.com http://*.monetizze.com.br https://*.monetizze.com.br *.hotmart.com http://aporasal.net https://aporasal.net http://adf.ly https://adf.ly; 11 frame-ancestors 'self' https://translate.google.com 11 default-src *; img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' * 11 default-src 'self' gstatic.gitbook.com *.gitbook-staging.com *.gitbook.com *.firebaseio.com wss://*.firebaseio.com *.cloudfunctions.net *.googleapis.com *.gstatic.com data: *.google.com *.github.com *.algolianet.com *.algolia.net sentry.io *.logrocket.io *.lr-ingest.io *.stripe.com *.clearbit.com *.google-analytics.com d3hb14vkzrxvla.cloudfront.net d1j8pt39hxlh3d.cloudfront.net *.iframe.ly blob: cdn.jsdelivr.net cdnjs.cloudflare.com api.amplitude.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://share.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://js.intercomcdn.com https://intercom.help; script-src 'self' gstatic.gitbook.com 'unsafe-inline' *.firebaseio.com *.google.com polyfill.io cdn.lr-ingest.io cdn.logrocket.io *.stripe.com *.clearbit.com *.google-analytics.com *.iframe.ly *.gstatic.com cdnjs.cloudflare.com *.intercom.io *.intercomcdn.com gitbookio.github.io https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com; style-src 'self' gstatic.gitbook.com 'unsafe-inline' fonts.googleapis.com unpkg.com cdnjs.cloudflare.com cdn.jsdelivr.net; img-src * data: blob: https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://messenger-apps.intercom.io https://*.intercom-attachments.com; frame-src *; object-src 'none'; child-src 'self' blob:; worker-src 'self' blob:; frame-ancestors https: 11 frame-ancestors 'self' *.vergic.com 11 frame-ancestors 'self' *.cms.snakeware.nl *.snakeware.nl *.snakeware.cloud *.snakeware.test 11 default-src 'self'; connect-src *.g.doubleclick.net 'self' www.google-analytics.com https://www.google-analytics.com; frame-src 'none'; img-src 'self' data: *.pbwstatic.com https://*.pbwstatic.com www.google-analytics.com https://www.google-analytics.com; media-src 'none'; object-src 'none'; script-src 'self' www.google-analytics.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' 11 default-src 'self' https://cdn.perf1.com https://saspresence.perf1.com; object-src 'none'; frame-src * 11 upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; report-uri https://csp.nytimes.com/report; 10 upgrade-insecure-requests; frame-ancestors 'self' https://stackexchange.com 10 default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data: blob:; media-src https: data: blob:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests 10 frame-ancestors http://kpmg.experiencecloud.adobe.com 10 script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com *.adobedtm.com therandomhousegroupltd.d3.sc.omtrdc.net ssl.google-analytics.com *.google.com *.gstatic.com connect.facebook.net www.dwin2.com *.riddle.com *.hotjar.com *.jotfor.ms *.jotformeu.com cdn.livefyre.com *.eventbrite.co.uk *.cloudfront.net *.newrelic.com *.nr-data.net instagram.com *.instagram.com *.twitter.com therandomhousegroupl.tt.omtrdc.net *.penguin.co.uk; object-src 'self'; worker-ref blob: 10 frame-ancestors https://*.canalplus.com https://*.cnews.fr https://*.canal-bis.com http://*.canalplus.com http://*.canalplus.com:8888 10 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.etracker.com https://*.etracker.de https://*.jwpcdn.com https://customers.lmis.de; style-src 'self' 'unsafe-inline' https://*.etracker.de https://*.jwpcdn.com; img-src 'self' data: https://sg.geodatenzentrum.de https://jwpltx.com; connect-src 'self' https://*.etracker.com https://*.etracker.de https://sg.geodatenzentrum.de https://*.jwpcdn.com; font-src 'self' data: https://*.jwpcdn.com; object-src 'self'; media-src 'self' https://*.streamfarm.net http://*.bmwi.de; form-action 'self'; frame-src 'self' https://*.twitter.com https://vimeo.com https://player.vimeo.com https://customers.lmis.de https://vdi.p5.easire.com https://bmwi-batteriezellfertigung.interactive-scape.com https://de.digital; frame-ancestors 'self'; 10 reflected-xss block 10 frame-ancestors 'self' http://customer-hornbach.loop21.net https://customer-hornbach.loop21.net http://public-location-hornbach.loop21.net https://public-location-hornbach.loop21.net 10 default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 10 script-src * 'unsafe-inline' 'unsafe-eval' 10 default-src *; font-src * data:;img-src * data:; script-src * data: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; frame-src *; media-src * blob:; 10 frame-src https://www.google.com; font-src 'self' https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://img6.wsimg.com; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://www.gstatic.com; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://js.hs-scripts.com https://tags.tiqcdn.com https://snap.licdn.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://www.google-analytics.com https://js.hs-analytics.net https://js.hs-banner.com; 10 default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval' wss://*.iadvize.com 10 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval' 10 frame-ancestors 'self' http://*.elsevier.es/ 10 default-src * 'unsafe-inline' 'unsafe-eval' 10 frame-ancestors https: 10 default-src *; img-src * data: blob:; media-src * data: blob:; script-src 'unsafe-inline' 'unsafe-eval' * data: blob:; worker-src 'unsafe-inline' 'unsafe-eval' * data: blob:; connect-src *; font-src * data: blob:; frame-src *; object-src * data: blob:; style-src 'unsafe-inline' * data: blob: 10 default-src 'none'; connect-src 'self' www.linkedin.com www.google-analytics.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/ https://linkedin.sc.omtrdc.net/b/ss/ static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; script-src 'sha256-DwtT8+ZZKpxH9pqZNAmJ3GdbLAh5SsYaXR3omTXPCns=' 'sha256-sV9jZa797T0QWBzcU/CNd4tpBhTnh+TFdLnfjlitl28=' 'sha256-aa/Q8CRBDSqTQbCIyioPhZaz+G+dbPyu7BzsjInEmiU=' 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-zTIusdVJJeXz9+iox2a+pdDglzbpRpFVRzEwvW4AONk=' 'sha256-iC8MPqNLw0FDnsBf4DlSkFLNTwhkI85aouiAEB819ic=' 'sha256-2EqrEvcPzl8c6/TSGVvaVMEe7lg700MAz/te4/3kTYY=' 'sha256-y5uW69VItKj51mcc7UD9qfptDVUqicZL+bItEpvVNDw=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' snap.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; img-src data: blob: * android-webview-video-poster:; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src dms.licdn.com *.lynda.com; child-src blob: lnkd-communities: voyager: *; frame-src 'self' https://www.youtube.com/embed/ https://www.youtube-nocookie.com/embed/ lnkd.demdex.net https://smartlock.google.com/ https://accounts.google.com/ linkedin.cdn.qualaroo.com player.vimeo.com www.linkedin.com www.slideshare.net *.megaphone.fm msit.powerbi.com app.powerbi.com linkedin.github.io https://*.licdn.com; manifest-src 'self'; report-uri /security/csp?f=gg 9 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: 'unsafe-inline'; frame-src https: data:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss:; child-src https: blob:; object-src 'none'; base-uri 'none' 9 frame-ancestors 'self'; object-src https://*.citrix.com; plugin-types application/x-shockwave-flash application/pdf 9 frame-ancestors 'self' http://www.usa.philips.com *.philips.com *.usa.philips.com 9 object-src 'none'; base-uri 'self' 9 default-src * 'unsafe-eval' 'unsafe-inline' data:; frame-ancestors 'self' app.optimizely.com apps.facebook.com fonts.googleapis.com; media-src * blob: 9 default-src 'self'; script-src 'self' 'unsafe-inline' translate.googleapis.com blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com translate.googleapis.com; font-src 'self' fonts.gstatic.com data:; img-src 'self' data:; object-src 'none'; report-uri https://hpage-report.uriports.com/reports/enforce 9 connect-src 'self' wss://*.zopim.com https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; frame-ancestors https://*.adobemsbasic.com https://*.lingotek.com https://*.nuance.com https://*.nuance.fr https://*.nuance.de https://*.nuance.es https://*.nuance.co.uk 'self' https:; frame-src 'self' https:; upgrade-insecure-requests; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:; img-src data: http://www.w3.org/2000/svg https:; 9 frame-ancestors 'self' iguidewebapp.next-uk.next.loc/ end-duws02.next-uk.next.loc/ end-dpws02.next-uk.next.loc/ studio.mgmt.qa.test/ studio.mgmt.next-uk.next.loc/ 9 script-src *; 9 frame-ancestors https://*.flexera.com https://*.flexerasoftware.com https://*.revenera.com; 9 frame-ancestors 'self' https://*.ariba.com https://*.micron.com https://*.iu.edu https://*.sciquest.com 9 upgrade-insecure-requests ; 9 default-src 'self' *.kpn.com; frame-ancestors 'self' app.optimizely.com kpn.blueconic.net mijnzakelijk.kpn.com www.grip-on-it.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static-accept.customersaas.com *.optimizely.com cdn.blueconic.net kpn.blueconic.net *.kpn.com *.salesforceliveagent.com www.googletagmanager.com tagmanager.google.com invitation.opinionbar.com www.googleadservices.com connect.facebook.net *.doubleclick.net *.mouseflow.com kpn-compleet-fpi-info.fourstack.nl www.pingvp.com kpn.pingvp.com static.customersaas.com www.google-analytics.com maps.googleapis.com kpnarmor.nl w.usabilla.com api.usabilla.com deploy.mopinion.com collect.mopinion.com kpn.mopinion.com cacheorcheck.mopinion.com survey.mopinion.com kpn-reload.liquix.eu dwin1.com mijnzakelijk.kpn.com www.grip-on-it.com https://*.demdex.net https://assets.adobedtm.com *.pardot.com opt.objectiveportal.com www.facebook.com; style-src 'self' 'unsafe-inline' data: *.kpn.com www.pingvp.com kpn.pingvp.com d1r5etm691cejh.cloudfront.net static.customersaas.com d6tizftlrpuof.cloudfront.net kpn.mopinion.com tagmanager.google.com cacheorcheck.mopinion.com survey.mopinion.com; img-src 'self' data: is-accept.customersaas.com *.kpn.com www.google.nl www.google.com www.facebook.com *.doubleclick.net adservice.google.com invitation.opinionbar.com *.optimizely.com www.pingvp.com kpn.pingvp.com d35v9wsdymy32b.cloudfront.net csi.gstatic.com maps.gstatic.com maps.googleapis.com kpn.com fonts.googleapis.com www.google-analytics.com api.customersaas.com static.customersaas.com d3mwk3f7r8fv9u.cloudfront.net d6tizftlrpuof.cloudfront.net cms-images.s3.amazonaws.com kpncomvod.download.kpnstreaming.nl w.usabilla.com www.telfort.nl mobielshop.test.marketingmakers.nl fra1.digitaloceanspaces.com cacheorcheck.mopinion.com survey.mopinion.com https://*.demdex.net https://assets.adobedtm.com opt.objectiveportal.com; media-src 'self' kpncomvod.download.kpnstreaming.nl *.kpn.com pingmediavod.download.kpnstreaming.nl kpn.pingvp.com; frame-src *.optimizely.com *.doubleclick.net ezpay.liquix.eu callmenow.eu3.vanadaloha.net rpv.reviva.nl *.kpn.com portal.bp.nu www.youtube.com kpngroup.emsecure.net kpn.mopinion.com kpn-mini.speedtestcustom.com www.pingvp.com kpn.pingvp.com reload.alphacomm.network mijnzakelijk.kpn.com www.grip-on-it.com https://*.demdex.net emea1-proxy.adobemc.com www.facebook.com; font-src 'self' data: *.kpn.com www.pingvp.com kpn.pingvp.com fonts.gstatic.com static.customersaas.com; connect-src 'self' api-accept.customersaas.com www.google-analytics.com *.optimizely.com kpn.blueconic.net *.kpn.com *.mouseflow.com tracker.customersaas.com kpn.api.ruwido.com api-agendaplanner.kpnretail.nl api.customersaas.com scripts.kpn.nl pastease.mopinion.com kpn.mopinion.com deploy.mopinion.com cacheorcheck.mopinion.com survey.mopinion.com kpn-compleet-fpi-info.fourstack.nl ezpay.liquix.eu wss://*.twilio.com https://*.twilio.com https://*.demdex.net https://assets.adobedtm.com *.tt.omtrdc.net https://adobeioruntime.net emea1-proxy.adobemc.com wss://*.kpn.com/chat-engine; object-src 'self' 9 frame-ancestors 'self' *.scot.nhs.uk *.nhsgrampian.org; upgrade-insecure-requests; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report-block; report-to csp-endpoint-block 9 default-src 'self' 'unsafe-eval' http: https: data: blob: 'unsafe-inline' 9 default-src * ; img-src * 'self' data: blob: mediastream: https: 'unsafe-inline' 'unsafe-eval'; font-src * 'unsafe-inline' 'unsafe-eval' 'self' data: ; script-src * 'unsafe-inline' 'unsafe-eval' ; style-src * 'unsafe-inline' 'unsafe-eval'; 9 frame-ancestors 'self' *.psplugin.com 9 sandbox allow-same-origin allow-scripts allow-orientation-lock allow-pointer-lock allow-forms allow-popups allow-top-navigation-by-user-activation; 9 script-src 'self' 'unsafe-inline' 'unsafe-eval' * 9 upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; 9 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *; 9 upgrade-insecure-requests; base-uri 'self'; 9 worker-src 'self'; 9 frame-src * 9 “upgrade-insecure-requests†9 child-src 'self' blob: https://*.tagcommander.com *.tagcommander.com optimize.google.com gateway.euronext.com forms.logiforms.com https://*.iadvize.com *.iadvize.com aax-eu.amazon-adsystem.com *.trustcommander.net *.overkiz.com *.somfy.com *.somfysystems.pl e.issuu.com projects.perfoweb.fr www.tahomalink.com www.tahomalink.com boutique.somfy.fr www.youtube.com www.googletagmanager.com static.addtoany.com client.alwaysupport.com *.doubleclick.net static.olark.com 212.203.79.55 somfykorea.linux.gabiauser.com shop.somfy.de shop.somfy.es shop.somfy.it easyshop.somfypro.fr tv.connexoon.de tvaktion.connexoon.de tv-at.connexoon.de *.addthis.com *.disqus.com disqus.com www.google.com webdev.abastra.com kartor.eniro.se http://kartor.eniro.se www.somfy-smart.de api.soundcloud.com w.soundcloud.com www.lespetitespierres.org https://giphy.com/upload https://hearthis.at/ https://soundcloud.com/ https://www.youtube.com/ https://www.lespetitespierres.org/ *.rlets.com https://giphy.com/ https://www.franceinter.fr/ *.zohopublic.com *.smartrecruiters.com https://subscriptions.smartrecruiters.com/ marketing.net.elogia.net www.facebook.com https://www.facebook.com https://www.youtube-nocookie.com/ www.123formbuilder.com https://c.imedia.cz/ player.ina.fr https://*.hotjar.com https://*.tfaforms.net *.tfaforms.net www.ausschreiben.de cdn.thinglink.me *.thinglink.com form.123formbuilder.com https://px.ads.linkedin.com *.px.ads.linkedin.com https://www.linkedin.com/ *.linkedin.com https://d6tizftlrpuof.cloudfront.net player.teester.com landings.somfy.co.il 9 default-src * data: blob: 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.jimdo.com jimdo.com; worker-src blob: 9 default-src https:; connect-src https: wss:; font-src https: data:; img-src https: data: blob:; frame-src https:; frame-ancestors 'self'; worker-src https: data: 'unsafe-inline' 'unsafe-eval'; form-action https: javascript:; script-src https: data: 'unsafe-inline' 'unsafe-eval';style-src https: data: 'unsafe-inline'; base-uri 'self'; 9 frame-ancestors 'self' *.zdnet.com *.ampproject.org *.amp.cloudflare.com; default-src https: blob: 'unsafe-inline' 'unsafe-eval' data:; font-src https: blob: data:; img-src https: data: android-webview-video-poster: blob:; form-action https:; block-all-mixed-content; media-src https: blob: data:; 8 frame-ancestors 'self' *.lycos.com 8 frame-ancestors 'self' *.ffxblue.com.au *.ffx.io *.smh.com.au *.theage.com.au *.brisbanetimes.com.au *.watoday.com.au *.cdn.ampproject.org; upgrade-insecure-requests 8 frame-ancestors https://oa.sheincorp.cn https://activity-admin.biz.sheincorp.cn https://csp.sheincorp.cn https://sqs-admin.biz.sheincorp.cn 8 default-src * data: 'unsafe-eval' 'unsafe-inline' blob:; script-src * 'unsafe-inline' 'unsafe-eval' blob:; style-src * 'unsafe-inline'; 8 object-src https://liveshareeast3.seismic.com https://cvent.seismic.com https://explore.cvent.com http://explore.cvent.com https://*.speedrfp.com https://speedrfp.com https://*.elitemeetings.com https://elitemeetings.com https://*.hotelprofiler.com https://www.lanyon.com http://www.lanyon.com; frame-ancestors 'self' https://liveshareeast3.seismic.com https://cvent.seismic.com https://explore.cvent.com http://explore.cvent.com https://*.speedrfp.com https://speedrfp.com https://*.elitemeetings.com https://elitemeetings.com https://*.hotelprofiler.com https://www.lanyon.com http://www.lanyon.com https://*.cvent.com http://*.cvent.com; report-uri /report-csp-violation 8 frame-ancestors 'self' https://*.nzherald.co.nz https://*.apnnz.co.nz https://nzme.coral.coralproject.net/; 8 frame-ancestors 'self' http://wa.aruba.it https://wa.aruba.it 8 report-uri https://www.homeaffairs.gov.au; frame-ancestors https://app.monsido.com https://*.immi.gov.au https://*.border.gov.au https://*.customs.gov.au https://*.abf.gov.au https://*.homeaffairs.gov.au https://*.harmony.gov.au https://*.nationalsecurity.gov.au https://*.idmatch.gov.au https://*.disasterassist.gov.au https://*.livingsafetogether.gov.au https://*.organisationalresilience.gov.au https://*.tisn.gov.au https://*.triplezero.gov.au https://*.cicentre.gov.au https://*.mara.gov.au https://*.osi.gov.au https://*.cetc.gov.au 8 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob:; connect-src https: wss: 8 frame-ancestors https://*.ptc.com https://ptc.seismic.com https://liveshareeast3.seismic.com 8 frame-ancestors 'self' https://daytondailynews.newspapers.com https://journal-news.newspapers.com https://springfieldnewssun.newspapers.com https://www.legacy.com 8 frame-ancestors 'self' *.benjerry.com *.crownpeak.com *.bazaarvoice.com *.adobe.com *.pricespider.com 8 frame-ancestors 'self' https://*.ziggo.nl https://*.vodafone.nl https://*.ziggo.io https://ziggo.io https://*.aem.prod.aws.ziggo.io; 8 frame-ancestors 'self' https://*.ccma.cat http://*.ccma.cat; 8 frame-ancestors *.benq.com *.benq.eu 8 frame-ancestors *.ivanti.com https://dash.cloudflare.com 8 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bam.nr-data.net https://cdn.syndication.twimg.com https://cdn.tradelab.fr https://connect.facebook.net https://d2hya7iqhf5w3h.cloudfront.net https://dfc.inovestor.com https://fo-api.omnitagjs.com https://fonts.googleapis.com https://ib.adnxs.com https://js-agent.newrelic.com https://js.hs-scripts.com https://pixels.omnitagjs.com https://platform.twitter.com https://script.crazyegg.com https://snap.licdn.com https://tm.vendemore.com https://track.adform.net https://www.google-analytics.com https://www.googletagmanager.com https://s.go-mpulse.net https://its.tradelab.fr https://js.hsadspixel.net/fb.js https://js.hs-analytics.net https://js.hsleadflows.net https://www.googleadservices.com https://static.hotjar.com https://a.optnmstr.com https://www.youtube.com https://js.hsforms.net https://forms.hsforms.com https://script.hotjar.com https://s.ytimg.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://app.interactiveads.ai https://maps.googleapis.com https://cdn.rawgit.com http://cdn.siteimprove.net https://tagmanager.google.com https://js.hs-banner.com https://s2.adform.net https://c.go-mpulse.net https://173c5b0c.akstat.io https://bam-cell.nr-data.net https://files.cdn.leadfamly.com https://rec.smartlook.com *.leadoo.com https://www.buzzsprout.com https://www.facebook.com dfc.inovestor.com https://cdn.jsdelivr.net https://cdn.siteimprove.net https://cdnjs.cloudflare.com https://polyfill.io https://static.addtoany.com https://unpkg.com; style-src * 'unsafe-inline' 'unsafe-eval' 8 block-all-mixed-content; upgrade-insecure-requests; 8 default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src https: blob:; object-src https:; child-src https: data: blob:; form-action https:; block-all-mixed-content 8 frame-ancestors 'self' www.cv.ee cv.ee www.cv.lv cv.lv www.prakse.lv prakse.lv; 8 default-src 'self' *.infinity-tracking.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com *.google.com *.facebook.net *.aspnetcdn.com *.youtube.com *.twitter.com *.ytimg.com *.twimg.com *.linkedin.com *.stumbleupon.com *.azureedge.net *.marketo.net *.eloqua.com *.en25.com *.ampproject.org *.cloudflare.com *.bootstrapcdn.com *.trustpilot.com *.jsdelivr.net *.unpkg.com *.googletagmanager.com *.hotjar.com *.jquery.com *.doubleclick.net *.kldiscovery.com *.googleusercontent.com *.google-analytics.com *.googleadservices.com *.krollontrack.com *.bootstrapcdn.com *.momentjs.com *.typeform.com *.infinity-tracking.net *.usemessages.com *.hsleadflows.net *.hubspot.com *.hsforms.net *.hsforms.com *.hubspot.com *.hubapi.com *.hscollectedforms.net *.hsforms.net *.hs-banner.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hsforms.com *.unpkg.com unpkg.com *.google.com *.yimg.jp *.yahoo.co.jp js.monitor.azure.com *.msecnd.net; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.telerik.com *.google.com *.azureedge.net *.twitter.com *.twimg.com *.typekit.net *.trustpilot.com *.bootstrapcdn.com *.jquery.com *.bootstrapcdn.com; font-src 'self' *.gstatic.com *.telerik.com *.bootstrapcdn.com data: *.krollontrack.com *.typekit.net *.bootstrapcdn.com; img-src 'self' data: blob: *.azureedge.net *.cleverbridge.com *.delicious.com *.doubleclick.net *.eloqua.com *.facebook.com *.google.com *.googleapis.com *.google-analytics.com *.googleusercontent.com *.google.co.uk *.google.pl *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.com *.hubspot.com *.hubspotusercontent20.net *.ibas.com *.compiled.com *.kldiscovery.com *.ediscovery.com *.krollontrack.com *.linkedin.com *.ontrack.com *.redditstatic.com *.sitefinity.com *.static.licdn.com *.tumblr.com *.twimg.com *.twitter.com *.windows.net *.yahoo.co.jp; media-src 'self' data: blob: *.krollontrack.com *.youtu.be *.youtube.com *.blob.core.windows.net *.kldiscovery.com *.googleusercontent.com *.ediscovery.com; frame-src 'self' *.google.com *.youtu.be *.youtube.com *.hubspot.com *.taleo.net *.trustpilot.com *.hubapi.com *.hotjar.com *.doubleclick.net *.krollontrack.com *.hsforms.com *.typeform.com *.avrotros.nl *.hsforms.net; child-src 'self' *.twitter.com *.twitter.com *.youtube.com *.youtu.be *.vimeo.com *.soundcloud.com *.google.com *.google.com *.facebook.com *.facebook.com *.stumbleupon.com *.trustpilot.com *.doubleclick.net *.hubspot.com *.infinity-tracking.net *.hsforms.com blob:; connect-src 'self' *.google.com *.sitefinity.com *.mktoresp.com *.trustpilot.com *.googleusercontent.com *.hotjar.com *.infinity-tracking.net google-analytics.com *.google-analytics.com *.unpkg.com unpkg.com *.hubspot.com *.hsforms.com *.hubspot.com *.hubapi.com *.cleverbridge.com *.ampproject.org *.doubleclick.net dc.services.visualstudio.com *.googletagmanager.com; 8 script-src 'self' 'unsafe-eval' 'unsafe-inline' *.sbo.top *.sbobet.com *.sbobetex.com *.youtube.com *.ytimg.com *.cloudfront.net optimize.google.com *.google-analytics.com *.hotjar.com *.googletagmanager.com *.qsmly.com *.googleapis.com *.cdnnetworks.net *.purseno.com *.syndication.twimg.com *.sportradar.com *.sportradarserving.com *.digitru.st *.bidswitch.net *.gstatic.com *.geetest.com widgets.sir.sportradar.com avplayer-cdn.sportradar.com *.userleap.com; worker-src 'self' blob:; report-uri https://csp.trackit.tk/z/7046ef45-99d6-447d-9ac3-6d42ae2a70fa 8 block-all-mixed-content; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; 8 frame-ancestors 'self' http://www.kayak.com http://www.kayak.com.ar http://www.kayak.cl http://www.kayak.com.co http://www.kayak.com.pe http://www.kayak.com.mx http://www.kayak.com.br http://www.tripadvisor.com http://www.tripadvisor.com.br http://www.tripadvisor.com.mx www.farecompare.com www.idealo.com http://viajala.com.co http://viajala.com.mx http://viajala.com.pe www.clicktripz.com http://viajala.cl http://viajala.com.ar 8 frame-ancestors 'self'; script-src * 'unsafe-inline' 'unsafe-eval' blob:; img-src * data:; media-src * mediastream: blob: filesystem: ; 8 form-action 'self'; 8 frame-ancestors 'none' ; 8 object-src 'self'; 8 default-src https: data: 'self' 'unsafe-inline' 'unsafe-eval'; 8 frame-ancestors 'self' letmedate.com www.letmedate.com 8 default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: archive.org web.archive.org analytics.archive.org pragma.archivelab.org 8 frame-src 'self'; frame-ancestors 'self'; object-src 'none'; 8 default-src * 'unsafe-inline' 'unsafe-eval'; 8 default-src 'self' http://gsia.tums.ac.ir http://streaming.ut.ac.ir https://cdn.jsdelivr.net https://app.raychat.io http://app.raychat.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://map.ir https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://kangoro.ir/matomo/matomo.js http://tools.1abzar.com http://1abzar.ir http://google.com https://google.com https://www.google.com http://www.google.com http://cse.google.com https://cse.google.com https://www.googleapis.com http://www.googleapis.com https://www.aparat.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js https://app.raychat.io http://app.raychat.io https://se3.raychat.io http://se3.raychat.io ; style-src 'self' 'unsafe-inline' https://app.raychat.io http://app.raychat.io https://cdn.jsdelivr.net https://cse.google.com http://cse.google.com http://www.google.com http://google.com https://google.com https://www.google.com https://www.aparat.com; img-src 'self' blob: data: https://map.ir https://www.google-analytics.com www.google-analytics.com data: *; connect-src 'self' https://map.ir https://www.google-analytics.com www.google-analytics.com https://samta.samt.ac.ir https://pooya.kashanu.ac.ir https://se3.raychat.io http://se3.raychat.io wss://se3.raychat.io; child-src 'self' https://auth4.ut.ac.ir:8443/ https://auth.ut.ac.ir:8443/ http://tools.1abzar.com http://1abzar.ir 'self' https://cse.google.com https://www.aparat.com https://google.com https://www.google.com ; frame-ancestors 'self' https://trustseal.enamad.ir 8 default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' 8 frame-ancestors 'self' http://*.trendin.com https://*.trendin.com 8 report-uri https://sentry.io/api/1481323/security/?sentry_key=6a0d90a447e5404786cce69b90774dbc https://sentry.io/api/1481316/security/?sentry_key=5ed17bd323a34165b4278b59fe665e28 8 default-src 'self'; frame-src * ; media-src *; img-src * 'self' data: https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' api.brainsins.com mw.brainsins.com d2xkqxdy6ewr93.cloudfront.net *.cloudfront.net cdn.pushassist.com trc.taboola.com *.collect.igodigital.com resources.convious-app.com client.convious-app.com cdn.taboola.com 510001631.collect.igodigital.com script.hotjar.com 510001630.collect.igodigital.com static.hotjar.com launch-9151dc1e0eb6-development mstat.acestream.net www.gstatic.com www.google.com connect.facebook.net googleads.g.doubleclick.net www.googleadservices.com www.googletagmanager.com www.google-analytics.com *.parquesreunidos.es assets.adobedtm.com amplify.review-alerts.com static-eu.payments-amazon.com maps.googleapis.com cdn.cookielaw.org geolocation.onetrust.com grpr.tt.omtrdc.net launch-9151dc1e0eb6-development cd.livechatin.com api-pre.adminos.parquesreunidos.com analytics.tiktok.com ts.tradetracker.net sleeknotecustomerscripts.sleeknote.com mstat.acestream.net pilaff-up.ru statusklic.info cdn.notifyon.com cdn.livechatinc.com eu5.bookingkit.de js.mollie.com www.paypal.com twimg.com publish.twitter.com platform.linkedin.com track.adform.net static.criteo.net tagmanager.google.com ssl.google-analytics.com ajax.aspnetcdn.com d2cmqkwo8rxlr9.cloudfront.net ad.doubleclick.net apis.google.com www.youtube.com platform.twitter.com s.ytimg.com syndication.twitter.com api.livechatinc.com; style-src * 'unsafe-inline'; font-src * data:; connect-src * 8 script-src * 'self' 'unsafe-inline' 'unsafe-eval' 8 frame-ancestors https://my.bigcartel.com; 8 default-src https: data: wss: 'unsafe-inline' 'unsafe-eval' 8 default-src 'self';script-src * 'unsafe-inline' 'unsafe-eval' static.cloud.coveo.com;style-src * 'unsafe-inline'; frame-src * 'unsafe-inline'; img-src * data:; connect-src * 'unsafe-inline'; font-src * 'unsafe-inline' 8 frame-ancestors 'self' *.commercevision.biz *.commercevision.com.au 8 default-src 'self' wss: https://static.zdassets.com https://ekr.zdassets.com https://*.contentful.com https://*.zendesk.com https://*.kampyle.com https://*.tigocloud.net http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com wss://*.ooklaserver.net; frame-src 'self' https://bid.g.doubleclick.net https://*.tigocloud.net https://*.tigo.com.bo https://*.tigo.com.py https://www.youtube.com https://*.kampyle.com https://khipu.com/ https://*.hotjar.com https://*.hotjar.com:* https://*.hotjar.io https://www.reportv.com.ar https://*.crwdcntrl.net https://6493920.fls.doubleclick.net https://*.google.com https://*.tigo.com.hn https://*.speedtestcustom.com https://speedtest.cableonda.com https://tigoune.maps.arcgis.com https://www.une.com.co https://*.une.com.co https://api.retargetly.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://optimize.google.com https://www.google.com.ar https://*.tigocloud.net https://static.zdassets.com https://connect.facebook.net https://s.ytimg.com https://www.youtube.com/iframe_api https://widget-mediator.zopim.com https://*.kampyle.com https://js-agent.newrelic.com https://*.nr-data.net http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.reportv.com.ar https://*.crwdcntrl.net https://tigo.us7.list-manage.com https://web.webpushs.com https://tigo.us18.list-manage.com https://static.ads-twitter.com https://www.gstatic.com https://cdn.epica.ai https://*.inbenta.chat https://*.inbenta.io https://*.googleoptimize.com https://ad.doubleclick.net https://cdn.smooch.io https://tigo.us9.list-manage.com https://www.youtube.com https://*.speedtestcustom.com https://speedtest.cableonda.com https://maps.googleapis.com https://api.retargetly.com https://www.rtb123.com; font-src 'self' data: blob: https://fonts.gstatic.com https://*.kampyle.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.tigocloud.net https://*.inbenta.io https://*.speedtestcustom.com https://speedtest.cableonda.com; img-src 'self' data: blob: https://www.google-analytics.com https://googleads.g.doubleclick.net https://*.tigocloud.net https://*.contentful.com https://www.facebook.com https://*.kampyle.com https://static.zdassets.com https://www.googletagmanager.com https://images.ctfassets.net https://stats.g.doubleclick.net https://*.zopim.io https://lh3.googleusercontent.com https://platform-lookaside.fbsbx.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.tigo.com.bo https://ssl.gstatic.com https://www.gstatic.com https://cdn.sendpulse.com https://www.google.com https://www.google.com.ar https://www.google.com.bo https://www.google.com.co https://www.google.com.sv https://www.google.com.gt https://www.google.hn https://www.google.com.ni https://www.google.com.pa https://www.google.com.py https://t.co https://analytics.twitter.com https://svr.mic.edge.com.py http://openweathermap.org https://openweathermap.org https://bcp.crwdcntrl.net https://cx.atdmt.com https://ad.doubleclick.net https://*.inbenta.com https://*.inbenta.io https://*.speedtestcustom.com https://speedtest.cableonda.com https://prs.arkeero.net https://*.googlesyndication.com https://maps.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.kampyle.com https://tagmanager.google.com https://cdn.sendpulse.com https://*.tigocloud.net https://*.inbenta.io https://*.google.com https://*.speedtestcustom.com https://speedtest.cableonda.com; connect-src *; 8 default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.akamai.steamstatic.com/ https://store.akamai.steamstatic.com/ *.google-analytics.com https://www.gstatic.com https://recaptcha.net https://www.gstatic.cn/recaptcha/ https://steamcommunity-a.akamaihd.net; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.akamai.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ *.google-analytics.com https://*.steamstatic.com https://*.steamcontent.com https://*.valvesoftware.com https://*.steambeta.net https://*.cqloud.com https://steambroadcast.akamaized.net https://steambroadcastchat.akamaized.net https://api.steampowered.com https://steamvideo-a.akamaihd.net/; frame-src 'self' steam: http://www.youtube.com https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://steamcommunity.com/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://steamcommunity.com/ embed.nicovideo.jp www.escapistmagazine.com player.youku.com www.bilibili.com https://medal.tv; frame-ancestors 'self' https://steamloopback.host ; 8 script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src 'self' www.openstreetmap.org; 8 frame-ancestors 'none'; connect-src http://127.0.0.1:*; default-src https: 'unsafe-inline' 8 frame-ancestors 'self' *.cnet.com *.ampproject.org *.amp.cloudflare.com *.bing-amp.com www.google.com; default-src https: blob: about: 'unsafe-inline' 'unsafe-eval' *.rvapps.io; font-src https: blob: data:; img-src https: data: blob: android-webview-video-poster: about:; form-action https:; block-all-mixed-content; media-src https: blob: data:; 7 default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com z8y8f3q6.ssl.hwcdn.net https://www.xvideos.com https://wg-xvdev.xvideos.com *.trafficfactory.biz fonts.googleapis.com fonts.gstatic.com ajax.googleapis.com www.google-analytics.com www.googletagmanager.com *.addthis.com *.addthisedge.com www.iwanttodeliver.com apis.google.com www.google.com www.gstatic.com accounts.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.lswcdn.net *.llnwd.net *.hwcdn.net fcm.googleapis.com *.nk-img.com https://static-dev-xvlive.xvideos.com https://dev-api.naked.com http://dev-api.naked.com *.googleapis.com *.exoclick.com *.exosrv.com *.realsrv.com *.exdynsrv.com *.ackcdn.net *.adtng.com *.adglare.net adinvent.engine.adglare.net *.bngpt.com bngpt.com *.trafficjunky.net *.ohmybutt.com *.flirt4free.com *.xlovecam.com *.wlresources.com *.medleyads.com *.cams.com *.acdn5165543.com *.protoawe.com *.google-analytics.com *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com *.promo-bc.com *.bongacams.com *.bongacash.com *.gammae.com *.servingmillions.com *.super-route.com cdn01.flashmediaportal.com engine.asf4f.us *.htdvt.com *.jerkmate.com *.vfgtb.com *.hytxg2.com *.awemdia.com *.cfgr3.com *.ajxx98.online *.sf4f.us *.adworldmedia.com as.air2s.com bngpst.com cretgate.com mysexchatroom.com trknex.com medleyads.com ajxx98.online gamesfromheaven.com go.hpyjmp.com r.trwl2.com bongacams.com clickserve.dartsearch.net afrtrk.com track.cam4tracking.com creative.smljmp.com sffsdvc.com www.sffsdvc.com bmedia.justservingfiles.net blkditsup.com vast.bimbim.com promo.cameraprive.com bngprl.com *.bngprl.com trafforsrv.com serving.stat-rock.com *.adglare.net www.flirt4free.com www.ohmybutt.com www.secretpartners.com cdn.asf4f.us *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com etahub.com ctrack.trafficjunky.net tracking.sexcash.com wss://dev-chatserver.camster.com wss://staging-chatserver.camster.com wss://m.1ka.com wss://c1.1ka.com wss://c11.1ka.com wss://c12.1ka.com wss://c13.1ka.com wss://c14.1ka.com wss://c15.1ka.com wss://c16.1ka.com wss://c17.1ka.com wss://c18.1ka.com wss://c19.1ka.com wss://c110.1ka.com wss://c111.1ka.com wss://c112.1ka.com wss://c113.1ka.com wss://c114.1ka.com wss://c115.1ka.com wss://c2.1ka.com wss://c21.1ka.com wss://c22.1ka.com wss://c23.1ka.com wss://c24.1ka.com wss://c25.1ka.com wss://c26.1ka.com wss://c27.1ka.com wss://c28.1ka.com wss://c29.1ka.com wss://c210.1ka.com wss://c211.1ka.com wss://c212.1ka.com wss://c213.1ka.com wss://c214.1ka.com wss://c215.1ka.com wss://c3.1ka.com wss://c31.1ka.com wss://c32.1ka.com wss://c33.1ka.com wss://c34.1ka.com wss://c35.1ka.com wss://c36.1ka.com wss://c37.1ka.com wss://c38.1ka.com wss://c39.1ka.com wss://c4.1ka.com wss://c41.1ka.com wss://c42.1ka.com wss://c43.1ka.com wss://c44.1ka.com wss://c45.1ka.com wss://c46.1ka.com wss://c47.1ka.com wss://c48.1ka.com wss://c49.1ka.com wss://c410.1ka.com wss://c411.1ka.com wss://c412.1ka.com wss://c413.1ka.com wss://c414.1ka.com wss://c415.1ka.com wss://c5.1ka.com wss://c51.1ka.com wss://c52.1ka.com wss://c53.1ka.com wss://c54.1ka.com wss://c55.1ka.com wss://c56.1ka.com wss://c57.1ka.com wss://c58.1ka.com wss://c59.1ka.com wss://c510.1ka.com wss://c511.1ka.com wss://c512.1ka.com wss://c513.1ka.com wss://c514.1ka.com wss://c515.1ka.com https://dev-chatserver.camster.com https://staging-chatserver.camster.com https://m.1ka.com https://c1.1ka.com https://c11.1ka.com https://c12.1ka.com https://c13.1ka.com https://c14.1ka.com https://c15.1ka.com https://c16.1ka.com https://c17.1ka.com https://c18.1ka.com https://c19.1ka.com https://c110.1ka.com https://c111.1ka.com https://c112.1ka.com https://c113.1ka.com https://c114.1ka.com https://c115.1ka.com https://c2.1ka.com https://c21.1ka.com https://c22.1ka.com https://c23.1ka.com https://c24.1ka.com https://c25.1ka.com https://c26.1ka.com https://c27.1ka.com https://c28.1ka.com https://c29.1ka.com https://c210.1ka.com https://c211.1ka.com https://c212.1ka.com https://c213.1ka.com https://c214.1ka.com https://c215.1ka.com https://c3.1ka.com https://c31.1ka.com https://c32.1ka.com https://c33.1ka.com https://c34.1ka.com https://c35.1ka.com https://c36.1ka.com https://c37.1ka.com https://c38.1ka.com https://c39.1ka.com https://c4.1ka.com https://c41.1ka.com https://c42.1ka.com https://c43.1ka.com https://c44.1ka.com https://c45.1ka.com https://c46.1ka.com https://c47.1ka.com https://c48.1ka.com https://c49.1ka.com https://c410.1ka.com https://c411.1ka.com https://c412.1ka.com https://c413.1ka.com https://c414.1ka.com https://c415.1ka.com https://c5.1ka.com https://c51.1ka.com https://c52.1ka.com https://c53.1ka.com https://c54.1ka.com https://c55.1ka.com https://c56.1ka.com https://c57.1ka.com https://c58.1ka.com https://c59.1ka.com https://c510.1ka.com https://c511.1ka.com https://c512.1ka.com https://c513.1ka.com https://c514.1ka.com https://c515.1ka.com https://media.1ka.com https://u.1ka.com https://n.1ka.com;img-src 'self' 'unsafe-inline' data: blob: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com *.hwcdn.net *.trafficfactory.biz www.google.com www.google-analytics.com ssl.gstatic.com *.nk-img.com *.camster.com *.vscdns.com *.doubleclick.net *.google.fr *.google.com *.exoclick.com *.exosrv.com *.realsrv.com *.exdynsrv.com *.ackcdn.net bmedia.justservingfiles.net; 7 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://gist.github.com https://apis.google.com https://api.amplitude.com https://widget.intercom.io https://js.intercomcdn.com https://logs-01.loggly.com https://cdn.segment.com https://analytics.pgncs.notion.so https://o324374.ingest.sentry.io https://checkout.stripe.com https://js.stripe.com https://embed.typeform.com https://admin.typeform.com https://public.profitwell.com js.sentry-cdn.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.googletagmanager.com https://x.clearbitjs.com https://client-registry.mutinycdn.com https://client.mutinycdn.com/ https://user-data.mutinycdn.com; connect-src 'self' https://msgstore.www.notion.so wss://msgstore.www.notion.so ws://localhost:* https://notion-emojis.s3-us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://s3.us-west-2.amazonaws.com https://notion-production-snapshots-2.s3.us-west-2.amazonaws.com https: http: https://api.amplitude.com https://api.embed.ly https://js.intercomcdn.com https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://logs-01.loggly.com https://api.segment.io https://api.pgncs.notion.so https://o324374.ingest.sentry.io https://checkout.stripe.com https://js.stripe.com https://cdn.contentful.com https://preview.contentful.com https://images.ctfassets.net https://www2.profitwell.com https://api.unsplash.com https://boards-api.greenhouse.io https://user-data.mutinycdn.com https://api-v2.mutinyhq.io; font-src 'self' data: https://cdnjs.cloudflare.com https://js.intercomcdn.com; img-src 'self' data: blob: https: https://platform.twitter.com https://syndication.twitter.com https://pbs.twimg.com https://ton.twimg.com www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://github.githubassets.com https://platform.twitter.com https://ton.twimg.com; frame-src https: http:; media-src https: http: 7 frame-ancestors https://pam.mcafee.com 7 frame-ancestors https://*.complex.com 7 frame-ancestors 'self' https://nurture.solarwinds.com/ 7 frame-ancestors *; report-uri https://www.rackspace.com/report-uri/enforce 7 default-src 'self' https://maxcdn.bootstrapcdn.com https://cdn.knightlab.com https://*.marketo.com https://www.google.com https://www.youtube.com https://fonts.gstatic.com https://*.ul.com data: blob:; connect-src 'self' https://*.lift.acquia.com https://*.wistia.com http://*.wistia.com https://*.ul.com https://*.solosegment.com https://www.google-analytics.com https://spreadsheets.google.com https://www.facebook.com https://stats.addtoany.com https://*.hotjar.com https://*.hotjar.io https://*.mktoutil.com https://*.mktoresp.com https://embedwistia-a.akamaihd.net https://sessions.bugsnag.com https://stats.g.doubleclick.net https://fg8vvsvnieiv3ej16jby.litix.io https://bam.nr-data.net https://bam-cell.nr-data.net https://sheets-proxy.knightlab.com https://cdn.cookielaw.org https://*.onetrust.com wss://*.hotjar.com; font-src 'self' https://maxcdn.bootstrapcdn.com http://maxcdn.bootstrapcdn.com https://cdn.knightlab.com https://fonts.gstatic.com https://script.hotjar.com data:; frame-src 'self' https://*.marketo.com https://www.google.com https://player.vimeo.com https://www.youtube.com https://fast.wistia.com https://vars.hotjar.com https://www.facebook.com http://quote.ul.com https://quote.ul.com https://optimize.google.com https://www.recaptcha.net; img-src 'self' https://*.adroll.com https://*.linkedin.com https://*.facebook.com https://*.google.com https://*.wistia.com https://*.wistia.net https://*.solosegment.com https://embedwistia-a.akamaihd.net https://www.google-analytics.com https://www.googletagmanager.com https://www.ul.com https://www-stage.ul.com https://legacy-uploads.ul.com https://optimize.google.com https://s.ml-attr.com/getuid https://secure.adnxs.com/getuid https://attr.ml-api.io https://pixel.mathtag.com https://cdn.cookielaw.org data: https://collateral-library-production.s3.amazonaws.com; media-src 'self' https://embedwistia-a.akamaihd.net https://*.wistia.com https://*.youtube.com blob: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.acquia.com http://*.acquia.com https://*.wistia.com http://*.wistia.net https://*.wistia.net https://app.wistia.com https://www.youtube.com http://www.youtube.com https://*.vimeo.com https://connect.facebook.net https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://*.hotjar.com https://*.marketo.net https://www.recaptcha.net https://cdnjs.cloudflare.com https://*.adroll.com https://*.ytimg.com https://snap.licdn.com https://*.adroll.mgr.consensu.org https://js-agent.newrelic.com https://bam.nr-data.net https://bam-cell.nr-data.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.onetrust.com https://optimize.google.com https://cdn.c212.net https://c212.net https://pixel.mathtag.com blob: https://app-ab11.marketo.com https://app-sj08.marketo.com https://cdn.knightlab.com https://code.jquery.com https://embed.solosegment.com https://fast.wistia.com https://static.addtoany.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.marketo.com https://cdn.cookielaw.org https://static.addtoany.com https://*.acquia.com https://optimize.google.com https://fonts.googleapis.com https://cdn.knightlab.com maxcdn.bootstrapcdn.com; frame-ancestors 'self'; report-uri https://ulcsp.report-uri.com/r/t/csp/reportOnly 7 frame-ancestors 'self' https://*.mercedes-benz.com; default-src 'self' https://*.mercedes-benz.com https://*.usercentrics.eu https://*.googletagmanager.com https://*.krxd.net https://*.day.com https://*.anythingabout.net https://*.system360gmbh.de https://*.mercedes-benz-classic.com https://*.speedcurve.com https://alltime-stars.com https://cdn.jsdelivr.net https://*.mb-lounge.com https://*.eventbase.com https://narando.com https://*.narando.com https://*.googleapis.com https://maxcdn.bootstrapcdn.com https://cdn.plyr.io https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.google-analytics.com https://*.google.com https://*.google.de https://*.doubleclick.net https://shop.nostalgic.de https://*.gstatic.com https://cdn.ampproject.org https://amp.azure.net https://*.windows.net https://cmsdata.net https://booking-widget.quandoo.de https://api.corpinter.net data: blob: 'unsafe-inline' 'unsafe-eval' 7 upgrade-insecure-requests; frame-ancestors *.lumen.com *.lumentech.com http://static.virtualroi.com/; 7 default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src https: blob:; object-src https:; child-src https: data: blob:; form-action https:; block-all-mixed-content; 7 frame-ancestors 'self' https://studio.first.sandbox.ua.coremedia.cloud https://public-studio.first.sandbox.ua.coremedia.cloud https://preview.uat.ua.coremedia.cloud https://studio.uat.ua.coremedia.cloud https://first.sandbox.ua.coremedia.cloud https://studio.production.ua.coremedia.cloud https://preview.production.ua.coremedia.cloud 7 block-all-mixed-content; style-src https: 'unsafe-inline'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src https:; report-uri https://collectors.au.sumologic.com/receiver/v1/http/ZaVnC4dhaV2fq-TmkezxDM5kD77zglzTUyrlNqPe059oQhlSBcEFmaLaBbMi5G2BkSSJjyA6wJZ-iUDLrux0ATja4lHZr94sfyyTtdVcA_GiHULLYxFY7Q== 7 frame-ancestors "none" 7 default-src *; script-src https://cdnjs.cloudflare.com https://autosug.ebay.com https://www.google-analytics.com https://js-agent.newrelic.com https://bam-cell.nr-data.net https://bam.nr-data.net https://www.google.com https://s.flocdn.com https://*.s1search.co https://swurl.com 'unsafe-inline' 'unsafe-eval' 'self'; style-src https://cdnjs.cloudflare.com 'unsafe-inline' 'self'; connect-src https://api.picclick.com https://www.google-analytics.com https://bam-cell.nr-data.net https://bam.nr-data.net https://*.s1search.co https://soflopxl.com https://swurl.com 'self'; img-src *; font-src https://cdnjs.cloudflare.com data: 'self'; 7 frame-ancestors 'self' *.vpro.nl:* *.human.nl *.vprobroadcast.com *.netinnederland.nl *.2doc.nl *.vprogids.nl; 7 script-src 'self' 'unsafe-inline' 'unsafe-eval' api.salemove.com api.salemove.eu ui.customsearch.ai analytics.twitter.com assets.adobedtm.com connect.facebook.net static.ads-twitter.com www.googleadservices.com maps.googleapis.com cdn.tt.omtrdc.net absa.tt.omtrdc.net www.google.com www.gstatic.com analytics.analytics-egain.com abdemo.egain.cloud absablog-dev.disqus.com absablog-sit.disqus.com absablog-uat.disqus.com absablog-prod.disqus.com ajax.googleapis.com platform.twitter.com platform.linkedin.com assets.pinterest.com c.disquscdn.com disqus.com secure.rating-widget.com log.pinterest.com rating-widget.com s.ytimg.com www.youtube.com youtube.com esb.ext.api.uat.absa.co.za client.crisp.chat googleads.g.doubleclick.net www.google.co.za www.google.pl dsp-aud.eskimi.com dsp.eskimi.com dsp-pix.eskimi.com dsp-media.eskimi.com cdn.syndication.twimg.com cse.google.com api-iam.intercom.io api.salemove.eu app.salemove.eu asset-proxy.salemove.eu assets.salemove.eu chunderw-gll.twilio.com chunderw-vpc-gll.twilio.com client-logger.salemove.eu eventgw.twilio.com fonts.googleapis.com fonts.gstatic.com io.salemove.eu js.intercomcdn.com kluster.ws.salemove.eu libs.salemove.com maps.googleapis.com maps.gstatic.com media.twiliocdn.com nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io s3-eu-west-1.amazonaws.com s3.amazonaws.com uplot.salemove.eu widget.intercom.io googletagmanager.com www.googletagmanager.com js-agent.newrelic.com bam.nr-data.net d.la1-c2-frf.salesforceliveagent.com d.la1-c2cs-cdg.salesforceliveagent.com d.la1-c1cs-frf.salesforceliveagent.com c.la1-c2-par.salesforceliveagent.com c.la1-c2cs-frf.salesforceliveagent.com d.la1-c2cs-frf.salesforceliveagent.com d.la1-c2-par.salesforceliveagent.com d.la1-c1cs-cdg.salesforceliveagent.com c.la1-c2cs-cdg.salesforceliveagent.com c.la1-c1cs-cdg.salesforceliveagent.com c.la2-c2-cdg.salesforceliveagent.com d.la2-c2-cdg.salesforceliveagent.com d.la2-c1cs-cdg.salesforceliveagent.com c.la2-c1cs-cdg.salesforceliveagent.com fls.doubleclick.net tt.mbww.com pixel.mathtag.com snap.licdn.com 7 default-src * data: 'unsafe-inline' 'unsafe-eval';frame-ancestors https://www.saseurobonusshop.com/ https://eurobonus.shopping https://saseurobonusmastercard.se/ https://saseurobonusmastercard.no/ https://saseurobonusmastercard.dk/ https://swipp.com https://app.swipp.com https://www.rewardspay.com/ https://upgrade.plusgrade.com https://consumer-prdb.plusgrade.com https://consumer-prd.plusgrade.com https://sas-next-staging.crossroads.se/ https://www.coop.se https://kiosk.coop.se https://www-stg.rewardspay.com 'self' 7 default-src 'unsafe-eval' 'unsafe-inline' https:; img-src data: https:; font-src data: https: 7 default-src https: data: 'unsafe-inline' 'unsafe-eval' always 7 frame-src 'self' * data: 7 frame-ancestors 'self' *.betssongroupaffiliates.com *.ptstaging.eu *.onegameslink.com 7 upgrade-insecure-requests; default-src https: blob: wss: data:; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: blob: data:;frame-src https: blob: data:; report-uri /cspreports 7 default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; frame-src * 7 object-src *;script-src * 'unsafe-inline' 'unsafe-eval' data: 7 frame-ancestors 'self'; report-uri https://www.goodnes.com/report-uri/enforce 7 default-src 'self' blob: data: *.miraheze.org *.wikimedia.org *.wikipedia.org *.wikibooks.org *.wiktionary.org *.wikiquote.org *.wikisource.org *.wikiversity.org *.wikinews.org *.wikivoyage.org *.mediawiki.org mediawiki.org *.wikidata.org wikidata.org *.wmflabs.org *.google.com *.gstatic.com *.addthis.com *.youtube.com *.youtube-nocookie.com maxcdn.bootstrapcdn.com twitter.com *.creativecommons.org images.uncyc.org www.mikrodev.com *.reviservices.com *.twitter.com www.sciencedaily.com *.googleapis.com *.twimg.com discordapp.com *.openstreetmap.org *.libera.chat *.sorcery.net *.fontawesome.com *.a.wmflabs.org nenawiki.org *.cloudytheology.com i.imgur.com na.llnet.sims3store.cdn.ea.com cdn.discordapp.com m.media-amazon.com image.tmdb.org *.stripe.com *.twitch.tv *.fastly.net *.facebook.com *.shields.io *.bilibili.com *.163.com discord.com googleusercontent.com imgbox.com cdnjs.cloudflare.com cdn.jsdelivr.net reddit.com *.reddit.com redd.it *.redd.it redditmedia.com *.redditmedia.com dropbox.com *.dropbox.com dropboxstatic.com *.dropboxstatic.com *.nicovideo.jp lh3.googleusercontent.com db.onlinewebfonts.com wikiapiary.com *.vimeo.com *.googleusercontent.com *.imgbox.com www.gnu.org www.desmos.com www.recaptcha.net snap.berkeley.edu *.netease.com openlayers.org wikiplus-app.com minotar.net *.tile.openstreetmap.org live.staticflickr.com *.pixabay.com cdn.geogebra.org docs.blender.org scratchblocks.github.io 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.miraheze.org worldsanskrit.net 7 default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data: 7 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *; 7 upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; base-uri 'self'; object-src 'self'; connect-src wss: https: 7 script-src 'self' https: 'unsafe-eval' 'unsafe-inline' 7 default-src: https:; frame-ancestors 'self' X-Frame-Options: SAMEORIGIN 7 default-src 'self' http: https: data: blob: 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.rcmp-grc.gc.ca csps-dev.con.rcmp-grc.gc.ca csps-dev.con.rcmp-grc.gc.ca csps.con.rcmp-grc.gc.ca www.google-analytics.com ajax.googleapis.com www.googletagmanager.com *.clet.ca platform.twitter.com cdn.syndication.twimg.com cdnjs.cloudflare.com use.fontawesome.com www.youtube.com unpkg.com; 7 default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; object-src 'none'; 7 frame-ancestors 'self' https://*.cemex.com https://*.podlaha.cz https://*.beton.cz https://*.valcovany-beton.cz; img-src 'self' data: https://cdn-web.cemex.com https://cdn-web-qa.cemex.com https://cdn-web-intdev.lfgwcemex.services https://cxcdn.lfgwcemex.services https://liferayprod.cemex.com https://assets.cemex.com https://www.facebook.com/tr/ https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://www.linkedin.com/px/ https://px.ads.linkedin.com https://p.adsymptotic.com/d/px/ https://c.contentsquare.net https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org https://c.seznam.cz https://npmcdn.com/leaflet@0.7.3/dist/images/ https://s916025651.t.eloqua.com https://tags.bluekai.com https://service.maxymiser.net https://www.google.com/ https://www.google.com.mx/ https://www.google.fr/ https://www.google.com.co/ https://www.google.co.cr/ https://www.google.hr/ https://www.google.cz/ https://www.google.de/ https://www.google.com.do/ https://www.google.com.eg/ https://www.google.com.gt/ https://www.google.lv/ https://www.google.com.ni/ https://www.google.com.pa/ https://www.google.com.pe/ https://www.google.com.ph/ https://www.google.pl/ https://www.google.com.pr/ https://www.google.es/ https://www.google.ae/ https://www.google.co.uk/ https://www.google.com.sv/; 7 default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data: blob:; media-src * data:; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 7 default-src * 'unsafe-inline' 'unsafe-eval' data: 7 img-src * 7 default-src https: data: wss: blob: 'unsafe-eval' 'unsafe-inline'; 7 frame-ancestors 'self' analytics.pt-dlr.de 7 frame-ancestors 'self' weleda.sabio.de 7 frame-ancestors 'self' godaddy.com *.godaddy.com test-godaddy.com *.test-godaddy.com dev-godaddy.com *.dev-godaddy.com *.dev-godaddy.com:8443 7 default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss:; base-uri 'self'; 7 frame-ancestors https://*.fw1.biz https://*.freewebstore.org https://*.freewebstore.com https://*.ridge.pro http://127.0.0.1:55779 http://localhost:55779; 7 frame-ancestors 'self' *.authorize.net 7 frame-ancestors 'self' https://*.facebook.com; 7 default-src data: http: https: 'unsafe-inline' 'unsafe-eval' 7 font-src 'none' 7 default-src 'self' d1a19ys8w1wkc1.cloudfront.net; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval' https://rcdfcdn.mars.com https://stage-rcdfcdn.mars.com;worker-src * blob:; style-src * 'unsafe-inline'; frame-ancestors 'self' *.royal-canin.de; 7 default-src https: wss: about: data: blob: 'unsafe-inline' 'unsafe-eval' 7 default-src * data: blob: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; 7 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval';script-src * data: blob: 'unsafe-inline' 'unsafe-eval';connect-src * data: blob:;img-src * data: blob: 'unsafe-inline';frame-src * data: blob:;style-src * data: blob: 'unsafe-inline';font-src * data: blob: 'unsafe-inline' 7 default-src 'unsafe-inline' 'unsafe-eval' 'self' data: *; 7 default-src 'self'; font-src 'self' data: https://resources.ricoh-europe.com https://fast.fonts.net https://fonts.gstatic.com https://script.hotjar.com https://use.fontawesome.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://resources.ricoh-europe.com https://code.jquery.com https://unpkg.com https://service.maxymiser.net https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://ajax.googleapis.com https://www.google-analytics.com https://maps.googleapis.com https://*.en25.com https://fullstory.com https://edge.fullstory.com https://script.hotjar.com https://static.hotjar.com https://www.youtube.com https://s.ytimg.com https://secure.leadforensics.com https://app-static.turtl.co https://ldynamicspublicapi.leadforensics.com https://snap.licdn.com https://cdn.mouseflow.com https://tag.demandbase.com https://use.fontawesome.com https://api.feefo.com https://register.feefo.com https://lq3-production01.s3.amazonaws.com; style-src 'self' 'unsafe-inline' https://resources.ricoh-europe.com https://fast.fonts.net https://unpkg.com https://fonts.googleapis.com https://*.en25.com https://app-static.turtl.co https://use.fontawesome.com; img-src 'self' data: https://resources.ricoh-europe.com https://*.t.eloqua.com https://www.google-analytics.com https://img.youtube.com https://i.ytimg.com https://maps.gstatic.com https://maps.googleapis.com https://service.maxymiser.net https://assets.turtl.co https://assets.ricoh-europe.com https://www.google.com https://px.ads.linkedin.com https://match.prod.bidr.io https://id.rlcdn.com https://segments.company-target.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://rs.fullstory.com https://in.hotjar.com https://www.googleadservices.com https://api.feefo.com https://collect.feefo.com; frame-src https://resources.ricoh-europe.com https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://vars.hotjar.com https://ricoh-docuware-calculator.tbtmarketing.com https://gestiondocumentaire.ricoh.fr https://supportrequest.ricoh.ch https://discover.ricoh.co.uk https://webforms.ricoh.de https://*.t.eloqua.com https://embed.ricohtours.com https://ricoh.turtl.co 7 default-src 'self' 'unsafe-inline'; 7 default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data: blob: https:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 7 upgrade-insecure-requests; frame-ancestors 'self' live.sagepay.com; base-uri 'self', frame-ancestors 'self' *.facebook.com, frame-ancestors 'self' *.facebook.com 7 default-src 'self' blob: https://*.cnn.com:* http://*.cnn.com:* *.cnn.io:* *.cnn.net:* *.turner.com:* *.turner.io:* *.ugdturner.com:* courageousstudio.com *.vgtf.net:*; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' blob: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; img-src 'self' data: blob: *; media-src 'self' data: blob: *; font-src 'self' data: *; connect-src 'self' data: *; frame-ancestors 'self' https://*.cnn.com:* http://*.cnn.com:* https://*.cnn.io:* http://*.cnn.io:* *.turner.com:* https://www.google.com https://news.google.com https://amp-cnn-com.cdn.ampproject.org courageousstudio.com; 6 frame-ancestors 'self' https://*.opera.com; upgrade-insecure-requests; 6 frame-ancestors 'self' https://*.target.com; 6 frame-ancestors nypost.com *.nypost.com *.decider.com *.pagesix.com 6 frame-ancestors 'self' *.verizon.com *.verizonwireless.com *.vzwcorp.com 6 upgrade-insecure-requests; media-src https: blob:; child-src https: blob:; default-src https: wss: 'unsafe-inline' 'unsafe-eval' data:; font-src https: data:; img-src https: data:; 6 frame-ancestors 'self'; base-uri 'self';upgrade-insecure-requests; 6 upgrade-insecure-requests; base-uri 'self' 6 script-src 'self' 6 frame-ancestors 'self' https://*.elastic.co https://elasticsandbox.docebosaas.com https://elastic.docebosaas.com; 6 frame-ancestors *.motor1.com 6 block-all-mixed-content;frame-ancestors *.mail.com 6 default-src * data: blob: 'unsafe-eval' 'unsafe-inline' 6 default-src https: data: wss: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval'; object-src 'self' 6 default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval'; 6 default-src * data: blob: about: vkcalls:;script-src 'self' https://vk.com https://*.vk.com https://static.vk.me https://*.mail.ru https://r.mradx.net https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com https://connect.facebook.net https://telegram.org https://*.yandex.ru https://*.google-analytics.com https://*.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://*.google.com https://google.com https://*.vkpartner.ru https://*.moatads.com https://*.adlooxtracking.com https://*.gstatic.com https://*.google.ru https://securepubads.g.doubleclick.net https://cdn.ampproject.org https://www.googletagmanager.com https://googletagmanager.com https://*.vk-cdn.net https://*.hit.gemius.pl https://yastatic.net https://analytics.tiktok.com 'unsafe-inline' 'unsafe-eval' blob:;style-src https://vk.com https://*.vk.com https://static.vk.me https://ton.twimg.com https://tagmanager.google.com https://platform.twitter.com https://*.googleapis.com 'self' 'unsafe-inline' 6 default-src https: blob: data: 'unsafe-inline' 'unsafe-eval' 6 frame-ancestors 'self' *.multimediabs.com 6 default-src * data: blob: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self' support.carousell.com demo.twozero.live www.carousellpropertyexpo.ph 6 default-src https: 'unsafe-inline' 'unsafe-eval' data: blob: 6 default-src https://*.kucoin.center https://www.googleadservices.com https://googleads.g.doubleclick.net https://revain.org https://api.mobilum.com https://mc.yandex.ru https://widget.mobilum.com https://sdk.im.jiguang.cn https://maxcdn.bootstrapcdn.com https://www.googletagmanager.com https://upload.qiniup.com https://frontend-helper.cloudtechnet.cn https://*.staticimg.com https://*.staticimg.co https://*.kucoin.top https://*.kucoin.com https://*.kucoin.biz https://pool-x.io https://*.kumex.com https://*.kumex.top https://*.pool-x.io https://*.kcsfile.com https://storage.googleapis.com https://font.googleapis.com https://www.recaptcha.net https://at.alicdn.com https://g.alicdn.com https://www.google-analytics.com https://www.gstatic.cn https://fonts.gstatic.cn https://fonts.gstatic.com https://www.gstatic.com https://stats.g.doubleclick.net https://api.growingio.com https://tags.growingio.com https://ekr.zdassets.com https://www.growingio.com https://static.geetest.com https://api.geetest.com https://dn-staticdown.qbox.me https://www.youtube.com https://kucoin.zendesk.com https://rollbar-eu.zendesk.com https://support.zendesk.com https://www.zendesk.com https://ekr.zdassets.com https://static.zdassets.com https://widget-mediator.zopim.com wss://widget-mediator.zopim.com https://v2.zopim.com https://cdn.zopim.com https://www.zopim.com https://uploads.zopim.com https://assets.zopim.com https://api.zopim.com https://v2assets.zopim.io https://cdn.zopim.com https://www.google.co.jp https://www.google.com data: ws: wss: eval: inline: 'unsafe-eval' 'unsafe-inline' ; connect-src https://www.googleadservices.com https://googleads.g.doubleclick.net https://revain.org https://api.mobilum.com https://mc.yandex.ru https://widget.mobilum.com https://sdk.im.jiguang.cn https://maxcdn.bootstrapcdn.com https://www.googletagmanager.com https://upload.qiniup.com https://frontend-helper.cloudtechnet.cn https://*.staticimg.com https://*.staticimg.co https://*.kucoin.center https://*.kucoin.top https://*.kucoin.com https://*.kucoin.biz https://pool-x.io https://*.kumex.com https://*.kumex.top https://*.pool-x.io https://*.kcsfile.com https://storage.googleapis.com https://font.googleapis.com https://www.recaptcha.net https://at.alicdn.com https://g.alicdn.com https://www.google-analytics.com https://www.gstatic.cn https://fonts.gstatic.cn https://fonts.gstatic.com https://www.gstatic.com https://stats.g.doubleclick.net https://api.growingio.com https://tags.growingio.com https://ekr.zdassets.com https://www.growingio.com https://www.tradingview.com https://static.geetest.com https://api.geetest.com https://dn-staticdown.qbox.me https://www.youtube.com https://kucoin.zendesk.com https://rollbar-eu.zendesk.com https://support.zendesk.com https://www.zendesk.com https://ekr.zdassets.com https://static.zdassets.com https://widget-mediator.zopim.com wss://widget-mediator.zopim.com https://v2.zopim.com https://cdn.zopim.com https://www.zopim.com https://uploads.zopim.com https://assets.zopim.com https://api.zopim.com https://v2assets.zopim.io https://cdn.zopim.com https://www.google.co.jp https://www.google.com data: ws: wss: eval: inline: 'unsafe-eval' 'unsafe-inline'; font-src http: https: data:; img-src http: https: data: blob:; worker-src http: https: data: blob:; child-src http: https: data: blob:; frame-ancestors 'self' https://www.growingio.com wss://widget-mediator.zopim.com https://v2.zopim.com https://cdn.zopim.com https://www.zopim.com https://uploads.zopim.com https://assets.zopim.com https://api.zopim.com https://v2assets.zopim.io https://cdn.zopim.com https://www.google.co.jp https://www.google.com https://*.kucoin.com https://*.kucoin.top https://*.kucoin.center 6 upgrade-insecure-requests; frame-ancestors 'self'; 6 frame-ancestors 'self' https://*.evergage.com https://cdn.evgnet.com; upgrade-insecure-requests; block-all-mixed-content 6 frame-ancestors 'self' *.download.com.vn download.com.vn *.download.vn download.vn *.softvn.com softvn.com *.quantrimang.com quantrimang.com *.meta.vn meta.vn *.vndoc.com vndoc.com *.gamevui.vn gamevui.vn *.hoatieu.vn hoatieu.vn 6 upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval' 6 connect-src * 'self' 6 img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; worker-src blob:; 6 frame-ancestors 'self'; report-uri https://3533eaa516fe10a59521ffab0a98b9a4.report-uri.com/r/t/csp/enforce; 6 frame-ancestors 'self' https://optimize.google.com/ 6 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.facebook.net *.google-analytics.com *.addthisedge.com *.marketo.com *.googletagmanager.com *.mookie1.com *.serving-sys.com *.marketo.net *.calltrk.com *.tiqcdn.com *.jwpcdn.com *.youtube.com *.addthis.com m.addthisedge.com s.ytimg.com *.facebook.com *.pinterest.com *.googleapis.com *.typekit.net *.northwell.edu *.limelight.com *.delvenetworks.com *.addtoany.com *.github.io *.aspnetcdn.com s.gravatar.com *.wp.com *.amazonaws.com *.googleadservices.com *.microsoft.com *.jquery.com *.html5media.info *.cloudfront.net *.jwpcdn.com *.newrelic.com *.nr-data.net tagmanager.google.com *.surveymonkey.com *.brightwhistle.com *.callrail.com *.healthwise.net *.merklesearch.com *.rkdms.com *.rawgit.com *.cloudflare.com ethn.io e.infogram.com *.gigya.com *.influencehealth.com *.bing.com *.visto1.net *.linkedin.com *.hotjar.com *.doubleclick.net *.creative-serving.com *.invocacdn.com *.invoca.net *.adsrvr.org *.acquia.com *.segment.com *.rdcdn.com *.msecnd.net *.mymarketingreports.com *.optimizely.com *.syllable.ai *.conveythis.com *.force.com *.salesforce.com *.salesforceliveagent.com *.sanzone.io api.dpx.northwell.io *.yimg.com *.yahoo.com tags.srv.stackadapt.com pagecdn.io *.alpixtrack.com *.basis.net *.tctm.co *.pixel.ad *.adobedtm.com *.112.2o7.net *.presage.io *.evgnet.com; object-src 'self' video.limelight.com assets.delvenetworks.com *.gigya.com; style-src 'self' 'unsafe-inline' rtp-static.marketo.com *.googleapis.com *.vm *.bootstrapcdn.com *.northwell.edu malihu.github.io static.addtoany.com s.gravatar.com code.jquery.com *.cloudfront.net *.surveymonkey.com *.marketo.com *.rkdms.com tagmanager.google.com *.acquia.com *.syllable.ai *.force.com *.salesforce.com api.dpx.northwell.io *.yimg.com *.srv.stackadapt.com; img-src 'self' data: *.google-analytics.com *.g.doubleclick.net *.facebook.com *.google.com jwpltx.com api.nslijweb.com csi.gstatic.com *.googleapis.com maps.gstatic.com img.delvenetworks.com *.llnw.net m.addthis.com *.northwell.edu northwellhealt.wpengine.com *.gravatar.com *.wp.com *.cloudfront.net *.amazonaws.com www.bugherd.com *.surveymonkey.com img.youtube.com *.googleadservices.com maps.googleapis.com *.mxptint.net dpm.demdex.net ad.yieldmanager.com ad.afy11.net d.agkn.com idsync.rlcdn.com *.bluekai.com *.openx.net *.rubiconproject.com *.adnxs.com sync.adaptv.advertising.com *.rkdms.com i.ytimg.com *.gigya.com *.bing.com *.googletagmanager.com *.doubleclick.net *.google.com *.gstatic.com *.tilehosting.com *.hotjar.com *.maptiler.com *.rdcdn.com https://rdcdn.com clickserv.pixel.ad *.syllablecdn.com *.syllable.ai *.conveythis.com *.force.com *.salesforce.com *.sanzone.dev *.northwell.io api.dpx.northwell.io *.yimg.com *.googleusercontent.com *.marketo.com alpixtrack.com *.ipredictive.com *.bidr.io *.sitescout.com *.presage.io *.locationiq.com *.linkedin.com *.adsymptotic.com; media-src 'self' blob: *.llnw.net *.delvenetworks.com *.llnw.com dam.northwell.edu; frame-src 'self' blob: cdn-akamai.mookie1.com tags.tiqcdn.com s7.addthis.com www.youtube.com static.addtoany.com *.doubleclick.net www.google.com *.understand.com *.marketo.com *.sli.do ethn.io e.infogram.com *.gigya.com w.soundcloud.com view.knowledgevision.com 8065684-gigya.northwell.edu intakeforms.sequencehealth.com mednews.hofstra.edu app.stitcher.com vars.hotjar.com *.googletagmanager.com www.facebook.com insight.adsrvr.org *.acquia.com *.segment.com *.optimizely.com *.force.com *.salesforce.com *.pledgeling.com *.adsrvr.org *.healthgrades.com *.podbean.com *.libsyn.com *.simplecast.com *.sitescout.com *.youvisit.com *.demdex.net; child-src 'self' blob:; font-src 'self' data: themes.googleusercontent.com fonts.gstatic.com *.bootstrapcdn.com www.bugherd.com static.hotjar.com api.dpx.northwell.io *.hotjar.com *.cloudfront.net; connect-src 'self' 'unsafe-inline' 309-lvl-470.mktoresp.com sjrtp4.marketo.com *.addthis.com *.pusherapp.com *.pusher.com www.bugherd.com *.google-analytics.com *.northwell.edu content.healthwise.net *.cloudflare.com *.rkdms.com *.callrail.com *.serving-sys.com api.dpx.northwell.io *.gigya.com *.llnw.net *.hotjar.com wss://*.hotjar.com *.doubleclick.net *.hotjar.io www.facebook.com *.cloudfront.net *.acquia.com *.segment.com *.visualstudio.com *.bugsnag.com *.mktoresp.com *.nr-data.net *.optimizely.com *.syllable.ai *.locationiq.com *.conveythis.com *.force.com *.sanzone.io *.sanzone.dev *.northwell.io *.yimg.com *.srv.stackadapt.com sentry.io *.reachnorthwell.com analytics.google.com *.facebook.net *.demdex.net; report-uri https://northwell.report-uri.com/r/d/csp/reportOnly 6 upgrade-insecure-requests; frame-ancestors 'self' analytics.google.com analytics.webtrends.com secure.minorhotels.com *.naladhu.com *.oakshotels.com *.telerain.com:* 6 frame-ancestors 'self' https://adventhealth.com https://*.adventhealth.com 6 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; 6 default-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data:; object-src 'none' 6 default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 6 default-src 'self'; script-src 'self' https://*.optimizely.com https://secure.pay1.de https://www.img-bahn.de https://cms.static-bahn.de https://cms.static-bahn.de https://cdn.m-pathy.com https://dmp.adform.net https://zn0lxkzethotizctx-bahn.siteintercept.qualtrics.com https://*.adform.net https://m.exactag.com https://siteintercept.qualtrics.com https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline'; connect-src 'self' https://dmp.adform.net https://siteintercept.qualtrics.com https://logx.optimizely.com https://*.optimizely.com https://hcaptcha.com https://*.hcaptcha.com https://collect.tealiumiq.com; frame-src 'self' https://cms.static-bahn.de https://secure.pay1.de https://hcaptcha.com https://*.hcaptcha.com https://www.bahn.de https://www.abo-bahn.de https://db.novafind.eu https://kundenkarte-db.mvv-muenchen.de https://transport.novafind.eu https://db-streckenagent.hafas.de https://ps.bahn.de https://nextalert-db.nexterite.eu https://s-bahn-muenchen-live.de https://garantien-formular.cs100.force.com https://idm.dbv.service.deutschebahn.com https://db-bordgastronomie.de; frame-ancestors 'self'; style-src 'self' https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline'; font-src 'self' data:; img-src 'self' https://dmp.adform.net https://cdn.optimizely.com https://assets.static-bahn.de data:; media-src 'self' https://assets.static-bahn.de; 6 connect-src *; default-src 'self'; font-src * data:; frame-src *; img-src * data:; media-src * blob:; object-src *; script-src * blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 6 default-src 'self'; font-src 'self' *.kaltura.com cdnjs.cloudflare.com data: fonts.gstatic.com vjs.zencdn.net *.hotjar.com;img-src 'self' data: *.google-analytics.com *.g.doubleclick.net maps.gstatic.com maps.googleapis.com *.twitter.com *.twimg.com *.youtube.com *.kaltura.com *.linkedin.com *.6sc.co *.facebook.com *.eloqua.com *.verisk.com *.albacross.com metrics.brightcove.com *.air-worldwide.com www.google.com verisk.d1.sc.omtrdc.net t.co p.adsymptotic.com cm.everesttech.net dpm.demdex.net cf-images.us-east-1.prod.boltdns.net veriskisonetprod.112.2o7.net i.ytimg.com www.googletagmanager.com www.greatplacetowork.com cdn.cookielaw.org api.mapbox.com f1.media.brightcove.com udc-neb.kampyle.com *.maplecroft.com ajax.googleapis.com public.tableau.com www.google.co.uk;object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.twitter.com www.google-analytics.com *.googleapis.com *.google.com www.gstatic.com *.cookielaw.org *.googletagmanager.com assets.adobedtm.com *.twimg.com kaltura.com *.cloudflare.com dl.episerver.net *.facebook.net fonts.googleapis.com players.brightcove.net az416426.vo.msecnd.net *.xactware.com *.kaltura.com *.licdn.com *.albacross.com *.oktopost.com *.6sc.co *.ads-twitter.com *.cave9tape.com okt.to geolocation.onetrust.com script.crazyegg.com www.googleadservices.com vjs.zencdn.net img.en25.com s1065293013.t.eloqua.com googleads.g.doubleclick.net *.salesforceliveagent.com *.linkedin.com nebula-cdn.kampyle.com unpkg.com cdn.mouseflow.com public.flourish.studio *.hotjar.com pi.pardot.com *.maplecroft.com www.buzzsprout.com public.tableau.com ionfiles.scribblecdn.net readymag.com js.hsforms.net *.hsforms.com *.youtube.com snap.licdn.com player.vimeo.com api-ssl.bitly.com; style-src 'self' 'unsafe-inline' *.googleapis.com dl.episerver.net *.twitter.com *.twimg.com cdnjs.cloudflare.com *.verisk.com unpkg.com;frame-src 'self' platform.twitter.com www.google.com *.twitter.com *.youtube.com *.surveygizmo.com insuranceservicesofficeinc.demdex.net *.facebook.com bid.g.doubleclick.net *.hotjar.com *.pardot.com www.buzzsprout.com public.tableau.com verisk.postclickmarketing.com *.brightcove.net *.acast.com embed.readymag.com s1120.t.eloqua.com flo.uri.sh go.maplecroft.com player.vimeo.com go.maplecroft.com;media-src 'self' *.kaltura.com blob: *.air-worldwide.com http://manifest.prod.boltdns.net https://manifest.prod.boltdns.net bcbolt446c5271-a.akamaihd.net;connect-src 'self' *.kaltura.com www.google-analytics.com *.brightcove.com dc.services.visualstudio.com dpm.demdex.net epsilon.6sense.com cdn.cookielaw.org stats.g.doubleclick.net https://c.6sc.co/ https://secure.adnxs.com/getuidj *.albacross.com http://manifest.prod.boltdns.net bcbolt446c5271-a.akamaihd.net *.crazyegg.com www.googleapis.com veriskisonetprod.112.2o7.net verisk.d1.sc.omtrdc.net privacyportal.onetrust.com *.hotjar.com vc.hotjar.io ws: *.hotjar.com hubspot-forms-static-embed.s3.amazonaws.com https://otc.xactware.com/XactwareLms/certificationListing.xml;child-src 'self' *.kaltura.com blob: *.air-worldwide.com insuranceservicesofficeinc.demdex.net *.surveygizmo.com; 6 referrer no-referrer 6 frame-ancestors 'self' https://pge.segmanta.com https://www.babylist.com shop.pampers.com 6 none 6 default-src https:; font-src https: data:; img-src https: data:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; 6 frame-ancestors 'self' https://www.growingio.com 6 default-src https: wss: data: 'unsafe-inline' 'unsafe-eval' 6 default-src * 'self' 'unsafe-inline' 'unsafe-eval' blob:;script-src * 'self' 'unsafe-inline' 'unsafe-eval'; style-src * 'self' 'unsafe-inline';img-src * 'self' data:;frame-ancestors 'self' https://www.visma.com/ online.superoffice.com apps.risevision.com desktop.visma.com asp.visma.com hlasp.visma.com es-eu-dev-api01.episerver.net;worker-src * 'self' blob:;connect-src * 'self' blob:;font-src * 'self' data:;frame-src * 'self';media-src * 'self' blob:;object-src * 'self'; 6 default-src 'none'; base-uri 'self'; block-all-mixed-content; connect-src 'self' uploads.github.com www.githubstatus.com collector.githubapp.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events translator.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com; frame-ancestors 'none'; frame-src render.githubusercontent.com render-temp.githubusercontent.com viewscreen.githubusercontent.com; img-src 'self' data: github.githubassets.com identicons.github.com collector.githubapp.com github-cloud.s3.amazonaws.com secured-user-images.githubusercontent.com/ *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/socket-worker-3f088aa2.js gist.github.com/socket-worker-3f088aa2.js 6 default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; object-src *; style-src * 'unsafe-inline'; img-src * data:; media-src *; frame-src *; font-src * data:; connect-src * 6 connect-src 'self' habboo-a.akamaihd.net *.habbo.com https://hcaptcha.com https://*.hcaptcha.com cookie-cdn.cookiepro.com privacyportal.cookiepro.com cookies.onetrust.mgr.consensu.org geolocation.onetrust.com www.facebook.com www.google-analytics.com csi.gstatic.com *.googlesyndication.com *.g.doubleclick.net hb.improvedigital.com pub.tunnl.com; img-src 'self' data: habboo-a.akamaihd.net *.habbo.com cookie-cdn.cookiepro.com habbo-stories-content.s3.amazonaws.com www.facebook.com www.google-analytics.com www.google.com *.g.doubleclick.net *.googlesyndication.com *.gstatic.com images.habbogroup.com docj27ko03fnu.cloudfront.net d3hmp0045zy3cs.cloudfront.net quilt-cdn.janrain.com pay.openbucks.com trck.spoteffects.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' habboo-a.akamaihd.net *.habbo.com https://hcaptcha.com https://*.hcaptcha.com cookie-cdn.cookiepro.com connect.facebook.net www.google-analytics.com www.google.com www.gstatic.com apis.google.com *.g.doubleclick.net *.googlesyndication.com www.googletagservices.com partner.googleadservices.com adservice.google.com adservice.google.ad adservice.google.ae adservice.google.com.af adservice.google.com.ag adservice.google.com.ai adservice.google.al adservice.google.am adservice.google.co.ao adservice.google.com.ar adservice.google.as adservice.google.at adservice.google.com.au adservice.google.az adservice.google.ba adservice.google.com.bd adservice.google.be adservice.google.bf adservice.google.bg adservice.google.com.bh adservice.google.bi adservice.google.bj adservice.google.com.bn adservice.google.com.bo adservice.google.com.br adservice.google.bs adservice.google.bt adservice.google.co.bw adservice.google.by adservice.google.com.bz adservice.google.ca adservice.google.cd adservice.google.cf adservice.google.cg adservice.google.ch adservice.google.ci adservice.google.co.ck adservice.google.cl adservice.google.cm adservice.google.cn adservice.google.com.co adservice.google.co.cr adservice.google.com.cu adservice.google.cv adservice.google.com.cy adservice.google.cz adservice.google.de adservice.google.dj adservice.google.dk adservice.google.dm adservice.google.com.do adservice.google.dz adservice.google.com.ec adservice.google.ee adservice.google.com.eg adservice.google.es adservice.google.com.et adservice.google.fi adservice.google.com.fj adservice.google.fm adservice.google.fr adservice.google.ga adservice.google.ge adservice.google.gg adservice.google.com.gh adservice.google.com.gi adservice.google.gl adservice.google.gm adservice.google.gp adservice.google.gr adservice.google.com.gt adservice.google.gy adservice.google.com.hk adservice.google.hn adservice.google.hr adservice.google.ht adservice.google.hu adservice.google.co.id adservice.google.ie adservice.google.co.il adservice.google.im adservice.google.co.in adservice.google.iq adservice.google.is adservice.google.it adservice.google.je adservice.google.com.jm adservice.google.jo adservice.google.co.jp adservice.google.co.ke adservice.google.com.kh adservice.google.ki adservice.google.kg adservice.google.co.kr adservice.google.com.kw adservice.google.kz adservice.google.la adservice.google.com.lb adservice.google.li adservice.google.lk adservice.google.co.ls adservice.google.lt adservice.google.lu adservice.google.lv adservice.google.com.ly adservice.google.co.ma adservice.google.md adservice.google.me adservice.google.mg adservice.google.mk adservice.google.ml adservice.google.com.mm adservice.google.mn adservice.google.ms adservice.google.com.mt adservice.google.mu adservice.google.mv adservice.google.mw adservice.google.com.mx adservice.google.com.my adservice.google.co.mz adservice.google.com.na adservice.google.com.nf adservice.google.com.ng adservice.google.com.ni adservice.google.ne adservice.google.nl adservice.google.no adservice.google.com.np adservice.google.nr adservice.google.nu adservice.google.co.nz adservice.google.com.om adservice.google.com.pa adservice.google.com.pe adservice.google.com.pg adservice.google.com.ph adservice.google.com.pk adservice.google.pl adservice.google.pn adservice.google.com.pr adservice.google.ps adservice.google.pt adservice.google.com.py adservice.google.com.qa adservice.google.ro adservice.google.ru adservice.google.rw adservice.google.com.sa adservice.google.com.sb adservice.google.sc adservice.google.se adservice.google.com.sg adservice.google.sh adservice.google.si adservice.google.sk adservice.google.com.sl adservice.google.sn adservice.google.so adservice.google.sm adservice.google.sr adservice.google.st adservice.google.com.sv adservice.google.td adservice.google.tg adservice.google.co.th adservice.google.com.tj adservice.google.tk adservice.google.tl adservice.google.tm adservice.google.tn adservice.google.to adservice.google.com.tr adservice.google.tt adservice.google.com.tw adservice.google.co.tz adservice.google.com.ua adservice.google.co.ug adservice.google.co.uk adservice.google.com.uy adservice.google.co.uz adservice.google.com.vc adservice.google.co.ve adservice.google.vg adservice.google.co.vi adservice.google.com.vn adservice.google.vu adservice.google.ws adservice.google.rs adservice.google.co.za adservice.google.co.zm adservice.google.co.zw adservice.google.cat rpxnow.com d29usylhdk1xyu.cloudfront.net trck.spoteffects.net hb.improvedigital.com cdn.ampproject.org; style-src 'self' 'unsafe-inline' habboo-a.akamaihd.net *.habbo.com https://hcaptcha.com https://*.hcaptcha.com www.gstatic.com fonts.googleapis.com d3hmp0045zy3cs.cloudfront.net quilt-cdn.janrain.com; child-src 'self' https://hcaptcha.com https://*.hcaptcha.com *.habbo.com *.facebook.com www.google.com *.g.doubleclick.net *.googlesyndication.com habboo-a.akamaihd.net www.youtube.com www.offertoro.com hb.improvedigital.com; font-src 'self' fonts.gstatic.com habboo-a.akamaihd.net *.habbo.com; frame-ancestors 'self' *.idcgames.com www.funnygames.fi www.funnygames.es www.funnygames.nl www.funnygames.fr www.funnygames.it www.funnygames.us www.funnygames.eu www.funnygames.biz www.funnygames.com.br www.funnygames.org *.gamesxl.com keygames.com www.games.co.za www.bgames.com starbie.co.uk nyckelspel.se www.games.co.uk www.a10.com www.gry.pl www.spela.se www.gamesgames.com www.ourgames.ru www.permainan.co.id www.games.co.id www.agame.com www.flashgames.ru www.mousebreaker.com kizi.com yepi.com www.integrations.partner.spilgames.com www.teens-integrations.partner.spilgames.com www.youdagames.com www.elkspel.nl www.spele.nl www.spele.be www.spelletjesoverzicht.nl *.orangegames.com hyvesgames.nl spele.nl www.spelletjes.nl www.spel.nl *.giochixl.it www.1001giochi.it minigioco.it www.gioco.it www.giochi.it *.jeuxdelajungle.fr www.1001games.fr jouerjouer.com spele.be www.jeux.fr www.jeu.fr oyun.mynet.com gamecell.com www.gamecell.com oyungemisi.com www.oyunskor.com *.1001pelit.com pelaaleikkia.com www.isladejuegos.es clavejuegos.com www.juegos.com *.1001spiele.de www.jetztspielen.ws www.jetztspielen.de www.spielaffe.de *.spielspiele.de spielspiele.de www.spielen.com *.1001jogos.pt jogojogar.com www.ojogos.com.br hb.improvedigital.com; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com *.habbo.com *.facebook.com www.google.com *.g.doubleclick.net *.googlesyndication.com habboo-a.akamaihd.net www.youtube.com www.offertoro.com hb.improvedigital.com; upgrade-insecure-requests; report-uri /csp/report 6 frame-ancestors 'self' https://*.jumpseller.com https://app.jivosite.com https://*.loja.olx.pt 6 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline';font-src * data: blob: 'unsafe-inline'; 6 frame-ancestors *.youtube.com *.pearsoncmg.com *.pearsonsupport.com *.pearson.com *.ecollege.com *.mathxl.com; 6 default-src https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com *.bizographics.com *.rawgit.com *.googleapis.com *.unpkg.com *.youtube.com *.googletagmanager.com *.googleadservices.com *.google.com *.gstatic.com *.google-analytics.com *.doubleclick.net *.ytimg.com *.facebook.net *.cloudfront.net *.rdstation.com.br *.w3-edge.com *.reclameaqui.com.br *.ampproject.org *.novahaus.com.br *.shoptarget.com.br *.shopback.net *.shopconvert.com.br *.voxus.com.br targeting.voxus.tv *.omguk.com *.hotjar.com snap.licdn.com https://cdn.mouseflow.com https://bat.bing.com https://s.yimg.com https://*.tailtarget.com https://d.tailtarget.com; connect-src 'self' data: *.google.com https://freegeoip.app *.plyr.io https://noembed.com *.googleapis.com *.rdstation.com.br *.ampproject.org *.shoptarget.com.br *.linximpulse.net *.retargeter.com.br *.shopconvert.com.br ckies.net *.shopback.net *.viacep.com.br viacep.com.br *.voxus.tv api.ipify.org *.loggly.com *.hotjar.com wss://*.hotjar.com *.hotjar.io *.facebook.com www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://ampcid.google.com.br https://s.yimg.com https://bat.bing.com; img-src 'self' data: *.youtube.com *.ytimg.com *.facebook.com *.google-analytics.com *.google.com *.google.com.br *.doubleclick.net *.gravatar.com *.w.org *.linkedin.com *.shopback.net *.adsymptotic.com cliente.linx.com.br *.adnxs.com smartbmc.com.br *.smartbmc.com.br *.googletagmanager.com https://frame-images.com https://www.gstatic.com https://bat.bing.com https://sp.analytics.yahoo.com https://*.tailtarget.com https://qr-code.ithemes.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com *.shopback.net; font-src 'self' data: *.gstatic.com script.hotjar.com https://use.typekit.net; worker-src https: blob: 6 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.stihl.com https://wm.wiredminds.de https://www.google-analytics.com https://www.googletagmanager.com https://analytics-udg.netdna-ssl.com https://www.googleadservices.com https://bat.bing.com https://rns.matelso.de https://googleads.g.doubleclick.net https://maps.googleapis.com https://static.criteo.net https://sslwidget.criteo.com https://static.hotjar.com https://script.hotjar.com https://connect.facebook.net https://ssl.geoplugin.net https://www.google.com https://www.gstatic.com https://api.openweathermap.org https://e.video-cdn.net https://79423.analytics.edgekey.net https://mc.yandex.ru https://vk.com https://top-fwz1.mail.ru https://cdn.taboola.com https://trc.taboola.com https://ssl.google-analytics.com https://www.sc.pages02.net https://track.adform.net https://s2.adform.net https://cstatic.weborama.fr https://chimpstatic.com https://amplify.outbrain.com https://tr.outbrain.com https://lib-3pas.admatrix.jp https://eventd-cro.admatrix.jp https://static.ads-twitter.com https://analytics.twitter.com https://s.pinimg.com https://ajax.googleapis.com https://wm.wiredminds.de https://static.stihl-timbersports.com https://www.youtube.com https://s.ytimg.com https://*.mouseflow.com https://secure-ds.serving-sys.com https://ng361.infusionsoft.com https://bs.serving-sys.com https://linklist.mmcagentur.at https://c.imedia.cz https://mc.yandex.com https://www.google.de https://www.google.it https://www.google.es https://www.google.ru https://www.google.pt https://www.google.at https://www.google.cz https://www.google.gr https://www.google.pl https://www.google.fr https://www.google.ro https://www.google.bg https://www.google.co.uk https://www.google.nl https://www.google.com.ua https://www.google.de https://www.google.it https://www.google.es https://www.google.ru https://www.google.pt https://www.google.at https://www.google.cz https://www.google.gr https://www.google.pl https://www.google.fr https://www.google.ro https://www.google.bg https://www.google.co.uk https://www.google.nl https://www.google.com.ua;style-src 'self' 'unsafe-inline' https://static.stihl.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://static.stihl-timbersports.com;img-src 'self' data: *;font-src 'self' https://static.stihl.com https://fonts.gstatic.com https://netdna.bootstrapcdn.com https://e.video-cdn.net https://maxcdn.bootstrapcdn.com https://*.mouseflow.com https://linklist.mmcagentur.at https://script.hotjar.com;child-src 'self' https://*.mouseflow.com https://www.facebook.com;frame-src 'self' https://www.google.com https://www.facebook.com https://e.video-cdn.net https://googleads.g.doubleclick.net https://www.google.de https://ad3.adfarm1.adition.com https://*.fls.doubleclick.net https://cstatic.weborama.fr https://rd.frontend.weborama.fr https://www.youtube-nocookie.com https://www.youtube.com https://e.issuu.com https://*.mouseflow.com https://app11.jaggaer.com https://player.vimeo.com https://ng361.infusionsoft.app https://data.stihl-timbersports.com https://www.pool4tool.com https://vars.hotjar.com https://img-cdn.mediaplex.com https://bid.g.doubleclick.net https://www.google.de https://www.google.it https://www.google.es https://www.google.ru https://www.google.pt https://www.google.at https://www.google.cz https://www.google.gr https://www.google.pl https://www.google.fr https://www.google.ro https://www.google.bg https://www.google.co.uk https://www.google.nl https://www.google.com.ua https://*.mediaplex.com https://*.doubleclick.net;connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://d.video-cdn.net https://c.video-cdn.net https://ca.video-cdn.net https://ma307-r.analytics.edgekey.net https://asset-out-cdn.video-cdn.net https://mc.yandex.ru https://top-fwz1.mail.ru https://trc-events.taboola.com https://ext.nonstoppartner.net https://ct.pinterest.com https://*.mouseflow.com https://secure-ds.serving-sys.com https://static.stihl.com https://static.stihl-timbersports.com https://static.viking-garden.com https://linklist.mmcagentur.at https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com https://bat.bing.com https://mc.yandex.com https://www.google.com https://www.facebook.com https://www.google.de https://www.google.it https://www.google.es https://www.google.ru https://www.google.pt https://www.google.at https://www.google.cz https://www.google.gr https://www.google.pl https://www.google.fr https://www.google.ro https://www.google.bg https://www.google.co.uk https://www.google.nl https://www.google.com.ua https://ssl.google-analytics.com https://www.google.se https://ssl.geoplugin.net https://api.openweathermap.org;media-src 'self' https://videocdnvod1-vh.akamaihd.net https://asset-out-cdn.video-cdn.net;object-src 'self' https://static.stihl.com; 6 img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval';worker-src blob:; 6 upgrade-insecure-requests; object-src 'none'; base-uri 'self'; 6 script-src 'self' 'unsafe-inline' 6 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: yastatic.net cse.google.com ajax.googleapis.com php.pdc.nl www.google.com www.gstatic.com translate.googleapis.com translate.google.com maps.google.com maps.googleapis.com api.microsofttranslator.com; report-uri /cspreport 6 default-src *; img-src * data:; script-src * 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline' 6 default-src 'self' http: https: data: blob: 'unsafe-inline'; frame-ancestors 'self'; 6 upgrade-insecure-requests;block-all-mixed-content; 6 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.googletagmanager.com *.google.ch *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.googleapis.com *.paypal.com *.paypalobjects.com *.youtube.com; img-src 'self' data: *.google.ch *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.ytimg.com 6 frame-ancestors *.cas.cn 6 default-src * 'unsafe-inline' 'unsafe-eval' data: gap: content: blob:; form-action *; upgrade-insecure-requests 6 object-src 6 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: bing.com *.bing.com youtube.com *.youtube.com *.wistia.net wistia.net wistia.com *.wistia.com happyfoxchat.com *.happyfoxchat.com *.dianomi.com itstracking.com *.angelpub.com *.angelnexus.com *.wealthdaily.com *.energyandcapital.com *.outsiderclub.com *.protradertoday.com *.longevityinsiderhq.com *.greenchipstocks.com *.gstatic.com *.googletagmanager.com *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googleusercontent.com *.googleoptimize.com *.blueconic.net *.doubleclick.net *.cloudflare.com *.criteo.net *.criteo.com addevent.com *.addevent.com *.bootstrapcdn.com *.rawgit.com *.github.io *.jquery.com *.pingdom.net *.taboola.com *.outbrain.com *.hotjar.com *.yahoo.com *.liadm.com *.yimg.com *.twimg.com *.twitter.com *.ads-twitter.com *.pinimg.com *.pinterest.com *.onesignal.com onesignal.com *.litix.io *.soundcloud.com *.akamaihd.net *.amzglt.com amzglt.com cdn.jsdelivr.net *.norton.com *.facebook.net *.facebook.com; style-src 'self' 'unsafe-inline' onesignal.com *.github.io *.twitter.com *.twimg.com cdn.jsdelivr.net *.outsiderclub.com *.energyandcapital.com *.wealthdaily.com *.angelpub.com *.protradertoday.com *.longevityinsiderhq.com *.greenchipstocks.com *.bootstrapcdn.com *.googleapis.com; 6 connect-src https: 'self'; img-src 'self' data: https://*; default-src blob: https: 'unsafe-inline' 'unsafe-eval' 6 frame-ancestors 'self' http://webvisor.com https://webvisor.com 6 frame-ancestors 'self' https://www.facebook.com/ 6 frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com 6 default-src https: data: 'unsafe-inline' 'unsafe-eval'; 6 default-src *; img-src * data:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; base-uri 'self'; form-action *; frame-ancestors 'self' 6 default-src * 'unsafe-inline' 'unsafe-eval' data: blob: mediastream: filesystem: *.rakuten.com *.linksynergy.com *.nxtck.com *.xg4ken.com;frame-ancestors 'self' 6 default-src https: wss: blob: data: 'unsafe-eval' 'unsafe-inline'; object-src 'self' 6 default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://glyph.medium.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://accounts.google.com https://getpocket.com https://medium.com https://*.medium.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://lightstep.medium.systems https://*.branch.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com 6 frame-ancestors https://uscreen.io https://*.uscreen.io https://www.uscreen.tv 6 frame-ancestors accounts.shopbase.com:443 templates.shopbase.com:443 test-templates.shopbase.com:443 'self' 6 default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline' 6 script-src 'self' filesystem: 'unsafe-eval' 'unsafe-inline' *.spaggiari.eu https://ajax.googleapis.com/ https://cdnjs.cloudflare.com/ https://cdn.jsdelivr.net/ https://code.jquery.com/ https://d31qbv1cthcecs.cloudfront.net/atrk.js https://fonts.googleapis.com/ https://s.go-mpulse.net/boomerang/ https://www.google-analytics.com/ https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://www.gstatic.com/recaptcha/ https://cdn.syndication.twimg.com/timeline/ https://code.highcharts.com/ https://connect.facebook.net/it_IT/sdk.js https://livestream.com/assets/plugins/ https://maps.googleapis.com/ https://platform.twitter.com/js/ https://platform.twitter.com/widgets.js https://rawgit.com/tyrasd/osmtogeojson/ https://use.fontawesome.com/;frame-ancestors 'self' file: *.spaggiari.eu; 6 default-src data: blob: http://* https://* wss://* 'self' 'unsafe-inline' 'unsafe-eval'; 6 policy 6 default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com/ https://duck.co ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com/ ; media-src https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com/ ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com/ ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com/ ; style-src https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com/ ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://3g2upl4pq6kufc4m.onion/ https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com/ https://duck.co ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; 5 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://d18kwxxua7ik1y.cloudfront.net https://d22r54gnmuhwmk.cloudfront.net https://assets.change.org https://static.change.org https://assets-fe.change.org https://change-production.s3.amazonaws.com https://change-public-stuff.s3.amazonaws.com https://www.google.ca https://www.googleadservices.com https://www.youtube.com https://*.doubleclick.net https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.recaptcha.net https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.fbcdn.net fbrpc://* fb-messenger://* https://*.twitter.com https://*.twimg.com https://*.ads-twitter.com https://vk.com https://*.vk.com https://ajax.cdnjs.com https://cdnjs.cloudflare.com https://service.force.com https://*.salesforceliveagent.com https://*.braintreegateway.com https://*.paypalobjects.com https://*.paypal.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com https://px-cdn.net https://*.px-cloud.net https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://p2a.co https://public.profitwell.com https://js-agent.newrelic.com https://bam.nr-data.net https://bam-cell.nr-data.net https://code.jquery.com https://js.stripe.com https://cdn.embedly.com https://player.vimeo.com https://bat.bing.com https://soundcloud.com https://w.soundcloud.com https://www.instagram.com https://www.flickr.com https://*.staticflickr.com https://*.voteamerica.com https://*.jotform.com https://actionnetwork.org/ https://core.spreedly.com https://secure.everyaction.com https://d3rse9xjbp8270.cloudfront.net https://*.ngpvan.com https://js2.verygoodvault.com https://change.my.salesforce.com https://help.change.org; connect-src 'self' blob: https://*.change.org https://change-production.s3.amazonaws.com https://*.googleapis.com https://*.google-analytics.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net fbrpc://* fb-messenger://* https://*.twitter.com https://*.vk.com https://*.braintreegateway.com https://*.paypal.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com https://*.px-client.net https://*.px-cloud.net https://pxchk.net https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://*.profitwell.com https://bam.nr-data.net https://bam-cell.nr-data.net https://api.stripe.com https://api.soundcloud.com https://api.airbrake.io https://notifier-configs.airbrake.io https://www.voteamerica.com https://core.spreedly.com https://advocator.ngpvan.com; font-src 'self' data: https://assets.change.org https://static.change.org https://d18kwxxua7ik1y.cloudfront.net https://d22r54gnmuhwmk.cloudfront.net https://fonts.gstatic.com https://*.hotjar.com https://*.hotjar.io https://d3rse9xjbp8270.cloudfront.net; img-src * blob: data:; form-action 'self' 5 frame-ancestors 'self' *.wildberries.ru 5 default-src 'self' https://static.garmin.com https://static.garmincdn.com https://www.garmin.com; style-src https://my.tealiumiq.com 'unsafe-inline' 'self' https://fonts.googleapis.com https://fonts.garmin.com https://static.garmin.com https://static.garmincdn.com https://sso.garmin.com https://www.garmin.com; connect-src 'self' https://static.garmincdn.com https://www.garmin.com *; script-src * 'unsafe-inline' 'unsafe-eval' https://consent.trustarc.com https://consent-pref.trustarc.com https://consent-st.trustarc.com https://tracker-api.trustarc.com https://consent.truste.com https://consent-pref.truste.com https://consent-st.trustecom https://tracker-api.truste.com https://prefmgr-cookie.truste-svc.net; font-src 'self' data: https://static.garmin.com https://static.garmincdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://fonts.garmin.com https://www.garmin.com https://consent.trustarc.com; img-src *; frame-src https://sso.garmin.com https://sso.garmin.cn https://www.garmin.com https://my.tealiumiq.com https://static.garmincdn.com https://support.garmin.com https://www.google.com https://vars.hotjar.com https://www.youtube.com https://www.youtube-nocookie.com https://player.youku.com https://consent.trustarc.com https://consent-pref.trustarc.com https://consent-st.trustarc.com https://tracker-api.trustarc.com https://consent.truste.com https://consent-pref.truste.com https://consent-st.trustecom https://tracker-api.truste.com https://prefmgr-cookie.truste-svc.net; object-src 'none'; upgrade-insecure-requests 5 frame-ancestors 'self'; report-uri /report-csp-violation 5 frame-ancestors 'self' https://nielsensports.com https://www.qa.nielsen.com https://develop.nielsen.com 5 frame-ancestors 'self' *.cbssports.com *.sportsline.com popculture.com comicbook.com 247sports.com *.247sports.com *.maxpreps.com *.scout.com *.wired2fish.com *.ampproject.org; default-src https: blob: wss: 'unsafe-inline' 'unsafe-eval'; font-src https: blob: data:; img-src https: blob: data: android-webview: android-webview-video-poster:; block-all-mixed-content; 5 frame-ancestors 'self' *.techrepublic.com *.ampproject.org *.amp.cloudflare.com; default-src https: blob: 'unsafe-inline' 'unsafe-eval'; font-src https: blob: data:; img-src https: data: android-webview-video-poster: blob:; form-action https:; block-all-mixed-content; media-src https: blob: data:; 5 default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' frame-ancestors 'self' *.bigcommerce.com 5 frame-ancestors 'self' *.ebscohost.com *.ebsco.com; report-uri /report-csp-violation; upgrade-insecure-requests 5 frame-ancestors 'self' *.windy.com:* 5 default-src https: data: wss://*.hotjar.com ; script-src 'unsafe-eval' 'self' https: 'unsafe-inline'; style-src https: 'unsafe-inline';img-src https: data:;media-src https: data: blob: mediastream: 5 frame-ancestors https://*.ringcentral.com https://*.ringcentral.co.uk https://*.ringcentral.com.au https://*.ringcentral.eu https://outlook.live.com https://outlook.office365.com https://outlook.office.com 5 frame-ancestors 'self' *.mathworks.com feedads.baidu.com *.mwcloudtest.com; 5 frame-ancestors https://*.ti.com https://*.ti.com.cn https://*.tij.co.jp; 5 default-src * data: blob: 'unsafe-inline' 'unsafe-eval' 5 frame-ancestors 'self' *.benzinga.com 5 frame-ancestors https://*.shopstyleops.com/ https://local.shopstyleops.com:*/ https://*.shopstylecollective.com https://shopstylecollective.com https://*.builder.io/ https://builder.io; report-uri /csp-violation; 5 default-src 'self' https:; script-src * blob: 'unsafe-inline' 'unsafe-eval' https://*.m-pathy.com; frame-src 'self' https: db-bordgastronomie.de ps.bahn.de; style-src 'self' 'unsafe-inline'; img-src https: data:; font-src 'self' data:; media-src https: http: blob: 'self' hdshlsdbbahn-vh.akamaihd.net; connect-src 'self' https: wss://*.m-pathy.com 5 frame-ancestors 'self' https://*.verizonmedia.com https://mediaplatform.pathfactory.com 5 default-src 'none'; script-src 'self'; style-src 'self'; connect-src 'self' https://start.1password.com https://start.1password.ca https://start.1password.eu https://www.google-analytics.com https://9gnqx00du4.execute-api.us-east-1.amazonaws.com/prod/contact_us https://flow.1passwordservices.com https://createsend.com/t/getsecuresubscribelink; manifest-src 'self'; font-src 'self'; object-src 'self'; img-src 'self' https://www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net; child-src https://www.youtube-nocookie.com https://secure.livechatinc.com; frame-src https://www.youtube-nocookie.com https://secure.livechatinc.com https://player.vimeo.com; form-action 'self' https://agilemail.createsend.com https://www.createsend.com/t/subscribeerror https://www.createsend.com/t/securedsubscribe https://start.1password.com https://flow.1passwordservices.com; prefetch-src https://app.1password.com https://app.1password.ca https://app.1password.eu; frame-ancestors 'none' 5 frame-ancestors 'self' *.kaskus.co.id *.kaskus.id 5 default-src 'unsafe-eval' 'unsafe-inline' * blob:; script-src 'unsafe-inline' 'unsafe-eval' * blob:; img-src * data:; connect-src *; font-src * data:; upgrade-insecure-requests; block-all-mixed-content 5 frame-ancestors 'self' http://www.farmzone.com https://www.farmzone.com http://www.zoneverte.com https://www.zoneverte.com http://widget.twnmm.com https://widget.twnmm.com https://s1.twnmm.com http://beta.theweathernetwork.com https://beta.theweathernetwork.com http://beta.meteomedia.com https://beta.meteomedia.com http://*.theweathernetwork.com https://*.theweathernetwork.com http://*.meteomedia.com https://*.meteomedia.com https://www.flonase.ca 5 'frame-ancestors' http://localhost:8100 https://*.tn.gov 5 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; frame-src https: data:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss:; child-src https: blob: 5 frame-ancestors 'self' *.brandwatch.com; object-src 'none'; 5 default-src 'self';connect-src *;style-src 'self' 'unsafe-inline';font-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.aticdn.net *.ioam.de *.nmrodam.com *.imrworldwide.com *.sensic.net *.bunchbox.co *.surveymonkey.com *.datadoghq-browser-agent.com;img-src 'self' data: *.ardmediathek.de *.ard.de *.nmrodam.com *.imrworldwide.com *.bunchbox.co *.datadoghq-browser-agent.com;media-src * mediastream: blob:;frame-src 'self' localhost:* *.ard.de *.nmrodam.com *.imrworldwide.com *.sensic.net *.ioam.de *.bunchbox.co *.surveymonkey.com *.datadoghq-browser-agent.com;worker-src 'self' blob: 5 default-src 'self' clickserv.sitescout.com *.adsrvr.org *.vmmpxl.com analytics.tiktok.com; font-src 'self' cdnjs.cloudflare.com *.gstatic.com *.googleapis.com fast.fonts.net *.abtasty.com *.hotjar.com *.cloudflare.com *.cloudfront.net *.adsrvr.org *.vmmpxl.com *.hotjar.io cdn.segment.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: static.lobbytools.com *.boldchat.com code.jquery.com www.healow.com js-agent.newrelic.com congress.api.sunlightfoundation.com tagmanager.google.com sp.analytics.yahoo.com analytics.twitter.com static.ads-twitter.com s.yimg.com cdnjs.cloudflare.com t.sharethis.com www.googletagmanager.com *.google-analytics.com ws.sharethis.com www.youtube.com www.googleadservices.com secure.quantserve.com bat.bing.com *.e.akamai.net *.rfihub.com s.ytimg.com fast.fonts.net connect.facebook.net ppactionvoterguide.org *.ppactionvoterguide.org cdn.optimizely.com *.openlayers.org *.newtonsoftware.com bs.serving-sys.com *.quora.com i.simpli.fi secure.adnxs.com e.issuu.com d10lpsik1i8c69.cloudfront.net *.luckyorange.net *.luckyorange.com storify.com *.userzoom.com nextpatient.co *.nr-data.net api-dot-lucky-orange.appspot.com bbox.blackbaudhosting.com *.adroll.com *.optimizely.com widget.surveymonkey.com www.google.com www.gstatic.com *.instagram.com *.googleapis.com *.yelp.com *.yelpcdn.com ajax.cloudflare.com *.doubleclick.net optimizely.s3.amazonaws.com *.ad.gt tags.srv.stackadapt.com *.hotjar.com *.civicengine.com *.abtasty.com c1.rfihub.net *.quantcount.com www.tintup.com *.twitter.com *.tintup.com *.twimg.com *.ngpvan.com d3js.org *.gstatic.com *.sitomobile.com *.simpli.fi *.quantcount.com *.adsrvr.org *.vmmpxl.com *.d3js.org *.rezync.com sc-static.net *.adnxs.com *.crwdcntrl.net *.google.com *.cloudfront.net *.hotjar.io *.callrail.com p.teads.tv *.tiqcdn.com *.yimg.com *.tealiumiq.com cdn.segment.com *.iqm.com *.civicengine.com openlayers.org analytics.tiktok.com unpkg.com; connect-src 'self' *.openlayers.org *.google-analytics.com secure.ppaction.org www.ppaction.org l.sharethis.com logx.optimizely.com e.issuu.com pingback.issuu.com nextpatient.co *.luckyorange.com *.luckyorange.net api-dot-lucky-orange.appspot.com pubsub.googleapis.com/v1/projects/lucky-orange/* pubsub.googleapis.com/v1/projects/lucky-orange/topics/recording-data:publish pubsub.googleapis.com/v1/projects/lucky-orange/topics/recordings:publish visitor-services.boldchat.com *.tealiumiq.com *.hotjar.com www.myplannedparenthoodchart.org api.ppsne.net *.salesforce.com *.optimizely.com *.everyaction.com *.myngp.com *.hotjar.io *.callrail.com cdn.segment.com analytics.tiktok.com vms.boldchat.com databridge.tdbtrk.com *.abtasty.com *.yimg.com; img-src 'self' 'unsafe-inline' data: *.quora.com *.ib5k.com *.boldchat.com insight.adsrvr.org www.plannedparenthood.org i.ytimg.com *.gstatic.com maps.googleapis.com t.co www.googleadservices.com sb.scorecardresearch.com l.sharethis.com *.google-analytics.com www.googletagmanager.com www.google.com ping.chartbeat.net pixel.quantserve.com bat.bing.com bat.r.msn.com img.youtube.com *.vimeo.com *.facebook.com www.healow.com vmap0.tiles.osgeo.org *.doubleclick.net image.isu.pub bbox.blackbaudhosting.com *.googleusercontent.com *.simpli.fi *.adroll.com *.abtasty.com *.paypalobjects.com *.phreesia.com openlayers.org *.openstreetmap.org tags.srv.stackadapt.com sync.search.spotxchange.com *.hotjar.com *.w55c.net *.adxcel-ec2.com *.amazonaws.com *.userzoom.com acuityplatform.com *.twitter.com *.twimg.com *.myngp.com *.everyaction.com *.sitomobile.com *.adsrvr.org *.vmmpxl.com *.cloudfront.net *.google.com *.crwdcntrl.net *.adnxs.com sc-static.net gwmtracking.com *.hotjar.io analytics.tiktok.com *.callrail.com unpkg.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com nextpatient.co tagmanager.google.com fonts.googleapis.com fast.fonts.net ws.sharethis.com *.phreesia.com bbox.blackbaudhosting.com *.civicengine.com *.abtasty.com optimize.google.com *.userzoom.com *.twitter.com *.cloudfront.net *.adsrvr.org *.vmmpxl.com openlayers.org *.abtasty.com unpkg.com *.gstatic.com *.callrail.com cdn.segment.com *.googleapis.com; frame-src 'self' *.boldchat.com www.healow.com docasap.com www.google.com maps.googleapis.com maps.google.com external.ppsne.org e.issuu.com www.tintup.com tagmanager.google.com fonts.googleapis.com t.sharethis.com *.70n7.com secure.ppaction.org seg.sharethis.com ws.sharethis.com www.youtube.com player.vimeo.com www.ppaction.org register2.rockthevote.com connect.facebook.net *.facebook.com *.rfihub.com docs.google.com *.newtonsoftware.com *.doubleclick.net mapsengine.google.com storify.com *.meltwater.com bbox.blackbaudhosting.com surveymonkey.com *.surveymonkey.com *.nomotraplaws.com *.yelp.com *.yelpcdn.com feed.meltwater.com/gyda feed.meltwater.com *.ppaction.org *.optimizely.com cdn.hypemarks.com ww2.matchinggifts.com optimize.google.com *.hotjar.com *.vote.org *.civicengine.com *.everyaction.com *.userzoom.com *.twitter.com *.71n7.com *.nextgen.com register.vote.org myrvplist.com *.adsrvr.org *.vmmpxl.com *.weareplannedparenthood.org *.weareplannedparenthoodaction.org *.snapchat.com *.actblue.com javamatch.matchinggifts.com www.flipcause.com secure.everyaction.com *.hotjar.io www.myplannedparenthoodchart.org *.abtasty.com 1.61.47.216; frame-ancestors 'self' *.twitter.com www.healow.com *.ppaction.org *.adsrvr.org *.vmmpxl.com; 5 frame-src 'self' *.microfocus.com *.ubembed.com https://js.driftt.com https://bid.g.doubleclick.net https://optimize.google.com/ https://dev.visualwebsiteoptimizer.com https://www.facebook.com/ https://www.google.com/ https://www.youtube.com/ https://www.brighttalk.com/ https://bcove.video/ https://www.googletagmanager.com https://microfocuspartner.force.com https://www.linkedin.com/ https://platform.twitter.com/ https://www.research.net https://irs.tools.investis.com/ https://players.brightcove.net/ https://otp.tools.investis.com/ https://html5-player.libsyn.com/ http://demo.havendemo.com/; frame-ancestors 'self' *.microfocus.com https://microfocus.lookbookhq.com https://microfocuspartner.force.com; 5 frame-ancestors 'self' https://app.hubspot.com; 5 upgrade-insecure-requests; connect-src * https:; img-src * data: https:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob: data:; worker-src * blob: data: 5 default-src https: data: wss: blob: 'unsafe-eval' 'unsafe-inline' 5 frame-ancestors 'self' https://*.movavi.de https://*.movavi.com https://*.movavi.ru http://webvisor.com https://portal1.comm100.io 5 value 5 object-src 'none'; 5 worker-src 'self' http://*.austlii.edu.au *.datalex.org www.lawnet.sg; 5 default-src 'self' data: gap: https://*.maersk.com https://*.maersk.com.cn https://*.maerskline.com https://*.apmoller.net https://*.go-mpulse.net https://*.salesforceliveagent.com https://*.force.com *.mpstat.us *.akstat.io https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.akamaihd.net https://*.igodigital.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://rum-http-intake.logs.datadoghq.eu https://100qrcey9nsltilmpwezagts.blob.core.windows.net https://*.cookieinformation.com https://*.bing.com https://*.virtualearth.net https://*.visualforce.com https://*.contentsquare.net https://stats.g.doubleclick.net https://resources.digital-cloud.medallia.eu https://ubt-lb.digital-cloud.medallia.eu https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.maersk.com https://*.maersk.com.cn https://*.maerskline.com https://*.apmoller.net https://*.akamaihd.net https://*.salesforceliveagent.com https://*.force.com https://*.salesforce.com https://*.steelcentral.net *.mpstat.us *.akstat.io https://*.igodigital.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://pub.s1.exacttarget.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://www.googletagmanager.com https://*.google-analytics.com https://*.cookieinformation.com https://www.datadoghq-browser-agent.com/datadog-rum-eu.js https://*.bing.com https://*.virtualearth.net https://*.contentsquare.net https://*.contentsquare.com https://www.datadoghq-browser-agent.com/datadog-rum.js https://screencapture.kampyle.com https://screencapture-cdn.kampyle.com https://resources.digital-cloud.medallia.eu https://sbt-prod.kampyle.com https://nebula-cdn.kampyle.com https://udc-neb.kampyle.com https://snap.licdn.com https://px.ads.linkedin.com https://connect.facebook.net https://www.facebook.com https://js.stripe.com; img-src 'self' data: https://*.maersk.com https://*.maersk.com.cn https://*.maerskline.com https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.gstatic.com https://lh3.googleusercontent.com https://*.steelcentral.net https://*.vimeocdn.com https://*.youtube.com https://*.igodigital.com https://*.akamaihd.net https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://pixel.mathtag.com https://bs.serving-sys.com https://www.google.co.uk https://api.adsymptotic.com https://media-cdn.ipredictive.com https://*.linkedin.com https://*.facebook.com https://*.twitter.com https://vk.com https://mail.ru https://clickserve.dartsearch.net https://*.doubleclick.net https://*.google.dk https://secure.adnxs.com https://cs.adingo.jp https://admaym.com https://ih.adscale.de https://d.agkn.com https://ib.adnxs.com https://x.bidswitch.net https://stags.bluekai.com https://pix.btrll.com https://contextual.media.net https://dis.criteo.com https://e.nexac.com https://loadm.exelator.com https://cs.gssprt.jp https://global.ib-ibi.com https://ad.360yield.com https://dsum-sec.casalemedia.com https://beacon.krxd.net https://idsync.rlcdn.com https://ums.adtechus.com https://sync.adaptv.advertising.com https://us-u.openx.net https://simage2.pubmatic.com https://bh.contextweb.com https://idsync.reson8.com https://pixel.rubiconproject.com https://uipglob.semasio.net https://rtb-csync.smartadserver.com https://ad.sxp.smartclip.net https://sync.go.sonobi.com https://ce.lijit.com https://sync.search.spotxchange.com https://ads.stickyadstv.com https://delivery.swid.switchads.com https://aa.agkn.com https://ads.yahoo.com https://u3s.mathtag.com https://eu-u.openx.net https://serving.experianmarketingservices.digital https://uip.semasio.net https://fo-api.omnitagjs.com https://*.akstat.io https://*.bing.com https://*.virtualearth.net https://*.contentsquare.net https://screencaptue-cdn.kampyle.com https://resources.digital-cloud.medallia.eu https://udc-neb.kampyle.com https://nebula-cdn.kampyle.com https://*.salesforce.com https://*.force.com; object-src 'self' ; style-src 'self' 'unsafe-inline' https://*.maersk.com https://*.maersk.com.cn https://*.apmoller.net https://*.gstatic.com https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.maerskline.com https://*.force.com https://*.bing.com https://*.virtualearth.net https://resources.digital-cloud.medallia.eu https://screencaptue-cdn.kampyle.com https://nebula-cdn.kampyle.com; frame-src https://*.maersk.com https://*.maersk.com.cn https://*.maerskline.com https://*.apmoller.net http://emanage.maerskline.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.google.com https://www.youtube.com/embed/ https://player.vimeo.com/video/ https://service.force.com https://*.cookieinformation.com https://*.youku.com/ https://*.force.com/ https://*.salesforce.com https://app.powerbi.com http://my.maerskline.com https://*.doubleclick.net https://reporting.damco.com https://screencapture.kampyle.com https://nebula-cdn.kampyle.com https://resources.digital-cloud.medallia.eu https://js.stripe.com; font-src 'self' data: https://*.maersk.com https://*.maersk.com.cn https://*.maerskline.com https://*.apmoller.net https://*.gstatic.com https://*.googleapis.com https://resources.digital-cloud.medallia.eu https://nebula-cdn.kampyle.com; 5 frame-ancestors 'self';default-src https: data: 'unsafe-inline' 'unsafe-eval' 5 default-src http: https: data: 'unsafe-inline' 'unsafe-eval' 5 frame-ancestors 'self' *.infor.com *.Inforcloudsuite.com *.infor.cn *.infor.de *.infor.es *.infor.fr *.infor.jp *.infor.kr 5 frame-ancestors https://*.sutterhealth.org 5 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; report-uri /json/csp-violation 5 default-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; object-src 'self'; style-src 'self' data: 'unsafe-inline' https:; img-src 'self' data: https:; media-src 'self' data: https:; frame-src 'self' https: mailto: tel:; font-src 'self' data: https:; connect-src 'self' https: wss://*.hotjar.com; frame-ancestors 'self' https://vshow.on24.com https://login-staging.qlik.com/ https://login.qlik.com/; base-uri 'none'; form-action 'self' https:; upgrade-insecure-requests; 5 default-src https: *.willistowerswatson data: blob: 'unsafe-eval' 'unsafe-inline' 5 font-src 'self' https://fonts.gstatic.com https://ka-p.fontawesome.com https://themes.googleusercontent.com https://static.juicer.io data: https://js.intercomcdn.com https://maxcdn.bootstrapcdn.com https://thriv.sportsengine.com https://cdnjs.cloudflare.com https://static.formstack.com https://thrivsports.s3.us-east-1.amazonaws.com; img-src 'self' https://www.sportsengine.com https://se-portal-production.s3.amazonaws.com *.facebook.com *.sestage.us *.google.com https://se-portal-staging.s3.amazonaws.com *.youtube.com https://s0.2mdn.net *.googleusercontent.com *.googlesyndication.com *.visualwebsiteoptimizer.com https://sb.scorecardresearch.com https://www.google-analytics.com *.g.doubleclick.net https://audible.sp1.convertro.com https://fast.wistia.com https://embedwistia-a.akamaihd.net https://s3.amazonaws.com *.adsafeprotected.com *.mparticle.com https://assets.ngin.com https://embed-fastly.wistia.com https://img1.niftyimages.com data: https://js.intercomcdn.com https://static.intercomassets.com https://pixel.quantserve.com https://bat.bing.com *.googletagmanager.com https://golfmds.s3.amazonaws.com/ https://syndication.twitter.com https://sportngin-lddxb.formstack.com https://thrivsports.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net *.visualwebsiteoptimizer.com *.g.doubleclick.net https://sb.scorecardresearch.com *.googleadservices.com *.googletagmanager.com *.mparticle.com *.user.sportngin.com https://se-api.sportngin.com.dev https://www.google-analytics.com https://adservice.google.com *.googlesyndication.com https://cdn.ampproject.org https://www.googletagservices.com https://fast.wistia.com https://www.olympicchannel.com https://assets.juicer.io https://communityforum.sportngin.com https://assets.ngin.com https://assets.stage.ngin.com https://www.google.com https://www.gstatic.com https://js-agent.newrelic.com https://bam-cell.nr-data.net https://www.burst.com https://secure.quantserve.com https://pixel.quantserve.com https://rules.quantcount.com https://bat.bing.com https://widget.intercom.io https://js.intercomcdn.com https://js.braintreegateway.com https://s3.amazonaws.com https://cdnjs.cloudflare.com https://thriv.sportsengine.com https://g1188506010.co https://app.vwo.com https://www.instagram.com https://platform.twitter.com https://sportngin-lddxb.formstack.com https://static.formstack.com https://ajax.googleapis.com https://storage.googleapis.com https://olympics.com/static/js/syndicated/v1/embed.js blob: https://kit.fontawesome.com; style-src 'self' 'unsafe-inline' https://assets.ngin.com https://assets.stage.ngin.com https://fonts.googleapis.com https://assets.juicer.io https://www.burst.com https://maxcdn.bootstrapcdn.com https://thriv.sportsengine.com https://s3.amazonaws.com https://cdnjs.cloudflare.com https://thrivsports.s3.us-east-1.amazonaws.com https://static.formstack.com cloud.typography.com fonts.googleapis.com; frame-ancestors 'self' https://*.sportngin.com https://app.stage.ngin-staging.com; report-uri https://www.sportsengine.com/report-uri/enforce 5 nosniff 5 form-action https: 5 frame-src *; 5 default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src *; connect-src *; media-src *; object-src *; child-src *; frame-ancestors 'self'; form-action *; reflected-xss block; upgrade-insecure-requests; 5 frame-ancestors 'self' *.evergage.com *.evgnet.com; 5 report-uri //report-csp-violation 5 frame-scr https://library.ymcapps.net 5 object-src 'none'; script-src 'self' https://hcaptcha.com https://*.hcaptcha.com https://*.cloudflare.com https://*.twitter.com https://*.twimg.com https://*.googleapis.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com 'unsafe-inline' 5 frame-ancestors 'self' goqubit.net ; 5 default-src 'self' * data: blob:; img-src 'self' * 'unsafe-inline' data: blob:; style-src 'self' * 'unsafe-inline' data:; script-src 'self' * 'unsafe-inline' 'unsafe-eval' blob:; object-src 'none'; worker-src 'self' data: blob: resume.io *.resume.io cvster.nl *.cvster.nl cvmonk.nl *.cvmonk.nl cvapp.es *.cvapp.es cvapp.it *.cvapp.it cvapp.fr *.cvapp.fr cvkungen.se *.cvkungen.se cv.dk *.cv.dk cv.app *.cv.app resume.app *.resume.app cvapp.cz *.cvapp.cz cvapp.fi *.cvapp.fi cvapp.no *.cvapp.no cveasy.pl *.cveasy.pl cvapp.de *.cvapp.de; frame-src https:; frame-ancestors 'self' vwo.com *.vwo.com 5 default-src 'self' https: blob: data: 'unsafe-inline' 'unsafe-eval';frame-ancestors https://grandcentral.beescloud.com https://grandcentral.cloudbees.com https://*.contentful.com 'self' 5 default-src https: blob: data:; script-src data: 'unsafe-inline' 'unsafe-eval' blob: https: piwik.bmvg.de *.video-cdn.net *.bundeswehr.de *.bmvg.de maps.googleapis.com maps.gstatic.com; style-src data: 'unsafe-inline' https: *.bundeswehr.de *.bmvg.de ; img-src data: *.bundeswehr.de *.bmvg.de *.ytimg.com *.fbcdn.net *.twimg.com *.staticflickr.com *.video-cdn.net *.facebook.com *.akamaihd.net *.gstatic.com maps.googleapis.com syndication.twitter.com platform.twitter.com scontent.cdninstagram.com; font-src data: www.bundeswehr.de *.bmvg.de *.video-cdn.net fonts.gstatic.com; connect-src https: blob: data: wss:; report-uri https://piwik.bmvg.de/report-uri/ 5 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: wss:; 5 default-src https:; font-src https: blob: data:; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; worker-src blob:; style-src https: 'unsafe-inline'; img-src https: data:; 5 default-src 'self'; base-uri 'self'; img-src * data: 'unsafe-inline'; style-src * 'unsafe-inline'; script-src * data: 'unsafe-inline' 'unsafe-eval'; font-src thyssenkrupp.com *.thyssenkrupp.com *.recruitmentplatform.com *.bootstrapcdn.com; connect-src *; frame-ancestors 'self'; frame-src *; media-src * blob:; object-src * data: 'unsafe-eval'; worker-src blob: 5 allow 'self'; 5 frame-ancestors 'self' *.onbase.com *.hyland.com *.communitylive.com *.sharebase.com https://profiles.onbase.com; 5 default-src 'self' api.marker.io app.marker.io *.aticdn.net bat.bing.com *.bootstrapcdn.com cdn.matomo.cloud *.clickdimensions.com *.comaweb.de data: *.easyway.site edge.marker.io *.elfsquad.io www.facebook.com *.firebot.io *.formsite.com *.galacticweb.net *.google.com *.google.de googleads.g.doubleclick.net *.googleapis.com www.googletagmanager.com *.gstatic.com *.ingest.sentry.io marker.io *.msecnd.net *.netrk.net outlook.office365.com prod.purechatcdn.com *.purechat.com px.ads.linkedin.com *.randomuser.me randomuser.me s3-eu-west-1.amazonaws.com snap.licdn.com ssr.marker.io *.usercentrics.eu webasto-comfort.com *.webasto-comfort.com *.webasto.com webasto.matomo.cloud wss://firebot.galacticweb.net *.xiti.com *.youtube-nocookie.com *.youtube.com *.ytimg.com; style-src 'self' 'unsafe-inline' api.marker.io app.marker.io *.aticdn.net *.bootstrapcdn.com *.clickdimensions.com *.easyway.site edge.marker.io *.elfsquad.io *.firebot.io *.formsite.com *.galacticweb.net *.googleapis.com *.gstatic.com *.ingest.sentry.io marker.io *.msecnd.net *.netrk.net outlook.office365.com prod.purechatcdn.com *.purechat.com px.ads.linkedin.com *.randomuser.me snap.licdn.com ssr.marker.io *.webasto.com *.xiti.com *.youtube-nocookie.com *.youtube.com *.ytimg.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' api.marker.io app.marker.io *.aticdn.net bat.bing.com *.bootstrapcdn.com cdn.matomo.cloud *.clickdimensions.com https://connect.facebook.net/ *.easyway.site edge.marker.io *.elfsquad.io *.firebot.io firebot.io *.formsite.com *.galacticweb.net *.google.com *.google.de googleads.g.doubleclick.net *.googleadservices.com *.googleapis.com www.googletagmanager.com *.gstatic.com *.ingest.sentry.io marker.io *.msecnd.net *.netrk.net outlook.office365.com prod.purechatcdn.com *.purechat.com px.ads.linkedin.com *.randomuser.me randomuser.me snap.licdn.com ssr.marker.io *.usercentrics.eu *.webasto.com webasto.matomo.cloud *.xiti.com *.youtube-nocookie.com *.youtube.com *.ytimg.com; 5 frame-ancestors 'none'; form-action 'self'; base-uri 'self'; upgrade-insecure-requests 5 style-src 'self' 'unsafe-inline' *; report-uri /report-csp-violation 5 frame-ancestors 'self' http://wrapper.safe-installation.com/ https://wrapper.safe-installation.com/ *.888.com *.secured-qa.com *.secured-registration.com *.secureutils.com *.images4us.com *.onlinepersonalmessages.com *.888sport.com *.888sport.es *.888sport.it *.888sport.dk *.888sport.ro *.888sport.se *.888sport.us *.888sport.de *.777.com *.personalinfoonline.com *.888.de *.888casino.com *.888poker.com *.888casino.dk *.888poker.dk *.888.de *.888casino.ro *.888poker.ro *.888casino.se *.888poker.se *.888casino.es *.888poker.es *.888casino.it *.888poker.it *.888casino.us *.888poker.us cmsp; report-uri https://888protech.report-uri.com/r/d/csp/reportOnly 5 default-src 'self' http: https: data: blob: 'unsafe-eval' style-src: 'unsafe-inline' wss://vts.zohopublic.com 5 default-src 'unsafe-inline' data: about: hcom: blob: callback: chrome-error: *; script-src 'unsafe-eval' 'unsafe-inline' data: about: blob: asset: *; report-uri https://hcom.report-uri.com/r/t/csp/enforce 5 default-src 'unsafe-inline' 'unsafe-eval' https: data:; object-src 'unsafe-inline' 'unsafe-eval' https: data:; upgrade-insecure-requests 5 frame-ancestors 'self' *.gdata.de *.gdata.ch *.gdata.fr *.gdata.at *.gdata.nl *.gdata.it *.gdata.be *.gdata.es *.gdata.pt *.gdatasoftware.co.uk *.gdatasoftware.com *.gdata-software.com *.gdata-advancedanalytics.de *.gdata-advancedanalytics.com *.gdata.co.jp *.gdata-china.com *.gdata-hongkong.com *.inventorofantivirus.com; 5 default-src 'self' https://* 'unsafe-eval' 'unsafe-inline' data:; frame-src 'self' mailto: https://*.legrandav.com https://*; connect-src 'self' wss://*.mypurecloud.com/ wss://*.hotjar.com/ https://*; 5 default-src 'self'; font-src *;img-src * data:; script-src *; style-src *; 5 default-src 'self' *.vidyard.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ceros-creative-services.s3.amazonaws.com ceros-labs.s3.amazonaws.com *.ceros.com *.bidr.io *.bizzabo.com *.cloudfront.net acsbapp.com *.acsbapp.com *.bc0a.com *.b0e8.com *.ads-twitter.com *.adsrvr.org *.srv.stackadapt.com *.stackadapt.com *.fontawesome.com *.cookielaw.org *.jquery.com *.marketo.com *.marketo.net *.twimg.com *.onetrust.com *.driftt.com *.bing.com *.bootstrapcdn.com *.myfonts.net *.cloudflare.com *.callrail.com *.aspnetcdn.com *.vidyard.com *.ceridian.ca *.en25.com *.eloqua.com *.googletagmanager.com *.swiftypecdn.com *.google-analytics.com *.google.com *.google.ca *.licdn.com *.facebook.net *.terminus.services *.windows.net *.g2crowd.com *.adsrvr.org *.ads-twitter.com *.ads.linkedin.com *.twitter.com go.ceridian.com *.hotjar.com; style-src 'self' 'unsafe-inline' *.fontawesome.com *.marketo.com *.twitter.com *.bootstrapcdn.com fastcdn.org *.cloudflare.com optanon.blob.core.windows.net *.swiftypecdn.com go.ceridian.com *.stackadapt.com; img-src * data:; font-src 'self' http://script.hotjar.com https://script.hotjar.com acsbapp.com *.acsbapp.com *.fontawesome.com *.cloudflare.com *.bootstrapcdn.com; connect-src 'self' *.doubleclick.net ka-p.fontawesome.com *.fontawesome.com *.collector.snplow.net acsbapp.com *.acsbapp.com *.srv.stackadapt.com *.cookielaw.org *.facebook.com *.marketo.com *.mktoresp.com *.eloqua.com *.swiftype.com *.ceridian.ca *.swiftypecdn.com *.callrail.com go.ceridian.com *.onetrust.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com; media-src * 'unsafe-inline'; frame-src 'self' *.ceros.com accessibe.com *.accessibe.com *.acsbapp.com acsbapp.com *.bizzabo.com *.facebook.com *.marketo.com *.twitter.com *.youtube.com *.driftt.com *.vidyard.com *.adsrvr.org go.ceridian.com *.hotjar.com 5 5 frame-ancestors 'self' http://www.fx-graphics.com; 5 default-src 'none'; script-src 'self'; img-src 'self' https://www.google-analytics.com:443 https://*.qbrick.com:443 https://*.dna.ip-only.net https://bilder.hemnet.se:443 https://mb.cision.com; media-src 'self' https://*.qbrick.com:443 https://*.dna.ip-only.net; connect-src 'self' https://*.qbrick.com:443 synpunkter-1788b.firebaseio.com https://www.google-analytics.com:443; style-src 'self' 'unsafe-inline'; frame-src *.handelsbanken.se *.handelsbanken.fi *.handelsbanken.no *.handelsbanken.dk *.handelsbanken.co.uk *.handelsbanken.pl *.handelsbanken.de r1.surveysandforms.com secure.msse.se www.efn.se clients.maptoweb.dk borsrum.episerverhosting.com shbfxcalc.millistream.com www.anpdm.com services.cicero.no nettbank.edb.com shbdk.millistream.com cphspk01.shbmain.shb.biz www.shb.dk priolaan.dk weblaan.shb.bec.dk web37.prod.bec.dk netbank.shb.dk irs.tools.investis.com otp.tools.investis.com vp292.alertir.com forms.apsisforms.com handelsbanken.easycruit.com handelsbankendk.easycruit.com handelsbankennl.easycruit.com handelsbankenno.easycruit.com video.qbrick.com dreambroker.com handelsbanken.dreambroker.com web.efn.se news.alertir.com giosg-handelsbanken.giosg.com vp306.alertir.com client3.mailmailmail.net handelsbanken.newsroom.cision.com handelsbanken-en.newsroom.cision.com mb.cision.com app.marketingplatform.com; frame-ancestors 'self' *.handelsbanken.se *.handelsbanken.fi *.handelsbanken.no *.handelsbanken.dk *.handelsbanken.co.uk *.handelsbanken.pl *.handelsbanken.de; font-src 'self' 5 default-src wss: https: data: 'unsafe-inline' 'unsafe-eval' 5 default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src https: 5 default-src https:; script-src https: data: 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src 'self' data: blob: filesystem: https: http: 'unsafe-inline' 5 frame-ancestors 'self' *.interactivebrokers.com *.interactivebrokers.com.hk *.interactivebrokers.ch *.interactivebrokers.co.uk *.interactivebrokers.com.au *.interactivebrokers.co.jp *.interactivebrokers.co.in *.ibkram.com *.interactiveadvisors.com *.ibkr.com *.ibkr.com.cn *.clientam.com *.clientam.ch *.clientam.com.hk *.go-mpulse.net *.akstat.io *.traderstation-international.com; 5 frame-ancestors 'self'; object-src 'none' 5 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 5 frame-ancestors 'self' https://commerceinsights.ibmcloud.com 5 frame-ancestors 'self' next.brella.io *.on24.com; 5 frame-ancestors 'self' https://shopproxy.p-s-s.de https://home.interzum.com https://home.interzum.de 5 object-src 'none'; form-action 'self'; frame-ancestors 'none' 5 upgrade-insecure-requests; form-action 'self'; frame-ancestors 'self' 5 default-src * https: data: 'unsafe-eval' 'unsafe-inline' blob:; 5 default-src 'unsafe-inline' 'unsafe-eval' https: data: 5 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: 'unsafe-eval' http://www.w3.org; style-src https: 'unsafe-inline';connect-src 'self' https: wss://socket.tidio.co https://stats.pakaloa.com https://www.pakaloa.com https://pakaloa.com https://mk0wakaloukac6s9qmlm.kinstacdn.com https://transactional-api.hu-manity.co;font-src 'self' data: https:; 5 upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * 5 default-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'unsafe-inline' https: data:; img-src data: https: blob: android-webview android-webview-video-poster:; font-src data: https:; connect-src *; media-src https: data: blob:; worker-src https: blob:; frame-src 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests 5 default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';img-src * data: blob: 'self' *.doubleclick.net;block-all-mixed-content;upgrade-insecure-requests; 5 frame-ancestors 'self' *.facebook.com 5 object-src 'none'; frame-ancestors 'none' 5 frame-ancestors 'self' *.sprintecommerce.com *.venditan.com *.venditan.io 5 frame-ancestors 'self' learn.arcgis.com *.esri.com myaccount.lingotek.com 5 default-src * 'self' data: 'unsafe-inline' 'unsafe-eval' 5 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: 5 default-src https: data: 'unsafe-inline' 'unsafe-eval' blob: 5 frame-ancestors 'self' chrome-extension://hfdhpmpfpcnbboppkkkblilhbloejijj https://backit.me 5 frame-ancestors 'self' centralnicgroup.activehosted.com; script-src 'unsafe-inline' 'unsafe-eval' *.brandshelter.com *.webinarjam.com snap.licdn.com diffuser-cdn.app-us1.com prism.app-us1.com wp-ui.app-us1.com cdnjs.cloudflare.com trackcmp.net www.google-analytics.com data:; style-src 'unsafe-inline' *.brandshelter.com fonts.googleapis.com fonts.gstatic.com *.webinarjam.com 5 script-src 'self' 'unsafe-inline' 'unsafe-eval' iongroup.wpengine.com * www.googletagmanager.com maps.googleapis.com www.google.com ajax.googleapis.com en25.com www.google-analytics.com; 5 default-src 'self' 'unsafe-inline' *.google-analytics.com *.serving-sys.com caixaforum.emexs.es cosmocaixa.emexs.es fonts.gstatic.com *.readspeaker.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org caixaforum.emexs.es cosmocaixa.emexs.es *.youtube.com s.ytimg.com *.googletagmanager.com *.google-analytics.com *.serving-sys.com *.ads-twitter.com *.twitter.com *.facebook.net *.readspeaker.com sadmin.brightcove.com syndication.twitter.com cdn.syndication.twimg.com tagmanager.google.com *.vimeocdn.com; img-src 'self' data: ssl.gstatic.com https://files.fundacionlacaixa.org https://cdn.cookielaw.org *.atdmt.com www.gstatic.com *.youtube.com *.google-analytics.com *.ads-twitter.com *.facebook.net *.facebook.com t.co fonts.googleapis.com stats.g.doubleclick.net caixaforum.emexs.es cosmocaixa.emexs.es ucarecdn.com *.readspeaker.com syndication.twitter.com *.twimg.com platform.twitter.com *.fbcdn.net *.ytimg.com *.cdninstagram.com *.vimeocdn.com; frame-src 'self' https://secure-ds.serving-sys.com fls.doubleclick.net open.spotify.com caixaforum.emexs.es cosmocaixa.emexs.es *.youtube.com www.google.com *.readspeaker.com platform.twitter.com players.brightcove.net syndication.twitter.com player.vimeo.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com caixaforum.emexs.es cosmocaixa.emexs.es *.readspeaker.com platform.twitter.com *.twimg.com tagmanager.google.com *.vimeocdn.com; font-src 'self' data: *.google-analytics.com *.serving-sys.com caixaforum.emexs.es cosmocaixa.emexs.es fonts.gstatic.com *.readspeaker.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://secure-ds.serving-sys.com https://privacyportal-eu.onetrust.com https://cdn.cookielaw.org caixaforum.emexs.es cosmocaixa.emexs.es 5 default-src * 'self' data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 5 frame-ancestors 'self' https://www.centerparcs.fr/booking/ https://www.centerparcs.nl/booking/ https://www.centerparcs.de/booking/ https://www.centerparcs.com/booking/ https://www.centerparcs.eu/booking/ https://www.centerparcs.ch/booking/ https://www.centerparcs.be/booking/ 5 upgrade-insecure-requests; default-src https: data: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' 5 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; base-uri 'self'; 5 base-uri 'self';frame-ancestors 'self';frame-src *;object-src 'none'; 5 script-src 'self' 'unsafe-eval' 'unsafe-inline' * 5 default-src 'self' data: ps.w.org *.hubspot.com p.adsymptotic.com secure.gravatar.com yoast.com *.yoast.com www.google.com www.google.co.uk *.linkedin.com www.googleadservices.com www.youtube.com *.vimeo.com www.google-analytics.com stats.g.doubleclick.net dc.services.visualstudio.com fonts.gstatic.com cdn-cookieyes.com *.cookieyes.com;script-src 'self' www.googleadservices.com cdn.mxpnl.com cdnjs.cloudflare.com unpkg.com js.hs-analytics.net js.hs-banner.com js.usemessages.com js.hsleadflows.net tribl.io js.hs-scripts.com cdn-cookieyes.com ws.zoominfo.com *.doubleclick.net extend.vimeocdn.com snap.licdn.com www.google.com www.gstatic.com ajax.googleapis.com www.googletagmanager.com www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com;frame-ancestors 'self' 5 frame-ancestors 'self' https://fuse.pav.portals.swisslife.ch https://fuse.portals.swisslife.ch 5 frame-ancestors 'self' *.egovcdn.com 5 frame-ancestors 'self' apac.marketing.adobe.com 5 default-src https: 'unsafe-inline' 5 block-all-mixed-content; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; object-src 'none'; 5 script-src * 'unsafe-inline' 'unsafe-eval'; 5 frame-ancestors http://*.timeout.com https://*.timeout.com 'self' 5 default-src https: wss: blob: data: 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com account.psplugin.com commondatastorage.googleapis.com omni.teleperformance.se static.hotjar.com bat.bing.com track.adform.net *.doubleclick.net www.googleadservices.com www.googletagmanager.com connect.facebook.net test-allentetest.lekane.net allente.lekane.net tango-churn.viasat.dk *.vo.msecnd.net assets.adobedtm.com dl.episerver.net canaldigital.d3.sc.omtrdc.net fast.canaldigital.demdex.net dpm.demdex.net cm.everesttech.net cd-static.telenorcdn.net canaldigital.demdex.net; frame-ancestors 'self' www.elkjop.no elkjop.no www.power.no power.no logon.canaldigital.com ssotest.api-canaldigital.com ssostage.api-canaldigital.com localhost; 5 frame-ancestors 'self' app.optimizely.com unileverde.inone.useinsider.com *.adobe.com 5 frame-ancestors 'self' https://saint-gobain.wmh-demos.com/; 5 default-src https: data:;script-src https: 'unsafe-eval' 'unsafe-inline';style-src https: 'unsafe-eval' 'unsafe-inline'; 5 default-src *.adlooxtracking.com *.adsafeprotected.com *.doubleverify.com *.googlesyndication.com *.imgsmail.ru *.mail.ru *.moatads.com *.mradx.net *.serving-sys.com an.yandex.ru cdn.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org jstracer.yandex.ru mail.ru mc.yandex.by mc.yandex.com mc.yandex.fr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.ua mc.yandex.uz strm.yandex.ru yandex.ru yandex.st yastat.net yastatic.net; script-src *.adlooxtracking.com *.adsafeprotected.com *.criteo.com *.doubleclick.net *.doubleverify.com *.dvtps.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagservices.com *.imgsmail.ru *.mail.ru *.moatads.com *.mradx.net *.odnoklassniki.ru *.roxot-panel.com *.serving-sys.com *.vk.com adservice.google.com adservice.google.ru an.yandex.ru cdn.ampproject.org cdn.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org mail.ru mc.yandex.by mc.yandex.com mc.yandex.fr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.ua mc.yandex.uz ok.ru static.criteo.net vk.com yandex.ru yandex.st yastat.net yastatic.net 'unsafe-eval' 'unsafe-inline'; connect-src *.adlooxtracking.com *.adsafeprotected.com *.criteo.com *.doubleverify.com *.imgsmail.ru *.mail.ru *.moatads.com *.mradx.net *.roxot-panel.com *.serving-sys.com *.vk.com ads.betweendigital.com an.yandex.ru cdn.consentmanager.mgr.consensu.org cdn.jsdelivr.net consentmanager.mgr.consensu.org csi.gstatic.com ib.adnxs.com jstracer.yandex.ru mail.ru mc.yandex.by mc.yandex.com mc.yandex.fr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.ua mc.yandex.uz ok.ru pagead2.googlesyndication.com pb.adriver.ru prebid-bidder.rutarget.ru prebid-eu.creativecdn.com px.adhigh.net securepubads.g.doubleclick.net ssp.hybrid.ai ssp.otm-r.com static.criteo.net strm.yandex.ru vk.com yandex.ru yandex.st yastat.net yastatic.net; img-src data: blob: *; media-src *.imgsmail.ru *.mail.ru *.mradx.net *.ok.ru *.strm.yandex.ru *.vk.com *.yandex.net coub-anubis-a.akamaized.net data: mail.ru ok.ru strm.yandex.ru vk.com yandex.ru yandex.st yastat.net yastatic.net; style-src *.imgsmail.ru *.mail.ru *.mradx.net blob: cdn.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org yandex.st yastat.net yastatic.net 'unsafe-eval' 'unsafe-inline'; font-src *.imgsmail.ru *.mail.ru *.mradx.net an.yandex.ru blob: data: https: yastat.net yastatic.net 'self'; frame-src *.criteo.com *.doubleclick.net *.doubleverify.com *.googlesyndication.com *.mail.ru *.mradx.net *.ok.ru *.vk.com *.yandex.ru *.yandexadexchange.net awaps.yandex.net mail.ru mc.yandex.by mc.yandex.com mc.yandex.fr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.ua mc.yandex.uz ok.ru tpc.googlesyndication.com vk.com www.google.com yandexadexchange.net yastat.net yastatic.net; report-uri https://cspreport.mail.ru/splash?v=29.06.21; 4 default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob: wss://*.hotjar.com; font-src https: data:; img-src https: blob: data: android-webview-video-poster:; media-src blob: data: https:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests; 4 default-src *.livejournal.com *.livejournal.net tpc.googlesyndication.com; script-src *.livejournal.com *.livejournal.net *.google-analytics.com *.googletagmanager.com *.scorecardresearch.com *.top100.ru *.criteo.com yastatic.net *.plista.com *.facebook.com vk.com *.ok.ru *.pingdom.com *.pingdom.net *.vk.com *.twitter.com *.twimg.com *.facebook.net *.instagram.com *.services.livejournal.com *.videos.livejournal.com *.adfox.ru *.exelator.com *.rambler.ru *.rubiconproject.com *.yahooapis.com *.newrelic.com *.nr-data.net *.doubleclick.net googleads.g.doubleclick.net *.lj.ru *.googleapis.com *.youtube.com *.varlamov.me *.varlamov.com *.google.com static.xx.fbcdn.net dsp-rambler.ru openstat.net *.rnet.plus twemoji.maxcdn.com *.googletagservices.com *.googlesyndication.com ymetrica.com telegram.org *.webturn.ru www.dropbox.com *.criteo.net z.moatads.com r.webturn.ru *.pinterest.com *.google.ru ssl.p.jwpcdn.com *.gstatic.com js.mamydirect.com cdn.ampproject.org adservice.google.ca an.yandex.ru yandex.st mc.yandex.ru banners.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net yandex.ru 'unsafe-inline' 'unsafe-eval'; style-src http: https: data: yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net 'unsafe-inline' 'unsafe-eval'; img-src http: https: data: avatars-fast.yandex.net favicon.yandex.net an.yandex.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net *.yandex.net verify.yandex.ru *.verify.yandex.ru 'self'; frame-src http: https: awaps.yandex.net yandexadexchange.net *.yandexadexchange.net yastatic.net *.yandex.ru banners.adfox.ru yastat.net; font-src http: https: data: an.yandex.ru yastatic.net yastat.net 'self'; connect-src *.livejournal.com *.livejournal.net *.services.livejournal.com *.google-analytics.com ssp.rambler.ru *.ssp.rambler.ru lj.stat.eagleplatform.com *.pingdom.net *.googleapis.com kraken.rambler.ru *.twitter.com *.youtube.com googleads.g.doubleclick.net static.xx.fbcdn.net *.lj.ru *.rnet.plus ymetrica.com *.webturn.ru *.criteo.com dsp-rambler.ru *.rambler.ru stats.g.doubleclick.net *.eaglecdn.com wss://www.livejournal.com *.g.doubleclick.net an.yandex.ru strm.yandex.ru mc.yandex.ru yandex.st yastatic.net matchid.adfox.yandex.ru adfox.yandex.ru ads.adfox.ru ads6.adfox.ru jstracer.yandex.ru yastat.net yandex.ru static-mon.yandex.net 'self'; media-src http: https: data: *.yandex.net strm.yandex.ru *.strm.yandex.ru yandex.ru yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net report-uri https://livejournal.com/csp_reports 4 upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' data: https: wss: android-webview-video-poster:; report-uri https://o378271.ingest.sentry.io/api/5201427/security/?sentry_key=b97b30d6fd6244419f1e761e6f6f319a 4 frame-ancestors 'self' *.vice.com vicetv.com *.vicetv.com vicetv.nl vicetv.be vicesports.nl vicemoney.nl vicebelgique.com survey18.toluna.com *.viceops.net survey-d.dynata.com 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: https://sb.scorecardresearch.com blob: wss:; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-top-navigation-by-user-activation allow-presentation; img-src 'self' https: data: blob:; object-src https://*.engadget.com https://s.yimg.com; worker-src 'self' blob:; manifest-src 'self' https://s.yimg.com; font-src 'self' data: https://www.engadget.com https://s.yimg.com https://fonts.gstatic.com https://*.spot.im; connect-src 'self' https://*.engadget.com https://s.yimg.com https://*.yahoo.net https://*.yahoo.com https://*.oath.com https://*.advertising.com https://*.cdn.yimg.com https://ad.doubleclick.net https://*.doubleverify.com https://*.googlesyndication.com https://*.spot.im https://*.giphy.com https://*.vidible.com https://*.media.yahoo.com:4443 https://*.skimresources.com https://*.taboola.com https://securepubads.g.doubleclick.net https://*.spotim.market https://*.criteo.com https://*.criteo.net https://*.pubmatic.com https://*.rubiconproject.com https://*.lijit.com https://*.gumgum.com https://*.openx.net https://*.adtelligent.com https://*.casalemedia.com https://*.creativecdn.com https://*.adnxs.com https://*.nighttstand.com https://*.rlcdn.com https://*.adsrvr.org https://*.adform.net https://*.vidible.tv https://*.uplynk.com https://*.edgekey.net https://*.doubleclick.net https://d1z2jf7jlzjs58.cloudfront.net https://*.pixel.parsely.com https://*.aniview.com https://*.ad-score.com https://polarcdn-terrax.com https://*.polarcdn-terrax.com https://*.polarcdn.com https://polarcdn-engine.com https://polarcdn-pentos.com https://videodelivery.net https://*.videodelivery.net; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp.yahoo.com/beacon/csp?src=engadget; report-to csp-endpoint; 4 frame-ancestors 'self' hhs.gov *.hhs.gov 4 script-src 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com *.unicef.org *.sharethis.com rules.quantcount.com connect.facebook.net secure.quantserve.com www.google-analytics.com googletagmanager.com www.googletagmanager.com cdn.poll-maker.com embeds.tagboard.com maps.googleapis.com e.infogram.com *.hscampaigns.com *.getchute.com ssl.mousestats.com *.google.com js-agent.newrelic.com bam.nr-data.net js-agent.newrelic.com/* www.youtube.com s.ytimg.com *.instagram.com *.twitter.com cdn.syndication.twimg.com cdn.nativemsg.com hm.baidu.com siteimproveanalytics.com downloads.mailchimp.com mc.us2.list-manage.com sjs.bizographics.com unicef.us2.list-manage.com s3.amazonaws.com www.googleadservices.com *.doubleclick.net cdn.curator.io eisi-ext.azurewebsites.net *.aparat.com *.tableau.com *.wufoo.com s.pinimg.com ct.pinterest.com cdn.taboola.com static.hotjar.com amplify.outbrain.com event.getblue.io analytics.tiktok.com api.curator.io cdn.pdst.fm www.googleoptimize.com; object-src 'self' *.youtube.com; style-src 'self' 'unsafe-inline' *.google.com fonts.googleapis.com *.sharethis.com cdn.poll-maker.com stories.getchute.com cdn-images.mailchimp.com downloads.mailchimp.com l.sharethis.com *.twitter.com *.unicef.org cdn.curator.io *.twimg.com; img-src 'self' data: *.unicef.org www.google-analytics.com ssl.gstatic.com sb.scorecardresearch.com *.sharethis.com facebook.com www.facebook.com pixel.quantserve.com stats.g.doubleclick.net www.gstatic.com cdn.poll-maker.com csi.gstatic.com maps.gstatic.com maps.googleapis.com google.ie google.com.hk google.dk google.co.id google.co.kr google.hr google.com.sg google.fr google.com.br google.mn google.co.zw google.com.lb google.tn google.com.om google.jo google.com.ph google.mw google.nl google.com.tr google.ca google.it google.co.uz google.me google.co.uk google.co.za google.ch google.co.in www.google.com *.cdninstagram.com pixel.getchute.com media.chute.io static.getchute.com avatars.io *.twitter.com *.twimg.com dynamite-images.appspot.com hm.baidu.com www.googletagmanager.com unicef-images.appspot.com 88988.global.siteimproveanalytics.io cdn-images.mailchimp.com gallery.mailchimp.com ct.pinterest.com cx.atdmt.com pixel.quantserve.com i.ytimg.com downloads.mailchimp.com *.tableau.com blob:; media-src 'self' *.cdninstagram.com video.twimg.com; frame-src 'self' *.facebook.com *.google.com *.twitter.com e.infogram.com infogram-download-us2.s3.eu-west-1.amazonaws.com infogram-download-eu.s3.eu-west-1.amazonaws.com *.sharethis.com *.hscampaigns.com embeds.tagboard.com www.youtube.com infogram.com connect.facebook.net *.unicef.org api.getchute.com static.getchute.com giphy.com *.wufoo.com www.instagram.com cdn.nativemsg.com twitter.com *.ustream.tv *.youku.com c.sharethis.mgr.consensu.org embed.ted.com *.doubleclick.net player.vimeo.com forms.office.com *.aparat.com *.tableau.com oms.gameloft.com *.soundcloud.com app.powerbi.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com data: maxcdn.bootstrapcdn.com stories.getchute.com *.unicef.org cdnjs.cloudflare.com cdn.curator.io; connect-src 'self' *.sharethis.com www.quiz-maker.com ssl.mousestats.com www.google-analytics.com s3.amazonaws.com getchute.com *.getchute.com facebook.com c.sharethis.mgr.consensu.org stats.g.doubleclick.net unicefhq.cp.bsd.net script.google.com script.googleusercontent.com *.unicef.org api.curator.io bam.nr-data.net rpapigatewaytest.azurewebsites.net i2e.azurewebsites.net us-central1-adaptive-growth.cloudfunctions.net blob:; report-uri /report-csp-violation 4 default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; object-src 'none'; worker-src 'self'; upgrade-insecure-requests; block-all-mixed-content; sandbox allow-forms allow-same-origin allow-scripts allow-modals allow-popups allow-popups-to-escape-sandbox allow-presentation 4 frame-ancestors 'self' *.shutterfly.com *.tinyprints.com *.onehippo.io; 4 frame-ancestors 'self' appsec.aarp.org secure.aarp.org feeds.aarp.org; 4 frame-ancestors 'self' *.tdameritrade.com *.ameritrade.com http://*.tdameritrade.com/ 4 frame-ancestors 'self' https://*.adobe.com; 4 upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: blob: wss: mediastream: android-webview-video-poster: ms-appx-web: gsa: endlesspic: ms-browser-extension chrome-extension asset * ; frame-ancestors 'self' https://*.trendmicro.com ; report-uri https://trendmicro.com/csp-report/violation.php 4 frame-ancestors 'self' https://ajc.newspapers.com https://*.ajchomefinder.com https://www.legacy.com 4 block-all-mixed-content; frame-ancestors 'self' qualys.com *.qualys.com; 4 frame-ancestors https://*.ionos.com https://ionos.com; 4 frame-ancestors 'self' https://*.twilio.com https://www.twilio.com;report-uri https://www.twilio.com/console/api/cspr 4 upgrade-insecure-requests;frame-ancestors 'self' engage.dnb.com; 4 frame-ancestors 'self' *.bazaarvoice.com 4 frame-ancestors 'self' *.lufthansa.com *.brusselsairlines.com 4 default-src 'self' https: wss: data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-endpoint.timeinc.net/ 4 default-src 'self' *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; font-src * data:; connect-src *; img-src * blob: data:; child-src *; media-src *; frame-ancestors 'self' *.activenetwork.com *.active.com *.activekids.com; worker-src * blob:; object-src *; 4 default-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' * https://www.google-analytics.com https://optimize.google.com https://optanon.blob.core.windows.net http://*.hotjar.com https://*.onetrust.com https://www.googletagmanager.com https://connect.facebook.net *.rfihub.net *.bing.com *.ads-twitter.com *.twitter.com *.t.co *.ytimg.com https://act.nrdc.org; style-src 'self' 'unsafe-inline' * blob: https://optimize.google.com https://fonts.googleapis.com https://optanon.blob.core.windows.net cdnjs.cloudflare.com cloud.typography.com *.twitter.com *.t.co ; img-src 'self' 'unsafe-inline' data: * https://www.google-analytics.com https://optimize.google.com https://code.jquery.com/ *.twitter.com *.facebook.com *.bing.com *.t.co; frame-src 'self' data: * https://optimize.google.com https://*.adsrvr.org *.rfihub.com; font-src 'self' 'unsafe-inline' data: * https://fonts.gstatic.com cdnjs.cloudflare.com; connect-src 'self' * https://*.optmnstr.com; report-uri /report-csp-violation 4 worker-src blob: ; default-src https: data: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self' http://fireeye.lookbookhq.com https://fireeye.lookbookhq.com http://content.fireeye.com https://content.fireeye.com 4 upgrade-insecure-requests; frame-ancestors 'self' http://*.elconfidencial.com:* https://*.elconfidencial.com:* www.elconfidencial.com blogs.elconfidencial.com bc.marfeel.com *.google.es *.google.com *.cdn.ampproject.org es.grupogo.punto player.h-cdn.com; report-uri https://elconfidencial.report-uri.io/r/default/csp/enforce 4 frame-ancestors 'self' https://comscore.sharepoint.com; 4 frame-ancestors 'self' *.avira.com *.avira.org *.avira.net *.prod-blog.avira.com prod-blog.avira.com; 4 frame-ancestors 'self' localhost *.teamwork.com *.teamworkpm.net teams.microsoft.com *.teams.microsoft.com *.skype.com teamworkintegrations.ngrok.io *.us.teamworkops.com; 4 default-src * data: blob: ;script-src * 'self' 'unsafe-inline' 'unsafe-eval' ;worker-src * blob: ;style-src * 'unsafe-inline' data: ;frame-ancestors 'self' static-s.aa-cdn.net *.appannie.com *.appannie.com.cn *.appannie.org;img-src * data: blob: ;font-src * data: ;media-src * data: blob: ;base-uri 'self' d6tizftlrpuof.cloudfront.net manifest.prod.boltdns.net secure.brightcove.com ;connect-src * data: blob: wss://api.appcues.net;report-uri https://sentry.smart-sense.org/api/96/csp-report/?sentry_key=28d56c139d1542a19730a3eb84757027; 4 frame-ancestors https://*.ionos.de https://ionos.de https://*.ionos.at https://ionos.at https://*.profiseller.de https://profiseller.de https://*.1und1-partner.de https://1und1-partner.de https://*.1und1-hostingpartner.de https://1und1-hostingpartner.de https://*.1und1-premiumpartner.de https://1und1-premiumpartner.de; 4 frame-ancestors 'self' *.oui.sncf; report-uri /report-csp-violation; upgrade-insecure-requests 4 frame-ancestors 'self' https://*.rightmessage.com; 4 upgrade-insecure-requests; default-src * data: blob: *.medallia.eu *.kampyle.com *.google-analytics.com https://unpkg.com/ https://hello.myfonts.net/count/39cfed https://monitor.clickcease.com https://www.clickcease.com/monitor/stat.js; script-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.medallia.eu *.kampyle.com https://munchkin.marketo.net https://unpkg.com/ https://monitor.clickcease.com *.go-mpulse.net https://resources.digital-cloud.medallia.eu/favicon.ico https://unpkg.com/web-vitals *.go-mpulse.net/boomerang/* https://www.facebook.com/tr/ https://www.clickcease.com/monitor/stat.js https://cdn.tt.omtrdc.net https://stmicroelectronics.tt.omtrdc.net *.nrich.ai *.speedcurve.com *.3gl.net https://maps.googleapis.com https://fonts.googleapis.com/css https://maps.google.com/mapfiles/ms/icons/red-dot.png https://maps.google.com/mapfiles/ms/icons/green-dot.png https://hello.myfonts.net/count/39cfed https://*.zscaler.net *.st.com *.stmicroelectronics.com.cn browser-update.org *.blob.core.windows.net *.adobedtm.com *.demandbase.com *.s3.amazonaws.com *.ads.linkedin.com *.onetrust.com https://cdn.cookielaw.org https://snap.licdn.com https://www.google-analytics.com https://connect.facebook.net https://cdn.decibelinsight.net wss://cdn.decibelinsight.net https://collection.decibelinsight.net wss://collection.decibelinsight.net; style-src * data: blob: *.medallia.eu *.kampyle.com 'unsafe-inline' https://monitor.clickcease.com https://unpkg.com/ https://www.clickcease.com/monitor/stat.js https://hello.myfonts.net/count/39cfed; connect-src 'self' *.google-analytics.com *.medallia.eu *.nrich.ai *.speedcurve.com *.kampyle.com *.go-mpulse.net *.akamaihd.net *.akstat.io https://unpkg.com/ https://stats.g.doubleclick.net/* https://856-pvp-715.mktoresp.com https://munchkin.marketo.net https://stats.g.doubleclick.net https://*.go-mpulse.net/boomerang/* https://www.facebook.com/tr/ https://monitor.clickcease.com https://www.clickcease.com/monitor/stat.js https://privacyportal-de.onetrust.com/request/v1/consentreceipts https://hello.myfonts.net/count/39cfed https://privacyportal-de.onetrust.com/request/v1/consentreceipts* *.3gl.net https://maps.googleapis.com https://fonts.googleapis.com/css https://maps.google.com/mapfiles/ms/icons/red-dot.png https://maps.google.com/mapfiles/ms/icons/green-dot.png https://*.zscaler.net *.st.com *.stmicroelectronics.com.cn *.demandbase.com *.company-target.com *.s3.amazonaws.com https://api.ipify.org https://stmicroelectronics.tt.omtrdc.net https://dpm.demdex.net https://cdn.decibelinsight.net wss://cdn.decibelinsight.net https://collection.decibelinsight.net wss://collection.decibelinsight.net 4 default-src https: data: blob: chrome-extension: android-webview-video-poster: ms-appx-web: 'unsafe-eval' 'unsafe-inline'; report-uri /content-security-policy-report.php 4 frame-ancestors 'self' https://epr.onepath.com.au https://eprotectpriv.service.anz https://eprotect.service.anz https://eprotectauth.service.anz https://eprotect; 4 upgrade-insecure-requests; default-src 'self'; frame-src 'self' www.youtube.com www.youtube-nocookie.com *.equitystory.com *.conti-apps.de *.continental.com *.wowza.com livestream.com *.nc3-cdn.com *.cloudfront.net; style-src 'self' 'unsafe-inline' *.continental.com *.bing.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.continental.com www.googletagmanager.com *.mouseflow.com *.bing.com *.virtualearth.net *.admiralcloud.com www.google-analytics.com analytics-udg.netdna-ssl.com unpkg.com blob:; font-src 'self' data: *.continental.com *.bing.com *.admiralcloud.com *.gstatic.com; connect-src 'self' *.continental.com *.admiralcloud.com *.bing.com *.virtualearth.net www.google-analytics.com stats.g.doubleclick.net *.mouseflow.com; img-src * data:; media-src * blob:; 4 default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data:; media-src https: blob:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests; report-uri https://lavoz.report-uri.io/r/default/csp/enforce 4 default-src 'self' *.stackadapt.com *.ifgza3.net *.ojrq.net *.tapad.com *.loggly.com *.rlcdn.com *.impactradius-event.com *.teads.tv *.passage.ai wss://tars-prod.passage.ai *.evenfinancial.com *.taboola.com *.quantcount.com *.transunion.com *.vols7feed.com *.addthis.co *.amazon-adsystem.com *.youtube.com *.doubleclick.net *.company-target.com *.brightcove.com *.brightcovecdn.com *.prod.boltdns.net *.adsrvr.org dmtry.com *.dmtry.com *.quantserve.com *.bluekai.com *.facebook.com *.demandbase.com doubleclick.net *.trustev.com *.yahoo.com *.atedra.com *.twitter.com *.bing.com crwdcntrl.net c.rstg.io cdn.nextinsure.com *.jquery.com cloudfront.net *.googleapis.com *.adnxs.com *.rlcdn.com investis.com adsrvr.org sharethrough.com adroll.com yimg.com amazonaws.com *.fastclick.net secure.leadback.advertising.com google-analytics.com *.ads-twitter.com *.openx.net *.zencdn.net googleadservices.com gstatic.com bidswitch.net *.media6degrees.com googletagmanager.com *.siteintercept.qualtrics.com *.qualtrics.com; script-src 'self' *.liveperson.net https://sc-static.net *.lpsnmedia.net https://siteimproveanalytics.com *.kore.ai *.b0e8.com *.bc0a.com *.stackadapt.com *.thebrighttag.com *.btstatic.com *.hifiona.com *.impactradius-event.com *.teads.tv *.passage.ai *.evenfinancial.com *.taboola.com *.quantcount.com *.dotomi.com *.transunion.com *.mxpnl.com *.vols7feed.com *.addthis.com *.googletagmanager.com *.optimizely.com *.pingdom.com *.cloudflare.com *.googleadservices.com *.youtube.com *.doubleclick.net *.google-analytics.com *.quantserve.com *.g.3gl.net *.eloqua.com *.crwdcntrl.net *.googleapis.com *.investis.com *.amazonaws.com *.cloudfront.net *.nextinsure.com *.lendingtree.com *.mediaplex.com *.demandbase.com *.jquery.com *.gstatic.com *.bing.com *.3gl.net *.yourscoreonline.com *.gofreecredit.com *.creditcheckingtoday.com *.naturaltracking.com *.credit.com *.facebook.com *.yimg.com *.ytimg.com *.quora.com *.ensighten.com *.d39se0h2uvfakd.cloudfront.net *.linkedin.com *.adsprotection.com *.brightcove.com *.hotjar.com *.adroll.com *.brightcove.net *.en25.com *.adsrvr.org *.abmr.net *.mathtag.com t2.rstg.io px.ads.linkedin.com vjs.zencdn.net *.twitter.com iad-login.dotomi.com snap.licdn.com sp.analytics.yahoo.com unpkg.com *.myfonts.net *.en25.com *.addthisedge.com *.zencdn.com *.s3.amazonaws.com cdn.ampproject.org *.company-target.com *.media6degrees.com *.ads-twitter.com cdn.mxpnl.com *.bizographics.com *.pingdom.net *.mbww.com *.entrust.net *.trustev.com *.mathtag.com *.googlesyndication.com *.google.com *.outbrain.com o1.qnsr.com *.facebook.net cas.cluep.com *.quizgnome.com *.siteintercept.qualtrics.com *.qualtrics.com *.pulseinsights.com blob: 'unsafe-eval' 'unsafe-inline'; child-src *.liveperson.net *.snapchat.com *.lpsnmedia.net *.evenfinancial.com *.transunion.com blob: *.crwdcntrl.net *.hifiona.com *.cdn.optimizely.com *.addthis.com *.doubleclick.net *.lendingtree.com *.youtube.com *.hotjar.com *.mediaplex.com *.optimizely.com *.brightcove.net s.amazon-adsystem.com *.trustev.com *.mathtag.com *.qnsr.com *.facebook.com *.siteintercept.qualtrics.com *.qualtrics.com; connect-src 'self' wss://va.msg.liveperson.net wss://lo.msg.liveperson.net *.google-analytics.com *.bc0a.com *.nextinsure.com *.googleapis.com *.g.doubleclick.net *.kore.ai wss://rtm.kore.ai *.stackadapt.com *.ifgza3.net *.passage.ai wss://tars-prod.passage.ai *.taboola.com *.transunion.com *.mixpanel.com *.optimizely.com *.youtube.com *.brightcovecdn.com *.pingdom.net *.brightcove.com manifest.prod.boltdns.net airbrake.io *.company-target.com r.3gl.net s7.addthis.com *.herokuapp.com unity.cadreon.com app.trustev.com *.hotjar.com wss://*.hotjar.com *.siteintercept.qualtrics.com *.qualtrics.com 'unsafe-eval'; media-src 'self' *.lpsnmedia.net *.brightcove.com *.brightcovecdn.com *.prod.boltdns.net *.transunion.com blob: f1.media.brightcove.com; img-src * *.ifgza3.net *.ojrq.net *.tapad.com *.loggly.com *.rlcdn.com data:; font-src data: *.transunion.com *.nextinsure.com *.gstatic.com *.company-target.com edge.api.brightcove.com r.3gl.net *.addthis.com *.herokuapp.com *.quora.com; style-src * 'unsafe-eval' 'unsafe-inline'; frame-ancestors *.transunion.com; 4 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://script.hotjar.com/ https://go.in.kantar.com/ https://script.hotjar.com/modules.4511dadc364f0ee7084d.js https://script.hotjar.com/modules.7225c79fe4e29708c611.js https://www.googleadservices.com/ https://online2.superoffice.com/ https://script.hotjar.com/modules.cd1eea15fc08cdfc520a.js https://script.hotjar.com/modules.a6cfc71c5ac4549d913e.js https://snap.licdn.com/li.lms-analytics/ https://services.cognitoforms.com/scripts/ https://embedsocial.com/cdn/iframe.js https://embedsocial.com/embedscript/in.js https://view-awesome-table.com/ https://static.hotjar.com/c/ https://script.hotjar.com/modules.0734134ae79697970353.js https://googleads.g.doubleclick.net/ https://www.googleadservices.com/pagead/conversion_async.js https://cdn.jotfor.ms/js/ https://js.jotform.com/ https://js.jotform.com/vendor/ https://cdn.jotfor.ms/static/ https://cdnjs.cloudflare.com/ajax/libs/punycode/1.4.1/ https://form.jotform.com/jsform/ https://js.hs-analytics.net/analytics/1598004900000/ https://js.hs-analytics.net/analytics/ https://js.hs-banner.com/3788602.js https://js.hscollectedforms.net/collectedforms.js https://forms.hsforms.com/ https://js.hs-scripts.com/3788602.js https://js.hsforms.net/forms/v2.js https://euc-widget.freshworks.com https://app-static.turtl.co/embed/turtl.embed.v1.js https://s.ytimg.com https://www.youtube.com/iframe_api https://pi.pardot.com/ https://go.tnsglobal.com/ https://preferences.kantarworldpanel.com/ https://go.millwardbrown.com/ https://www2.kantar.com https://consent.cookiebot.com/ https://cdn.saberfeedback.com https://feedback.saberfeedback.com/ https://www.youtube.com https://ssl.google-analytics.com/ga.js https://ajax.googleapis.com/ https://tagmanager.google.com/ https://www.googletagmanager.com/ https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://embedsocial.com/cdn/iframe-lightbox.min.css https://cdn.jotfor.ms/wizards/languageWizard/custom-dropdown/css/ https://cdn.jotfor.ms/css/styles/payment/ https://cdn.jotfor.ms/themes/CSS/ https://cdn.jotfor.ms/css/ https://cdn.jotfor.ms/css/styles/ https://cdn.jotfor.ms/static/ https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css https://euc-widget.freshworks.com https://app-static.turtl.co/embed/turtl.embed.v1.css https://feedback.saberfeedback.com/ https://cdn.saberfeedback.com https://tagmanager.google.com/ https://fast.fonts.net https://fonts.googleapis.com; connect-src *; img-src 'self' data: https://www.google.co.za/pagead/1p-user-list/668928299/ https://p.adsymptotic.com/ https://px.ads.linkedin.com/ https://www.google.com/ https://www.google.co.uk/ https://www.google.co.uk/ads/ https://events.jotform.com/ https://events.jotform.com/jsform/200924737274357/ https://cdn.jotfor.ms/ https://assets.turtl.co/covers/ https://www.google.co.za/ads/ https://www.googletagmanager.com/ https://www.google.com/ads/ https://track.hubspot.com/ https://forms.hsforms.com/embed/v3/ https://forms.hubspot.com/outpost/formsnextembed/ https://s3-eu-central-1.amazonaws.com/euc-cdn.freshdesk.com/ *.doubleclick.net https://www.google-analytics.com *.gstatic.com https://maps.googleapis.com https://assets.turtl.co/covers/5ef0c513e144c46e0f06dcca.jpg; frame-src 'self' https://newsletterform.z6.web.core.windows.net/ https://go.in.kantar.com/ http://mkt.kantar.com/ https://tns-portal.rexx-recruitment.com/ https://www.kantarlivefr.com/ https://online2.superoffice.com/ https://v.qq.com/ https://services.cognitoforms.com/f/ https://embedsocial.com/ https://view-awesome-table.com/ https://vars.hotjar.com/ https://www.kantarworldpanel.com https://form.jotform.com/ https://submit.jotformeu.com/ https://app-widgets.jotform.io https://www3.kantarmedia.com/ https://datawrapper.dwcdn.net https://widgets.jotform.io/ https://www.kantarmarketplace.com/ https://preferences.kantarworldpanel.com/ https://html5-player.libsyn.com/ https://mkt.kantar.com/ https://forms.hsforms.com/ https://go.pardot.com/ https://kantar.wd3.myworkdayjobs.com/ https://player.vimeo.com/ https://kantar.turtl.co/ https://www2.kantar.com/ https://staginglocal.kantarmarketplace.com https://go.kantarmarketplace.com/ https://www.youtube.com/iframe_api https://consentcdn.cookiebot.com/ https://go.millwardbrown.com/ https://www.google.com https://www.youtube.com https://apps.sitecore.net/; frame-ancestors https://*.khapps.com https://*.khapps.jp; font-src 'self' data: https://www.kantar.com/-/media/Themes/Kantar/Global/KantarMain/fonts/ https://www.kantar.com/-/media/Themes/Kantar/Global/KantarMain/fonts/KantarBrown https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/ https://sites.kantarconsulting.com/toolbox/fonts/KantarBrownWeb-Regular.woff2 https://feedback.saberfeedback.com https://fonts.gstatic.com 4 frame-ancestors https://*.obozrevatel.com http://*.googlesyndication.com https://api.esp.piano.io http://api.traq.li 4 frame-ancestors 'self' *.google.com *.amp.colgate.com amp.colgate.com *.colgate.com colgate.com; 4 frame-ancestors 'self' *.1und1.de *.1und1.com profiseller.de *.profiseller.de *.1and1.com dsl.gmx.de dsl.web.de 1und1-premiumpartner.de *.1und1-premiumpartner.de 1und1-partner.de *.1und1-partner.de 1und1-mm.de *.1und1-mm.de 1und1-hostingpartner.de *.1und1-hostingpartner.de 1und1-freenet.de *.1und1-freenet.de; 4 frame-ancestors 'self' centinelapi.cardinalcommerce.com; script-src 'self' www.youtube.com *.worldpay.com *.facebook.net cdn.mouseflow.com script.crazyegg.com www.google-analytics.com static.sandisk.com bat.bing.com *.googleadservices.com d.adroll.com googleads.g.doubleclick.net *.googletagmanager.com s.adroll.com snap.licdn.com www.googletagmanager.com trc.taboola.com analytics.xscreenattribution.com *.marketo.net *.trustarc.com www.redditstatic.com cdn.taboola.com tags.tiqcdn.com *.twitter.com s.go-mpulse.net static.ads-twitter.com js.adsrvr.org d.adroll.mgr.consensu.org s.ytimg.com unpkg.com *.marketo.com js.maxmind.com *.truste.com tagmanager.google.com *.adobe.com ajax.googleapis.com *.expertvoice.com *.experticity.com cdn1.affirm.com *.tt.omtrdc.net *.adobedtm.com *.sc.omtrdc.net www.google.com *.criteo.net *.criteo.com www.gstatic.com cdn.pdst.fm ext.chtbl.com *.signifyd.com *.bazaarvoice.com mpsnare.iesnare.com 'unsafe-eval' 'unsafe-inline'; 4 default-src 'self' atos.net *.atos.net *.pardot.com assets.adobedtm.com *.cloudflare.com *.cloudfront.net *.yoast.com data: 'unsafe-inline' 'unsafe-eval' code.jquery.com *.gravatar.com tools.eurolandir.com static.dialogflow.com pbs.twimg.com *.youtube.com *.ytimg.com *.gstatic.com *.googleapis.com tribl.io *.olark.com *.mrpdata.net *.linkedin.com *.company-target.com *.google-analytics.com *.google.fr *.google.com *.oktopost.com okt.to *.adform.net *.demandbase.com *.rlcdn.com *.bidr.io *.accountinsight.cloud *.licdn.com atos.tt.omtrdc.net content.onlinexperiences.com onlinexperiences.com w.soundcloud.com *.aio-events.com *.appspot.com cdn.syndication.twimg.com *.twimg.com *.twitter.com *.microsoft.com *.azureedge.net *.botframework.com *.bizzabo.com updates.themepunch-ext-b.tools updates.themepunch-ext-a.tools *.olympicchannel.com olympics.com; frame-ancestors 'self' atos.net *.atos.net atosnews.net atos365.sharepoint.com; 4 default-src 'self' https: wss: blob: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: wss: blob: data: 'unsafe-inline' 'unsafe-eval' www.googleadservices.com www.googletagmanager.com *.doubleclick.net www.youtube.com *.ads-twitter.com *.twitter.com connect.facebook.net api.ipify.org; frame-src *; connect-src * blob: data:; font-src * blob: data:; img-src 'self' https: wss: blob: data: 'unsafe-inline' 'unsafe-eval' filesystem: 4 block-all-mixed-content; default-src data: https: wss: blob: 'unsafe-inline' 'unsafe-eval'; 4 frame-ancestors 'self' https://next.brella.io; 4 default-src 'self' https: blob: data: 'unsafe-inline' 'unsafe-eval' script-src: https://ajax.googleapis.com https://analytics.kaltura.com https://api.peer5.com https://bat.bing.com https://cdnapisec.kaltura.com https://cookie-cdn.cookiepro.com https://maps.googleapis.com https://players.brightcove.net https://s7.addthis.com https://secure.perk0mean.com https://static.cloud.coveo.com https://tag.demandbase.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com object-src: https://fonts.gstatic.com; 4 frame-ancestors 'self' http://www.dove.com unilever3.marketing.adobe.com unileverbrazil.marketing.adobe.com unilever2.marketing.adobe.com unilever.marketing.adobe.com unilever3.experiencecloud.adobe.com unileverbrazil.experiencecloud.adobe.com unilever2.experiencecloud.adobe.com unilever.experiencecloud.adobe.com emea1-proxy.adobemc.com us1-proxy.adobemc.com us1-proxy.adobemc.com apac-proxy.adobemc.com adobedemoemea131.marketing.adobe.com adobedemoemea131.experiencecloud.adobe.com 4 default-src 'self' vercel.com *.vercel.com *.stripe.com twitter.com *.twitter.com *.github.com https://*.googletagmanager.com:* wss://*.vercel.com localhost:* chrome-extension://*;script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.com www.googletagmanager.com www.google-analytics.com www.gstatic.com *.googleapis.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.twimg.com *.coinbase.com *.zdassets.com cdn.sift.com cdn.segment.com vercel.com *.vercel.com *.stripe.com twitter.com *.twitter.com *.github.com https://*.googletagmanager.com:* wss://*.vercel.com localhost:* chrome-extension://*;child-src *.youtube.com *.youtube-nocookie.com *.stripe.com www.google.com *.coinbase.com object-detection.vercel.app serverless-vrs.vercel.app github.com vercel.com *.vercel.com *.stripe.com twitter.com *.twitter.com *.github.com https://*.googletagmanager.com:* wss://*.vercel.com localhost:* chrome-extension://*;style-src 'self' 'unsafe-inline' *.googleapis.com vercel.com *.vercel.com *.stripe.com twitter.com *.twitter.com *.github.com https://*.googletagmanager.com:* wss://*.vercel.com localhost:* chrome-extension://*;img-src * blob: data:;media-src 'self' stream.mux.com *.fastly.net *.stackpathdns.com *.hwcdn.net videos.ctfassets.net blob: vercel.com *.vercel.com *.stripe.com twitter.com *.twitter.com *.github.com https://*.googletagmanager.com:* wss://*.vercel.com localhost:* chrome-extension://*;connect-src *;font-src *.vercel.com *.gstatic.com;worker-src blob: 4 frame-ancestors 'self' https://metrika.yandex.ru https://webvisor.com http://webvisor.com 4 font-src 'self' data: *.kornferry.com *.kfadvance.com *.fontawesome.com *.typography.com *.hotjar.com *.hotjar.io *.hotjar.io *.juicer.io; 4 upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://next.brella.io; base-uri 'self'; object-src 'self'; connect-src wss: https: 4 frame-ancestors 'self' https://www.tibco.com http://tibco.lookbookhq.com https://tibco.lookbookhq.com https://sso-awsqa.tibco.com https://sso-ext.tibco.com http://library.tibco.com https://library.tibco.com https://www-dev.tibco.com https://tibco.seismic.com; report-uri /report-csp-violation 4 frame-ancestors 'self' www.haier.com *.haier.com cnwcm.haier.com http://cnwcm.haier.com https://mgta.trs.cn http://mgta.trs.cn http://devta.trs.cn *.haier.net *.tongshuai.com *.casarte.com *.geappliances.cn 4 default-src https: data: 'unsafe-inline' 'unsafe-eval' 'self' https://*.eqads.com https://*.msecnd.net https://*.cookielaw.org https://*.cloudflare.com https://*.facebook.net https://*.googleapis.com https://*.gstatic.com https://*.crazyegg.com https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.googleapis.com https://*.googlesyndication.com https://*.doubleclick.net https://*.vimeo.com https://*.secure.payconex.net 4 default-src 'none'; connect-src 'self' bloghelpers.troyhunt.com links.services.disqus.com www.google-analytics.com stats.g.doubleclick.net syndication.twitter.com; font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com; frame-src disqus.com c.disquscdn.com www.google.com www.youtube.com player.vimeo.com twitter.com platform.twitter.com syndication.twitter.com omny.fm pastebin.com; img-src 'self' c.disquscdn.com referrer.disqus.com stats.g.doubleclick.net www.google-analytics.com www.gstatic.com syndication.twitter.com platform.twitter.com www.gravatar.com *.twimg.com data:; script-src 'self' c.disquscdn.com disqus.com troyhunt.disqus.com www.google.com www.google-analytics.com www.gstatic.com cdnjs.cloudflare.com platform.twitter.com cdn.syndication.twimg.com syndication.twitter.com gist.github.com/troyhunt/ 'sha256-dblwN9MUF0KZKfqYU7U9hiLjNSW2nX1koQRMVTelpsA=' 'sha256-4JqPqO/eQLWuWw1AE7dCvI9hPwiBcw0gy7uoLqS0ncg=' unpkg.com/@tryghost/; style-src 'self' 'unsafe-inline' c.disquscdn.com cdnjs.cloudflare.com fonts.googleapis.com platform.twitter.com ton.twimg.com assets-cdn.github.com github.githubassets.com; form-action *.twitter.com; media-src 'self'; prefetch-src 'self' c.disquscdn.com disqus.com; frame-ancestors 'self'; upgrade-insecure-requests; report-uri https://troyhunt.report-uri.com/r/d/csp/enforce 4 default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob:; font-src data: https:; connect-src https: wss:; media-src https: blob:; object-src https:; child-src https: data: blob:; form-action https:; upgrade-insecure-requests; block-all-mixed-content; 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://tags.tiqcdn.cn https://api.ipify.org https://p.adsymptotic.com https://*.ztsrv.com https://px.ads.linkedin.com https://my.demio.com https://angular-ui.github.io https://vidassets.terminus.services https://cdn.bigzeta.com https://api.bigzeta.com https://info.onsemi.com https://cdn.demio.com https://onsemi.ladesk.com https://onsemi.taleo.net https://*.gcs-web.com https://*.atdmt.com https://*.mktoresp.com https://*.marketo.com https://*.taboola.com https://*.tealiumiq.com https://*.tealium.com https://*.facebook.net https://*.googleapis.com https://*.gstatic.com https://*.baidu.com https://*.geniusmonkey.com https://*.doubleclick.net https://*.gstatic.com https://*.linkedin.com https://*.pingdom.net https://*.crazyegg.com https://*.marketo.net https://*.licdn.com https://www.google.com https://*.tiqcdn.com https://*.digikey.com https://*.googleadservices.com https://*.google-analytics.com https://*.googletagmanager.com https://*.facebook.com https://*.boltdns.net https://*.brightcove.net https://*.brightcove.com https://*.zencdn.net https://*.akamaihd.net blob: data: 4 default-src 'self' https: data: blob:; connect-src https: wss:;script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' blob:; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com https://www.riskdataobject.com; upgrade-insecure-requests; 4 frame-ancestors 'self' https://webvisor.com 4 default-src 'self' data: 'unsafe-eval' 'unsafe-inline' blob: *.brightcove.com *.cloudfront.net *.doubleclick.net *.google.com *.facebook.com forms.hsforms.com app.hubspot.com brightcove.hs.llnwd.net matomo-prod.connectid.cloud house-fastly-signed-eu-west-1-prod.brightcovecdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.convertexperiments.com *.hsforms.net *.jsdelivr.net *.googletagmanager.com *.connectid.cloud *.investis.com *.jquery.com *.cloudflare.com *.googleusercontent.com *.cloudfront.net *.hsforms.com *.facebook.net *.licdn.com *.google-analytics.com *.googleadservices.com *.investisdigital.com *.doubleclick.net *.lfeeder.com *.investis.com blob: data: *.hs-scripts.com *.google.com *.gstatic.com *.googleapis.com *.hsleadflows.net *.hsadspixel.net *.usemessages.com *.hs-analytics.net *.hs-banner.com brightcove.hs.llnwd.net matomo-prod.connectid.cloud; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.cloudflare.com *.googleusercontent.com *.investis.com *.cloudfront.net; img-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.investisdigital.com *.connectid.cloud *.investis.com *.facebook.com *.linkedin.com *.google.com *.google.co.in *.cloudfront.net *.brightcove.com *.lfeeder.com *.adsymptotic.com *.google-analytics.com *.hsforms.com *.gstatic.com *.googleapis.com *.googletagmanager.com *.hubspot.com brightcove.hs.llnwd.net cf-images.eu-west-1.prod.boltdns.net; font-src 'self' *.cloudfront.net *.googleusercontent.com *.gstatic.com; connect-src 'self' *.amazonaws.com *.brightcove.com *.luckyorange.net *.linkedin.com *.google-analytics.com *.investis.com *.doubleclick.net *.googleapis.com wss://*.visitors.live wss://visitors.live *.investisdigital.com *.hubspot.com *.hubapi.com forms.hsforms.com www.facebook.com api.luckyorange.com matomo-prod.connectid.cloud; report-uri //report-csp-violation 4 connect-src 'self' my-ducati-stg.s3.eu-west-1.amazonaws.com my-ducati-dev.s3.eu-west-1.amazonaws.com my-ducati-prd.s3.eu-west-1.amazonaws.com *.dynatrace.com api-public.ducati.com wurfl.io c.go-mpulse.net calculator.volkswagenbank.de s.yimg.com www.facebook.com apiwheel.h-en.me *.akstat.io *.akamaihd.net performance.typekit.net *.rsc.cdn77.org dasfelynsaterr.webcam videoram.com www.bing.com *.linkedin.com *.licdn.com *.google-analytics.com *.googleadservices.com *.google.com *.google.it *.doubleclick.net emea-ducati.netmng.com *.facebook.net *.a8723.com u.logbor.com mm.markandmini.com ad13.adfarm1.adition.com s.yimg.jp b92.yahoo.co.jp track.adform.net aax-eu.amazon-adsystem.com cdn.cookielaw.org *.onetrust.com youtube.com cdn.hypemarks.com tags.srv.stackadapt.com; font-src data: 'self' fonts.gstatic.com github.com media.ducati.com assets.ducati.com use.typekit.net chrome-extension *.linkedin.com *.licdn.com *.google-analytics.com *.googleadservices.com *.google.com *.google.it *.doubleclick.net emea-ducati.netmng.com *.facebook.net *.a8723.com u.logbor.com mm.markandmini.com ad13.adfarm1.adition.com s.yimg.jp b92.yahoo.co.jp track.adform.net aax-eu.amazon-adsystem.com cdn.cookielaw.org *.onetrust.com youtube.com cdn.hypemarks.com tags.srv.stackadapt.com *.awsducati.com; script-src-elem data: *.dynatrace.com assets.ducati.com platform.twitter.com pixel.mathtag.com loadus.exelator.com *.snt.imrworldwide.com pool.adizio.com pool.admedo.com gc.kis.v2.scr.kaspersky-labs.com s.yimg.com sp.analytics.yahoo.com 'self' 'unsafe-inline' maps.googleapis.com s.go-mpulse.net s2.adform.net use.typekit.net wurfl.io www.googletagmanager.com www.gstatic.com www.volkswagenbank-cloud.de gateway.zscalertwo.net about *.linkedin.com *.licdn.com *.google-analytics.com *.googleadservices.com *.google.com *.google.it *.doubleclick.net emea-ducati.netmng.com *.facebook.net *.a8723.com u.logbor.com mm.markandmini.com ad13.adfarm1.adition.com s.yimg.jp b92.yahoo.co.jp track.adform.net aax-eu.amazon-adsystem.com cdn.cookielaw.org *.onetrust.com youtube.com cdn.hypemarks.com tags.srv.stackadapt.com *.awsducati.com; script-src *.dynatrace.com assets.ducati.com platform.twitter.com s.yimg.com use.typekit.net 'self' 'unsafe-eval' 'unsafe-inline' s.go-mpulse.net wurfl.io www.googletagmanager.com www.gstatic.com www.volkswagenbank-cloud.de maps.googleapis.com s2.adform.net sp.analytics.yahoo.com *.linkedin.com *.licdn.com *.google-analytics.com *.googleadservices.com *.google.com *.google.it *.doubleclick.net emea-ducati.netmng.com *.facebook.net *.a8723.com u.logbor.com mm.markandmini.com ad13.adfarm1.adition.com s.yimg.jp b92.yahoo.co.jp track.adform.net aax-eu.amazon-adsystem.com cdn.cookielaw.org *.onetrust.com youtube.com cdn.hypemarks.com tags.srv.stackadapt.com *.awsducati.com; base-uri 'self' *.linkedin.com *.licdn.com *.google-analytics.com *.googleadservices.com *.google.com *.google.it *.doubleclick.net emea-ducati.netmng.com *.facebook.net *.a8723.com u.logbor.com mm.markandmini.com ad13.adfarm1.adition.com s.yimg.jp b92.yahoo.co.jp track.adform.net aax-eu.amazon-adsystem.com cdn.cookielaw.org *.onetrust.com youtube.com cdn.hypemarks.com tags.srv.stackadapt.com; frame-src pixel.mathtag.com platform.twitter.com www.youtube.com youtu.be www.facebook.com www.googletagmanager.com remove.video *.linkedin.com *.licdn.com *.google-analytics.com *.googleadservices.com *.google.com *.google.it *.doubleclick.net emea-ducati.netmng.com *.facebook.net *.a8723.com u.logbor.com mm.markandmini.com ad13.adfarm1.adition.com s.yimg.jp b92.yahoo.co.jp track.adform.net aax-eu.amazon-adsystem.com cdn.cookielaw.org *.onetrust.com youtube.com cdn.hypemarks.com tags.srv.stackadapt.com; img-src 'self' about data: * *.linkedin.com *.licdn.com *.google-analytics.com *.googleadservices.com *.google.com *.google.it *.doubleclick.net emea-ducati.netmng.com *.facebook.net *.a8723.com u.logbor.com mm.markandmini.com ad13.adfarm1.adition.com s.yimg.jp b92.yahoo.co.jp track.adform.net aax-eu.amazon-adsystem.com cdn.cookielaw.org *.onetrust.com youtube.com cdn.hypemarks.com tags.srv.stackadapt.com; script-src-attr 'unsafe-inline' *.linkedin.com *.licdn.com *.google-analytics.com *.googleadservices.com *.google.com *.google.it *.doubleclick.net emea-ducati.netmng.com *.facebook.net *.a8723.com u.logbor.com mm.markandmini.com ad13.adfarm1.adition.com s.yimg.jp b92.yahoo.co.jp track.adform.net aax-eu.amazon-adsystem.com cdn.cookielaw.org *.onetrust.com youtube.com cdn.hypemarks.com tags.srv.stackadapt.com; style-src-attr 'unsafe-inline' *.linkedin.com *.licdn.com *.google-analytics.com *.googleadservices.com *.google.com *.google.it *.doubleclick.net emea-ducati.netmng.com *.facebook.net *.a8723.com u.logbor.com mm.markandmini.com ad13.adfarm1.adition.com s.yimg.jp b92.yahoo.co.jp track.adform.net aax-eu.amazon-adsystem.com cdn.cookielaw.org *.onetrust.com youtube.com cdn.hypemarks.com tags.srv.stackadapt.com; style-src-elem 'self' 'unsafe-inline' assets.ducati.com fonts.googleapis.com adblockers.opera-mini.net *.linkedin.com *.licdn.com *.google-analytics.com *.googleadservices.com *.google.com *.google.it *.doubleclick.net emea-ducati.netmng.com *.facebook.net *.a8723.com u.logbor.com mm.markandmini.com ad13.adfarm1.adition.com s.yimg.jp b92.yahoo.co.jp track.adform.net aax-eu.amazon-adsystem.com cdn.cookielaw.org *.onetrust.com youtube.com cdn.hypemarks.com tags.srv.stackadapt.com *.awsducati.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' assets.ducati.com fonts.googleapis.com translate.googleapis.com *.linkedin.com *.licdn.com *.google-analytics.com *.googleadservices.com *.google.com *.google.it *.doubleclick.net emea-ducati.netmng.com *.facebook.net *.a8723.com u.logbor.com mm.markandmini.com ad13.adfarm1.adition.com s.yimg.jp b92.yahoo.co.jp track.adform.net aax-eu.amazon-adsystem.com cdn.cookielaw.org *.onetrust.com youtube.com cdn.hypemarks.com tags.srv.stackadapt.com *.awsducati.com 4 frame-ancestors https://www.cedars-sinai.org/ https://patients.mycslink.org/ https://patients-dev.mycslink.org/ https://patients-test.mycslink.org/ https://patients-stage.mycslink.org/ 4 frame-ancestors 'self' connectappypie.com googleapis.com reveal.clearbit.com; 4 default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' *.fonts.net analyticsssl.forcepoint.com *.licdn.com *.tiqcdn.com *.marketo.com *.marketo.net *.mktoresp.com *.demdex.net *.burly.io *.omtrdc.net *.llnwd.net *.tealiumiq.com *.googleadservices.com *.marinsm.com *.amazonaws.com *.quantserve.com *.facebook.net *.serving-sys.com *.google-analytics.com *.hirebridge.com *.websense.com *.bizographics.com *.linkedin.com *.cloudfront.net *.newrelic.com *.nr-data.net *.adnxs.com *.demandbase.com *.twitter.com *.omtrdc.net *.youtube.com static.ads-twitter.com *.company-target.com *.omniture.com *.doubleclick.net *.forcepoint.com *.google.com *.facebook.com bam.nr-data.net maps.gstatic.com *.getsmartcontent.com *.vidyard.com *.adroll.com s.ml-attr.com attr.ml-api.io *.driftt.com *.sharethis.com *.vimeo.com *.slideshare.net *.techvalidate.com *.gartner.com *.gstatic.com *.libsyn.com *.s3.amazonaws.com *.cdnbasket.net ids.cdnwidget.com app.vwo.com *.visualwebsiteoptimizer.com use.typekit.net p.typekit.net cdn.vwo-analytics.com dev-forcepoint.pantheonsite.io test-forcepoint.pantheonsite.io live-forcepoint.pantheonsite.io *.googleapis.com *.cloudflare.com activitymap.adobe.com *.consensu.org *.ubembed.com *.bizible.com *.theadex.com tag.aumago.com js.driftqa.com *.scribblecdn.net *.esg-global.com; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' pixel.cdnwidget.com *.tealiumiq.com *.google.com *.googleadservices.com *.doubleclick.net *.websense.com *.marinsm.com *.facebook.com *.quantserve.com *.google-analytics.com *.w55c.net *.marketo.com *.iasds01.com *.linkedin.com *.cloudfront.net *.forcepoint.com *.adnxs.com *.twitter.com t.co *.omtrdc.net tags.w55c.net *.demandbase.com *.company-target.com maps.gstatic.com tags.tiqcdn.com munchkin.marketo.net *.newrelic.com connect.facebook.net static.ads-twitter.com a.burly.io sjs.bizographics.com bam.nr-data.net snap.licdn.com https://websense.tt.omtrdc.net/m2/websense/mbox/json *.getsmartcontent.com *.adroll.com *.vidyard.com s.ml-attr.com attr.ml-api.io ml314.com *.ml314.com *.bing.com *.driftt.com *.crazyegg.com *.sharethis.com *.vimeo.com *.slideshare.net *.techvalidate.com *.gartner.com *.googletagmanager.com *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com app.vwo.com *.js.ubembed.com assets.ubembed.com js.driftt.com cdn.vwo-analytics.com *.s3.amazonaws.com s3.amazonaws.com dev-forcepoint.pantheonsite.io test-forcepoint.pantheonsite.io live-forcepoint.pantheonsite.io *.clearbit.com *.googleapis.com *.cloudflare.com https://activitymap.adobe.com/sc15/activitymap/index.js *.consensu.org *.bizible.com *.theadex.com tag.aumago.com ws.zoominfo.com *.redditstatic.com rules.quantcount.com tracking.g2crowd.com *.steelhousemedia.com *.scribblecdn.net *.esg-global.com *.6sc.co; img-src * data: *; connect-src 'self' app.vwo.com dpm.demdex.net websense.tt.omtrdc.net *.mktoresp.com *.cdnbasket.net ids.cdnwidget.com *.forcepoint.com sample-api-v2.crazyegg.com *.visualwebsiteoptimizer.com insight.adsrvr.org bam.nr-data.net *.tealiumiq.com live-evercurrent-clone.pantheonsite.io *.sharethis.com *.doubleclick.net *.theadex.com tag.aumago.com *.google-analytics.com *.6sc.co secure.adnxs.com; report-uri /admin/config/system/seckit/csp-report 4 default-src *; script-src 'unsafe-inline' 'unsafe-eval' *; style-src 'unsafe-inline' *; img-src http: https: data: 4 frame-ancestors 'self' https://www.renesas.cn http://www.renesas.cn 4 frame-ancestors *.ivanti.com *.ivanti.com.au *.ivanti.com.cn *.ivanti.com.sg *.ivanti.co.uk *.ivanti.co.jp *.ivanti.de *.ivanti.fr *.ivanti.it *.ivanti.es *.ivanti.ru *.ivanti.cz *.ivanti.pl *.ivanti.nl *.ivanti.lat 4 default-src 'self' 'unsafe-inline' www.pentair.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.pentair.com assets.adobedtm.com apps.bazaarvoice.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.cloudfront.net cdn.cookielaw.org cdn.curator.io st1.dialogtech.com googleads.g.doubleclick.net connect.facebook.net www.google.com www.googleadservices.com www.google-analytics.com maps.googleapis.com www.googletagmanager.com www.gstatic.com *.ss-omtrdc.net script.hotjar.com static.hotjar.com cdn.jsdelivr.net geolocation.onetrust.com polyfill.io cdn.roirevolution.com cdn.storepoint.co use.typekit.net www.youtube.com *.bazaarvoice.com *.taboola.com bat.bing.com *.criteo.net *.criteo.com *.affirm.com mpsnare.iesnare.com cdn.jst.ai tags.srv.stackadapt.com srv.stackadapt.com east.srv.stackadapt.com uw.srv.stackadapt.com eu.srv.stackadapt.com *.jst.ai view.ceros.com twin-iq.kickfire.com js.adsrvr.org insight.adsrvr.org *.salesforceliveagent.com *.force.com *.salesforce.com; style-src 'self' 'unsafe-inline' www.pentair.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.curator.io use.fontawesome.com fonts.googleapis.com placehold.it display.ugc.bazaarvoice.com tags.srv.stackadapt.com twin-iq.kickfire.com *.salesforceliveagent.com *.force.com; font-src 'self' data: www.pentair.com maxcdn.bootstrapcdn.com cdn.curator.io use.fontawesome.com fonts.gstatic.com use.typekit.net script.hotjar.com; connect-src 'self' www.pentair.com *.algolia.com *.algolia.net *.algolianet.com insights.algolia.io cdn.cookielaw.org api.curator.io dpm.demdex.net pentairmg.demdex.net stats.g.doubleclick.net www.facebook.com www.google-analytics.com www.googleapis.com *.hotjar.com *.omtrdc.net *.ss-omtrdc.net privacyportal.onetrust.com s7d2.scene7.com api.vimeo.com trc-events.taboola.com bat.bing.com *.affirm.com *.bazaarvoice.com cds.taboola.com tags.srv.stackadapt.com *.jst.ai pentairmgglobalstaging.112.2o7.net wss://ws4.hotjar.com twin-iq.kickfire.com js.adsrvr.org insight.adsrvr.org *.taboola.com *.salesforceliveagent.com wss://*.hotjar.com *.force.com; frame-src 'self' www.pentair.com *.doubleclick.net www.google.com vars.hotjar.com www.pentairpoolimages.com www.pentairpartners.com where-to-buy.co www.facebook.com pentairmg.demdex.net www.youtube.com gum.criteo.com *.affirm.com static.criteo.net *.bazaarvoice.com cdn.jst.ai view.ceros.com twin-iq.kickfire.com js.adsrvr.org insight.adsrvr.org *.salesforceliveagent.com *.adsrvr.org *.force.com; img-src * data:; media-src *; frame-ancestors 'self' www.pentair.com *.doubleclick.net www.google.com vars.hotjar.com www.pentairpoolimages.com www.pentairpartners.com where-to-buy.co www.facebook.com pentairmg.demdex.net www.youtube.com gum.criteo.com *.affirm.com static.criteo.net *.bazaarvoice.com cdn.jst.ai view.ceros.com twin-iq.kickfire.com *.salesforceliveagent.com *.force.com; 4 default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src * data: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.sprinklr.com; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com data: *.sprinklr.com; upgrade-insecure-requests; block-all-mixed-content; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; connect-src *; frame-src *; media-src * blob:; worker-src * blob:; 4 default-src 'self' 'unsafe-inline' *; 4 frame-ancestors 'self' rtvs.sk *.rtvs.sk *.dev.rtvs.sk rtvs.org *.rtvs.org 4 default-src 'self' https://*.hostwinds.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hostwinds.com https://*.googletagmanager.com https://*.google-analytics.com https://*.livechatinc.com https://*.sentry.io https://*.googleadservices.com https://google.com; style-src 'self' 'unsafe-inline' https://*.hostwinds.com https://*.livechatinc.com; img-src * data:; connect-src *; media-src *; object-src 'self' https://*.hostwinds.com https://*.livechatinc.com; frame-src 'self' https://*.hostwinds.com https://*.livechatinc.com https://iframe.videodelivery.net; frame-ancestors 'self' https://*.hostwinds.com https://*.livechatinc.com https://iframe.videodelivery.net; form-action 'self' https://*.hostwinds.com 4 frame-ancestors 'self' http://www.medscape.com https://www.medscape.com https://dusandbox.skipta.com https://doctorunite.com https://generationNP.com https://cardiologistconnect.com https://paunite.com https://cardiologistconnectsandbox.skipta.com https://next.brella.io/ 4 frame-src 'self' *.microfocus.com *.ubembed.com https://js.driftt.com https://bid.g.doubleclick.net https://optimize.google.com/ https://dev.visualwebsiteoptimizer.com https://www.facebook.com/ https://www.google.com/ https://www.youtube.com/ https://www.brighttalk.com/ https://bcove.video/ https://www.googletagmanager.com https://microfocuspartner.force.com https://www.linkedin.com/ https://platform.twitter.com/ https://www.research.net https://irs.tools.investis.com/ https://players.brightcove.net/ https://otp.tools.investis.com/ https://html5-player.libsyn.com/; frame-ancestors 'self' *.microfocus.com https://microfocus.lookbookhq.com https://microfocuspartner.force.com; 4 default-src 'self' 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' data: blob: *.sitecore.com *.sitecore.net *.hhogdev.com *.stylelabs.cloud *.googleapis.com *.gstatic.com *.azureedge.net *.bolddns.net; frame-src * 'self' 'unsafe-inline'; script-src * blob: data: 'self' 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'self' 'unsafe-inline'; script-src-attr * 'self' 'unsafe-inline'; style-src * 'self' 'unsafe-inline'; style-src-elem * 'self' 'unsafe-inline'; style-src-attr * 'self' 'unsafe-inline' data:; img-src * 'self' 'unsafe-inline' data:; font-src * data: 'self' 'unsafe-inline'; connect-src *; object-src 'none'; media-src * data: blob: 'unsafe-inline' 'unsafe-eval'; 4 default-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' maps.googleapis.com/ syndication.twitter.com/ ajax.aspnetcdn.com/ajax/jquery.validate/1.15.0/jquery.validate.min.js ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js analytics.twitter.com/i/adsct c.evidon.com/sitenotice/ c.evidon.com/geo/country.js code.jquery.com/jquery-1.10.2.min.js connect.facebook.net/en_US/fbevents.js d3js.org/d3.v3.min.js platform.twitter.com/widgets.js s.ytimg.com/yts/jsbin/www-widgetapi-vflJFa_jA/www-widgetapi.js snap.licdn.com/li.lms-analytics/insight.old.min.js snap.licdn.com/li.lms-analytics/insight.min.js static.ads-twitter.com/uwt.js www.google-analytics.com/analytics.js www.googletagmanager.com/gtm.js www.instagram.com/embed.js www.youtube.com/ cdnjs.cloudflare.com app.bowencraggs.com maps.googleapis.com/maps-api-v3/api/js/44/4/common.js connect.facebook.net/signals/config/; style-src 'report-sample' 'unsafe-inline' 'self' fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' www.google-analytics.com optoutapi.evidon.com; font-src 'self' fonts.gstatic.com; frame-src 'self' syndication.twitter.com/ irs.tools.investis.com otp.tools.investis.com platform.twitter.com www.instagram.com www.youtube.com; img-src 'report-sample' 'unsafe-inline' 'self' data: c.evidon.com www.linkedin.com i.ytimg.com l.evidon.com maps.googleapis.com maps.gstatic.com px.ads.linkedin.com syndication.twitter.com t.co www.facebook.com www.google-analytics.com www.googletagmanager.com p.adsymptotic.com c.evidon.com/sitenotice/images/evidon-change-alert.png; manifest-src 'self'; media-src 'self'; report-uri https://5f9932cfca69962525be30e3.endpoint.csper.io/; worker-src 'none'; 4 default-src 'self' *.transactcampus.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com *.cdn.ampproject.org *.unpkg.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.unpkg.com https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js *.assets.adobedtm.com https://bat.bing.com/bat.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://stats.g.doubleclick.net/; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.transactcampus.com *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com *.bat.bing.com/ *.transactcampus.com/ https://transactcampus.com/; media-src 'self' data: blob:; frame-src 'self' *.svc.dynamics.com *.youtube.com; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com *.linkedin.com *.google-analytics.com https://cors-anywhere.herokuapp.com/https://www.linkedin.com/talent/thirdPartyJobBoards/79c55724-9a68-4e33-bdba-2e90bfc6a55f; 4 default-src 'self' http://localhost:* https://*.supercharge-srp.co https://*.safeframe.googlesyndication.com https://tpc.googlesyndication.com; prefetch-src http://tpc.googlesyndication.com https://tpc.googlesyndication.com http://securepubads.g.doubleclick.net https://securepubads.g.doubleclick.net https://tags.tiqcdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://web.sol-data.com http://localhost:* https://*.jobsdb.com/ https://*.jobstreet.com/ https://*.jobstreet.co.id https://*.jobstreet.com.my https://*.jobstreet.com.ph https://*.jobstreet.com.sg https://*.supercharge-srp.co https://*.hotjar.com/ https://unpkg.com/ https://polyfill.io/ https://cdnjs.cloudflare.com https://cdn.ravenjs.com https://widget.intercom.io http://www.googletagservices.com https://www.googletagservices.com http://pagead2.googlesyndication.com https://pagead2.googlesyndication.com https://adservice.google.com https://securepubads.g.doubleclick.net http://tpc.googlesyndication.com https://tpc.googlesyndication.com https://adservice.google.com.au https://adservice.google.com.hk https://adservice.google.com.sg https://js.intercomcdn.com http://www.googletagmanager.com https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com https://www.googleadservices.com https://bat.bing.com https://connect.facebook.net https://googleads.g.doubleclick.net https://cdn.branch.io/ https://app.link/ https://www.google-analytics.com http://tags.tiqcdn.com https://tags.tiqcdn.com https://www.youtube.com https://s.ytimg.com https://*.useinsider.com; style-src 'unsafe-inline' 'self' http://localhost:* https://*.jobsdb.com/ https://*.jobstreet.com/ https://*.jobstreet.co.id https://*.jobstreet.com.my https://*.jobstreet.com.ph https://*.jobstreet.com.sg https://*.supercharge-srp.co https://fonts.googleapis.com/ https://tagmanager.google.com https://*.useinsider.com; img-src * data:; font-src 'self' https://*.jobsdb.com https://*.jobstreet.com/ https://*.jobstreet.co.id https://*.jobstreet.com.my https://*.jobstreet.com.ph https://*.jobstreet.com.sg https://*.supercharge-srp.co https://fonts.gstatic.com/ https://static.hotjar.com/ https://js.intercomcdn.com data:; connect-src 'self' https://www.seek.com.au/ http://www.seek.com.au.staging/ https://*.seek.com http://candidate-graphql-api-candy-shared-dev-active.ap-southeast-2.elasticbeanstalk.com/ http://localhost:* ws://localhost:* https://*.sol-data.com https://*.supercharge-srp.co:8080/ https://*.jobsdb.com/ http://*.jobsdb.com/ https://dpm.demdex.net/ https://*.jobstreet.com/ http://*.jobstreet.co.id http://*.jobstreet.com.my http://*.jobstreet.com.ph http://*.jobstreet.com.sg https://*.jobstreet.co.id https://*.jobstreet.com.my https://*.jobstreet.com.ph https://*.jobstreet.com.sg http://*.supercharge-srp.co https://*.supercharge-srp.co https://*.hotjar.com:*/ https://*.elasticbeanstalk.com:8080/ ws://*.hotjar.com/ wss://*.hotjar.com/ https://*.intercom.io wss://*.intercom.io https://securepubads.g.doubleclick.net https://csi.gstatic.com https://api2.branch.io/ https://app.link/ https://pagead2.googlesyndication.com https://*.useinsider.com; frame-src https://vars.hotjar.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://tpc.googlesyndication.com https://staticxx.facebook.com https://www.youtube.com https://*.useinsider.com https://*.safeframe.googlesyndication.com https://seekasia.demdex.net 4 frame-ancestors 'self' *.vice.com vicetv.com *.vicetv.com vicetv.nl vicetv.be vicesports.nl vicemoney.nl vicebelgique.com survey18.toluna.com *.viceops.net 4 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; 4 frame-ancestors 'self' http://wrapper.safe-installation.com/ https://wrapper.safe-installation.com/ *.888poker.de *.888slots.de *.safe-iplay.com *.safe-installation.com *.payoutscentral.com *.triple8holdem.com *.888.com *.secured-qa.com *.secured-registration.com *.secureutils.com *.images4us.com *.onlinepersonalmessages.com *.888sport.com *.888sport.es *.888sport.it *.888sport.dk *.888sport.ro *.888sport.se *.888sport.us *.888sport.de *.777.com *.personalinfoonline.com *.888.de *.888casino.com *.888poker.com *.888casino.dk *.888poker.dk *.888.de *.888casino.ro *.888poker.ro *.888casino.se *.888poker.se *.888casino.es *.888poker.es *.888casino.it *.888poker.it *.888casino.us *.888poker.us cmsp; report-uri https://888protech.report-uri.com/r/d/csp/reportOnly 4 default-src 'self'; script-src 'unsafe-inline' 'self' 'unsafe-eval' translate.googleapis.com translate.google.com ajax.cloudflare.com www.google-analytics.com www.googletagmanager.com deepknow.egoid.me static.geetest.com dn-staticdown.qbox.me api.geetest.com *.ronghub.com *.udesk.cn qiyukf.com c.cnzz.com s9.cnzz.com z12.cnzz.com https://imge1.bitzapp.top https://imge2.bitzapp.top https://imge3.bitzapp.top; style-src 'unsafe-inline' 'self' 'unsafe-eval' static.geetest.com translate.googleapis.com *.udesk.cn https://imge1.bitzapp.top https://imge2.bitzapp.top https://imge3.bitzapp.top; frame-src 'self' https://imge1.bitzapp.top https://imge2.bitzapp.top https://imge3.bitzapp.top *.bitz-service.com *.bitz.com *.bit-z.com *.bit-z.pro *.bitz.top *.bitz.so *.bitz.plus *.bitzdownload.com *.bitz.my *.bitz.al bitz.ge bitz.do *.bitz.ai *.bitz.bz *.bitz.info *.bitz.tech *.bitzhd.com *.bitz.cm *.hyjztc.cn *.bitzapp.top appad.ahighapp.com qiyukf.com *.udesk.cn; frame-ancestors *.bitz-service.com; font-src 'self' data: https://imge1.bitzapp.top https://imge2.bitzapp.top https://imge3.bitzapp.top; img-src 'self' data: blob: www.gxchaintop.org static.gxb.io translate.googleapis.com *.google.com bit-z-frontdesk.oss-cn-hongkong.aliyuncs.com www.gstatic.com static.geetest.com stats.g.doubleclick.net www.google-analytics.com sensors.ahighapi.com *.127.net qiyukf.com *.qiyukf.com *.bibidev.com *.udesk.cn z12.cnzz.com cnzz.mmstat.com sensors.bitzapp.top https://imge1.bitzapp.top https://imge2.bitzapp.top https://imge3.bitzapp.top; media-src 'self' static.geetest.com qiyukf.com *.bibidev.com *.127.net *.udesk.cn; connect-src 'self' *.gtapp.xyz wss://wsv2.bitzapp.top wss://*.s2.udesk.cn translate.googleapis.com stats.g.doubleclick.net www.google-analytics.com monitor.geetest.com api.geetest.com *.udesk.cn qiyukf.com sentry.ahighapi.com test-push-trade.biwebapi.com https://sensors.bitzapp.top https://ucapiv2.bitzapp.top https://otcapiv2.bitzapp.top https://appv2.bitzapp.top https://v2v2.bitzapp.top https://apiv2.bitzapp.top https://appv2.bitzapp.top wss://wsv2.bitzapp.top wss://pushser.bitzapp.top https://appv2.bitzapp.top 4 frame-ancestors 'self' experience.adobe.com invescogroup.experiencecloud.adobe.com 4 frame-ancestors 'self' *.lovecrafts.com 4 default-src * 'self' data: https: blob: 'unsafe-inline' 'unsafe-eval'; frame-src *; frame-ancestors https://*.offshore-energy.biz 4 frame-ancestors 'self' http://webvisor.com; 4 : upgrade-insecure-requests 4 frame-ancestors 'self' https://www.anglaisfacile.com https://www.francaisfacile.com https://www.tolearnenglish.com https://www.tolearnfrench.com https://www.allemandfacile.com https://www.espagnolfacile.com https://www.nlfacile.com https://www.italien-facile.com https://www.mesoutils.com https://www.mesexercices.com https://www.mathematiquesfaciles.com https://www.touslescours.com https://www.tolearnfrench.com https://*.tolearnfree.com; report-uri https://tolearnfree.report-uri.io/r/default/csp/enforce; base-uri 'self'; 4 default-src * 'self' data: 'unsafe-inline' 'unsafe-eval'; 4 frame-ancestors "self" www.charleskeith.com www.pedroshoes.com 4 script-src 'unsafe-inline' 'unsafe-eval' 'self' www.googletagmanager.com idtechex.bamboohr.com platform.twitter.com ssl.google-analytics.com www.googleadservices.com *.idtechex.com oss.maxcdn.com ie7-js.googlecode.com https://googleads.g.doubleclick.net https://translate.google.com https://translate.googleapis.com https://cdn.syndication.twimg.com www.google.com www.gstatic.com ajax.googleapis.com *.livechatinc.com app.chaport.com *.arcot.com *.verifiedbyvisa.com *.3dsecure-vrp.de *.cardinalcommerce.com *.securesuite.net *.securesuite.co.uk *.securecode.com *.citibank.com *.citibank.co.kr *.cardcenter.ch *.swisscard.ch *.icscards.nl *.sia.eu *.swedbank.se *.dnp-cdms.jp acs.cafis-paynet.jp *.hanacard.co.kr *.shinhancard.com *.wooricard.com *.hyundaicard.com *.wlp-acs.com *.dkb.de *.nab.com.au *.mbank.pl *.ccb.com.cn *.cmbchina.com *.bccard.com *.cartasi.it *.modirum.com *.paylife.at *.ctbcbank.com *.ocbc.com *.kbcard.com *.enfuce.com ws.zoominfo.com 4 default-src https: 'self' 'unsafe-inline' 'unsafe-eval' data: blob: 4 default-src https: wss: data: blob:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data: blob:; font-src https: data:; worker-src blob:; report-uri /csp-report 4 frame-ancestors 'self' tomshardware.fr www.tomshardware.fr tomsguide.fr www.tomsguide.fr cms.galaxiemedia.fr amp.tomsguide.fr amp.tomshardware.fr cdn.tomsguide.fr cdn.tomshardware.fr presence-pc.fr www.presence-pc.fr presence-pc.com www.presence-pc.com; 4 default-src 'self' *.staticflickr.com *.flickr.com maps.google.com api.rollbar.com *.nr-data.net api.mapbox.com blob:; script-src 'self' cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com js-agent.newrelic.com *.twitter.com *.twimg.com *.nr-data.net 'unsafe-eval' 'unsafe-inline' storage.googleapis.com api.mapbox.com https://*.uninfo.org blob: *.fontawesome.com; style-src 'self' *.flickr.com *.staticflickr.com cdnjs.cloudflare.com fonts.googleapis.com use.fontawesome.com *.twitter.com *.twimg.com 'unsafe-inline' api.mapbox.com *.fontawesome.com; img-src 'self' www.un.org.vn *.un.org gallery.mailchimp.com *.staticflickr.com https: data: blob:; media-src 'self' www.un.org.vn *.un.org; frame-src 'self' maps.google.com www.google.com www.youtube-nocookie.com www.youtube.com *.vimeo.com country-profiles.unstatshub.org; font-src 'self' fonts.googleapis.com use.fontawesome.com fonts.gstatic.com *.twitter.com *.twimg.com *.fontawesome.com; connect-src 'self' *.staticflickr.com *.flickr.com maps.google.com api.rollbar.com *.nr-data.net https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com www.google-analytics.com storage.googleapis.com wss://socket.push.al https://*.undg.org *.fontawesome.com; report-uri /report-csp-violation 4 frame-ancestors 'self';default-src 'unsafe-inline' *.google.com *.google.co.in stats.g.doubleclick.net p.adsymptotic.com privacy-policy.truste.com *.linkedin.com api.sharedcount.com n2.mouseflow.com c.6sc.co epsilon.6sense.com www.facebook.com *.hubspot.com fonts.gstatic.com *.phenom.com cdn.jsdelivr.net use.fontawesome.com fonts.googleapis.com cdnjs.cloudflare.com app-ab31.marketo.com connect.facebook.net j.6sc.co www.googletagmanager.com js.driftt.com munchkin.marketo.net snap.licdn.com www.google-analytics.com www.w3.org b.6sc.co edge.fullstory.com bat.bing.com js.hs-scripts.com js.hs-banner.com js.hs-analytics.net js.hsforms.net static.hotjar.com script.hotjar.com forms.hsforms.com js.hsleadflows.net cdn.mouseflow.com www.youtube.com stackpath.bootstrapcdn.com data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.phenom.com cdn.jsdelivr.net use.fontawesome.com fonts.googleapis.com cdnjs.cloudflare.com app-ab31.marketo.com connect.facebook.net j.6sc.co www.googletagmanager.com js.driftt.com munchkin.marketo.net snap.licdn.com www.google-analytics.com www.w3.org b.6sc.co edge.fullstory.com bat.bing.com js.hs-scripts.com js.hs-banner.com js.hs-analytics.net js.hsforms.net static.hotjar.com script.hotjar.com forms.hsforms.com js.hsleadflows.net cdn.mouseflow.com www.youtube.com stackpath.bootstrapcdn.com 4 frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com 4 default-src 'self' cdn-vsh.prague.eu;font-src 'self' cdn-vsh.prague.eu data: fonts.gstatic.com *.cachefly.net *.platnosci.pl www.praguecitytourism.cz www.praguecitytourism.com;connect-src 'self' cdn-vsh.prague.eu analytics.monkeytracker.cz maps.googleapis.com *.hotjar.com *.googlesyndication.com www3-prague-eu-test.fg.cz *.prague.eu *.google.com *.google.cz *.facebook.com *.doubleclick.net *.google-analytics.com www.praguecitytourism.cz www.praguecitytourism.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn-vsh.prague.eu maps.google.com *.googleapis.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.google.com *.googleadservices.com *.facebook.net *.imedia.cz *.hotjar.com *.adform.net *.doubleclick.net *.google.cz s.yimg.jp *.yahoo.co.jp *.cachefly.net *.payu.com *.platnosci.pl *.facebook.com *.cloudflare.com cdn.tiny.cloud *.gstatic.com www.praguecitytourism.cz www.praguecitytourism.com;form-action 'self' cdn-vsh.prague.eu *.facebook.com *.gpwebpay.com *.payu.com *.facebook.net *.platnosci.pl *.google-analytics.com tickets.colosseum.eu;frame-src 'self' cdn-vsh.prague.eu www.youtube.com *.hotjar.com *.doubleclick.net *.adform.net *.booking.com *.facebook.com *.issuu.com *.vimeo.com *.facebook.net *.rozhlas.cz *.imedia.cz app.powerbi.com;child-src 'self' cdn-vsh.prague.eu www.youtube.com *.hotjar.com *.doubleclick.net *.adform.net *.booking.com *.facebook.com *.issuu.com *.vimeo.com *.facebook.net *.rozhlas.cz *.imedia.cz app.powerbi.com;frame-ancestors 'self' cdn-vsh.prague.eu;img-src 'self' cdn-vsh.prague.eu data: *.gstatic.com *.googleapis.com *.googlecode.com www.googletagmanager.com www.google-analytics.com analytics.monkeytracker.cz *.doubleclick.net *.ggpht.com *.google.com *.imedia.cz *.facebook.com *.google.cz *.googlesyndication.com *.yahoo.co.jp www3-prague-eu-test.fg.cz *.prague.eu *.cachefly.net *.payu.com *.platnosci.pl *.tinymce.com *.seznam.cz www.praguecitytourism.cz www.praguecitytourism.com;style-src 'self' 'unsafe-inline' cdn-vsh.prague.eu fonts.googleapis.com analytics.monkeytracker.cz *.google.com *.hotjar.com *.cachefly.net *.payu.com *.platnosci.pl cdn.tiny.cloud www.praguecitytourism.cz www.praguecitytourism.com;object-src 'self' cdn-vsh.prague.eu 4 frame-ancestors 'self' https://duffandphelps.360learning.com 4 upgrade-insecure-requests; frame-ancestors 'none' 4 base-uri 'self'; style-src 'self'; script-src 'self' piwik.itzbund.de; object-src 'self' multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de; img-src 'self' piwik.itzbund.de *.tile.openstreetmap.org; font-src 'self'; frame-ancestors 'none' *.prod.gsb.bsi.in.bund.de ; upgrade-insecure-requests; 4 frame-ancestors 'self'; object-src 'none'; upgrade-insecure-requests; block-all-mixed-content 4 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net https://fp.zenaps.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.dwin1.com/ https://www.youtube.com/iframe_api https://s.ytimg.com https://assets.planethoster.com/ https://maps.googleapis.com/ https://ads2.adverline.com/ https://tags.dynamo.one/ https://smct.co/ https://apis.google.com/ https://widget.trustpilot.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/; img-src 'self' www.facebook.com data: https://www.planethoster.com/ https://assets.planethoster.com/ https://maps.gstatic.com/ https://smct.co/ https://www.google-analytics.com/; font-src 'self' data: fonts.gstatic.com https://assets.planethoster.com/; frame-src https://www.zenaps.com/ https://ads2.adverline.com/ https://staticxx.facebook.com/ https://www.google.com/ https://www.facebook.com/ https://player.vimeo.com https://www.youtube.com/ https://tags.dynamo.one/ https://smct.co/ https://accounts.google.com/ https://widget.trustpilot.com/; connect-src 'self' https://fp.zenaps.com/ https://assets.planethoster.com/ https://smct.co/ https://widget.trustpilot.com/ https://www.google-analytics.com/; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://assets.planethoster.com/; 4 base-uri 'self' *.nr-data.net; child-src blob:; connect-src 'self' wss://*.planetromeo.com wss://*.hunqz.com *.facebook.com *.gstatic.com *.googlesyndication.com *.planetromeo.com *.doubleclick.net *.google-analytics.com *.nr-data.net *.smaato.net *.smaato.com *.maptiler.com *.report-uri.com wss://*.firebaseio.com *.googleapis.com *.zendesk.com; font-src 'self' *.gstatic.com *.typekit.net data:; form-action 'self' *.planetromeo.com google.com; frame-ancestors *.romeo.com *.planetromeo.com *.hunqz.com; frame-src 'self' *.romeo.com *.planetromeo.com *.hunqz.com recaptcha.net *.doubleclick.net *.google.com *.googlesyndication.com *.blufm.de blufm.de winq.nl *.firebaseio.com *.youtube.com *.facebook.com; img-src https: data: blob: *.smaato.net; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ampproject.org *.doubleclick.net *.googlesyndication.com *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ai *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gp *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.ms *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vg *.google.vu *.google.ws *.google-analytics.com *.gstatic.com *.googletagmanager.com *.googletagservices.com recaptcha.net *.newrelic.com *.nr-data.net *.siftscience.com *.smaato.net *.firebaseio.com *.youtube.com *.ytimg.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.typekit.net; worker-src 'self' blob:; default-src 'self' *.planetromeo.com *.hunqz.com *.googlesyndication.com; 4 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.parp.gov.pl https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://connect.facebook.net https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://snap.licdn.com https://stats.g.doubleclick.net; 4 default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' styles.wienerstadtwerke.at *.youtube.com *.ytimg.com assets.adobedtm.com www.google-analytics.com www.google.com www.gstatic.com ajax.googleapis.com maps.googleapis.com *.vimeocdn.com app.onlim.com chatbot.wlb.at openstreetmap.org *.openstreetmap.org polyfill.io *.virtualq.io walls.io; connect-src 'self' styles.wienerstadtwerke.at api.wstw.at *.service.wienernetze.at service.wienernetze.at service.wienerstadtwerke.at *.api.wienenergie.at api.wienenergie.at *.wienit.at routenplaner.verkehrsauskunft.at www.google-analytics.com *.addthis.com *.vimeo.com vimeo.com *.onlim.com wss://cs.onlim.com wss://app.onlim.com/api/cs/ws onlim-chatbot-production.s3.amazonaws.com wss://api.onlim.com/cs/ws chatbot.wlb.at *.arcgis.com *.arcgisonline.com wtb.maptiles.arcgis.com; img-src 'self' blob: data: styles.wienerstadtwerke.at *.upstream-mobility.at *.wienit.at chatbot.wlb.at csi.gstatic.com *.ytimg.com maps.googleapis.com maps.gstatic.com *.wien.gv.at *.2o7.net *.omtrdc.net *.vimeocdn.com *.openstreetmap.org app.onlim.com dacodi-production.s3.amazonaws.com onlim-base.s3.eu-central-1.amazonaws.com onlim-chatbot-production.s3.eu-central-1.amazonaws.com *.arcgisonline.com *.fluidtime.com maps.wien.gv.at; style-src 'unsafe-inline' 'self' styles.wienerstadtwerke.at fonts.googleapis.com app.onlim.com; font-src 'self' styles.wienerstadtwerke.at fonts.gstatic.com app.onlim.com chatbot.wlb.at; frame-src 'self' mailto: service.wienerstadtwerke.at *.friedhoefewien.at www.bestattungwien.at www.google.com *.youtube.com *.vimeo.com vimeo.com www.whatchado.com app.onlim.com *.virtualq.io *.walls.io walls.io *.issuu.com issuu.com video.eko.com ubscal.seeyou.at; media-src 'self' data: app.onlim.com 4 frame-ancestors 'self' https://*.experiencecloud.adobe.com https://experiencecloud.adobe.com https://experience.adobe.com 4 frame-ancestors 'self' https://agcovirtualshowroom.com https://www.agcovirtualshowroom.com; 4 default-src 'self'; block-all-mixed-content; script-src 'self' 'unsafe-inline' https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net https://connect.facebook.net https://bat.bing.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jtl-software.com https://jira.jtl-software.de https://maps.googleapis.com https://www.youtube.com https://stats.jtl-software.de https://www.google.com https://www.gstatic.com https://consent.jtl-software.de https://snap.licdn.com https://tpc.googlesyndication.com data:; img-src 'self' https://i.ytimg.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.google.de https://bat.bing.com https://www.facebook.com https://bat.bing.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://www.linkedin.com https://bilder.jtl-software.de https://cdn.jtl-software.com https://lh3.ggpht.com https://geo1.ggpht.com https://geo2.ggpht.com https://geo3.ggpht.com https://cbks0.googleapis.com/ https://geo0.ggpht.com/ https://khms0.googleapis.com/ https://khms1.googleapis.com/ https://maps.googleapis.com/ https://maps.gstatic.com/ https://www.jtl-software.de https://stats.jtl-software.de https://www.google.com https://img.youtube.com https://consent.jtl-software.de https://www.google.ch https://www.google.de https://www.google.at https://www.google.pl https://www.google.com.ua https://www.google.com.pk https://www.google.hu https://www.google.co.uk https://www.google.dk https://www.google.br https://www.google.it https://www.google.ae https://www.google.ca https://www.google.hr https://www.google.com.au https://www.google.sk https://www.google.es https://www.google.ie https://www.googletagmanager.com https://www.google.com.tr https://www.google.cz https://www.google.be https://www.google.co.in https://www.google.ge https://www.google.nl https://www.google.lu https://www.google.fr data:; style-src 'self' 'unsafe-inline' https://cdn.jtl-software.com https://fonts.googleapis.com https://www.google.com https://consent.jtl-software.de; font-src 'self' https://cdn.jtl-software.com https://fonts.gstatic.com https://fonts.googleapis.com data:; frame-src 'self' https://bid.g.doubleclick.net https://www.facebook.com/ https://www.youtube.com https://www.google.com https://jira.jtl-software.de https://consent.jtl-software.de; form-action 'self' https://kundencenter.jtl-software.de https://jtl-software.us9.list-manage.com https://checkout.jtl-software.com/ https://www.facebook.com; base-uri 'self'; connect-src 'self' https://adservice.google.com https://bat.bing.com https://www.facebook.com https://stats.g.doubleclick.net/ https://www.google-analytics.com https://stats.jtl-software.de https://consent.jtl-software.de; manifest-src 'self'; media-src 'self'; worker-src 'self' https://www.google.com; frame-ancestors 'self'; report-uri https://report.api.jtl-software.com/csp/; 4 upgrade-insecure-requests; form-action 'self' 4 font-src *;img-src * data:; 4 default-src https: wss:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data: 4 frame-src api.xprt.com *.api.xprt.com extension.xprt.com *.extension.xprt.com xprt.com *.xprt.com energy-xprt.com *.energy-xprt.com agriculture-xprt.com *.agriculture-xprt.com environmental-expert.com *.environmental-expert.com *.medical-xprt.com medical-xprt.com google.com *.google.com google.es *.google.es ubembed.com *.ubembed.com braintreegateway.com *.braintreegateway.com newrelic.com *.newrelic.com *.gstatic.com *.googlesyndication.com *.googlesyndication.com iperceptions.com *.iperceptions.com doubleclick.net *.doubleclick.net vimeo.com *.vimeo.com youtube.com *.youtube.com placeholder.com *.placeholder.com dailymotion.com *.dailymotion.com d20854696ijsuu.cloudfront.net *.d20854696ijsuu.cloudfront.net d3c0q80nmylf81.cloudfront.net *.d3c0q80nmylf81.cloudfront.net d3pcsg2wjq9izr.cloudfront.net *.d3pcsg2wjq9izr.cloudfront.net dpjzd8xd615dp.cloudfront.net *.dpjzd8xd615dp.cloudfront.net adservice.google.com *.adservice.google.com cardinalcommerce.com *.cardinalcommerce.com paypal.com *.paypal.com *.d35rpq4gusjz9h.cloudfront.net d35rpq4gusjz9h.cloudfront.net; frame-ancestors 'self' *.environmental-expert.com *.xprt.com *.agriculture-xprt.com *.energy-xprt.com *.medical-xprt.com environmental-expert.com xprt.com agriculture-xprt.com energy-xprt.com medical-xprt.com 4 default-src https://s3.amazonaws.com/tmp.prod.crm.talent-community-assets/34730_TalentCommunity_30a2a17f-3c34-4dbe-a11c-065ccbc99e9a_logo-radancy-color-no-tag.png http://localhost:5500 https://www.googleoptimize.com http://localhost https://radancy.dev https://*.radancy.com https://*.gstatic.com https://*.truste.com https://*.twitter.com https://*.talentbrew.com https://www.radancy.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com data: https://*.cloudflare.com https://*.tmpwebeng.com https://*.licdn.com https://*.ads-twitter.com https://*.facebook.net https://*.ads.linkedin.com https://*.co https://*.adsymptotic.com https://www.google.com https://www.facebook.com https://*.google.com https://*.g.doubleclick.net https://go.pardot.com/ 'unsafe-inline' 'unsafe-eval' https://*.talentbrew.io https://*.doubleclick.net/ https://*.googleapis.com ; script-src https://s3.amazonaws.com/tmp.prod.crm.talent-community-assets/34730_TalentCommunity_30a2a17f-3c34-4dbe-a11c-065ccbc99e9a_logo-radancy-color-no-tag.png http://localhost:5500 https://www.googleoptimize.com http://localhost https://radancy.dev https://*.radancy.com https://d1emzqdvia1vut.cloudfront.net/2.6.1/sp.js https://*.gstatic.com https://*.truste.com https://*.twitter.com https://*.talentbrew.com https://www.radancy.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com data: https://*.cloudflare.com https://*.tmpwebeng.com https://*.licdn.com https://*.ads-twitter.com https://*.facebook.net https://*.ads.linkedin.com https://*.co https://*.adsymptotic.com https://www.google.com https://www.facebook.com https://*.google.com https://*.g.doubleclick.net https://go.pardot.com/ 'unsafe-inline' 'unsafe-eval' https://*.talentbrew.io https://*.doubleclick.net/ https://*.googleapis.com ; frame-src https://s3.amazonaws.com/tmp.prod.crm.talent-community-assets/34730_TalentCommunity_30a2a17f-3c34-4dbe-a11c-065ccbc99e9a_logo-radancy-color-no-tag.png http://localhost:5500 https://www.googleoptimize.com http://localhost https://radancy.dev https://*.radancy.com https://*.gstatic.com https://*.truste.com https://*.twitter.com https://*.talentbrew.com https://www.radancy.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com data: https://*.cloudflare.com https://*.tmpwebeng.com https://*.licdn.com https://*.ads-twitter.com https://*.facebook.net https://*.ads.linkedin.com https://*.co https://*.adsymptotic.com https://www.google.com https://www.facebook.com https://*.google.com https://*.g.doubleclick.net https://go.pardot.com/ 'unsafe-inline' 'unsafe-eval' https://*.talentbrew.io https://*.doubleclick.net/ https://*.googleapis.com ; connect-src https://s3.amazonaws.com/tmp.prod.crm.talent-community-assets/34730_TalentCommunity_30a2a17f-3c34-4dbe-a11c-065ccbc99e9a_logo-radancy-color-no-tag.png http://localhost:5500 https://www.googleoptimize.com http://localhost https://radancy.dev https://*.radancy.com https://*.gstatic.com https://*.truste.com https://*.twitter.com https://*.talentbrew.com https://www.radancy.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com data: https://*.cloudflare.com https://*.tmpwebeng.com https://*.licdn.com https://*.ads-twitter.com https://*.facebook.net https://*.ads.linkedin.com https://*.co https://*.adsymptotic.com https://www.google.com https://www.facebook.com https://*.google.com https://*.g.doubleclick.net https://go.pardot.com/ 'unsafe-inline' 'unsafe-eval' https://*.talentbrew.io https://*.doubleclick.net/ https://*.googleapis.com ; img-src https://s3.amazonaws.com/tmp.prod.crm.talent-community-assets/34730_TalentCommunity_30a2a17f-3c34-4dbe-a11c-065ccbc99e9a_logo-radancy-color-no-tag.png http://localhost:5500 https://www.googleoptimize.com http://localhost https://radancy.dev https://*.radancy.com https://*.gstatic.com https://*.truste.com https://*.twitter.com https://*.talentbrew.com https://www.radancy.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com data: https://*.cloudflare.com https://*.tmpwebeng.com https://*.licdn.com https://*.ads-twitter.com https://*.facebook.net https://*.ads.linkedin.com https://*.co https://*.adsymptotic.com https://www.google.com https://www.facebook.com https://*.google.com https://*.g.doubleclick.net https://go.pardot.com/ 'unsafe-inline' 'unsafe-eval' https://*.talentbrew.io https://*.doubleclick.net/ https://*.googleapis.com ; font-src https://s3.amazonaws.com/tmp.prod.crm.talent-community-assets/34730_TalentCommunity_30a2a17f-3c34-4dbe-a11c-065ccbc99e9a_logo-radancy-color-no-tag.png http://localhost:5500 https://www.googleoptimize.com http://localhost https://radancy.dev https://*.radancy.com https://*.gstatic.com https://*.truste.com https://*.twitter.com https://*.talentbrew.com https://www.radancy.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com data: https://*.cloudflare.com https://*.tmpwebeng.com https://*.licdn.com https://*.ads-twitter.com https://*.facebook.net https://*.ads.linkedin.com https://*.co https://*.adsymptotic.com https://www.google.com https://www.facebook.com https://*.google.com https://*.g.doubleclick.net https://go.pardot.com/ 'unsafe-inline' 'unsafe-eval' https://*.talentbrew.io https://*.doubleclick.net/ https://*.googleapis.com ; style-src https://s3.amazonaws.com/tmp.prod.crm.talent-community-assets/34730_TalentCommunity_30a2a17f-3c34-4dbe-a11c-065ccbc99e9a_logo-radancy-color-no-tag.png http://localhost:5500 https://www.googleoptimize.com http://localhost https://radancy.dev https://*.radancy.com https://*.gstatic.com https://*.truste.com https://*.twitter.com https://*.talentbrew.com https://www.radancy.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com data: https://*.cloudflare.com https://*.tmpwebeng.com https://*.licdn.com https://*.ads-twitter.com https://*.facebook.net https://*.ads.linkedin.com https://*.co https://*.adsymptotic.com https://www.google.com https://www.facebook.com https://*.google.com https://*.g.doubleclick.net https://go.pardot.com/ 'unsafe-inline' 'unsafe-eval' https://*.talentbrew.io https://*.doubleclick.net/ https://*.googleapis.com ; 4 base-uri 'none'; connect-src 'self' https://*.cbc.be https://*.clicktale.com https://*.clicktale.net https://*.kbc.be https://*.kbc.com https://*.kbcbrussels.be https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://*.omtrdc.net https://*.vee24.com https://dpm.demdex.net https://kbc.symex.be https://uat.serversidegraphics.com https://uk.personalcard.net https://www.facebook.com wss://*.vee24.com https://*.contentsquare.net https://admp-tc-mediahuis.adtlgc.com https://aapmbea2.be.srv.dev.sys:8200 https://*.contentsquare.net; child-src 'self' blob: https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc-group.com https://*.omniture.com https://*.vee24.com https://assets.adobedtm.com https://kbcgroup.demdex.net https://uat.serversidegraphics.com https://uk.personalcard.net https://www.google.com/recaptcha/ https://www.youtube-nocookie.com https://*.instagram.com https://kbc.symex.be https://*.trustarc.com https://code3.adtlgc.com/ https://scdn.cxense.com/; default-src 'none'; font-src 'self' data: https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://fonts.googleapis.com https://fonts.gstatic.com https://static.vee24.com; frame-ancestors 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbcgroup.com https://*.kbcgroup.eu https://*.vee24.com https://*.adobe.com; frame-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc-group.com https://*.omniture.com https://*.vee24.com https://assets.adobedtm.com https://kbcgroup.demdex.net https://uat.serversidegraphics.com https://uk.personalcard.net https://www.google.com/recaptcha/ https://www.youtube-nocookie.com https://*.instagram.com https://kbc.symex.be https://*.trustarc.com https://code3.adtlgc.com/ https://scdn.cxense.com/; img-src 'self' data: https://*.cbc.be https://*.clicktale.com https://*.clicktale.net https://*.contentsquare.net https://*.doubleclick.net https://*.facebook.com https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://*.omtrdc.net https://*.adobemc.com https://action.metaffiliation.com https://*.instagram.com https://scontent.cdninstagram.com https://cbc.azureedge.net https://cm.everesttech.net https://csi.gstatic.com https://*.linkedin.com https://dpm.demdex.net https://edash.azureedge.net https://invest.azureedge.net https://kbc.azureedge.net https://maps.googleapis.com https://maps.gstatic.com https://mba.azureedge.net https://mbj.azureedge.net https://pixel.everesttech.net https://scomcluster.cxense.com https://secure.adnxs.com https://static.vee24.com https://t.co https://touch.azureedge.net https://uat.serversidegraphics.com https://uk.personalcard.net https://www.google.be https://www.google.com https://www.googleadservices.com https://img.youtube.com https://*.truste.com https://*.trustarc.com https://cdn.publish.macrobond.net https://*.cxense.com https://*.contentsquare.net; media-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://cbc.azureedge.net https://edash.azureedge.net https://invest.azureedge.net https://kbc.azureedge.net https://mba.azureedge.net https://mbj.azureedge.net https://touch.azureedge.net; object-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be; script-src 'self' data: blob: 'unsafe-eval' 'unsafe-inline' https://*.cbc.be https://*.clicktale.com https://*.clicktale.net https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://*.kbc-group.com https://*.omtrdc.net https://adhese.mediahuis.be https://analytics.twitter.com https://*.instagram.com https://scontent.cdninstagram.com https://assets.adobedtm.com https://connect.facebook.net https://dpm.demdex.net https://googleads.g.doubleclick.net https://maps.googleapis.com https://pixel.everesttech.net https://platform.twitter.com https://s.ytimg.com https://secure.adnxs.com https://snap.licdn.com https://static.ads-twitter.com https://static.vee24.com https://web.vee24.com https://www.everestjs.net https://www.google.com/recaptcha/ https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.youtube-nocookie.com https://www.youtube.com https://t.contentsquare.net https://contentsquare.com https://code3.adtlgc.com https://*.trustarc.com https://*.truste.com https://*.cxense.com https://shared.mediahuis.be https://t.contentsquare.net https://contentsquare.com https://*.contentsquare.com; style-src 'self' 'unsafe-inline' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbc.com https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://cdn.tt.omtrdc.net https://fonts.googleapis.com https://static.vee24.com; manifest-src 'self' https://*.cbc.be https://*.kbc.be https://*.kbcbrussels.be https://*.kbceconomics.be https://*.kbceconomics.com https://*.kbclease.lu https://*.kching.be https://cdn.tt.omtrdc.net https://fonts.googleapis.com https://static.vee24.com; worker-src blob:; 4 default-src 'self' https://*.extole.io https://*.xtlo.net; object-src 'self'; child-src 'self' ujet.co *.ujet.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.forter.com *.go2bank.com *.fuelcdn.com *.exacttarget.com *.adobe.com *.tvsquared.com ujet.co *.ujet.co google-analytics.com *.google-analytics.com trk.clinch.co *.trk.clinch.co cdn.clinch.co *.clinch.co kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com *.salesforceliveagent.com *.hypemarks.com websdk.appsflyer.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.adobecqms.net *.googleadservices.com *.greendot.com greendot.com *.googletagmanager.com googletagmanager.com *.facebook.com facebook.com *.bing.com s.ytimg.com connect.facebook.net assets.adobedtm.com www.youtube.com storify.com player.vimeo.com *.livefyre.com *.everesttech.net *.demdex.net *.omtrdc.net https://*.extole.io https://*.xtlo.net https://api.cloudsponge.com; connect-src 'self' *.go2bank.com *.google-analytics.com *.appsflyer.com *.go2bank.com *.appsflyer.com go2bank.sjv.io kampyle.com *.kampyle.com mobileapi.locatorsearch.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com vimeo.com *.vimeo.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.adobecqms.net *.googleadservices.com s.ytimg.com connect.facebook.net storify.com *.fyre.co *.greendot.com greendot.com *.googletagmanager.com googletagmanager.com *.facebook.com facebook.com *.bing.com s.ytimg.com connect.facebook.net assets.adobedtm.com www.youtube.com storify.com player.vimeo.com *.livefyre.com *.everesttech.net *.demdex.net *.omtrdc.net https://*.cloudsponge.com https://*.extole.io https://*.xtlo.net; img-src 'self' i.ytimg.com *.go2bank.com *.tvsquared.com google-analytics.com *.google-analytics.com i.vimeocdn.com www.google.co.in *.google.co.in kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com *.force.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.adobecqms.net *.googleadservices.com *.greendot.com greendot.com *.googletagmanager.com googletagmanager.com *.facebook.com facebook.com *.bing.com s.ytimg.com connect.facebook.net assets.adobedtm.com www.youtube.com storify.com cdn.livefyre.com bootstrap.livefyre.com player.vimeo.com *.livefyre.com *.everesttech.net *.demdex.net *.omtrdc.net data: blob: https://*.extole.io https://*.xtlo.net data: https://api.cloudsponge.com https://*.walmartmoneycard.com ; style-src 'self' 'unsafe-inline' *.exacttarget.com kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.greendot.com *.adobecqms.net *.googleadservices.com cdn.livefyre.com maxcdn.bootstrapcdn.com *.bootstrapcdn.com https://*.extole.io https://*.xtlo.net https://fonts.googleapis.com https://api.cloudsponge.com; font-src 'self' data: kampyle.com *.appsflyer.com *.kampyle.com use.typekit.net *.use.typekit.net *.googleapis.com *.gstatic.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.greendot.com *.adobecqms.net *.livefyre.com https://*.extole.io https://*.xtlo.net https://fonts.gstatic.com https://api.cloudsponge.com; frame-src 'self' *.pardot.com *.go2bank.com ujet.co *.ujet.co kampyle.com *.kampyle.com *.googleapis.com *.gstatic.com *.facebook.com facebook.com *.pxf.io idsync.rlcdn.com logs-01.loggly.com tapestry.tapad.com ojrq.net *.impactradius-event.com *.hypemarks.com *.adsrvr.org *.xg4ken.com *.google.com *.doubleclick.net *.greendot.com *.adobecqms.net www.youtube.com player.vimeo.com *.demdex.net trk.clinch.co *.trk.clinch.co cdn.clinch.co *.clinch.co cdn-gdc.com *.cdn-gdc.com; frame-ancestors 'self' https://*.greendot.com https://*.go2bank.com https://*.walmartmoneycard.com;; 4 form-action https:; upgrade-insecure-requests 4 frame-ancestors 'self' *.qfc.cn *.tnc.com.cn www.zhidaoai.com *.aliyuncs.com *.aliyun.com *.ctcn.com.cn 4 default-src * 'unsafe-inline' 'unsafe-eval' data:; media-src * blob:; child-src * blob:; report-uri /report-csp-violation 4 frame-ancestors 'self' *.directnic.net 4 block-all-mixed-conten 4 upgrade-insecure-requests; frame-ancestors 'self' *.magenta.at *.t-mobile.at https://www.youtube.com; 4 frame-ancestors http://webvisor.com 4 default-src 'self' blob: https://*.map.qq.com ; connect-src 'self' https://*.mapbox.com https://*.tiles.mapbox.com https://*.google-analytics.com https://*.doubleclick.net https://*.gstatic.com https://*.googlesyndication.com https://translate.googleapis.com https://*.parkopedia-ppds.com https://*.google.com https://slack.com https://business.parkopedia.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.google.com https://*.google.cn https://*.tiles.mapbox.com https://*.map.baidu.com https://*.baidu.com https://*.bdstatic.com https://*.gtimg.com https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.googletagmanager.com https://*.googleadservices.com https://*.gstatic.com https://*.googleapis.com https://*.g.doubleclick.net https://*.googlesyndication.com https://*.googletagservices.com https://*.mapbox.com https://*.stripe.com https://*.adroll.com https://*.workable.com https://*.ampproject.org https://browser-update.org https://*.bootstrapcdn.com https://*.fuelcdn.com https://cdn.datatables.net https://code.jquery.com https://cdnjs.cloudflare.com https://*.fontawesome.com https://cdn.jsdelivr.net https://code.highcharts.com https://www.recaptcha.net https://*.google.com https://*.google.gr;script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.google.com https://*.google.cn https://*.tiles.mapbox.com https://*.map.baidu.com https://*.baidu.com https://*.bdstatic.com https://*.gtimg.com https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.googletagmanager.com https://*.googleadservices.com https://*.gstatic.com https://*.googleapis.com https://*.g.doubleclick.net https://*.googlesyndication.com https://*.googletagservices.com https://*.mapbox.com https://*.stripe.com https://*.adroll.com https://*.workable.com https://*.ampproject.org https://browser-update.org https://*.bootstrapcdn.com https://*.fuelcdn.com https://cdn.datatables.net https://code.jquery.com https://cdnjs.cloudflare.com https://*.fontawesome.com https://cdn.jsdelivr.net https://code.highcharts.com https://www.recaptcha.net https://*.google.com https://*.google.gr;style-src 'self' 'unsafe-inline' https://cdn.datatables.net https://*.fuelcdn.com https://*.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.googleapis.com https://*.fontawesome.com https://*.tiles.mapbox.com https://*.gstatic.com https://*.mapbox.com https://unpkg.com;font-src 'self' 'unsafe-inline' chrome-extension data: https: https://*.fontawesome.com http://fonts.gstatic.com;img-src 'self' blob: data: https: http://p.parkopedia.com http://p.parkopedia.cn http://*.openstreetmap.org;frame-src 'self' https://*.g.doubleclick.net https://*.qq.com https://*.google.com https://*.stripe.com https://*.googlesyndication.com https://*.parkopedia.com https://*.parkopedia.co.uk https://*.dcos.parkopedia.com https://*.localhost.com https://*.localhost.co.uk https://www.recaptcha.net;object-src blob: data: https://*.qq.cn https://*.qq.com https://*.map.qq.com https://*.localhost.com https://*.parkopedia.com;report-uri https://csp.parkopedia.com/api/csppolicyreport/?apiver=23&cid=avalon_iu4ryufghgjrf 4 default-src 'self'; upgrade-insecure-requests;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pos.baidu.com https://www.eet-china.com https://static-eetc.oss-cn-shenzhen.aliyuncs.com https://dup.baidustatic.com https://site.eet-china.com https://apps.bdimg.com https://www.googletagmanager.com https://hm.baidu.com https://www.googletagservices.com https://www.google-analytics.com https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com https://adservice.google.com https://res.wx.qq.com; style-src 'unsafe-inline' https:;font-src https:; img-src data: https:;connect-src https:;frame-src https:;media-src https: 4 default-src 'self' cdn.register.to 'unsafe-eval' https:; font-src 'unsafe-inline' https: data:; img-src 'unsafe-inline' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.register.to tld.register.to cdn.ywxi.net www.google-analytics.com seal.websecurity.norton.com s3-us-west-2.amazonaws.com www.trustedsite.com cdn.jsdelivr.net www.google.com cdn.datatables.net https:; style-src 'unsafe-inline' https:; manifest-src 'self' cdn.register.to 'unsafe-eval' https:; 4 frame-ancestors 'self' *.betssongroupaffiliates.com 4 frame-ancestors *.officiallondontheatre.com uktheatre.org *.theatretokens.com *.solt.co.uk *.theatreartists.fund *.theatrehelpline.org *.theatremeansbusiness.info; default-src https: data: wss: 'unsafe-inline' 'unsafe-eval' 4 default-src 'self' wibu.com *.wibu.com 'unsafe-inline' 'unsafe-eval' *.brighttalk.com *.adobe.com *.wibu.us *.surveymonkey.com *.brightcove.net *.wibu.com *.typo3.org *.googleapis.com www.google-analytics.com *.google.com *.youtube.com *.youtube-nocookie.com *.youtube.de *.ytimg.com *.baidu.com *.pardot.com *.joomag.com *.cleverreach.de *.cloudfront.net *.amazonaws.com *.hubspot.com *.gstatic.com *.iiconsortium.org data:; img-src * data:; font-src 'self' data: *.wibu.com *.gstatic.com; frame-src 'self' *.wibu.com www.wibu.com *.googleapis.com www.google-analytics.com *.google.com *.google.de *.google.fr *.google.co.uk *.youtube.com *.youtube-nocookie.com *.youtube.de *.ytimg.com *.baidu.com *.joomag.com *.surveymonkey.com *.brighttalk.com 4 frame-ancestors *.ia.ca *.inalco.com *.ia.iafg.net 4 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; 4 upgrade-insecure-requests; report-uri /api/csp-report; base-uri 'none'; object-src 'none'; worker-src blob:; script-src 'unsafe-inline' 'unsafe-eval' 'self' sdk.listenlive.co players.brightcove.net *.krxd.net js-agent.newrelic.com bam.nr-data.net vjs.zencdn.net www.googletagmanager.com www.google-analytics.com www.googleadservices.com www.googletagservices.com console.googletagservices.com adservice.google.com storage.googleapis.com www.google.com *.2mdn.net optimize.google.com adservice.google.com adservice.google.ca googleads.g.doubleclick.net securepubads.g.doubleclick.net *.googlesyndication.com cdn.ampproject.org stats.g.doubleclick.net tagmanager.google.com imasdk.googleapis.com www.gstatic.com connect.facebook.net www.instagram.com cdn.syndication.twimg.com platform.twitter.com *.twitch.tv www.tiktok.com *.ibytedtos.com *.tiktokcdn.com www1.journaldemontreal.com www.youtube.com ping.chartbeat.com static.chartbeat.com static2.chartbeat.com *.hotjar.com *.hotjar.io cdn.jwplayer.com ssl.p.jwpcdn.com *.qub.ca insights.algolia.io s0.2mdn.net/instream/video/client.js *.scorecardresearch.com code.jquery.com ajax.googleapis.com s1.quebecormedia.com static.freeskreen.com sb.freeskreen.com 4 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.rubensteintech.com https://static.hotjar.com https://script.hotjar.com https://www.googletagmanager.com https://dnn506yrbagrg.cloudfront.net https://www.google-analytics.com https://uk1.siteimprove.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://fast.wistia.com https://script.crazyegg.com https://js.hs-scripts.com https://js.hs-banner.com https://s3.amazonaws.com https://js.hs-analytics.net https://js.hsforms.net https://forms.hsforms.com https://tagmanager.google.com https://consent.cookiebot.com; style-src 'self' 'unsafe-inline' https://cloud.typenetwork.com https://hello.myfonts.net https://fonts.googleapis.com https://tagmanager.google.com; font-src 'self' data: https://*.wistia.com https://cloud.typenetwork.com https://static.hotjar.com https://fonts.gstatic.com; img-src 'self' https://insights.hotjar.com https://static.hotjar.com https://analytics.rubensteintech.com https://www.google-analytics.com https://uk1.siteimprove.com https://www.googletagmanager.com https://maps.gstatic.com https://maps.googleapis.com https://embedwistia-a.akamaihd.net https://fast.wistia.com https://embed-fastly.wistia.com https://user-event-tracker.crazyegg.com https://track.hubspot.com https://forms.hubspot.com https://10144.global.siteimproveanalytics.io https://ssl.gstatic.com https://www.gstatic.com data: https://bclplaw.vuturevx.com; connect-src 'self' https://*.hotjar.com:* wss://*.hotjar.com https://embedwistia-a.akamaihd.net https://embed-fastly.wistia.com https://distillery.wistia.com https://pipedream.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io https://embed-ssl.wistia.com https://www.google-analytics.com; frame-src 'self' https://vars.hotjar.com https://www.google.com/recaptcha/ https://www.youtube.com https://player.vimeo.com https://fast.wistia.com https://forms.hsforms.com https://cdn.yoshki.com; child-src 'self' https://vars.hotjar.com; media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net; frame-ancestors 'self' https://fast.wistia.com https://fast.wistia.net; 4 default-src 'self'; connect-src 'self' yandex.ru *.yandex.ru *.google-analytics.com stats.g.doubleclick.net *.facebook.com *.vk.com *.branch.io *.google.com *.google.ru *.usedesk.ru *.mail.ru *.google.com.ua odds.ru *.yastatic.net *.adfox.ru *.yandex.net onesignal.com *.onesignal.com wss://pubsub.usedesk.ru react.bookieratings.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.syndication.twimg.com opentracking.ru *.gstatic.com *.twitter.com *.ytimg.com app.link *.branch.io *.vk.com onesignal.com *.onesignal.com *.usedesk.ru *.googletagmanager.com *.google-analytics.com *.yandex.ru *.facebook.net *.facebook.com odds.ru vk.com *.youtube.com *.vimeo.com *.wp.com *.google.com *.cloudflare.com yastatic.net webvisor.com *.mail.ru *.instagram.com *.imgur.com *.yastatic.net *.adfox.ru *.yandex.net react.bookieratings.net; script-src-elem 'self' 'unsafe-inline' cdn.syndication.twimg.com opentracking.ru *.gstatic.com *.twitter.com *.ytimg.com app.link *.branch.io *.vk.com onesignal.com *.onesignal.com *.usedesk.ru *.googletagmanager.com *.google-analytics.com *.yandex.ru *.facebook.net *.facebook.com odds.ru vk.com *.youtube.com *.vimeo.com *.wp.com *.google.com *.cloudflare.com yastatic.net webvisor.com *.mail.ru *.instagram.com *.imgur.com *.yastatic.net *.adfox.ru *.yandex.net react.bookieratings.net; img-src 'self' data: *.wp.com *.w.org *.gravatar.com *.facebook.com *.youtube.com *.usedesk.ru *.google-analytics.com *.doubleclick.net *.google.com *.google.ru *.googleapis.com vk.com *.vk.com *.yandex.ru odds.ru opentracking.ru www.opentracking.ru *.twimg.com *.twitter.com *.gstatic.com *.googletagmanager.com *.google.com.ua *.yastatic.net *.adfox.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru *.ligastavok.ru ligastavok.ru *.yandex.net *.ytimg.com react.bookieratings.net; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com odds.ru *.twitter.com *.twimg.com *.yastatic.net *.adfox.ru *.yandex.net onesignal.com *.onesignal.com react.bookieratings.net; child-src 'self' *.youtube.com *.vimeo.com *.facebook.com *.vk.com vk.com *.twitter.com twitter.com *.usedesk.ru onesignal.com *.onesignal.com www.instagram.com *.google.com *.yandex.ru webvisor.com blob: https://mc.yandex.ru *.imgur.com imgur.com *.yastatic.net *.adfox.ru *.yandex.net vimeo.com sportrecs.com react.bookieratings.net; font-src 'self' 'unsafe-inline' *.gstatic.com *.usedesk.ru data:; media-src 'self' *.usedesk.ru *.yastatic.net *.adfox.ru *.yandex.net react.bookieratings.net; frame-ancestors 'self' https://metrika.yandex.ru http://webvisor.com https://yastatic.net https://mc.yandex.ru; 4 frame-ancestors whitelabel.camspower.com wlbackoffice3.xcams.com cams.dnxlive.com 4 script-src 'self' 'unsafe-inline' 'unsafe-eval' 4 script-src 'unsafe-inline' 'unsafe-eval' https: blob:;object-src 'none' ;base-uri 'none'; upgrade-insecure-requests; frame-ancestors 'self'; 4 default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval' 4 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; connect-src 'self' *.google-analytics.com *.googleapis.com *.gstatic.com *.doubleclick.net data:; font-src 'self' *.gstatic.com *.fontawesome.com data:; img-src * data:; 4 frame-ancestors 'self' https://*.superoffice.com https://zamnesiasp.inone.useinsider.com; 4 frame-ancestors 'self';script-src 'unsafe-inline' 'unsafe-eval' 'self' www.google.com www.gstatic.com diffuser-cdn.app-us1.com prism.app-us1.com trackcmp.net www.onlinechatcenters.com *.hotjar.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com googleads.g.doubleclick.net data:; style-src 'unsafe-inline' 'self' fonts.gstatic.com www.gstatic.com fonts.googleapis.com tagmanager.google.com 4 frame-ancestors 'self' *.bruxelles.be *.brussel.be *.brussels.be 4 frame-ancestors 'self' wbpa.wdo.io ru.wotblitz.com eu.wotblitz.com na.wotblitz.com asia.wotblitz.com 4 frame-src 'self' https://www.google.com/ https://cartera-stage.freetls.fastly.net/ https://cartera-cdn.freetls.fastly.net/ https://client-services.rclon.com/ https://players.brightcove.net/ https://fast.wistia.com/ https://static-client-services.rclon.com/ https://stage.savingsace.com https://www.savingsace.com https://www.youtube.com https://forms.office.com; 4 frame-ancestors 'self' https://login.dvci.uk.pt-x.com https://login.dvqa.uk.pt-x.com https://login.uat.uk.pt-x.com https://login.go.pt-x.com https://dvci.uk.pt-x.com https://login.demo.uk.pt-x.com https://login.cat.uk.pt-x.com https://login.vf.pt-x.com http://localhost:9999 https://secure.emandates.co.uk https://uat.emandates.co.uk https://datamart.emandates.co.uk https://sandbox.emandates.co.uk https://demonstration.emandates.co.uk; 4 frame-ancestors 'self' https://*.ci360.sas.com; 4 frame-ancestors 'self' https://www.bosoy-online.com 4 default-src * 'unsafe-inline' data: 'unsafe-eval'; 4 default-src 'self' 'unsafe-inline' 'unsafe-eval' https:; 4 frame-ancestors https://*.derwent.io http://*.derwent.io http://*.derwent.io:* https://*.derwent.io:* 'self' 4 default-src 'self' http: https: cdnjs.cloudflare.com use.typekit.net www.google-analytics.com fonts.googleapis.com s.w.org;; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://code.jquery.com https://cdnjs.cloudflare.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:; img-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; font-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: https://fonts.googleapis.com; object-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; frame-src 'self' http: https: polaris.brighterir.com sirius.brighterir.com www.youtube-nocookie.com youtube-nocookie.com youtube.com vimeo.com; 4 font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net https://fonts.googleapis.com data: 4 default-src 'self' ; script-src 'self' blob: https://assets.dcube.cloud https://*.wogaa.sg https://assets.adobedtm.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://va.ecitizen.gov.sg https://*.cloudfront.net https://printjs-4de6.kxcdn.com https://unpkg.com https://wogadobeanalytics.sc.omtrdc.net https://connect.facebook.net https://www.googletagmanager.com https://*.licdn.com https://webchat.vica.gov.sg https://vica.gov.sg ; object-src 'self' ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://*.cloudfront.net https://va.ecitizen.gov.sg https://*.wogaa.sg https://cdnjs.cloudflare.com https://datagovsg.github.io https://webchat.vica.gov.sg https://vica.gov.sg ; img-src * ; media-src * ; frame-src https://form.gov.sg/ https://wogaa.demdex.net/ https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://www.google.com https://checkfirst.gov.sg https://www.checkfirst.gov.sg https://docs.google.com https://nlb.ap.panopto.com ; frame-ancestors 'none' ; font-src * data: ; connect-src 'self' https://dpm.demdex.net https://www.google-analytics.com https://stats.g.doubleclick.net https://*.wogaa.sg https://va.ecitizen.gov.sg https://ifaqs.flexanswer.com https://*.cloudfront.net https://fonts.googleapis.com https://cdnjs.cloudflare.com https://wogadobeanalytics.sc.omtrdc.net https://data.gov.sg https://api.isomer.gov.sg https://webchat.vica.gov.sg https://chat.vica.gov.sg https://vica.gov.sg https://s3-va-prd-vica.s3-ap-southeast-1.amazonaws.com wss://chat.vica.gov.sg ; 4 upgrade-insecure-requests; frame-ancestors 'self' https://mangaku.co https://manganime.id https://manganime.in 4 default-src https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https:; font-src 'self' data: https: 4 frame-ancestors 'self' keycontentservice.com *.tescodev.com *.facebook.com tesco.hu itesco.cz tesco.sk tesco.pl itesco.sk 4 default-src https: 'unsafe-inline' 'unsafe-eval' data:; 4 default-src https: 'unsafe-eval' 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data: blob: *; media-src https: data: blob: *; object-src 'none'; frame-ancestors 'none'; connect-src *; base-uri 'self'; upgrade-insecure-requests; 4 frame-ancestors 'self' *.gdmissionsystems.com 4 frame-ancestors 'self' http://odc.world http://www.odc.world https://odc.world https://www.odc.world http://testspace.brain-berlin.com https://testspace.brain-berlin.com; 4 default-src 'none'; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' bam.eu01.nr-data.net s-agent.newrelic.com sp.analytics.yahoo.com s.yimg.com userprotect.de.stihl-dns.net tagmanager.google.com www.google-analytics.com www.googletagmanager.com analytics-udg.netdna-ssl.com assets.adobedtm.com maps.googleapis.com typekit.net *.typekit.net *.adyen.com *.geoplugin.net *.openweathermap.org *.google.com *.google.de *.gstatic.com *.criteo.net *.criteo.com *.g.doubleclick.net *.facebook.net *.bing.com *.outbrain.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.mouseflow.com *.pinimg.com *.excentos.com *.media01.eu *.googleadservices.com *.en25.com *.oracleinfinity.in *.maxymiser.net *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com *.stihl.com *.stihl.de *.stihl.fr *.stihl.be *.stihl.nl *.stihl.lu *.stihl.es *.stihl.pt *.tiqcdn.com *.google.com *.unpkg.com unpkg.com *.guuru.com *.tealiumiq.com *.newrelic.com *.b2x-env.cloud; connect-src 'self' *.pinterest.com s.yimg.com bam.eu01.nr-data.net *.youtube-nocookie.com *.google.com *.google.de analytics.google.com *.g.doubleclick.net *.bing.com stihl-sso.com stihl.tui-servicelayers.io ext.nonstoppartner.net www.google-analytics.com *.omtrdc.net *.demdex.net adobeioruntime.net *.adobeioruntime.net maps.googleapis.com typekit.net *.typekit.net *.mouseflow.com stihlb2bdocuments.blob.core.windows.net *.excentos.com *.media01.eu checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com ssl.geoplugin.net collect.tealiumiq.com api.openweathermap.org *.guuru.com; img-src 'self' *.criteo.com *.smaato.net *.pinterest.com *.pinterest.de *.google.ch *.doubleclick.net *.rubiconproject.com *.smartadserver.com *.3lift.com *.adnxs.com *.yahoo.com *.casalemedia.com *.pubmatic.com *.360yield.com *.openx.net *.twiago.com *.adscale.de *.adform.net *.advertising.com *.teads.tv *.media.net *.yieldlab.net *.omnitagjs.com *.bidswitch.net *.sharethrough.com *.ivitrack.com *.e-planning.net *.stickyadstv.com *.tremorhub.com *.taboola.com *.googleusercontent.com *.youtube-nocookie.com *.atdmt.com *.criteo.net *.ytimg.com stats.g.doubleclick.net *.google.com *.google.de www.google-analytics.com www.googletagmanager.com *.facebook.com *.bing.com *.outbrain.com *.everesttech.net *.demdex.net *.omtrdc.net static.stihl.com *.stihlusa.com typekit.net *.typekit.net *.gstatic.com maps.googleapis.com checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com data: *.mouseflow.com *.excentos.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com *.stihl.com *.stihl.de *.stihl.fr *.stihl.be *.stihl.nl *.stihl.lu *.stihl.es *.stihl.pt *.facebook.net *.googleadservices.com *.maxymiser.net *.mgid.com *.guuru.com *.kargo.com *.liadm.com *.smartclip.net *.addthis.com *.yandex.ru *.b2x-env.cloud; style-src 'self' 'unsafe-inline' *.google.com fonts.googleapis.com *.excentos.com; font-src 'self' cdnjs.cloudflare.com *.typekit.net typekit.net fonts.googleapis.com fonts.gstatic.com data: *.mouseflow.com *.excentos.com *.guuru.com; frame-src 'self' *.criteo.net userprotect.de.stihl-dns.net *.criteo.com e.video-cdn.net *.facebook.com *.google.com *.youtube.com *.youtube-nocookie.com *.demdex.net checkoutshopper-test.adyen.com checkoutshopper-live.adyen.com static.stihl.com *.fls.doubleclick.net *.mouseflow.com *.excentos.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com *.redintelligence.net track.adform.net pixel.mathtag.com *.fls.doubleclick.net *.maxymiser.net *.guuru.com; child-src 'self' *.mouseflow.com *.guuru.com 4 default-src https: wss: 'unsafe-eval' 'unsafe-inline'; media-src 'self' data: blob: https:; object-src 'self' blob:; img-src 'self' data: https:; font-src 'self' data: https:; frame-ancestors 'self' https://*.hubspot.com https://info.atlascopco.us https://info.atlascopcoupdates.com http://*.scene7.com https://atlascopco-preview.adobecqms.net 4 frame-ancestors 'self' https://*.moody.edu 4 default-src: 'self'; 4 frame-ancestors 'self' https://dbwas.service.deutschebahn.com 4 frame-ancestors 'self'; block-all-mixed-content 4 default-src 'self' https://www-cdn01.avisonyoung.com; style-src 'self' 'unsafe-inline' https://www-cdn01.avisonyoung.com https://fonts.googleapis.com https://proxy.ay.prod.3whst.com https://platform.twitter.com https://ton.twimg.com https://avison-young.foleon.com https://avison-young.preview.foleon.com https://tagmanager.google.com https://fast.fonts.net https://cdn.foleon.com https://s3.eu-west-2.amazonaws.com https://assets.foleon.com https://optimize.google.com https://uat-ay.buildout.com; font-src 'self' data: https://www-cdn01.avisonyoung.com https://proxy.ay.prod.3whst.com https://fonts.gstatic.com https://s3.eu-west-2.amazonaws.com https://assets.foleon.com http://script.hotjar.com https://script.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www-cdn01.avisonyoung.com https://proxy.ay.prod.3whst.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://pi.pardot.com https://go.avisonyoung.com https://buildout.com https://platform.twitter.com https://www-cdn01.avisonyoung.com https://avison-young.foleon.com https://avison-young.preview.foleon.com https://ceros.com https://static.cloudflareinsights.com https://cdn.syndication.twimg.com https://maps.googleapis.com https://vimeo.com https://player.vimeo.com https://public.tableau.com https://widget.usersnap.com https://resources.usersnap.com https://ajax.googleapis.com https://s3.eu-west-2.amazonaws.com https://assets.foleon.com https://cdn.analytics.foleon.com https://previewer.foleon.com https://optimize.google.com https://uat-ay.buildout.com https://e.infogram.com https://www.youtube.com https://static.hotjar.com https://script.hotjar.com https://avantanalytics.avisonyoung.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsforms.net https://forms.hsforms.com; img-src https: data: blob:; frame-src 'self' https://buildout.com https://platform.twitter.com https://syndication.twitter.com https://youtu.be https://www.youtube.com https://avison-young.foleon.com https://avison-young.preview.foleon.com https://www.google.com https://go.avisonyoung.com https://vimeo.com https://player.vimeo.com https://public.tableau.com https://forms.office.com *.youtube-nocookie.com https://dev.gvadob.ie https://experience.arcgis.com https://infogram.com https://optimize.google.com https://buildout-production.s3.amazonaws.com https://e.infogram.com https://vars.hotjar.com https://avantanalytics.avisonyoung.com https://forms.hsforms.com; connect-src 'self' https://www.google-analytics.com https://widget.usersnap.com https://api.analytics.foleon.com https://api.foleon.com https://s3.eu-west-2.amazonaws.com https://assets.foleon.com https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://hubspot-forms-static-embed.s3.amazonaws.com https://forms.hsforms.com; media-src 'self' blob: https://www-cdn01.avisonyoung.com *.youtube-nocookie.com; object-src 'self' https://www-cdn01.avisonyoung.com *.youtube-nocookie.com; worker-src 'self' blob: 4 Content-Security-Policy-Report-Only 4 frame-ancestors 'self' *.swoogo.com 4 frame-ancestors 'self' *.usabilla.com https://frontend.pttn.com https://d6tizftlrpuof.cloudfront.net; 4 default-src * 'unsafe-inline' 'unsafe-eval';img-src * data:; child-src * 'self' blob: http:;font-src * data: 4 default-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval' googletagmanager.com google-analytics.com static.hotjar.com js.hsforms.net js.hs-scripts.com cdn.bizible.com *.wistia.com *.doubleclick.net 4 frame-ancestors 'self' http://bleudigo.the513.top https://www.indigo-net.com https://www.indigo.fr; 4 default-src 'self' https: *.webtrekk.net; img-src 'self' data: https: *.t-systems-mms.com *.webtrekk.net www.facebook.com *.rexx-systems.com *.landbot.io storage.googleapis.com *.webtrekk.net; media-src 'self'; style-src 'self' 'unsafe-inline' blob: https:; font-src 'self' https: player.podigee-cdn.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https: *.t-systems-mms.com platform.twitter.com connect.facebook.net *.webtrekk.net *.rexx-systems.com static.landbot.io *.yumpu.com *.facebook.net cdn.podigee.com; connect-src 'self' https: *.t-systems-mms.com *.webtrekk.net landbot.io; object-src https: 'self'; frame-ancestors https: 'self' *.t-systems-mms.com customer.360-grad-sachsen.de; frame-src https: 'self' *.t-systems-mms.com customer.360-grad-sachsen.de platform.twitter.com *.mmsupgradework.dmkdev *.mms-plattform.de player.vimeo.com landbot.io www.yumpu.com; 4 frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://thomsonreuterstaxprofessionals.lookbookhq.com https://thomsonreuterstaxprofessionals.lookbookhq.com 4 default-src https: data:; script-src https: data: 'self' 'unsafe-inline' 'unsafe-eval'; style-src https: 'self' 'unsafe-inline' 4 default-src 'self' https://*.ean.com https://*.google.ie https://*.facebook.com https://*.facebook.net https://*.expediapartnersolutions.com https://*.leadspace.com https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.gstatic.com https://*.googleadservices.com https://*.licdn.com https://*.marketo.net https://*.marketo.com https://*.aws.ean http://*.aws.ean https://*.amazonaws.ean http://*.amazonaws.com https://*.amazonaws.com https://d2yeu2mwujl2s5.cloudfront.net https://931-quh-525.mktoresp.com https://*.doubleclick.net https://js-agent.newrelic.com https://*.linkedin.com https://*.nr-data.net https://*.addthis.com https://*.addthisedge.com https://*.issuu.com https://*.google.co.uk https://*.vimeo.com https://*.cloudflare.com https://*.reachforce.com https://*.googleapis.com data: 'unsafe-eval' 'unsafe-inline' 4 default-src * data: 'unsafe-inline' 'unsafe-eval'; 4 default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline'; 4 default-src 'self' data: blob: gap: 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.google.com *.linkedin.com *.bizographics.com *.loggly.com *.doubleclick.net *.wistia.com *.twimg.com *.twitter.com *.googleadservices.com *.facebook.com *.googletagmanager.com *.snapengage.com *.visualwebsiteoptimizer.com *.facebook.net *.iforex.com *.google-analytics.com *.bootstrapcdn.com *.youtube.com *.wistia.net *.opmnstr.com *.webapi-services.net *.googlesyndication.com *.optnmnstr.com *.mxpnl.net https://pixel-tracking.appspot.com https://pixelmachine-981.appspot.com *.mte-media.com mte-media.com *.typekit.net *.optimizely.com d5phz18u4wuww.cloudfront.net *.hotjar.com *.ads-twitter.com *.finadsr.com wcs.naver.net *.criteo.net *.criteo.com https://s.yimg.com https://sp.analytics.yahoo.com *.fihtrader.com; img-src 'self' data: blob: *; font-src 'self' data: blob: *.gstatic.com *.bootstrapcdn.com *.typekit.net *.webapi-services.net *.hotjar.com; connect-src 'self' data: *.doubleclick.net *.facebook.com *.wistia.com https://embedwistia-a.akamaihd.net *.googletagmanager.com *.opmnstr.com *.mxpnl.net *.iforex.com *.webapi-services.net *.litix.io *.hotjar.io *.hotjar.com wss://*.hotjar.com *.google-analytics.com *.finadsr.com *.snapengage.com *.criteo.com *.criteo.net *.iforex.co.uk *.vestle.com *.toredofx.com https://s.yimg.com *.fihtrader.com; child-src 'self' data: blob: *.googletagmanager.com *.iforex.com *.webapi-services.net; frame-src 'self' data: gap: *.webapi-services.net *.facebook.com *.twitter.com *.google.com *.linkedin.com *.snapengage.com *.youtube.com *.wistia.com *.googlesyndication.com *.googletagmanager.com *.iforex.com https://fast.wistia.net *.hotjar.com *.criteo.com; media-src 'self' blob: data: *.iforex.com *.webapi-services.net *.gstatic https://embedwistia-a.akamaihd.net *.mte-media.com *.snapengage.com; object-src 'self' https://embed-ssl.wistia.com *.mte-media.com; worker-src 'self' data: blob: *.googletagmanager.com *.iforex.com *.webapi-services.net; frame-ancestors 'self' *.iforex.com *.efix.local *.fihtrader.com; report-uri https://content.webapi-services.net/api/cspreport; 4 default-src * blob: data: http: https: 'unsafe-inline' 'unsafe-eval'; report-uri https://reports.nameshield.net/ 4 frame-ancestors 'self' https://smartnutri-stag.firebaseapp.com/ https://smartfitnutri.app/ 4 default-src https:; connect-src https: wss:; font-src https: data:; img-src https: data: blob:; frame-src https:; worker-src https: data: 'unsafe-inline' 'unsafe-eval'; form-action https:; script-src https: data: 'unsafe-inline' 'unsafe-eval';style-src https: data: 'unsafe-inline'; base-uri 'self'; 4 default-src https: data: blob: ws: wss: 'unsafe-inline' 'unsafe-eval' 4 default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' *.mktoresp.com;block-all-mixed-content;upgrade-insecure-requests; 4 default-src 'self'; font-src 'self' data:; base-uri 'self'; connect-src 'self' *.materna.de *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io; style-src 'self' 'unsafe-inline' *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.youtube.com *.ytimg.com *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io; object-src 'self' multimedia.gsb.bund.de *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io; media-src 'self' multimedia.gsb.bund.de *.youtube.com *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io; frame-src *.google.com *.gstatic.com *.youtube.com *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io mindandvision.tv 2021.mindandvision.tv cdn.jwplayer.com; img-src 'self' data: *.materna.de *.google.com *.gstatic.com *.youtube.com *.twimg.com twemoji.maxcdn.com *.readspeaker.com *.unitylivestream.com *.unityrealtime.chat *.jwplattform.com *.strivetech.io cms.sqat.eu; frame-ancestors 'self'; 4 default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *;style-src 'self' 'unsafe-inline' *;media-src 'self' 'unsafe-inline' *;font-src 'self' 'unsafe-inline' *;frame-src 'self' *; img-src 'self' data: *;connect-src * 4 frame-ancestors 'self' https://*.superoffice.com 4 script-src https: 'unsafe-inline' 'unsafe-eval' 4 frame-ancestors zyro.com editor.zyro.com www-staging.zyro.space builder-staging.zyro.space *.dp.zyro.space 4 object-src 'none'; form-action 'self' 4 default-src https: 'unsafe-eval' 'unsafe-inline'; 4 default-src 'unsafe-inline' 'unsafe-eval' https:;img-src * data:; 4 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.blueconic.net *.googletagmanager.com tagmanager.google.com www.gstatic.com *.google-analytics.com www.googleadservices.com www.google.com www.googleadservices.com googleads.g.doubleclick.net www.google.com *.hotjar.com *.hotjar.io connect.facebook.net *.blueconic.net knltb.sb.blueconic.net service.force.com *.salesforceliveagent.com *.googleapis.com knltb.my.salesforce.com knltb.secure.force.com ajax.aspnetcdn.com *.cloudfront.net www.instagram.com www.mollie.com *.youtube.com *.ytimg.com *.newrelic.com *.nr-data.net *.g.doubleclick.net snap.licdn.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.blueconic.net tagmanager.google.com fonts.googleapis.com service.force.com knltb.secure.force.com *.cloudfront.net www.mollie.com p.typekit.net; img-src 'self' 'unsafe-eval' 'unsafe-inline' data: dashboard.umbraco.org our.umbraco.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com www.google-analytics.com googleads.g.doubleclick.net www.google.com *.hotjar.com *.hotjar.io www.facebook.com *.ytimg.com *.googleapis.com *.gstatic.com *.blueconic.net stats.g.doubleclick.net *.persgroep.net *.google.nl i.ytimg.com; connect-src 'self' 'unsafe-eval' 'unsafe-inline' our.umbraco.com tagmanager.google.com www.google-analytics.com *.hotjar.com:* *.hotjar.io *.blueconic.net knltb.sb.blueconic.net service.force.com knltb.secure.force.com homerun.co *.nr-data.net stats.g.doubleclick.net i.ytimg.com p.typekit.net use.typekit.net maps.googleapis.com www.googletagmanager.com maps.gstatic.com www.instagram.com www.sfdcstatic.com *.cloudfront.net *.salesforceliveagent.com; frame-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.com www.youtube.com bid.g.doubleclick.net *.hotjar.com *.hotjar.io service.force.com www.facebook.com widgets.knltb.club www.instagram.com www.mollie.com nlpadel.meshlink.nl m.facebook.com crionet-ms-widgets.azurewebsites.net; style-src-elem 'self' 'unsafe-eval' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.blueconic.net service.force.com knltb.secure.force.com *.cloudfront.net p.typekit.net; font-src 'self' 'unsafe-eval' 'unsafe-inline' data: fonts.gstatic.com *.hotjar.com *.hotjar.io *.sfdcstatic.com use.typekit.net; child-src 'self' 'unsafe-eval' 'unsafe-inline' *.hotjar.com *.hotjar.io *.youtube.com *.blueconic.net knltb.sb.blueconic.net; frame-ancestors 'self' 'unsafe-eval' 'unsafe-inline' *.blueconic.net knltb.sb.blueconic.net; block-all-mixed-content; 4 frame-ancestors 'self' https://webvisor.com http://webvisor.com; 4 frame-ancestors 'self' www.lgechat.com www.group-digital.fr; 4 frame-ancestors https://modelcentro.com/ 4 default-src https: 'unsafe-inline' 'unsafe-eval' data: 4 default-src https: 'unsafe-inline' 'unsafe-eval'; 4 default-src 'self' 'unsafe-inline' data: *.google-analytics.com *.googletagmanager.com *.google.com *.google.ch *.gstatic.com *.googleapis.com *.googlesyndication.com *.wir.ch wir.ch *.youtube-nocookie.com *.youtube.com *.vimeo.com *.logismata.ch *.g.doubleclick.net *.facebook.net *.facebook.com snap.licdn.com bat.bing.com *.linkedin.com *.cookiebot.com *.swisscaution.ch *.datatrans.biz *.tiqcdn.com *.tdbtrk.com *.tealiumiq.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.google.com *.google.ch *.gstatic.com *.googleapis.com *.googlesyndication.com *.wir.ch wir.ch *.youtube-nocookie.com *.youtube.com *.vimeo.com *.logismata.ch *.g.doubleclick.net *.facebook.net *.facebook.com snap.licdn.com bat.bing.com *.linkedin.com *.cookiebot.com *.swisscaution.ch *.datatrans.biz *.tiqcdn.com *.tdbtrk.com *.tealiumiq.com; frame-ancestors 'self' https://www.jobs.ch 4 frame-ancestors 'self' https://app.socialscreen.com 4 default-src 'self' https://*.facebook.com https://pr-cpt-ap-lx.amerihealthcaritas.com https://stats.g.doubleclick.net https://*.cavulus.com https://*.darwinrx.com https://*.google.com https://*.amerihealthcaritas.com https://*.auntbertha.com https://*.bootstrapcdn.com https://*.cloudflare.com https://*.crownpeak.com https://*.crownpeak.net https://*.doubleclick.net https://*.formularynavigator.com https://*.google-analytics.com https://*.googletagmanager.com https://*.icontact.com https://*.serving-sys.com https://*.time.ly https://*.youtube.com https://*.ytimg.com https://*.gstatic.com; img-src * data:;script-src 'self' https://*.facebook.net https://ajax.googleapis.com https://amerihealth.enroll.cavulus.com https://*.google.com https://formularynavigator.com https://pr-cpt-ap-lx.amerihealthcaritas.com https://stats.g.doubleclick.net https://*.time.ly https://*.cavulus.com https://*.darwinrx.com https://*.amerihealthcaritas.com https://*.auntbertha.com https://*.bootstrapcdn.com https://*.cloudflare.com https://*.crownpeak.com https://*.crownpeak.net https://*.doubleclick.net https://*.formularynavigator.com https://*.google-analytics.com https://*.googletagmanager.com https://*.icontact.com https://*.serving-sys.com https://*.time.ly https://*.youtube.com https://*.ytimg.com https://*.gstatic.com 'unsafe-inline' 'unsafe-eval' ;style-src 'self' https://app.icontact.com https://fonts.googleapis.com https://*.google.com https://*.gstatic.com https://maxcdn.bootstrapcdn.com 'unsafe-inline' ;font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com data:; 4 “upgrade-insecure-requests;†4 default-src: https: 'unsafe-inline' 4 script-src 'self' *.seksualiteit.nl *.seksindepraktijk.nl *.seksuelevorming.nl *.rutgers.international *.rutgers.nl *.weekvandelentekriebels.nl *.rutgers.ug *.rutgers.id *.anticonceptievoorjou.nl *.hotjar.com *.adform.net *.addthisedge.com *.addthis.com *.facebook.com *.newrelic.com *.nr-data.net *.cdn77.org *.ckeditor.com *.smartsupp-widget-161959.c.cdn77.org *.smartsuppchat.com *.adscience.nl *.bugherd.com *.googletagmanager.com *.googleapis.com *.pinterest.com *.readspeaker.com 'unsafe-inline' connect.facebook.net 'unsafe-eval' dev.visualwebsiteoptimizer.com *.google-analytics.com *.bootstrapcdn.com *.google.com *.gstatic.com *.typekit.net *.vimeocdn.com *.youtube.com *.ytimg.com *.fbcdn.net; style-src 'self' 'unsafe-inline' *.fonts.googleapis.com *.googleapis.com *.cdn77.org *.bootstrapcdn.com *.myfonts.net *.readspeaker.com *.youtube.com; font-src 'self' *.cdn77.org *.fonts.gstatic.com *.gstatic.com *.bootstrapcdn.com *.fonts.googleapis.com *.googleapis.com *.ckeditor.com *.newrelic.com; media-src * 'self' data: 4 default-src *; script-src 'unsafe-eval' 'self' 'unsafe-inline' https:; object-src 'self' *.youtube.com youtube.com; style-src * 'unsafe-inline'; img-src * data:; frame-src *; font-src * data:; connect-src *; media-src * blob:; worker-src 'self' blob:; 4 frame-src 'self'; 4 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; upgrade-insecure-requests; report-uri https://drinksco.report-uri.io/r/default/csp/enforce 4 default-src 'self'; script-src 'self' *.storyblok.com 'unsafe-inline' *.cloudfront.net *.googleapis.com *.gstatic.com recaptcha.net *.facebook.net *.google-analytics.com *.googletagmanager.com tagmanager.google.com *.livechatinc.com *.stripe.com 'unsafe-eval'; style-src 'self' blob: *.storyblok.com 'unsafe-inline' *.googleapis.com *.gstatic.com tagmanager.google.com; img-src 'self' *.storyblok.com *.cloudinary.com *.facebook.com *.google.com *.google.com.au placehold.it *.cloudfront.net *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.simplybook.me lh3.googleusercontent.com data: *.trackjs.com *.vicinity.com.au mipubapistorageprod.blob.core.windows.net; font-src 'self' *.amazonaws.com *.storyblok.com *.googleapis.com *.gstatic.com https://fonts.gstatic.com data:; connect-src 'self' stats.g.doubleclick.net *.cloudfront.net *.mappedin.com *.google-analytics.com sentry.io *.simplybook.me *.vicinity.com.au *.trackjs.com mipubapistorageprod.blob.core.windows.net; frame-src 'self' *.youtube.com *.vimeo.com *.googletagmanager.com *.google.com *.facebook.com *.livechatinc.com *.stripe.com socialq.net recaptcha.net *.trybooking.co.nz *.trybooking.com 4 default-src * 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-ancestors 'self' http://webvisor.com 4 default-src https: http: data: wss: blob: 'unsafe-eval' 'unsafe-inline'; object-src 'none' 4 script-src 'self' https://www.annieskitclubs.com 'unsafe-inline' 'unsafe-eval' *.bbb.org use.typekit.net https://tagmanager.google.com/ www.googletagmanager.com www.google-analytics.com/ www.google.com/recaptcha/api.js www.gstatic.com/ www.shopperapproved.com/ direct.shopperapproved.com/ connect.facebook.net/ *.brightcove.net/ *.brightcove.com/ vjs.zencdn.net/vttjs/ blob: *.fomo.com www.googleadservices.com/ googleads.g.doubleclick.net/ ajax.googleapis.com/ajax/libs/webfont/ cdnjs.cloudflare.com/ajax/libs/mobile-detect/ *.opmnstr.com/ *.securedvisit.com www.googleadservices.com/pagead/conversion.js s.pinimg.com/ tags.wdsvc.net match.adsrvr.org bat.bing.com a.omappapi.com synch.wdsvc.net www.dwin1.com code.jquery.com d.impactradius-event.com sc-static.net analytics.tiktok.com ojrq.net *.paypal.com cdn.attn.tv *.attentivemobile.com *.mountain.com;style-src 'self' https://www.annieskitclubs.com 'unsafe-inline' *.bbb.org use.typekit.net fonts.googleapis.com https://www.googletagmanager.com/ direct.shopperapproved.com/;img-src 'self' https://www.annieskitclubs.com 'unsafe-inline' about: *.bbb.org p.typekit.net https://www.google-analytics.com/ googletagmanager.com https://stats.g.doubleclick.net https://www.google.com data: https://secure.gravatar.com www.shopperapproved.com https://www.facebook.com *.brightcove.net/ *.brightcove.com/ *.boltdns.net/ blob: https://process.filestackapi.com *.securedvisit.com *.opmnstr.com/ a.omappapi.com ct.pinterest.com shareasale.com bat.bing.com *.akamaihd.net *.attentivemobile.com *.paypal.com googleads.g.doubleclick.net 4 frame-ancestors 'self' https://*.b2bmit.com https://*.gocatalogs.com; 4 default-src https: 4 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 4 default-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.reddit.com *.captcha.com *.amazonaws.com *.bing.com *.cdninstagram.com *.clicktale.net *.cloudflare.com *.demandbase.com *.demdex.net *.facebook.net *.fls.doubleclick.net *.fontawesome.com *.microsoftonline.com *.onetrust.com *.siteimprove.com *.siteimprove.net *.vidyard.com https://www.google.com.sg https://accenture.lightinfosys.com https://accenture.mettl.de https://accenture.percipio.com https://accenture.tt.omtrdc.net https://api.company-target.com https://assets.adobedtm.com https://authenticate.cocubes.com/candidate https://cdn.cookielaw.org https://cm.everesttech.net https://cocubesprod.com https://fonts.googleapis.com https://fonts.gstatic.com https://idsync.rlcdn.com https://img.en25.com https://india.jobs.accenture.com https://login.rosettastone.com https://ml314.com https://p.adsymptotic.com https://pbs.twimg.com https://px.ads.linkedin.com https://s.delvenetworks.com https://secure.na2.echosign.com https://snap.licdn.com https://static.echocdn.com https://stats.g.doubleclick.net https://sync.crwdcntrl.net https://tools.ietf.org https://unpkg.com https://www.accenturealumni.com https://www.facebook.com https://www.glassdoor.com https://www.google.com https://www.google.com.ph https://www.google-analytics.com https://www.googletagmanager.com https://www.indeed.com https://www.knotch-cdn.com https://www.linkedin.com https://www.monster.com https://www.redditstatic.com https://www.slideshare.net https://www.youtube.com https://www.youtube-nocookie.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.accenture.com *.reddit.com *.captcha.com *.bing.com *.cdninstagram.com *.clicktale.net *.cloudflare.com *.demandbase.com *.demdex.net *.facebook.net *.fls.doubleclick.net *.fontawesome.com *.microsoftonline.com *.onetrust.com *.siteimprove.com *.siteimprove.net *.vidyard.com https://www.google.com.sg https://accenture.lightinfosys.com https://accenture.mettl.de https://accenture.percipio.com https://accenture.tt.omtrdc.net https://api.company-target.com https://assets.adobedtm.com https://authenticate.cocubes.com/candidate https://cdn.cookielaw.org https://cm.everesttech.net https://cocubesprod.com https://fonts.googleapis.com https://fonts.gstatic.com https://idsync.rlcdn.com https://img.en25.com https://india.jobs.accenture.com https://login.rosettastone.com https://ml314.com https://p.adsymptotic.com https://pbs.twimg.com https://px.ads.linkedin.com https://s.delvenetworks.com https://secure.na2.echosign.com https://snap.licdn.com https://static.echocdn.com https://stats.g.doubleclick.net https://sync.crwdcntrl.net https://tools.ietf.org https://unpkg.com https://www.accenturealumni.com https://www.facebook.com https://www.glassdoor.com https://www.google.com https://www.google.com.ph https://www.google-analytics.com https://www.googletagmanager.com https://www.indeed.com https://www.knotch-cdn.com https://www.linkedin.com https://www.monster.com https://www.redditstatic.com https://www.slideshare.net https://www.youtube.com https://www.youtube-nocookie.com; img-src 'self' *.accenture.com *.reddit.com *.captcha.com *.amazonaws.com *.bing.com *.cdninstagram.com *.clicktale.net *.cloudflare.com *.demandbase.com *.demdex.net *.facebook.net *.fls.doubleclick.net *.fontawesome.com *.microsoftonline.com *.onetrust.com *.siteimprove.com *.siteimprove.net *.vidyard.com https://www.google.com.sg https://accenture.lightinfosys.com https://accenture.mettl.de https://accenture.percipio.com https://accenture.tt.omtrdc.net https://api.company-target.com https://assets.adobedtm.com https://authenticate.cocubes.com/candidate https://cdn.cookielaw.org https://cm.everesttech.net https://cocubesprod.com https://fonts.googleapis.com https://fonts.gstatic.com https://idsync.rlcdn.com https://img.en25.com https://india.jobs.accenture.com https://login.rosettastone.com https://ml314.com https://p.adsymptotic.com https://pbs.twimg.com https://px.ads.linkedin.com https://s.delvenetworks.com https://secure.na2.echosign.com https://snap.licdn.com https://static.echocdn.com https://stats.g.doubleclick.net https://sync.crwdcntrl.net https://tools.ietf.org https://unpkg.com https://www.accenturealumni.com https://www.facebook.com https://www.glassdoor.com https://www.google.com https://www.google.com.ph https://www.google-analytics.com https://www.googletagmanager.com https://www.indeed.com https://www.knotch-cdn.com https://www.linkedin.com https://www.monster.com https://www.redditstatic.com https://www.slideshare.net https://www.youtube.com https://www.youtube-nocookie.com data:; connect-src 'self' *.accenture.com *.reddit.com *.captcha.com *.amazonaws.com *.bing.com *.cdninstagram.com *.clicktale.net *.cloudflare.com *.demandbase.com *.demdex.net *.facebook.net *.fls.doubleclick.net *.fontawesome.com *.microsoftonline.com *.onetrust.com *.siteimprove.com *.siteimprove.net *.vidyard.com https://www.google.com.sg https://accenture.lightinfosys.com https://accenture.mettl.de https://accenture.percipio.com https://accenture.tt.omtrdc.net https://api.company-target.com https://assets.adobedtm.com https://authenticate.cocubes.com/candidate https://cdn.cookielaw.org https://cm.everesttech.net https://cocubesprod.com https://fonts.googleapis.com https://fonts.gstatic.com https://idsync.rlcdn.com https://img.en25.com https://india.jobs.accenture.com https://login.rosettastone.com https://ml314.com https://p.adsymptotic.com https://pbs.twimg.com https://px.ads.linkedin.com https://s.delvenetworks.com https://secure.na2.echosign.com https://snap.licdn.com https://static.echocdn.com https://stats.g.doubleclick.net https://sync.crwdcntrl.net https://tools.ietf.org https://unpkg.com https://www.accenturealumni.com https://www.facebook.com https://www.glassdoor.com https://www.google.com https://www.google.com.ph https://www.google-analytics.com https://www.googletagmanager.com https://www.indeed.com https://www.knotch-cdn.com https://www.linkedin.com https://www.monster.com https://www.redditstatic.com https://www.slideshare.net https://www.youtube.com https://www.youtube-nocookie.com; upgrade-insecure-requests; block-all-mixed-content 4 script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; 4 default-src * 'unsafe-inline' 'unsafe-eval' ; img-src * data: 'unsafe-inline' ; font-src * data: 'unsafe-inline' ; media-src * blob: 'unsafe-inline' ; frame-src * data: 'unsafe-inline' 'unsafe-eval' ; 4 media-src 'self' *.ebaystatic.com; font-src 'self' *.ebaystatic.com 4 frame-ancestors 'self' *.letgroup.com 4 default-src 'self' *.hotetec.com; connect-src 'self' ws: *.hotetec.com *.google.com *.optimizely.com *.hijiffy.com *.hotelinking.com *.criteo.com *.clarity.ms *.smooch.io *.quicktext.im *.sendpulse.com *.reviewpro.com backend.fideltour.com stats.g.doubleclick.net www.google-analytics.com in.hotjar.com www.123compare.me cognito-identity.eu-west-1.amazonaws.com firehose.eu-west-1.amazonaws.com www.googleadservices.com www.google.es www.facebook.com dev-traffic.attby.io vc.hotjar.io *.parthenon.io *.triptease.io api.rollbar.com www.thehotelsnetwork.com *.majestic-resorts.com *.chatbot.com; frame-src *; ; font-src * data:;img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 4 default-src 'self' 'self' data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *; img-src 'self' blob: data: * 4 default-src 'self' *.googlesyndication.com *.hotjar.com; connect-src 'self' wss://*.zopim.com *.zopim.com *.zendesk.com *.zdassets.com *.hotjar.com *.hotjar.io wss://*.hotjar.com securepubads.g.doubleclick.net stats.g.doubleclick.net *.gstatic.com *.google-analytics.com *.googlesyndication.com *.bugsnag.com *.biznettechnologies.com ws://*.biznettechnologies.com wss://*.biznettechnologies.com *.zuppler.com ws://*.zuppler.com wss://*.zuppler.com *.braintreegateway.com *.braintree-api.com *.stripe.com *.worldpay.com *.usersnap.com s.yimg.com; frame-src 'self' *.google.com *.googlesyndication.com aexp.demdex.net *.aexp.demdex.net *.omtrdc.net *.hotjar.com *.braintreegateway.com www.facebook.com; style-src 'self' 'unsafe-inline' *.googleapis.com cloud.typography.com hello.myfonts.net/count/3b4b0c www.skymilesdining.com *.hotjar.com; font-src 'self' *.hotjar.com data: *.zopim.com *.gstatic.com; img-src 'self' *.zopim.io *.zopim.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com *.googleapis.com *.gstatic.com data: stats.g.doubleclick.net loyaltypartner.122.2o7.net *.omtrdc.net *.ggpht.com seal-chicago.bbb.org *.google.com *.zuppler.com dbgcbnch6yz43.cloudfront.net *.hotjar.com *.usersnap.com *.gravatar.com *.wp.com *.googletagmanager.com www.facebook.com sp.analytics.yahoo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org *.google-analytics.com *.gstatic.com *.google.com *.googleapis.com *.googletagservices.com *.googlesyndication.com *.doubleclick.net *.zopim.com assets.adobedtm.com aexp.demdex.net *.omtrdc.net assets.zendesk.com *.zdassets.com seal-chicago.bbb.org *.hotjar.com nexus.ensighten.com *.netlify.com *.netlify.app *.biznettechnologies.com *.zuppler.com *.stripe.com *.worldpay.com *.usersnap.com *.googletagmanager.com connect.facebook.net s.yimg.com; form-action 'self' www.facebook.com; 4 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; 4 frame-ancestors 'self'; base-uri 'self'; object-src 'self'; 4 default-src https:; font-src https: data: blob:; img-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; worker-src https: blob:; frame-ancestors 'self'; connect-src https: blob:; media-src https: mediastream: blob: 4 frame-ancestors 'self' https://api.opentlv.com 4 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline';frame-src * mailto: data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' pit.acaa-cmps.com amac.dbedirectory.com uhs.uhsvendors.com marylandmdbe.mdbecert.com *.mwdbe.com travis.traviscountyhub.com theresource.civilrightsystem.com *.gob2g.com *.mwdsbe.com *.mwsbe.com *.sbeda.com sch.thesupplierclearinghouse.com *.smwbe.com *.diversitycomplance.com *.civilrightsconnect.com *.b2gnow.com *.newnycontracts.com obama.diversitysystem.com *.dbesystem.com fhwa.civilrightsconnect.dot.gov *.sbdbe.com sctrca.sctrca.org fhwatest.civilrightsconnect.dot.gov *.webnclink.org ipg.vendorreg.com txdot.txdotcms.com *.diversitysoftware.com *.sbecompliance.com; 4 default-src * 'self' data: 'unsafe-inline' 'unsafe-eval' ; 4 frame-ancestors 'self' valk.com *.valk.com valk.be *.valk.be vandervalk.de *.vandervalk.de; 4 default-src * data: blob: about: vkcalls:;script-src 'self' https://vk.com https://*.vk.com https://static.vk.me https://*.mail.ru https://r.mradx.net https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com https://connect.facebook.net https://telegram.org https://*.yandex.ru https://*.google-analytics.com https://*.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://*.google.com https://google.com https://*.vkpartner.ru https://*.moatads.com https://*.adlooxtracking.com https://*.gstatic.com https://*.google.ru https://securepubads.g.doubleclick.net https://cdn.ampproject.org https://www.googletagmanager.com https://googletagmanager.com https://*.vk-cdn.net https://*.hit.gemius.pl https://yastatic.net https://analytics.tiktok.com 'unsafe-inline' 'unsafe-eval' blob:;style-src https://vk.com https://*.vk.com https://static.vk.me https://ton.twimg.com https://tagmanager.google.com https://platform.twitter.com https://*.googleapis.com 'self' 'unsafe-inline';report-uri /csp 3 default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adsafeprotected.com *.serving-sys.com https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com; worker-src blob: 'self'; connect-src * wss: blob:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report; 3 frame-ancestors 'self' *.cnbc.com *.acorns.com; 3 report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.evidon.com *.gigya.com *.google-analytics.com *.ns1p.net *.pingdom.net adservice.google.com ajax.aspnetcdn.com ajax.googleapis.com cdn.arkoselabs.com connect.facebook.net funcaptcha.com imasdk.googleapis.com js.rbxcdn.com long.open.weixin.qq.com midas.gtimg.cn radar.cedexis.com res.wx.qq.com roblox-api.arkoselabs.com roblox-load-generator-configuration.s3.us-east-2.amazonaws.com s.ytimg.com sb.scorecardresearch.com static.rbxcdn.com www.google.com www.gstatic.com www.youtube.com h.online-metrix.net request.eprotect.vantivcnp.com request.eprotect.vantivpostlive.com authsite.roblox.com *.googletagmanager.com *.googleadservices.com https://googleads.g.doubleclick.net dcams.app 3 frame-ancestors 'none'; upgrade-insecure-requests 3 frame-ancestors *.constantcontact.com www.redmangomarketing.com www.ezymarketing.com www.igvinc.com www.etouchmarketing.net 3 frame-ancestors 'self' *.intranet *.uolinc.com; 3 default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.akamai.steamstatic.com/ https://store.akamai.steamstatic.com/ *.google-analytics.com https://www.gstatic.com https://recaptcha.net https://www.gstatic.cn/recaptcha/; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.akamai.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ *.google-analytics.com; frame-src 'self' steam: http://www.youtube.com https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://steamcommunity.com/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ; 3 default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob: wss://*.hotjar.com; font-src https: data:; img-src https: blob: data: android-webview-video-poster:; media-src blob: data: https:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests 3 upgrade-insecure-requests;frame-ancestors 'self' slate.com *.slate.com *.my.slate.com 3 block-all-mixed-content; report-uri /csp-report?p=; base-uri 'none'; default-src 'none'; style-src 'unsafe-inline' 'self' https://*.stripecdn.com; connect-src 'self' https://errors.stripe.com https://*.stripecdn.com https://climate.stripe.com https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.googletagmanager.com https://ga.clearbit.com; font-src 'self' https://*.stripecdn.com; form-action 'self' https://climate.stripe.com; frame-src 'self' https://js.stripe.com https://*.stripecdn.com https://www.googletagmanager.com; img-src 'self' https://*.stripecdn.com https://q.stripe.com https://images.ctfassets.net https://assets.ctfassets.net https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.googletagmanager.com data: https://px.ads.linkedin.com https://p.adsymptotic.com; media-src 'self' https://*.stripecdn.com https://videos.ctfassets.net; script-src 'self' https://js.stripe.com 'sha256-6hCrKkhcyMhhMFEfSpCTaBOu2I3bF+wiEjLQdI7s+jQ=' 'sha256-cCM0Z4lzGkzQnmbdVw+ouz0JRawyaKcZ4yiqzqYS7ek=' 'sha256-5LtzXhT7UFn+GqP5pKEMGL08UNZsrzANHFEBW/mQHGw=' 'sha256-3aWvb9tRBjmz1OjR3n7mwiTm94+s4iki4mMZF82asmc=' 'sha256-4HwZEt/y+k0EIqGfaNZ1MRmRCUbC03K3G03imkZ/EyA=' 'sha256-beLzNcen8LrazzSCRjAapoIMTgJI0osPWGNSX7aK6lc=' https://*.stripecdn.com https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net 'sha256-ELZBkO1eLwWs6QKigj+FQzktzusJRQek0e2CLudl4N8=' https://www.googletagmanager.com https://ga.clearbit.com 'report-sample' 3 frame-ancestors 'self' https://adp.lookbookhq.com http://adp.lookbookhq.com https://discover.adp.com http://discover.adp.com https://*.adp.com http://*.adp.ca https://*.adp.ca; 3 frame-ancestors 'self' acs.virtualeventsengine.com virtualexhibits360.com psav.digital 3 upgrade-insecure-requests; frame-ancestors 'self' *.nhs.uk 3 default-src https: data: blob:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; img-src https: data: blob:; media-src https: http: blob: data:; connect-src http: https: ws: wss:; 3 base-uri 'self'; block-all-mixed-content; upgrade-insecure-requests; connect-src 'self' blob: o1.ingest.sentry.siemens-web.com edge.api.brightcove.com house-fastly-signed-eu-west-1-prod.brightcovecdn.com manifest.prod.boltdns.net metrics.brightcove.com new.siemens.com assets.new.siemens.com api.dc.siemens.com w3.siemens.com searchapi.new.siemens.com privacyportal-eu.onetrust.com siemens.sc.omtrdc.net siemens.tt.omtrdc.net *.demdex.net tools.adlytics.net blob: www.facebook.com www.google.com; default-src 'self' blob:; font-src 'self' www.siemens.com tools.adlytics.net data: fonts.gstatic.com; frame-src 'self' bid.g.doubleclick.net; img-src 'self' data: blob: android-webview-video-poster: *; manifest-src 'self'; media-src 'self' manifest.prod.boltdns.net house-fastly-signed-eu-west-1-prod.brightcovecdn.com blob:; object-src players.brightcove.net w3.siemens.com; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' assets.adobedtm.com players.brightcove.net vjs.zencdn.net w3.siemens.com prod.ste.dc.siemens.com tools.adlytics.net www.googletagmanager.com connect.facebook.net snap.licdn.com www.googleadservices.com googleads.g.doubleclick.net www.google.com static.ads-twitter.com analytics.twitter.com geolocation.onetrust.com new.siemens.com; style-src 'report-sample' 'self' 'unsafe-inline' tools.adlytics.net new.siemens.com; worker-src blob:; report-uri https://o1.ingest.sentry.siemens-web.com/api/68/security/?sentry_key=b4382018df484832b4ee2501bc82cea7&sentry_environment=siemenscom-prod&sentry_release=f23162c8; 3 upgrade-insecure-requests; default-src https: wss: data: blob: 'unsafe-inline' 'unsafe-eval' 3 default-src 'none'; img-src 'self' https://fedoramagazine.org; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://builds.coreos.fedoraproject.org; 3 report-uri /v1/csplog; block-all-mixed-content 3 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests 3 frame-ancestors 'self' http://webvisor.com/; 3 frame-ancestors https://ads.idntimes.com https://fyi.idntimes.com 3 frame-ancestors 'self' *.coe.int 3 default-src 'self' http: https: 3 frame-ancestors na.amzheimdall.com delorean-na.amazon.com delorean-prod.corp.amazon.com delorean-na.sandbox.amazon.com delorean-sandbox.corp.amazon.com delorean-preprod.corp.amazon.com delorean-beta.corp.amazon.com delorean-alpha.corp.amazon.com potserviceui-gamma.vrsnl.com potserviceui-gamma.findzen.com potserviceui-gamma.zappos.com potserviceui-gamma.6pm.com drive-render.corp.amazon.com cscentral-na-beta.vipinteg.amazon.com cscentral.amazon.com delorean-6pm-gamma.corp.amazon.com delorean-6pm-preprod.corp.amazon.com delorean-6pm-prod.corp.amazon.com delorean-6pm-na.amazon.com; report-uri /marty/api/csp-report 3 upgrade-insecure-requests; frame-ancestors 'self' https://www.straitstimes.com http://www.straitstimes.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.netsuite.com http://consent.truste.com *.trustarc.com *.adroll.com *.bing.com https://*.doubleclick.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com https://vlog.leadformix.com *.googleapis.com *.ensighten.com *.demandbase.com http://chat.leadformix.com static.atgsvcs.com rules.atgsvcs.com netsuite-salechat.custhelp.com netsuite-salechat.custhelp.com http://netsuite-salechat.widget.custhelp.com http://netsuite-salechat.widget.custhelp.com bronto--tst1.custhelp.com http://bronto--tst1.widget.custhelp.com www.rnengage.com *.rightnowtech.com https://assets.adobedtm.com http://img.en25.com http://netsuite-www.baynote.net *.facebook.com *.facebook.net *.google.com *.twitter.com *.yahoo.com *.akamaihd.net *.demdex.net *.omtrdc.net https://*.adobetag.com https://*.linkedin.com *.licdn.com https://*.openx.net https://*.rubiconproject.com https://*.gumgum.com https://*.casalemedia.com https://*.media6degrees.com *.company-target.com *.rlcdn.com https://*.pubmatic.com https://*.w55c.net https://*.bidswitch.net https://*.narrative.io *.bidr.io *.2o7.net https://tags.bkrtx.com flex.atdmt.com https://s.yimg.com *.oracleinfinity.io https://dqm.crownpeak.com/; style-src 'self' 'unsafe-inline' https://netsuite-salechat.widget.custhelp.com https://bronto--tst1.widget.custhelp.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src * data: ; frame-src 'self' https://go.netsuite.com *.doubleclick.net *.youtube.com *.youtu.be *.facebook.com *.facebook.net *.omtrdc.net *.trustarc.com http://chat.leadformix.com https://netsuite-salechat.custhelp.com https://netsuite-salechat-de.custhelp.com https://netsuite-salechat-es.custhelp.com https://netsuite-salechat-fr.custhelp.com https://netsuite-salechat-jp.custhelp.com https://netsuite-salechat-ko.custhelp.com https://netsuite-salechat-nl.custhelp.com https://netsuite-salechat-pt.custhelp.com https://netsuite-salechat-sv.custhelp.com https://netsuite-salechat-zhcn.custhelp.com https://netsuite-salechat-zhtw.custhelp.com https://bronto--tst1.custhelp.com/ *.demdex.net *.bluekai.com; connect-src 'self' https://api.company-target.com https://*.doubleclick.net https://*.googlevideo.com *.omtrdc.net *.demdex.net http://rules.atgsvcs.com https://bat.bing.com https://netsuite-salechat.custhelp.com https://s.yimg.com https://www-stage.oracle.com https://api.crownpeak.net/; media-src 'self' blob: ; report-uri https://nlcorp.app.netsuite.com/app/security/csp/cspaudit.nl 3 default-src 'self' *.starbucks.com *.starbucksassets.com *.starbucks.ca; manifest-src 'self' *.starbucks.com *.starbucks.ca; connect-src 'self' *.starbucks.com *.starbucksassets.com *.starbucks.ca *.nr-data.net *.doubleclick.net *.optimizely.com *.go-mpulse.net *.akamaihd.net *.akstat.io https://fonts.gstatic.com *.trustarc.com *.google-analytics.com *.googlevideo.com; child-src 'self' *.starbucks.com *.starbucks.ca *.doubleclick.net *.optimizely.com *.trustarc.com; media-src 'self' blob: *.starbucks.com *.starbucksassets.com *.starbucks.ca *.youtube.com; frame-src 'self' *.optimizely.com *.trustarc.com *.youtube.com; font-src 'self' *.starbucks.com *.starbucksassets.com *.starbucks.ca https://fonts.gstatic.com *.trustarc.com https://fonts.googleapis.com; style-src 'self' 'unsafe-inline' 'strict-dynamic' *.starbucks.com *.starbucksassets.com *.starbucks.ca https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.starbucks.com *.starbucksassets.com *.starbucks.ca *.bing.com cdnjs.com *.optimizely.com *.trustarc.com *.googletagmanager.com *.google-analytics.com *.xg4ken.com *.newrelic.com *.nr-data.net *.go-mpulse.net *.doubleclick.net *.google.com *.gstatic.com; img-src 'self' data: *.starbucks.com *.starbucksassets.com *.starbucks.ca *.truste.com *.trustarc.com *.agkn.com *.google-analytics.com *.akamaihd.net *.adsrvr.org *.bing.com *.doubleclick.net *.googletagmanager.com https://*.gstatic.com *.google.com *.nr-data.net *.ytimg.com *.ggpht.com; report-uri /webhooks/csp-report; 3 frame-ancestors http://*.ccf.org https://*.ccf.org https://clevelandclinic.ungerboeck.com https://*.clevelandclinic.org http://*.clevelandclinic.org 3 connect-src 'self' checkout.stripe.com https://checkout.stripe.com https://billing.stripe.com/session sentry.io api.github.com www.npmjs.com;default-src 'none';img-src * data: https://*.stripe.com;script-src 'self' data: 'unsafe-inline' https://checkout.stripe.com/checkout.js https://checkout.stripe.com https://js.stripe.com/v3 https://static.accountdock.com https://platform.twitter.com/widgets.js https://static.npmjs.com/;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.npmjs.com/;frame-src checkout.stripe.com https://checkout.stripe.com https://js.stripe.com/ https://accountdock.com/app https://www.youtube.com/embed/mKMaG0cixXw https://static.accountdock.com/;font-src https://fonts.gstatic.com https://static.npmjs.com/ ;media-src https://player.vimeo.com https://fpdl.vimeocdn.com https://gcs-vimeo.akamaized.net https://vod-progressive.akamaized.net 3 default-src 'self' https: 'unsafe-inline' blob: data:; frame-ancestors 'self' 3 default-src 'self' https: data: 'unsafe-eval' 'unsafe-inline' blob:; object-src 'self'; img-src 'self' http: data: 3 frame-ancestors 'self'; upgrade-insecure-requests; 3 default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' *.oculus.com *.atdmt.com www.google-analytics.com static.oculuscdn.com forums.oculusvr.com tags.tiqcdn.com *.youtube.com *.ytimg.com;style-src data: blob: 'unsafe-inline' * *.oculus.com *.facebook.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' *.oculus.com *.oculuscdn.com;font-src *.oculus.com data: *.fbcdn.net *.facebook.com *.akamaihd.net *.oculuscdn.com;img-src *.oculus.com *.fbcdn.net *.facebook.com *.facebook.net *.fbthirdpartypixel.com *.akamaihd.net *.oculuscdn.com *.atdmt.com data: blob: www.google-analytics.com stats.g.doubleclick.net www.google.com googleads.g.doubleclick.net media-library.stackla.com img.youtube.com *.ytimg.com alb.reddit.com;frame-src *.oculus.com *.fbthirdpartypixel.com *.facebook.com *.youtube.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com;report-uri https://www.facebook.com/csp/reporting/; 3 frame-src 'self' *.kidshealth.org *.doubleclick.net *.snapchat.com *.vimeo.com *.google.com *.hotjar.com *.krxd.net *.adsrvr.org *.readspeaker.com *.polldaddy.com *.familysurvey.org *.survey.fm; 3 default-src 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: about: miroapp: wss: ws: *; frame-src 'unsafe-inline' 'unsafe-eval' data: blob: miroapp: *; base-uri 'unsafe-inline' about: data: *; form-action 'unsafe-inline' data: post-it-alpha: post-it: *; worker-src 'unsafe-inline' data: blob: miroapp: *; report-uri https://s.realtimeboard.com/api/25/security/?sentry_key=fb5e3001534f453e85d1771b1088b293&sentry_environment=production; 3 frame-ancestors 'self' https: *.upwave.com 3 frame-ancestors https://app.c-spanbus.org https://*.c-span.org 3 default-src *; object-src *; script-src 'unsafe-eval' * 'unsafe-inline' *; connect-src *; img-src * data:; style-src 'unsafe-inline' *; font-src * data:; frame-src * 3 default-src https: http: data: 'unsafe-inline' 'unsafe-eval' 3 default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 3 default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; frame-ancestors 'self' 3 default-src https: data: blob: 'self'; upgrade-insecure-requests; script-src 'unsafe-inline' 'unsafe-eval' https: data: blob: 'self'; style-src 'unsafe-inline' 'unsafe-eval' https: data: blob: 'self'; img-src 'unsafe-inline' 'unsafe-eval' https: data: blob: 'self' 3 default-src * 'self' data: 'unsafe-inline' blob:;script-src * 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.trustarc.com *.doubleclick.net *.liveperson.net *.sas.com assets.adobedtm.com ssl.google-analytics.com accdn.lpsnmedia.net www.googletagmanager.com www.google-analytics.com bat.bing.com benchtag.co front.facetz.net *.facebook.net *.facebook.com www.googleadservices.com tb.juiceadv.com *.linkedin.com pixel.mathtag.com pixel.quantserve.com *.quora.com analytics.twitter.com tagmanager.google.com mc.yandex.ru static.ads-twitter.com snap.licdn.com *.bizographics.com dev.visualwebsiteoptimizer.com scripts.demandbase.com consent.truste.com s.yimg.com ssl.gstatic.com api.company-target.com script.crazyegg.com platform.twitter.com sp.analytics.yahoo.com x.bidswitch.net ad4.adfarm1.adition.com livestream.co *.brightcove.net track.adform.net insight.adsrvr.org www.vintom.com b92.yahoo.co.jp cdn.appdynamics.com execution-dscvrtraffic.cidev.sas.us *.brightcove.com *.mrpfd.com d3js.org *.d3.org;img-src * 'self' blob: data: *.google-analytics.com *.doubleclick.net www.google.com www.googletagmanager.com *.sas.com front.facetz.net *.facebook.com www.googleadservices.com tb.juiceadv.com ext.ligatus.com bcp.crwdcntrl.net pixel.mathtag.com *.quora.com cdn.taboola.com analytics.twitter.com d.company-target.com mc.yandex.ru t.co px.ads.linkedin.com *.bizographics.com insight.adsrvr.org assets.adobedtm.com *.brightcove.com;font-src * 'self' data: *.sas.com fast.fonts.net;connect-src * 'self' *.sas.com *.brightcove.com ma156-r.analytics.edgekey.net api.company-target.com livestream.com www.vintom.com *.doubleclick.net assets.adobedtm.com;frame-src 'self' assets.adobedtm.com lpcdn.lpsnmedia.net *.liveperson.net www.youtube.com s7.addthis.com *.twitter.com *.sas.com pixel.mathtag.com livestream.com ad4.adfarm1.adition.com www.vintom.com *.doubleclick.net *.facebook.net *.twitter.com *.trustarc.com *.facebook.com *.linkedin.com *.chargebee.com *.sli.do *.logentries.com;frame-ancestors *.sas.com *.jmp.com *.gatheriq.analytics *.curriculumpathways.com *.hubb.me 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.paytm.com *.paytm.in paytmstores.com *.paytmstores.com polyfill.io widget.gleamjs.io gleamjs.io platform.twitter.com *.bintray.com bintray.com cdn.syndication.twimg.com gateway.answerscloud.com *.cloudfront.net *.google.com *.hotjar.com apis.mapmyindia.com cdn.ravenjs.com *.youtube.com *.gstatic.com *.googleadservices.com *.doubleclick.net bid.g.doubleclick.net u.heatmap.it cdn.trackjs.com s.ytimg.com *.googletagmanager.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com assets.zendesk.com connect.facebook.net alipaybridge://* cdn.branch.io googleads.g.doubleclick.net app.link bid.g cdn.ampproject.org dev.visualwebsiteoptimizer.com paytmmall.com *.paytmmall.com *.insider.in paytmblogfinal.wpengine.com code.jquery.com assets.pinterest.com blob:; frame-src 'self' *.paytm.com *.paytm.in *.twitter.com s.ytimg.com cdn.syndication.twimg.com *.insider.in paytmblogfinal.wpengine.com code.jquery.com assets.pinterest.com *.youtube.com assets.zendesk.com apis.mapmyindia.com *.facebook.com *.google.com *.hotjar.com cdn.ravenjs.com s-static.ak.facebook.com tautt.zendesk.com paytmmall.com *.paytmmall.com polyfill.io paytmstores.com *.paytmstores.com alipaybridge://* widget.gleamjs.io gleam.io; object-src 'self'; report-uri https://csp-report.mypaytm.com/reportcspviolations.php 3 child-src 'self'; connect-src 'self' https://*.akafms.net https://*.akamaihd.net https://*.media.brightcove.com https://*.brightcove.com https://*.brightcovecdn.com https://*.brightcove.net https://*.digitalpfizer.com https://*.evidon.com https://*.hotjar.com https://*.llnw.net/ https://*.llnwd.net/ https://adservice.google.com https://amer-identity.pfizer.com https://bam-cell.nr-data.net https://bam.nr-data.net https://brightcove.hs.llnwd.net https://dpm.demdex.net https://edge.api.brightcove.com https://emea-identity.pfizer.com https://house-cloudfront.ap-northeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-1.prod.boltdns.net https://house-cloudfront.ap-southeast-2.prod.boltdns.net https://house-cloudfront.eu-west-1.prod.boltdns.net https://house-cloudfront.us-east-1.prod.boltdns.net https://manifest.prod.boltdns.net https://knrpc.olark.com/nrpc/ https://l.betrad.com https://sitecatalyst.omniture.com/sc15/activitymap https://players.brightcove.net https://stats.addtoany.com/menu https://stats.g.doubleclick.net https://tagmanager.google.com https://vc.hotjar.io/ https://www.facebook.com https://www.google-analytics.com wss://*.hotjar.com wss://*.pfizer.com https://pfe-pfizercom-d8-dev.s3.us-east-1.amazonaws.com https://m.addthis.com https://api-v3.conductrics.com https://cdn-v3.conductrics.com https://pfe-pfizercom-d8-dev.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.us-east-1.amazonaws.com https://players.brightcove.net/ https://players.brightcove.net/1852113022001/ByY1aeWF_default/config.json https://players.brightcove.net/1852113022001/7eDMrqTZyS_default/config.json https://www.youtube.com/iframe_api https://svc.webspellchecker.net https://cdn-dev.pfizer.com https://cdn.pfizer.com; font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://docs.gcs.digitalpfizer.com/fonts/ https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://quilt-cdn.janrain.com https://script.hotjar.com https://use.fontawesome.com/releases/ https://use.typekit.net https://vjs.zencdn.net https://www.youtube.com https://maxcdn.bootstrapcdn.com https://s3.us-east-2.amazonaws.com https://svc.webspellchecker.net https://cdn.pfizer.com https://cdn-dev.pfizer.com; frame-src 'self' tel: https://*.fls.doubleclick.net https://*.janrainsso.com https://activitymap.adobe.com/sc15/activitymap/ https://bid.g.doubleclick.net https://l3.evidon.com https://players.brightcove.net https://static.addtoany.com https://static.olark.com https://tpc.googlesyndication.com https://vars.hotjar.com https://www.facebook.com https://www.google.com/maps/ https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.youtube.com https://s7.addthis.com https://platform.twitter.com https://syndication.twitter.com https://www.hapyak.com https://player.simplecast.com https://p2a.co https://www.pfizer.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://action.pfizer.com https://www.medrespond-pfra.com https://twitter.com https://insight.adsrvr.org https://pfe-pfizercom-d8-dev.s3.amazonaws.com/ https://docs.google.com/ https://match.adsrvr.org/ https://www.shaa.it https://cdn-dev.pfizer.com https://cdn.pfizer.com; img-src 'self' about: data: https://* https://img.youtube.com https://cdnjs.cloudflare.com https://pbs.twimg.com https://images-cdn.newscred.com https://pfe-pfizercom-d8-dev.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://syndication.twitter.com https://abs.twimg.com https://ton.twimg.com https://platform.twitter.com https://developers.google.com https://pixel.newscred.com https://t.co/i/adsct https://tr.outbrain.com/pixel https://amplifypixel.outbrain.com/pixel https://px.ads.linkedin.com/collect https://p.adsymptotic.com/d/px/ https://app.icontact.com https://s3.us-east-2.amazonaws.com https://secure.adnxs.com https://pixel.mediaiqdigital.com https://cdn-dev.pfizer.com https://cdn.pfizer.com https://analytics.newscred.com https://analytics.welcomesoftware.com; manifest-src 'self'; media-src 'self' data: blob: https://*.akafms.net https://*.akamaihd.net https://*.boltdns.net https://*.brightcovecdn.com https://*.llnw.net https://*.llnwd.net https://*.media.brightcove.com https://brightcove.hs.llnwd.net https://static.olark.com https://secure.brightcove.com/services/mobile/streaming/ https://pfe-pfizercom-d8-dev.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://cdn-dev.pfizer.com https://cdn.pfizer.com; prefetch-src 'self' https://*.boltdns.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.digitalpfizer.com https://*.janrain.com https://*.janraincapture.com https://*.janrainsso.com https://ajax.googleapis.com https://api.olark.com https://assets.adobedtm.com https://bam.nr-data.net https://cdnjs.cloudflare.com https://connect.facebook.net https://c.evidon.com https://l.evidon.com https://d1v9u0bgi1uimx.cloudfront.net https://d29usylhdk1xyu.cloudfront.net https://d7v0k4dt27zlp.cloudfront.net/assets/ https://docs.gcs.digitalpfizer.com https://googleads.g.doubleclick.net https://js.bizographics.com https://js-agent.newrelic.com https://knrpc.olark.com/nrpc/ https://l.betrad.com https://maps.googleapis.com https://optoutapi.evidon.com https://p.adsymptotic.com https://pfizer-grv-eu.janraincapture.com https://players.brightcove.net https://px.ads.linkedin.com https://rpxnow.com/load/ https://s3.amazonaws.com/pfe_grv https://s3.amazonaws.com/pfe_im/ https://script.hotjar.com https://sjs.bizographics.com https://static.hotjar.com https://static.addtoany.com https://static.olark.com https://tagmanager.google.com https://tpc.googlesyndication.com https://vjs.zencdn.net https://www.bizographics.com https://www.google.com/recaptcha/ https://www.google.com/search/ https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.linkedin.com https://cdn.jsdelivr.net https://s7.addthis.com https://z.moatads.com https://v1.addthisedge.com https://m.addthis.com https://platform.twitter.com https://cdn.syndication.twimg.com https://p2a.co https://www.youtube.com/iframe_api https://action.pfizer.com https://s.ytimg.com https://maxcdn.bootstrapcdn.com https://static.ads-twitter.com/uwt.js https://analytics.twitter.com https://amplify.outbrain.com https://snap.licdn.com https://app.icontact.com https://d2qrdklrsxowl2.cloudfront.net https://pfe-pfizercom-d8-dev.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://js.adsrvr.org https://svc.webspellchecker.net https://tr.outbrain.com https://bam-cell.nr-data.net https://cdn.taboola.com https://trc.taboola.com https://cdn-dev.pfizer.com https://cdn.pfizer.com https://analytics.newscred.com https://analytics.welcomesoftware.com cdn-v3.conductrics.com cdnjs.cloudflare.com code.jquery.com https://pkg-cdn.digitalpfizer.com https://polyfill.io https://unpkg.com; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://cookies.pfizer.com https://d3hmp0045zy3cs.cloudfront.net https://fast.fonts.net https://fonts.googleapis.com https://*.janrain.com https://maxcdn.bootstrapcdn.com https://pfredirect.pfizersite.io https://players.brightcove.net https://quilt-cdn.janrain.com https://s3.amazonaws.com/pfe_grv/ https://static.olark.com https://stackpath.bootstrapcdn.com https://tagmanager.google.com https://translate.googleapis.com https://use.typekit.net https://cdn.jsdelivr.net https://p.typekit.net https://www.youtube.com https://platform.twitter.com https://ton.twimg.com https://app.icontact.com https://pfe-pfizercom-d8-dev.s3.amazonaws.com https://pfe-pfizercom-d8-prod.s3.amazonaws.com https://svc.webspellchecker.net https://tr.outbrain.com https://cdn-dev.pfizer.com https://cdn.pfizer.com cdnjs.cloudflare.com fonts.googleapis.com https://cdnjs.cloudflare.com https://unpkg.com; worker-src 'self' blob:; report-uri https://pfeprod.report-uri.com/r/t/csp/enforce 3 default-src 'self' *.carbonblack.io carbonblack.io *.cbcloud.de cbcloud.de *.cbcloud.sg cbcloud.sg *.duosecurity.com gstatic.com fonts.gstatic.com 'unsafe-inline' 3 frame-ancestors 'self' https://*.pandasecurity.com http://*.pandasecurity.com; 3 frame-ancestors *.cox.net *.cox.com *.coxbusiness.com coxcommunications.experiencecloud.adobe.com *.discovercoxonline.com agent.bold360.com *.cox-ondemand.com *.yext-cdn.com *.yextpages.net 3 script-src 'unsafe-inline' 'unsafe-eval' https:; worker-src blob: https: https://api.useinsider.com; 3 frame-ancestors 'self' https://landing.weddingwire.com 3 script-src 'self' 'unsafe-eval' 'unsafe-inline' *.afterpay.com *.clearpay.co.uk maps.googleapis.com static.fbot.me campaign.fbot.me lcx-embed.bambuser.com www.googletagmanager.com *.onetrust.com cdn.branch.io sc-static.net snap.licdn.com connect.facebook.net munchkin.marketo.net www.googleadservices.com cdn.dashhudson.com iq.afterpay.com tags.tiqcdn.com djnf6e5yyirys.cloudfront.net; img-src 'self' data: *.afterpay.com *.clearpay.co.uk maps.gstatic.com *.googleapis.com *.ggpht cdn.builder.io static.fbot.me www.google.co.nz www.google.co.uk www.google.com www.google.com.au www.googletagmanager.com px.ads.linkedin.com www.facebook.com p.adsymptotic.com cdn.branch.io www.google-analytics.com public.fbot.me connect.facebook.net *.onetrust.com cdn.dashhudson.com likeshop.me files.prezzee.com files.prezzee.com.au files.prezzee.uk; script-src-elem 'self' 'unsafe-inline' *.afterpay.com *.clearpay.co.uk *.googleapis.com cdn.builder.io lcx-embed.bambuser.com www.googletagmanager.com snap.licdn.com connect.facebook.net sc-static.net t.contentsquare.net munchkin.marketo.net djnf6e5yyirys.cloudfront.net www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net cdn.branch.io app.link public.fbot.me static.fbot.me campaign.fbot.me *.onetrust.com cdn.dashhudson.com iq.afterpay.com tags.tiqcdn.com v5tufwer.micpn.com pi.pardot.com; object-src 'none'; base-uri 'none'; 3 frame-ancestors 'self' www.facebook.com www.messenger.com www.liligo.fr admin.liligo.fr; report-uri /vsctcspreport 3 frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.brides.com 3 frame-ancestors 'self' https://www.grainger.com; 3 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; child-src * 'unsafe-inline' 'unsafe-eval' data: blob:; connect-src * 'unsafe-inline' 'unsafe-eval' data: blob:; font-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' admin.reverb.tools; media-src * 'unsafe-inline' 'unsafe-eval' data: blob: 3 frame-ancestors *.motorsport.com *.motorsport.uol.com.br motorsport.uol.com.br *.autosport.com 3 child-src * 3 frame-ancestors 'self' secure.motogp.com; 3 font-src 'self' code.freent.de oauth.freenet.de https://fonts.gstatic.com; img-src * data:; frame-ancestors *.freenet.de; plugin-types application/pdf application/x-shockwave-flash 3 frame-ancestors *.splunk.com *.touchcast.com *.salesforce.com, frame-ancestors *.splunk.com *.touchcast.com 3 frame-ancestors 'self' http://info.barchart.com 3 frame-ancestors 'self' https://sr.se https://*.sr.se https://sverigesradio.se https://*.sverigesradio.se; child-src blob:; worker-src blob:; frame-src 'self' https://optimize.google.com https://embed.sr.se; connect-src 'self' https://www.google-analytics.com https://live-cdn.sr.se https://live.sr.se https://sverigesradio.se https://api.sr.se; script-src 'self' https://www.google-analytics.com https://optimize.google.com https://analytics.codigo.se https://trafficgateway.research-int.se 'sha256-K3MwmWz+7Ey0FDDK4p3pHQuAIb8jQuxkoGLRhsa7+LM=' 'sha256-a0KK41TOkEyp6x7zRvfcgUMfFDJ71c805PIpINx/qik=' 'sha256-esgu7nRIUVZWw34DKa02SGO0zuQ4jN8gmD5SYSEMjR4='; object-src 'none'; base-uri 'self'; report-uri /csp-error; 3 frame-ancestors 'self' tvn24.pl *.tvn24.pl 3 frame-ancestors 'self' *.marketscreener.com *.zonebourse.com *.scoopnest.com; 3 frame-ancestors 'self' https://www.poringa.net; 3 default-src 'self';object-src 'self' *.cdn.datatables.net cdn.datatables.net;connect-src 'self' *.mt.lv maps.googleapis.com fonts.googleapis.com *.doubleclick.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: unpkg.com i.mt.lv *.google.com gstatic.com code.jquery.com *.gstatic.com www.google-analytics.com googleapis.com *.googleapis.com *.mikrotik.com mikrotik.com;style-src 'self' 'unsafe-inline' i.mt.lv fonts.googleapis.com unpkg.com *.mikrotik.com mikrotik.com code.jquery.com use.typekit.net www.mikrotik.com;img-src 'self' data: i.mt.lv api.tiles.mapbox.com *.tile.openstreetmap.org unpkg.com *.arcgisonline.com stats.g.doubleclick.net www.google-analytics.com mikrotik.com www.mikrotik.com forum.mikrotik.com 1.aerial.maps.cit.api.here.com 2.aerial.maps.cit.api.here.com 3.aerial.maps.cit.api.here.com 4.aerial.maps.cit.api.here.com gstatic.com http://services.ga.gov.au *.gstatic.com *.googleapis.com *.arcgisonline.com *.google.com *.google.lv *.routerboard.com;frame-src 'self' youtu.be youtube.com www.youtube.com www.google.com;font-src 'self' data: mikrotik.com fonts.gstatic.com www.mikrotik.com i.mt.lv;frame-ancestors 'self'; 3 default-src 'self' blob: wss: data: https:; img-src 'self' data: https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https:; style-src 'self' 'unsafe-inline' data: https:; 3 https://acsbapp.com/*; report-uri https://indigo.report-uri.com/r/d/csp/enforce; 3 default-src 'self' *.fitchratings.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net www.googletagmanager.com www.google-analytics.com fitchconnect.piwikpro.com cdn.polyfill.io *.brightcove.net *.brightcove.com munchkin.marketo.net your.fitchratings.com c.evidon.com cdn2.funnelenvy.com script.crazyegg.com snap.licdn.com *.clearbit.com *.idio.co tagmanager.google.com chart-studio.plotly.com public.flourish.studio app.fitchconnect-stg.com app.fitchconnect.com *.fitch.group static.hotjar.com script.hotjar.com; style-src 'self' 'unsafe-inline' blob: your.fitchratings.com fonts.googleapis.com; connect-src 'self' blob: *.fitchratings.com notify.bugsnag.com *.brightcove.com *.brightcove.net 732-ckh-767.mktoresp.com fx.fitchgroup.co *.boltdns.net *.akamaihd.net *.crazyegg.com *.idio.co *.brightcovecdn.com *.marketo.net *.fitch.group c.evidon.com *.funnelenvy.com www.google-analytics.com fonts.googleapis.com *.piwikpro.com snap.licdn.com images.ctfassets.net fonts.gstatic.com stats.g.doubleclick.net api.sjpf.io api.fpjs.io *.hotjar.com:* vc.hotjar.io:* surveystats.hotjar.io wss://*.hotjar.com; prefetch-src 'self' *.funnelenvy.com 732-ckh-767.mktoresp.com *.boltdns.com *.betrad.com *.idio.co ga.clearbit.com house-fastly-signed-us-east-1-prod.brightcovecdn.com c.evidon.com fitchconnect.piwikpro.com munchkin.marketo.net snap.licdn.com script.crazyegg.com www.google-analytics.com www.googletagmanager.com *.brightcove.com; img-src 'self' data: trk.funnelenvy.com images.ctfassets.net *.boltdns.net metrics.brightcove.com www.google-analytics.com stats.g.doubleclick.net l.betrad.com fitchconnect.piwikpro.com *.linkedin.com p.adsymptotic.com *.idio.co *.fitch.group *.openstreetmap.org *.fitchratings.com httpsak-a.akamaihd.net script.hotjar.com; font-src 'self' data: *.fitchratings.com fonts.gstatic.com script.hotjar.com; frame-src 'self' *.fitchratings.com l3.evidon.com infogram.com e.infogram.com infogram-download-eu.s3.eu-west-1.amazonaws.com infogram-download-us2.s3.eu-west-1.amazonaws.com your.fitch.group flo.uri.sh plotly.com chart-studio.plotly.com fitchgroup.eu.qualtrics.com indd.adobe.com vars.hotjar.com; worker-src 'self' blob:; child-src 'self' blob:; media-src 'self' blob: *.fitchratings.com *.brightcove.com videos.ctfassets.net *.akamaihd.net manifest.prod.boltdns.net; object-src 'none' 3 object-src 'self'; report-uri https://ayba8dhs.uriports.com/reports/report; report-to default 3 default-src 'self' *.ekantipur.com *.kantipurdaily.com; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; prefetch-src 'none'; 3 default-src 'self' *.beeline.ru *.oktaplan.ru *.fls.doubleclick.net suggestions.dadata.ru ad.mail.ru ads.betweendigital.com *.ads.betweendigital.com adservice.google.com an.yandex.ru *.rutarget.ru *.g.doubleclick.net mc.yandex.ru *.google.com sync.upravel.com top-fwz1.mail.ru vk.com connect.facebook.net www.facebook.com www.google.ru www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com static.criteo.net *.tmcrussia.com sslwidget.criteo.com dis.eu.criteo.com api-maps.yandex.ru enterprise.api-maps.yandex.ru api.flocktory.com flocktory.com api.mindbox.ru *.artfut.com click.adkratos.ru code.jquery.com fullstory.com bn.adblender.ru aprtx.com aprtn.com px.adhigh.net mod.calltouch.ru *.googleapis.com www.youtube.com st.yagla.ru k50-a.akamaihd.net *.k50.ru *.ruru.ru widgets.mos.ru *.kaspersky-labs.com *.popmechanic.ru metrika.yandex.ru *.yandex.tld *.yandex.net webvisor.com *.carrotquest.io yastatic.net *.gdeslon.ru gdeslon.ru *.aebdgd.ru aebdgd.ru *.s4fmvl.ru s4fmvl.ru go.epnbest.bz c.4clouds.org *.witstroom.com *.witstroom.com:8080 *.dashamail.com *.onesignal.com onesignal.com suggest-maps.yandex.ru *.maps.yandex.ru code.reffection.com cdn3.caltat.com leadslabpixels.net sonar.semantiqo.com *.gestalt.email https://*.carrotquest.app https://*.carrotquest.io https://cdn.carrotquest.app https://api.carrottrack.io https://static.terratraf.io http://st.hybrid.ai/txsp.js https://qr.nspk.ru https://sync.bumlam.com static.terratraf.io https://sync.sniperlog.ru/gp/ https://synce.user-red.com/ https://sync3.adsniper.ru/ 'unsafe-inline'; frame-src *; media-src *; img-src * data: blob:; font-src *.beeline.ru data:; script-src 'self' *.beeline.ru *.oktaplan.ru *.fls.doubleclick.net kasko-osago-online.ru ad.mail.ru event.getblue.io widget.getblue.io ads.betweendigital.com *.ads.betweendigital.com adservice.google.com an.yandex.ru *.rutarget.ru *.g.doubleclick.net mc.yandex.ru *.google.com sync.upravel.com top-fwz1.mail.ru vk.com connect.facebook.net www.facebook.com www.google.ru www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com static.criteo.net *.tmcrussia.com sslwidget.criteo.com dis.eu.criteo.com api-maps.yandex.ru enterprise.api-maps.yandex.ru api.flocktory.com flocktory.com api.mindbox.ru *.artfut.com click.adkratos.ru code.jquery.com fullstory.com bn.adblender.ru aprtx.com aprtn.com px.adhigh.net mod.calltouch.ru *.googleapis.com www.youtube.com st.yagla.ru k50-a.akamaihd.net *.k50.ru *.ruru.ru widgets.mos.ru *.kaspersky-labs.com *.popmechanic.ru metrika.yandex.ru *.yandex.tld *.yandex.net webvisor.com *.carrotquest.io yastatic.net *.gdeslon.ru gdeslon.ru *.aebdgd.ru aebdgd.ru *.s4fmvl.ru s4fmvl.ru go.epnbest.bz c.4clouds.org *.witstroom.com *.witstroom.com:8080 *.dashamail.com *.onesignal.com onesignal.com suggest-maps.yandex.ru *.maps.yandex.ru code.reffection.com cdn3.caltat.com leadslabpixels.net sonar.semantiqo.com *.gestalt.email https://*.carrotquest.app https://*.carrotquest.io https://cdn.carrotquest.app https://api.carrottrack.io https://static.terratraf.io http://st.hybrid.ai/txsp.js https://qr.nspk.ru https://sync.bumlam.com static.terratraf.io https://sync.sniperlog.ru/gp/ https://synce.user-red.com/ https://sync3.adsniper.ru/ 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.beeline.ru metrika.yandex.ru mc.yandex.ru http://webvisor.com *.yandex.net *.mtproxy.yandex.net *.yandex.tld yastatic.net; connect-src 'self' *.beeline.ru *.oktaplan.ru *.fls.doubleclick.net suggestions.dadata.ru kasko-osago-online.ru ad.mail.ru ads.betweendigital.com *.ads.betweendigital.com adservice.google.com an.yandex.ru *.rutarget.ru *.g.doubleclick.net mc.yandex.ru *.google.com sync.upravel.com top-fwz1.mail.ru vk.com connect.facebook.net www.facebook.com www.google.ru www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com static.criteo.net *.tmcrussia.com sslwidget.criteo.com dis.eu.criteo.com api-maps.yandex.ru enterprise.api-maps.yandex.ru api.flocktory.com flocktory.com api.mindbox.ru *.artfut.com click.adkratos.ru code.jquery.com fullstory.com bn.adblender.ru aprtx.com aprtn.com px.adhigh.net mod.calltouch.ru *.googleapis.com www.youtube.com st.yagla.ru k50-a.akamaihd.net *.k50.ru *.ruru.ru widgets.mos.ru *.kaspersky-labs.com *.popmechanic.ru metrika.yandex.ru *.yandex.tld *.yandex.net webvisor.com *.carrotquest.io wss://*.carrotquest.io yastatic.net *.gdeslon.ru gdeslon.ru *.aebdgd.ru aebdgd.ru *.s4fmvl.ru s4fmvl.ru go.epnbest.bz c.4clouds.org *.witstroom.com *.witstroom.com:8080 anketa.alfabank.ru *.dashamail.com *.onesignal.com onesignal.com suggest-maps.yandex.ru *.maps.yandex.ru code.reffection.com cdn3.caltat.com leadslabpixels.net sonar.semantiqo.com *.gestalt.email https://*.carrotquest.app wss://*.carrotquest.app https://*.carrotquest.io https://cdn.carrotquest.app https://api.carrottrack.io https://static.terratraf.io http://st.hybrid.ai/txsp.js https://qr.nspk.ru https://sync.bumlam.com static.terratraf.io https://sync.sniperlog.ru/gp/ https://synce.user-red.com/ https://sync3.adsniper.ru/ 'unsafe-inline' 3 frame-ancestors 'self' http://webvisor.com http://awards.ratingruneta.ru 3 default-src 'self' https://play.vidyard.com *.vidyard.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://clientes-ext-qa.apps.ambientesbc.com/ https://clientes-ext.apps.bancolombia.com/ https://* https://srvfrontcer.claro.com.co:7002 https://widget.sndcdn.com *.sndcdn.com https://js-agent.newrelic.com *.newrelic.com https://bam.nr-data.net *.nr-data.net *.claro.com.co *.claro.com *.googleadservices.com *.tags.bkrtx.com *.tags.bluekai.com *.amazonaws.com https://s3.amazonaws.com https://static.opentok.com https://static.opentok.com *.opentok.com https://browseranalytic.com *.browseranalytic.com https://widget.sndcdn.com *.sndcdn.com https://js.hsforms.net *.hsforms.net https://scp.kampyle.com *.kampyle.com https://tpbancolombia.teleperformance.co *.teleperformance.co https://stati.in *.stati.in blob: https://play.vidyard.com *.vidyard.com https://static.zdassets.com https://clousc.com *.clousc.com https://static.hsappstatic.net *.hsappstatic.net https://forms.hsforms.com *.hsforms.com *.zdassets.com https://plinksoporte.zendesk.com *.zendesk.com https://play.vidyard.com *.vidyard.com https://d10lpsik1i8c69.cloudfront.net https://app.hubspot.com *.hubspot.com https://a.omappapi.com *.omappapi.com https://js.hs-scripts.com *.hs-scripts.com *.cloudfront.net https://people.wsuite.com *.wsuite.com https://js.hs-analytics.net *.hs-analytics.net https://widget-mediator.zopim.com *.zopim.com https://js.hs-banner.com *.hs-banner.com https://ajax.googleapis.com *.googleapis.com https://static.browseranalytic.com https://code.angularjs.org https://player.vimeo.com *.vimeo.com *.angularjs.org *.browseranalytic.com *.connect.facebook.net *.facebook.net https://polyfill.io *.polyfill.io https://library-sdb.apps.bancolombia.com *.bancolombia.com https://f.vimeocdn.com *.vimeocdn.com https://syndication.twitter.com *.twitter.com https://cdn.syndication.twimg.com *.twimg.com *.facebook.com *.script.hotjar.com https://asistencia.webv2.allus.com.co https://cdn.todo1.com *.todo1.com *.allus.com.co *.vars.hotjar.com *.t.co *.gstatic.com *.analytics.twitter.com *.twitter.com *.cdnjs.cloudflare.com *.cloudflare.com *.googletagmanager.com *.google-analytics.com *.snap.licdn.com *.licdn.com *.static.ads-twitter.com *.ads-twitter.com *.p.adsymptotic.com *.adsymptotic.com *.sync.teads.tv *.facebook.com https://code.jquery.com *.jquery.com *.px.ads.linkedin.com https://stackpath.bootstrapcdn.com *.bootstrapcdn.com *.linkedin.com *.stats.g.doubleclick.net *.doubleclick.net *.static.hotjar.com https://static.hotjar.com https://tags.bkrtx.com https://tags.bluekai.com https://www.google.com https://script.hotjar.com *.grupobancolombia.com https://lptag.liveperson.net https://maps.googleapis.com *.google.com https://www.google-analytics.com *.google-analytics.com *.cdn.dynamicyield.com *.st.dynamicyield.com *.rcom.dynamicyield.com https://cdn.dynamicyield.com https://st.dynamicyield.com https://rcom.dynamicyield.com https://unpkg.com https://accdn.lpsnmedia.net https://lo.v.liveperson.net https://lpcdn.lpsnmedia.net https://www.sc.pages03.net https://www.youtube.com *.youtube.com https://resources.digital-cloud-west.medallia.com https://cdn.jsdelivr.net *.cdn.jsdelivr.net; img-src 'self' https://clientes-ext-qa.apps.ambientesbc.com/ https://clientes-ext.apps.bancolombia.com/ data: https://* https://srvfrontcer.claro.com.co:7002 https://a.tribalfusion.com *.tribalfusion.com https://dpm.demdex.net *.demdex.net *.claro.com.co *.claro.com *.cloudfront.net *.px.ads.linkedin.com *.linkedin.com *.facebook.com *.amazonaws.com https://secure.gravatar.com *.gravatar.com https://pf-emoji-service--cdn.us-east-1.prod.public.atl-paas.net *.atl-paas.net https://vop.sundaysky.com *.sundaysky.com https://odr.mookie1.com *.mookie1.com https://monstat.com *.monstat.com https://pxl.jivox.com *.jivox.com https://vop.sundaysky.com *.sundaysky.com https://s3.amazonaws.com https://cdn2.hubspot.net https://i.stack.imgur.com *.imgur.com *.cloudfront.net https://widget.sndcdn.com *.sndcdn.com https://i1.sndcdn.com *.sndcdn.com https://a.omappapi.com *.omappapi.com *.hubspot.net https://upload.wikimedia.org *.wikimedia.org https://f.hubspotusercontent20.net https://play.vidyard.com *.vidyard.com *.hubspotusercontent20.net https://i1.sndcdn.com *.sndcdn.com https://track.hubspot.com https://i1.wp.com *.wp.com https://theme.zdassets.com *.zdassets.com *.hubspot.com https://soporte.plink.com.co *.plink.com.co https://cx.atdmt.com *.atdmt.com https://i.ytimg.com https://b1sync.zemanta.com *.zemanta.com https://sync.crwdcntrl.net *.crwdcntrl.net https://www.googletagmanager.com *.googletagmanager.com https://platform.twitter.com *.twitter.com https://abs.twimg.com *.ytimg.com https://i.vimeocdn.com *.vimeocdn.com https://xrbcqpor01.bancolombia.com:10039 *.bancolombia.com https://maps.googleapis.com *.googleapis.com https://yt3.ggpht.com *.ggpht.com https://connect.facebook.net *.facebook.net https://asistencia.webv2.allus.com.co *.allus.com.co *.google-analytics.com *.t.co https://t.co *.google.com https://www.google.com.co https://p.adsymptotic.com *.cdn.dynamicyield.com *.dynamicyield.com *.grupobancolombia.com https://tags.bluekai.com *.pages03.net *.maps.gstatic.com https://maps.gstatic.com *.gstatic.com https://resources.digital-cloud-west.medallia.com https://sync.teads.tv *.teads.tv https://googleads.g.doubleclick.net *.googleads.g.doubleclick.net; media-src 'self' https://clientes-ext-qa.apps.ambientesbc.com/ https://clientes-ext.apps.bancolombia.com/ https://* https://srvfrontcer.claro.com.co:7002 *.claro.com.co *.claro.com *.googleadservices.com *.grupobancolombia.com *.amazonaws.com *.cloudfront.net https://s3.amazonaws.com https://static.zdassets.com *.zdassets.com https://static.zdassets.com *.zdassets.com https://www.youtube.com https://asistencia.webv2.allus.com.co *.allus.com.co *.youtube.com blob: data:; frame-src 'self' https://clientes-ext-qa.apps.ambientesbc.com/ https://clientes-ext.apps.bancolombia.com/ https://* https://srvfrontcer.claro.com.co:7002 https://widget.spreaker.com *.spreaker.com *.claro.com.co *.claro.com *.googleadservices.com https://bcapi.apichefcompany.com *.cloudfront.net *.apichefcompany.com *.google-analytics.com *.facebook.com https://w.soundcloud.com *.soundcloud.com https://series1.cma.com.br *.cma.com.br https://bancolombia.olb.todo1.com *.todo1.com https://tpbancolombia.teleperformance.co *.teleperformance.co https://extractosinternet.bancolombia.com *.bancolombia.com https://forms.hsforms.com *.hsforms.com https://play.vidyard.com *.vidyard.com https://platform.twitter.com *.twitter.com https://vars.hotjar.com https://player.vimeo.com *.vimeo.com https://resources.digital-cloud-west.medallia.com *.medallia.com https://asistencia.webv2.allus.com.co *.allus.com.co https://series1.cma.com.br *.cma.com.br https://stags.bluekai.com https://api.skaduks.com https://bid.g.doubleclick.net *.grupobancolombia.com https://www.google.com *.google.com https://www.google-analytics.com https://cdn.dynamicyield.com *.dynamicyield.com https://lpcdn.lpsnmedia.net https://lpcdn.lpsnmedia.net https://www.youtube.com *.youtube.com https://9811311.fls.doubleclick.net https://webapp1.allus.com.co https://gmsdigitales.claro.com.co:8443 https://vc.hotjar.io; style-src 'self' 'unsafe-inline' https://clientes-ext-qa.apps.ambientesbc.com/ https://clientes-ext.apps.bancolombia.com/ https://* https://srvfrontcer.claro.com.co:7002 *.claro.com.co *.claro.com https://asistencia.webv2.allus.com.co https://cdnjs.cloudflare.com *.cloudflare.com https://library-sdb.apps.bancolombia.com *.bancolombia.com *.amazonaws.com https://s3.amazonaws.com https://assets.kampyle.com *.kampyle.com https://cdn2.hubspot.net *.hubspot.net https://galatea-dev.apps.ambientesbc.com *.ambientesbc.com https://cdn.jsdelivr.net *.jsdelivr.net https://cdn2.hubspot.net https://assets.vidyard.com *.vidyard.com *.hubspot.net https://static.zdassets.com *.zdassets.com *.webv2.allus.com.co https://www.gstatic.com *.gstatic.com https://f.vimeocdn.com *.vimeocdn.com https://platform.twitter.com *.twitter.com https://www.grupobancolombia.com https://use.fontawesome.com *.fontawesome.com *.grupobancolombia.com https://stackpath.bootstrapcdn.com *.bootstrapcdn.com https://nominatim.openstreetmap.org https://servcompwctb.claro.com.co https://fonts.googleapis.com *.google.com https://www.google-analytics.com *.google-analytics.com https://www.google.com https://unpkg.com; connect-src 'self' https://clientes-ext-qa.apps.ambientesbc.com/ https://clientes-ext.apps.bancolombia.com/ https://* https://bam.nr-data.net *.nr-data.net https://srvfrontcer.claro.com.co:7002 *.claro.com.co *.claro.com https://gms-digitales.claro.com.co:8443 *.claro.com.co:8443 *.claro.com.co:8030 https://webrtc.claro.com.co:8030 *.stats.g.doubleclick.net *.cloudfront.net https://fresnel.vimeocdn.com *.vimeocdn.com data: https://player-telemetry.vimeo.com *.vimeo.com https://api-widget.soundcloud.com *.soundcloud.com https://external.apps.bancolombia.com *.bancolombia.com https://api.us.apiconnect.ibmcloud.com *.ibmcloud.com https://jsonip.com *.jsonip.com https://resources.digital-cloud-west.medallia.com *.medallia.com https://inveco-services.qdata.io *.qdata.io https://identify.hotjar.com https://wave.sndcdn.com *.sndcdn.com https://api.ipify.org *.ipify.org *.hotjar.com https://alivionofinancieros.isobarapi.com *.isobarapi.com https://130vod-adaptive.akamaized.net *.akamaized.net https://c.browseranalytic.com *.amazonaws.com https://s3.amazonaws.com *.claro.com.co *.claro.com https://forms.hsforms.com *.hsforms.com https://tpbancolombia.teleperformance.co *.teleperformance.co https://raw.vidyard.com *.vidyard.com wss://tpbancolombia.teleperformance.co *.teleperformance.co https://ekr.zdassets.com https://api-k8-cer.plink.com.co https://api.plink.com.co *.plink.com.co https://api.omappapi.com *.omappapi.com *.zdassets.com wss://widget-mediator.zopim.com *.zopim.com https://plinksoporte.zendesk.com *.zendesk.com https://settings.luckyorange.net *.luckyorange.net https://digital.sanchobbdoapp.com https://www.calculadoralaboral.co *.calculadoralaboral.co *.sanchobbdoapp.com *.browseranalytic.com https://strfeedrt01.cma.com.br *.cma.com.br https://syndication.twitter.com *.twitter.com https://stats.g.doubleclick.net https://bcapi.apichefcompany.com *.apichefcompany.com https://bid.g.doubleclick.net *.googlevideo.com https://api.skaduks.com https://nominatim.openstreetmap.org https://servcompwctb.claro.com.co:7002 *.cdn.dynamicyield.com *.dynamicyield.com https://www.google.com *.google.com https://www.google-analytics.com *.google-analytics.com *.cdn.dynamicyield.com *.st.dynamicyield.com *.rcom.dynamicyield.com https://cdn.dynamicyield.com https://st.dynamicyield.com https://rcom.dynamicyield.com https://www.facebook.com https://cdn.jsdelivr.net *.jsdelivr.net *.facebook.com https://external-qa.apps.ambientesbc.com https://lpcdn.lpsnmedia.net https://firestore.googleapis.com https://www.youtube.com *.youtube.com https://9811311.fls.doubleclick.net https://webapp1.allus.com.co https://yt3.ggpht.com *.yt3.ggpht.com https://i.ytimg.com *.i.ytimg.com *.googleads.g.doubleclick.net https://googleads.g.doubleclick.net *.grupobancolombia.com https://gmsdigitales.claro.com.co:8443 https://vc.hotjar.io; font-src 'self' data: https://clientes-ext-qa.apps.ambientesbc.com/ https://clientes-ext.apps.bancolombia.com/ https://* https://srvfrontcer.claro.com.co:7002 https://www.grupobancolombia.com *.grupobancolombia.com *.cloudfront.net https://cdnjs.cloudflare.com *.cloudflare.com https://jsbin-user-assets.s3.amazonaws.com *.amazonaws.com https://static.zdassets.com *.zdassets.com https://assets.kampyle.com *.kampyle.com https://fonts.gstatic.com *.gstatic.com https://library-sdb.apps.bancolombia.com *.bancolombia.co https://galatea-dev.apps.ambientesbc.com *.ambientesbc.com https://stackpath.bootstrapcdn.com *.bootstrapcdn.com https://use.fontawesome.com *.fontawesome.com; 3 default-src'self'; 3 img-src blob: data: 'self' firstdatacloverwebsite.122.2o7.net bat.bing.com res.cloudinary.com dxkdvuv3hanyu.cloudfront.net *.clover.com cloverstatic.com images.contentful.com mver.agkn.com images.ctfassets.net googleads.g.doubleclick.net stats.g.doubleclick.net www.facebook.com connect.facebook.net www.google-analytics.com lh3.googleusercontent.com maps.googleapis.com www.google.com www.google.com.pr www.google.com.br www.google.com.co www.google.ca www.google.de www.google.ie www.google.co.uk www.google.co.in www.google.co.id www.googletagmanager.com *.gstatic.com heapanalytics.com script.hotjar.com static.intercomassets.com js.intercomcdn.com *.intercomcdn.com uploads.intercomusercontent.com *.online-metrix.net *.perka.com *.rfihub.com api.swiftype.com pixel.quantserve.com apintego.com app.nav.com *.t.eloqua.com track.hubspot.com play.vidyard.com cdn.vidyard.com px.ads.linkedin.com p.adsymptotic.com amplify.outbrain.com amplifypixel.outbrain.com tr.outbrain.com data.pendo.io recaptcha.net www.linkedin.com s.amazon-adsystem.com *.walkme.com d3sbxpiag177w8.cloudfront.net s3.walkmeusercontent.com data.adxcel-ec2.com s.yimg.com sp.analytics.yahoo.com *.mydisputemanager.com *.evidon.com *.qualtrics.com cx.atdmt.com; font-src data: 'self' maxcdn.bootstrapcdn.com *.clover.com cloverstatic.com fonts.gstatic.com heapanalytics.com script.hotjar.com js.intercomcdn.com use.fontawesome.com *.walkme.com *.qualtrics.com; frame-src mailto: 'self' tel: players.brightcove.net *.clover.com cloverstatic.com bid.g.doubleclick.net *.fls.doubleclick.net www.facebook.com accounts.google.com docs.google.com optimize.google.com www.google.com boards.greenhouse.io vars.hotjar.com intercom-sheets.com h.online-metrix.net *.cdn.optimizely.com *.perka.com player.vimeo.com www.youtube.com *.ytimg.com play.vidyard.com *.lendingfront.com s.amazon-adsystem.com *.walkme.com mainstreetinsights.firstdata.com *.mydisputemanager.com; connect-src 'self' bat.bing.com *.clover.com cloverstatic.com wss://*.clover.com *.contentful.com stats.g.doubleclick.net secure.geonames.org www.facebook.com www.google-analytics.com apis.google.com storage.googleapis.com www.google.com *.greenhouse.io heapanalytics.com vc.hotjar.io *.hotjar.com wss://*.hotjar.com uploads.intercomcdn.com uploads.intercomusercontent.com *.intercom.io wss://*.intercom.io h.online-metrix.net *.optimizely.com *.perka.com sentry.io api.swiftype.com d8a92f8280d84184bb69a3a4b74b61d1.app-search.us-west-2.aws.found.io collection.bgalytics.com *.tt.omtrdc.net oamportal.fdvs.com *.donorschoose.org collection.sperse.io data.pendo.io recaptcha.net *.walkme.com ordering.app s.yimg.com *.mydisputemanager.com *.evidon.com order-ahead-network-production.herokuapp.com api.thelevelup.com wss://ws4.hotjar.com *.qualtrics.com; default-src 'self' *.clover.com cloverstatic.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' bat.bing.com cdnjs.cloudflare.com *.clover.com cloverstatic.com nifegwy.neustar.biz googleads.g.doubleclick.net stats.g.doubleclick.net connect.facebook.net www.googleadservices.com www.google-analytics.com apis.google.com maps.googleapis.com tagmanager.google.com optimize.google.com www.google.com www.googletagmanager.com tracker.gaconnector.com *.greenhouse.io www.gstatic.com heapanalytics.com cdn.heapanalytics.com script.hotjar.com static.hotjar.com mpsnare.iesnare.com js.intercomcdn.com widget.intercom.io solutions.invocacdn.com pnapi.invoca.net h.online-metrix.net cdn.optimizely.com rules.quantcount.com cdn.ravenjs.com tags.tiqcdn.com www.youtube.com secure.quantserve.com *.ytimg.com *.t.eloqua.com play.vidyard.com apps.mypurecloud.com secure.adnxs.com js.hs-scripts.com js.hs-analytics.net analytics.bgalytics.com img.en25.com snap.licdn.com amplify.outbrain.com app.pendo.io cdn.pendo.io data.pendo.io pendo-io-static.storage.googleapis.com recaptcha.net *.walkme.com d3sbxpiag177w8.cloudfront.net s3.walkmeusercontent.com s.yimg.com sp.analytics.yahoo.com *.mydisputemanager.com *.evidon.com *.qualtrics.com; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.clover.com cloverstatic.com fonts.googleapis.com tagmanager.google.com optimize.google.com heapanalytics.com *.natwest-tyl.com *.usetyl.com *.walkme.com d3sbxpiag177w8.cloudfront.net s3.walkmeusercontent.com *.mydisputemanager.com *.qualtrics.com; media-src 'self' *.clover.com cloverstatic.com videos.ctfassets.net js.intercomcdn.com cdn.vidyard.com gateway.zscloud.net; object-src 'self' *.clover.com cloverstatic.com h.online-metrix.net vd.vidoplay.com; frame-ancestors *.clover.com cloverstatic.com *.natwest-tyl.com *.usetyl.com *.perka.com; child-src intercom-sheets.com player.vimeo.com www.youtube.com; report-uri https://us-central1-csp-violation-report-service.cloudfunctions.net/report; 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' data: 'unsafe-inline' https:; img-src 'self' data: https:; media-src 'self' https:; frame-src 'self' data: https:; font-src 'self' data: https: 3 default-src 'unsafe-inline' 'unsafe-eval' https: data:; block-all-mixed-content; upgrade-insecure-requests 3 font-src * data:; img-src * data: blob:; worker-src blob:; default-src 'self' 'unsafe-eval' 'unsafe-inline' *.marchofdimes.com *.marchforbabies.org *.marchofdimes.org *.ceros.com *.licdn.com sc-static.net *.ywxi.net *.snapchat.com *.addthis.com *.addthisedge.com feed2js.org *.cloudfront.net *.crazyegg.com ajax.googleapis.com *.juicer.io api.usersnap.com *.optimizely.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.twitter.com *.facebook.com *.facebook.net *.doubleclick.net *.visualwebsiteoptimizer.com *.atdmt.com *.adsrvr.org *.youtube.com *.googleadservices.com *.cetrk.com *.rfihub.net *.gwallet.com *.godaddy.com *.amazonaws.com *.adroll.com doublethedonation.com *.braintreegateway.com *.payments-amazon.com *.paypalobjects.com *.paypal.com *.amazon.com *.ssl-images-amazon.com *.google.com *.bing.com *.mathtag.com *.acquireinsight.net code.highcharts.com *.jquery.com *.cloudflare.com *.rfihub.com *.formstack.com siteimproveanalytics.com cdn.usersnap.com maxcdn.bootstrapcdn.com *.pinimg.com *.amazonpay.com static.ads-twitter.com *.braintree-api.com *.hotjar.com p2a.co *.gstatic.com cdn.jsdelivr.net cqrcengage.com platform-api.sharethis.com buttons-config.sharethis.com *.trustedsite.com c.sharethis.mgr.consensu.org *.osano.com l.sharethis.com *.cookielaw.org *.pinterest.com pixel-a.basis.net pixel.sitescout.com *.googlesyndication.com maxcdn.bootstrapcdn.com *.moatads.com *.cloudflareinsights.com js.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net *.hubspot.com *.marketo.net *.mktoresp.com marchofdimes.formstack.com api.mapbox.com events.mapbox.com *.tiles.mapbox.com cdn.heapanalytics.com heapanalytics.com *.taboola.com *.hsleadflows.net *.hsforms.com *.steelhousemedia.com secure.quantserve.com *.quantcount.com apps.rokt.com/ *.apple.com *.cdn-apple.com *.wdsvc.net *.supportgroupscentral.com; frame-ancestors 'self' *.marchofdimes.org *.marchforbabies.org *.onecause.com; 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.chevron.com https://assetscdn.stackla.com https://widget.stackla.com https://optanon.blob.core.windows.net https://*.mktoresp.com https://munchkin.marketo.net https://geolocation.onetrust.com https://ajax.googleapis.com https://www.googlesapis.com https://www.googletagmanager.com https://apps.sitecore.net https://s.ytimg.com https://www.youtube.com https://cdn.cookielaw.org https://www.google-analytics.com https://chevron.az1.qualtrics.com https://www.google.com https://www.googleapis.com https://extreme-ip-lookup.com https://secure-ds.serving-sys.com https://stats.g.doubleclick.net https://chevroncorp.gcs-web.com https://9853044.fls.doubleclick.net https://vjs.zencdn.net https://adservice.google.com https://bs.serving-sys.com https://fonts.gstatic.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://www.googleadservices.com https://quiz.chevronstemquiz.com https://snap.licdn.com https://static.ads-twitter.com https://connect.facebook.net https://t.co https://px.ads.linkedin.com https://analytics.twitter.com https://www.facebook.com https://*.crazyegg.com https://optimize.google.com https://178-uxe-734.mktoutil.com https://10232094.fls.doubleclick.net https://code.jquery.com https://wellplayedtest.s3.us-east-2.amazonaws.com; img-src 'self' data: https://www.chevron.com https://img.youtube.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.linkedin.com https://www.facebook.com https://t.co https://px.ads.linkedin.com https://*.adsymptotic.com https://optimize.google.com https://10232094.fls.doubleclick.net https://i.ytimg.com blob: https://www.chevron.com; style-src 'self' 'unsafe-inline' https://www.chevron.com https://fonts.googleapis.com https://optanon.blob.core.windows.net https://assetscdn.stackla.com https://vjs.zencdn.net https://optimize.google.com https://cdn.cookielaw.org https://fonts.googleapis.com; font-src 'self' data: 'unsafe-inline' https://www.chevron.com https://assetscdn.stackla.com https://fonts.gstatic.com https://optimize.google.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://178-uxe-734.mktoresp.com https://extreme-ip-lookup.com https://script.crazyegg.com https://tracking.crazyegg.com https://dev-chevronproducts.cs194.force.com; upgrade-insecure-requests; block-all-mixed-content; 3 default-src 'self' service.maxymiser.net; child-src 'self' 'unsafe-inline' https://www.googleadservices.com https://*.fls.doubleclick.net/ https://*.santander.co.uk https://santander.demdex.net; script-src 'self' 'unsafe-inline' https://track.omguk.com https://cdn.usersnap.com https://screencapture.kampyle.com https://nebula-cdn.kampyle.com https://resources.digital-cloud-uk.medallia.eu https://js-cdn.dynatrace.com https://activitymap.adobe.com https://cdn-ukwest.onetrust.com https://cdn.mouseflow.com https://googleads.g.doubleclick.net lptag.liveperson.net lo.v.liveperson.net lo.msg.liveperson.net accdn.lpsnmedia.net lpcdn.lpsnmedia.net https://www.googletagservices.com https://ad.doubleclick.net service.maxymiser.net https://connect.facebook.net https://*.fls.doubleclick.net/ https://www.googleadservices.com https://www.googletagmanager.com https://assets.adobedtm.com https://dpm.demdex.net/ https://*.santander.co.uk 'unsafe-eval'; connect-src 'self' 'unsafe-inline' https://santanderuk.tt.omtrdc.net https://udc-neb.kampyle.com https://*.bf.dynatrace.com https://privacyportal-uk.onetrust.com https://cdn-ukwest.onetrust.com https://o2.mouseflow.com https://googleads4.g.doubleclick.net wss://lo.msg.liveperson.net https://dpm.demdex.net https://*.santander.co.uk; img-src 'self' https://lpcdn.lpsnmedia.net service.maxymiser.net 'unsafe-inline' https://*.santander.co.uk data: https:; style-src 'self' service.maxymiser.net 'unsafe-inline'; font-src 'self'; frame-src 'self' 'unsafe-inline' https://www.youtube-nocookie.com https://resources.digital-cloud-uk.medallia.eu https://lo.tokenizer.liveperson.net https://lo.msghist.liveperson.net https://lo.msg.liveperson.net https://lpcdn.lpsnmedia.net lo.idp.liveperson.net server.lon.liveperson.net https://authorize.omniture.com https://sitecatalyst.omniture.com service.maxymiser.net https://edigitalsurvey.com https://www.youtube.com https://santander.demdex.net https://*.fls.doubleclick.net; object-src 'self'; media-src lpcdn.lpsnmedia.net; worker-src blob:; 3 frame-ancestors 'self' *.cybersource.com *.salesforce.com *.force.com ; form-action *.cybersource.com *.salesforce.com *.force.com 'self' 3 frame-ancestors 'self' https://admin.vbulletin.com/ https://www.vbulletin.com/ https://members.vbulletin.com/ https://testsecureacceptance.cybersource.com/ https://secureacceptance.cybersource.com/ https://ssl.kaptcha.com/'; script-src * blob: 'unsafe-inline' 'unsafe-eval' ; object-src * 3 default-src 'self' 'unsafe-inline' https://stats.g.doubleclick.net googleads.g.doubleclick.net www.google-analytics.com snap.licdn.com www.linkedin.com px.ads.linkedin.com www.youtube.com https://syndication.twitter.com assets.piraeusbankgroup.com googlevideo.com apis.google.com http://rum-collector-2.pingdom.net data: maps.googleapis.com; style-src 'self' assets.piraeusbankgroup.com assets.piraeusbank.gr 'unsafe-inline' fonts.googleapis.com platform.twitter.com ton.twimg.com; script-src 'self' googleads.g.doubleclick.net www.googleadservices.com www.googletagmanager.com cdn.rawgit.com https://developers.google.com https://snap.licdn.com assets.piraeusbankgroup.com assets.piraeusbank.gr https://maps.google.com connect.facebook.net platform.twitter.com apis.google.com 'unsafe-inline' 'unsafe-eval' www.google-analytics.com maps.googleapis.com seal.thawte.com syndication.twitter.com https://cdn.syndication.twimg.com https://www.youtube.com https://s.ytimg.com http://rum-static.pingdom.net ; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: asset.piraeusbank.gr https://maps.google.com assets.piraeusbank.gr 'unsafe-inline' assets.piraeusbankgroup.com px.ads.linkedin.com http://www.piraeusbank.gr https://www.piraeusbank.gr https://seal.thawte.com www.piraeusbankgroup.com http://rum-collector.pingdom.net 'unsafe-inline' www.google.com syndication.twitter.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com www.google.gr csi.gstatic.com maps.gstatic.com maps.googleapis.com platform.twitter.com pbs.twimg.com o.twimg.com ton.twimg.com googleads.g.doubleclick.net img.youtube.com; frame-src staticxx.facebook.com www.facebook.com accounts.google.com apis.google.com platform.twitter.com syndication.twitter.com 'self' www.youtube.com https://cap.attempts.securecode.com aacsw.3ds.verifiedbyvisa.com https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/www-widgetapi-vflPBjLfx/www-widgetapi.js 3 frame-ancestors secure.livechatinc.com www.youtube.com www.google.com 'self'; frame-src analytics.clickdimensions.com *.doubleclick.net *.dynamics.com secure.livechatinc.com www.youtube.com www.google.com 'self'; 3 default-src * data: blob:; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: https://unpkg.com https://static.hotjar.com https://script.hotjar.com https://bat.bing.com https://cdn.jsdelivr.net https://www.trustradius.com https://ssl.google-analytics.com https://www.storygize.net https://cdn.storygize.net https://s.yimg.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://stats.sa-as.com https://*.paymetric.com http://*.avaya.com https://com-avaya.netmng.com https://nan.netmng.com https://audiences.ignitionone.com https://a.rfihub.com https://c1.rfihub.net https://4529201.fls.doubleclick.net https://sp.analytics.yahoo.com com-avaya.qa.netmng.com https://gateway.zscalertwo.net https://s0.2mdn.net https://geolocation.onetrust.com https://cdn.cookielaw.org https://prdapp02.xisecurenet.com http://wm2.wiredminds.de https://wm2.wiredminds.de https://*.adroll.com https://*.avaya.com https://*.cloudfront.net https://*.en25.com https://*.googleapis.com https://www.googletagmanager.com https://*.google.com https://avaya.greenshootlabs.com https://*.kaltura.com https://*.linkedin.com https://*.serving-sys.com https://*.webengage.co https://*.webengage.com https://*.webtrends.com https://*.webtrendslive.com https://79423.analytics.edgekey.net https://ad.atdmt.com https://cdn.syndication.twimg.com https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://cookies.onetrust.com https://ds-aksb-a.akamaihd.net https://gateway.zscaler.net https://gateway.zscloud.net https://googleads.g.doubleclick.net https://optanon.blob.core.windows.net https://*.twitter.com https://static.ads-twitter.com https://qaapp02.xisecurenet.com https://s1737033466.t.eloqua.com https://s3.amazonaws.com https://secure.adnxs.com https://service.maxymiser.net https://snap.licdn.com https://tags.tiqcdn.com https://use.fontawesome.com https://use.typekit.net https://www.bizographics.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.gstatic.com https://www.viewbix.com https://*.arkoselabs.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.trustradius.com https://*.avaya.com https://*.kaltura.com https://www.gstatic.com https://cdn.jsdelivr.net https://*.google.com https://*.googleapis.com https://avaya.greenshootlabs.com https://gateway.zscaler.net https://maxcdn.bootstrapcdn.com https://optanon.blob.core.windows.net https://cdn.cookielaw.org https://platform.twitter.com https://ton.twimg.com https://use.fontawesome.com; connect-src 'self' https://forms.visistat.com wss://*.hotjar.com https://*.hotjar.com https://analytics.google.com https://s1737033466.t.eloqua.com https://www.trustradius.com https://dudodiprj2sv7.cloudfront.net https://s.yimg.com https://api.kickfire.com http://*.avaya.com wss://*.avaya.com https://*.avaya.de https://s1737033466.t.eloqua.com https://*.akstat.io https://*.kaltura.com https://*.viewbix.com http://production.shippingapis.com https://secure.shippingapis.com https://c.go-mpulse.net https://c.webengage.com https://code.jquery.com https://ds-aksb-a.akamaihd.net https://*.googleapis.com https://avaya.greenshootlabs.com https://ma193-r.analytics.edgekey.net https://optanon.blob.core.windows.net https://cdn.cookielaw.org https://ru.api4load.com https://syndication.twitter.com https://www.apple.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.postescanada-canadapost.ca; frame-ancestors 'self' https://*.avaya.com ; report-uri https://ce4597319c39d6fb9172e9cd9821a217.report-uri.io/r/default/csp/enforce; 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' api-us1.cludo.com ajax.googleapis.com https://*.boisestate.edu fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ bbox.blackbaudhosting.com app.everviz.com payments.blackbaud.com *.kuali.co t.unbounce.com *.hotjar.com *.bing.com *.hotjar.io connect.facebook.net *.skedda.com wss://*.hotjar.com players.brightcove.net frame-ancestors *.instructure.com d25vtythmttl3o.cloudfront.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' api-us1.cludo.com ajax.googleapis.com customer.cludo.com https://*.boisestate.edu fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ bbox.blackbaudhosting.com app.everviz.com payments.blackbaud.com *.kuali.co t.unbounce.com *.hotjar.com *.bing.com *.hotjar.io connect.facebook.net *.skedda.com wss://*.hotjar.com players.brightcove.net frame-ancestors *.instructure.com d25vtythmttl3o.cloudfront.net; style-src 'self' 'unsafe-inline' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ bbox.blackbaudhosting.com app.everviz.com payments.blackbaud.com *.kuali.co t.unbounce.com *.hotjar.com *.bing.com *.hotjar.io connect.facebook.net *.skedda.com wss://*.hotjar.com players.brightcove.net frame-ancestors *.instructure.com d25vtythmttl3o.cloudfront.net ajax.googleapis.com cloud.typography.com customer.cludo.com https://*.boisestate.edu; img-src data: * ; font-src data: cloud.typography.com 'self' https://*.boisestate.edu; connect-src 'self' api-us1.cludo.com https://*.boisestate.edu *.pusherapp.com *.pusher.com fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ bbox.blackbaudhosting.com app.everviz.com payments.blackbaud.com *.kuali.co t.unbounce.com *.hotjar.com *.bing.com *.hotjar.io connect.facebook.net *.skedda.com wss://*.hotjar.com players.brightcove.net frame-ancestors *.instructure.com; media-src 'self' https://*.boisestate.edu fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ bbox.blackbaudhosting.com app.everviz.com payments.blackbaud.com *.kuali.co t.unbounce.com *.hotjar.com *.bing.com *.hotjar.io connect.facebook.net *.skedda.com wss://*.hotjar.com players.brightcove.net frame-ancestors *.instructure.com d25vtythmttl3o.cloudfront.net; object-src 'self' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ bbox.blackbaudhosting.com app.everviz.com payments.blackbaud.com *.kuali.co t.unbounce.com *.hotjar.com *.bing.com *.hotjar.io connect.facebook.net *.skedda.com wss://*.hotjar.com players.brightcove.net frame-ancestors *.instructure.com d25vtythmttl3o.cloudfront.net https://*.boisestate.edu; worker-src 'self' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ bbox.blackbaudhosting.com app.everviz.com payments.blackbaud.com *.kuali.co t.unbounce.com *.hotjar.com *.bing.com *.hotjar.io connect.facebook.net *.skedda.com wss://*.hotjar.com players.brightcove.net frame-ancestors *.instructure.com d25vtythmttl3o.cloudfront.net https://*.boisestate.edu; frame-src 'self' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ bbox.blackbaudhosting.com app.everviz.com payments.blackbaud.com *.kuali.co t.unbounce.com *.hotjar.com *.bing.com *.hotjar.io connect.facebook.net *.skedda.com wss://*.hotjar.com players.brightcove.net frame-ancestors *.instructure.com d25vtythmttl3o.cloudfront.net https://*.boisestate.edu; ; frame-ancestors 'self' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ bbox.blackbaudhosting.com app.everviz.com payments.blackbaud.com *.kuali.co t.unbounce.com *.hotjar.com *.bing.com *.hotjar.io connect.facebook.net *.skedda.com wss://*.hotjar.com players.brightcove.net frame-ancestors *.instructure.com d25vtythmttl3o.cloudfront.net https://*.boisestate.edu ; form-action 'self' fs.aws.boisestate.edu fs.boisestate.edu *.libanswers.com *.ebscohost.com clickdeskvisitors.appspot.com sockjs.pusher.com ws.pusherapp.com https://d3dy5gmtp8yhk7.cloudfront.net https://d1gwclp1pmzk26.cloudfront.net *.clickdesk.com *.smartsheet.com https://plugin.3playmedia.com https://client.radiusbycampusmgmtchat.com app.smartsheet.com d1d7fjtb6d4i2m.cloudfront.net livechat.hobsonsradius.com www.googleadservices.com *.google.com *.googleapis.com https://cdn.hypemarks.com *.googletagmanager.com *.vimeo.com *.google-analytics.com boisestate.askadmissions.net https://www.youtube.com *.orgsync.com orgsync.com *.techsmithrelay.com *.youcanbook.me *.soundcloud.com vimeo.com soundcloud.com techsmithrelay.com youcanbook.me public.tableau.com https://www.gstatic.com https://boise.tribe customer.cludo.com.cdn.cloudflare.net https://secure.touchnet.com https://boisestate.givepulse.com https://boxcast.tv https://boisestate.on.worldcat.org https://fh8fe2xb7x.search.serialssolutions.com html5-player.libsyn.com https://boisestate.hosted.panopto.com assets.pxlecdn.com assets.pixlee.com photos.pixlee.co https://snap.licdn.com participant.connect.us-west-2.amazonaws.com https://slate.technolutions.net https://fw.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://admissions-boisestate-edu.cdn.technolutions.net https://fw.cdn.technolutions.net assets.adobedtm.com assets.adobe.com bikeindex.org anchor.fm https://www.wrike.com/ bbox.blackbaudhosting.com app.everviz.com payments.blackbaud.com *.kuali.co t.unbounce.com *.hotjar.com *.bing.com *.hotjar.io connect.facebook.net *.skedda.com wss://*.hotjar.com players.brightcove.net frame-ancestors *.instructure.com d25vtythmttl3o.cloudfront.net https://*.boisestate.edu ; upgrade-insecure-requests; block-all-mixed-content; 3 upgrade-insecure-requests; connect-src * https:; img-src * blob: data: https:; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; media-src * blob: data:; worker-src * blob: data: 3 upgrade-insecure-requests;block-all-mixed-content 3 frame-ancestors 'self' *.eur.nl 3 default-src https: http: 'unsafe-inline' 'unsafe-eval' 'self' data: 3 frame-ancestors 'self' *.kameleoon.com *.kameleoon.eu ; 3 frame-ancestors 'self' acquia.lookbookhq.com acquia.docebosaas.com confluence.acquia.com www.acquiaacademy.com acquia.seismic.com app.veertly.com; report-uri /report-csp-violation 3 frame-ancestors 'self' https://content.rockwellautomation.com; 3 frame-ancestors 'self' *.optus.com.au *.ippayments.com *.pegacloud.net *.gomo.com.au *.realestate.com.au; 3 default-src wss: https: data: blob: 'unsafe-inline' 'unsafe-eval'; img-src data: https: 3 default-src 'self' https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://at.cloud.fabasoft.com; style-src 'self' 'unsafe-inline' https://*.oebb.at https://apis.google.com https://*.googleapis.com https://*.azureedge.net https://static.userback.io; script-src 'self' https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://apis.google.com https://*.googleapis.com https://at.cloud.fabasoft.com https://www.youtube.com https://*.ytimg.com https://*.azureedge.net https://static.userback.io https://walls.io https://cdn.botframework.com; connect-src 'self' https://*.oebb.at https://obc.railcargo.com https://*.azureedge.net https://directline.botframework.com wss://directline.botframework.com https://api.userback.io https://*.playertec.de https://powerva.microsoft.com; img-src 'self' https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://at.cloud.fabasoft.com https://*.ytimg.com https://apis.google.com https://*.googleapis.com https://*.gstatic.com https://*.azureedge.net https://static.userback.io https://oebbtalentinastorage.blob.core.windows.net data: blob:; frame-src https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://*.google.com https://content.googleapis.com https://www.youtube-nocookie.com https://at.cloud.fabasoft.com https://*.yumpu.com https://www.zepp-cam.at https://*.soundcloud.com https://*.spotify.com https://*.waca.at https://ec21aac802964ead8485bcf19e4d7cc9.svc.dynamics.com https://*.azureedge.net https://live.virtual-events.at https://*.streaming.media.azure.net https://www.traumgutscheine.com https://my.walls.io https://*.vimeo.com https://service.studiobaff.com https://*.playertec.de; frame-ancestors https://oebb-test.hafas.de https://*.oebb.at http://fahrplan.oebb.at; font-src 'self' https://*.oebb.at https://*.nightjet.com https://*.railcargo.com https://*.gstatic.com; 3 frame-src https://*.lidl.de https://*.lidl-onlinenewsletter.de https://*.lidl-shop.com https://ams.creativecdn.com https://bidswitch.net https://creativecdn.com https://form.lidl.com https://forms-prod.enc-test.de/ https://lidl.de https://searchhub.io https://sentry.int.secrz.com https://www.google.com https://youtube.com https://*.youtube-nocookie.com https://*.youtube.com https://www.lidl-gewinnspiel.de 'self' intent: https://*.adyen.com https://*.bizrate.com https://*.criteo.com https://*.criteo.net https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.ftrace.com https://*.lidl-info.com https://*.lidl.com https://*.mynetfair.com https://*.sit.sys.odj.cloud https://*.vrxs.de https://ar.lidl.com https://balancechecks.tx-gate.com https://consentcdn.cookiebot.com https://facebook.com https://h.online-metrix.net https://ldl.viewer.cit-fusion.com https://lidlde.int.userwerk.com https://review.apps.01.cf.eu01.stackit.cloud https://www.awin1.com https://www.edge-cdn.net https://www.lidl-gewinnspiel.de ; object-src https://*.lidl.de https://*.lidl-shop.com https://bidswitch.net https://form.lidl.com https://lidl.de https://searchhub.io https://sentry.int.secrz.com https://www.google.com https://youtube.com https://*.youtube.com data: https://*.facebook.com https://*.facebook.net https://*.lidl-info.com https://*.online-metrix.net https://facebook.com https://h.online-metrix.net ; img-src https://*.addthis.com https://*.adnxs.com https://*.cat-ret.assets.lidl https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl.de https://*.lidl-flyer.com https://*.lidl-onlinenewsletter.de https://*.lidl-shop.com https://*.searchhub.io https://asset.schwarz https://bidswitch.net https://form.lidl.com https://lidl.de https://s.kelkoogroup.net https://searchhub.io https://sentry.int.secrz.com https://www.adobe.com https://www.google.at https://www.google.ba https://www.google.be https://www.google.bg https://www.google.ch https://www.google.co.uk https://www.google.com https://www.google.com.bd https://www.google.com.tr https://www.google.com.ua https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.is https://www.google.it https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.sk https://www.lidl-shop.be https://www.lidl-shop.cz https://www.lidl-shop.nl https://www.lidl-shop.sk https://www.lidl-sklep.pl https://www.w3.org https://x.bidswitch.net https://youtube.com https://*.youtube.com 'self' data: moz-extension: https://*.360yield.com https://*.adition.com https://*.adscale.de https://*.advertising.com https://*.adyen.com https://*.bizrate.com https://*.casalemedia.com https://*.criteo.com https://*.criteo.net https://*.demdex.net https://*.demoup.com https://*.doubleclick.net https://*.epoq-systems.de https://*.epoq.de https://*.facebook.com https://*.facebook.net https://*.fitanalytics.com https://*.lidl-info.com https://*.online-metrix.net https://*.openx.net https://*.parcellab.com https://*.pubmatic.com https://*.retail.lidl.net https://*.semtrack.de https://*.simplesurance.de https://*.sit.sys.odj.cloud https://*.stickyadstv.com https://*.taboola.com https://*.twiago.com https://*.virtualearth.net https://*.yahoo.com https://*.yieldlab.net https://analytics.google.com https://balancechecks.tx-gate.com https://contextual.media.net https://event.yoochoose.net https://facebook.com https://h.online-metrix.net https://lidlde.int.userwerk.com https://match.sharethrough.com https://sync.outbrain.com https://translate.google.com https://via.placeholder.com https://visitor.omnitagjs.com https://www.awin1.com https://www.bing.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com ; report-uri https://csp-server.prod.varnish-poc.lidl-shop.com/csp/report ; frame-ancestors 'self' https://*.lidl.com https://beeem.co ; style-src https://*.lidl.de https://*.lidl-flyer.com https://*.lidl-shop.com https://bidswitch.net https://form.lidl.com https://lidl.de https://searchhub.io https://sentry.int.secrz.com https://www.google.com https://www.lidl-shop.be https://www.lidl-shop.cz https://www.lidl-shop.nl https://www.lidl-shop.sk https://www.lidl-sklep.pl https://youtube.com https://*.youtube.com 'self' 'unsafe-inline' https://*.epoq-systems.de https://*.epoq.de https://*.fitanalytics.com https://*.lidl-info.com https://*.parcellab.com https://*.sit.sys.odj.cloud https://facebook.com https://www.bing.com ; default-src https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl.de https://*.lidl-flyer.com https://*.lidl-shop.com https://*.peakprotect.com https://bidswitch.net https://form.lidl.com https://lidl.de https://s.kelkoogroup.net https://searchhub.io https://sentry.int.secrz.com https://www.google.be https://www.google.com https://www.google.cz https://www.google.nl https://www.google.pl https://www.google.sk https://youtube.com https://*.youtube-nocookie.com https://*.youtube.com 'self' blob: data: intent: wss://127.0.0.1:* https://*.8select.io https://*.adyen.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.epoq-systems.de https://*.epoq.de https://*.facebook.com https://*.facebook.net https://*.fitanalytics.com https://*.lidl-info.com https://*.online-metrix.net https://*.parcellab.com https://*.semtrack.de https://*.simplesurance.de https://*.sit.sys.odj.cloud https://*.virtualearth.net https://analytics.google.com https://balancechecks.tx-gate.com https://event.yoochoose.net https://facebook.com https://fonts.gstatic.com https://h.online-metrix.net https://lidl.media01.eu https://lidlde.int.userwerk.com https://tracking.s24.com https://www.bing.com https://www.google-analytics.com https://www.googletagmanager.com https://www.lacmp.net https://csp-server.prod.varnish-poc.lidl-shop.com ; script-src https://*.kameleoon.com https://*.kameleoon.eu https://*.lidl.de https://*.lidl-flyer.com https://*.lidl-shop.com https://*.peakprotect.com https://*.searchhub.io https://bidswitch.net https://creativecdn.com https://form.lidl.com https://lidl.de https://searchhub.io https://sentry.int.secrz.com https://www.google.com https://youtube.com https://*.youtube.com 'self' 'unsafe-eval' 'unsafe-inline' blob: https://*.8select.io https://*.adyen.com https://*.criteo.com https://*.criteo.net https://*.demoup.com https://*.doubleclick.net https://*.epoq-systems.de https://*.epoq.de https://*.facebook.com https://*.facebook.net https://*.fitanalytics.com https://*.lidl-info.com https://*.lidl.com https://*.online-metrix.net https://*.parcellab.com https://*.semtrack.de https://*.simplesurance.de https://*.virtualearth.net https://adservice.google.com https://adservice.google.de https://ajax.googleapis.com https://balancechecks.tx-gate.com https://cdn.ravenjs.com https://code.etracker.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://facebook.com https://h.online-metrix.net https://lidl.media01.eu https://lidlde.int.userwerk.com https://s.ytimg.com https://tracking.s24.com https://www.bing.com https://www.dwin1.com https://www.etracker.de https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.lacmp.net ; 3 frame-ancestors https://www.zyxel.com https://communicasia.zyxel.com/ https://bbwf.zyxel.com https://mwc.zyxel.com https://www.zyxel.ch https://www.zyxel.fr https://www12.zyxel.com 3 object-src 'self'; frame-ancestors 'self' 3 default-src 'self' data: *.bouncex.net *.pressablecdn.com *.wp.com *.gravatar.com *.google-analytics.com *.hotjar.com *.doubleclick.net *.convertkit.com 'unsafe-inline'; object-src *; img-src *; media-src *; frame-src *; font-src 'self' data: *.pressablecdn.com *.wp.com *.gstatic.com maxcdn.bootstrapcdn.com; style-src 'self' *.pressablecdn.com *.wp.com maxcdn.bootstrapcdn.com fonts.googleapis.com 'unsafe-inline'; script-src 'self' data: *.pressablecdn.com app.convertkit.com ajax.googleapis.com www.googletagmanager.com connect.facebook.net secure.gaug.es stats.g.doubleclick.net *.wp.com *.google-analytics.com *.hotjar.com *.bounceexchange.com *.optimizely.com 'unsafe-inline' 'unsafe-eval' 3 default-src 'none';img-src data: https:;script-src 'unsafe-inline' 'unsafe-eval' blob: https:;style-src 'unsafe-inline' https:;font-src data: https:;frame-ancestors 'self';connect-src https:; media-src blob: https:;frame-src https: data: blob:;child-src https:;worker-src blob: https:;base-uri https:;form-action https: 3 frame-ancestors www.red-gate.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fastaction.ngpvan.com https://js2.verygoodvault.com https://profile.ngpvan.com https://d3rse9xjbp8270.cloudfront.net https://www.youtube-nocookie.com https://secure.everyaction.com https://rules.quantcount.com https://secure.quantserve.com https://www.youtube.com https://unpkg.com https://geolocation.onetrust.com/ https://cdn.cookielaw.org/ https://static.arcgis.com https://sp.analytics.yahoo.com https://s.yimg.com https://donorbox.org https://optimize.google.com https://tagmanager.google.com https://www.conservation.org https://app.vwo.com https://public.tableau.com *.typeform.com https://s3.amazonaws.com/trk.cetrk.com/f/t.js *.visualwebsiteoptimizer.com *.crazyegg.com *.stripe.com bitpay.com api.tiles.mapbox.com fast.wistia.com googleads.g.doubleclick.net www.googleadservices.com bat.bing.com secure.adnxs.com *.googletagmanager.com js.stripe.com dcc4iyjchzom0.cloudfront.net cartocdn-gusc.global.ssl.fastly.net conservation.carto.com sp13loader.ciapps.org maps.googleapis.com https://cdnjs.cloudflare.com http://conservation-tron.imgix.net ajax.googleapis.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://conservation-org.tron.silvertech.net https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com; style-src 'self' 'unsafe-inline' https://ci-everyaction-public.s3.amazonaws.com https://d3rse9xjbp8270.cloudfront.net https://optimize.google.com https://tagmanager.google.com https://tagmanager.google.com api.tiles.mapbox.com sp13loader.ciapps.org fonts.googleapis.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; img-src https://d1aqhv4sn5kxtx.cloudfront.net https://secure.everyaction.com https://d1aqhv4sn5kxtx.cloudfront.net https://secure.everyaction.com https://d3rse9xjbp8270.cloudfront.net http://cicloud.s3.amazonaws.com https://cicloud.s3.amazonaws.com https://pixel.quantserve.com https://njoel9cc11.execute-api.us-east-1.amazonaws.com https://d2ey44ppm6i0sm.cloudfront.net https://53f5mmurac.execute-api.us-east-1.amazonaws.com https://53f5mmurac.execute-api.us-east-1.amazonaws.com https://d1wrq3tu9qy8md.cloudfront.net https://ci-pixel-ephemeral.s3.amazonaws.com https://ci-pixel-persistent.s3.amazonaws.com https://cicloud.s3.amazonaws.com/ https://cdn.cookielaw.org/ https://firecastwebserver01.ciapps.org https://services.arcgisonline.com https://server.arcgisonline.com https://d1iczxrky3cnb2.cloudfront.net https://ssl.gstatic.com https://www.gstatic.com http://cloud.conservation.org.s3.amazonaws.com/ https://cloud.conservation.org.s3.amazonaws.com/ https://www.arcgis.com/ https://public.tableau.com https://ci-public.s3.amazonaws.com *.crazyegg.com *.visualwebsiteoptimizer.com *.stripe.com *.googletagmanager.com sitefinity.ciapps-aws.org www.google.com.br www.google.com bat.bing.com stats.g.doubleclick.net cartocdn-gusc.global.ssl.fastly.net sp13loader.ciapps.org *.maps.api.here.com ciorg.imgix.net ciapps-kiwi.imgix.net 'self' maps.gstatic.com http://conservation-tron.imgix.net maps.googleapis.com https://conservation-org.tron.silvertech.net/ i.ytimg.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com; font-src 'self' https://d3rse9xjbp8270.cloudfront.net sp13loader.ciapps.org themes.googleusercontent.com fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; connect-src 'self' https://fastaction.ngpvan.com https://profile.ngpvan.com https://actions.everyaction.com https://secure.everyaction.com *.crazyegg.com https://recording.crazyegg.com https://privacyportal-eu.onetrust.com https://analytics.google.com https://stats.g.doubleclick.net https://script.crazyegg.com https://ci-public.s3.amazonaws.com https://conservation.org.s3.amazonaws.com https://dvm5qo6r5pdyf.cloudfront.net https://cdn.cookielaw.org/ https://tracking.crazyegg.com https://s.yimg.com https://api.altmetric.com https://doi.org https://api.crossref.org https://data.crossref.org https://carbonfootprint.short.car-calc.cc sample-api-v2.crazyegg.com https://cibitly.ciapps.org https://act.conservation.org https://firecastwebserver01.ciapps.org stripe.ciapps.org checkout.stripe.com bitpay.ciapps.org *.google-analytics.com bitpay.com events.mapbox.com api.mapbox.com convio.ciapps.org secure2.convio.net sharkstracker.ciapps.org conservation.carto.com sp13loader.ciapps.org accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com data: blob: ; media-src civideos.ciapps.org 'self' data: blob:; child-src 'self' https://js2.verygoodvault.com https://forms.microsoft.com https://app.powerbi.com https://open.spotify.com https://donorbox.org/ https://optimize.google.com https://app.vwo.com https://firecastwebserver01.ciapps.org https://form.jotform.com/ https://www.un.org https://logiprod.conservation.org/ https://www.arcgis.com/ https://public.tableau.com *.microsoftonline.com *.office.com *.typeform.com www.tiktok.com data: blob: checkout.stripe.com bitpay.com bid.g.doubleclick.net sitefinity.ciapps-aws.org submit.jotformz.com form.jotformz.com 8760954.fls.doubleclick.net js.stripe.com www.qzzr.com https://platform.twitter.com/ http://conservation-tron.imgix.net https://syndication.twitter.com/ https://www.youtube.com/ https://conservation-org.tron.silvertech.net/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; 3 frame-ancestors 'self' *.pnet.ch *.post.ch *.becompany.ch *.signdemo.com 3 frame-ancestors 'self' *.winfuture.de; 3 frame-ancestors 'self' https://*.weeblycloud.com https://*.sitelock.com https://*.mojomarketplace.com http://*.ipage.com http://*.yourhostingaccount.com https://*.ecwid.com https://platform.cloud.coveo.com https://search.cloud.coveo.com 3 default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.vidyard.com *.google-analytics.com *.elliemae.com *.typekit.net *.eloqua.com *.crazyegg.com *.pingdom.net *.driftt.com *.drift.com *.vidyard.com *.tribl.io *.en25.com *.appspot.com *.facebook.net *.bing.com *.bizographics.com *.doubleclick.net *.linkedin.com *.facebook.com *.google.com *.on24.com *.contentstack.io *.zscalertwo.net ipapi.co *.amazonaws.com *.googleapis.com http://images.engage.elliemae.com/ *.gstatic.com *.myfonts.net *.googleadservices.com *.mapbox.com *.youtube.com *.vimeo.com *.swiftype.com *.jsdelivr.net *.disqus.com *.disquscdn.com disqus.com *.zoominfo.com *.pusher.com *.icemortgagetechnology.com *.pardot.com unpkg.com *.google.co.in 3 frame-ancestors https://*.ionos.co.uk https://ionos.co.uk; 3 frame-ancestors 'self' https://www.maykinmedia.nl https://www.lessonup.com https://lessonup.app 3 default-src 'self' *.ncr.com *.adform.net adobe.com *.adobe.com; frame-src 'self' *.ncr.com *.hotjar.com *.hotjar.io *.demdex.net *.springcm.com *.demandbase.com *.callrail.com *.rakuten.com ncrpresalesfundrequest.secure.force.com *.doubleclick.net *.addthis.com *.salesforceliveagent.com www.youtube.com *.typeform.com *.ncrsilver.com calendly.com apisandbox.zuora.com *.artefactscloud.com www.facebook.com www.youtube-nocookie.com *.juicer.io *.linksynergy.com *.whiteboard.is marketo.net *.marketo.net marketo.com *.marketo.com hsforms.net *.hsforms.net hsforms.com *.hsforms.com jotform.com *.jotform.com powerbi.com *.powerbi.com fliphtml5.com *.fliphtml5.com *.google.com airtable.com *.amelia.com *.webflow.io *.msgctrl.com *.whiteboard.is *.shapespark.com *.tiktok.com forms.office.com trustpilot.com *.trustpilot.com pixel.sitescout.com adobe.com *.adobe.com *.adform.net *.mathtag.com *.driftt.com; img-src data: *; media-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ncr.com data: *.adobedtm.com px.ads.linkedin.com *.salesforceliveagent.com googleads.g.doubleclick.net snap.licdn.com assets.juicer.io s.ytimg.com *.addthis.com *.addthisedge.com connect.facebook.net www.googletagmanager.com www.google-analytics.com sjs.bizographics.com www.googleadservices.com maps.google.com maps.googleapis.com www.youtube.com www.google.com *.hotjar.io *.hotjar.com cdn.schemaapp.com ajax.googleapis.com assets.adobedtm.com cdn.cookielaw.org img.en25.com *.typeform.com use.edgefonts.net *.rakuten.com fullstory.com *.fullstory.com *.demandbase.com *.callrail.com *.linksynergy.com *.bing.com *.cloudfront.net *.calendly.com jquery.com *.jquery.com marketo.net *.marketo.net marketo.com *.marketo.com unpkg.com rtb123.com *.rtb123.com *.cybba.solutions *.cybba.us storage.googleapis.com rmtag.com *.rmtag.com hsforms.net *.hsforms.net hsforms.com *.hsforms.com jotform.com *.jotform.com microsoft.github.io *.omtrdc.net *.bizible.com *.moatads.com *.gstatic.com *.adnxs.com *.clarity.ms *.tiktok.com *.ibytedtos.com *.tiktokcdn.com *.pixel.ad pixel.sitescout.com trustpilot.com *.trustpilot.com *.s3.amazonaws.com s3.amazonaws.com *.adform.net adobe.com *.adobe.com *.mathtag.com *.website-files.com *.cloudflare.com *.jsdelivr.net *.driftt.com; style-src 'self' 'unsafe-inline' *.ncr.com assets.juicer.io cdnjs.cloudflare.com fonts.googleapis.com www.youtube.com optanon.blob.core.windows.net *.hotjar.com use.edgefonts.net *.calendly.com *.cloudfront.net jquery.com *.jquery.com marketo.net *.marketo.net marketo.com *.marketo.com *.tiktokcdn.com *.cookielaw.org; font-src 'self' *.ncr.com data: assets.juicer.io cdnjs.cloudflare.com fonts.gstatic.com *.hotjar.com *.hotjar.io use.edgefonts.net *.cloudfront.net; connect-src 'self' *.ncr.com *.demdex.net *.addthis.com www.juicer.io *.hotjar.com *.hotjar.io data.schemaapp.com *.omtrdc.net wss://*.hotjar.com *.demandbase.com *.callrail.com *.s3.amazonaws.com s3.amazonaws.com api.company-target.com *.fullstory.com *.mktoresp.com *.facebook.com *.google.com *.google-analytics.com *.googleadservices.com stats.g.doubleclick.net *.whiteboard.is *.clarity.ms *.ibytedtos.com *.mktoutil.com *.adform.net adobe.com *.adobe.com *.bing.com ; 3 frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.mydomaine.com 3 frame-ancestors 'self' *.blackbaud.com; 3 frame-ancestors 'self' https://dealerexperience.cadillac.com https://dealerexperience-cadillac-com.*.wpx.gm.com 3 default-src https:; font-src https: data:; img-src https: data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; 3 frame-ancestors 'self' *.interactivebrokers.com *.interactivebrokers.ca *.interactivebrokers.com.hk *.interactivebrokers.hk *.interactivebrokers.ch *.interactivebrokers.eu *.interactivebrokers.com.sg *.ibkr.com.sg *.interactivebrokers.ch *.interactivebrokers.co.uk *.interactivebrokers.com.au *.interactivebrokers.co.jp *.interactivebrokers.co.in *.ibkram.com IBKR.docebosaas.com *.interactiveadvisors.com *.ibkr.com *.ibkr.com.cn *.clientam.com *.youtube.com *.clientam.ch *.clientam.com.hk *.go-mpulse.net *.akstat.io *.greenwichcompliance.com; 3 default-src 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https:; object-src 'self' https:; style-src 'self' data: 'unsafe-inline' https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: mediastream: https:; frame-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' data: https: 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *.googleapis.com; frame-ancestors file: cdvfile: 'self'; 3 default-src 'self' hawaiianairlinesinc.marketing.adobe.com data: blob:; script-src * data: 'unsafe-inline' 'unsafe-eval'; style-src * data: 'unsafe-inline'; img-src * data:; connect-src * data:; font-src * data:; frame-src *; frame-ancestors 'self' hawaiianairlinesinc.marketing.adobe.com https://www.kayak.com/ 3 frame-ancestors 'self' https://*.fashionjobs.com https://*.fashionnetwork.com https://*.fashiongroup.com https://*.fashionmag.biz https://fashionmag.biz https://fashionnetworkevents.com https://*.fashionnetworkevents.com 3 frame-ancestors 'self' *.3sharecorp.com 3 default-src * 'self' blob: data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-src * 'self'; frame-ancestors * 'self' 3 upgrade-insecure-requests; frame-ancestors https://www.reutersconnect.com 3 frame-ancestors 'self' https://solutions.sciquest.com https://usertest.sciquest.com; 3 default-src 'self' https://*.liberbank.es https://www.google.com https://www.facebook.com/tr/ https://api.liberbank.es:80 https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.webpushr.com https://snap.licdn.com https://www.youtube.com https://www.norbolsa.es https://analytics.twitter.com https://www.liberbank.es https://static.ads-twitter.com https://www.google-analytics.com https://www.googletagmanager.com https://*.google.com https://storage.googleapis.com https://www.gstatic.com https://use.fontawesome.com https://use.typekit.net/lzp0kbu.js https://maps.googleapis.com *.hotjar.com https://www.googleadservices.com https://bat.bing.com https://track.adform.net https://googleads.g.doubleclick.net *.browseranalytic.com browseranalytic.com https://player.vimeo.com/api/player.js https://piwik.lander.net/piwik.js https://www.youtube.com/iframe_api https://s.ytimg.com/yts/ https://connect.facebook.net https://service.force.com https://liberbankit.my.salesforce.com https://d.la1-c1-frf.salesforceliveagent.com https://onboardinglbk.secure.force.com https://s2.adform.net https://www.tarjetaplaystation.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://maxcdn.bootstrapcdn.com https://use.typekit.net https://use.fontawesome.com https://cdnjs.cloudflare.com https://p.typekit.net https://*.google.com https://service.force.com https://onboardinglbk.secure.force.com;img-src 'self' https://*.kxcdn.com https://cdn.webpushr.com https://px.ads.linkedin.com https://t.co https://www.google-analytics.com https://*.google.com https://www.facebook.com https://www.norbolsa.es data: https://p.typekit.net https://maps.gstatic.com/ https://maps.googleapis.com/ https://www.googleapis.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://bat.bing.com https://www.google.es *.browseranalytic.com browseranalytic.com https://googleads.g.doubleclick.net https://clean.tracksacai.com https://tbl.tradedoubler.com https://afinia.uinterbox.com https://openlead.bankimia.com https://atrapacredito.go2cloud.org https://liberbankit--devcc2--c.cs84.visual.force.com https://liberbankit--devcc2.cs84.my.salesforce.com https://www.gstatic.com;connect-src 'self' https://*.webpushr.com wss://*.hotjar.com https://bat.bing.com https://*.google.es https://www.facebook.com https://www.liberbank.es https://bat.bing.com https://*.google.com https://*.google.es https://www.google-analytics.com https://lbk-asistente-pro-principal.appspot.com https://vc.hotjar.io https://api.liberbank.es https://api-glbk.liberbank.es https://lbkapi-pre.vorago.es https://*.hotjar.com/ *.browseranalytic.com browseranalytic.com https://stats.g.doubleclick.net https://devcc4-onboardinglbk.cs109.force.com https://onboardinglbk.secure.force.com https://ws1.premiumnumbers.es;font-src 'self' https://fonts.googleapis.com http://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://use.typekit.net https://use.fontawesome.com https://cdnjs.cloudflare.com https://www.facebook.com/tr/;object-src 'self';media-src 'self';sandbox allow-forms allow-scripts allow-modals allow-popups allow-presentation allow-same-origin allow-popups-to-escape-sandbox allow-top-navigation;child-src 'self' https://portalprov.liberbank.es https://www.facebook.com https://openbanking.liberbank.es https://bedesa-liberbank.ceca.es https://*.google.com https://vars.hotjar.com https://www.youtube.com https://track.adform.net https://player.vimeo.com https://*.fls.doubleclick.net https://vimeo.com https://service.force.com;form-action 'self' https://www.facebook.com/tr/;frame-ancestors 'self';plugin-types application/pdf; 3 frame-ancestors 'self' https://tryamp.msiteproject.com https://your-domain.cdn.ampproject.org https://your-domain.amp.cloudflare.com https://cdn.ampproject.org https://mytaj.tajhotels.com/ https://uatmytaj.tajhotels.com/ https://author-taj-prod65a.adobecqms.net/ 3 frame-ancestors 'self' http://*.iframely.com 3 font-src 'self' www.alertlogic.com *.youtube.com *.fontawesome.com *.intercomcdn.com *.google.com fonts.gstatic.com data: 'unsafe-inline' 'unsafe-eval' data:; 3 frame-ancestors 'self' https://*.radford.edu; upgrade-insecure-requests; 3 sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=frontpage&site=fp®ion=US&lang=en-US&device=desktop&partner=frontier; 3 frame-ancestors 'self' https://usa.denon.com/; 3 default-src 'self' 'unsafe-inline' www.google-analytics.com code.jquery.com *.disqus.com disqus.com *.bootstrapcdn.com *.disquscdn.com www.gravatar.com https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.karlaporter.com *.shanx.com *.amitavac.com *.googleapis.com *.googletagmanager.com platform.twitter.com shanx.matomo.com *.amazonaws.com apis.google.com ssl.google-analytics.com connect.facebook.net https:; img-src 'self' *.karlaporter.com *.iconj.com cdn-images.mailchimp.com *.shanx.com *.amitavac.com ssl.google-analytics.com s-static.ak.facebook.com i.imgur.com imgur.com data: https:; style-src 'self' 'unsafe-inline' *.shanx.com cdn-images.mailchimp.com *.karlaporter.com *.amitavac.com *.ionicframework.com use.typekit.net fonts.adobe.com fonts.googleapis.com fonts.gstatic.com https:; font-src 'self' *.shanx.com use.typekit.net *.ionicframework.com netdna.bootstrapcdn.com themes.googleusercontent.com fonts.gstatic.com data:; object-src https:; media-src 'self' https:; frame-ancestors 'self'; frame-src 'self' https:; 3 object-src *.calgary.ca:*; frame-ancestors *.calgary.ca:* *.coc.ca thecityofcalgary.maps.arcgis.com 3 frame-ancestors 'self' https://www.messenger.com https://www.facebook.com/; 3 default-src blob: data: https: 'self'; script-src blob: https: 'self' 'unsafe-eval' 'unsafe-inline'; style-src blob: https: 'self' 'unsafe-inline'; media-src blob: 3 frame-ancestors 'self' https://fullsb-supportjfrog.cs84.force.com https://ppp-supportjfrog.cs100.force.com https://partners.jfrog.com https://supportjfrog.force.com/; 3 upgrade-insecure-requests; frame-ancestors 'self'; frame-src 'self' prep2021.elimparcial.com prepsonora2021.elimparcial.com prep2021bc.mx iframe.elimparcial.com *.google.com *.google.com.mx *.twitter.com *.youtube.com *.vimeo.com *.facebook.com *.instagram.com *.ampproject.org *.doubleclick.net *.googleapis.com *.retargetly.com *.googlesyndication.com *.ampproject.net *.admanmedia.com *.vidible.tv *.cxense.com *.googletagmanager.com *.adnxs.com *.rubiconproject.com *.indexww.com *.openx.net *.doubleverify.com *.tiktok.com *.pubmatic.com *.adxyield.com *.facebook.net *.giphy.com giphy.com *.memeate.com *.windy.com iframe.enelradar.com *.taboola.com *.liveleak.com *.pinterest.com *.lkqd.net *.wcnc.com aax.amazon-adsystem.com *.seedtag.com *.criteo.com *.paypal.com *.avantisvideo.com *.aniview.com graphics.reuters.com; report-uri https://imparcial.report-uri.com/r/d/csp/enforce 3 default-src 'self'; style-src 'self' *.commandersact.com/ *.twimg.com/ *.twitter.com/ *.live2support.com/ *.lpsnmedia.net/ *.gstatic.com/ *.commander1.com/ *.bootstrapcdn.com/ *.tagcommander.com/ *.zencdn.net/ *.sharethis.com/ *.googleapis.com/ *.google.com/ 'unsafe-inline'; script-src 'self' *.commandersact.com/ *.twimg.com/ *.trustcommander.net/ *.cdn.syndication.twimg.com/ *.zencdn.net/ https://telegram.org/ https://youtube.com/iframe_api *.youtube.com/ *.twitter.com/ *.ytimg.com/ *.secutix.com/ *.swaven.com/ *.live2support.com/ *.googletagmanager.com/ *.tagcommander.com/ *.facebook.net/ *.google.ie/ *.google.de/ *.lpsnmedia.net/ *.hotjar.com/ *.outbrain.com/ *.google.com/ *.googleadservices.com/ *.google-analytics.com/ *.sharethis.com *.addthis.com/ *.live2support.com/ *.doubleclick.net/ *.googleapis.com/ *.google.com/ *.theadex.com *.commander1.com/ *.liveperson.net/ *.doubleclick.net/ *.gstatic.com/ *.digital4danone.com/ *.addthisedge.com/ 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: *.assetsadobe.com/ *.live2support.com/ *.twimg.com/ *.swaven.com/ *.twitter.com/ *.trustcommander.net/ *.cdninstagram.com/ *.outbrain.com/ *.danone.com/ *.commander1.com/ *.tagcommander.com/ *.lpsnmedia.net/ *.adnxs.com/ *.adition.com/ *.doubleclick.net/ *.google.ie/ *.google.co.in/ *.theadex.com/ *.google-analytics.com/ *.google.com.ph/ *.google.com/ *.sharethis.com/ *.gstatic.com/ *.googleapis.com/ *.w3.org/ *.mookie1.com/ *.facebook.com/ *.googletagmanager.com/; frame-src 'self' *.commandersact.com/ *.vimeo.com/ *.linkedin.com/ *.twitter.com/ https://cdn.trustcommander.net/ https://t.me/ https://static.rolex.com/ *.swaven.com/ *.ausha.co/ *.q4europe.com/ *.tohklom.com/ *.tagcommander.com/ *.liveperson.net/ *.live2support.com/ *.google.com/ *.lpsnmedia.net/ *.hotjar.com/ *.commander1.com/ *.proprofs.com/ *.facebook.com/ *.doubleclick.net/ *.theadex.com/ *.sharethis.com/ *.addthis.com/ *.youtube.com/ *.adsrvr.org/ *.cloudfront.net/ *.spotify.com/; connect-src 'self' *.commandersact.com/ *.googleapis.com/ *.privacy.commander1.com/ *.privacy.trustcommander.net/ https://privacy.trustcommander.net/ https://privacy.commander1.com/ *.q4europe.com/ *.swaven.com/ *.youtube.com/ *.live2support.com/ *.addthis.com/ *.google-analytics.com *.facebook.com/ *.instagram.com/ *.secutix.com/ *.omtrdc.net/ *.sharethis.com/ *.doubleclick.net/; font-src 'self' *.commandersact.com/ *.live2support.com/ data: *.amazonaws.com/ *.gstatic.com/ *.zencdn.net/; media-src 'self' *.lpsnmedia.net/ 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.gstatic.com use.fontawesome.com www.google.co.uk *.dwin1.com www.google.com *.puzzel.com *.bing.com static.addtoany.com m.addthisedge.com *.addthis.com *.hotjar.com *.pingdom.net *.qualtrics.com *.cloudfront.net widget.trustpilot.com fp.gdmdigital.com *.linkedin.com *.facebook.com *.typekit.net ajax.googleapis.com analytics.google.com v2.visualwebsiteoptimizer.com useruploads.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com livechat.uk2group.com www.googleadservices.com tagmanager.google.com www.googletagmanager.com d2wy8f7a9ursnm.cloudfront.net *.uk2.net code.jquery.com *.steelhousemedia.com *.adroll.com connect.facebook.net platform.twitter.com apis.google.com tracking.websitealive.com www.gstatic.com https://www.google-analytics.com secure.leadforensics.com *.adnxs.com https://optimize.google.com; default-src 'self' data: *.puzzel.com *.uk2.net; img-src 'self' 'unsafe-inline' googletagmanager.com canarytokens.com *.uk2.net data: *.typekit.net *.gstatic.com *.bing.com secure.gravatar.com *.pingdom.net v2.visualwebsiteoptimizer.com placehold.it useruploads.visualwebsiteoptimizer.com syndication.twitter.com *.hotjar.com dev.visualwebsiteoptimizer.com livechat.uk2group.com googleads.g.doubleclick.net www.googleadservices.com *.steelhousemedia.com chart.googleapis.com widget.trustpilot.com notify.bugsnag.com stats.g.doubleclick.net www.google.com www.google.co.uk https://www.google-analytics.com 55b558c7-resources.bk-partnersasia.com csi.gstatic.com www.facebook.com images.websitealive.com tracking.websitealive.com https://optimize.google.com; style-src 'self' 'unsafe-inline' *.uk2.net www.google.co.uk *.puzzel.com *.pingdom.net https://use.fontawesome.com maxcdn.bootstrapcdn.com *.steelhousemedia.com fonts.gstatic.com www.google.com tagmanager.google.com dev.visualwebsiteoptimizer.com livechat.uk2group.com tracking.websitealive.com widget.trustpilot.com fonts.googleapis.com https://optimize.google.com https://fonts.googleapis.com; frame-src 'self' *.uk2.net cdn.forms-content.sg-form.com static.addtoany.com *.hotjar.com *.twitter.com *.addthis.com www.google.co.uk www.google.com *.steelhousemedia.com player.vimeo.com a5.websitealive.com www.youtube.com widget.trustpilot.com tracking.websitealive.com apis.google.com accounts.google.com platform.twitter.com staticxx.facebook.com www.facebook.com dev.visualwebsiteoptimizer.com livechat.uk2group.com https://optimize.google.com; object-src 'none'; font-src 'self' *.uk2.net data: script.hotjar.com fonts.gstatic.com use.typekit.net *.puzzel.com https://use.fontawesome.com maxcdn.bootstrapcdn.com fonts.googleapis.com; connect-src 'self' mw-uk2-uat.thehut.net mw.thghosting.com static.addtoany.com googleadservices.com stats.g.doubleclick.net *.puzzel.com *.pingdom.net widget.trustpilot.com *.hotjar.com graylog.hotjar.com:12443 *.twitter.com *.uk2.net *.hotjar.com *.addthis.com dev.visualwebsiteoptimizer.com livechat.uk2group.com mw-uk2-uat.thehut.net mw.thghosting.com fonts.googleapis.com https://www.google-analytics.com www.gstatic.com connect.facebook.net bat.bing.com script.hotjar.com; 3 frame-ancestors 'self' https://c360.cricketwireless.com; 3 default-src * blob:; connect-src https: wss:; font-src https: data:; frame-src https: data: qa-freeconferencecall: freeconferencecall: qa-startmeeting: startmeeting:; img-src https: data:; media-src https: blob:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: data:; style-src https: 'unsafe-inline'; worker-src https: blob:; report-uri https://csp-bin.freeconferencecall.com/bins/b56a1d03/ 3 frame-ancestors 'self' https://webtour360.ru https://new-depo.ru https://depomoscow.ru https://360space.ru https://vseapteki.ru; 3 frame-ancestors 'self' *.shift4shop.com *.3dcart.com *.3dcart.net *.3dc.local *.3dcart.co.uk *.3dcart.ca app.cyfe.com 3 default-src 'self' *.ing.pl ping-prod.ext.e-point.pl *.e-point.pl *.adocean.pl https://optimize.google.com *.ingbank.pl https://ing.pl; font-src 'self' *.googleapis.com *.ingbank.pl data: themes.googleusercontent.com *.gstatic.com tagmanager.google.com *.ing.pl ping-prod.ext.e-point.pl www.googletagmanager.com https://optimize.google.com *.e-point.pl https://ing.pl; style-src 'self' 'unsafe-inline' code.jquery.com *.googleapis.com *.ingbank.pl https://optimize.google.com *.e-point.pl https://www.gstatic.com *.ing.pl www.google.com ping-prod.ext.e-point.pl https://platform.twitter.com www.googletagmanager.com *.gstatic.com tagmanager.google.com https://syndication.twitter.com https://ton.twimg.com https://ing.pl *.ytimg.com; img-src 'self' data: *.ggpht.com *.adocean.pl *.e-point.pl traffic.tgdaudience.com www.google.pl https://optimize.google.com https://syndication.twitter.com clients1.google.com tagmanager.google.com *.gstatic.com *.domy.pl www.googletagmanager.com *.demdex.net https://platform.twitter.com www.google.com *.glosdlafirm.pl ping-prod.ext.e-point.pl *.ing.pl apollo-ireland.akamaized.net *.googleusercontent.com https://img.youtube.com https://galeria.domiporta.pl ingbankslaski.d3.sc.omtrdc.net *.twimg.com *.ingbank.pl img01-olxpl.akamaized.net *.hit.gemius.pl *.googleapis.com *.google-analytics.com *.doubleclick.net ingbankslaski.d2.sc.omtrdc.net *.staticdomy.com.pl *.staticmorizon.com.pl *.staticoferty.net.pl https://adocean-pl.hit.gemius.pl https://ireland.apollo.olxcdn.com https://ing.pl adocean-pl.hit.gemius.pl content.ing.pl https://d-gr.cdngr.pl d-gr.cdngr.pl *.ytimg.com https://s-gm.cdngr.pl https://d-gr.rc.cdngr.pl; frame-src 'self' *.tradedoubler.com https://syndication.twitter.com www.google.com ping-prod.ext.e-point.pl *.ing.pl www.googletagmanager.com *.demdex.net https://platform.twitter.com https://www.youtube.com https://optimize.google.com traffic.tgdaudience.com *.e-point.pl *.hit.gemius.pl *.ingbank.pl *.doubleclick.net https://ing.webnotarius.pl https://ing.pl *.pl.ing-ad; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.hit.gemius.pl *.googleapis.com https://www.fbstatic-a.akamaihd.net *.ingbank.pl *.doubleclick.net code.jquery.com assets.adobedtm.com *.google-analytics.com ingbankslaski.d3.sc.omtrdc.net https://www.oauth.googleusercontent.com cdn.tgdaudience.com https://cdn.syndication.twimg.com *.gstatic.com tagmanager.google.com https://syndication.twitter.com www.google.com ping-prod.ext.e-point.pl https://www.apis.google.com *.ing.pl *.demdex.net www.googletagmanager.com https://platform.twitter.com https://www.youtube.com https://optimize.google.com www.googleadservices.com *.e-point.pl https://www.gstatic.com *.adocean.pl ingbankslaski.d2.sc.omtrdc.net https://ton.twimg.com https://ireland.apollo.olxcdn.com https://ing.pl *.ytimg.com; object-src 'self' *.ingbank.pl *.ing.pl ping-prod.ext.e-point.pl www.googletagmanager.com *.e-point.pl https://ing.pl; connect-src 'self' traffic.tgdaudience.com *.e-point.pl *.adocean.pl *.demdex.net www.googletagmanager.com *.ing.pl ping-prod.ext.e-point.pl wss://*.twilio.com https://syndication.twitter.com ingbankslaski.d3.sc.omtrdc.net *.google-analytics.com https://*.twilio.com *.doubleclick.net *.ingbank.pl *.hit.gemius.pl ingbankslaski.d2.sc.omtrdc.net https://ing.pl; frame-ancestors 'self' *.ingbank.pl ping-prod.ext.e-point.pl *.ing.pl *.demdex.net www.googletagmanager.com *.e-point.pl; 3 default-src 'self' *.vidyard.com https: mailto:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: mailto:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; media-src 'self' https: blob:; font-src 'self' https: data:; connect-src 'self' https: wss: ; upgrade-insecure-requests 3 default-src *.onetrust.com *.cookielaw.org alumacraft.com *.alumacraft.com *.manitoupontoonboats.com *.wufoo.com unpkg.com *.yandex.ru my.matterport.com airtable.com ds-aksb-a.akamaihd.net monkeys-fist-for-brp.com *.myfeelback.com mfb.li mailchi.mp *.stackla.com fareharbor.com *.salecycle.com story.brplynx.com *.cloudfront.net mpembed.com *.googleadservices.com *.slideshare.net *.hotjar.com *.typekit.net *.bootstrapcdn.com *.salesforce.com *.omtrdc.net service.force.com *.adobedtm.com *.google.ca *.gstatic.com *.azurewebsites.net *.lightboxcdn.com *.salesforceliveagent.com *.force.com *.moatads.com *.youtube.com *.addthisedge.com *.addthis.com *.cloudflare.com *.doubleclick.net *.appdynamics.com *.brp.com *.facebook.net *.azureedge.net *.google-analytics.com *.googletagmanager.com *.googleapis.com *.google.com 'unsafe-inline' 'unsafe-eval' blob: data: 'self' *.demdex.net *.day.com *.everesttech.net *.scene7.com s.amazon-adsystem.com *.facebook.com *.googleusercontent.com *.lightboxapi.com *.eum-appdynamics.com *.womenofonroadgroups.com *.canamonroadcommunity.com canamonroadcommunity.com *.learntoride3wheel.com *.limelightplatformevents.com *.valuemytradein.com *.zlthunder.net cdn.knightlab.com *.mdex.net; 3 frame-ancestors 'self' *.leovegas.com *.casinomodule.com *.yggdrasilgaming.com *.evolutiongaming.com *.gameassists.co.uk *.gameassists.dk *.rgsgames.com *.wagerworks.com *.adform.com *.livetables.io *.regily.com *.casinoalternativen.com *.onlinecasinobonus24.xyz *.livetableshu.com 3 frame-ancestors self https://*.chaosgroup.com https://secure.avangate.com https://secure.2checkout.com 3 frame-src 'self' https://www.terminland.de *.datev-bot.de *.datev.de *.datev.com 3 default-src 'self' http: https: blob: ws: cdnjs.cloudflare.com use.typekit.net wpstream.net www.google-analytics.com fonts.googleapis.com fonts.gstatic.com s.w.org;; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https: https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.googletagmanager.com https://snap.licdn.com https://securepubads.g.doubleclick.net https://ml314.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:; img-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: blob: filesystem:; font-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: https://fonts.googleapis.com https://fonts.gstatic.com; object-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; frame-src 'self' http: https: www.youtube-nocookie.com youtube-nocookie.com youtube.com vimeo.com; 3 connect-src 'self' https://www.paypal.com https://fastmail.innocraft.cloud https://o73885.ingest.sentry.io/api/; default-src 'none'; img-src 'self' data: https://fastmail.innocraft.cloud https://*.twimg.com https://*.twitter.com https://www.gravatar.com https://icgroup.helpspot.com https://www.paypalobjects.com http://www.pobox.com https://*.gstatic.com https://www.fastmail.com https://*.zdusercontent.com https://fastmail.zendesk.com https://pobox.zendesk.com; font-src 'self' data: http://fonts.gstatic.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.twitter.com https://*.twimg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.gstatic.com https://*.twitter.com https://*.twimg.com https://connect.facebook.net https://fastmail.innocraft.cloud https://listbox.com https://run-static.pingdom.net https://*.gstatic.com https://*.facebook.com https://talon-ehawk.netdna-ssl.com https://www.e-hawk.net https://www.ehawk.net https://www.paypalobjects.com https://www.paypal.com https://icgroup.helpspot.com; object-src 'none'; frame-src 'self' data: https://*.twitter.com https://*.twimg.com https://*.facebook.com https://*.google.com; frame-ancestors 'self' 3 default-src 'self' data: https:; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: https://c.iad.oracleinfinity.io blob:; style-src 'self' data: 'unsafe-inline' https:; img-src 'self' data: https:; frame-src 'self' https://*.beocms.de https://*.beocms.com data: https: blob:; connect-src 'self' data: https:; media-src 'self' data: https: blob: 3 frame-ancestors 'self'; default-src https:; connect-src https: wss:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https: 3 default-src 'self' 'unsafe-inline' jobs.b-ite.com; base-uri 'self'; connect-src 'self' wss://chat.userlike.com chat.userlike.com wss://umd.userlike.com userlike.com *.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com dnbweb-editor.preview.kkn.zd.intranet.bund.de *.cloudfront.net jobs.b-ite.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com piwik.itzbund.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.youtube.com *.googleapis.com piwik.itzbund.de script.ioam.de de.ioam.de s.ytimg.com static.b-ite.com cs-assets.b-ite.com ajax.googleapis.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com *.cloudfront.net; object-src 'self' piwik.itzbund.de; media-src 'self' *.youtube.com www.quirksmode.org *.googleapis.com piwik.itzbund.de youtu.be files.dnb.de c18004-vod.l.core.cdn.streamfarm.net *.cloudfront.net; child-src *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de my.matterport.com; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de *.tile.openstreetmap.org api.userlike.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com *.cloudfront.net; font-src 'self' data: *.googleapis.com *.gstatic.com piwik.itzbund.de *.cloudfront.net; frame-ancestors dnbweb-editor.preview.kkn.zd.intranet.bund.de piwik.itzbund.de 3 child-src *.doubleclick.net *.dynad.net *.facebook.com *.hotjar.com *.pagseguro.uol.com.br *.rm.uol.com.br *.tailtarget.com *.uol.com *.uol.com.br *.youtube.com https://www.google.com *.blip.ai data: 'self'; connect-src *.hotjar.com *.pagseguro.com.br *.uol.com.br wss://ws.0mn.io https: wss: 'self'; frame-ancestors 'self'; default-src *.uol.com.br *.pagseguro.com.br 'self'; media-src *.uol.com.br *.pagseguro.com.br data: 'self'; object-src *.uol.com.br *.pagseguro.com.br data: 'self'; font-src *.pagseguro.uol.com.br *.pagseguro.com.br *.uol.com *.uol.com.br *.imguol.com.br *.gstatic.com *.hotjar.com https://imguol.com.br data: 'self'; img-src *.google.com *.google-analytics.com *.google.com.br *.googleapis.com *.gstatic.com *.facebook.com *.imguol.com *.uol.com *.uol.com.br *.pagseguro.com.br *.scorecardresearch.com *.ytimg.com *.doubleclick.net *.googleadservices.com *.xg4ken.com *.youtube.com *.hotjar.com *.tailtarget.com *.bing.com https://imguol.com https://imguol.com.br trg.adilligo.com takenetomni.blob.core.windows.net data: 'self'; script-src *.ampproject.org *.bing.com *.doubleclick.net *.dynad.net *.facebook.net *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.googletagmanager.com *.hotjar.com *.jsdelivr.net *.jsuol.com.br *.pagseguro.com.br *.simg.uol.com.br *.tailtarget.com *.uol.com *.uol.com.br *.xg4ken.com *.ytimg.com https://pagseguro.info https://pag.ae https://imguol.com.br https://www.gstatic.com https://tracking.tunad.io https://js-agent.newrelic.com https://*.nr-data.net about: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.uol.com *.pagseguro.uol.com.br *.pagseguro.com.br *.simg.uol.com.br *.ytimg.com https://imguol.com.br 'self' *.google.com *.googleapis.com 'unsafe-inline'; report-uri /csp-report 3 script-src 'self' 'unsafe-inline' https://js.stripe.com; img-src 'self' data: https://www.gravatar.com https://secure.gravatar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self'; frame-src https://player.vimeo.com https://www.youtube-nocookie.com https://js.stripe.com; object-src 'none' 3 default-src https://player.vimeo.com https://vars.hotjar.com www.abtasty.com wss://*.hotjar.com try.abtasty.com https://*.hotjar.io stats.g.doubleclick.net app.abtasty.com *.try.abtasty.com wss://ws3.hotjar.com teddytor.abtasty.com *.app.abtasty.com *.abtasty.com dcinfos.abtasty.com *.ratatu.pl https://9274211.fls.doubleclick.net *.googleads.g.doubleclick.net prospectleads.bnpparibas.pl bnp-paribas.user.com https://graylog.hotjar.com:12443 http://*.hotjar.com:* https://try.abtasty.com https://insights.hotjar.com widget.user.com https://*.hotjar.com:* https://vimeo.com googleads.g.doubleclick.net http://*.hotjar.io https://www.google-analytics.com qtank.salesmore.pl *.google.com 52.166.95.107 'self'; font-src https://themes.googleusercontent.com/ *.googleads.g.doubleclick.net fonts.googleapis.com prospectleads.bnpparibas.pl widget.user.com *.try.abtasty.com https://fonts.gstatic.com googleads.g.doubleclick.net themes.googleusercontent.com *.app.abtasty.com *.abtasty.com *.google.com *.ratatu.pl data: 'self'; style-src bnp-optima-uat-search01.squiz.pl https://app.abtasty.com https://www.s.ytimg.com *.try.abtasty.com https://bnp-search01.squiz.pl https://test-bgz-fb.squiz.pl https://www.gstatic.com teddytor.abtasty.com www.google.com *.app.abtasty.com *.abtasty.com *.ratatu.pl https://fonts.googleapis.com *.googleads.g.doubleclick.net https://tagmanager.google.com prospectleads.bnpparibas.pl bnp-paribas.user.com https://bgz-fb.squiz.pl www.googleapis.com https://teddytor.abtasty.com widget.user.com googleads.g.doubleclick.net https://skk.erecruiter.pl *.google.com https://www.ytimg.com 52.166.95.107 'self' 'unsafe-inline'; img-src https://www.facebook.com https://pixel.wp.pl https://cm.g.doubleclick.net https://*.googleapis.com stats.g.doubleclick.net *.try.abtasty.com https://bnp-search01.squiz.pl https://test-bgz-fb.squiz.pl *.app.abtasty.com www.google.com bcp.crwdcntrl.net *.ratatu.pl www.google-analytics.com www.0.s-nk.pl *.googleads.g.doubleclick.net https://www.i1.ytimg.com bnp-paribas.user.com *.gstatic.com https://www.googleapis.com widget.user.com googleads.g.doubleclick.net https://skk.erecruiter.pl www.s3.cdn03.imgwykop.pl *.google.com https://www.twitter.com www.s.c.lnkd.licdn.com https://emplocity.com https://googleads4.g.doubleclick.net https://www.googleadservices.com i.ctnsnet.com www.s-passets.pinimg.com bnp-optima-uat-search01.squiz.pl https://ib.adnxs.com https://dot.wp.pl https://*.gstatic.com https://www.google-analytics.com/ https://googleads.g.doubleclick.net https://maps.google.com gcm.ctnsnet.com www.googletagmanager.com teddytor.abtasty.com *.abtasty.com https://www.emplocity.com clients1.google.com https://tbl.tradedoubler.com https://ad.doubleclick.net prospectleads.bnpparibas.pl www.linkedin.com https://bgz-fb.squiz.pl https://s1.2mdn.net *.ggpht.com https://www.google.pl https://sp.analytics.yahoo.com www.passets.pinterest.com https://i.vimeocdn.com https://developers.google.com www.passets.pinimg.com 'self' data:; frame-src https://emplocity.com www.wykop.pl https://player.vimeo.com https://www.linkedin.com https://vars.hotjar.com https://s-static.ak.facebook.com https://www.s-static.ak.facebook.com https://www.facebook.com try.abtasty.com stats.g.doubleclick.net app.abtasty.com *.try.abtasty.com https://platform.linkedin.com teddytor.abtasty.com *.app.abtasty.com www.google.com static.ak.facebook.com *.abtasty.com www.youtube.com dcinfos.abtasty.com *.ratatu.pl https://www.wykop.pl https://www.youtube.com https://9274211.fls.doubleclick.net www.facebook.com *.googleads.g.doubleclick.net prospectleads.bnpparibas.pl https://bid.g.doubleclick.net bnp-paribas.user.com https://4397256.fls.doubleclick.net https://accounts.google.com https://try.abtasty.com widget.user.com https://vimeo.com googleads.g.doubleclick.net https://web.facebook.com *.google.com 52.166.95.107 'self'; script-src https://player.vimeo.com www.widgets.pinterest.com https://script.hotjar.com https://app.ehoundplatform.com https://pixel.wp.pl https://www.ssl.gstatic.com https://*.googleapis.com https://bnp-search01.squiz.pl https://test-bgz-fb.squiz.pl https://platform.linkedin.com *.www.abtasty.com https://www.gstatic.com www.google.com https://www.fbstatic-a.akamaihd.net *.ratatu.pl www.assets.pinterest.com https://www.youtube.com www.google-analytics.com www.0.s-nk.pl https://www.google.com https://cse.google.com *.vimeo.com bnp-paribas.user.com www.cdn.api.twitter.com https://www.googleapis.com www.platform.linkedin.com https://teddytor.abtasty.com www.static.ak.facebook.com widget.user.com https://apis.google.com https://skk.erecruiter.pl https://www.abtasty.com https://emplocity.com https://px.wp.pl www.abtasty.com https://www.googleadservices.com https://static.hotjar.com https://dcinfos.abtasty.com https://www.s-static.ak.facebook.com https://www.oauth.googleusercontent.com bnp-optima-uat-search01.squiz.pl https://app.abtasty.com https://www.s.ytimg.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://maps.google.com www.googletagmanager.com *.abtasty.com https://cdn.jsdelivr.net https://ad.doubleclick.net https://connect.facebook.net https://tagmanager.google.com prospectleads.bnpparibas.pl https://leads.sanboxbnpparibas.pl http://platform.linkedin.com https://s.ytimg.com www.linkedin.com https://bgz-fb.squiz.pl https://www.bnpparibas.pl https://try.abtasty.com https://www.google.pl https://maps.gstatic.com https://developers.google.com https://vimeo.com *.ad.doubleclick.net https://www.google-analytics.com https://prospectleads.bnpparibas.pl www.platform.twitter.com https://www.apis.google.com 52.166.95.107 https://www.static.hotjar.com 'self' 'unsafe-eval' 'unsafe-inline'; object-src *.googleads.g.doubleclick.net prospectleads.bnpparibas.pl https://stats.g.doubleclick.net bnp-paribas.user.com try.abtasty.com stats.g.doubleclick.net https://try.abtasty.com widget.user.com app.abtasty.com *.try.abtasty.com googleads.g.doubleclick.net *.ad.doubleclick.net teddytor.abtasty.com *.app.abtasty.com *.abtasty.com *.google.com dcinfos.abtasty.com *.ratatu.pl 52.166.95.107 'self'; connect-src https://emplocity.com www.abtasty.com wss://ws4.hotjar.com wss://*.hotjar.com https://www.facebook.com try.abtasty.com bnp-optima-uat-search01.squiz.pl stats.g.doubleclick.net app.abtasty.com https://app.userengage.com *.try.abtasty.com https://bnp-search01.squiz.pl https://test-bgz-fb.squiz.pl wss://bnp-paribas.user.com teddytor.abtasty.com wss://ws3.hotjar.com *.app.abtasty.com *.abtasty.com dcinfos.abtasty.com *.ratatu.pl *.googleads.g.doubleclick.net prospectleads.bnpparibas.pl wss://ws9.hotjar.com https://vc.hotjar.io bnp-paribas.user.com https://bgz-fb.squiz.pl https://graylog.hotjar.com:12443 https://insights.hotjar.com widget.user.com https://in.hotjar.com https://vimeo.com googleads.g.doubleclick.net qtank.salesmore.pl *.google.com 52.166.95.107 'self' 3 frame-ancestors *.windstream.net 3 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob: 'unsafe-inline'; 3 frame-ancestors 'self' https://de.page4.com https://en.page4.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; media-src 'self' 'unsafe-inline' *;img-src 'self' blob: data: *; style-src 'self' 'unsafe-inline' *; font-src 'self' *; frame-src 'self' *; connect-src 'self' *; object-src 'none' 3 frame-ancestors 'self' https://print.hitched.co.uk 3 default-src 'self';frame-ancestors 'none';frame-src 'self' *.liadm.com *.doubleclick.net *.hotjar.com *.google.com *.mackeeper.com *.facebook.com *.youtube.com *.trustpilot.com *.criteo.com;child-src 'self';form-action 'self';img-src 'self' data: *.kromtech.net *.mackeeper.com *.visualwebsiteoptimizer.com *.bing.com *.google-analytics.com *.facebook.com *.liadm.com *.doubleclick.net *.hotjar.com *.owox.com *.zoomsupport.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.taboola.com *.outbrain.com *.gstatic.com http://mackeeper.com https://mackeeper.com *.atdmt.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.bing.com *.facebook.net *.hotjar.com *.liadm.com *.visualwebsiteoptimizer.com *.kromtech.net *.mackeeper.com *.doubleclick.net *.youtube.com *.ytimg.com *.taboola.com *.outbrain.com *.trustpilot.com http://mackeeper.com https://mackeeper.com http://support.zoomsupport.com http://crm.zoomsupport.com http://chat-crm.zoomsupport.com *.criteo.net *.criteo.com https://polyfill.io/v3/polyfill.min.js;style-src 'self' 'unsafe-inline' *.googleapis.com *.kromtech.net *.mackeeper.com *.google.com http://mackeeper.com https://mackeeper.com;font-src 'self' data: *.gstatic.com *.hotjar.com *.kromtech.net *.mackeeper.com;object-src 'none';connect-src 'self' *.facebook.com *.mackeeper.com http://mackeeper.com https://mackeeper.com *.hotjar.io *.hotjar.com *.doubleclick.net support.mackeeper.com *.google-analytics.com https://analytics.google.com wss://*.hotjar.com *.taboola.com *.outbrain.com http://rp.liadm.com https://rp.liadm.com https://bat.bing.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.nf *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat 3 default-src 'self'; form-action 'self'; object-src 'self'; connect-src 'self' https://api.github.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https://matomo.riot.im/matomo.php; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://*.cloudfront.net https://ajax.googleapis.com https://matomo.riot.im/matomo.js https://webforms.pipedrive.com https://*.pipedriveassets.com; child-src 'self' https://webforms.pipedrive.com 3 frame-ancestors 'self' *.knoema.com *.knoema.org 3 default-src 'self' https://tramitesanonimos.cnmc.es; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdnjs.cloudflare.com https://translate.googleapis.com https://translate.google.com https://www.google-analytics.com https://cdn.jsdelivr.net https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com; child-src 'self' https://www.google.com/recaptcha/ https://docs.google.com https://www.gstatic.com/recaptcha/ https://fonts.googleapis.com https://www.youtube.com; img-src 'self' data: https://translate.google.com https://getbootstrap.com https://www.jsdelivr.com https://www.gstatic.com https://www.google.com https://translate.googleapis.com https://www.google-analytics.com https://blog.cnmc.es; media-src 'self'; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://translate.googleapis.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://www.gstatic.com/recaptcha/; font-src 'self' https://cdn.jsdelivr.net https://fonts.gstatic.com https://www.gstatic.com/recaptcha/; object-src 'self'; connect-src 'self' https://bootswatch.com https://translate.googleapis.com https://www.google-analytics.com; 3 frame-ancestors 'self' https://cart.penguinrandomhouse.com/ 3 : script-src "self" 3 frame-ancestors 'self'; object-src 'none'; base-uri 'none'; form-action 'self' www.facebook.com; report-uri https://data.jijiapp.net/csp-report; 3 default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: wss: *.ameriprise.com *.ampf.com *.ameripriseadvisors.com *.qualtrics.com *.glance.net *.googleapis.com *.google.com *.twitter.com *.twimg.com *.linkedin.com *.quantserve.com *.google-analytics.com *.egain.cloud *.analytics-egain.com *.akamaihd.net *.prod.boltdns.net https://ssl.google-analytics.com https://snap.licdn.com https://bat.bing.com https://connect.facebook.net trkn.us s.ameriprisestats.com https://assets.adobedtm.com https://rules.quantcount.com https://maxcdn.bootstrapcdn.com https://trkn.us https://d.turn.com *.doubleclick.net https://s.ameriprisestats.com secure.img-cdn.mediaplex.com https://cdn.ameriprisecontent.com https://maps.googleapis.com *.zscalertwo.net *.online-metrix.net *.gstatic.com *.pietech.com/ https://www.refinitiv.com/ https://maps.google.com https://awm-app-aitt.ampf.com https://www.dinkytown.net http://www.sipc.org/ https://www.riversource.com/ *.investormailbox.com/ https://www.forefieldkt.com https://4266532.fls.doubleclick.net https://advisorcompass.112.2o7.net https://fonts.googleapis.com https://uat-federation.usbank.com https://www.google.com https://pixel.quantserve.com http://www.opinionlab.com https://www.googletagmanager.com https://www.thompsonreuters.com https://stackoverflow.com https://brokerage.ameriprise.com https://www.quovo.com/ http://www.advicentsolutions.com/aup https://www.nmlsconsumeraccess.org/ https://www.fdic.gov/ https://newpublic.cfraresearch.com/legal/ https://secure.opinionlab.com http://brokercheck.finra.org/ http://www.prnewswire.com http://pdf.reuters.com http://www.jenner.com http://www.bankofengland.co.uk/PRA/ http://www.zillow.com/zestimate/ *.barclaycardus.com 16056.id.amgdgt.com/ http://www.moneyguidepro.com/ https://platform.twitter.com https://apis.google.com http://videojs.com https://web-2-tel.com https://px.ads.linkedin.com https://www.linkedin.com https://p.adsymptotic.com https://dpm.demdex.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://cm.everesttech.net https://ad.doubleclick.net https://www.facebook.com https://cdn.syndication.twimg.com https://ameriprisefinancial.demdex.net https://gateway.zscalertwo.net *.advisorcompass.com https://login.zscalertwo.net https://ocs.ameriprise.com https://h.online-metrix.net *.d.aa.online-metrix.net *.ggpht.com https://edge.api.brightcove.com *.crwdcntrl.net https://cdn.gbqofs.com *.brightcove.net https://insight.adsrvr.org https://tags.w55c.net https://vjs.zencdn.net https://metrics.brightcove.com https://secure.brightcove.com https://report.ameriprise.glassboxdigital.io https://bid.g.doubleclick.net https://cm.g.doubleclick.net https://tags.w55c.net https://dsum-sec.casalemedia.com *.morningstar.com https://www.mediamath.com/ https://pixel.mathtag.com https://aa.agkn.com https://players.brightcove.net/ https://sync.search.spotxchange.com https://loadus.exelator.com https://x.bidswitch.net https://pixel.advertising.com https://ads.scorecardresearch.com https://us-u.openx.net https://contextual.media.net https://match.adsrvr.org https://ad.sxp.smartclip.net https://px.britepool.com *.bluekai.com https://idsync.rlcdn.com https://www.google.co.in https://ameriprisefinancial.egain.cloud https://ameriprisefinancialdev.egain.cloud https://cloud-us.analytics-egain.com/ https://www.glancecdn.net *.amazonaws.com https://presence.glance.net https://ampf.htm2pdf.co.uk https://pixel.rubiconproject.com 3 frame-ancestors 'self' http://carbonblack.lookbookhq.com https://carbonblack.lookbookhq.com http://content.carbonblack.com https://content.carbonblack.com 3 default-src 'self' 'unsafe-inline' *.tableau.com *.vimeo.com *.youtube.com pro.ip-api.com cdnjs.cloudflare.com cdn.rawgit.com raw.githubusercontent.com *.googletagmanager.com cdn.jsdelivr.net www.google-analytics.com www.googletagmanager.com fonts.gstatic.com www.google.com *.googleapis.com maps.gstatic.com developers.google.com tagmanager.google.com ssl.gstatic.com www.gstatic.com tagmanager.google.com apikeys.civiccomputing.com cc.cdn.civiccomputing.com cdn.siteimprove.net data:; 3 default-src https: 'unsafe-eval' 'unsafe-inline' 3 frame-ancestors 'self' https://*.salesforce.com 3 default-src 'none'; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://assets-ctb.pernod-ricard.io https://api.pernod-ricard.io https://cdn.jsdelivr.net/npm/algoliasearch https://zfm2j5365u-3.algolianet.com https://zfm2j5365u-dsn.algolia.net https://d8ejoa1fys2rk.cloudfront.net https://brandcloud.pernod-ricard.com https://optoutapi.evidon.com *.evidon.com *.betrad.com; font-src 'self' https://maxcdn.bootstrapcdn.com https://app-avp.pravp.com https://assets-ctb.pernod-ricard.io; frame-src 'self' https://www.youtube.com https://player.vimeo.com; img-src 'self' https: data:; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://avp.pravp.com https://www.google-analytics.com https://c.evidon.com https://assets-ctb.pernod-ricard.io https://cdn.jsdelivr.net/npm/algoliasearch https://zfm2j5365u-3.algolianet.com https://www.youtube.com https://player.vimeo.com *.facebook.net https://cdn.jsdelivr.net https://d8ejoa1fys2rk.cloudfront.net https://static.addtoany.com; style-src 'self' 'unsafe-inline' https://assets-ctb.pernod-ricard.io maxcdn.bootstrapcdn.com; style-src-attr 'self' 'unsafe-inline' 'unsafe-hashes'; base-uri 'self'; form-action 'self' https://login.microsoftonline.com https://device.login.microsoftonline.com; frame-ancestors 'self'; report-uri https://www.pernod-ricard.com/en/report-uri/enforce 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: mailto: 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com www.google.com static.cloud.coveo.com script.crazyegg.com z.moatads.com consent.cookiebot.com consentcdn.cookiebot.com players.brightcove.net www.googletagmanager.com sjs.bizographics.com siteimproveanalytics.com s7.addthis.com vidassets.terminus.services www.googleadservices.com m.addthis.com googleads.g.doubleclick.net v1.addthisedge.com scripts.demandbase.com snap.licdn.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net api.company-target.com maps.googleapis.com; frame-ancestors 'self' players.brightcove.net bid.g.doubleclick.net consentcdn.cookiebot.com; font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com www.fticonsulting.com; img-src 'self' 'unsafe-inline' data: px.ads.linkedin.com 63904.global.siteimproveanalytics.io p.adsymptotic.com vidassets.terminus.services www.google.com www.google.com.ec match.prod.bidr.io id.rlcdn.com www.google-analytics.com segments.company-target.com www.linkedin.com match.adsrvr.org maps.gstatic.com maps.googleapis.com www.googletagmanager.com ml.globenewswire.com www.fticonsulting.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com static.cloud.coveo.com www.fticonsulting.com; child-src 'self' 'unsafe-inline' consentcdn.cookiebot.com players.brightcove.net www.google.com s7.addthis.com bid.g.doubleclick.net www.fticonsulting.com 3 default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' mc.yandex.ru www.gstatic.com www.google.com www.otis.com geolocation.onetrust.com googleads.g.doubleclick.net heyotis.appspot.com js.hsforms.net *.opendns.com survey.survicate.com forms.hsforms.com fm.ipinyou.com stats.ipinyou.com www2-heyotis.snapengage.com stm-cdn.cn.miaozhen.com www.googleadservices.com console.e-bot7.de fm.ipinyou.com surveys-static.survicate.com www.googletagmanager.com cdn.cookielaw.org bat.bing.com OMUSCMSLFRPCDN03.azureedge.net storage.googleapis.com bat.bing.com connect.facebook.net heyotis.appspot.com j.6sc.co js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net OMUSCMSLFRPCDN03.azureedge.net secure.loki8lave.com snap.licdn.com storage.googleapis.com www.google-analytics.com; style-src 'self' 'unsafe-inline' www.google.com www.otis.com fonts.googleapis.com OMUSCMSLFRPCDN03.azureedge.net; object-src 'none'; base-uri 'self'; connect-src 'self' mc.yandex.ru console.e-bot7.de www.google.com www.facebook.com OMUSCMSLFRPCDN03.azureedge.net www2-heyotis.snapengage.com privacyportal.onetrust.com www.otis.com forms.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com heyotis.appspot.com stm-collect.cn.miaozhen.com c.6sc.co respondent.survicate.com cdn.cookielaw.org api.hubapi.com bat.bing.com forms.hubspot.com secure.adnxs.com stats.g.doubleclick.net www.google-analytics.com; font-src 'self' data: www.google.com www.otis.com OMUSCMSLFRPCDN03.azureedge.net fonts.gstatic.com; frame-src 'self' mc.yandex.md players.brightcove.net console.e-bot7.de js.hsforms.net www.facebook.com www.google.com www.gstatic.com www.otis.com forms.hsforms.com 9915888.fls.doubleclick.net 9915888.fls.doubleclick.net; img-src 'self' https: http: data: ; media-src 'self' www2-heyotis.snapengage.com www.google.com www.otis.com heyotis.appspot.com OMUSCMSLFRPCDN03.azureedge.net ; worker-src 'none'; 3 frame-ancestors 'self' *.datastax.com 3 default-src https:; frame-ancestors 'self'; form-action 'self'; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-eval' 'unsafe-inline' 3 frame-ancestors *.nordangliaeducation.com *.tfaforms.net 'self' 3 default-src * 'unsafe-eval' 'unsafe-inline' data:; 3 frame-ancestors *.straumann.com 3 default-src 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' s7.addthis.com static.hotjar.com script.hotjar.com www.google.com www.gstatic.com www.youtube.com fonts.googleapis.com www.googletagmanager.com tagmanager.google.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com safebrowsing.googleapis.com analytics.google.com connect.facebook.net analytics.tiktok.com googleads.g.doubleclick.net z.moatads.com v1.addthisedge.com m.addthis.com edge.addthis.com polo.feathr.co cdn.feathr.co banman.providermagazine.com banman.ahcancal.org; object-src 'self'; style-src 'self' data: 'unsafe-inline' s7.addthis.com www.google.com www.youtube.com fonts.googleapis.com tagmanager.google.com; img-src 'self' data: ssl.gstatic.com www.gstatic.com www.google-analytics.com www.google.com www.facebook.com marco.feathr.co polo.feathr.co www.googletagmanager.com banman.providermagazine.com banman.ahcancal.org; media-src 'self' data: www.youtube.com app.powerbi.com www.surveymonkey.com; frame-src 'self' data: www.google.com *.hotjar.com ahcancal.wufoo.com s7.addthis.com www.youtube.com app.powerbi.com edge.addthis.com www.facebook.com www.surveymonkey.com bid.g.doubleclick.net; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com; connect-src 'self' data: www.google-analytics.com https://www.google-analytics.com in.hotjar.com ws7.hotjar.com polo.feathr.co analytics.tiktok.com 3 connect-src 'self' https://surveystats.hotjar.io https://l.getsitecontrol.com https://dash.getsitecontrol.com https://gse.gigaset.com *.hotjar.com wss://*.hotjar.com aggregator.service.usercentrics.eu analytics.google.com api.chatchamp.io api.usercentrics.eu graphql.usercentrics.eu stats.g.doubleclick.net www.google-analytics.com www.google.de bat.bing.com halc.iadvize.com in.hotjar.com s.adroll.com ct.pinterest.com fast.smarketer.de https://*.billwerk.com sandbox.billwerk.com api.trustedshops.com shops-si.trustedshops.com trustbadge.api.etrusted.com vc.hotjar.io ws3.hotjar.com ws7.hotjar.com wss://ws3.hotjar.com wss://ws7.hotjar.com www.facebook.com www.google.ch www.google.com www.google.fr ws6.hotjar.com wss://ws6.hotjar.com www.google.co.uk ws10.hotjar.com ws4.hotjar.com ws8.hotjar.com wss://ws1.hotjar.com wss://ws10.hotjar.com wss://ws4.hotjar.com wss://ws8.hotjar.com www.google.be www.google.hr www.google.it www.google.nl www.google.ru ws12.hotjar.com ws18.hotjar.com ws2.hotjar.com wss://ws12.hotjar.com wss://ws18.hotjar.com wss://ws2.hotjar.com ws5.hotjar.com wss://ws5.hotjar.com www.google.es www.google.se www.google.com.tr www.google.cz ws17.hotjar.com wss://ws17.hotjar.com ws15.hotjar.com wss://ws15.hotjar.com www.google.co.in ws16.hotjar.com wss://ws16.hotjar.com www.google.com.cy www.google.pl ws9.hotjar.com wss://ws9.hotjar.com ws11.hotjar.com wss://ws11.hotjar.com app.getsitecontrol.com ws1.hotjar.com www.google.at d.adroll.com ws13.hotjar.com ws14.hotjar.com wss://ws13.hotjar.com wss://ws14.hotjar.com www.google.gr api.trustbadge.etrusted.com www.google.cl www.google.co.cr www.google.co.za www.google.com.ar www.google.rs service.gigaset.com www.google.ba www.google.dk www.google.ae network-eu.bazaarvoice.com www.google.hu wss://ff.kis.v2.scr.kaspersky-labs.com www.google.com.mx www.bing.com www.google.co.il www.google.co.ma www.google.co.ve www.google.com.bd www.google.com.co www.google.com.lb www.google.com.pe www.google.ie www.google.lu www.google.no www.google.pt www.google.ro www.google.si *.convertize.io; default-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.iamsmartad.com aggregator.service.usercentrics.eu analytics.google.com api.chatchamp.io api.usercentrics.eu app.usercentrics.eu connect.facebook.net data: googleads.g.doubleclick.net graphql.usercentrics.eu https://pixel.mathtag.com tr.outbrain.com widgets.trustedshops.com www.facebook.com www.google-analytics.com www.google.com www.google.de https://www.googletagmanager.com www.youtube.com halc.iadvize.com bat.bing.com widgets.getsitecontrol.com in.hotjar.com script.hotjar.com static.hotjar.com vars.hotjar.com pixel.convertize.io p.typekit.net use.typekit.net ct.pinterest.com fast.smarketer.de s.pinimg.com ups.xplosion.de display.ugc.bazaarvoice.com s.adroll.com gse.gigaset.com ff.kis.v2.scr.kaspersky-labs.com fonts.googleapis.com https://mpsnare.iesnare.com; font-src https://script.hotjar.com use.typekit.net data: 'self' st.getsitecontrol.com fonts.gstatic.com github.com static3.avast.com; form-action 'self' www.facebook.com service.gigaset.com api.bazaarvoice.com 'unsafe-eval' ct.pinterest.com gigaset-org.freshworks.com; frame-src https://ir.tools.investis.com pixel.mathtag.com www.google.com www.facebook.com vars.hotjar.com secure.pay1.de www.youtube.com bid.g.doubleclick.net js.chatchamp.com api.bazaarvoice.com display.ugc.bazaarvoice.com tpc.googlesyndication.com cms.gigaset.com gigaset-prov.gigaset.com gigaset.secure.force.com where-to-buy.co www.googletagmanager.com player.vimeo.com ad2.adfarm1.adition.com 'self' gigaset-net.gigaset.com ct.pinterest.com forms.office.com verify.iamstudent.com www.iamstudentverify.com pwm-image.trendmicro.com; frame-ancestors 'self' https://www.gigaset.com; img-src 'self' 'report-sample' https://script.hotjar.com https://smarttracking.defacto-x.net https://m2.getsitecontrol.com https://trc.taboola.com https://d.adroll.com https://www.google.ee https://www.google.is app.usercentrics.eu googleads.g.doubleclick.net pixel.mathtag.com test.gse.gigaset.com tr.outbrain.com widgets.magentocommerce.com widgets.trustedshops.com www.facebook.com www.gigaset.com www.google-analytics.com www.google.com www.google.de display.ugc.bazaarvoice.com network-eu-stg.bazaarvoice.com photos-uat-eu.bazaarvoice.com bat.bing.com data: d.adroll.com cdn.pay1.de image-charts.com www.googletagmanager.com ct.pinterest.com img.youtube.com network-eu-stg-a.bazaarvoice.com app.getsitecontrol.com media.getsitecontrol.com gse.gigaset.com insight.adsrvr.org network-eu.bazaarvoice.com pro-gse.gigaset.com www.google.ch www.google.co.uk www.google.com.tr www.google.com.tw www.google.es www.google.fr www.google.it www.google.nl www.google.pl photos-eu.bazaarvoice.com test.gigaset.com www.google.at www.google.be aax-eu.amazon-adsystem.com ads.yahoo.com cm.g.doubleclick.net connect.facebook.net network-eu-a.bazaarvoice.com stats.g.doubleclick.net sync.outbrain.com sync.taboola.com www.google.co.il www.google.cz www.google.hr www.google.lu www.google.ru www.google.sk www.gstatic.com www.google.com.lb translate.google.com www.google.se www.google.co.ao www.google.co.in www.google.co.kr www.google.com.mx www.google.hu www.google.no px.ads.linkedin.com www.awin1.com www.google.com.cy ib.adnxs.com i.ytimg.com www.google.az www.google.co.za www.google.com.bd www.google.fi www.google.pt www.google.co.cr www.google.ci www.google.com.sa www.google.rs www.google.gr android-webview-video-poster www.google.com.ar www.google.tn www.google.com.vn www.google.cl www.google.iq maps.googleapis.com maps.gstatic.com www.google.com.mt www.google.mn www.google.ro www.google.si www.google.ba blob: www.google.com.eg www.google.ae www.google.dk www.google.li pixel.rubiconproject.com pagead2.googlesyndication.com www.google.co.id www.google.co.ma www.google.ge www.google.ie www.linkedin.com analytics.google.com fcmatch.google.com fcmatch.youtube.com sync.mathtag.com ups.analytics.yahoo.com www.google.by www.google.cn www.google.co.ve www.google.com.br www.google.com.co www.google.com.et www.google.com.gt www.google.com.kw www.google.com.om www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.ua dpm.demdex.net *.advertising.com *.pubmatic.com *.3lift.com *.bidswitch.net *.outbrain.com *.openx.net *.convertize.io; object-src 'self'; script-src 'self' 'unsafe-inline' 'report-sample' https://s2.getsitecontrol.com https://cdn.iamsmartad.com amplify.outbrain.com app.usercentrics.eu connect.facebook.net googleads.g.doubleclick.net js.chatchamp.com pixel.mathtag.com tr.outbrain.com widgets.trustedshops.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.youtube.com halc.iadvize.com widgets.getsitecontrol.com analytics-static.ugc.bazaarvoice.com bat.bing.com display.ugc.bazaarvoice.com network-eu-stg.bazaarvoice.com stg.api.bazaarvoice.com script.hotjar.com static.hotjar.com a.adroll.com d.adroll.com d.adroll.mgr.consensu.org s.adroll.com pixel.convertize.io secure.pay1.de fast.smarketer.de s.pinimg.com cdn.xplosion.de ups.xplosion.de sandbox.billwerk.com selfservice.sandbox.billwerk.com https://*.billwerk.com https://selfservice.billwerk.com apps.bazaarvoice.com asn-trk.advolution.de st.getsitecontrol.com api.bazaarvoice.com network-eu.bazaarvoice.com tpc.googlesyndication.com gse.gigaset.com me.kis.v2.scr.kaspersky-labs.com static.iadvize.com www.google.com www.dwin1.com ad1.adfarm1.adition.com adfarm1.adition.com gc.kis.v2.scr.kaspersky-labs.com secure.adnxs.com snap.licdn.com maps.googleapis.com s2.adform.net track.adform.net www.pagespeed-mod.com 'unsafe-eval' cdn.taboola.com ff.kis.v2.scr.kaspersky-labs.com www.google.de www.google.it imagesrv.adition.com https://mpsnare.iesnare.com https://l.getsitecontrol.com/p7jz5lm4.js; style-src data: 'self' 'unsafe-inline' display.ugc.bazaarvoice.com s.adroll.com p.typekit.net use.typekit.net gse.gigaset.com gc.kis.v2.scr.kaspersky-labs.com fonts.googleapis.com me.kis.v2.scr.kaspersky-labs.com translate.googleapis.com; 3 default-src 'self' ; script-src 'self' 'unsafe-inline' * 'unsafe-eval' *; object-src 'self' 'unsafe-inline' * 'unsafe-eval' *; style-src 'self' 'unsafe-inline' * 'unsafe-eval' *; img-src 'self' 'unsafe-inline' * 'unsafe-eval' *; media-src 'self' 'unsafe-inline' * 'unsafe-eval' *; child-src 'self' 'unsafe-inline' * 'unsafe-eval' *; font-src 'self' 'unsafe-inline' * 'unsafe-eval' *; connect-src 'self' 'unsafe-inline' * 'unsafe-eval' *; report-uri /report-csp-violation 3 default-src blob: data: https: 'self'; script-src blob: https: 'self' 'unsafe-eval' 'unsafe-inline'; style-src blob: https: 'self' 'unsafe-inline'; media-src blob: https: 'self'; connect-src blob: https: 'self' 'unsafe-inline' wss://*.hotjar.com 3 base-uri 'none'; object-src 'none'; img-src https: data:; default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; font-src https: data: 3 upgrade-insecure-requests; block-all-mixed-content; disown-opener 3 base-uri 'self';block-all-mixed-content;connect-src 'self';default-src 'none';font-src 'self';form-action 'self';frame-ancestors 'none';frame-src 'none';img-src 'self' data:;manifest-src 'self';media-src 'self' data: ;object-src 'none';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline';style-src-elem 'self';style-src-attr 'unsafe-inline'; 3 default-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital;base-uri 'self';img-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital data: localhost stats.g.doubleclick.net via.placeholder.com biglotteryfund-assets.imgix.net i.ytimg.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;font-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital data: use.typekit.net http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;style-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital 'unsafe-inline' *.typekit.net;script-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital 'unsafe-eval' 'unsafe-inline' http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;child-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital www.google.com https://vars.hotjar.com;connect-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com;frame-src 'self' *.biglotteryfund.org.uk *.tnlcommunityfund.org.uk *.google.com *.facebook.com *.twitter.com *.gstatic.com *.twimg.com *.youtube.com *.vimeo.com cdn.polyfill.io cdn.syndication.twimg.com ajax.googleapis.com cdnjs.cloudflare.com platform.twitter.com sentry.io syndication.twitter.com www.google-analytics.com use.typekit.net *.bootstrapcdn.com *.soundcloud.com emails-tnlcommunityfund.org.uk cms.blf.digital https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;report-uri https://sentry.io/api/226416/csp-report/?sentry_key=53aa5923a25c43cd9a645d9207ae5b6c 3 frame-ancestors 'self' https://customerfinancing.directcapital-sit.com https://customerfinancing.directcapital2.com https://www.customerfinancing.com https://customerfinancing.directcapital-test1.com https://customerfinancing.directcapital-test2.com https://customerfinancing.directcapital-test3.com https://customerfinancing.directcapital-test4.com onlineapps-conv.readiness.ibanking-services.com onlineapps.ibanking-services.com ibanking-services.com https://*.fisglobal.com https://*.citbank.com 3 upgrade-insecure-requests; frame-ancestors *.gonitro.com *.live.com *.sharepoint.com 3 default-src 'self' http://www.ltgplc.com/ https://go.ltgplc.com https://pf-marketing.kzoplatform.com https://pf-customers.kzoplatform.com https://gomo.kzoplatform.com https://percolate.blogtalkradio.com https://www.blogtalkradio.com http://www.ltgplc.com/ https://go.ltgplc.com https://www.youtube.com https://go.pardot.com;script-src-elem 'self' 'unsafe-inline' https://snap.licdn.com https://microapps.pf-labs.net https://ltg.breezy.hr https://pi.pardot.com/ https://www.googletagmanager.com https://tagmanager.google.com https://sjs.bizographics.com https://static.ads-twitter.com https://www.googleadservices.com https://bat.bing.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://go.ltgplc.com https://analytics.twitter.com;script-src 'self' 'unsafe-inline' https://microapps.pf-labs.net https://cdn.inspectlet.com https://ltg.breezy.hr https://sjs.bizographics.com https://analytics.twitter.com https://static.ads-twitter.com https://www.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://bat.bing.com https://tagmanager.google.com https://www.google-analytics.com https://www.googletagmanager.com https://pi.pardot.com https://go.ltgplc.com;font-src 'self' data: https://ui.peoplefluent.com https://use.typekit.net;style-src 'self' 'unsafe-inline' https://ui.peoplefluent.com https://microapps.pf-labs.net https://use.typekit.net https://p.typekit.net https://tagmanager.google.com https://fonts.googleapis.com https://tagmanager.google.com;img-src 'self' data: https://d33wubrfki0l68.cloudfront.net https://t.co https://cdn.sanity.io https://www.google.co.uk https://www.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://linkedin.com https://www.linkedin.com https://px.ads.linkedin.com https://bat.bing.com https://ssl.gstatic.com https://www.gstatic.com;media-src 'self' data: https://cdn.sanity.io;connect-src 'self' https://ltg.breezy.hr https://www.google-analytics.com https://stats.g.doubleclick.net 3 frame-ancestors 'self' https://www.mycme.com/ https://mycmesandbox.thoughtindustries.com https://nacesandbox.thoughtindustries.com https://www.naceonline.com/ 3 default-src * self blob: data: gap:; style-src * self 'unsafe-inline' blob: data: gap:; script-src * 'self' 'unsafe-eval' 'unsafe-inline' blob: data: gap:; object-src * 'self' blob: data: gap:; img-src * self 'unsafe-inline' blob: data: gap:; connect-src self * 'unsafe-inline' blob: data: gap:; frame-src * self blob: data: gap:; 3 frame-ancestors http://*.t-mobile.nl https://*.t-mobile.nl http://*.tele2.nl https://*.tele2.nl 3 frame-ancestors 'self' http://wrapper.safe-installation.com/ https://wrapper.safe-installation.com/ *.888poker.de *.888slots.de *.safe-iplay.com *.safe-installation.com *.payoutscentral.com *.888.com *.secured-qa.com *.secured-registration.com *.secureutils.com *.images4us.com *.onlinepersonalmessages.com *.888sport.com *.888sport.es *.888sport.it *.888sport.dk *.888sport.ro *.888sport.se *.888sport.us *.888sport.de *.777.com *.personalinfoonline.com *.888.de *.888casino.com *.888poker.com *.888casino.dk *.888poker.dk *.888.de *.888casino.ro *.888poker.ro *.888casino.se *.888poker.se *.888casino.es *.888poker.es *.888.pt *.888casino.it *.888poker.it *.888casino.us *.888poker.us cmsp; report-uri https://888protech.report-uri.com/r/d/csp/reportOnly 3 frame-ancestors 'self' *.freenas.org *.ixsystems.com *.truenas.org; upgrade-insecure-requests; default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; object-src 'self' https:; connect-src 'self' https: wss://*.hotjar.com; img-src 'self' data: https: blob:; font-src 'self' data: https:; 3 frame-ancestors self *.haagendazs.us; report-uri /report-csp-violation 3 default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; 3 default-src 'self'; media-src 'self' https://www.youtube.com https://cdn.userway.org; connect-src 'self' https://analytics.google.com https://cdn.userway.org https://in.hotjar.com https://api.curator.io https://stats.g.doubleclick.net https://www.google-analytics.com https://ka-p.fontawesome.com https://api.userway.org https://twitter.com https://api.twitter.com https://platform.twitter.com https://pbs.twimg.com https://syndication.twitter.com https://t.co; img-src 'self' data: * https://googleads.g.doubleclick.net https://www.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://twitter.com https://platform.twitter.com https://pbs.twimg.com https://abs.twimg.com https://ton.twimg.com https://syndication.twitter.com https://t.co https://www.instagram.com; frame-src 'self' https://bid.g.doubleclick.net https://sheridancollege.formstack.com https://bbox.blackbaudhosting.com https://www.youtube.com *.sheridancollege.ca https://cdn.userway.org https://vars.hotjar.com https://www.google.com https://platform.twitter.com https://syndication.twitter.com https://twitter.com https://www.facebook.com https://t.co https://www.instagram.com; frame-ancestors 'self'; font-src 'self' data: https://fonts.gstatic.com https://cdn.curator.io https://cdn.userway.org https://ka-p.fontawesome.com https://fonts.gstatic.com https://use.typekit.net; script-src 'self' 'nonce-cspScrpt' 'unsafe-eval' https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://tagmanager.google.com https://ssl.google-analytics.com https://static.formstack.com https://bbox.blackbaudhosting.com https://sheridancollege.formstack.com https://cdn.curator.io https://maps.googleapis.com https://www.youtube.com https://script.hotjar.com https://cdnjs.cloudflare.com https://kit.fontawesome.com https://www.googletagmanager.com https://www.google-analytics.com https://static.hotjar.com https://cdn.userway.org https://connect.facebook.net https://analytics.formstack.com https://vc.hotjar.io https://www.google.com https://twitter.com https://platform.twitter.com https://cdn.syndication.twimg.com https://api.twitter.com https://t.co https://www.instagram.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://bbox.blackbaudhosting.com https://cdn.curator.io https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://static.formstack.com https://platform.twitter.com https://syndication.twitter.com https://t.co https://www.instagram.com 3 frame-ancestors 'self' blank;object-src 'self' blank; 3 default-src 'self' data https:; img-src 'self'  https;style-src 'self' https:; script-src-elem 'self https:; script-src 'self' https: ; script-src-attr 'self' https:; 3 frame-src 'self' https://eu-west-2-elume.s3.us-east-1.amazonaws.com/ https://forms.hsforms.com/ https://app.hubspot.com https://www.googletagmanager.com https://accounts.google.com https://sdk.companywebcast.com https://ir.asp.manamind.com https://www.youtube.com https://www.youtube-nocookie.com *.metric.gstatic.com https://webcast.seria.no https://spinzam.com/ https://player.vimeo.com https://cdn.embedly.com https://www.facebook.com https://www.google.com/ https://twitter.com/ https://kongsberg.easycruit.com; frame-ancestors 'self' 3 default-src 'self' *.readspeaker.com data:; base-uri 'self'; style-src 'self' 'unsafe-inline' *.readspeaker.com; script-src 'self' 'unsafe-eval' *.google.com piwik.itzbund.de *.readspeaker.com;object-src 'self' multimedia.gsb.bund.de piwik.itzbund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com www.quirksmode.org; child-src *.itzbund.de *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com piwik.itzbund.de; upgrade-insecure-requests; frame-ancestors 'self'; 3 frame-ancestors 'self' *.investec.com https://ng.secure.investec.com:8080; 3 frame-ancestors 'self' https://app.storyblok.com 3 ; 3 frame-ancestors 'self' *.ergodirekt.de:* *.ergo.com:* *.ergo:* *.ergo.de *.dkv.com; 3 frame-ancestors 'self' https://*.indiatimes.com https://*.samayam.com https://maharashtratimes.com https://vijaykarnataka.com https://m.timesofindia.com https://m.economictimes.com https://www.iamgujarat.com https://www.google.com https://*.google.com https://cdn.ampproject.org https://*.cdn.ampproject.org https://*.ampproject.org http://*.newspointapp.com https://*.newspointapp.com 3 default-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; base-uri 'self'; img-src 'self'; frame-src 'self'; font-src 'self' data:; object-src 'none'; frame-ancestors 'none'; 3 default-src 'self' https:; img-src 'self' data: https://*.dekra.com https://*.dekra.de https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.google.com https://*.google.de https://*.hurra.com https://*.baidu.com https://*.linkedin.com https://*.bdimg.com https://*.facebook.com https://i.vimeocdn.com https://i.ytimg.com https://pbs.twimg.com https://www.snapengage.com https://js.hsforms.net https://track.hubspot.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://script.hotjar.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://api.map.baidu.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.baidu.com https://*.hotjar.com https://code.snapengage.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://ssl.hurra.com https://tagmanager.google.com https://www.xing-share.com https://player.vimeo.com https://www.youtube.com https://connect.facebook.net https://snap.licdn.com https://js.hs-analytics.net https://px.ads.linkedin.com https://js.hsforms.net https://app-lon05.marketo.com matomo.dekra.bawue.com https://app.iiq-check.de https://www.snapengage.com https://forms.hsforms.com https://js.hsadspixel.net https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.bdimg.com; 3 frame-ancestors *; upgrade-insecure-requests 3 : default-src 'self' 3 frame-ancestors 'self' https://www.endesaclientes.com https://syndication.teleborsa.it https://accounts-coll.enel.com:9443 https://assets.adobedtm.com http://52.144.89.133 https://enel.taleo.net https://reg.enel.it https://aemproddmz.enel.com https://endesa.cogitodesk.com 3 frame-ancestors 'self' blaetterkatalog.musicstore.de ; 3 sandbox allow-forms allow-pointer-lock allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts allow-top-navigation-by-user-activation 3 frame-ancestors 'self' docs.linkresearchtools.com smart.linkresearchtools.com lrtcon.at lrtcon.com app.linkresearchtools.com test2.linkresearchtools.com *.dev.linkresearchtools.com; 3 default-src 'self' https://recreativdesign.com blob:;script-src 'self' nonce-guXj7w7oWwUuGz/RZw2vXUoxt7E 'unsafe-inline' 'unsafe-eval' recreativ.com *.recreativ.com recreativ.ru *.recreativ.ru *.facebook.net *.facebook.com *.google.com.ua *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.doubleclick.net *.googletagmanager.com *.wayforpay.com https://browser.sentry-cdn.com https://recreativdesign.com;frame-src 'self' recreativ.com *.recreativ.com recreativ.ru *.recreativ.ru *.facebook.net *.facebook.com *.google.com.ua *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.doubleclick.net *.googletagmanager.com *.wayforpay.com https://www.google.lv;img-src 'self' recreativ.com *.recreativ.com recreativ.ru *.recreativ.ru *.facebook.net *.facebook.com *.google.com.ua *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.doubleclick.net *.googletagmanager.com *.wayforpay.com data: blob: https://via.placeholder.com/200x200 https://recreativdesign.com;font-src 'self' data: recreativ.com *.recreativ.com recreativ.ru *.recreativ.ru *.facebook.net *.facebook.com *.google.com.ua *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.doubleclick.net *.googletagmanager.com *.wayforpay.com https://recreativdesign.com;style-src 'self' 'unsafe-inline' recreativ.com *.recreativ.com recreativ.ru *.recreativ.ru *.facebook.net *.facebook.com *.google.com.ua *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.doubleclick.net *.googletagmanager.com *.wayforpay.com https://recreativdesign.com;report-uri //recreativ.com/csp_report.php; 3 default-src * data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' blob: 3 frame-ancestors 'self' corelogic.com.au *.corelogic.com.au elev.io *.elev.io 3 frame-ancestors 'self' http://localhost:3030 https://grate-cms.gr-dev.com https://grate-cms.prate-dev.com https://grate-cms.gr-stage.com https://grate-cms.gra-stage.com https://*.rate.com https://*.grarate.com https://*.properrate.com https://www.atproperties.com https://atproperties.com https://www.staging.atproperties.com https://staging.atproperties.com http://www.website.local http://website.local https://www.venturephilly.com https://venturephilly.com https://www.corcoranpacific.com https://corcoranpacific.com https://*.yextpages.net http://*.yextpages.net https://rcm.rockco.com 3 frame-ancestors https://bulbul.io 3 default-src 'self' https: *.fibi.co.il; connect-src 'self' https: *.fibi.co.il *.staging.fibi.co.il; style-src https: 'unsafe-inline'; font-src 'self' data: https: *.fibi.co.il; child-src 'self' data: https: *.fibi.co.il *.staging.fibi.co.il https://usa-api.idomoo.com https://idoplayer.idomoo.com; img-src 'self' data: https: 'unsafe-inline' *.fibi.co.il *.staging.fibi.co.il; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' *.fibi.co.il *.bankotsar.co.il *.bankmassad.co.il *.pagi.co.il *.u-bank.net *.staging.fibi.co.il https://facebook.co.il https://google.co.il https://google.com https://googletagmanager.com https://googleads.g.doubleclick.net https://googleadservices.com https://youtube.com https://facebook.com https://usa-api.idomoo.com https://idoplayer.idomoo.com https://apps.fibi.co.il 3 frame-ancestors 'self' cms.golfadvisor.com cms.golfpass.com *.golfpass.com *.golfgenius.com golfgenius.com ggstest.com ggstest2.com 3 default-src 'self' https://*.arvato-systems-media.net https://*.nionex.net http://analytics.nionex.net https://www.google-analytics.com https://socialcloud.bertelsmann.com https://dl.edge-cdn.net https://edgecdnhd2-vh.akamaihd.net; script-src 'self' blob: https://*.bertelsmann.de https://*.bertelsmann.com https://*.createyourowncareer.com https://*.video-cdn.net https://*.privacy-mgmt.com https://www.bertelsmann.com https://www.bertelsmann.de https://*.arvato-systems-media.net https://analytics.nionex.net http://analytics.nionex.net https://www.google-analytics.com https://www.googletagmanager.com https://maps.google.com https://translate.googleapis.com https://translate.google.com https://maps.googleapis.com https://*.edge-cdn.net https://*.analytics.edgekey.net https://charts3.equitystory.com https://*.akamaihd.net https://www.youtube.com https://s.ytimg.com 'unsafe-inline' 'unsafe-eval' blob:; img-src 'self' https://maps.google.com https://*.video-cdn.net https://www.google.com https://*.ytimg.com https://maps.gstatic.com https://www.gstatic.com https://chart.apis.google.com https://maps.googleapis.com https://www.google-analytics.com http://*.becruiter.net https://*.becruiter.net https://bertelsmann-hr.de https://www.googletagmanager.com https://dl.edge-cdn.net https://translate.google.com https://translate.googleapis.com data:; media-src 'self' blob: https://edgecdnhd2-vh.akamaihd.net http://hd2vodbertel-vh.akamaihd.net https://*.cdn.edge-cdn.net https://*.edge-cdn.net http://*.edge-cdn.net https://*.video-cdn.net; style-src 'self' https://www.bertelsmann.com https://www.bertelsmann.de https://*.arvato-systems-media.net https://*.nionex.net https://translate.googleapis.com https://fonts.googleapis.com https://dl.edge-cdn.net 'unsafe-inline' data:; font-src 'self' https://fonts.googleapis.com https://*.video-cdn.net https://fonts.gstatic.com data:; frame-src * data: blob: ; frame-ancestors 'self' https://digitalportfolio.bertelsmann.com https://*.bertelsmann.de https://*.bertelsmann.com; connect-src 'self' wss://*.bertelsmann.de https://licensing.bitmovin.com https://cdn.plyr.io https://*.video-cdn.net https://videocdnvod1-vh.akamaihd.net https://stats.g.doubleclick.net https://*.bertelsmann.de https://*.bertelsmann.com https://www.google-analytics.com https://ca.video-cdn.net https://dl.edge-cdn.net https://*.analytics.edgekey.net https://translate.googleapis.com https://edgecdnhd2-vh.akamaihd.net 3 default-src photomath.net photomath.app photomath.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' tcms.photomath.net tpip.photomath.net ajax.googleapis.com apis.google.com code.jquery.com maxcdn.bootstrapcdn.com www.google-analytics.com s.imgur.com cdnjs.cloudflare.com www.googletagmanager.com; connect-src 'self' cms.photomath.net tcms.photomath.net pip.photomath.net www.google-analytics.com stats.g.doubleclick.net script.google.com; img-src 'self' data: cdnjs.cloudflare.com www.google-analytics.com stats.g.doubleclick.net www.google.com www.gstatic.com storage.googleapis.com assets.prod.leanplum.com d2fi4ri5dhpqd1.cloudfront.net; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com maxcdn.bootstrapcdn.com fast.fonts.net; font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com about: data:; frame-src player.vimeo.com imgur.com apis.google.com accounts.google.com plus.google.com; object-src 'self'; 3 default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data:; frame-src *; connect-src *; media-src * blob:; object-src 'none'; worker-src * blob: 'unsafe-inline'; 3 object-src 'self'; base-uri 'none' 3 default-src * 'self' 'unsafe-inline' blob: ; img-src * 'self' data: ; script-src * 'self' data: 'unsafe-inline' 'unsafe-eval' ; font-src * data: ; connect-src * ; worker-src blob: ; 3 default-src https: wss: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob:; font-src https: 'self' data:; frame-src https: mailto:; 3 style-src https: 'unsafe-inline' 3 frame-ancestors 'self' *.upc.pl html5.upcspeedtest.pl *.livechatinc.com d17eiofnbbcyfc.cloudfront.net youtube.com *.zoovu.com upcpoland.dualstack.speedtestcustom.com; 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.evgnet.com https://*.evergage.com https://*.google.fr https://*.google.be https://*.google.nl https://*.googleoptimize.com https://*.google-analytics.com https://*.pinimg.com https://*.crazyegg.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.googleadservices.com https://*.bing.com https://*.go-mpulse.net https://*.akamaihd.com https://*.akamaihd.net https://*.janraincapture.com https://*.rpxnow.com https://rpxnow.com https://*.nr-data.net https://*.newrelic.com https://*.marketo.net https://*.marketo.com https://*.youtube.com https://*.ytimg.com https://*.zopim.com https://*.onetrust.com https://*.cookielaw.org https://*.drift.com https://*.driftt.com https://*.reevoo.com https://*.pricespider.com https://*.cloudfront.net https://*.mapbox.com https://*.hotjar.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.linkedin.com https://*.licdn.com https://*.ads.linkedin.com https://*.facebook.net https://*.facebook.com resource://pdf.js https://*.bazaarvoice.com https://*.salesforceliveagent.com https://*.force.com https://*.zdassets.com https://*.cloudflare.com https://*.iesnare.com; img-src 'self' data: blob: https://*.google.com https://*.evergage.com https://*.pinterest.com https://*.google.nl https://*.google.be https://*.google.fr https://*.googleusercontent.com https://*.ibb.co https://*.google.com.ua https://*.facebook.com https://*.facebook.net https://*.linkedin.com https://*.adsymptotic.com https://*.google-analytics.com https://*.googleapis.com https://*.google.co.in https://*.googletagmanager.com https://*.gstatic.com https://*.ggpht.com https://*.akamaihd.net https://*.google.by https://*.ytimg.com https://*.reevoo.com https://*.pricespider.com https://*.cloudfront.net https://*.doubleclick.net https://*.bing.com https://*.mapbox.com https://*.bazaarvoice.com https://*.janrain.com https://*.s3.amazonaws.com; style-src 'self' 'unsafe-inline' https://*.google.com https://*.google.nl https://*.google.fr https://*.google.be https://*.marketo.net https://*.marketo.com https://*.google-analytics.com https://*.googleapis.com https://*.reevoo.com https://*.pricespider.com https://*.cloudfront.net https://*.hotjar.com https://*.mapbox.com https://*.typekit.net https://*.bazaarvoice.com https://*.force.com https://*.janrain.com https://*.cloudflare.com; font-src 'self' data: https://wwww.stanleysecuritysolutions.com https://*.googleapis.com https://*.googleusercontent.com https://*.gstatic.com https://*.typekit.net https://*.bazaarvoice.com https://*.force.com; connect-src 'self' https://*.doubleclick.net https://*.us-4.evergage.com https://*.germany-2.evergage.com https://*.zopim.com https://*.akamaihd.net https://*.pinterest.com https://*.crazyegg.com https://*.google.com https://*.google.nl https://*.google.fr https://*.google.be https://*.facebook.com https://*.facebook.net wss://widget-mediator.zopim.com https://*.driftcdn.com https://*.googleapis.com https://*.google-analytics.com https://*.mktoresp.com https://*.bing.com https://*.googlevideo.com https://*.hotjar.com https://*.hotjar.io https://*.nr-data.net https://*.onetrust.com https://*.cookielaw.org wss://*.driftt.com https://*.reevoo.com https://*.mapbox.com https://*.bazaarvoice.com https://*.visibleconsumerinsight.com https://*.zdassets.com https://*.zendesk.com; worker-src data: blob:; frame-src 'self' https://*.google.com https://*.google.nl https://*.google.fr https://*.google.be https://*.marketo.net https://*.marketo.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.googletagmanager.com https://*.hotjar.com https://*.janraincapture.com https://*.youtube.com https://*.drift.com https://*.driftt.com https://*.reevoo.com https://*.pricespider.com https://*.force.com https://*.bazaarvoice.com; frame-ancestors 'self'; media-src 'self' https://*.driftqa.com https://*.zdassets.com; upgrade-insecure-requests; report-uri /csp.cgi; 3 frame-ancestors account.vogelbescherming.nl vbn-sso.aanzee.online www.tuinvogeltelling.nl www.vogelbescherming.nl www.vogelweek.nl; 3 frame-ancestors 'self' *.force.com *.salesforce.com *.lightning.com *.sony.com 3 default-src 'self' *.thunderhead.com *.facebook.com facebook.com bam.nr-data.net *.mouseflow.com *.mouseflow.com/ *.mktorest.com *.mktoresp.com *.consensu.org *.doubleclick.net *.omtrdc.net *.demdex.net youtube.com *.youtube.com marketo.com *.marketo.com *.marketo.com/ *.onetrust.com google-analytics.com *.google-analytics.com *.cytivalifesciences.com *.b2c.com *.b2c.com:* *.b2c.com/ api.fouanalytics.com google.com smetrics.cytivalifesciences.com stats.g.doubleclick.net bid.g.doubleclick.net play.vidyard.com play.vidyard.com/ anchor.fm gateway.zscalertwo.net static3.avast.com *.mktoutil.com *.google.com/ info.cytivalifesciences.com info.cytivalifesciences.com/ blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.marketo.com *.marketo.com/ info.cytivalifesciences.com info.cytivalifesciences.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.salesforceliveagent.com cdn.mouseflow.com *.mouseflow.com/ munchkin.marketo.net *.marketo.com *.mktorest.com assets.adobedtm.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.linkedin.com *.youtube.com s.ytimg.com *.facebook.com connect.facebook.net t.co static.ads-twitter.com analytics.twitter.com js-agent.newrelic.com fast.gehealthcare.demdex.net dpm.demdex.net gateway.zscalertwo.net snap.licdn.com bam.nr-data.net gehealthcare.sc.omtrdc.net gelifedigitalhubprod.112.2o7.net cx.atdmt.com cm.everesttech.net static.cloud.coveo.com *.thunderhead.com google.com googleads.g.doubleclick.net *.evidon.com *.consensu.org *.adroll.com maps.googleapis.com *.onetrust.com *.google.com api.fouanalytics.com *.b2c.com *.b2c.com:* *.b2c.com/ smetrics.cytivalifesciences.com stats.g.doubleclick.net play.vidyard.com play.vidyard.com/ hm.baidu.com info.cytivalifesciences.com info.cytivalifesciences.com/ *.jabmo.app/ d22d1xpx4ztuef.cloudfront.net/VqiIK76Nz6lnJoMsCapVh781pu5b.js secure.adnxs.com *.decibelinsight.net *.decibelinsight.com secure.marx7loki.com *.jsdelivr.net blob:; img-src * data:; media-src 'self' *.youtube.com cdn.cytivalifesciences.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com data: static3.avast.com; frame-src 'self' *.adobe.com *.marketo.com facebook.com *.facebook.com *.anchor.fm anchor.fm cytiva.demdex.net youtube.com *.youtube.com bid.g.doubleclick.net play.vidyard.com play.vidyard.com/ gateway.zscalertwo.net info.cytivalifesciences.com info.cytivalifesciences.com/ www.cytivalifesciences.com/ www.cytivalifesciences.com blob:; connect-src 'self' *.thunderhead.com *.facebook.com facebook.com bam.nr-data.net *.mouseflow.com *.mouseflow.com/ *.mktorest.com *.mktoresp.com *.consensu.org *.doubleclick.net *.omtrdc.net *.demdex.net youtube.com *.youtube.com marketo.com *.marketo.com *.onetrust.com google-analytics.com *.google-analytics.com *.cytivalifesciences.com *.b2c.com *.b2c.com:* *.b2c.com/ api.fouanalytics.com google.com smetrics.cytivalifesciences.com stats.g.doubleclick.net *.mktoutil.com *.google.com/ hm.baidu.com api.ipify.org c.jabmo.app *.decibelinsight.net *.decibelinsight.com wss://*.decibelinsight.net wss://*.decibelinsight.com acapgenertedreports-prod.s3.amazonaws.com blob:; report-uri https://www.cytivalifesciences.com/api/csp/report 3 upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https://os.mwscdn.io https://fonts.googleapis.com https://id.myworld.com https://fl-1.cdn.flockler.com/; img-src 'self' https: data:; font-src 'self' data: https://os.mwscdn.io https://fonts.gstatic.com https://maps.googleapis.com; report-uri /csp-report 3 frame-ancestors 'self' https://*.superoffice.com https://royalqueenseedssp.inone.useinsider.com 3 frame-ancestors 'self'; report-uri https://www.descartes.com/report-uri/enforce 3 default-src 'self'; connect-src 'self' analytics.gov.yk.ca ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.gov.yk.ca https://ajax.googleapis.com https://yukon.ca https://widget.time.is static.addtoany.com; style-src 'self' maxcdn.bootstrapcdn.com 'unsafe-inline' https://yukon.ca ; img-src 'self' https://yukon.ca data: https://analytics.gov.yk.ca https://*.tile.openstreetmap.org ; font-src 'self' https://yukon.ca https://maxcdn.bootstrapcdn.com ; frame-src 'self' https://www.youtube.com https://www.instagram.com https://instagram.com ; 3 frame-ancestors 'self' http://www.quironsalud.es https://www.quironsalud.es http://betaweb.quironsalud.es https://betaweb.quironsalud.es http://intranetfjd.idc.local https://intranetfjd.idc.local http://overweightinstitute.fjd.es https://overweightinstitute.fjd.es http://www.cirujanosdelcorazon.es https://www.cirujanosdelcorazon.es http://www.clinicadelpilar.org https://www.clinicadelpilar.org http://www.clinicavalles.com https://www.clinicavalles.com http://www.cuidamosdelamujer.es https://www.cuidamosdelamujer.es http://www.diverhospital.es https://www.diverhospital.es http://www.e-quironsalud.com https://www.e-quironsalud.com http://www.fjd.es https://www.fjd.es http://www.fundacionquironsalud.org https://www.fundacionquironsalud.org http://www.hgc.es https://www.hgc.es http://www.hgvillalba.es https://www.hgvillalba.es http://www.hope-documental.es https://www.hope-documental.es http://www.hospitalinfantaelena.es https://www.hospitalinfantaelena.es http://www.hospitalpublicocolladovillalba.es https://www.hospitalpublicocolladovillalba.es http://www.hospitalreyjuancarlos.es https://www.hospitalreyjuancarlos.es http://www.hscor.com https://www.hscor.com http://www.idcsaludenfermeria.es https://www.idcsaludenfermeria.es http://www.idcsalud.es https://www.idcsalud.es http://www.jornadaspbp.es https://www.jornadaspbp.es http://www.lungscreen.eu https://www.lungscreen.eu http://www.oncohealth.eu https://www.oncohealth.eu http://www.porquesabeselegir.es https://www.porquesabeselegir.es http://www.quironsalud-hospitals.com https://www.quironsalud-hospitals.com http://www.rare-genomics.com https://www.rare-genomics.com http://www.redneurosalud.es https://www.redneurosalud.es http://www.ruber.es https://www.ruber.es http://www.ruberinternacional.es https://www.ruberinternacional.es http://www.teknonbarcelona.com https://www.teknonbarcelona.com http://www.teknonbarcelona.it https://www.teknonbarcelona.it http://www.teknonbarcelona.ru https://www.teknonbarcelona.ru http://www.teknon.es https://www.teknon.es http://www.tucanaldesalud.es https://www.tucanaldesalud.es 3 default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com kendo.cdn.telerik.com maxcdn.bootstrapcdn.com; img-src 'self' editor.ne16.com; font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com kendo.cdn.telerik.com maxcdn.bootstrapcdn.com; report-uri /Reports/LogCspError.ashx; 3 default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ads-twitter.com *.bing.com *.cohesionapps.com fullstory.com *.fullstory.com *.doubleclick.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.licdn.com *.newrelic.com *.nr-data.net *.pinimg.com *.pinterest.com *.pmsrv.co *.preamp.io *.redfoundry.io *.redventures.io *.rvapps.io *.dx1h0xnt46b0i.amplifyapp.com tagmanager.google.com *.twitter.com *.yahoo.com *.yimg.com; font-src 'self' 'unsafe-inline' data: https://fonts.gstatic.com *.redfoundry.io *.dx1h0xnt46b0i.amplifyapp.com; connect-src 'self' *.amazonaws.com *.analytics-engine.com *.bing.com *.fullstory.com *.cohesionapps.com *.doubleclick.net *.google.com *.google-analytics.com *.newrelic.com *.nr-data.net *.pinterest.com https://*.redfoundry.io wss://*.redfoundry.io *.redventures.com *.redventures.io *.rvapps.io *.smartystreets.com *.dx1h0xnt46b0i.amplifyapp.com *.tagular.com *.yimg.com *.newrelic.com *.nr-data.net https://api.ipify.org; img-src 'self' data: *.adsymptotic.com *.bing.com *.doubleclick.net *.facebook.com *.facebook.net *.co *.google.com *.google-analytics.com gstatic.com *.gstatic.com *.linkedin.com *.media.net *.pinterest.com *.pmsrv.co *.redoriginproxy.com *.dx1h0xnt46b0i.amplifyapp.com t.co; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ *.redoriginproxy.com *.dx1h0xnt46b0i.amplifyapp.com tagmanager.google.com; object-src 'none'; frame-src 'self' *.cohesionapps.com *.doubleclick.net *.facebook.com *.rvapps.io *.youtube.com; 3 default-src https: unsafe-inline ; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data:; connect-src 'self' https:; font-src 'self' https:; 3 default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval' 3 default-src 'self'; font-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.kyruus.com/ https://*.cloudflare.com/ https://*.azurewebsites.net/ https://*.reasononeinc.com/ https://*.typekit.net/ https://*.fontawesome.com/ https://*.gstatic.com/ https://*.prismahealth.org/ https://connect-admin.prismahealth.org/ https://connect.prismahealth.org/; frame-ancestors 'self' https://connect.prismahealth.org/ https://useprpdintwap01.azurewebsites.net/ https://useprpdintwap02.azurewebsites.net/ https://*.reasononeinc.com/ https://*.prismahealth.org/ https://connect-admin.prismahealth.org/ https://prismahealth--hc4full--c.visualforce.com/ https://prismahealth--hc4full.lightning.force.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com/ https://www.googleadservices.com/ https://useprpdintwap02.azurewebsites.net/ https://*.cloudflare.com/ https://useprpdintwap01.azurewebsites.net/ https://www.google-analytics.com/ https://*.doubleclick.net/ https://*.jsdelivr.net https://s.ytimg.com/ https://maps.googleapis.com https://siteimproveanalytics.com/ https://www.facebook.com/ https://connect.facebook.net/ https://*.facebook.net/ https://*.youtube.com https://ajax.googleapis.com https://tagmanager.google.com https://www.gstatic.com/ http://ajax.googleapis.com https://*.reasononeinc.com/ https://connect-admin.prismahealth.org/ https://*.siteimproveanalytics.io/ https://npmcdn.com/ https://connect.prismahealth.org/ https://www.google.com/ https://*.prismahealth.org/ https://www.googletagmanager.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect-admin.prismahealth.org/ https://twitter.com https://twitter.com https://*.youtube.com https://web.microsoftstream.com/ https://www.facebook.com/ https://*.prismahealth.org/ https://*.reasononeinc.com/ https://*.twitter.com https://*.youtube-nocookie.com https://*.twitter.com https://www.google.com https://bid.g.doubleclick.net/ https://web.microsoftstream.com/ https://player.vimeo.com https://*.azurewebsites.net/ https://connect.prismahealth.org/ https://prismahealth--hc4full--c.visualforce.com/; connect-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://connect.prismahealth.org/ https://*.prismahealth.org/ https://*.reasononeinc.com/ https://*.azurewebsites.net/ https://stats.g.doubleclick.net https://connect-admin.prismahealth.org/; img-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.prismahealth.org/ https://*.azurewebsites.net/ https://connect-admin.prismahealth.org/ https://prismahealth.org/ https://*.googleapis.com/ https://*.blob.core.windows.net/ https://*.gstatic.com/ https://www.google.ca/ https://*.prismahealth.org/ https://www.google-analytics.com/ https://i.ytimg.com/ https://www.googletagmanager.com/ https://www.facebook.com/ https://www.google.com/ https://*.reasononeinc.com/ https://*.kyruus.com/ https://*.siteimproveanalytics.io/ data:; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect-admin.prismahealth.org/ https://*.fontawesome.com/ https://*.azurewebsites.net/ https://connect.prismahealth.org/ https://*.googleapis.com/ https://*.cloudflare.com/ https://*.typekit.net/ https://*.prismahealth.org/ https://*.reasononeinc.com/ https://use.typekit.net/; media-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.prismahealth.org/ https://connect.prismahealth.org/ https://connect-admin.prismahealth.org/ https://*.reasononeinc.com/ https://*.azurewebsites.net/; 3 default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; style-src-elem * 'unsafe-inline'; script-src-elem * 'unsafe-inline'; img-src * blob: data:; font-src * data:; worker-src * blob:; child-src * blob: gap:; media-src * blob: 3 frame-ancestors 'self' ocfl.net *.ocfl.net onetgov.net *.onetgov.net orangecountyfl.net *.orangecountyfl.net 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https:; img-src 'self' data: https:; frame-src 'self' https:; connect-src 'self' https: 3 frame-ancestors *; upgrade-insecure-requests; default-src 'self' *.diligent.com; script-src 'unsafe-eval' 'unsafe-inline' * data:; style-src * 'unsafe-inline'; child-src 'self' learn.diligent.com; img-src *; font-src * 'unsafe-inline' 'unsafe-eval' data:; connect-src *; frame-src *; base-uri 'self'; form-action * 3 default-src 'none';connect-src 'self' https://*.salemove.com wss://pubsub.salemove.com wss://kluster.salemove.com https://*.twilio.com wss://chunderw-vpc-gll.twilio.com https://*.secumd.org https://*.bethpagefcu.com https://*.bellco.org https://js.callrail.com https://n2.mouseflow.com https://s.yimg.com wss://mpsnare.iesnare.com wss://ci-mpsnare.iovation.com https://*.google.com https://stats.g.doubleclick.net https://files.bethpagefcu.com https://api.datatrac.net https://*/api/fraudforce/FraudForce/Post https://siteintercept.qualtrics.com https://*.nanorep.co https://*.nanorep.com https://performance.typekit.net https://bat.bing.com https://secure-ds.serving-sys.com https://www.google-analytics.com https://*.jotform.com https://app.textrecruit.com https://app1.textrecruit.com https://*.segmint.net https://s3.amazonaws.com/cdn.segmint.net/ https://*.fontawesome.com https://*.glia.com https://cdn.cookielaw.org;font-src 'self' data: https://*.gstatic.com https://use.typekit.net https://insight.adsrvr.org https://*.fontawesome.com https://apps.pcdgroup.com https://*.cloudflare.com https://*.formstack.com;frame-src 'self' https://*.doubleclick.net https://pixel-a.basis.net https://www.youtube.com https://youtu.be https://vimeo.com https://*.vimeo.com https://pixel.sitescout.com https://*.locatorsearch.com https://pixel.mathtag.com https://insight.adsrvr.org https://*.cloudfront.net https://*.google.com https://www2.iraservicecenter.com https://*.bethpagefcu.com https://*.secumd.org https://*.bellco.org https://*.orb.alkamitech.com https://www.agentinsure.com https://fliphtml5.com https://vizi.vizirecruiter.com https://secumd.satmetrix.com https://www.youtube-nocookie.com https://secure.checkout.visa.com https://assets.secure.checkout.visa.com https://sandbox.secure.checkout.visa.com https://a.pgtb.me https://*.formstack.com https://*.jotform.io https://*.jotform.us https://*.jotform.com https://www.facebook.com https://connect.segmint.net https://m.lndg.page https://feed.mikle.com https://www.timetrade.com https://www04.timetrade.com https://bethpagefcu-privacy.my.onetrust.com/;frame-ancestors 'self';img-src 'self' data: https://*.google.com https://bat.bing.com https://bs.serving-sys.com https://pixel-a.basis.net https://p.typekit.net https://*.siteimproveanalytics.io https://detectca.easysol.net https://www.facebook.com https://pixel.sitescout.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://*.doubleclick.net https://ssiteid.t.eloqua.com https://*.salemove.com https://images.locatorsearch.com https://www.pages03.net https://pixel.mathtag.com https://track.hubspot.com https://insight.adsrvr.org https://cs.choozle.com https://idsync.rlcdn.com https://s3.amazonaws.com/provelo.bold360demo.com/ https://images.printable.com https://mpp.specificclick.net https://cx.atdmt.com https://dpm.demdex.net https://pixel.rubiconproject.com https://pixel.advertising.com https://tags.bluekai.com https://pixel.tapad.com https://idpix.media6degrees.com https://aa.agkn.com https://dsum-sec.casalemedia.com https://loadm.exelator.com https://odr.mookie1.com https://cache.vindicosuite.com https://uipglob.semasio.net https://eb2.3lift.com https://e.nexac.com https://dmp.truoptik.com https://mid.rkdms.com https://ml314.com https://cw.addthis.com https://cache.vindicosuite.com https://www.glassdoor.com https://*.oflows.net https://www.navyfederal.org https://match.adsrvr.org https://online.citi.com https://www2.bac-assets.com https://*.adnxs.com http://img.en25.com/EloquaImages/clients/BellcoCreditUnion/ https://*.facebook.net https://*.simpli.fi https://*.jotfor.ms https://*.jotform.com https://*.formstack.com https://ups.analytics.yahoo.com https://simplifi.partners.tremorhub.com https://sync.intentiq.com https://image2.pubmatic.com https://ads.stickyadstv.com https://fei.pro-market.net https://sync.bfmio.com https://stags.bluekai.com https://bcp.crwdcntrl.net https://ce.lijit.com https://load77.exelator.com https://sync.search.spotxchange.com https://bh.contextweb.com https://us-u.openx.net https://pippio.com https://sync1.intentiq.com https://in.xspadvertising.com https://usermatch.krxd.net https://beacon.krxd.net https://su.addthis.com https://d.agkn.com https://match.sharethrough.com https://simage2.pubmatic.com https://io.narrative.io https://i.liadm.com https://x.bidswitch.net https://s.thebrighttag.com https://t.mookie1.com https://login.dotomi.com https://*.googleusercontent.com https://*.gstatic.com https://app.textrecruit.com https://app1.textrecruit.com https://jelly.mdhv.io https://www.yext-pixel.com https://*.amazon-adsystem.com https://*.adnxs.com https://*.bethpagefcu.com https://*.bellco.org https://*.secumd.org https://*.mediaiqdigital.com https://uat.trkn.us https://trkn.us https://www.consumersadvocate.org https://nr1.s3.amazonaws.com/channelling/ https://sp.analytics.yahoo.com/sp.pl;media-src 'self' data: https://mpsnare.iesnare.com https://ci-mpsnare.iovation.com https://libs.salemove.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com https://cdn.callrail.com https://*.salemove.com https://bat.bing.com https://cdn.mouseflow.com https://*.facebook.net https://detectca.easysol.net https://googleads.g.doubleclick.net https://s.btstatic.com/tag.js https://s.yimg.com/wi/ytc.js https://siteimproveanalytics.com https://www.google-analytics.com https://*.google.com https://www.googletagmanager.com https://www.googleadservices.com https://www.youtube.com/iframe_api https://youtu.be https://vimeo.com https://*.vimeo.com https://*.bethpagefcu.com https://mpsnare.iesnare.com https://use.typekit.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://script.crazyegg.com https://sp.analytics.yahoo.com https://code.getmdl.io/1.3.0/material.min.js https://www.googleadservices.com https://img.en25.com/i/elqCfg.min.js https://s.thebrighttag.com https://s.ytimg.com https://ci-mpsnare.iovation.com https://js.callrail.com https://js.locatorsearch.com https://*.cloudflare.com https://*.cloudfront.net https://www.sc.pages03.net https://*.siteintercept.qualtrics.com https://pixel.mathtag.com https://browser.sentry-cdn.com https://*.nanorep.co https://*.nanorep.com https://*.gstatic.com https://s3.amazonaws.com/data.vizirecruiter.com/ https://*.fontawesome.com https://*.cudlautosmart.com https://nexus.ensighten.com https://ssl.geoplugin.net https://secure.checkout.visa.com http://*.serving-sys.com https://*.serving-sys.com https://cdn.rawgit.com/noelboss/featherlight/ https://schedule.lobbycentral.com https://*.simpli.fi https://bethpagefederalcreditunion.formstack.com https://*.jotform.com https://*.jotform.us https://*.jotformpro.com https://*.jotfor.ms https://*.jotform.io https://*.formstack.com https://sandbox.secure.checkout.visa.com https://knowledgetags.yextpages.net https://app.textrecruit.com https://app1.textrecruit.com https://action.dstillery.com https://cdn.segmint.net https://analytics.yext-static.com https://*.youtube.com https://*.glia.com https://www.consumersadvocate.org/ https://cdn.timetrade.com/scripts/lightbox/latest/lightbox.js https://cdn.cookielaw.org https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.salemove.com https://code.getmdl.io/1.3.0/ https://cloud.typography.com https://*.fontawesome.com https://*.cloudflare.com https://cdn.rawgit.com/noelboss/featherlight/ https://schedule.lobbycentral.com https://*.jotfor.ms https://*.formstack.com https://*.google.com https://*.segmint.net; 3 frame-ancestors 'self' *.upc.ch *.upc.biz *.sunrise.net ocpretailconfiguratorupc.ch *.ocpretailconfiguratorupc.ch tcx.ch *.upctv.ch; 3 default-src 'self'; connect-src 'self' stats.g.doubleclick.net api.hubspot.com vimeo.com www.google-analytics.com wp.ocelotbot.com snap.licdn.com js.hs-scripts.com js.hs-analytics.net forms.hsforms.com forms.hs-forms.com hubspot-forms-static-embed.s3.amazonaws.com js.usemessages.com js.hs-banner.com; prefetch-src: js.hs-banner.com js.usemessages.com js.hs-analytics.com snap.licdn.com www.google-analytics.com www.googletagmanager.com; font-src 'self' data:; frame-src app.hubspot.com player.vimeo.com; img-src 'self' data: wp.ocelotbot.com googleads.g.doubleclick.net secure.gravatar.com www.google.com p.adsymptotic.com track.hubspot.com px.ads.linkedin.com www.google-analytics.com www.gstatic.com ssl.gstatic.com i.vimeocdn.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' wp.ocelotbot.com ws.zoominfo.com googleads.g.doubleclick.net www.googleadservices.com slate.technolutions.net px.ads.linkedin.com snap.licdn.com track.hubspot.com js.hsforms.net forms.hsforms.com forms.hs-forms.com p.adsymptotic.com js.usemessages.com js.hs-analytics.net js.hs-banner.com js.hs-scripts.com www.google.com www.google-analytics.com www.googletagmanager.com www.gstatic.com apis.google.com f.vimeocdn.com; style-src 'self' 'unsafe-inline' f.vimdeocdn.com; object-src 'none'; upgrade-insecure-requests; 3 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.exposebox.com *.windows.net *.googletagmanager.com *.google-analytics.com *.jquery.com *.us4.list-manage.com yoast.com unpkg.com *.cookiepro.com *.facebook.net *.cloudflare.com static.cloudflareinsights.com fast.wistia.com *.google.com *.gstatic.com *.instagram.com instagram.com;style-src 'self' 'unsafe-inline' *.windows.net *.googleapis.com unpkg.com *.fontawesome.com *.cookiepro.com yoast.com;img-src 'self' 'unsafe-inline' data: blob: *;child-src 'self' facebook.com instagram.com twitter.com *.exposebox.com yoast.com *.vimeo.com;connect-src 'self' yoast.com *.joomunited.com *.arcgis.com *.mapbox.com stats.g.doubleclick.net *.google-analytics.com *.instagram.com instagram.com;font-src 'self' 'unsafe-inline' data: fonts.gstatic.com fonts.googleapis.com use.fontawesome.com yoast.com;frame-src 'self' *.exposebox.com *.vimeo.com *.facebook.com *.cdnx.co.uk *.google.com *.instagram.com;worker-src 'self' blob:;upgrade-insecure-requests;report-to default;media-src 'self' wp-media-staging.camdenmarket.com wp-media.camdenmarket.com 3 frame-ancestors *.vgregion.se *.vastarvet.se *.angeredsnarsjukhus.se *.fhsk.se *.lodosemuseum.se *.naturbruk.nu *.nusjukvarden.se *.vgrfolkhogskolor.se *.narhalsan.se *.forsviksbruk.se *.vanersborgsmuseum.se *.vitlyckemuseum.se *.sahlgrenska.se *.naturbruk.nu *.slojdochbyggnadsvard.se *.mun-h-center.se *.maritimaklustret.se *.botaniska.se *.gnm.se *.esmaker.net *.samverkandesjukvard.se *.vastfastigheter.se *.fyrbodalshalsoakademi.se *.valdinararelationer.se *.utvag.se *.vardsamverkan.se *.nationellpvkonferens19.se *.utvag.com *.biobankvast.se *.halsoakademinvast.se *.t-d.se; 3 default-src * blob:; font-src * data:; img-src * data: blob:; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; worker-src * blob:; report-uri https://cspreports.azurewebsites.net/api/PostReport 3 img-src *;font-src * 3 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com http://youtube.com/iframe_api https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com https://www.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://player.vimeo.com/api/player.js https://sopra-steria.career-inspiration.com/js/fbapppromobox.js https://cdnjs.cloudflare.com/ajax/libs/iframe-resizer/3.6.1/iframeResizer.min.js https://www.googletagmanager.com/gtm.js https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js https://static.ads-twitter.com/uwt.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://connect.facebook.net/en_US/fbevents.js https://snap.licdn.com/li.lms-analytics/insight.beta.min.js https://analytics.twitter.com/i/adsct https://tagmanager.google.com/debug https://sjs.bizographics.com/insight.min.js https://secure.quantserve.com/quant.js https://tagmanager.google.com/debug/debuguiApp-bundle.js https://rules.quantcount.com/rules-p-U-rxjfyRkAJ0Y.js https://tagmanager.google.com https://maxcdn.bootstrapcdn.com/bootstrap/3.3.4/js/bootstrap.min.js https://cdnjs.cloudflare.com/ajax/libs/bootstrap-multiselect/0.9.15/js/bootstrap-multiselect.js https://static.pathmotion.io/initjs/init.min.js https://rules.quantcount.com/rules-p-5eXwvumSeTF0n.js https://cdn1.readspeaker.com/script/9190/webReader/webReader.js https://cdn1.readspeaker.com/script/9190/webReader/ReadSpeaker.pub.Config.js https://cdn1.readspeaker.com/script/9190/webReader/r/r974/ReadSpeaker.Core.js https://cdn1.readspeaker.com/ *.lfeeder.com *.leadfeeder.com https://code.jquery.com/jquery-3.4.1.min.js https://www.googletagmanager.com/gtag/js https://twitter.com/ https://pi.pardot.com/pd.js https://cdnjs.cloudflare.com/ajax/libs/xlsx/0.16.6/xlsx.full.min.js https://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.9.3/Chart.min.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js http://cdn1.readspeaker.com/script/11546/webReader/ https://pi.pardot.com/ https://go.soprasteria.de/ https://www.clarity.ms/ https://walls.io/js/ https://cdn.goldenbees.fr/ https://tag.goldenbees.fr/ https://cdn.goldenbees.mgr.consensu.org/ https://www.youtube.com/ https://chatbot-widget.jobijoba.io https://ytimg.com https://googletagmanager.com https://google-analytics.com https://siteimproveanalytics.com/js/siteanalyze_6035851.js https://vjs.zencdn.net/7.11.4/video.min.js https://unpkg.com/masonry-layout@4.2.2/dist/masonry.pkgd.min.js https://unpkg.com/masonry-layout@4/dist/masonry.pkgd.min.js https://cdnjs.cloudflare.com/ajax/libs/videojs-youtube/2.5.0/Youtube.min.js https://npmcdn.com/imagesloaded@4.1/imagesloaded.pkgd.js https://tags.inzynk.io/cl383xbw/iztag.js https://analytics.inzynk.io/v/cl383xbw; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://tagmanager.google.com/debug/css.css https://pixel.quantserve.com/pixel https://maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap.min.css https://cdnjs.cloudflare.com/ajax/libs/bootstrap-multiselect/0.9.15/css/bootstrap-multiselect.css https://maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap.min.css https://cdn1.readspeaker.com/script/9190/webReader/r/r974/ReadSpeaker.Styles-Button.css https://cdn1.readspeaker.com/script/9190/webReader/r/r974/ReadSpeaker.Styles.css https://cdn1.readspeaker.com/script/9190/webReader/r/ https://cdn1.readspeaker.com http://cdn1.readspeaker.com/script/11546/webReader/r/r1099/ReadSpeaker.Styles.css http://cdn1.readspeaker.com/script/11546/webReader/r/r1099/ReadSpeaker.Styles-Button.css https://chatbot-widget.jobijoba.io https://fonts.googleapis.com https://vjs.zencdn.net/7.11.4/video-js.css; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com *.eloqua.com track.hubspot.com https://dc.ads.linkedin.com/collect/ https://px.ads.linkedin.com/ https://t.co/i/adsct https://counter.adcourier.com https://stats.g.doubleclick.net/r/collect https://pixel.quantserve.com/ data: blob: *.cdninstagram.com *.lfeeder.com *.leadfeeder.com *.google.fr/ads/ *.google.com/ads/ https://cdn.recman.no/ https://i.ytimg.com/ https://cdn.jobijoba.com https://hellojaiblog.files.wordpress.com https://media.giphy.com https://s3.eu-central-1.amazonaws.com https://google-analytics.com https://ytimg.com https://6035851.global.siteimproveanalytics.io/ https://conv.indeed.com/pagead/conv/5314231913872130/ https://img.youtube.com/; media-src 'self' data: blob: https://lesjoiesducode.fr/ https://firebasestorage.googleapis.com https://s3.eu-central-1.amazonaws.com https://youtube.com https://googlevideo.com https://cdn.jobijoba.com https://www.youtube.com/; frame-src 'self' https://platform.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://karriere.soprasteria.de/ https://candidate.hr-manager.net/ https://my.walls.io/ https://www.google.com/ https://sopra.symex.be/ https://charts.symex.be/ https://maps.google.com/ https://sopra-steria.career-inspiration.com/ https://youtube.com https://chatbot-webview.jobijoba.io https://app-eu.readspeaker.com/ https://app.livestorm.co/; child-src 'self' blob: https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com https://charts.symex.be/ https://sopra.symex.be/ https://sopra-steria.career-inspiration.com/ https://www.google.com/ https://candidate.hr-manager.net/ https://karriere.soprasteria.de/ https://app-eu.readspeaker.com/ https://maps.google.com/; connect-src 'self' accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com https://maps.googleapis.com/ https://vimeo.com/ https://app-eu.readspeaker.com/ https://rstts-eu.readspeaker.com/ https://media-eu.readspeaker.com/ https://www.digitale-exzellenz.de/feed/ https://www.digitale-exzellenz.de/category/branchen/ https://www.digitale-exzellenz.de/tag/ https://www.instagram.com/ https://www.instagram.com/soprasteria_fr/ https://www.instagram.com/instagram/ *.lfeeder.com *.leadfeeder.com https://vttts-eu.readspeaker.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://chatbot-widget.jobijoba.io wss://chatbot-api.jobijoba.io https://chatbot-api.jobijoba.io https://google-analytics.com; 3 frame-ancestors 'self' edhec.edu; 3 frame-ancestors 'self' https://*.xealth.io; 3 frame-ancestors 'self' http://www.axe.com unilever3.marketing.adobe.com unileverbrazil.marketing.adobe.com unilever2.marketing.adobe.com unilever.marketing.adobe.com unilever3.experiencecloud.adobe.com unileverbrazil.experiencecloud.adobe.com unilever2.experiencecloud.adobe.com unilever.experiencecloud.adobe.com emea1-proxy.adobemc.com us1-proxy.adobemc.com us1-proxy.adobemc.com apac-proxy.adobemc.com adobedemoemea131.marketing.adobe.com adobedemoemea131.experiencecloud.adobe.com 3 frame-ancestors *.marincounty.org *.marinpublic.com *.mcera.org *.marinfair.org *.marincountyhr.org *.marincountyparks.org *.marinhhs.org 3 frame-ancestors 'self' https://*.myshopify.com https://*.teemill.com teemill.com 3 default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; connect-src https: wss:; 3 default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; media-src * blob: 'unsafe-inline' 'unsafe-eval'; 3 child-src 'self'; default-src 'self' *.usave.co.uk 'unsafe-eval' 'unsafe-inline' phplaravel-354301-1685373.cloudwaysapps.com ajax.cloudflare.com static.cloudflareinsights.com optimize.google.com www.googleoptimize.com www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net connect.facebook.com connect.facebook.net www.googleadservices.com www.google.com www.gstatic.com www.redditstatic.com *.tawk.to * smartlook.cloud e.infogram.com *.smartlook.com cdn.jsdelivr.net fonts.googleapis.com fonts.gstatic.com *.amazonaws.com *.tinymce.com *.tiny.cloud; img-src https: data:; frame-src www.googletagmanager.com www.measurementlab.net e.infogram.com www.facebook.com www.google.com va.tawk.to optimize.google.com www.googleoptimize.com; 3 frame-ancestors 'self' www.roompotpsa.eu survey.insocial.nl www.detolplas.nl www.familieparken.nl www.onsvakanties.nl www.vakantieparkhellendoorn.nl www.vakantievilla-met-prive-zwembad.nl www.strandparkzeeland.nl www.kronenburgersee.nl kronenburgersee.nl www.eifelpark-eks.de eifelpark-eks.de www.duinresortdunimar.nl dev72.lined.nl 89051.afasinsite.nl www.detwentsehoeve.nl www.edeka-reisen.de www.edeka-urlaubswelt.de www.edeka-reiselust.de www.htc-reisen.de www.mein-kleiner-urlaub.de www.bungalowpark-veluwsehoevegaerde.nl; 3 default-src * data: 'unsafe-inline' blob:;connect-src * 'unsafe-inline';style-src * 'unsafe-inline';script-src * 'unsafe-inline' 'unsafe-eval';frame-src * 'unsafe-inline' 3 default-src * 'self' data: https: blob: 'unsafe-inline' 'unsafe-eval' 3 frame-ancestors 'self' *.gestionradioqc.com *.cogecolive.com;upgrade-insecure-requests 3 default-src * data: 'unsafe-inline' 'unsafe-eval'; script-src * data: 'unsafe-inline' 'unsafe-eval'; object-src * data: 'unsafe-inline' 'unsafe-eval'; 3 default-src *; object-src 'none'; base-uri 'none'; script-src * 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline'; img-src * blob: data:; font-src * data:; frame-ancestors 'self' *.nyla.app *.vercel.app localhost:*; 3 frame-ancestors 'self' *.promod.fr *.promod-dev.fr *.promod.com *.promod.de *.promod.pl *.promod.it *.promod.ch *.promod.cz *.promod.es *.promod.co.uk *.promod.eu *.promod.hu *.wonderpush.com 3 frame-ancestors 'self' *.kassel.de *.stadtreiniger.de 3 default-src 'self';style-src 'unsafe-inline' *;frame-src 'self' https://torrents-igruha.org https://telegram.im https://moytorrent.ru https://www.google.com http://youtube.com https://youtube.com http://www.youtube.com https://www.youtube.com https://vk.com http://vk.com http://*.vk.com https://*.vk.com http://vk.me https://vk.me http://*.vk.me https://*.vk.me;img-src * data:;media-src *;font-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://usocial.pro https://torrents-igruha.org https://telegram.im https://www.google.com http://youtube.com https://youtube.com http://www.youtube.com https://www.youtube.com https://vk.com http://vk.com http://*.vk.com https://*.vk.com http://vk.me https://vk.me http://*.vk.me https://*.vk.me; connect-src 'self' https://usocial.pro https://torrents-igruha.org https://telegram.im https://k3node.com http://youtube.com https://youtube.com http://www.youtube.com https://www.youtube.com http://*.amazonaws.com https://vk.com http://vk.com http://*.vk.com https://*.vk.com http://vk.me https://vk.me http://*.vk.me https://*.vk.me; 3 frame-ancestors 'self' https://cdw.lookbookhq.com http://cdw.lookbookhq.com http://solutions.cdw.com https://solutions.cdw.com 3 default-src 'self' https://*.myligue.fr https://*.lfp.fr https://*.ligue1.fr https://*.ligue2.fr https://*.ligue1.com https://*.googlesyndication.com/ https://www.tntv.pf https://opt-out.ferank.eu https://*.hotjar.com; media-src 'self' https://ooyalaeuwest.streaming.mediaservices.windows.net blob: https://www.tntv.pf https://www.youtube.com https://www.dailymotion.com https://*.hotjar.com https://manifest.prod.boltdns.net https://house-fastly-signed-eu-west-1-prod.brightcovecdn.com https://*.2mdn.net/ https://*.gvt1.com/; font-src 'self' data: https://use.fontawesome.com https://fonts.gstatic.com https://player.ooyala.com https://*.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://az416426.vo.msecnd.net https://cdn.ampproject.org https://cdn.syndication.twimg.com https://ssl.google-analytics.com https://player.ooyala.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com http://www.google-analytics.com https://www.googletagservices.com https://adservice.google.fr https://adservice.google.com https://*.googlesyndication.com https://securepubads.g.doubleclick.net https://connect.facebook.net https://platform.twitter.com https://analytics.ooyala.com https://imasdk.googleapis.com http://imasdk.googleapis.com https://s0.2mdn.net https://www.youtube.com https://www.dailymotion.com https://opt-out.ferank.eu http://opt-out.ferank.eu https://story.tl https://widget.ausha.co https://taghcountdown.909c.fr http://player.ooyala.com http://players.brightcove.net https://players.brightcove.net https://vjs.zencdn.net https://analytics.ooyala.com/ https://www.instagram.com http://*.opta.net https://*.opta.net https://acdn.adnxs.com https://*.hotjar.com https://*.privacy-center.org; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://use.fontawesome.com https://fonts.googleapis.com https://player.ooyala.com/ https://platform.twitter.com https://www.youtube.com https://www.dailymotion.com https://opt-out.ferank.eu http://opt-out.ferank.eu http://players.brightcove.net https://players.brightcove.net https://story.tl https://widget.ausha.co https://taghcountdown.909c.fr https://www.instagram.com http://*.opta.net https://*.opta.net https://*.hotjar.com; child-src 'self' blob: https://*.myligue.fr https://www.google.com/ https://*.googlesyndication.com https://player.ooyala.com/ https://platform.twitter.com/ https://staticxx.facebook.com/ https://syndication.twitter.com/ https://widgets.lfp.stats.com https://l.ooyala.com/ https://imasdk.googleapis.com/ https://www.youtube.com https://www.dailymotion.com https://cartemercatoligue1.com https://11type.lfp.fr https://story.tl https://*.ausha.co https://taghcountdown.909c.fr https://snapshots.playingsurface.net http://player.ooyala.com http://players.brightcove.net http://players.brightcove.net http://l.ooyala.com https://twitter.com https://www.facebook.com https://m.facebook.com https://www.instagram.com https://imasdk.googleapis.com http://imasdk.googleapis.com https://www.google-analytics.com http://www.google-analytics.com https://www.sporcle.com https://*.hotjar.com https://*.spotify.com/ https://*.global-mmk.com https://platform.global-mmk.com/LFPMaps/Broadcasters/Index; img-src 'self' https://*.myligue.fr https://*.lfp.fr https://*.ligue1.fr https://*.ligue2.fr https://*.ligue1.com data: https://www.google.com https://*.doubleclick.net https://*.googlesyndication.com https://lspcridevglcdn.azureedge.net https://lspemeintglcdn.azureedge.net https://lspsapuatglcdn.azureedge.net https://lsprubpreglcdn.azureedge.net https://lspisphereglcdn.azureedge.net https://ssl.google-analytics.com https://stats.g.doubleclick.net https://lfpimageproxy.azureedge.net https://secure-cf-c.ooyala.com https://player.ooyala.com https://www.blogduparieur.com https://publish.lfpstg.ooflex.net https://syndication.twitter.com/ https://abs.twimg.com https://platform.twitter.com https://pbs.twimg.com https://www.youtube.com https://www.dailymotion.com https://www.google-analytics.com http://www.google-analytics.com https://story.tl https://widget.ausha.co https://taghcountdown.909c.fr https://metrics.brightcove.com http://metrics.brightcove.com https://cf-images.us-east-1.prod.boltdns.net https://www.instagram.com https://cf-images.eu-west-1.prod.boltdns.net http://cf-images.eu-west-1.prod.boltdns.net https://tarteaucitron.io http://*.opta.net https://*.opta.net https://lspprdglcdn.azureedge.net https://ib.adnxs.com https://*.hotjar.com https://*.privacy-center.org https://play-lh.googleusercontent.com; connect-src 'self' https://*.doubleclick.net https://www.google-analytics.com https://dc.services.visualstudio.com https://metrics-api.librato.com https://player.ooyala.com https://licensing.bitmovin.com https://*.mediaservices.windows.net https://csi.gstatic.com https://edge.api.brightcove.com http://edge.api.brightcove.com http://player.ooyala.com http://manifest.prod.boltdns.net http://house-fastly-signed-us-east-1-prod.brightcovecdn.com https://house-fastly-signed-us-east-1-prod.brightcovecdn.com https://house-fastly-signed-eu-west-1-prod.brightcovecdn.com http://house-fastly-signed-eu-west-1-prod.brightcovecdn.com https://bcbolt446c5271-a.akamaihd.net https://*.googlesyndication.com https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io https://*.privacy-center.org; frame-ancestors 'self'; 3 frame-ancestors 'self' https://dashboard.vidy.com; 3 default-src 'self' bongacams.com *.bongacams.com ymetrica1.com mc.yandex.ru cam.bet *.cam.bet cdn.fluidplayer.com movcpm.com *.movcpm.com greedseed.world xmjvf.com *.xmjvf.com 9v5.ru *.9v5.ru *.adtng.com adtng.com http://151.80.33.131 http://176.9.86.142 http://176.9.142.103 http://144.76.24.149 http://136.243.73.233 http://148.251.0.18 http://144.76.218.27 http://148.251.136.187; style-src cdn.fluidplayer.com fonts.googleapis.com 'self' 'unsafe-inline'; script-src bongacams.com *.bongacams.com cdn.jsdelivr.net cdn.fluidplayer.com 'self' 'unsafe-eval' 'unsafe-inline'; font-src 'self' fonts.gstatic.com data:; img-src 'self' bongacams.com *.bongacams.com counter.yadro.ru mc.yandex.ru ymetrica1.com mc.webvisor.org cdn.fluidplayer.com movcpm.com *.movcpm.com xmjvf.com *.xmjvf.com 9v5.ru *.9v5.ru *.adtng.com adtng.com data:; 3 frame-ancestors 'self' https://rewarding.wind.it https://grandecinema3.tre.it https://www.grandecinema3.it; 3 frame-ancestors 'self' http://*.di.dk; 3 default-src https://static.mailplus.nl/ https://*.printfriendly.com/ https://*.magzmaker.com/ https://*.twitter.com/ https://*.googlesyndication.com/ https://*.googleapis.com/ 'self' 'unsafe-inline'; font-src https://cdnapisec.kaltura.com/ https://*.gstatic.com/ 'self'; child-src 'self'; connect-src https://vod.nucleusvideo.astrazeneca.com/ https://cdnapisec.kaltura.com/ https://analytics.kaltura.com/ https://stats.kaltura.com/ https://*.omappapi.com/ wss://*.hotjar.com/ https://pagead2.googlesyndication.com/ https://api.omappapi.com/ https://*.printfriendly.com/ wss://ws1.hotjar.com/ https://*.google-analytics.com/ https://9292.nl/ https://*.hotjar.io/ https://*.hotjar.com/ https://*.opmnstr.com/ https://*.doubleclick.net/ https://csi.gstatic.com/ 'self'; frame-src https://quadia.webtvframework.com/ http://quadia.webtvframework.com/ https://share.transistor.fm/ https://www.bbc.com/ https://dms.licdn.com/ https://*.linkedin.com/ https://*.googlesyndication.com/ https://crossmedia.mediasite.com/ https://*.crossmediaplatform.nl/ https://widgets.bnr.nl/ https://quadia.webtvframework.com/ https://*.printfriendly.com/ https://knmg.mediafiler.net/ https://player.vimeo.com/ https://*.magzmaker.com/ https://*.twitter.com/ https://twitter.com/ https://www.facebook.com/ https://player.bnnvara.nl/ https://*.soundcloud.com/ https://vgt.medischcontact.nl/ https://*.googlesyndication.com/ https://*.formdesk.com/ https://9292.nl/ https://www.google.com/ https://webforms.aboportal.nl/ https://open.spotify.com/ https://www.youtube-nocookie.com/ https://*.youtube.com/ https://*.hotjar.com/ 'self'; frame-ancestors 'self'; img-src https://*.bbci.co.uk/ https://cfvod.kaltura.com/ https://www.facebook.com/ http://www-medischcontact-tst-1.gxcloud.local/ http://www-medischcontact-tst.gxcloud.local/ http://www-medischcontact-tst.gxcloud.net/ http://www-knmg-tst.gxcloud.net/ http://www-knmg-tst.gxcloud.local/ https://*.mailplus.nl/ https://*.printfriendly.com/ https://*.googleusercontent.com/ https://*.twimg.com/ https://*.twitter.com/ http://www.knmg.nl/ http://www-knmg.gxcloud.net http://www.medischcontact.nl/ http://www-medischcontact.gxcloud.net/ https://picsum.photos/ http://placehold.it/ https://unsplash.it/ https://*.google-analytics.com/ https://*.googlesyndication.com/ https://*.doubleclick.net/ https://*.google.com/ 'self' data:; media-src https://cdnapisec.kaltura.com/ blob: 'self'; object-src 'self'; script-src https://9292.nl/ 'self' 'unsafe-inline' 'unsafe-eval' data: https: wss:; style-src https://*.printfriendly.com https://fonts.googleapis.com 'self' 'unsafe-inline'; worker-src 'self' blob: 3 frame-ancestors 'self' https://m.v12finance.com/; 3 default-src 'self' blob:; media-src * data: blob:; frame-ancestors 'self' https://*.bondlayer.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: data:; img-src * 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src *; connect-src https: wss:; object-src 'none' 3 default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src * 'unsafe-inline'; img-src * data: blob:; font-src * 'self' data: 'unsafe-inline'; connect-src *; media-src *; frame-src *; frame-ancestors *; 3 upgrade-insecure-requests; frame-ancestors 'self'; object-src 'none'; manifest-src 'self'; report-uri https://vault.gostatera.com/collect/csp 3 default-src 'self' *.googleapis.com *.vdo.ai *.vlitag.com *.adnxs.com *.avantisvideo.com *.addthis.com http: https: data: blob: 'unsafe-inline' 'unsafe-eval' 3 frame-ancestors *.kfst.dk *.forbrug.dk *.stormraadet.dk *.forbrugerombudsmanden.dk *.energianke.dk *.forbrugereuropa.dk *.consumerombudsman.dk *.consumereurope.dk *.danishstormcouncil.dk *.energysuppliescomplaintboard.dk 3 frame-ancestors liveshareeast3.seismic.com huron.seismic.com 3 default-src 'self' https: *.becn.digital *.becn.com https://*.wistia.com https://*.wistia.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com *.jst.ai *.cloudfront.net https://fonts.googleapis.com fast.wistia.com https://pi.pardot.com https://a.optmnstr.com https://ajax.googleapis.com https://www.googletagmanager.com https://pippio.com https://a.omappapi.com https://ws.audioeye.com https://wsv3cdn.audioeye.com https://analytics.audioeye.com https://go.becn.com https://tools.justuno.com *.ia.initiumsoftware.com *.initiumsoftware.com *.krxd.net *.facebook.net *.becn.com *.olark.com *.pingdom.net optimize.google.com *.google-analytics.com *.Alchemer.com http://surveys.alchemer.com https://surveygizmobeacon.s3.amazonaws.com; img-src 'self' data: https: *.becn.digital *.becn.digital beaconproplus.com *.beaconproplus.com https://*.wistia.com https://*.wistia.net optimize.google.com *.google-analytics.com *.Alchemer.com http://surveys.alchemer.com https://surveygizmobeacon.s3.amazonaws.com *.ia.initiumsoftware.com *.initiumsoftware.com; frame-src 'self' *.youtube.com *.jst.ai cms.becn.com https://becn.stormersite.com https://wsv3cdn.audioeye.com https://fast.wistia.com https://fast.wistia.net https://www.google.com *.becn.digital *.krxd.net *.doubleclick.net data: *.becn.com *.olark.com https://knrpc.olark.com https://static.olark.com/jsclient/loader.js optimize.google.com *.google-analytics.com *.Alchemer.com http://surveys.alchemer.com https://surveygizmobeacon.s3.amazonaws.com *.ia.initiumsoftware.com *.initiumsoftware.com; object-src 'self'; worker-src 'self' *.becn.digital *.becn.com *.cloudfront.net blob: *.olark.com *.Alchemer.com http://surveys.alchemer.com https://surveygizmobeacon.s3.amazonaws.com *.ia.initiumsoftware.com *.initiumsoftware.com; style-src 'self' 'unsafe-inline' *.becn.digital *.cloudfront.net https://fonts.googleapis.com https://wsv3cdn.audioeye.com https://fast.wistia.com https://cdnjs.cloudflare.com https://cdn.jst.ai *.ia.initiumsoftware.com *.initiumsoftware.com *.becn.com *.olark.com https://static.olark.com/jsclient/loader.js optimize.google.com *.google-analytics.com *.Alchemer.com http://surveys.alchemer.com https://surveygizmobeacon.s3.amazonaws.com; media-src 'self' blob: *.becn.digital *.becn.com beaconproplus.com *.beaconproplus.com https://*.wistia.com https://*.wistia.net d10lpsik1i8c69.cloudfront.net *.olark.com optimize.google.com *.google-analytics.com *.Alchemer.com http://surveys.alchemer.com https://surveygizmobeacon.s3.amazonaws.com *.ia.initiumsoftware.com *.initiumsoftware.com; connect-src 'self' *.becn.com *.becn.digital wss://visitors.live wss://in.visitors.live *.visitors.live *.luckyorange.net *.jst.ai *.omappapi.com *.cloudfront.net *.google-analytics.com https://analytics.audioeye.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://*.litix.io *.doubleclick.net *.initiumsoftware.com *.becn.com *.olark.com https://static.olark.com/jsclient/loader.js pubsub.googleapis.com *.pingdom.net optimize.google.com *.google-analytics.com *.Alchemer.com http://surveys.alchemer.com https://surveygizmobeacon.s3.amazonaws.com *.ia.initiumsoftware.com *.initiumsoftware.com; font-src 'self' data: https://fonts.gstatic.com https://wsv3cdn.audioeye.com https://*.wistia.com https://cdnjs.cloudflare.com *.ia.initiumsoftware.com *.initiumsoftware.com *.olark.com; frame-ancestors 'self' https://*.becn.com https://*.becn.digital 3 default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: 'unsafe-eval' *.actian.com *.wpengine.com; connect-src *; font-src * data:; media-src * 'unsafe-inline'; frame-ancestors *.actian.com; frame-src *; object-src * data: 'unsafe-eval' 3 default-src *.ewe.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ewe.de *.googletagmanager.com *.google-analytics.com www.youtube.com consent.cookiebot.com *.intelliad.de s.ytimg.com empfehlen-admin.pso-vertrieb.de connect.facebook.net www.dwin1.com *.rfihub.com *.rfihub.net *.adform.net *.adc-srv.net *.google.de *.google.com bat.bing.com *.bing.com/bat.js *.doubleclick.net *.g.doubleclick.net *.googleadservices.com *.gstatic.com *.googleapis.com *.ad4mat.de *.ad4mat.at *.ad4mat.ch *.adsrvr.org consentcdn.cookiebot.com ad4m.at cdn.sitesearch360.com; connect-src 'self' *.ewe.de global.sitesearch360.com *.googletagmanager.com *.google-analytics.com stats.g.doubleclick.net; img-src 'self' *.ewe.de images.ctfassets.net *.intelliad.de www.google-analytics.com *.amazonaws.com *.doubleclick.net *.g.doubleclick.net *.facebook.com *.adform.net ad4m.at *.googletagmanager.com adservice.google.com *.gstatic.com ih.adscale.de a.twiago.com dmp.ad4mat.net adservice.google.de maps.googleapis.com blob: data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com *.ewe.de; font-src 'self' fonts.gstatic.com *.ewe.de; frame-src ad4m.at ad4mat.net match.adsrvr.org www.facebook.com ad4mat.at widget.whappodo.com consentcdn.cookiebot.com insight.adsrvr.org youtube.com www.youtube.com *.ewe.de; media-src data.ewe.de; 3 frame-ancestors https://tsetscdev.prod.acquia-sites.com/ https://tsetscstage.prod.acquia-sites.com/ https://ecommercdev.tatasteel.online https://ecommerctst.tatasteel.online https://ecmc01qa.tatasteel.online https://ecmc01dev.tatasteel.online https://www.tatasteeleurope.com https://www.tatasteel.online https://ecmc01.tatasteel.online https://ecmc03-p.tatasteel.online https://ecmc03-d.tatasteel.online https://ecmc03-acc.tatasteel.online/ https://ecmc03-t.tatasteel.online/ https://tsedev.prod.acquia-sites.com https://tsestg.prod.acquia-sites.com https://www.beta-tatasteeleurope.com https://cpws01-d.tatasteel.online https://dev.tatasteeleurope.com preprod.tatasteeleurope.com test.tatasteeleurope.com ecmc03-pp.tatasteel.online; report-uri /ts/report-csp-violation 3 true 3 frame-ancestors 'self' *.glasgowairport.com *.aberdeenairport.com *.southamptonairport.com 3 default-src 'self' *.ceros.com go.optiv.com *.codepen.io optiv.showpad.com optivstorage.blob.core.windows.net *.marketo.com https://www.google-analytics.com *.doubleclick.net https://staticxx.facebook.com https://platform.twitter.com http://i.vimeocdn.com https://player.vimeo.com *.youtube-nocookie.com https://www.youtube.com/iframe_api *.linkedin.com *.mktoresp.com http://stats.sa-as.com https://www.facebook.com https://www.google.com https://tracking.leadlander.com *.siteimproveanalytics.io https://8f2a3f802cdf2859af9e-51128641de34f0801c2bd5e1e5f0dc25.ssl.cf1.rackcdn.com https://optiv.postclickmarketing.com https://html5-player.libsyn.com http://html5-player.libsyn.com http://widget.surveymonkey.com https://widget.surveymonkey.com https://www.surveymonkey.com https://consent.cookiebot.com *.fullstory.com https://api.company-target.com https://static.smartrecruiters.com https://www.smartrecruiters.com https://subscriptions.smartrecruiters.com/ https://cdn.jsdelivr.net https://scripts.demandbase.com https://themes.googleusercontent.com https://consentcdn.cookiebot.com/ https://cdn.cookielaw.org/ https://bam.nr-data.net/events/1/f277460712 https://public.tableau.com/ https://api.ceros.com https://google.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://api.lever.co/v0/postings/optiv https://api.lever.co/v0/postings/optiv-2 https://ka-p.fontawesome.com/ https://kit.fontawesome.com; img-src 'self' data: https://public.tableau.com/static/images/cy/cybersecurity_tool/Story1/1.png https://cdn.bizible.com/ https://cdn.bizibly.com https://www.facebook.com https://stats.g.doubleclick.net https://tracking.leadlander.com https://*.global.siteimproveanalytics.io https://px.ads.linkedin.com https://www.google.com https://cdn.cookielaw.org/logos/4778c75d-47b3-4457-9e9f-8d01da359800/ff148706-0aba-4614-b78a-5ecdd8396861/optiv-logo@2x.jpg https://cdn.cookielaw.org/logos/static/poweredBy_ot_logo.svg; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ceros.com go.optiv.com *.codepen.io optiv.showpad.com optivstorage.blob.core.windows.net https://www.googletagmanager.com https://tagmanager.google.com https://s.ytimg.com http://siteimproveanalytics.com https://www.google-analytics.com https://sjs.bizographics.com *.linkedin.com http://connect.facebook.net https://apis.google.com http://platform.twitter.com http://*.marketo.net https://*.marketo.net http://*.marketo.com https://*.marketo.com http://t.sf14g.com http://stats.sa-as.com https://d6digital.atlassian.net https://player.vimeo.com http://i.vimeocdn.com *.youtube-nocookie.com https://www.youtube.com/iframe_api https://8f2a3f802cdf2859af9e-51128641de34f0801c2bd5e1e5f0dc25.ssl.cf1.rackcdn.com https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.js https://optiv.postclickmarketing.com https://html5-player.libsyn.com http://html5-player.libsyn.com http://widget.surveymonkey.com https://widget.surveymonkey.com https://www.surveymonkey.com https://consent.cookiebot.com https://fullstory.com/s/fs.js https://tag.demandbase.com https://scripts.demandbase.com https://static.smartrecruiters.com/job-widget/1.4.2/script/smart_widget.js https://static.smartrecruiters.com/job-widget/1.4.2/script/jquery.min.js https://use.fontawesome.com/releases/v5.8.2/js/all.js https://use.fontawesome.com/releases/v5.8.2/js/v4-shims.js https://www.smartrecruiters.com https://trk.techtarget.com/tracking.js https://ionfiles.scribblecdn.net/scripts/ionizer-1.1.min.js https://subscriptions.smartrecruiters.com/widget/v1/sr-job-alerts.js https://cdn.jsdelivr.net https://themes.googleusercontent.com https://consentcdn.cookiebot.com/ https://cdn.cookielaw.org/ https://js-agent.newrelic.com/ https://bam.nr-data.net/ https://snap.licdn.com/li.lms-analytics/insight.min.js https://public.tableau.com/javascripts/api/viz_v1.js https://cdn.bizible.com https://munchkin.marketo.net/159/munchkin.js https://api.ceros.com https://js-agent.newrelic.com/nr-1184.min.js https://google.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://andreasmb.github.io/lever-jobs-embed/index.js app-sj21.marketo.com https://kit.fontawesome.com https://use.fontawesome.com https://www.youtube.com pagecdn.io; style-src 'self' 'unsafe-inline' *.ceros.com go.optiv.com *.codepen.io optiv.showpad.com optivstorage.blob.core.windows.net *.marketo.com https://tagmanager.google.com https://fonts.googleapis.com https://static.smartrecruiters.com/job-widget/1.4.2/css/smart_widget.css https://scripts.demandbase.com https://cdn.jsdelivr.net https://themes.googleusercontent.com https://consentcdn.cookiebot.com/ https://cdn.cookielaw.org/ https://google.com https://andreasmb.github.io/lever-jobs-embed/embed-css/style.css https://kit.fontawesome.com/5c49bd2b73/74742053/kit-upload.css 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.valcartier.com *.calypsopark.com gcv-static.azureedge.net gcv-cms-static.azureedge.net gcv-staging-static.azureedge.net gcv-dev-static.azureedge.net gcv-qa-static.azureedge.net gcv-qa2-static.azureedge.net gcv-qa3-static.azureedge.net www-gcv-static.azureedge.net *.googletagmanager.com *.google-analytics.com *.googleapis.com *.ticket-ops.com data: *.tripadvisor.ca *.tripadvisor.com *.jscache.com static.tacdn.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.google.com fonts.gstatic.com facebook.net *.facebook.com *.google.ca *.googleadservices.com *.doubleclick.net acuityplatform.com securecode.com *.securecode.com moneris.com *.moneris.com visa.com *.visa.com verifiedbyvisa.com *.verifiedbyvisa.com *.arcot.com *.vgdelivery.com vgdelivery.com *.cardinalcommerce.com cardinalcommerce.com *.online-metrix.net online-metrix.net securesuite.net *.securesuite.net az416426.vo.msecnd.net dc.services.visualstudio.com connect.facebook.net player.vimeo.com *.livechatinc.com; 3 default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://js.monitor.azure.com http://projects.elitechnology.com/jsprojects/eneco-client/ https://projects.elitechnology.com/jsprojects/eneco/api/ https://eneco-eneco.digitalcx.com https://cdn.conversationalsdevelopment.nl https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://w.usabilla.com https://api.usabilla.com https://d6tizftlrpuof.cloudfront.net https://d3or5d0jdz94or.cloudfront.net/MExDH9iB5LdtMi44LjE.js https://cdn.greenhousegroup.com/eneco-nl/slb/conversion.js https://connect.facebook.net/signals/plugins/inferredEvents.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/435765806865268 https://www.linkedin.com/px/li_sync https://px.ads.linkedin.com/collect/ https://snap.licdn.com/li.lms-analytics/ https://d2qmp7jjpd79k7.cloudfront.net/smartpixel-1.js https://d2qmp7jjpd79k7.cloudfront.net/smartpixel/3-3227/product.js https://d2qmp7jjpd79k7.cloudfront.net/pixel/3/1572447345163/script.js https://static.ads-twitter.com/uwt.js https://analytics.twitter.com/i/adsct https://bat.bing.com/bat.js https://bat.bing.com/p/action/23001836.js https://acdn.adnxs.com/dmp/up/pixie.js https://s.pinimg.com https://ct.pinterest.com https://secure.adnxs.com https://cdnjs.cloudflare.com/ajax/libs/bodymovin/5.4.4/lottie.min.js https://tdn.r42tag.com https://admin.relay42.com https://t.svtrd.com/t-1295/ https://static.hotjar.com/c/hotjar-215132.js https://script.hotjar.com https://eneco.bbvms.com https://cdn.bluebillywig.com/apps/player/ https://mijn.enecozakelijk.nl/cookie/xdomain/xdomain_cookie.min.js https://www.youtube.com/iframe_api https://img03.en25.com/i/elqCfg.min.js https://api.salesfeed.com https://script.adcalls.nl/e907d5da-14dc-4967-b180-03e37a3022be.js https://ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js https://ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/jquery-ui.min.js https://cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ https://amplify.outbrain.com/cp/obtp.js https://tr.outbrain.com;object-src 'self';style-src 'self' 'unsafe-inline' fonts.googleapis.com https://d6tizftlrpuof.cloudfront.net https://tagmanager.google.com/debug/css.css https://cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.css https://ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/themes/smoothness/jquery-ui.css;img-src 'self' * data: blob: secure.adnxs.com collect.kosi-analytics.io/i https://t.co/i/adsct googleads.g.doubleclick.net www.googleadservices.com https://script.hotjar.com;media-src 'self' data: https://eneco.bbvms.com https://cdn.bluebillywig.com/apps/player/ https://d3ehotfhpgor0k.cloudfront.net;frame-src 'self' https://d6tizftlrpuof.cloudfront.net https://www.youtube-nocookie.com https://t.svtrd.com https://ib.adnxs.com https://s3.eu-central-1.amazonaws.com/snowplow-appnexus-mapper/id.html https://6361111.fls.doubleclick.net https://9108254.fls.doubleclick.net https://bid.g.doubleclick.net https://player.vimeo.com https://eneco.bbvms.com https://mijn.enecozakelijk.nl https://vars.hotjar.com https://www.google.com;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com https://d6tizftlrpuof.cloudfront.net https://d3ehotfhpgor0k.cloudfront.net https://script.hotjar.com https://cdn.bluebillywig.com/fonts/ https://cdn.conversationalsdevelopment.nl/eneco/;connect-src 'self' *.eneco.nl https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net *.services.visualstudio.com https://api.usabilla.com https://eneco.bbvms.com https://collect.kosi-analytics.io https://d.lemonpi.io/scrapes https://ct.pinterest.com https://eneco-eneco.digitalcx.com https://conversationals-connector-live-assist-production.azurewebsites.net wss://api.seamly.ai https://api.seamly.ai wss://api.seamly-app.com https://api.seamly-app.com https://vc.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://api.adcalls.nl https://bat.bing.com https://api.enecogroup.com https://api-digital.enecogroup.com;child-src 'self' blob: https://vars.hotjar.com;frame-ancestors 'self' https://inloggen.eneco.nl 3 frame-ancestors 'self' bid.g.doubleclick.net, img-src 'self' www.googletagmanager.com ssl.gstatic.com www.gstatic.com www.google.co.in www.google-analytics.com googleads.g.doubleclick.net www.google.com www.google.be www.kwpsurveys.com *.cdninstagram.com *.typesquare.com t.teads.tv ct.pinterest.com ad.ipredictive.com www.facebook.com consumer.krxd.net apps.jobadder.com www.zespri.eu zespri.com.isgoingto.be cm.teads.tv www.google.co.id images.ctfassets.net cdnjs.cloudflare.com *.destinilocators.com bat.bing.com data:, form-action 'self', font-src 'self' ka-f.fontawesome.com fonts.gstatic.com use.fontawesome.com *.typesquare.com www.zespri.eu zespri.com.isgoingto.be *.destinilocators.com destinilocators.com data:, object-src 'self', style-src 'self' 'unsafe-inline' unpkg.com tagmanager.google.com fonts.googleapis.com www.zespri.eu zespri.com.isgoingto.be use.fontawesome.com *.destinilocators.com destinilocators.com bat.bing.com, script-src 'self' 'unsafe-inline' 'unsafe-eval' kit.fontawesome.com unpkg.com typesquare.com cdn.krxd.net www.googletagmanager.com tagmanager.google.com www.google-analytics.com ssl.google-analytics.com www.google.co.in www.googleadservices.com www.google.com www.kwpsurveys.com p.teads.tv *.cdninstagram.com www.facebook.com connect.facebook.net s.pinimg.com t.teads.tv ct.pinterest.com beacon.krxd.net consumer.krxd.net apps.jobadder.com ajax.googleapis.com www.zespri.eu zespri.com.isgoingto.be cm.teads.tv www.google.co.id recaptcha.net destinilocators.com *.destinilocators.com api.destinilocators.com stackpath.bootstrapcdn.com *.arcgis.com fonts.gstatic.com www.gstatic.com s3.amazonaws.com use.fontawesome.com pw.qpleshq.com us-central1-zespri-2020.cloudfunctions.net www.shareasungold.zespristore.com irxcm.com api2.autopilothq.com googleads.g.doubleclick.net bat.bing.com blob: 3 default-src 'none'; object-src 'self'; media-src blob: https://*.genial.ly https://*.scene7.com https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.podcast.co https://*.pod.co https://*.radio.co https://*.lpsnmedia.net https://*.google.ch https://*.ads-twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://*.hirslanden.ch https://*.infocentric.ch https://*.wistia.com https://*.medicosearch.ch https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com; font-src 'self' data: https://*.podigee.com https://*.podigee-cdn.net https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.google.ch https://*.ads-twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://*.amazonaws.com https://*.medicosearch.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.yandex.ru https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://cdnjs.cloudflare.com https://*.zvv.ch https://*.genial.ly https://*.3qsdn.com https://*.scene7.com https://*.pinimg.com https://*.podigee.com https://*.podigee-cdn.net https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.typeform.com https://play.pod.co https://cdnjs.cloudflare.com https://siteimproveanalytics.com https://*.lpsnmedia.net https://*.licdn.com https://sc-static.net https://*.liveperson.net https://*.google.ch https://*.ads-twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.linkedin.com https://*.instagram.com https://*.mediclinic.com https://*.elfsight.com https://uberall.com https://static-prod.uberall.com https://api.instacloud.io https://mediclinic.mediaplatform.com https://api.doctena.ch https://*.createsend.com https://cdn.dotcy.com.cy https://script.crazyegg.com https://testmcmebot.azurewebsites.net https://*.medicosearch.ch https://*.infocentric.ch https://www.puls-berufe.ch https://*.gstatic.com https://*.google.com https://*.sprechzimmer.ch https://*.wistia.com https://fast.wistia.net https://src.litix.io https://s.ytimg.com https://www.youtube.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://*.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://connect.facebook.net https://*.twitter.com https://cdn.syndication.twimg.com https://csi.gstatic.com https://*.podcast.co https://*.pod.co https://*.radio.co https://code.jquery.com https://soundcloud.com/; connect-src 'self' https://*.yandex.ru https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://cdnjs.cloudflare.com https://*.pinterest.com https://*.medicosearch.ch https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://stats.g.doubleclick.net https://*.blueglass.io https://*.mediclinic.co.za https://*.podcast.co https://*.pod.co https://*.radio.co https://*.googleadservices.com https://*.elfsight.com https://uberall.com https://blog.hirslanden.ch https://er24.info https://*.typeform.com https://*.wistia.com https://*.litix.io https://www.facebook.com/ https://*.crazyegg.com https://*.akamaihd.net https://www.google-analytics.com https://s7.addthis.com https://m.addthis.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com; img-src * 'self' data:; style-src 'self' 'unsafe-inline' https://*.podigee.com https://*.podigee-cdn.net https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.google.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://*.ads-twitter.com https://*.google.ch https://mediclinic.mediaplatform.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://cdn.dotcy.com.cy https://*.medicosearch.ch https://cloud.typography.com https://*.sprechzimmer.ch https://*.twitter.com https://www-prod.hirslanden.ch https://*.tagboard.com https://tagboard.com https://ton.twimg.com; frame-src 'self' https://*.zvv.ch https://*.genial.ly https://*.3qsdn.com https://*.tourmkr.com/ https://tourmkr.com/ https://*.tourextender.ch/ https://tourextender.ch/ https://*.podigee.com https://*.podigee-cdn.net https://*.infomaniak.com https://*.business360.ch https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.typeform.com https://*.doubleclick.ne https://*.pinimg.com https://*.doubleclick.net https://*.yandex.ru https://play.pod.co https://*.onedoc.ch https://onedoc.ch https://vimeo.com/ https://*.vimeo.com/ https://*.brightcove.net/ https://mixlr.com/ https://*.mixlr.com/ https://*.liveperson.net https://*.lpsnmedia.net https://*.snapchat.com https://*.ads-twitter.com https://*.linkedin.com https://*.instagram.com https://*.mediclinic.com https://*.mediclinic.co.za https://mediclinic.mediaplatform.com http://mcairportrdauh.royalwebhosting.net https://*.google.ch https://*.twitter.com http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://*.doctena.com https://*.createsend.com https://*.google.com https://*.googletagmanager.com https://w.soundcloud.com/ https://cdn.dotcy.com.cy https://testmcmebot.azurewebsites.net https://fast.wistia.com https://s7.addthis.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com https://www.youtube.com https://*.sprechzimmer.ch https://www.med-congress.info https://*.datahouse.ch/ https://*.detailnet.ch https://www2.hirslanden.ch https://vr.zaak.ch https://staticxx.facebook.com https://www.facebook.com https://tourmake.it https://tools.eurolandir.com https://twitter.com https://www.facebook.com; child-src 'self' blob: https://*.business360.ch https://*.tourmkr.com https://tourmkr.com https://*.matterport.com https://*.okadoc.com https://*.blueglass.io https://*.mediclinic.co.za https://*.ads-twitter.com https://*.google.ch http://*.mediclinicprime.co.za https://*.googleadservices.com https://*.elfsight.com https://staticxx.facebook.com https://fast.wistia.com https://s7.addthis.com https://*.twitter.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://ton.twimg.com 3 default-src * data: blob: ; script-src * 'unsafe-inline' 'unsafe-eval' blob: ; style-src * 'unsafe-inline' data: ; worker-src * ; frame-ancestors 'self' ; 3 default-src https: 'unsafe-inline' 'self' data: 'unsafe-eval' 3 frame-ancestors 'self' *.dja.com; 3 frame-ancestors 'self' http://*.cheltenham.ecctis.co.uk; 3 frame-ancestors 'self' app.contentful.com 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com stats.g.doubleclick.net stats.g.doubleclick.com *.searchiq.co *.gstatic.com *.googleapis.com *.addthis.com *.cookielaw.com *.cookielaw.org *.cloudapi.de *.onetrust.com; frame-src 'self' *.instagram.com *.searchiq.co *.youtube.com *.addthis.com *.hypemarks.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.instagram.com *.licdn.com *.googleapis.com *.searchiq.co *.youtube.com *.googletagmanager.com *.google-analytics.com *.addthis.com *.addthisedge.com *.cookielaw.com *.cookielaw.org *.hypemarks.com *.moatads.com *.cloudapi.de *.onetrust.com; img-src 'self' data: px.ads.linkedin.com *.searchiq.co *.google-analytics.com stats.g.doubleclick.com stats.g.doubleclick.net *.google.com *.google.co.uk *.cookielaw.org 3 default-src 'self'; script-src * 'unsafe-eval' 'unsafe-inline'; object-src *; style-src * 'unsafe-inline'; img-src * data:;frame-src *;font-src * data:;connect-src * blob:;media-src * blob:;worker-src * blob:; 3 form-action 'self' https://coworkingresources.org https://*.coworkingresources.org https://www.facebook.com https://getkisi.com https://*.getkisi.com https://kisi-webflow-production.herokuapp.com https://kisi-webflow-staging.herokuapp.com; script-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://api.na.chilipiper.com/marketing/getkisi https://a.clickcertain.com https://a.omappapi.com https://a.optmnstr.com https://a.quora.com https://a.remarketstats.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://connect.facebook.net https://d.adroll.com https://d.adroll.mgr.consensu.org https://googleads.g.doubleclick.net https://idsync.rlcdn.com https://js.hsadspixel.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.na.chilipiper.com/marketing.js https://js.usemessages.com https://kisi-webflow-production.herokuapp.com https://kisi-webflow-staging.herokuapp.com https://netlify-cdp-loader.netlify.app https://s.adroll.com https://ssl.google-analytics.com https://script.hotjar.com https://snap.licdn.com https://static.hotjar.com https://tagmanager.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://www.redditstatic.com https://www.youtube.com 3 default-src 'self' https://ajax.googleapis.com https://maps.googleapis.com http://ajax.googleapis.com http://maps.googleapis.com https://*.ubembed.com http://*.ubembed.com https://y.c3portal.net https://c3sbx.net https://c3plp.net https://*.ctctcdn.com http://*.ctctcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s.ytimg.com https://www.youtube.com/iframe_api http://www.google-analytics.com/ https://lkq.qumucloud.com/ https://c3sbx.net https://c3plp.net https://cdn.qumucloud.com/ https://ssl.google-analytics.com/ https://www.gstatic.com/ https://www.google.com/ https://www.googletagservices.com/ https://www.googletagmanager.com https://connect.facebook.net/ https://googleads.g.doubleclick.net/ http://www.googleadservices.com/ https://gateway.zscalertwo.net https://fs17.formsite.com/ http://cdn.jsdelivr.net/ https://*.ubembed.com http://*.ubembed.com https://ajax.googleapis.com/ https://maps.googleapis.com/ http://ajax.googleapis.com/ http://maps.googleapis.com http://www.interactivegarage.com https://www.interactivegarage.com http://emarketing.ekeystone.com/ http://static.ctctcdn.com/ https://static.ctctcdn.com/ https://cdnjs.cloudflare.com/ http://cdnjs.cloudflare.com/; style-src 'self' 'unsafe-inline' https://cdn.qumucloud.com/ https://lkq.qumucloud.com http://fonts.googleapis.com/ http://fonts.gstatic.com/ https://www.google-analytics.com https://stats.g.doubleclick.net https://*.ubembed.com http://*.ubembed.com https://ajax.googleapis.com https://*.ctctcdn.com http://*.ctctcdn.com; img-src 'self' *.ekeystone.com/ http://maps.gstatic.com/ http://maps.googleapis.com/ http://media.ekeystone.com/ https://lkq.qumucloud.com/ https://cdn.qumucloud.com/ https://fonts.gstatic.com/ https://www.google-analytics.com/ http://vehiclepartimages.com/ https://www.google.com/ http://www.google-analytics.com/ https://www.facebook.com/ https://gateway.zscalertwo.net https://stats.g.doubleclick.net https://ssl.google-analytics.com/ http://media.viantp.com/ https://www.google.co.in/pagead/ http://www.googletagmanager.com/ https://*.ubembed.com http://*.ubembed.com https://ajax.googleapis.com http://emarketing.ekeystone.com https://*.ctctcdn.com http://*.ctctcdn.com data:; child-src 'self' https://lkq.instilled.com https://lkq.qumucloud.com https://sdn.sitecore.net https://c3sbx.net https://c3plp.net https://n.c3portal.net http://sdn.sitecore.net https://www.google.com https://recruiting.adp.com https://www.facebook.com https://bid.g.doubleclick.net https://www.youtube.com https://fs17.formsite.com/ http://www.youtube.com https://*.ubembed.com/ http://www.facebook.com https://*.pages.ubembed.com http://*.ubembed.com http://*.pages.ubembed.com http://www.interactivegarage.com https://www.interactivegarage.com https://gateway.zscalertwo.net https://docs.google.com/ https://y.c3portal.net blob:; font-src 'self' https://cdn.qumucloud.com/ https://fonts.gstatic.com https://*.ubembed.com http://*.ubembed.com https://*.ctctcdn.com http://*.ctctcdn.com data:; frame-ancestors 'self'; media-src 'self' http://media.ekeystone.com/ http://vehiclepartimages.com/ https://*.ubembed.com http://*.ubembed.com https://*.ctctcdn.com http://*.ctctcdn.com; 3 default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src https: wss:; img-src data: https://* 3 default-src https:; font-src 'self' https: data:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' blob:; img-src https: data:; 3 frame-ancestors 'self' https://help.patagonia.com/ https://notouchie-patagoniacommunity.cs7.force.com/ 3 default-src 'self'; img-src 'self' https://* data:; child-src https://www.youtube.com/ https://www.google.com/; style-src 'self' https://fonts.googleapis.com/ https://cdn.jsdelivr.net/npm/@duetds/date-picker@1.1.0/dist/duet/themes/default.css 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com/ https://business.senedd.wales; script-src 'self' blob: https://www.google-analytics.com/ https://cc.cdn.civiccomputing.com/ https://www.googletagmanager.com/ https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.0.0.min.js https://ajax.aspnetcdn.com/ajax/jquery.validate/1.16.0/jquery.validate.min.js https://ajax.aspnetcdn.com/ajax/mvc/5.2.3/jquery.validate.unobtrusive.min.js https://cdn.jsdelivr.net 'sha256-qTS4cC+BnlabE/doSj+MPbjtJWVdVNtQah7AzuFfjbE=' 'sha256-h4tI5yM0TF6GI9CZe5uWnJX7WqXL1kpLAJ13Idyytts=' 'sha256-byyDoONdqE08AIFI6uBk/n8GJDNnu4o8VE6qf+NETJs=' 'sha256-GG+mi50DV7jNq33JItnAeSGKu+DyOuVZM484bs4ioq4=' 'sha256-r3mDNAbdsnbtcqGzAwDXN/1Ln5hKyg8GDZlm46+kpKg=' 'sha256-GG+mi50DV7jNq33JItnAeSGKu+DyOuVZM484bs4ioq4=' 'sha256-IZgGOToFausimoy1Ehqf2azcfWd5NrdyLunVfExDBbE=' 'sha256-NGxJAeRnkyrA2OBRtnqvyQRY28RBBbWXd+45iwUuOUU=' 'sha256-F/cu6HUELqMYhkB6TZFkoZoPLA7wPQ+ImBdqTVxZPUc=' 'sha256-OH++59VDvU6yN74Q2UuMkDjXzMZbZYGxaTP1SrqUqJs='; connect-src 'self' https://www.google-analytics.com https://www.senedd.tv https://senedd.tv https://www.senedd.assembly.wales https://www.senedd.cynulliad.cymru https://apikeys.civiccomputing.com https://senedd.assembly.wales https://senedd.cynulliad.cymru https://player.senedd.tv; frame-src 'self' https://www.youtube.com/ https://www.google.com/ https://umap.openstreetmap.fr https://openstreetmap.cymru https://www.ons.gov.uk https://player.senedd.tv https://w.soundcloud.com https://my.matterport.com https://embeds.audioboom.com https://player.vimeo.com https://business.senedd.wales https://busnes.senedd.cymru https://www.canva.com https://forms.office.com https://app.powerbi.com 3 img-src * data: blob: 3 base-uri 'none'; object-src 'none'; default-src 'self' 'unsafe-inline' data: https: wss: blob:; report-uri https://ulcm.report-uri.com/r/d/csp/enforce 3 default-src 'self' *.lvvwd.com *.youtube.com data:; style-src 'self' 'unsafe-inline' *.lvvwd.com *.juicer.io *.mqcdn.com *.cludo.com *.cludo.com.cdn.cloudflare.net *.googleapis.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.lvvwd.com *.juicer.io *.digicert.com *.mqcdn.com *.google-analytics.com *.googleapis.com *.jwpcdn.com *.onefiserv.com *.gstatic.com *.google.com *.googletagmanager.com *.facebook.net https://sdks.shopifycdn.com *.cludo.com *.cludo.com.cdn.cloudflare.net apps.usw2.pure.cloud cdn.jwplayer.com api.flickr.com data:; connect-src 'self' *.lvvwd.com *.juicer.io *.mqcdn.com *.mapquestapi.com *.mapquest.com *.google-analytics.com *.googleapis.com *.gstatic.com *.doubleclick.net https://springs-preserve.myshopify.com *.cludo.com *.cludo.com.cdn.cloudflare.net api-use2.digital.genesyscloud.com cdn.jwplayer.com cdn3.wowza.com data:; font-src 'self' *.lvvwd.com *.juicer.io *.mqcdn.com *.jwpcdn.com *.gstatic.com data:; img-src 'self' *.lvvwd.com *.snwa.com *.springspreserve.org *.google.com *.mapbox.com *.mqcdn.com *.mapquestapi.com *.mapquest.com *.juicer.io *.cdninstagram.com prd.jwpltx.com seal.digicert.com maps.gstatic.com *.googleapis.com cdn.jwplayer.com assets-jpcust.jwpsrv.com live.staticflickr.com blob: data:; frame-src 'self' *.onefiserv.com *.streamtext.net *.youtube.com *.doubleclick.net *.google.com *.facebook.com data:; media-src 'self' *.lvvwd.com cdn3.wowza.com blob: data:; 3 default-src 'self'; base-uri 'none'; img-src 'self' data:; worker-src 'none'; frame-src 'none'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' 3 frame-ancestors 'self'; object-src 'none'; 3 default-src 'self' https://nominatim.openstreetmap.org/; img-src 'self' data: https: *.wp.com *.wordpress.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.wp.com *.wordpress.com; style-src 'self' 'unsafe-inline' https: fonts.googleapis.com *.wp.com *.wordpress.com; font-src 'self' data: https: fonts.googleapis.com *.wp.com *.wordpress.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.wp.com *.wordpress.com 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com stats.g.doubleclick.net www.google.es www.youtube.com aidback-test.applus.solutions aidback.applus.solutions code.jquery.com v.qq.com maps.googleapis.com www.applus.com docs.google.com bookeo.com www-2557h.bookeo.com static.hotjar.com httpbin.org api.ipify.org maps.gstatic.com fonts.googleapis.com fonts.gstatic.com applus.media data:; object-src 'none'; base-uri 'self'; 3 default-src 'self' ; connect-src 'self' https://www.google-analytics.com https://api.curator.io https://cdn.cookielaw.org https://privacyportal-eu.onetrust.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://talentforjobs.com https://cdn.curator.io https://www.auchan-retail.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://authedmine.com https://ssl.google-analytics.com https://ajax.cloudflare.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com;img-src 'self' https://cdn.cookielaw.org https://img.bfmtv.com https://bfmbusiness.bfmtv.com https://images.auchan.ro https://talentforjobs.com https://curatorio.s3.amazonaws.com https://*.uecdn.es https://www.google.com https://www.instagram.com https://*.curator.io https://www.googletagmanager.com https://www.auchan-retail.com http://pbs.twimg.com https://pbs.twimg.com https://image-store.slidesharecdn.com https://i.ytimg.com https://*.licdn.com https://*.ggpht.com https://*.fbcdn.net https://*.twimg.com https://*.cdninstagram.com https://*.googleusercontent.com https://secure.gravatar.com https://ps.w.org https://www.facebook.com https://csi.gstatic.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://ajax.googleapis.com https://secure.gravatar.com https://ssl.google-analytics.com data:;style-src 'self' 'unsafe-inline' data: https://talentforjobs.com https://cdn.curator.io https://www.auchan-retail.com https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src 'self' https://cdn.curator.io https://www.auchan-retail.com https://themes.googleusercontent.com https://fonts.gstatic.com data:; child-src https://talentforjobs.com https://www.auchan-retail.com https://www.youtube.com https://indd.adobe.com https://player.vimeo.com https://www.youtu.be; media-src 'self' https://www.instagram.com https://dms.licdn.com https://www.youtu.be https://www.youtube.com https://www.auchan-retail.com https://www.youtube.com https://video.twimg.com https://*.cdninstagram.com; object-src 'none'; frame-ancestors 'self'; base-uri 'none'; 3 frame-ancestors 'self' frag-einen-anwalt.de *.frag-einen-anwalt.de 123recht.de *.123recht.de wohnungsboerse.net *.wohnungsboerse.net trauer.de *.trauer.de briefeguru.de *.briefeguru.de pflege-durch-angehoerige.de *.pflege-durch-angehoerige.de immobilienscout24.de *.immobilienscout24.de berlin.de *.berlin.de merkur-online.de *.merkur-online.de *.cdn.ampproject.org *.google.de *.google.com merkur-online.de *.merkur-online.de immoverkauf24.de *.immoverkauf24.de; report-uri /include/cspreport.asp 3 default-src https: 'unsafe-eval' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: www.googletagmanager.com www.google-analytics.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net ajax.googleapis.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com dq4irj27fs462.cloudfront.net d3dc1lgancj6l0.cloudfront.net *.api.here.com *.wp.com lftracker.leadfeeder.com www.youtube.com www.youtube-nocookie.com s.ytimg.com; frame-src 'self' http: https:; object-src 'self'; img-src * 'self' https: data: userlike-cdn-operators.s3-eu-west-1.amazonaws.com dq4irj27fs462.cloudfront.net; style-src 'unsafe-inline' 'self' fonts.googleapis.com js.api.here.com cdnjs.cloudflare.com s0.wp.com; font-src 'self' data: fonts.gstatic.com dq4irj27fs462.cloudfront.net d3dc1lgancj6l0.cloudfront.net *.api.here.com s0.wp.com; connect-src 'self' blob: *.lancom-systems.de *.lancom-systems.com www.userlike.com wss://umd.userlike.com wss://chat.userlike.com chat.userlike.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net www.google-analytics.com *.doubleclick.net *.hereapi.com js.api.here.com ; media-src 'self' dq4irj27fs462.cloudfront.net blob: ; worker-src 'self' blob: ; 3 frame-ancestors 'self' https://*.probikeshop.fr https://*.probikeshop.it https://*.bikeshop.es https://*.probikeshop.de https://*.probikeshop.pt https://*.probikeshop.com https://*.probikeshop.ch; 3 default-src 'self' blob: http: https: wss://bot.moin.ai/primus w1.stiebel-eltron.de w2.stiebel-eltron.de www.stiebel-eltron.de www0.stiebel-eltron.de; img-src 'self' data: blob: http: https: w1.stiebel-eltron.de w2.stiebel-eltron.de www.stiebel-eltron.de www0.stiebel-eltron.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' http: https: w1.stiebel-eltron.de w2.stiebel-eltron.de www.stiebel-eltron.de www0.stiebel-eltron.de; style-src 'self' 'unsafe-inline' http: https: w1.stiebel-eltron.de w2.stiebel-eltron.de www.stiebel-eltron.de www0.stiebel-eltron.de; font-src 'self' data: http: https: w1.stiebel-eltron.de w2.stiebel-eltron.de www.stiebel-eltron.de www0.stiebel-eltron.de; 3 frame-ancestors 'self' *.ioburo.fr *.alkor-groupe.com *.majuscule.fr *.burolike.com *.officedepot.fr; 3 frame-ancestors http://*.thefamilycoppola.com https://*.thefamilycoppola.com; 3 frame-ancestors 'self' *.efax.co.uk *.efax.de *.efax.es *.efax.nl *.efax.com *.efax.fr 3 default-src * ;report-uri /xp/CSPReport.ashx ;script-src * 'unsafe-inline' 'unsafe-eval' data: about: ;style-src * 'unsafe-inline' ;connect-src * blob: ;font-src * data: ;object-src * ;img-src * data: blob: ;media-src * blob: ;frame-src * data: gsa: ajaxhandler: ;child-src * blob: ;worker-src * blob: ;form-action * javascript: ;frame-ancestors 'self' 3 frame-ancestors 'self' http://*.szextarskereso.hu http://*.bizarr.hu https://szex.com http://sweetescortgirls.com https://www.amator-szex.hu https://szexpartner.szex.hu/ https://porn.sex.hu/ https://kupak.hu; 3 default-src http:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http:; style-src http: 'unsafe-inline'; img-src 'self' data: http:; connect-src http: ws:; 3 default-src https: data: 'unsafe-inline' 3 default-src https: data: 'unsafe-inline' 'unsafe-eval'; img-src * data:; 3 default-src * 'unsafe-eval' 'unsafe-inline' gap://ready file:; style-src 'self' 'unsafe-inline'; media-src *; img-src * 'self' filesystem: data: blob:; 3 default-src 'self'; script-src 'self' dnstest2.ficora.fi dnstest.traficom.fi keha-matomo-sdg-qa-qa.azurewebsites.net analytiikka.ahtp.fi occhat.elisa.fi stat.traficom.fi stat.viestintavirasto.fi 10.250.193.20 'nonce-282aa7c6-b314-4d56-b6b0-e9d938a42199'; img-src 'self' data: *.viestintavirasto.fi *.traficom.fi *.ficora.fi trafi.maps.arcgis.com trafi2.stat.fi keha-matomo-sdg-qa-qa.azurewebsites.net analytiikka.ahtp.fi www.youtube.com youtube-nocookie.com *.youtube-nocookie.com registry.qadomain.fi registry.domain.fi www.arcgis.com autokalkulaattori.fi fiho.fi www.epressi.com dreambroker.com www.dreambroker.com app.powerbi.com occhat.elisa.fi; style-src 'self' dnstest2.ficora.fi dnstest.traficom.fi occhat.elisa.fi 'nonce-282aa7c6-b314-4d56-b6b0-e9d938a42199'; font-src 'self' occhat.elisa.fi; object-src 'self' data:; base-uri 'self'; frame-src 'self' *.viestintavirasto.fi *.traficom.fi *.ficora.fi trafi.maps.arcgis.com trafi2.stat.fi keha-matomo-sdg-qa-qa.azurewebsites.net analytiikka.ahtp.fi www.youtube.com youtube-nocookie.com *.youtube-nocookie.com registry.qadomain.fi registry.domain.fi www.arcgis.com autokalkulaattori.fi fiho.fi www.epressi.com dreambroker.com www.dreambroker.com app.powerbi.com occhat.elisa.fi; connect-src 'self' wss://occhat.elisa.fi https://occhat.elisa.fi https://stat.viestintavirasto.fi https://stat.traficom.fi; form-action 'self' 3 default-src * data: blob:;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com https://static.hotjar.com;frame-src 'self' https://*.mhcache.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://vars.hotjar.com https://*.facebook.com https://*.googleapis.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://www.zenaps.com;script-src 'unsafe-inline' blob: data: 'self' https://*.myheritage.com https://*.mhcache.com https://cdn.trackjs.com https://tpc.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.googletagmanager.com https://connect.facebook.net https://bat.bing.com https://www.googleadservices.com https://*.google-analytics.com https://www.gstatic.com https://*.googleapis.com https://js-agent.newrelic.com https://*.nr-data.net https://*.mk-sense.com https://code.jquery.com https://*.hotjar.com https://www.dwin1.com https://www.zenaps.com https://ad.zanox.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://tagmanager.google.com https://optanon.blob.core.windows.net;connect-src data: 'self' https://*.myheritage.com https://*.mhcache.com https://www.google-analytics.com https://adservice.google.com https://*.nr-data.net https://sentry.io https://capture.trackjs.com https://*.bing.com https://*.facebook.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io:* https://*.doubleclick.net https://*.mk-sense.com https://privacyportal-eu.onetrust.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com 3 : frame-ancestors "none" 3 style-src 'self' 'unsafe-inline' use.typekit.net fonts.googleapis.com cdnjs.cloudflare.com tagmanager.google.com config1.veinteractive.com veinteractive.com cookiehub.net use.fontawesome.com; font-src 'self' *.typekit.net fonts.gstatic.com use.fontawesome.com data:; report-uri /report-csp-violation 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: *.addthis.com assets.wogaa.sg www.google-analytics.com ajax.googleapis.com www.googletagmanager.com; object-src 'none'; 3 frame-ancestors 'self' groupebpce.com *.groupebpce.com; 3 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 3 img-src 'self' data:; 3 default-src 'self' multibanner.net *.multibanner.net redclick.ru *.redclick.ru my.pusk.ua adlabs-mobile.ru *.adlabs-mobile.ru clickio.com *.clickio.com adlabs.ru *.adlabs.ru adlabsnetworks.com *.adlabsnetworks.com adlabsnetworks.ru googleapis.com googletagmanager.com gstatic.com *.google-analytics.com clickio.mgr.consensu.org luxup.ru luxadv.com luxupcdna.com luxupcdnb.com luxupcdnc.com luxupadva.com luxupadvb.com luxupadvc.com luxup2.ru hubspot.com js.hs-scripts.com js.hscollectedforms.net luxcdn.com fonts.gstatic.com *.online.tableau.com *.luxup.ru *.tipalti.com *.googleapis.com www.google.com www.gstatic.com datastudio.google.com *.dev.luxup.ru *.adlabs-retail.ru adlabs-retail.ru www.googleadservices.com 'unsafe-inline' 'unsafe-eval' 3 frame-ancestors https://*.smartrecruiters.com 3 frame-ancestors DENY 3 default-src 'self'; script-src 'self' blob: https://assets.dcube.cloud https://*.wogaa.sg https://assets.adobedtm.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://va.ecitizen.gov.sg https://*.cloudfront.net https://printjs-4de6.kxcdn.com https://unpkg.com https://wogadobeanalytics.sc.omtrdc.net https://connect.facebook.net https://www.googletagmanager.com https://*.licdn.com; object-src 'self'; style-src 'self' https://fonts.googleapis.com/ https://*.cloudfront.net https://va.ecitizen.gov.sg https://*.wogaa.sg https://cdnjs.cloudflare.com https://datagovsg.github.io 'unsafe-inline'; img-src *; media-src *; frame-src https://form.gov.sg/ https://wogaa.demdex.net/ https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://www.google.com https://checkfirst.gov.sg https://www.checkfirst.gov.sg https://docs.google.com; frame-ancestors 'none'; font-src * data:; connect-src 'self' https://dpm.demdex.net https://www.google-analytics.com https://stats.g.doubleclick.net https://*.wogaa.sg https://va.ecitizen.gov.sg https://ifaqs.flexanswer.com https://*.cloudfront.net https://fonts.googleapis.com https://cdnjs.cloudflare.com https://wogadobeanalytics.sc.omtrdc.net https://data.gov.sg https://api.isomer.gov.sg; 3 policy-uri /'none' 3 frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: http: https: https://api.exponea.com https://www.googletagmanager.com https://www.google-analytics.com https://libs.de.coremetrics.com https://tmscdn.de.coremetrics.com https://20779843p.rfihub.com https://analytics-static.ugc.bazaarvoice.com https://api.sovendus.com https://api.trustedshops.com https://apps-stg.nexus.bazaarvoice.com https://apps.nexus.bazaarvoice.com https://appsapi.veinteractive.com https://ariane.abtasty.com https://bat.bing.com https://benefits.sovendus.com https://config1.veinteractive.com https://cookiee1.veinteractive.com https://datacollect6.abtasty.com https://dcinfos-cache.abtasty.com https://dcinfos.abtasty.com https://display-stg.ugc.bazaarvoice.com https://display.ugc.bazaarvoice.com https://drs2.veinteractive.com https://elk.vhwrz.net https://googleads.g.doubleclick.net https://images.baby-walz.at https://images.baby-walz.ch https://images.baby-walz.de https://insitez.blob.core.windows.net https://live.adyen.com https://magpie-static.ugc.bazaarvoice.com https://maps.googleapis.com https://maps.gstatic.com https://meya.ai https://network-eu-stg.bazaarvoice.com https://network.bazaarvoice.com https://rum.vhwrz.net https://s.kelkoogroup.net https://s.kk-resources.com https://s.ytimg.com https://s3.amazonaws.com https://sessionapi.veinteractive.com https://shops-si.trustedshops.com https://stg.api.bazaarvoice.com https://t13.intelliad.de https://t23.intelliad.de https://test.adyen.com https://trustbadge.api.etrusted.com https://try.abtasty.com https://widgets.trustedshops.com https://www.awin1.com https://www.billiger.de https://www.dwin1.com https://www.econda-monitor.de https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.sovendus.com; report-uri /walz-webservices/csp-report-collector 3 default-src * 'unsafe-inline' 'unsafe-eval'; font-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; report-uri /csp/reporting/add; 3 default-src 'self'; connect-src *; font-src *; frame-src *; img-src * data: blob:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 3 default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src * 3 frame-ancestors https://100jahre.caritas-stpoelten.at/ https://abrakadabra.caritas-tirol.at/ https://abz-wielandgasse.caritas-steiermark.at/ https://agkom.caritas.at/ https://aguk.caritas.at/ https://agyoungcaritas.caritas.at/ https://www.caritas-stadtteilarbeit.at/ https://freiwillige.caritas-wien.at/ https://fs-grabenstrasse.caritas-steiermark.at/ https://spenden.helfen.at/ https://hlw.caritas-kaernten.at/ https://intern.sob-linz.at/ https://jahresbericht.caritas-stpoelten.at/ https://la-rottenmann.caritas-steiermark.at/ https://seegasse.caritas-wien.at/ https://sob.caritas-kaernten.at/ https://sob.caritas-wien.at/ https://test04.caritas.at/ https://test11.caritas.at/ https://test13.caritas.at/ https://test20.caritas.at/ https://vorlagen.caritas.at/ https://wirkungsbericht.caritas-burgenland.at/ https://wirkungsbericht.caritas-salzburg.at/ https://wirkungsbericht.caritas-wien.at/ https://www.caritas.at/ https://www.caritas-austria.at/ https://www.caritas-bigs.at/ https://www.caritas-bildungszentrum.at/ https://www.caritas-burgenland.at/ https://www.caritas-commit.at/ https://www.caritas-foundation.at/ https://www.caritas-jobs.at/ https://www.caritas-kaernten.at/ https://www.caritas-leo.at/ https://www.caritas-linz.at/ https://www.caritas-ooe.at/ https://www.caritas-pflege.at/ https://www.caritas-rundumbetreut.at https://www.caritas-salzburg.at/ https://www-caritas-salzburg-at.caritas.host https://www.caritas-schulen.at/ https://www.caritas-steiermark.at/ https://www.caritas-stiftung.at/ https://www.caritas-stpoelten.at/ https://www.caritas-tirol.at/ https://www.caritas-vorarlberg.at/ https://www.caritas-wien.at/ https://www.caritas-wiewirwirken.at/ https://www.caritasabend.at/ https://www.caritasakademie.at/ https://www.carla.at/ https://www.carla-vorarlberg.at/ https://www.carla-wien.at/ https://www.diesozialschule.at/ https://www.fsbwr-neustadt.ac.at/ https://www.hilfswerk-sr-emmanuelle.at/ https://www.homelessworldcup.at/ https://www.internationalerfreiwilligeneinsatz.at/ https://www.josee.at/ https://www.junges-wohnen.at/ https://www.lebensraeume-caritas.at/ https://www.neuearbeit.or.at/ https://www.obenauf.cc/ https://www.paraplue-steyr.at/ https://www.patenschaften.at/ https://www.perspektive-handel.at/ https://www.project-bera.eu/ https://www.schule-am-himmel.at/ https://www.schwangerenberatung.at/ https://www.sob-caritas.at/ https://www.sob-linz.at/ https://www.speisewagen-caritas.at/ https://www.unser-wirken.caritas-kaernten.at/ https://www.winternothilfe.at/ https://www.zeitschenken.at/ https://www.gruft.at/ https://opentalk.at/; 3 connect-src 'self' https://app.mirabelsmarketingmanager.com https://knrpc.olark.com https://m.addthis.com https://stats.g.doubleclick.net https://www.clarity.ms https://www.google-analytics.com; default-src 'self'; font-src http://* * 'unsafe-inline' 'self' data: https://fonts.gstatic.com https://static.olark.com; frame-src http://* 'unsafe-inline' 'self' * https://s7.addthis.com https://static.olark.com; img-src 'self' * data: https://api.emailsnow.info https://d3i8stfkbkv3x3.cloudfront.net https://log.olark.com https://www.google-analytics.com https://www.google.com; manifest-src 'self'; media-src 'self' https://static.olark.com; object-src 'none'; script-src http://* 'unsafe-inline' 'unsafe-eval' 'self' https://d1vg5xiq7qffdj.cloudfront.net/fp2.min.js https://d3i8stfkbkv3x3.cloudfront.net/wp-content/uploads/hummingbird-assets/082ec6f9a8b7bdc68642115e704926d0.js https://knrpc.olark.com/nrpc/p https://m.addthis.com/live/red_lojson/300lo.json https://s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js https://static.olark.com/jsclient/app.js https://v1.addthisedge.com/live/boost/ra-598c485f12cedd84/_ate.track.config_resp https://www.clarity.ms/scus/s/0.6.4/clarity.js https://www.mirabelanalytics.com/stgwap/lnktrk.js; style-src http://* * 'unsafe-inline' 'report-sample' 'self' https://d3i8stfkbkv3x3.cloudfront.net https://fonts.googleapis.com https://static.olark.com; worker-src 'none'; base-uri ; 3 frame-ancestors 'self' https://login.collector.se/ https://secure.collector.se/ 3 default-src 'none'; font-src 'self' https://use.fontawesome.com https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vimeo.com/api/v2/video https://*.vimeo.com https://*.zorgvoorbeter.nl https://*.kennispleingehandicaptensector.nl https://apps.elfsight.com https://*.vo.msecnd.net https://www.googletagmanager.com https://tagmanager.google.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com https://code.jquery.com https://*.blueconic.net https://*.hotjar.com https://*.hotjar.io https://extend.vimeocdn.com https://www.google-analytics.com https://js.driftt.com https://connect.facebook.net https://www.youtube.com https://*.ytimg.com https://*.bizographics.com https://*.linkedin.com https://*.licdn.com; connect-src 'self' https://vimeo.com https://*.vimeo.com https://dc.services.visualstudio.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.blueconic.net https://api.ipify.org https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; img-src 'self' https://i.vimeocdn.com https://img.youtube.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.vilans.nl https://*.blueconic.net https://*.linkedin.com data:; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://use.fontawesome.com https://*.blueconic.net; frame-src 'self' https://w.soundcloud.com https://www.youtube.com https://player.vimeo.com https://www.google.com https://www.facebook.com https://js.driftt.com https://*.hotjar.com https://www.veiligheid.nl; frame-ancestors 'self'; object-src 'self'; 3 frame-ancestors https://planet-imex.co.uk/ https://planet-imex.com/ https://planetimex.co.uk/ https://planetimex.com/ https://www.imexexhibitions.com/ https://www.imex-frankfurt.com/ https://de.imex-frankfurt.com/ https://www.imexamerica.com/ https://www.stage.imex.cti.digital/ http://america.stage.imex.cti.digital/ http://frankfurt.stage.imex.cti.digital/ http://de-frankfurt.stage.imex.cti.digital/ https://www.reactive.imex.cti.digital/ https://frankfurt.reactive.imex.cti.digital/ https://de-frankfurt.reactive.imex.cti.digital/ https://america.reactive.imex.cti.digital/ https://www.qa.imex.cti.digital/ http://america.qa.imex.cti.digital/ http://frankfurt.qa.imex.cti.digital/ http://de-frankfurt.qa.imex.cti.digital/ https://www.imex.ctidev/ https://frankfurt.imex.ctidev/ https://de.frankfurt.imex.ctidev/ https://america.imex.ctidev/; 3 default-src * blob: data: 'unsafe-eval' 'unsafe-inline'; 3 default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src data: *; font-src data: *; media-src * blob:; object-src https://jay-marketplace.azureedge.net/; worker-src 'none'; child-src 'self'; frame-src *; frame-ancestors 'self'; form-action 'self' forms.hsforms.com *.tfaforms.com *.eloqua.com; block-all-mixed-content; upgrade-insecure-requests; 3 frame-ancestors *.adobe.com 3 upgrade-insecure-requests; frame-ancestors 'self'; default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.googleapis.com *.google.com *.google.com.au *.google.ca *.gstatic.com *.google-analytics.com *.googleadservices.com *.pingdom.net js.hs-analytics.net *.cloudfront.net js-agent.newrelic.com *.doubleclick.net *.nr-data.net *.mastersoftgroup.com *.quantserve.com *.idmanagedsolutions.com *.addthis.com *.xg4ken.com *.lightboxcdn.com *.brightcove.net *.youtube.com player.vimeo.com *.cloudflare.com *.onmodulus.net *.bootstrapcdn.com *.tradingroom.com.au *.services.visualstudio.com *.azurewebsites.net *.windows.net *.msecnd.net *.bing.com is-ff-cdn-www.azureedge.net is-gb-cdn-www.azureedge.net is-rs-cdn-www.azureedge.net is-pz-cdn-www.azureedge.net is-ct-cdn-www.azureedge.net is-jw-cdn-www.azureedge.net is-develop-cdn-www.azureedge.net is-uat-cdn-www.azureedge.net is-master-stg-cdn-www.azureedge.net *.investsmart.com.au *.intelligentinvestor.com.au *.eurekareport.com.au *.yourshare.com.au image.mail.eurekareport.com.au ii-uploads.s3.amazonaws.com *.intercom.io wss://*.intercom.io *.intercom.com *.intercomcdn.com *.intercomassets.com dnn506yrbagrg.cloudfront.net/pages/scripts/0018/4016.js *.crazyegg.com s3.amazonaws.com/trk.cetrk.com/ gtrk.s3.amazonaws.com *.disqus.com disqus.com *.disquscdn *.disquscdn.com *.typekit.net pub.s7.exacttarget.com cl.s7.exct.net *.coveritlive.com *.segment.com *.segment.io *.kissmetrics.com https://pixel.tapad.com *.adsrvr.org *.quantcount.com *.dianomi.com *.jquery.com cdn.jsdelivr.net *.highcharts.com *.mypropertytools.com.au *.static.omnilife.com.au static.omnilife.com.au outlook.office365.com placehold.it placeholdit.imgix.net fakeimg.pl fullstory.com *.fullstory.com *.facebook.net *.facebook.com http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com *.hotjar.io *.mixpanel.com *.mxpnl.com *.bugherd.com *.bugsnag.com https://omny.fm/ marketo.net *.marketo.net *.mktoresp.com app-sn04.marketo.com *.dacast.com *.viglink.com *.pusher.com ws://*.pusherapp.com wss://*.pusherapp.com *.bloomberg.com *.afr.com *.2gb.com *.forbes.com *.smh.com.au *.economist.com *.asx.com.au *.abc.net.au *.skynews.com.au *.theaustralian.com.au *.seniorsnews.com.au *.appcues.com *.firebaseio.com *.firebase.com appcues-quickstart.s3-us-west-2.amazonaws.com *.cloudinary.com *.appcues.net appcues-content-api-prod.herokuapp.com nh436jpc4i.execute-api.us-west-2.amazonaws.com 104cl9psz3.execute-api.us-west-2.amazonaws.com wss://api.appcues.net wss://*.firebaseio.com cdn.jsdelivr.net calendly.com *.calendly.com https://portal.ttds.com.au/ http://thetermdepositshop.com.au/ *.inspectlet.com https://*.buzzsprout.com www.buzzsprout.com *.imgix.net vimeocdn.com *.vimeocdn.com vimeo.com *.vimeo.com *.zoho.com abr.business.gov.au https://www.googleoptimize.com *.rlets.com *.gannettdigital.com *.reachlocalservices.com 3 base-uri 'self'; connect-src ws: wss: *; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; form-action 'self'; frame-ancestors 'self' https://gofile.me http://gofile.me; frame-src 'self' data: blob: https://*.synology.com https://www.synology.cn/; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com; media-src 'self' data: about:; script-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://*.google.com https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com; 3 object-src 'self'; base-uri 'self'; frame-ancestors 'self'; default-src blob: https://*.vacaturesonline.nl https://*.ictergezocht.nl https://*.werkzoeken.nl https://*.technicus.nl https://vars.hotjar.com https://accounts.google.com https://www.youtube.com https://www.facebook.com https://docs.google.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com https://*.werkzoeken.nl https://*.technicus.nl https://*.vacaturesonline.nl https://*.ictergezocht.nl; script-src 'self' 'unsafe-inline' blob: https://bat.bing.com https://ajax.cloudflare.com https://*.google.com https://*.google.nl https://*.hotjar.com https://*.licdn.com https://*.werkzoeken.nl https://*.technicus.nl https://*.vacaturesonline.nl https://*.ictergezocht.nl https://*.zopim.com https://*.zdassets.com https://www.googletagmanager.com https://www.googleadservices.com https://maps.googleapis.com https://*.doubleclick.net https://*.twitter.com https://*.ads-twitter.com https://*.linkedin.com https://www.gstatic.com https://js.live.net https://www.google-analytics.com https://sjs.bizographics.com https://connect.facebook.net https://www.dropbox.com https://apis.google.com; connect-src 'self' https://api.maptiler.com https://*.microsoft.com https://*.hotjar.io https://*.hotjar.com https://www.facebook.com https://*.doubleclick.net https://*.zdassets.com https://www.google-analytics.com wss://*.hotjar.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io; frame-src 'self' https://*.google.com/ https://www.youtube.com https://vars.hotjar.com; font-src 'self' https://*.werkzoeken.nl https://*.vacaturesonline.nl https://*.technicus.nl https://*.ictergezocht.nl https://*.hotjar.com https://fonts.gstatic.com https://*.zopim.com; img-src 'self' blob: data: https://bat.bing.com https://script.hotjar.com https://*.linkedin.com https://*.werkzoeken.nl https://*.technicus.nl https://v2assets.zopim.io https://*.vacaturesonline.nl https://*.ictergezocht.nl https://maps.gstatic.com https://*.zopim.com https://maps.googleapis.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.nl https://*.doubleclick.net; 3 frame-ancestors 'self' https://www.miracomohacerlo.com; 3 default-src * data: filesystem: about: blob: ws: wss:; script-src * data: filesystem: about: blob: ws: wss: 'unsafe-eval' 'unsafe-inline'; style-src * data: filesystem: about: blob: ws: wss: 'unsafe-inline'; frame-ancestors 'self' 3 default-src 'self' static.mycity.travel static.www.villars-diablerets.ch * 'unsafe-inline' 'unsafe-eval' data: blob:; upgrade-insecure-requests; frame-ancestors: 'self' https://static.mycity.travel *; 3 default-src https: ws: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://affiliate.fwd.com.ph https://portal.fwd.com.vn https://affiliate.ifwd.co.id https://www.fwd.com.my; 3 frame-ancestors 'self' *.sciquest.com *.cummins.com *.ariba.com http://search.roccommerce.com http://dev-search.roccommerce.net 3 connect-src 'self' https: http://localhost:3035 ws://localhost:3035 3 default-src 'self' https:;object-src 'none';img-src 'self' https: data: blob:;font-src 'self' https: data:;style-src 'self' https: 'unsafe-inline';script-src https: 'self' 'unsafe-inline' 'unsafe-eval' blob:; frame-ancestors 'self' https://dev-nomadfoods.cs89.force.com https://contactus.birdseye.co.uk https://nomad-foods.force.com https://nomadfoods.force.com https://nomadfoods.my.salesforce.com https://nomad-foods.secure.force.com; child-src 'self' https: blob: 3 default-src 'self'; frame-src 'self' https://revain.org; block-all-mixed-content; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.egoid.me https://*.zopim.com https://*.geetest.com https://*.qbox.me https://*.wx.qq.com https://*.bhex.com https://*.hcdncn.com https://*.bhfastime.com https://*.bit-e.com https://www.googletagmanager.com https://hm.baidu.com https://www.google-analytics.com https://static.zdassets.com https://*.hbtc.ai https://*.hbtc.fm https://*.hbtc.live https://*.hbtc.today https://*.bluehelix.com; connect-src 'self' https://*.hcdncn.com https://*.bhfastime.com https://api.geetest.com wss://*.zopim.com https://ekr.zdassets.com https://*.zendesk.com https://www.google-analytics.com https://*.hbtc.ai wss://*.hbtc.ai https://*.hbtc.fm wss://*.hbtc.fm https://*.bhex.sg wss://*.bhex.sg https://*.bhex.co wss://*.bhex.co https://*.bhex.cc wss://*.bhex.cc https://*.hbtc.sg wss://*.hbtc.sg https://*.hbtc.live wss://*.hbtc.live https://*.hbtc.today wss://*.hbtc.today https://*.bluehelix.com wss://*.bluehelix.com https://*.bhex.com wss://*.bhex.com https://*.hbtc.com wss://*.hbtc.com https://*.hbtc.co https://revain.org wss://*.hbtc.co https://*.bit-e.com wss://*.bit-e.com https://*.bhex.us wss://*.bhex.us https://*.bhex.cn wss://*.bhex.cn https://*.gobhex.com wss://*.gobhex.com https://*.bhexb.com wss://*.bhexb.com https://*.cynopsis.co; img-src * data: blob:; object-src 'none'; base-uri 'self'; style-src 'self' https://static.geetest.com 'unsafe-inline' blob: https://*.bhex.com https://*.hcdncn.com https://*.bhfastime.com https://*.bit-e.com; font-src * data: blob:; manifest-src 'self' https://*.hcdncn.com https://*.bhfastime.com; worker-src 'self' blob: https://*.bhex.cc https://*.bhexb.com; media-src 'self' https://static.zdassets.com https://*.hcdncn.com https://*.bhfastime.com 3 default-src https: 'unsafe-inline' 'unsafe-eval'; 3 report-uri /csp-hotline.php; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://stackpath.bootstrapcdn.com https://cdn.datatables.net *.mihtool.com https://cdnjs.cloudflare.com https://yastatic.net yastatic.net https://*.yastatic.net *.slus.name https://*.slus.name:3000 *.yastatic.net *.mail.com https://*.gstatic.com *.gstatic.com https://*.google.com *.google.com vk.com http://tomsk.effad.ru *.effad.ru effad.ru *.me-talk.ru disgusting.ru https://api-maps.yandex.ru *.yandex.net yandex.st *.yadro.ru *.yandex.ru *.ok.ru *.rf-sp.ru https://rf-sp.ru *.tbex.ru *.google-analytics.com *.googleapis.com *.jivosite.com *.jquery.com *.gismeteo.ru *.siteheart.com 38mama.ru me-talk.ru top-fwz1.mail.ru st.top100.ru https://jsconsole.com https://d3js.org; style-src 'self' 'unsafe-inline' *.rf-sp.ru 38mama.ru *.chathelp.ru *.slus.name https://cdnjs.cloudflare.com https://*.gstatic.com *.slus.name:3000 https://cdn.datatables.net https://stackpath.bootstrapcdn.com https://www.google.com https://fonts.googleapis.com; 3 upgrade-insecure-requests; default-src 'self' *.argeweb.nl https://in.hotjar.com; style-src 'self' *.argeweb.nl 'unsafe-inline' https://code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css https://libraries.hund.io/ https://app.vwo.com/ https://fonts.googleapis.com https://*.google.com; img-src 'self' *.argeweb.nl data: https: https://jwpltx.com https://www.facebook.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.googleadservices.com https://*.google.nl https://*.adnxs.com https://*.msn.com https://*.doubleclick.net https://ads.yahoo.com https://www.google-analytics.com https://*.openx.net https://*.bidswitch.net; script-src 'self' *.argeweb.nl data: 'unsafe-inline' 'unsafe-eval' https://code.jquery.com/jquery-1.12.4.js https://code.jquery.com/ui/1.12.1/jquery-ui.js https://libraries.hund.io/ https://heatmap.visualwebsiteoptimizer.com/ https://app.vwo.com/ https://dev.visualwebsiteoptimizer.com/ https://api.livechatinc.com/ https://cdn.livechatinc.com/ https://secure.livechatinc.com/ https://www.clickcease.com/monitor/stat.js https://snap.licdn.com https://embed.typeform.com https://www.chartjs.org https://www.google-analytics.com https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://www.linkedin.com/px/* https://px.ads.linkedin.com/ https://sjs.bizographics.com/insight.min.js https://script.hotjar.com https://*.jwpcdn.com https://static.hotjar.com https://www.google-analytics.com https://connect.facebook.net https://*.openx.net https://*.bidswitch.net https://www.googleadservices.com https://www.googletagmanager.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://flex.msn.com https://static.mailplus.nl https://m7.mailplus.nl https://bat.bing.com https://api.autopilothq.com https://apenterprise.io https://googleads.g.doubleclick.net; frame-src 'self' *.argeweb.nl https://app.vwo.com/ https://secure.livechatinc.com/ https://form.typeform.com/ https://awps01.argewebhosting.nl https://apenterprise.io https://www.youtube.com https://argeweb.typeform.com https://vars.hotjar.com https://*.google.com https://*.facebook.com https://*.doubleclick.net; font-src 'self' data: *.argeweb.nl fonts.gstatic.com; child-src 'self' *.argeweb.nl https://*.google.com; connect-src 'self' *.argeweb.nl argeweb.netwerkstatus.nl https://monitor.clickcease.com/ https://api.livechatinc.com/ https://ws9.hotjar.com/ wss://ws9.hotjar.com/ https://ws8.hotjar.com/ wss://ws8.hotjar.com/ https://awps01.argewebhosting.nl/netwerkstatus/test.php https://www.google-analytics.com https://stats.g.doubleclick.net https://app.convertflow.co https://ws2.hotjar.com wss://ws10.hotjar.com wss://ws3.hotjar.com wss://ws2.hotjar.com https://vc.hotjar.io wss://ws1.hotjar.com https://in.hotjar.com https://api.autopilothq.com https://apenterprise.io; form-action https:; report-uri /debug/csp; 3 default-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval'; img-src data: https:; report-uri https://kilian.report-uri.io/r/default/csp/enforce 3 default-src https: http: data: 'unsafe-inline' 'unsafe-eval'; connect-src https: http: data: 3 frame-ancestors 'self' app.storyblok.com *.omappapi.com *.optinmonster.com ; 3 default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss:; frame-ancestors 'self' nvidia.lookbookhq.com nvidia.pathfactory.com resources.nvidia.com www.nvidia.com www.nvidia.cn preview.nvidia.com; report-uri https://nvidia.report-uri.com/r/d/csp/wizard 3 frame-ancestors 'self' https://www.facebook.com 3 frame-ancestors 'self'; report-uri /report-csp-violation; upgrade-insecure-requests 3 frame-ancestors 'self' https://www.googletagmanager.com 3 frame-ancestors 'self' https://*.biahosted.com https://*.paymentiq.io https://*.safecharge.com 3 default-src * 'unsafe-inline' 'unsafe-eval' data: ;frame-ancestors 'self' 3 default-src 'self' 'unsafe-eval' https://rstts-as.readspeaker.com https://cdn1.readspeaker.com https://app-as.readspeaker.com wss://directline.botframework.com https://comms.omnichannelengagementhub.com https://adda-chatbot-prod.azurewebsites.net https://orgbb3c15ea-crm15.omnichannelengagementhub.com https://mindrocketsinc.com https://arcgis.sdi.abudhabi.ae https://js.arcgis.com blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tamm.abudhabi https://server.arcgisonline.com https://stackpath.bootstrapcdn.com https://api.abudhabi.ae http://w3.org https://httpbin.org https://directline.botframework.com https://www.google.com https://es.adpolice.gov.ae https://rstts-as.readspeaker.com https://cdn1.readspeaker.com https://app-as.readspeaker.com wss://directline.botframework.com https://comms.omnichannelengagementhub.com https://mindrocketsinc.com https://player.vimeo.com https://www.tamm.abudhabi https://js.arcgis.com https://recaptcha.net https://ssl.google-analytics.com https://translate.google.com https://translate.googleapis.com https://www.gstatic.com https://www.youtube.com https://s.ytimg.com https://adda-chatbot-prod.azurewebsites.net https://orgbb3c15ea-crm15.omnichannelengagementhub.com https://webchatic3.blob.core.windows.net https://addastorageaccountuat.blob.core.windows.net https://addadevstorage.blob.core.windows.net https://ocsdk-prod.azureedge.net https://sandboxadmin.prioticket.com; object-src 'self'; img-src 'self' data: *; media-src *; style-src 'self' 'unsafe-inline' https://cdn1.readspeaker.com https://rstts-as.readspeaker.com https://app-as.readspeaker.com https://mindrocketsapis.com https://mindrocketsinc.com https://js.arcgis.com https://translate.googleapis.com https://fonts.googleapis.com; frame-src https://schdmngr.tamm.abudhabi https://recaptcha.net https://rstts-as.readspeaker.com https://cdn1.readspeaker.com https://app-as.readspeaker.com https://mindrocketsapis.com https://mindrocketsinc.com https://www.youtube.com https://www.youtube-nocookie.com https://www.instagram.com https://www.google.com https://es.adpolice.gov.ae https://directline.botframework.com https://cdn1.readspeaker.com https://rstts-as.readspeaker.com https://orgbb3c15ea-crm15.omnichannelengagementhub.com https://webchatic3.blob.core.windows.net https://addastorageaccountuat.blob.core.windows.net https://addadevstorage.blob.core.windows.net https://ocsdk-prod.azureedge.net https://sandboxadmin.prioticket.com https://app-as.readspeaker.com https://mindrocketsinc.com https://player.vimeo.com https://comms.omnichannelengagementhub.com https://rstts-as.readspeaker.com https://www.gstatic.com https://cdn1.readspeaker.com https://app-as.readspeaker.com https://mindrocketsapis.com https://mindrocketsinc.com https://static.arcgis.com https://services.arcgisonline.com https://translate.googleapis.com https://geocode.arcgis.com https://arcgis.sdi.abudhabi.ae https://js.arcgis.com https://adda-chatbot-prod.azurewebsites.net https://orgbb3c15ea-crm15.omnichannelengagementhub.com https://webchatic3.blob.core.windows.net https://addastorageaccountuat.blob.core.windows.net https://addadevstorage.blob.core.windows.net https://ocsdk-prod.azureedge.net https://sandboxadmin.prioticket.com; font-src 'self' https://cdn1.readspeaker.com https://mindrocketsapis.com https://mindrocketsinc.com https://adda-chatbot-prod.azurewebsites.net https://fonts.gstatic.com data: *; worker-src 'self' https://www.tamm.abudhabi blob:; connect-src 'self' wss://directline.botframework.com https://comms.omnichannelengagementhub.com https://rstts-as.readspeaker.com https://www.gstatic.com https://cdn1.readspeaker.com https://app-as.readspeaker.com https://mindrocketsapis.com https://mindrocketsinc.com https://static.arcgis.com https://services.arcgisonline.com https://translate.googleapis.com https://geocode.arcgis.com https://arcgis.sdi.abudhabi.ae https://js.arcgis.com https://adda-chatbot-prod.azurewebsites.net https://orgbb3c15ea-crm15.omnichannelengagementhub.com https://webchatic3.blob.core.windows.net https://addastorageaccountuat.blob.core.windows.net https://addadevstorage.blob.core.windows.net https://ocsdk-prod.azureedge.net https://sandboxadmin.prioticket.com https:; 3 default-src 'self'; connect-src 'self'; img-src 'self' data: 'unsafe-eval' ; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; font-src 'self' data: 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com/ https://policy.privacyandcookies.eu/ https://players.brightcove.net https: blob:; object-src 'none'; base-uri 'none'; frame-src 'self' https://www.youtube-nocookie.com https://player.quadia.net https://players.brightcove.net; frame-ancestors 'self'; img-src 'self' https://www.msd-animal-health.com https://secure.gravatar.com https://www.google-analytics.com/ https://*.brightcove.com https://cdn.cookielaw.org https://policy.privacyandcookies.eu data: ; media-src 'self' blob:; style-src 'self' 'unsafe-inline'; upgrade-insecure-requests; default-src https: data: 'self' ; trusted-types default; 3 frame-ancestors 'self' *.epublishmerck.com facebook.com https://*hotjar.com*; 3 default-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.bunrattycastle.ie https://www.craggaunowen.ie https://www.dunguairecastle.com https://www.gpowitnesshistory.ie https://www.kingjohnscastle.com https://www.knappoguecastle.ie https://www.malahidecastleandgardens.ie https://www.newbridgehouseandfarm.com https://www.shannonheritage.com https://www.modelrailwaymuseum.ie data: https://*.facebook.net https://*.facebook.com https://*.hotjar.com https://*.bing.com https://*.typekit.net https://stats.g.doubleclick.net https://translate.google.com https://translate.googleapis.com https://www.google-analytics.com https://www.google.co.uk https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://dev.visualwebsiteoptimizer.com https://*.crazyegg.com https://*.youtube.com https://*.youtu.be https://youtu.be https://cookie-cdn.cookiepro.com https://*.instagram.com https://*.cdninstagram.com; 3 default-src 'self' static.mycity.travel static.j3l.ch * 'unsafe-inline' 'unsafe-eval' data: blob:; upgrade-insecure-requests; frame-ancestors: 'self' https://static.mycity.travel *; 3 frame-ancestors 'self' https://gattaca-helix.my.salesforce.com/ 3 default-src https: 'unsafe-eval' 'unsafe-inline'; font-src https: data:; img-src https: data: 3 default-src 'unsafe-inline' 'unsafe-eval' data: blob: https:; frame-ancestors 'self' 3 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; 3 upgrade-insecure-requests; connect-src 'self' *.siteimprove.com https://vv.riigikantselei.ee https://docs.google.com https://riigikantselei.ee https://www.riigikantselei.ee; font-src 'self' data: https://fonts.gstatic.com https://vv.riigikantselei.ee https://docs.google.com https://riigikantselei.ee https://www.riigikantselei.ee; frame-src 'self' https://*.rocket.chat https://static.addtoany.com https://www.google.com https://www.youtube.com https://*.vimeo.com https://*.siteimprove.com https://vv.riigikantselei.ee https://docs.google.com https://riigikantselei.ee https://www.riigikantselei.ee; img-src 'self' data: https://www.google-analytics.com *.openstreetmap.org https://i.ytimg.com https://pbs.twimg.com https://vv.riigikantselei.ee https://docs.google.com https://riigikantselei.ee https://www.riigikantselei.ee *.fbcdn.net *.cdninstagram.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.rocket.chat https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.siteimprove.net/cms/overlay.js blob: https://vv.riigikantselei.ee https://docs.google.com https://riigikantselei.ee https://www.riigikantselei.ee cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://static.addtoany.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' https://*.rocket.chat https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.siteimprove.net/cms/overlay.js https://vv.riigikantselei.ee https://riigikantselei.ee https://www.riigikantselei.ee cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://static.addtoany.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://vv.riigikantselei.ee https://docs.google.com https://vv.riigikantselei.ee/et/kontakt https://riigikantselei.ee https://www.riigikantselei.ee cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://use.fontawesome.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' https://www.gstatic.com https://vv.riigikantselei.ee https://docs.google.com https://riigikantselei.ee https://www.riigikantselei.ee cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://use.fontawesome.com 'unsafe-inline'; frame-ancestors none; report-uri https://riigikantselei.ee/report-uri/enforce 3 default-src https: data: 'unsafe-eval' 'unsafe-inline'; upgrade-insecure-requests 3 frame-ancestors 'self' https://*.epublishmerck.com https://*.epublishorganon.com https://*.facebook.com https://sandbox.oncologynation.com http://sandbox.pathologistconnect.com https://pathologistconnect.com https://*merck-develop.go-vip.co* https://*merck-preprod.go-vip.co*; 3 base-uri 'self'; img-src * data: 'unsafe-inline'; default-src data: * 'unsafe-inline'; frame-ancestors 'self'; manifest-src 'self'; media-src *.readspeaker.com *.speechstream.net 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; object-src 'self' 3 default-src 'self' https://*.googlesyndication.com; script-src 'self' https://ajax.googleapis.com https://adservice.google.co.uk https://adservice.google.com https://www.googleadservices.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://survey.g.doubleclick.net https://ajax.googleapis.com https://www.googletagmanager.com https://cdn.syndication.twimg.com https://platform.twitter.com https://cdn.mouseflow.com https://sharecdn.social9.com https://share.social9.com 'sha256-Sy5BM8WogOwN0VSn8zZrALBlFg46HZ/FvcrKpnv8BM8=' 'sha256-OElzM88CQhWDYfoWWuf+juOSnhhj3mrP1RBXJb48VHo=' https://cdn.intergi.com https://cdn.intergient.com https://*.moatads.com 'sha256-9134ns6L180DrEGKto0sglxUiKCGwFyVU05CghTKGJc=' https://securepubads.g.doubleclick.net https://*.googlesyndication.com https://cdn.ampproject.org https://www.googletagservices.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://platform.twitter.com https://ton.twimg.com https://sharecdn.social9.com https://sharec.social9.com https://cdn.intergi.com; font-src 'self' https://fonts.gstatic.com; img-src * data:; frame-src 'self' https://bid.g.doubleclick.net https://platform.twitter.com https://syndication.twitter.com https://youtube.com https://www.youtube.com https://cdn.intergient.com https://cdn.intergi.com https://*.googlesyndication.com; connect-src 'self' https://www.google.com https://www.google.co.uk https://stats.g.doubleclick.net https://www.google-analytics.com https://stats.g.doubleclick.net https://config.playwire.com https://securepubads.g.doubleclick.net https://*.googlesyndication.com https://kinesis.us-east-1.amazonaws.com https://adservice.google.com https://cdn.intergient.com 3 frame-ancestors 'self' https://secure.simplepart.com https://secure.cml.oeconnection.com https://portal.oeconnection.com; 3 default-src *; frame-src 'self' https: http://*.google.com http://*.facebook.com http://*.twitter.com http://*.youtube.com http://*.sharethis.com http://*.googletagmanager.com http://*.vimeo.com http://*.sharpspring.com http://*.googleadservices.com http://*.doubleclick.net http://*.wistia.com http://*.wistia.net; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; font-src * data: ; img-src * data: ; report-uri https://19jrymqg65.execute-api.us-east-1.amazonaws.com/default/dgcsp-report-uri; 3 default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: ; frame-ancestors 'self' 3 default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; worker-src data: 3 frame-ancestors 'self' my.samsonite.test.frucon.net my.samsonite.staging.frucon.net my.samsonite.com *.narvar.com narvar.com *.integrations-narvar.com 3 frame-ancestors 'self' http://acpmonitor/*; 3 frame-ancestors 'self' dashboard.myzeki.com; report-uri /report-violation 3 frame-ancestors 'self' piwik.betaalvereniging.nl; 3 child-src 'self' www.google.com player.vimeo.com s7.addthis.com www.youtube.com *.webspellchecker.net platform.twitter.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.twitter.com cdn.syndication.twimg.com www.gstatic.com www.google.com fast.fonts.net m.addthisedge.com m.addthis.com s7.addthis.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com maps.googleapis.com *.webspellchecker.net www.linkedin.com www.gstatic.com graph.facebook.com v1.addthisedge.com ; frame-src 'self' live.opentracking.co.uk www.strava.com datastudio.google.com platform.twitter.com player.vimeo.com www.google.com *.das.co.uk s7.addthis.com cdn.yoshki.com 3 default-src https: ws: wss: data: 'unsafe-inline' 'unsafe-eval' 3 default-src *; script-src * 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline'; font-src *; img-src * data: 3 default-src 'self' s3.amazonaws.com www.youtube.com csi.gstatic.com *;frame-src 'self' optimize.google.com *;worker-src 'self';connect-src 'self' *;font-src 'self' data: fonts.gstatic.com fonts.googleapis.com www.tinymce.com use.fontawesome.com;img-src 'self' 'unsafe-inline' data: blob: *;manifest-src 'self';media-src 'self' s3.amazonaws.com;object-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagservices.com www.google-analytics.com securepubads.g.doubleclick.net tpc.googlesyndication.com pagead2.googlesyndication.com 7233492.collect.igodigital.com optimize.google.com images.ahpc.us www.googletagmanager.com * blob:;style-src 'self' 'unsafe-inline' fonts.googleapis.com *;base-uri 'self' optimize.google.com;form-action 'self' *;frame-ancestors 'self' optimize.google.com;block-all-mixed-content;upgrade-insecure-requests; 3 frame-ancestors 'self' https://secure.safecharge.com; 3 default-src *; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; frame-src *; 3 frame-ancestors 'self' *.casinomodule.com *.playngonetwork.com; 3 frame-ancestors 'self' *.epublishmerck.com facebook.com; 3 frame-ancestors 'self' http://www.mobility-room.com:3000 http://mobility-room.com:3000; 3 default-src 'self' https: data: blob:; connect-src https: wss:;script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline' blob:; frame-ancestors 'self'; upgrade-insecure-requests; 3 block-all-mixed-content; report-uri /v1/csplog 3 default-src * data: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; block-all-mixed-content; report-uri https://94f62820d7c43df17e384a74a389587c.report-uri.com/r/t/csp/enforce 3 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob: ; 3 default-src https:; connect-src https: wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; frame-ancestors https:; 3 script-src * data: blob: 'unsafe-inline' 'unsafe-eval' 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' ; img-src 'self' data: ; object-src 'self' data: ; frame-src 'self' data: ; 3 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval' blob:; connect-src * 'unsafe-inline' wss:; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; 3 default-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline'; script-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline'; connect-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline'; font-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline'; img-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline'; child-src http: https: data: 'self' 'unsafe-eval' 'unsafe-inline' 3 true; upgrade-insecure-requests 3 default-src 'self' *.csiro.au; base-uri 'self'; connect-src 'self' *.csiro.au yoast.com *.google-analytics.com *.googleapis.com *.doubleclick.net vimeo.com *.youtube.com *.tableau.com *.zdassets.com *.zendesk.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: *.csiro.au *.jquery.com *.aspnetcdn.com *.googletagmanager.com *.twitter.com *.twimg.com *.instagram.com *.list-manage.com *.fontawesome.com cdn.jsdelivr.net oss.maxcdn.com *.wp.com *.w.org secure.gravatar.com *.google-analytics.com *.cloudfront.net sw.js apis.google.com *.googleapis.com cdnjs.cloudflare.com https://www.google.com *.gstatic.com *.vimeo.com *.youtube.com https://connect.facebook.net *.whooshka.com *.amazonaws.com *.tableau.com *.zdassets.com *.altmetric.com; style-src 'unsafe-inline' 'self' data: *.csiro.au *.wp.com *.w.org fonts.googleapis.com *.google-analytics.com *.twitter.com *.instagram.com secure.gravatar.com *.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com *.mailchimp.com s3.amazonaws.com *.cloudfront.net *.whooshka.com *.tableau.com; img-src 'self' data: *.csiro.au *.w.org *.fbcdn.net *.instagram.com *.vimeocdn.com *.google-analytics.com *.googleusercontent.com *.cdninstagram.com *.facebook.com *.twimg.com *.doubleclick.net *.google-analytcs.com *.twitter.com *.instagram.com *.wp.com *.w.org *.googleapis.com secure.gravatar.com *.gstatic.com *.whooshka.com *.altmetric.com *.cloudfront.net; font-src 'self' data: *.fontawesome.com *.csiro.au wordpress.com *.wp.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com; media-src 'self' *.csiro.au *.vimeo.com *.youtube.com; child-src 'self' widgets.wp.com *.kaltura.com youtube.com *.google.com jetpack.wordpress.com jbrowse-ext.csiro.au akismet.com *.twitter.com *.instagram.com *.spotify.com *.youtube.com *.tableau.com *.facebook.com *.vimeo.com *.whooshkaa.com *.mailchimp.com *.lupinexpress.org legumeinfo.org https://gbrowse-ext.bioinformatics.csiro.au; frame-ancestors 'self' *.tableau.com; form-action 'self' *.csiro.au *.google.com akismet.com *.twitter.com *.facebook.com; 3 default-src 'self' https://*.gs1.org https://cors.io https://*.cloudflare.com https://jsonp.afeld.me https://*.issuu.com https://ui.customsearch.ai; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com/x-frame-bypass https://use.typekit.net/xok1vll.js https://*.gs1.org *.googleapis.com *.gstatic.com www.googletagmanager.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://ui.customsearch.ai; style-src 'self' 'unsafe-inline' https://*.gs1.org https://fonts.gs1.org https://cloud.typography.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com https://hosteduxprod.blob.core.windows.net; font-src 'self' https://*.gs1.org fonts.gstatic.com https://fonts.gs1.org https://use.typekit.net fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data:; img-src 'self' https://shop.gs1.ch https://www.gs1.org https://*.gs1.org https://p.typekit.net https://stats.g.doubleclick.net *.google.fr *.google.ch *.google.com *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com https://hosteduxprod.blob.core.windows.net https://ui.customsearch.ai https://tse1.mm.bing.net/ https://tse2.mm.bing.net/ https://tse3.mm.bing.net/ https://tse4.mm.bing.net/ https://tse1.explicit.bing.net/ https://tse2.explicit.bing.net/ https://tse3.explicit.bing.net/ https://tse4.explicit.bing.net/; media-src 'self' data: blob:; form-action 'self' https://www.gs1.org https://ui.customsearch.ai; frame-src 'self' https://www.gs1.org https://www.youtube.com/ https://identity.gs1.ch/ https://*.issuu.com https://platform.twitter.com/ https://forms.office.com/ https://ui.customsearch.ai; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com stats.g.doubleclick.net https://ui.customsearch.ai; 3 default-src 'self'; img-src * data:; script-src * 'unsafe-inline' 'unsafe-eval'; child-src * blob:; style-src * 'unsafe-inline'; font-src * data:; frame-src *; media-src *; connect-src *; worker-src blob:; block-all-mixed-content 3 frame-ancestors 'self' facebook.com *.facebook.com 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.sanity.io www.youtube.com www.youtube-nocookie.com i.ytimg.com yt3.ggpht.com fonts.gstatic.com www.google-analytics.com www.googletagmanager.com www.gstatic.com stats.g.doubleclick.net www.google.co.uk static.hotjar.com static.ads-twitter.co mwww.facebook.com dc.ads.linkedin.com t.co vars.hotjar.com in.hotjar.com p.adsymptotic.com analytics.twitter.com cdn.jsdelivr.net d1a1ax4tcp3m3j.cloudfront.net dqm.crownpeak.com 3 frame-ancestors 'self' http://ausbildungsplatzsuche.fv-eit-bw.de/ https://www.elektro-plus.com/ https://www.elektromobilitaet.nrw.de/ 3 default-src * data: blob:; script-src blob: https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/ https://cdn.ampproject.org/rtv/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://use.fontawesome.com https://use.typekit.net; report-uri https://csp-collector.appspot.com/csp/amp 3 frame-ancestors plaid2016.nationbuilder.com 3 manifest-src 'self' https://*.ng-source.com 3 frame-ancestors 'self' http://*.tiarccms.co.uk https://*.tiarccms.co.uk; 3 default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.braintreegateway.com/ https://assets.braintreegateway.com https://api.braintreegateway.com https://code.jquery.com/ https://cdnjs.cloudflare.com/ https://cdn.ckeditor.com/ https://www.google.com/ https://ajax.googleapis.com/ https://s3-us-west-2.amazonaws.com/; style-src 'self' 'unsafe-inline' https://cdn.ckeditor.com/ https://cdnjs.cloudflare.com/ https://code.jquery.com/ https://ajax.googleapis.com/; font-src 'self'; img-src 'self' data: https://cdn.ckeditor.com/ https://code.jquery.com/ https://assets.braintreegateway.com; frame-src 'self' https://www.openstreetmap.org/ https://assets.braintreegateway.com; frame-ancestors 'self'; object-src 'self'; child-src 'self' https://assets.braintreegateway.com; connect-src 'self' https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://*.braintree-api.com https://api.sandbox.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com 3 default-src https: data: 'unsafe-eval' 'unsafe-inline'; 3 default-src 'none'; object-src 'self'; frame-src 'self' *.begabungslotse.de *.youtube.com *.youtube-nocookie.com *.vimeo.com; img-src 'self' 'unsafe-inline' *.bildung-und-begabung.de; script-src-elem 'self' 'unsafe-inline' *.bildung-und-begabung.de; script-src 'self' 'unsafe-inline' *.bildung-und-begabung.de; style-src 'self' 'unsafe-inline'; font-src 'self'; manifest-src 'self'; connect-src 'self' *.bildung-und-begabung.de 3 default-src *.bbc.co.uk *.bbc.com *.bbci.co.uk *.bbci.com https://tpc.googlesyndication.com https://*.safeframe.googlesyndication.com 'self';child-src 'self';connect-src *.bbc.co.uk *.bbc.com *.bbci.co.uk *.bbci.com https://*.akamaihd.net https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net https://csi.gstatic.com https://pagead2.googlesyndication.com https://*.g.doubleclick.net https://survey.effectivemeasure.net https://collector.effectivemeasure.net https://detect-survey.effectivemeasure.net https://adservice.google.com https://tpc.googlesyndication.com https://ad.doubleclick.net https://fundingchoicesmessages.google.com https://secure-dcr-cert.imrworldwide.com https://*.safeframe.googlesyndication.com 'self';font-src *.bbc.co.uk *.bbc.com *.bbci.co.uk *.bbci.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff https://fonts.gstatic.com;frame-src *.bbc.co.uk *.bbc.com *.bbci.co.uk *.bbci.com https://chartbeat.com https://*.chartbeat.com https://www.youtube.com https://platform.twitter.com https://www.instagram.com https://syndication.twitter.com https://bbc.com https://bbc-maps.carto.com https://flo.uri.sh https://www.riddle.com https://*.g.doubleclick.net https://tpc.googlesyndication.com https://edigitalsurvey.com https://*.safeframe.googlesyndication.com https://ad.doubleclick.net https://secureframe.doubleclick.net 'self';img-src *.bbc.co.uk *.bbc.com *.bbci.co.uk *.bbci.com https://ping.chartbeat.net https://syndication.twitter.com https://platform.twitter.com https://pbs.twimg.com https://i.ytimg.com https://ton.twimg.com https://collector.effectivemeasure.net https://csi.gstatic.com https://pagead2.googlesyndication.com https://sb.scorecardresearch.com https://secure-us.imrworldwide.com https://*.g.doubleclick.net https://tpc.googlesyndication.com https://*.google.com https://dt.adsafeprotected.com https://pixel.adsafeprotected.com https://ad.doubleclick.net https://static.doubleclick.net https://www.gstatic.com https://*.googleusercontent.com data: 'self';script-src *.bbc.co.uk *.bbc.com *.bbci.co.uk *.bbci.com https://*.chartbeat.com https://platform.twitter.com https://www.instagram.com https://cdn.syndication.twimg.com https://public.flourish.studio https://adservice.google.co.uk https://adservice.google.com https://cdn.ampproject.org https://collector.effectivemeasure.net https://me-ssl.effectivemeasure.net https://pixel.adsafeprotected.com https://static.adsafeprotected.com https://sb.scorecardresearch.com https://*.g.doubleclick.net https://t.effectivemeasure.net https://tpc.googlesyndication.com https://www.googletagservices.com https://bbc.gscontxt.net https://secure-us.imrworldwide.com/ https://fundingchoicesmessages.google.com https://pagead2.googlesyndication.com https://adservice.google.co.ve https://adservice.google.ru https://adservice.google.co.in https://adservice.google.com.br https://adservice.google.com.mx https://adservice.google.com.ec https://adservice.google.cl https://adservice.google.com.eg https://adservice.google.com.sa https://adservice.google.com.co https://adservice.google.com.ar https://adservice.google.com.ua https://adservice.google.com.pe https://adservice.google.kz https://adservice.google.com.hk https://adservice.google.es https://adservice.google.co.jp https://adservice.google.ae https://adservice.google.com.tw https://adservice.google.com.uy https://adservice.google.co.il https://adservice.google.com.pr https://adservice.google.com.bo https://adservice.google.iq https://adservice.google.com.gt https://adservice.google.com.sg https://adservice.google.com.tr https://adservice.google.com.pk https://adservice.google.de https://adservice.google.ca https://adservice.google.com.vn https://adservice.google.com.py https://adservice.google.com.ng https://adservice.google.jo https://adservice.google.se https://adservice.google.com.au https://adservice.google.it https://adservice.google.com.kh https://adservice.google.co.nz https://adservice.google.az https://adservice.google.fi https://adservice.google.com.ro https://adservice.google.co.id https://adservice.google.ie https://adservice.google.cz https://adservice.google.com.cy https://adservice.google.at https://adservice.google.nl https://adservice.google.cv https://adservice.google.com.mt https://adservice.google.dk https://adservice.google.com.af https://adservice.google.fr https://adservice.google.no https://adservice.google.com.sv https://adservice.google.hn https://adservice.google.be https://adservice.google.com.ni https://adservice.google.ch https://adservice.google.co.kr https://adservice.google.pl https://adservice.google.com.mm https://adservice.google.so https://adservice.google.co.tz https://adservice.google.com.np https://adservice.google.lk https://adservice.google.lv https://adservice.google.ge 'self' 'unsafe-inline';style-src *.bbc.co.uk *.bbc.com *.bbci.co.uk *.bbci.com https://platform.twitter.com https://ton.twimg.com https://fonts.googleapis.com 'unsafe-inline';media-src *.bbc.co.uk *.bbc.com *.bbci.co.uk *.bbci.com;worker-src 'self';prefetch-src https://*.safeframe.googlesyndication.com;report-to default;upgrade-insecure-requests 3 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://translate.google.com/ https://use.typekit.net/ https://www.googleadservices.com/ *.googleapis.com/ *.callrail.com/ *.addthis.com/ https://s7.addthis.com/ *.google-analytics.com/ https://connect.facebook.net/ https://*.hotjar.com/ https://googleads.g.doubleclick.net/ https://*.adroll.com/ https://d.adroll.mgr.consensu.org/ https://www.googletagmanager.com/ http://ws.sharethis.com/ https://t.sharethis.com/ https://maps.google.com/ *.calltrk.com https://z.moatads.com/ https://v1.addthisedge.com/ https://*.addthis.com/ https://*.cloudflare.com/ https://cdn.callreports.com/ https://widget.intercom.io/ https://js.intercomcdn.com/ *.fontawesome.com/ *.stripe.com/ *.olark.com/ *.wistia.com/ *.wistia.net/ *.filestackapi.com/ *.bootstrapcdn.com/ *.authorize.net/ https://mkjwebsites.com/ *.app-us1.com/ https://trackcmp.net/ https://code.jquery.com/ *.google.com/ *.gstatic.com/ *.wp.com/ *.sharethis.com/ *.gravatar.com/ https://translate.googleapis.com/ platform.reviewmgr.com/ *.jwpcdn.com/ *.jsdelivr.net/ *.activehosted.com/ *.brandcdn.com/ *.rlets.com/ *.bing.com/ *.simpli.fi/ https://birdeye.com/; 3 default-src 'self'; script-src 'self' sha256-yZDNnTH66PIY7LsBpMtUv0EMQk84TMJhNpdM9Q8eThM= https://app.cobrowser.com https://cloudstatic.obi4wan.com eemsdelta.matomo.cloud; object-src 'self'; style-src 'self' https://app.cobrowser.com https://cloudstatic.obi4wan.com; img-src 'self' data: data https://s3-eu-west-1.amazonaws.com https://obipubvideo.s3.eu-central-1.amazonaws.com eemsdelta.matomo.cloud; media-src 'self'; frame-src 'self' *.youtube.com https://geo-dal.maps.arcgis.com/ https://geo-eemsdelta.maps.arcgis.com/ *.youtube-nocookie.com; frame-ancestors 'self' eemsdelta.matomo.cloud; child-src 'self' *.youtube.com *.youtube-nocookie.com; font-src 'self' data: *.googleusercontent.com; connect-src 'self' wss://app.cobrowser.com https://app.cobrowser.com wss://cloudstatic.obi4wan.com https://cloudstatic.obi4wan.com https://chatapi.obi4wan.com wss://ws-eu.pusher.com https://obipubvideo.s3.eu-central-1.amazonaws.com eemsdelta.matomo.cloud; report-uri /report-csp-violation 3 default-src 'self' www.youtube.com ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net googletagmanager.com www.googletagmanager.com twitter.com static.queue-it.net p.typekit.net bat.bing.com performance.typekit.net fls.doubleclick.net pixel-a.basis.net ct.pinterest.com googleads.g.doubleclick.net omahapa-preprod.azurewebsites.net siteimproveanalytics.com 6154533.global.siteimproveanalytics.io siteimproveanalytics.io www.googleadservices.com connect.facebook.net www.googletagmanager.com tagmanager.google.com www.googletagmanager.com bi.capacityinteractive.com capacityinteractive.com platform.twitter.com platform.twitter.co www.facebook.com connect.facebook.net facebook.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.saveourstages.com www.google-analytics.com stats.g.doubleclick.net optimize.google.com widgets.instantencore.com services.instantencore.com code.jquery.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net googletagmanager.com www.googletagmanager.com www.youtube.com twitter.com s.pinimg.com www.googleadservices.com use.typekit.net s.yimg.com static.queue-it.net queue-it.net assets.queue-it.net bat.bing.com performance.typekit.net fls.doubleclick.net pixel-a.basis.net ct.pinterest.com googleads.g.doubleclick.net static.ads-twitter.com sp.analytics.yahoo.com analytics.twitter.com cdnjs.cloudflare.com omahapa-preprod.azurewebsites.net googleads.g.doubleclick.net siteimproveanalytics.com 6154533.global.siteimproveanalytics.io siteimproveanalytics.io www.googletagmanager.com tagmanager.google.com www.googletagmanager.com bi.capacityinteractive.com capacityinteractive.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.saveourstages.com optimize.google.com www.google-analytics.com widgets.instantencore.com services.instantencore.com code.jquery.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com cdnjs.cloudflare.com omahapa-preprod.azurewebsites.net tagmanager.google.com www.googletagmanager.com bi.capacityinteractive.com capacityinteractive.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca optimize.google.com code.jquery.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com use.typekit.net data: tagmanager.google.com www.googletagmanager.com fonts.googleapis.com; img-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net googletagmanager.com www.youtube.com p.typekit.net pixel-a.basis.net pixel.sitescout.com stats.g.doubleclick.net bat.bing.com t.co www.google.com ct.pinterest.com googleads.g.doubleclick.net omahapa-preprod.azurewebsites.net 6154533.global.siteimproveanalytics.io siteimproveanalytics.io www.googletagmanager.com tagmanager.google.com www.googletagmanager.com ssl.gstatic.com lh3.googleusercontent.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.youtube.com widgets.instantencore.com services.instantencore.com s3.amazonaws.com; media-src 'self' data: blob: www.youtube.com o-pa.org www.o-pa.org ticketomaha.com www.ticketomaha.com; frame-src www.youtube.com twitter.com pixel-a.basis.net pixel.sitescout.com fls.doubleclick.net 6899690.fls.doubleclick.net bid.g.doubleclick.net 8071554.fls.doubleclick.net www.google.com 8093096.fls.doubleclick.net omahapa-preprod.azurewebsites.net ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net bi.capacityinteractive.com capacityinteractive.com platform.twitter.com platform.twitter.co www.facebook.com connect.facebook.net facebook.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.saveourstages.com optimize.google.com www.google-analytics.com; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.saveourstages.com optimize.google.com www.google-analytics.com code.jquery.com; connect-src 'self' accounts.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com ticketomaha.com o-pa.org omahaperformingarts.org azurewebsites.net s.yimg.com ct.pinterest.com performance.typekit.net omahapa-preprod.azurewebsites.net bi.capacityinteractive.com capacityinteractive.com bi.o-pa.org bi.ticketomaha.com ticketomaha.beta-site.ca to-beta.ticketomaha.com omahapatest.azurewebsites.net omahapatest-omahapatest-preprod.azurewebsites.net o-pa-beta.o-pa.org o-pa.beta-site.ca www.saveourstages.com stats.g.doubleclick.net www.google-analytics.com optimize.google.com code.jquery.com; 3 default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' 3 default-src 'self' https://*.google-analytics.com https://*.googleusercontent.com https://*.gstatic.com; script-src 'self' 'unsafe-inline' https://*.google-analytics.com https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com 2 default-src 'self' data: blob:;script-src 'self' data: blob: *.whatsapp.com *.whatsapp.net *.twitter.com *.facebook.com *.facebook.net 'unsafe-inline' 'unsafe-eval';style-src 'self' data: blob: *.whatsapp.com *.whatsapp.net 'unsafe-inline' *.facebook.com;connect-src 'self' data: blob: *.whatsapp.com *.whatsapp.net wss://*.facebook.com:* *.fbcdn.net;font-src data: *.whatsapp.com *.whatsapp.net *.facebook.com static.xx.fbcdn.net fonts.gstatic.com;img-src 'self' data: blob: *.whatsapp.com *.whatsapp.net *.facebook.com *.fbcdn.net static.xx.fbcdn.net *.ytimg.com *.twitter.com;media-src 'self' data: blob: *.fbcdn.net;frame-src 'self' data: blob: *.twitter.com *.facebook.com *.youtube-nocookie.com *.youtube.com *.whatsapp.com;block-all-mixed-content;upgrade-insecure-requests; 2 default-src 'self' tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com js.arcgis.com player.4am.ch polyfill.io services.arcgis.com www.googleadservices.com assets.sitescdn.net *.nativechat.com *.addthis.com static.hotjar.com app.powerbi.com dc.services.visualstudio.com wabi-north-europe-redirect.analysis.windows.net pbipdfapp.azurewebsites.net content.powerapps.com visuals.azureedge.net gis.azureedge.net pbi.azureedge.net *.who.int m.addthis.com liveapi-cached.yext.com covidfunding.eiu.com staging-dot-eiu-wellcome-7664.nw.r.appspot.com who-covid-answers.int.pagescdn.com who-answers.pagescdn.com liveapi.yext.com answers.yext-pixel.com westeurope.tts.speech.microsoft.com wabi-north-europe-redirect.analysis.windows.net pbipdfapp.azurewebsites.net who.cloudflareaccess.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com js.arcgis.com www.youtube.com cdn.insight.sitefinity.com public.tableau.com *.googleapis.com *.nativechat.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com *.sharethis.com connect.facebook.net ajax.aspnetcdn.com cdnjs.cloudflare.com www.clarity.ms c.clarity.ms https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org s7.addthis.com kendo.cdn.telerik.com www.googletagmanager.com z.moatads.com v1.addthisedge.com cdnjs.cloudflare.com www.who.int polyfill.io kendo.cdn.telerik.com *.googletagmanager.com *.pingdom.net *.jwpcdn.com *.doubleclick.net assets.sitescdn.net whosearch.searchblox.com *.msecnd.net tagmanager.google.com static.hotjar.com covidfunding.eiu.com staging-dot-eiu-wellcome-7664.nw.r.appspot.com who-covid-answers.int.pagescdn.com who-answers.pagescdn.com script.hotjar.com assets.pinterest.com apps.who.int m.addthis.com npmcdn.com script.hotjar.com; style-src 'self' 'unsafe-inline' tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com js.arcgis.com *.googleapis.com *.nativechat.com *.sharethis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com cdn.insight.sitefinity.com cdnjs.cloudflare.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com use.fontawesome.com www.who.int player.4am.ch whosearch.searchblox.com tagmanager.google.com; font-src 'self' tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com js.arcgis.com fonts.gstatic.com kendo.cdn.telerik.com *.nativechat.com *.sharethis.com netdna.bootstrapcdn.com data: use.fontawesome.com www.who.int player.4am.ch whosearch.searchblox.com script.hotjar.com app.powerbi.com pbi.azureedge.net; img-src 'self' data: tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com cdn.insight.sitefinity.com js.arcgis.com *.gstatic.com *.googleapis.com *.nativechat.com *.sharethis.com *.google-analytics.com platform.tumblr.com www.clarity.ms c.clarity.ms web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://apps.who.int https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.eloqua.com track.hubspot.com stats.g.doubleclick.net *.who.int yt3.ggpht.com i.ytimg.com addthis.com *.googleusercontent.com googletagmanager.com script.hotjar.com www.addthis.com log.pinterest.com whosearch.searchblox.com app.powerbi.com pbi.azureedge.net kendo.cdn.telerik.com; media-src 'self' tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com js.arcgis.com terrance.who.int data: blob: *.who.int; frame-src 'self' tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com js.arcgis.com who.maps.arcgis.com player.vimeo.com html5-player.libsyn.com *.nativechat.com public.tableau.com experience.arcgis.com www.facebook.com s7.addthis.com www.youtube.com platform.twitter.com *.who.int *.doubleclick.net docs.google.com syndication.twitter.com *.sitefinity.cloud player.4am.ch *.sharethis.mgr.consensu.org *.google.com vars.hotjar.com youtube-nocookie.com covidfunding.eiu.com staging-dot-eiu-wellcome-7664.nw.r.appspot.com who-covid-answers.int.pagescdn.com who-answers.pagescdn.com assets.pinterest.com www.youtube-nocookie.com vars.hotjar.com app.powerbi.com pbi.azureedge.net wabi-north-europe-g-primary-redirect.analysis.windows.net; frame-ancestors tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com js.arcgis.com app.powerbi.com pbi.azureedge.net *.who.int; child-src 'self' blob: tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com js.arcgis.com https://platform.twitter.com/ https://syndication.twitter.com/ *.nativechat.com https://www.youtube.com/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com www.who.int; connect-src 'self' frontdoor-l4uikgap6gz3m.azurefd.net geocode.arcgis.com tiles.arcgis.com www.arcgis.com services.arcgis.com static.arcgis.com utility.arcgisonline.com js.arcgis.com stats.g.doubleclick.net accounts.google.com https://*.dec.sitefinity.com *.nativechat.com *.mktoresp.com *.who.int www.clarity.ms c.clarity.ms services.arcgis.com dc.services.visualstudio.com whosearch.searchblox.com *.google-analytics.com smartsuggest.searchblox.com m.addthis.com liveapi-cached.yext.com liveapi.yext.com answers.yext-pixel.com wss://westeurope.tts.speech.microsoft.com in.hotjar.com wss://*.hotjar.com *.hotjar.com vc.hotjar.io app.powerbi.com pbi.azureedge.net pbipdfapp.azurewebsites.net wabi-north-europe-redirect.analysis.windows.net; object-src tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com js.arcgis.com app.powerbi.com pbi.azureedge.net pbipdfapp.azurewebsites.net wabi-north-europe-redirect.analysis.windows.net; 2 default-src 'self' data: blob:;script-src 'self' data: blob: 'unsafe-eval' 'unsafe-inline' *.facebook.com *.fbcdn.net https://*.facebook.net;style-src 'self' data: blob: 'unsafe-inline' https://fonts.googleapis.com *;connect-src 'self' data: blob: https://*.whatsapp.com;font-src data: https://*.fbcdn.net;img-src 'self' data: blob: *;frame-src 'self' data: blob: whatsapp:;block-all-mixed-content;upgrade-insecure-requests; 2 default-src * data: blob:;style-src * 'unsafe-inline';script-src https://*.quora.com https://*.facebook.net https://*.facebook.com https://*.googleapis.com https://*.twitter.com https://*.quoracdn.net https://*.google.com https://*.google-analytics.com https://*.gstatic.com https://*.youtube.com https://*.ytimg.com https://*.jwpcdn.com https://*.stripe.com https://*.intercom.io https://*.intercomcdn.com https://*.syndication.twimg.com https://cdnjs.cloudflare.com https://*.jwplatform.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.googleadservices.com https://*.doubleclick.net https://*.googletagservices.com https://*.ampproject.org https://*.amazon-adsystem.com https://*.rubiconproject.com https://*.lijit.com https://*.openx.net https://*.ads-twitter.com https://*.dwin1.com https://*.marketo.net https://*.licdn.com https://*.linkedin.com https://*.qualtrics.com https://*.siteintercept.qualtrics.com https://sc-static.net https://static.bytedance.com https://*.iteratehq.com 'unsafe-inline' 'unsafe-eval' 127.0.0.1:*;connect-src 'self' https://*.quora.com wss://*.quora.com https://*.quoracdn.net https://*.stripe.com https://*.intercom.io wss://*.intercom.io https://*.jwplatform.com https://*.jwpsrv.com https://syndication.twitter.com https://*.syndication.twimg.com https://*.googleapis.com https://*.googlesyndication.com https://*.qualtrics.com https://*.facebook.com https://*.fbcdn.net blob: https://*.mktoresp.com https://*.doubleclick.net https://accounts.google.com https://*.amazon-adsystem.com https://*.iteratehq.com https://iteratehq.com ;report-uri /security_reports/content_security_policy_violation_3RD_PARTY_POST 2 frame-ancestors *.mediafire.com 2 frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.investopedia.com 2 default-src 'self'; img-src 'self' https://app.snapchat.com https://www.google-analytics.com https://lh3.googleusercontent.com https://maps.googleapis.com https://maps.gstatic.com https://csi.gstatic.com/csi https://storage.googleapis.com https://sc-kharon.appspot.com blob: data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' https://www.google-analytics.com https://maps.googleapis.com https://www.gstatic.com https://gstatic.com https://www.google.com https://www.googleadservices.com https://sc-static.net https://www.youtube.com https://s.ytimg.com https://*.firebaseio.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://snap.adbrn.com https://tr.snapchat.com https://tr-shadow.snapchat.com https://player.vimeo.com https://tremolossl-a.akamaihd.net https://*.firebaseio.com; connect-src 'self' https://snapchat-web.storage.googleapis.com https://gms-carousel-dot-lookinsoclear.appspot.com https://app.snapchat.com https://geofilters-community-api.snapchat.com https://web-frontend-dot-sc-analytics.appspot.com https://zgl-s.tlnk.io https://woj-e.tlnk.io https://launch1.co https://accounts.snapchat.com https://scan.snapchat.com https://snapcodes.snapchat.com https://www.google-analytics.com wss://*.firebaseio.com https://www.googleapis.com https://securetoken.googleapis.com https://storage.googleapis.com; media-src 'self' data: blob: https://storage.googleapis.com; report-uri https://csp-central.appspot.com/report_csp 2 style-src 'self' 'unsafe-inline' *.gov; 2 upgrade-insecure-requests; frame-ancestors 'self' http://*.hulu.com https://*.hulu.com; 2 frame-ancestors 'self' *.pathfactory.com *.lookbookhq.com *.newrelic.com 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https: 2 default-src 'self'; child-src 'self' http://127.0.0.1:8111 https://127.0.0.1:8112; connect-src 'self' piwik.openstreetmap.org https://nominatim.openstreetmap.org/ https://overpass-api.de/api/interpreter https://routing.openstreetmap.de/ https://graphhopper.com/api/1/route; font-src 'none'; form-action 'self' render.openstreetmap.org; frame-ancestors 'self'; frame-src 'self' http://127.0.0.1:8111 https://127.0.0.1:8112; img-src 'self' data: www.gravatar.com *.wp.com tile.openstreetmap.org *.tile.openstreetmap.org *.tile.thunderforest.com tileserver.memomaps.de *.openstreetmap.fr piwik.openstreetmap.org https://openstreetmap-user-avatars.s3.dualstack.eu-west-1.amazonaws.com; manifest-src 'self'; media-src 'none'; object-src 'self'; script-src 'self' piwik.openstreetmap.org; style-src 'self' 'unsafe-inline'; worker-src 'none' 2 default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data:; media-src blob: data: https:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests 2 frame-src 'self' share.intercom.io intercom-sheets.com www.intercom-reporting.com www.youtube.com;connect-src 'self' appcenter.ms install.appcenter.ms https://secure.gravatar.com *.intercom.io *.optimizely.com uploads.intercomcdn.com uploads.intercomusercontent.com *.cloudfront.net wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io *.visualstudio.com *.documents.azure.com *.hockeyapp.net *.blob.core.windows.net https://*.ingest.sentry.io https://graph.microsoft.com appcenter.ms install.appcenter.ms *.xamarin.com xtc-prod-artifacts.s3-eu-west-1.amazonaws.com testcloud-artifacts.s3-eu-west-1.amazonaws.com testcloud-artifacts.s3.eu-west-1.amazonaws.com wss://api-service-live-build-prod-east-us-build.prod.avalanch.es https://api-prod-east-us2.prod.avalanch.es:8088 https://file.appcenter.ms wss://api-service-live-build-prod-east-us-build.prod.avalanch.es https://upload.appcenter.ms mobilecenter.azureedge.net mobilecenter-int.azureedge.net;default-src 'self' *.msecnd.net data:;font-src 'self' data: js.intercomcdn.com fonts.gstatic.com assets.onestore.ms c.s-microsoft.com;img-src * data:;media-src js.intercomcdn.com xtc-staging-artifacts.s3-eu-west-1.amazonaws.com xtc-prod-artifacts.s3-eu-west-1.amazonaws.com testcloud-staging-artifacts.s3-eu-west-1.amazonaws.com testcloud-staging-artifacts.s3.eu-west-1.amazonaws.com testcloud-artifacts.s3-eu-west-1.amazonaws.com testcloud-artifacts.s3.eu-west-1.amazonaws.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.msecnd.net app.intercom.io widget.intercom.io js.intercomcdn.com monaco-cdn-int.azureedge.net accessibility-bookmarklets.org uhf.microsoft.com c.s-microsoft.com assets.onestore.ms mobilecenter.azureedge.net mobilecenter-int.azureedge.net;style-src 'self' 'unsafe-inline' monaco-cdn-int.azureedge.net accessibility-bookmarklets.org/ uhf.microsoft.com c.s-microsoft.com assets.onestore.ms mobilecenter.azureedge.net mobilecenter-int.azureedge.net;worker-src 'self' blob: 2 frame-ancestors https://*.facebook.com https://*.parallels.com https://*.parallels.cn; 2 frame-ancestors 'self' *.wallet.airpay.tw *.airpay.tw *.shopeemobile.com *.shopee.tw *.shopee.cn *.facebook.com; 2 default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' *.messenger.com;style-src data: blob: 'unsafe-inline' * *.messenger.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' *.messenger.com wss://*.messenger.com:*;font-src *.messenger.com *.facebook.com https://*.fbcdn.net data:; 2 frame-ancestors *.icann.org 2 frame-ancestors 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; worker-src 'self' blob:; 2 default-src 'self' data: blob: *.mega.co.nz *.mega.nz *.mega.io http://*.mega.co.nz http://*.mega.nz http://*.mega.io wss://*.karere.mega.nz *.karere.mega.nz:1380 http://127.0.0.1:6341 localhost.megasyncloopback.mega.nz:6342; script-src 'self' *.mega.co.nz *.mega.nz *.mega.io data: blob:; style-src 'self' 'unsafe-inline' *.mega.co.nz *.mega.nz *.mega.io data: blob:; frame-src 'self' *.megapay.nz mega: *.megaad.nz https://mega.nz/ https://mega.io/; img-src 'self' *.mega.co.nz *.mega.nz *.mega.io data: blob: mega.nz 2 default-src 'self'; connect-src *; font-src 'self' data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 2 frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.teams.microsoft.us teams.microsoft.us *.teams.office.com *.skype.com outlook.office.com outlook-sdf.office.com outlook.office365.com outlook-sdf.office365.com outlook.live.com outlook-sdf.live.com 2 frame-ancestors 'self' *.indiatimes.com *.idiva.com 2 default-src http: https: data: blob:; media-src http: https: data: blob:; img-src http: https: data: blob:; script-src http: https: data: 'unsafe-inline' 'unsafe-eval'; style-src http: https: data: 'unsafe-inline' 'unsafe-eval'; connect-src http: https: data:; worker-src http: https: data: blob:; font-src http: https: data:; 2 default-src 'self' ; img-src 'self' https://*.lmiutil.com/ https://px.ads.linkedin.com/ https://sp1.convertro.com/api/hit/lastpass/ https://www.google-analytics.com/ https://*.company-target.com/ https://logmeincdn.azureedge.net/ https://*.company-target.com/* https://*.lastpass.com https://lastpass.com https://*.go-mpulse.net https://*.akstat.io/ data: https://*.g2.com https://*.akstat.io/ https://*.go-mpulse.net https://*.company-target.com/* https://*.adnxs.com/ https://*.doubleclick.net https://*.google-analytics.com https://www.google.com https://www.facebook.com/tr https://t.co/i/adsct https://analytics.twitter.com/i/adsct https://img.youtube.com https://adfarm.mediaplex.com/ad/bk/ https://*.rfihub.com/ https://secure.leadback.advertising.com https://secure.ace-tag.advertising.com https://iad-login.dotomi.com https://*.company-target.com/ https://www07.clicktale.net/ https://lastpass-sc.usva.logmeinx.com/ https://lastpass-sc.usca.logmeinx.com/ https://lastpass-sc.usil.logmeinx.com/ https://lastpass-sc.ustx.logmeinx.com/ https://lastpass-sc.defr.logmeinx.com/ https://lastpass-sc.ukay.logmeinx.com/ https://lastpass-sc-gamma.usca.logmeinx.com/ https://*.logmeinx.com https://d.adroll.com https://secimg.vmmpxl.com https://rs.gwallet.com https://s-cs.send.microad.jp https://pixel.rubiconproject.com https://*.openx.net https://dpm.demdex.net https://ads.yahoo.com https://dsum-sec.casalemedia.com https://simage2.pubmatic.com https://trc.taboola.com https://x.bidswitch.net https://idsync.rlcdn.com https://stags.bluekai.com https://ums.adtechus.com https://io.narrative.io https://atemda.com https://t.brand-server.com https://pixel.quantserve.com; object-src 'self' https://*.akstat.io/ https://*.go-mpulse.net https://*.googlevideo.com https://*.youtube.com https://*.youtube.com https://*.ytimg.com https://*.ytimg.com https://www.google.com https://youtube.googleapis.com; connect-src 'self' https://*.cardinalcommerce.com https://*.akstat.io/ https://*.go-mpulse.net https://*.lastpass.com https://lastpass.com wss://*.lastpass.com https://*.optimizely.com https://5399020466.log.optimizely.com https://pollserver.lastpass.com https://loglogin.lastpass.com https://*.clicktale.net https://dc.services.visualstudio.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cardinalcommerce.com https://*.lmiutil.com/ https://logmeincdn.azureedge.net https://fonts.googleapis.com/ https://*.lastpass.com https://lastpass.com https://html-lastpass-develop.azurewebsites.net https://html-lastpass-master.azurewebsites.net; plugin-types application/x-invalid-type application/pdf ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cardinalcommerce.com https://cdn.lmiutil.com/ https://*.go-mpulse.net https://cdn.lmiutil.com/lpassets/clicktale/ https://lastpass.com/m.php/quickdl2 https://*.cybersource.com/ https://www.google-analytics.com https://www.googletagmanager.com https://www.google-analytics.com/ https://www.googletagmanager.com/ https://logmeincdn.azureedge.net https://cdn.clicktale.net/ https://*.lastpass.com https://lastpass.com https://www.youtube.com https://*.ytimg.com https://cdnssl.clicktale.net/ https://www.sc.pages04.net https://cdn.getsmartcontent.com/ https://api.bizographics.com https://us-east-1.profile-api.ads.linkedin.com https://s.getsmartcontent.com https://az416426.vo.msecnd.net ; font-src 'self' 'unsafe-inline' 'unsafe-eval' https://litmus.com https://lmistatic.blob.core.windows.net/ https://fonts.gstatic.com/ https://*.lastpass.com https://lastpass.com; media-src ;frame-src *;frame-ancestors 'self' https://*.lookbookhq.com https://*.pathfactory.com https://*.logmein.com https://*.lastpass.com;worker-src https://*.lastpass.com blob: 2 default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self'; 2 default-src 'self' *.ecosia.org data: *.sentry.io; script-src 'sha256-mY3KJ4koYKM2PvlnJ0uId2QMQKXgwBPsX4d1DBC8vxs=' 'self' 'self' *.ecosia.org *.sentry.io dy1cy3yp6fd82.cloudfront.net; img-src 'self' *.ecosia.org s3.amazonaws.com data: ecosia-notifications.ghost.io; style-src 'self' *.ecosia.org 'unsafe-inline'; connect-src 'self' *.ecosia.org *.sentry.io; frame-ancestors 'none' 2 default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; img-src http: https: data: blob:; worker-src https: data: blob:; frame-ancestors 'self' https://*.softpedia.com/; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-src https: data: blob:; 2 base-uri https://*.ryanair.com https://*.laudamotion.com; child-src https://*.hotjar.com https://*.hotjar.io; worker-src https://*.ryanair.com; connect-src 'self' https://*.ryanair.com https://*.launchdarkly.com https://bam.nr-data.net/ https://dpm.demdex.net https://js-agent.newrelic.com https://script.hotjar.com https://smetrics.ryanair.com https://*.hotjar.com https://*.hotjar.io https://*.boxever.com https://www.gstatic.com https://news.ryanair.com https://www.google-analytics.com wss://*.hotjar.com https://www.rentalcars.com https://*.accdab.net https://static.zdassets.com https://ekr.zdassets.com https://*.zopim.com wss://*.zopim.com https://www.ryanair.com https://api.ryanair.com https://assets.ryanair.com https://desktopapps.ryanair.com https://places-rooms.ryanair.com https://help.ryanair.com wss://help.ryanair.com https://ryanairsupport.zendesk.com wss://ryanairsupport.zendesk.com; default-src 'self' https://ajax.googleapis.com https://static.zdassets.com https://ekr.zdassets.com https://*.zopim.com wss://*.zopim.com https://help.ryanair.com wss://help.ryanair.com https://ryanairsupport.zendesk.com wss://ryanairsupport.zendesk.com; frame-src 'self' https://*.ryanair.com https://ryanair.demdex.net https://*.hotjar.com https://*.hotjar.io https://*.cdn-net.com https://www.google.com https://*.accdab.net; font-src 'self' data: https://fonts.gstatic.com https://*.hotjar.com https://*.hotjar.io https://ajax.googleapis.com https://assets.ryanair.com; img-src 'self' data: https://*.hotjar.com https://*.hotjar.io https://bam.nr-data.net https://dpm.demdex.net https://smetrics.ryanair.com https://www.gstatic.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://cm.g.doubleclick.net https://*.criteo.com https://www.facebook.com https://play-lh.googleusercontent.com https://v2assets.zopim.io https://static.zdassets.com https://s3.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://v2uploads.zopim.io https://assets.ryanair.com/; manifest-src https://*.ryanair.com https://*.laudamotion.com; object-src 'self' https://*.cdn-net.com; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://*.boxever.com https://*.cdn-net.com https://*.googleapis.com https://*.launchdarkly.com https://assets.ryanair.com https://bam.nr-data.net https://d1mj578wat5n4o.cloudfront.net https://js-agent.newrelic.com https://*.hotjar.com https://*.hotjar.io https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://cdnjs.cloudflare.com https://*.accdab.net https://static.zdassets.com https://ekr.zdassets.com https://*.zopim.com wss://*.zopim.com https://polyfill.ryanair.com https://help.ryanair.com wss://help.ryanair.com https://ryanairsupport.zendesk.com wss://ryanairsupport.zendesk.com; style-src 'self' 'unsafe-inline' 'report-sample' https://fonts.googleapis.com; report-uri https://csp-reporter.ryanair.com/report?app=homepage; 2 frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.treehugger.com 2 frame-ancestors 'self' piwik.mpg.de statistics.mpg.de analytics.mpg.de; 2 script-src * 'unsafe-inline'; style-src * 'unsafe-inline' blob:; img-src * data: blob: 2 default-src 'self' https://arduino.cc; script-src 'self' 'unsafe-inline' https://*.iubenda.com https://*.hotjar.com data: https://tagmanager.google.com/debug https://js.intercomcdn.com https://widget.intercom.io https://*.googletagservices.com https://*.googlesyndication.com https://consent.trustarc.com https://forum.arduino.cc https://store.arduino.cc https://store-cdn.arduino.cc https://arduino.cc https://checkout.stripe.com https://stats.g.doubleclick.net https://connect.facebook.net https://www.google-analytics.com https://ads.supplyframe.com https://www.googletagmanager.com https://code.jquery.com https://ajax.googleapis.com https://js.stripe.com https://auth.arduino.cc https://hydra.arduino.cc https://cdn.arduino.cc https://content.arduino.cc https://cdnjs.cloudflare.com https://ajax.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://code.jquery.com https://arduino.cc https://id.arduino.cc https://cdn.arduino.cc https://cdn-stag.arduino.cc https://content.arduino.cc; font-src 'self' https://fonts.gstatic.com https://content.arduino.cc https://cdn.arduino.cc https://cdn-stag.arduino.cc https://js.intercomcdn.com/fonts/; img-src 'self' data: https:; connect-src 'self' https://*.iubenda.com https://*.algolia.net https://*.algolianet.com https://content.arduino.cc https://fonts.gstatic.com https://*.hotjar.com https://login.arduino.cc https://auth.arduino.cc https://blog.arduino.cc https://api.arduino.cc https://api2.arduino.cc https://my.arduino.cc https://forum.arduino.cc https://store.arduino.cc https://checkout.stripe.com https://api.stripe.com https://cdn.arduino.cc https://www.google-analytics.com https://cdn-stag.arduino.cc https://trackerapi.trustarc.com https://api-iam.intercom.io/messenger/web/ wss://nexus-websocket-a.intercom.io/pubsub/ https://api-iam.intercom.io/messenger/web/ping; child-src 'self' https://create.arduino.cc https://downloads.arduino.cc https://checkout.stripe.com https://www.youtube.com https://js.stripe.com https://www.hackster.io; frame-src 'self' https://*.hotjar.com https://login.arduino.cc https://consent-pref.trustarc.com https://hydra.arduino.cc https://auth.arduino.cc https://create.arduino.cc https://downloads.arduino.cc https://docs.google.com https://www.youtube.com https://checkout.stripe.com https://js.stripe.com https://www.hackster.io https://staticxx.facebook.com https://iframe.dacast.com https://*.iubenda.com; upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' *.arduino.cc 2 frame-ancestors frame-ancestors 'self' 2 frame-ancestors 'self' https://*.justia.com http://*.justia.com 2 block-all-mixed-content; frame-ancestors 'self'; 2 frame-ancestors 'self' *.imperial.ac.uk *.ic.ac.uk 2 frame-ancestors https://*.udacity.com 2 frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.verywellhealth.com 2 connect-src sync.datamind.ru dpm.demdex.net tinkoffcreditsystems.d3.sc.omtrdc.net assets.adobedtm.com *.omniture.com *.g.doubleclick.net geocode-maps.yandex.ru/1.x/ *.google-analytics.com *.datamind.ru *.cdn-tinkoff.ru www.google.com analytics.google.com www.google.ru www.facebook.com google-analytics.bi.owox.com api.advcake.com 'self' *.tinkoff.ru *.tcsbank.ru wss://*.tinkoff.ru platform-sentry.tcsbank.ru sentry.tinkoff.ru www.cdn-tinkoff.ru www.tinkoff.ru cfg.tinkoff.ru acdn.tinkoff.ru business.tinkoff.ru; script-src sync.datamind.ru www.google-analytics.com ssl.google-analytics.com www.googletagmanager.com www.googleadservices.com *.g.doubleclick.net assets.adobedtm.com dpm.demdex.net tinkoffcreditsystems.d3.sc.omtrdc.net *.omniture.com *.google-analytics.com googleads.g.doubleclick.net www.google.com www.google.ru connect.ok.ru vk.com *.datamind.ru s.ytimg.com connect.facebook.net *.tinkoff.ru *.tcsbank.ru *.cdn-tinkoff.ru ad.doubleclick.net 'self' 'unsafe-eval' 'unsafe-inline' https://tinkoff.ru https://www.tinkoff.ru https://www.youtube.com; img-src *.datamind.ru dpm.demdex.net www.google-analytics.com tinkoffcreditsystems.d3.sc.omtrdc.net cm.everesttech.net dp.adsdata.ru www.google.com www.google.ru vk.com login.vk.com mc.yandex.ru ad.mail.ru adfocus.ru www.facebook.com ad.doubleclick.net *.google.com *.yandex.ru *.yandex.net *.2o7.net *.demdex.net cx.atdmt.com analytics.twitter.com t.co eu-sonar.sociomantic.com *.sravni.ru www.banki.ru *.pool.datamind.ru statad.ru www.googletagmanager.com www.facebook.com/tr/ *.g.doubleclick.net www.googleadservices.com *.cdn-tinkoff.ru *.tinkoff.ru p.formobil.net rupertino.ru adservice.google.com adservice.google.ru google-analytics.bi.owox.com dc.ads.linkedin.com *.mail.ru hit.acstat.com dp.tinkoffinsurance.ru *.fls.doubleclick.net 'self' data: *.tcsbank.ru https://tinkoff.ru https://www.tinkoff.ru http://img.youtube.com; frame-src *.tinkoff.demdex.net *.omniture.com bid.g.doubleclick.net www.facebook.com *.demdex.net vk.com static.datamind.ru platform.twitter.com connect.ok.ru *.datamind.ru *.cdn-tinkoff.ru 'self' blob: *.tinkoff.ru *.tcsbank.ru https://www.youtube.com; report-uri https://www.tinkoff.ru/api/front/log/csp-error?appName=pfphome&sentryDsnKey=b7cae0fa7dd74b4489cd05596a20df38&sentryApiId=142; default-src 'self' *.cdn-tinkoff.ru *.tinkoff.ru data:; style-src 'unsafe-inline' 'self' *.tinkoff.ru *.tcsbank.ru *.cdn-tinkoff.ru 2 frame-ancestors 'self' https://*.sproutsocial.com; 2 frame-ancestors 'self' https://*.scotiabank.com https://www.scotiaitrade.com/ https://www.scotialifefinancial.com/ https://www.scotiafunds.com/ http://*.bns https://*.bns https://www.scotiabank.com; 2 default-src https: wss:; script-src about: 'unsafe-inline' 'unsafe-eval' https: wss:; img-src data: blob: https: wss:; style-src 'unsafe-inline' https: wss: blob:; font-src https: data: wss: 'self'; connect-src 'self' https: wss:; report-uri https://idcqaenforce.report-uri.com/r/d/csp/enforce; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.ubs.com *.adobedtm.com *.demdex.net *.decibelinsight.net *.adform.net *.everesttech.net *.googleapis.com *.brightcove.net *.2o7.net *.omtrdc.net *.tt.omtrdc.net *.zencdn.net *.akamaihd.net *.facebook.net *.googleadservices.com *.google-analytics.com *.google.com *.youtube.com *.ytimg.com *.doubleclick.net *.twinesocial.com *.pusher.com *.cloudflare.com *.zmags.com *.raisenow.com *.newrelic.com *.nr-data.net *.adobe.com *.dotomi.com; upgrade-insecure-requests; object-src *.ubs.com 2 default-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.go-mpulse.net https://*.dynamicyield.com https://*.salecycle.com https://*.fls.doubleclick.net https://dev.appboy.com https://www.facebook.com https://ct.pinterest.com https://bid.g.doubleclick.net https://videos.contentful.com https://www.youtube.com https://*.api.bazaarvoice.com https://sentry.io https://videos.ctfassets.net https://*.akstat.io https://*.perimeterx.net https://*.urbanoutfitters.com https://www.google-analytics.com https://api.bazaarvoice.com https://d16fk4ms6rqz1v.cloudfront.net https://*.akamaihd.net https://*.rewardstyle.com https://www.shopstylecollective.com https://www.shopstylecollective.co.uk https://*.myunidays.com https://www.myregistry.com https://core.conversant.mgr.consensu.org https://tracking.crealytics.com https://*.scene7.com https://*.attn.tv https://freepeople.wufoo.com https://*.trustedshops.com https://*.stg-sessionm.com https://*.sessionm.com https://*.ent-sessionm.com https://*.bluecore.com https://www.googletagmanager.com https://cdn.merklesearch.com https://cdn.pbbl.co https://s.pinimg.com https://bat.bing.com https://assistjs.skimresources.com https://connect.facebook.net https://*.twitter.com https://cdn.groupbycloud.com https://tags.tiqcdn.com https://www.googleadservices.com https://js.appboycdn.com https://static.ads-twitter.com https://googleads.g.doubleclick.net https://js-agent.newrelic.com https://*.afterpay.com https://mpsnare.iesnare.com https://bam.nr-data.net https://y8ui6jzp.micpn.com https://*.datasteam.io https://fast.fonts.net https://ci-mpsnare.iovation.com https://*.bazaarvoice.com https://tpc.googlesyndication.com https://*.salesforceliveagent.com https://static.site24x7rum.com https://*.paypal.com https://*.apple.com https://*.criteo.com https://www.ist-track.com https://www.shopzilla.com https://*.googleapis.com https://www.gstatic.com https://app.curalate.com https://cm.g.doubleclick.net https://*.ra.linksynergy.com http://maps.google.cn https://*.clearpay.co.uk https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://images.contentful.com https://images.ctfassets.net https://px0.pbbl.co https://t.co https://*.google.com https://*.gstatic.com https://pinterest.adsymptotic.com https://*.linksynergy.com https://*.dc-storm.com https://consent.nxtck.com https://consent.jrs5.com https://consent.mediaforge.com https://*.g.doubleclick.net https://www.bizrate.com https://rd.connexity.net https://www.google.co.uk https://www.google.ca https://www.google.de https://*.groupbycloud.com https://h.nexac.com http://images.urbanoutfitters.com https://cdn.dynamicyield.com https://www.google.ie https://www.ssense.com https://*.rkdms.com https://www.polyvore.com https://www.google.nl https://www.google.fr https://*.agkn.com https://p.dlx.addthis.com https://www.google.co.jp https://www.google.es https://www.google.com.au http://stores.urbanoutfitters.com http://euimages.urbanoutfitters.com https://email-reflex.com https://www.google.it https://www.google.be https://www.google.co.nz https://www.google.se https://cdn.dashhudson.com https://tracking.lengow.com https://merchants.nextag.com https://events.attentivemobile.com https://fonts.gstatic.com https://*.crazyegg.com https://*.dotomi.com https://cx.atdmt.com https://calotag.com https://product.givingassistant.org https://techsuperb.biz https://track.effitarget.com https://cdnjs.cloudflare.com https://intljs.rmtag.com https://cdn.polyfill.io https://*.adsymptotic.com https://c.go-mpulse.net https://polyfill.io https://cdn.honey.io https://cdn.contentful.com https://*.attentivemobile.com https://g.3gl.net https://r.3gl.net.cn https://r.3gl.net https://trustbadge.api.etrusted.com https://*.tealiumiq.com https://*.salesforce.com https://*.px-cloud.net https://sdk.iad-01.braze.com https://*.siteintercept.qualtrics.com https://idsync.rlcdn.com https://*.qualtrics.com https://*.force.com https://ltv-service.camato.eu https://*.vimeo.com https://d38xvr37kwwhcm.cloudfront.net https://trail.grin.co https://downloads.contentful.com https://*.8x8.com/ https://s0.ipstatp.com https://*.tiktok.com https://*.tiktokcdn.com https://business-sg.topbuzz.com https://business.topbuzz.com https://*.btttag.com bytedance: https://cloudflare.com/cdn-cgi/trace https://*.ibytedtos.com https://*.krxd.net https://www.cloudflare.com/cdn-cgi/trace https://open.spotify.com https://cdn.cookielaw.org https://*.evergage.com https://privacyportal.onetrust.com https://*.urbndata.com;frame-ancestors 'none'; 2 frame-ancestors http://www.vistaprint.com https://www.vistaprint.com http://vistaprint.com https://vistaprint.com https://www.optimizelyedit.com https://app.optimizely.com http://app.optimizely.com http://script.crazyegg.com https://script.crazyegg.com script.crazyegg.com http://www.radins.com http://fr.igraal.com http://cmsauth.vistaprint.prod https://secure.vistaprint.com https://*.hatchery.vistaprint.com https://*.mobile.vpsvc.com; default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.interco.io wss://endpoint.twilio.com wss://sdkgw.us1.twilio.com wss://*.twilio.com wss://*.firebaseio.com https://cdn.firebase.com https://*.firebaseio.com; report-uri https://endpoint1.collection.us2.sumologic.com/receiver/v1/http/ZaVnC4dhaV1YajQYljNDyq_HZcQMFwMFIEBS9eHG3wV3FNhihD_eeXQkr_HnJMjSGly5t4VQFrfZujfZFoFY5wHaTC8TvTlxRcur_pISTvX0Dw96EIlb4Q== 2 frame-ancestors 'self' app.optimizely.com cdn.optimizely.com *.fourseasons.com; report-uri https://vmkkmcabbh.execute-api.ca-central-1.amazonaws.com/CspReportsApi 2 base-uri 'none'; default-src 'none'; frame-ancestors 'self' https://*.gab.com https://*.openplatform.us; font-src 'self' https://gab.com; img-src 'self' https: data: blob: https://gab.com; style-src 'self' 'unsafe-inline' https://gab.com; media-src 'self' https: data: https://gab.com; frame-src 'self' https:; manifest-src 'self' https://gab.com; connect-src 'self' blob: https://gab.com wss://gab.com https://*.gab.com; script-src 'self' https://gab.com https://*.gab.com 2 frame-ancestors 'self' http://*.dji.com https://*.dji.com 2 frame-ancestors https://*.swissinfo.ch 2 default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com tagmanager.google.com www.google.com www.gstatic.com bbox.blackbaudhosting.com olx.britishmuseum.org www.britishmuseum.org maps.googleapis.com cdn.rawgit.com services.postcodeanywhere.co.uk www.youtube.com s.ytimg.com payments.blackbaud.com secure.adnxs.com ad.360yield.com ib.adnxs.com cm.g.doubleclick.net prf.audiencemanager.de cdn.audiencemanager.de secure-ds.serving-sys.com bs.serving-sys.com connect.facebook.net secure.quantserve.com edge.quantserve.com www.google-analytics.com rules.quantcount.com partners.designmynight.com cdn.loop11.com www.loop11.com platform.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.google-analytics.com https://optimize.google.com http://*.queue-it.net https://*.queue-it.net https://snap.licdn.com/li.lms-analytics/insight.min.js; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com payments.blackbaud.com bbox.blackbaudhosting.com partners.designmynight.com cdn.loop11.com www.loop11.com platform.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com https://optimize.google.com http://*.queue-it.net https://*.queue-it.net; img-src 'self' 'unsafe-inline' bbox.blackbaudhosting.com ssl.gstatic.com www.googletagmanager.com googletagmanager.com www.gstatic.com gstatic.com maps.gstatic.com maps.googleapis.com cdn.rawgit.com olx.britishmuseum.org secure.adnxs.com ad.360yield.com ib.adnxs.com cm.g.doubleclick.net prf.audiencemanager.de cdn.audiencemanager.de secure-ds.serving-sys.com bs.serving-sys.com www.facebook.com pixel.quantserve.com www.google-analytics.com stats.g.doubleclick.net www.google.com/ads www.google.co.uk/ads static.designmynight.com cdn.loop11.com www.loop11.com platform2.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com ttp://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io openseadragon.github.io libimages1.princeton.edu 51.11.16.222 media.britishmuseum.org http://media.britishmuseum.org https://www.google-analytics.com https://optimize.google.com http://*.queue-it.net https://*.queue-it.net https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j90 data:;; frame-src 'self' www.google.com player.vimeo.com payments.blackbaud.com bbox.blackbaudhosting.com sketchfab.com w.soundcloud.com www.youtube.com bookings.designmynight.com www.facebook.com cdn.loop11.com www.loop11.com platform2.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://optimize.google.com http://*.queue-it.net https://*.queue-it.net; frame-ancestors 'self'; child-src https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 'self'; font-src 'self' fonts.gstatic.com themes.googleusercontent.com cdn.loop11.com www.loop11.com platform2.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io http://*.queue-it.net https://*.queue-it.net data:;; connect-src 'self' www.google-analytics.com payments.blackbaud.com olx.britishmuseum.org bookings.designmynight.com www.facebook.com facebook.com cdn.loop11.com www.loop11.com platform2.cloud-iq.com platform2.cloud-iq.com content.cloud-iq.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://stats.g.doubleclick.net https://51.143.128.218 media.britishmuseum.org http://*.queue-it.net https://*.queue-it.net https://secure-ds.serving-sys.com/adServingData/PROD/TMClient/8/258 2 frame-ancestors learn.arcgis.com *.esri.com pro.arcgis.com doc.arcgis.com 2 default-src * 'unsafe-inline'; img-src * data: blob:; frame-ancestors 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; media-src * blob:; worker-src 'self' blob:; style-src * blob: 'unsafe-inline' 'unsafe-eval' 2 default-src * gap:; script-src 'self' blob: https://*.kaltura.com data: 'unsafe-inline' 'unsafe-eval' https://*.oribi.io https://*.qualified.com wss://*.qualified.com wss://*.qualified.com https://*.google.com https://*.googletagmanager.com https://*.cloudflareinsights.com https://*.gstatic.com https://*.google-analytics.com https://snap.licdn.com https://*.hotjar.com https://*.marketo.net https://*.marketo.com https://*.equalweb.com https://*.zoominfo.com https://*.cloudfront.net https://*.facebook.net https://*.influ2.com https://*.googleadservices.com https://*.doubleclick.net https://*.kaltura.com; object-src *; style-src * 'unsafe-inline'; img-src * data: blob: android-webview-video-poster:; media-src * blob: data:; frame-src *; font-src *; connect-src * 2 img-src 'self' https: data: cdn.paris.fr 2 frame-ancestors 'self' *.sc.com *.standardchartered.com *.standardchartered.co.in *.standardchartered.co.th *.standardchartered.com.hk *.standardchartered.com.my *.standardchartered.com.sg *.standardchartered.co.id *.standardchartered.com.tw standchartbank.experiencecloud.adobe.com experience.adobe.com 2 default-src 'self'; frame-ancestors 'self' https://*.facebook.com; connect-src 'self' https://demo.synology.com:5001 https://*.demo.synology.com:5001 https://demo.synology.de:5001 https://*.demo.synology.de:5001 https://api-fra.livechatinc.com https://analytics.google.com https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://in.hotjar.com/ https://vc.hotjar.io wss://*.hotjar.com/ https://www.facebook.com *.mouseflow.com https://px.adhigh.net/; object-src 'none'; font-src 'self' data: https://themes.googleusercontent.com https://fonts.gstatic.com https://cdn.livechatinc.com *.mouseflow.com; frame-src 'self' https://cse.google.com https://www.googletagmanager.com https://bid.g.doubleclick.net https://optimize.google.com https://www.youtube.com https://www.facebook.com https://staticxx.facebook.com https://secure.livechatinc.com https://secure-fra.livechatinc.com https://api-fra.livechatinc.com https://player.youku.com/ https://vars.hotjar.com/ https://synology.jobbase.io https://*.synology.com *.mouseflow.com https://px.adhigh.net/ https://synoform.synology.com; img-src 'self' https://*.synology.com https://global.download.synology.com https://download.synology.com https://cndl.synology.cn https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googleapis.com https://*.google.com https://www.google.com.tw https://*.gstatic.com https://ssl.google-analytics.com https://maps.googleapis.com https://www.googletagmanager.com https://googleads.g.doubleclick.net/ https://www.google.de https://secure.livechatinc.com https://secure-fra.livechatinc.com https://cdn.livechatinc.com https://api-fra.livechatinc.com https://www.facebook.com https://wcs.naver.com https://www.facebook.com/tr https://dc.ads.linkedin.com https://px.ads.linkedin.com/ https://www.linkedin.com/px https://alb.reddit.com https://t.co/i/adsct https://p.adsymptotic.com/d/px https://bat.bing.com *.mouseflow.com data: blob:; media-src 'self' https://download.synology.com https://cdn.livechatinc.com https://api-fra.livechatinc.com; script-src 'self' data: blob: https://demo.synology.com https://demo.synology.de https://www.google-analytics.com https://www.google.com https://clients1.google.com https://www.gstatic.com https://www.googletagmanager.com https://cse.google.com https://www.googleapis.com https://ssl.google-analytics.com https://maps.googleapis.com https://optimize.google.com https://connect.facebook.net https://cdn.livechatinc.com https://code.jquery.com https://secure.livechatinc.com https://secure-fra.livechatinc.com https://accounts.livechatinc.com https://api.livechatinc.com https://api-fra.livechatinc.com https://cdnjs.cloudflare.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://wcs.naver.net/wcslog.js https://snap.licdn.com https://www.linkedin.com/px/ https://px.ads.linkedin.com https://analytics.twitter.com https://static.ads-twitter.com https://www.redditstatic.com https://static.hotjar.com https://script.hotjar.com/ https://sjs.bizographics.com/insight.min.js https://bat.bing.com/bat.js https://synology.jobbase.io *.mouseflow.com https://px.adhigh.net/ 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://www.google.com https://fonts.googleapis.com https://optimize.google.com https://cdnjs.cloudflare.com https://tagmanager.google.com/debug/css.css 'unsafe-inline' 2 frame-ancestors 'self' eer.bnpparibas eermb.mosaic.fr *.entreprises.bnpparibas.net *.protection24.com lemag.bnpparibas lemagwealth.bnpparibas lemagpro.bnpparibas bddf.biapi.pro bddf-ppd.biapi.pro prisme.facil-iti.net *.parrainage.bnpparibas *.bnpparibas 2 upgrade-insecure-requests; frame-ancestors *.cisco.com *.jasper.com *.ciscospark.com *.ciscolive.com *.appdynamics.com 2 default-src 'self' https://api.mixpanel.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.facebook.net https://www.facebook.com https://snap.licdn.com https://connect.liblynx.com https://sandbox.liblynx.com https://www.google-analytics.com https://optimize.google.com https://ssl.google-analytics.com https://cdnjs.cloudflare.com https://ajax.cloudflare.com https://cdn.mxpnl.com https://cdn4.mxpnl.com https://api.mixpanel.com https://www.googletagmanager.com https://kit.fontawesome.com https://use.fontawesome.com https://pro.fontawesome.com https://scholar.google.com https://api.altmetric.com https://d1bxh8uas1mnw7.cloudfront.net https://js.trendmd.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; img-src 'self' https://ssl.google-analytics.com https://www.google-analytics.com https://optimize.google.com https://www.googletagmanager.com https://connect.liblynx.com https://sandbox.liblynx.com https://stats.g.doubleclick.net https://cdn.mxpnl.com https://images.mxpnl.com https://badges.altmetric.com https://d1uo4w7k31k5mn.cloudfront.net https://www.facebook.com https://px.ads.linkedin.com https://www.linkedin.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io data:; connect-src 'self' https://www.facebook.com https://www.google-analytics.com https://api.mixpanel.com/ https://scholar.google.com https://*.trendmd.com https://cc.trendmd.co https://ka-p.fontawesome.com https://stats.g.doubleclick.net http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; style-src 'self' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com https://use.fontawesome.com https://pro.fontawesome.com https://ka-p.fontawesome.com https://d1bxh8uas1mnw7.cloudfront.net https://trendmd.s3.amazonaws.com https://css.trendmd.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://use.fontawesome.com https://pro.fontawesome.com https://ka-p.fontawesome.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; frame-src https://*.emerald.com https://*.emeraldnorthstar.com https://www.googletagmanager.com https://optimize.google.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; object-src 'self' 2 default-src https:; connect-src https: wss:; font-src https: data:; img-src https: data:; media-src https: blob: data:; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; worker-src https: blob: 2 default-src 'self' https://analytics.govinfo.gov https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com; object-src 'unsafe-inline' 'self' ; style-src 'unsafe-inline' 'self' https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com https://fonts.googleapis.com; img-src 'unsafe-inline' 'self' http://insideanalytics.gpo.gov https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com https://analytics.govinfo.gov data:; font-src 'unsafe-inline' 'self' https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self'; frame-src 'self' https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com; 2 default-src 'self' https:; frame-src 'self' https: blob:; worker-src 'self' blob: ; child-src blob: ; script-src 'self' https: 'unsafe-inline' https://vaas.acapela-group.com 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob: https://javabuilderbeta-output.dev-code.org; font-src 'self' https: data:; connect-src 'self' https: https://api.pusherapp.com wss://ws.pusherapp.com wss://*.firebaseio.com http://localhost:8080 https://curriculum.code.org/ wss://*.code.org wss://javabuilderbeta.dev-code.org; media-src 'self' https: data: http://vaas.acapela-group.com https://javabuilderbeta-output.dev-code.org; report-uri //code.org/https/mixed-content; frame-ancestors 'self' http://*.disney.com http://*.diznee.net cuantrix.mx code.org studio.code.org curriculum.code.org codecurricula.com 2 script-src 'self' *.startpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' data: *.startpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com; report-uri https://www.startpage.com/do/cspvr 2 default-src * blob: data: 'unsafe-inline' 'unsafe-eval'; script-src * blob: data: 'unsafe-inline' 'unsafe-eval'; connect-src * data: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; child-src * blob: data: ; style-src * 'unsafe-inline'; 2 default-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.go-mpulse.net https://cdn.polyfill.io https://*.dynamicyield.com https://intljs.rmtag.com https://www.googletagmanager.com https://d16fk4ms6rqz1v.cloudfront.net https://cdn.merklesearch.com https://cdn.pbbl.co https://s.pinimg.com https://bat.bing.com https://assistjs.skimresources.com https://connect.facebook.net https://*.twitter.com https://cdn.groupbycloud.com https://www.google-analytics.com https://tags.tiqcdn.com https://www.googleadservices.com https://static.ads-twitter.com https://js-agent.newrelic.com https://*.afterpay.com https://bam.nr-data.net https://y8ui6jzp.micpn.com https://*.datasteam.io https://ci-mpsnare.iovation.com https://tpc.googlesyndication.com https://*.salesforceliveagent.com https://static.site24x7rum.com https://*.paypal.com https://*.apple.com https://www.gstatic.com https://*.akamaihd.net https://www.myregistry.com https://s3.amazonaws.com https://app.curalate.com https://*.clearpay.co.uk https://polyfill.io https://js.appboycdn.com https://maxcdn.bootstrapcdn.com https://fast.fonts.net https://*.googleapis.com https://p.dlx.addthis.com https://px0.pbbl.co https://*.google.com https://images.contentful.com https://images.ctfassets.net https://*.criteo.com https://h.nexac.com https://*.dc-storm.com https://consent.jrs5.com https://consent.mediaforge.com https://consent.nxtck.com https://*.groupbycloud.com https://*.linksynergy.com https://www.polyvore.com https://*.bazaarvoice.com https://data.photorank.me https://www.ssense.com https://*.akstat.io https://www.google.co.uk https://*.perimeterx.net https://rtb-csync.smartadserver.com https://ads.yahoo.com http://images.anthropologie.com https://pixel.rubiconproject.com https://*.gstatic.com https://www.google.ca https://www.google.de https://*.rkdms.com https://idsync.rlcdn.com https://www.google.fr https://www.google.es https://www.google.com.au https://www.google.co.jp https://www.google.nl https://x.bidswitch.net https://www.google.it https://*.agkn.com https://pixel.advertising.com https://www.google.com.mx https://www.google.ie https://www.google.com.ar https://www.google.co.nz https://sync.outbrain.com https://secure.adnxs.com https://sp.analytics.yahoo.com https://www.google.co.in https://*.rewardstyle.com https://r.casalemedia.com https://cdn.dashhudson.com https://*.ra.linksynergy.com https://cx.atdmt.com https://pixel.tapad.com https://use.fontawesome.com https://fonts.gstatic.com https://cdn.dynamicyield.com https://*.fls.doubleclick.net https://dis.us.criteo.com https://ct.pinterest.com https://c.go-mpulse.net https://dev.appboy.com https://www.facebook.com https://*.bluecore.com https://*.api.bazaarvoice.com https://dis.eu.criteo.com https://sentry.io https://videos.contentful.com https://www.youtube.com https://videos.ctfassets.net https://*.g.doubleclick.net https://gum.criteo.com https://images.anthropologie.com https://api.bazaarvoice.com https://static.criteo.net https://www.shopstylecollective.com https://www.shopstylecollective.co.uk https://player.vimeo.com https://core.conversant.mgr.consensu.org https://www.babylist.com https://*.scene7.com https://gmurphy2018.wufoo.com https://*.stg-sessionm.com https://*.sessionm.com https://*.dotomi.com https://mpsnare.iesnare.com https://*.adsymptotic.com https://*.attentivemobile.com https://*.attn.tv https://*.attentivemobile.com https://cdn.honey.io https://cdn.contentful.com https://open.spotify.com https://*.myunidays.com https://*.murdoog.com https://g.3gl.net https://r.3gl.net.cn https://r.3gl.net https://trustbadge.api.etrusted.com https://*.tealiumiq.com https://*.salesforce.com https://*.px-cloud.net https://sdk.iad-01.braze.com https://idsync.rlcdn.com https://*.force.com https://*.crazyegg.com https://d38xvr37kwwhcm.cloudfront.net https://trail.grin.co https://downloads.contentful.com https://cf.adxcel.com https://data.adxcel-ec2.com https://*.8x8.com/ https://*.btttag.com https://www.cloudflare.com/cdn-cgi/trace https://*.krxd.net https://track.securedvisit.com/ https://*.tiktok.com https://business.topbuzz.com https://business-sg.topbuzz.com https://*.tiktokcdn.com https://*.ibytedtos.com https://s0.ipstatp.com bytedance: https://cdn.cookielaw.org https://*.evergage.com https://connect.studentbeans.com/v4/anthropologie/uk https://privacyportal.onetrust.com https://*.urbndata.com;frame-ancestors 'none'; 2 media-src 'self' blob: livestream.st-andrews.ac.uk livestream1.st-andrews.ac.uk livestream2.st-andrews.ac.uk livestream-test.st-andrews.ac.uk; 2 object-src 'self' https://marketing-cdn.hightail.com;base-uri 'self';img-src https: http: blob: data:; frame-src https://* https://www.google.com/recaptcha/ 'self';font-src 'self' https://marketing-cdn.hightail.com data: ;script-src data: 'unsafe-inline' 'unsafe-eval' 'self' https://forms.hsforms.com/embed/ https://app.link/ http://js.bizographics.com/ http://stats.pusher.com/ http://www.googleadservices.com/ https://www.googleadservices.com https://www.google-analytics.com/ https://cdn.branch.io/ https://cdn.optimizely.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://snap.licdn.com/ https://dc.ads.linkedin.com/ https://px.ads.linkedin.com/ https://js-agent.newrelic.com/ https://bam.nr-data.net/ https://sjs.bizographics.com/ https://assets.zendesk.com/ https://www.bizographics.com/ https://secure.adnxs.com/ https://v2.zopim.com/ https://*.pusher.com/ https://js.hs-banner.com/ https://js.hs-scripts.com/ https://js.hs-analytics.net/ https://www.googletagmanager.com/ https://tagmanager.google.com/ https://googleads.g.doubleclick.net/ https://forms.hubspot.com/ https://cdnjs.cloudflare.com/ https://code.jquery.com/ https://request.eprotect.vantivprelive.com/ https://request.eprotect.vantivcnp.com/ https://*.global.ssl.fastly.net/ http://js.hs-analytics.net/ http://js.hs-scripts.com/ http://js.hsforms.net/ http://cdnjs.cloudflare.com/ https://static.zdassets.com/ http://www.google-analytics.com/ https://*.pendo.io/ http://ajax.googleapis.com/ https://img.en25.com/i/livevalidation_standalone.compressed.js https://img.en25.com/Web/OpenTextGlobal/ https://pendo-io-static.storage.googleapis.com/ https://*.googletagmanager.com/ https://pendo-static-5705431416832000.storage.googleapis.com/ http://cdn.jsdelivr.net/npm/cookieconsent@3/ https://player.vimeo.com/* data https://marketing-cdn.hightail.com/; frame-ancestors 'self' https://marketing-cdn.hightail.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.surveymonkey.com ajax.googleapis.com static.ads-twitter.com analytics.twitter.com analytics.tiktok.com sf16-scmcdn-va.ibytedtos.com www.gstatic.com www.google.com www.googletagmanager.com www.google-analytics.com *.appboycdn.com *.facebook.net; style-src 'self' 'unsafe-inline'; connect-src 'self' www.google-analytics.com stats.g.doubleclick.net life360.zendesk.com support.life360.com *.greenhouse.io *.braze.com analytics.tiktok.com; img-src 'self' *.cloudfront.net *.locationiq.org life360-wordpress.s3.amazonaws.com life360.zendesk.com support.life360.com www.googletagmanager.com www.google-analytics.com *.google.com t.co www.facebook.com *.mathtag.com *.ytimg.com data: *.gravatar.com; child-src 'self' www.surveymonkey.com www.ajax.googleapis.com www.youtube.com www.youtube-nocookie.com www.google.com *.doubleclick.net www.facebook.com; font-src 'self' data:; 2 default-src 'self'; media-src 'self' *.consumerfinance.gov; img-src 'self' *.consumerfinance.gov www.ecfr.gov s3.amazonaws.com www.gstatic.com ssl.gstatic.com stats.g.doubleclick.net img.youtube.com *.google-analytics.com trk.cetrk.com searchstats.usa.gov gtrk.s3.amazonaws.com *.googletagmanager.com tagmanager.google.com maps.googleapis.com optimize.google.com api.mapbox.com *.tiles.mapbox.com stats.search.usa.gov blob: data: www.facebook.com www.gravatar.com *.qualtrics.com *.mouseflow.com; connect-src 'self' *.consumerfinance.gov *.google-analytics.com *.googleoptimize.com *.tiles.mapbox.com api.mapbox.com bam.nr-data.net s3.amazonaws.com public.govdelivery.com n2.mouseflow.com api.iperceptions.com *.qualtrics.com raw.githubusercontent.com; font-src 'self' data: *.consumerfinance.gov fast.fonts.net fonts.google.com fonts.gstatic.com; style-src 'self' 'unsafe-inline' *.consumerfinance.gov fast.fonts.net tagmanager.google.com optimize.google.com api.mapbox.com fonts.googleapis.com; frame-src 'self' *.consumerfinance.gov *.googletagmanager.com *.google-analytics.com *.googleoptimize.com optimize.google.com www.youtube.com *.doubleclick.net universal.iperceptions.com www.facebook.com staticxx.facebook.com mediasite.yorkcast.com *.qualtrics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.consumerfinance.gov *.google-analytics.com *.googletagmanager.com *.googleoptimize.com tagmanager.google.com optimize.google.com ajax.googleapis.com search.usa.gov api.mapbox.com js-agent.newrelic.com dnn506yrbagrg.cloudfront.net bam.nr-data.net *.youtube.com *.ytimg.com trk.cetrk.com universal.iperceptions.com cdn.mouseflow.com n2.mouseflow.com us.mouseflow.com geocoding.geo.census.gov tigerweb.geo.census.gov about: connect.facebook.net www.federalregister.gov storage.googleapis.com *.qualtrics.com 2 frame-ancestors 'self' icrc.org *.icrc.org icrcproject.org *.icrcproject.org forum-icrc.org www.forum-icrc.org 2 frame-ancestors https://*.demandbase.com 2 default-src data: wss: blob: blob 'unsafe-eval' 'unsafe-inline' *.base.be *.telenet.be *.telenet.be:* https://zentr.cc https://4610619.fls.doubleclick.net https://127.demdex.net http://api-accept.customersaas.com http://assets.adobedtm.com https://assets.adobedtm.com https://base.pingvp.com https://base.rest.ac-systems.com https://bid.g.doubleclick.net https://custom.luckycycle.com https://cdn.cookielaw.org https://connect.facebook.net https://ct.pinterest.com https://cm.everesttech.net http://cloud.typography.com https://d1r5etm691cejh.cloudfront.net http://dev.day.com https://dpm.demdex.net https://fonts.gstatic.com https://fonts.googleapis.com https://is-accept.customersaas.com https://js.driftt.com https://js.driftqa.com https://privacyportal-eu.onetrust.com http://smetrics.telenet.be https://smetrics.base.be https://static.zdassets.com http://static.telenet.be https://s.pinimg.com https://static-accept.customersaas.com https://static.customersaas.com https://stats.g.doubleclick.net https://s3.eu-central-1.amazonaws.com https://tracker.customersaas.com http://tags.tiqcdn.com https://tpc.googlesyndication.com https://translate.googleapis.com https://839-xun-065.mktoutil.com https://upctelenetgroup.112.2o7.net https://use.typekit.net http://w.usabilla.com https://w.usabilla.com https://www.google-analytics.com https://www.googleadservices.com http://www.googleadservices.com https://www.googletagmanager.com http://www.googletagmanager.com https://www.facebook.com https://www.gstatic.com https://www.pingvp.com https://www.wista.com https://www.youtube.com https://upctelenet20test.112.2o7.net https://googleads.g.doubleclick.net https://839-xun-065.mktoresp.com https://munchkin.marketo.net https://telenethelp.zendesk.com https://ekr.zdassets.com https://telenet.premiumplus.io https://www.google.com https://translate.google.com https://www.trg.telenet.be.seg.js https://player.vimeo.com *.hotjar.com *.hotjar.io *.wistia.com *.wistia.net https://embedwistia-a.akamaihd.net https://fg8vvsvnieiv3ej16jby.litix.io https://upc.d2.sc.omtrdc.net https://libertyglobalpaneu.tt.omtrdc.net https://cdn.tt.omtrdc.net https://widget-mediator.zopim.com https://youtube.com;img-src 'self' data: data blob blob: *.telenet.be *.telenet.be:* https: http://4610619.fls.doubleclick.net http://loadinggif.com;report-uri https://api.prd.telenet.be/csp-violation-report; 2 frame-ancestors 'self' https://*.inconvo.chat https://*.yougov.chat 2 frame-ancestors 'self' https://webhare.utwente.nl https://employees.utwente.nl 2 default-src 'self' https: blob: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 2 frame-ancestors *.ushmm.org; 2 default-src 'self' https: *.daimler.com *.slidesync.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.daimler.com *.slidesync.com *.usercentrics.eu js.api.here.com narando.com cdn.podigee.com www.googletagmanager.com; object-src 'none'; style-src 'self' 'unsafe-inline' *.daimler.com *.slidesync.com js.api.here.com cdn.podigee.com player.podigee-cdn.net; img-src 'self' https: blob: data: *.daimler.com *.slidesync.com *.usercentrics.eu *.api.here.com player.podigee-cdn.net; frame-src *.daimler.com slidesync.com www.youtube-nocookie.com live.comsatmedia.com embed.gomexlive.com daimler.gomexlive.com my.matterport.com service.mercedes-benz-classic.com app.usercentrics.eu *.narando.com cdn.podigee.com player.podigee-cdn.net; font-src 'self' *.daimler.com assets.slidesync.com cdn.podigee.com player.podigee-cdn.net js.api.here.com fonts.gstatic.com; connect-src 'self' https: wss: blob: *.daimler.com *.slidesync.com *.podigee.com *.podigee.io player.podigee-cdn.net *.api.here.com *.hereapi.com; worker-src 'self' blob: 2 default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: analytics.google.com *.boltdns.net *.brightcovecdn.com *.llnwd.net *.llnw.net *.adroll.com d.adroll.mgr.consensu.org *.dca0.com *.adyen.com *.akamaihd.net *.go-mpulse.net *.akstat.io *.aexp-static.com *.americanexpress.com tag.yieldoptimizer.com hm.baidu.com *.bambuser.com x.bidswitch.net bat.bing.com *.branch.io app.link s.thebrighttag.com s.btstatic.com *.brightcove.com *.brightcove.net dpdb.webvr.rocks *.burberry.com burberry.com cdnjs.cloudflare.com *.contentsquare.net script.crazyegg.com *.doubleclick.net connect.facebook.net www.facebook.com *.fitanalytics.com reporting.us1.fredhopperservices.com d1snv67wdds0p2.cloudfront.net *.googleapis.com *.googlesyndication.com *.gstatic.com adservice.google.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.googletagservices.com cdn.grata.cn *.usehero.com *.twilio.com wss://*.vss.twilio.com *.us1.twilio.com wss://*.us1.twilio.com *.eu1.twilio.com wss://*.eu1.twilio.com *.ipinyou.com www.ist-track.com x.klarnacdn.net *.klarna.com *.klarnaevt.com *.liveperson.net wss://*.liveperson.net *.lpsnmedia.net *.mathtag.com service.maxymiser.net bam.nr-data.net bam-cell.nr-data.net js-agent.newrelic.com cdn.cookielaw.org geolocation.onetrust.com privacyportal-eu.onetrust.com *.online-metrix.net *.openx.net *.optimizely.com cdn-assets-prod.s3.amazonaws.com optimizely.s3.amazonaws.com *.paypal.com www.personifyxpassets.com 7vr7bv2vla.execute-api.eu-west-1.amazonaws.com ct.pinterest.com s.pinimg.com *.qudini.com po.st s.po.st rp.gwallet.com *.rakuten.com *.nxtck.com *.xg4ken.com *.linksynergy.com intljs.rmtag.com ln-rules.rewardstyle.com *.richrelevance.com *.riskified.com sb.scorecardresearch.com *.shoprunner.com *.shoprunner.net shopstylecollective.com i.simpli.fi d1fc8wv8zag5ca.cloudfront.net *.sonobi.com *.spotify.com t.a3cloud.net p.teads.tv idsync.rlcdn.com *.turn.com analytics.twitter.com static.ads-twitter.com platform.twitter.com vjs.zencdn.net sp.analytics.yahoo.com s.yimg.com s.yimg.jp b97.yahoo.co.jp mc.yandex.ru *.zooz.com; style-src * data: 'unsafe-inline'; img-src * data:; font-src * data:; media-src * blob:; object-src 'self'; frame-ancestors 'self' *.burberry.com burberry.com; base-uri 'self'; upgrade-insecure-requests; report-uri https://brby.report-uri.com/r/t/csp/enforce 2 connect-src 'self' data: *.credit-suisse.com *.hedani.net *.decibelinsight.net *.demdex.net *.doubleclick.net *.inbenta.com *.inbenta.io *.knowledgevision.com *.omtrdc.net *.qualtrics.com www.google-analytics.com wss://cdn.decibelinsight.net wss://collection.decibelinsight.net *.facebook.com *.googletagmanager.com soundcloud.com cdn.ampproject.org *.bing.com *.go-mpulse.net *.akstat.io *.akamaihd.net *.cookielaw.org *.onetrust.com *.pinterest.com webexapis.com *.wbx2.com *.ciscospark.com wss://*.ciscospark.com analytics.tiktok.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.youtube.com www.google.com *.google-analytics.com https://www.googletagmanager.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com *.en25.com cdn.ampproject.org use.fontawesome.com api.connectedcommunity.org http://www.lifescitrc.org https://cdn.feathr.co cdn.feathr.co polo.feathr.co marco.feathr.co *.crazyegg.com *.hotjar.com *.informz.net *.surveymonkey.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com https://www.googletagmanager.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com use.fontawesome.com use.typekit.net p.typekit.net *.crazyegg.com *.hotjar.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com use.fontawesome.com data: use.typekit.net *.crazyegg.com *.hotjar.com; img-src 'self' novartis.contacthr.com novartispharmaceuticalscorp.contacthr.com *.gstatic.com *.googleapis.com *.google-analytics.com https://www.googletagmanager.com platform.tumblr.com web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com pbs.twimg.com twitter.com *.twitter.com *.twimg.com use.fontawesome.com data: blob: *.eloqua.com *.physiology.org connect.the-aps.org *.cloudfront.net *.placehold.it stats.g.doubleclick.net marco.feathr.co *.adsrvr.org polo-v1.feathr.co polo.feathr.co *.crazyegg.com *.hotjar.com *.informz.net *.surveymonkey.com; media-src 'self' data: blob: www.youtube.com; frame-src 'self' novartis.contacthr.com novartispharmaceuticalscorp.contacthr.com www.youtube.com api.connectedcommunity.org cdn.feathr.co polo.feathr.co marco.feathr.co *.qzzr.com *.crazyegg.com *.hotjar.com twitter.com *.twitter.com html5-player.libsyn.com www.podbean.com *.surveymonkey.com; connect-src 'self' *.informz.net *.google-analytics.com polo.feathr.co *.crazyegg.com *.doubleclick.net; 2 frame-ancestors https://ads.idntimes.com 2 frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.verywellfit.com 2 script-src 'strict-dynamic' 'sha256-1vXR78YtEYpuZYWhpSNFxaXfTJtlQSCVwdj9gtJSALg=' 'sha256-P067QaQDpXJu6Oub75RPQYCa/tJpwJxWzLiObISlUnA=' 'sha256-cF1UwfkF/v8XpyAOu4hgTgPaoZOBw3okmSaaWED5oYI=' 'sha256-rsdLVIWrJVTWXLWDzh1BioA1YkBtUQAG+DiX8s7avp4=' 'sha256-01G75By5cJsbnZGNxUJQzM4laUHuSB8+YKAiVo38kcc=' 'sha256-SkOCdEm6IZ/8pXsA0cQAX89hzK/cmF8anR4LNUScsvY=' 'sha256-J0kkMVKDmJwwgofdmuh3a6FoY84vvJrdW10WfnsLADg=' 'sha256-Mm4UKro7hWGbtZFqNk9YFdBXwA+pPhqPzkly1PokaGQ=' 'sha256-zPCgXfANH6IYn3ZfjbTpxrsOZZMiOTM5tpjf468zPrA=' 'sha256-cCZaqNCCDlFuSmi+RPWsxY+rHQ0fK4ONVn/gtaudo2c=' 'sha256-FDnJXpR+wDyTR+MDq5wmYib9Gcj6rZDs4tXyHy04BdA=' 'unsafe-inline' http: https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri https://csp.withgoogle.com/csp/webdev 2 default-src 'unsafe-inline' https:; img-src data: https:; media-src blob: data: https:; script-src 'unsafe-eval' 'unsafe-inline' https:; frame-ancestors 'self' https://www.20min.ch https://*.unitycms.io; 2 frame-ancestors *.2checkout.com *.2co.com *.avangate.com 2 frame-ancestors 'self' https://piwik.mz.tu-dresden.de 2 frame-ancestors *.seismic.com *.decibel.com *.decibelinsight.net *.twitter.com *.shareaholic.net *.onetrust.com *.omtrdc.net *.demdex.net *.doubleclick.net *.shareaholic.com *.linkedin.com *.facebook.com *.eurolandir.com *.cookielaw.com *.geoip-js.com *.google-analytics.com *.google.*; 2 frame-ancestors 'self' *.ally.com; 2 default-src https: 'self' 'unsafe-inline' 'unsafe-eval' recruitics.com eprotect.vantivcnp.com *.vimeo.com *.recruitics.com soundcloud.com vimeo.com *.soundcloud.com *.adspeed.net sterlingcheck.com *.sterlingcheck.com vimeocdn.com jquery.com *.jquery.com *.vimeocdn.com *.vantivcnp.com worldpay.com *.paypal.com *.worldpay.com paypal.com paypalobjects.com *.paypalobjects.com *.greenhouse.io greenhouse.io *.braintree-api.com adspeed.net adsymptotic.com *.adsymptotic.com linkedin.com *.linkedin.com ads.linkedin.com googleapis.com licdn.com google.ca *.licdn.com iterable.com *.hexagon-analytics.com *.siftscience.com *.iterable.com *.googleapis.com google.com hsforms.com hsadspixel.net hsleadflows.net hs-scripts.com hs-analytics.net hubspot.com *.google.com *.amplitude.com amplitude.com *.getsentry.com hubapi.com hsforms.net *.hscta.net hscta.net *.hsforms.net *.hubapi.com *.hsforms.com *.hsadspixel.net *.hsleadflows.net *.hs-scripts.com *.hs-analytics.net *.hubspot.com getsentry.com akamaihd.net google-analytics.com *.google-analytics.com fls.doubleclick.net googleadservices.com *.googleadservices.com wss://*.care.com *.googletagmanager.com *.care.com *.cdn-care.com g.doubleclick.net *.facebook.net *.akamaihd.net cloudfront.net *.cloudfront.net btttag.com *.btttag.com googletagmanager.com facebook.com facebook.net *.facebook.com care.com cdn-care.com *.gstatic.com siftscience.com *.pinimg.com *.google.ca *.tiqcdn.com pinimg.com pinterest.com *.pinterest.com gstatic.com *.monetate.net monetate.net hexagon-analytics.com tiqcdn.com *.googlesyndication.com *.google.de shareasale.com pmmapads.com *.shareasale.com pmqzads.com *.pmmapads.com *.pmqzads.com *.google.ie *.google.ch *.google.es *.google.nl ieframe.dll *.google.fr *.google.se *.google.fi kis.v2.scr.kaspersky-labs.com *.google.it *.snapchat.com *.ieframe.dll getletterpress.com *.getletterpress.com *.flaticon.com svc.bronze.dom.omni.carezen.net wss://*.tokbox.com talentwise.com *.talentwise.com abtasty.com *.abtasty.com tokbox.com *.tokbox.com opentok.com *.stripe.com *.indeed.com indeed.com snapchat.com sc-static.net *.sc-static.net dropbox.com *.dropbox.com ziprecruiter.com *.ziprecruiter.com *.liveperson.net stripe.com *.opentok.com google.co.in google.com.mx *.youtube.com ytimg.com youtube.com xx.fbcdn.net *.cloudinary.com cloudinary.com *.twitter.com twitter.com google.co.jp emjcd.com *.emjcd.com amazonaws.com google.co.uk google.es google.nl google.fr google.de google.ie google.ch googlesyndication.com google.com.tr *.amazonaws.com google.it google.com.sg google.com.ph liveperson.net *.bing.com bing.com google.co.za s3.amazonaws.com google.se google.fi agkn.com lpsnmedia.net *.lpsnmedia.net v.liveperson.net *.agkn.com *.ytimg.com google.com.jm google.co.nz trendmicro.com *.hsappstatic.net *.trendmicro.com hubspot.net *.usemessages.com *.hscollectedforms.net *.google.tt google.at google.ae google.com.co google.com.sa hsappstatic.net *.hubspot.net alocdn.com *.alocdn.com va.us.criteo.net *.doubleclick.net kinsights.com *.kinsights.com *.criteo.net *.criteo.com da.us.criteo.net sv.us.criteo.net us.criteo.com criteo.net criteo.com *.amazon-adsystem.com *.monetate.org monetate.org ivaws.com *.ivaws.com narrative.io *.narrative.io *.honey.io honey.io mplxtms.com quora.com *.adsrvr.org adsrvr.org amazon-adsystem.com usemessages.com google.al *.google.lt *.google.cz *.google.rs *.google.sk *.google.bg *.google.al google.tt google.com.do google.co.cr cloudflare.com google.sk google.com.au google.hu *.google.hr *.google.bs *.google.hu google.ee google.com.np *.google.ae google.bg *.google.at *.google.cl google.rs *.google.dk *.google.gr *.google.no google.cz google.lt google.hr google.bs google.com.pa google.pl google.com.ar chrome-extension jwpltx.com p.jwpcdn.com google.com.ua google.no google.pt google.com.pr google.com.tw google.co.vi ms-browser-extension google.com.hk yahoo.com *.google.pl thrtle.com *.thrtle.com google.gr google.dk hscollectedforms.net data: blob:; 2 frame-ancestors 'self' https://*.coremedia.vm https://*.coremedia.cloud https://*.coremedia.io https://*.coremedia.com https://*.quickrun.io https://*.coremedia.rocks 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: d2e70e9yced57e.cloudfront.net d2k0escgkdw2ev.cloudfront.net d3k4ohqf5n453g.cloudfront.net *.googleapis.com *.google.com *.gstatic.com *.google-analytics.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net cdn.ampproject.org bat.bing.com s.yimg.com cdn.taboola.com trc.taboola.com sp.analytics.yahoo.com *.facebook.com connect.facebook.net www.linkedin.com www.reddit.com *.twitter.com static.ads-twitter.com *.linkedin.com *.pinterest.com *.reddit.com www.dianomi.com loadus.exelator.com ct.buyright.com affiliate.icclicktracker.com amplify.outbrain.com track.supersonicads.com ads.trafficjunky.net cdn.ckeditor.com *.wistia.com sentry.io www.datadoghq-browser-agent.com opensharecount.com *.mediaalpha.com smartforms.ekomi.com *.amazonaws.com *.mtcaptcha.com cfstatic.efdevhub.info cdn.wallethub.com static.olark.com nrpc.olark.com acsbapp.com cdn.acsbapp.com web1.acsbapp.com api.olark.com 2 default-src 'self'; script-src 'self' c.mql5.com www.tradays.com trade.mql5.com www.mql5.com content.mql5.com search.mql5.com player.youku.com https://c.paypal.com maps.googleapis.com maps.google.com https://cdn.chatbot.com test-api.sumsub.com api.sumsub.com static.sumsub.com 'unsafe-inline' 'unsafe-eval'; style-src player.youku.com c.mql5.com www.tradays.com 'unsafe-inline' fonts.gstatic.com fonts.googleapis.com; img-src 'self' msg1.mql5.com c.mql5.com content.mql5.com charts.mql5.com www.mql5.com www.tradays.com blob: data: *.tile.openstreetmap.org https://c.paypal.com https://b.stats.paypal.com https://dub.stats.paypal.com csi.gstatic.com maps.gstatic.com maps.google.com maps.googleapis.com chart.googleapis.com khms0.googleapis.com khms1.googleapis.com khms2.googleapis.com khms3.googleapis.com; media-src 'self' msg1.mql5.com c.mql5.com; font-src c.mql5.com fonts.gstatic.com fonts.googleapis.com; connect-src 'self' trade.mql5.com https://msg1.mql5.com wss://msg1.mql5.com wss://gwt1.mql5.com wss://gwt2.mql5.com wss://gwt3.mql5.com wss://gwt4.mql5.com wss://gwt5.mql5.com wss://gwt6.mql5.com wss://gwt7.mql5.com wss://gwt8.mql5.com wss://gwt9.mql5.com wss://gwt10.mql5.com wss://gwt11.mql5.com wss://gwt12.mql5.com wss://gwt13.mql5.com wss://gwt14.mql5.com wss://gwt15.mql5.com wss://gwt99.mql5.com https://cdn.chatbot.com; frame-src 'self' c.mql5.com www.tradays.com trade.mql5.com player.youku.com www.youtube.com https://c.paypal.com https://cdn.chatbot.com test-api.sumsub.com api.sumsub.com blob: mql5buy: mql4buy:; object-src 'self' c.mql5.com player.youku.com www.youtube.com; worker-src 'self' c.mql5.com player.youku.com www.youtube.com; 2 frame-ancestors 'self' us.creativecdn.com *.encuentra24.com *.inmobiliaria24.com *.casas24.com *.carros24.com encuentra24.zendesk.com *.youtube.com view.atdmt.com www.facebook.com www.google.com encuentra24.wufoo.com.mx encuentra24.ticforum-ca.com tpc.googlesyndication.com googleads.g.doubleclick.net storage.googleapis.com js.stripe.com e24.unityducruet.com cotizador.unityducruet.com api-js.datadome.co s.ytimg.com www-widgetapi.js googlesyndication.com youtube.com teads.tv; 2 frame-ancestors https://*.verizon.com http://*.verizon.com https://*.verizonwireless.com http://*.verizonwireless.com https://*.verizonbusinessfios.com/ https://*.consensuscorp.com http://*.consensuscorp.com https://vbmbos.lightning.force.com http://vbmbos.lightning.force.com https://vbmbos--c.na73.visual.force.com http://vbmbos--c.na73.visual.force.com https://vbmbos.my.salesforce.com http://vbmbos.my.salesforce.com 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.googletagmanager.com https://tagmanager.google.com/ https://www.google-analytics.com https://translate.google.com https://translate.googleapis.com https://www.youtube.com/iframe_api https://s.ytimg.com/; img-src 'self' data: https://cdn.prgloo.com/ https://www.google.com https://www.google-analytics.com/ https://www.googletagmanager.com/ https://www.gstatic.com https://translate.google.com https://translate.googleapis.com https://*.ytimg.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://translate.google.com https://translate.googleapis.com https://tagmanager.google.com/; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; frame-src https://www.googletagmanager.com https://www.youtube.com https://youtu.be https://www.youtube-nocookie.com https://youtube-nocookie.com; object-src 'self'; report-uri /service/csp; 2 default-src https:;script-src https: 'unsafe-inline' 'unsafe-eval';style-src https: 'unsafe-inline' 'unsafe-eval';img-src https: data: blob:;media-src https: data: blob:;worker-src https: data: blob:;font-src https: data:;connect-src https: wss: 2 default-src 'self' * *.faphouse.com; img-src * data: blob:; media-src *; script-src 'self' 'unsafe-inline' https://assets-l3.flixcdn.com www.google.com www.gstatic.com *.amplitude.com www.google-analytics.com www.googletagmanager.com *.hotjar.com; style-src * 'unsafe-inline'; font-src * data: 'unsafe-inline' 2 upgrade-insecure-requests; frame-ancestors 'self'; report-uri https://www.argos.co.uk/logging-api/2/security 2 default-src 'self' data: https://*.commerce.gov https://*.mbda.gov https://*.d.commerce.gov https://content.govdelivery.com https://www.google-analytics.com https://use.fontawesome.com https://dap.digitalgov.gov https://*.twitter.com https://*.twimg.com https://*.youtube.com https://livestream.com https://*.livestream.com https://api.new.livestream.com https://rev-vbrick.uspto.gov https://*.facebook.com https://*.mapbox.com https://*.cloudflare.com https://*.tile.openstreetmap.org https://git.commerce.gov https://cdn.siteimprove.net https://youtube-nocookie.com https://www.youtube-nocookie.com https://*.uspto.gov 'unsafe-inline' 'unsafe-eval' ;upgrade-insecure-requests; 2 frame-src https://*.doubleclick.net:* https://*.facebook.com:* https://*.google.com:* https://*.soundcloud.com:* https://*.spotify.com:* https://*.twitter.com:* https://*.vimeo.com:* https://*.youtube.com:*; frame-ancestors 'self'; 2 frame-ancestors 'self' t4.scu.edu cms.scu.edu cms01.scu.edu thetrustproject.org media.scu.edu ecampus.scu.edu hrdev.scu.edu hrusr.scu.edu t4dev.scu.edu 166.78.46.137 campaign.scu.edu vanillasoft.net 2 frame-ancestors 'self' libertystreeteconomics.newyorkfed.org; 2 frame-ancestors vanderbilt.edu/AEA 'self' 2 default-src https: data: blob: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' https://*; 2 frame-ancestors https://docs.google.com https://*.googleusercontent.com; 2 default-src 'self'; script-src 'self' 'sha256-6vmNTbfgubexXPiaZdcqfKCk+vKBe9cfsKsAciXQtMg=' 'sha256-r1aYSsDn5Btub+zo7XZr6P3ZhmNyYTvHf/yjmzIpxT8=' 'sha256-aqdvQaQU9tkorRhtgHldablGaB5SI/SwbLemAOKE7Yo=' 'sha256-Vxv+qm8gMYYzbp7hSMakF5Q81e7GDj/Z5HZYT4ekhho=' 'sha256-uBpmtDakUPHISUCFtaVC869LxTI53EPQREvqhqlxGVU=' 'sha256-h8bC9y2R69GO3nntfTAfOohrJdzeOS7slDdbOSULEJo=' https://www.google-analytics.com/analytics.js https://cdncache-a.akamaihd.net/sub/b156ae9/98002/l.js https://www.youtube.com https://www.googletagmanager.com https://cdnjs.cloudflare.com/ajax/libs/picturefill/3.0.2/picturefill.min.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://www.youtube.com/iframe_api https://www2.osfound.org/shorten https://connect.facebook.net; style-src 'unsafe-inline' 'self'; object-src 'self' https://video.ted.com; base-uri 'self'; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.ingest.sentry.io; font-src 'self' https: data:; frame-src 'self' https://www.youtube.com https://w.soundcloud.com https://www.facebook.com; img-src 'self' https://i.ytimg.com https://opensocietyfoundations.imgix.net https://www.google-analytics.com https: data:; manifest-src 'self'; media-src 'self'; report-uri https://opensociety.report-uri.com/r/d/csp/enforce; worker-src 'none'; 2 frame-ancestors 'self' *.qnap.com *.qnap.com.tw 2 connect-src 'self' https://*.clicktale.net https://*.demdex.net https://*.doubleclick.net https://*.everesttech.net https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.mktoresp.com https://*.optimizely.com https://*.pingdom.net https://*.reddit.com https://*.securelist.com https://*.youtube.com https://box.kaspersky.com https://cdn.securelist.com https://e.infogram.com https://hn.algolia.com https://kaspersky.d3.sc.omtrdc.net https://kasperskycontenthub.com https://securelist.com https://tagmanager.google.com https://tpc.googlesyndication.com https://www.google-analytics.com; default-src 'self' https://*.securelist.com https://box.kaspersky.com https://cdn.securelist.com https://kasperskycontenthub.com https://kasperskycontenthub.com/securelist https://securelist.com https://tpc.googlesyndication.com; font-src 'self' data: https://*.gstatic.com https://*.securelist.com https://*.wp.com https://assets.kasperskycontenthub.com https://assets.threatpost.com https://box.kaspersky.com https://cdn.securelist.com https://fonts.googleapis.com https://fonts.gstatic.com https://kasperskycontenthub.com https://securelist.com https://tpc.googlesyndication.com; frame-src 'self' http://*.slideshare.net https://*.addthis.com https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.infogram.com https://*.instagram.com https://*.libsyn.com https://*.marketo.com https://*.securelist.com https://*.sekindo.com https://*.sharethis.com https://*.slideshare.net https://*.twitter.com https://*.wp.com https://*.youtube.com https://box.kaspersky.com https://cdn.securelist.com https://go.kaspersky.com https://infogram.com https://kasperskycontenthub.com https://player.vimeo.com https://s-static.ak.facebook.com https://securelist.com https://tagmanager.google.com https://tpc.googlesyndication.com https://www.brighttalk.com; img-src 'self' data: http://*.netdna-cdn.com http://*.wordpress.com http://*.wp.com http://assets.kasperskycontenthub.com http://assets.kasperskydaily.com http://assets.threatpost.com http://d2538mqrb7brka.cloudfront.net http://forum.kasperskyclub.ru http://i0.poll.fm http://media.kasperskycontenthub.com http://media.kasperskydaily.com http://media.threatpost.com https://*.addthis.com https://*.cdninstagram.com https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.google.ru https://*.gravatar.com https://*.gstatic.com https://*.infogram.com https://*.instagram.com https://*.netdna-cdn.com https://*.netdna-ssl.com https://*.securelist.com https://*.sekindo.com https://*.sharethis.com https://*.staticflickr.com https://*.twimg.com https://*.twitter.com https://*.wordpress.com https://*.wp.com https://*.ytimg.com https://addevent.com https://assets.kasperskycontenthub.com https://assets.kasperskydaily.com https://assets.threatpost.com https://blog.kaspersky.com https://box.kaspersky.com https://cdn.securelist.com https://csi.gstatic.com https://d1srlirzdlmpew.cloudfront.net https://d2538mqrb7brka.cloudfront.net https://geo.yahoo.com https://images.telechargement.fr https://instagramimages-a.akamaihd.net https://kaspersky.d2.sc.omtrdc.net https://kaspersky.d3.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://maps.googleapis.com https://media.kasperskycontenthub.com https://media.kasperskydaily.com https://media.threatpost.com https://player.vimeo.com https://polldaddy.com https://rum-collector.pingdom.net https://s.w.org https://s3-eu-west-1.amazonaws.com https://scontent.cdninstagram.com https://securelist.com https://stats.g.doubleclick.net https://t.co https://tagmanager.google.com https://threatpost.com https://tpc.googlesyndication.com https://track.addevent.com; object-src 'self' https://*.securelist.com https://box.kaspersky.com https://kasperskycontenthub.com https://player.vimeo.com https://polldaddy.com https://securelist.com https://tpc.googlesyndication.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' http://assets.kasperskycontenthub.com http://assets.threatpost.com https://*.addevent.com https://*.addthis.com https://*.cloudfront.net https://*.crazyegg.com https://*.demdex.net https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.flickr.com https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.googlesyndication.com https://*.gravatar.com https://*.gstatic.com https://*.instagram.com https://*.kaspersky.com https://*.marketo.com https://*.marketo.net https://*.optimizely.com https://*.polldaddy.com https://*.securelist.com https://*.sekindo.com https://*.sharethis.com https://*.twimg.com https://*.twitter.com https://*.woopra.com https://*.wp.com https://addthisevent.com https://adservice.google.com https://adservice.google.hr https://adservice.google.ru https://assets.adobedtm.com https://assets.kasperskycontenthub.com https://assets.threatpost.com https://box.kaspersky.com https://cdn.optimizely.com https://cdn.securelist.com https://connect.facebook.net https://connect.mail.ru https://e.infogram.com https://kaspersky.d2.sc.omtrdc.net https://kasperskycontenthub.com https://m.addthis.com https://m.addthisedge.com https://munchkin.marketo.net https://player.vimeo.com https://polldaddy.com https://rum-static.pingdom.net https://script.crazyegg.com https://securelist.com https://share.yandex.ru/ https://static.ads-twitter.com https://tagmanager.google.com https://tpc.googlesyndication.com https://vk.com https://www.addevent.com https://www.brighttalk.com https://www.flickr.com https://www.googletagmanager.com https://www.googletagservices.com https://www.linkedin.com; style-src 'self' 'unsafe-inline' http://*.googleapis.com http://assets.kasperskycontenthub.com http://assets.threatpost.com https://*.googleapis.com https://*.gravatar.com https://*.kaspersky.com https://*.marketo.com https://*.securelist.com https://*.sekindo.com https://*.sharethis.com https://*.twimg.com https://*.twitter.com https://*.wp.com https://assets.kasperskycontenthub.com https://assets.threatpost.com https://box.kaspersky.com https://cdn.securelist.com https://fonts.googleapis.com https://kasperskycontenthub.com https://s0.wp.com https://secure.gravatar.com https://securelist.com https://tagmanager.google.com https://tpc.googlesyndication.com 2 frame-ancestors https://eu1-ifwe.3dexperience.3ds.com https://eu1-215dsi0708-ifwe.3dexperience.3ds.com http://sw.local:81 http://sw2.local:81 https://sw2.local:4444 https://solidworks.com https://www-dev.itvpc.solidworks.com https://www-qal.itvpc.solidworks.com https://www-ppd.itvpc.solidworks.com https://www-contrib-ppd.itvpc.solidworks.com https://www-contrib.itvpc.solidworks.com https://www.solidworks.com www-int.itvpc.solidworks.com 2 img-src https: data: 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:; connect-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: wss://client.relay.crisp.chat; img-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:; style-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' http: data: https: blob: https://d.la2-c2-ord.salesforceliveagent.com https://logs1125.xiti.com https://www.google-analytics.com https://cdn.optimizely.com https://api.demandbase.com https://app-ab02.marketo.com https://www.googletagmanager.com https://magpie-static.ugc.bazaarvoice.com https://apc.ugc.bazaarvoice.com https://code.jquery.com wss://directline.botframework.com; 2 default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors *.newswire.com 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ravelry.com https://www.ravelry.com *.ravelrycache.com *.doorbell.io *.crazyegg.com https://*.ravelrycache.com https://*.chatlio.com plausible.io https://*.hotjar.com https://*.raygun.io https://*.pusher.com https://*.frontapp.com https://apis.google.com https://www.amazon.com https://www.dropbox.com *.googleapis.com https://*.googleapis.com *.google-analytics.com https://www.google.com *.gstatic.com https://maps.gstatic.com maps.googleapis.com maps.google.com *.nr-data.net *.newrelic.com https://*.newrelic.com https://*.twitter.com connect.facebook.net *.facebook.com *.pinterest.com https://*.hotjar.com https://*.pinterest.com; object-src 'self' *.ravelry.com *.macromedia.com *.etsy.com *.youtube.com https://*.youtube.com https://*.vimeo.com *.vimeo.com *.vimeocdn.com *.vimeo.com *.crazyegg.com *.gstatic.com *.raygun.io; frame-src 'self' https://*.facebook.com https://*.hotjar.com https://docs.google.com https://accounts.google.com https://www.amazon.com https://*.spotify.com https://*.buffer.com https://player.vimeo.com *.vimeo.com *.vimeocdn.com *.youtube.com https://*.youtube.com vine.co *.google.com https://*.twitter.com *.facebook.com *.pinterest.com chromenull://* chromeinvoke://* webviewprogressproxy://*; connect-src 'self' *.ravelry.com https://www2.ravelry.com doorbell.io:443 *.crazyegg.com https://*.raygun.io https://*.nr-data.net https://plausible.io https://*.hotjar.com https://*.dropbox.com https://www.ravelry.com wss://websocket.ravelry.com wss://websocket2.ravelry.com wss://*.hotjar.com translate.googleapis.com syndication.twitter.com https://*.chatlio.com https://*.pusher.com *.pusherapp.com; 2 frame-ancestors 'self' *.specless.io *.specless.tech http://*.seo.aws.about.com https://*.seo.aws.about.com http://*.dotdash.com https://*.dotdash.com *.byrdie.com 2 default-src *.bing.com *.adsrvr.org data: *.rackspace.com *.rackcdn.com *.quantserve.com *.qualtrics.com *.pingdom.net *.onetrust.com *.movies-previews.com *.movienewsletters.net *.mappedin.com *.krxd.net cdnjs.cloudflare.com cdn.ucb.org.br d1p5cqqchvbqmy.cloudfront.net ajax.aspnetcdn.com *.simon.com *.facebook.net *.facebook.com *.doubleclick.net *.cookielaw.org *.clickmeter.com blob: pixel.sojern.com p.placed.com *.clarity.ms www.linkedin.com web-proxy.mappedin.com tn.alphonso.tv stats.g.doubleclick.net sp.analytics.yahoo.com snap.licdn.com simm.netmng.com rules.quantcount.com px.ads.linkedin.com pubads.g.doubleclick.net p.adsymptotic.com mipubapistorageprod.blob.core.windows.net match.adsrvr.org log.pinterest.com ib.adnxs.com fcmatch.youtube.com d3j72de684fey1.cloudfront.net cm.g.doubleclick.net beacon.sojern.com assets.pinterest.com ad.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval' *.yottaa.net *.yimg.com *.yahoo.com *.westworldmedia.com *.splashthat.com *.recaptcha.net *.rackspacecloud.com *.gstatic.com *.gstatic.cn *.googleadservices.com *.googletagmanager.com *.googleapis.com *.google.com.mx *.google.com *.google-analytics.com; script-src-elem d1p5cqqchvbqmy.cloudfront.net ajax.aspnetcdn.com *.krxd.net *.gstatic.com *.gstatic.cn *.googletagmanager.com *.googleapis.com *.google.com.mx *.google.com *.google-analytics.com *.facebook.net *.facebook.com *.doubleclick.net *.cookielaw.org *.clickmeter.com *.clarity.ms *.bing.com *.adsrvr.org www.linkedin.com web-proxy.mappedin.com tn.alphonso.tv stats.g.doubleclick.net sp.analytics.yahoo.com snap.licdn.com simm.netmng.com rules.quantcount.com px.ads.linkedin.com pubads.g.doubleclick.net pixel.sojern.com p.placed.com p.adsymptotic.com mipubapistorageprod.blob.core.windows.net match.adsrvr.org *.yahoo.com *.westworldmedia.com *.splashthat.com *.simon.com *.googleadservices.com log.pinterest.com ib.adnxs.com fcmatch.youtube.com d3j72de684fey1.cloudfront.net cm.g.doubleclick.net beacon.sojern.com assets.pinterest.com ad.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval' *.yottaa.net *.yimg.com *.recaptcha.net *.rackspacecloud.com *.rackspace.com *.rackcdn.com *.quantserve.com *.qualtrics.com *.pingdom.net *.onetrust.com *.movies-previews.com *.movienewsletters.net *.mappedin.com; img-src beacon.sojern.com assets.pinterest.com *.googleapis.com ad.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval' *.adsrvr.org data: *.gstatic.com *.gstatic.cn *.googletagmanager.com blob: *.yottaa.net *.yimg.com *.yahoo.com *.westworldmedia.com *.splashthat.com *.simon.com *.recaptcha.net *.rackspacecloud.com *.rackspace.com *.rackcdn.com *.quantserve.com *.qualtrics.com *.pingdom.net *.onetrust.com *.movies-previews.com *.movienewsletters.net *.mappedin.com *.krxd.net *.google.com.mx sp.analytics.yahoo.com snap.licdn.com simm.netmng.com rules.quantcount.com px.ads.linkedin.com pubads.g.doubleclick.net pixel.sojern.com p.placed.com p.adsymptotic.com mipubapistorageprod.blob.core.windows.net match.adsrvr.org log.pinterest.com ib.adnxs.com fcmatch.youtube.com d3j72de684fey1.cloudfront.net d1p5cqqchvbqmy.cloudfront.net cm.g.doubleclick.net *.google.com *.google-analytics.com *.googleadservices.com *.facebook.net *.facebook.com *.doubleclick.net *.cookielaw.org *.clickmeter.com *.clarity.ms *.bing.com www.linkedin.com web-proxy.mappedin.com tn.alphonso.tv stats.g.doubleclick.net; script-src d1p5cqqchvbqmy.cloudfront.net *.splashthat.com pixel.sojern.com p.placed.com *.simon.com *.recaptcha.net *.rackspacecloud.com *.rackspace.com *.rackcdn.com *.quantserve.com *.qualtrics.com *.pingdom.net *.onetrust.com *.movies-previews.com *.movienewsletters.net *.mappedin.com *.krxd.net *.gstatic.com *.gstatic.cn *.googletagmanager.com *.googleapis.com *.google.com.mx *.google.com *.google-analytics.com *.googleadservices.com *.facebook.net *.facebook.com *.doubleclick.net *.cookielaw.org *.clickmeter.com *.clarity.ms *.bing.com *.adsrvr.org www.linkedin.com web-proxy.mappedin.com tn.alphonso.tv stats.g.doubleclick.net sp.analytics.yahoo.com snap.licdn.com simm.netmng.com rules.quantcount.com px.ads.linkedin.com pubads.g.doubleclick.net p.adsymptotic.com mipubapistorageprod.blob.core.windows.net match.adsrvr.org log.pinterest.com ib.adnxs.com fcmatch.youtube.com d3j72de684fey1.cloudfront.net cm.g.doubleclick.net beacon.sojern.com assets.pinterest.com ad.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval' *.yottaa.net *.yimg.com *.yahoo.com *.westworldmedia.com cdnjs.cloudflare.com cdn.ucb.org.br ajax.aspnetcdn.com; report-uri https://qoe-1.yottaa.net/_/csp-reports?siteKey=etWhA4-bSWUsVg 2 style-src 'self' 'unsafe-inline'; 2 frame-ancestors https://*.etracker.com; script-src 'self' https://*.signalize.com https://*.etracker.com https://*.etracker.de 'unsafe-inline' 2 frame-ancestors 'self' https://*.funkedigital.de https://www.berliner-woche.de/; 2 upgrade-insecure-requests; frame-ancestors *.juniper.net https://juniper.highspot.com https://junipernetworks.lookbookhq.com 2 frame-ancestors https://*.optimizely.com; upgrade-insecure-requests; default-src data: https: 'unsafe-inline' 'unsafe-eval' 2 frame-ancestors 'self' http://*.bbt.com https://*.bbt.com; 2 default-src https: 'self'; font-src https: data:; img-src https: data:; script-src https: 'self' data: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; report-uri https://dxw.report-uri.com/r/d/csp/enforce; 2 default-src https:; connect-src https: *; script-src 'unsafe-inline' 'unsafe-eval' https: *; style-src 'unsafe-inline' https: *; img-src 'self' data: https: www.googletagmanager.com www.google-analytics.com; font-src 'self' data: https: fonts.gstatic.com; object-src 'self'; frame-src *; frame-ancestors 'self' https://citizensadvicegateshead.org.uk; 2 script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-eval' 'unsafe-inline'; img-src https: data: blob: *; media-src https: data: blob: *; object-src 'none'; frame-ancestors 'none'; connect-src *; base-uri 'self'; upgrade-insecure-requests; 2 img-src 'self' data:;font-src 'none' 2 child-src https: http: data:;frame-src https: http: data:;script-src 'unsafe-inline' 'unsafe-eval' https: http:;img-src * data:;media-src * 2 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline' 'unsafe-eval'; font-src data: https://www.blueconic.com https://fonts.blueconic.com https://cdn2.hubspot.net; img-src https: data:; media-src https: blob:; worker-src blob: 2 default-src data: 'unsafe-inline' 'unsafe-eval' https: blob; img-src data: https: android-webview-video-poster: blob:; font-src data: https:; upgrade-insecure-requests; 2 default-src 'self' *.binomo.com *.binomo.com; child-src *; frame-ancestors 'self'; connect-src 'self' analytics.tiktok.com my.rtmark.net *.criteo.net *.criteo.com snap.licdn.com px.ads.linkedin.com r.remarketingpixel.com static.ads-twitter.com bat.bing.com sc-static.net tr.snapchat.com *.hotjar.io *.hotjar.com wss://*.hotjar.com stats.g.doubleclick.net *.optimizely.com *.zopim.com *.launchdarkly.com api.exponea.com ekr.zdassets.com pixel.mathtag.com analytics.google.com accounts.google.com fcm.googleapis.com www.googleapis.com www.google-analytics.com wss://*.zopim.com binomo.zendesk.com binomo2.zendesk.com app.getsentry.com *.binomo.com *.binomo.com wss://as.binomo.com:* wss://as.binomo.com:* wss://ws.binomo.com:* wss://ws.binomo.com:* s.yimg.com; font-src data: 'self' *.zopim.com themes.googleusercontent.com *.binomo.com *.binomo.com; img-src * data:; media-src 'self' *.binomo.com *.binomo.com; script-src 'self' static.ads-twitter.com sc-static.net tr.snapchat.com *.hotjar.io *.hotjar.com www.redditstatic.com *.googleoptimize.com *.doubleclick.net *.google.com assets.zendesk.com static.zdassets.com *.zopim.com wss://*.zopim.com *.zopim.io binomo.co my.rtmark.net *.criteo.net *.criteo.com snap.licdn.com px.ads.linkedin.com r.remarketingpixel.com *.getsitecontrol.com binstats.com *.googletagmanager.com *.google-analytics.com echo.ecortb.com connect.facebook.net vk.com *.youtube.com s.yimg.com s.ytimg.com bat.bing.com www.gstatic.com www.googleadservices.com binomo.go2affise.com api.exponea.com *.adnetwork.vn storage.googleapis.com sp.analytics.yahoo.com 'unsafe-eval' 'unsafe-inline' *.binomo.com *.binomo.com; style-src 'self' *.google.com fonts.googleapis.com 'unsafe-inline' *.binomo.com *.binomo.com 2 img-src 'self' data: https://ads.yahoo.com https://cdn.uphold.com https://cm.g.doubleclick.net https://d.adroll.com https://dsum-sec.casalemedia.com https://eb2.3lift.com https://ib.adnxs.com https://idsync.rlcdn.com https://images.prismic.io https://p.typekit.net https://pixel.advertising.com https://pixel.rubiconproject.com https://prismic-io.s3.amazonaws.com https://simage2.pubmatic.com https://stats.g.doubleclick.net https://sync.outbrain.com https://sync.taboola.com https://trc.taboola.com https://uphold.cdn.prismic.io https://ups.analytics.yahoo.com https://us-u.openx.net https://use.typekit.net https://www.facebook.com https://www.google.com https://www.google.pt https://x.bidswitch.net www.google-analytics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.cloudflare.com/ https://cdn.sift.com/s.js https://cdn.uphold.com https://connect.facebook.net https://d.adroll.com https://d.adroll.mgr.consensu.org https://s.adroll.com http://static.cdn.prismic.io/prismic.js https://static.zdassets.com/ https://s.adroll.com https://use.typekit.net https://www.datadoghq-browser-agent.com https://www.gstatic.com https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.google.com https://trends-sandbox.uphold.com https://trends.uphold.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://p.typekit.net/ https://use.typekit.net 2 frame-ancestors 'self' https://www.a2hosting.com 2 upgrade-insecure-requests; frame-ancestors 'self' https://*.hsn.com https://*.hsn.net 2 default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: mediastream: android-webview-video-poster: https://*.goodrx.com http://blocked.goodrx.com https://*.grxstatic.com https://*.grxweb.com https://*.heydoctor.com https://d4fuqqd5l3dbz.cloudfront.net https://*.px-cloud.net https://*.perimeterx.net https://*.pxchk.net https://*.px-cdn.net https://*.px-client.net https://*.split.io https://gx9e.app.link https://app.link https://*.branch.io https://bnc.lt https://*.doubleclick.net https://*.2mdn.net https://*.osano.com https://optimizely-edge.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.googlesyndication.com https://*.googleadservices.com https://*.google-analytics.com https://*.googletagservices.com https://*.googletagmanager.com https://bat.bing.com https://*.sentry-cdn.com https://sentry.io https://*.ingest.sentry.io https://cdn.ampproject.org https://*.doubleverify.com https://*.typekit.net https://c.evidon.com https://l.betrad.com https://d79i1fxsrar4t.cloudfront.net https://static.legitscript.com https://cdn.contentful.com https://unpkg.com https://images.ctfassets.net https://cdnjs.cloudflare.com https://*.appsflyer.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://*.polyfill.io https://polyfill.io https://*.smartystreets.com https://s3-us-west-2.amazonaws.com https://s3.amazonaws.com https://my.wpengine.com https://secure.gravatar.com https://*.embed.ly https://yoast.com https://*.mzstatic.com https://*.onelink.me https://www.recaptcha.net https://*.qualaroo.com https://datawrapper.dwcdn.net https://hire.withgoogle.com https://www.youtube.com https://*.insightexpressai.com https://connect.facebook.net https://www.facebook.com https://adservice.google.co.in https://adservice.google.com.au https://adservice.google.ca https://*.ytimg.com https://*.verticalhealth.net https://d.turn.com https://*.demdex.net https://idsync.rlcdn.com https://di.rlcdn.com https://*.adsafeprotected.com https://bcg.coupons.com https://*.embedly.com https://*.flashtalking.com https://pixel.sbal4kp.com https://secure.adnxs.com https://api.lever.co https://*.segment.io https://*.segment.com https://*.userzoom.com https://sc.iasds01.com https://sb.voicefive.com https://js.stripe.com https://www.redditstatic.com https://alb.reddit.com https://wsdk.rokt.com https://*.speedcurve.com https://fast.wistia.com https://platform.twitter.com https://*.doceree.com https://*.liadm.com https://www.medtargetsystem.com https://*.hcn.health https://thrtle.com https://trc.lhmos.com https://ib.adnxs.com https://api.prod.projectexodus.us https://js.appboycdn.com https://*.braze.com https://use.fontawesome.com https://cdn.materialdesignicons.com https://*.twilio.com https://*.twiliocdn.com wss://*.twilio.com https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com https://*.intercomassets.com https://intercom-sheets.com https://*.heydoctor.io https://*.deepintent.com https://z.moatads.com https://*.adform.net https://*.jwpcdn.com https://*.jwplayer.com https://*.jwplatform.com https://*.jwpltx.com https://*.jwpsrv.com https://*.mux.com https://videos-fms.jwpsrv.com https://videos-cloudflare.jwpsrv.com https://*.datadoghq.com https://*.datadoghq-browser-agent.com https://*.pswec.com https://sync.graph.bluecava.com; report-uri https://sentry.io/api/5148329/security/?sentry_key=b77e90b1f5654f2e83a0238f4cf07987 2 report-uri https://csp.rz.uni-kiel.de/report; report-to csp; upgrade-insecure-requests; 2 frame-ancestors 'self' https://*.theactivetimes.com https://*.thedailymeal.com https://*.doubleclick.net https://*.googlesyndication.com https://*.rubiconproject.com https://*.adnxs.com https://*.openx.net https://*.casalemedia.com 2 frame-ancestors 'self' *.springernature.com; 2 default-src https://www.nic.ir https://static.nic.ir 'unsafe-inline'; img-src *.nic.ir https://webchat.nic.ir:8080 https://trustseal.enamad.ir/ http://trustseal.enamad.ir/; font-src *.nic.ir 2 frame-ancestors 'self' https://*.wikiloc.com; 2 frame-ancestors 'self' https://www.tail.digital https://tail.digital; 2 default-src 'self' data: https://*.cafebazaar.ir https://*.cafebazaar.cloud ; frame-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cafebazaar.ir https://*.cafebazaar.cloud https://tagmanager.google.com https://imasdk.googleapis.com https://s0.2mdn.net https://adservice.google.com https://www.google-analytics.com https://www.googletagmanager.com; worker-src 'self' data: blob: https://*.cafebazaar.ir https://*.cafebazaar.cloud; style-src 'self' data: 'unsafe-inline' https://*.cafebazaar.ir https://*.cafebazaar.cloud https://tagmanager.google.com https://fonts.googleapis.com; img-src * data: blob: android-webview-video-poster:; font-src * data:; connect-src *; media-src * data: blob: blob: https://*.cafebazaar.ir https://*.cafebazaar.cloud; object-src 'none'; upgrade-insecure-requests; block-all-mixed-content; 2 default-src 'self' ws://localhost:* data: 'unsafe-eval' 'unsafe-inline' https://app.youneedabudget.com localhost:* *.youneedabudget.com marketing-youneedabudgetco.netdna-ssl.com sslcdn-youneedabudgetco.netdna-ssl.com youneedabudget.helpscoutdocs.com hello.myfonts.net https://static.airtable.com/js/embed/ https://zapier.com/apps/embed/widget.js appleid.cdn-apple.com *.amplitude.com *.mparticle.com https://api.rollbar.com https://cdn.rollbar.com sdk.iad-03.braze.com https://polyfill.io https://cdn.speedcurve.com https://lux.speedcurve.com https://cdnjs.cloudflare.com *.adroll.com d.adroll.mgr.consensu.org https://*.cdnbasket.net/ https://ids.cdnwidget.com/c https://pixel.cdnwidget.com/cdn/c.min.js https://cdn.pdst.fm/ping.min.js https://us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink s.ytimg.com analytics.twitter.com *.ads-twitter.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.helpscout.net *.pinterest.com *.pusher.com *.quora.com *.soundcloud.com *.sumologic.com *.twitter.com *.youtube.com accounts.google.com apis.google.com d3hb14vkzrxvla.cloudfront.net djtflbt20bdde.cloudfront.net d.impactradius-event.com https://ajax.cloudflare.com https://api.cloudinary.com https://api.getgo.com https://api.ipify.org https://docs.google.com https://giphy.com/ https://s.pinimg.com https://youneedabudget.us11.list-manage.com optimize.google.com player.vimeo.com youneedabudget.a4xxmk.net wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io *.intercom.io *.intercomcdn.com *.intercomusercontent.com www.google.au www.google.be www.google.ca www.google.ch www.google.co.in www.google.co.nz www.google.co.uk www.google.com.br www.google.com.mx www.google.com.ph www.google.com.sg www.google.com www.google.de www.google.es www.google.fr www.google.ie www.google.nl www.google.no www.google.pl www.google.ru;frame-ancestors http://localhost:* *.youneedabudget.com;frame-src 'self' accounts.google.com airtable.com doubleclick.net *.doubleclick.net staticxx.facebook.com w.soundcloud.com *.facebook.com www.youtube.com vimeo.com optimize.google.com open.spotify.com assets.pinterest.com;img-src data: *;font-src 'self' data: fonts.gstatic.com *.intercomcdn.com sslcdn-youneedabudgetco.netdna-ssl.com *.youneedabudget.com 2 frame-ancestors 'self' *.svd.se; default-src https: data: blob: wss: react-js-navigation: android-webview: android-webview-video-poster: 'unsafe-inline' 'unsafe-eval'; report-uri https://svd.report-uri.com/r/d/csp/enforce 2 frame-ancestors 'self' https://mtt-live.apps.emea.vwapps.io https://mtt-live-blue.apps.emea.vwapps.io https://mtt.apps.emea.vwapps.io https://mtt-blue.apps.emea.vwapps.io http://mtt-local.apps.emea.vwapps.io; 2 default-src 'self'; script-src 'self' 'unsafe-inline' https://ajax.cloudflare.com/ https://hm.baidu.com https://www.zblogcn.com https://cdn.jsdelivr.net/npm/jquery@3.3.1/dist/jquery.min.js; style-src 'self' 'unsafe-inline' https://*.zblogcn.com; font-src 'self' https://*.zblogcn.com; img-src 'self' https://* data: 2 base-uri https://www.mbank.pl; report-uri https://www.csp.mbank.pl; default-src 'none'; manifest-src 'self'; upgrade-insecure-requests; block-all-mixed-content; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' https://ad.doubleclick.net https://cdn.ampproject.org https://cdn.skp.mbank.pl https://cdn.syndication.twimg.com https://connect.facebook.net https://ghmpl.hit.gemius.pl https://googleads.g.doubleclick.net https://maps.googleapis.com https://optimize.google.com https://platform.twitter.com https://r.skp.mbank.pl https://s.ytimg.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://tagmanager.google.com https://tpc.googlesyndication.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.mbank.pl https://www.youtube.com; style-src 'report-sample' 'self' 'unsafe-inline' https://cdn.ampproject.org https://cdn.skp.mbank.pl https://fonts.googleapis.com https://fonts.gstatic.com https://optimize.google.com https://platform.twitter.com https://tagmanager.google.com https://ton.twimg.com https://www.mbank.pl; img-src 'report-sample' 'self' data: https://*.fls.doubleclick.net https://abs.twimg.com https://ad.doubleclick.net https://adservice.google.com https://cdn.ampproject.org https://cdn.skp.mbank.pl https://cm.g.doubleclick.net https://csi.gstatic.com https://ghmpl.hit.gemius.pl https://googleads.g.doubleclick.net https://i.ytimg.com https://khms0.googleapis.com https://khms1.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://marketing.tr.netsalesmedia.pl https://optimize.google.com https://pbs.twimg.com https://platform.twitter.com https://redirect.skp.mbank.pl https://s.ytimg.com https://ssl.google-analytics.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://syndication.twitter.com https://tagmanager.google.com https://ton.twimg.com https://www.facebook.com https://www.google-analytics.com https://www.google.be https://www.google.ch https://www.google.co.uk https://www.google.com https://www.google.com.ua https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.hr https://www.google.ie https://www.google.it https://www.google.nl https://www.google.no https://www.google.pl https://www.google.se https://www.google.sk https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.mbank.pl; font-src 'report-sample' 'self' https://fonts.gstatic.com https://www.mbank.pl; connect-src 'report-sample' 'self' https://ad.doubleclick.net https://adservice.google.com https://api.skp.mbank.pl https://cdn.ampproject.org https://cm.g.doubleclick.net https://form.axaubezpieczenia.pl https://ghmpl.hit.gemius.pl https://lp.skp.mbank.pl https://r.skp.mbank.pl https://redirect.skp.mbank.pl https://search.interconsystems.pl https://stats.g.doubleclick.net https://syndication.twitter.com https://tagmanager.google.com https://tracker.skp.mbank.pl https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.pl https://www.googletagmanager.com https://www.mbank.pl wss://api.skp.mbank.pl wss://r.skp.mbank.pl; media-src 'report-sample' 'self' data: https://cdn.skp.mbank.pl https://www.mbank.pl; object-src 'report-sample' 'self' https://www.mbank.pl https://www.youtube.com; frame-src 'report-sample' 'self' https://*.fls.doubleclick.net https://bid.g.doubleclick.net https://form.mbank.pl https://optimize.google.com https://platform.twitter.com https://tagmanager.google.com https://tpc.googlesyndication.com https://www.facebook.com https://www.googletagmanager.com https://www.mbank.pl https://www.youtube.com; child-src 'report-sample' 'self' https://*.fls.doubleclick.net https://bid.g.doubleclick.net https://form.mbank.pl https://tagmanager.google.com https://www.facebook.com https://www.googletagmanager.com https://www.mbank.pl https://www.youtube.com; form-action 'report-sample' 'self' https://form.mbank.com.pl https://form.mbank.pl https://www.mbank.pl; frame-ancestors 'report-sample' 'self' https://www.mbank.pl; 2 connect-src 'self' https://stats.g.doubleclick.net https://ampcid.google.com https://adservice.google.com https://adservice.google.com https://www.google.com https://www.google-analytics.com https://in.api4load.net https://cdn.cookielaw.org https://bam.nr-data.net https://bam-cell.nr-data.net https://www.facebook.com https://chat-eu.freshdesk.com https://report.bhf.gbqofs.io https://cdn.gbqofs.com https://privacyportal-eu.onetrust.com wss://chat-eu.freshdesk.com https://ct.pinterest.com https://sockjs-eu.pusher.com https://sock57-eu.pusher.com wss://ws-eu.pusher.com https://ws.sessioncam.com https://b.ws.sessioncam.com https://gjtrack.ucweb.com https://plugin.ucads.ucweb.com https://cookiee1.veinteractive.com https://dtrc.veinteractive.com https://sessionapi.veinteractive.com; default-src 'self' ; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://static3.avast.com https://use.fontawesome.com https://280841640230733.eu.webpush.freshchat.com https://assetscdn.stackla.com https://maxcdn.bootstrapcdn.com; frame-src 'self' ms-appx-web: https://embed.acast.com https://cp.bhf.org.uk https://extras.bhf.org.uk https://embed.podcasts.apple.com https://www.typeform.com https://bid.g.doubleclick.net https://cm.g.doubleclick.net https://8233349.fls.doubleclick.net https://8455068.fls.doubleclick.net https://optimize.google.com https://tpc.googlesyndication.com https://www.youtube.com https://www.google.com gsa://onpageload https://player.acast.com https://track.adform.net https://match.adsrvr.org https://insight.adsrvr.org https://aax-eu.amazon-adsystem.com https://www.boombox.com https://view.ceros.com https://www.facebook.com https://wchat.eu.freshchat.com https://280841640230733.eu.webpush.freshchat.com https://www.ons.gov.uk https://irewind.com https://zswpmanager.wip.mmc.com https://assets.nhs.uk https://net.ootil.fr https://public.tableau.com https://digital19.typeform.com https://dntcl.qualaroo.com https://app.qzzr.com https://www.qzzr.com https://a.rfihub.com https://20782797p.rfihub.com https://20782800p.rfihub.com https://20782816p.rfihub.com https://20782822p.rfihub.com https://20798315p.rfihub.com https://20798316p.rfihub.com https://20798319p.rfihub.com https://20782802p.rfihub.com https://20782821p.rfihub.com https://20822326p.rfihub.com https://20823015p.rfihub.com https://20823018p.rfihub.com https://tr.snapchat.com https://w.soundcloud.com https://widget.stackla.com https://embed.wirewax.com https://config1.veinteractive.com; img-src 'self' data: https://cp.bhf.org.uk https://live.bhf.org.uk https://8455068.fls.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://pubads.g.doubleclick.net https://stats.g.doubleclick.net https://adservice.google.com https://www.google-analytics.com https://maps.googleapis.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://optimize.google.com https://play.google.com https://www.google.com https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.nz https://www.google.co.tz https://www.google.co.uk https://www.google.co.za https://www.google.co.zw https://www.google.com.au https://www.google.com.br https://www.google.com.cy https://www.google.com.eg https://www.google.com.et https://www.google.com.mm https://www.google.com.ng https://www.google.com.sg https://www.google.ae https://www.google.be https://www.google.bf https://www.google.ca https://www.google.de https://www.google.es https://www.google.fr https://www.google.gr https://www.google.ie https://www.google.nl https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.tt https://maps.gstatic.com https://ssl.gstatic.com https://www.gstatic.com https://img.youtube.com https://www.youtube.com https://i.ytimg.com https://s3.amazonaws.com https://tools.applemediaservices.com https://cx.atdmt.com https://ads.avct.cloud https://x.bidswitch.net https://bat.bing.com https://scontent-iad3-1.cdninstagram.com https://scontent-syd2-1.cdninstagram.com https://dfgmr6l6mkcrn.cloudfront.net https://cdn.cookielaw.org https://connect.facebook.net https://www.facebook.com https://report.bhf.gbqofs.io https://cdn.gbqofs.com https://gorentoys.net https://assets.hu-production.be https://images.hu-production.be https://www.linkedin.com https://px.ads.linkedin.com https://twemoji.maxcdn.com https://i5uzp6l0.micpn.com https://zswpmanager.wip.mmc.com https://bam.nr-data.net https://ct.pinterest.com https://pixel.quantserve.com https://idsync.rlcdn.com https://ws.sessioncam.com https://assetscdn.stackla.com https://web-assets.stackla.com https://t.co https://trc.taboola.com https://public.tableau.com https://auth.iws-hybrid.trendmicro.com https://gjtrack.ucweb.com https://cookiee1.veinteractive.com https://a.volvelle.tech; media-src 'self' https://ssl.gstatic.com https://dop9av6nvryqq.cloudfront.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://cp.bhf.org.uk https://live.bhf.org.uk https://googleads.g.doubleclick.net https://ssl.google-analytics.com https://www.google-analytics.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://ajax.googleapis.com https://maps.googleapis.com https://optimize.google.com https://tagmanager.google.com https://www.google.co.uk https://www.google.com https://www.youtube.com https://s.ytimg.com https://www.gstatic.com https://s2.adform.net https://track.adform.net https://c5.adalyser.com https://js.adsrvr.org https://static.ads-twitter.com https://s3.amazonaws.com https://s3-us-west-2.amazonaws.com https://ads.avct.cloud https://ads.avocet.io https://bat.bing.com https://sjs.bizographics.com https://cdnjs.cloudflare.com https://d2oh4tlt9mrke9.cloudfront.net https://d3alqb8vzo7fun.cloudfront.net https://dfgmr6l6mkcrn.cloudfront.net https://cdn.cookielaw.org https://connect.facebook.net https://chat-eu.freshdesk.com https://wchat.eu.freshchat.com https://report.bhf.gbqofs.io https://cdn.gbqofs.com https://healthunlocked.com https://wusote.hirizasune.com https://assets.hu-production.be https://snap.licdn.com https://www.linkedin.com https://px.ads.linkedin.com https://i5uzp6l0.micpn.com https://assets.nhs.uk https://ls.northchaddertonschool.co.uk https://z.moatads.com https://secure.myshopcouponmac.com https://bam.nr-data.net https://bam-cell.nr-data.net https://www.oracle.com https://quantcast.com https://quantcount.com https://edge.quantserve.com https://secure.quantserve.com https://s.pinimg.com https://services.postcodeanywhere.co.uk https://timeline51-clientstats1.pusher.com https://js.pusher.com https://stats.pusher.com https://rules.quantcount.com https://ws.sessioncam.com https://public.tableau.com https://auth.iws-hybrid.trendmicro.com https://turbo.qualaroo.com https://a.rfihub.com https://c1.rfihub.net https://sc-static.net https://siteimproveanalytics.com https://assetscdn.stackla.com https://goconnect.stackla.com https://widget.trustpilot.com https://analytics.twitter.com https://use.typekit.net https://config1.veinteractive.com https://sp.analytics.yahoo.com https://s.yimg.com https://vjs.zencdn.net https://code.jquery.com https://maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://optimize.google.com https://tagmanager.google.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://dfgmr6l6mkcrn.cloudfront.net https://use.fontawesome.com https://wchat.eu.freshchat.com https://net.ootil.fr https://assetscdn.stackla.com https://cloud.typography.com https://vjs.zencdn.net https://code.jquery.com https://maxcdn.bootstrapcdn.com; 2 default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval', script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://stats.g.doubleclick.net https://snap.licdn.com https://www.facebook.com https://connect.facebook.net https://*.linkedin.com https://jobs.jobvite.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://*.cloudfront.net https://api.userlike.com https://cdn.jsdelivr.net, img-src 'self' https://www.google.com https://www.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://stats.g.doubleclick.net https://snap.licdn.com https://www.facebook.com https://connect.facebook.net https://*.linkedin.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-operators.s3-eu-west-1.amazonaws.com https://cdn.jsdelivr.net, style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net, base-uri 'self', form-action 'self' 2 default-src 'self' 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' *.owncloud.com; img-src * data: blob: 'unsafe-inline'; frame-src *; connect-src 'self' *.mktoresp.com *.mktoutil.com *.owncloud.com *.google-analytics.com *.facebook.com *.doubleclick.net *.fontawesome.com; media-src 'self' *.24liveblog.com 'unsafe-inline'; style-src 'self' *.google.com *.gstatic.com https://unpkg.com *.googleapis.com *.cloudflare.com *.marketo.com *.mktoresp.com *.owncloud.com *.fontawesome.com 'unsafe-inline'; font-src 'self' * data: 2 frame-ancestors https://www.dow.com/ http://rsc.intranet.dow.com/ 2 default-src 'self' * data: blob: 'unsafe-inline' 'unsafe-eval'; object-src 'none' 2 default-src 'self' *.lexmark.com lexmark.122.2o7.net assets.adobedtm.com bat.bing.com *.powerreviews.com mpsnare.iesnare.com *.adsrvr.org s.amazon-adsystem.com s3.amazonaws.com s3.eu-central-1.amazonaws.com *.boldchat.com ipinfo.io maxcdn.bootstrapcdn.com dpm.demdex.net lexmark.demdex.net *.digitalriver.com *.doubleclick.net *.eloqua.com img.en25.com cm.everesttech.net ssl.google-analytics.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com maps.googleapis.com ssl.p.jwpcdn.com jwpltx.com snap.licdn.com www.linkedin.com *.omtrdc.net *.salesloft.com *.srv.stackadapt.com vidassets.terminus.services lexmark.verifyit.us 'unsafe-eval' 'unsafe-inline'; font-src 'self' *.lexmark.com maxcdn.bootstrapcdn.com fonts.gstatic.com; style-src 'self' *.lexmark.com maxcdn.bootstrapcdn.com ui.powerreviews.com fonts.googleapis.com tags.srv.stackadapt.com 'unsafe-inline'; img-src 'self' https: data:; object-src 'none'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; report-uri /bin/lexmark/csp-report; report-to lxk-report 2 frame-ancestors 'self' https://*.funkedigital.de https://hamburgerwochenblatt.de/; 2 frame-ancestors https://*.1stdibs.com; 2 frame-ancestors 'self' https://www.stems-music.com; 2 frame-ancestors 'self' http://wa.aruba.it https://wa.aruba.it http://manage.pec.it https://manage.pec.it 2 frame-ancestors https://*.crashplan.com https://*.crashplan.com:4285 https://*.crashplanpro.com https://*.crashplanpro.com:4285 https://*.code42.com https://*.code42.com:4285; https://*.us2.code42.com; https://*.us2.code42.com:4285; 2 base-uri 'none'; font-src https: data:; style-src https: 'unsafe-inline' https://services.postcodeanywhere.co.uk/; script-src https: 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://services.postcodeanywhere.co.uk/ https://www.recaptcha.net/recaptcha/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; default-src https:; img-src https: data: www.googletagmanager.com; object-src 'none' 2 default-src 'self' https://darksky.wufoo.com maps.darksky.net https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' http://storage.googleapis.com https://www.wufoo.com https://maps.googleapis.com https://ajax.googleapis.com https://secure.wufoo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://maps.gstatic.com https://maps.googleapis.com 2 default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: about: *.googletagmanager.com *.calendly.com *.visualwebsiteoptimizer.com *.fullstory.com *.crazyegg.com *.whova.com whova.com *.cloudfront.net *.typekit.net use.typekit.net *.adroll.com *.adroll.mgr.consensu.org cors-anywhere.herokuapp.com gist.github.com rum-static.pingdom.net *.ckeditor.com translate.googleapis.com translate.google.com *.jotform.com *.crazyegg.com cdn.jotfor.ms static.issuu.com instagram.com www.instagram.com t.sf14g.com 1.tl813.com http://static.issuu.com analytics.twitter.com srdrvp.com static.ads-twitter.com apis.google.com *.addthis.com *.addthisedge.com secure.comodo.net static.ads-twitter.com platform.twitter.com www.googleadservices.com http://www.googleadservices.com *.akamaihd.net www.google-analytics.com www.google.com cdnjs.cloudflare.com *.typekit.net *.jotform.us cdn.jsdelivr.net ajax.googleapis.com connect.facebook.net www.facebook.com facebook.com use.typekit.net ssl.google-analytics.com *.gstatic.com cse.google.com www.googleapis.com *.mobilecause.com bam.nr-data.net googletagmanager.com formalyzer.com maps.googleapis.com e.issuu.com *.silkroad.com *.createsend.com *.createsend1.com *.polldaddy.com polldaddy.com *.berkeley.edu https://coolclimate-calculator-ui.firebaseapp.com secure4.entertimeonline.com *.dafdirect.org *.jotfor.ms *.jotform.io; img-src 'self' data: about: 1.tl813.com arbordayblog.org * *.adroll.com *.leadlander.com *.advertising.com *.facebook.com *.google-analytics.com *.outbrain.com *.pubmatic.com *.3lift.com *.taboola.com dsum-sec.casalemedia.com *.rubiconproject.com ads.yahoo.com *.adnxs.com x.bidswitch.net *.youtube.com idsync.rlcdn.com us-u.openx.net *.atdmt.com *.s3.amazonaws.com log.pinterest.com i.ytimg.com *.jotform.com t.co *.gstatic.com *.instagram.com *.cdninstagram.com *.fbcdn.net www.google-analytics.com *.doubleclick.net *.jotfor.ms csi.gstatic.com maps.gstatic.com p.typekit.net www.google.com www.googleapis.com maps.googleapis.com www.facebook.com *.google.com *.arborday.org www.googleapis.com ssl.google-analytics.com syndication.twitter.com shpg.org; font-src 'self' data: use.typekit.net fonts.googleapis.com fonts.gstatic.com *.jotfor.ms; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net assets-cdn.github.com *.ckeditor.com *.githubassets.com use.typekit.net translate.googleapis.com *.gstatic.com cdn.jotfor.ms www.google.com ajax.googleapis.com fonts.googleapis.com fonts.gstatic.com *.dafdirect.org *.jotfor.ms; frame-src 'self' *.soundcloud.com calendly.com *.jotform.com whova.com *.whova.com *.berkeley.edu https://coolclimate.berkeley.edu https://coolclimate-calculator-ui.firebaseapp.com www.facebook.com *.google.com *.vimeo.com www.instagram.com syndication.twitter.com *.jotform.us https://staticxx.facebook.com *.igive.com cse.google.com pdf.snapandread.com app.mobilecause.com *.arborday.org www.arborday.org hotelfootprints.org www.hotelfootprints.org www.youtube.com http://www.youtube.c e.issuu.com api.braintreegateway.com treesandutilities.com *.silkroad.com ajax.googleapis.com connect.facebook.net platform.twitter.com *.addthis.com *.createsend.com *.createsend1.com *.leadlander.com; frame-ancestors 'self' www.logees.com *.liedlodge.org shop.arborday.org corporategifts.arborday.org *.domaincontrol.com *.ip.secureserver.net *.upnllc.com *.godaddy.com logees.com *.dutchmantreefarms.com dutchmantreefarms.com http://www.dutchmantreefarms.com www.bluehillwildlifenursery.com bluehillwildlifenursery.com treesandutilities.com www.treesandutilities.com *.secureserver.net *.akam.net *.godaddy.com *.silkroad.com createsend.com; connect-src 'self' arbordayblog.org *.saashr.com *.google-analytics.com *.fullstory.com *.jotform.com cors-anywhere.herokuapp.com *.gstatic.com secure4.entertimeonline.com rum-collector-2.pingdom.net *.crazyegg.com wss://www.arborday.org performance.typekit.net ssl.google-analytics.com *.jotform.us createsend.com *.doubleclick.net *.cloudfront.net appstoreconnect.com *.berkeley.edu; 2 frame-ancestors 'self' https://documentation.sisense.com/; 2 upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' 2 frame-src 'self' https://*.google.com https://www.gstatic.com https://www.facebook.com https://insight.adsrvr.org https://esqa.moneris.com https://www3.moneris.com https://player.vimeo.com https://www.youtube.com https://connect.facebook.net https://*.nfb.ca https://*.onf.ca https://player.twitch.tv https://pixel.mathtag.com/; script-src 'self' https://*.nfb.ca https://*.onf.ca https://cdnjs.cloudflare.com https://player.vimeo.com https://maps.googleapis.com https://graph.facebook.com 'unsafe-inline' 'unsafe-eval' https://dkyhanv6paotz.cloudfront.net www.googletagmanager.com tagmanager.google.com connect.facebook.net *.google-analytics.com sb.scorecardresearch.com widget.surveymonkey.com apis.google.com widget.surveymonkey.com www.gstatic.com js.adsrvr.org survey.g.doubleclick.net https://www.google.com https://adservice.google.ca https://survey.g.doubleclick.net ajax.googleapis.com https://cdn.c212.net/ https://c212.net/ https://pixel.mathtag.com/sync/js; style-src 'self' https://*.nfb.ca https://*.onf.ca https://cdnjs.cloudflare.com 'unsafe-inline' https://dkyhanv6paotz.cloudfront.net hello.myfonts.net fonts.googleapis.com tagmanager.google.com https://www.google.com; connect-src 'self' https://*.nfb.ca https://*.onf.ca https://sh5ovbbv3mo7k.cloudfront.net https://dcly21uuqtecw.cloudfront.net https://d2vapbn8acl33j.cloudfront.net https://www.facebook.com https://s3.amazonaws.com https://dkyhanv6paotz.cloudfront.net *.google-analytics.com https://stats.g.doubleclick.net https://c212.net https://thumbor-interactive-cms.s3.ca-central-1.amazonaws.com; media-src 'self' https://*.onf.ca https://*.nfb.ca https://dkyhanv6paotz.cloudfront.net https://d2vapbn8acl33j.cloudfront.net https://sh5ovbbv3mo7k.cloudfront.net https://dcly21uuqtecw.cloudfront.net blob:; worker-src 'self' *.onf.ca *.nfb.ca blob:; default-src 'self' https://*.nfb.ca https://*.onf.ca; object-src 'self' https://*.nfb.ca https://*.onf.ca; font-src 'self' https://*.onf.ca https://*.nfb.ca fonts.gstatic.com https://dkyhanv6paotz.cloudfront.net data:; img-src 'self' sb.scorecardresearch.com b.scorecardresearch.com *.google-analytics.com www.facebook.com http://*.onf.ca http://*.nfb.ca https://*.onf.ca https://*.nfb.ca stats.g.doubleclick.net *.gstatic.com data: https://interactive-cms.s3.amazonaws.com https://interactive-cms-dev.s3.amazonaws.com http://*.gravatar.com https://*.gravatar.com https://dkyhanv6paotz.cloudfront.net https://dcly21uuqtecw.cloudfront.net https://www.google.com/ads https://www.google.com/ads/ga-audiences https://www.google.ca/ads https://www.google.ca/ads/ga-audiences https://pixel.mathtag.com/misc/img; manifest-src 'self' https://*.nfb.ca https://*.onf.ca https://dkyhanv6paotz.cloudfront.net; frame-ancestors 'self' https://*.nfb.ca https://*.onf.ca 2 default-src 'unsafe-inline' 'unsafe-eval' 'self' data: https://static.tugraz.at https://sso.tugraz.at https://analytics.tugraz.at *.tugraz.at https://*.twitter.com https://*.twimg.com https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com; child-src 'self' *.tugraz.at *.youtube.com *.youtube-nocookie.com *.google.com *.mapbuildr.com mapbuildr.com *.googleapis.com *.openstreetmap.org https://*.twitter.com; img-src 'unsafe-inline' 'unsafe-eval' * data:; 2 frame-ancestors https://www.squarespace.com; connect-src 'self' *.google-analytics.com *.googletagmanager.com *.stripe.com *.braintreegateway.com *.braintree-api.com *.exploretock.com *.fullstory.com *.facebook.com api.rollbar.com *.doubleclick.net www.google.com *.podium.com *.googleapis.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.stripe.com *.braintreegateway.com *.chase.com *.exploretock.com connect.facebook.net *.fullstory.com www.googleadservices.com api.rollbar.com optimize.google.com maps.googleapis.com *.podium.com static.cloudflareinsights.com; img-src 'self' blob: data: *.exploretock.com *.stripe.com *.braintreegateway.com *.facebook.com *.fbsbx.com *.gravatar.com i0.wp.com i1.wp.com *.google.com *.googleapis.com *.googleusercontent.com www.google-analytics.com www.gstatic.com maps.gstatic.com *.doubleclick.net *.googletagmanager.com; child-src 'self' *.exploretock.com *.stripe.com *.braintreegateway.com www.facebook.com optimize.google.com; frame-src 'self' *.exploretock.com *.stripe.com *.braintreegateway.com *.chase.com www.facebook.com optimize.google.com connect.facebook.net www.google.com *.kaptcha.com; 2 frame-ancestors 'self' qa-app.fastspring.com app.fastspring.com go.fastspring.com *.onfastspring.com qa4-identity-service.fastspring.com identity-service.fastspring.com prod-identity-service.fastspring.com login.fastspring.com; 2 frame-ancestors self googletagmanager.com cerebro.alibaba.ir new.alibaba.ir legacy.alibaba.ir 2 frame-ancestors 'self' https://*.duke-energy.com https://my347363-sso.crm.ondemand.com https://my347363.crm.ondemand.com 2 default-src *;frame-ancestors 'self' eiv.baidu.com *.vip.vip.com *.vip.com;script-src *.vip.com *.vipstatic.com *.mediav.com *.gdt.qq.com *.emarbox.com *.mjoys.com *.sogou.com cm.e.qq.com *.baidu.com *.ipinyou.com *.admaster.com.cn *.miaozhen.com *.youku.com *.tanx.com *.doubleclick.net *.vpimg1.com *.vpimg2.com *.vpimg3.com *.vpimg4.com *.gtimg.cn 'unsafe-eval' 'unsafe-inline';style-src *.vip.com *.vipstatic.com 'unsafe-inline';img-src * data:; report-uri //stat.vipstatic.com/pcfront/antiskyjack; 2 default-src 'self'; img-src * data:; style-src 'self' 'unsafe-inline'; script-src live.hrz.uni-marburg.de 'self' 'unsafe-inline' 'unsafe-eval' https://webtrack.uni-marburg.de; child-src 'self' https://webtrack.uni-marburg.de; font-src 'self' data:; connect-src 'self' https://webtrack.uni-marburg.de; 2 connect-src 'self' https://player.podigee-cdn.net/ https://tools.eurolandir.com/ https://ing.blueconic.net https://plugins.blueconic.net *.readspeaker.com https://assets.adobedtm.com https://www.google-analytics.com https://www.googletagmanager.com https://working2.ad.ing.net https://fetchingxml.000webhostapp.com https://cdn.dimml.io https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://w.soundcloud.com https://cdn.podigee.com https://emplocity.com https://connect.facebook.net; child-src 'self' https://syndication.twitter.com/ https://player.podigee-cdn.net/ *.readspeaker.com https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://w.soundcloud.com https://cdn.podigee.com https://emplocity.com https://connect.facebook.net; report-uri /csp-violation-report-endpoint/ 2 default-src 'self' p11.techlab-cdn.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cdw.com *.richrelevance.com *.bazaarvoice.com *.qualtrics.com *.optimizely.com *.hotjar.com *.needle.com nexus.ensighten.com px.spiceworks.com *.liadm.com scripts.demandbase.com triggeredmail.appspot.com connect.facebook.net *.bounceexchange.com *.googleadservices.com *.doubleclick.net *.google-analytics.com st1.dialogtech.com bat.bing.com *.googleapis.com nsg.symantec.com analytics.po.st po.st *.cnetcontent.com selectors.cnetcontentsolutions.com *.akamaihd.net *.google.com *.twitter.com *.justuno.com *.liveclicker.net *.netapp.com *.demdex.net *.d41.co *.cxense.com static.ads-twitter.com vault.pactsafe.io pactsafe.io *.webcollage.net *.ziftsolutions.com *.simpli.fi pixel.mathtag.com *.googletagmanager.com *.googlesyndication.com *.googletagservices.com *.ytimg.com t.sellpoints.com a.sellpoint.net media.flixfacts.com www.youtube.com media.flixcar.com *.flix360.com *.easy2.com *.go-mpulse.net *.linkedin.com *.bouncex.net *.cdnwidget.com *.rlcdn.com *.cloudfront.net *.bluecore.com p.adsymptotic.com *.adsrvr.org blob: *.flixsyndication.net *.adobe.com *.hotjar.io *.eloqua.com *.gstatic.com *.ensighten.com app.leadsrx.com *.turnto.com snap.licdn.com *.hs-scripts.com *.teads.tv *.ispot.tv *.youvisit.com www.vmwarepartnerdemandcenter.com *.hsleadflows.net *.hs-banner.com *.hsforms.net *.hubapi.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.hubspot-forms-static-embed.s3.amazonaws.com *.hubspot.com *.tiqcdn.com *.tealiumiq.com *.adroll.com *.hs-analytics.net js.usemessages.com *.hscollectedforms.net *.redditstatic.com alb.reddit.com *.adsrvr.org p11.techlab-cdn.com;style-src 'self' 'unsafe-inline' *.cdw.com *.bazaarvoice.com *.needle.com *.bounceexchange.com *.cnetcontent.com *.justuno.com *.webcollage.net *.ziftsolutions.com t.sellpoints.com a.sellpoint.net media.flixcar.com *.easy2.com *.amazonaws.com platform.twitter.com *.cloudfront.net blob: *.typekit.net *.adobe.com *.turnto.com *.syndigo.com *.syndigo.cloud;img-src 'self' *.cdw.com *.bazaarvoice.com *.qualtrics.com *.optimizely.com *.needle.com nexus.ensighten.com px.spiceworks.com *.liadm.com *.bounceexchange.com *.googleadservices.com *.doubleclick.net *.google-analytics.com bat.bing.com nsg.symantec.com *.cnetcontent.com selectors.cnetcontentsolutions.com *.akamaihd.net *.google.com *.justuno.com *.netapp.com *.demdex.net *.cxense.com vault.pactsafe.io pactsafe.io *.webcollage.net *.ziftsolutions.com *.googletagmanager.com *.googletagservices.com *.ytimg.com t.sellpoints.com a.sellpoint.net media.flixfacts.com media.flixcar.com *.flix360.com *.easy2.com *.amazonaws.com platform.twitter.com *.linkedin.com *.tribalfusion.com *.company-target.com www.facebook.com *.bouncex.net *.cdnwidget.com *.rlcdn.com *.cloudfront.net *.adobecqms.net *.turn.com st2.dialogtech.com secure.insightexpressai.com px.gumgum.com *.bluekai.com k.intellitxt.com *.everesttech.net *.adnxs.com sync.fastclick.net simage2.pubmatic.com us-u.openx.net ads.yahoo.com pixel.rubiconproject.com *.advertising.com magnetic.t.domdex.com *.rfihub.com *.mathtag.com *.mathtag.co *.amgdgt.com *.casalemedia.com *.bluecore.com *.prod.bidr.io cdn.optimizely.com syndication.twitter.com x.bidswitch.net pe.intentiq.com p.adsymptotic.com loadm.exelator.com *.adsrvr.org um.simpli.fi acuityplatform.com data: *.dotomi.com *.flixsyndication.net liveintent.com cbssports.com maxpreps.com wogo ce.lijit.com soma.smaato.net cs.admanmedia.com eb2.3lift.com live.sekindo.com *.adobe.com *.sc.omtrdc.net *.core.windows.net wac.edgecastcdn.net snap.licdn.com *.teads.tv *.ispot.tv *.youvisit.com *.syndigo.com *.syndigo.cloud *.hubspot.com *.tiqcdn.com *.tealiumiq.com *.adroll.com *.mediaiqdigital.com *.redditstatic.com alb.reddit.com *.adsrvr.org cdw.scene7.com;frame-src 'self' *.cdw.com *.bazaarvoice.com *.qualtrics.com *.hotjar.com *.needle.com *.liadm.com *.bounceexchange.com *.doubleclick.net nsg.symantec.com selectors.cnetcontentsolutions.com *.google.com *.twitter.com *.justuno.com *.liveclicker.net *.demdex.net *.cxense.com *.webcollage.net *.ziftsolutions.com pixel.mathtag.com *.googletagmanager.com *.googletagservices.com a.sellpoint.net www.youtube.com media.flixcar.com *.easy2.com www.facebook.com *.rlcdn.com *.cloudfront.net rs.gwallet.com *.liveclicker.com pages.cdwemail.com www.emjcd.com *.dotomi.com *.flixsyndication.net cdw.zuberance.com *.hotjar.io *.eloqua.com *.swcontentsyndication.com www.cisco.com cl.s4.exct.net *.youvisit.com www.vmwarepartnerdemandcenter.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.adsrvr.org cdw.scene7.com;font-src 'self' 'unsafe-inline' *.cdw.com *.needle.com *.bounceexchange.com *.googleapis.com *.cnetcontent.com *.demdex.net *.webcollage.net a.sellpoint.net media.flixfacts.com media.flixcar.com *.easy2.com *.cloudfront.net data: *.flixsyndication.net *.typekit.net *.adobe.com *.gstatic.com *.syndigo.com *.syndigo.cloud;connect-src 'self' *.cdw.com *.richrelevance.com *.bazaarvoice.com *.qualtrics.com *.optimizely.com *.hotjar.com *.needle.com nexus.ensighten.com px.spiceworks.com *.liadm.com scripts.demandbase.com triggeredmail.appspot.com *.bounceexchange.com *.googleadservices.com *.doubleclick.net *.google-analytics.com bat.bing.com *.googleapis.com nsg.symantec.com *.cnetcontent.com *.akamaihd.net *.google.com *.justuno.com *.netapp.com *.demdex.net *.d41.co *.cxense.com vault.pactsafe.io pactsafe.io *.webcollage.net *.googletagmanager.com *.googletagservices.com t.sellpoints.com a.sellpoint.net *.go-mpulse.net platform.twitter.com *.company-target.com www.facebook.com *.bouncex.net *.cdnwidget.com *.cloudfront.net *.bluecore.com p.adsymptotic.com wss://*.hotjar.com p.po.st *.cdnbasket.net *.akstat.io data.g2.com data.g2crowd.com *.adobe.com *.hotjar.io app.leadsrx.com *.turnto.com *.teads.tv *.ispot.tv *.hubapi.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.hubspot-forms-static-embed.s3.amazonaws.com *.hubspot.com *.tiqcdn.com *.tealiumiq.com *.adroll.com p11.techlab-cdn.com;object-src 'self' a.sellpoint.net cdw.scene7.com;worker-src 'self' *.needle.com *.cloudfront.net blob:;media-src 'self' *.cdw.com *.cnetcontent.com *.webcollage.net media.flixfacts.com www.youtube.com blob: *.flixsyndication.net *.youvisit.com *.syndigo.com *.syndigo.cloud *.tiqcdn.com cdw.scene7.com; 2 upgrade-insecure-requests; media-src https: data: blob:; img-src https: data: blob:; object-src 'none'; worker-src blob:; default-src https: blob: 'unsafe-inline' 'unsafe-eval' 2 frame-ancestors vidiq-marketing-cms.now.sh vidiq-marketing-cms.vercel.app vidiq-marketing-cms-git-staging-vidiq.vercel.app vidiq-marketing-cms-git-dev-vidiq.vercel.app vidiq-marketing-cms-git-dev.vidiq.now.sh vidiq-marketing-cms-git-staging.vidiq.now.sh vitals.vercel-analytics.com localhost:3333 2 default-src 'self' https://cdn.finnair.com https://pay.finnair.com https://pay-preprod.finnair.com; prefetch-src 'self' *.finnair.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.finnair.com *.googletagmanager.com https://tagmanager.google.com *.google-analytics.com https://*.akamaihd.net https://*.go-mpulse.net https://*.quantummetric.com https://*.salesforceliveagent.com https://*.force.com https://*.salesforce.com https://connect.facebook.net https://www.dwin1.com https://maps.googleapis.com https://cdn.smartvel.com; style-src 'self' 'unsafe-inline' *.finnair.com https://*.force.com https://*.salesforce.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn.smartvel.com; img-src 'self' data: *.finnair.com *.google-analytics.com https://*.ytimg.com https://*.akamaihd.net https://*.akstat.io https://www.googletagmanager.com https://www.facebook.com *.doubleclick.net https://www.awin1.com https://www.dwin1.com https://maps.googleapis.com https://*.gstatic.com https://www.google.com https://www.google.fi https://www.google.se https://www.google.co.uk https://www.google.de https://www.google.es https://www.google.it https://cdn.smartvel.com; manifest-src 'self' https://cdn.finnair.com; font-src 'self' data: https://cdn.finnair.com https://maps.googleapis.com https://*.gstatic.com; connect-src 'self' *.finnair.com https://sentry.io https://*.akamaihd.net https://*.akstat.io https://c.go-mpulse.net https://*.force.com https://search-api.swiftype.com https://finnair-app.quantummetric.com *.google-analytics.com *.doubleclick.net https://www.facebook.com https://green.am.apps.avarko.com https://*.aurinkomatkat.fi https://api.smartvel.com https://cdn.smartvel.com; child-src 'self' https://paygw.finnair.com https://paygw-test.finnair.com https://auth.finnair.com https://preauth.finnair.com https://www.youtube.com https://api.finnair.com https://api-test.finnair.com https://www.facebook.com https://staticxx.facebook.com; frame-src 'self' https://*.force.com https://*.salesforce.com https://paygw.finnair.com https://paygw-test.finnair.com https://auth.finnair.com https://preauth.finnair.com https://www.youtube.com https://api.finnair.com https://api-test.finnair.com https://3530909.fls.doubleclick.net https://www.googletagmanager.com https://finnair.eu.qualtrics.com https://www.facebook.com https://*.points.com; worker-src 'none'; sandbox allow-popups allow-forms allow-scripts allow-same-origin allow-modals allow-popups-to-escape-sandbox allow-top-navigation; frame-ancestors 'self'; object-src 'none' 2 frame-ancestors http://ptgl.fujian.gov.cn https://ptgl.fujian.gov.cn http://www.fujian.gov.cn https://www.fujian.gov.cn http://www.fj.gov.cn https://www.fj.gov.cn 2 frame-ancestors 'self' corning.com *.corning.com *.siteworx.com *.ceros.com *.ariba.com 2 frame-ancestors 'self' *.edwardjones.com *.edwardjones.ca accountaccess.devjones.com accountaccess.devjones.ca iaa-api-gateway.apps.devjones.com accountaccess.edwardjones.com accountaccess.edwardjones.ca onlineaccess.edwardjones.com iaaweb.edwardjones.com; report-uri /report-csp-violation 2 base-uri 'none'; object-src 'none'; script-src 'self' https: 'unsafe-inline'; 2 frame-ancestors 'self' file: filesystem: ionic: http://localhost:8080; 2 default-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch; script-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://google.com http://www.googleadservices.com https://googleads.g.doubleclick.net https://static.ads-twitter.com http://static.ads-twitter.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://www.google.com https://tagmanager.google.com https://www.gstatic.com https://www.linkedin.com https://analytics.twitter.com https://px.ads.linkedin.com https://maps.googleapis.com https://platform.twitter.com https://cdn.checkout.com https://static-resource.com https://sjs.bizographics.com https://snap.licdn.com http://bat.bing.com https://bat.bing.com https://www.dwin1.com http://www.dwin1.com https://*.intercom.io http://*.intercom.io https://*.intercomcdn.com http://*.intercomcdn.com https://p.teads.tv; font-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch 'unsafe-inline' chrome-extension 'self' data: http://*.gstatic.com https://*.gstatic.com https://*.intercomcdn.com https://github.com/google/fonts; style-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com https://tagmanager.google.com; img-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch 'unsafe-inline' 'self' data: android-webview-video-poster https://* http://*; object-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch https://vjs.zencdn.net; connect-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch ws://*.infomaniak.ch:* ws://*.infomaniak.com:* wss://*.infomaniak.ch:* wss://*.infomaniak.com:* https://www.google.com https://nexus-long-poller-a.intercom.io https://*.bugsnag.com https://bat.bing.com http://bat.bing.com https://*.g.doubleclick.net https://*.google-analytics.com https://analytics.google.com https://www.google.ch https://www.google.fr https://www.google.de https://www.google.be https://*.facebook.com https://*.facebook.net https://*.linkedin.com https://*.checkout.com https://*.intercom.io http://*.intercom.io wss://*.intercom.io; child-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch https://www.google.com https://google.com https://www.facebook.com https://www.youtube.com https://www.googletagmanager.com https://player.vimeo.com https://bid.g.doubleclick.net; frame-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch https://www.google.com https://google.com https://www.facebook.com https://www.youtube.com https://www.googletagmanager.com https://player.vimeo.com https://bid.g.doubleclick.net; media-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch https://js.intercomcdn.com; worker-src http://infomaniak.com http://*.infomaniak.com https://infomaniak.com https://*.infomaniak.com https://*.infomaniak.ch http://*.infomaniak.ch data: blob:; report-uri /api/csp-report; 2 frame-ancestors https://*.propellerads.com; 2 frame-ancestors 'self' https://app.optimizely.com 2 frame-ancestors *.procore.com 2 frame-ancestors https://*.ionos.fr https://ionos.fr; 2 sandbox allow-downloads allow-forms allow-modals allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-top-navigation-by-user-activation allow-presentation; 2 frame-ancestors self https://community.pregnancy.org https://optum.marketing.adobe.com *.uhg.com *.optum.com *.uhc.com; 2 default-src 'self'; connect-src 'self' https://keepersecurity.com https://keepersecurity.eu https://keepersecurity.com.au https://forms.hubspot.com https://www.google-analytics.com https://keepersecurity.ktrjao.net https://ws.zoominfo.com https://rp.liadm.com https://s.yimg.com https://cdn.cookielaw.org https://cdn.cookielaw.org https://sdk.fra-01.braze.eu https://c.6sc.co https://secure.adnxs.com; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; frame-src 'self' https://player.vimeo.com https://www.youtube.com https://www.google.com https://www.googletagmanager.com https://*.studentbeans.com https://js.driftt.com https://widget.drift.com https://forms.hsforms.com https://platform.twitter.com https://twitter.com https://click.linksynergy.com https://insight.adsrvr.org https://tr.snapchat.com; img-src 'self' https: data:; media-src 'self' https://widget.driftqa.com; script-src 'self' 'unsafe-inline' https://*.studentbeans.com https://*.searchcdn.com https://*.impactradius-event.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hsforms.net https://forms.hsforms.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://bat.bing.com https://snap.licdn.com https://js.driftt.com https://ws-assets.zoominfo.com https://js.hs-banner.com https://www.upsellit.com https://prod.upsellit.com https://b-code.liadm.com https://trk.techtarget.com https://s.yimg.com https://click.linksynergy.com https://static.ads-twitter.com https://platform.twitter.com https://analytics.twitter.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://js.appboycdn.com https://js.adsrvr.org https://j.6sc.co https://www.googleadservices.com https://sc-static.net; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://app.addsearch.com https://platform.twitter.com https://use.fontawesome.com; 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' chrome-extension: data: *.portland.gov *.ssl.fastly.net cdnjs.cloudflare.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net unpkg.com www.google-analytics.com www.googletagmanager.com tagmanager.google.com bam.nr-data.net bam-cell.nr-data.net js-agent.newrelic.com fontlibrary.org use.fontawesome.com *.googleapis.com *.gstatic.com *.googleusercontent.com *.portlandoregon.gov *.portlandmaps.com *.arcgis.com server.arcgisonline.com *.openstreetmap.org *.opentopomap.org *.tiles.wmflabs.org *.loop11.com *.rawgit.com api.mapbox.com; frame-src 'self' https://www.youtube.com/embed/ https://player.vimeo.com https://www.google.com/maps/ https://www.portlandoregon.gov/ https://www.portlandmaps.com/ *.arcgis.com arcg.is https://online.tableau.com/ https://public.tableau.com/; report-uri https://portlandgov.report-uri.com/r/d/csp/enforce 2 frame-ancestors 'self' https://wiki.abbyy.com 2 frame-ancestors https://tongji.baidu.com/ https://www.jiguang.cn/ 2 default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.wistia.com *.wistia.net www.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net embedwistia-a.akamaihd.net *.litix.io www.facebook.com *.ubembed.com hubspot-forms-static-embed.s3.amazonaws.com *.hsforms.net *.hsforms.com *.marketo.com *.marketo.net *.mktoresp.com *.mktoutil.com *.emarsys.com *.cookielaw.org; font-src 'self' data: *.kinstacdn.com fonts.gstatic.com *.slidesharecdn.com; form-action 'self' www.facebook.com *.hsforms.net *.hsforms.com; frame-ancestors 'self'; frame-src 'self' *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.marketo.com *.marketo.net *.cookiebot.com html5-player.libsyn.com bid.g.doubleclick.net www.facebook.com js.driftt.com *.ubembed.com *.googlesyndication.com *.hsforms.net *.hsforms.com *.slideshare.net *.wistia.com *.wistia.net *.on24.com *.emarsys.com; img-src 'self' data: *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.wistia.com *.wistia.net *.gravatar.com www.googletagmanager.com www.google-analytics.com analytics.twitter.com px.ads.linkedin.com googleads.g.doubleclick.net www.linkedin.com www.facebook.com connect.facebook.net t.co embedwistia-a.akamaihd.net *.hsforms.net *.hsforms.com *.adsymptotic.com *.glasgowlive.co.uk s.w.org *.cookielaw.org; media-src 'self' blob: data: *.kinstacdn.com *.wistia.com *.wistia.net embedwistia-a.akamaihd.net *.driftqa.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.kinstacdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com *.marketo.com *.marketo.net *.ubembed.com *.wistia.com *.wistia.net googleads.g.doubleclick.net www.googleadservices.com tracking.g2crowd.com snap.licdn.com connect.facebook.net *.cookiebot.com static.ads-twitter.com analytics.twitter.com js.driftt.com *.hsforms.net *.hsforms.com *.googlesyndication.com *.cookielaw.org *.onetrust.com; style-src 'self' 'unsafe-inline' *.kinstacdn.com fonts.googleapis.com *.marketo.com *.marketo.net; worker-src 'self' blob:; 2 frame-ancestors 'self' http://ideas.cloudera.com https://ideas.cloudera.com http://pages.cloudera.com https://pages.cloudera.com 2 default-src 'self' 'unsafe-inline' graphql.contentful.com web.ccpgamescdn.com *.ctfassets.net; base-uri 'self'; object-src 'self' ctfassets.net https://www.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://tagmanager.google.com https://sp.analytics.yahoo.com https://s.yimg.com https://player.idomoo.com https://www.artfut.com yimg.com hello.myfonts.net graphql.contentful.com consentcdn.cookiebot.com consent.cookiebot.com www.googletagmanager.com www.gstatic.com www.gstatic.cn s.ytimg.com recaptcha.net www.google-analytics.com https://ssl.google-analytics.com speedof.me connect.facebook.net www.youtube.com www.googleadservices.com google.com *.google.com https://googleads.g.doubleclick.net https://bat.bing.com static.ads-twitter.com mc.yandex.ru ccpcommunity.zendesk.com *.zdassets.com *.twitter.com https://cdn.taboola.com https://widget-mediator.zopim.com https://www.googleadservices.com/pagead/conversion_async.js https://www.google.com/pagead/conversion_async.js *.twitch.tv web.ccpgamescdn.com *.twitter.com tpc.googlesyndication.com https://d2yyd1h5u9mauk.cloudfront.net/integrations/web/v1/library/cBaCB1PHCwXVd4yY/delighted.js yastatic.net ethn.io;style-src 'self' 'unsafe-inline' web.ccpgamescdn.com https://tagmanager.google.com hello.myfonts.net fonts.googleapis.com optimize.google.com; connect-src 'self' *.eveonline.com signup.ccpeveweb.com *.google.com www.google-analytics.com *.evetech.net engine.extccp.com https://s3.amazonaws.com *.idomoo.com *.idomoo.co https://eur-api.idomoo.com https://s.yimg.com api.ccpgames.com graphql.contentful.com sentry.io j62tyvg8r3.execute-api.eu-west-1.amazonaws.com yo2vtgum73.execute-api.eu-west-1.amazonaws.com www.mocky.io/v2/5e1ed5ca3100003600189501 stats.g.doubleclick.net https://bat.bing.com images.ctfassets.net www.endgame42.com speedof.me mc.yandex.ru mc.yandex.by mc.yandex.kz mc.yandex.ua mc.yandex.uz ccpcommunity.zendesk.com *.zdassets.com wss://widget-mediator.zopim.com https://googleads.g.doubleclick.net www.facebook.com mc.yandex.md mc.yandex.com mc.yandex.fr steamdatasuite.com umip1v3tqb.execute-api.eu-west-1.amazonaws.com cb2dzccayg.execute-api.eu-west-1.amazonaws.com w778zk1gu3.execute-api.eu-west-1.amazonaws.com steam.gs *.taboola.com web.delighted.com ethn.io; font-src 'self' data: hello.myfonts.net fonts.gstatic.com fonts.googleapis.com web.ccpgamescdn.com; img-src 'self' https: data: blob: *.ctfassets.net https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://googleads.g.doubleclick.net; frame-src 'self' consentcdn.cookiebot.com speedof.me *.doubleclick.net www.google.com www.youtube.com https://www.facebook.com www.googletagmanager.com https://recaptcha.net tpc.googlesyndication.com *.ctfassets.net videos.ctfassets.net *.twitch.tv optimize.google.com www.ostlon.com cdn.knightlab.com;frame-ancestors 'self' http://webvisor.com;report-uri https://ccpgames.report-uri.com/r/t/csp/enforce; 2 frame-ancestors 'self 2 img-src * data: 2 frame-ancestors 'self' *.learningcloud.me 2 frame-ancestors 'self' viewsonic.com viewsonic.com.tw viewsonic.com.au viewsonic.com.sg viewsoniceurope.com viewsonic.com.cn ap.viewsonic.com hk.viewsonic.com ifppartners.viewsonic.com youtube.com dev-viewsonic.mojostratus.io customercare.viewsonic.com.tw dev.ap.viewsonic.com; 2 frame-ancestors 'self' *.optimizely.com 2 default-src 'self' ; style-src 'self' ; script-src 'self' ; img-src 'self' ; font-src 'self' data: ; media-src 'self' https://download.elster.de ; connect-src 'self' https://lxelma5p.bfinv.de https://lxelma5c.bfinv.de wss://www.elster.de https://datenabholung1.elster.de https://datenabholung2.elster.de ; object-src 'self' blob: ; form-action 'self' ; frame-ancestors 'self' 2 frame-ancestors https://*.meijer.com 2 default-src blob: data: https://*.nuid.imrworldwide.com/ https://*.akamaihd.net https://*.akamaized.net https://*.footprint.net https://*.linkpulse.com https://*.svt.se https://*.svtplay.se https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://analytics.codigo.se https://pp.lp4.io http://pp.lp4.io https://sb.scorecardresearch.com https://sentry.io https://time.akamai.com https://trafficgateway.research-int.se https://www.gstatic.com http://www.gstatic.com https://www.svtstatic.se https://track.adform.net https://s2.adform.net https://c1.adform.net https://server.seadform.net https://firestore.googleapis.com 'self' 'unsafe-eval' 'unsafe-inline' 2 default-src 'self' 'unsafe-eval' 'unsafe-inline' https: http: data: blob: 2 connect-src consumer.krxd.net https://connect.facebook.net edgeapi.ace.teliacompany.net webprovisions-labs.humany.net 'self' telia-se.blueconic.net stats.g.doubleclick.net www.google.se telia-natcenter.humany.net cgchat.callguide.telia.com cdn.blueconic.net pwe.callguide.telia.com *.usabilla.com www.google.com telia.humany.net chat.ace.teliacompany.com www.google-analytics.com; default-src localhost:41680 'self'; font-src https://fonts.gstatic.com webprovisions-labs.humany.net 'self' telia.humany.net data: telia-natcenter.humany.net; frame-src d6tizftlrpuof.cloudfront.net https://optimize.google.com www.telia.se 'self' cdn.krxd.net *.doubleclick.net https://www.facebook.com wds-s.ace.teliacompany.com www.youtube.com wds.ace.teliacompany.com go.pardot.com youtube.com; img-src img.youtube.com https://optimize.google.com webprovisions-labs.humany.net 'self' https://www.facebook.com telia-se.blueconic.net stats.g.doubleclick.net www.google.se telia-natcenter.humany.net beacon.krxd.net d6tizftlrpuof.cloudfront.net cdn.blueconic.net *.usabilla.com www.haynespro-assets.com www.google.com www.haynespro-services.com telia.humany.net gentle-tor-21016.herokuapp.com plugins.blueconic.net data: media.krxd.net www.google-analytics.com humany.blob.core.windows.net; report-uri /.api/csp-report/v1/report?teamId=7dfafa39-0cc44b25-8e7c83f0; script-src 'unsafe-inline' https://optimize.google.com webprovisions-labs.humany.net 'self' cdn.krxd.net https://www.facebook.com telia-natcenter.humany.net cdn.blueconic.net www.googletagmanager.com core.dch.got.telia.se wds-s.ace.teliacompany.com portal-hosting.humany.net pi.pardot.com www.google-analytics.com consumer.krxd.net https://connect.facebook.net https://tagmanager.google.com core.dc.teliacompany.net telia-se.blueconic.net wds.ace.teliacompany.com beacon.krxd.net cdn.pardot.com d6tizftlrpuof.cloudfront.net *.usabilla.com telia.humany.net gentle-tor-21016.herokuapp.com plugins.blueconic.net 'unsafe-eval' media.krxd.net; style-src https://tagmanager.google.com 'unsafe-inline' core.dc.teliacompany.net https://optimize.google.com webprovisions-labs.humany.net 'self' telia-se.blueconic.net wds.ace.teliacompany.com telia-natcenter.humany.net d6tizftlrpuof.cloudfront.net cdn.blueconic.net core.dch.got.telia.se wds-s.ace.teliacompany.com telia.humany.net gentle-tor-21016.herokuapp.com plugins.blueconic.net media.krxd.net https://fonts.googleapis.com 2 frame-ancestors https://*.dev.local https://*.sunweb.nl https://*.sunweb.be; 2 frame-ancestors 'self' https://*.yandex.ru https://yastatic.net http://*.webvisor.com http://webvisor.com; 2 frame-ancestors 'self' *.brightspace.com; 2 frame-ancestors 'self' *.vendhq.com; report-uri https://csp.api.vendhq.com/prod/report; 2 frame-ancestors 'self' http://webvisor.com/ https://webvisor.com/ 2 default-src 'self' 'unsafe-inline' https://www.google-analytics.com https://*.google.com https://*.brightcove.com https://*.akamaihd.net https://*.boltdns.net https://brightcove.hs.llnwd.net https://stats.g.doubleclick.net https://www.classmarker.com https://*.crossref.org https://cm.scholarlyiq.com blob: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://*.google.com https://www.gstatic.com https://*.crossref.org https://cdnjs.cloudflare.com https://vjs.zendcdn.net https://vjs.zencdn.net https://players.brightcove.net https://www.youtube.com https://s.ytimg.com https://www.classmarker.com https://cdn.ckeditor.com blob:; font-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com data: about:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.crossref.org https://cdn.ckeditor.com; img-src 'self' 'unsafe-inline' https://www.google-analytics.com https://*.crossref.org https://stats.g.doubleclick.net https://*.brightcove.com http://*.brightcove.com https://*.boltdns.net https://imagebank.osa.org https://account.osa.org https://cdn.ckeditor.com; object-src 'self' 'unsafe-inline' https://*.akamaihd.net https://*.boltdns.net; 2 frame-ancestors 'self' *.boursorama-banque.com *.boursorama.com 2 default-src https: wss: blob: data: 'unsafe-eval' 'unsafe-inline'; object-src 'none' 2 default-src * data: 'unsafe-eval' 'unsafe-inline';frame-ancestors 'self'; 2 base-uri 'self'; report-uri https://csp-reporting-server.glitch.me/report; frame-ancestors https://glitch.com https://glitch.development 2 default-src 'self'; script-src 'self' cdnjs.cloudflare.com florenceva.blob.core.windows.net 'unsafe-inline' 'unsafe-eval'; style-src 'self' www.epic.com maxcdn.bootstrapcdn.com fonts.googleapis.com 'unsafe-inline'; font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com; img-src i.ytimg.com www.epic.com www-dev.epic.com ehrn.org ehrnprd.blob.core.windows.net 'self' data:; frame-src 'self' 2 frame-ancestors 'self' https://bob.santanderbank.com https://shdwbob.santanderbank.com https://www.santanderbank.com https://rolb.santanderbank.com https://shdwrolb.santanderbank.com https://einsteincrm.sov.gs.corp https://shdweinsteincrm.sov.gs.corp http://bkoffice.sov.gs.corp http://shdwbkoffice.sov.gs.corp; 2 frame-ancestors 'self' *.bloomreach.cloud 2 frame-ancestors 'self' *.cipdcommerce.com *.cipd.co.uk; 2 frame-ancestors 'self' *.egain.cloud; 2 font-src 'self' *.fandangonow.com *.fandango.com data: *.mgo-images.com; object-src *.visa.com data:; script-src 'self' *.fandangonow.com *.fandango.com 'unsafe-inline' 'unsafe-eval' *; style-src 'self' *.fandangonow.com *.fandango.com data: 'unsafe-inline' * 2 child-src * blob:; default-src * 'unsafe-inline'; font-src * 'unsafe-inline' data:; img-src * 'unsafe-inline' data: blob:; object-src 'none'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; worker-src * blob: 2 default-src 'self' 'unsafe-inline' https://*.uni-paderborn.de https://www.youtube-nocookie.com https://player.vimeo.com https://*.upb.de https://streaming.uni-paderborn.de:2233 https://*.google.com ; font-src 'self' https://*.uni-paderborn.de data:; img-src 'self' data: https://pbs.twimg.com https://*.google.com https://www.googleapis.com https://*.uni-paderborn.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.uni-paderborn.de https://www.google.com https://cse.google.com; media-src 'self' https://*.uni-paderborn.de https://*.upb.de https://streaming.uni-paderborn.de:2233 blob: 2 frame-ancestors www.jivochat.com https://*.jivosite.com https://*.mindbox.ru https://*.popmechanic.ru/ https://kinescope.io/ https://cdn-static.egoiapp2.com https://disqus.com; child-src blob: https://mc.yandex.ru; frame-src blob: https://*.jivosite.com https://*.youtube.com https://mc.yandex.ru https://*.facebook.com https://*.marquiz.ru https://*.mindbox.ru https://*.popmechanic.ru/ https://kinescope.io/ https://cdn-static.egoiapp2.com https://disqus.com 2 default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-src *; img-src * data: blob: 'unsafe-inline'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to https://o104929.ingest.sentry.io/api/5254252/security/?sentry_key=f57f5f1a442f4f64871cfd7eae1e5dc1/?sentry_environment=production; report-uri https://o104929.ingest.sentry.io/api/5254252/security/?sentry_key=f57f5f1a442f4f64871cfd7eae1e5dc1/?sentry_environment=production; 2 frame-ancestors 'self' https://teams.microsoft.com https://teams.microsoft.us https://local.teams.office.com https://int.teams.microsoft.com https://devspaces.skype.com https://ssauth.skype.com https://teams.microsoft.com.mcas.ms https://teams.microsoft.com.us3.cas.ms https://local.teams.office.com:8080; report-uri https://csp.microsoft.com/report/WhiteboardWebClient-WhiteboardApp-PROD; report-to csp-endpoint; 2 default-src 'self' *.bmas.de www.etracker.de; base-uri 'self'; style-src 'self' 'unsafe-inline' *.openlayers.org openlayers.org *.openstreetmap.org *.twitter.com *.twimg.com *.podigee.com cdn.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.googleapis.com *.google.com *.gstatic.com *.openlayers.org openlayers.org *.pixelpark.com *.openstreetmap.org *.twitter.com *.twimg.com *.google-analytics.com *.podigee.com cdn.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org static.etracker.com code.etracker.com www.etracker.de https://cdn.jsdelivr.net/gh/pauljadam/bookmarklets@master/tables.js https://cdn.jsdelivr.net/gh/pauljadam/bookmarklets@master/landmarks.js https://cdn.jsdelivr.net/gh/pauljadam/bookmarklets@master/images.js https://cdn.jsdelivr.net/gh/pauljadam/bookmarklets@master/lists.js https://cdn.jsdelivr.net/gh/pauljadam/bookmarklets@master/lang.js https://cdn.jsdelivr.net/gh/pauljadam/bookmarklets@master/focus.js *.highcharts.com; object-src 'self'; font-src 'self' data: *.podigee.com; media-src 'self' blob: *.youtube.com *.bmas.de; child-src *.google.com *.gstatic.com *.youtube.com *.pixelpark.com *.twitter.com *.twimg.com *.podigee.com *.bmbf.de cdn.jwplayer.com vimeo.com *.video-stream-hosting.de; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.openlayers.org openlayers.org *.openstreetmap.org *.pixelpark.com *.twitter.com *.twimg.com *.google-analytics.com cdn.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org; frame-ancestors 'self' *.facebook.com 2 frame-ancestors https://www.check24.de/ https://finanzen.check24.de/ 'self' 2 frame-ancestors 'self' *.regmovies.com *.authorize.net 2 frame-ancestors 'self' http://www.kayak.com.au https://checkin.si.amadeus.net https://pdt.checkin.amadeus.net http://www.momondo.com.au http://www.cheapflights.com.au http://www.ca.kayak.com http://www.momondo.ca http://www.cheapflights.ca http://www.cn.kayak.com http://www.momondo.com.cn http://www.kayak.com.hk http://www.momondo.hk http://www.cheapflights.com.hk http://www.kayak.co.in http://www.momondo.in http://www.in.cheapflights.com http://www.kayak.co.id http://www.cheapflights.co.id http://www.kayak.co.jp http://www.kayak.co.kr http://www.kayak.com.my http://www.cheapflights.com.my http://www.nz.kayak.com http://www.momondo.co.nz http://www.cheapflights.co.nz http://www.cheapflights.com.ph http://www.kayak.com.ph http://www.kayak.sg http://www.cheapflights.com.sg http://www.tw.kayak.com http://www.momondo.tw http://www.kayak.co.th http://www.kayak.co.uk http://www.momondo.co.uk http://www.cheapflights.co.uk http://www.cheapflights.co.uk http://www.kayak.com http://www.momondo.com http://www.cheapflights.com http://www.ae.cheapflights.com http://www.kayak.ae http://global.cheapflights.com http://global.momondo.com http://kayak.de http://momondo.de http://swoodoo.com http://kayak.fr http://momondo.fr http://www-malaysiaairlines-com.cdn.ampproject.org http://cdn.ampproject.org http://www.ampify.ga https://www.kayak.com.au https://www.momondo.com.au https://www.cheapflights.com.au https://www.ca.kayak.com https://www.momondo.ca https://www.cheapflights.ca https://www.cn.kayak.com https://www.momondo.com.cn https://www.kayak.com.hk https://www.momondo.hk https://www.cheapflights.com.hk https://www.kayak.co.in https://www.momondo.in https://www.in.cheapflights.com https://www.kayak.co.id https://www.cheapflights.co.id https://www.kayak.co.jp https://www.kayak.co.kr https://www.kayak.com.my https://www.cheapflights.com.my https://www.nz.kayak.com https://www.momondo.co.nz https://www.cheapflights.co.nz https://www.cheapflights.com.ph https://www.kayak.com.ph https://www.kayak.sg https://www.cheapflights.com.sg https://www.tw.kayak.com https://www.momondo.tw https://www.kayak.co.th https://www.kayak.co.uk https://www.momondo.co.uk https://www.cheapflights.co.uk https://www.cheapflights.co.uk https://www.kayak.com https://www.momondo.com https://www.cheapflights.com https://www.ae.cheapflights.com https://www.kayak.ae https://global.cheapflights.com https://global.momondo.com https://kayak.de https://momondo.de https://swoodoo.com https://kayak.fr https://momondo.fr https://www-malaysiaairlines-com.cdn.ampproject.org https://cdn.ampproject.org https://www.ampify.ga https://mobile-api.oneworld.com/ https://oneworld.com/ https://digital.malaysiaairlines.com/ https://ma-stage64-01.adobecqms.net/ https://ma-sit64.adobecqms.net/ https://ma-dev64.adobecqms.net/ https://goingplacesmy.staging.wpengine.com/ https://goingplaces.malaysiaairlines.com/ 2 default-src https: *.crazyegg.com; script-src http: https: 'unsafe-inline' 'unsafe-eval' *.crazyegg.com; frame-src http: https: data:; style-src http: https: 'unsafe-inline'; img-src http: https: data: blob *.crazyegg.com; media-src http: https: data: blob:; font-src http: https: data:; connect-src http: https: wss: *.crazyegg.com; child-src http: https: blob:; frame-ancestors 'self' https://dialpad.highspot.com/ https://view.highspot.com/ https://dialpad.allbound.com/ 2 default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; connect-src https: wss:; worker-src 'self' blob: ; child-src 'self' https: blob: ; 2 frame-ancestors 'self' ' *.ampproject.org .zdbb.net 2 default-src 'self';img-src https: *.google-analytics.com 'self' * data:;style-src 'self' https: 'unsafe-inline';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.yunzhonghui.vip *.bongchan.com *.googletagmanager.com static.zdassets.com *.google-analytics.com ajax.cloudflare.com *.geetest.com *.qbox.me *.zopim.com *.tradingview.com *.twitter.com *.recaptcha.net *.google.com *.gstatic.com *.doubleclick.net *.googleadservices.com *.bingbon.com;script-src-elem 'self' 'unsafe-inline' *;connect-src *;form-action 'self' *.facebook.com *.advcash.com;frame-src 'self' *;object-src 'none';font-src 'self' * data:;media-src 'self' *;manifest-src 'self' 'unsafe-inline' 'unsafe-eval' 2 default-src 'self' 'unsafe-inline' https://aena.sc.omtrdc.net https://estadisticaswpa.aena.es https://external.airport.ai https://fonts.googleapis.com https://fonts.gstatic.com https://parceiros.estapar.com.br/widgets/4927 https://parceiros.estapar.com.br/widgets/4928 https://parceiros.estapar.com.br/widgets/4929 https://player.vimeo.com https://tools.euroland.com https://tools.eurolandir.com https://www.facebook.com https://www.google.com https://www.youtube.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://assets.adobedtm.com https://cdn.cookielaw.org https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://external.airport.ai/js/sdk/web.js https://maps.googleapis.com https://tools.euroland.com/tools/common/eurolandiframeautoheight/eurolandtoolsintegrationobject.js https://www.google.com/recaptcha/api.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtm.js https://www.gstatic.com;frame-ancestors 'self' blank;object-src 'none';connect-src 'self' https://aena-indoor-read-api.geographica.com https://api.ipify.org https://basemaps.cartocdn.com https://cartocdn-geuw-a.global.ssl.fastly.net https://cartocdn-geuw-b.global.ssl.fastly.net https://cartocdn-geuw-c.global.ssl.fastly.net https://cartocdn-geuw-d.global.ssl.fastly.net https://cdn.cookielaw.org https://dpm.demdex.net https://external.airport.ai https://player.vimeo.com https://stats.g.doubleclick.net https://stats.g.doubleclick.net https://tiles.basemaps.cartocdn.com https://tiles-a.basemaps.cartocdn.com https://tiles-b.basemaps.cartocdn.com https://tiles-c.basemaps.cartocdn.com https://tiles-d.basemaps.cartocdn.com https://www.facebook.com https://www.google-analytics.com;img-src 'self' data: blob: https://aena.sc.omtrdc.net https://cdn.cookielaw.org https://maps.googleapis.com https://maps.gstatic.com https://www.facebook.com https://www.google.com https://www.google.es https://www.google-analytics.com https://www.googletagmanager.com; 2 default-src 'self' https:; object-src 'self'; frame-src 'self' *.kvk.nl channel.me www.youtube.com cloud.reflexappointment.nl iwelcome.sso.eherkenning.nl ehm01.iwelcome.nl opendata.ondernemersplein.nl www.googletagmanager.com *.hotjar.com https://miloo.nl wss://miloo.nl *.mopinion.com *.soundcloud.com *.youtube-nocookie.com disqus.com *.spotify.com; child-src 'self' *.kvk.nl channel.me www.youtube.com cloud.reflexappointment.nl iwelcome.sso.eherkenning.nl ehm01.iwelcome.nl opendata.ondernemersplein.nl www.googletagmanager.com *.hotjar.com https://miloo.nl wss://miloo.nl *.mopinion.com *.soundcloud.com *.youtube-nocookie.com *.disqus.com pushbird.com *.spotify.com; style-src 'self' 'unsafe-inline' *.kvk.nl s3.amazonaws.com tagmanager.google.com translate.googleapis.com *.mopinion.com https://fonts.googleapis.com *.abtasty.com *.disqus.com *.disquscdn.com *.spotify.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.kvk.nl blob: bat.bing.com *.nowinteract.com www.youtube.com s.ytimg.com channel.me cloudstatic.obi4wan.com *.hotjar.com www.google-analytics.com www.googletagmanager.com cdn-assets-prod.s3.amazonaws.com tagmanager.google.com *.mopinion.com https://miloo.nl wss://miloo.nl *.abtasty.com *.disqus.com *.disquscdn.com cdn.pushbird.com *.spotify.com; img-src 'self' *.kvk.nl blob: data: tr3.onlinesucces.nl www.ondernemersplein.nl bat.bing.com https://www.gstatic.com/images/branding/product/2x/translate_24dp.png www.google-analytics.com www.googletagmanager.com https://miloo.nl wss://miloo.nl *.abtasty.com *.cloudfront.com *.mopinion.com *.disqus.com *.disquscdn.com cdn.pushbird.com *.spotify.com; font-src 'self' blob: data: *.kvk.nl https://fonts.gstatic.com static.hotjar.com *.mopinion.com *.abtasty.com *.disqus.com *.spotify.com; connect-src 'self' *.kvk.nl wss://*.kvk.nl opendata.ondernemersplein.nl *.nowinteract.com translate.googleapis.com bots.obi4wan.com app.obi4wan.ai *.hotjar.com wss://*.hotjar.com www.google-analytics.com script.google.com https://miloo.nl wss://miloo.nl *.mopinion.com col.eum-appdynamics.com *.abtasty.com sentry.io *.disqus.com api.pushbird.com *.spotify.com; frame-ancestors 'self' https://*.kvk.nl; base-uri 'self' *.kvk.nl; 2 default-src 'self' *.brainshark.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.visualwebsiteoptimizer.com ga.clearbit.com sfc.leadspace.com cdn.cookielaw.org *.onetrust.com www.google-analytics.com snap.licdn.com connect.facebook.net *.marketo.net *.marketo.com tracking.g2crowd.com *.6sc.co *.instagram.com *.disqus.com *.newrelic.com https://js.driftt.com https://pages.brainshark.com https://www.googleoptimize.com https://optimize.google.com 'unsafe-inline' https://www.google-analytics.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com fonts.googleapis.com *.marketo.com https://pages.brainshark.com https://www.googleoptimize.com https://optimize.google.com https://fonts.googleapis.com 'unsafe-inline' ; img-src 'self' *.brainshark.com www.googletagmanager.com privacy-policy.truste.com *.6sc.co data: *.visualwebsiteoptimizer.com *.linkedin.com *.facebook.com www.google-analytics.com *.marketo.com *.google.com *.linkedin.com https://optimize.google.com https://www.google-analytics.com; frame-src 'self' *.brainshark.com *.instagram.com *.facebook.com *.marketo.com *.disqus.com https://js.driftt.com https://www.googleoptimize.com https://optimize.google.com *.youtube.com; frame-ancestors self none *.brainshark.com; font-src 'self' *.bootstrapcdn.com ; connect-src 'self' cdn.cookielaw.org sfgw.leadspace.com *.mktoresp.com *.doubleclick.net *.facebook.com *.google-analytics.com *.6sense.com *.6sc.co *.adnxs.com *.onetrust.com *.mktoutil.com *.google.com *.brainshark.com; report-uri /report-csp-violation 2 frame-ancestors https://plasticsfinder.com/ 'self'; 2 frame-ancestors 'self' https://amd.pathfactory.com 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' *.utsouthwestern.edu https://tagmanager.google.com https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://www.youvisit.com/tour/Embed/js3 https://s.ytimg.com/yts/jsbin/www-widgetapi-vfldp9JMF/www-widgetapi.js https://s.ytimg.com/yts/jsbin/www-widgetapi-vflGYMLFw/www-widgetapi.js https://www.youvisit.com/SmartScript/latest/smartscript.js https://utsw.flintbox.com/embed.js https://utsw.flintbox.com/assets/iframe-container-5933c9a9de9740bee358da320c7bf82406da2e2f6e93843b06b4514c2030dfd9.js https://www.gstatic.com https://unpkg.com https://cdn.storygize.net https://bs.serving-sys.com *.pinterest.com *.hotjar.com https://platform.twitter.com https://assets.pinterest.com http://www.facebook.com/plugins/like.php https://cdnjs.cloudflare.com/ajax/libs/foundation/6.4.3/js/foundation.min.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_format_module.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_default_module.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_ui_module.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_corechart_module.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_fw_module.js https://www.gstatic.com/charts/46.2/third_party/dygraphs/dygraph-tickers-combined.js https://www.gstatic.com/charts/46.2/third_party/webfontloader/webfont.js https://www.gstatic.com/charts/46.2/js/jsapi_compiled_bar_module.js https://cdnjs.cloudflare.com/ajax/libs/foundation-essential/5.2.2/js/vendor/modernizr.js https://www.google-analytics.com/analytics.js https://script.crazyegg.com/pages/scripts/0017/5050.js https://static.hotjar.com/c/hotjar-30590.js https://secure-ds.serving-sys.com/SemiCachedScripts/ebOneTag.js https://www.storygize.net/a/cecea51f-563b-4ac4-9a2a-8a3660977ad2/abdo.js https://connect.facebook.net/en_US/fbevents.js https://www.gstatic.com/charts/46.2/loader.js https://ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js https://cdn.plyr.io https://connect.facebook.net https://www.storygize.net https://www.gstatic.com/recaptcha/api2/v1555968629716/recaptcha__en.js https://www.gstatic.com/charts/loader.js https://events.utsouthwestern.edu https://assets.juicer.io/embed.js https://www.youtube.com/ https://player.vimeo.com/ https://www.flickr.com/ https://www.jove.com/ https://launchpad.utswneurology.com/ http://radonc.utsouthwestern.edu/ https://surgeonportal.donortracplus.org/ https://ais.swmed.edu/ https://www.facebook.com/ https://www.google.com/ https://calendar.google.com/ https://www.googletagmanager.com/ https://hroras2.swmed.edu/ https://studentservices.utsouthwestern.edu https://intrastudentservices.utsouthwestern.edu https://snap.licdn.com/li.lms-analytics/insight.min.js; connect-src 'self' *.utsouthwestern.edu *.crazyegg.com *.hotjar.io *.hotjar.com https://www.juicer.io https://stats.g.doubleclick.net/j/collect https://secure-ds.serving-sys.com/adServingData/PROD/TMClient/8/6218 https://graph.facebook.com/58323112191/picture https://www.juicer.io/api/page_views https://www.juicer.io/api/feeds/home-page-393b6969-47a9-40b5-b6a5-297bc3722122 https://cdn.plyr.io https://connect.facebook.net https://www.storygize.net https://www.gstatic.com/recaptcha/api2/v1555968629716/recaptcha__en.js https://www.gstatic.com/charts/loader.js https://events.utsouthwestern.edu https://assets.juicer.io/embed.js https://www.youtube.com/ https://player.vimeo.com/ https://www.flickr.com/ https://www.jove.com/ https://launchpad.utswneurology.com/ http://radonc.utsouthwestern.edu/ https://surgeonportal.donortracplus.org/ https://ais.swmed.edu/ https://www.facebook.com/ https://www.google.com/ https://calendar.google.com/ https://www.googletagmanager.com/ https://hroras2.swmed.edu/ https://studentservices.utsouthwestern.edu https://intrastudentservices.utsouthwestern.edu; frame-src 'self' *.utsouthwestern.edu https://utsw.flintbox.com/ https://forms.office.com/ *.hotjar.com https://www.youvisit.com https://cdn.youvisit.com https://w.soundcloud.com https://platform.twitter.com https://www.facebook.com https://yoshki.com/badge-apta.html https://cdn.plyr.io https://connect.facebook.net https://www.storygize.net https://www.gstatic.com/recaptcha/api2/v1555968629716/recaptcha__en.js https://www.gstatic.com/charts/loader.js https://events.utsouthwestern.edu https://assets.juicer.io/embed.js https://www.youtube.com/ https://player.vimeo.com/ https://www.flickr.com/ https://www.jove.com/ https://launchpad.utswneurology.com/ http://radonc.utsouthwestern.edu/ https://surgeonportal.donortracplus.org/ https://ais.swmed.edu/ https://www.facebook.com/ https://www.google.com/ https://calendar.google.com/ https://www.googletagmanager.com/ https://hroras2.swmed.edu/ https://studentservices.utsouthwestern.edu https://intrastudentservices.utsouthwestern.edu https://px.ads.linkedin.com 2 default-src 'self' clicktale.net *.clicktale.net trustarc.com *.trustarc.com facebook.net *.facebook.net boldchat.com *.boldchat.com cloudfront.net *.cloudfront.net youtube.com youtu.be optimizely.com *.optimizely.com google.com *.google.com truste.com *.truste.com gstatic.com *.gstatic.com; style-src 'self' 'unsafe-inline' cloudfront.net *.cloudfront.net force.com *.force.com myfonts.net *.myfonts.net googleapis.com *.googleapis.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: optimizely.com *.optimizely.com googleapis.com *.googleapis.com google.com *.google.com cloudfront.net *.cloudfront.net truste.com *.truste.com force.com *.force.com qualtrics.com *.qualtrics.com clicktale.net *.clicktale.net google-analytics.com *.google-analytics.com trustarc.com *.trustarc.com gstatic.com *.gstatic.com facebook.net *.facebook.net boldchat.com *.boldchat.com salesforce.com *.salesforce.com salesforceliveagent.com *.salesforceliveagent.com youtube.com *.youtube.com; frame-src 'self' 'unsafe-eval' 'unsafe-inline' youtube-nocookie.com *.youtube-nocookie.com optimizely.com *.optimizely.com google.com *.google.com spotify.com *.spotify.com thunderclap.it *.thunderclap.it force.com *.force.com trustarc.com *.trustarc.com libsyn.com *.libsyn.com youtube.com *.youtube.com qualtrics.com *.qualtrics.com; connect-src 'self' 'unsafe-eval' 'unsafe-inline' google-analytics.com *.google-analytics.com optimizely.com *.optimizely.com clicktale.net *.clicktale.net qualtrics.com *.qualtrics.com googlesyndication.com *.googlesyndication.com doubleclick.net *.doubleclick.net ascap.com *.ascap.com boldchat.com *.boldchat.com force.com *.force.com songwize.com *.songwize.com; img-src 'self' 'unsafe-eval' 'unsafe-inline' data: trustarc.com *.trustarc.com clicktale.net *.clicktale.net google-analytics.com *.google-analytics.com google.com *.google.com facebook.com *.facebook.com ascap.com *.ascap.com boldchat.com *.boldchat.com guidestar.org *.guidestar.org ytimg.com *.ytimg.com qualtrics.com *.qualtrics.com songwize.com *.songwize.com http://*.songwize.com twimg.com *.twimg.com; media-src 'self' 'unsafe-eval' 'unsafe-inline' ascap.com *.ascap.com http://*.ascap.com; object-src 'self' 'unsafe-eval' 'unsafe-inline'; font-src 'self' 'unsafe-eval' 'unsafe-inline' data: cloudfront.net *.cloudfront.net gstatic.com *.gstatic.com; child-src 'self' blob: ; frame-ancestors 'self'; 2 connect-src 'self' https://stats.g.doubleclick.net https://*.omappapi.com heapanalytics.com pagesense-collect.zoho.eu www.google-analytics.com fonts.googleapis.com; default-src 'self' fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com *.limesurvey.org www.youtube.com frontend.pay1.de www.google.com kiwiirc.com limesurvey.org; font-src 'self' https://*.typekit.net https://tagmanager.google.com data: fonts.gstatic.com maxcdn.bootstrapcdn.com projectfiles.limesurvey.org github.com; style-src 'unsafe-inline' heapanalytics.com https://tagmanager.google.com fonts.googleapis.com 'self' maxcdn.bootstrapcdn.com projectfiles.limesurvey.org ajax.googleapis.com www.google.com; form-action 'self' https://authentication.cardinalcommerce.com https://*.six-payment-services.com https://*.securesuite.co.uk https://*.cic.fr https://*.arcot.com www.paypal.com survey.limesurvey.org; frame-ancestors 'self' *.limesurvey.org; img-src 'self' www.googletagmanager.com data: *; manifest-src 'self'; media-src 'self'; script-src 'self' https://maillist-manage.eu https://*.zoho.eu https://*.zohocdn.com https://*.limesurvey.org data: https://tagmanager.google.com https://heapanalytics.com https://*.pagesense.io https://*.omappapi.com https://*.hotjar.com https://*.heapanalytics.com https://*.cookiebot.com 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com secure.pay1.de projectfiles.limesurvey.org www.google.com www.google-analytics.com appscdn.joomla.org; frame-src https://*.hotjar.com https://*.cookiebot.com https://*.visa.com https://authentication.cardinalcommerce.com 3dsecure.icscards.nl https://*.pay1.de docs.google.com 'self' download.limesurvey.org kiwiirc.com www.youtube.com limesurvey.org secure.pay1.de; object-src 'self'; report-uri https://account.limesurvey.org/violation.php; 2 frame-ancestors 'self'; base-uri 'none'; form-action 'self'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' https:; font-src https: data:; media-src https:; style-src 'unsafe-inline' https:; worker-src https:; img-src https: data: 2 default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https://* data: ; frame-src https://* about: javascript: ; report-uri /vdc-csp-report 2 frame-ancestors https://ww2.coolmathgames.com https://www.coolmathgames.com http://www.coolmath-games.com https://www.coolmath-games.com 2 default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src *; font-src *; media-src *; frame-src *; connect-src *; frame-ancestors 'none'; worker-src 'self' blob:; child-src 'self' blob:; 2 default-src 'self'; media-src 'self' *.youtube.com *.youtube-nocookie.com *.vimeo.com *.vimeocdn.com; form-action 'self' *.cision.com; base-uri 'self'; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: google-analytics.com 2.gravatar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; font-src 'self' data:; frame-src 'self' *.youtube.com *.youtube-nocookie.com *.vimeo.com *.vimeocdn.com 'unsafe-inline' https: s7.addthis.com; connect-src 'self' 'unsafe-inline' https: http: s7.addthis.com; frame-ancestors 'self'; manifest-src 'self'; 2 default-src 'self' data: https://internalgogdemo.terracycle.com https://fonts.gstatic.com/ https://use.typekit.net/ https://d3c39yxulteaif.cloudfront.net/; script-src 'self' 'unsafe-inline' data: https://internalgogdemo.terracycle.com https://analytics.twitter.com/ https://apis.google.com/_/scs/apps-static/ https://apis.google.com/js/platform.js https://apis.google.com/se/0/wm/1/ https://assets.pinterest.com/js/pinit.js https://assets.pinterest.com/js/pinit_main.js https://assets.pinterest.com/js/pinmarklet.js https://b-code.liadm.com/a-00v3.min.js https://cdn.leadmanagerfx.com/js/mcfx/2794 https://cdn.leadmanagerfx.com/phone/js/2794 https://connect.facebook.net/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://js.hs-scripts.com/ https://log.pinterest.com/ https://maps.googleapis.com/ https://platform.twitter.com/js/ https://platform.twitter.com/widgets.js https://script.hotjar.com/ https://secure.wufoo.com/scripts/embed/form.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://ssl.google-analytics.com/ga.js https://static.ads-twitter.com/uwt.js https://static.hotjar.com/ https://use.typekit.net/ https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.googleadservices.com/pagead/conversion.js https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://www.redditstatic.com/ads/pixel.js https://www.wufoo.com/scripts/embed/form.js https://d3c39yxulteaif.cloudfront.net/ https://s3.amazonaws.com/static-terracycle-com/misc/ckeditor/ 'unsafe-eval' https://s3.amazonaws.com/assets/errors*; style-src 'self' 'unsafe-inline' https://syndication.twitter.com/ https://d3c39yxulteaif.cloudfront.net/ https://s3.amazonaws.com/static-terracycle-com/misc/ckeditor/ https://fonts.googleapis.com/css https://s3.amazonaws.com/assets/errors*; frame-src 'self' https://staticxx.facebook.com/ https://web.facebook.com/ https://www.facebook.com/ https://accounts.google.com/ https://apis.google.com/ https://www.google.com/recaptcha/ https://editorium.herokuapp.com/ https://vars.hotjar.com/ https://i.liadm.com/ https://assets.pinterest.com/ https://platform.twitter.com/ https://syndication.twitter.com/ https://terracycle.wufoo.com/ https://www.youtube.com/ https://www.recaptcha.net/; img-src 'self' https://internalgogdemo.terracycle.com https://tc-global-prod.s3.amazonaws.com/ https://s3.amazonaws.com/tc-global-prod/ https://s3.amazonaws.com/gog-prod/ https://alb.reddit.com/ https://assets.pinterest.com/images/pidgets/ https://c.liadm.com/ https://log.pinterest.com/ https://maps.googleapis.com/maps/vt https://maps.gstatic.com/mapfiles/ https://p.typekit.net/ https://px.ads.linkedin.com/ https://rp.liadm.com/ https://stats.g.doubleclick.net/r/ https://syndication.twitter.com/i/ https://t.co/ https://www.facebook.com/tr/ https://www.google-analytics.com https://www.googletagmanager.com www.googletagmanager.com https://tc-shop-stage.s3.amazonaws.com/ https://tc-shop-prod.s3.amazonaws.com/ https://d3c39yxulteaif.cloudfront.net/ https://s3.amazonaws.com/static-terracycle-com/misc/ckeditor/ data: https://s3.amazonaws.com/assets/errors/logo-white* https://www.google.at/ https://www.google.be/ https://www.google.br/ https://www.google.ca/ https://www.google.ch/ https://www.google.co.uk/ https://www.google.com/ https://www.google.de/ https://www.google.dk/ https://www.google.es/ https://www.google.fr/ https://www.google.hu/ https://www.google.ie/ https://www.google.jp/ https://www.google.kr/ https://www.google.mx/ https://www.google.nl/ https://www.google.nz/ https://www.google.se/ https://shop.terracycle.com/ filesystem:; connect-src 'self' https://internalgogdemo.terracycle.com https://ipapi.co/json https://maps.googleapis.com/maps/api/geocode/json https://in.hotjar.com/api/v1/client/sites/600250/ https://in.hotjar.com/api/v2/client/sites/600250/ https://vc.hotjar.io/views/600250 https://t.leadmanagerfx.com/visit/add/2794 https://us-east1-idyllic-vehicle-159522.cloudfunctions.net/mcfx-visitor-information https://www.google-analytics.com https://rp.liadm.com/; plugin-types application/pdf application/xml 2 frame-ancestors 'self' https://resources.snyk.io 2 default-src 'self' citizenlab.ca www.citizenlab.ca citizenlab.org www.citizenlab.org; font-src 'self' data: ; img-src * data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com; frame-src 'self' www.youtube-nocookie.com www.youtube.com ; style-src 'self' 'unsafe-inline'; connect-src 'self' www.google-analytics.com; 2 default-src * 'self' 'unsafe-inline' 'unsafe-eval' data: blob: filesystem:; frame-ancestors 'self'; object-src 'none'; 2 default-src https: wss: 'unsafe-eval' 'unsafe-inline'; object-src 'self' blob:; img-src 'self' data: https:; font-src 'self' data: https:; frame-ancestors 'self' https://*.hubspot.com https://info.atlascopco.us https://info.atlascopcoupdates.com http://*.scene7.com https://atlascopco-preview.adobecqms.net 2 default-src * 'unsafe-inline' 'unsafe-eval' data: blob: ; frame-ancestors 'self' *.cienradios.com www.clarin.com *.devcr.com.ar *.cienradios-pre.com.ar prepro.int.clarin.com *.prepro.int.clarin.com viapais.com.ar *.viapais.com.ar alpha.viapais.com.ar *.alpha.viapais.com.ar beta.viapais.com.ar *.beta.viapais.com.ar prepro.viapais.com.ar *.prepro.viapais.com.ar cdn.ampproject.org *.cdn.ampproject.org google.com *.google.com google.com.ar *.google.com.ar; 2 frame-ancestors 'self' *.crestron.com; 2 default-src: 'self' 'googleads.g.doubleclick.net' 'fonts.googleapi.com' 'img.youtube.com' 'i.ytimg.com' 'latencytimer.azurewebsites.net''s.ytimg.com' 'youtube.com' 'googleads.g.doubleclick.net' 'yt3.ggpht.com' 'fonts.gstatic.com'; script-src: 'self' 'www.googletagmanager.com' 'www.google-analytics.com' 'player.wowza.com' 'youtube.com' 'static.doubleclick.net' 'googleads.g.doubleclick.net'; style-src: 'self' 'youtube.com' 'googleads.g.doubleclick.net' 2 default-src 'self' *.idrive.com *.idrivesync.com https://graph.facebook.com blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com https://static.idriveonlinebackup.com https://*.facebook.com https://bmrsignal.idrivelite.com https://*.google.com https://apis.google.com https://accounts.google.com https://www.google-analytics.com https://*.criteo.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.criteo.net https://cdn.livechatinc.com https://gum.criteo.com https://sslwidget.criteo.com https://*.livechatinc.com https://ajax.googleapis.com https://html5shim.googlecode.com https://s.adroll.com https://a.adroll.com https://d.adroll.com https://www.google.com https://www.idrivedownloads.com http://ssl.p.jwpcdn.com https://www.youtube.com https://px.spiceworks.com https://connect.facebook.net https://5358683.fls.doubleclick.net https://platform.twitter.com https://www.googleadservices.com https://www.gstatic.com https://ssl.google-analytics.com https://code.jquery.com https://js.stripe.com https://www.googletagmanager.com https://api.maxaccess.io; img-src https://* 'self' data: blob: www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com;style-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com https://static.idriveonlinebackup.com https://fonts.googleapis.com https://ssl.google-analytics.com https://code.jquery.com; font-src https://* https://fonts.gstatic.com data: ; object-src 'self' https://secure.livechatinc.com; frame-src https://* 'self' data: blob:; media-src https://* blob:; worker-src https://* blob:; connect-src wss: https://* blob:; 2 default-src https://tpc.googlesyndication.com https://*.safeframe.googlesyndication.com; style-src 'self' 'unsafe-inline' https://cdn.flowplayer.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: https://www.google.com https://www.google.pl https://www.google-analytics.com https://*.g.doubleclick.net https://*.googlesyndication.com https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.flowplayer.com https://cdn.ampproject.org https://tpc.googlesyndication.com http://ckeditor.iframe.ly https://cdnjs.cloudflare.com https://www.google.com https://www.google-analytics.com https://www.googletagservices.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://adservice.google.com https://adservice.google.pl https://securepubads.g.doubleclick.net https://www.gstatic.com https://*.hit.gemius.pl https://connect.facebook.net https://platform.twitter.com; font-src 'self' data: https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com; connect-src 'self' https://play.lwcdn.com https://stats.g.doubleclick.net https://securepubads.g.doubleclick.net https://adservice.google.com https://*.googlesyndication.com https://www.google-analytics.com https://csi.gstatic.com https://www.google-analytics.com; object-src 'self'; frame-src 'self' https://*.dacast.com https://*.vimeo.com https://*.europa.eu https://*.dcs.redcdn.pl https://ljsp.lwcdn.com https://igrafika.pap.pl https://*.googlesyndication.com https://www.youtube.com https://www.google.com https://infostrefa.tv https://*.hit.gemius.pl https://maps.google.com https://www.facebook.com https://platform.twitter.com; base-uri 'self'; 2 frame-ancestors 'self' https://*.ecplaza.net; 2 frame-src atlas.geomer-maps.de app.powerbi.com *.deutschland-machts-effizient.de *.youtube-nocookie.com piwik.itzbund.de *.youtube.com 2 frame-ancestors http://*.visitsingapore.com/ http://*.visitsingapore.com.cn/ https://*.visitsingapore.com/ https://*.visitsingapore.com.cn/ 'self'; 2 frame-ancestors 'self' primexbt.com primexbt.ch primexbt-promo.com primexbt-start.com sign-up.primexbt.com prod-express.primexbt.com; 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.addtoany.com https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com https://ssl.google-analytics.com https://www.youtube.com https://www.youtube-nocookie.com https://s.ytimg.com https://w.soundcloud.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.vimeo.com https://vimeo.com/api/oembed.json https://ajax.cloudflare.com https://player.vimeo.com https://static.oktopost.com/oktrk.js https://okt.to https://crmemails.ogilvy.com https://secure.link5view.com https://tag.demandbase.com; style-src 'self' 'unsafe-inline' https://static.addtoany.com https://tagmanager.google.com https://fonts.googleapis.com; img-src 'self' data: https://static.addtoany.com https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://okt.to https://stats.g.doubleclick.net https://www.google.com https://www.google.co.in https://secure.link5view.com https://crmemails.ogilvy.com https://match.prod.bidr.io https://segments.company-target.com; frame-src 'self' https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://w.soundcloud.com https://static.addtoany.com; frame-ancestors 'self'; font-src 'self' https://fonts.gstatic.com https://tagmanager.google.com data:; connect-src 'self' https://www.google-analytics.com https://bam.nr-data.net https://api.company-target.com https://stats.g.doubleclick.net; report-uri /report-csp-violation 2 default-src 'none'; img-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com https://images.ctfassets.net https://downloads.ctfassets.net https://www.gstatic.com https://ssl.gstatic.com https://platform.twitter.com https://obs.twimg.com https://syndication.twitter.com https://pbs.twimg.com https://ton.twimg.com data: https://cdn.cookielaw.org https://i.creativecommons.org https://licensebuttons.net; media-src 'self' https://videos.ctfassets.net https://www.youtube.com https://player.vimeo.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://cookies.onetrust.mgr.consensu.org https://www.instagram.com https://platform.twitter.com https://syndication.twitter.com https://privacyportal-eu.onetrust.com; connect-src 'self' https://cdn.contentful.com https://preview.contentful.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://sentry.io https://cdn.cookielaw.org https://api.twitter.com; script-src 'self' https://www.google-analytics.com 'unsafe-inline' https://www.googletagmanager.com https://tagmanager.google.com https://platform.twitter.com https://cdn.syndication.twimg.com data: https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://fonts.gstatic.com https://github.com data:; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com/ https://platform.twitter.com https://ton.twimg.com; manifest-src 'self'; worker-src 'self'; child-src 'self'; upgrade-insecure-requests 2 report-uri /report-csp;base-uri 'self';child-src number26://* *.n26.com n26.com pixel.mathtag.com n26.go2cloud.org tr.snapchat.com *.youtube-nocookie.com youtube-nocookie.com boards.greenhouse.io;connect-src 'self' https://api.tech26.de https://api.tech26.us * fonts.googleapis.com https://*.logs.datadoghq.eu;font-src 'self' data:;img-src https://api.tech26.de https://api.tech26.us 'self' data: images.ctfassets.net images.contentful.com * *.greenhouse.io;media-src videos.contentful.com videos.ctfassets.net;object-src 'none';style-src 'unsafe-inline' fonts.googleapis.com tagmanager.google.com;script-src n26-trusted.n26.com 'self' polyfill.io cdn.number26.de 'unsafe-inline' * connect.facebook.net *.youtube-nocookie.com s.ytimg.com youtube-nocookie.com youtube.com boards.greenhouse.io datadoghq.eu datadoghq-browser-agent.com;worker-src 'self';default-src *;frame-ancestors 'self' *.n26.com 2 default-src 'self' *.uci.ch *.uci.org *.googletagmanager.com *.google-analytics.com https://webocsitok.ovpobs.tv/; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.twitter.com *.cloudflare.com *.googletagmanager.com cdn.cookie-script.com https://webocsitok.ovpobs.tv/; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com *.twitter.com *.cloudflare.com *.googletagmanager.com *.jquery.com https://webocsitok.ovpobs.tv/; font-src 'self' *.uci.ch fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://webocsitok.ovpobs.tv/; img-src 'self' *.uci.ch *.gstatic.com *.googleapis.com *.google-analytics.com platform.tumblr.com connect.facebook.net web.facebook.com www.facebook.com https://delicious.com www.redditstatic.com www.linkedin.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://dec.azureedge.net https://*.dec.sitefinity.com pbs.twimg.com platform.twitter.com/css/ *.twimg.com www.google.ch www.google.com data: blob: *.eloqua.com track.hubspot.com https://scontent-zrh1-1.cdninstagram.com https://10566634.fls.doubleclick.net/ https://webocsitok.ovpobs.tv/; media-src 'self' data: blob: https://video-zrh1-1.cdninstagram.com https://webocsitok.ovpobs.tv/; frame-src 'self' *.uci.ch *.uci.org *.twitter.com *.cloudflare.com *.googletagmanager.com *.tissottiming.com *.youtube.com *.chronorace.be chronorace.blob.core.windows.net *.facebook.com olympics.com www.olympicchannel.com www.redbull.com ad.doubleclick.net https://10566634.fls.doubleclick.net/ https://webocsitok.ovpobs.tv/; frame-ancestors 'self' *.uci.ch *.uci.org; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://webocsitok.ovpobs.tv/ https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.uci.ch *.uci.org *.twitter.com *.cloudflare.com *.googletagmanager.com; connect-src 'self' accounts.google.com https://*.dec.sitefinity.com *.mktoresp.com *.uci.ch *.uci.org *.twitter.com *.cloudflare.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net https://webocsitok.ovpobs.tv/; 2 default-src 'self' data: blob: *.ocbc.com; img-src 'self' data: blob: *;style-src 'self' 'unsafe-inline' *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ocbc.com *.ocbc.com.my *.sc.omtrdc.net *.adobedtm.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.doubleclick.net *.google.com *.youtube.com *.facebook.net *.facebook.com *.pages07.net *.greateasterngeneral.com dpm.demdex.net *.everestjs.net *.mookie1.com *.sqreemtech.com *.adsrvr.org *.qualtrics.com *.ytimg.com *.licdn.com *.outbrain.com *.oraclecloud.com;object-src 'self' *.ocbc.com *.ocbc.com.my;font-src 'self' *;frame-src 'self' https://5376815.fls.doubleclick.net https://9036546.fls.doubleclick.net *.youtube.com https://tags.tiqcdn.com https://ocbc.demdex.net https://bid.g.doubleclick.net *.crwdcntrl.net *.sqreemtech.com *.adsrvr.org;connect-src 'self' *.ocbc.com *.google-analytics.com *.doubleclick.net dpm.demdex.net *.qualtrics.com *.oraclecloud.com wss://*.oci.oraclecloud.com; 2 default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; font-src https: 'self' data:; img-src https: 'self' data:; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.olark.com js.stripe.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 2 default-src 'self'; media-src 'self'; img-src 'self' https://www.google.com https://*.doubleclick.net https://www.google-analytics.com https://bat.bing.com https://px.ads.linkedin.com https://www.facebook.com https://tr.snapchat.com https://p.adsymptotic.com https://i.ytimg.com https://maps.gstatic.com https://maps.googleapis.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://sc-static.net https://snap.licdn.com https://connect.facebook.net https://bat.bing.com https://www.youtube.com https://maps.googleapis.com https://*.salesforceliveagent.com https://www.googleadservices.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' 'unsafe-inline' https://www.youtube.com https://4136874.fls.doubleclick.net https://tr.snapchat.com https://fonts.gstatic.com; connect-src 'self' 'unsafe-inline' https://www.facebook.com https://bat.bing.com https://www.google-analytics.com 2 default-src 'self' 'unsafe-inline' *.bzga.de *.creativecommons.org https://www.youtube-nocookie.com data:; frame-src 'self' https://www.bzga.de/ https://piwik.bzga.de/ https://www.youtube-nocookie.com; media-src 'self' *.myracloud.com 2 default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' snap.licdn.com *.cassiecloud.com *.raxcdn.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://flockler.embed.codes/62wAnK *.gstatic.com *.flockler.com *.pinterest.com *.addtoany.com *.paypal.com *.ytimg.com *.youtube.com www.googleadservices.com *.googletagmanager.com *.google.com *.gstatic.com www.snta0034.com *.rnib.org.uk *.paypalobjects.com collector-1065.tvsquared.com app.vwo.com js-agent.newrelic.com bam-cell.nr-data.net bam.nr-data.net maps.googleapis.com connect.facebook.net dev.visualwebsiteoptimizer.com *.google-analytics.com ajax.googleapis.com *.hotjar.com *.hotjar.io *.bing.com *.silktide.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com *.rnib.org.uk https://tagmanager.google.com https://fonts.googleapis.com app.vwo.com fonts.googleapis.com *.flockler.com; img-src 'self' data: content.cookieconfidence.com *.linkedin.com *.cloudfyprod.com *.rackcdn.com *.cdninstagram.com *.google.co.uk *.google.com *.instagram.com *.pinterest.com *.rnib.org.uk *.paypalobjects.com https://ssl.gstatic.com https://www.gstatic.com *.paypal.com collector-1065.tvsquared.com maps.googleapis.com *.googletagmanager.com maps.gstatic.com csi.gstatic.com www.facebook.com www.google-analytics.com stats.g.doubleclick.net dev.visualwebsiteoptimizer.com *.hotjar.com *.hotjar.io *.bing.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.uk; font-src 'self' data: cdnjs.cloudflare.com app.vwo.com *.rnib.org.uk *.rnib.panlogic.co.uk fonts.gstatic.com *.hotjar.com *.hotjar.io; frame-src 'self' *.cassiecloud.com *.google.com *.pinterest.com *.addtoany.com google.com *.google.com *.paypal.com app.vwo.com youtube.com *.youtube.com *.hotjar.com *.hotjar.io; upgrade-insecure-requests; report-uri https://report-uri.io/report/37d691f11ddee70a60a651059fdfc1dc; connect-src 'self' *.cassiecloud.com stats.g.doubleclick.net www.google-analytics.com *.paypal.com dev.visualwebsiteoptimizer.com bam-cell.nr-data.net bam.nr-data.net *.hotjar.com *.hotjar.io wss://*.hotjar.com *.silktide.com 2 frame-ancestors 'self' https://*.clio.com https://cliocloudconference.com https://events1.social27.com https://kba.freestonelms.com 2 'self' 2 default-src 'self' https://s.pinimg.com youtube.com www.youtube.com https://youtube.com https://www.youtube.com https://ajax.googleapis.com maps.googleapis.com csi.gstatic.com www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com *.g.doubleclick.net https://*.g.doubleclick.net www.bic-media.com http://w.soundcloud.com https://*.soundcloud.com http://platform.instagram.com https://platform.instagram.com https://randomhouse.scnem.com https://cloudbridge.eu http://cloudbridge.eu https://sharingbox.rhspecial.de https://*.google.com https://www.youtube-nocookie.com https://s7.addthis.com https://www.facebook.com/ https://vars.hotjar.com/ https://cdn.podigee.com/ https://open.spotify.com https://platform.twitter.com https://syndication.twitter.com https://*.instagram.com https://*.pinterest.com; connect-src 'self' http://*.issuu.com https://*.issuu.com http://*.digitalstores.net https://*.digitalstores.net https://www.facebook.com https://*.randomhouse.de https://www.google.com https://www.google.de https://www.google.at https://www.google.ch https://www.google-analytics.com https://*.g.doubleclick.net http://*.playbuzz.com https://*.playbuzz.com https://*.addthis.com http://*.addthis.com http://www.google-analytics.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://ct.pinterest.com https://book-base.de https://*.tiktok.com; font-src 'self' fonts.gstatic.com https://use.typekit.net/ https://cdn.podlove.org/ http://script.hotjar.com https://script.hotjar.com https://*.podigee.com; frame-ancestors 'self' https://open.spotify.com http://rhdemobilepreview:28080/ http://rhdemobilepreview:28081/ ; frame-src 'self' https://accounts.penguinrandomhouse.de/ https://audionow.de/ https://open.spotify.com https://www.youtube-nocookie.com/ https://vars.hotjar.com/ https://www.facebook.com/ https://s7.addthis.com/ https://s.pinimg.com youtube.com www.youtube.com https://youtube.com https://www.youtube.com https://ajax.googleapis.com maps.googleapis.com csi.gstatic.com www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com *.g.doubleclick.net https://*.g.doubleclick.net www.bic-media.com http://w.soundcloud.com https://*.soundcloud.com http://platform.instagram.com https://platform.instagram.com https://randomhouse.scnem.com https://penguinrandomhouse.scnem2.com https://cloudbridge.eu http://cloudbridge.eu https://sharingbox.rhspecial.de https://*.google.com https://www.youtube-nocookie.com https://s7.addthis.com https://cdn.podigee.com/ https://*.twitter.com https://*.instagram.com https://*.pinterest.com https://*.audionow.de https://book-base.de; img-src 'self' data: www.google-analytics.com csi.gstatic.com https://*.outbrain.com/ https://image.isu.pub www.googletagmanager.com *.g.doubleclick.net https://syndication.twitter.com https://o.twimg.com http://platform.twitter.com https://*.twimg.com http://randomhouse.scnem.com https://penguinrandomhouse.scnem2.com https://randomhouse.scnem.com https://www.randomhouse.de https://pixel.quantserve.com https://*.google.com https://www.google.at https://www.google.ch https://www.google.dk https://www.facebook.com https://www.googleadservices.com https://www.google.de https://*.g.doubleclick.net https://*.playbuzz.com http://*.playbuzz.com https://www.google-analytics.com https://www.addthis.com https://*.pinterest.com https://cx.atdmt.com https://cs.lkqd.net ttps://maps.gstatic.com https://maps.googleapis.com https://*.hotjar.com http://*.hotjar.com https://*.smartadserver.com https://www.penguinrandomhouse.de https://book-base.de; manifest-src 'self' data: www.google-analytics.com csi.gstatic.com https://*.outbrain.com/ https://image.isu.pub www.googletagmanager.com *.g.doubleclick.net https://syndication.twitter.com https://o.twimg.com http://platform.twitter.com https://*.twimg.com http://randomhouse.scnem.com https://penguinrandomhouse.scnem2.com https://randomhouse.scnem.com https://www.randomhouse.de https://pixel.quantserve.com https://*.google.com https://www.google.at https://www.google.ch https://www.google.dk https://www.facebook.com https://www.googleadservices.com https://www.google.de https://*.g.doubleclick.net https://*.playbuzz.com http://*.playbuzz.com https://www.google-analytics.com https://www.addthis.com https://*.pinterest.com https://cx.atdmt.com https://cs.lkqd.net ttps://maps.gstatic.com https://maps.googleapis.com https://*.hotjar.com http://*.hotjar.com https://*.smartadserver.com https://www.penguinrandomhouse.de https://book-base.de; media-src 'self' 10.4.91.62 www.penguinrandomhouse.de https://book-base.de; object-src 'self' 10.4.91.62 www.penguinrandomhouse.de; report-to /ContentSecurityPolicyReporter; script-src 'self' https://*.outbrain.com/ https://s.pinimg.com rhspecials.penguinrandomhouse.de www.penguinrandomhouse.de 'unsafe-eval' 'unsafe-inline' http://e.issuu.com/embed.js https://e.issuu.com/embed.js https://*.googleapis.com *.googleapis.com csi.gstatic.com www.google-analytics.com https://www.google-analytics.com http://www.googletagmanager.com https://www.googletagmanager.com https://tagmanager.google.com http://platform.instagram.com https://platform.instagram.com http://platform.twitter.com https://platform.twitter.com https://cdn.syndication.twimg.com https://randomhouse.scnem.com http://randomhouse.scnem.com https://penguinrandomhouse.scnem2.com https://sharingbox.rhspecial.de https://secure.quantserve.com https://rules.quantcount.com https://*.google.com https://www.google.de https://www.google.at https://www.google.ch https://www.gstatic.com https://connect.facebook.net https://cdn.adrtx.net http://vgrh.stage.digitalstores.net https://stage.digitalstores.net https://www.googleadservices.com https://layover.penguinrandomhouse.de https://layover.randomhouse.de https://www.bic-media.com https://*.g.doubleclick.net https://www.facebook.com https://*.playbuzz.com http://*.playbuzz.com https://cdnjs.cloudflare.com https://s7.addthis.com http://s7.addthis.com http://m.addthisedge.com https://v1.addthisedge.com https://v1.addthis.com http://m.addthis.com youtube.com www.youtube.com https://youtube.com https://www.youtube.com http://tagmanager.google.com https://s.ytimg.com https://*.podigee.com https://randomhouse.digitalstores.net/pbs.2.js https://cdn.podlove.org https://*.hotjar.com https://www.instagram.com https://*.pinterest.com https://*.tiktok.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com http://platform.twitter.com https://*.twimg.com https://res-format-story.playbuzz.com https://optimize.google.com https://*.typekit.net https://cdn.podlove.org/ https://*.podigee.com; worker-src * 2 upgrade-insecure-requests; frame-ancestors 'none'; 2 default-src 'self'; script-src https://www.dropbox.com https://api.trello.com https://code.jquery.com 'self' https://viewer.diagrams.net https://storage.googleapis.com https://apis.google.com https://*.pusher.com 'sha256-5DtSB5mj34lxcEf+HFWbBLEF49xxJaKnWGDWa/utwQA=' 'sha256-8HtpzsH4zj5+RKfTWMxPmWJKBu0OYbn+WuPrLbVky+g=' 'sha256-vS/MxlVD7nbY7AnV+0t1Ap338uF7vrcs7y23KjERhKc=' ; connect-src https://*.dropboxapi.com https://api.trello.com 'self' https://*.draw.io https://*.diagrams.net https://*.googleapis.com wss://*.pusher.com https://*.pusher.com https://api.github.com https://raw.githubusercontent.com https://gitlab.com https://graph.microsoft.com https://*.sharepoint.com https://*.1drv.com https://dl.dropboxusercontent.com https://*.google.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src * data: blob:; media-src * data:; font-src * about:; frame-src 'self' https://viewer.diagrams.net https://www.draw.io https://*.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; object-src 'none'; frame-ancestors 'self' https://teams.microsoft.com; 2 default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; font-src 'self' data:; report-uri https://o3836.ingest.sentry.io/api/48064/security/?sentry_key=dde242bed3db455a97ef029b6f999e64 2 frame-ancestors 'self' https://*.designcrowd.com; 2 frame-ancestors https://*.ionos.es https://ionos.es; 2 frame-ancestors https://metropcs.mobi https://www.metropcs.mobi https://*.metrobyt-mobile.com https://metropcs.mobileposse.com/ https://*.metropcs.com/; 2 style-src https: 'unsafe-inline'; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; img-src blob: https: data:; frame-src https:; upgrade-insecure-requests; 2 report-uri /admin/config/system/seckit/csp-report 2 default-src 'self'; script-src cdn.report-uri.com api.stripe.com js.stripe.com static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' cdn.report-uri.com; img-src 'self' data: cdn.report-uri.com; font-src 'self' cdn.report-uri.com; connect-src 'self' api.stripe.com; frame-ancestors *.cloudflareworkers.com *.cloudflare.com; form-action 'self' hooks.stripe.com; frame-src js.stripe.com; child-src js.stripe.com; upgrade-insecure-requests; report-uri https://scotthelme.report-uri.com/r/d/csp/enforce; report-to default 2 default-src 'self'; connect-src 'self' https://col.site24x7rum.com https://app.litmusworld.com https://*.tatasky.com https://*.g.doubleclick.net https://logs.juspay.in https://payments.juspay.in https://*.taboola.com/ https://www.google-analytics.com/ https://anuvadak-wms.reverieinc.com https://avtstagecdn.blob.core.windows.net https://api.ipify.org https://s.yimg.com https://e3zogked5l.execute-api.us-west-2.amazonaws.com https://app.easyling.com/ https://crest-dot-skawa-easyling.appspot.com/ ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sf16-muse-va.ibytedtos.com https://s0.ipstatp.com https://static.bytedance.com https://a.quora.com https://bat.bing.com https://www.googletagservices.com https://maps.googleapis.com https://code.jquery.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.sokrati.com https://ad.doubleclick.net https://www.googleadservices.com https://static.site24x7rum.com https://tagmanager.google.com https://ssl.gstatic.com https://www.tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com/ https://*.google.co.in/ https://www.gstatic.com/recaptcha/ https://*.twitter.com/ https://*.twimg.com/ https://www.youtube.com/ https://s.ytimg.com/ https://*.googlesyndication.com/ https://*.taboola.com/ https://payments.juspay.in/ https://static.ads-twitter.com/ https://cdn.invitereferrals.com/ https://www.googleoptimize.com/ https://optimize.google.com https://www.ref-r.com/ https://anuvadak-wms.reverieinc.com https://avtstagecdn.blob.core.windows.net https://api.ipify.org https://aax-eu.amazon-adsystem.com https://s.yimg.com https://sp.analytics.yahoo.com/ https://script.mfilterit.net/ https://app.easyling.com/ https://crest-dot-skawa-easyling.appspot.com/ https://d1r1tbvxnfd82x.cloudfront.net/ https://sokrati.g2afse.com/ ; img-src 'self' https://business-sg.topbuzz.com https://business.topbuzz.com https://q.quora.com https://www.ref-r.com https://bat.bing.com https://maps.gstatic.com https://maps.googleapis.com https://*.facebook.com https://*.sokrati.com https://www.google.com https://www.google.co.in https://*.fls.doubleclick.net https://*.linkedin.com https://www.googleadservices.com https://*.g.doubleclick.net https://*.fls.doubleclick.net https://tagmanager.google.com https://www.google-analytics.com https://ssl.gstatic.com https://*.twitter.com/ https://*.twimg.com/ https://ad.doubleclick.net/ https://*.google.com/ https://*.google.co.in/ https://*.tatasky.com/ https://*.taboola.com/ https://secure.adnxs.com/ https://optimize.google.com https://www.gstatic.com/ https://aax-eu.amazon-adsystem.com https://app.easyling.com/ https://crest-dot-skawa-easyling.appspot.com/ https://*.googleusercontent.com/ https://*.ggpht.com/ https://sp.analytics.yahoo.com/ https://sokrati.g2afse.com/ data: ; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://ssl.gstatic.com https://*.twitter.com/ https://*.twimg.com/ https://optimize.google.com https://anuvadak-wms.reverieinc.com https://avtstagecdn.blob.core.windows.net https://cdn.invitereferrals.com/ ; font-src 'self' https://tagmanager.google.com https://fonts.gstatic.com https://ssl.gstatic.com https://optimize.google.com data: ; frame-src 'self' bytedance: https://*.g.doubleclick.net https://*.fls.doubleclick.net https://app.litmusworld.com https://www.youtube.com https://www.google.com/ https://help.tatasky.com https://www.facebook.com/ https://*.twitter.com/ https://*.twimg.com/ https://www.ref-r.com/ https://player.vimeo.com/ https://payments.juspay.in/ https://optimize.google.com https://youtu.be/ https://docs.google.com/ https://d1r1tbvxnfd82x.cloudfront.net/ ; object-src 'self' https://docs.google.com/ ; frame-ancestors https://*.tatasky.com ; 2 frame-ancestors https://*.ionos.mx https://ionos.mx; 2 frame-ancestors 'self'; default-src 'none'; script-src *.liveagent.com www.liveagent.com liveagent.com www.liveagent.de www.liveagent.sk www.liveagent.es www.liveagent.fr www.liveagent.com.br www.liveagent.hu www.live-agent.cn www.live-agent.nl www.live-agent.it www.live-agent.pl www.live-agent.ru www.live-agent.cz www.liveagent.ae www.liveagent.bg www.liveagent.hr www.liveagent.dk www.liveagent.ee www.liveagent.fi www.liveagent.gr www.liveagent.jp www.liveagent.lt www.liveagent.lv www.liveagent.no www.liveagent.ph www.liveagent.ro www.liveagent.se www.liveagent.si www.liveagent.vn www.google.com www.gstatic.com www.googletagmanager.com analytics.qualityunit.com www.googleadservices.com connect.facebook.net bat.bing.com pap.qualityunit.com support.qualityunit.com www.google-analytics.com optimize.google.com www.googleoptimize.com googleads.g.doubleclick.net ct.capterra.com s3.vooplayer.com platform.twitter.com www.instagram.com cdn.syndication.twimg.com growsurf.com app.growsurf.com www.youtube.com maps.googleapis.com cdnjs.cloudflare.com fast.wistia.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.liveagent.com www.liveagent.com liveagent.com www.liveagent.de www.liveagent.sk www.liveagent.es www.liveagent.fr www.liveagent.com.br www.liveagent.hu www.live-agent.cn www.live-agent.nl www.live-agent.it www.live-agent.pl www.live-agent.ru www.live-agent.cz www.liveagent.ae www.liveagent.bg www.liveagent.hr www.liveagent.dk www.liveagent.ee www.liveagent.fi www.liveagent.gr www.liveagent.jp www.liveagent.lt www.liveagent.lv www.liveagent.no www.liveagent.ph www.liveagent.ro www.liveagent.se www.liveagent.si www.liveagent.vn fonts.googleapis.com optimize.google.com platform.twitter.com use.typekit.net p.typekit.net 'self' 'unsafe-inline'; font-src *.liveagent.com www.liveagent.com liveagent.com www.liveagent.de www.liveagent.sk www.liveagent.es www.liveagent.fr www.liveagent.com.br www.liveagent.hu www.live-agent.cn www.live-agent.nl www.live-agent.it www.live-agent.pl www.live-agent.ru www.live-agent.cz www.liveagent.ae www.liveagent.bg www.liveagent.hr www.liveagent.dk www.liveagent.ee www.liveagent.fi www.liveagent.gr www.liveagent.jp www.liveagent.lt www.liveagent.lv www.liveagent.no www.liveagent.ph www.liveagent.ro www.liveagent.se www.liveagent.si www.liveagent.vn fonts.gstatic.com use.typekit.net 'self' data:; img-src img.youtube.com *.liveagent.com www.liveagent.com liveagent.com www.liveagent.de www.liveagent.sk www.liveagent.es www.liveagent.fr www.liveagent.com.br www.liveagent.hu www.live-agent.cn www.live-agent.nl www.live-agent.it www.live-agent.pl www.live-agent.ru www.live-agent.cz www.liveagent.ae www.liveagent.bg www.liveagent.hr www.liveagent.dk www.liveagent.ee www.liveagent.fi www.liveagent.gr www.liveagent.jp www.liveagent.lt www.liveagent.lv www.liveagent.no www.liveagent.ph www.liveagent.ro www.liveagent.se www.liveagent.si www.liveagent.vn analytics.qualityunit.com support.qualityunit.com www.facebook.com bat.bing.com www.google-analytics.com www.google.com www.gstatic.com stats.g.doubleclick.net www.googleadservices.com www.quora.com px.ads.linkedin.com googleads.g.doubleclick.net www.linkedin.com *.gravatar.com i.ytimg.com www.googletagmanager.com *.twitter.com *.twimg.com s.w.org ps.w.org www.google.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat 'self' data: blob:; media-src *.liveagent.com www.liveagent.com liveagent.com www.liveagent.de www.liveagent.sk www.liveagent.es www.liveagent.fr www.liveagent.com.br www.liveagent.hu www.live-agent.cn www.live-agent.nl www.live-agent.it www.live-agent.pl www.live-agent.ru www.live-agent.cz www.liveagent.ae www.liveagent.bg www.liveagent.hr www.liveagent.dk www.liveagent.ee www.liveagent.fi www.liveagent.gr www.liveagent.jp www.liveagent.lt www.liveagent.lv www.liveagent.no www.liveagent.ph www.liveagent.ro www.liveagent.se www.liveagent.si www.liveagent.vn; connect-src *.liveagent.com www.liveagent.com liveagent.com www.liveagent.de www.liveagent.sk www.liveagent.es www.liveagent.fr www.liveagent.com.br www.liveagent.hu www.live-agent.cn www.live-agent.nl www.live-agent.it www.live-agent.pl www.live-agent.ru www.live-agent.cz www.liveagent.ae www.liveagent.bg www.liveagent.hr www.liveagent.dk www.liveagent.ee www.liveagent.fi www.liveagent.gr www.liveagent.jp www.liveagent.lt www.liveagent.lv www.liveagent.no www.liveagent.ph www.liveagent.ro www.liveagent.se www.liveagent.si www.liveagent.vn www.facebook.com www.google-analytics.com stats.g.doubleclick.net crm.qualityunit.com fonts.googleapis.com fonts.gstatic.com bat.bing.com yoast.com my.yoast.com 'self'; frame-src *.liveagent.com www.liveagent.com liveagent.com www.liveagent.de www.liveagent.sk www.liveagent.es www.liveagent.fr www.liveagent.com.br www.liveagent.hu www.live-agent.cn www.live-agent.nl www.live-agent.it www.live-agent.pl www.live-agent.ru www.live-agent.cz www.liveagent.ae www.liveagent.bg www.liveagent.hr www.liveagent.dk www.liveagent.ee www.liveagent.fi www.liveagent.gr www.liveagent.jp www.liveagent.lt www.liveagent.lv www.liveagent.no www.liveagent.ph www.liveagent.ro www.liveagent.se www.liveagent.si www.liveagent.vn www.google.com support.qualityunit.com optimize.google.com www.facebook.com player.vimeo.com www.youtube.com www.facebook.com platform.twitter.com syndication.twitter.com www.instagram.com open.spotify.com w.soundcloud.com anchor.fm giphy.com wp-rocket.me; prefetch-src *.liveagent.com www.liveagent.com liveagent.com www.liveagent.de www.liveagent.sk www.liveagent.es www.liveagent.fr www.liveagent.com.br www.liveagent.hu www.live-agent.cn www.live-agent.nl www.live-agent.it www.live-agent.pl www.live-agent.ru www.live-agent.cz www.liveagent.ae www.liveagent.bg www.liveagent.hr www.liveagent.dk www.liveagent.ee www.liveagent.fi www.liveagent.gr www.liveagent.jp www.liveagent.lt www.liveagent.lv www.liveagent.no www.liveagent.ph www.liveagent.ro www.liveagent.se www.liveagent.si www.liveagent.vn; 2 frame-ancestors 'self' *.tdworldwide.com *.techdata.com *.techdata.ca *.cstenet.com *.techdata.eu; 2 default-src 'self' data: *.xing-events.com *.xing.com *.xing-share.com *.youtube.com *.amiando.com *.googletagmanager.com *.bing.com *.ads-twitter.com *.bizographics.com *.twitter.com *.ads.linkedin.com t.co *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.bootstrapcdn.com *.gstatic.com *.googleapis.com *.googleadservices.com *.vimeo.com xing-se.jobbase.io *.xingassets.com ct.capterra.com dev.visualwebsiteoptimizer.com cdn.jsdelivr.net; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.xing-events.com *.xing.com *.xing-share.com *.youtube.com *.amiando.com *.googletagmanager.com *.bing.com *.ads-twitter.com *.bizographics.com *.twitter.com *.ads.linkedin.com t.co *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.bootstrapcdn.com *.gstatic.com *.googleapis.com *.googleadservices.com *.vimeo.com *.vimeocdn.com xing-se.jobbase.io *.xingassets.com ct.capterra.com dev.visualwebsiteoptimizer.com cdn.jsdelivr.net app.vwo.com s.ytimg.com; style-src 'self' data: 'unsafe-inline' *.xing-events.com *.xing.com *.xing-share.com *.youtube.com *.amiando.com *.googletagmanager.com *.bing.com *.ads-twitter.com *.bizographics.com *.twitter.com *.ads.linkedin.com t.co *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.bootstrapcdn.com *.gstatic.com *.googleapis.com *.googleadservices.com xing-se.jobbase.io *.xingassets.com ct.capterra.com dev.visualwebsiteoptimizer.com cdn.jsdelivr.net app.vwo.com s3.amazonaws.com; frame-src *; img-src data: https: 2 frame-ancestors 'self' https://loading.com.br https://www.spjogosdeesports.com.br https://spjogosdeesports.com.br 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: *; upgrade-insecure-requests; 2 default-src 'self' ; font-src 'self' data: https://static.smartframe.io https://fonts.gstatic.com https://js.arcgis.com https://st.getsitecontrol.com ; img-src 'self' data: blob: https://www.google-analytics.com http://www.googletagmanager.com https://static.smartframe.io https://thumbs.smartframe.io https://thumbs-cdn.smartframe.io https://syndication.twitter.com https://pbs.twimg.com https://ton.twimg.com https://platform.twitter.com https://t.co https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.uk https://js.arcgis.com https://services.arcgisonline.com https://server.arcgisonline.com https://utility.arcgis.com *.historicengland.org.uk *.historic-england.org https://img.youtube.com https://i.ytimg.com https://px.ads.linkedin.com https://www.facebook.com https://www.linkedin.com https://app.getsitecontrol.com ; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://platform.twitter.com https://ton.twimg.com https://js.arcgis.com ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://static.smartframe.io https://rum-static.pingdom.net https://www.googletagmanager.com https://www.google-analytics.com https://platform.twitter.com https://cdn.syndication.twimg.com http://connect.facebook.net http://www.instagram.com https://js.arcgis.com https://az416426.vo.msecnd.net https://e.infogram.com https://s.ytimg.com https://static.ads-twitter.com https://analytics.twitter.com https://snap.licdn.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://widgets.getsitecontrol.com https://st.getsitecontrol.com https://embed.typeform.com https://script.crazyegg.com https://heritage.candle.digital https://www.youtube.com https://utility.arcgis.com https://ajax.cloudflare.com https://static.cloudflareinsights.com https://platform.instagram.com https://www.arcgis.com https://cc.cdn.civiccomputing.com https://secure.sitemorse.com https://www.google.com ; frame-src 'self' *.youtube.com https://www.youtube-nocookie.com https://englishheritage.maps.arcgis.com https://platform.twitter.com https://syndication.twitter.com https://www.facebook.com https://web.facebook.com https://sketchfab.com https://www.instagram.com https://www.google.co.uk https://w.soundcloud.com https://heritage.candle.digital https://app.powerbi.com https://e.infogram.com https://www.google.com https://www.smartsurvey.co.uk https://my.matterport.com https://prezi.com; connect-src 'self' blob: https://www.google.com http://rum-collector-2.pingdom.net *.smartframe.io https://www.google-analytics.com https://utility.arcgis.com https://services.arcgisonline.com https://static.arcgis.com https://datahub.esriuk.com https://dc.services.visualstudio.com/v2/track https://stats.g.doubleclick.net https://tracking.crazyegg.com https://script.crazyegg.com *.historic-england.org https://apikeys.civiccomputing.com *.googlesyndication.com https://googleads.g.doubleclick.net; 2 upgrade-insecure-requests; report-uri https://o144486.ingest.sentry.io/api/5543380/security/?sentry_key=e66dfe54be8e47219dd8103b4deb2f1a&sentry_environment=policy_reports 2 default-src 'self'; img-src * data:; media-src * blob:; style-src * 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; font-src * data:; frame-src *; connect-src * 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.youtube.com https://connect.facebook.net https://dpm.demdex.net https://s.ytimg.com https://secure.adnxs.com https://go.ucg.datafront.co https://bs.serving-sys.com https://secure-ds.serving-sys.com https://bs.serving-sys.com https://platform.twitter.com https://cdn.syndication.twimg.com ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.youtube.com https://connect.facebook.net https://dpm.demdex.net https://s.ytimg.com https://secure.adnxs.com https://go.ucg.datafront.co https://bs.serving-sys.com https://secure-ds.serving-sys.com https://bs.serving-sys.com https://platform.twitter.com https://cdn.syndication.twimg.com ; frame-src 'self' https://www.google.com https://unicreditgroup.demdex.net https://maps.google.it https://player.vimeo.com https://1c-ir.mdgms.com https://www.youtube.com https://platform.twitter.com https://syndication.twitter.com ; connect-src 'self' https://datacloud-eu-central-1.tealiumiq.com https://datacloud.tealiumiq.com https://dpm.demdex.net https://dpm.demdex.net/id https://sucmetrics.unicreditgroup.eu https://unicreditgroup.eu.ssl.d2.sc.omtrdc.net https://www.youtube.com ; img-src 'self' data: https://sucmetrics.unicreditgroup.eu https://dpm.demdex.net https://img.youtube.com https://i1.ytimg.com https://i.ytimg.com https://image-store.slidesharecdn.com https://cm.everesttech.net https://pbs.twimg.com https://1c-ir.mdgms.com https://www.gstatic.com https://uconnect.tealiumiq.com https://secure.adnxs.com https://go.ucg.datafront.co http://www.unicreditgroup.eu https://platform.twitter.com https://syndication.twitter.com https://abs.twimg.com https://ton.twimg.com ; font-src 'self' data: https://fonts.gstatic.com ; style-src 'self' 'unsafe-inline' https://content.unicredit.it https://it-assets.ucgstatic.eu https://content.ucgstatic.eu https://platform.twitter.com https://ton.twimg.com ; style-src-elem 'self' 'unsafe-inline' https://content.unicredit.it https://it-assets.ucgstatic.eu https://content.ucgstatic.eu https://platform.twitter.com https://ton.twimg.com ; 2 frame-ancestors 'self' *.singtel.com *.singtelgroup.net *.singtelshop.com; 2 default-src 'self' 'unsafe-inline'; connect-src 'self' www.google-analytics.com *.google.com *.doubleclick.net *.tagcommander.com *.trustcommander.net *.commander1.com tv.bpifrance.fr *.twitter.com; font-src 'self' themes.googleusercontent.com *.gstatic.com *.thinglink.me; frame-src 'self' *.youtube.com *.vimeo.com *.trustcommander.net tv.bpifrance.fr *.twitter.com *.thinglink.me *.thinglink.com *.genial.ly *.dailymotion.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com *.googleapis.com www.google-analytics.com *.youtube.com *.google.com *.doubleclick.net *.vimeo.com *.tagcommander.com *.trustcommander.net *.facebook.com *.twitter.com *.thinglink.me *.dailymotion.com *.linkedin.com player.ausha.co embed.acast.com *.soundcloud.com developers.deezer.com open.spotify.com *.slideshare.net *.thinglink.com view.genial.ly *.onlinequizcreator.com dermandar.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://platform.twitter.com https://unpkg.com; script-src-elem 'self' 'unsafe-inline' www.googletagmanager.com *.googleapis.com www.google-analytics.com *.youtube.com *.google.com *.doubleclick.net *.vimeo.com *.tagcommander.com *.trustcommander.net *.twitter.com *.thinglink.me *.dailymotion.com *.facebook.com *.linkedin.com player.ausha.co embed.acast.com *.soundcloud.com developers.deezer.com open.spotify.com *.slideshare.net *.thinglink.com view.genial.ly *.onlinequizcreator.com dermandar.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://platform.twitter.com https://unpkg.com; style-src-elem 'self' 'unsafe-inline' *.thinglink.me fonts.googleapis.com https://cdnjs.cloudflare.com 2 default-src 'self' 'unsafe-inline'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; object-src https: 2 frame-ancestors ptisp.pt my.ptisp.pt oppwa.com; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob:; default-src 'self'; object-src 'self'; img-src data: https: 'self' *.better.com images.ctfassets.net heapanalytics.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' data: blob: fonts.googleapis.com assets.braintreegateway.com *.better.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com media.better.com data: chat-assets.frontapp.com; media-src media.better.com 'self' chat-assets.frontapp.com https://player.vimeo.com https:; connect-src wss://*.pusher.com wss://*.pusherapp.com *.pusherapp.com https: 'self'; frame-ancestors 'self' https://mobile2.accountchek.net https://borrower.accountchek.com https://web.pointserv.com https://flex.twilio.com https://builder.io; frame-src https://*.hellosign.com https://accounts.google.com https://assets.braintreegateway.com https://cdn.plaid.com https://useast1.pcipal.cloud/ bid.g.doubleclick.net dntcl.qualaroo.com insight.adsrvr.org match.adsrvr.org player.vimeo.com www.google.com 'self' https:; report-uri https://bettermg.report-uri.com/r/d/csp/enforce 2 default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline' *.openlayers.org openlayers.org *.openstreetmap.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.openlayers.org openlayers.org *.openstreetmap.org; object-src 'self' multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com media.deutsche-rentenversicherung.de;child-src *.google.com *.gstatic.com *.youtube.com ; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.openlayers.org openlayers.org *.openstreetmap.org; frame-ancestors 'self'; 2 default-src *.ethicspoint.com *.ethicspointvp.com *.navexone.com *.navexglobal.com ethicspointvp.com cdn.pendo.io 'self' 'unsafe-eval' 'unsafe-inline' *.navexglobal.com; connect-src *.ethicspoint.com *.ethicspointvp.com *.navexone.com *.navexglobal.com ethicspointvp.com *.truste.com *.newrelic.com *.nr-data.net *.pendo.io 'self' 'unsafe-eval' 'unsafe-inline' wss: *.navexglobal.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ethicspoint.com *.ethicspointvp.com *.navexone.com *.navexglobal.com ethicspointvp.com *.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5068799715311616.storage.googleapis.com *.truste.com *.newrelic.com *.nr-data.net ajax.googleapis.com ; img-src 'self' data: *.ethicspoint.com *.ethicspointvp.com *.navexone.com *.navexglobal.com ethicspointvp.com *.truste.com *.pendo.io pendo-static-5068799715311616.storage.googleapis.com *.navexglobal.com; frame-src 'self' 'unsafe-eval' *.navexglobal.com *.policytech.com *.ethicspoint.com *.ethicspointvp.com *.navexone.com *.navexglobal.com ethicspointvp.com player.vimeo.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.pendo.io pendo-static-5068799715311616.storage.googleapis.com fonts.googleapis.com *.ethicspoint.com *.typekit.net; font-src 'self' fonts.gstatic.com ajax.googleapis.com *.typekit.net; frame-ancestors 'self' *.pendo.io *.ethicspointvp.com; 2 frame-ancestors *.zennioptical.com 2 default-src 'self' edge.api.brightcove.com viz.tools.investis.com www.google-analytics.com cdn.jsdelivr.net *.brightcove.com *.doubleclick.net *.jsdelivr.net geoid.investisdigital.com cookiemanager.investisdigital.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edge.api.brightcove.com *.googleapis.com www.youtube.com otp.tools.investis.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net; img-src 'self' 'unsafe-inline' * data:; frame-src 'self' staticcontents.investis.com www.google.com irs.tools.investis.com otp.tools.investis.com ir.tools.investis.com www.youtube.com https://www.facebook.com; font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com 2 default-src 'self' 'unsafe-inline' *.zoll.de zoll.de *.itzbund.de itzbund.de *.zoll.de *.talent-im-einsatz.de zoll.de sg.geodatenzentrum.de *.openstreetmap.de; img-src 'self' *.zoll.de zoll.de *.itzbund.de sg.geodatenzentrum.de *.openstreetmap.de data:; script-src 'self' 'unsafe-inline' *.zoll.de zoll.de *.itzbund.de itzbund.de *.zoll.de zoll.de sg.geodatenzentrum.de *.openstreetmap.de 2 default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.uhhospitals.org *.typekit.net *.uhhospitals.org *.siteimproveanalytics.com siteimproveanalytics.com *.bing.com *.youtube.com *.invoca.net s.ytimg.com *.ytimg.com *.facebook.net *.invocacdn.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.google.com *.facebook.com *.siteimproveanalytics.io *.doubleclick.net *.gstatic.com *.w3.com *.podbean.com *.ads-twitter.com *.twitter.com *.t.co t.co *.alphonso.tv *.calculatestuff.com calculatestuff.com doubleclick.net *.selfcare.info selfcare.info *.digitalmedia.hhs.gov api.digitalmedia.hhs.gov *.appcatalyst.com appcatalyst.com *.staywellsolutionsonline.com staywellsolutionsonline.com *.hhs.gov *.livestream.com livestream.com *.issuu.com issuu.com *.isu.pub isu.pub *.w3.org w3.org *.quantserve.com quantserve.com *.boxcloud.com boxcloud.com *.box.com box.com *.bananatag.com bananatag.com *.alpixtrack.com alpixtrack.com *.adxcel-ec2.com *.data.adxcel-ec2.com data.adxcel-ec2.com adxcel-ec2.com *.cloudflare.com cloudflare.com *.cancer.gov cancer.gov 2 frame-ancestors * 'self'; 2 frame-ancestors 'self' *.bnc.ca *.nbc.ca; 2 frame-ancestors *.breitling.com 2 report-uri / 2 script-src 'self' *.flickr.com 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com 2 frame-src 'self' https://www.google.com *.youtube.com https://*.hubspot.com https://www.facebook.com https://s-static.ak.facebook.com https://js.hs-scripts.com https://js.usemessages.com https://js.hscollectedforms.net https://www.snigel.com https://maps.googleapis.com; connect-src 'self' *.snigelweb.com https://*.hubspot.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com; font-src 'self' *.snigelweb.com https://fonts.gstatic.com https://themes.googleusercontent.com https://snigel.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdn.jsdelivr.net https://maps.googleapis.com https://www.gstatic.com https://www.google.com https://cdnjs.cloudflare.com https://js.hs-banner.com *.snigelweb.com https://js.hscollectedforms.net https://js.hs-analytics.net https://www.google-analytics.com https://js.usemessages.com https://ssl.google-analytics.com https://js.hs-scripts.com https://www.googletagmanager.com https://connect.facebook.net *.youtube.com *.aniview.com *.avplayer.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com; img-src 'self' * *.google.com *.snigelweb.com https://maps.googleapis.com https://maps.gstatic.com https://i.ytimg.com https://forms.hsforms.com https://secure.gravatar.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://snigel.com https://www.googletagmanager.com https://*.hubspot.com https://www.google-analytics.com data:; media-src 'self' *.youtube.com *.snigelweb.com *.aniview.com; object-src 'self'; form-action 'self' *.snigelweb.com https://*.hubspot.com https://forms.hsforms.com; default-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://maps.googleapis.com https://www.gstatic.com https://www.google.com https://cdnjs.cloudflare.com https://js.hs-banner.com *.snigelweb.com https://js.hscollectedforms.net https://js.hs-analytics.net https://www.google-analytics.com https://js.usemessages.com https://ssl.google-analytics.com https://js.hs-scripts.com https://www.googletagmanager.com https://connect.facebook.net https://maps.gstatic.com https://i.ytimg.com https://forms.hsforms.com https://secure.gravatar.com https://s-static.ak.facebook.com https://snigel.com https://*.hubspot.com https://fonts.gstatic.com https://themes.googleusercontent.com https://fonts.googleapis.com data: 2 frame-src 'self' player.vimeo.com www.googletagmanager.com www.youtube.com *.marketo.com *.widencdn.net *.spe.org cdn.knightlab.com widget.taggbox.com www.google.com www.slideshare.net share.transistor.fm spe.widen.net www.podbean.com ; report-uri https://www.spe.org/csp/log/ 2 default-src https: 'unsafe-inline' 'unsafe-eval'; img-src http: https: data:; font-src https: data:; media-src https: data: blob:; object-src https; frame-ancestors 'self' https://secure.thetoptens.com/ https://avatars.thetoptens.com/; 2 img-src * data:; 2 script-src 'self' www.dbschenker.com 'unsafe-inline' 'unsafe-eval' *.adobedtm.com img.en25.com https://cdn.eschenker.dbschenker.com www.google.com www.gstatic.com ecm-mediathek-deutschebahn.cdn.mediamid.com ssl.p.jwpcdn.com platform.twitter.com cdn.syndication.twimg.com https://website-pr-s3-cdn.s3.eu-central-1.amazonaws.com https://chatbotcdn.dbschenker.com; report-uri https://sentry.gdis-p.aws.dbschenker.com/api/381/security/?sentry_key=7973761538c74fd6bca69d51b5bb31f2 2 default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline' multimedia.gsb.bund.de spaceview.netzlabor.de; connect-src 'self' tracking.netmind-cloud.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' multimedia.gsb.bund.de piwik.itzbund.de webtv.bundestag.de *.googleapis.com *.google.com *.gstatic.com *.instagram.com tracking.netmind-cloud.com twemoji.maxcdn.com maps.wikimedia.org *.ytimg.com *.youtube.com *.youtube-nocookie.com *.googlevideo.com *.openstreetmap.org spaceview.netzlabor.de *.blitzvideoserver.de *.video-stream-hosting.de *.3qsdn.com *.cloudfront.net *.multimedia.gsb.bund.de; object-src 'self' multimedia.gsb.bund.de; media-src 'self' piwik.itzbund.de multimedia.gsb.bund.de *.fbcdn.net *.youtube.com *.youtube-nocookie.com *.googlevideo.com; child-src *.google.com *.gstatic.com webtv.bundestag.de *.cdninstagram.com *.fbcdn.net *.youtube.com *.youtube-nocookie.com *.instagram.com tracking.netmind-cloud.com twemoji.maxcdn.com maps.wikimedia.org *.youtube.com *.youtube-nocookie.com *.googlevideo.com *.openstreetmap.org piwik.itzbund.de *.blitzvideoserver.de *.video-stream-hosting.de *.3qsdn.com *.cloudfront.net; img-src 'self' data: *.google.com *.gstatic.com multimedia.gsb.bund.de piwik.itzbund.de webtv.bundestag.de *.youtube.com *.twimg.com *.fbcdn.net *.youtube-nocookie.com *.cdninstagram.com *.openstreetmap.org twemoji.maxcdn.com maps.wikimedia.org *.youtube-nocookie.com *.googlevideo.com *.cloudfront.net *.multimedia.gsb.bund.de; frame-src 'self' multimedia.gsb.bund.de *.youtube.com *.openstreetmap.org; frame-ancestors 'self'; 2 Content-Security-Policy: default-src 'self' data: 'unsafe-inline' 'unsafe-eval' www.pioneerelectronics.com embedded.pricespider.com embeddedcloud.pricespider.com youtube.com www.google.com ajax.googleapis.com; 2 default-src 'self' * data: blob: https: *.safetydetectives.com safetydetectives.com *.safetydetective.com safetydetective.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.peacebanana.com *.cloudflareinsights.com *.cheqzone.com *.cloudfront.net *.datadoghq-browser-agent.com *.ampproject.org *.gstatic.com *.google.com *.alooma.com *.doubleclick.net *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.hhtpp.com *.facebook.net *.dropbox.com *.bing.com *.yandex.ru *.quora.com *.yimg.com sp.analytics.yahoo.com *.hotjar.com *.ipify.org blob: data:; style-src 'self' data: blob: 'unsafe-inline' *;connect-src 'self' data: blob: https: safetydetectives.com *.safetydetectives.com safetydetective.com *.safetydetective.com *.ampproject.org *.google-analytics.com *.doubleclick.net *.google.com *.hhtpp.com *.yandex.ru *.gravatar.com wss://*.hotjar.com *.wp.com;font-src 'self' data: blob: *.ampproject.org *.googletagmanager.com *.googleapis.com *.gstatic.com; 2 default-src 'self'; script-src 'self' cdnjs.cloudflare.com static.cloudflareinsights.com; img-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com; form-action 'self'; report-uri https://scotthelme.report-uri.com/r/d/csp/enforce; report-to default 2 default-src https:; style-src 'self' 'unsafe-inline'; script-src https: 'unsafe-inline'; object-src 'none' 2 default-src https://assets.easypost.com cdn.plaid.com; script-src assets.easypost.com track.easypost.com tagmanager.google.com www.googletagmanager.com www.googleadservices.com www.google-analytics.com ssl.google-analytics.com www.gstatic.com www.google.com js.stripe.com cdn.plaid.com maps.googleapis.com eu-cdn.walkme.com cdn.walkme.com eu-playerserver.walkme.com playerserver.walkme.com d3sbxpiag177w8.cloudfront.net d2qhvajt3imc89.cloudfront.net 'sha256-t1v231h4Fgv1bBX/cpoBZuwY6r6R6nGx5tOXvVJdBh8=' 'sha256-GNTGX7BhgMv3AL+bv0bfF+5DVGhSrLhYL7AM7TSnAcY=' 'sha256-5yJc48yW6FRCVE9ulLzLOd1lLp7X2Xr2Dd4Y+lZ3XjA=' 'sha256-eV1MSFSoXiIPiHPWbzaJgBby+bxVonlOAE5Cwbaa4lc=' 'sha256-sVKX08+SqOmnWhiySYk3xC7RDUgKyAkmbXV2GWts4fo=' 'sha256-hW1V3UvI+swwT3wQpebXLpXi/7Q9VUws5NlJTNxM/Tg=' 'sha256-zrkY8YxXr6/SilHSYKlWjWW9kOSQsVsrlGluj7eTzoc=' 'sha256-C1JoeFOby67/dRbyCdcT9jfKk3K2hJnqpQZ3LrmmGzs='; style-src track.easypost.com 'unsafe-inline' tagmanager.google.com fonts.googleapis.com assets.easypost.com www.gstatic.com eu-cdn.walkme.com cdn.walkme.com; img-src track.easypost.com assets.easypost.com assets.track.easypost.com eu-ec.walkme.com ec.walkme.com eu-cdn.walkme.com cdn.walkme.com d27zb0m07iyic6.cloudfront.net dzjsfasj4n94t.cloudfront.net d3sbxpiag177w8.cloudfront.net d2qhvajt3imc89.cloudfront.net googleads.g.doubleclick.net www.google.com www.google-analytics.com www.gstatic.com ssl.gstatic.com q.stripe.com brand.easypostpartnercontent.com www.googletagmanager.com ssl.google-analytics.com data: support.easypost.com easypost-fulfillment.zendesk.com; font-src assets.easypost.com track.easypost.com fonts.gstatic.com data:; connect-src https://www.google.com track.easypost.com www.easypost.com assets.easypost.com www-canary.easypost.com usps.easypost.com js.stripe.com www.google-analytics.com boards-api.greenhouse.io cdn.walkme.com eu-ec.walkme.com eu-rapi.walkme.com eu-papi.walkme.com ec.walkme.com rapi.walkme.com papi.walkme.com sentry.io production.plaid.com; worker-src assets.easypost.com www.gstatic.com www.google.com; frame-src assets.track.easypost hire.withgoogle.com cdn.plaid.com eu-cdn.walkme.com cdn.walkme.com js.stripe.com track.easypost.com tagmanager.google.com www.googletagmanager.com www.google.com www.youtube.com; frame-ancestors 'self'; report-uri https://sentry.io/api/1431584/security/?sentry_key=c94f0945b0d34659b3df102773f484d9 2 default-src 'self' https://static.zdassets.com https://ekr.zdassets.com https://nzxtcorp.zendesk.com https://*.zopim.com wss://nzxtcorp.zendesk.com wss://*.zopim.com https://stream.mux.com; style-src 'self' 'unsafe-inline' https://heapanalytics.com https://fonts.googleapis.com; child-src 'self'; connect-src 'self' https://atlas-api-mauve.nzxt.com https://store-atlas-api.nzxt.com https://sentry.io/api/ https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com https://apikeys.civiccomputing.com https://heapanalytics.com https://www.affirm.com https://ekr.zdassets.com https://tracker.affirm.com/collect https://nzxtcorp.zendesk.com https://668cda5235394967a851bb73e2a9ec75.ent-search.us-central1.gcp.cloud.es.io https://vitals.vercel-insights.com https://api-cf.affirm.com wss://widget-mediator.zopim.com https://o195198.ingest.sentry.io https://analytics.google.com https://stats.g.doubleclick.net https://imgs.signifyd.com https://www.cloudflare.com https://www.facebook.com; font-src 'self' data: https://heapanalytics.com https://fonts.gstatic.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://www.youtube-nocookie.com https://w.soundcloud.com https://www.affirm.com https://stream.mux.com https://*.fls.doubleclick.net https://www.facebook.com https://imgs.signifyd.com https://h.online-metrix.net; img-src 'self' data: https://www.google-analytics.com https://www.datocms-assets.com https://sta3-nzxtcorporation.netdna-ssl.com https://cdn.letsbld.com https://nzxt-web-assets-dev.s3-us-west-2.amazonaws.com https://cam-app.s3-us-west-2.amazonaws.com https://heapanalytics.com https://v2assets.zopim.io https://static.zdassets.com https://nzxtcorp.zendesk.com https://stream.mux.com https://www.facebook.com https://*.gstatic.com https://stats.g.doubleclick.net https://connect.facebook.net https://www.googletagmanager.com https://www.google.com https://imgs.signifyd.com https://*.d.aa.online-metrix.net; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.heapanalytics.com https://heapanalytics.com https://cdn1.affirm.com https://static.zdassets.com https://cc.cdn.civiccomputing.com https://www.google-analytics.com https://widget-mediator.zopim.com https://connect.facebook.net https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://www.googletagmanager.com; report-uri https://o198934.ingest.sentry.io/api/5246785/security/?sentry_key=b4bb5d8e0c7847eb9f2761ed3b660d61 2 default-src * data: blob: 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' unroll.me *.unroll.me *.google-analytics.com *.google.com *.yahoo.com *.youtube.com *.gstatic.com *.amplitude.com *.googletagmanager.com *.googleadservices.com *.google.co.in *.branch.io *.rakuten.com *.facebook.net bat.bing.com *.doubleclick.net ut.ra.linksynergy.com https://app.link *.yimg.com *.msauth.net *.azureedge.net; style-src data: 'unsafe-inline' *; connect-src unroll.me *.unroll.me *.amplitude.com *.facebook.com *.facebook.net *.google-analytics.com *.googleadservices.com *.google.co.in *.googlevideo.com *.youtube.com bat.bing.com *.google.com *.gstatic.com *.doubleclick.net *.branch.io *.rakuten.com *.yahoo.com *.live.com *.aol.com; 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com www.google-analytics.com www.googletagmanager.com *.googleapis.com *.google.com *.bootstrapcdn.com *.facebook.net *.tctm.co *.clickdimensions.com *.googleadservices.com *.doubleclick.net *.trustarc.com globalstar.clarip.com *.addthis.com *.addthisedge.com *.bizographics.com *.linkedin.com *.gstatic.com unpkg.com rawgit.com *.avmws.com *.incontact.com jira.globalstar.com *.licdn.com *.zoominfo.com *.xg4ken.com *.cardinalcommerce.com *.cookielaw.org *.onetrust.com 2 worker-src blob: 'self' *.devos.io *.arsysdesarrollo.lan *.pre.naw.arsysdesarrollo.lan *.dev.acs.arsysdesarrollo.lan *.dev.naw.arsysdesarrollo.lan *.arsys.pt *.arsys.es *.arsys.net *.arsys.fr *.shop-mch.es *.1and1.org *.googletagmanager.com *.rankingcoach.com *.facebook.com *.twitter.com *.soportetotal.es *.google.com *.youtube.com *.adition.com *.doubleclick.net *.office.net *.marketingpanel.es *.microsoft.com *.moz.com *.consensu.org *.quantserve.com; 2 frame-ancestors 'self' *.dastelefonbuch.de *.schatten.dastelefonbuch.de *.telefonbuch.de *.potter.t-online.de *.t-online.de *.berlin.de *.hamburg.de *.meinestadt.de 2 frame-ancestors 'self' *.lowermybills.com app.optimizely.com analytics.google.com 2 frame-ancestors *.plaync.com *.ncsoft.com *.plaync.com.tw *.ncsoft.jp 2 default-src 'self' data: ws: blob: *.nr-data.net fonts.gstatic.com fonts.googleapis.com *.facebook.com *.office365.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nr-data.net *.newrelic.com *.embedly.com *.embed.ly *.googletagmanager.com *.doubleclick.net *.googleadservices.com *.facebook.net snap.licdn.com *.linkedin.com *.bing.com *.ads-twitter.com *.twitter.com *.bizographics.com *.baidu.com *.google.com *.gstatic.com *.instabot.io *.yandex.ru *.convertwork.cn *.hotjar.com *.cavy9soho.com *.cloudflare.com *.force.com *.my.salesforce.com *.salesforceliveagent.com *.kuka.com *.cloudflareinsights.com; img-src 'self' data: *; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.force.com *.kuka.com; child-src 'self' blob: *.vimeo.com; frame-src 'self' *.investis.com *.quartalflife.com *.youtube.com *.youtu.be *.youku.com *.embedly.com *.embed.ly player.youku.com *.eqs.com https: *.doubleclick.net snap.licdn.com *.presono.com *.linkedin.com *.juicer.io *.audi-mediacenter.com *.office365.com; connect-src 'self' data: ws: blob: *.googleadservices.com adservice.google.com *.instabot.io *.yandex.ru *.hotjar.com *.bing.com *.office365.com *.kuka.com; 2 frame-ancestors *.dowjones.net *.fnlondon.com *.efinancialnews.com *.onservo.com 2 script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: dc-mkt-prod.cloud.bosch.tech dc-ncj-portal.qa.dxf.bosch.tech tags.tiqcdn.com www.youtube.com player.vimeo.com s.ytimg.com statse.webtrendslive.com www.google-analytics.com visitor-service-eu-central-1.tealiumiq.com *.tealiumiq.com apps.boschrexroth.com *.monetate.net *.livechatinc.com *.qualtrics.com *.hs-scripts.com *.hsadspixel.net *.usemessages.com *.hs-banner.com *.hs-analytics.net *.hsleadflows.net js.hsforms.net forms.hsforms.com snap.licdn.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net *.optimizely.com www.boschrexroth.com.cn prospecttrax.com connect.facebook.net 2 frame-ancestors 'self' admin.truelocal.com.au 2 frame-ancestors https://*.prolific.co http://*.prolific.co https://prolific.co 2 sandbox allow-presentation allow-forms allow-same-origin allow-scripts allow-popups allow-modals 2 default-src 'self' 'unsafe-inline' 'unsafe-eval' http: https: data: blob: vjs.zencdn.net bofa.demdex.net tags.tiqcdn.com *.akamaihd.net *.baml.com bankofamerica.tt.omtrdc.net *.ml.com secure.insightexpressai.com *.businesswire.com testdata.coremetrics.com http://*.bankofamerica.com https://*.bankofamerica.com *.brightcove.com *.brightcove.net *.sharethis.com *.twitter.com twitter.com *.facebook.com www.linkedin.com delicious.com digg.com api.pinterest.com www.stumbleupon.com www.myspace.com buzz.yahoo.com www.bankofamerica.com www.boa.com www.ml.com www.merrill.com www.totalmerrill.com www.merrilllynch.com www.ust.com www.us-trust.com www.ustrust.com www.baml.com www.ba-ml.com www.bac.com acemegreen.thismoment.com analytics1.onedotone.net *.googleapis.com ecx.images-amazon.com brightcove.vo.llnwd.net *.doubleclick.net cdnt.meteorsolutions.com expressyourthanks.thismoment.com thismoment-a.akamaihd.net api.tiles.mapbox.com *.google.com *.gstatic.com www.youtube.com www.google-analytics.com bofa.44doors.com *.mapbox.com bofa.demdex.net *.maxmind.com *.betrad.com sjs.bizographics.com www.googletagmanager.com *.userzoom.com *.evidon.com *.zencdn.net *.licdn.com *.company-target.com *.demandbase.com brightcove.hs.llnwd.net *.boldchat.com *.2mdn.net *.dartmotif.net *.doubleclick.com *.merrilledge.com *.digitas.com *.serving-sys.com *.mediamind.com *.corporate-ir.net *.imwx.com; font-src 'self' http: https: *.zencdn.net *.ml.com data:; 2 default-src 'self' *.vivint.com; script-src data: 'unsafe-inline' 'unsafe-eval' *; object-src *; style-src blob: 'unsafe-inline' *; img-src data: *; media-src *; frame-src *; frame-ancestors *.vivint.com viv.drupalvm; child-src *; font-src data: *; connect-src *; report-uri /report-csp-violation 2 default-src 'self' *.passage.ai wss://tars-prod.passage.ai *.transunion.com *.cibil.com *.kore.ai wss://rtm.kore.ai *.addthis.co *.amazon-adsystem.com *.youtube.com *.brightcove.com *.brightcove.net*.doubleclick.net *.company-target.com *.cibil.com *.dmtry.com *.quantserve.com *.bluekai.com *.facebook.com *.demandbase.com doubleclick.net app.trustev.com ads.yahoo.com adserve.atedra.com analytics.twitter.com bat.bing.com crwdcntrl.net c.rstg.io cdn.nextinsure.com code.jquery.com cloudfront.net fonts.googleapis.com ib.adnxs.com idsync.rlcdn.com investis.com adsrvr.org sharethrough.com adroll.com yimg.com amazonaws.com secure.fastclick.net secure.leadback.advertising.com google-analytics.com static.ads-twitter.com us-u.openx.net vjs.zencdn.net googleadservices.com gstatic.com bidswitch.net cspix.media6degrees.com googletagmanager.com; script-src 'self' https://v1.addthisedge.com/live/boost/ra-55d22b77833cbaf1/_ate.track.config_resp https://z.moatads.com/addthismoatframe568911941483/moatframe.js *.passage.ai *.transunion.com *.cibil.com *.kore.ai *.addthis.com *.googletagmanager.com *.optimizely.com *.pingdom.com *.cloudflare.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.quantserve.com *.g.3gl.net *.eloqua.com *.crwdcntrl.net *.googleapis.com *.investis.com *.amazonaws.com *.cloudfront.net *.nextinsure.com *.lendingtree.com *.mediaplex.com *.demandbase.com *.jquery.com *.g.3gl.net *.gstatic.com *.bing.com *.3gl.net *.yourscoreonline.com *.gofreecredit.com *.creditcheckingtoday.com *.naturaltracking.com *.credit.com *.facebook.com *.yimg.com *.ensighten.com *.d39se0h2uvfakd.cloudfront.net *.linkedin.com *.adsprotection.com *.brightcove.com *.hotjar.com *.adroll.com *.brightcove.net *.en25.com *.adsrvr.org *.transunioncibil.com *.mathtag.com t2.rstg.io px.ads.linkedin.com vjs.zencdn.net analytics.twitter.com iad-login.dotomi.com snap.licdn.com sp.analytics.yahoo.com unpkg.com hello.myfonts.net img03.en25.com m.addthisedge.com vjs.zencdn.com optimizely.s3.amazonaws.com g.3gl.net cdn.ampproject.org b.company-target.com cspix.media6degrees.com img03.en25.com static.ads-twitter.com cdn.mxpnl.com sjs.bizographics.com rum-static.pingdom.net tt.mbww.com seal.entrust.net pixel.mathtag.com pagead2.googlesyndication.com tagmanager.google.com amplify.outbrain.com o1.qnsr.com connect.facebook.net *.liveperson.net *.lpsnmedia.net cas.cluep.com blob: 'unsafe-eval' 'unsafe-inline'; child-src *.transunion.com https://www.youtube-nocookie.com/ *.crwdcntrl.net https://www.youtube.com/watch?v=FS08WcDyBkA&feature=youtu.be *.cdn.optimizely.com *.addthis.com *.doubleclick.net *.lendingtree.com *.youtube.com *.hotjar.com vars.hotjar.com img.mediaplex.com app.optimizely.com *.brightcove.net s.amazon-adsystem.com *.liveperson.net *.lpsnmedia.net app.trustev.com pixel.mathtag.com; connect-src 'self' https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j81&tid=UA-20374896-1&cid=287782927.1583428046&jid=448576890&gjid=1508426662&_gid=1862402324.1583743240&_u=SCCAiMAjBAAAAE~&z=690464725 https://in.hotjar.com/api/v2/client/sites/1118657/visit-data?sv=5 *.passage.ai wss://tars-prod.passage.ai *.transunion.com https://cibil.com/jwtws/token/generate *.cibil.com *.kore.ai wss://rtm.kore.ai *.optimizely.com *.youtube.com *.brightcovecdn.com *.pingdom.net *.brightcove.com manifest.prod.boltdns.net airbrake.io api.company-target.com r.